January 2000 - Test - lists.nanog.org

Re: Netgate.net.nz/ORBS spam colusion
by Dean Anderson 08 Jan '00

08 Jan '00

Its more pernicious. I've discussed the technical details on other lists, just to demonstrate necessity. Suffice it to say there are good reasons that the _default_ relay behavior was changed instead of removing relay capability altogether. And I'm not the only one who operates relays. I'm just the only one dumb enough to try to explain to the junior anti-spammer league why relays are necessary, which is how we became listed in ORBS. I admit that was a mistake. Prior to that, we had no relay problems in the previous 4 years of relay operation. Most spammers don't have the resources to scan a large chunk of the net without detection. They depend on someone else to tell them where the relays are. Now I'm saddled with having to shut down ORBS to stop people from abusing our servers. It could get expensive. But I don't have a choice now. --Dean Around 11:22 PM 1/8/2000 -0000, rumor has it that fischer(a)sacred.net said: >I for one am curious why it is impossible to close them down >as relays. There are solutions although sometimes they can >inconvenience your users -- I'm thinking of the cases where >you have to provide mail service to customers that are coming >in from arbitrary networks -- is that it? Or is it something >more pernicious? If the former, an extension to qmail modifies >a list of allowed networks, once they've used pop to check their >mail. That's the inconvenient part (they have to pop before >they can send). Homegrown solutions abound, I am sure. > >I understand that ORBs think they are doing a service by >publishing these exploitable sites, and that they are doing a >diservice as well. I have no idea how it balances out, >but that's irrelevant. Maybe someone here has a fix for >this fellow's problem? What, exactly, *is* the reason >that you are stuck with open relays? > > Randy Fischer > > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean(a)av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

1 0

Re: Netgate.net.nz/ORBS spam colusion
by owen＠dixon.delong.sj.ca.us 08 Jan '00

08 Jan '00

However, I must question whether the activity Dean discusses is actually criminal. He does not accuse them of carrying out the attacks, he accuses them of transporting information published by a third party which notifies the world that his site is vulnerable to these attacks. Since Dean has published information to NANOG and other public forums stating that: 1. His sites _ARE_ vulnerable. 2. He has no willingness to fix these vulnerabilities. 3. He intends to make the internet at large responsible for his negligence WRT these sites. I seriously doubt that publishing a list of known public-nuissances is genuinely illegal. Further, unless Dean has presented netgate with a court-order showing that the court has indeed found said activity to be illegal, I think they would be negligent in turning off said service. How would you like it if your ISP shut you down because I complained to them that you were sending out messages that contained information that was publicly available, but which I didn't want published? That's what Dean's really saying. Owen > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > On 08-Jan-2000 William Allen Simpson wrote: > > > > Dean Anderson wrote: > >> > >> I would like to get your opinions on this. > >> > > My opinion is that you should sue them vigorously -- and lose. This > > would help the rest of us immensely by providing a solid precedent for > > common carrier liability regarding the activities of our subscribers. > > Every law I have seen limits common carrier liability exemption when the > carrier has knowledge of the illegal activity. It is only protection when the > carrier is not aware of the activity. > > - -- > William X. Walsh <william(a)dso.net> > DSo Networks http://dso.net/ > Fax: 877-860-5412 or +1-559-851-9192 > GPG/PGP Key at http://dso.net/wwalsh.gpg > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.1 (GNU/Linux) > Comment: DSo Networks > > iD8DBQE4drtE8zLmV94Pz+IRAvBTAKDD9O9amegIE65UJ1Lj2htV44EurwCgrTaN > Ua63qpzcXJK//Rs1PuRDfPc= > =Xy8H > -----END PGP SIGNATURE----- > >

4 3

Cisco CEF question
by Rubens Kuhl Jr. 08 Jan '00

08 Jan '00

Hi. Does someone know a good reference describing possible values and meanings for the "fast switching type" and "fast flags" fields of a "show cef interface" on a Cisco 7500 router ? Command referece for this command (http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/swit ch_r/xrcef.htm) does not describe these fields in detail. Running with IOS 12.0(8)S, the output is like this for each interface: FastEthernet0/0/0 is up (if_number x) (...) Fast switching type 1, interface type 18 IP Distributed CEF switching enabled IP Flow switching turbo vector IP Flow CEF switching turbo vector Input fast flags 0x1, Output fast flags 0x1 (...) Previous CEF-enabled versions may show little diferences, such as listing fast-flags as one field. Any pointers ? Rubens Kuhl Jr.

1 0

ARIN Routing Registry
by Richard Jimmerson 07 Jan '00

07 Jan '00

The ARIN Routing Registry server, rr.arin.net, now includes daily RPSL data snapshots derived from the data location information that the following routing registries placed in the www.radb.net/list.html URL: Registry Name (Source): bell.db IP address or DNS name: 205.207.237.50 Ftp site: ftp://205.207.237.50/bell/bell.db Type of DB (RIPE181, RPSL?): RPSL Registry Name (Source): RIPE IP address or DNS name: rpslii.ripe.net Ftp site: ftp.ripe.net Type of DB (RIPE181, RPSL?): RPSL Registry Name (Source): LEVEL3 IP address or DNS name: rr.Level3.net Ftp site: ftp://rr.Level3.net/pub/rr/level3.db.gz Type of DB (RIPE181, RPSL?): RPSL Registry Name (Source): RADB IP address or DNS name: whois.radb.net Ftp site: ftp://ftp.radb.net/radb/dbase Type of DB (RIPE181, RPSL?): RPSL Registry Name (Source): VERIO IP address or DNS name: rr.verio.net Ftp site: ftp://rr1.verio.net/verioRR/ Type of DB (RIPE181, RPSL?): RPSL Registry Name (Source): BCONNEX IP address or DNS name: radb.bconnex.ca Ftp site: ftp.bconnex.net://pub/radb/bconnex.db.gz Type of DB (RIPE181, RPSL?): RPSL Registry Name (Source): KOREN IP address or DNS name: whois.koren21.net Ftp site: ftp://ftp.koren21.net/pub/radb Type of DB (RIPE181, RPSL?): RPSL Registry Name (Source): ARCSTAR IP address or DNS name: rr.ntt.net Ftp site: ftp://rr.ntt.net/arcstarRR/ Type of DB (RIPE181, RPSL?): RPSL Please e-mail rtreg(a)arin.net if your organization would like to contribute a snapshot of its RPSL data to include on rr.arin.net. ARIN will send its next update to this group when rr.arin.net has been configured to mirror off port 43. Please send any other questions or concerns to rtreg(a)arin.net. Regards, Routing Registry Registration Services Group American Registry for Internet Numbers (ARIN) ========================================================= email rtreg(a)arin.net ftp ftp.arin.net whois rr.arin.net web http://www.arin.net/rr.htm =========================================================

1 0

More Y2K humor
by Peter Murray 07 Jan '00

07 Jan '00

Given all of the hype, we couldn't help but wonder what would really happen if our web server thought it was 1900. So last night (promptly at midnight EST) we rolled to the CWRU circa 1900 page: <http://www.cwru.edu/> Enjoy! Peter -- Peter Murray, Library Systems Manager pem(a)po.cwru.edu Digital Media Services http://www.cwru.edu/home/pem.html Case Western Reserve University, Cleveland, Ohio W:216-368-8834

2 3

The Cidr Report
by Tony Bates 07 Jan '00

07 Jan '00

This is an auto-generated mail on Fri Jan 7 12:00:00 PST 2000 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 07Jan00 0) General Status Table History ------------- Date Prefixes 311299 68794 010100 68060 020100 68601 030100 69117 040100 69405 050100 69342 060100 69294 070100 69327 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 5638 Number of ASes announcing only one prefix: 3032 (1493 cidr, 1539 classful) Largest number of cidr routes: 623 announced by AS701 Largest number of classful routes: 953 announced by AS701 1) Gains by aggregating at the origin AS level --- 07Jan00 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 383 141 242 63.2% BCnet Backbone AS7046 426 268 158 37.1% UUNET-CUSTOMER AS9269 134 21 113 84.3% Hong Kong CTI AS1221 643 530 113 17.6% TELSTRA-AS AS2609 124 18 106 85.5% EUnet-TN AS7657 281 182 99 35.2% The Internet Group Limited AS7545 153 60 93 60.8% TPG Internet Pty Ltd AS1653 129 38 91 70.5% SUNET Swedish University Network AS4293 240 153 87 36.2% Internal ASN for C&W AS174 561 476 85 15.2% Performance Systems International AS577 258 180 78 30.2% Bell Nexxia Backbone AS6429 194 117 77 39.7% RDC-INTERNET AS7496 111 36 75 67.6% Power Up AS3749 135 61 74 54.8% TECNET AS705 241 174 67 27.8% ALTERNET-AS AS4200 171 105 66 38.6% AGIS (Apex Global Information Ser AS9304 82 21 61 74.4% Hutchcity AS816 234 178 56 23.9% UUNET Canada (ASN-UUNETCA-AS4) AS4740 330 275 55 16.7% Ozemail Pty Ltd (ASN-OZEMAIL) AS209 342 289 53 15.5% Qwest Communications AS4151 107 56 51 47.7% USDA Internet Access Network AS684 92 46 46 50.0% Manitoba Regional Network Backbon AS4755 113 73 40 35.4% Videsh Sanchar Nigam Ltd. India AS7568 54 16 38 70.4% C.S. Communications Co., Ltd. AS6528 46 8 38 82.6% WORLD-LYNX AS1 523 485 38 7.3% GTE Internetworking AS7029 78 41 37 47.4% ALLTELNET AS701 953 916 37 3.9% Alternet AS7390 50 14 36 72.0% NLSLAN AS6172 149 113 36 24.2% HOME-NET-1 For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Router feedback
by Scott Patterson 07 Jan '00

07 Jan '00

I would like to get some feedback from other Engineers that have worked with Cisco's 120XX series router, and the Juniper MXX. We are doing extensive testing on both platforms, and would like to get a feel for what other networks may be doing with either box. Any interoperability issues between the two? Are you using the Cisco or Juniper on the core/edge? Peering router? Any positive or negative feedback on either box is appreciated (replying privately rather than to the group is preferred). Thanks for the feedback! Scott Patterson Sr. Peering Engineer NetRail, Inc. Main: 888-638-7245 NOC: 800-621-1822 Mobile: 678-361-3208 Fax: 404-522-1939

1 0

Re: your mail
by bmanning＠vacation.karoshi.com 07 Jan '00

07 Jan '00

> > Now that'll be a lot of fun. > > Customer: "Hiya, I am trying to send mail to £$(^*()(".$£(*£$((a)~{.jp and it does not > work." > Helpdesk: "Oh" > > -- > Leigh Er, not really. The one format I've seen converts each character into a double-byte sequence. Kind of like IPv6 literals. :) --bill

2 1

Re: your mail
by bmanning＠vacation.karoshi.com 07 Jan '00

07 Jan '00

Pretty easy. The UTF8 "normalized" form for nanog.org. is MEM1MEMFM7.MFN2M7 which, I think you can find on the keyboard. > > bmanning(a)vacation.karoshi.com wrote: > > But how do you represent that meaningfully in "normal" fonts on "normal" keyboards? > > -- > Leigh Porter > INS > > > > > > > Now that'll be a lot of fun. > > > > > > Customer: "Hiya, I am trying to send mail to £$(^*()(".$£(*£$((a)~{.jp and it does not > > > work." > > > Helpdesk: "Oh" > > > > > > -- > > > Leigh > > > > Er, not really. The one format I've seen converts each character into a > > double-byte sequence. >

1 0

RE: Eeek - .NU Domains using O, A, A, U, N - And More
by Roeland M.J. Meyer 07 Jan '00

07 Jan '00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Got news for you ... that 1.6% is in the OTHER 75%, of the land surface, of this planet. Just because we have everyone beat in deployment, doesn't mean that it's going to stay that way forever. > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf > Of Hank Nussbacher > Sent: Thursday, January 06, 2000 10:13 PM > To: Kai Schlichting; nanog(a)merit.net > Cc: kai(a)pac-rim.net > Subject: Re: Eeek - .NU Domains using O, A, A, U, N - And More > > > > At 17:53 06/01/00 -0500, Kai Schlichting wrote: > >>Hello; January 6, 2000 > >> > >>NU domain now has a new, exclusive service available - > Support for your > local > >>language character set in any .NU Domain name you have > already registered. > > They forgot the marketing sentence: > > Be the first on your block where only 1.6% of the Internet > can send you email. > > -Hank > > - -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com> iQA/AwUBOHWR5LSQZucFLn2bEQJ7WQCgt9H9LCuv6TTwtgnFqS4Sec+hWWEAoL7B zCA2nV7sS3BeP2lMY+nXwGd+ =OJhR - -----END PGP SIGNATURE----- -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com> iQA+AwUBOHWSQ7SQZucFLn2bEQL0nQCfboRyfEzO0TvjfhRJA0Gu6KWX710Al2Vd 63jSm/4pp1jgWgc0rTaaZ+0= =xVls -----END PGP SIGNATURE-----

1 0