February 2003 - Test - lists.nanog.org

Re: Remote email access
by Michael.Dillon＠radianz.com 27 Feb '03

27 Feb '03

> Hence there is no space-efficient way of noting an authority > chain, other than entering every single IP address ever assigned, all in > one big data base. > Alas, that ain't feasible. I beg to differ. Essentially, the collective databases of the address registries are the data base that you describe. But... > At a minimum, it is essentially impossible to > keep such a database up to date. You may be right. The ARIN, RIPE and APNIC databases are filled with junk, lies, and inaccuracies. On the face of it this seems to prove that it is impossible to keep the data up to date. However, since there has never been any significant effort to ensure that the databases are accurate and up to date, this could change. If ARIN, RIPE and APNIC were to find some financial and political support, then I believe that they could provide a global authoritative database of all IP address ownership that was reasonably accurate and up to date. If this could be queried by a standard protocol such as LDAPv3 (Referral LDAP) then the distributed database could be queried in much the same way as the distributed DNS is. What would be the point? Well, if my MTA receives a connection on port 25 I could look up the source IP address in the LDAP directory to identify the owner. Since an LDAP directory can contain arbitrary information related to its entries, perhaps I could find out whether or not that source IP is registered as an SMTP server and also retrive the abuse email address of the organization who has registered this address. --Michael Dillon

7 7

RIPE NCC network affected by the DDoS attack
by Andrei Robachevsky 27 Feb '03

27 Feb '03

Dear Colleagues, Starting from 14:00 UTC today, 27 February, RIPE NCC network suffered a large DDoS attack. It was a distributed ICMP echo attack. The attack caused various congestion related problems for the RIPE NCC's network, to the extent that our BGP peering sessions were affected, and non-ICMP traffic was being randomly dropped. The attack was successfully mitigated with cooperation of our peer networks at AMS-IX. Network condition returned back to normal at 16:30 UTC. As a result some of our services, including www.ripe.net (web), whois.ripe.net (RIPE Database), ns.ripe.net (DNS) and ftp.ripe.net (FTP) were not accessible during this timeframe. Now all services are back to normal. Regards, Andrei Robachevsky CTO, RIPE NCC

1 0

Lowering the Homeland Security Advisory Threat Level
by Sean Donelan 27 Feb '03

27 Feb '03

CNN (and most other news sources) are reporting that the Department of Homeland Security is lowering the threat level from "Orange" to "Yellow" later today. There is no sign of any change on the Department of Homeland Security web site yet. Has any ISAC given out information to its members?

2 1

Re: RIPE Down or DOSed ?
by Daniel.Diaz 27 Feb '03

27 Feb '03

Dear all, FYI Since 14:00 UTC today Feb 27, RIPE NCC has been under ICMP DDoS attack. We have been isolating this applying internal measures and coordinating this with our upstream providers to isolate it as soon as possible. We are confident it will be soon mitigated. Thanks and regards. -- Daniel.Diaz Marshall Eubanks <tme(a)multicasttech.com> writes: * * Can anyone else get to ripe.net ? * I cannot seem to access the whois or any other service (my ripe traffic * goes through Sprint). * When I ping peach.ripe.net, I get 90%+ missing packets + "destination * host unreachable" * from inside Sprint. * * * Regards * Marshall Eubanks * -- Daniel.Diaz Operations Manager RIPE NCC

1 0

How can I view all of the pending config at once?
by Daniel Abbey 27 Feb '03

27 Feb '03

1 0

Change in homeland security threat level
by Rob Thomas 27 Feb '03

27 Feb '03

Hi, NANOGers. For those of you tracking the DHS threat level - The Homeland Security threat level is very likely to be lowered one notch today, according to Marcus Sachs. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

1 0

Fw: RIPE Down or DOSed ?
by Jack Bates 27 Feb '03

27 Feb '03

From: "Remco van de Meent" <meent(a)cs.utwente.nl> > [I cannot post on nanog hence this private mail] > > > RIPE NCC just sent an email to the AMS-IX list stating that they are > currently experiencing an ICMP DDOS attack. > > > > cheers, Remco.

1 0

RED ALERT! heads up Quick security alert
by blitz 27 Feb '03

27 Feb '03

SRI if this is OT, BUT, its a security related subject. >Since most of us deal with UPS this info may be helpful. > > > > > >------------------------------------------------------------------- >FYI ... > >Quick security alert: $32,000 worth of UPS uniforms have been purchased >over the last 30 days by person(s) unknown on eBay. Law enforcement is >working the case however no suspect(s) have been identified. Subjects may >try to gain facility access by wearing these uniforms. >If anyone has suspicions about a UPS delivery (i.e., no truck but driver, >no UPS identification, etc.), contact UPS to verify employment. > > >URGENT >N.J. OFFICE OF COUNTER-TERRORISM ADVISORY >Re: POSSIBLE IMPERSONATION OF UPS PERSONNEL SEEKING ACCESS TO >BUILDINGS >The New Jersey Office of Counter-Terrorism has received a report of an >attempt by an unknown individual to enter a government facility by >falsely posing as an employee of the United Parcel Service. Based on >this incident, security personnel should exercise heightened vigilance >when screening all delivery personnel at the entrances to all buildings and >when accepting deliveries. Such measures should include careful inspection >of credentials and identification of all delivery personnel to ensure that >they are who they purport to be.

2 1

Cidera shuts down
by Jeffrey Wheat 27 Feb '03

27 Feb '03

Just received this from Cidera: "We regret to inform you that Cidera has discontinued its netnews and caching services effective immediately. We wished to provide you with more advanced notification of this termination of service, but unfortunately we were not able to do so. The current economic situation has been difficult for us and for our customers, and we wish all of you the best of luck and good fortune with your businesses. Everyone at Cidera feels it has been a privilege to serve you." I am now in need of obtaining a new source for news that is satellite based. Can anyone offer any suggestions and or recommendations? All information is appreciated! Regards, Jeff --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.459 / Virus Database: 258 - Release Date: 2/25/2003

3 2

RE: Cidera shuts down
by Malayter, Christopher 27 Feb '03

27 Feb '03

Ditto for TDS -- If you peer with us somewhere, I'll get you in touch with our news admins. -Chris -----Original Message----- From: Alex Rubenstein To: Ringdahl, Dwight (WebUseNet) Cc: nanog(a)merit.edu Sent: 2/26/03 7:29 PM Subject: RE: Cidera shuts down Ditto -- if you peer with us somewhere, we'll get you a feed. On Wed, 26 Feb 2003, Ringdahl, Dwight (WebUseNet) wrote: > > Yes I just heard this from Doug too, if anyone need a quick fix for usenet > feeds, email me directly. I'll set you up and help you til we can come up > with a business solution. > > Dwight > > -----Original Message----- > From: Jeffrey Wheat [mailto:jeff@cetlink.net] > Sent: Wednesday, February 26, 2003 5:05 PM > To: nanog(a)merit.edu > Subject: Cidera shuts down > > > Just received this from Cidera: > > "We regret to inform you that Cidera has discontinued its netnews and > caching services effective immediately. > > We wished to provide you with more advanced notification of this termination > of service, but unfortunately we were not able to do so. > > The current economic situation has been difficult for us and for our > customers, and we wish all of you the best of luck and good fortune with > your businesses. Everyone at Cidera feels it has been a privilege to serve > you." > > > > > I am now in need of obtaining a new source for news that is satellite based. > Can anyone offer any suggestions > and or recommendations? All information is appreciated! > > Regards, > Jeff > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com) > Version: 6.0.459 / Virus Database: 258 - Release Date: 2/25/2003 > > -- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --

1 0