- NANOG - lists.nanog.org

P2P open source blocking project
by William Warren 09 Feb '04

09 Feb '04

For those you want to kill the various p2p programs..there is a promising project at the following address: http://www.lowth.com/p2pwall/ftwall/ William -- May God Bless you and everything you touch. My "foundation" verse: Isaiah 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD.

2 1

Re: Stopping open proxies and open relays
by Michael.Dillon＠radianz.com 09 Feb '04

09 Feb '04

>Force all SMTP outbound connections from users thru a SMTP proxy. On that >proxy, force users to do SMTP Authentication; I've heard only once of a spam >code that will use the user's configuration info or dispatch e-mail thru >them. Even if they do, you can rate-limit messages/hour, unique mail >to/hour, disable mail service after a threshold, whatever sounds a good >policy to you. This is the most sensible message I've read about SPAM in a long time. And it is even highly relevant to network operators who service end users. Now if only we could come up with something similar for ISP server-to-server mail transfers then we might actually reduce SPAM to a dull roar receding into the distance. --Michael Dillon

1 0

Re: Are SW upgrades needed in MPLS core networks?
by Michael.Dillon＠radianz.com 09 Feb '04

09 Feb '04

>Just to be sure, my point here is not where the effective IPv6 performance >suits one needs or not, but wether a router that can forward <amount> Mpps >of IPv4/MPLS packets can also forward the same amount of IPv6 packets per >second. Wouldn't a network with an MPLS core use 6PE to implement IPv6 rather than routing v6 natively in the core? In that case wouldn't the forwarding performance of native v6 be irrelevant? --Michael Dillon

1 0

Re: question on ptr rr
by Paul Vixie 09 Feb '04

09 Feb '04

>> I've run all my mailers with aggressive PTR checks for about a year, and >> while some of my guests aren't getting all the e-mail that's sent to them, >> it's had no impact on me other than that periodically I have to tell some >> remote postmaster that their PTR's are missing or that they don't match >> the HELO hostname. Invariably they fix it. > ... What do you suggest otherwise-responsible operators like me do, > when after begging SBC for two years, my reverse DNS still isn't > delegated correctly? buy a 1U, put it in a colo center (should cost you about $50/month) and proxy all your outbound mail from there. stop thinking of broadband as anything other than a lastmile protocol between your house and your own piece of the internet core. or send SBC a copy of RFC 2317 every hour via a crontab. might not be very effective but it would sure get you talked about. since you're a customer they can't accuse you of spamming them...

8 8

Re: question on ptr rr
by Paul Vixie 09 Feb '04

09 Feb '04

> >I think the tipping point went by a while ago, and that anyone who wants > >their e-mail to be accepted will make sure their mail relay has a PTR and > >that that this PTR holds the same name used in the SMTP HELO command. > > Of course, not all that long ago AT&T Worldnet got crucified -- on this > list, among other places -- for doing just that. then you should've stood your ground.

1 0

Re: Dumb users spread viruses (here's one!)
by Dr. Jeffrey Race 09 Feb '04

09 Feb '04

On Sun, 8 Feb 2004 21:03:29 +0000 (GMT), E.B. Dreger wrote: >Most of our users are reasonable, however. With a little >explanation about the harm an insecure computer can cause, they >understand and accept the fact that they're not islands. > >Of course, many still get infected with spyware and viruses. At >least they're willing to have their computers repaired... better >than nothing, but still not as good as being proactive. :-/ Datapoint: I just cleaned my 12-year old daughter's personal machine running Windows, connected to our home network and to the world via ADSL. Took half a day. Found 2 viruses, 4 trojans, and 122 registry entries for assorted malware, spyware, adware, etc. Jeffrey Race

1 0

question on ptr rr
by garrett.allen＠comcast.net 08 Feb '04

08 Feb '04

this may be deemed off topic - if so apologies in advance. however i respect many of the opinions i see here so thought i would take a chance and ask. we are a stub network, injesting about 30k emails daily. about a year ago we implemented a spam filtering product. it works well. recently we turned on the knob to enable it to do reverse lookups. only the mild version, a reverse is made on the ptr rr for the ip address sending the email. if it fails the spam filter issues a 421 and closes the connection. unfortunately, we have 6 sites thus far that are legitimately trying to communicate with us but don't have ptr's associated with the ip address sending emails. since it obviously isn't a requirement to have one is it generally accepted to do so? any sense for how many end networks do and don't? thanks in advance.

6 6

NANOG30 - Bar connectivity?
by Timothy Brown 08 Feb '04

08 Feb '04

Hi, this may be premature; The wireless in the bar is a little spotty - can someone maybe add an AP or two? Tim

1 0

Fwd: SECURITY: Abuse & upnormal traffic in 207.218.250.181 [ev1.net]
by John Obi 08 Feb '04

08 Feb '04

Hello folks, I have found that ev1 just ignores the abuse emails, and doesn't want to handle the DDoS complaints. Can someone from their NSPs to contact me off the list since this abuse isn't being handled by them correctly? They are being the great hoster of the DDoS bots in the little secret IRC servers runs in ev1 network. EV1 isn't making the Internet secured place at all. Now the ddos bots connect to tw1st142.q8hell.org ports 7721 and 5912 Thanks, -J Note: forwarded message attached. __________________________________ Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online. http://taxes.yahoo.com/filing.html

1 0

The Cidr Report
by cidr-report＠potaroo.net 08 Feb '04

08 Feb '04

This report has been generated at Sun Feb 8 20:47:27 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 01-02-04 130080 91025 02-02-04 130010 91079 03-02-04 130093 91091 04-02-04 130207 91165 05-02-04 130288 91107 06-02-04 130549 91173 07-02-04 130555 91204 08-02-04 130702 91228 AS Summary 16514 Number of ASes in routing system 6644 Number of ASes announcing only one prefix 1378 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 AT&T WorldNet Services 73517312 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 08Feb04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 130756 91238 39518 30.2% All ASes AS4323 681 204 477 70.0% TW-COMM Time Warner Communications, Inc. AS6197 733 299 434 59.2% BATI-ATL BellSouth Network Solutions, Inc AS7018 1378 964 414 30.0% ATT-INTERNET4 AT&T WorldNet Services AS701 1347 955 392 29.1% ALTERNET-AS UUNET Technologies, Inc. AS7843 506 124 382 75.5% ADELPHIA-AS Adelphia Corp. AS27364 382 33 349 91.4% ACS-INTERNET Armstrong Cable Services AS6198 545 214 331 60.7% BATI-MIA BellSouth Network Solutions, Inc AS4134 653 329 324 49.6% CHINANET-BACKBONE No.31,Jin-rong Street AS22909 338 19 319 94.4% DNEO-OSP1 Comcast Cable Communications, Inc. AS22773 342 34 308 90.1% CCINET-2 Cox Communications Inc. Atlanta AS1239 950 665 285 30.0% SPRINTLINK Sprint AS4355 385 101 284 73.8% AS4355 AS1221 898 640 258 28.7% ASN-TELSTRA Telstra Pty Ltd AS17676 294 41 253 86.1% GIGAINFRA Softbank BB Corp. AS6347 330 83 247 74.8% DIAMOND SAVVIS Communications Corporation AS9583 342 104 238 69.6% SATYAMNET-AS Satyam Infoway Ltd., AS6140 358 126 232 64.8% IMPSAT-USA ImpSat AS25844 243 16 227 93.4% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS6478 259 40 219 84.6% ATT-INTERNET3 AT&T WorldNet Services AS209 726 513 213 29.3% ASN-QWEST Qwest AS14654 214 3 211 98.6% WAYPORT Wayport AS13083 216 8 208 96.3% AS13083 Mannesmann Datenverarbeitung Autonomes System AS11305 242 41 201 83.1% INTERLAND-NET1 Interland Incorporated AS2386 417 229 188 45.1% INS-AS AT&T Data Communications Services AS5668 345 159 186 53.9% AS-5668 CenturyTel Internet Holdings, Inc. AS20115 608 422 186 30.6% CHARTER-NET-HKY-NC Charter Communications AS4519 202 19 183 90.6% MAAS Maas Communications AS6327 206 28 178 86.4% SHAW Shaw Communications Inc. AS9929 200 30 170 85.0% CNCNET-CN China Netcom Corp. AS15270 210 40 170 81.0% AS-PAETEC-NET PaeTec.net -a division of PaeTecCommunications, Inc. Total 14550 6483 8067 55.4% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 ANDARA-HSI Andara High Speed Internet c/o Halifax Cable Ltd. 64.62.126.0/23 AS25700 SWIFTDESK SWIFTDESK VENTURE 66.114.0.0/19 AS16526 BIRCH-TELECOM Birch Telecom, Inc. 66.114.28.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.29.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.30.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.31.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 69.8.128.0/17 AS7260 NORLIGHT Norlight Telecommunications 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 AS702 MCI EMEA 192.64.84.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.71.0/24 AS719 LANLINK Elisa Oyj 192.136.79.0/24 AS719 LANLINK Elisa Oyj 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.136.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.152.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.154.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.114.156.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.160.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.0.0/20 AS4658 NETFRONT-AS NETFRONT I.T. LIMITED (HONG KONG) 202.70.16.0/22 AS17888 SINGTEL-HK SingTel Hong Kong Limited 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.86.128.0/24 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.142.0/24 AS30362 HPT-ASN Hawaii-Pacific Teleport 202.86.171.0/24 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.172.0/23 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.190.0/24 AS4750 loxley-th Loxley Information Co., Ltd. 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.133.3.0/24 AS9335 CIP-JAPAN-AS-AP ATT IPlus 202.143.56.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.240.0/20 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.240.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.248.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 203.32.4.0/23 AS7617 AS7617 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.86.2.0/23 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.111.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.118.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 203.132.123.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.124.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.135.99.0/24 AS2687 ATGS-MMD-AS AT&T Global Network Services 204.69.144.0/22 AS5668 AS-5668 CenturyTel Internet Holdings, Inc. 204.154.125.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBIT Exobit Networks Inc. 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.213.0.0/19 AS6453 GIEUROPE Teleglobe America Inc. 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.36.46.0/24 AS7176 GENUITY-AS7176 Genuity 216.36.47.0/24 AS7176 GENUITY-AS7176 Genuity 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0