July 2001 - Test - lists.nanog.org

X-10 and like behaviour.
by George Michaelson 19 Jul '01

19 Jul '01

Its probably not a big deal, and if selling bits on the wire makes money "the more the merrier" might be a catch-cry but I wondered if there was a NANOG dimension to these bloody irritating X-10 popups that curse me more and more. Is there some well understood non-edge solution to this kind of crap or do we all wind up rolling our own? -George -- George Michaelson | APNIC Email: ggm(a)apnic.net | PO Box 2131 Milton QLD 4064 Phone: +61 7 3367 0490 | Australia Fax: +61 7 3367 0482 | http://www.apnic.net

9 10

Advanced Countermeasures to prevent a Ddos
by Scott E. MacKenzie 19 Jul '01

19 Jul '01

I was wondering if anyone on this list has considered the idea of trying to eliminate Ddos attacks while designing their Data Centre's network topology. If so, did you include server isolation and or distribution? Secondly, is it even possible to eliminate (or as close to elimination as one can have in the tech world) Ddos attacks with network design and server implementation. Does anyone have an advanced understanding of these issues and if so are you willing to exchange information off-line? Scott E. MacKenzie semackenzie(a)crop.attcanada.ca

1 0

Re: X-10 and like behaviour.
by Daniel Senie 19 Jul '01

19 Jul '01

At 08:26 AM 7/19/01, Frank Thomas wrote: > > > > > Its probably not a big deal, and if selling bits on the wire makes money > > > "the more the merrier" might be a catch-cry but I wondered if there was > > > a NANOG dimension to these bloody irritating X-10 popups that curse me > > > more and more. > > > > > > Is there some well understood non-edge solution to this kind of crap > > > or do we all wind up rolling our own? > > > > Reminds me a lot of the early days of fighting spam...though > > a ban on popups has already been mentioned in the US Congress. > > > >Yep, they even have an opt out page. Although I found this from >another source and no obvious way to this from the frontend of their site. >For what its worth the 'popunders' from x10 are cookie based. The url >below will opt you out for 10years (leap years figured also). The week >or so after they started these annoying things I noticed that x10 was one >of the highest traffic sites (I may be wrong) of the week... I will NEVER >buy anything from them... > >http://www.x10.com/home/optout.cgi?DAY=3652GE=http://www.x10.com/x10ads1.htm There's an ampersand missing between 3652 and GE in the above. Adding that made it work. For those who prefer less typing, I've added the corrected URL as a link on http://www.noads.org/. Unlike the link on the X10 page, this will set the cookie for, as Frank noted, 10 years. I expect in time they'll add additional advertisements, and use different cookies. I'll put new ones on the noads.org page as I learn of them. ----------------------------------------------------------------- Daniel Senie dts(a)senie.com Amaranth Networks Inc. http://www.amaranth.com

2 2

Network Architecture Mission Statements & Organizational ideas
by Murphy, Brennan 19 Jul '01

19 Jul '01

Hello, I realize this topic may be one step outside the strict definition of a technical discussion but it is comparable to the well-received discussions of building a NOC. I'm part of a team that is assembling to act as a network architecture group for our company. We need a mission statement that in generic terms says we respond to business needs with architectural solutions, etc. We can read and write, yes, but it would be nice to see how some other similar groups have put together their mission statement. Additionally, I am interested in learning a bit more about the make-up of network architecture groups at other companies. Is membership on your architecture group confined to engineers/architects? Does it include security engineers? How do you make decisions as a group-- democracy/democracy with management veto, etc.? Any other related comments to this project are appreciated. I will likewise provide a summary of my findings. So, if you are interested in this topic, it may be best to simply contact me offline with either your interest in the results and/or your contributions to query. But of course, if others deem this discussion worthy of the mass mailing nature of nanog, I won't object. :-) Thanks, -BM

2 1

X-10 Opt Out
by Robert Cannon 19 Jul '01

19 Jul '01

The opt out link listed did not work for me. But I found opt out information at http://www.x10.com/x10ads.htm Looks like it lasts only 30 days but looks like you can change that. -B __________________________________________________ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail http://personal.mail.yahoo.com/

1 0

Re: PPPOE, MTU, and boom.
by Scott Silzer 19 Jul '01

19 Jul '01

If you are using an 827 try the ip tcp adjust-mss command. Taken from CCO: Resolved Caveats for Release 12.2(2)XH This section describes possibly unexpected behavior that are resolved in Release 12.2(2)XH. CSCds69577 The PPPoE standard sets the maximum transmission unit (MTU) of an Ethernet packet to 1492 bytes. If a host PC uses the default MTU of 1500 bytes, the router between the server and the host would drop those packets. Even though an ICMP message is sent to the website notifying it of the problem, some websites are programmed to ignore ICMP messages and would continue to send 1500-byte packets that will get dropped. Starting with Release 12.2(2)XH, you can resolve this problem by changing the value of the maximum segment size (MSS) contained in the MTU to 1492 or less. Use the following IOS command: ip tcp adjust-mss mss where mss is 1492 or less. This command does not require NAT to be configured. http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122relnt/17… http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122relnt/80… At 3:35 -0400 7/18/01, Alex Rubenstein wrote: >On Wed, 18 Jul 2001, Alex Rubenstein wrote: > >> It allows you to tinker with the Windows settings of TCP. I adjusted MTU >> to 1400, wham-o, all the sites I listed started working; including, what I >> didn't list before, the downloading of transactions via Quicken. Seems to >> be a fixall. > >I can tell it's getting late, when I reply to myself. > >In the scenerio where you have a router be the PPPOE client (in my test >case, it's a Cisco 827 running 12.1(3)XG4), things are still somewhat >broken. The 827 is routing between an ethernet and a PPPOE session, and >even with the 827 having the MTUs at 1492 or 1400, windoze boxen are still >stuck up there at 1500 and those sites don't work. I then use Mr. TCP and >set the ethernet card of the windows box to a MTU of 1400, and voila, it >works. > >This really sucks for those folks who will have many machines bechind said >router; it will require a Mr. TCP on each and every one of them. > >Sheesh. > > > >-- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben -- >-- Net Access Corporation, 800-NET-ME-36, http://www.nac.net -- -- Scott A Silzer

2 1

Re: Apparent widespread Worldcom ATM failure
by Sean Donelan 18 Jul '01

18 Jul '01

On Wed, 18 July 2001, George William Herbert wrote: > My home/consulting business ISP and my current work > ISP's connectivity have been bit by what appears on first > examination to be a Worldcom ATM failure starting about > 2 hours ago (12:45 PST or so). It appears to be affecting > stuff as widely spread as both west and east coast and > connecting circuits. Does Worldcom have any websites updating the status of their ATM network? The UUNET site has no mention of this, but worldcom's networks aren't very integrated, so it was possible the uunet portion of worldcom was unaffected.

2 1

Update: CSX train derailment
by Sean Donelan 18 Jul '01

18 Jul '01

At 9pm (EDT) the newswires and CNN reported the Baltimore Fire Department had blocked most major highways and access roads to central Baltimore. 10 people have been treated for injuries including two firefighters. The following providers have updates on their public network status web sites about the cable cut and CSX train derailment Alternet/UUNET/Worldcom Abovenet/MFN Mindspring PSI The following providers are NOT reporting any problems on their public network status web sites. Either they haven't updated their web site, or they haven't experienced any affects from the train derailment. AT&T Exodus Cable & Wireless I do not know (or don't have access) to any network status web site for the following providers, so I do not know their status Genuity Level 3 Sprintlink Qwest Because the train derailment involves potentially hazardous materials, no provider has an estimated time to repair. Telecom repair crews will be allowed into the tunnel after the fire department and HAZMAT teams complete their work.

1 0

Re: Apparent widespread Worldcom ATM failure
by George William Herbert 18 Jul '01

18 Jul '01

Furthering my previous: I have been told that this outage totals 5 OC-48s and over 100 T-3 circuits around the country. No ETR reported. -george william herbert gherbert(a)retro.com

5 4

OT: @home contact
by Matt Levine 18 Jul '01

18 Jul '01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Apologies for posting to the list, but does anyone have a (or is anyone?) a high-level engineering contact @home ?? If so, can you please reply off-list? Very important. Sorry for taking up bw w/ this. Matt - -- Matt Levine @Home: matt(a)deliver3.com @Work: matt(a)eldosales.com ICQ : 17080004 PGP : http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x6C0D04CF -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBO1YpLMp0j1NsDQTPEQJYDgCgyseTBa2cQh1BJUxbJJgwLtM3MU8AoPiV X2NbCcFFEn4e1CZFMEDufub1 =0y4X -----END PGP SIGNATURE-----

1 0