January 2002 - Test - lists.nanog.org

Re: Blocking Internet Gaming
by Spencer.Wood＠dot.state.oh.us 08 Jan '02

08 Jan '02

An Official Internet Use Policy really does help....... And a ballbat doesn't hurt either <grin>... Spencer ************************************************************ Spencer Wood, Network Manager Ohio Department Of Transportation 1320 Arthur E. Adams Drive Columbus, Ohio 43221 E-Mail: Spencer.Wood(a)dot.state.oh.us Phone: 614.387.0710/Fax: 815.361.0714/Pager: 866.591.9954 ************************************************************* "Nathan J. Mehl" <memory-nanog(a)blank.org> Sent by: owner-nanog(a)merit.edu 01/07/2002 10:41 AM To: nanog(a)merit.edu cc: Subject: Re: Blocking Internet Gaming In the immortal words of Walter Gray (wgray(a)wwns.net) > > Does anybody know of any good software or way to restrict Internet gaming on > a corporate Network? Yes. A magic product called "Official HR Policy." You'd be amazed how quickly people get the message once someone is fired or docked vacation days for violation of company network usage guidelines. -n ------------------------------------------------------------<memory(a)blank.org> "Look, I don't know how they do things on your home planet, spaceman...but here in Mayberry, we just don't talk to gun-toting, redneck, amphetamine freaks that way." (--Red Meat, "Microwave Pet Carrier") <http://blank.org/memory/>----------------------------------------------------

2 1

Am I Dreaming??
by Alan Wood 07 Jan '02

07 Jan '02

I am curious. Is anyone using Riverstone equipment? The reason I'm asking is because last year I had an opportunity to evaluate some of it's features. LFAP was of interest for reporting and customer profiling. The RS3000 performed very well, and seemed miles ahead of Foundry, but I was never able to put it in production. (Dot Com Bomb) Quite frankly I was impressed by it's features and want to know others opinions. You may reply to me directly if you wish. Somebody shoot me.

1 0

RE: HS protocol analyzer
by LeBlanc, Jason 07 Jan '02

07 Jan '02

Niksun NetVCR is worth looking at. Foundry is doing interesting things with their nextgen ASICs using builtin SMON probes, could almost use one of their small switches as an analyzer. ;) Building this functionality into the ASIC on the switch/router is about the only way stat gathering will ever keep up with fwding rates. Sorry for the FDRY plug. ;) > -----Original Message----- > From: Mike Duckett [mailto:mduckett@bellsouth.net] > Sent: Saturday, January 05, 2002 6:30 AM > To: Nanog@Merit. Edu > Subject: HS protocol analyzer > > > > Looking for HS protocol analyzers options that can, > minimally, filter real > time traffic (e.g., ports, applications, > sessions/conversations, byte/bit > offsets) at rates up to and exceeding OC-3/12 and GigE. > Being limited to a > few seconds makes troubleshooting or analysis very difficult if not > impossible. Our routers are able to keep up with a decent > amount of "high > touch" and still maintain the pace of traffic flow by > employing accelerators > (e.g., ASICs). Great.. Now, how do we troubleshoot problems? > > > > >

1 0

Informal poll on Route Filtering
by John Ferriby 07 Jan '02

07 Jan '02

Do you use SPEWS.ORG (or derived) information to create route filters? Their website portends that this is not uncommon. I'm trying to deduce just how common this practice actually is in reality. Please respond off-list and I will summarize back to the list. -John

1 0

Re: Blocking Internet Gaming
by sthaug＠nethelp.no 07 Jan '02

07 Jan '02

> We've had good luck here with the Packeteer packetshaper 6500. > > http://www.packeteer.com/products/packetshaper/index.cfm > > We use it mainly to control [not block] music download traffic. Anybody tried nmap against a Packet Shaper recently? I tried it against a box here which is no longer in service (not the 6500 model), and the result isn't exactly reassuring. Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no ---------------------------------------------------------------------- Port State Service 21/tcp open ftp 23/tcp open telnet 80/tcp open http 137/tcp filtered netbios-ns 138/tcp filtered netbios-dgm 139/tcp filtered netbios-ssn 520/tcp filtered efs 1024/tcp open kdm TCP Sequence Prediction: Class=64K rule Difficulty=1 (Trivial joke) Sequence numbers: 7E5BA800 7E5CA200 7E5E9600 7E5F9000 7E608A00 7E618400 Remote operating system guess: SunOS 4.0.3

3 2

Re: Blocking Internet Gaming
by Scott Gifford 06 Jan '02

06 Jan '02

"James" <james(a)james-web.net> writes: > What kind of games specifically? > > Like online Java games (Bejeweled)? Or games like Quake, Unreal, Tribes > etc? > > The latter is much easier, just block all traffic to/from the default > ports which use them. A quick google would yield what they use. I'll > give you a quick hint and say Quake3 is 29760-5 or so and Tribes1/2 is > 28000-28005 or so. Doesn't that cause trouble with occasionally blocking ephemeral ports? If you're not allowing incoming connections of any kind (including non-PASV FTP) it shouldn't matter, but blocking ports above 1024 always makes me nervous... ----ScottG.

5 4

Re: Blocking Internet Gaming
by Spencer.Wood＠dot.state.oh.us 06 Jan '02

06 Jan '02

>From our experience, the best product we have found is Websense. It works with Different Firewalls along with Proxy Servers. It's not 100% full proof, but it does a pretty good job.... The best feature is being able to select different types or categories of web sites, and when people can use them. Spencer ************************************************************ Spencer Wood, Network Manager Ohio Department Of Transportation 1320 Arthur E. Adams Drive Columbus, Ohio 43221 E-Mail: Spencer.Wood(a)dot.state.oh.us Phone: 614.387.0710/Fax: 815.361.0714/Pager: 866.591.9954 ************************************************************* wgray(a)wwns.net (Walter Gray) Sent by: owner-nanog(a)merit.edu 01/06/2002 08:03 PM To: <nanog(a)merit.edu> cc: Subject: Blocking Internet Gaming Does anybody know of any good software or way to restrict Internet gaming on a corporate Network?

2 1

Road Runner
by Andy Brezinsky 06 Jan '02

06 Jan '02

Hello, Does anyone have a contact for the NOC or a dns admin of Road Runner (Wisconsin)? One of their dns servers are reporting bad data. Regards, ~Andy Brezinsky ByteHosting Internet Services

1 0

ISP stats?
by bmanning＠vacation.karoshi.com 05 Jan '02

05 Jan '02

This isn't quite ISP specific but might be useful... http://www.ep.net/stats.html --bill

2 2

MetroIX Beta Testers
by Jeffrey Meltzer 05 Jan '02

05 Jan '02

Hi, We're looking for a few more ISP's to turn up some "test" peering at MetroIX in NYC. If you're currently at 60 Hudson or 25 Broadway (due to Enron's demise - where the 111 8th POP currently is, I don't want to turn anyone up there until we get the switch moved), and preferably do not currently peer at NYIIX, give me a shout off list. More info is available at http://www.metroix.net/ Jeff

1 0