May 2002 - Test - lists.nanog.org

Corporate PGP for network operators
by Sean Donelan 19 Aug '02

19 Aug '02

Ok, extremely dumb question. But I'm sure lots of other people have already solved this one. Network operators have been using various PGPs to exchange confidential information for many years. I have my own personal PGP key for my own use and a nice Unix box of my own. There are licensed versions, freeware versions, guerilla versions, and so forth. NAI is no longer selling a commercial version of PGP Desktop for Microsoft Windows/NT. Phil Zimmerman points people to the OpenPGP alliance http://openpgp.org/members/ What do commercial network operators, who are required to use Microsoft, use for business PGP mail besides NAI? I.E. if we need to exchange PGP mail, what package is least likely to crash Outlook and Windows.

3 3

IDS experience's
by Brandon Knicely 28 Jun '02

28 Jun '02

IDS's have been around awhile but recently became interested in their usefulness. I was wondering if I could get some group feedback on the following: 1. How many folks have actually deployed either a NID, NNID or HID system? 2. Have they been useful or just generated noise and excess cycles? (1 - waste of time, 10 - water walker) 3. Any 'real-world' comparative/useful data and/or opinion on different approaches...ie pattern matching, anomoly detection and/or data mining approaches? 4. Any feedback on Snort, ISS, Cisco or Symantec? Or other newer/different approaches ie Okena? 5. Other general good information, ie issues, gripes, etc.? I would appreciate any help, feel free to contact direct or list and will summarize. thanks, Brandon

4 4

Controlling Spam to the NOC
by Jeff Workman 27 Jun '02

27 Jun '02

Hello, Has anybody on this list figured out an effective way to eliminiate, or at least severely limit, the amount of spam that arrives in your NOC? I am aware of solutions such as Spamassassin, Vipul's Razor, and the various RBL lists, but has anybody used one of these solutions, or anything else, to reduce the amount of spam going into noc@/trouble@/etc mailboxes without severely restricting the rest of the internet's ability to reach the noc via email for legitimate purposes? Particularly in a NOC where it's quite possible that some of your customers are listed in the RBLs but still need to reach you. -Jeff -- Jeff Workman | jworkman(a)pimpworks.org | http://www.pimpworks.org

4 3

Cisco quality
by Ralph Doncaster 07 Jun '02

07 Jun '02

For those saying Cisco is so great, it's still fucked up pretty bad. IOS 12.1 and later doesn't allow an MTU > 1460 on L2TP, while 12.0.7(T) works fine with a 1492 MTU that my PPPoE customers expect. Every rev I've tried from 12.0 and up has problems with CEF when using ISL VLAN sub-interfaces, and without CEF, mac-accounting is screwed up. Now if they charged 1/5th of what they do, I'd say you're getting reasonable value for your dollar... Ralph Doncaster principal, IStop.com div. of Doncaster Consulting Inc.

8 7

IP renumbering timeframe
by Ralph Doncaster 05 Jun '02

05 Jun '02

We entered into a contract with Cogent for service, and were assigned a /22 for our use. This reassignment was listed in Cogent's rwhois server (they don't SWIP). They also gave written permission to another transit provider (Peer1) to accept our BGP announcements for the /22. We have been announcing them to our Peer1 and over a dozen peers for a few months now. After paying Cogent $11K, a billing dispute developed. On Friday May 3 we terminated our service with Cogent, and on May 5 Cogent contacted our main internet connection provder to stop routing these IPs. Cogent did not contact us first. There is still an RADB entry for this block with our AS21936 as the origin. Under pressure from Cogent Peer1 complied, though I think I have them convinced that a few hours notice on a Sunday evg is not a reasonable amount of time to renumber from a /22. What is the generally accpted timeframe for renumbering? My reading of ARIN policy would seem to imply at least 30 days. Ralph Doncaster principal, IStop.com div. of Doncaster Consulting Inc.

25 51

OT: Trying to find a connectivity provider that wont go under (wa s RE: CAIS/Ardent and now Network Access Solutions)
by Rowland, Alan D 01 Jun '02

01 Jun '02

But you have Drew Carey! What about cable access? It's more and more an option that has, IMHO, significant benefits over DSL. No PPPoE for starters... Unless you're in a business zone. :( -Al -----Original Message----- From: Steven J. Sobol [mailto:sjsobol@JustThe.net] Sent: Thursday, May 30, 2002 7:10 PM To: Brian Cc: Deepak Jain; jpalmer(a)utilinc.com; nanog(a)nanog.org Subject: RE: Trying to find a connectivity provider that wont go under (was RE: CAIS/Ardent and now Network Access Solutions) On Thu, 30 May 2002, Brian wrote: > Surprised there isnt much connectivity in the Detroit area, I mean it is > Motor City and all, I would think tons of manufacturing palnts all needing > telecom of some sort or other.. Try to get DSL here; everyone backhauls to Chicago. And Cleveland is the 25th largest city in the USA. Lots of local providers for DS1 and Frame and ATM, just not DSL. :) -- Steve Sobol, CTO (Server Guru, Network Janitor and Head Geek) JustThe.net LLC, Mentor On The Lake, OH 888.480.4NET http://JustThe.net "In a 32-bit world, you're a 2-bit user/You've got your own newsgroup: alt.total.loser" - "Weird Al" Yankovic, "It's All About the Pentiums"

2 1

bandwidth providers in 60 hudson
by Jim Mercer 31 May '02

31 May '02

i'm looking to buy some decent connectivity for a suite on the 18th floor of 60 hudson, NYC. OC3 or 100m ethernet. direct or indirect connectivity to some exchanges would be good too. private email would be nice. -- [ Jim Mercer jim(a)reptiles.org +1 416 410-5633 ] [ I want to live forever, or die trying. ]

1 0

Betr.: KPNQwest
by eric＠mails.ch 31 May '02

31 May '02

well bad & sad news, http://www.totaltele.com/view.asp?ArticleID=52446&pub=tt&categoryid=0

1 0

RE: Trying to find a connectivity provider that wont go under (was RE: CAIS/Ardent and now Network Access Solutions)
by Kyle C. Bacon 31 May '02

31 May '02

We have two POP's and a colo in Detroit. One in Southfield, one in Troy, both on the North side of Detroit. FNSI -> http://www.fnsi.net If anyone is looking for reliable access from a profitable regional player, I'll volunteer. :) K Paul Timmins <paul@timmins To: Brian <bri(a)sonicboom.org> .net> cc: Deepak Jain <deepak(a)ai.net>, jpalmer(a)utilinc.com, nanog(a)nanog.org Sent by: Subject: RE: Trying to find a connectivity provider that wont go under (was owner-nanog@m RE: CAIS/Ardent and now Network Access Solutions) erit.edu 05/30/2002 08:00 PM As far as I know, the following national providers exist in Detroit: (This is by no means, a complete list, and some of these aren't "Big Name" providers, but less likely to go under than John Q Random ISP) Verio Winstar XO AT&T Qwest Covad Level 3 SBC I've heard rumors of speakeasy.net, which I think resells internap I'm sure there's a few other national networks, these are just the ones I have heard of off the top of my head. -Paul On Thu, 2002-05-30 at 19:27, Brian wrote: > > Surprised there isnt much connectivity in the Detroit area, I mean it is > Motor City and all, I would think tons of manufacturing palnts all needing > telecom of some sort or other.. > > Bri > > On Thu, 30 May 2002, Deepak Jain wrote: > > > > > > > Clearly anyone in your market is buying from someone outside of your market. > > The fees associated with reliability (if available) are a function of your > > geography. Large providers are concentrating on the markets that are making > > them the most money. > > > > If you get a few networks in your area that want to save money on the cost > > of reliability you can run a couple of circuits to the next large market and > > try to knit together a reliable network and divide the costs that way. > > > > My guess is that with more large providers on a profit-centered basis you > > won't see the same kind of pricing equality you have been seeing between > > Tier 1 and Tier N markets anymore. > > > > Deepak Jain > > AiNET > > > > -----Original Message----- > > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > > John Palmer > > Sent: Thursday, May 30, 2002 5:39 PM > > To: nanog(a)nanog.org > > Subject: RE: Trying to find a connectivity provider that wont go under > > (was RE: CAIS/Ardent and now Network Access Solutions) > > > > > > > > Its just that they aren't local and there is no need to pay for > > a circuit all the way to Chicago. It seems that so many providers > > have moved out of Macomb county. Anyone have any experience with > > BigNet? We are talking to them now > > > > -----Original Message----- > > From: Bill Woodcock [mailto:woody@zocalo.net] > > Sent: Thursday, May 30, 2002 4:42 PM > > To: John Palmer > > Cc: nanog(a)nanog.org > > Subject: Re: Trying to find a connectivity provider that wont go under > > (was RE: CAIS/Ardent and now Network Access Solutions) > > > > > > > Who can one rely on for connectivity? In general and in the Detroit > > area? > > > I put out a request for bids on T-1's and all the national providers > > were > > > way too high... > > > > Haven't you just answered your own question? I guess if you think > > reliable service is too expensive, you're not in the market for reliable > > service, no? > > > > -Bill > > > > > > >

1 0

CAIS/Ardent and now Network Access Solutions
by John Palmer 31 May '02

31 May '02

CAIS sold our account to NAS. They did this about 5 months back. They are just now getting around to cutting us over. This involves Covad making some changes in their switch somewhere. Back last May, it was PSINet that was selling our account to CAIS. They sent us an e-mail to announce that they were taking over the account and sent us a list of the account details that they had for us. The information was wrong. I sent them corrections. Also made sure they knew that we had our own IP addresses and to be sure to coordinate the BGP stuff with PSI when cutting over. They didn't. PSI kept announcing the routes. Ardent didnt announce them. It took me FIVE DAYS to get them to fix it. Waited on hold for 45 minutes more than 7 times and finally talked to brain dead drones on the other end each time. No luck. Finally wheedled the PSI NOCs direct number out of someone on the phone at PSI and called them. They dropped the route announcements for us. Then it took three more days to get in touch with someone at Ardent. I was able to do that by posting a message here. One of their engineers called me and we had it fixed in ten minutes. Fast forward to Dec/Jan 2001/2002: Now, CAIS (called Ardent now) sold us to Network Access Solutions (NAS). We have been paying them ever since Dec or so. Two months ago, they sent the same kind of e-mail: "We'll be cutting over your connection soon, please fill out this questionnaire, etc". I did so, and wrote a long tome at the end warning them not to mess up the BGP stuff. "It couldn't be that bad twice, could it?" I though to myself. I crossed my fingers. In their e-mail, they told me that they would soon get back to me with a cutover date. This afternoon, at 4:40PM, I got the message "Your cutover date/time is 5PM-8PM Eastern May 29, 2002 (today)" and "The date cannot be changed". Also they said "If you have your own IP addresses", it may take till midnight till the routes propagate (Now I know I'm in trouble - 5pm till midnight?). No sooner did I read the message than the connection went dead. Not the circuit, just the BGP announcements. Its now 7AM Eastern time. We've been offline 13 hours now. Phone drone at NAS says "Hmm, your not listed on our cutover sheet today". I put two and two together: They told Ardent "drop the routes today at 5" and then lost the paperwork internally so the cutover did not happen, but Ardent dropped the routes. Just got off the phone with them again after sitting on hold for 45 minutes. They dont seem to get the message that its a BGP problem and not the circuit. Last time, when we had problems, some kind engineer from CAIS sent me e-mail and offered to help and, like I said, he got us back online in, like 10 minutes. If you're out there, please let me know. I need your help again Please reply to jpp(a)well.com as the e-mail on this message is not accessible at this time. Sorry to bug all of you with this. Let see: 13 hours and running. Last time it was five days. Wanna take bets on how long this time? Funny thing, when I called CAIS afterwards to ask them how they were going to "make it up" to me for knocking me offline for five days, I was sent to the voicemail of some customer service manager who never returned my calls. Lets see how well NAS does. John

12 14