- NANOG - lists.nanog.org

Earthquake in the East Bay
by Lou Katz 05 Sep '03

05 Sep '03

Probably 3.9, probably Orinda. No damage or injury reports. Nothing to see ... move along -- -=[L]=-

1 0

Re: ethernet-based temperature sensors
by David Lesher 05 Sep '03

05 Sep '03

Speaking on Deep Background, the Press Secretary whispered: > > > Oops, somebody's already done it: > http://www.maxim-ic.com/appnotes.cfm/appnote_number/1048/ln/en > > Looks like the total hardware cost would be around $100 for the TINI > and board, and $8 for each sensor (iButton and holder). I have little > time and no Java skills, otherwise it looks like a cool project. If > somebody wants to develop a machine room temperature monitoring > network out of them, I'd be a beta tester ;) That looks a lot closer to the Yellow Brick Road than anything else suggested to date. I like the 64 bit SN idea; sounds like MAC addresses... Note there are several analog temp sensors out there -- National has a line that is dirt cheap ($~1.00) and work on current loops [i.e. LONG leads are OK..] so if someone has a SNMP driven A-D.... -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

1 0

cox.net/cox-internet.com people here?
by Marius Strom 05 Sep '03

05 Sep '03

Please contact me off-list. -- /-------------------------------------------------> Marius Strom | Always carry a short length of fibre-optic cable. Professional Geek | If you get lost, then you can drop it on the System/Network Admin | ground, wait 10 minutes, and ask the backhoe http://www.marius.org/ | operator how to get back to civilization. \-------------| Alan Frame |---------------------->

1 0

CalPOP contact? HTTP CONNECT scanning
by Jeroen Massar 05 Sep '03

05 Sep '03

-----BEGIN PGP SIGNED MESSAGE----- As people are complaining all around about ISP's, here is my small question. Who has a _working_ contact at "CalPOP" (216.240.128.0/19 and others). It is not in puck :( If anybody has a working one please mail it me offlist so that the following long version of the problem can be solved. Is there anything alive at CalPOP that doesn't try to abuse open proxies for massively spamming hotmail ? These are the hits from Sep 3rd: 216.240.140.204 - - [03/Sep/2003:06:27:15 +0200] "CONNECT 65.54.253.99:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:17 +0200] "CONNECT 65.54.167.5:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:19 +0200] "CONNECT 65.54.253.230:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:20 +0200] "CONNECT 65.54.167.230:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:22 +0200] "CONNECT 65.54.254.151:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:24 +0200] "CONNECT 65.54.252.99:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:25 +0200] "CONNECT 65.54.254.145:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:26 +0200] "CONNECT 65.54.252.230:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:26 +0200] "CONNECT 65.54.254.140:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:28 +0200] "CONNECT 65.54.254.145:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:29 +0200] "CONNECT 65.54.252.230:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:30 +0200] "CONNECT 65.54.254.140:25 HTTP/1.0" 200 2366 "-" "-" Since 29 Sep they did that 13007 times to the same box. Quite persistent apparently as previously at 10-15 August they used 216.240.129.201 + .205 to hit that box for another 17502 times and that one stopped mysteriously after mailing abuse(a)calpop.com & noc(a)calpop.com & sam(a)calpop.com (as shown in whois). Unfortunatly without any reply whatsoever and apparently they are continuing to scan for open http connect proxies. I know the 200 response should indicate a CONNECT succes. But unfortunatly if one loads up an apache2 with PHP suddenly it starts passing _all_ methods to PHP which nicely responds a 200. But it is perfect for logging some nice data from the wanna-be-spammer. <Limit CONNECT>Deny from all</Limit> solves that ofcourse but that spammer needs to go, but the contacts don't work. This acts as a perfect spamtrap honeypot btw especially as they keep trying. Before anyone asks the IP being hit is on a DSL line so they are quite probably scanning all the DSL networks for open proxies. Greets, Jeroen -----BEGIN PGP SIGNATURE----- Version: Unfix PGP for Outlook Alpha 13 Int. Comment: Jeroen Massar / jeroen(a)unfix.org / http://unfix.org/~jeroen/ iQA/AwUBP1aErymqKFIzPnwjEQJy9QCfSQep7SBrrZ6xaQySWJ/LTwgqFNEAoKkB TErNe82mRJXd5JyoLMneYEVw =xLmY -----END PGP SIGNATURE-----

4 3

roadrunner.
by Micah McNelly 04 Sep '03

04 Sep '03

Does anyone have any contact information for roadrunner netops? Its unfortunate that their local offices won't escalate you to the proper party in times of need. Its also unfortunate that their "offices are closed". /micah

1 0

Re: BMITU
by Robert Boyle 04 Sep '03

04 Sep '03

At 05:54 PM 9/4/2003, you wrote: >Communigate Pro is not a Windows mail server... It runs on nearly >everything; and can handle millions of accounts (it has extensive >clustering support). Check their website: www.stalker.com for specs. I stand corrected. I was only familiar with the Windows version. Thanks for the heads up. Apologies to all. -Robert Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

1 0

BMITU
by Fisher, Shawn 04 Sep '03

04 Sep '03

This is my first post so please be gentle. I would like to get some opinions on the Best Mailserver in the Universe. Is there a more appropriate list for this question? I have looked at Communigate Pro, IMAIL, and others. I am interested in integrated solution that can scale to handle 500k accounts Any experience good / bad would be great. Thanks /SF

5 4

Re: BMITU
by Robert Boyle 04 Sep '03

04 Sep '03

At 02:35 PM 9/4/2003, Brad Knowles wrote: and most *nix platforms, look at Surgemail from http://www.netwinsite.com >> It is incredibly scalable and VERY fast. > > Got any benchmarks? We have tested all of them. We process several million messages per day for tellurian.com. The only server which doesn't die immediately or within 30-60 minutes is Surgemail. All others are crippled by multi-threaded and multi-homed dictionary attacks very quickly. I am speaking only of Win32 servers. That is what he asked for. >> It uses a spam assassin-like >> filter which is written in C so it is at least 20-100 times faster than >> spam assassin and 95% as effective. > > Again, benchmarks, please. Spam assassin could not handle the load and choked on the mail volume. We were only able to process 1-2 messages per second with spam assassin. (not running spamc/spamd since it doesn't work on Win32) We can now peak at 50-100 messages per second without any problem. The ruleset is completely customizable and it includes a distributed razor-like checksuming spamtrap database. Even without Bayes capability, with thousands of messages per day, I only receive one or two false positves or false negatives per week. > In particular, I'd also like to see effectiveness benchmarks, > such as the ones recently reported at > <http://freshmeat.net/articles/view/964/>. Here, SpamAssassin won as a > non-learning filter, but it also has a Bayesian/learning mode that would > allow it to perform as well as or better than any of the other learning > types. Of course, they tested version 2.55 and 2.60 is already > available, so that would also make a difference. Unfortunately, spam assassin is so effective and popular that spammers are using the rules to game SA now. We use a different ruleset than SA so we are less susceptible to forced false negatives. >> It includes support for AVAST >> anti-virus > > Any other anti-virus solutions supported? AMaViS and amavisd-new > support something like thirty different plug-in modules that you can use. Sure. You can use any command line scanner. Norton, McAfee, RAV, whatever... We were using RAV until a week ago when we decided to switch to AVAST. >> and the webmail program is powerful, fast, and includes >> support for PGP. > > Webmail is another aspect of the overall system. Myself, I've > found that many webmail systems are too dependant on support for > javascript in the browser. In particular, IMP/horde has a problem in > this area. We found that TWIG was the best webmail application we could > find, although I've also heard good things about SquirrelMail. There are > many others also listed at > <http://directory.google.com/Top/Computers/Software/Internet/Clients/Mail/We…>. It is a standard IMAP/POP/SMTP server so you can use any webmail you want. The one which is included is very fast and powerful. It includes almost any feature a full featured email client should have. View source, view headers, PGP, redirect, rules, anti-spam rules and exceptions. >> It is an AWESOME product and the support and >> developers are top notch too. I don't have any vested interest in >> the company, but I am a very happy customer. (They also make DNews >> which many people here are probably familiar with) > > DNews I am familiar with. Not bad for what it is, but Diablo is > much more scalable. It's also more difficult to manage, but the best-run > large news providers in the world that I know of are all using Diablo. Many also use Cyclone and Typhoon too. I didn't say that DNews was the most scalable server, but that people would know the company by it. :) I haven't wasted my time or bandwidth running a news server for many years so I can't comment on news server scalability. -Robert Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

1 0

ethernet-based temperature sensors
by matthew zeier 04 Sep '03

04 Sep '03

I know this has been mentioned before, but other than NetBotz (too pricey), what are people use as ethernet-based, SNMP-probable temp sensors? I very simply need to trend temp with cricket/mrtg in various parts of the data center. Looking for real-world experience. Thanks. -- matthew zeier - "Curiosity is a willing, a proud, an eager confession of ignorance." - Leonard Rubenstein

8 7

RR
by /m 04 Sep '03

04 Sep '03

Can someone from roadrunner get ahold of me off-list. /micah

1 0