- NANOG - lists.nanog.org

Re: Site Finder
by Robert Boyle 17 Oct '03

17 Oct '03

At 09:27 PM 10/16/2003, you wrote: >I agree that an application level solution at the edge is the best. > >I like the idea of having a user configurable parameter in the client >browser to allow the ``finder'' URL to be set. The browser >``manufacturer'' would of course put their own default and the ISP would >be able to ``configure'' their own defaults and the >end user could ``change'' it to suit their preferences. >This would allow competing ``URL finder'' type services, allow ISPs to >fine tune the interface for their customers and allow end users to >customize their own interface to the ``web''. > >Maybe its time for some ``finder'' API specifications, >mozilla patches, and ``finder'' reference implementations. The Internet Explorer Administration Kit has enabled this functionality for many years. We changed our default search page to Google about 3 years ago for all of our users who install our branded IE and dialer CD. -Robert Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

1 0

Operational content, snr and nanog mailing list...
by Joel Jaeggli 17 Oct '03

17 Oct '03

By my count there have been 23 odd messages in which the subject contains the word tomatoes, this is out of 96 messages I've recieved on this list since midnight pdt. Isn't there something more useful people on this list could be doing. joelja -- -------------------------------------------------------------------------- Joel Jaeggli Unix Consulting joelja(a)darkwing.uoregon.edu GPG Key Fingerprint: 5C6E 0104 BAF0 40B0 5BD3 C38B F000 35AB B67F 56B2

2 1

Site Finder
by Ray Bellis 17 Oct '03

17 Oct '03

Quoting Rusty Lewis from http://verisign.com/corporate/news/2003/pr_20031007b.html?sl=070804 "We will continue to take feedback from both Internet users and the technical community on how we can ensure that the service is available for the many Internet users who clearly like it." Well that's very simple Rusty - stop screwing around with *our* DNS and write a plugin for IE to catch NXDOMAIN, just like the Google toolbar does. That'll allow 90% of the browsing population a *choice*, something the wildcard clearly does not. Ray -- Ray Bellis, MA(Oxon) - Technical Director community internet plc - ts.com Ltd Windsor House, 12 High Street, Kidlington, Oxford, OX5 2PJ tel: +44 1865 856000 email: ray.bellis(a)community.net.uk fax: +44 1865 856001 web: http://www.community.net.uk/

9 8

instead of tomatoes
by David Lesher 17 Oct '03

17 Oct '03

May I suggest..... pumpkins.... A pumpkin per complainant would make a nice visual symbol, one the press could grasp. And afterwards, they could be donated.... -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

1 0

RE: Pitfalls of annoucing /24s
by Forrest 17 Oct '03

17 Oct '03

True enough, but are there any providers currently that filter /24's from the old Class C space that /24's were assigned directly from? I realize that if proposal 2002-3 does get passed but everyone filters those prefixes then it will be a completely worthless proposal, and even worse than using PA space. It seems to me that proposal 2002-3 could enable providers to filter more efficiently however. They could accept the long prefixes out of the micro-assignment block, while filtering out all the garbage /24's in the other space caused by people needlessly announcing every /24 out of their large aggregate. Forrest On Wed, 15 Oct 2003, Andrew Dul wrote: > Forrest, > > Even if ARIN passes this policy that will not make any provider change > their filtering policy. It is true that many providers do use the ARIN > allocation sizes to create their filtering rules but the two are not > inherently linked. Any ASN can choose the filter on what ever rule set > they choose. > > Andrew >

5 4

ISC causes stability problems
by Sean Donelan 17 Oct '03

17 Oct '03

An "anonymous reader" using almost identical language to Verisign public statements, submitted the following to Slashdot: "After .COM and .NET started using a wildcard, the internet community busily started creating patches to various pieces of software to circumvent this. It was said that this was a grave problem to the internet. Several official BIND patches were announced over the next few days. However, it turns out they weren't necessarily too well thought through. Usage of the patch unexpectedly broke at least 7 Top Level Domains, ISC announced 3 weeks later, after users started having problems. The .NAME registry has sent a formal letter to ICANN's Security and Stability Advisory Comittee to warn against using the BIND patch, which they will look into in their next meeting. The intention may have been good, but... Stability? Anyone?" NSI negotiated an agreement with ICANN overseen by the Department of Commerce so it could keep acting as the registry and registrar for .COM and .NET. NSI/Verisign entered into this agreement of its own free will in order to extend its registry and registrar contracts for many years. NSI/Verisign agreed to follow several procedural safeguards, which some other registrar/registries like .NAME didn't. As part of the agreement NSI/Verisign split domain name operations into two parts. The VeriSign COM NET Registry managed the COM and NET registry and zone files. Verisign GRS committed to fair and equitable treatment of all ICANN registrars accreditated by ICANN. The Registry systems are supposed to have "total separation" from other VeriSIgn systems. Quoting their web site: "Since the establishment of the Registry division in 1999, a primary focus of the entire staff has been developing and maintaining effective structural and procedural measures to provide an effective, credible separation between its Registry and affiliated Registrar businesses." The Registry (not the Registrar) is responsible for generating the .COM and .NET zone files from information submitted by all accredited registrars on an equal basis. Assuming Verisign defends its position that wildcards in a top-level zone don't create security or stability problems, how will the Verisign GRS make the wildcard capability available to all ICANN acredited .COM and .NET registrars without creating a conflict of interest? Why shouldn't all ICANN accredited registrars be able to enter wildcards in the .COM and .NET zone files on a equal access basis? Or is the Verisign GRS favoring its corporate sibling by entering special information in the .COM or .NET zone files for its sibling's benefit without offering the same capability to all other registrars. Registry Code of Conduct http://www.icann.org/tlds/agreements/verisign/registry-agmt-appi-com-25may0…

8 7

Backdoor Trojan behind BigPond, Internet spam woes
by Sean Donelan 16 Oct '03

16 Oct '03

http://www.zdnet.com.au/newstech/security/story/0,2000048600,20279775,00.htm Backdoor Trojan behind BigPond, Internet spam woes By Andrew Colley, ZDNet Australia 15 October 2003 U.S.-based Internet security researchers have confirmed that a worm is behind the sharp jump in spam activity battering Telstra's BigPond and other major global ISPs since early last week. UPDATE: BigPond service recovery may take 'several weeks' By Iain Ferguson, ZDNet Australia 14 October 2003 Telstra has conceded it may be several weeks before BigPond e-mail service levels return to normal as the telecommunications carrier wrestles with delays caused by a steep ongoing surge in traffic.

1 0

RE: Tomatoes for Verisign at NANOG 29
by Dave Hilton 16 Oct '03

16 Oct '03

In reference to some earlier politically active days: Hey! Hey! Ver - i - sign ! How Many Domains Do You Think Are Thine? Hilton

1 0

RE: Tomatoes for Verisign at NANOG 29
by Vachon, Scott 16 Oct '03

16 Oct '03

> all > those who approve > of the wildcards would put their token-of-choice in another pile. > Might I suggest the "joker" out of a deck of playing cards ? ; ) Learn more about Paymentech's payment processing services at www.paymentech.com THIS MESSAGE IS CONFIDENTIAL. This e-mail message and any attachments are proprietary and confidential information intended only for the use of the recipient(s) named above. If you are not the intended recipient, you may not print, distribute, or copy this message or any attachments. If you have received this communication in error, please notify the sender by return e-mail and delete this message and any attachments from your computer.

2 1

Re: Tomatoes for Verisign at NANOG 29
by Owen DeLong 16 Oct '03

16 Oct '03

I have no religion about the particular choice of fruit/vegetable (yes, I know tomatoes are technically fruit). However, I think we should try to stick to Red and the symbolism of the tomato cannot be denied. It has long been used as a response to bad implementation and that is exactly what we are responding to here. I would welcome your oranges or any other fruit/vegetable of protest, but, I think tomatoes make the best statement. I have no financial or other interest in tomatoes (although I think they're tasty), and there is no tomato cabal of which I am aware. Owen --On Thursday, October 16, 2003 16:02 -0400 Robert Drake <rdrake(a)sprint.net> wrote: > You guys aren't members of a secret tomato vendor cabal or anything > are you? > > Is other fruit allowed during the silent protest? I'm thinking about > bringing oranges. > > :) > > Robert > > Owen DeLong(owen@delong.com)@2003-10-16 12:01:04 -0700: >> >> I would also suggest that we try to make contact with a second-harvest or >> other organization that may be able to use the tomatoes afterwards. >> >> Owen >> >> >> --On Thursday, October 16, 2003 11:36 -0700 "Wayne E. Bouchard" >> <web(a)typo.org> wrote: >> >> > >> > Just a brief statement that kinda goes without saying but I'll say it >> > anyway. >> > >> > >> > Although I'm not going to be there personally, I do intend to watch >> > the netcast. >> > >> > I would just ask (and I'm sure merit folks share this) that despite >> > the actions that have been taken by verisign and the conflicts etc, >> > that people please be curteous and not just outright harrass their >> > representatives but allow them to make their presentation as they >> > intend. (The last thing we need to do is lend credence to the >> > statements that have been made in the press regarding this community.) >> > >> > On Thu, Oct 16, 2003 at 11:19:59AM -0700, JC Dill wrote: >> >> >> >> Dan and Owen, I nominate you two for the tomato acquisition and >> >> distribution committee. >> >> >> >> To recap: At NANOG 29 in Chicago, on Monday October 20th at 9:15 am a >> >> session on "VeriSign's Wildcard Record: Effects and Responses" will be >> >> held, with Mark Kosters and Matt Larson from VeriSign and Suzanne >> >> Woolf from ISC: >> >> >> >> <http://www.nanog.org/mtg-0310/dns.html> >> >> >> >> If you are attending NANOG 29, please attend this session and wear a >> >> red shirt. If possible, please buy/bring a tomato. Take your tomato >> >> to the front of the room and place them in a pile before Verisign, to >> >> make it absolutely clear how you feel about Verisign's wildcards and >> >> sitefinder. Please do not throw your tomatoes. >> >> >> >> I wish I could be there! >> >> >> >> Now to make sure that someone with clue from the Chicago Sun Times and >> >> the Chicago Tribune are both there, with photographers. Does anyone >> >> on this list have any contacts at either of these papers? >> >> >> >> jc >> > >> > --- >> > Wayne Bouchard >> > web(a)typo.org >> > Network Dude >> > http://www.typo.org/~web/ >> >> >> > > -- > Robert Drake > Sprintlink NTAC Internet > +140 464 90 372 (03 45 3C 6F 04)

1 0