January 2006 - Test - lists.nanog.org

metric 0 vs 'no metric at all'
by Alexander Koch 17 Feb '06

17 Feb '06

Hiya, I was wondering if someone had done any or some research on this before... basically I am not sure with all the many implementations of BGP and all the vendors if and what those will do when they see a metric of 0 and no metric. I am not an expert knowing the actual protocol's messages exchanged, but I see some routes with nothing in the metric field on the various show commands, and some have explicit '0' metric. I do not trust all the BGP implementations around, and we consider changing the default outbound, with MEDs of course still available on request. Alexander

6 5

Password Security and Distribution
by Jeremy Stinson 09 Feb '06

09 Feb '06

All, Our company is starting to grow rather quickly and we are starting to have growing pains. We are in the need for a better mechanism for sharing passwords between our engineers. Most of these passwords are for our client's systems where some of them are controlling the password schemes (aka requiring shared user accounts). We have a process in which we change passwords every X days but, distributing these passwords to everyone who needs them is starting to become a challenge. Also, handing off passwords to someone who is stepping in to help out at 3am securely is not easy. I have tried to do google searches but I have not been able to find a good way or process to do this. I am wondering if anyone has any ideas on how to handle this? In other companies we have used a PGP keyring to secure a text file that contained all of these passwords and then put them onto a shared customer portal. The problem with this strategy is what happens if you are not on your computer where PGP is installed? Any suggestions will be welcomed. Thanks in advance, Jeremy

2 1

So -- what did happen to Panix?
by Steven M. Bellovin 08 Feb '06

08 Feb '06

It's now been 2.5 business days since Panix was taken out. Do we know what the root cause was? It's hard to engineer a solution until we know what the problem was. --Steven M. Bellovin, http://www.cs.columbia.edu/~smb

27 61

RE: Problems connectivity GE on Foundry BigIron to Cisco 2950T
by David Hubbard 06 Feb '06

06 Feb '06

You are using a crossover cable right? If that's all set, you do need to have neg-off on the Foundry and "no nego auto" on the Cisco. I haven't used the rj-45 gbics in the Foundry equipment before, not sure if that could be an issue. I would go with the hard set 1000-full on both sides. David From: Sam Stickland > > Hi, > > I'm having a right mare trying to get a Foundry BigIron to > connect up to a cisco 2950T, via Gigabit copper. > > The Foundry BigIron is using a cisco RJ45/copper GBIC that > was pulled from a live cisco 6500, where it was working > fine. The cisco 2950T has two fixed 10/100/1000 RJ45 ports. > > The cables between the equipment have been tested and are fine. > > The Foundry has three different types of the gigabit negiation modes: > > auto-gig Autonegotiation > neg-full-auto Autonegotiation first, if failed try > non-autonegotiation > neg-off Non-autonegotiation > > I've tried all three, complete with all the other > possibilities with the cisco 2950T (which has fixed full > duplex operation, but can be set to 'speed auto' or > 'speed 1000'). > > None of these combinations bring up the link. The cisco 2950 > never gets a link light. The Foundry gets a link light > regardless when it's mode is set to 'gig-default neg-off'. > > I'm at a bit of a loss to explain this. Does anyone know of any > configuration issues that can explain this, or is it time to start > swapping out hardware components? > > Sam > >

7 6

CME-24/BlackWorm email notifications + top-7 unreachable AS's
by Gadi Evron 01 Feb '06

01 Feb '06

Below are the top-7 ASN's that *we* have not been able to reach with our email notifications of CME-24/BlackWorm infected machines: 5416 | BATELCO-BH 6412 | KW Gulfnet International 8781 | QA-ISP Qatar Telecom (Q-Tel) 10029 | SPECTRANET FIRST FIBRE BROADBA 12486 | Teleyemen - YNET Autonomous Nu 20759 | ISU-JED KACST/ISU Jeddah Auton 34105 | ARIAVESATCOM-AS Ariave Satcom If you know of a contact for these or did not receive a notification and would like to make sure your network is clean, please contact me off list. Thanks, Gadi.

5 6

RE: McDonalds contact also.
by Brian Johnson 01 Feb '06

01 Feb '06

That is so funny. FWIW.. I did try to contact them on-line as well as via phone with no response. Sorry for wasting so much of someones time that spmming the list impersonnating me seemed like a good idea. I should forward this to spam-l and watch the trolls come out. LOL - Brian J. > -----Original Message----- > From: Buhrmaster, Gary [mailto:gtb@slac.stanford.edu] > Sent: Tuesday, January 31, 2006 2:03 PM > To: Brian Johnson > Subject: RE: McDonalds contact also. > > > > (I could not resist responding.....) > > Sorry, you unsolicted idea will not be accepted: > > > > > Unsolicited Ideas > > Thank you for your interest to share an idea for a product or > service that you believe would be beneficial to McDonald's. > Please know, however, that it is McDonald's company's policy > not to consider unsolicited ideas from anyone other than our > corporate employees, franchise owners and dedicated suppliers. > > It's not that great ideas cannot come from our valued > customers. Each year, however, McDonald's receives thousands > of unsolicited ideas and proposals for products and services. > Due to the mass volume of these unsolicited ideas and the > business challenge of determining what is truly a "new" idea > versus a concept that is already in development, being > tested, or previously considered, we must adhere to a strict > policy not to accept or review any unsolicited ideas that > come from outside the McDonald's system of our corporate > employees, franchise owners and suppliers. > > As a result, we must decline your invitation to review your > idea, and hope you can understand and appreciate our business > reasons for making this company decision. We do, however, > greatly appreciate your interest in McDonald's. > > > > > -----Original Message----- > > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > > Behalf Of Brian Johnson > > Sent: Tuesday, January 31, 2006 6:25 AM > > To: nanog(a)merit.edu > > Subject: McDonalds contact also. > > > > > > I've got a great idea for a new cheeseburger and want someone to > > give me a contact at McDonalds. I am too lazy to find one myself, > > and don't care about wasting any of your time. > > > > Please reply off-list. > > > > Brian. > > >

5 4

Comcast contact also.
by Brian Johnson 31 Jan '06

31 Jan '06

Also looking for a Comcast contact for mail abuse issues. Please reply off-list. Brian.

3 2

Re: Word file
by Fergie 31 Jan '06

31 Jan '06

Imagine that. :-) Not to hard ro figure that one out -- last time I checked, you weren't in India. :-) [snip] X-WinProxy-AntiVirus: Removed W32/Tearec.A.worm!CMÈ [and] Received: from sys11 (unknown [202.141.22.146]) by trapdoor.merit.edu (Postfix) with SMTP id 8929591212 for <nanog(a)trapdoor.merit.edu>; Tue, 31 Jan 2006 01:25:19 -0500 (EST) [snip] [IPv4 whois information for 202.141.22.146 ] [whois.apnic.net] % [whois.apnic.net node-1] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 202.141.20.0 - 202.141.23.255 netname: ERNET-SATWAN country: IN descr: ERNET India descr: Department of Information Technology descr: Electronics Niketan descr: 6, CGO Complex descr: New Delhi - 110003 admin-c: AS384-AP tech-c: AS384-AP status: ASSIGNED NON-PORTABLE changed: apnic(a)eis.ernet.in 20040903 mnt-by: MAINT-AP-ERNET-INDIA changed: hm-changed(a)apnic.net 20040903 source: APNIC person: Anupam Srivastava nic-hdl: AS384-AP e-mail: anupam(a)eis.ernet.in address: ERNET India address: Electronics Niketan, 6 C.G.O Complex address: New Delhi-110003 address: phone: +91-11-24361329 fax-no: +91-11-24362924 country: IN changed: apnic-maintainer-alarm(a)eis.ernet.in 20041229 mnt-by: MAINT-IN-CUSTOMER-ERNET source: APNIC - ferg -- David Ulevitch <davidu(a)everydns.net> wrote: On Jan 30, 2006, at 10:25 PM, davidu wrote: > WARNING: WinProxy has detected a virus in file > attached to this e-mail message! I'm a mac/unix guy -- I promise. :-) That email did not come from me, but this one did. -david -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Word file
by davidu 31 Jan '06

31 Jan '06

Please see the file. ********************************************************** ********************************************************** WARNING: WinProxy has detected a virus in file attached to this e-mail message! The attachment has been automatically removed to protect your network. WinProxy Administrator: gk_pkm(a)yahoo.com 01/31/06 11:56:02 WinProxy (Version 6.0 R1c (6.0.21.0)) - http://www.WinProxy.com/ Antivirus Vendor: Panda Software Scan Engine Version: 4.7.0.201_4.1.6.408 Pattern File Version: 3.109873 (Timestamp: 2006/01/30 17:00:31) Machine name: SYS1 Machine IP address: 202.141.22.146 Server: 198.108.1.26 Client: 192.168.0.11 Protocol: SMTP Virus: "W32/Tearec.A.worm!CM��" found! Attachment: New_Document_file.pif ********************************************************** **********************************************************

2 1

Comcast contact
by Jeffrey Sharpe 30 Jan '06

30 Jan '06

Looking for a Comcast contact. Please reply off-list. Jeff.

1 0