- NANOG - lists.nanog.org

[SOT] IP management tools
by Rich Sena 07 Jan '04

07 Jan '04

I know this has been hashed here before... But I think there is a different twist to this... I'm looking for IP management tools that also tie into DNS and RADIUS or LDAP. We have some home-grown products that have been written for our specific requirements but it's become a chore to maintain. What we are looking for is this... IP allocation and accounting. DNS tie-in for Dynamic DNS functionality Ability to assign permanent leases from a common interface (DHCP server back-end tie-in) We perform a MAC-based authorization for DHCP and would like to keep that functionality We would also like to continue this as we implement 802.1x in the future. Does anyone have some insight into what tools to look at... Please respond off-list - if there is enough interest I will summarize to the group... -- Rich Sena - ras(a)thick.net ThickNET Consulting "On the way to understanding; you understand, and forget."

1 0

RE: Out of office/vacation messages
by Pete Templin 07 Jan '04

07 Jan '04

Alright, I'll bite. What are the "NANOG-approved" MTA/MUAs for this list that sort by conversation thread, run on Windows, send in wrapped plain text, have NANOG-approved OOO messages, and otherwise don't cause a flamestorm on the list? -----Original Message----- From: Valdis.Kletnieks(a)vt.edu [mailto:Valdis.Kletnieks@vt.edu] Sent: Wednesday, December 24, 2003 11:02 PM To: Mark Prior Cc: nanog(a)merit.edu Subject: Re: Out of office/vacation messages On Thu, 25 Dec 2003 15:03:39 +1030, Mark Prior <mrp(a)mrp.net> said: > Why do so many supposedly clueful people have their vacation message > system respond to mailing list email? Because it's *impossible* to get one of the most popular MUAs to understand that mail with an SMTP MAIL FROM 'owner-*@*' shouldn't be replied to. So it's just a special case of "why do clueful people use software from that vendor"?. And since it's the holidays, let's just leave it at that.

11 12

RE: Anyone alive at ep.net
by Malayter, Christopher 07 Jan '04

07 Jan '04

ep.net is the neutral IP allocation agency for a significant number of exchanges world wide. We have our own IP space, however, we require an IP on the IX so we can peer with other neighbors on the exchange, like Bill said! -Chris -----Original Message----- From: Bill Woodcock [mailto:woody@pch.net] Sent: Wednesday, January 07, 2004 2:49 AM To: Jun-ichiro itojun Hagino Cc: Christopher.Malayter(a)tdstelecom.com; nanog(a)merit.edu Subject: Re: Anyone alive at ep.net On Wed, 7 Jan 2004, Jun-ichiro itojun Hagino wrote: > > I've been awaiting allocation of an IP from an IX that is allocated by > > ep.net. > why not get an allocation for IX from ARIN/RIPE? Because then he wouldn't be able to use it to communicate with anyone else at the exchange, since they'd all be in the ep.net subnet, and he'd be in a different subnet. -Bill

1 0

survey on BGP damping
by Beichuan Zhang 07 Jan '04

07 Jan '04

*** Apology if you've read it before. I re-send this survey hoping to get *** more replies. Thanks. Hi, We are conducting a survey of BGP damping deployment and would greatly appreciate if you could take a few minutes to answer the following questions. There are a number of interesting results and various recommendations for damping settings. However, we have found only limited information on who does(does not) deploy damping and what parameter settings are selected in practice. If you are willing to participate, please send replies directly to us. We will collect the results (removing any private information regarding specific sites) and post the results to the list. Thanks! --- beichuan (1) Does your AS have BGP route flap damping turned on? * Yes * No (please skip to comments) (2) What damping parameters do you use? * Cisco Default * Juniper Default * RIPE recommendation * Customized (3) On which links do you enable damping? * To customers only * To providers * To peers * All the above (4) Comments Please tell us more such as: What kind of network are you managing (any specific names will be removed in the published study)? Why (why not) do you enable damping? If you enable damping, why did you choose your current parameters? Has your site seen specific problems that were prevented by damping (or caused by damping)? We welcome any other comments you feel are relevant. Thanks!

1 0

RE: GSR, 7600, Juniper M?, oh my!
by Stong, Ian C. (Contractor) 06 Jan '04

06 Jan '04

Given that you are a Cisco shop and likely have a lot of O&M money spent to support that vendor I would suggest you look closely at the 7600's to replace your 7500's. Great for low to medium density of port aggregation and hence good $/port ratio. Ian -----Original Message----- From: bcm [mailto:bcm@inkline.com] Sent: Tuesday, January 06, 2004 1:11 PM To: nanog(a)merit.edu Subject: GSR, 7600, Juniper M?, oh my! Hello all, I'm faced with a difficult decision. I work for a large multi-node regional ISP (and Cisco shop). In our largest nodes we've found the Cisco 7500 series routers to be at the end of their useful life due to the throughput generated by POS OC-3 feeds and 10,000+ broadband users whose traffic needs to be moved out of the node. Short of building a farm of 7500's the need to upgrade seems clear. But where to go? The Cisco GSR platform seems a logical choice, but their new 7600 series units are attractive for their cost. Juniper may also have a place at this end of the processing spectrum. I'd also like to ensure that the new platform supports doing CAR and ACLs at line rate, given the client base. I wanted to see what other operators in this situation have done, so I would appreciate anyone's input or insight into the pros and cons of these platforms or any other ideas as to how I can grow beyond the Cisco 7500.

1 0

example.com/net/org DNS records
by Roger Marquis 06 Jan '04

06 Jan '04

Does anyone know why IANA has assigned NS and A records to the example.{com,org,net,...} domains? They even put up a website at the IP explaining RFC 2606. * Why did they assign NSs and a valid IP to these invalid domains? * Are they breaking the RFC by doing this? * Are they breaking anti-UCE filters by doing this? (yes) * Are they harvesting URLs and referrers? * Will they next advertise routes for RFC 1918 addresses? -- Roger Marquis Roble Systems Consulting http://www.roble.com/

14 22

Lucent APX1000
by Claydon, Tom 06 Jan '04

06 Jan '04

Does anyone here have experience with the APX1000? We just got one of these beasts (to replace two AS5300's), and I need some help on OSPF configurations (specifically, how to integrate it into our Cisco-based network). Thanks, = TC -- Tom Claydon, IT/ATM Network Engineer Dobson Telephone Company phone: (405) 391-8201 cell: (405) 834-0341

1 0

Topics for NANOG30
by Susan Harris 05 Jan '04

05 Jan '04

Hi everyone - here are the presentations we've planned so far for NANOG 30 in Miami, Feb. 8-10. The "**" talks are ones we've scheduled to CELEBRATE OUR 10th ANNIVERSARY (!) SUNDAY TUTORIALS ---------------- Customer-Triggered Real-Time Black Holes Level: Introductory Chris Morrow, UUNET, Tim Battle, AT&T Provider-Provisioned Virtual Private Networks Level: Introductory Ina Minei, Juniper MPLS Fast Reroute Level: Intermediate/Advanced Joe Soricelli, Juniper GENERAL SESSION (Monday - Tuesday) ** = 10th Anniversary Presentations ----------------------------------- ** "End-to-end, Spam, and DoS: Threats to the Model That Made the Internet Great" Phil Karn, QUALCOMM ** "10 Years of Corporate Change in the NANOG & IP Backbone Community" Martin Levy, moderator; John Curran, XO Communications; and Doug Humphrey ** "A Short History of the 'Net" Scott Bradner, Harvard ** "Where We've Been and Where We're Headed," a special panel moderated by Sue Hares with guests Van Jacobsen, Paul Francis, et al. ** "A Decade of Technology Pitfalls and Successes" Dino Farinacci, Procket ** "Where Did the NAPs Come From and When Did They Turn Into Exchange Points?" Steve Feldman, CNET "Internet Exchange Operator Panel" Celeste Anderson, USC LAAP, moderator "Making Sense of BGP" Tina Wong, Van Jacobson, Cengiz Alaettinoglu, Packet Design "Hot Potatoes Heat Up BGP Routing" Renata Teixeira, UCSD; Aman Shaikh, AT&T; Tim Griffin, Intel; Jennifer Rexford, AT&T "Root Cause Analysis of Internet Routing Dynamics" Matthew C. Caesar, L. Subramanian, and R.H. Katz, UC Berkeley "Listen and Whisper: Security Mechanisms for BGP" L. Subramanian, V. Roth, I. Stoica, S. Shenker, and R.H. Katz, UC Berkeley "Real-time Global Routing Metrics" Jim Cowie, Andy T. Ogielski, B.J. Premore, Eric A. Smith, & Todd Underwood, Renesys "Airborne Contagion: Effects of a Worm on Wireless Networking" Christopher Chin, UC Berkeley "How to Kill Worms and Viruses with Policy Pontifications" Scott Bradner, Harvard "Analysis of the DDoS Attack Against SCO" David Moore and Colleen Shannon, CAIDA "IAB Concerns About Permanent Deployment of Edge-Based Filtering" Itojun Hagino, IETF Internet Architecture Board "Roundup of Global RIR Statistics" Ray Plazk, ARIN "BGP Testing: Why Be so Negative?" Brent Imhoff, Wiltel; Scott Poretsky, Quarry RESEARCH FORUM "Achievable Comprehensive Delay Reporting from Routers" Darryl Veitch, Sprintlabs "Synchronising Software Clocks on the Internet" Darryl Veitch, Sprintlabs "A Distributed Control Plane Architecture to Support Millisecond Routing Convergence" Hormuzd Khosravi, Intel "Nemecis: A Tool to Analyze the IRR Registries" Georgos Siganos, UC Riverside MONDAY EVENING BOFs ISP Security and NSP-SEC BOF V Barry Raveendran Greene, Cisco, moderator Peering BOF VII Bill Norton, Equinix, moderator See you soon, and don't forget to register (and to join in the anniversary festivities, bring your old t-shirts, buttons, banners, and hats): https://www.merit.edu/nanog/registration.form.html

1 0

UUNet contact for security spambot?
by Jay Hennigan 05 Jan '04

05 Jan '04

Some well-intentioned person at UUNet, in an effort to rid the Internet of worms, viruses, and evildoers, has written a script that sends email in response to network scans. Repeatedly. Mail comes from "secmbox3(a)uu.net" with a return path of "eagleeye(a)uu.net". We're getting complaints for an origin IP that neither originates on nor passes through our network. I'm not sure why UUNet or their robot assumes that we can help with the problem. Replies to the scripted mail appear to go to Dave Null. If a human at UU.Net could contact me off-list about this, it would be appreciated. -- Jay Hennigan - CCIE #7880 - Network Administration - jay(a)west.net WestNet: Connecting you to the planet. 805 884-6323 WB6RDV NetLojix Communications, Inc. - http://www.netlojix.com/

3 2

Grr. Two in a day is more than I can stand
by Suresh Ramasubramanian 05 Jan '04

05 Jan '04

People subscribed to nanog who mess up and gate all their email back to the list, and to all people cc'd on the email. Having that happen once in a day is bad enough, but two cases of this on the same day? :( Today's crop - > Return-Path: <steve(a)telecomplete.co.uk> > Received: from newman.ficomp.com (newman.ficomp.com [65.165.96.143]) > by corpmail.outblaze.com (Postfix) with ESMTP id C99E216DD83 > for <suresh(a)outblaze.com>; Mon, 5 Jan 2004 13:44:47 +0000 (GMT) > Received: from mail pickup service by newman.ficomp.com with Microsoft SMTPSVC; > Mon, 5 Jan 2004 08:45:58 -0500 > Received: from trapdoor.merit.edu ([198.108.1.26]) by newman.ficomp.com with Microsoft SMTPSVC(5.0.2195.5329); > Sun, 4 Jan 2004 22:03:45 -0500 and > Received: by brum.mine.nu (Postfix, from userid 1008) id: 14:40 +0100 > (CET) > Received: from localhost (localhost [127.0.0.1]) by brum.mine.nu > (Postfix) with ESMTP id E51497927 for: 14:25 +0100 (CET) > Received: from localhost [127.0.0.1] by localhost with POP3 > (fetchmail-5.9.11) for: 14:26 +0100 (CET) > Received: from xanadu.unit.liu.se (xanadu.unit.liu.se [130.236.230.147]) > by mu.unit.liu.se (iPlanet Messaging Server 5.2 HotFix 1.17 (built Jun > 23 2003)) with ESMTP id <0HQZ00FSBJS6UG(a)mu.unit.liu.se> for > eriso667(a)student.liu.se; Sun,: 00:06 +0100 (MET) > Received: by xanadu.unit.liu.se (Postfix, from userid 102) id > 317AE4D6FF; Sun, 04: 00:06 +0100 (MET) > Received: from mr.lindesign.se (mr.lindesign.se [195.22.95.33]) by > xanadu.unit.liu.se (Postfix) with ESMTP id A94624D64F for > <eriso667(a)student.liu.se>;: 00:04 +0100 (MET) > Received: from trapdoor.merit.edu ([198.108.1.26]) by mr.lindesign.se > with esmtp (Exim 4.30) id: 00:04 +0100 > Received: by trapdoor.merit.edu (Postfix) id B797691239; Sun, 04: 57:13 > -0500 (EST) -- srs (postmaster|suresh)(a)outblaze.com // gpg : EDEDEFB9 manager, outblaze.com security and antispam operations

1 0