October 2004 - Test - lists.nanog.org

NANOG Posting
by Husan Sarris 13 Oct '04

13 Oct '04

NANOG, It is with great sadness that I inform you that Richard Steenbergen, long-time NANOG contributor and colleague, has been censored by Dr. Harris this morning. Richard will be barred from posting to this list until such a time when the Doctor deems it appropriate. Those who take issue with this decision are encouraged to contact Susan and ask for leniency. Richard's family has asked that contributions be sent to the ACLU "free speech fund" and Trustees of the University of Michigan in his honor.

5 4

Reminder: Who has VA "INET GOD"?
by Deepak Jain 13 Oct '04

13 Oct '04

I seem to remember someone telling me they had this license plate. Saw it today, not sure I recognized the driver. Would someone mind refreshing my poor little memory? Thanks, Deepak

1 0

website to display AS No and ip info also
by adrian kok 13 Oct '04

13 Oct '04

Hi all ls there any websites to provide the information about AS no and IP? When typing the AS no, it can display all the information fo the company and IP belongs to this company also Thank you

6 7

Re: website to display AS No and ip info also
by Bubba Parker 13 Oct '04

13 Oct '04

Um, no. That site is a dud, and I have no idea why "Crack" would be related to ASNs. On Wed, Oct 13, 2004 at 03:29:04PM -0400, Brant.Stevens(a)barclayscapital.com wrote: > http://www.smartwhois.net > > -----Original Message----- > From: Bubba Parker [mailto:sysadmin@citynetwireless.net] > Sent: Wednesday, October 13, 2004 3:21 PM > To: adrian kok > Cc: nanog(a)merit.edu > Subject: Re: website to display AS No and ip info also > > > > www.cidr-report.org > > On Thu, Oct 14, 2004 at 03:19:58AM +0800, adrian kok wrote: > > > > Hi all > > > > ls there any websites to provide the information > > > > about AS no and IP? > > > > When typing the AS no, it can display all the > > information fo the company > > and IP belongs to this company also > > > > Thank you > > -- > Bubba Parker > sysadmin(a)citynetwireless.net > CityNet LLC > http://www.citynetinfo.com/ > > > ------------------------------------------------------------------------ > For more information about Barclays Capital, please > visit our web site at http://www.barcap.com. > > > Internet communications are not secure and therefore the Barclays > Group does not accept legal responsibility for the contents of this > message. Although the Barclays Group operates anti-virus programmes, > it does not accept responsibility for any damage whatsoever that is > caused by viruses being passed. Any views or opinions presented are > solely those of the author and do not necessarily represent those of the > Barclays Group. Replies to this email may be monitored by the Barclays > Group for operational or business reasons. > > ------------------------------------------------------------------------ > -- Bubba Parker sysadmin(a)citynetwireless.net CityNet LLC http://www.citynetinfo.com/

1 0

Re: BCP38 making it work, solving problems
by Robert Bonomi 13 Oct '04

13 Oct '04

> From owner-nanog(a)merit.edu Tue Oct 12 20:41:45 2004 > Date: Wed, 13 Oct 2004 07:09:10 +0530 > From: Suresh Ramasubramanian <suresh(a)outblaze.com> > To: alex(a)yuriev.com > Cc: Steven Champeon <schampeo(a)hesketh.com>, nanog(a)merit.edu > Subject: Re: BCP38 making it work, solving problems > > > alex(a)yuriev.com [12/10/04 13:16 -0400]: > > > > > If I, and my little 7-man company, can afford to have me solve the > > > problem on our end, why the heck can't you do the same? > > > > You can do it because you are a 7-man company. So can I. However, companies > > the size of Sprint cannot do it. > > > > Most filtering that I've seen (email, router, whatever) that just works great > for a 7 man company will not work when you serve several million users, > that's a fact. Certain _basics_ *are* applicable, regardless of scale. e.g. perimeter filtering of inbound packets w/ RFC-1918 a _source_ address, except for specific ICMP status/response messages. e.g. perimeter filtering of inbound packets with a _source_ address that is in *your* assigned address-space. Some medium-big (and up) operators implement 'RFC-1918 source' filters on their gateways to the 'external internet', but *not* on their customer interfaces. Which means that one of their customers can be attacked via such means, by *another* of their customers. And, after the fact, they can't even tell =which= of their customers done the deed. Similarly, one customer can 'spoof' another customer of that same provider. > One false positive report per week from 7 users. How many per week - or per > day - when you have 40 million users, is a question that gets answered real > fast. > > A lot of the bad filtering (or lack of filtering, for that matter) decisions > I've seen at large network providers and ISPs is generally where they are > also unresponsive to their users and to the internet community that reports > stuff to them (quite a few places I could name where most role accounts seem > to funnel straight to /dev/null) > > srs >

2 1

RE: short Botnet list and Cashing in on DoS
by Drew Weaver 13 Oct '04

13 Oct '04

b) IRC is a haven for these people, unfortunately networks like Undernet take it a step further by providing channel services and host hiding so that not only the people behind the DDoS are hidden, but so are the bots themselves. The people running the network fear retaliation too much to do anything about it. === The sad thing is that IRC has actual positive uses for sharing information; look at the various help channels (especially on a net like freenode) for everything from Linux to math to all different types of programming languages. That's what a lot of people don't understand when they examine the problem of IRC and botnets, is that YES it has huge issues but it has legitimate (albeit very under-proportionate to the number of non-legitimate) uses and users. -Drew

21 24

yahoo abuse contact please
by Eliot Lear 12 Oct '04

12 Oct '04

Anyone got one? Amusingly, the search engine these guys run can't seem to provide me this small bit of information. Thanks in advance, Eliot

4 3

old sitefinder address is back
by Petri Helenius 12 Oct '04

12 Oct '04

Now that verisign is reusing the ex-sitefinder IP address, has anyone done studies if connectivity to that is limited by firewall rules and such? Pete

1 0

RE: yahoo abuse contact please
by Timothy B. Stiles 12 Oct '04

12 Oct '04

Hmm, Searching for Yahoo Abuse seems to work for me. Tim -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Eliot Lear Sent: Tuesday, October 12, 2004 4:23 AM To: nanog(a)merit.edu Subject: yahoo abuse contact please Anyone got one? Amusingly, the search engine these guys run can't seem to provide me this small bit of information. Thanks in advance, Eliot

1 0

Any BBCom guys around?
by Bubba Parker 12 Oct '04

12 Oct '04

We seem to be having a problem with BBCom de-announcing one of our /24's for a customer (209.218.47.0). This is about the third time it has happened in the last two days, and I'm starting to wonder. They keep "fixing it" each time we call, but what is going on? Thanks. -- Bubba Parker sysadmin(a)citynetwireless.net CityNet LLC http://www.citynetinfo.com/

1 0