- NANOG - lists.nanog.org

WilTel Communications
by Tom Daly 11 Jun '03

11 Jun '03

Hi, Anyone have any experiences with WilTel Communications? One of my upstreams is considering adding them to thier BGP blend, and I am trying find out about their network. Please contact me off list if you can offer any general comments or experiences. Regards, Tom -- Tom Daly tom(a)dyndns.org Chief Infrastructure Officer Dynamic DNS Network Services http://www.dyndns.org/

1 0

mac.com abuse
by Bernard Becker 11 Jun '03

11 Jun '03

> >Date: Tue, 10 Jun 2003 22:13:38 -0400 >From: Eric Brunner-Williams in Portland Maine <brunner(a)nic-naa.net> >Subject: Re: off-topic, contact needed at mac.com > >Looking for a human (or even an auto-ACK-mailbot) at any of: > {abuse,hostmaster,postmaster}(a){mac,apple}.com >has proven fruitless. If anyone has a pointer I'd appreciate it. mac.com is wholly owned and run by apple.com. abuse(a)apple.com should work. If not, send email to the Tech Contact as shown in whois. Eddings, Kenneth (KE557) eddingsk(a)APPLE.COM If that fails bounce your request off of: Chuq Von Rospach (chuq(a)apple.com) Apple IS&T Mail List Gnome While he runs all of Apple mail lists, he is not technically the spam or abuse guy but he may be able to point you in the right direction. Please be polite, he's a great guy. -- + + + + + + + + + + + + + + + + + + + + + + + + + + Bernard Becker, Sr. Partner, Proxy Communications Corporation. If you're absurdly interested in my life: <http://www.proxy.net/resume.html> Life's too short to do DOS support. [Formerly <becker(a)apple.com> National Systems Engineer, Apple Canada] Proxy Communications Corporation 73 Adair Rd. Toronto, ON M4B 1V6 Tel. 416-751-3599 Cel. 416-435-6165 Pgr. 416-245-5544 Pgr. 98916 becker(a)proxy.net

1 0

off-topic, contact needed at mac.com
by Eric Brunner-Williams in Portland Maine 11 Jun '03

11 Jun '03

If anyone has an operational contact at mac.com, please drop me a note off-list.

1 1

RE: pool.ntp.org NTP servers
by Ejay Hire 10 Jun '03

10 Jun '03

I was thinking about the not the closest-server problem today, and realized this is a good application for BGP-DNS http://www.enyo.de/fw/software/bgpdns/ Making it possible to look at the reqeustor's network location and retrun the "closest" servers. -Ejay -----Original Message----- From: Curtis Maurand [mailto:curtis@maurand.com] Sent: Thursday, June 05, 2003 10:37 AM To: wayne Cc: nanog(a)merit.edu Subject: Re: pool.ntp.org NTP servers ns1.mainelinesys.com Curtis On Sun, 1 Jun 2003, wayne wrote: > > > > This seems like a good time to put in a plug for the pool.ntp.org NTP > servers. This is collection of public ntp servers provided by > individuals and ISP's placed in a round-robin DNS system. The goal is > to provide the general public with a list of NTP servers that they can > use without abusing the stratum 1 servers. > > > If you can provide an NTP server to the pool, it would be greatly > appreciated. The bandwidth and CPU usage of an NTP server is quite > low so you can easily provide NTP services to hundreds or even > thousands of users. > > If you create default NTP setups and you don't have good default NTP > servers to use, feel free to use pool.ntp.org for one or more of your > NTP sources. (You should have at least 3 NTP sources, although using > more than three doesn't usually help much.) > > > For more information, see: > > http://fortytwo.ch/time/ > > > -wayne > > -- -- Curtis Maurand mailto:curtis@maurand.com http://www.maurand.com

8 8

Bad-ass stress / test tool for IDS, DoS, Firewalls, etc.
by bobjohnson61＠netzero.net 10 Jun '03

10 Jun '03

I got this because I down-loaded from them. This is a very useful hammer for IDS, Firewalls, DoS devices etc. "The toolkit created to generate huge loads against test servers for product development is for sale. It is called i408, and can generate up to 1000 concurrent two-way HTML connections per box from real IP addresses in real time from real HTTP logs. Use it to stress and test your firewalls, IDS, load balancers, routers, switches, servers, cache appliances and get detailed performance metrics such as response time, ingress and egress rates, successful and unsuccessful GETs per second. A competitive professional tool to do this costs more than $40,000. $250 per seat per server for 6 months is cheap insurance that your devices do what they claim. See http://www.reactivenetwork.com/i408" I heard that DDoS deliberate attack tools are included if you ask. ________________________________________________________________ The best thing to hit the internet in years - NetZero HiSpeed! Surf the web up to FIVE TIMES FASTER! Only $14.95/ month -visit www.netzero.com to sign up today!

2 1

Senate hearing: Personal and National Security Risks of P2P
by Sean Donelan 09 Jun '03

09 Jun '03

Interesting title. Has anyone heard who is on the witness list? http://judiciary.senate.gov/hearing.cfm?id=801 The Senate Committee on the Judiciary will hold a hearing on Wednesday, June 11, 2003, at 2:00 p.m. in Room 226 of the Senate Dirksen Building, on "The Dark Side of a Bright Idea: Could Personal and National Security Risks Compromise the Potential of P2P File-Sharing Networks?"

2 1

NYC: TelX vs. Telehouse
by Charles Sprickman 09 Jun '03

09 Jun '03

Hello, Looking for people who have used both and can offer some comparisons. I'm somewhat familiar with Telehouse's plusses and minuses. TelX also claims that they will have a service soon that will link both locations, but I'm not sure exactly what that means; a link to NYIIX? I'm mainly curious about the variety of transit providers (both seem a bit slim), how hard it is to get sublet customers in, and the reliability of power/cooling. We're currently at Level3, and their x-connect fees are making a number of projects too expensive. I can summarize offlist replies if that's preferred. Thanks, Charles -- Charles Sprickman spork(a)inch.com

1 1

RE: Ettiquette and rules regarding Hijacked ASN's or IP space?
by Christopher L. Morrow 09 Jun '03

09 Jun '03

On Mon, 9 Jun 2003, Michel Py wrote: > Chris, > > > Christopher L. Morrow wrote: > > So, for an example, if I steal ASN 8143 (already stolen so its > > mute) and I'm 'a good guy', all I want to do is run a network > > no spam/abuse eminates from it, > > Question: if you are a 'good guy', why didn't you request your own legit > ASN in the first place? It's less work than finding one to hijack and > hijack it. And probably cheaper too: $500 does not pay for much of my or > your time. excellent point :) the distinction between 'good' and 'bad' was just non-abuser/abuser. Certianly ARIN's requirements for ASN ownership are simple enough, be multihomed and have a 'unique' routing policy. If you need an ASN likely you are already multihomed and have a 'unique' routing policy, eh? > > > > I am not advocating one or the other, and to me the rules should > > apply to both groups (all theives treated equally)... I'm just > > curious as to the general thought on this subject. > > Without taking sides, does the first group really exist? > If you fuzz over the 'bad'/'good' beyond 'abuser'/'non-abuser' then perhaps there isn't a distinction. Perhaps clarification: Someone that sets up an ISP and hijacks ASN/ip-blocks specifically to abuse versus someone who hijacked an ASN to avoid paperwork. The distinction isn't necessarily for any real purpose, except as a talking point. I've seen both groups get discussed, and only the 'abusing' group seems to get hounded... or atleast thats what I've seen.

4 3

RE: Ettiquette and rules regarding Hijacked ASN's or IP space?
by Christopher L. Morrow 09 Jun '03

09 Jun '03

On Mon, 9 Jun 2003, Michel Py wrote: > Chris, > > > Christopher L. Morrow wrote: > > excellent point :) the distinction between 'good' and 'bad' was > > just non-abuser/abuser. Certianly ARIN's requirements for ASN > > ownership are simple enough, be multihomed and have a 'unique' > > routing policy. If you need an ASN likely you are already > > multihomed and have a 'unique' routing policy, eh? > > Yep. > > > > If you fuzz over the 'bad'/'good' beyond 'abuser'/'non-abuser' > > then perhaps there isn't a distinction. Perhaps clarification: > > Someone that sets up an ISP and hijacks ASN/ip-blocks > > specifically to abuse versus someone who hijacked an ASN to > > avoid paperwork. > > I'm not buying into this "avoid paperwork" thing. I can't speak for > RIPE, APNIC or LACNIC, but in the ARIN region I have requested ASNs both > for myself and helped customers request theirs and it's not that big of > a deal. Note that I didn't say it was a 'good' reason, just a reason... that or 'status' to have an ASN below number N (like say 10,000??) not that it matters to the routing system WHAT your ASN might be, just that one exists... > > There is no real money incentive either: if one is setting up a real > ISP, a one-time $500 fee is a) part of the cost of doing business and b) > well worth the money compared to be labeled as a hijacker. > indeed... some people are shortsighted perhaps? Again, I don't understand the mentality so I can't argue for it... > Save for network engineers that have snagged an ASN from a merge and > recycled it for their home network or pet project (there are none on > this list, of course), would you mind giving some specifics about 'good > guys' that have hijacked an ASN?

1 0

Black box that allows just an A or B DC feed
by james 09 Jun '03

09 Jun '03

I have a device that only has one DC power input. Is there a box that can accept an A & B DC leg, keep both isolated, & and feed my device with just A or B ? ie, if the A or B leg fails at the co-lo this blackbox will switch to what ever leg is up. Quickly, I hope ! Or are there other ways to solve this issue ? James Edwards Routing and Security Administrator jamesh(a)cybermesa.com At the Santa Fe Office: Internet at Cyber Mesa Store hours: 9-6 Monday through Friday Phone support 365 days till 10 pm via the Santa Fe office: 505-988-9200 or Toll Free: 888-988-2700

3 3