- NANOG - lists.nanog.org

Re: Totally OT, sorry; was (Re: Lack of Security)
by Dave Stewart 13 Sep '01

13 Sep '01

At 11:52 AM 9/13/2001, John Fraizer wrote: >The same goes for rental cars/trucks. And I think we need to concern ourselves about the response the first time a terrorist uses his rented Honda Accord to drive a trunkload of explosives into a restaurant, sports arena or monument/landmark... I don't know how we address that kind of threat.

2 1

Lack of Security
by Robert Hough 13 Sep '01

13 Sep '01

Been thinking about this a lot, and forgive me if it's already been brought up. However, one thing I've heard time and time again about this whole incident, is American people screaming about the lack of security. The security we display in most aspects of our society echo the same security we display in most of our networks as well. Look at Microsoft's Windows for instance. Probably one of the most insecure OS'es on the Internet at the moment. Yet, millions of people still tolerate it. Time and time again, it has been the target of attacks. However, Microsoft releases a flimsy patch, and tells us everything is going to be OK. A few months later (sometimes weeks or days), it gets nailed again. All of this, for convenience. Now ask yourself, why was it so easy to hijack these planes? Because we have sacrificed security for convenience - and our enemy used that against us. Well, something to chew on. G'Night. -- Robert Hough (rch(a)acidpit.org)

27 43

Multihoming w/ Verio
by Mike Stubbers 13 Sep '01

13 Sep '01

Could anyone experienced with multihoming with Verio please contact me off-list. We are using a Verio link as a customer fallback to another ISP link and I don't believe I'm seeing what I should be for routing advertisements. This is after changing our community setting with them as a customer fallback. re: http://info.us.bb.verio.net/routing.html Mae West looking glass no longer shows a path through AS2914 and I am wanting to make sure that the failover will happen if my primary link through AS101 goes down. I have attempted to work with Verio's frontline support with two separate calls which have not helped. They do say they see our network advertisements and are redistributing them in their IBGP, but they can not tell me why I don't see them externally. Another view at route-views.oregon-ix.net shows 2914 in the path, but with out a direct path back from Verio to me, it all flows through the 2914-701-101 path. I'm wanting to know if this is what I should be seeing. Any assistance would be appreciated. MAE-West Looking Glass Results Query: bgp Addr: 129.101.0.0 BGP routing table entry for 129.101.0.0/16, version 42538010 Paths: (10 available, best #10) Advertised to peer-groups: internal pop rr-pop 701 101 11808 165.117.64.114 (metric 220400) from 165.117.1.172 (165.117.1.172) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:228 2548:666 3706:170 701 101 11808 165.117.51.254 (metric 490800) from 165.117.1.165 (165.117.1.165) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:244 2548:666 3706:164 701 101 11808 204.255.168.117 (metric 310600) from 165.117.1.173 (165.117.1.173) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:327 2548:666 3706:168 1239 101 11808 165.117.1.230 (metric 450500) from 165.117.1.174 (165.117.1.174) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:203 2548:666 3706:168 701 101 11808 204.255.168.113 (metric 420500) from 165.117.1.139 (165.117.1.139) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:246 2548:666 3706:132 1239 101 11808 165.117.1.120 (metric 440505) from 165.117.1.120 (165.117.1.120) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:202 2548:666 3706:143 701 101 11808 165.117.68.190 (metric 445600) from 165.117.1.147 (165.117.1.147) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:254 2548:666 3706:102 701 101 11808 204.255.168.109 (metric 415400) from 165.117.1.199 (165.117.1.199) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:245 2548:666 3706:161 1239 101 11808 198.32.136.129 from 198.32.136.129 (144.228.105.5) Origin IGP, metric 69, localpref 100, valid, external Community: 2548:201 2548:666 1239 101 11808 198.32.136.11 from 198.32.136.11 (144.228.105.1) Origin IGP, metric 68, localpref 100, valid, external, best Community: 2548:201 2548:666 route-views.oregon-ix.net>sho ip bgp 129.101.0.0 BGP routing table entry for 129.101.0.0/16, version 444896 Paths: (47 available, best #31) Advertised to non peer-group peers: 128.223.162.75 ....clip... 267 2914 701 101 11808 204.42.253.253 from 204.42.253.253 (204.42.253.253) Origin IGP, localpref 100, valid, external Community: 267:2914 2914 701 101 11808 129.250.0.11 from 129.250.0.11 (129.250.0.11) Origin IGP, metric 9, localpref 100, valid, external Community: 2914:420 234 2914 701 101 11808 204.212.44.131 from 204.212.44.131 (204.212.44.131) Origin IGP, localpref 100, valid, external Community: 234:2914 2914 701 101 11808 129.250.0.6 from 129.250.0.6 (129.250.0.6) Origin IGP, metric 16, localpref 100, valid, external Community: 2914:420 701 101 11808 157.130.185.17 from 157.130.185.17 (137.39.3.117) Origin IGP, localpref 100, valid, external Mike Stubbers Network Analyst Supervisor, SCP Information Technology Services University of Idaho mikest(a)uidaho.edu 208-885-2122

1 0

RE: Don't blame Intelligence or Security Agencies.....
by Greg Mirsky 13 Sep '01

13 Sep '01

It is not Mossad's objective to secure EL Al's flights. Have you tried to get into El Al' terminal at JFK without a ticket? Greg -----Original Message----- From: alex(a)yuriev.com [mailto:alex@yuriev.com] Sent: Thursday, September 13, 2001 11:15 AM To: clarke Cc: nanog(a)merit.edu Subject: Re: Don't blame Intelligence or Security Agencies..... > The intelligence agencies in the United States are the best in the world. Mossad would disagree with you. Ever wondered why no one hijacks El Al flights? Alex

2 1

problem with shipment of spares
by Jim Mercer 13 Sep '01

13 Sep '01

we just heard that the air service up here (FirstAir northern canada), is not shipping cargo until "new security measures are in place". (air is the only transport here since there are no roads coming here, and shipping via boat is, well, not realistic due to a 4-5 month shipping window) which could mean until next week. we have spares which were ordered a while ago sitting on the other end, and have some requirements for other spares. i figured there might be other issues like this in other areas. -- [ Jim Mercer jim(a)reptiles.org +1 416 410-5633 ] [ Now with more and longer words for your reading enjoyment. ]

1 0

Re: Don't blame Intelligence or Security Agencies.....
by alex＠yuriev.com 13 Sep '01

13 Sep '01

> > > > The intelligence agencies in the United States are the best in the world. > > > > > > Mossad would disagree with you. > > > Ever wondered why no one hijacks El Al flights? > > > > I always thought it was due to two factors: > > > > 1) Proper security design at the airports that make all the obvious single-person > > low-tech attacks fairly unlikely to work, forcing the use of high-tech or > > conspiracy solutions. > > > > 2) The reluctance of anybody to be the on-the-ground part of a conspiracy or > > the seller of a high-tech solution, when you *know* that your continued life > > expectancy is very short unless you plan to spend the rest of your life hiding > > under a bush in one of the more inhospitable jungles of New Guinea. > > Not to mention the fact that ElAl has multiple armed air marshalls on > *every* flight. Right, and they are not afraid to use deadly force immediately. Alex

1 0

RE: Don't blame Intelligence or Security Agencies.....
by Hire, Ejay 13 Sep '01

13 Sep '01

I cannot begin to express how happy I am that the terrorists did not elect to carry-on a briefcase full of Anthrax or Botulinum Toxin. This would have easily magnified the effects of the disaster exponentially. Thought for the day: Botulinum Toxin is a bio-chemical weapon so powerful that 1 pound (properly distributed) would easily obliterate the eastern Seaboard. Manufacturing this "Mega-Weapon" is only slightly more complex than making liquor. -eh -----Original Message----- From: Ariel Biener [mailto:ariel@fireball.tau.ac.il] Sent: Thursday, September 13, 2001 5:59 AM To: clarke Cc: nanog(a)merit.edu Subject: Re: Don't blame Intelligence or Security Agencies..... On Thu, 13 Sep 2001, clarke wrote: > The intelligence agencies in the United States are the best in the world. This is actually not true. In order for anyone to get world class explosives, they would need to be well connected and to have access to explosives, that is, someone will have to supply them. Among these network of terrorists, some of them deal with supplying explosives, some with aquiring them, some with planning, some with other financial aspects. Like any other military (or large organization), they have a few departments. Most of the people are rather sane, and work in a more or less normal manner to do their "job". The ones carrying out the missions are the vast minority of such an organization. Intelligence gathering should and must be at the preliminary stage, by infiltrating such organizations, in any possible way. An operation of the size the US witnessed involved many people, at all levels of the organization. If the organization was well covered by the CIA/???, then the information would have reached them long time before the actual hit. This is what intelligence is all about. --Ariel > > Get your shit straight! > > ~ Clarke ~ > -- Ariel Biener e-mail: ariel(a)post.tau.ac.il PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html

2 1

OT: San Jose airport open for business
by woody＠zocalo.net 13 Sep '01

13 Sep '01

Duane Wessels and I are at SJC. We counted five United planes at gates and about a dozen Continental, as well as another half-dozen staged out on the tarmac. Other airlines are at the other terminal. All the gate areas are still fenced off and locked. The check-in counter staff believe that all United flights are cancelled for today (Thursday) from all airports, and are currently re-booking for flights starting at 6am Friday, however they're not optimistic about anything departing before 9am Pacific time. -Bill Please excuse the brevity of this message; I typed it on my pager. I could be more loquacious, but then I'd crash my car.

1 0

RE: Executive Order: power restoration
by Stanley, Jon 13 Sep '01

13 Sep '01

I have received unconfirmed reports from vendors of walls collapsing at 60 Hudson, again, unknown if this is true or not. -----Original Message----- From: Sean Donelan [mailto:sean@donelan.com] Sent: Thursday, September 13, 2001 9:30 AM To: nanog(a)merit.edu Subject: Executive Order: power restoration According to CNBC, President Bush has signed an executive order ordering the restoration of power to Wall Street. I can't find it on the Whitehouse.gov website yet. FEMA's website indicates that Con Edision requested additional portable generators. FEMA is shipping them to Manhattan. Any recent word on the power status to the major telecommunication hubs?

1 0

RE: Analysis from a JHU CS Prof
by Ron Buchalski 13 Sep '01

13 Sep '01

During an interview this evening on NBC, Tom Brokaw asked Donald Rumsfeld (Sec. of Defense) whether the US Military would be willing to provide security personnel on commercial jets. He responded that US Military personnel are trained for war, not to be security or police, and would not be deployed as security for commercial airlines. -rb >From: "Deepak Jain" <deepak(a)ai.net> >Subject: RE: Analysis from a JHU CS Prof >Date: Wed, 12 Sep 2001 16:53:14 -0400 > > > >I'm inclined to agree. Especially if the Marine is specifically trained for >air-terrorism scenarios, but I can't imagine that is the solution we as a >country will adopt. > >Deepak _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

3 2