October 2001 - Test - lists.nanog.org

RE: [NEWS] FBI To Require ISPs To Reconfigure E-mail Systems (fwd )
by Matt Zito 17 Oct '01

17 Oct '01

Benjamin franklin said it, iirc. Matt -- Matthew J. Zito Systems Engineer Register.com, Inc., 11th Floor, 575 8th Avenue, New York, NY 10018 Ph: 212-798-9205 PGP Key Fingerprint: 4E AC E1 0B BE DD 7D BC D2 06 B2 B0 BF 55 68 99 > -----Original Message----- > From: Larry Diffey [mailto:ldiffey@technologyforward.com] > Sent: Wednesday, October 17, 2001 4:41 PM > To: nanog(a)merit.edu > Subject: [NEWS] FBI To Require ISPs To Reconfigure E-mail > Systems (fwd) > > > > Let's consider the ramifications of this: > > The FBI steps up the monitoring of law abiding citizens and > great expense to > private industry. > > Criminals, terrorists and other evildoers think about and say, > "Hmmm......since the FBI might monitor the email that passes > through our > ISP, let's set up our own mail servers outside of our ISP and > communicate > directly over VPN's and encrypted P2P networks. Yeah that > should work. Or > gosh, let's use off shore email serves set up by our own > criminal networks > posing as legitimate businesses. Or let's set up an little > ISP and have > some out of band email servers who's traffic can't be spied on." > > "Those who would trade freedom for security will wind up with > neither." I > forget who said it and I don't feel like looking it up. > >

1 0

OpEd Security practices
by Sean Donelan 17 Oct '01

17 Oct '01

I read this OpEd piece today, and it captures many of the discussions I've had with people during the last month. http://dailynews.yahoo.com/h/ucrr/20011013/cm/security_in_the_homeland_--_a… I highly recommend Charlie Schnabolk's book, Physical Security: Practices and Technology. Its one of several I've found very helpful in trying to understand security. Hiring ex-cops is one facet of security, but there is more to security than big guys with guns. In today's world you need a multi-disciplinary group handling security.

2 1

219/8 Additional IPv4 address range allocated to APNIC
by George Michaelson 16 Oct '01

16 Oct '01

[posted on behalf of Son Tran -ggm] ----------------------------------------------- Dear colleagues APNIC received the IPv4 address range 219/8 from IANA on 12 October 2001 and will now begin making allocations from this range. Please configure your routing filters accordingly. For more information on the resources administered by APNIC, see: http://www.apnic.net/db/ranges.html For information on the minimum allocation sizes within address ranges administered by APNIC, see: http://www.apnic.net/db/ranges.html For information on the minimum allocation sizes within address ranges administered by APNIC, see: http://www.apnic.net/db/min-alloc.html Kind regards Son APNIC Member Services Department -------------------------------------------------------------

1 0

RE: Communities
by Kevin Gannon 16 Oct '01

16 Oct '01

> > I've been thinking about other information that could be conveyed in > > communities. For instance, bandwidth, delay and packet loss. > And generate a route flap every time a link gets used more or less? > That would be suboptimal to say the least (the word `countereffective' > seems more applicable to me). Using dynamic data for this is not going to work in BGP, so this would have to be static information (hm, packet loss is not too static, hopefully). Static system-derived or configured information would already help a lot. You can then easily select the route with the highest potential bandwidth or the lowest speed-of-light delay, without the need to know a lot about the internals of a transit network. Introducing "metrics" like this like this is not contrary to BGP design philosophy: the way in which an AS selects the best route is not defined in the RFC and the length of the AS path is certainly not the best possible criterion. The processing along the way would be limited to a simple addition (delay), compare/replace (bandwidth) or multiplication (packet loss) without introducing anything SPF-like. I guess using static information for BW could be useful however surely in most peering situation only the "best" path is advertised and this selection is based on normal prefix lenght/BGP attributes so for 1:1 peers you are relying on there IGP metrics for the best "internal" path. So multi hop traffic engineering is not possible within others AS's ? I agree an automatic system (a bit like auto-tag in Cisco world) could be very useful for example in a trival situation where you have two peers to say AS701 and one is an OC12 and one is a DS3 and auto community on just the bandwidth would be useful, especially if there was added logic in the BGP decesion process. Of course for vendors who do not use the logic it is invisible. Regards, Kevin

3 2

C&W
by Berger, Gary 16 Oct '01

16 Oct '01

Anyone see any problems with C&W peering? Gary Berger Internal Consultant, Principal Dow Jones & Company Enterprise Infrastructure Services

1 0

RE: Communities
by Kevin Gannon 16 Oct '01

16 Oct '01

<snip> I've been thinking about other information that could be conveyed in communities. For instance, bandwidth, delay and packet loss. If each router along the way modifies such a community (should probably be an extended one) then a much richer set of information would be available to multihomers to aid in route selection. Hmmm well isn't this not what OSPF/EIGRP are *supposed* to do but they only calculate the values once. I guess the logic being you don't want SPF calcs killing all the routers in an area. For BGP you could either follow this logic or update the adverts every "x" minutes/hours, does this offer any more information given it is so old. Or you change the advert more dynamically and you send Cisco shares soaring as we need to upgrade routers :o). Mind you is this not a bit like QoS Policy Propagation in BGP in reverse (in so much as you are asking for delay/bw/packet loss guarantees)? I think even basic communities add value to a clued in peer/customer. Being able to limit the distance of your adverts for example. For content heavy sites this can be useful if you want to say peer with joe-bloggs-AS so that people in joe-bloggs city get "better" access. An example of this is ip-plus see the URL below: http://www.ip-plus.net/technical/config_bgp-en.html#5 Regards, Kevin

2 1

National Data Center listing.
by Ed Fay 16 Oct '01

16 Oct '01

Is there a way that I can find out who all might have Data Centers in Beaumont, Nederland or Port Aurthur Texas? I did some searching myself of nanog archives and couldnt find anything. Thanks. ------------------------------------------------- __ __ _ / / ___ ___ / /_(_)__ ___ _ _______ __ _ / _ \/ _ \(_-</ __/ / _ \/ _ `// __/ _ \/ ' \ /_//_/\___/___/\__/_/_//_/\_, (_)__/\___/_/_/_/ /___/ Edward Fay Austin, TX Network Operations Lead Tech Austin NOC 1-512-257-4703 Austin Direct Line 1-512-532-2224

1 0

Cable Connoisseurs
by Sean Donelan 16 Oct '01

16 Oct '01

BusinessWeek has an interesting article about research into one of our favorite problems. Rodents chewing cables. http://biz.yahoo.com/bizwk/011015/9jbnalvrua0gp7v7bkwjva_3.html Researchers are trying to make cables less tastey to our furry friends.

2 1

RE: Communities
by Kevin Gannon 16 Oct '01

16 Oct '01

Point taken. Regards, Kevin -----Original Message----- From: Niels Bakker [mailto:niels=nanog@bakker.net] Sent: 16 October 2001 12:35 To: Kevin Gannon Cc: 'nanog(a)merit.edu' Subject: Re: Communities Kevin, I have a very hard time reading your mails. You quote other people without properly differentiating between their and your words, even (save a Cc:) without any attribution at all. This makes your mails a royal pain in the ass to read, since you do not provide any hints from what previous mail you included excerpts (as in a In-Reply-To: header, to name one widely adopted industry standard), so that even trying to find the original mail is a quest for a needle in a NANOG mailbox-sized haystack. In short: Please learn to quote. You'll communicate better for it. -- Niels.

1 0

cantat3?
by Hank Nussbacher 16 Oct '01

16 Oct '01

Has anyone heard about Cantat3 being down today? -Hank

1 0