April 2001 - Test - lists.nanog.org

black hat .cn networks
by Dan Hollis 08 Mar '02

08 Mar '02

http://wired.com/news/politics/0,1283,43437,00.html Time to drop AS4134. -Dan

16 17

Cable & Wireless "de-peering"?!?
by Kyle C. Bacon 06 May '01

06 May '01

Anyone else receive a "de-peering" letter from Cable & Wireless recently? It even included a friendly "a sales representative from C&W will be contacting you to offer alternative services to access 3561." We peered with MCI prior to the spin off as well as the original C&W network since 1997. Has C&W gotten so large and arrogant that they think they can de-peer with another transit free network and it won't hurt them? Who gets hurt more if a hole is created due to de-peering? The two networks in the dispute or the reputation of the Internet as an unstable network held together with loose agreements that seem to be revisited annually and always risk getting ripped apart by revenue driven management? Looks like it is time for another chapter in the "peering disputes" NANOG archive book. K -- | Kyle C. Bacon | http://www.fnsi.net | Fiber Network Solutions, Inc. | Executive Vice President & COO

4 3

RE: black hat .cn networks
by Roeland Meyer 02 May '01

02 May '01

How quickly can CN be firewalled anyway? > -----Original Message----- > From: Dan Hollis [mailto:goemon@anime.net] > Sent: Monday, April 30, 2001 2:59 PM > To: 'nanog(a)merit.edu' > Subject: black hat .cn networks > > > > http://wired.com/news/politics/0,1283,43437,00.html > > Time to drop AS4134. > > -Dan > >

13 17

New prefix.
by Sabri Berisha 01 May '01

01 May '01

You won't believe this :) -- /* Sabri Berisha CCNA,BOFH,+iO O.O Business Internet Trends * Join HAL!!: www.HAL2001.org ____oOo_U_oOo____ http://www.bit.nl/~sabri * ____________________________________________, +31 318648688 318643334 * DDoS: http://misterpoll.com/3517731598.html L_______________________ */ ---------- Forwarded message ---------- Return-Path: <owner-tech-l(a)AMS-IX.NET> Received: from localhost (bofh [127.0.0.1]) by bofh.bit.nl (8.11.0/8.11.0) with ESMTP id f3Q9D4c04077 for <sabri@localhost>; Thu, 26 Apr 2001 11:13:04 +0200 Received: from pomo.bit.nl [213.136.0.96] by localhost with POP3 (fetchmail-5.5.0) for sabri@localhost (single-drop); Thu, 26 Apr 2001 11:13:04 +0200 (CEST) Received: from listserv-mail.surfnet.nl (listserv-mail.surfnet.nl [192.87.5.141]) by linux.bit.nl (8.8.7/NOSPAM) with ESMTP id LAA03910; Thu, 26 Apr 2001 11:11:27 +0200 Received: from listserv-mail (listserv-mail.surfnet.nl) by listserv-mail.surfnet.nl (LSMTP for Windows NT v1.1b) with SMTP id <0.01CB1D5A(a)listserv-mail.surfnet.nl>; Thu, 26 Apr 2001 11:11:26 +0200 Received: from NIC.SURFNET.NL by NIC.SURFNET.NL (LISTSERV-TCP/IP release 1.8d) with spool id 1664209 for tech-l(a)NIC.SURFNET.NL; Thu, 26 Apr 2001 11:11:25 +0200 Received: from survis.surfnet.nl (192.87.108.3) by nic.surfnet.nl (LSMTP for Windows NT v1.1b) with SMTP id <0.FFD5FD2E(a)nic.surfnet.nl>; Thu, 26 Apr 2001 11:10:48 +0200 Received: from smtp.bevelander.nl ([213.207.0.4]) by survis.surfnet.nl with ESMTP (exPP) for tech-l(a)ams-ix.net id 14shnT-0000ED-00; Thu, 26 Apr 2001 11:10:47 +0200 Received: from beveland-tjkdtz.bevelander.nl (laptop.reinder.nl [213.207.32.35]) by smtp.bevelander.nl (8.11.3/8.11.3) with ESMTP id f3Q9AfO04766 for <tech-l(a)ams-ix.net>; Thu, 26 Apr 2001 11:10:41 +0200 X-Sender: (Unverified) X-Mailer: QUALCOMM Windows Eudora Version 4.3.1 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Message-ID: <4.3.1.2.20010426111230.0200c298(a)s01.bevelander.nl> Date: Thu, 26 Apr 2001 11:18:07 +0200 Reply-To: "AMS-IX Discussion list for technical issues." <tech-l(a)AMS-IX.NET> Sender: "AMS-IX Discussion list for technical issues." <tech-l(a)AMS-IX.NET> From: "Bevelander Noc." <noc(a)BEVELANDER.NL> Subject: New prefix. Comments: To: Ams-ix tech list <tech-l(a)ams-ix.net> To: tech-l(a)AMS-IX.NET X-UIDL: c+b"!_Oj"!3M0"!c5'#! Dear Peers/Colleagues, We will start to announce a new prefix: AS13197 192.168.0.0/16 Please update your filters. Thanks, Reinder van Amerongen, Junior. System/Network Adminstrator and Senior Cabling consultant. Bevelander Internet Services.

5 5

Re: black hat .cn networks
by Richard A. Steenbergen 01 May '01

01 May '01

On Mon, Apr 30, 2001 at 10:18:03PM +0000, Walter Prue wrote: > > The folks in the US who counterattack might be well advised to > reconsider doing so. I would imagine that traffic from the US would > be closely monitored. Any new hacking tricks that these > counterattacks might use would then be recorded and analyzed. These > techniques could then be used by them to further attack the US. Oh for the love of god, 15 web sites get defaced and it's suddenly worth trying to deny internet access to a billion people? They watch a story on the news, and think "wouldn't it be kewl if...". Any excuse or boredom will do, and then the media blows it out of proportion because it makes for an interesting story. I bet it's probably the same number of hacks that you'd see on a normal day, just against another country's www..gov's instead of their own. -- Richard A Steenbergen <ras(a)e-gerbil.net> http://www.e-gerbil.net/ras PGP Key ID: 0x138EA177 (67 29 D7 BC E8 18 3E DA B2 46 B3 D8 14 36 FE B6)

6 7

California ISO announces new notification service
by Sean Donelan 01 May '01

01 May '01

Things change. The California Independent System Operator, the folks in charge of the electric transimission grid in california, announced today they've established a new notification service. In case the ISO implements rotating outages or electrical emergencies, they will send e-mail to newsrooms. >From the media release, it appears this is only for members of the media. For the public, the ISO will add outage information during rotating blackouts to their System Status web page http://www.caiso.com/ Local power companies also have evolving notification policies. As the number of rotating blackouts increase this summer, I expect all of them will provide notification. The Internet will be one of the primary methods for transmitting notifications to the media, which will in turn inform the public.

4 4

Web Based "BGP Toolkit" and "Peering Analysis"
by Randy Neals 01 May '01

01 May '01

I found this web site has some interesting tools which can generate routing reports and suggested BGP configs from a database containing Route Table, RADB and Registry Data. http://www.netconfigs.com/ The interesting stuff is under "AS Peering Analysis" and "Cisco BGP Config Toolkit". (I have no affiliation with this web page.) Regards, Randy ---------------------------------------------- Randy Neals Technology and Network Development Engineering GT Group Telecom Inc. Suite 800, 20 Bay Street Toronto, Ontario, Canada smtp://rneals@gt.ca/ voice://416.848.2693/ ---------------------------------------------- Group Telecom - Completely Connected (tm) http://www.gt.ca/ NASDAQ:GTTLB AS6539 ----------------------------------------------

2 1

Re: black hat .cn networks
by Kevin Day 01 May '01

01 May '01

> > whois -a AS 4134 > Data Communications Bureau (ASN-CHINALINK) > 40, Xue Yuan Lu > Beijing > 100083 > CN > > Autonomous System Name: CHINALINK > Autonomous System Number: 4134 > > Coordinator: > Wan, Jun (JW221-ARIN) dstanton(a)HQ.SI.NET > (861)-201-2994 (FAX) (861)-205-3995 > > Record last updated on 01-Dec-1994. > Database last updated on 28-Apr-2001 22:45:44 EDT. > > The ARIN Registration Services Host contains ONLY Internet > Network Information: Networks, ASN's, and related POC's. > Please use the whois server at rs.internic.net for DOMAIN related > Information and whois.nic.mil for NIPRNET Information. > > > craig Ok, that's freaky. # whois -a AS 4134 No match for "4134". %%%%%%%%%%%%%%%%%%% NO MATCH TIP %%%%%%%%%%%%%%%%%%%%%%%% % % % ALL OF THE POINT OF CONTACT HANDLES IN THE ARIN % % WHOIS END WITH "-ARIN", IF YOU ARE QUERYING A POINT % % OF CONTACT HANDLE PLEASE ADD -ARIN TO YOUR QUERY. % % % %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% The ARIN Registration Services Host contains ONLY Internet Network Information: Networks, ASN's, and related POC's. Please use the whois server at rs.internic.net for DOMAIN related Information and whois.nic.mil for NIPRNET Information. ARIN must be broken tonight. :) -- Kevin

3 2

RE: black hat .cn networks
by Segal, Mark 01 May '01

01 May '01

if it is actually based from there... Mark -- Mark Segal Director, Data and Internet Planning Axxent Corp. Tel: (416)907-2858 > -----Original Message----- > From: Dan Hollis [mailto:goemon@anime.net] > Sent: Monday, April 30, 2001 5:59 PM > To: 'nanog(a)merit.edu' > Subject: black hat .cn networks > > > > http://wired.com/news/politics/0,1283,43437,00.html > > Time to drop AS4134. > > -Dan > >

4 4

RE: black hat .cn networks
by Roeland Meyer 30 Apr '01

30 Apr '01

> From: Jim Mercer [mailto:jim@reptiles.org] > Sent: Monday, April 30, 2001 3:23 PM > > On Mon, Apr 30, 2001 at 03:11:25PM -0700, Dan Hollis wrote: > > On Mon, 30 Apr 2001, Roeland Meyer wrote: > > > How quickly can CN be firewalled anyway? > > > > As quickly as you can write route-map filters > > i don't know that it will be that easy. That's kind of my point ... > surely, not all of china connects through a single AS. My understanding is that CN has been looking for ways and means to firewall itself for years. It's not entirely fond of the wild and woolly Internet. > as well, i suspect that the same hackers would be able to > manage a dial-up into some extra-china ISP. This is exactly why CN has been unsuccessful in their quest.

1 0