April 1999 - Test - lists.nanog.org

The Cidr Report
by Tony Bates 30 Apr '99

30 Apr '99

This is an auto-generated mail on Fri Apr 30 12:00:00 PDT 1999 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 30Apr99 0) General Status Table History ------------- Date Prefixes 230499 58766 240499 58380 250499 58344 260499 58454 270499 58458 280499 58561 290499 58602 300499 58568 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 71.0.2.0/24 from AS1239 *** Bogus 221.43.160.0/19 from AS12323 AS Summary ---------- Number of ASes in routing system: 4878 Number of ASes announcing only one prefix: 2461 (1329 cidr, 1132 classful) Largest number of cidr routes: 376 announced by AS701 Largest number of classful routes: 799 announced by AS701 1) Gains by aggregating at the origin AS level --- 30Apr99 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 360 148 212 58.9% BCnet Backbone AS577 292 182 110 37.7% Bell Canada Backbone AS4293 289 182 107 37.0% IMCI AS174 603 502 101 16.7% Performance Systems International AS4755 175 87 88 50.3% Videsh Sanchar Nigam Ltd. India AS2493 211 126 85 40.3% iSTAR Internet, Inc. AS4200 167 94 73 43.7% AGIS (Apex Global Information Ser AS3749 136 63 73 53.7% TECNET AS7657 193 121 72 37.3% The Internet Group Limited AS1267 94 24 70 74.5% IUNET-AS AS7496 98 29 69 70.4% Power Up AS1239 550 485 65 11.8% SprintLink Backbone AS7545 111 47 64 57.7% TPG Internet Pty Ltd AS1785 384 321 63 16.4% NYSERNet Backbone AS7046 264 202 62 23.5% UUNET-CUSTOMER AS10928 112 50 62 55.4% UNKNOWN AS1221 451 392 59 13.1% AARNET-AS AS4740 329 272 57 17.3% Ozemail Pty Ltd (ASN-OZEMAIL) AS9269 66 10 56 84.8% Hong Kong CTI AS3493 238 184 54 22.7% INTERLINK AS719 474 421 53 11.2% LANLINK autonomous system AS72 93 41 52 55.9% Schlumberger Information Network AS803 79 35 44 55.7% SaskNet Backbone AS5674 80 36 44 55.0% PBI-NET-BLK AS3737 109 71 38 34.9% PenTeleData Inc. (ASN-PTD) AS1 499 465 34 6.8% BBNPLANET AS7122 110 78 32 29.1% MTS ADVANCED Network Policy AS4307 32 1 31 96.9% SVINET-1 AS2907 209 178 31 14.8% SINET AS11515 32 1 31 96.9% UNKNOWN For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

NetSOL blames Microsoft for its problems...
by John Fraizer 30 Apr '99

30 Apr '99

Will it ever end? Now they're blaming Microsoft for their problems. I personally use netscape and received the same error this individual is complaining about. >Return-Path: <help(a)internic.net> >Received: from csrb.internic.net (198.41.1.85) by intranet.com.mx with SMTP > (Eudora Internet Mail Server 2.2); Thu, 29 Apr 1999 13:11:36 -0500 >Received: (help@localhost) by csrb.internic.net (8.9.1/SLAM-1) id OAA22954; Thu, 29 Apr 1999 14:11:07 -0400 (EDT) >Message-Id: <199904291811.OAA22954(a)csrb.internic.net> >Subject: Re: [NIC-990427.ad30] CAN't access you secure Payment pagey >To: jbiquez(a)intranet.com.mx (Jorge Biquez) >Date: Thu, 29 Apr 1999 14:11:07 -0400 (EDT) >In-Reply-To: <3.0.5.32.19990427141554.00e326a0(a)intranet.com.mx> from "Jorge Biquez" at Apr 27, 99 02:15:54 pm >X-MTS-Ticket: 990427.ad30 >X-MTS-Type: Question >X-MTS-Priority: Normal >X-MTS-Mode: Unknown >X-MTS-Status: Open >X-MTS-Timestamp: 990427152528 >From: help(a)networksolutions.com >Reply-To: help(a)networksolutions.com >X-Mailer: ELM [version 2.4 PL24 PGP2] >MIME-Version: 1.0 >Content-Type: text/plain; charset=US-ASCII >Content-Transfer-Encoding: 7bit > > >Thank you for contacting Network Solutions. > >The problem that you are experiencing in obtaining a secure connection >is an error within the Microsoft web browser. Microsoft web browsers >often have problems connecting to sites which use advanced Secure >Socket Layers. > >Since the error is actually within the web browser itself it must be >corrected by Microsoft. > >We recommend you use a browser such as Netscape Navigator to gain >access to our Web site. The software is available as a free download >from Netscape's Web site at www.netscape.com. > >We will be glad to assist you in reserving your domain names by >Telephone. From the United States, dial toll-free 1-888-642-9675. >Outside of the U.S., dial 1-703-742-0914. > >Best regards, >Jon L >Network Solutions > >World Wide Web: http://www.networksolutions.com >E-Mail: help(a)networksolutions.com >================================================================== >> >> Hello. >> >> I need to pay for some domains and I just can access the page. I receive >> this error: >> >> >> This script should be referenced with a METHOD of POST. >> >> >> What's happening? >> >> JB > >

7 8

RE: DNS Related Mailing Lists
by Steve Riley (MCS) 30 Apr '99

30 Apr '99

There's a lot of DNS information at the DNS Resources Directory, at http://www.dns.net/dnsrd. There is a page with pointers to some DNS mailing lists: http://www.dns.net/dnsrd/lists.html. ______________________________________________________________________ Steve Riley Consultant - Microsoft Telecommunications Practice in Denver, Colorado email: mailto:steriley@microsoft.com call: +1 303 521-4129 (cellular) page: +1 888 440-6249 or mailto:4406249@skytel.com Applying computer technology is simply finding the right wrench to pound in the correct screw. -----Original Message----- From: William R. Lorenz [mailto:wrl@nacs.net] Sent: Friday, April 30, 1999 11:59 AM To: nanog(a)merit.edu Subject: DNS Related Mailing Lists NANOG Members, Where can I find additional information about a decent DNS mailing list? On Wed, 28 Apr 1999, Dean Robb wrote: :As pointed out on the DNS lists, it seems that NSI has a real problem :with the customer services people not knowing what they're doing and :needs some serious training. Perhaps that training should include basic :reading skills. --- __o William R. Lorenz <wrl(a)nacs.net> --- _-\<,_ New Age Consulting Service, Inc. [http://www.nacs.net] --- (_)/ (_) Proud of Cleveland - [http://www.cleveland.com]

1 0

RE: Contact handles disappearing mysteriously from the whois database!
by Derrick Bennett 30 Apr '99

30 Apr '99

Seeing as how my main technical contact was completly missing from Internic I called them. I was told by their helpdesk that Whois is being updated and will be unreliable and/or useless until sometime next week after May 1. I was told that their database is fine and that all the information is there and I should just trust them that all would be okay. They did not have an answer as to why they did not announce this before hand or gave warning as to the length of the outage. Also I must note that I had to go to bigyellow.com to find their phone number as they seemed to have removed it completely from their new website and the "about" portion of their site is forwarded to a black hole. just my .02 and frustration. Derrick Bennett

14 25

A new means of exploiting systems to relay UBE (fwd)
by joshua grubman 30 Apr '99

30 Apr '99

pardon the cross-posting. --- joshua grubman http://false.net http://sarcastic.net "note to self... noone cares" ---------- Forwarded message ---------- Date: Fri, 30 Apr 1999 10:18:47 -0400 (EDT) From: Network Operations <netops(a)DN.NET> To: spam-l(a)peach.ease.lsoft.com Cc: abuse(a)DN.NET, jg(a)false.net Subject: A new means of exploiting systems to relay UBE Hi folks, I've honestly been too busy to read the current threads in any detail, so if I'm addressing an issue which has already been discussed, please ignore me. Lately we've come across an increasing number of reseller web machines where users have uploaded a set of cgi's with intent to exploit said machine as a spam engine. Since the scripts invoke sendmail locally, they are capiable of delivering mail at an alarming rate. I will post these scripts to the end of this message. This is particularly disturbing, as all of these servers have been configured with anti-relay rulesets, and many of our customers are not savvy enough to realize that this is NOT relay spam or to track down the users who own the cgi's and terminate their accounts. This creates a HUGE problem for firms who offer colocation, hosting, or managed servers to web resellers. Since these scripts don't require telnet access, any bozo with a cgi-bin directory and an ftp account can turn a legitimate customer into a spamhaus. The resources required for a provider to log into a customer system (assuming they even have root!), disable an account, and educate thousands of web resellers as to why their ISP is making changes to their system make this issue even harder to address. In the last few days we've come across three systems, each hosting a few hundred web users, where this software has been installed. On one of the systems, multiple instanstances of the software had been uploaded under various accounts. I am attatching a tarred and gzipped copy of a cgi-bin directory containing this software. This was pulled directly from a reseller server. The subscriber lists have been cleared out, and modifications have been made to the code to make it unusable. If you have a good working knowledge of perl, you should pick through it. Be very afraid. If anybody has any ideas as to how this can be stopped, please share them. Thanks -josh Josh Grubman <joshg(a)dn.net> Senior Systems Engineer Manager, Abuse Coordination --- Security & Abuse Coordination Team digitalNATION Internet Services http://www.dn.net / (703) 642 2800 DO NOT use this address for reporting problems! uce & network abuse: abuse(a)dn.net connectivity issues: noc(a)dn.net

1 0

Wasted space
by Austin Schutz 30 Apr '99

30 Apr '99

While importing netblock data I discovered what must be common knowledge for most. A large portion of allocated space is not being announced. Equally exciting was the discovery that a large portion of space is maintainer-free, thus making it essentially impossible to have an exact accounting of who has what. IMO this seems much like those people who hoard domain names, except worse because ipv4 space is finite. Seems like we ought to drop these pointless allocations and make the owners justify space they use in the future. Networks using such space for internal use can use NAT if they ever decide to connect the The Internet. Austin

8 13

Re: Wasted space
by Stephen Sprunk 30 Apr '99

30 Apr '99

RFC 1035, Section 2.3.1 sez: The labels must follow the rules for ARPANET host names. They must start with a letter, end with a letter or digit, and have as interior characters only letters, digits, and hyphen. There are also some restrictions on the length. Labels must be 63 characters or less. Given that "domain names" in this context refers to individual SLD's, there are significantly fewer than 254x256 "domain names" available. According to RFC 1035, there are exactly 26*37^61*36 (428135279974248253859698166549001\ 968236527812977171075381544952036285878331983282604984379776447432) labels available. While this certainly is a finite resource, the likelihood of it being exhausted is zero considering the money supply is not large enough to cover the cost of registering those labels, even at the new wholesale rate (and one cannot raise the velocity to compensate, considering the turnaround time on registrations at the current number of registrations); one can then conclude that labels are therefore an infinite resource for all practical purposes. ObRandy: no ip name-server Stephen | | Stephen Sprunk, K5SSS, CCIE #3723 :|: :|: NSA, Network Consulting Engineer :|||: :|||: 14875 Landmark Blvd #400; Dallas, TX .:|||||||:..:|||||||:. Pager: 800-365-4578 / 800-901-6078 C I S C O S Y S T E M S Email: ssprunk(a)cisco.com -----Original Message----- From: Randy Bush <rbush(a)bainbridge.verio.net> To: Austin Schutz <tex(a)shrubbery.net> Cc: nanog(a)merit.edu <nanog(a)merit.edu> Date: Thursday, April 29, 1999 18:19 Subject: Re: Wasted space > >> Equally exciting was the discovery that a large portion of space is >> maintainer-free > >in the irr or (arin|ripe|apnic)? > >much of the the former thanks to sean and to baby peter. the latter should >not be the case. > >> IMO this seems much like those people who hoard domain names, except >> worse because ipv4 space is finite. > >domain names are finite. 254 char limit drawn from an 8-bit char set. > >randy

3 2

Re: Contact handles disappearing mysteriously from the whois database!
by Vadim Antonov 30 Apr '99

30 Apr '99

>At 04:44 PM 4/27/99 -0700, Randy Bush wrote: >> >>testing can demonstrate the presence of bugs, it can not demonstrate their >>absence. >> >>randy, who spent 20+ years in software development Dean Robb <pceasy(a)norfolk.infi.net> wrote: > >And never learned to test before deployment? I learned that in high school >BASIC classes.... Better you'd learn to read. Try to read the first quoted sentence again. >Maybe I'm missing something...and I'm NOT a software engineer... That shows. Oh, the optimism of the naive. You must be a manager. Plonk. --vadim PS Does anyone know why overuse of ellipsis is a sure sign of a luser? PPS I've heard somewhere that learning BASIC as the first language irrevokably destroys any latent ability to design real software. If so, that must explain why ms-dos and its progeny are so messy and lossy.

2 1

wasted space
by bmanning＠vacation.karoshi.com 30 Apr '99

30 Apr '99

for a real treat, check announce space vs actual machines... :) --bill

1 0

RE: FYI Fwd: UUNet Outage Today...
by Brown, Chris 29 Apr '99

29 Apr '99

I would be interested. Is there any word as to how much is affected? __________________________________________ Christopher Brown WAN Manager ParaCom Technologies, Inc. ------------- Begin Forwarded Message ------------- X-Sender: kbethke(a)mail.ezy.net Date: Thu, 29 Apr 1999 12:27:41 -0400 To: 911(a)dn.net From: Scott Bethke <kbethke(a)ezy.net> Subject: FYI Fwd: UUNet Outage Today... Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by dn.net id MAA22679 >Delivered-To: outgoing-isp-marketing(a)relay2.isp-lists.com >X-Authentication-Warning: spirit.sparklist.com: majordom set sender to >owner-isp-marketing(a)isp-marketing.com using -f >X-Sender: joie(a)mail.sandiego.com >X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.3 (32) >Date: Thu, 29 Apr 1999 09:15:24 -0700 >To: isp-marketing(a)isp-marketing.com >From: joie <joie(a)cyber-star.com> >Subject: UUNet Outage Today... >Sender: owner-isp-marketing(a)isp-marketing.com >Reply-To: isp-marketing(a)isp-marketing.com > >Again...I can't say enough about my confidence that UUNet will come around >to the same levelheadedness they had when they began...before all the pomp >set in...I hope so...but in the meantime I was just notified about the >following.. > >In case anyone is interested, UUNet is experiencing an outage so severe on >the west coast (USA) this morning that their remaining routers are so >overloaded it is impacting all of their customers everywhere. > >I'd like to see the RFO on this one! > >joie >CSNetwork MultiMedia CyberCafe Industry > > > > >_________________ * The ISP-MARKETING Discussion List * _________________ >To Remove, Send an Email To: mailto:remove-isp-marketing@isp-marketing.com > To Join, Send an Email To: mailto:join-isp-marketing@isp-marketing.com > >ChooseYourMail -- Visit us at ISPCON > http://www.chooseyourmail.com/ISPinfo1.cfm > The only opt-in, ISP-supported, email ad program > > ------------- End Forwarded Message ------------- ________________________________________________ Brad Dreisbach ~ Unix Systems Engineer digitalNATION ~ www.dedicatedserver.com Phone: 703-642-2800 ~ Fax: 703-642-3747 Work: www.dn.net ~ Personal: home.dn.net/~bradd ICQ: 22031613

1 0