January 2003 - Test - lists.nanog.org

Nanog broken?
by Ejay Hire 02 Jan '03

02 Jan '03

Hi all. I haven't seen any posts this morning, is the list broken or did everyone take a day off?

3 2

Re: AOL & Cogent
by Paul Vixie 02 Jan '03

02 Jan '03

> The perceived "money on the table" frequently doesn't exist and attempts > to get it may produce the opposite result. well, yeah, sure, but... > * Who they shift the traffic to may be your competitor. ...at least you know they are paying SOMEBODY, thus supporting the market you want to be in. you can then compete in that market. if everybody who could peer in N places worldwide could just get peering, then all kinds of per-bit revenue for "high tier" network owners would turn into per-port revenue for exchange point operators. where's the market in that? how could a "high tier" even exist in those conditions? > If you assume the above three cases are costs and you add that to the cost > of the decreased efficiency of traffic to the target network you can > compare it to the probability that you can sell service to the former > peer. Depending on the relationship, you can guess the likelyhood. well, that's a technical consideration, and as such won't matter until we've burned through some of the overcapacity from the dot-bomb era. right now it's possible to do gaming and voip and other isochronous applications via a transit provider who can backhaul your traffic 1500 miles (or 6000 miles) to some centralised peering point and still have reasonable performance. we will need to 1000X the traffic volume again before this stops working again. which should take about a year.

5 4

NANOG registration
by Susan Harris 02 Jan '03

02 Jan '03

We've now opened registration for NANOG 27, to be held February 9-11 in Phoenix, Arizona: https://www.merit.edu/nanog/registration.form.html General meeting info and the Call for Presentations are here: http://www.nanog.org/mtg-0302/ Hotel information (special NANOG rate expires Jan. 18): http://www.nanog.org/mtg-0302/hotel.html See you soon, and many thanks to Rodney Joffe and UltraDNS for hosting the meeting!

1 0

The Bogon Reference Page
by Rob Thomas 02 Jan '03

02 Jan '03

Hi, NANOGers. [ Apologies to those of you who have seen this post in other fora. ] Many of you have requested a variety of methods for obtaining a list of the bogon prefixes. I have added several additional methods of tracking the bogon prefixes, and I'm also happy to add that two folks have volunteered to be part of the effort. Thanks to Dave Deitrich (bigdave(a)cymru.com) and Steve Gill (gillsr(a)cymru.com) for the assistance! You can now track the bogons through HTTP, e-mail (here and elsewhere), DNS, RADb, and BGP. Feel free to use some or all of these options. They are all detailed in the Bogon Reference Page found here: http://www.cymru.com/Bogons/ Thanks to John Payne, Jared Mauch, Boyan Krosnov, Eddy Dreger, Hank Nussbacher, and Rafi Sadowsky for the feedback and ideas! Comments and feedback are always welcome. Help stamp out bogons and bogus ASNs! :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

1 0

attbi security contact?
by Avleen Vig 02 Jan '03

02 Jan '03

I know the holidays are still upon us, but if anyone from attbi.com is listening who can deal with a security matter I would appreciate an email. Or indeed if anyone has contact with such a person. A little more detail, this regards a user who may be about to start a large scale DDoS on an popular IRC network :-(

1 0

DDos syn attack
by Mike Hyde 01 Jan '03

01 Jan '03

Just wondering how people have delt with DDOS syn attacks on port 80 of a customers server? We had an attack a couple of days ago, and it overwelmed both the customers firewall and, when we tried to turn up filtering on a 7600 cisco router, the router also. We ended up having the customer change his IP for the site under attack. We were lucky in that the attack was against an IP and not the DNS name. -- Mike Hyde <mhyde(a)escape.ca>

9 10

Re: Dutch translation needed
by bdragon＠gweep.net 01 Jan '03

01 Jan '03

> I am not getting through to speed.planet.nl in English, can anyone give > me > a decent translation of in Dutch (The Netherlands): > > "Here are our logs, indicating your host is attempting to access > formmail on our web servers. We have been seeing at least 1,000 attempts > a day > for weeks from this host. Please look into this matter. The logs > are in Mountain US time zone and sync'ed to NTP. Thank you > for your attention to this matter" > > > James Edwards > Routing and Security > noc(a)cybermesa.com You may want to start with mentioning UTC-7 rather than Mountain, as outside of the Americas, probably only EST and PST are memorable (if that). Heck, even living in the US, I have to think about Central vs. Mountain and fallback to old network programming messages like "ER, at 10pm Eastern 9pm Central and Pacific" although these days, they've even shortened that to just mention Eastern and Pacific.. Not to mention even in the US we're quirky about when we observe (if we do) Daylight Saving Time, and how our observance matches that of the rest of the world, which makes using UTC offsets that much more important. "Time is relative. Lunchtime, doubly so" -- Douglas Adams, HHGttG

1 0