- NANOG - lists.nanog.org

FW: Internet Priority Services RFI Announcement
by Nolan, David 18 Dec '03

18 Dec '03

The National Communications System issued a Request for Information (RFI) concerning Internet Priority Services for National Security and Emergency Preparedness (NS/EP) communications. The RFI announcement appears on the Federal Business Opportunities website at the url: http://www.fbodaily.com/archive/2003/11-November/23-Nov-2003/FBO-0047473 6.htm The NCS welcomes any input, including both formal and informal submissions. Please consider providing a response, or notifying other persons, groups or businesses you know who might be interested in this topic. David J. Nolan National Communications System Technology & Programs Division (N2) email: noland(a)ncs.gov The National Communications System is now part of the Department of Homeland Security (DHS), Information Analysis and Infrastructure Protection (IAIP) Directorate. <<00 Pri Svc RFI final.pdf>>

1 0

Security/DDOS contact for Level3 US ?
by Jan Czmok 17 Dec '03

17 Dec '03

Can somebody who is responsible on blocking IP's on "unknown.level3.net" ports contact me off-list ? I have a DDOS attack against one of my customers from a customer of level3. --jan -- Jan Czmok, Network Engineering & Support, Global Access Telecomm, Inc. Ph.: +49 69 299896-35 - fax: +49 69 299896-40 - sip:13129*522@inoc-dba.pch.net

1 0

Broadwing
by Timothy Brown 17 Dec '03

17 Dec '03

Anyone have anything positive or negative to say about Broadwing on the transit side? Private e-mail only please; i'll summarize to the list if there's interest. Tim

1 0

Re: Request for submissions: messy cabling and other broken things
by Richard Irving 16 Dec '03

16 Dec '03

Sharif Torpis wrote: > uh-oh, what's this? > > http://new.onecall.net/timages/wanrack.jpg Hehehe.. :} The -old- building, and Telecom WAN room, circa early 1990's, late 1980's, and a bank of auto-ops from before the time when there was such a thing as a 1U server. "new".onecall.net is actually a misnomer, the actual -new- site (www) has minimal detail.... Programmers keep the old web site around, under the name "new", (Programmer Humor, eh ?) which has a few pictures snapped during the building of the -=new=- facility. :P

1 0

Re: Request for submissions: messy cabling and other broken things
by Richard Irving 16 Dec '03

16 Dec '03

Laurence F. Sheldon, Jr. wrote: > Richard Irving wrote: >>http://new.onecall.net/timages/cat5patch.jpg > > Is that one really Cat. 5 compliant? (Tails out of the sheath look > too long one some of them.) Routine "Spin Downs" created that (extended) Telco standard, we just carried it over to Data structured wiring, as well. :\ > Whole lot prettier than some of the other pictures though. > >>http://new.onecall.net/timages/dsxcabling.jpg > > > Looks like an old-fashioned Western job--dint think anybody still > working knew how to do that. 8-)

1 0

RE: 25,000 ton amphibious spam relay
by Swaar, Matthew L. 16 Dec '03

16 Dec '03

E-mailing the DOD-CERT is also another way to try to get these things fixed. (...I'm not 100% certain that getting this fixed was the point of this, but I figured I'd point that out on the off chance.) I'm forwarding the header information of this spam to the appropriate folks. V/R, Matthew Swaar ASN568 Analyst matthew.swaar(a)cert.mil -----Original Message----- From: Eric Kuhnke [mailto:eric@fnordsystems.com] Sent: Tuesday, December 16, 2003 2:46 PM To: nanog(a)merit.edu Subject: 25,000 ton amphibious spam relay http://www.interesting-people.org/archives/interesting-people/200312/msg0007 0.html ================================= At 09:59 AM 12/16/2003, Rich Kulawiec wrote: [ Doesn't it just make you feel all safe and cozy when the people responsible for our defense are allowing military hardware to be hijacked to relay spam? ---Rsk ] ----- Forwarded message from Bruce Gingery <bg7341(a)GTCS.COM> ----- > Date: Tue, 16 Dec 2003 00:48:14 -0700 > From: Bruce Gingery <bg7341(a)GTCS.COM> > Subject: Spam, Block: 25,000 ton spam relay, with photos of it! > To: SPAM-L(a)PEACH.EASE.LSOFT.COM > > ANNOUNCING: The amphibious transport dock and spam relay > > http://www.news.navy.mil/list_all.asp?id=8488 > Zoom-in > http://www.news.navy.mil/view_single.asp?id=4553 > http://www.news.navy.mil/view_single.asp?id=2746 > > > The ship supports the Marine Corps "mobility triad," the LCAC > >(Landing Craft Air Cushion vehicle), the "Triple A-V" (AAAV - > > Advanced Amphibious Assault Vehicle) and the MV-22 (Osprey > > tiltrotor aircraft), > > and (apparently) spammers in Guandong. Red China. > > > Furthermore, San Antonio incorporates the latest quality of life > > standards for the embarked Marines and sailors, including the sit-up > > berth, ship services mall, a fitness center and learning resource > > center/electronic classroom > > and Unsolicited Bulk E-Mail. > > Of course, it's possible that one of the OTHER eleven ships, still under > construction, is the Avondale, LA dot-MIL spam relay, or trojaned boat, > or some nice-and-secure Windows box in the construction drydocks, running > Microsoft Exchange Internet Mail Service Version 5.5.2653.13 > > But doesn't it make all Americans feel all fuzzy and secure that a > Red Chinese spammer can abuse a US Naval Vessel of one of the newest > designs, to relay his "business proposition"? > > Perhaps it's tied to the USS Green Bay, instead? or USS New Orleans? > http://www.navsea.navy.mil/newswire_content.asp?txtDataID=8963&txtTypeID=2 > > The USS Mesa Verde, seems to be in Mississippi, instead > http://www.navsea.navy.mil/newswire_content.asp?txtDataID=8663&txtTypeID=2 > > But the E-Mail headers finger the USS San Antonio, LPD 17, already > christened, and due for commissioning some time this coming year. > > > LPD 17 Looks Like a "Gator" > > http://www.navsea.navy.mil/newswire_content.asp?txtDataID=8596&txtTypeID=2 > > but from here, it just looks like another spammer. > > [SPECIMEN] > H: Return-Path: <lugbkbgkd(a)ms13.hinet.net> > H: Received: from avnavfw.lpd17.navsea.navy.mil > H: (avnavfw.pms317.navy.mil [205.67.231.235]) > H: by mail.gtcs.com (8.12.10/8.11.3/gtcs-6.3.8) with SMTP > H: id hBG65HO8091853 > H: for <[victim]>; Mon, 15 Dec 2003 23:06:39 -0700 (MST) > H: (envelope-from: <lugbkbgkd(a)ms13.hinet.net>) > H: X-Authentication-Warning: serv.gtcs.com: Host > H: avnavfw.pms317.navy.mil [205.67.231.235] > H: claimed to be avnavfw.lpd17.navsea.navy.mil > H: Received: from no.name.available by avnavfw.lpd17.navsea.navy.mil > H: via smtpd (for [209.181.16.1]) with SMTP; 16 Dec 2003 05:53:08 UT > H: Received: from avnavfw.AVONDALE (205.67.231.5 [205.67.231.5]) by > H: swn-email.lpd17.navy.mil with SMTP (Microsoft Exchange Internet Mail > H: Service Version 5.5.2653.13) > H: id YY2BDP4P; Tue, 16 Dec 2003 00:07:28 -0600 > H: From: "HuatonE-ScooterCo.,Ltd" <1232312fs21d(a)ms13.hinet.net> > H: Received: from [61.145.234.62] by avnavfw.AVONDALE > H: via smtpd (for [205.66.99.30]) with SMTP; 16 Dec 2003 05:51:47 UT > H: Subject: Re.About our new product > H: Content-Type: text/html > H: Date: Tue, 16 Dec 2003 13:57:41 +0800 > H: X-Priority: 3 > > [extract from HTML body] > B: Our company specializes in exporting electric & gas scooters, which > B: are most popular with our customers at home and abroad. Now we are > B: writing to offer you an opportunity to develop a mutual trade. If > B: you are interested in establishing business relations with us, please > B: let us know your requirements. Then we would like to forward catalogues > B: as well as detailed information to you, and offer the best price to > B: you. We assure you of our best attention to your any inquiries. > B: We anticipate your early response in respect. > > B: Huaton E-scooter Co., Ltd. > B: Room.B-202,Building Si-Hai-Ming-Yuan > B: Burg Weiji,Zone Gongbei > B: City Zhuhai 519020 > B: Province Kwangtung,China > B: Tel:86-756-821-6922 > B: Fax:86-756-888-3037 > ... > > Spam support by: > The US Navy, Avondale Lousiana Shipyard, Firewall, and hosts behind it > > OrgName: DoD Network Information Center > OrgID: DNIC > Address: 7990 Science Applications Ct > Address: M/S CV 50 > City: Vienna > StateProv: VA > NetRange: 205.0.0.0 - 205.117.255.255 > Comment: DOD Network Information Center > Comment: Space and Naval Warfare Systems > Comment: Washington, DC 20363-5100 US > > Responsible for these not-yet-commissioned ships ... > Naval Sea Systems Command > 1333 Isaac Hull Avenue S. E. > Washington Navy Yard, D.C. 20376 > Congressional/Press Inquiries: (202) 781-4124 > > Link in spam hosted at > B: http://dateu.to/ > inetnum: 202.181.192.0 - 202.181.223.255 > netname: HKCIX > > Link in spam hosted at > B: http://i19.ac.tpe.yahoo.com/ > inetnum: 202.1.232.0 - 202.1.239.255 > netname: YAHOO-ASIA > descr: streaming media, e-mail, instant messenger, www, etc > country: HK > > Spammer at: > inetnum: 61.145.0.0 - 61.145.255.255 > netname: CHINANET-GD > descr: CHINANET Guangdong province network ----- End forwarded message ----- ------------------------------------- You are subscribed as interesting-people(a)lists.elistx.com To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/

2 1

ping GUS.NET
by Christopher Chin 16 Dec '03

16 Dec '03

Hello, Is GUS Network America (GUS.NET) represented here, or does anyone have a live contact? Neither the ARIN nor whois POC have been repsonsive. Off-list replies will be appreciated. Thanks, - Christopher ======================

1 0

25,000 ton amphibious spam relay
by Eric Kuhnke 16 Dec '03

16 Dec '03

http://www.interesting-people.org/archives/interesting-people/200312/msg000… ================================= At 09:59 AM 12/16/2003, Rich Kulawiec wrote: [ Doesn't it just make you feel all safe and cozy when the people responsible for our defense are allowing military hardware to be hijacked to relay spam? ---Rsk ] ----- Forwarded message from Bruce Gingery <bg7341(a)GTCS.COM> ----- > Date: Tue, 16 Dec 2003 00:48:14 -0700 > From: Bruce Gingery <bg7341(a)GTCS.COM> > Subject: Spam, Block: 25,000 ton spam relay, with photos of it! > To: SPAM-L(a)PEACH.EASE.LSOFT.COM > > ANNOUNCING: The amphibious transport dock and spam relay > > http://www.news.navy.mil/list_all.asp?id=8488 > Zoom-in > http://www.news.navy.mil/view_single.asp?id=4553 > http://www.news.navy.mil/view_single.asp?id=2746 > > > The ship supports the Marine Corps "mobility triad," the LCAC > >(Landing Craft Air Cushion vehicle), the "Triple A-V" (AAAV - > > Advanced Amphibious Assault Vehicle) and the MV-22 (Osprey > > tiltrotor aircraft), > > and (apparently) spammers in Guandong. Red China. > > > Furthermore, San Antonio incorporates the latest quality of life > > standards for the embarked Marines and sailors, including the sit-up > > berth, ship services mall, a fitness center and learning resource > > center/electronic classroom > > and Unsolicited Bulk E-Mail. > > Of course, it's possible that one of the OTHER eleven ships, still under > construction, is the Avondale, LA dot-MIL spam relay, or trojaned boat, > or some nice-and-secure Windows box in the construction drydocks, running > Microsoft Exchange Internet Mail Service Version 5.5.2653.13 > > But doesn't it make all Americans feel all fuzzy and secure that a > Red Chinese spammer can abuse a US Naval Vessel of one of the newest > designs, to relay his "business proposition"? > > Perhaps it's tied to the USS Green Bay, instead? or USS New Orleans? > http://www.navsea.navy.mil/newswire_content.asp?txtDataID=8963&txtTypeID=2 > > The USS Mesa Verde, seems to be in Mississippi, instead > http://www.navsea.navy.mil/newswire_content.asp?txtDataID=8663&txtTypeID=2 > > But the E-Mail headers finger the USS San Antonio, LPD 17, already > christened, and due for commissioning some time this coming year. > > > LPD 17 Looks Like a "Gator" > > http://www.navsea.navy.mil/newswire_content.asp?txtDataID=8596&txtTypeID=2 > > but from here, it just looks like another spammer. > > [SPECIMEN] > H: Return-Path: <lugbkbgkd(a)ms13.hinet.net> > H: Received: from avnavfw.lpd17.navsea.navy.mil > H: (avnavfw.pms317.navy.mil [205.67.231.235]) > H: by mail.gtcs.com (8.12.10/8.11.3/gtcs-6.3.8) with SMTP > H: id hBG65HO8091853 > H: for <[victim]>; Mon, 15 Dec 2003 23:06:39 -0700 (MST) > H: (envelope-from: <lugbkbgkd(a)ms13.hinet.net>) > H: X-Authentication-Warning: serv.gtcs.com: Host > H: avnavfw.pms317.navy.mil [205.67.231.235] > H: claimed to be avnavfw.lpd17.navsea.navy.mil > H: Received: from no.name.available by avnavfw.lpd17.navsea.navy.mil > H: via smtpd (for [209.181.16.1]) with SMTP; 16 Dec 2003 05:53:08 UT > H: Received: from avnavfw.AVONDALE (205.67.231.5 [205.67.231.5]) by > H: swn-email.lpd17.navy.mil with SMTP (Microsoft Exchange Internet Mail > H: Service Version 5.5.2653.13) > H: id YY2BDP4P; Tue, 16 Dec 2003 00:07:28 -0600 > H: From: "HuatonE-ScooterCo.,Ltd" <1232312fs21d(a)ms13.hinet.net> > H: Received: from [61.145.234.62] by avnavfw.AVONDALE > H: via smtpd (for [205.66.99.30]) with SMTP; 16 Dec 2003 05:51:47 UT > H: Subject: Re.About our new product > H: Content-Type: text/html > H: Date: Tue, 16 Dec 2003 13:57:41 +0800 > H: X-Priority: 3 > > [extract from HTML body] > B: Our company specializes in exporting electric & gas scooters, which > B: are most popular with our customers at home and abroad. Now we are > B: writing to offer you an opportunity to develop a mutual trade. If > B: you are interested in establishing business relations with us, please > B: let us know your requirements. Then we would like to forward catalogues > B: as well as detailed information to you, and offer the best price to > B: you. We assure you of our best attention to your any inquiries. > B: We anticipate your early response in respect. > > B: Huaton E-scooter Co., Ltd. > B: Room.B-202,Building Si-Hai-Ming-Yuan > B: Burg Weiji,Zone Gongbei > B: City Zhuhai 519020 > B: Province Kwangtung,China > B: Tel:86-756-821-6922 > B: Fax:86-756-888-3037 > ... > > Spam support by: > The US Navy, Avondale Lousiana Shipyard, Firewall, and hosts behind it > > OrgName: DoD Network Information Center > OrgID: DNIC > Address: 7990 Science Applications Ct > Address: M/S CV 50 > City: Vienna > StateProv: VA > NetRange: 205.0.0.0 - 205.117.255.255 > Comment: DOD Network Information Center > Comment: Space and Naval Warfare Systems > Comment: Washington, DC 20363-5100 US > > Responsible for these not-yet-commissioned ships ... > Naval Sea Systems Command > 1333 Isaac Hull Avenue S. E. > Washington Navy Yard, D.C. 20376 > Congressional/Press Inquiries: (202) 781-4124 > > Link in spam hosted at > B: http://dateu.to/ > inetnum: 202.181.192.0 - 202.181.223.255 > netname: HKCIX > > Link in spam hosted at > B: http://i19.ac.tpe.yahoo.com/ > inetnum: 202.1.232.0 - 202.1.239.255 > netname: YAHOO-ASIA > descr: streaming media, e-mail, instant messenger, www, etc > country: HK > > Spammer at: > inetnum: 61.145.0.0 - 61.145.255.255 > netname: CHINANET-GD > descr: CHINANET Guangdong province network ----- End forwarded message ----- ------------------------------------- You are subscribed as interesting-people(a)lists.elistx.com To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/

2 1

[carolw@merit.edu: NANOG 30 Meeting Information]
by Chris Woodfield 16 Dec '03

16 Dec '03

Can someone make sure that a proper supply of torches and pickaxes is requisitioned for the excusrsion to Boca Raton? -C ----- Forwarded message from Carol Wadsworth <carolw(a)merit.edu> ----- Envelope-to: rekoil(a)semihuman.com Delivery-date: Tue, 16 Dec 2003 13:50:11 -0500 Delivered-To: nanog-outgoing(a)trapdoor.merit.edu Delivered-To: nanog(a)trapdoor.merit.edu Delivered-To: nanog(a)merit.edu Delivered-To: nanog-announce-outgoing(a)trapdoor.merit.edu Delivered-To: nanog-announce(a)trapdoor.merit.edu Delivered-To: nanog-announce(a)nanog.org Date: Tue, 16 Dec 2003 13:48:50 -0500 From: Carol Wadsworth <carolw(a)merit.edu> To: nanog-announce(a)nanog.org Subject: NANOG 30 Meeting Information X-Mailer: Mulberry/2.1.1 (Mac OS/PPC) Precedence: bulk X-Loop: nanog X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on tino.semihuman.com X-Spam-Level: X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.60 Registration is now open for NANOG 30, February 8-10, 2004, in Miami. The meeting will be hosted by Terremark Worldwide, Inc. Join us for NANOG's 10th anniversary celebration: http://www.nanog.org/ See you there! ----- End forwarded message -----

1 0

NANOG 30 Meeting Information
by Carol Wadsworth 16 Dec '03

16 Dec '03

Registration is now open for NANOG 30, February 8-10, 2004, in Miami. The meeting will be hosted by Terremark Worldwide, Inc. Join us for NANOG's 10th anniversary celebration: http://www.nanog.org/ See you there!

1 0