- NANOG - lists.nanog.org

Power outages
by Jim Wood 14 Aug '03

14 Aug '03

You can go to CNN for a complete map of the outages Jim Wood jwood(a)zebracomputers.com MW Technology Group Inc DBA: Zebra Computer Repair & Networking 360-736-7000 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.509 / Virus Database: 306 - Release Date: 8/12/2003

1 0

Re: Power outage in North East
by sgorman1＠gmu.edu 14 Aug '03

14 Aug '03

looks like a cascading failure from the a Conedison transformer in NYC http://www.msnbc.com/news/952578.asp?0cv=CA01 ----- Original Message ----- From: Lee Watterworth <lwatterworth(a)rim.net> Date: Thursday, August 14, 2003 4:44 pm Subject: Re: Power outage in North East > > > Ontario Canada is also out. > > -------------------------- > Lee Watterworth (lee at rim dot net) > Data Network Specialist > Research in Motion Ltd > +1 519 888 7465 x2610 > > -----Original Message----- > From: Scott Francis <darkuncle(a)darkuncle.net> > To: Joel Perez <jperez(a)numind.net> > CC: nanog(a)merit.edu <nanog(a)merit.edu> > Sent: Thu Aug 14 16:28:21 2003 > Subject: Re: Power outage in North East > > >

1 0

Re: Big power outage in Ontario ?
by bukys＠cs.rochester.edu 14 Aug '03

14 Aug '03

It's out all over the NorthEast -- outages in NYC, Ottawa, Toronto, Rochester, Syracuse, Albany.

2 1

RE: Power outage in North East
by McBurnett, Jim 14 Aug '03

14 Aug '03

FROM CNN website NEW YORK (CNN) -- A major power outage simultaneously struck several large cities in the United States and Canada late Thursday afternoon. Cities affected include New York; Boston, Massachusetts; Cleveland, Ohio; Detroit, Michigan; Toronto, Ontario; and Ottawa, Ontario. The power outage occurred shortly after 4 p.m. Much of Midtown Manhattan and Wall Street were shut down, including all area airports and the Long Island Railroad. The airports were operating on back-up power and operations were reported to be normal, officials said. The New York City Police Department said they were trying to determine what happened. A Con Edison transformer on East 14th Street in Manhattan was afire, CNN learned. Thousands of people could be seen leaving buildings and walking into the streets. New York subways were reported stopped and people were trapped in the cars. -----Original Message----- From: Patrick Muldoon [mailto:doon@inoc.net] Sent: Thursday, August 14, 2003 4:34 PM To: Joel Perez; nanog(a)merit.edu Subject: Re: Power outage in North East On Thursday 14 August 2003 04:23 pm, Joel Perez wrote: > Has anyone heard of a big Power outage in the North east? > I just got a call from one of my tech's in the GBLX bldg in Newark, NJ > at 1085 raymond and they are telling him that they lost power! > But I also got a call from AT&T in NY that they also lost Power! Power is flakier then all heck here in Albany, NY. Outages / major brown outs. We are running on Generator here since it is way cleaner power at the moment. -- Patrick Muldoon Network/Software Engineer INOC (http://www.inoc.net) PGPKEY (http://www.inoc.net/~doon) Key fingerprint = 8F70 6306 F0A7 B8DA BA95 76C4 606A 7DC1 370D 752C I haven't lost my mind; it's backed up on tape somewhere.

1 0

RE: East Coast outage?
by Wesley Vaux 14 Aug '03

14 Aug '03

http://www.cnn.com/2003/US/08/14/power.outage/index.html Power outage information Wes Vaux, CCNA, CCDA Network Security Engineer, 9000 Regency Pkwy Ste 500 Cary, NC 27511 t 919.463.6782 f 919.463.1290 Global Knowledge Experts Teaching Experts http://www.globalknowledge.com -----Original Message----- From: Aaron D. Britt [mailto:flip@deru.com] Sent: Thursday, August 14, 2003 4:32 PM To: nanog(a)merit.edu Subject: East Coast outage? I just lost 80 circuits (Voice and Data), across multiple states on the East Coast in the last 10 minutes. Is there a Northeast power outage or fiber cut that anyone knows about? Any info would be appreciated... -Aaron

1 0

RE: Power outage in North East
by Sean Crandall 14 Aug '03

14 Aug '03

> Has anyone heard of a big Power outage in the North east? > I just got a call from one of my tech's in the GBLX bldg in Newark, NJ at 1085 > raymond and they are telling him that they lost power! > But I also got a call from AT&T in NY that they also lost Power! I have customers in East Rutherford, NJ and Manhattan that lost power to their HQs. -Sean Sean P. Crandall VP Engineering Operations MegaPath Networks Inc. 6691 Owens Drive Pleasanton, CA 94588 (925) 201-2530 (office) (925) 201-2550 (fax)

2 1

Re: Port blocking last resort in fight against virus
by Joe Provo 14 Aug '03

14 Aug '03

On Tue, Aug 12, 2003 at 12:11:48PM -0500, John Palmer wrote: [snip] >Yes, some providers however react improperly to certain situations > and do not listen to their paying customers. > > RCN in Chicago is one example. One day, they just started blocking > outbound port 25 on their network. Now, I use other SMTP servers > other than the RCN one. In my case, they're my servers and all I > have to do is set up my SMTP to listen on an additional port. For > others, they aren't so lucky and may have a legitimate gripe with > them for censoring traffic. If I recall correctly, that was a reaction to abuse, which was done network wide for the basic class of residential customers. Enforcement of a 'no servers' clause for HTTP is also common among broadband providers. But to get back on topic... > In the case of 135-139, no one who uses these ports legitimatly > should have a need to use them "in the wild" unless in a tunnel. [snip] Yup. Back in the day good old windows 3.1 had access control problems and tried to share information in classful broadcast boundaries. Blocking these netb* ports was effective across- the-board protection and anyone who called with an issue got educated and fixed. This is all about the edges, and frankly even with all messages regarding "The Backbone", I can't think about any "backbone" who isn't an edge. Everyone should police their edges for their own customers' sake, and be willing to help customers' policing efforts when asked. Seems there's an undercurrent of willfull ignorance that perpetuates all sorts of abuse. Once upon a time we studied for what purpose our networks were used, and were able to optimize for the traffic that was in demand, making customers happy. There just happened to be a side effect of squashing badness that was purposeful along with that which was just 'brokeness'. Perhaps if we were all paying more attention to what purposes the networks were being used, even if it is because of brokeness this time, we'd wind up optimizing and making customers happy? I'm all for the invisible system administrator and the transparent network, but there is a business case for visible differentiation, giving the customers a reason to stay. It is nice when that differentiation isn't based on marketing glossies and run-from-chapter-11 fire sale pricing but the actual (technical) product. Cheers, Joe -- RSUC / GweepNet / Spunk / FnB / Usenix / SAGE

1 0

RE: The impending DDoS storm
by Josh Fleishman 14 Aug '03

14 Aug '03

Has anyone determined a method for triggering the DOS attack manually? We've attempted this by changing an infected machine's clock, however it did not work on our test box. If anyone has triggered the attack, do you have a copy of the sniffed data stream? It sounds like uRPF is going to be of very little benefit to blocking the attack if the spoofed addresses come from the infected host's subnet/parent subnet. -Josh -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Mark Vallar Sent: Wednesday, August 13, 2003 7:18 PM To: nanog(a)merit.edu Subject: Re: The impending DDoS storm Jack Bates Wrote: > I have no affiliation with Microsoft, nor do I care about their > services or products. What I do care about is a worm that sends out > packets uncontrolled. If there is the possibility that this "planned" > DOS will cause issues with my topology, then I will do whatever it > takes to stop it. The fact that user's can't reach windowsupdate.com > is irrelevant. > There will most likely be issues with a lot of networks. I had a glimpse of what is to come on the 16th on Tuesday. We have a firewall customer that had an infected machine behind the firewall and the RTC clock was set incorrectly to 8/16. The firewall was *logging* ~50 attempts per second trying to connect on port 80 to windowsupdate.com. Since the worm was sending from a spoofed source address the firewall was denying the packets. This customers network is a /24 out of traditional Class B space and I was seeing random source addresses from almost every IP out of the /16. This is not a forensic analysis, just what I observed in the firewall logs. Is it a coincidence that 8/16 is a Saturday....I think not. A lot less personal on-site to deal with possible issues. -Mark Vallar

5 4

OT: APAC circuit costs
by Brennan_Murphy＠NAI.com 14 Aug '03

14 Aug '03

I am hoping to ask some questions of an enterprise network engineer/manager who knows a bit about circuit costs in APAC. Specifically, I have a vendor telling me a WAN link from Beijing to SanFran is cheaper than Beijing to almost anywhere else in APAC: Singapore, Hong Kong, Sydney and Tokyo. Just looking for someone to contact me off the list and confirm whether that is actually the case.... Thanks! -BM

1 0

RE: Microsoft to ship new versions with firewall enabled
by Drew Weaver 14 Aug '03

14 Aug '03

ipchains and similar firewalls are indeed far superior. I manage "real" firewalls as part of my responsibilities. However the new microsoft policy will help protect the network from Joe and Jane average who buy a PC from the closest "big box" store and hook it up to their cable modem so they can exchange pictures of the kids with the grandparents in Fla. This is the class of users who botnet builders dream about because these people do not see a computer as a complex system which _requires_ constant maintenance but as a semi-magical device for moving images and text around. ---- I don't believe that many people really see ipchains as a real viable firewall. I think it is awesome, but in many corporations simply mentioning it gets you a stern eyeing. Of course these corporations can spend tons of money on Checkpoint and PIX boxen. -Drew

3 2