February 2006 - Test - lists.nanog.org

AT&T (AS7018) customer triggered blackhole routing?
by A Satisfied Mind 09 Feb '06

09 Feb '06

Does anyone know if AT&T (the old one, AS7018) has customer trigged blackhole routing? I looked in the copy of the BGP policy I have from 04/2005, and see nothing about it, and cannot find the updated online version. Off-list replies welcome.

3 2

Password Security and Distribution
by Jeremy Stinson 09 Feb '06

09 Feb '06

All, Our company is starting to grow rather quickly and we are starting to have growing pains. We are in the need for a better mechanism for sharing passwords between our engineers. Most of these passwords are for our client's systems where some of them are controlling the password schemes (aka requiring shared user accounts). We have a process in which we change passwords every X days but, distributing these passwords to everyone who needs them is starting to become a challenge. Also, handing off passwords to someone who is stepping in to help out at 3am securely is not easy. I have tried to do google searches but I have not been able to find a good way or process to do this. I am wondering if anyone has any ideas on how to handle this? In other companies we have used a PGP keyring to secure a text file that contained all of these passwords and then put them onto a shared customer portal. The problem with this strategy is what happens if you are not on your computer where PGP is installed? Any suggestions will be welcomed. Thanks in advance, Jeremy

2 1

stp questions
by Joe Maimon 08 Feb '06

08 Feb '06

With 802.1w how normal is it for an environment with 8 switches ~300 ports with to exhibit 1-3 seconds of packet losss/latency/jitter everytime any port transitions to STP forwarding and causes topology change notices to ripple through the entire stp domain? The ports causing this are connected to end-user devices, not the uplink/trunk ports. Is it reasonable to expect the vendor (not cisco) to support a port link-type that - does not cause topology changes to ripple through the domain - does not cause 1-2 seconds packet drops when transitioning to forwarding - transitions to forwarding quickly AND - blocks accidental loops ? IOW everything that I get from portfast and rpvst. Thanks. Joe

1 0

Re: Cogent
by Eric Gauthier 08 Feb '06

08 Feb '06

Heya, I'm not sure what's going on, but we were seeing problems on outbound traces on their DC-JFK-BOS stretch (we're connected to them in Boston) but it looks like it might have cleared itself up a few mintues ago. Eric :)

1 0

RE: Cogent
by Jeff Busch 08 Feb '06

08 Feb '06

Fiber cut ... http://status.cogentco.com/ -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Joseph Nuara Sent: Wednesday, February 08, 2006 11:53 AM To: nanog(a)merit.edu Subject: Cogent Can anyone shed some light on the current Cogent latency issues? The scoreboard is lit up like a Tree ... Thanks. Joe Confidentiality Notice: The information contained in this email and any attachments may be legally privileged and confidential. If you are not an intended recipient, you are hereby notified that any dissemination, distribution or copying of this email is strictly prohibited. If you have received this email in error, please notify the sender and permanently delete the email and any attachments immediately. You should not retain, copy or use this email or attachment for any purpose, nor disclose all or any part of the contents to any person.

1 0

Cogent
by Joseph Nuara 08 Feb '06

08 Feb '06

Can anyone shed some light on the current Cogent latency issues? The scoreboard is lit up like a Tree ... Thanks. Joe

3 2

So -- what did happen to Panix?
by Steven M. Bellovin 08 Feb '06

08 Feb '06

It's now been 2.5 business days since Panix was taken out. Do we know what the root cause was? It's hard to engineer a solution until we know what the problem was. --Steven M. Bellovin, http://www.cs.columbia.edu/~smb

27 61

Denial of service Attack.
by Ejay Hire 08 Feb '06

08 Feb '06

Hello. For the last couple of days we have intermittently been experiencing a (>1gbps) denial of service attack. I want to apologize to anyone whose DNS servers have been (ab)used in the attack, and let you know what is occurring. The attacker is forging our source address on dns requests, and the DNS reply is routing to us. I promise, we're not attacking your dns servers. Please take a moment to consider implementing RPF checks to prevent these type of forged packet attacks. Advice is welcomed both on-list and off. Thanks, Ejay Hire ISDN-Net Network Engineer

1 0

ml hacks for goodmail
by Randy Bush 08 Feb '06

08 Feb '06

so, anyone working on the majordomo and mailman hacks for goodmail? "i am sorry, but you can not subscribe to this list from an aol.com address. don't ask us to explain, ask support(a)aol.com." or am i missing something here? clue-bat if so, please. randy

4 5

CAUTION: Potentially Dumb Question...
by Rich Sena 07 Feb '06

07 Feb '06

Not sure how dumb this question is so I'll float it here and beat any flames back with a little Godwin's Law or other Bourseyesque implements of power... I'm trying to cut a few financial corners in our remote site budgets. I have sites that are homed back to the main campus offices via ATM and other leased lines. These sites also currently have dedicated Internet access. I was doing some brain cramming re: MPLS and possibly killing our dependence on ATM by going the MPLS route over a common provider. It struck me to venture a guess as to why I couldn't utilize the same connection for both - Internet transit via the common provider as well as an MPLS mesh between all my sites and my main campuses also via that same connection with the common provider... Can someone swing the clue-by-four for me aiming for what's left of my mullet and learn me - thanks... If you feel this is OT then reply to me direct if there is other interest I will summarize... -- Rich Sena - ras(a)thick.net ThickNET Consulting "On the way to understanding; you understand, and forget."

4 4