September 2001 - Test - lists.nanog.org

RE: 3rd Party Security Audits
by Steve Smith 25 Sep '01

25 Sep '01

We had ISS (Internet Security Solutions) do ours per British Standards. -----Original Message----- From: Allen Baragar [mailto:abaragar@bridge-way.com] Sent: Tuesday, September 25, 2001 10:52 AM To: nanog(a)merit.edu Subject: 3rd Party Security Audits I am looking for information on 3rd party security audits. If you have information on who will perform these audits, what standards they use, what we would do as far as minimum requirements, etc. it would be greatly appreciated. Regards Allen Baragar C.C.A. Technical Analyst - Hosting Bridgeway Software, Inc. Abaragar(a)Bridge-way.com

1 0

RE: National infrastructure asset
by Los, Ralph 25 Sep '01

25 Sep '01

Raul, Yep. Look at it's stock trading! I have it on an internal link which I can't give you. Here's the Reuters link: http://www.reuters.com/news_article.jhtml?type=internetnews&StoryID=243901 Ralph M. Los Asst. Vice-President, Internet Systems and Security EnvestnetPMC rlos(a)envestnet.com (312) 827-3945 (direct) (312) 296-9003 (wireless w/voicemail) * If you haven't been hacked, you don't know where your vulnerabilities lie* -----Original Message----- From: Raul D. Rincon [mailto:raul@dn.net] Sent: Tuesday, September 25, 2001 11:22 AM To: Los, Ralph Subject: Re: National infrastructure asset i'm looking for stories on this... did it just get announced? r > Exodus Stock plummets >55% as news of them filing bankruptcy fill Wall > Street. Ouch. (Just s side note) > > Ralph M. Los > Asst. Vice-President, Internet Systems and Security EnvestnetPMC > rlos(a)envestnet.com > (312) 827-3945 (direct) > (312) 296-9003 (wireless w/voicemail) > * If you haven't been hacked, you don't know where your vulnerabilities lie* > > > -----Original Message----- > From: Steve Meuse [mailto:smeuse@genuity.net] > Sent: Tuesday, September 25, 2001 11:05 AM > To: Joel Jaeggli > Cc: nanog(a)merit.edu > Subject: Re: National infrastructure asset > > > > At 01:33 PM 9/24/01 -0700, Joel Jaeggli wrote: > > >tat-14's landing sites are green hill, rhode-island and shirley, new > >york are they not? > > > >joelja > > I saw that you answered your own question, but to elaborate, the TAT-14 > domestic landing points are Tuckerton, NJ and Manasquan, NJ. > > -Steve > >

1 0

RE: National infrastructure asset
by Los, Ralph 25 Sep '01

25 Sep '01

Exodus Stock plummets >55% as news of them filing bankruptcy fill Wall Street. Ouch. (Just s side note) Ralph M. Los Asst. Vice-President, Internet Systems and Security EnvestnetPMC rlos(a)envestnet.com (312) 827-3945 (direct) (312) 296-9003 (wireless w/voicemail) * If you haven't been hacked, you don't know where your vulnerabilities lie* -----Original Message----- From: Steve Meuse [mailto:smeuse@genuity.net] Sent: Tuesday, September 25, 2001 11:05 AM To: Joel Jaeggli Cc: nanog(a)merit.edu Subject: Re: National infrastructure asset At 01:33 PM 9/24/01 -0700, Joel Jaeggli wrote: >tat-14's landing sites are green hill, rhode-island and shirley, new >york are they not? > >joelja I saw that you answered your own question, but to elaborate, the TAT-14 domestic landing points are Tuckerton, NJ and Manasquan, NJ. -Steve

1 0

Question on Source Routing Option
by tarun banka 25 Sep '01

25 Sep '01

Hello I am not sure if this is the right forum to seek answer but i still would like to try. I am graduate student in department of computer science at colorado state university. I am trying to source route my packets on the internet, I want my packets to take specified path from server to client and vice versa. I am aware that source routing option is disabled because of security risks. I want to know is there any tool which can help me in finding what routers that can support source routing. It will be so nice if you could help me as I am not finding appropriate information..It will help me allot in my research work. With Regards > Tarun _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

2 1

3rd Party Security Audits
by Allen Baragar 25 Sep '01

25 Sep '01

I am looking for information on 3rd party security audits. If you have information on who will perform these audits, what standards they use, what we would do as far as minimum requirements, etc. it would be greatly appreciated. Regards Allen Baragar C.C.A. Technical Analyst - Hosting Bridgeway Software, Inc. Abaragar(a)Bridge-way.com

1 0

Peering BOF IV at NANOG 23
by William B. Norton 25 Sep '01

25 Sep '01

...This message is for Peering Coordinators coming to NANOG 23 in Oakland... Monday evening there will be a Peering BOF for the Peering Coordinator community. The goal of this Peering BOF is to facilitate ISP peering by building community and through introductions. Here is the abstract and how you can *actively* participate. Peering BOF IV ----------------------- Now more than ever, Internet Service Providers are focusing on ways to increase the resiliency of their networks and if at all possible, reduce their operating costs at the same time. Past research (Peering Decision Tree (presented at NANOG 19) and A Business Case for Peering (send me e-mail for a copy)) demonstrates the economic tradeoffs of peering and highlight the simple but challenging first step: How to know who to talk with at the ISP to get peering set up? This Peering BOF focuses on this first step using "Peering Personals". Here is how it works. We solicit Peering Coordinators (before the meeting) asking them to characterize their networks and peering policies in general ways ("content heavy" or "access (eyeball) -heavy", "Multiple Points Required" or "Will Peer anywhere", "Peering with Content OK", etc.). From the answers we will select a set of ISP Peering Coordinators to stand up and present a 2-3 minute description their network, what they look for in a peer, etc. allowing the audience to put a face with the name of the ISP. I will have a background page behind the Peering Coordinators that has Icons associated with each characteristics so folks can see if an ISP is a good peering candidate at a glance. At the end of the Peering BOF, Peering Coordinators will have time to speak with Peering Coordinators of ISPs they seek to interconnect with. The expectation is that these interactions will lead to the Peering Negotiations stage, the first step towards a more fully meshed and therefore resilient Internet. If you are a Peering Coordinator and wish to participate in this BOF, please fill out the following form and e-mail to wbn(a)equinix.com with Subject: Peering BOF IV -------------------------------------------------- snip ------------------------------------------------ Name: Title: Company: Check each that apply: ___ We are an ISP (Sell access to the Internet) ___ We are a Non-ISP (Content Company, etc.) ___ We are Content-Heavy ___ We are Access Heavy ___ Peering with Content Players or Content Heavy ISPs is OK by us ___ We generally require peering in multiple locations ___ We will peer with anyone in any single location ___ We have huge volumes of traffic (lots of users and/or lots of content) (huge: > 1 Gbps total outbound traffic to peers and transit providers) ___ We have a global network ___ If given the opportunity I would like to stand up and say a few words about my network and what I am looking for in a peer. Peering Contact Database -------------------------------------- At the first NANOG Peering BOF I volunteered to maintain a Peering Contact Database (as an Excel Spreadsheet) that I e-mail out about every six weeks to participating Peering Coordinators. If you are a Peering Coordinator and would like to be listed in the PCD and get updates of the PCD periodically, send a note to wbn(a)wbnorton.org with Subject: PCD. BTW - I maintain this as a community service and is completely separate from my role at Equinix. Bill ---------------------------------------------------------------------------- ------------------------------------------------- William B. Norton Co-Founder and Chief Technical Liaison Equinix wbn(a)equinix.com 650.315.8635

1 0

Re: Tornadoes: d.root-servers.net (terp.umd.edu)
by Marshall Eubanks 25 Sep '01

25 Sep '01

> Forwarded from Marty Schoch <marty(a)multicasttech.com> Some pictures of the UMD campus from a student after the tornado hit. http://www.glue.umd.edu/~eliu/tornado1_glue.htm > >2 people dead, 50 injuried, 3000 evacuated. > >Two tornadoes move across 70 miles of Northern Virginia, Maryland >and Washington DC. Winds were measured at a peak of 206 miles >per hour. University of Maryland: College Park has canceled >classes today, and Maryland's Governor has declared a state of >emergency in Prince George's and Howard counties. Tornadoes are >rare in this part of the country, and even rarer at this time of year. > >The area has many different Internet facilities, data centers, >and companies. Tornadoes generally create rather narrow >paths of destruction. Public Internet performance measurements >show two distinct, but minor blips near the time of the tornadoes. >It does show the importance of having an "all-hazard" response >plan, instead of concentrating on only one threat. > > > > Marshall Eubanks tme(a)21rst-century.com

1 0

d.root-servers.net (terp.umd.edu)
by Sean Donelan 25 Sep '01

25 Sep '01

A tornado has struck the University of Maryland, killing two. News reports indicate extensive destruction around the campus. d.root-servers.net (also known as terp.umd.edu) appears to be up, and functioning unscathed.

1 1

Data Center AC Issues
by ainman＠umich.edu 25 Sep '01

25 Sep '01

Can anyone recommend an expert Troubleshooting/Design firm that has extensive experience with Data Center specifici AC issues? We have a strange problem (probably with the airflow/vents/arrangements) which has machines in various locations dying due to heat, when the ambient temp isn't above 90. I've tried to find folks to deal with this and I get: a) Sales Rep's who want me to upgrade the entire system b) Folks who don't have Data Center experience but are willing to try c) Folks who claim to have experience but who either won't give ma references or who's reference don't say nice things about them I got a line on two places in California (we're in Michigan) as was desperate enough to call them but both seem to be out of business. Thanks in advance for any advice and/or recommendations. -- Andrew

3 2

Re: Data Center AC Issues
by David VanHorn 24 Sep '01

24 Sep '01

At 10:18 PM 9/24/01 -0400, ainman(a)umich.edu wrote: >Can anyone recommend an expert Troubleshooting/Design firm that has >extensive experience with Data Center specifici AC issues? > >We have a strange problem (probably with the airflow/vents/arrangements) which >has machines in various locations dying due to heat, when the ambient temp >isn't above 90. Are you monitoring your line voltage? I've seen "normal" AC lines, in the US, anywhere from 70-140VAC. Modern equipment use switcher power supplies, which draw more current as the voltage goes lower. Heat in the power supply is a function of current squared. So, as the line voltage goes lower, the equipment gets hotter. (paradoxical-seeming, ain't it?) -- Dave's Engineering Page: http://www.dvanhorn.org Got a need to read Bar codes? http://www.barcodechip.com Bi-directional read of UPC-A, UPC-E, EAN-8, EAN-13, JAN, and Bookland, with two or five digit supplemental codes, in an 8 pin chip, with NO external parts.

1 0