September 2003 - Test - lists.nanog.org

More universities take action to block unpatched/infected computers
by Sean Donelan 05 Sep '03

05 Sep '03

Back to school season continues in North America, and more universities are taking stronger actions concerning unpatched and infected computers. At least two universities are now charging students $25-$30 everytime their computers are infected and need to be cleaned before being allowed back on the school network. http://www.washingtonpost.com/wp-dyn/articles/A25845-2003Sep4.html >More than 6,000 students that had yet to apply the needed patches did so, >but hundreds of other students ignored the advice and were promptly >booted from the university network, said Gerry Sneeringer, an IT >security officer at Maryland's Office of Information Technology. > >"There were a certain percentage of students that wouldn't listen to us >unless we hit them upside the head with a lockout," he said. "You simply >can't deal with these problems until you've got your network under >control." Universities have one big advantage; they are a campus and can distribute CDROMs with the fix or have students come to the computer center.

2 1

FBI investigating fibercut in Washington State
by Sean Donelan 05 Sep '03

05 Sep '03

Hmm, not something you normally see in reports about fiber cuts. http://www.usatoday.com/tech/news/2003-09-04-fiber-fails_x.htm The problem was caused by the failure of a fiber optic line in Stanwood, about 60 miles to the south in Snohomish County, Qwest spokesman Michael Dunne said. Company personnel were trying to determine why the cable failed. Service was restored by early Wednesday afternoon. Calls to Bellingham police about the failure were referred to the FBI. "It's a pending investigation. Beyond that we can't comment," said FBI spokesman Ray Lauer at regional headquarters in Seattle.

1 0

Re: Earthquake in the East Bay
by George William Herbert 05 Sep '03

05 Sep '03

>Probably 3.9, probably Orinda. 400 meters east of Lake Temescal in Oakland, and 12 kilometers down. >No damage or injury reports. >Nothing to see ... move along And in other news, a backhone operating near a major fiber run in the midwest saw and obeyed the 'FIBER' warnings on the ground, avoiding a catastrophic link loss through Ohio; a security guard leaned against the wall within a couple of feet of the EPO switch in Telehouse NYC; an inexperienced hacker released a new virus that turned out to not work at all; no new Sendmail security hole was announced; several new Windows security holes were disclosed; and Jimmy Hoffa remains missing. ;-) -george william herbert gherbert(a)retro.com

1 0

Earthquake in the East Bay
by Lou Katz 05 Sep '03

05 Sep '03

Probably 3.9, probably Orinda. No damage or injury reports. Nothing to see ... move along -- -=[L]=-

1 0

Re: ethernet-based temperature sensors
by David Lesher 05 Sep '03

05 Sep '03

Speaking on Deep Background, the Press Secretary whispered: > > > Oops, somebody's already done it: > http://www.maxim-ic.com/appnotes.cfm/appnote_number/1048/ln/en > > Looks like the total hardware cost would be around $100 for the TINI > and board, and $8 for each sensor (iButton and holder). I have little > time and no Java skills, otherwise it looks like a cool project. If > somebody wants to develop a machine room temperature monitoring > network out of them, I'd be a beta tester ;) That looks a lot closer to the Yellow Brick Road than anything else suggested to date. I like the 64 bit SN idea; sounds like MAC addresses... Note there are several analog temp sensors out there -- National has a line that is dirt cheap ($~1.00) and work on current loops [i.e. LONG leads are OK..] so if someone has a SNMP driven A-D.... -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

1 0

cox.net/cox-internet.com people here?
by Marius Strom 05 Sep '03

05 Sep '03

Please contact me off-list. -- /-------------------------------------------------> Marius Strom | Always carry a short length of fibre-optic cable. Professional Geek | If you get lost, then you can drop it on the System/Network Admin | ground, wait 10 minutes, and ask the backhoe http://www.marius.org/ | operator how to get back to civilization. \-------------| Alan Frame |---------------------->

1 0

CalPOP contact? HTTP CONNECT scanning
by Jeroen Massar 05 Sep '03

05 Sep '03

-----BEGIN PGP SIGNED MESSAGE----- As people are complaining all around about ISP's, here is my small question. Who has a _working_ contact at "CalPOP" (216.240.128.0/19 and others). It is not in puck :( If anybody has a working one please mail it me offlist so that the following long version of the problem can be solved. Is there anything alive at CalPOP that doesn't try to abuse open proxies for massively spamming hotmail ? These are the hits from Sep 3rd: 216.240.140.204 - - [03/Sep/2003:06:27:15 +0200] "CONNECT 65.54.253.99:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:17 +0200] "CONNECT 65.54.167.5:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:19 +0200] "CONNECT 65.54.253.230:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:20 +0200] "CONNECT 65.54.167.230:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:22 +0200] "CONNECT 65.54.254.151:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:24 +0200] "CONNECT 65.54.252.99:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:25 +0200] "CONNECT 65.54.254.145:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:26 +0200] "CONNECT 65.54.252.230:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:26 +0200] "CONNECT 65.54.254.140:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:28 +0200] "CONNECT 65.54.254.145:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:29 +0200] "CONNECT 65.54.252.230:25 HTTP/1.0" 200 2366 "-" "-" 216.240.140.204 - - [03/Sep/2003:06:27:30 +0200] "CONNECT 65.54.254.140:25 HTTP/1.0" 200 2366 "-" "-" Since 29 Sep they did that 13007 times to the same box. Quite persistent apparently as previously at 10-15 August they used 216.240.129.201 + .205 to hit that box for another 17502 times and that one stopped mysteriously after mailing abuse(a)calpop.com & noc(a)calpop.com & sam(a)calpop.com (as shown in whois). Unfortunatly without any reply whatsoever and apparently they are continuing to scan for open http connect proxies. I know the 200 response should indicate a CONNECT succes. But unfortunatly if one loads up an apache2 with PHP suddenly it starts passing _all_ methods to PHP which nicely responds a 200. But it is perfect for logging some nice data from the wanna-be-spammer. <Limit CONNECT>Deny from all</Limit> solves that ofcourse but that spammer needs to go, but the contacts don't work. This acts as a perfect spamtrap honeypot btw especially as they keep trying. Before anyone asks the IP being hit is on a DSL line so they are quite probably scanning all the DSL networks for open proxies. Greets, Jeroen -----BEGIN PGP SIGNATURE----- Version: Unfix PGP for Outlook Alpha 13 Int. Comment: Jeroen Massar / jeroen(a)unfix.org / http://unfix.org/~jeroen/ iQA/AwUBP1aErymqKFIzPnwjEQJy9QCfSQep7SBrrZ6xaQySWJ/LTwgqFNEAoKkB TErNe82mRJXd5JyoLMneYEVw =xLmY -----END PGP SIGNATURE-----

4 3

roadrunner.
by Micah McNelly 04 Sep '03

04 Sep '03

Does anyone have any contact information for roadrunner netops? Its unfortunate that their local offices won't escalate you to the proper party in times of need. Its also unfortunate that their "offices are closed". /micah

1 0

Re: BMITU
by Robert Boyle 04 Sep '03

04 Sep '03

At 05:54 PM 9/4/2003, you wrote: >Communigate Pro is not a Windows mail server... It runs on nearly >everything; and can handle millions of accounts (it has extensive >clustering support). Check their website: www.stalker.com for specs. I stand corrected. I was only familiar with the Windows version. Thanks for the heads up. Apologies to all. -Robert Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

1 0

BMITU
by Fisher, Shawn 04 Sep '03

04 Sep '03

This is my first post so please be gentle. I would like to get some opinions on the Best Mailserver in the Universe. Is there a more appropriate list for this question? I have looked at Communigate Pro, IMAIL, and others. I am interested in integrated solution that can scale to handle 500k accounts Any experience good / bad would be great. Thanks /SF

5 4