- NANOG - lists.nanog.org

XO is broken
by Vadim Antonov 01 May '01

01 May '01

I mean it. XO Communications is a wonderful example of an organization so f*ed up that they cannot fix a simple static routing problem in a week. Anyway, it is very enlightening to be a real paying customer of an ISP, to see how much incredibly bad things are. Well, i guess i should start from the beginning - i've got my SDSL (finally) reconnected (another Northpoint casualty). Now, the lights are green, the signal is there, packets do not get in. Time to call Tech Support, The folks there are very polite and after the mandatory router config checkup i'm promised everything is going to be fixed the first thing tomorrow when the repair team shows up for work (hmmm... 9-to-5 repair? I've got a "business" service package, i expected somewhat better service). Tomorrow comes and goes, nothing happens. Calling XO Tech Support produces only yet another CPE config examination, and another promise. Next day -- nothing happens. Calling again, hearing apologies for the repair team inaction, more promises. Ok, next few days are spent explaining it excuriating details that yes, DSL side works, packets get out but incoming traffic goes to someplace nobody can positively identify. I'm asking to take a look at routing tables at the boxes A and B. Surprise! "Can't do it - we do not have access to these boxes". Closer examination shows that XO Tech Support cannot even tell if the customer link has a signal on it. Not because they don't know how to do it, but because "it is a highly expensive equipment and we are not given passwords so we won't break it". Yes, "highly paid certified engieers only" can look at the things. Tech support is administratively prohibited from LOOKING at the operational status and configs. I'm starting to wonder if they have an issue with trade unions but get no confirmation to that. Now, i ask to escalate. They oblidge. No useful result. I'm asking to put me in toch with someone who can actually do meaningful diagnostic, and told that no, sir, our policy is never let engineers to talk to customers. Well... Another escalation, supervisor promises to personally oversee the repair. Day later, packets are still routed to Elbonia. Talking to tech support completely lost any meaning - they're out of question, I exhausted all "options" to get hold of someone who can do things in that wretched organization. Along the way i'm lectured on how wonderful division of labour is, and how well it serves customers. So... Is there anyone in XO with a clue? Help? I do not need apologies, i need a working network. TT# 83008. Now, i'm still amazed by the humongous idiocy of an organization which prevents their front-line people from doing their job by taking away their tools; and lets their customers to be at a mercy of some shadowy group which never calls back and so has no chance to get any feedback. If i cannot even reach anyone in the _repair_ organization, i suspect that any really complex problem which needs a real engineer (not a certified monkey) won't be solved at all. --vadim PS. CEO of my employer also has a DSL line from XO. Also not working. Guess what chances XO has of getting our business (we're an ASP).

3 2

Web Based "BGP Toolkit" and "Peering Analysis"
by Randy Neals 01 May '01

01 May '01

I found this web site has some interesting tools which can generate routing reports and suggested BGP configs from a database containing Route Table, RADB and Registry Data. http://www.netconfigs.com/ The interesting stuff is under "AS Peering Analysis" and "Cisco BGP Config Toolkit". (I have no affiliation with this web page.) Regards, Randy ---------------------------------------------- Randy Neals Technology and Network Development Engineering GT Group Telecom Inc. Suite 800, 20 Bay Street Toronto, Ontario, Canada smtp://rneals@gt.ca/ voice://416.848.2693/ ---------------------------------------------- Group Telecom - Completely Connected (tm) http://www.gt.ca/ NASDAQ:GTTLB AS6539 ----------------------------------------------

2 1

Re: black hat .cn networks
by Kevin Day 01 May '01

01 May '01

> > whois -a AS 4134 > Data Communications Bureau (ASN-CHINALINK) > 40, Xue Yuan Lu > Beijing > 100083 > CN > > Autonomous System Name: CHINALINK > Autonomous System Number: 4134 > > Coordinator: > Wan, Jun (JW221-ARIN) dstanton(a)HQ.SI.NET > (861)-201-2994 (FAX) (861)-205-3995 > > Record last updated on 01-Dec-1994. > Database last updated on 28-Apr-2001 22:45:44 EDT. > > The ARIN Registration Services Host contains ONLY Internet > Network Information: Networks, ASN's, and related POC's. > Please use the whois server at rs.internic.net for DOMAIN related > Information and whois.nic.mil for NIPRNET Information. > > > craig Ok, that's freaky. # whois -a AS 4134 No match for "4134". %%%%%%%%%%%%%%%%%%% NO MATCH TIP %%%%%%%%%%%%%%%%%%%%%%%% % % % ALL OF THE POINT OF CONTACT HANDLES IN THE ARIN % % WHOIS END WITH "-ARIN", IF YOU ARE QUERYING A POINT % % OF CONTACT HANDLE PLEASE ADD -ARIN TO YOUR QUERY. % % % %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% The ARIN Registration Services Host contains ONLY Internet Network Information: Networks, ASN's, and related POC's. Please use the whois server at rs.internic.net for DOMAIN related Information and whois.nic.mil for NIPRNET Information. ARIN must be broken tonight. :) -- Kevin

3 2

In search of good data
by Sean Donelan 01 May '01

01 May '01

Gee, wouldn't it be nice if we had an information clearing house, so when the media gets on these kicks, someone could tell them.... CERT? Network Operators? Someone else? Web defacements were down today, DOS attacks continued at their normal rate and patterns. Internet traffic increased 0.1%, and 4 ccTLD's were off-line (as they've been for the last year). Currently, the "data" (aka Press Releases) are being generated by several security consulting firms, whose profitability depends on generating a lot of FUD Israel and Palestine based individuals (and perhaps groups) have been trashing each other's networks for the last year. Teenagers et al have been cracking things for decades. The WTO and the like have on-going protests. If you get mugged, its awful; but civilization doesn't end. So far the attacks appear to be nothing out of the ordinary. The cyber equivalent of throwing rotten eggs at the US Embassy. I suppose the fear in the "three-letter agencies" is it might provide cover for more crackers planting logic more sophisticated attacks. Imagine the headlines if this were to happen: "Chinese phreakers announce plans to call telephones in the USA and shout really, really loud. Security experts at iPhoneDefense warns people not to place the phone too close to their ears or permanent deafness may result. Because you never know if the next phone call might be from a Chinese phreaker ready to shout loudly in your ear, you should treat every call as potentially dangerous. iPhoneDefense also announced a new product, LoudPhone (tm). LoudPhone(tm) will assure customers of the latest in high-tech security by filtering not only Chinese, but also German and Italian shouts. This new, patent-pending, technology is exclusive to iPhoneDefense. A Ma Bell spokesperson assures country the telphone network can withstand loud phone calls. Ma Bell's spokesperson couldn't comment on iPhoneDefense's new LoudPhone(tm), however she did remind customers any unauthorized modification to a telephone could shutdown the entire phone network. And therefore, customers should use only Genuine Ma Bell phone accessories on their telephone. Genuine Ma Bell phone accessories are available in approved colors: black, green, ivory, and white.

1 0

RE: black hat .cn networks
by Segal, Mark 01 May '01

01 May '01

if it is actually based from there... Mark -- Mark Segal Director, Data and Internet Planning Axxent Corp. Tel: (416)907-2858 > -----Original Message----- > From: Dan Hollis [mailto:goemon@anime.net] > Sent: Monday, April 30, 2001 5:59 PM > To: 'nanog(a)merit.edu' > Subject: black hat .cn networks > > > > http://wired.com/news/politics/0,1283,43437,00.html > > Time to drop AS4134. > > -Dan > >

4 4

RE: black hat .cn networks
by Roeland Meyer 30 Apr '01

30 Apr '01

> From: Jim Mercer [mailto:jim@reptiles.org] > Sent: Monday, April 30, 2001 3:23 PM > > On Mon, Apr 30, 2001 at 03:11:25PM -0700, Dan Hollis wrote: > > On Mon, 30 Apr 2001, Roeland Meyer wrote: > > > How quickly can CN be firewalled anyway? > > > > As quickly as you can write route-map filters > > i don't know that it will be that easy. That's kind of my point ... > surely, not all of china connects through a single AS. My understanding is that CN has been looking for ways and means to firewall itself for years. It's not entirely fond of the wild and woolly Internet. > as well, i suspect that the same hackers would be able to > manage a dial-up into some extra-china ISP. This is exactly why CN has been unsuccessful in their quest.

1 0

Re: black hat .cn networks
by George William Herbert 30 Apr '01

30 Apr '01

Is it worthwhile to bother given the low rate and relatively low proficiency of attacks so far? They're trying to make a statement, sure, and doing some vandalism in the process. But it doesn't appear from any firsthand reports I have or news reports I've seen so far that any serious damage has been done anywhere. Dropping a country due to annoyance is a pretty serious step. If their ministry were directly encouraging all out serious attacks that would be a different thing, but I don't see any justification to do anything yet. Feel free to correct above impression of damage if you have better info than I do so far. -george william herbert gherbert(a)retro.com

1 0

Re: black hat .cn networks
by Walter Prue 30 Apr '01

30 Apr '01

The folks in the US who counterattack might be well advised to reconsider doing so. I would imagine that traffic from the US would be closely monitored. Any new hacking tricks that these counterattacks might use would then be recorded and analyzed. These techniques could then be used by them to further attack the US.

1 0

A bit off topic
by Bill Clary 30 Apr '01

30 Apr '01

A quick question, does anyone know of a good web based scheduling software package. I work in a lab environment and we have a lot of test equipment and class 5 switching facilities that need to scheduled, and was hoping to make it available in web format so our customers can look at availability in somewhat real time. Sorry for being off topic, but I felt the collective knowledge of this mailing list would surely have an answer of some sort. :) Best Regards, ^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^=^= ! Bill Clary Advanced Telcom Group NAIL ! Santa Rosa, Ca. Earth : bclary(a)atgi.net : 1.707.284.5055 ! NAIL= Network Architecture & Interoperability Lab

2 1

REQ: recomendations for WAN Q0S reference...
by Rich Sena 30 Apr '01

30 Apr '01

Name your favorite texts - please hit me privately I'll sumarize to the list if desired... -- Rich Sena - ras(a)thick.net ThickNET Consulting "On the way to understanding; you understand, and forget."

1 0