- NANOG - lists.nanog.org

Re: OT: Secret email?!
by Steven M. Bellovin 30 Nov '01

30 Nov '01

In message <E9BBE0941932D511934C0002A52CDB4E0127F6B2(a)sj-exchange.wyse.com>, Joe Blanchard writes: > >Greetings all > >I know this might have been brought up before so please disregard if > so. Thought it might be of interest to some. > > While looking for ways to indicate that nimda/codered ect was >pushed to a client within my network, I tripped across something >completely unrelated, but interesting. > >It seems these email clients that utilize html formating also >send out information unknowingly. I know nothing new, but heres >the senario. A spam email arrives, client opens/previews the email >and its pretty gifs/jpgs ect, while at the bottom a link is retrieving >what looks like a logo. Example: > ><a href="http://www.em5000.com"><img >src="http://www.em5000.com/counter.php?client=newhorizons&email=myemail@addy >.com&msgid=281101000" width="109" height="16" border="0" >alt="em5000.com"></a> > >What it does in fact is send information to a host >(from the firewall's view): >> 12:54:01: %PIX-5-304001: 10.1.1.10 Accessed URL >> 66.77.58.92:/counter.php?client=newhorizons&email=myemail@domain.com&msgid >> =281101000 >> >(from the host's view): >GET /counter.php?client=newhorizons&email=myemail(a)domain.com&msgid=281101000 >HTTP/1.1 > >which in turn (I suppose) places my email address into a database thats used > >for spaming. i.e. verifying that my email address is valid. While watching >for this behavior, I saw about 10 other nodes/users do this, none of which >knew the information had been sent out. Kind of sneaky if you ask me. Yup -- that's why I turn off images on those rare occasions that I bother to read html email. --Steve Bellovin, http://www.research.att.com/~smb Full text of "Firewalls" book now at http://www.wilyhacker.com

1 0

RE: Followup British Telecom outage reason
by Youse, Chuck 30 Nov '01

30 Nov '01

You'll forgive me for being cynical here, but I seriously doubt that any Linux-derived operating systems could truly qualify as 'real-time'. To meet the requirements for an RTOS, Linux would have to be so heavily mutated that it would no longer be Linux. Cheers Chuck -----Original Message----- From: Patrick Greenwell To: Christian Kuhtz Cc: Alex Bligh; Paul Vixie; nanog(a)merit.edu Sent: 29/11/01 07:49 Subject: RE: Followup British Telecom outage reason On Wed, 28 Nov 2001, Christian Kuhtz wrote: > > > I guess some time someone will realize routers are both > > hardware, and software, and shock horror both, if done > > well, can actually add value. [hint & example: compare the > > scheduler on, say, Linux/FreeBSD, Windows 95 (sic), > > and your favourite router OS (*); pay particular attention > > to suitability for running realtime, or near realtime tasks, > > where such tasks may occasionally crash or overrun their > > expected timeslice; note how the best OS amongst the > > bunch for this aint exactly great]. > > > > (*) results may vary according to personal choice here. > > Don't use a non-realtime OS for something that you expect realtime or > near-realtime OS functionality. There are specific systems to address these > kinds of needs with rather complicated scheduling mechanism to accomodate > such requirements in a sensible manner. > > Is IOS a realtime operating system? No. Are any of the other listed OS > realtime operating systems? No. Actually there are multiple Linux-based RTOSes.

3 2

RE: bgp geopolitical analysis (warning: zero operational content. or so.)
by Pickett, Mclean 29 Nov '01

29 Nov '01

How about mapping BGP info to Per Capita Income. I imagine you might see a better correlation there. McLean -----Original Message----- From: k claffy [mailto:kc@ipn.caida.org] Sent: Tuesday, November 27, 2001 9:46 PM To: nanog(a)nanog.org Cc: elfcore(a)caida.org Subject: bgp geopolitical analysis (warning: zero operational content. or so.) one of caida's elves (brad) did a cool visualization of demographic measures of Internet resources, stratified by continent with substratification by country (with help of CIA factbook, RouteViews, and NetGeo). http://www.caida.org/analysis/geopolitical/bgp2country/ measures: geographic area, human population, GDP, phones-in-use, ASes, ISPs, prefixes, addresses.... nothing overwhelmingly surprising here but compelling nonetheless (yes, it turns out data can be both) k // things are not what they seem to be, nor are they otherwise. -lankavatara sutra //

4 4

bgp geopolitical analysis (warning: zero operational content. or so.)
by k claffy 29 Nov '01

29 Nov '01

one of caida's elves (brad) did a cool visualization of demographic measures of Internet resources, stratified by continent with substratification by country (with help of CIA factbook, RouteViews, and NetGeo). http://www.caida.org/analysis/geopolitical/bgp2country/ measures: geographic area, human population, GDP, phones-in-use, ASes, ISPs, prefixes, addresses.... nothing overwhelmingly surprising here but compelling nonetheless (yes, it turns out data can be both) k // things are not what they seem to be, nor are they otherwise. -lankavatara sutra //

2 2

Re: Looking for a ping plotting tool for *nix
by Steven M. Bellovin 29 Nov '01

29 Nov '01

In message <009e01c177bc$0df91830$9865fea9@49uzz>, "Mike Moglin" writes: > >http://www.pingplotter.com/download.html > As best I can tell, that's for Windows only. I wish there were a Unix version. >----- Original Message ----- >From: "mike harrison" <meuon(a)highertech.net> >To: "Troy Corbin" <troyc(a)titan.communitech.net> >Cc: <dani-post(a)roisman.com>; <nanog(a)merit.edu> >Sent: Tuesday, November 27, 2001 10:06 PM >Subject: Re: Looking for a ping plotting tool for *nix > > >> >> > Sample: >> > http://people.ee.ethz.ch/~oetiker/smokeping/smokeping.cgi >> >> Thanks.. I needed that also. WOW! --Mike- >> >> > > > --Steve Bellovin, http://www.research.att.com/~smb Full text of "Firewalls" book now at http://www.wilyhacker.com

3 2

[barney@databus.com: NYTimes.com Article: Engineers Suspect Diesel Fuel in Collapse of 7 World Trade Center]
by Barney Wolff 29 Nov '01

29 Nov '01

I'm sure there will be lessons from this, but not what they will be. Date: Thu, 29 Nov 2001 10:22:20 -0500 (EST) This article from NYTimes.com has been sent to you by barney(a)databus.com. Engineers Suspect Diesel Fuel in Collapse of 7 World Trade Center November 29, 2001 By JAMES GLANZ Engineers and scientists are trying to determine what role diesel fuel, ignited into an uncontrollable fire, had in the collapse of 7 World Trade Center. http://www.nytimes.com/2001/11/29/nyregion/29TOWE.html?ex=1008047340&ei=1&e… -- Barney Wolff "Nonetheless, ease and peace had left this people still curiously tough. They were, if it came to it, difficult to daunt or to kill; and they were, perhaps, so unwearyingly fond of good things not least because they could, when put to it, do without them, and could survive rough handling by grief, foe, or weather in a way that astonished those who did not know them well and looked no further than their bellies and their well-fed faces." J.R.R.T.

1 0

Anyone getting burned by Enron going under?
by Eric Germann 29 Nov '01

29 Nov '01

With the nearly imminent demise of Enron, does anyone see major impacts based on telecom's use of Enron Broadband services? Eric

1 0

out-of-band network experiences
by Michael Chang 28 Nov '01

28 Nov '01

Hello All, I would appreciate if you could share your experiences of settting up out-of-band management networks especially large # 50 - 100+ sites. Appreciate your experiences on the follwing and any other: - out-of-band network circuit going thru the same transport equipment as the managed network - topology (i.e Frame,ATM,leased circuits etc) - redundancy in out-of-band network for criticial monitoring ( Dual hub-spoke for redundancy etc, dial-on-demand with POTS, ISDN, wireless etc) - hierarchy with regional aggregation for out-of-band networks to reduce costs - SLAs for out-of-band monitoring -static routes versus dynamic protcols (RIP,OSPF, EIGRP) Michael Chang __________________________________________________ FREE voicemail, email, and fax...all in one place. Sign Up Now! http://www.onebox.com

3 2

RE: ACLs / Filter Lists - Best Practices
by Irwin Lazar 28 Nov '01

28 Nov '01

> jm> > jm> Is anyone aware of any current "best practices" related to the > jm> recommended set of filtering rules (Cisco ACL lists or Juniper filter > jm> sets) for reasons of Security, statistics collection, DoS attack > jm> analysis/prevention, etc.? I'm curious to see if there are any such I've got a collection of links to information on Cisco ACL's, including best practices, at: http://www.itprc.com/security.htm HTH, Irwin

1 0

Looking glass AS6762
by Pierfrancesco Caci 28 Nov '01

28 Nov '01

Hello, we finally have a looking glass. http://etabeta.noc.seabone.net/cgi-bin/lg.pl It's on Telecom Italia international backbone, as6762, seabone.net. Pf -- ------------------------------------------------------------------------------- Pierfrancesco Caci | System Administrator @ seabone.net p.caci(a)seabone.net | Telecom Italia S.p.A. - International Operations Linux paperino 2.4.16 #1 Mon Nov 26 16:28:11 CET 2001 i686 unknown

1 0