December 1997 - Test - lists.nanog.org

ARIN will begin operations 12/22/97
by Kim Hubbard 10 Dec '97

10 Dec '97

The American Registry for Internet Numbers (ARIN) will initiate operations December 22, 1997, to provide Internet Protocol (IP) number administration and registration services for North America, South America, the Caribbean and sub-Saharan Africa. On this date, the Internet Assigned Numbers Authority (IANA) will transfer the authority for IP number administration from Network Solutions, Inc., administrator of the InterNIC, to ARIN. All IP requests received by the InterNIC, that are not processed prior to the close of business on Friday, December 19, will be forwarded from the InterNIC to ARIN. The InterNIC will make every attempt to complete all requests received by this date. As prepayment is a requirement for ARIN registration services, we encourage ISPs that have previously received address space directly from the InterNIC to pre-establish a customer account with ARIN. The account establishment process will open on December 10, 1997, and is limited to those ISPs that have previously received IP addresses directly from the InterNIC. This prerequisite is due to the fact that ARIN registration fees are based on the previous year's total allocation. All other organizations should establish customer accounts after they have been approved for address space from ARIN. To establish a customer account, use the Customer Account Procedures and Form or for more information about ARIN, please visit the ARIN website located at www.arin.net.

1 0

UUNET POP Down
by Dan Hubbard 10 Dec '97

10 Dec '97

UUNET has a "router hardware" problem in there LA POP. Has been down since around 10:35AM PST. They currently are working on it from the NOC --> ticket # UU570970. --------------- Dan Hubbard The Palace Inc.

1 0

Re: smurf
by Paul Ferguson 10 Dec '97

10 Dec '97

This is also mentioned in the *-03.txt version of the ingress filtering draft: ftp://ds.internic.net/internet-drafts/draft-ferguson-ingress-filtering-03.t… - paul At 03:13 PM 12/8/97 -0800, Craig A. Huegen wrote: > >It's a requirement per the RFC: > >(from my smurf paper) > >RFC 1812, >"Requirements for IP Version 4 Routers", Section 5.3.5, specifies: > >--- > A router MAY have an option to disable receiving network-prefix- > directed broadcasts on an interface and MUST have an option to > disable forwarding network-prefix-directed broadcasts. These options > MUST default to permit receiving and forwarding network-prefix- > directed broadcasts. >--- >

1 0

I'm looking for an event-driven DNS resolver (public-domain source)
by George Powers 10 Dec '97

10 Dec '97

I'm looking for some code to crib that'll give me an event-driven (non-blocking) DNS resolver, preferably one that caches. I've looked at the BSD bind resolver, but it is is process-based, and blocks while waiting for a reply.

3 2

charge for bgp feeds?
by Hui-Hui Hu 09 Dec '97

09 Dec '97

quick, probably off-subject question--but, do you know any backbone provider that charges to set up a bgp feed? private replies appreciated so as not to pollute the list. I always thought they were gratis but apparently I may not be up with the times. -h

1 0

Re: smurf
by Joe Provo - Network Architect 09 Dec '97

09 Dec '97

> ==>Dear vendors: > ==> > ==> GIVE A KNOB TO DO THIS, ACROSS THE BOARD, IN YOUR GEAR. > > It's a requirement per the RFC: [snip] You, I and many->most of the folks here know it, but as your paper notes that Bay isn't following 1812 yet, I'm noting Ascend doesn't (or isn't for all their platforms/wasn't comprehending when we were trying to get good answers from them). I don't know if the FORE code that does the Right Thing is in production yet. Joe

1 0

Re: smurf
by Joe Provo - Network Architect 08 Dec '97

08 Dec '97

[since Wayne passed the soapbox, I'll just borrow it for a few. NB: The following comments are my own, or belong to the last pot of coffee. Nothing at all to do with the source organization, machines, etc; ldisclaim, disavow, etc etc.] > For anyone who has not, PLEASE DISABLE DIRECTED BROADCASTS! [snip] Dear vendors: GIVE A KNOB TO DO THIS, ACROSS THE BOARD, IN YOUR GEAR. I seems like the kicking and shoving needs to start, so: Hats off to Cisco and OpenRoute/Proteon for having simple knobs that even customers can be told how to activate in their gear. Kudos to FORE for at least having the presence of mind to understand the problem and supply code the supports a knob to shut off the behavior. Brickbats to Ascend for supplying that answer "set up filters against the broadcast address". Anyone this side of catatonia can produce that answer; let's have a knob to shut it off either across the board or interface by interface. And no, just doing it on current-high-end-box doesn't cut it; supply a patch to the large installed base of CPE (pipe50es, etc) or else you haven't eliminated the issue for the majority of LAN interfaces attached to your product line. Joe "speaking for myself" Provo -30-

2 1

smurf
by Wayne Bouchard 08 Dec '97

08 Dec '97

Okay, so I'm now blocking 45 megs of icmp echo-reply packets at my borders.. At one point, this was 80,000 packets/sec. (No, I'm not exagerating.) <SoapBox> For anyone who has not, PLEASE DISABLE DIRECTED BROADCASTS! Tell a friend.. If you sell routers to clients and/or you configure them, include that in your default configuration. Encourage people to filter inbound ICMP where possible.. Do whatever it takes to work with your customer/peers to put a stop to this kind of abuse. Of all the attacks to date, this (and the recent land.c which is a different issue together) threaten the most disruption of internet services. With ISDN and DSL, users have the bandwidth necessary to generate even more dangerous levels of traffic. If you don't think this issue affects you, it does. If you're not a target, your probably being used as a source. </SoapBox> We thank you for your support.. ---------------------------------------------------------------------- Wayne Bouchard GlobalCenter web(a)primenet.com Primenet Network Operations Internet Solutions for (602) 416-6422 800-373-2499 x6422 Growing Businesses FAX: (602) 416-9422 http://www.primenet.com http://www.globalcenter.net ----------------------------------------------------------------------

10 10

Network Monitoring Tool
by Jared Mauch 08 Dec '97

08 Dec '97

I would like to announce the availability of my network monitoring tool version 0.78 to the public. This program does various great things that Rover and other such freeware unix tools should have implemented a long time ago :) It does monitoring of the following services: icmp, http, smtp, nntp, pop3, imap, and various udp and tcp port monitoring. (More test types are currently under development, such as nameservers, snmp tests, radius and xtacacs). The big advantage over most of the other tools out there is the ability to build network dependencies. Included is a brief config file example that you may want to use within your network: monitoring-eth-router.your.net ping localnet my@pager { core.router.my.net ping core2.router my@pager { mae-east.router.my.net ping mae-east my@pager mae-west.router.my.net ping mae-west my@pager } } There is various client software that has been built for talking to the monitoring server, include a java, (n)curses, and python clients that distribute with the program. I'm happy to take feature requests. If you have the time, and the need, could you please test and give your feedback to me? I think this will help make network operations go a little bit better for some of the folks out there, both large and small. I'm currently working on the next version that has major code revisions to speed up the checks further, but it currently beats out most of the monitoring tools that folks are using. You can obtain the program from: ftp://puck.nether.net/pub/jared/sysmon-0.78.tar.gz It should build on almost any UNIX machine out there, if you encounter problems, please let me know. I will take no more of your time, please direct comments, feedback and flames directly to me, i've set the reply-to: accordingly. - Jared

1 0

RE: Operational problem: active bridge between MAE-WEST and PAIX
by marki＠valuserve.com 08 Dec '97

08 Dec '97

My apologies to those effected, The problem has been fixed, and the offending port has been executed. Mark Ishikawa

1 0