- NANOG - lists.nanog.org

Re: relays.osirusoft.com
by Paul Vixie 27 Aug '03

27 Aug '03

> Someone has suggested 'anycasting' what do people (particually you > Paul) think of using anycasting for a DNSbl? (- AS112 anyone?) unowned anycast, such as that used in as112, is only possible when the replies have no value (and thus need not be synchronized or centrally authorized.) conversely, unowned anycast only adds value if the replies really ought to be sent anonymously. in the case of sorbs, you can enumerate authorized servers and thus get better management and control than you would with unowned anycast. now, that doesn't mean anycast per se is a bad idea for sorbs. it's just that you'd want to own or at least "manage and control" each instance. this is what we do for f-root and it's what ultradns and nominum and i think akamai have been doing for some years now. > I think it may work well... however I am a novice in terms of BGP... > As far as I can tell it involves getting a portable address block > (somone suggested anything less than a /24 would get filtered) and > announcing it in various locations around the Net with local servers > behind each of those announcements.... is this fundamentally correct? yes. see http://www.isc.org/tn/ for some background materials on all this. > Assuming I am right in my current understanding, I am about to start > looking at the proceedure to get an ASN and then I'll be looking for > some portable IP space if the consensus and thoughts are this will > work. I am thinking along the lines of talking with the other large > DNSbls (particually Easynet (wirehub) and DSBL) about setting up a set > of combined DNSbl servers all anycast'd. This after all will bring an > DDoS machines to the attention of the local networks they are > attacking .... ;-) putting multiple dnsbl's on the same /24 sounds like a lot of eggs for only one basket. among the root server operators, we like to chant that "diversity is good".

1 0

Re: Re[2]: relays.osirusoft.com
by Paul Vixie 27 Aug '03

27 Aug '03

> I still like scoring based systems (like spamassassin), which give one a > level of control, instead of bouncing at the MTA level. ah. i, rather, want to drop as much as i can at the mta (or router) level. > My mail is important enough that I can spend the extra CPU cycles... at 50:1 (spam:not), my incoming mail is mostly not worth any extra work.

1 0

Re: Microsoft distributes free CDs in Japan to patch Windows
by JC Dill 27 Aug '03

27 Aug '03

At 04:03 PM 8/25/2003, Andy Walden wrote: >On Mon, 25 Aug 2003, Henry Linneweh wrote: > > > Microsoft has a task scheduler that people should learn to use to remind > > them to check update to make sure their patches are current, it is > > located in the control panel and labled Scheduled Tasks and has an > > Add Scheduled Tasks icon to add update, FYI > >As I read that, I wondered why it is that I haven't patched any of my >windows systems if it was just as simple as reminding myself to do so. It >occurred to me that I just simply don't trust Microsoft to properly patch >my systems. And that's a very wise decision. I was called in to help someone with a "slow computer" today. He's running Microsoft ME, and it's an OS that I have very little experience with. I disabled a bunch of crap in his startup folder, then I took a look at the OS itself. I ran Windows update which told us that there was a service pack with "critical updates" that we should install before doing anything else, and I foolishly decided to follow these instructions without researching first. (Oh well, live and learn!) The machine hung at 62% installed. Trying to cancel the install via the "cancel" button resulted in the cancel message warning you that if you didn't let it complete it's special cancel process and tried to restart the machine instead, you could fatally ruin the computer (I don't recall the exact message, but it was pretty emphatic that you had to let MS finish "canceling" the install). 10 minutes later, with no sign that the computer was doing anything (no disk activity) or would ever complete this cancelation, we rebooted. I had to reboot and shut down several times before it would shut down cleanly and reboot cleanly. Later I learned that this "critical update" package was mostly for installing IE6, and that there are a lot of people who have had this same problem trying to install IE6 on ME, and that it's a well known issue at many ISPs and OEMs, but of course MS still insists that there's nothing wrong and that you should still install that update. Yeah, when the devil starts building snowmen. jc

2 1

Re[2]: relays.osirusoft.com
by Richard Welty 27 Aug '03

27 Aug '03

On Tue, 26 Aug 2003 20:59:22 -0400 (EDT) Mark Jeftovic <markjr(a)easydns.com> wrote: > Returning 127.0.0.2 on everything would indeed be an ugly way to bow > out, but its been done before. Another RBL went out the same way > previously, can't remember which one (was it orbz?) it was more complicated than that. orbs went away without a clean shutdown plan, and one of the secondary DNS operators started answering with 127.0.0.2 to try and get people to stop querying his server. it worked, although with non-trivial pain attached. richard -- Richard Welty rwelty(a)averillpark.net Averill Park Networking 518-573-7592 Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security

1 0

is there still a BGP-understanding person at fast.net/netaxs?
by alex＠yuriev.com 26 Aug '03

26 Aug '03

Hello, Did anyone recently see anyone from fast.net that does not get confused by "show ip bgp <prefix>" output or did the bankruptcy force them to cut payroll so much that they cannot afford anyone but a Chubb Institute type? Thanks, Alex

2 2

DDOS/DOS IP Abuse from Qwest, looking for QWEST Clue
by John Brown 26 Aug '03

26 Aug '03

Before anyone decides to say that NANOG isn't the place, allow me to say that 1. We have emailed them. 2. We have been on the phone with their people, and they seem to be void of clue. 3. We have tried several other more appro lists, but there seems to be an email issue with those lists. 4. Don't waste more bandwidth saying this isn't the place. 5. This ** IS ** operational If you are from Qwest and have enable, please contact me Off List. Thank you.

1 0

FW: Qwest Dial Access Network Labor Day Week Schedule
by Christopher J. Wolff 26 Aug '03

26 Aug '03

Fun rant from a qwest dial up reseller.... Regards, Christopher J. Wolff, VP CIO Broadband Laboratories, Inc. http://www.bblabs.com -----Original Message----- From: Matt [mailto:qmail2@chilitech.com] Sent: Tuesday, August 26, 2003 1:45 PM To: Cho, Mary M Cc: 'webman(a)mounet.com'; 'mbreslin(a)covad.com'; Delgado, Jose; 'mduncan(a)winterlink.net'; 'nick(a)shadowlink.net'; 'mbelmon(a)qwest.com'; 'crungruang(a)corp.untd.com'; Zach, Ronald M; 'franklin(a)lh.net'; Casher, Mark; Marcum, Gina K; 'andy(a)sowhatsoftware.com'; Vinnola, Kristen; 'eric.flagel(a)a-c-t-i.com'; 'phourani(a)seniorexplorer.com'; 'blane(a)mounet.com'; 'tolzak(a)cisp.cc'; Jimenez, Dave; 'jwmorga(a)qwest.com'; 'benner(a)theglobalroad.com'; Bloom jr, Nile S; 's.belizaire(a)americatel.net'; 'jengels(a)qwest.com'; 'brandon(a)dialupusa.net'; 'detling(a)us-south.net'; 'mmolina(a)americatel.net'; 'mhaught(a)qwest.com'; 'kazmier(a)sofast.net'; 'mark(a)bblabs.com'; 'glenn.hiles(a)cwusa.com'; 'frank_demasi(a)apsnet.com'; 'wstephen(a)sowhatsoftware.com'; 'elena.choperena(a)qwest.com'; 'monty(a)kans.com'; 'mark.woolworth(a)gd-decisionsystems.c'; 'jdonato(a)qwest.com'; Robertson, Bruce M; 'eli(a)firstlink.com'; 'mkiessling(a)chilitech.net'; 'tfischer(a)hypervine.net'; 'gmaxwell(a)isiservices.com'; 'rbeltz(a)qwest.com'; Wright, Shelestine L.; 'whzhao(a)microsoft.com'; 'greg(a)chilitech.net'; 'cetch(a)seniorexplorer.com'; 'smathews(a)integrity.com'; 'jamal.coleman(a)qwest.com'; 'dbartram(a)microsoft.com'; 'andrew(a)chilitech.net'; Allred, Terri; 'matt(a)tgrsolution.net'; 'jeffl(a)firstlink.com'; 'hbloom(a)peoplepchq.com'; 'mike(a)uron.cc'; 'jeff(a)secureinteriors.com'; 'dwhitefoot(a)clara.net'; 'brian.blasius(a)us-south.net'; 'rpopper(a)exchange.pngcom.com'; Rodrigues, Al; 'karmat(a)secureinteriors.com'; Morgan, Amy; 'LYWeymer(a)ISIServices.com'; 'nocops(a)epoch.net'; 'support(a)firstlink.com'; 'dorcas.scott(a)gd-decisionsystems.com'; 'jasong(a)pngcom.com'; Peterson, Deborah A; 'admin(a)burgoyne.com'; 'jwwycher(a)nuskin.com'; 'calec(a)microsoft.com'; 'support(a)netrack.net'; Liberato, Karen; 'jay.larson(a)gd-decisionsystems.com'; 'karen.rohrbacker(a)qwest.com'; 'kgutier(a)qwest.com'; Johnson, Tyler; 'spemmar(a)qwest.com'; Schmidt, Thomas; Bornstein, Ronald J; Brosek, Wayne; 'balaji(a)lacuracao.com'; 'ron_conyers(a)apsnet.com'; Ozga, Mary; 'ggopal(a)epoch.net'; Rummler, Natalie; 'john(a)pacemso.com'; 'dslattery(a)isiservices.com'; 'sabel(a)emsanet.com'; 'admin(a)mounet.com'; Doubet, Matt M; 'atanas(a)aplus.net'; 'bradvica(a)emsanet.com'; Valentine, James M; Dowell, Eric R; 'ljames(a)prohosting.com'; 'tpalmer(a)peoplepchq.com'; 'grkrueg(a)qwest.com'; 'ksc(a)wanetwork.net'; 'jmccabe(a)kans.com'; Reed, David (Wholesale); 'larry(a)aplus.net'; Bennett, Chris; 'lilian(a)aplus.net'; 'rickn(a)bigplanet.net'; 'dthomson(a)netacc.net'; 'sburt(a)kans.com'; Fizer, Mike X; 'davids(a)ssa1.com'; Quinzon, Cherie; 'micah(a)myvine.com'; 'eric.hworth(a)eztel.net'; 'nolson(a)lh.net'; 'awong(a)corp.untd.com'; 'amead(a)netacc.net'; 'Jrhowell(a)verinettech.com'; 'Aelmore(a)verinettech.com'; 'Bacollins(a)verinettech.com'; Wagner, Scott M; 'Lamont.brooks(a)qwest.com'; Wechsel, Tracy L.; 'Johnny(a)gazellevillage.com'; Hess, Patrick; 'merry.shepard(a)frontiercorp.com'; 'cavany(a)gazellevillage.com'; 'Pmw(a)meridian-prime.com'; 'Pschneck(a)networkip.net'; 'steve(a)networkip.net'; Beard, James K; Kean, Scott A; Mortensen, Cynthia; 'mardy.chaplin(a)ohdela.com'; 'corey.niceswanger(a)ohdela.com'; 'jean.harsh(a)whitehatmgmt.com'; Moore, Jeffrey G.; 'wesley.jensen(a)qwest.com'; Thompson, William P.; 'ja(a)epoch.net'; 'edgenet(a)epoch.net'; 'Piotr.artwich(a)dot.state.co.us'; 'Jamie.shoup(a)dot.state.co.us'; 'Kglose(a)qwest.com'; 'Rwhetse(a)qwest.com'; Greig Bellum; 'Eflagel(a)datapath.us'; Myruski, Melissa L; Boat, Dane W; 'reedjo(a)corp.earthlink.net'; 'brownc3(a)corp.earthlink.net'; 'mike(a)nvinet.com'; 'support(a)taloncc.com'; 'bryan_w(a)qostel.com'; Major, Clay D; 'daniel.flynn(a)qwest.com'; 'kriss(a)sterlink.net'; 'Debi.christopoulos(a)qwest.com'; 'Jamel.coleman(a)qwest.com'; 'wwalling(a)lh.net'; 'Paday2(a)qwest.com'; 'noc(a)virtela.net'; 'noc-escalate(a)corp.earthlink.net'; 'manderson(a)devonit.com'; 'kclous(a)devonit.com'; 'kcarter(a)devonit.com'; O'Hara, Tripp; 'eric.shippam(a)canetmail.com'; 'jimmy(a)gointernet-corp.net'; McGuirk, Patrick; Chandler, Shirley; 'ssmith(a)aleron.com'; 'helpdesk(a)covad.net'; 'cio(a)gointernet-corp.net'; 'frankm(a)gointernet-corp.net'; 'mxyamas(a)qwest.com'; Bullock, Brian; 'joe(a)config.com'; Kure, Anthony C; 'mark.wright(a)concert.com'; 'gary.hudson(a)concert.com'; 'scott.andrews(a)concert.com'; Logan, Mike; 'allan.rush(a)qwest.com'; 'NOCnodes(a)aol.com'; 'noel(a)velocitywest.com'; 'todd(a)velocitywest.com'; Mishreki, Rafik (Steve); 'chris(a)canetmail.com'; 'hester.bishop(a)communicationsadvantage.net'; 'pnoone(a)peoplepchq.com'; 'nancy_braen(a)apsnet.com'; 'jared.keisel(a)bigplanet.com'; 'cchriston(a)brannan1.com'; 'travis(a)bblabs.com'; 'Jay.Isaacs(a)cwusa.com'; 'noc(a)chilitech.net'; 'supportescalation(a)cisp.cc'; 'Dallas(a)dallastech.net'; 'jared(a)dialupusa.net'; 'network(a)frontier.net'; 'isisnoc(a)frontiernet.net'; 'Dettling(a)ussouth.net'; 'Dday(a)hypervine.net'; 'qwest_notifications(a)noc.untd.com'; 'noc(a)kitusa.net'; 'nocc(a)lh.net'; 'webmaster(a)mccooknet.com'; 'GSCESC(a)MICROSOFT.COM'; 'davenielsen(a)shadowlink.net'; 'btomhave(a)sofast.net'; 'benner(a)tgrsolution.net'; 'Nlonsinger(a)2by2.net'; 'jst(a)integrity.com'; 'lbroderi(a)nuskin.com'; Melara, Mel; 'mgracia(a)covad.com'; 'Tylerw(a)attbi.com'; Hudson, Susan D; Skibicki, Gale A.; 'carman.wenkoff(a)ontain.com'; 'mark.thimmig(a)whitehatmgmt.com'; 'dlucente(a)qualguard.com'; 'johnc(a)qualguard.com'; 'xballarin(a)qualguard.com'; 'steve.smith(a)qwest.com'; 'tandersen(a)pathfire.com'; 'ahardman(a)pathfire.com'; Jencks, Nancy; Peters, Jeffery S.; 'erica.lybecker(a)atlasdmt.com'; 'daves(a)atlasdmt.com'; 'noc(a)atlasdmt.com'; 'jefff(a)atlasdmt.com'; 'hjsimps(a)qwest.com'; 'radius(a)cisp.cc'; 'kmuller(a)aleron.com'; 'b.douglas(a)eztel.net'; 'kreau(a)cisp.cc'; Ledwich, Michelle; 'MWMarien(a)rehabcare.com'; 'CLBartlow(a)rehabcare.com'; 'anthony.lagalante(a)qwest.com'; 'KGSkiles(a)rehabcare.com'; Feinbaum, Livius; 'larryw2549(a)sbcglobal.net'; 'nseramu(a)qwest.com'; 'jmmorro(a)qwest.com'; 'tingema(a)qwest.com'; 'sscoleri(a)covad.com'; 'Bret.hickenlooper(a)qwest.com'; 'kimmer(a)corp.earthlink.net'; 'maryay(a)corp.earthlink.net'; 'PLarkin(a)corp.EarthLink.NET'; Dobzynski, Fred M; Dillehay, Jim T; Maier, James R; 'sstrickland(a)aleron.com'; 'sshelton(a)aleron.com'; 'eric(a)dialupusa.net'; Smiley, Brian; Langley, Matt; 'dan(a)netrelated.com'; 'lisa.rogers(a)qwest.com'; Dahlen, Paul; Rhodes, Gregory J; 'john(a)ikano.com'; Heuser, Brent; 'trahm(a)qwest.com'; McKelvy, Alison N.; 'daboyer(a)qwest.com'; 'ifap(a)lists.corp.earthlink.net'; 'spud(a)reachone.com'; 'info(a)reachone.com'; 'tech(a)reachone.com'; 'awetmor(a)qwest.com'; 'mdelvag(a)qwest.com'; 'rick_bucchi(a)apsnet.com'; 'dduncan(a)cybrtyme.com'; 'john_lee(a)lst.com'; 'ben_campbell(a)lst.com'; Young, Richard S; 'john(a)bizoppmail.com'; 'ron.mosrie(a)qwest.com'; Hobbs, William C; 'bill(a)yournetplus.com'; 'bdouglas(a)eztel.net'; Harkins, Dustin; 'radius(a)ikano.com'; Heard, Leslie A; Moore, Chris; Bodman, Robert; Keyser, Scott R; 'jwhitney(a)corp.untd.com'; 'abuse(a)netacc.net'; 'Susan.levertt(a)qwest.com'; 'abuse(a)peoplepc.com'; 'chris(a)bblabs.com'; 'miko(a)yournetplus.com'; O'Brien, Harry L; 'nfe(a)americatel.net'; 'Nocops(a)netifice.com'; 'mhawoo(a)qwest.com'; 'morms(a)qwest.com'; 'network(a)frontier.net'; Dan-CPM Subject: Re: Qwest Dial Access Network Labor Day Week Schedule OH MY WORD! QWEST! You never fail to astound me! Once again our e-mail addresses have been sent out in plain text and I'm going to be bombarded by your less then upright resellers who are going to contact me to find out if I want to get dial-up service through them. I've about had it! Your techs are incompetant.... It takes days to fix problems.... I'm assured that e-mail will never be sent out like this again with all e-mail addresses naked and out in public, and still it happens again. Yes, I'm CCing the entire list... I'm very upset right now, and I've hit reply all because the option is there and provided for me. Get your act straightened out qwest.... I'm honestly suprised you haven't lost more customers... between the 10meg pipe we have through you and all the problems we've had with it, and then our dial-up contract, I honestly don't know how you people stay in business... Have a wonderful labor day, ~ Matt

3 2

Opinion on null0'ing entire 218.0.0.0?
by Drew Weaver 26 Aug '03

26 Aug '03

Is anyone getting hundreds of thousands of spasm a day from 218.0.0.0 like I am? Has anyone actually considered null routing the whole block? Is there actually any 'users' in APNIC space? Or is it all spam from korea? -Drew

5 4

Microsoft distributes free CDs in Japan to patch Windows
by Sean Donelan 26 Aug '03

26 Aug '03

As some of you know, the standard Microsoft OS distribution sold in stores on CD is a year or so old, and doesn't include any recent patches. You needed to download recent patches from Microsoft's web site. Unfortunately, with the latest round of worms, Windows doesn't survive on the net long enough to downdload patches. In Japan, Microsoft will be distributing "free" CD's with patches through its distribution channels, eletrical appliance and personal computer shops. The anti-virus vendors are apparently packaging their wares along with the Microsoft patches. Symantec and Trend will be the first. Symantec is distributing 15,000 CDs on Wednesday, and Trend Micro is distributing 10,000 CDs on Thursday. http://www.japantimes.co.jp/cgi-bin/getarticle.pl5?nn20030823b2.htm No word if Microsoft will be distributing any patch CDs in the USA. However, many universities have created their own CDs for students moving into dorms. It is the start of the school year in in North America, and high speed network connections and new unpatched Microsoft Windows on computers are a bad combination.

11 18

Worldnet-ATT on list?
by Drew Weaver 26 Aug '03

26 Aug '03

If any worldnet-att people are on list please contact me. Thanks, -Drew

1 0