- NANOG - lists.nanog.org

megapath.net dns
by Len Rose 17 Jul '03

17 Jul '03

Can someone with a clue at megapath.net PLEASE fix your dns. I've been sending mail to noc@ for the last 24 hours but all I get are auto responder messages. Your forward zones don't match your reverse zones for mia.megapath.net and 74.33.69.in-addr.arpa zones. You are causing denial of service for your customers.

1 0

IOS Vulnerability
by Scott McGrath 17 Jul '03

17 Jul '03

For full details about the vulnerability see http://www.cisco.com/en/US/products/hw/routers/ps341/products_security_advi… Scott C. McGrath

1 0

Re: New Cisco Vulnerability
by John Curran 16 Jul '03

16 Jul '03

>Hello All, > >There seem to be rumors going around that there is a new major >Cisco vulnerability but only the major backbones are being given >fixes right now. > >Something about packets malformed in a certain manner cause the >router to wedge. > >Can anyne shed any light on or off list? > >-vb Rumor has it that more information will be coming soon, but in the interim it's recommend to drop packets destined for the router itself which don't originate from a known source. /John

1 0

Re: New Cisco Vulnerability
by Gregory Hicks 16 Jul '03

16 Jul '03

> From: "Vincent J. Bono" <vbono(a)vinny.org> > Date: Wed, 16 Jul 2003 15:17:54 -0400 > > Hello All, > > There seem to be rumors going around that there is a new major Cisco > vulnerability but only the major backbones are being given fixes > right now. Not 100% true... Anyone with a Catalyst 4000/5000/6000 can get it - free. See this URL for details. http://www.cisco.com/warp/public/707/cisco-sa-20030709-swtcp.shtml > Something about packets malformed in a certain manner cause the > router to wedge. True. Regards, Gregory Hicks > Can anyne shed any light on or off list? > > -vb > > > > > --------------------------------------------------------------------- Gregory Hicks | Principal Systems Engineer Cadence Design Systems | Direct: 408.576.3609 555 River Oaks Pkwy M/S 6B1 | Fax: 408.894.3479 San Jose, CA 95134 | Internet: ghicks(a)cadence.com Never attribute to malice that which is adequately explained by ignorance or stupidity. Asking the wrong questions is the leading cause of wrong answers "The best we can hope for concerning the people at large is that they be properly armed." --Alexander Hamilton

7 6

Postini's network.
by Drew Weaver 16 Jul '03

16 Jul '03

Is anyone else having trouble reaching postini? Tracing route to coax.net.coax.mail1.psmtp.com [12.158.34.245] over a maximum of 30 hops: 1 <1 ms <1 ms <1 ms gateway.cmh.ee.net [209.190.0.1] 2 <1 ms <1 ms <1 ms letmeout.thenap.com [206.222.25.1] 3 1 ms <1 ms <1 ms 209.51.192.18 4 2 ms 2 ms 2 ms 66-162-176-5.gen.twtelecom.net [66.162.176.5] 5 1 ms 2 ms 2 ms dist-02-ge-3-2-0-0.clmb.twtelecom.net [66.192.24 1.213] 6 17 ms 18 ms 16 ms core-02-so-1-3-0-0.nycl.twtelecom.net [66.192.24 1.1] 7 17 ms 17 ms 18 ms 66.192.240.38 8 17 ms 17 ms 17 ms 66.192.252.246 9 18 ms 18 ms 18 ms tbr1-p011601.n54ny.ip.att.net [12.123.1.122] 10 57 ms 58 ms 58 ms tbr1-p013801.cgcil.ip.att.net [12.122.10.50] 11 * I was delivering mail to them fine until 2:35pm. Thanks, -Drew

5 5

New Cisco Vulnerability
by Vincent J. Bono 16 Jul '03

16 Jul '03

Hello All, There seem to be rumors going around that there is a new major Cisco vulnerability but only the major backbones are being given fixes right now. Something about packets malformed in a certain manner cause the router to wedge. Can anyne shed any light on or off list? -vb

2 1

NTPv3 stratum-1 with MD5 availability
by John Kristoff 16 Jul '03

16 Jul '03

We're reworking our current NTP infrastructure and are looking for public NTP stratum-1 servers (we don't currently have the resources to run our own stratum-1 at this time) that are willing to allow one of our stratum-2's to get and distribute time from. We'd like to use MD5 authentication and so far I've had limited success in 1) just getting any response from nearby stratum-1's, but also 2) finding public stratum-1's that will do MD5. Before I start going down the list and bugging stratum-1 admins in other regional areas on David Mill's public list, is there anyone who operates or knows of a stratum-1 that will offer this service for us (and someone or someplace I can marginally validate the trusthworthiness of :-). Replies are probably best off-list unless you want to broadcast to the world that you offer such a service. Thanks in advance, John

1 0

IOS and SNMP question regarding 802.1q vlans on 7200.
by Ejay Hire 15 Jul '03

15 Jul '03

Hi all. I've got a 7206 in a remote collocation facility that's running dot1q back to the community switch. When MRTG's cfgmaker only finds the physical interface, not the vlan sub interfaces. The other devices in the network use ISL, and don't have this problem. Does anyone have recommendations or experiences on how to make this work? Thanks, Ejay Hire

3 2

I need a portable /24 not attached to any sub-domain or anything else subject to attack
by Henry Linneweh 15 Jul '03

15 Jul '03

I simply would like to borrow this /24 if you are not going to use in the near and distant future or ever for that matter. It can not be attached to any subdomain and or any or part of any routing table, this would most helpful in the development of methods to prevent ddos and dos. Thank you very much Henry R Linneweh

2 1

Funny VZ bounce
by Gerald 14 Jul '03

14 Jul '03

This isn't the first time I've seen this, but I've got to question the reasoning in putting a quota on your abuse e-mail address. Wonder if postmaster went over his limit too. If you've e-mailed Verizon abuse lately, I'm sure you've already seen this. G *** Begin Bounce *** This Message was undeliverable due to the following reason: The user(s) account is temporarily over quota. <abuse(a)verizon.net> Please reply to Postmaster(a)verizon.net if you feel this message to be in error. [ Part 2: "Delivery Status" ] Reporting-MTA: dns; mta017.verizon.net Arrival-Date: Mon, 14 Jul 2003 12:25:19 -0500 Received-From-MTA: dns; util.inch.com (216.223.192.21) Final-Recipient: RFC822; <abuse(a)verizon.net> Action: failed Status: 4.2.2

1 0