September 2002 - Test - lists.nanog.org

RE: Console Servers
by Bender, Andrew 12 Sep '02

12 Sep '02

> -----Original Message----- > From: ml(a)vayner.net [mailto:ml@vayner.net] > > Hi > > Try looking at this company's line of products: > > http://www.itouchcom.com/ > > they used to be Xyplex. We've had pretty good luck with these... Like other embedded systems, they are a good fit for those without patience for more science projects in the PoP. It seems that the iR 8000 is one of the few (only?) reasonably priced TS systems that have NEBS Level 3 cert... for those that require ILEC colo, or have special durability concerns. Regards, Andrew Bender taqua.com

2 1

Re: [OT: National Moment of Silence] - or lack thereof
by Joshua Smith 12 Sep '02

12 Sep '02

"Al Rowland" <alan_r1(a)corp.earthlink.net> wrote: > The only drop in 'traffic' I've ever noticed was in my former life in > the military. Retreat policy on base was that traffic pulled [cut] i think i was lucky i never had a car while i was living on base :) regarding the 'silence' yesterday - i was wondering if anyone saw a spike in traffic between the hours of 1730-2100 eastern time yesterday destined for addresses in the 64.12.95/24 range, the source addresses were spoofed, but internap managed to decipher that some were coming from singapore tel - i was dos'ed pretty hard last night and could use some help tracing it back tia joshua

1 0

DNS/Routing advice
by Dan Lockwood 12 Sep '02

12 Sep '02

Everyone, I have a customer that is multihomed, to a public ISP and to another large network that uses 10.0.0.0 address space. The private address space also has services available via public address space and consequently is running a split DNS service, public and private. Because of firewalls and the placement of DNS servers this customer has a nasty routing situation and in order to make DNS work for the private numbers, has spoofed the domain of the private network. My question is this: are there any documents or RFCs that outline what is an acceptable practice for running DNS and what is not? Their kluge of a network causes continuous problems for both the upstream ISP and the private network to which they are connecting and we may find ourselves in a situation where we have to say that 'xyz' is an acceptable way of operating and 'abc' is not. Any advice is appreciated. Thanks! Dan Lockwood

5 4

Console Servers
by Charles Sprickman 11 Sep '02

11 Sep '02

Hi, It's been a while since I last saw this thread... I'm looking at a few listed below and looking for comments: Lantronix - http://www.lantronix.com/products/cs/scs820_scs1620/index.html Looks good, can't find a price on Ingram. Cyclades - http://www.cyclades.com/products/ts_series.php Looks to run about $2100 for 16 ports Digi - http://www.digi.com/solutions/devtermsrv/cm/index.shtml Looks to run about $1800 for 16 ports All of the above do sshv2, and that's a requirement. I haven't found much else. For the time being I'm ruling out old stuff like a Portmaster or Xylogics. I'd also appreciate pointers to any "roll your own" parts, esp. IDE -> Flash adapters and multiport serial cards that will work with FreeBSD. I can summarize to keep the noise down... Thanks, Charles -- Charles Sprickman spork(a)inch.com

5 6

Cogent public looking glass?
by Vincent Rais 11 Sep '02

11 Sep '02

hi, Does anybody know of the existence of a public looking glass or traceroute server for Cogent Communications? I used to have my hands on a Netrail (AS4006) looking glass, but this seems to be gone now. thanks, regards, Vincent Rais peering coordinator Versatel Telecom Europe B.V. m.(+34) 68 705 9117 (Spain) e. peering(a)rais-associates.com, peering(a)versatel.net

2 2

Drive-by spam hits wireless LANs
by blitz 11 Sep '02

11 Sep '02

> > >And you think the terresterial sources are hard to shut down.... >Drive-by spam hits wireless LANs > >By Graeme Wearden >Special to CNET News.com >September 6, 2002, 10:14 AM PT >http://news.com.com/2100-1033-956911.html > >LONDON--The proliferation of insecure corporate wireless networks is >fueling the growth of drive-by spamming, a security expert warned on >Thursday.

11 19

OT: National Moment of Silence
by Al Rowland 11 Sep '02

11 Sep '02

Doug, The only drop in 'traffic' I've ever noticed was in my former life in the military. Retreat policy on base was that traffic pulled to the side of the road and the driver got out, faced the music and rendered the appropriate salute through the end of the anthem. Since this occurred at a regularly scheduled time one indication of its approach was a noticeable drop in traffic preceding retreat. Sad commentary on our allegiance at the time. Best regards, _________________________ Alan Rowland -----Original Message----- From: Doug Hughes [mailto:doug@Eng.Auburn.EDU] Sent: Wednesday, September 11, 2002 11:39 AM To: Al Rowland Cc: nanog(a)merit.edu Subject: RE: National Moment of Silence On Mon, 9 Sep 2002, Al Rowland wrote: > > I would think there might be a few folk streaming live feeds during > this period. Might even result in a higher traffic load leading up to > and through the relevant period. Some traffic may also be queued and > continue to flow unless SAs worldwide do a bunch of scripting to > suspend all processes during this period. > A live feed of a national moment of silence consuming traffic. Does anybody but me find this amusingly ironic? :) (I know it's the stuff pre and post silence that the live feeds would be interested in, but still!)

1 0

Re: Drive-by spam hits wireless LANs
by Steven M. Bellovin 11 Sep '02

11 Sep '02

One thing I've noticed that may be an anti-spam measure: STN, the ISP that servers Marriott hotels (among others) seems to have a "transparent" proxy intercepting outbound traffic to port 25. Not sure why they'd do that except to deter check-in spammers. They *don't* do anything with traffic to port 80, as best I can tell. --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com ("Firewalls" book)

1 0

Re: Drive-by spam hits wireless LANs
by Michael.Dillon＠radianz.com 11 Sep '02

11 Sep '02

>I agree, but people said that the spammers wouldn't be able to >deal with BGP route advertisement but there was cases of spammers >injecting routes sending out spam then removing those routes. Wlan is >easy. Spammers come from every walk of life including the various technical professions. Otherwise where would all the spamming software and web-scraping software come from!? Just because someone is a technical expert in BGP routing doesn't mean that they will use their skills the way that many NANOG attendees would like them to. Even in the early days of spam, the green-card spammers hired a technical person to set up servers and write spamming scripts. And let's now forget the uber-hackers who create the scripts used so effectively by script-kiddies. And let's not forget, these spammer geeks learn the knowledge from the same places as everyone else, including the NANOG mailing list. I reckon there is a 99.95% probability that there is at least one NANOG subscriber who is a currently an active spammer geek. So if WLANs were relatively safe yesterday, they won't be safe from now on. Of course, if spammers are reduced to driving around major cities in vans generating 802.11b radio traffic, it might be a lot easier to catch them... --Michael Dillon

1 0

National Moment of Silence
by Hank Nussbacher 11 Sep '02

11 Sep '02

Is anyone planning on measuring backbone loads during the National Moment of Silence at 8:46 a.m. Eastern Standard Time on 9/11? -Hank

6 5