- NANOG - lists.nanog.org

new BIND 4/8 vulnerabilities
by Scott Francis 12 Nov '02

12 Nov '02

Heads up. Surprisingly, no mention so far at the usual suspects[1]. http://www.isc.org/products/BIND/bind-security.html http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469 [1] BUGTRAQ, VulnWatch ... I saw it on misc(a)openbsd.org myself ... -- -= Scott Francis || darkuncle (at) darkuncle (dot) net =- GPG key CB33CCA7 has been revoked; I am now 5537F527 illum oportet crescere me autem minui

1 0

Abha's scholarship fund
by Susan Harris 12 Nov '02

12 Nov '02

For those of you who knew and worked with Abha Ahuja, I wanted to let you know that a scholarship fund has been established in her memory. Donations to the "Abha Ahuja Women in Engineering" scholarship fund should be made payable to University of Michigan College of Engineering. Checks should include the notation "Abha Ahuja Memorial Scholarship Fund" and be sent to the following address: Attn: Michael Dubin Robert Lurie Engineering Center University of Michigan 1221 Beal Ave. Ann Arbor, MI 48109-2102 A long-time NANOG member, Abha played a significant role in the Internet engineering community. We hope her memory and this scholarship fund helps encourage a new generation of women to join our engineering and NANOG ranks.

1 0

Breaking Stuff by Fixing NAT
by Crist J. Clark 12 Nov '02

12 Nov '02

We have some dial-up-like customers behind a device doing the dreaded Network Address Translation (NAT). We are doing one-to-one NAT. Customers get PPP connections with 10/8 addresses. The NAT is done far down stream from our end of the point-to-point connnection at the border with our ISP. Do not ask me why it was done that way. The network engineers want to discontinue doing NAT. From our point of view, NAT doesn't provide any benefits (it did take a while to get it to sink in that it provides no security, and we do need to add some BGP complexity since before packets could get NATed at any egress point and find their way back). NAT only created continuous headaches. But there are still management reservations, the only reservation we do not have a good answer for is the (arbitrary) claim that turning off NAT may break stuff for customers who depend on it. Now we have customers that do some pretty messed up stuff, and everybody knows about various commercial apps that do really, really messed up stuff, but none of us can think of anything that turning NAT off will break. But perhaps all of our minds are just too cluttered with all of the weird stuff that turning off NAT will allow to _work._ Has anyone here been in a similar situation? Did turning off NAT break anything? Is anyone aware of or can think of anything that turning off NAT might break? (Ignore the fact any customers connected during the actual change may have service intrupted. I am only worried about something that doesn't work next time they dial-up after the change.) Thanks. -- Crist J. Clark | cjclark(a)alum.mit.edu | cjclark(a)jhu.edu http://people.freebsd.org/~cjc/ | cjc(a)freebsd.org

3 4

"VeriSign Moves DNS Server To Boost Security"
by Gil Cohen 11 Nov '02

11 Nov '02

In an effort to protect the Internet from future hacking attacks, VeriSign (Nasdaq: VRSN - news) has moved one of the Net's root servers to an undisclosed physical and virtual location. http://story.news.yahoo.com/news?tmpl=story2&cid=620&ncid=738&e=9&u=/nf/2002 1108/bs_nf/19918 Funny read. Signed, Gil

14 16

huge power outage in sj
by Scott Granados 11 Nov '02

11 Nov '02

Just a note, about ten minutes ago a big jult went through our building at 35 S. Market and we lost power entirely. It looks like 55 S market is also with out power although I assume generators have kicked in. Cause is unknown yet but there is lots of fire and police activity near by so probably a substation or something blew up.

2 1

Re: huge power outage in sj
by George William Herbert 11 Nov '02

11 Nov '02

I have a couple of companies I work with reporting 55 South Market San Jose also lost AC power temporarily, but the generators are on and stable at this time. No word as to the cause from either of them. -george william herbert gherbert(a)retro.com

1 0

PCCW/CAIS as transit
by Bogdan Surdu 11 Nov '02

11 Nov '02

Hi, Can someone give me a few impressions (offline) about PCCW/BtN (ex CAIS) as transit supplier. Thanks, Tim --- Be different. Think.

1 0

telis
by Scott Granados 11 Nov '02

11 Nov '02

Just a note, telis has cleared their bogan filters on 69.x.x.x and it appears it was a couple weeks ago my fault:). THey also were very responsive with this so hats off to them. THanks again! Scott

1 0

RE: Could someone from Bell Nexxia contact me offlist
by nanog＠jamesstewartsmith.com 11 Nov '02

11 Nov '02

The Bell Nexxia looking glass is (I got this from traceroute.org) http://looking-glass.in.bellnexxia.net:8080/ Mind sharing the Nexxia looking glass URL? Thanks, Joel > -----Original Message----- > From: nanog(a)jamesstewartsmith.com [mailto:nanog@jamesstewartsmith.com] > Sent: November 10, 2002 12:35 PM > To: nanog(a)merit.edu > Subject: Could someone from Bell Nexxia contact me offlist > > > > I'm having a routing issue where anyone on the Bell Nexxia > network can't connect to my web server, but they can get to > every other IP > address on the same network. There seems to be something odd > I found in a > Bell Nexxia looking glass. Any help would be appreciated. > > > -- > James Smith > > CCNP Certified > Sun Certified Systems Administrator for Solaris 8 > > -- James Smith CCNP Certified Sun Certified Systems Administrator for Solaris 8

1 0

Re: Call for papers - Second Nordnog
by Kurt Erik Lindqvist 11 Nov '02

11 Nov '02

This was the call for papers.... - kurtis - On måndag, nov 11, 2002, at 16:10 Europe/Stockholm, Rasmus Aveskogh wrote: > > Unfortunately there's a 404 on > > http://www.nordnog.org/nordnog2/agenda.html > > -ra > > ----- Original Message ----- > From: Kurt Erik Lindqvist <kurtis(a)kurtis.pp.se> > Date: Monday, November 11, 2002 12:06 pm > Subject: Call for papers - Second Nordnog > >> >> >> >> (Apologies for eventual off-topic posting) >> >> The second Nordic Operator Conference, Nordnog-2, will be held 12- >> 13/2 >> 2003 at the Quality Globe Hotel in Stockholm, Sweden. For >> information >> on the hotel, please see http://www.globehotel.se/default_1.html. >> >> If you have something you want to present, please contact >> kurtis(a)kurtis.pp.se. To see the agenda, please look at >> http://www.nordnog.org. >> >> For registration please send email to register(a)nordnog.org with >> the >> followoing information : >> >> First name: >> Last name: >> Company: >> Attending Day1: >> Attending Day2: >> >> >> Best regards, >> >> - kurtis - >> >> >

1 0