October 2004 - Test - lists.nanog.org

RE: yahoo abuse contact please
by Josh Duffek 12 Oct '04

12 Oct '04

http://abuse.yahoo.com/ ? josh > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of > Eliot Lear > Sent: Tuesday, October 12, 2004 6:23 AM > To: nanog(a)merit.edu > Subject: yahoo abuse contact please > > > Anyone got one? Amusingly, the search engine these guys run can't seem > to provide me this small bit of information. > > Thanks in advance, > > Eliot

2 1

deprecating BCP38 and similar
by Edward B. Dreger 12 Oct '04

12 Oct '04

I think I'll change my position on BCP38. It's pointless to try blocking spoofed source addresses because: * It doesn't solve every single problem * It means more effort for service providers * It requires more CPU processing power * Using it will generate smarter "black hats". I also think everyone should drop all forms of IP ACLs and password checking. Neither of those have solved every Internet problem, they require more effort and CPU, and smarter crackers have surfaced as a result of their deployment. These measures are ineffective, and it is silly to waste time with them. Anyone from Microsoft listening? I suggest you terminate your Trustworthy Computing Initiative. Not every problem is caused by a buffer overrun or race condition, and you're wasting billions of dollars. I suggest you post regularly to NANOG, helping educate the masses that anything less than a silver bullet is wasteful. Eddy, who hopes everyone recognizes hyperbole and sarcasm -- Everquick Internet - http://www.everquick.net/ A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/ Bandwidth, consulting, e-commerce, hosting, and network building Phone: +1 785 865 5885 Lawrence and [inter]national Phone: +1 316 794 8922 Wichita _________________________________________________________________ DO NOT send mail to the following addresses: davidc(a)brics.com -*- jfconmaapaq(a)intc.net -*- sam(a)everquick.net Sending mail to spambait addresses is a great way to get blocked.

2 1

Guts (Was: Drivel about BCP38, et al.)
by Fergie (Paul Ferguson) 11 Oct '04

11 Oct '04

And one more thing: What happened to the engineers the I once knew and respected? Running networks requires guts these days, and I wish I knew where to find them. I'm so saddened to hear excuses, instead of the engineering ethos I once held in such high regard. The Internet has almost becoem unusable because of this poor state of affairs -- the dispruptors have beaten you? Reluctantly, sadly, - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

2 1

Re: BCP38 making it work, solving problems
by Fergie (Paul Ferguson) 11 Oct '04

11 Oct '04

True, but yet another cop out. If you're not part of the solution, ..... - ferg -- Dan Hollis <goemon(a)anime.net> wrote: On Mon, 11 Oct 2004, Fergie (Paul Ferguson) wrote: > I wrote it, I stand beside it. I'm sick of hearing why people > haven't implemented it yet -- it's almost five years later > and there's simply no excuse. It's sickening. it's cheaper to ignore bcp38 than to implement it. operators are reactive to abuse, not proactive. though this is slowly changing as abuse becomes a significant % of network traffic. -Dan -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

2 1

Re: Microsoft problems?
by Timo Mohre 11 Oct '04

11 Oct '04

Joe Johnson wrote: > I got some sort of announcement popup on Gaim from MSN that said they > would be going down for 5 minutes. That was this morning at about 11-ish > (Central time). Came back after 2 minutes and has been fine since. > > > Well... all I can say is that it's been down all day and is still down... as seen from AS12312, AS3257 Routing OK, but "Service not available"... Would be nice to get something more detailed from MSN than this website stating "Service is down"... Kind regards, Timo

4 3

RE: Microsoft problems?
by Joe Johnson 11 Oct '04

11 Oct '04

I got some sort of announcement popup on Gaim from MSN that said they would be going down for 5 minutes. That was this morning at about 11-ish (Central time). Came back after 2 minutes and has been fine since. Joe Johnson -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Miguel Mata-Cardona Sent: Monday, October 11, 2004 1:48 PM To: nanog(a)merit.edu Subject: Re: Microsoft problems? same here at .sv here we felt it as inconsistent service but then in got kaputt. On 11 Oct 2004 at 14:26, Chaim Fried wrote: > > Anybody know of any prolonged outages at Microsoft (MSN > messenger)today? > > > -- Miguel Mata-Cardona Intercom El Salvador mmata(a)intercom.com.sv voz: ++(503) 278-5068 fax: ++(503) 265-7024 "Intercom, sus Telecomunicaciones en buenas manos"

1 0

Re: FW: MSN Mobile Emergency Notification - MSN Messenger Roll-back
by Ken Gilmour 11 Oct '04

11 Oct '04

Ar Mon, 11 Oct 2004 14:58:42 -0400, scríobh Jim.Rigney(a)VerizonWireless.com: <snip> Thank you Mr. Rigney :-)

1 0

Re: short Botnet list and Cashing in on DoS
by J. Oquendo 11 Oct '04

11 Oct '04

>> Most ISP's truly don't want this as their own problem. I personally >> don't blame them. Luckily the ISP I work for has no home users. Most ISP's wouldn't have to deal with this problem if corporations took the time to release better products. I was faced with the question of "What do you do for infected clients?" What can an ISP do. Most of the times ISP's become the de facto MS technical support team and it is rather unfair and costly to have technical support staff on the phone constantly putting out MS' fires. They are left with the prospect of losing clients when the client is told "It's an MS problem you have to contact MS", yet they've called MS and spoke with someone likely in another country who has no clue, called Dell and spoke with yet another clueless person, and all they wanted to do was surf the net. What do you tell a client when they start stating "Well then I want to cancel my service" because they don't understand, and won't care to since they're frustrated. Sure take a hit with one client cancelling an account, what happens when it grows? As for the prior responses of "You will get DoS'ed" this I am aware of. Problems that concerned me were more of the tracking issues, coupled with the fact that there would be no guarantee that admins would do anything about it. Take the case of that one Californian who hijacked a /16 a while back I believe from a county over there. Admins like this are liable to sit back and do nothing since along the line someone is going to be paying money for the traffic. It is rather sad, and worse when you contact their upstream and they too do little. Consider (and I will keep mentioning them this since it bugs me) EV1, Everybody's Internet. Not only do they host some botnets, malware spewing servers, spam relays, terrorists related sites, their excuse is "Well we don't know who we rent to" Now I know laws are being worked in along the way, but if you own a home and rent it out, then it gets subletted, the re-sub'ed, let's say fifty transactions occurred, you own the home. If someone down the line is running drugs out of the apartment your house is gone. Yes their is little that can be done right now, but yet there ARE things that CAN BE DONE. I'm one that is skeptical about laws since laws abroad would mean nothing here and vice versa, but where are things headed? Spend more on infrastructure to support these issues when you shouldn't have to or buy bigger equipment to handle filtering when you shouldn't have to. I say nip it at the bud, if you're an upstream provider and you see some of these issues, three strikes shut these things down, or nullroute them, don't just sit twiddling your thumbs "Oh but that won't help your idea is silly because foo_x reason." Have something better in mind propose it. I'm sure some of these networks that are getting DoS'ed out of existence would love to hear them. Hell some might even pay you to implement them. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo GPG Key ID 0x51F9D78D Fingerprint 2A48 BA18 1851 4C99 CA22 0619 DB63 F2F7 51F9 D78D http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x51F9D78D sil @ politrix . org http://www.politrix.org sil @ infiltrated . net http://www.infiltrated.net "How can we account for our present situation unless we believe that men high in this government are concerting to deliver us to disaster?" Joseph McCarthy "America's Retreat from Victory"

16 26

[OT] Good Anti-Spam Boilerplate
by Charles Sprickman 11 Oct '04

11 Oct '04

Howdy, After some senseless Googling, I'm at a loss. I'm looking for a very comprehensive, up-to-date example of an AUP that covers spam. When I say "modern", I mean that I want it to include not just direct spamming, but abuse of remote open-relays, abuse of remote trojaned boxes, sending through a third party that circumvents the local AUP, etc. Some good definition of "requested email" would be great - ie: double opt-in, or single opt-in with some documentation that the user requested the mail on a web form or similar. Some language that covers penalties would also be helpful, such as equipment seizure for non-payment of penalties. Please reply privately and I'll summarize. I do not wish to get into any debates about what qualifies as spam on this list. Thanks, Charles -- Charles Sprickman spork(a)inch.com

3 3

Question on IP address used by anycast DNS cache server
by Joe Shen 11 Oct '04

11 Oct '04

Hi, I'm , but I met some questions when reading those paper from ISC on F-root anycasting. 1. As it's descripted in J.Abley's paper, DNS server in anycast group should be configured with a real IP on its NIC and one or two service IP on loopback interface(s). BIND listen on both real IP and service IPs. Any DNS answer packet will be encapsulated with source address as service IP. To my understanding, this is OK for root servers because they do not invoke recursive lookup procedure. But, if the DNS server is a member of ISP's DNS Cache server farm, recursive lookup packets to other DNS server MUST be encapsulated with real IP address. Is BIND or other DNS software capable of distinguishing between DNS answer back packet and recursive lookup packets? or could this be done automatically by operating system like Solaris, Linux, FreeBSD? 2. If we want to design a hierachical DNS service system which distribute across multiple private AS of an ISP, is there any problem to select service IP randomly from unused address pool? thanks in advance. Joe __________________________________________________ Do You Yahoo!? Log on to Messenger with your mobile phone! http://sg.messenger.yahoo.com

4 3