March 1999 - Test - lists.nanog.org

heads up: internic changes
by Marc Slemko 21 Mar '99

21 Mar '99

Just FYI, if your company relies on any service that the internic provides WRT domain registrations to help your own customers in registering domain names, you should check to make sure everything still works. You also probably want to be sure you don't let your customers anywhere near the InterNIC's web site, since they have gone even further in their attempts to confuse and trick people into paying for extra NSI services. http://www.internic.net/ now redirects you to http://www.networksolutions.com/ with many or most of the old URLs invalid. Things like web based whois, access to forms, etc. are now entirely different and it doesn't appear any attempt has been made at not breaking sites that link to them. In fact, the opposite seems true. Also, their finger-based frontend to their tracking system is coincidentally broken. Also, they conveniently don't have a ftp server accessible at ftp://ftp.internic.net/ but only on rs.internic.net. In addition, the templates that used to be easily accessible from their website aren't any more, and you are now almost forced to go through their web based registration system which tries to lead you astray to their extra "value added services" at every step, unless you know you can get the templates via ftp at rs.internic.net. Also, they have deliberately obscured the line between their extra money-grubbing services and a basic domain registration even more. Also, their telnet based whois is no longer available, and with it goes the last hope for getting info of if a domain is on hold or not or of accessing whois during their frequent outages. Unfortunately, none of this has helped their online payment system which is still horribly slow or down most of the time. It is quite obvious they are running scared for their future. Unfortunately, they still don't realize that providing good customer service is their best way to ensure a future.

5 4

have proxies hit the big time?
by John Giannandrea 21 Mar '99

21 Mar '99

The newly released IE5 has a proxy autodiscovery feature which has significant practical implications for global bandwidth use. Its hard to know how many web clients are proxied today. Its probably much less than 50% (including AOL users). The main reason appears to be that most clients are not configured for it by default. With IE5, if ISPs create a CNAME called wpad and provide a file called wpad.dat on port 80 that uses the Netscape proxy guidelines: http://home.netscape.com/eng/mozilla/2.0/relnotes/demo/proxy-live.html Then IE5 will automatically use those proxies for HTTP. This is as transparent to the end user as dynamic IP assignment or HTTP redirection. 12 months from now when the majority of PCs are shipping with this as the default browser, it would seem that proxies will be significantly more relevant to traffic shaping than they are today. jg(a)meer.net

1 0

DNS entry abuse question
by Peter Day 19 Mar '99

19 Mar '99

We recently discovered that bee.net DNS is pointing the name molvis.org at our main web server, www.emory.edu, without our permission. The billing contact for molvis.org is a student at Emory. Although we can contact bee.net and the student to address this violation of our policy, my question is whether there is anything we can do in general to prevent people from pointing DNS names at computers at Emory without our permission. Presumably there is great opportunity for mischief here, in that someone could register a domain name such as emorysucks.org and point it at our web site. If this is the wrong place to ask this question, please accept my apology and suggest an alternate place. Thanks for any advice you can give. Peter Day Emory.edu administrative contact Information Technology Division N. Decatur Bldg Suite 300 | E-mail: ospwd(a)emory.edu Emory University | PHONE: +1 404 727-7678 Atlanta, GA 30322 | FAX: +1 404 727-0817

6 6

Re: FEC (Fast Etherchannel) issues
by Kevin Brown 19 Mar '99

19 Mar '99

Although I am by no means the authority on how FEC works, I do understand the technology at issue. Cisco's implementation of FEC uses the X-OR (exclusive-OR) algorythm, and examines the last two bits of the source and destination MAC addresses. In doing this, there will be one of four possible results ( 01, 00, 11, 10 ). Each of these possible results are mapped to a bundled link. In your case, since you say you are doing this between routers, and your requirement seems to be load balancing between links, then I would suggest using a layer 3 routing protocol like OSPF that will automatically load balance between links with the same administrative cost. Again, I don't consider myself the man with all the answers, but if you are doing this between routers, then I would most definately keep my load balancing in the L3 arena, especially when it could be from a standards-based routing protocol rather than a quasi-proprietary protocol. My 2 cents, Kevin Brown Sr. Data Systems Engineer Sprint - BMO - JCMO ## nothing I say is to be considered the position of my employer. so there! ##

1 0

RE: ADSUs on DS1 lines
by Chad Skidmore 19 Mar '99

19 Mar '99

Take a look at the Cisco 3810. Regards, Chad -----Original Message----- From: Charles Sprickman [mailto:spork@inch.com] Sent: Friday, March 19, 1999 12:47 PM To: nanog(a)merit.edu Subject: ADSUs on DS1 lines Hi, I hope this is on-topic enough (it was in the past)... Looking at the archives of this list, there was a brief thread about ADSU/HSSI vs. the AIP card. Most people came out in favor of the AIP card, citing such things as brokenness of the ADSU's implementation of traffic shaping. So the AIP seems the way to go. My question then is what can you do when you need to connect to an ATM cloud via DS1? So far I've only seen Kentrox and Fore products that fit the bill. Anyone using these? Are you happy with them? Are they 'broken' in any fundamental way? Any routers available that take a DS1 ATM line directly? Thanks, Charles -- =-----------------= = | Charles Sprickman Internet Channel | | INCH System Administration Team (212)243-5200 | | spork(a)inch.com access(a)inch.com | = =----------------=

1 0

ADSUs on DS1 lines
by Charles Sprickman 19 Mar '99

19 Mar '99

Hi, I hope this is on-topic enough (it was in the past)... Looking at the archives of this list, there was a brief thread about ADSU/HSSI vs. the AIP card. Most people came out in favor of the AIP card, citing such things as brokenness of the ADSU's implementation of traffic shaping. So the AIP seems the way to go. My question then is what can you do when you need to connect to an ATM cloud via DS1? So far I've only seen Kentrox and Fore products that fit the bill. Anyone using these? Are you happy with them? Are they 'broken' in any fundamental way? Any routers available that take a DS1 ATM line directly? Thanks, Charles -- =-----------------= = | Charles Sprickman Internet Channel | | INCH System Administration Team (212)243-5200 | | spork(a)inch.com access(a)inch.com | = =----------------=

1 0

Re: DNS entry abuse question
by Sanjay Dani 19 Mar '99

19 Mar '99

You can partly address this by affecting some of the services. You can configure your HTTP/1.1 server to blackhole queries for molvis.org. The telnet/ftp services do not give such flexibility (of configuring per "name" that maps to the IP address the service responds to). >We recently discovered that bee.net DNS is pointing the name molvis.org at >our main web server, www.emory.edu, without our permission. The billing >contact for molvis.org is a student at Emory. > >Although we can contact bee.net and the student to address this violation >of our policy, my question is whether there is anything we can do in >general to prevent people from pointing DNS names at computers at Emory >without our permission. Presumably there is great opportunity for mischief >here, in that someone could register a domain name such as emorysucks.org >and point it at our web site. > >If this is the wrong place to ask this question, please accept my apology >and suggest an alternate place. > >Thanks for any advice you can give. > >Peter Day >Emory.edu administrative contact >Information Technology Division >N. Decatur Bldg Suite 300 | E-mail: ospwd(a)emory.edu >Emory University | PHONE: +1 404 727-7678 >Atlanta, GA 30322 | FAX: +1 404 727-0817

1 0

The Cidr Report
by Tony Bates 19 Mar '99

19 Mar '99

This is an auto-generated mail on Fri Mar 19 12:00:00 PST 1999 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 19Mar99 0) General Status Table History ------------- Date Prefixes 120399 56938 130399 57039 140399 56857 150399 56894 160399 57203 170399 57348 180399 57351 190399 57539 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 123.217.230.0/24 from AS174 AS Summary ---------- Number of ASes in routing system: 4691 Number of ASes announcing only one prefix: 2322 (1249 cidr, 1073 classful) Largest number of cidr routes: 383 announced by AS701 Largest number of classful routes: 851 announced by AS701 1) Gains by aggregating at the origin AS level --- 19Mar99 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 356 145 211 59.3% BCnet Backbone AS2493 265 148 117 44.2% iSTAR Internet, Inc. AS174 641 528 113 17.6% Performance Systems International AS11305 116 8 108 93.1% UNKNOWN AS226 204 99 105 51.5% USC/Information Sciences Institut AS4755 159 82 77 48.4% Videsh Sanchar Nigam Ltd. India AS3749 138 62 76 55.1% TECNET AS4293 209 138 71 34.0% IMCI AS1267 94 24 70 74.5% IUNET-AS AS4200 165 97 68 41.2% AGIS (Apex Global Information Ser AS7046 273 208 65 23.8% UUNET-CUSTOMER AS7545 110 46 64 58.2% TPG Internet Pty Ltd AS7496 96 34 62 64.6% Power Up AS1221 430 368 62 14.4% AARNET-AS AS1239 523 466 57 10.9% SprintLink Backbone AS4740 364 311 53 14.6% Ozemail Pty Ltd (ASN-OZEMAIL) AS7657 159 107 52 32.7% The Internet Group Limited AS72 91 39 52 57.1% Schlumberger Information Network AS3493 229 178 51 22.3% INTERLINK AS577 223 173 50 22.4% Bell Canada Backbone AS10928 100 51 49 49.0% UNKNOWN AS719 457 409 48 10.5% LANLINK autonomous system AS5674 80 36 44 55.0% PBI-NET-BLK AS852 174 135 39 22.4% AGT Advance Communication AS803 73 37 36 49.3% SaskNet Backbone AS7745 39 4 35 89.7% BIGSKY-AS AS7122 111 78 33 29.7% MTS ADVANCED Network Policy AS6332 92 59 33 35.9% TELNOR AS1 506 473 33 6.5% BBNPLANET AS1785 248 216 32 12.9% NYSERNet Backbone For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Re: DNS entry abuse question
by Randy Bush 19 Mar '99

19 Mar '99

> its not a lame delegation, someone is pointing an A record at their web > server. <doh> sorry. ietf wipeout. randy

1 0

re: dup packets
by cache22 19 Mar '99

19 Mar '99

gridnet *is* suffering a serious problem with packet duplication at many of their peering points. in some cases the duplication happens in both directions causing tcp breakdowns and frequent rst's. it has been escalated but hasn't been fixed in two days so i suspect it will require a lot of router reloading. matt sommer sysadmin webkorner.com

1 0