May 2003 - Test - lists.nanog.org

Re: Class "B" IP BLOCK
by ddragon＠hushmail.com 07 May '03

07 May '03

bdragon(a)gweep.net wrote: >> Technology staff of Erie Forge and Steel is well aware, and approving, >> of the current usage of their IP space. What you consider >> "hijacking", they consider innovation, and an opportunity to give >back >> to the Internet community that's allowed them to prosper over >the >> years. > >If they are truly giving back to the community, they should refer >to BCP4. Who are you to tell them how to run their network, when you can't even keep your own network's SPAM problem under control? BCP4 documents a practice which is neither "Best" nor "Common". In fact, it's heavily flawed, and relies on the incorrect assumptions that there's somehow a shortage of IPv4 space, and ARIN is worthy of free hand-outs in the form of large blocks of IP space, with no monitary compensation offered to those who "surrender" them. Anyone who even considers following it needs to have their head examined. Erie Forge has done absolutely nothing wrong in this matter; their IP space is no more "jacked" than any other. >> "7. Postings to the list must be made using real, identifiable >names >> and addresses, rather than aliases." > >This _is_ my real address. Moot point. You're not posting with your actual first and last name in the From header. In other words, you are in violation of the NANOG AUP. I respectfully ask that you do the honrable thing and come into compliance, or unsubscribe yourself from nanog-post, lest MERIT will take the appropriate action on your behalf. This is no forum for anonymous cowards. >The rest of your message is merely reaching. "Merely" reaching? Given the subscriber volume on here, I believe it was quite effective in its intended circulation goals. >If you can convince someone that GweepCo (or RCN, since you harped on >about them for a while) has/is/will done/doing/do something wrong or >unethical, be my guest. However, I think you'll probably have a tough >time doing so, since many of the GweepCo folks are respected members >of the networking/systems community Obviously you're missing the gist of this and earlier threads on this topic. It's been proven that many network operators represented on NANOG, who on the surface appear perfectly legitimate, run spamming operations or harbor known spammers behind closed doors. For this reason, everyone, including this ficticious "Gweep corporation" of yours must be regarded as black hat, until Kai Schlicting or the SPEWS maintainers are able to demonstrate otherwise. Vigilance is key here. If you've got an armed threat, you need an armed presence. >AfterBurner and the rest of the RCN >abuse team is widely respected as one of the best in the industry. "AfterBurner", LOL! If they're so respected, why are they incapable of demonstrating a bit of common sense and netiquite as posting with their real names instead of pseudonyms? How am I to take anyone seriously when they go by "AfterBurner"? This is the operational community you're addressing here, not the audience at a 2600 meeting. And you've failed to even comment on the URL I produced earlier, showing evidence of SPAM on RCN's network, some originating from RCN sales and support people. Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Free, ultra-private instant messaging with Hush Messenger https://www.hushmail.com/services.php?subloc=messenger&l=434 Big $$$ to be made with the HushMail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427

4 3

Pakistan government orders ISP service level agreement
by Sean Donelan 07 May '03

07 May '03

Pakistan has been suffering a 40 day DOS attack, disrupting most of the International Internet service in the country. The Pakistan Government, Minister for IT & Telecom, has "directed" the Pakistan Telecommunications Corporation to sign service level agreements to ensure 99% Internet availability. Over 200 official(government?) websites have been inaccessible for over three weeks. http://www.paknews.com/main.php?id=5&date1=2003-05-05 "Within a period of five days, the body has been assigned to formulate a concrete strategy to stem the incidence of DoS attacks.. The committee will work on urgent basis and suggest short-term measures within two day."

19 35

Yet more hijacked space? - deru.net
by arincop＠hushmail.com 07 May '03

07 May '03

Since were on the topic of hijacked ipspace, i find myself wondering about deru.net "Deru, the name you can trust, from people you can trust." - Quoted from www.deru.net Ok, so this is the name you can trust, from the people you can trust, right? Well then, why would it appear that Deru.net, the local ISP you can trust is using hijacked ip space? It would appear as if Deru.net is using: www.deru.net has address 140.99.0.15 My handy dandy whois tool tells me this range belongs to: OrgName: Datability Software Systems, Inc. OrgID: DERU Address: 14982 N 83rd PL Ste 201 City: Scottsdale StateProv: AZ PostalCode: 85260 Country: US NetRange: 140.99.0.0 - 140.99.255.255 CIDR: 140.99.0.0/16 NetName: DSS1 NetHandle: NET-140-99-0-0-1 Parent: NET-140-0-0-0-0 NetType: Direct Allocation NameServer: NS1.DERU.NET NameServer: NS2.DERU.NET Comment: RegDate: 1990-04-12 Updated: 2001-08-01 TechHandle: DW19-ARIN TechName: Wayrynen, Darin TechPhone: +1-480-998-7237 TechEmail: darin(a)deru.net Before this network was modified it contained: 140.99.0.0 Datability Software Systems, Inc. NET-DSS1 322 Eighth Avenue New York, NY 10001 US 140.99.0.0 C DSS1 Rupp, Richard L. (RLP39) rich(a)PLUTO.DSS.COM (201) 438-2400 Handy dandy route-server tells us: route-server.cw.net>sh ip bgp 140.99.0.0 255.255.0.0 l BGP table version is 2788023425, local router ID is 209.1.220.234 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *>i140.99.0.0 208.172.146.30 100 0 1239 11588 2 7136 i * i 208.172.146.29 100 0 1239 11588 2 7136 i *>i140.99.96.0/19 208.172.146.30 100 0 1239 11588 2 i * i 208.172.146.29 100 0 1239 11588 2 i * i140.99.120.0/22 208.172.146.29 100 0 1239 11588 2 26978 i *>i 208.172.146.30 100 0 1239 11588 2 26978 i route-server.cw.net> And once again, handy dandy whois tool tells us: OrgName: Only Networking Inc. (ONLY2-DOM) OrgID: ONIO Address: 3443 North Central, 17th Floor City: Phoenix StateProv: AZ PostalCode: 85013 Country: US ASNumber: 7136 ASName: ONLY ASHandle: AS7136 Comment: RegDate: 1996-09-16 Updated: 1996-09-16 TechHandle: DW19-ARIN TechName: Wayrynen, Darin TechPhone: +1-480-998-7237 TechEmail: darin(a)deru.net Im finding it odd that not a single thing, other than the POC email for a questionable /16 and the ASN announcing questionable /16 has anything to do with deru.net. Also, my friend google tells me this: http://216.239.57.100/search?q=cache:aHJS20Er5m0C:members.aol.com/karima448…, +Inc.%22&hl=en&ie=UTF-8 smlnk: http://smlnk.com/?21ZQK6FP So it would appear that Datability Software Systems, Inc. was located in Natick, Mass, and became Penril Datability Networks http://216.239.37.100/search?q=cache:87PPbzXONd0C:isdn.modemhelp.net/p/penr… 8 smlnk:http://smlnk.com/?08DJKDW3 It now appears that Penril Datability Networks was split up, with thier assets being aquired by Bay Networks, and Access Beyond. http://216.239.33.100/search?q=cache:jSOOHJ6s9fkC:www.cgraphix.com/39_detai… 8 smlnk: http://smlnk.com/?UHXEPYDC That leaves us with Access Beyond, a manufacturer of remote access telecom products. And whose website is now owned by a cybersquatter. Now the question at hand is, at which point did this hardware company become Deru.net, the Internet Service Provider you can trust? was this before, or after Penril Datability Networks Inc/Bay Networks/Access Beyond.? Did everyone decide to move to arizona and start an ISP? or is this just another example of IP hijacking that we all find ourselves taking a look at. Can deru.net provide documents that say they bought or were aquired by Datability Software Systems, Inc/Penril Datability Networks/Bay Networks/Access Beyond.? There are other companies using this address space (eldosales.com) but they dont have the appearance of owning a possibly hijacked /16 Regards, IP Police Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Big $$$ to be made with the HushMail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427

5 5

NANOG 28, June 1-3, Salt Lake City
by Carol Wadsworth 07 May '03

07 May '03

NANOG 28 * June 1-3 Salt Lake City, Utah Please note the special hotel room rate for NANOG 28 attendees will be expiring this Saturday (May 10). If you are planning to attend the meeting, please make your reservation soon. For additional meeting information, please see: http://www.nanog.org/mtg-0306/index.html See you there!

1 0

Volunteer depot station WAS: RE: Pro bono projects?
by Ejay Hire 07 May '03

07 May '03

On a note related to the original query of this thread, is there a bulletin board for people who offer volunteer services? I can make some free time for a good cause. -Ejay

2 1

Re: Class "B" IP BLOCK
by Dave Israel 07 May '03

07 May '03

On 5/6/2003 at 21:34:56 -0700, ddragon(a)hushmail.com said: > > >> "7. Postings to the list must be made using real, identifiable > >names > >> and addresses, rather than aliases." > > > >This _is_ my real address. > > Moot point. You're not posting with your actual first and last name > in the From header. In other words, you are in violation of the NANOG > AUP. I respectfully ask that you do the honrable thing and come into > compliance, or unsubscribe yourself from nanog-post, lest MERIT will > take the appropriate action on your behalf. > > This is no forum for anonymous cowards. Full real name? From my headers to your message: Received: from mailserver3.hushmail.com (localhost [127.0.0.1]) by mailserver3.hushmail.com (8.12.6/8.12.3) with ESMTP id h474Ywvo010235; Tue, 06 May 2003 21:34:58 -0700 (PDT envelope-from ddragon(a)hushmail.com) Received: (from nobody@localhost) by mailserver3.hushmail.com (8.12.6/8.12.3/Submit) id h474Yw1q010234; Tue, 06 May 2003 21:34:58 -0700 (PDT) Errors-to: owner-nanog-outgoing(a)merit.edu Message-id: <200305070434.h474Yw1q010234(a)mailserver3.hushmail.com> Precedence: bulk X-Loop: nanog Delivered-to: nanog-outgoing(a)trapdoor.merit.edu Delivered-to: nanog(a)trapdoor.merit.edu Delivered-to: nanog(a)merit.edu From: ddragon(a)hushmail.com Pot, kettle? Flame/troll somewhere else, please. As you observed yourself, this is the operational community you're addressing here.

1 0

RE: Pro bono projects?
by ddragon＠hushmail.com 07 May '03

07 May '03

<chris(a)bblabs.com> wrote: >The last time I offered resources for a 'venture technology' project >I >received a fairly cold response. The conclusion I reached was that >bandwidth and processing power resources are much too ubiquitous >for the >NANOG crowd. Nobody's interested in your single homed bandwidth and lack of net.clue. The management bios on www.bblabs.com are a joke. Run along, troll. Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Free, ultra-private instant messaging with Hush Messenger https://www.hushmail.com/services.php?subloc=messenger&l=434 Big $$$ to be made with the HushMail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427

1 0

Re: NNTP servers
by Joe St Sauver 06 May '03

06 May '03

Hi Drew, # Howdy, if this is off-topic I certainly apologize however I #believe that running an NNTP server is usually part of a 'network #operations' sphere of influence. Dunno about that, but I'll chime in a couple of ideas just because the volumes of NNTP traffic involved have gotten to the point where the traffic alone is probably operationally interesting, everything else aside. #I have a few basic questions. Does anyone #know off hand how much disk is needed for a fairly respectable NNTP server #for a full feed? Daily Usenet volumes are extremely sensitive to decisions with respect to carrying (or not carrying) even single groups. See, for example http://www.newsadmin.com/top100bytes.htm which shows that the top half dozen groups (by bytes posted) had daily volume running: Binary Newsgroup Bytes % Total ---------------------------------------------------------- 1 alt.binaries.dvdr 30,304,095,023 5.893 2 alt.binaries.cd.image.xbox 25,796,723,944 5.017 3 alt.binaries.dvd 19,428,583,576 3.778 4 alt.binaries.multimedia 17,783,671,185 3.459 5 alt.binaries.cd.image.games 15,303,064,035 2.976 6 alt.binaries.svcd 14,780,524,967 2.874 [commas added to byte counts for improved legibility] Yes, carrying or not carrying a single group can have a 30GB/day impact. Yes, daily traffic for a fullish feed *has* peaked in excess of 600GB and 3 million articles/day. If you want to carry "everything," you could multiply ~0.6TB/day times the number of day's retention you want to keep, however note that over time your retention will drift downward as volumes continue to increase. Also note that this is is just raw article storage space, and does not include space for article overview data, history files, etc. Daily Usenet volumes (in bytes) are also exceptionally sensitive to maximum article size, with the 80/20 rule roughly holding for byte traffic and article count (e.g., 80% of the articles by article count will require just 20% of the transfer bandwidth). If your goal is to live within a given bandwidth budget, or to efficiently utilize a particular size disk array, you can readily adjust your total article payload/day by dialing down the maximum article size you elect to accept. In case you doubt these volume stats, a couple of sites with publicly accessible daily traffic summaries include: http://nntp.abs.net/cyclone/stats/ http://informatie.wirehub.net/news/bambam/diablo.html http://newsfeed.media.kyoto-u.ac.jp/innreport/ I would note that most "full" feeds today really *AREN'T* full, however. #Also is IDE still too slow/unreliable for this type of #operation? I know back when we got our current server IDE was very slow it #has sped up a bit since then. Choice of file system, and storage methodology can be as or more critical than whether or not you're using IDE or SCSI. The days where traditional article-per-file spools in UFS file systems would work are definitely gone -- cyclical news file systems on top of ReiserFS are a popular recipe today. #The reason I am asking is because it has come #time for the old NNTP server to be buried somewhere in the mountains and for #me to procure a new one. Currently we are running a P3 600 /w about 200 GB #of storage on Solaris and Typhoon, the reason we are replacing this server #is for the poor performance and its abhorrent retention. If you're planning to work with a full feed, you won't regret getting as much CPU, memory, disk, and network connectivity as you can afford. I don't want to get into hardware/OS/server religious wars, so I'll skip any specifics here (although feel free to contact me offlist if you're interested in talking about some starting points for hardware options that seem to work okay). Regards, Joe St Sauver (joe(a)oregon.uoregon.edu) University of Oregon Computing Center

1 0

NNTP servers
by Drew Weaver 06 May '03

06 May '03

Howdy, if this is off-topic I certainly apologize however I believe that running an NNTP server is usually part of a 'network operations' sphere of influence. I have a few basic questions. Does anyone know off hand how much disk is needed for a fairly respectable NNTP server for a full feed? Also is IDE still too slow/unreliable for this type of operation? I know back when we got our current server IDE was very slow it has sped up a bit since then. The reason I am asking is because it has come time for the old NNTP server to be buried somewhere in the mountains and for me to procure a new one. Currently we are running a P3 600 /w about 200 GB of storage on Solaris and Typhoon, the reason we are replacing this server is for the poor performance and its abhorrent retention. Any advice would be pivotal to my purchasing decisions. Thanks, -Drew Weaver

1 0

Re: Good (cheap) 2000Mb/s solution?
by miquels＠cistron.nl 06 May '03

06 May '03

In article <cistron.GPEOJKGHAMKFIOMAGMDIIEMAMEAB.deepak(a)ai.net>, Deepak Jain <deepak(a)ai.net> wrote: >I need a good, cheap (its temporary) solution to run 2000mb/s over a single >pair of multimode fiber (SX handoffs). I'd ideally like to put in two GEs, >and get two out. I could use 10G gear, or OC48 gear, but I was hoping for >something less pricey since this only has two run about 200ft between two >buildings. You need 2 sets of fiber splitter/combiners. That's cheap gear that can multiplex TX and RX over a single strand of fiber. For example http://www.as400-shop.com/nbase-xyplex/splitter__combiner.htm , or Google for it yourself. Mike.

1 0