- NANOG - lists.nanog.org

Re: How do you stop outgoing spam?
by sal.sabella＠hushmail.com 10 Sep '02

10 Sep '02

"Marshall Eubanks" wrote: > When I am at a cafe I use a web based encrypted email program, and > if I email a large attachment (say a pdf file), then it goes http > outbound. When I am at a cafe, I eat, drink, and sometimes converse with others. > Again, when I go to a cafe in another city, I am generally there > to get some work done Again, when I go to a cafe in another city, I am generally there to eat, drink, converse, and soak in the local sights. I might be in Burbank next week on business. We should meet up then. Think you could get me tickets and a VIP backstage tour at the Tonight Show? I'd like to meet with NBC execs and weigh the pros and cons of multicasting your band's performance in PIM Dense vs. Sparse mode. You're a great musician BTW. Tell Jay I said hi. Sal Sabella Get your free encrypted email at https://www.hushmail.com

1 0

Deja vu all over again
by sal.sabella＠hushmail.com 10 Sep '02

10 Sep '02

"Pawlukiewicz Jane" wrote: > Quick Question, how much memory does the bgp tables actually take. I'm > estimating 32 mb in my plan, but I'm worried that's not enough. Jane, nothing with you is ever "quick". Rather than just searching google to find the answers to your silly questions, you have to waste all our time. I don't care what bet you have going with your boss, or how many full views you're attempting to cram into that 700 series ISDN router. Repeat after me, Jane: SEARCH FIRST, ASK QUESTIONS LATER. Sal Sabella Get your free encrypted email at https://www.hushmail.com

1 0

VU#210321
by CERT(R) Coordination Center 10 Sep '02

10 Sep '02

-----BEGIN PGP SIGNED MESSAGE----- Hello, The CERT/CC has recently seen discussions in a public forum detailing potential vulnerabilities in several TCP/IP implementations (Linux, OpenBSD, and FreeBSD). We are particularly concerned about these types of vulnerabilities because they have the potential to be exploited even if the target machine has no open ports. The messages can be found here: http://lists.netsys.com/pipermail/full-disclosure/2002-September/001667.html http://lists.netsys.com/pipermail/full-disclosure/2002-September/001668.html http://lists.netsys.com/pipermail/full-disclosure/2002-September/001664.html http://lists.netsys.com/pipermail/full-disclosure/2002-September/001643.html Note that one individual claims two exploits exist in the underground. At this point in time, we do not have any more information, nor have we been able to confirm the existence of these vulnerabilities. We would appreciate any feedback or insight you may have. We will continue to keep an eye out for further discussions regarding this topic. FYI, Ian Ian A. Finlay CERT (R) Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA USA 15213-3890 -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use Charset: noconv iQCVAwUBPX3/VqCVPMXQI2HJAQFEqQQAr54e9c5SGgrIfmK5+EWqSOdvySKRtjwa 6dE4Z4DcoyHS57W5BEwW2OSXSGwrBL+mzippfTEnwAVT/otLYAADsnlPSQioRYNi qHVh8yRXgh3kBgx3cMdhe3NC6zaSWffOsc/EvhkCDo2xa8FQItOqE5MjOeASjt1L st5qq4mgM+E= =kHt1 -----END PGP SIGNATURE-----

2 2

Talked about this before
by Pawlukiewicz Jane 10 Sep '02

10 Sep '02

Hi, Quick Question, how much memory does the bgp tables actually take. I'm estimating 32 mb in my plan, but I'm worried that's not enough. Thanks, Jane

7 7

What have we learned in 3 decades? Not much.
by Valdis.Kletnieks＠vt.edu 09 Sep '02

09 Sep '02

The guys who did the Multics penetration tests for the Air Force have re-released it, with commentary on what 30 years has changed (and more importantly, not changed). Most depressing quote: Thus, systems that are weaker than Multics are consid- ered for use in environments in excess of what even Mul- tics could deliver without restructuring around a security kernel. There really seem to be only four possible con- clusions from this: either (1) today's systems are really much more secure than we claim; (2) today's potential attackers are much less capable or motivated; (3) the in- formation being processed is much less valuable; or (4) people are unwilling or unable to recognize the compel- ling need to employ much better technical solutions. http://domino.watson.ibm.com/library/cyberdig.nsf/papers/FDEFBEBC9DD3E35485…

1 0

IP address fee??
by Owens, Shane (EPIK.ORL) 09 Sep '02

09 Sep '02

Quick question, does there exist a practice of charging customer for IP address blocks used? My theory is that the first Class C is included with the service, but I'm wondering what happens when the customer wants 2,3,4 or more? Shane

31 66

Network Attacks
by Manolo Hernandez 09 Sep '02

09 Sep '02

How are you all handling network attacks from say China? We had attack today from China Aerospace. RIPE said it was unallocated, ARIN said it was APNIC, APNIC has no valid info on them. What can one do? -- Manolo Hernandez - Network Administrator "The only source of knowledge is experience." - A. Einstein

3 2

Praise to XO's Security/Abuse
by John M. Brown 09 Sep '02

09 Sep '02

Jason at XO's security/abuse staff. Very helpful chap Solved a problem with a downstream client of theirs that was pounding a network I help out.... Yes, I know off topic, but more on topic as this list SHOULD be about people HELPING people do good in these difficult times. YMMV, but I'm happy. Have a great day John Brown Chagres Technologies, Inc

4 3

re: Internet connection secure from surveilance?
by John Palmer 09 Sep '02

09 Sep '02

Here is my reply to Joe Your solution is good. In general, anyone worried about this kind of invasion of privacy should arrange to run their own root servers. The more the merrier. This is not neccessarily about having multiple roots with colliding TLDs, but about security from surveillance. One discouraging fact is that even if everyone moves to localized root servers, the USG still controls the servers for .COM/.NET and .ORG as well as, most definitly .GOV and .MIL. The same trick that they can play at the root server level can also be played at the gtld-server level. They can just rig [A-M].GTLD-SERVERS.NET instead of the roots. They may not be able to capture all of the traffic that a user generates, but most of it, since most websites/domains are in the "big three" and those are controlled by USG. John ----- Original Message ----- From: <baptista(a)dot-god.com> To: <ga(a)dnso.org> Sent: Monday, September 09, 2002 11:28 Subject: [ga] is your Internet connection secure from surveilance? > I have attached a draft PDF file addressed to Canada's privacy and > information commissioners which outlines my concerns respecting privacy > issues in root operations. > > I would welcome any comments. Please email them directly to me. > > kindest regards > joe baptista >

1 0

RE: National Moment of Silence
by Chris Boyd 09 Sep '02

09 Sep '02

I doubt that the Kazaa servents will get shut down either. > -----Original Message----- > From: Greg Maxwell [SMTP:gmaxwell@martin.fl.us] > Sent: Monday, September 09, 2002 1:14 PM > To: Hank Nussbacher > Cc: nanog(a)merit.edu > Subject: Re: National Moment of Silence > > > On Mon, 9 Sep 2002, Hank Nussbacher wrote: > > > Is anyone planning on measuring backbone loads during the National > Moment > > of Silence at 8:46 a.m. Eastern Standard Time on 9/11? > > > > -Hank > > Moment of slience? backbone loads? > ... When a user on a network HTTP GETs a porno, and no one polls their > SNMP counters, does it make a sound? >

1 0