May 1998 - Test - lists.nanog.org

Re: Re (2): Core router bakeoff?
by Greg Ketell 11 May '98

11 May '98

Is this REALLY NANOG material??? sheesh enough already. GK >> That must mean... Yes! Tripp-Lite UPSes are also y2k compliant! They must >> be *much* better than those other UPS's. Perhaps someone should call >> Tripp-Lite to be sure they are y2k compliant... > >They are: they're bragging about it in their ads. > >Cheers, >-- jra

1 0

BGP & CIDR blocks
by Jon Lewis 11 May '98

11 May '98

Is it unreasonable of me to think it's awfully backwards of ANS.NET to require anyone getting a new CIDR block to physically call ANS's NOC and say "please listen to routes for this block from this AS"? First they told me "we don't trust BGP, so we use the various routing registries to build our routing tables." So I got our new block and our AS in radb.ra.net. A few days (and an ANS routing table update or two) go by, and still we have no connectivity to ANS. Then I get an email from them asking me to please call thier NOC to verify that they really should listen to our route. Isn't the point of BGP that you don't have to manually take care of routing updates? Are there other backbones I need to call to make sure they see our routes? ------------------------------------------------------------------ Jon Lewis <jlewis(a)fdt.net> | This space reserved for routing Network Administrator | update confirmations. Florida Digital Turnpike | ______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____

8 11

Re: Core router bakeoff?
by Selina Priestley 11 May '98

11 May '98

Yah, it works for Enterprise builds: oops. It's not that it's not there; it's just not in a usable build. Selina > I helped test this about a year and a half ago. It works. > > - jared > > On Mon, May 11, 1998 at 09:23:48AM -0700, Scott Whyte wrote: > > Searching CCO for "encrypted telnet" gives: > > > > http://www.cisco.com/univercd/cc/td/doc/product/software/ios112/krbtelnt.ht >m > > > > Like yourself, I've never used it, so I can't vouch for it. > > > > Scott > > > > > > At 10:24 PM 5/8/98 -0500, Sam Birch wrote: > > >Not that I've done it, but you can use Kerberos to remotely manage a Cisco >, > > >giving you an encrypted telnet. In fact, does anyone have any pointers > > >about how? > > > > > >Sam > > > > > > > ---- > > Scott Whyte swhyte(a)cisco.com | Any opinions expressed herein are > > Network Supported Accounts (NSA) | mine and not cisco's... > > CCIE 3340 | "Eschew Obfuscation" > > -- > Work: jared(a)qual.net - We Make The Internet Work for Your Business > 9-5pm(ET) 800 637 4424x2634 - 24x7 NOC - 800 424 3223 > pgp key available via finger from jared(a)puck.nether.net

1 0

Q: Sat News Feed?
by Donn Lasher 11 May '98

11 May '98

I remember seeing Sat/DBS news feeds being available a year or more ago. Anybody have any contacts/info about such a thing? Thanks Donn

2 1

noc listing
by Jared Mauch 11 May '98

11 May '98

I've set up a public noc listing page at http://puck.nether.net/netops/ I'm going to work on the rest, but feel free to send me updates, or to use the web form to update stuff, it will filter through me, nobody can register ournocblows or something. - Jared -- Work: jared(a)qual.net - We Make The Internet Work for Your Business 9-5pm(ET) 800 637 4424x2634 - 24x7 NOC - 800 424 3223 pgp key available via finger from jared(a)puck.nether.net

1 0

Re: Possible login/password grabbing ploy
by Scott Huddle 11 May '98

11 May '98

See www.whitehouse.com -scott > From owner-nanog(a)merit.edu Mon May 11 15:59 EDT 1998 > To: Joe Provo - Network Architect <jprovo(a)ma.ultranet.com> > cc: nanog(a)merit.edu > Subject: Re: Possible login/password grabbing ploy > Date: Mon, 11 May 1998 11:28:11 -0700 > From: Amit Gupta <ag(a)asha.Eng.Sun.COM> > Sender: owner-nanog(a)merit.edu > Content-Type> : > text> > Content-Length: 1100 > > > Or maybe these are also the "adult site operators"? > > At a conference I tried accessing ESPN web site :) by typing in the URL - > typed sportszone.espnet.com by mistake (instead of espnet.sportszone.com) - > and was surprised by the "Click if you are over 18" message... have heard > from others that several other mis-spellings also lead to similar sites. > > Any trademark protection ("webmarks?") available to the folks who run > these popular sites? > > -amit > > :> I have found that most of the common mis-spellings of our domain name > :> have been registered with the Internic by a company named Americaoffline. > > :Yup. They've been busy registering dropped-letter variants of many > :folks. All the zones I've looked at are merely wildcard A records, not > :purposeful hosts. I was sorely disappointed that > :http://www.americaoffline.com/ contains no references to malicous nor > :humourous stuff. Personally, I was hoping for large-scale lampooning. > > :Nothing at the real provider's home base, INSTANET.COM, reveals anything > :of interest. Some kook thinking he can auction off typo domains? > >

1 0

RE: NOC Phone Number Time (Re: Microsoft NOC?)
by Foley, Grant 11 May '98

11 May '98

>1-800 numbers are difficult to dial outside the US. Not if you dial 1-880 instead.... >---------- >From: Sean Donelan[SMTP:SEAN@SDG.DRA.COM] >Sent: Saturday, May 09, 1998 2:51 AM >To: nanog(a)merit.edu >Subject: NOC Phone Number Time (Re: Microsoft NOC?) > >>The reason it is imperative that there be a telephone number for an >>ISP is that it's really hard to use e-mail to contact an ISP if the >>network connectivity to the ISP is not working. > >I guess its that time again. > >Between May 11 and May 15 I will be conducting my Emergency NOC Phone >Test. This is an unannounced test where I call each of the phone >numbers given to me by providers I interconnect with. > >The rules are listed on <http://dranet.dra.com/verify-contact.html>. > >Although I say its 'unannounced' if you want to tell your NOC folks I'll >be calling next week go ahead. In practice I've found corporate culture >tends to overwhelm any special advance notice. > >In case you are interested, the very best performance in the last emergency >NOC phone contact test was by the Defense Communications Agency/DISA NOC. >They earned four stars, out of five, losing only one point because the >operator did not know how to call their NOC from outside the US. 1-800 >numbers are difficult to dial outside the US. >-- >Sean Donelan, Data Research Associates, Inc, St. Louis, MO > Affiliation given for identification not representation >

5 4

Re: Core router bakeoff?
by Sam Birch 11 May '98

11 May '98

Not that I've done it, but you can use Kerberos to remotely manage a Cisco, giving you an encrypted telnet. In fact, does anyone have any pointers about how? Sam -----Original Message----- From: Selina Priestley <selina(a)ans.net> To: perry(a)piermont.com <perry(a)piermont.com> Cc: John A. Tamplin <jat(a)traveller.com>; Arnaud Girsch <agirsch(a)OASysGroup.com>; nanog(a)merit.edu <nanog(a)merit.edu> Date: Friday, May 08, 1998 8:55 PM Subject: Re: Core router bakeoff? >> >> In short, unless you have numbers to indicate otherwise, I can't say >> that PCs cost you much, in the short term or the long term. >> >> What Cisco's will buy you is better handling of T3s, SONET, etc., and >> the ability to handle much higher performance lines. They also have >> much better remote management facilities, in so far as the things have >> real serial consoles and such, which PCs don't. >> >> Perry > >One PC remote management win is that you can actually have secure >encrypted access/authentication for remote management, rather than >relying passwords in the clear and tftp. This is lacking in all >router venders at this instant, far as I know. > >Selina >

3 2

Re: Possible login/password grabbing ploy
by Lehrer, Neil 11 May '98

11 May '98

have you asked them why. their web page is "under contruction." however: Americaoffline AMERICAOFFLINE2-DOM 7060 Hollywood Blvd. Suite 903 Los Angeles, CA 90028 USA Domain Name: AMERICAOFFLINE.COM Administrative Contact: Fisher, Ed EF590 america(a)INSTANET.COM 213-465-5407 Technical Contact, Zone Contact: Laren, Tim TL233 timl(a)INSTANET.COM 818-713-1313 (FAX) 818-888-0513 Billing Contact: Fisher, Ed EF590 america(a)INSTANET.COM 213-465-5407 Record last updated on 05-Mar-97. Record created on 05-Mar-97. Database last updated on 11-May-98 03:39:51 EDT. Domain servers in listed order: ARAGON.INSTANET.COM 205.231.48.6 GOLUM.INSTANET.COM 205.231.48.2 ````````` To: nanog(a)merit.edu From: Darryl Baker <dpb(a)concentric.net> I have found that most of the common mis-spellings of our domain name have been registered with the Internic by a company named Americaoffline. Examples: concentic.net concentri.net concnetric.net consentric.net They have also grabbed other mis-spellings of popular domains Examples: aool.com bellsoth.com bellsuth.com hotmaiil.com mailexite.com pacbel.net spraynet.com Originally I thought they were using these to build a bulk email list. Then I found they have configured ftp addresses in each domain. This will allow them to gather valid usernames and passwords anytime someone makes a typo and trys to upload something to their ISP. We have listed their servers as bogus in our DNS configuration for now and are looking into other more complete solutions. Bind 8.X configuration addition: server 205.231.48.243 { bogus yes; }; server 205.231.48.244 { bogus yes; }; -- __ _ __ Darryl Baker / ) // / ) / Sr. Systems Engineer / / __. __ __ __ , // /--< __. /_ _ __ For the Concentric Network /__/_(_/|_/ (_/ (_/ (_/_</_ /___/_(_/|_/ <_</_/ (_ dpb(a)concentric.net / ' Regards +++++++++++++++++++++++++++++++++++++++ + Neil Lehrer + U.S. Information Agency + Networks and Systems Support Division + + voice 202 619-0903 + fax 202 619-3883 + internet nlehrer(a)usia.gov + + "oh what a tangled net we weave + when we seek to retrieve." + +++++++++++++++++++++++++++++++++++++++

1 0

ameritech+sbc
by Jared Mauch 11 May '98

11 May '98

just heard about it from a tech today. here's the skinny: they're now the largest local telco http://www.ameritech.com/news/sbc/press_release.html -- Work: jared(a)qual.net - We Make The Internet Work for Your Business 9-5pm(ET) 800 637 4424x2634 - 24x7 NOC - 800 424 3223 pgp key available via finger from jared(a)puck.nether.net

3 2