February 2000 - Test - lists.nanog.org

DNS problem at NANOG18
by takei＠csm.jcsat.co.jp 07 Feb '00

07 Feb '00

Can someone setup DNS lookup dabase for DHCP address pool in NANOG18? Currently, I can get right DNS reverse look up, but normal DNS lookup looks like has not been setup. My server refuse connection, because they can get hostname from DNS but cannot resolve IP address from DNS. Thank you. --- Jun Takei NTT Satellite Communications Inc. Japan Satellite Systems Inc. Tokyo Japan

3 2

Audio Quality
by David Brouda 07 Feb '00

07 Feb '00

Is it just me, or is the audio in the real stream corrupt? Also, the audio in the H.261 stream is a bit distorted. Perhaps the input level to the machine generating the stream need to be turned down? -David

1 0

An addition...
by Paul Ferguson 07 Feb '00

07 Feb '00

An additional resource for stuff in Steve Bellovin's talk: http://users.quadrunner.com/chuegen/smurf.cgi - paul

1 0

Re: www.netscape.com
by Dirk Harms-Merbitz 06 Feb '00

06 Feb '00

Guess there are bugs in that technology then. My name server was 207.151.19.6. Dirk On Sat, Feb 05, 2000 at 10:44:21PM -0800, Nicholas W. Blasgen wrote: > It just uses the same DNS technology as Yahoo and others. > > nick:~# dig www.netscape.com > > ;; ANSWER SECTION: > www.netscape.com. 15M IN CNAME vwww-va2.netscape.com. > > > The DNS server will check the IP address of the name server which you use > and find the nearest location it can find for that IP address. In your case > you might be using a DNS server that is in another country, or the other > sites were getting so many hits that it decided AU was the fastest. > > > > > Netscape is feeding web from Australia? Can this be? > > > > [dirk@noc dirk]$ dig www.netscape.com > > > > ; <<>> DiG 8.1 <<>> www.netscape.com > > ;; res options: init recurs defnam dnsrch > > ;; got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 4 > > ;; QUERY SECTION: > > ;; www.netscape.com, type = A, class = IN > > > > ;; ANSWER SECTION: > > www.netscape.com. 13m59s IN CNAME wwwld-au.netscape.com. > > wwwld-au.netscape.com. 58m59s IN A 203.89.225.69 >

2 1

Reminder: BOF on Distributed DoS, San Jose 2/7/00
by David Kennedy CISSP 06 Feb '00

06 Feb '00

The purpose of this message is to solicit participation in birds of a feather (BOF) session to discuss the Distributed Denial of Service (DDOS) problem. WHO: Everyone interested in aggressively addressing a category of attack threatening Internet-connected systems. WHAT: We (ICSA.net ) are have put together at least two BOF's to discuss DDOS attacks in the trin00, TFN, TNF2K, stacheldraht...family. WHEN & WHERE: The next BOF session will be Monday, February 7, 2000 from 7 to 9 pm at Doubletree Hotel San Jose, 2050 Gateway Place, San Jose, CA - phone 408-453-4000 (conference hotel). Refreshments will be served. This BOF session coincides with the North American Network Operators Group (NANOG) conference and a meeting of ICSA's ISPSec Consortium, but the BOF is open to all interested parties. WHY: The goals are two-fold initially, awareness of the problem and see if the collection of smarts at a BOF can suggest effective ways of dealing with these attacks other than "hoping" the clue-challenged secure their systems before the trojans are installed. relevant URL's: http://www.icsa.net/html/communities/ispsec/ http://www.nanog.org/mtg-0002/ http://www.washington.edu/People/dad/ http://www.ietf.org/internet-drafts/draft-moskowitz-hip-01.txt http://www.ietf.org/internet-drafts/draft-moskowitz-hip-enc-00.txt http://www.ietf.org/internet-drafts/draft-moskowitz-hip-dns-00.txt http://www.ietf.org/internet-drafts/draft-moskowitz-hip-arch-01.txt Tentative Agenda: Introduction: The Problem: Technical Review of Attack tools Trends/ Implications/ Characteristics Possible Mitigations: Scanning for Master / Slaves ISP Egress /Ingress Filtering Potential Protocol Changes HIP Open discussion Next Steps Noteworthy Participants: Dave Dittrich Bob Moskowitz -- Regards, Dave Kennedy CISSP Director of Research Services, ICSA.net http://www.icsa.net Protect what you connect. Look both ways before crossing the Net.

1 0

junk fax
by Randy Bush 06 Feb '00

06 Feb '00

to where does one submit formal complaints of junk fax?

6 5

www.netscape.com
by Dirk Harms-Merbitz 05 Feb '00

05 Feb '00

Netscape is feeding web from Australia? Can this be? [dirk@noc dirk]$ dig www.netscape.com ; <<>> DiG 8.1 <<>> www.netscape.com ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 4 ;; QUERY SECTION: ;; www.netscape.com, type = A, class = IN ;; ANSWER SECTION: www.netscape.com. 13m59s IN CNAME wwwld-au.netscape.com. wwwld-au.netscape.com. 58m59s IN A 203.89.225.69 ;; AUTHORITY SECTION: netscape.com. 1d23h6m43s IN NS NS.CW.NET. netscape.com. 1d23h6m43s IN NS NS.netscape.com. netscape.com. 1d23h6m43s IN NS NS-ME1.netscape.com. netscape.com. 1d23h6m43s IN NS NS2.netscape.com. ;; ADDITIONAL SECTION: NS.CW.NET. 1d23h53m5s IN A 204.70.128.1 NS.netscape.com. 1d23h6m43s IN A 198.95.251.10 NS-ME1.netscape.com. 59m8s IN A 205.188.247.65 NS2.netscape.com. 1d23h6m43s IN A 207.200.73.80 ;; Total query time: 2 msec ;; FROM: noc.power.net to SERVER: default -- 127.0.0.1 ;; WHEN: Sat Feb 5 18:11:14 2000 ;; MSG SIZE sent: 34 rcvd: 228 Dirk

2 1

Worldcom and Qwest switch places
by Sean Donelan 05 Feb '00

05 Feb '00

Several people sent me reports about switch troubles in Los Angeles in January. I thought I had tracked it down to a problem in the AT&T network. But Qwest also had an switch problems in Los Angeles and elsewhere for 11 days in January. NetworkWorld reported Qwest is using Lucent switches, but had old software on some of the switches. Lucent had no comment, except to say the same switches are the same hardware used in many of the world's largest service provider networks. A worrying comment, since this is at least the second time Lucent hardware has been involved in a multi-week problem. Since Lucent equipment was also involved in the 10 days of Worldcom problems, is there a common root cause between the Worldcom's problems and Qwest's problems? Is there some lesson other providers should be learning from these events? Or is each service provider expected to learn and re-learn these lessons individually? Is there some network design decision engineers are getting wrong?

1 0

Verio applies for trademark on the term "whois" (fwd)
by bmanning＠vacation.karoshi.com 04 Feb '00

04 Feb '00

food for thought. > From: Bill Gerrard > Subject: Verio applies for trademark on the term "whois" > > Hello, > > I just ran across this in the PTO trademark database... > > Word Mark WHOIS > Owner Name (APPLICANT) Verio Inc. > Owner Address 8005 S. Chester St., Suite 200 Englewood COLORADO 80112 > CORPORATION DELAWARE > Attorney of Record GLEN K. BEATON > Serial Number 75-742043 > Filing Date 07/01/1999 > Mark Drawing Code (1) TYPED DRAWING > Register PRINCIPAL > Type of Mark SERVICE MARK > > International Class 042 > > Goods and Services > > Computer services, namely, providing a computer database in the field of > personal and commercial address and telephone directory information and > other directory resources available on global information networks and > providing search services in connection therewith; DATE OF FIRST USE: > 1997.03.15; DATE OF FIRST USE IN COMMERCE: 1997.03.15 >

5 4

Re: Superbowl success?
by George Herbert 04 Feb '00

04 Feb '00

>Not necessarily a major Internet event, but it appears superbowl >releated web sites did well this year. According to Keynote's >press release http://biz.yahoo.com/bw/000202/ca_keynote_1.html >only one superbowl advertisor web site out of 35 was inaccessible >during the superbowl. > >I didn't notice any significant correlation between the network >provider and the performance of the web site. > >Are folks getting better at predicting advertising generated >traffic? Or are people just massively over-provising their >web sites, and praying? The following is off the record and I cannot divulge the client's name. Hoever, FYI... I was managing the applications team for one of these sites. We had little warning of the ad (found out about it via some of the press descriptions of e-commerce sites and the superbowl rather than from the client). As far as I know nobody had a real marketing prediction at traffic increase due to the ad. Site was designed with some margins for peak traffic early next year and has been running at predicted this year traffic in general, about 1/3 of design capacity. We saw a blip, but only a small one, during game time. It looks like people who were watching the game were watching the game, not geeking. Since nobody had something of the nature which would grab typical football fan's attention (Victoria's Secret ad) this time around, it looks like the direct impact was low. -george william herbert gherbert(a)crl.com

1 0