November 1998 - Test - lists.nanog.org

I-D ACTION:draft-dube-route-reflection-harmful-00.txt
by Scott Huddle 06 Nov '98

06 Nov '98

Interesting reading. Has anyone observed this operationally? -scott ----- Begin Included Message ----- >From adm(a)ietf.org Thu Nov 5 11:15 EST 1998 Date: Thu, 05 Nov 1998 10:18:44 -0500 From: Internet-Drafts(a)ietf.org Subject: I-D ACTION:draft-dube-route-reflection-harmful-00.txt Sender: cclark(a)ns.cnri.reston.va.us To: IETF-Announce: ; Reply-to: Internet-Drafts(a)ietf.org MIME-version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="Boundary (ID_7WgSXfH+VQuKE2jHxl+2i) Content-Length: 2986 --Boundary_(ID_7WgSXfH+VQuKE2jHxl+2iQ) Content-type: TEXT/PLAIN Content-transfer-encoding: 7BIT A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Route Reflection Considered Harmful Author(s) : R. Dube, J. Scudder Filename : draft-dube-route-reflection-harmful-00.txt Pages : 5 Date : 04-Nov-98 Route reflection as defined by [2] is a popular way of reducing the full-mesh IBGP peering required by routers running the Border Gateway Protocol [1]. There are cases where a topology built using route reflectors produces persistent loops or does not produce the same results as what one would expect with a full IBGP mesh. This document describes these problems. Internet-Drafts are available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-dube-route-reflection-harmful-00.txt". A URL for the Internet-Draft is: ftp://ftp.ietf.org/internet-drafts/draft-dube-route-reflection-harmful-00.t… Internet-Drafts directories are located at: Africa: ftp.is.co.za Europe: ftp.nordu.net ftp.nis.garr.it Pacific Rim: munnari.oz.au US East Coast: ftp.ietf.org US West Coast: ftp.isi.edu Internet-Drafts are also available by mail. Send a message to: mailserv(a)ietf.org. In the body type: "FILE /internet-drafts/draft-dube-route-reflection-harmful-00.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --Boundary_(ID_7WgSXfH+VQuKE2jHxl+2iQ) Content-type: MULTIPART/ALTERNATIVE; BOUNDARY="Boundary_(ID_i1xvPY+rYZXJ++688kA3BQ)" --Boundary_(ID_i1xvPY+rYZXJ++688kA3BQ) Content-type: Message/External-body; access-type="mail-server"; server="mailserv(a)ietf.org" Content-Type: text/plain Content-ID: <19981104173505.I-D(a)ietf.org> ENCODING mime FILE /internet-drafts/draft-dube-route-reflection-harmful-00.txt --Boundary_(ID_i1xvPY+rYZXJ++688kA3BQ) Content-type: Message/External-body; directory=internet-drafts; access-type=anon-ftp; site=ftp.ietf.org; name=draft-dube-route-reflection-harmful-00.txt Content-disposition: ATTACHMENT; FILENAME=draft-dube-route-reflection-harmful-00.txt Content-Type: text/plain Content-ID: <19981104173505.I-D(a)ietf.org> --Boundary_(ID_i1xvPY+rYZXJ++688kA3BQ)-- --Boundary_(ID_7WgSXfH+VQuKE2jHxl+2iQ)-- ----- End Included Message -----

2 1

The trek across Canada
by jlixfeld＠industry.idirect.com 06 Nov '98

06 Nov '98

I'm looking for a cost-effective, highly reliable, high bandwidth, low latency solution for a link in Canada between Vancouver and Toronto. I have a couple of ideas: 1) Droping some type of high-speed interface into the frame-relay cloud of a third party network like AT&T, Sprint, MetroNet, or whoever provides this type of service. I think this would definetly be a scalable solution as it would allow us to put POPs anywhere we like in between and it would be as easy as running a circuit back into the frame cloud. The only issues with this is a) What are these networks like? Are they reliable? Are they fast? Is their a risk of them not being able to provide us with the bandwidth we paid for without performance loss due to lack of capacity (QoS)? 2) Assuming we buy our own fibre: Do we run a direct link between Toronto and Vancouver directly or drop a POP in between; somewhere in Saskatchewan or Manitoba and running fibre out of there to each? I may like the direct route from A to B but how pricy is that and how scalable is that? If we plan do put POPs into some some cities along the way we'd have to run pipes from those POPs back into either Toronto of Vancouver. If we go the route of A to B to C that would probably be a bit smarter as the haul from POP to POP wouldn't be so large. Is it common practice for the National ISP to lay their own pipe or is it more common practice to obtain the link from a third party? How do the UUNets, and BBNPlanets do it? They are not telcos so laying a pipe is not as easily justified. Do they buy fibre between A and B or do they even go through some sort of telco-like carrier?! If anyone has any ideas, opinions, experiences, or something to sell me I'd love to hear from you! Regards, ===( Jason Lixfeld )=======( Network Engineer - Internet Direct Canada )=== == == == Internet Direct Canada Inc. | JOIN the Toronto Internet Exchange!! == == 301-5415 Dundas Street West | FREE Bandwidth For Toronto area ISPs == == Toronto, Ontario M9B-1B5 CA | http://www.torontointernetxchange.net == == (416) 233-7150 (v) | "Building a Faster Internet" == == (416) 236-5804 (f) | == == == =========================================================================== == Internet Direct... A Different Kind of Internet Company. == ===========================================================================

2 1

ARIN?
by alex＠nac.net 05 Nov '98

05 Nov '98

Again, we are applying for more space from ARIN. Some of the questions we got from them range from "please provide a network map and/or customers justification as to why they needed a /24" to "please provide where your POPs are, how many dialups there are in that POP, and how many ports you have in that dialup." I'd love to know if larger places (UU? PSI? MCI? Sprint? etc) have to answer questions like this when they apply for space. I don't want to hear an answer from ARIN, I would like feedback from actual customers of ARIN. Thanks. -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP; we have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

12 13

Re: Telecom mapping tools...
by Robert Tarrall 05 Nov '98

05 Nov '98

"Michael L. Barrow" wrote: -> Some time ago, someone sent a URL for a company that designed mapping -> software. They also had several industry-specific versions that had COs -> and all sorts of fun stuff like that. Does anyone remember this? I can't -> find the reference (especially since the searchable archive at CCnet is -> busted!) I think Lode Data Corp might do this: http://www.lodedata.com/index.html -Robert Tarrall.- System/Network Admin E Central

1 0

Telecom mapping tools...
by Michael L. Barrow 05 Nov '98

05 Nov '98

Some time ago, someone sent a URL for a company that designed mapping software. They also had several industry-specific versions that had COs and all sorts of fun stuff like that. Does anyone remember this? I can't find the reference (especially since the searchable archive at CCnet is busted!) Please drop me a line if you have a reference for this. Thanks! -- Michael L. Barrow <mlbarrow(a)eni.net> Principal Security Engineer, Epoch Internet Corporate Security T:949.399.8413, F:949.474.8127 PGP Fingerprint = 6E56 4590 F1AF 0CCA 2563 07C2 26EF B164 F5C4 BE8C

1 0

Boot from 2nd partition on a cisco 4700?
by Dan Caldwell 05 Nov '98

05 Nov '98

Hello, Could someone please explain how to boot from the 2nd partition in flash on a cisco 4700? Is it even possible? Do I need to specify something in rommon, in the config, or both? I was only able to get the router to boot (from the first partition) by typing "boot flash: 2". Any assistance would be greatly appreciated. Here is what is in flash- un-named#sh flash System flash directory, partition 1: File Length Name/status 1 2362132 c4500-p-mz_111-11.bin [2362196 bytes used, 1832108 available, 4194304 total] 4096K bytes of processor board System flash (Read/Write) System flash directory, partition 2: File Length Name/status 1 2375940 c4500-p-mz_111-18.bin [2376004 bytes used, 1818300 available, 4194304 total] 4096K bytes of processor board System flash (Read/Write) This is how the config reads- boot system flash c4500-p-mz_111-18.bin boot system flash c4500-p-mz_111-11.bin Thank you, -Dan Dan Caldwell Network Support Engineer dan(a)agis.net Apex Global Internet Services (AGIS) Network Operations Center - (313)730-5151 Business Office/Sales (313)730-1130 sales(a)agis.net URL: http://www.agis.net/ If you follow the present day world, you will turn your back on the Way; if you would not turn your back on the Way, do not follow the world. -Takuan Soho.

1 0

Genuity response
by Richard Irving 05 Nov '98

05 Nov '98

Genuity responded FAST! (And BBN, GTE, and just some nice people) Thank you, everyone! ;)

1 0

Re: Rootshell pages hacked
by Alex P. Rudnev 05 Nov '98

05 Nov '98

Btw, it's of great interest for me too. On Thu, 5 Nov 1998, dhiraj murthy wrote: > Date: Thu, 5 Nov 1998 11:49:19 -0500 (EST) > From: dhiraj murthy <soa(a)funkytekno.exodus.net> > To: "Alex P. Rudnev" <alex(a)Relcom.EU.net> > Cc: Michael Freeman <mikef(a)boris.talentsoft.com>, > "Adam D. McKenna" <adam(a)flounder.net>, Joe Shaw <jshaw(a)insync.net>, > JR Mayberry <rick(a)magpage.com>, neil <neil(a)junior.uwc.ac.za>, > Russ Haynal <russ(a)navigators.com>, nanog(a)merit.edu > Subject: Re: Rootshell pages hacked > > I am trying to get ssh working with skey. anyone know where to get patches > to force 1.2.6 to do this? > > thanks, > > -dhiraj > > On Mon, 2 Nov 1998, Alex P. Rudnev wrote: > > > SSh withouth S/KEy or some kind of one time password is useless in case > > of any compromyse passwords (except the case when you'd like to restrict > > acxcess to the trusted set of hosts). SSH itself do not believe to be a > > problem, UNIX one-time passwords are real problem. Another bad problem is > > _the same UNIX password for all purposes_ - I can sniff your FTP password > > and use it for SSH access (for example). > > > > > > > > > > > > On Sat, 31 Oct 1998, Michael Freeman wrote: > > > > > Date: Sat, 31 Oct 1998 14:45:51 +0000 (Local time zone must be set--see zic manual page) > > > From: Michael Freeman <mikef(a)boris.talentsoft.com> > > > To: "Adam D. McKenna" <adam(a)flounder.net> > > > Cc: Joe Shaw <jshaw(a)insync.net>, JR Mayberry <rick(a)magpage.com>, > > > neil <neil(a)junior.uwc.ac.za>, Russ Haynal <russ(a)navigators.com>, > > > nanog(a)merit.edu > > > Subject: Re: Rootshell pages hacked > > > > > > It is not a fucking problem in SSH! Jesus christ, people do not listen. > > > If it had anything to do with ssh, heres what happened. (speculation) A > > > trusted host was compromised that Kit Knox or another rootshell staff > > > member used, ssh was trojaned and passwords were snagged, and the intruder > > > simply walked right in through the front door. Nothing sophisticated, > > > nothing fancy, no ssh remote exploits. > > > > > > On Thu, 29 Oct 1998, Adam D. McKenna wrote: > > > > > > > They claim they were running only qmail, apache and ssh, but who knows if > > > > that's true. > > > > > > > > I have heard rumours about an ssh exploit but nothing concrete. > > > > > > > > --Adam > > > > > > > > -----Original Message----- > > > > From: Joe Shaw <jshaw(a)insync.net> > > > > To: JR Mayberry <rick(a)magpage.com> > > > > Cc: neil <neil(a)junior.uwc.ac.za>; Russ Haynal <russ(a)navigators.com>; > > > > nanog(a)merit.edu <nanog(a)merit.edu> > > > > Date: Thursday, October 29, 1998 2:36 PM > > > > Subject: Re: Rootshell pages hacked > > > > > > > > > > > > I thought they were runnign qmail? > > > > > > > > Joe > > > > > > > > On Thu, 29 Oct 1998, JR Mayberry wrote: > > > > > > > > > Supposedly sendmail 8.9.1 is to blame, not ssh. > > > > > http://www.sendmail.com/sendmail.8.9.1a.html > > > > > > > > > > > > > > > > > > > > > > > > > > Aleksei Roudnev, Network Operations Center, Relcom, Moscow > > (+7 095) 194-19-95 (Network Operations Center Hot Line),(+7 095) 239-10-10, N 13729 (pager) > > (+7 095) 196-72-12 (Support), (+7 095) 194-33-28 (Fax) > > > > Aleksei Roudnev, Network Operations Center, Relcom, Moscow (+7 095) 194-19-95 (Network Operations Center Hot Line),(+7 095) 239-10-10, N 13729 (pager) (+7 095) 196-72-12 (Support), (+7 095) 194-33-28 (Fax)

4 4

Problems with peering sessions
by Richard Irving 05 Nov '98

05 Nov '98

Hi.... Genuity (3847) is currently a peer. The routing is *FOUL* however, GTE is doesn't seem to respond... And of course, all Genuity contacts have changed.... *SIGH* Does anyone have a clue before I source 150 meg smurf to attract attention... (Just kidding about the SMURF) Richard

1 0

None
by observer＠freeyellow.com 05 Nov '98

05 Nov '98

11/05/98 Y2K Solution! 8 Pine Circle Dr., Silicon Valley, Calif. OTC Company "TCFG" 21 st. Century Frontier Group has through several members of their administrative research department leaked vital information about their companies efforts. Everyone was tight lipped and interviews were refused, and through un-named sources we have learned that the technology and software solution are in the process of being patented! In over 1640 trials, using various data systems the use of the new technology and software solved the Y2K problem 100% of the time. This small publicly traded company "TCFG" which is just 3 years old is through various sources now negotiating with the "Big Boys"! "TCFG" the letters to look for........

1 0