February 2002 - Test - lists.nanog.org

RE: Satellite latency
by Rowland, Alan D 27 Feb '02

27 Feb '02

IIRC, DirecWay is the new name (name change only) for DirecTV related to it's new two way capability. Yes, local packets are up linked, no phone line is involved in the connection. Original marketing material said things like "400kbps down, 128kpbs up" but now only state "best effort." There are various reasons for latency/bandwidth issues including the physical loop distance. As stated by a previous poster, it's better than nothing. IMHO it's yet another great product sullied by the tendency of marketing departments to be highly optimistic. :) Just my 2¢. The delete key is your friend. -Al Rowland Personal capacity -----Original Message----- From: Barb Dijker [mailto:barb@netrack.net] Sent: Tuesday, February 26, 2002 7:09 PM To: Tim Devries Cc: nanog(a)merit.edu Subject: Re: Satellite latency I have a tachyon.net system. 600ms is typical with a good aim. Higher latitudes are more error prone. They don't do tcp/ip over the up/down link. They effectively terminate the tcp/ip session on the local lan (answering handshake and acks), encapsulate, and proxy for you on the other end. It makes a BIG difference in overall performance for typical things like surfing and mail delivery. Doesn't help much for interactive work. Type ahead at 600ms is much better than 2x that. vi is usable. Our unit is available for demos and events. DirecPC (Hughes) now has a business grade service called DirecWay. Haven't tried it. One would expect it would be better than the ones intended for residential only. It claims to go to 1.5M down like Tachyon. Barb Dijker NeTrack

1 0

Re: Satellite latency
by Jim Mercer 27 Feb '02

27 Feb '02

On Wed, Feb 27, 2002 at 07:25:52AM -0700, David R Huberman wrote: > My biggest pbeef is the delay while using ssh or telnet. I attribute > this mostly to speed of light issues. Web browsing, Remedy, and other > IP software seem to work acceptably fast given my expectations. > > Have you found 'tools' to assist removing delay from the typical > connection, especially as it relates to ssh? actually, i think the problem you are seeing is moreso related to the asymetric nature of the connection (i think you were referring to directway which is a "one-way" satelite feed). i generally only use such connections for front-ending a squid server. the problem is that the round trip routing of your packets gets pretty diverse. when you type the packets go out the modem, across a terrestrial network to the uplink, then back down over satelite. not much can be done to make that better. if you "own" the network, there are some tunneling things you can do to make things appear to be less asymetric, which might help, but if you are an end-user, you'll just have to tough it out. alternately, configure your router/etc to use the IP of your dial-up connection for ssh/telnet, instead of the IP of the downlink. this will make your telnet/ssh work using only the dial-up connection, which will eliminate the asymetric routing. (ie. interactive traffic uses the dial-up addr, "bulk" services use the downlink). -- [ Jim Mercer jim(a)reptiles.org +1 416 410-5633 ] [ I want to live forever, or die trying. ]

2 2

Maformed SNMP Packet log/trace
by Brennan_Murphy＠NAI.com 27 Feb '02

27 Feb '02

I need a trace or log file of the Malformed SNMP packets recently tracked by CERT. http://www.cert.org/advisories/CA-2002-03.html Thanks, BM

10 9

Re: ICANN - The Case for Replacing its Management
by brandon＠rd.bbc.co.uk 27 Feb '02

27 Feb '02

> So you support limiting TLDs to make lawyer's lives easier? I said the potential of new TLDs is spoilt by those lawyers and some TLD managers actions. More or less doesn't seem to be the solution to the problem brandon

1 0

Re: Maformed SNMP Packet log/trace
by Eric Brandwine 27 Feb '02

27 Feb '02

>>>>> "sd" == Sean Donelan <sean(a)donelan.com> writes: sd> On Tue, 26 Feb 2002, Richard A Steenbergen wrote: >> A lot of those protocols have people looking at them on a regular basis, >> and they still manage to come up with obscure exploits noone else noticed >> (ex: 23mb of buffer overflows to exploit telnetd). sd> So what is the solution for a public network operator. I attended sd> a presentation last week where a Checkpoint reseller suggested the sd> client needed to buy eight Checkpoint firewalls to protect a sd> single web server. I was impressed, what about the undercoating sd> and scotchguard fabric protector. That's actually a possibility, soon as they support OC-192 interfaces ;) Stay away from the undercoating, but the ScotchGuard(tm) is definitely worth it! sd> Is it time to fall back in punt? How would you architect a backbone if sd> you could do it over? Security is not about making things foolproof. They'll always be able to break you, no matter what you do. Security is about assuming acceptable risk, and mitigating unacceptable risk. This whole recent mess has actually gone over fairly cleanly. The vast majority of public infrastructure seems to have been patched with a fair amount of speed, and nobody's noticed any serious outages due to it. Apparently, the risk we assumed was acceptable, and when it became unacceptable, it was mitigated quickly enough. If I could do it over? I'd get in my Tardis, and go back to 1969. I'd teach everyone at DARPA how to spell security. Loose source route, IP options in general, ICMP address mask requests, all these things should go away. sd> Is the complexity of SSH code worth the protection? Or is it better sd> never to access your routers through VTY ports, and always use an sd> reverse-terminal server to the console from an out-of-band management sd> LAN? Console is slow, logs can easily DoS a 9600 baud line. It only allows one connection. Good fallback point, operationally does not scale. SSH is worth the protection, as reference implementations are available, and it requires very little in the way of system support. As long as in-band access to routers is required, SSH (or HTTPS or IPSec) will be with us. As time passes, the quality of the tools that we have to work with improves, and our trust in them can grow. The official answer is control plane separation. This worked for the PSTN, and it's the way the Internet will go, eventually. ericb -- Eric Brandwine | Things should be as simple as possible, but not simpler. UUNetwork Security | ericb(a)uu.net | +1 703 886 6038 | - Albert Einstein Key fingerprint = 3A39 2C2F D5A0 FC7C 5F60 4118 A84A BD5D 59D7 4E3E

4 3

Re: ICANN - The Case for Replacing its Management
by brandon＠rd.bbc.co.uk 27 Feb '02

27 Feb '02

> The bottom line is that expanding the name space with additional TLDs > solves this problem. Then "Two (or more) companies don't *HAVE* to fight > for identical flat space" - because they are each given unique space. Duh! That was nice until someone decided that they're really trade marks and caused legal people to run around registering in each TLD (you have to collect them all or you're not defending your mark), after that new TLDs were just a license to print money. What a waste. brandon

2 1

Re: ICANN - The Case for Replacing its Management
by John Palmer (NANOG Acct) 26 Feb '02

26 Feb '02

Two of the major root server networks are: ORSC (http://www.open-rsc.org) and PacificRoot (http://www.pacroot.net) We are at www.adns.net ----- Original Message ----- From: "Michael 'Moose' Dinn" <dinn(a)twistedpair.ca> To: "John Palmer (NANOG Acct)" <nanog(a)adns.net> Sent: Tuesday, February 26, 2002 10:28 PM Subject: Re: ICANN - The Case for Replacing its Management > > Where do I go for more info on orsc? > > > > We operate one of the ORSC root servers (H.ROOT-SERVERS.ORSC) and > > have seen a FIVE FOLD increase in traffic since the "big announcement" > > yesterday. > > > -- > Michael 'Moose' Dinn, Twisted Pair Network Consulting Incorporated > dinn(a)twistedpair.ca // 902 423 4700 (voice) // 902 423 8407 (fax) > > Colocate your server in our underground bunker! >

1 0

Re: Maformed SNMP Packet log/trace
by Eric Brandwine 26 Feb '02

26 Feb '02

>>>>> "bm" == Brennan Murphy <Brennan_Murphy(a)NAI.com> writes: bm> I need a trace or log file of the Malformed SNMP packets bm> recently tracked by CERT. bm> http://www.cert.org/advisories/CA-2002-03.html Go to the Oulu University page mentioned in the advisory. Download the 4 .jar files that comprise the toolkit. unzip the jar files. There'll be a testcases/ dir in each of them. Each file in this directory is one of their packets. There are 53,000 of them. Have fun! ericb -- Eric Brandwine | Failing organizations are usually over-managed and UUNetwork Security | under-led. ericb(a)uu.net | +1 703 886 6038 | - Warren G. Bennis Key fingerprint = 3A39 2C2F D5A0 FC7C 5F60 4118 A84A BD5D 59D7 4E3E

3 3

OT: spam from Globix to ARIN POCs
by Kai Schlichting 25 Feb '02

25 Feb '02

If there's something I really hate it's a bunch of jerks in the marketing department that are so desperate to get attention, they'll even repeat the mistakes of at least one other organization we all know of - and do so FOR THE SECOND TIME - and annoy operational people at their competitor's (that'd be the NANOG readers), customers and non-customers alike. As far as their "Copyright" on this piece of UCE is concerned, they can stick that where the sun don't shine: There is no inherent right to control 'distribution' of works distributed in an indiscriminate and unsolicited manner: the 2 reproduced UCE/UBE below have key data censored for no other purpose than making it completely useless for getting Globix's message before an even bigger audience. ARIN board: you may want to consider changes to the charter to have sanctions against members that send UCE/UBE to ARIN POCs. There is nothing that gets members' attention as quick as a $5000 "special administrative fee" for unauthorized use of the membership list, even such a public one as the ARIN whois server. Freely accessible doesn't mean free for all and all purposes. Globix abuse desk people: I know your pain. And on another note, that little spamming jerk from Qwest's NYC sales office, NAME REMOVED, should start finding himself a new job while there is time. And don't count on collecting unemployment. Gee, I can be a real jerk on some days, and well: this is such a day. bye,Kai -- "Just say No" to Spam Kai Schlichting New York, Palo Alto, You name it Sophisticated Technical Peon Kai's SpamShield <tm> is FREE! http://www.SpamShield.org | | LeasedLines-FrameRelay-IPLs-ISDN-PPP-Cisco-Consulting-VoiceFax-Data-Muxes WorldWideWebAnything-Intranets-NetAdmin-UnixAdmin-Security-ReallyHardMath --------------------- Received: from mailhost.nyc1.globix.com (mailhost.nyc1.globix.com [209.10.70.250]) by CENSORED (8.9.3/8.9.3) with ESMTP id TAA21672 for <CENSORED@DOMAIN_OF_ARIN_POC>; Fri, 22 Feb 2002 19:XX:XX -0500 (EST) From: dm(a)globix.com Received-Date: Fri, 22 Feb 2002 19:XX:XX -0500 (EST) Received: from mailhost.nyc1.globix.com ([10.0.28.39]) by mailhost.nyc1.globix.com (Netscape Messaging Server 4.15) with SMTP id GRYL0S00.JGT; Fri, 22 Feb 2002 18:XX:XX -0500 To: friends@DOMAIN_OF_ARIN_POC Date: Fri, 22 Feb 2002 18:XX:XX PST Subject: Register for Free Globix Seminar MIME-Version: 1.0 Content-Type: text/html; charset=us-ascii Message-ID: <GRYL0S00.JGT(a)mailhost.nyc1.globix.com> IBM/Globix SeminarG l o b i x C o r p o r a t i o n S e m i n a r S e r i e sIBM and Globix Corporation will present a seminar entitled "New Solutions for the New Year" A discussion on leveraging technology: How small to medium sized companies can take advantage of the lessons learned by other businesses when making an outsourcing decision. XXXXXXXX, February XX, 2002 X:00 PM Registration X:30 PM Presentation X:30 PM Tours and Networking Globix Corporation Seminar Center 139 Centre Street 2nd Floor Seminar Room According to a recent Jupiter Executive Survey, 34 percent of companies handle hosting and infrastructure responsibilities internally - most of these companies overestimate the competitive advantages of hosting internally. This seminar will review the common "Pain Points" of hosting internally and look at how some companies have confronted and answered these questions. Topics to be presented for discussed will be: What are the costs of outsourcing hosting and infrastructure needs as opposed to fulfilling them in-house?How do companies trap themselves into over spending. How can they correct avoidable mistakes?What criteria can companies rely on to select the best hosting and infrastructure vendor?How can you plan for business continuity as a hedge against unforeseen downtime? The theme of the event will be how Globix and IBM combine to provide solutions to challenges. This seminar will also introduce the Globix/IBM Partnership to attendees and show how Globix services combined with IBM products can meet business needs. Featured Speakers: Larry O'Connell, Global Emerging and Competitive Markets, IBM Corporation Steve Wolf, Technology and Applications Services Group, Globix CorporationTo register for this event, visitwww.globix.com/serverseminar/. For additional details, contact Globix at 1-800-4-GLOBIX, or via email @info@globix.com "Globix" and the stylized "G" logo are trademarks of Globix Corporation. © Copyright 2002 Globix Corporation. All Rights Reserved. If you have received this in error or do not wish to be contacted, please reply to this email with 'Remove Me' in the subject line. If you would like this directed to someone else in your organization please reply with new contact details. ===8<===========End of original message text=========== ===8<==============Original message text=============== Received: from mailhost.nyc1.globix.com (mailhost.nyc1.globix.com [209.10.70.250]) by CENSORED (8.9.3/8.9.3) with ESMTP id PAA08893 for <CENSORED@DOMAIN_OF_ARIN_POC>; Thu, 24 Jan 2002 15:XX:XX -0500 (EST) From: dm(a)globix.com Received-Date: Thu, 24 Jan 2002 15:XX:XX -0500 (EST) Received: from mailhost.nyc1.globix.com ([10.0.28.39]) by mailhost.nyc1.globix.com (Netscape Messaging Server 4.15) with SMTP id GQGLDV00.PMB; Thu, 24 Jan 2002 15:XX:XX -0500 To: globix@DOMAIN_OF_ARIN_POC Date: Thu, 24 Jan 2002 15:10:XX PST Subject: Globix and IBM Internet Partnership Seminar MIME-Version: 1.0 Content-Type: text/html; charset=us-ascii Message-ID: <GQGLDV00.PMB(a)mailhost.nyc1.globix.com> Globix Seminar InvitationLast week we sent you a special invitation to the first in a series of seminars hosted by Globix and IBM. This is a reminder that you are cordially invited to this presentation. As strategic business partners, Globix and IBM are uniquely qualified to assist your business in solving complex e-business problems. Industry experts from both Globix and IBM will discuss ways of leveraging today s technology to achieve real results on the Internet. Registration information and the seminar agenda are available by clicking on the link below. Seminar: New Solutions for the New Year Date: January XX, 2001 Time: 4:00 pm to 6:00 pm Location: Globix World Headquarters 139 Centre Street New York, NY 10013 Registration Online: www.globix.com/serverseminar By phone: 1-800-4-GLOBIX, code XXXX Refreshments and tours of our state-of-the-art data center will be available after the seminar. We look forward to seeing you there. Globix Corporation If you would like for us to remove your name from our email list, please hit respond and enter REMOVE in the subject box. We apologize for any inconvenience. ===8<===========End of original message text=========== --

2 1

DNS timeline
by Sean Donelan 25 Feb '02

25 Feb '02

Since it appears DNS goofiness is about to return, I put together a timeline of significant events that affected DNS service technically over the last 20 years. http://www.donelan.com/dnstimeline.html In comparison with other utilities, DNS performs about average. AT&T's telephone network had two major nationewide failures in the last 20 years. Several electrical grids have failed, including the grid covering the Western States due to a single tall tree. All the root servers have been down once, and there have been a couple of instances of zone files being truncated in the last 20 years. Not perfect, but amazingly robust for a technology operated by humans.

3 2