April 2007 - Test - lists.nanog.org

DR plan template
by Dennis Dayman 26 Apr '07

26 Apr '07

Can anyone point me to or send me a copy of a standard disaster recovery plan. -Dennis

2 1

Re: infrastructure security
by Peter Schoenmaker 26 Apr '07

26 Apr '07

There is a carriage return in the URL, try http://www.ietf.org/internet-drafts/draft-ietf-opsec-infrastructure- security-01.txt peter On Apr 26, 2007, at 5:42 PM, Hess, DJ wrote: > The draft was not there? > > DJ Hess, CISSP, Information Security Administrator > > City of Raleigh Information Technology (CORIT) > Office Phone: (919) 890-3192 > > Cell: (919) 278-6132 > > dj.hess(a)ci.raleigh.nc.us > > > > > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of > Peter Schoenmaker > Sent: Thursday, April 26, 2007 2:58 PM > To: nanog(a)merit.edu > Subject: infrastructure security > > > Hi, > > My coauthors and I are looking for more input on a draft that we > wrote on infrastructure security. The draft is intended to document > methods that providers can refer to and implement to harden their > network. The draft is broken up into several different areas, Edge > Infrastructure ACLs, Edge rewriting/remarking, Device/element > protection, and Infrastructure hiding. We are very interested in > getting more feedback from network operators. > > The draft can be found at: > http://www.ietf.org/internet-drafts/draft-ietf-opsec-infrastructure- > security-01.txt > > Thanks > > Peter Schoenmaker > > > > > > > “E-mail correspondence to and from this address may be subject to > the North Carolina Public Records Law and may be disclosed to > third parties by an authorized City or Law Enforcement official.”

1 0

Someone from roadrunner please contact me off list.
by Greg Schwimer 26 Apr '07

26 Apr '07

-- Greg Schwimer GoDaddy.com gschwimer(a)godaddy.com tel. 480-366-3636

2 1

infrastructure security
by Peter Schoenmaker 26 Apr '07

26 Apr '07

Hi, My coauthors and I are looking for more input on a draft that we wrote on infrastructure security. The draft is intended to document methods that providers can refer to and implement to harden their network. The draft is broken up into several different areas, Edge Infrastructure ACLs, Edge rewriting/remarking, Device/element protection, and Infrastructure hiding. We are very interested in getting more feedback from network operators. The draft can be found at: http://www.ietf.org/internet-drafts/draft-ietf-opsec-infrastructure- security-01.txt Thanks Peter Schoenmaker

1 0

Hotmail blackholing certain IP ranges ?
by Jeroen Wunnink 26 Apr '07

26 Apr '07

Does anyone have a clue why hotmail is appearantly blocking certain IP ranges ? I provided a new server for a customer in his own IP subnet which is a part of a /20 we announce, but for some reason all mail sent to @hotmail.com addresses disappears. He has another server in a /24 we announce which is still part of another network and that works like a charm. None of our subnets are blacklisted in any spamfilter I can find, so i'm a bit puzzeled on what's up here. If any hotmail netadmin is reading this list, can you please check if 81.26.212.0/26 is blocked in any way (It's part of 81.26.208.0/20 originating from AS39556) According to the mailserver logs all the mail is properly accepted by the hotmail relays, never to be seen again after that. Met vriendelijke groet, Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer(a)easyhosting.nl telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes http://www.easyhosting.nl http://www.easycolocate.nl

9 12

Re: www.cnn.com
by Brandon Butterworth 26 Apr '07

26 Apr '07

> As to what CNN are doing with their DNS, I've no idea, but I don't think it > concerns Nanog Other news sites are available regards, brandon http://news.bbc.co.uk/

2 1

Re: www.cnn.com
by Stefan Schmidt 26 Apr '07

26 Apr '07

On Thu, Apr 26, 2007 at 10:06:32AM +0100, Randy Bush wrote: > roam.psg.com:/usr/home/randy> doc -p -w www.cnn.com. > Doc-2.2.3: doc -p -w www.cnn.com. > Doc-2.2.3: Starting test of www.cnn.com. parent is cnn.com. > Doc-2.2.3: Test date - Thu Apr 26 09:04:52 GMT 2007 > DIGERR (NOT_AUTHORIZED): dig @dmtns01.turner.com. for SOA of www.cnn.com. failed > DIGERR (NOT_AUTHORIZED): dig @dmtns02.turner.com. for SOA of www.cnn.com. failed I think your debugging tool is faulty, as a dig ns cnn.com @a.gtld-servers.net gives: cnn.com. 172800 IN NS twdns-01.ns.aol.com. cnn.com. 172800 IN NS twdns-02.ns.aol.com. cnn.com. 172800 IN NS twdns-03.ns.aol.com. cnn.com. 172800 IN NS twdns-04.ns.aol.com. twdns-01.ns.aol.com. 172800 IN A 149.174.213.151 twdns-02.ns.aol.com. 172800 IN A 152.163.239.216 twdns-03.ns.aol.com. 172800 IN A 207.200.73.85 twdns-04.ns.aol.com. 172800 IN A 64.12.147.120 All of the above answer to me and have the same serial for cnn.com. I guess your tool probably asks a faulty caching nameserver for the NS records of cnn.com - there are several misguided implementations that cache for a longer period than the TTL of the record states. Having said that and beeing a hostmaster for a large german broadband ISP i am indeed quite thankful for Microsoft ignoring low TTLs in most Windows XP installations especially as todays drones do no seem to care about asking proper IN MX questions. ;-) Stefan -- My software never has bugs. It just develops random features.

4 4

www.cnn.com
by Randy Bush 26 Apr '07

26 Apr '07

excuse posting to such an august north american list from humble nigeria, but we think you have a problem over there and it's not very easy to deal from here. roam.psg.com:/usr/home/randy> doc -p -w www.cnn.com. Doc-2.2.3: doc -p -w www.cnn.com. Doc-2.2.3: Starting test of www.cnn.com. parent is cnn.com. Doc-2.2.3: Test date - Thu Apr 26 09:04:52 GMT 2007 DIGERR (NOT_AUTHORIZED): dig @dmtns01.turner.com. for SOA of www.cnn.com. failed DIGERR (NOT_AUTHORIZED): dig @dmtns02.turner.com. for SOA of www.cnn.com. failed SYSerr: No servers for www.cnn.com. returned SOAs ... Summary: YIKES: doc aborted while testing www.cnn.com. parent cnn.com. Incomplete test for www.cnn.com. (3) Done testing www.cnn.com. Thu Apr 26 09:05:13 GMT 2007 randy

1 0

What happened to Cogent?
by David Coulson 25 Apr '07

25 Apr '07

About 20mins ago my connection to Cogent in Cleveland just went totally nuts. I can't even get to www.cogentco.com over their circuit: Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. v129.l3sw1.n2net.net 0.0% 1 1.1 1.1 1.1 1.1 0.0 2. v401.core1.n2net.net 0.0% 1 0.4 0.4 0.4 0.4 0.0 3. fa0-2.na01.b002352-3.cle01.atlas.cogentco.com 0.0% 1 1.5 1.5 1.5 1.5 0.0 4. g1-0-3501.core01.cle01.atlas.cogentco.com 0.0% 1 1.6 1.6 1.6 1.6 0.0 5. p6-0.core01.buf02.atlas.cogentco.com 0.0% 1 5.5 5.5 5.5 5.5 0.0 6. p6-0.core01.cle01.atlas.cogentco.com 0.0% 1 6.1 6.1 6.1 6.1 0.0 7. p6-0.core01.buf02.atlas.cogentco.com 0.0% 1 10.5 10.5 10.5 10.5 0.0 8. p6-0.core01.cle01.atlas.cogentco.com 0.0% 1 9.9 9.9 9.9 9.9 0.0 9. p6-0.core01.buf02.atlas.cogentco.com 0.0% 1 14.7 14.7 14.7 14.7 0.0 10. p6-0.core01.cle01.atlas.cogentco.com 0.0% 1 14.7 14.7 14.7 14.7 0.0 11. p6-0.core01.buf02.atlas.cogentco.com 0.0% 1 19.1 19.1 19.1 19.1 0.0

5 5

Re: What happened to Cogent?
by Joseph Nuara 25 Apr '07

25 Apr '07

I was on the phone with the NOC earlier and was informed that they were having trouble in the DC area. I am seeing problems heading out of their Philly POP into DC. Some sort of switch or software failure on a switch. No ETA although things seem to be working on and off right now.

1 0