- NANOG - lists.nanog.org

Address for making BGP changes w/ Qwest?
by Temkin, David 04 Sep '03

04 Sep '03

bgp-admin(a)qwestip.net doesn't work anymore. Is there anyone from Qwest on the list or can someone point me to where I'm supposed to be making these changes now? (Call tech support?!) Thanks, Dave

3 2

RE: BMITU
by Fisher, Shawn 04 Sep '03

04 Sep '03

>that nothing can equal, much less beat, sendmail. This is especially >true when you start talking about filtering for spam or viruses via >the milter interface. What are people using for network based anti-virus? A friend of mine started a company www.raeinterent.com/rav and claims to have an industrial anti-virus app that plugs into Communigate Pro. Any experience with network based anti-virus & mail systems? Thx

2 1

RE: BMITU
by Austad, Jay 04 Sep '03

04 Sep '03

I second the vote for Postfix. I haven't used it with a ton of users, but I built a large mail cluster for my old employer which was used to send stock pricing alerts to users that have set up thresholds for certain stocks. Initially, the cluster was qmail (that was back in 2000). I used qmail because it's performance was better than anything else I tested, including postfix. Qmail is a pain to administer, especially when you have a bunch of them. After getting fed up with qmail, I tested Postfix again, and the newer versions of it outperformed qmail by a longshot, and I could spawn many more connections with it without running out of file descriptors. Adding features to qmail sucks because it's always a patch, and it's usually something that most other mailservers already have built in. When you install it and have 10 patches that you need to apply, you need to apply them in the right order so they don't step on each other. There are some limits in qmail that you need to patch for in order to make it work in a very large environment, like the big-concurrency patch and the patch to increase the size of the queue. Administration of postfix can all be done with the postconf command, you don't have to edit config files at all. This makes it great for clusters because I had a script I wrote that would execute a command across all of the machines in the cluster. So a config change for every machine involved typing: grun 'postconf -e whatever = something' grun 'postfix reload' I've heard some good things about exim, but in my testing, I was unable to get the performance I could get with postfix. Maybe it was my fault, I didn't spend that much time with Exim because the ease of administration with Postfix was vastly better than any other mailserver I've used. Postfix rocks. Apple just ripped sendmail out of OS X and replaced it with Postfix if that says anything. -jay > -----Original Message----- > From: Jack Bates [mailto:jbates@brightok.net] > Sent: Thursday, September 04, 2003 10:32 AM > To: Fisher, Shawn > Cc: Nanog List (E-mail) > Subject: Re: BMITU > > > > Fisher, Shawn wrote: > > > I would like to get some opinions on the Best Mailserver in > the Universe. > > Is there a more appropriate list for this question? > > I'm partial to sendmail due to the grandfather clause, but if > I could go > back in time and redesign everything, I'd be a diehard postfix fan. I > have seen postfix and sendmail used in mail servers handling over 30 > Million accounts. Good enough for ya? > > -Jack > >

1 0

RE: ethernet-based temperature sensors
by Neil Ronketti 04 Sep '03

04 Sep '03

> From: Bill Owens [mailto:owens@nysernet.org] > > I suppose if one had enough time and interest, and some Java skills, > you could make something out of these: > > http://www.ibutton.com/ibuttons/thermochron.html > http://www.ibutton.com/TINI/applications/sertoeth/ </lurk> If you don't want to use the little iButton holder jobbie, you can use just the DS1820 range of sensors from Dallas Semiconductor. I bodged up something using one of these and a DS9097U RS-232 adaptor: http://www.neil.nu/temp.html I realise this is probably only of peripheral interest, as the original post requested a unit with SNMP capability, and the DS1820 doesn't provide anything as sophisticated. It was, however, completely free of charge as I got the bits as samples from Farnell in the UK. The software to drive the units is freely available, and it should be pretty trivial to get it to mail a pager or whatever if the temperature goes outside of limits. First post - please be gentle. -- Neil Ronketti MCI, Internet House, IP Design Engineer, CNE 332 Science Park, Cambridge CB4 0BZ Tel: +44 1223 382175 http://www.uk.uu.net/ VNET: 311 3175 http://www.mci.com/

1 0

Atlanta Internet exchange
by Michael Lucking 04 Sep '03

04 Sep '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Recently I have worked with several ISPs to build a new Internet exchange in Atlanta, GA. The AtlantaIX is now operational and accepting connections. We are located in 56 Marietta St. If you have a presence in the building and would like to connect drop me a line. The building owners are one of the sponsors and have given space and power for the exchange. For more information check http://www.atlantaix.com. -----BEGIN PGP SIGNATURE----- iD8DBQE/V2PqYCZjVDyC1X4RAuCaAKC83dg9fhUa++BE4Xi+IOTI1fX9twCfcqNx Zeqo3gDjV8A5th6Zp4fWJpQ= =GhCJ -----END PGP SIGNATURE-----

1 0

RE: BMITU
by Fisher, Shawn 04 Sep '03

04 Sep '03

>You didn't specify operating system but for 500,000 users I wouldn't >even go near Windows. thanks for the feedback..we are a SUN shop so solarius is our OS of choice. >I use a healthy mix of Postfix as the mail server >and Courier-IMAP for POP3/IMAP delivery. They both work extremely well. Chris -- Chris Horry "Don't submit to stupid rules, zerbey(a)wibble.co.uk Be yourself and not a fool. PGP: DSA/2B4C654E Don't accept average habits, Amateur Radio: KG4TSM Open your heart and push the limits."

1 0

Distributed sniffer products
by Austad, Jay 04 Sep '03

04 Sep '03

Anyone have any experience with these? I'm looking for something similar to Network Associates Sniffer product. Are there any open source projects that are decent? What are others using? ---------------- Jay Austad Senior Network Analyst Travelers Express / MoneyGram e: jaustad(a)temgweb.com p: 952.591.3779

10 15

RE: Address for making BGP changes w/ Qwest?
by Joel Perez 04 Sep '03

04 Sep '03

Hey Dave, I have been using their QwestSource web page for a while now to make any routing changes. The site is https://qwestsource.net/qwestsource/workTemplate.jsp ---------------------------------------------- Joel Perez <jperez(a)ntera.net> | IP Engineer http://www.ntera.net/ | Ntera 305.914.3412 -----Original Message----- From: Temkin, David [mailto:temkin@sig.com] Sent: Thursday, September 04, 2003 11:05 AM To: nanog(a)merit.edu Subject: Address for making BGP changes w/ Qwest? bgp-admin(a)qwestip.net doesn't work anymore. Is there anyone from Qwest on the list or can someone point me to where I'm supposed to be making these changes now? (Call tech support?!) Thanks, Dave

1 0

What do you want your ISP to block today?
by Sean Donelan 04 Sep '03

04 Sep '03

Which Microsoft protocols should ISP's break today? Microsoft Exchange? Microsoft file sharing? Microsoft Plug & Play? Microsoft SQL/MSDE? Microsoft IIS? It would be so much easier if worm writers followed the RFC's and set the Evil Bit. China has firewalled the entire country, and they have more infected computers than the US. http://www.vnunet.com/Analysis/1143268 > Although companies may have the infrastructure to deal with the current > band of worms, Trojans and viruses, there is currently a line of defence > that is not in place. "The problem isn't Microsoft's products or the > knowledge of the consumer. The problem lies in the ISPs' unwillingness > to make this issue disappear or at least reduce it dramatically," said > Cooper. > He added that ISPs have the view and ability to prevent en-masse > attacks. "All these attacks traverse their networks before they reach > you and me. If they would simply stop attack traffic that has been > identified and accepted as such, we'd all sleep better," Cooper said.

31 73

Re: What do you want your ISP to block today?
by Vinny Abello 04 Sep '03

04 Sep '03

At 02:51 PM 9/3/2003, Sean Donelan wrote: >On Wed, 3 Sep 2003, Johannes Ullrich wrote: > > I just summarized my thoughts on this topic here: > > http://www.sans.org/rr/special/isp_blocking.php > > > > Overall: I think there are some ports (135, 137, 139, 445), > > a consumer ISP should block as close to the customer as > > they can. > >If ISPs had blocked port 119, Sobig could not have been distributed >via USENET. > > >Perhaps unbelievably to people on this mailing list, many people >legitimately use 135, 137, 139 and 445 over the open Internet >everyday. Which protocols do you think are used more on today's >Internet? SSH or NETBIOS? > >Some businesses have create an entire industry of outsourcing Exchange >service which need all their customers to be able to use those ports. > >http://www.mailstreet.net/MS/urgent.asp > >http://dmoz.org/Computers/Software/Groupware/Microsoft_Exchange/ > >If done properly, those ports are no more or less "dangerous" than >any other 16-bit port number used for TCP or UDP protocol headers. > > >But we need to be careful not to make the mistake that just because >we don't use those ports that the protocols aren't useful to other >people. Even on Windows they can be used in a much safer fashion (although I would never attempt it for any of my stuff). It is possible to use IPSec policies on 2000 and higher to encrypt all traffic on specified ports to specified hosts/networks and block all other traffic. I bet some people are using this to join remote locations securely to each other for Windows networking with these ports and IPSec policies. Vinny Abello Network Engineer Server Management vinny(a)tellurian.com (973)300-9211 x 125 (973)940-6125 (Direct) PGP Key Fingerprint: 3BC5 9A48 FC78 03D3 82E0 E935 5325 FBCB 0100 977A Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com (888)TELLURIAN There are 10 kinds of people in the world. Those who understand binary and those that don't.

7 7