February 2000 - Test - lists.nanog.org

Gold ribbon for Internet security
by Sean Donelan 23 Feb '00

23 Feb '00

ICSA has announced a new gold ribbon for Internet service providers implementing a few basic security steps. Nothing new, except for the participants. Are providers really going to change their ways, or is this just some PR? I was shocked to see Sprint listed as a participant since their engineers have said in the past they wouldn't implement some of the security steps ICSA lists.

1 0

missing commands in Cisco IOS
by John M. Brown 23 Feb '00

23 Feb '00

So I am trying to help a downstream ISP get BGP up and running. It seems that prefix-list and peer shutdown functions don't exist on there rev. The strange thing is that their rev is newer than mine. me 7206 IOS 11.1-19(CC) them 3640 c3640-i-mz.112-18.P is the flash image So what ver should they tell there vendor to get them ??

7 7

CALEA & Electronic Surveillance of packet networks
by Chip Sharp 23 Feb '00

23 Feb '00

FYI, As many of you are aware, the CALEA law that was passed several years ago included provisions for electronic surveillance of packet mode (e.g., IP) data by law enforcement agencies (LEA). The part of CALEA pertaining to packet mode data surveillance has been the subject of much debate in the FCC and the industry as to privacy issues, scope of applicability, etc. The only "safe harbor" standard that currently exists for CALEA is J-STD-025 published as a joint standard by TIA and Committee T1. The second revision of this standard is currently up for ballot by TIA and T1. Since CALEA and this standard may (will?) affect the operations of service provider networks, I wanted to provide a pointer to the letter ballot draft for your information. If your company is a member of TIA or T1, then you can provide letter ballot comments via the normal process. If your company is not a member of TIA or T1, please submit your comments to the TIA secretariat. This issue is being worked with ANSI in terms of a public review process. However, since the ballot deadline is March 6 comments need to be submitted soon. Theoretically (depending on FCC decisions, outcomes of court cases, etc.), this standard would define how you would provide the information required by a warrant to a LEA (e.g., FBI). The deadline for when this must be deployed is in September, 2001. T1 LB 838, Draft Proposed ANSI Trial-Use/Interim Standard - Lawfully Authorized Electronic Surveillance - J-STD-025 Revision A (Joint TIA/T1 draft proposal) To obtain a copy of lb838.pdf go to: WWW: http://www.t1.org/index/10001.htm FTP: ftp://ftp.t1.org/pub/ballots/current/lb838.pdf TIA maintains a web page for information on CALEA at: http://www.tiaonline.org/government/CALEA/ Chip -------------end email------------ Support NetAid! http://www.netaid.org -------------------------------------------------- Chip Sharp Consulting Engineering Cisco Systems Telco Bio-region Reality - Love it or Leave it. --------------------------------------------------

3 3

ARIN-V
by Member Services 23 Feb '00

23 Feb '00

As mentioned once or twice at the NANOG meeting, ARIN-V, the fifth bi-annual ARIN Public Policy and Members Meeting, will be held April 3-5 in Calgary, Alberta and is sponsored by Shaw Communications. This meeting is a great opportunity to offer your input on upcoming policies and processes relating to IP, ARIN and ICANN. Information on registration and the planned agenda is located at: http://www.arin.net/announcements/memmeet.html Hope to see you there!

1 0

Re: missing commands in Cisco IOS
by Danny McPherson 22 Feb '00

22 Feb '00

> I found that some features (namely, MBGP) are not moved from the 11.1CC > train to the main 12.0 train; and you will need 12.0T for them. :-) I beleive you're confused here, though this thread is defintely more appropriate for the Cisco NSP list. > (When will software/hardware implementations be fast enough to build an > [I|routing]OS that is modular - so you can add the features you want > without having to load all the crap you will never need? The question > itself may be moot, since no technical support group could provide service > for such a wide variety of installed systems... *sigh*. ) This is clearly a vendor/implementation issue, not an operational or standardization body one. FWIW, I do agree that more "non-monolithic" approaches will provide better reliability, as do _many other folks. -danny

1 0

Power Outage Study Team
by Sean Donelan 22 Feb '00

22 Feb '00

The Department of Energy released an interim report about several power outages during the Summer of 1999. It was released in January, but I only recently stumbled across it. http://tis.eh.doe.gov/post/

1 0

whois broke again?
by Brad 22 Feb '00

22 Feb '00

I just started getting this output from whois today: # whois americanisp.net [whois.networksolutions.com] The Data in Network Solutions' WHOIS database is provided by Network Solutions for information purposes, and to assist persons in obtaining information about or related to a domain name registration record. Network Solutions does not guarantee its accuracy. By submitting a WHOIS query, you agree that you will use this Data only for lawful purposes and that, under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail (spam); or (2) enable high volume, automated, electronic processes that apply to Network Solutions (or its systems). Network Solutions reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy. [No name] (DA12328-OR) COM And on some domains: [No name] (ID?) is the output. I was able to do this from my shell and networksolutions.com's website. Is anyone having this problem as well? Thanks, Brad

21 44

More route-table bloat vs. ARIN micro-allocations
by John M. Brown 22 Feb '00

22 Feb '00

so I decided to poke around some more... I really can't see how the argument of ""Route / AS-Path" table bloat is going to break things if ARIN starts doing mico-allocations for providers that need to multi-home, but don't need tons of space. I really like the /30's, /32's... Wonder if AS 4293 really needs the diversity with /28's and /27's I count a total of 145 >/24 routes coming from AS 3561 Of course this doesn't even begin to count all the Net-63 /24 breakouts, the Net-12 /24 breakouts, etc....... If people really started doing there part on cleaning up their announcements I bet we could reduce the total routes back down to some nice number........ *> 63.84.242.192/26 166.48.176.25 0 3561 14510 i *> 128.88.250.0/27 166.48.176.25 0 3561 2516 2915 2915 2915 2915 151 i *> 128.88.250.32/29 166.48.176.25 0 3561 2516 2915 2915 2915 2915 151 i *> 137.39.250.20/30 166.48.176.25 0 3561 i *> 158.205.225.40/29 166.48.176.25 0 3561 4694 ? *> 166.32.131.160/27 166.48.176.25 0 3561 i *> 166.35.174.160/27 166.48.176.25 0 3561 i *> 206.98.105.48/28 166.48.176.25 0 3561 4293 i *> 206.141.223.224/27 166.48.176.25 0 3561 6081 7053 7053 7053 7053 i *> 206.142.63.0/28 166.48.176.25 0 3561 i *> 206.151.223.0/26 166.48.176.25 0 3561 4293 i *> 206.151.223.64/28 166.48.176.25 0 3561 4293 i *> 206.151.223.80/28 166.48.176.25 0 3561 4293 i *> 206.151.223.96/27 166.48.176.25 0 3561 4293 i *> 206.151.223.128/27 166.48.176.25 0 3561 4293 i *> 206.151.223.160/28 166.48.176.25 0 3561 4293 i *> 206.151.223.180/30 166.48.176.25 0 3561 4293 i *> 206.151.223.184/30 166.48.176.25 0 3561 4293 i *> 206.151.223.188/30 166.48.176.25 0 3561 4293 i *> 206.151.223.192/27 166.48.176.25 0 3561 4293 i *> 206.152.253.0/27 166.48.176.25 0 3561 4293 i *> 206.157.77.40/30 166.48.176.25 0 3561 i *> 206.157.77.56/30 166.48.176.25 0 3561 i *> 206.157.77.96/30 166.48.176.25 0 3561 i *> 206.157.77.108/30 166.48.176.25 0 3561 i *> 206.157.77.152/30 166.48.176.25 0 3561 i *> 206.157.77.200/30 166.48.176.25 0 3561 i *> 206.157.77.208/30 166.48.176.25 0 3561 i *> 206.171.94.0/26 166.48.176.25 0 3561 3549 13405 i *> 206.218.185.192/26 166.48.176.25 0 3561 3549 i *> 207.49.17.192/28 166.48.176.25 0 3561 4293 i *> 207.51.164.128/26 166.48.176.25 0 3561 11192 i

10 13

enough already on SNV
by Dana Hudes 22 Feb '00

22 Feb '00

Please don't be the umpteenth person to tell me that SNV is Sunnyvale CA and that yes it really is an OC-48

1 0

yahoo, again?
by David Bird 21 Feb '00

21 Feb '00

5 san1.dfw2.verio.net (129.250.2.242) 40.465 ms 39.994 ms 40.208 ms 6 dfw2.dfw3.verio.net (129.250.3.74) 40.082 ms 40.07 ms 39.986 ms 7 s11-1-0.ar1.DAL1.gblx.net (206.132.119.125) 40.922 ms 40.487 ms 40.493 ms 8 pos2-0-155M.cr2.DAL1.gblx.net (206.132.119.117) 41.231 ms 40.6 ms 40.704 ms 9 * * * 10 * * * 11 * * * 12 * * * 13 * * * 14 * * * 15 * * * 16 * * * -- David Bird dbird(a)bpnetworks.com http://www.bpnetworks.com/

9 9