- NANOG - lists.nanog.org

Security of DNSBL spam block systems
by Big_Bandwidth 23 Jul '02

23 Jul '02

What are the security implications of someone hacking a DNSBL (Real-time-spam-block-list) and changing the block list to include (deny email from) some very large portion or all IPv4 space? Given that a signifigant number of the spam blocking lists seem to operate on a shoestring budget in someone's basement, how can we be assured that they have sufficient resources to secure their systems adequatley, and monitor for intrusion 24x7? Unless I am missing something, this would seem to be a real handy and centralized method for someone to interfere substantially with the proper operation of a few thousand email servers and hold up global email traffic for a few hours. -BB

2 1

Nanog traceroute format string exploit. (fwd)
by jeffrey arnold 23 Jul '02

23 Jul '02

This came through on bugtraq this afternoon. -jba __ [jba(a)analogue.net] :: analogue.networks.nyc :: http://analogue.net ---------- Forwarded message ---------- Date: Sun, 21 Jul 2002 14:09:24 +0200 From: SpaceWalker <spacewalker(a)minithins.net> To: bugtraq(a)securityfocus.com Cc: vuln-dev(a)securityfocus.com Subject: Nanog traceroute format string exploit. Hello, As the vulnerability has been published some weeks ago, and no working exploit has been released (the perl exploit was joke) I decided to release my private exploit. I do it only because -This exploit will never be used to haxor something because I never saw this traceroute used by default -This exploit find offsets "by the proper way" and doesn't place the target adresses in the format string. (and is interresting to study for beginners). Have phun, please don't haxor with it. SpaceWalker

1 0

Re: effects of NYC power outage
by Simon 22 Jul '02

22 Jul '02

I agree... I don't know why this is being discussed. I just thank -whoever- for 25bway still standing. -Simon On Mon, 22 Jul 2002 13:51:11 -0400 (EDT), Tuc wrote: >> >> >> >> >From what I recall, it failed due to a mechanical problem first... then after they fixed it >> and had it running for sometime, it ran out of fuel. >> >Hi, > > Ok, come on... That was 310 or so days ago. Exactly what happened >shouldn't be a huge concern anymore. They addressed it, fixed it, and are >making sure it doesn't happen again, thats the part we need to concentrate >on. > > Phil, you weren't even a customer then, were you? And for those >that didn't know/forgot.... I slept in the conference room the first 4 >days after it all happened... And I think given the severity and magnitude >of the event, they did a hell of a job. Only so much you can expect. > > Tuc/TTSG Internet Services, Inc. >

2 1

Anyone using Interspeed DSL gear?
by Vincent J. Bono 22 Jul '02

22 Jul '02

If anyone is using any Interspeed DSL equipment, please email me offline? Thanks, Vin

1 0

Cogent issues at AADS PVC 5.34?
by John Kristoff 22 Jul '02

22 Jul '02

We're currently experiencing significant latency through Cogent at AADS. I've heard they have some general latency issues, but nothing concrete yet as to what and where. Does anyone have any details of any problems while we're waiting for a response back from the NOC? Thanks, John

2 3

Re: Cogent issues at AADS PVC 5.34?
by Kyle C. Bacon 22 Jul '02

22 Jul '02

We received notification this morning that there were some problems with at least one of the ATM switch cards @ AADS. If it is getting worse, lets hope they fix it before their scheduled maintenance (this next weekend). k ------------- SBC/Ameritech NAP customers, We have been experiencing problems with the card that your circuit resides on. We are planning to swap it out on Sunday, July 28th at 12:01AM CST. With that you will experience a short outage. Thanks for your patience. Kevin Peterson ASI Technical Support John Kristoff <jtk(a)depaul.e To: nanog(a)merit.edu du> cc: Sent by: Subject: Cogent issues at AADS PVC 5.34? owner-nanog@m erit.edu 07/22/2002 01:49 PM Please respond to jtk We're currently experiencing significant latency through Cogent at AADS. I've heard they have some general latency issues, but nothing concrete yet as to what and where. Does anyone have any details of any problems while we're waiting for a response back from the NOC? Thanks, John

1 0

Re: Requirement to store email for 90 days.
by Daniel Senie 22 Jul '02

22 Jul '02

At 12:17 PM 7/22/2002, John Fraizer wrote: >http://www.theregister.co.uk/content/55/26217.html > >"Service providers are also required to keep customer records, including >emails, for 90 days, under the bill." "The bill has to go to Senate, >where it is expected to receive little opposition, before becoming law." Are you reacting to the contents of the bill (bill number?) or to the interpretations of a reporter? Could someone please cite the 90 days requirement in an actual bill? Not saying it's not there, but the bills I could find through Thomas don't seem to have any mention of this. I'm not calling my senators until I have precise citations. >Talk to your senators folks. See if they're going to pay for the disk >arrays required to store 90 days worth of SPAM for each and every one of >your customers. > >I suggest that congress get the spammers under control prior to enacting >legislation that requires us to archive all email for 90 days. > >--- >John Fraizer | High-Security Datacenter Services | >EnterZone, Inc | Dedicated circuits 64k - 155M OC3 | >http://www.enterzone.net/ | Virtual, Dedicated, Colocation | ----------------------------------------------------------------- Daniel Senie dts(a)senie.com Amaranth Networks Inc. http://www.amaranth.com

2 1

Requirement to store email for 90 days.
by John Fraizer 22 Jul '02

22 Jul '02

http://www.theregister.co.uk/content/55/26217.html "Service providers are also required to keep customer records, including emails, for 90 days, under the bill." "The bill has to go to Senate, where it is expected to receive little opposition, before becoming law." Talk to your senators folks. See if they're going to pay for the disk arrays required to store 90 days worth of SPAM for each and every one of your customers. I suggest that congress get the spammers under control prior to enacting legislation that requires us to archive all email for 90 days. --- John Fraizer | High-Security Datacenter Services | EnterZone, Inc | Dedicated circuits 64k - 155M OC3 | http://www.enterzone.net/ | Virtual, Dedicated, Colocation |

3 2

Act Surprised.....
by Jeff Workman 22 Jul '02

22 Jul '02

http://biz.yahoo.com/rb/020721/worldcom_bankruptcy_16.html -- Jeff Workman | jworkman(a)pimpworks.org | http://www.pimpworks.org

6 5

IP Options Needed?
by Matt Martini 22 Jul '02

22 Jul '02

-----BEGIN PGP SIGNED MESSAGE----- I am passing this question along from a friend who is in the process of designing some new network equipment. Any comments will be helpful. I will gather all the responses and send them to my friend. Thanks Matt > Also, IP operations question; > You are evaluating a router for purchase and initially it doesn't > support IP options (Unrecognized, stream ID, source route, record > route, time stamp , security). But it supports trace route and Ping. > What is the impact for you during the evaluation? And do you currently > disable IP options for security reasons on your routers that are in > the network. Any info on the subject is greatly appreciated. __________________________ http://www.invision.net/ _______________________ Matthew E. Martini, PE InVision.com, Inc. (631) 543-1000 x104 Chief Technology Officer matt(a)invision.net (631) 864-8896 Fax _______________________________________________________________________pgp_ -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.1i iQEVAwUBPTwv5GtXn16/JS7ZAQFrQAf+LiMIPIErEPAnyD2NoT6F/FJeEFMTemiX 2JN/F/Mmnw3eYo7i65NBDFWwAsJC0CXpcm/4vjmYQsGCl7HPp99qqWaY/iY26nOd +O2pFdKu0vaT/ElmLqatExDuMqnAgcPlnH1mVhd0jC4Woe+WTC0u+Zvpo5UvumPt rIssUy33qOGiE+9TYHPZmsYqhaLOQP6N3Iu6bm0rXIf/C4oslHtllJkbGzsUWnSE obRNBcDITrfe16+nowot77++CaNjI6DoFb/wGQb4SHDmsYvoVkMBL7ehIRDazOLj wk7R7GFL+e6KqA9rX4adWKTvsJDpYIuzZwX0LVAs77xUVxd1yazykQ== =sgON -----END PGP SIGNATURE-----

1 0