June 2003 - Test - lists.nanog.org

Trends in network operator security
by Sean Donelan 30 Dec '03

30 Dec '03

Its 2003 and everyone is making their predictions. What trends are network operators seeing for Internet security? Old favorites Buffer overflows Distributed Denial of Service Poor passwords (cisco/sanfran) Poorly coded systems Blame the user for not protecting poorly coded systems Trends Attack the network (why? because we can) Proxy relay hiding (its not just for SMTP anymore) Combo Bot/Trojan/Worms Embedded software "upgrades" Any other trends network operators are seeing?

2 2

AT&T NYC
by Bryan Heitman 03 Sep '03

03 Sep '03

Anyone seeing any problems with ATT in new york? Best regards, Bryan Heitman Interland, Inc.

10 11

New Trojan
by netadm 07 Aug '03

07 Aug '03

Anyone having any fallout from: http://www.eweek.com/article2/0,3959,1130765,00.asp <http://www.eweek.com/article2/0,3959,1130765,00.asp>

7 6

RE: National Do Not Call Registry has opened
by Callahan, Richard M, SOLGV 03 Jul '03

03 Jul '03

The FCC has, as of Thursday the 26th, adopted all aspects of the FTC DNCR. Now all >long-distance phone companies >airlines >banks and credit unions; and >the business of insurance, are fully covered and enforceable. count one for the good guys!! -----Original Message----- From: Roland Perry [mailto:roland@linx.net] Sent: Monday, June 30, 2003 12:03 PM To: nanog(a)nanog.org Subject: Re: National Do Not Call Registry has opened In message <A44DA7EDD8262343B02C64AF7E063A07A55349(a)kenya.ba.tronet.sk>, Tomas Daniska <tomas(a)tronet.com> writes ><quote> >Q: If I register my number on the National Do Not Call Registry, will it stop all telemarketing calls? > >A: No. Placing your number on the National Do Not Call Registry will stop most, but not all, telemarketing calls. Some businesses are exempt >from the national registry and still can call you even if you place your number on it. Exempt businesses include: > >long-distance phone companies >airlines >banks and credit unions; and >the business of insurance, to the extent that it is regulated by state law. All the above text has now disappeared from their site ! -- Roland Perry, LINX

5 4

ISP Best Practices
by A. Arsalan 01 Jul '03

01 Jul '03

Hello, Could someone please help me finding out ISP Best practices in terms of design, routing and security? I would appreciate if you share the pointers (URL) or the documents. Thanks, Arsalan --------------------------------- Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month!

3 2

Over three million computers 0wned?
by Sean Donelan 01 Jul '03

01 Jul '03

http://www.vnunet.com/News/1141901 Trustcorps claims it has scientific and anecdotal resaerch supporting its conclusion that over three million computers are "owned" by malicious groups. On the other hand, Information Risk Management questioned how any one person could "own" hundreds of computers at any one time. And systems are often not "owned" by a single group, but exploited by multiple groups Like most statistics, the "truth" is probably a little harder to find, and a little bit scarier. The FBI estimates a car is stolen every 27 seconds somewhere in the US. In 2000, FBI Uniform Crime Report statistics showed that 1,165,559 cars were stolen; with an estimated value of $7.8 Billion. Police apprehend less than 15% of all auto thieves. Unfortunately this computer crime doesn't fit the FBI crime reporting statistics well. Vandalism of Property? Is the cracking of computers happening more or less often than car theft?

7 7

RE: National Do Not Call Registry has opened
by Tomas Daniska 01 Jul '03

01 Jul '03

will not this just be a safe source of working numbers for all those covered by exceptions? <quote> Q: If I register my number on the National Do Not Call Registry, will it stop all telemarketing calls? A: No. Placing your number on the National Do Not Call Registry will stop most, but not all, telemarketing calls. Some businesses are exempt from the national registry and still can call you even if you place your number on it. Exempt businesses include: long-distance phone companies airlines banks and credit unions; and the business of insurance, to the extent that it is regulated by state law. However, many telemarketing calls are placed by professional telemarketing companies, and even if the company whose goods or services are being sold is exempt, the telemarketing company may be covered. You may still receive calls from political organizations, charities, telephone surveyors or companies with which you have an existing business relationship. The FCC has initiated a rulemaking proceeding that would extend the National Do Not Call Registry to many of the businesses that are exempt from FTC coverage. </quote> -- deejay > -----Original Message----- > From: John R Levine [mailto:johnl@iecc.com] > Sent: 27. júna 2003 7:53 > To: nanog(a)nanog.org > Subject: National Do Not Call Registry has opened > > > > The domain is donotcall.gov, IP range is 206.16.196.192/26. > > They all seem to have the same subject line. > > Subject: National Do Not Call Registry - Complete Your > Registration > > > DCC checksums (already have a count of 25 even though it's > only been open > for an hour or so and it's the middle of the night): > > ok fuz1 ac8763a8 a9e8d829 5e8a506b 1d6ac5e5 > ok fuz2 bc65f25a 2c08ccfd 5b8b6e2c 3c806c1d > > They don't quite have all the bugs out. I gave them three > phone numbers, > but they only sent two confirmations. > > Regards, > John Levine, johnl(a)iecc.com, Primary Perpetrator of "The > Internet for Dummies", > Information Superhighwayman wanna-be, http://iecc.com/johnl, > Sewer Commissioner > "More Wiener schnitzel, please", said Tom, revealingly.

9 8

RE: Re[2]: National Do Not Call Registry has opened
by Callahan, Richard M, SOLGV 01 Jul '03

01 Jul '03

political and charitable orgs are exempt. also if you have an existing relationship with a company, they have 18 months before you fall from their list. -----Original Message----- From: Richard Welty [mailto:rwelty@averillpark.net] Sent: Monday, June 30, 2003 12:12 PM To: nanog(a)nanog.org Subject: Re[2]: National Do Not Call Registry has opened On Mon, 30 Jun 2003 17:03:08 +0100 Roland Perry <roland(a)linx.net> wrote: > In message <A44DA7EDD8262343B02C64AF7E063A07A55349(a)kenya.ba.tronet.sk>, > Tomas Daniska <tomas(a)tronet.com> writes > ><quote> > >A: No. Placing your number on the National Do Not Call Registry will > stop most, but not all, telemarketing calls. Some businesses are exempt > >from the national registry and still can call you even if you place > your number on it. Exempt businesses include: > >long-distance phone companies > >airlines > >banks and credit unions; and > >the business of insurance, to the extent that it is regulated by state > law. > All the above text has now disappeared from their site ! this is looking kind of off topic, but... most of those extemptions existed because the industries in question were being regulated by a different commission. said commission had the authority to buy into the do not call list. they have done so, and so the extemptions have mostly gone away. i think politicians can still pester you for money at dinner time, though. richard -- Richard Welty rwelty(a)averillpark.net Averill Park Networking 518-573-7592 Unix, Linux, IP Network Engineering, Security

2 1

RE: Don't call registry off the map?
by Callahan, Richard M, SOLGV 30 Jun '03

30 Jun '03

> > > Can anyone reach www.donotcall.gov? Seems to be off the map... We are on line and pumping registrations far below our capacity. No alarms or indications that there are any issues. If anyone has any specific issues, please send me some details. Thanks, Richard -----Original Message----- From: Ejay Hire [mailto:ejay.hire@isdn.net] Sent: Monday, June 30, 2003 2:35 PM To: nanog(a)merit.edu Subject: RE: Don't call registry off the map? ... and it get's mentioned nationwide by various radio, print, and television outlets. -----Original Message----- From: Andy Dills [mailto:andy@xecu.net] Sent: Friday, June 27, 2003 11:44 AM To: Patrick Cc: nanog(a)merit.edu Subject: Re: Don't call registry off the map? On Fri, 27 Jun 2003, Patrick wrote: > > > Can anyone reach www.donotcall.gov? Seems to be off the map... Everything's fun and games until somebody posts to Slashdot... Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

1 0

RE: Don't call registry off the map?
by Ejay Hire 30 Jun '03

30 Jun '03

... and it get's mentioned nationwide by various radio, print, and television outlets. -----Original Message----- From: Andy Dills [mailto:andy@xecu.net] Sent: Friday, June 27, 2003 11:44 AM To: Patrick Cc: nanog(a)merit.edu Subject: Re: Don't call registry off the map? On Fri, 27 Jun 2003, Patrick wrote: > > > Can anyone reach www.donotcall.gov? Seems to be off the map... Everything's fun and games until somebody posts to Slashdot... Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

1 0