- NANOG - lists.nanog.org

Re: question about per. hack
by Paul A Vixie 22 Jul '97

22 Jul '97

> Paul A Vixie wrote: > > i asked all the root name servers about PER. this is what they said: > > ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10 > > ok, so the same is true of nasa.com. all the roots return NXDOMAIN > (except J.ROOT-SERVERS.NET) and yet many nameservers > (presumably not running the fixed bind) return NOERROR for it. yes. > so slowly Im realizing that whoever is doing this must be > contacting each and every nameserver individually and > giving them bad data. is this true? yes, that is what alternic is doing. they are sending queries about their own names to every nameserver they can learn about, and then when the victim queries alternic's nameserver they get back bogus additional data. older name servers (older than 4.9.5-P1, really, but 4.9.6 and 8.1.1 are the current versions so those are the ones you should upgrade to) ignore the bogus additional data. > has anyone documented exactly how all this has played out in > the last week. it seems like there is a lack of public discussion > on just how bad what the alternic is doing is... i think this is the first time. i'm cc'ing NANOG since several folks there are wondering exactly why i think the FBI should get involved and why i think eugene kashpureff should be jailed. (i have the packet traces to prove all of the above, from multiple servers.) what i'm terribly confused about is why MCI won't just cut them off. what alternic is doing is a violation of MCI's AUP, as well as of law and morality.

8 10

RE: is there a market for this?
by Jacques Vidrine 22 Jul '97

22 Jul '97

FWIW, I can't confirm this at this second, but I believe that at least the cisco 7200 series routers have a three PCI bus backplane. And it is claimed to support an OC-3c VIP2 port adapter, although I haven't put mine in action to try yet (and when I do I won't be running anywhere near 155 Mbps anyway). A single VIP2 port adapter can only connect to one of the three buses, so presumably cisco believes that PCI is up to the task. I don't know what the clockrate is, and I don't know if it is 32-bit or 64-bit. > -----Original Message----- > From: Jeremiah Kristal [SMTP:jeremiah@corp.idt.net] > Sent: Monday, July 21, 1997 5:40 PM > To: Chris Wilson > Cc: Perry E. Metzger; nanog(a)merit.edu > Subject: Re: is there a market for this? > > On Mon, 21 Jul 1997, Chris Wilson wrote: > > > Actually, I've seen a PCI-based box doing 15MByte/sec sustained > read/write > to disk, so it is possible to do it, but it's not likely to be > standard > for quite a while. I certainly think that an OC-12 card would be > overkill > though. I'm also wondering why someone who can afford an OC-x would > be > trying to save a couple bucks by using a PCI-based router. > Once you get into this type of bandwidth, I think a bus becomes a > serious > chokepoint. > >

3 2

Adaptec ATM155 for PCI
by troberts＠webtv.net 22 Jul '97

22 Jul '97

Best Regards, Timothy Roberts President Digital Delivery Network (DDN) L.L.C. Putting the puzzles of the future together. http://www.adaptec.com/atm/d_sheets/980209-041.html

1 0

Usage Stats
by Shaun S. Amini 22 Jul '97

22 Jul '97

We have created our own home grown tools to provide utilization stats for clients. Is there a real product out there that can handle the task properly? Preferably one that runs on the NT platform. Shaun

1 0

Dual homing, BGP4 questions--I need help
by netops 22 Jul '97

22 Jul '97

I'm charged with the task of finding out about dual homing and BGP4. We currently have a reliable internet connection with our ISP, but are looking to sign up another ISP for redundancy. Can anyone help me figure out how to maximize redundancy with BGP4? For instance, what kind of questions should I be asking a potential second ISP? Am I on the right track if I insist that the second ISP is coming into our router from a different fiber line than our current ISP? If so, how much more in-depth can I get to make sure that the second ISP is as "different" from our current one (eliminating single points of failure). If ANYONE can help me wrestle with this dual homing issue (I'm very new at all this), I would really appreciate it! Thanks! Lincoln Silver FlyCast Communications Corporation www.flycast.com 123 Townsend Street, Suite 226 San Francisco, CA 94107 (415) 975-5374

3 2

Re: is there a market for this?
by salo＠msc.edu 21 Jul '97

21 Jul '97

> Date: Mon, 21 Jul 1997 18:02:46 -0400 (EDT) > From: Chris Wilson <cbw(a)atlantic.net> > Subject: Re: is there a market for this? > [...] > I was (somewhat) following a dicussion about high speed communications > handled over the PCI bus, and there's a company that makes T1/T3-level > serial cards for PC's, and from what they were saying, there's no way to > reach even a full T3 worth of bandwidth on a PCI bus, so I think trying to > push an OC-# connection over it might be pushing it a bit ;) This doesn't sound right. As some random data point, we have run ~70 Mbps (ttcp) using ATM as well as Fast Ethernet between 133 MHz Pentiums. I suspect that a faster Pentium would fill an OC-3c ATM link. -tjs

2 1

Re: Greg Woods... where are you?
by Jay R. Ashworth 21 Jul '97

21 Jul '97

On Mon, Jul 21, 1997 at 03:57:30PM -0400, Greg A. Woods wrote: > > |------------------------- Failed addresses follow: ---------------------| > > <woods(a)weird.com> ... transport smtp: 550 '<jra(a)scfn.thpl.lib.fl.us>SIZE=2483' sender address target 'scfn.thpl.lib.fl.us' is not a valid domain (no MX record). > > The error says exactly what it means. (FYI I've had it up to here with > spam and I'm not accepting mail from anyone who can't get their DNS right.) I dislike to have to correct hats, but... get a real mailer. Script started on Mon Jul 21 17:28:47 1997 bash$ ns Default Server: ns1.thpl.lib.fl.us Address: 204.198.80.2 > set q=any > scfn.thpl.lib.fl.us. Server: ns1.thpl.lib.fl.us Address: 204.198.80.2 scfn.thpl.lib.fl.us mailbox = bbrush.scfn.thpl.lib.fl.us text = contact.thpl.lib.fl.us scfn.thpl.lib.fl.us CPU = SPARCstation 20/51 OS = SunOS 4.1.4 scfn.thpl.lib.fl.us internet address = 204.198.80.3 thpl.lib.fl.us nameserver = ns1.thpl.lib.fl.us ns1.thpl.lib.fl.us internet address = 204.198.80.2 > exit script done on Mon Jul 21 17:29:13 1997 > Your DNS is rather sparse of MX records. You might want to add at least > the following as well: > > thpl.LIB.fl.us. MX 1 scfn.thpl.lib.fl.us. > scfn.thpl.LIB.fl.us. MX 1 scfn.thpl.lib.fl.us. > > Either that or use a return address of <jra(a)ns1.thpl.lib.fl.us> > (i.e. the "MAIL FROM:" address given in the SMTP envelope). The return address you should have had was "jra(a)baylink.com". baylink.com MX's to scfn.thpl.lib.fl.us, which is an A record. $ ns -q=any baylink.com Server: ns1.thpl.lib.fl.us Address: 204.198.80.2 baylink.com origin = ns1.thpl.lib.fl.us mail addr = jra.scfn.thpl.lib.fl.us serial = 960502 refresh = 3600 (1 hour) retry = 300 (5 mins) expire = 3600000 (41 days 16 hours) minimum ttl = 3600 (1 hour) baylink.com nameserver = ns1.thpl.lib.fl.us baylink.com CPU = SPARCstation 20/51 OS = SunOS 4.1.3_U1 baylink.com mailbox = jra.scfn.thpl.lib.fl.us text = contact.baylink.com baylink.com preference = 1, mail exchanger = scfn.thpl.lib.fl.us baylink.com nameserver = ns1.thpl.lib.fl.us ns1.thpl.lib.fl.us internet address = 204.198.80.2 scfn.thpl.lib.fl.us internet address = 204.198.80.3 Apologies to the NANOG list, but until Greg makes his mailer a littl less (incorrectly) anal-retentive, he otherwise won't see this... and I'd hate for an ops guy not to know that his gear is configured wrong. :-) Cheers, -- jra -- Jay R. Ashworth jra(a)baylink.com Member of the Technical Staff Unsolicited Commercial Emailers Sued The Suncoast Freenet "People propose, science studies, technology Tampa Bay, Florida conforms." -- Dr. Don Norman +1 813 790 7592

1 0

Greg Woods... where are you?
by Jay R. Ashworth 21 Jul '97

21 Jul '97

Greg? -----Forwarded message from MAILER-DAEMON(a)whome.planix.com----- Received: from whome.planix.com (whome.planix.com [204.29.161.33]) by scfn.thpl.lib.fl.us (8.8.5/8.6.5) with ESMTP id NAA12815 for <jra(a)scfn.thpl.lib.fl.us>; Mon, 21 Jul 1997 13:56:45 -0400 (EDT) Received: from whome.planix.com by whome.planix.com via sendmail with bsmtp id <m0wqMkm-000BviC(a)whome.planix.com> for <jra(a)scfn.thpl.lib.fl.us>; Mon, 21 Jul 1997 14:00:12 -0400 (EDT) (Smail-3.2.0.95 1997-May-7 #5 built 1997-May-17) Message-Id: <m0wqMkm-000BviC(a)whome.planix.com> Date: Mon, 21 Jul 1997 14:00:12 -0400 (EDT) From: <MAILER-DAEMON(a)whome.planix.com> To: jra(a)scfn.thpl.lib.fl.us Subject: mail failed, returning to sender Reference: <m0wqMkR-000BvWC(a)whome.planix.com> |------------------------- Failed addresses follow: ---------------------| <woods(a)weird.com> ... transport smtp: 550 '<jra(a)scfn.thpl.lib.fl.us>SIZE=2483' sender address target 'scfn.thpl.lib.fl.us' is not a valid domain (no MX record). |------------------------- Message text follows: ------------------------| Received: from scfn.thpl.lib.fl.us(really [204.198.80.3]) by whome.planix.com via sendmail with esmtp id <m0wqMkR-000BvWC(a)whome.planix.com> for <unknown>; Mon, 21 Jul 1997 13:59:51 -0400 (EDT) (Smail-3.2.0.95 1997-May-7 #5 built 1997-May-17) Received: (jra@localhost) by scfn.thpl.lib.fl.us (8.8.5/8.6.5) id NAA12436; Mon, 21 Jul 1997 13:55:04 -0400 (EDT) Message-ID: <19970721135504.43049(a)scfn.thpl.lib.fl.us> Date: Mon, 21 Jul 1997 13:55:04 -0400 From: "Jay R. Ashworth" <jra(a)scfn.thpl.lib.fl.us> To: "Greg A. Woods" <woods(a)weird.com> Cc: David Holtzman <dholtz(a)internic.net>, nanog(a)merit.edu, namedroppers(a)internic.net Subject: Re: NSI bulletin 097-004 | Root Server Problems References: <m0wqANG-00076zC(a)most.weird.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.76e In-Reply-To: <m0wqANG-00076zC(a)most.weird.com>; from "Greg A. Woods" <woods(a)most.weird.com> on Mon, Jul 21, 1997 at 12:47:06AM -0400 Organization: Ashworth & Associates, St Pete FL USA [ body snipped ] -----End of forwarded message----- Huh? Cheers, -- jra -- Jay R. Ashworth jra(a)baylink.com Member of the Technical Staff Unsolicited Commercial Emailers Sued The Suncoast Freenet "People propose, science studies, technology Tampa Bay, Florida conforms." -- Dr. Don Norman +1 813 790 7592

1 0

RFP guidelines for backbone routers
by Cheryl 21 Jul '97

21 Jul '97

I am looking for pointers to help me put together an RFP for a large corporate intranet. The backbone will be OC12 ATM. I am looking for guidance in writing the specs for the level 3 stuff - central routers and edge boxes. Are there any shell documents for such known to be available? I could surely use it for a sanity check on my own attempts to write a document. Thanks, Cheryl email: cheryl(a)compuserve.com

1 0

UK Web Press coverage of the NSI root outage
by Jay R. Ashworth 21 Jul '97

21 Jul '97

The text of a website article pointed out to the list last week was: > > > A series of major systems failures in the week ending July 18 have > > > called Internet security and robustness into question. Problems > > > started over the weekend of July 12 and 13 when a hacker is > > > believed to have penetrated the Internet's root nameserver, causing > > > severe disruption of the entire Domain Name system. E.mail messages > > > to .com and .net and attempts to access .com and .net sites > > > received 'unresolvable address' or 'host unreachable' responses. I wrote these folks a note, sufficiently vitriolic that I'm almost embarrased to include it here, pointing out that perhaps that article could have used a _bit_ more research... and got this reply: On Mon, Jul 21, 1997 at 10:26:38AM +0000, MMP wrote: > When an editor returns from vacation, there's always one major error > to deal with. I guess the InterNIC news item is my problem. I have > spoken with the responsible news writer and will be removing the > item from our server. <chuckle> > Quality journalism is so often enhanced by quality readership Nicely done. I'm carboning your response to the NANOG mailing list, where the original pointer was raised. > Thanks for your letter No problem. > Andrew Craig > Editor > -- > Andrew Craig Phone: +44 (0)1273 380040 > Editor Fax: +44 (0)1273 380043 > Internet IT Informer Email: andrew-craig(a)mmp.co.uk > http://www.mmp.co.uk/mmp Cheers, -- jra -- Jay R. Ashworth jra(a)baylink.com Member of the Technical Staff Unsolicited Commercial Emailers Sued The Suncoast Freenet "People propose, science studies, technology Tampa Bay, Florida conforms." -- Dr. Don Norman +1 813 790 7592

1 0