- NANOG - lists.nanog.org

Informal poll on Route Filtering
by John Ferriby 07 Jan '02

07 Jan '02

Do you use SPEWS.ORG (or derived) information to create route filters? Their website portends that this is not uncommon. I'm trying to deduce just how common this practice actually is in reality. Please respond off-list and I will summarize back to the list. -John

1 0

Re: Blocking Internet Gaming
by sthaug＠nethelp.no 07 Jan '02

07 Jan '02

> We've had good luck here with the Packeteer packetshaper 6500. > > http://www.packeteer.com/products/packetshaper/index.cfm > > We use it mainly to control [not block] music download traffic. Anybody tried nmap against a Packet Shaper recently? I tried it against a box here which is no longer in service (not the 6500 model), and the result isn't exactly reassuring. Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no ---------------------------------------------------------------------- Port State Service 21/tcp open ftp 23/tcp open telnet 80/tcp open http 137/tcp filtered netbios-ns 138/tcp filtered netbios-dgm 139/tcp filtered netbios-ssn 520/tcp filtered efs 1024/tcp open kdm TCP Sequence Prediction: Class=64K rule Difficulty=1 (Trivial joke) Sequence numbers: 7E5BA800 7E5CA200 7E5E9600 7E5F9000 7E608A00 7E618400 Remote operating system guess: SunOS 4.0.3

3 2

Re: Blocking Internet Gaming
by Scott Gifford 07 Jan '02

07 Jan '02

"James" <james(a)james-web.net> writes: > What kind of games specifically? > > Like online Java games (Bejeweled)? Or games like Quake, Unreal, Tribes > etc? > > The latter is much easier, just block all traffic to/from the default > ports which use them. A quick google would yield what they use. I'll > give you a quick hint and say Quake3 is 29760-5 or so and Tribes1/2 is > 28000-28005 or so. Doesn't that cause trouble with occasionally blocking ephemeral ports? If you're not allowing incoming connections of any kind (including non-PASV FTP) it shouldn't matter, but blocking ports above 1024 always makes me nervous... ----ScottG.

5 4

Re: Blocking Internet Gaming
by Spencer.Wood＠dot.state.oh.us 07 Jan '02

07 Jan '02

>From our experience, the best product we have found is Websense. It works with Different Firewalls along with Proxy Servers. It's not 100% full proof, but it does a pretty good job.... The best feature is being able to select different types or categories of web sites, and when people can use them. Spencer ************************************************************ Spencer Wood, Network Manager Ohio Department Of Transportation 1320 Arthur E. Adams Drive Columbus, Ohio 43221 E-Mail: Spencer.Wood(a)dot.state.oh.us Phone: 614.387.0710/Fax: 815.361.0714/Pager: 866.591.9954 ************************************************************* wgray(a)wwns.net (Walter Gray) Sent by: owner-nanog(a)merit.edu 01/06/2002 08:03 PM To: <nanog(a)merit.edu> cc: Subject: Blocking Internet Gaming Does anybody know of any good software or way to restrict Internet gaming on a corporate Network?

2 1

Road Runner
by Andy Brezinsky 06 Jan '02

06 Jan '02

Hello, Does anyone have a contact for the NOC or a dns admin of Road Runner (Wisconsin)? One of their dns servers are reporting bad data. Regards, ~Andy Brezinsky ByteHosting Internet Services

1 0

ISP stats?
by bmanning＠vacation.karoshi.com 05 Jan '02

05 Jan '02

This isn't quite ISP specific but might be useful... http://www.ep.net/stats.html --bill

2 2

MetroIX Beta Testers
by Jeffrey Meltzer 05 Jan '02

05 Jan '02

Hi, We're looking for a few more ISP's to turn up some "test" peering at MetroIX in NYC. If you're currently at 60 Hudson or 25 Broadway (due to Enron's demise - where the 111 8th POP currently is, I don't want to turn anyone up there until we get the switch moved), and preferably do not currently peer at NYIIX, give me a shout off list. More info is available at http://www.metroix.net/ Jeff

1 0

HS protocol analyzer
by Mike Duckett 05 Jan '02

05 Jan '02

Looking for HS protocol analyzers options that can, minimally, filter real time traffic (e.g., ports, applications, sessions/conversations, byte/bit offsets) at rates up to and exceeding OC-3/12 and GigE. Being limited to a few seconds makes troubleshooting or analysis very difficult if not impossible. Our routers are able to keep up with a decent amount of "high touch" and still maintain the pace of traffic flow by employing accelerators (e.g., ASICs). Great.. Now, how do we troubleshoot problems?

1 0

The Cidr Report
by CIDR Report 05 Jan '02

05 Jan '02

This is an auto-generated mail on Fri Jan 4 23:00:01 PST 2002 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. NEW: Check http://www.employees.org/~tbates/cidr-report-region.html for the regional version of this report. NEW: Check http://www.employees.org/~tbates/autnums.html for a complete list of autonomous system number to name mappings as used by the CIDR-Report. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to GX Networks for giving me access to their routing tables once a day. Please send any comments about this report directly to CIDR Report <cidr-report(a)cisco.com>. ------------------------------------------------------------------------------ CIDR REPORT for 04Jan02 0) General Status Table History ------------- Date Prefixes 281201 104604 291201 104688 301201 104724 311201 104773 010102 104589 020102 104745 030102 104663 040102 104733 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 9125 Number of ASes announcing only one prefix: 4154 (4154 cidr, 0 classful) Largest number of cidr routes: 759 announced by AS701 Largest number of classful routes: 0 announced by 1) Gains by aggregating at the origin AS level --- 04Jan02 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS1221 1175 901 274 23.3% Telstra Pty Ltd AS701 1363 1136 227 16.7% UUNET Technologies, Inc. AS4151 308 172 136 44.2% USDA AS577 318 194 124 39.0% Bell Advanced Communications Inc. AS16473 198 77 121 61.1% Bell South AS7018 811 695 116 14.3% AT&T AS6595 171 61 110 64.3% DoD Education Activity Network As AS705 283 183 100 35.3% UUNET Technologies, Inc. AS17557 174 84 90 51.7% Pakistan Telecom AS7046 309 223 86 27.8% UUNET Technologies, Inc. AS19632 93 10 83 89.2% Metropolis Intercom S.A. AS8010 120 38 82 68.3% PublicNet Communications, Inc. AS4755 235 153 82 34.9% Videsh Sanchar Nigam Ltd. Autonom AS2048 185 105 80 43.2% State of Louisiana AS12302 108 32 76 70.4% MobiFon S.A. AS1239 466 392 74 15.9% Sprint AS724 231 166 65 28.1% DLA Systems Automation Center AS703 282 220 62 22.0% UUNET Technologies, Inc. AS3464 160 98 62 38.8% Alabama SuperComputer Network AS4200 113 56 57 50.4% Apex Global Information Services, AS16758 63 6 57 90.5% IKON Office Solutions AS3908 319 263 56 17.6% Supernet, Inc. AS13999 70 14 56 80.0% Mega Cable S.A. de C.V. AS6471 122 67 55 45.1% ENTEL CHILE S.A. AS19834 63 8 55 87.3% NetForce, Inc. AS4323 367 313 54 14.7% Time Warner Communications, Inc. AS1 509 455 54 10.6% BBN Planet AS2149 323 270 53 16.4% Performance Systems, Inc. AS209 297 246 51 17.2% Qwest AS7303 99 49 50 50.5% Telecom Argentina Stet-France Tel For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

teleglobe broken?
by Paul Nguyen 05 Jan '02

05 Jan '02

anyone able to use any of the routes they get from teleglobe right now? like at paix? -p

1 0