March 2010 - Test - lists.nanog.org

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems
by msokolov＠ivan.Harhan.ORG 17 Mar '10

17 Mar '10

> My spammy sense is going nuts just at the whole ALL CAPS of this guy's > last name. I thought all-uppercase last names were a traditional French convention... This guy is French, isn't he? - judging by his name. His habit of addressing everyone as "Mister" is peculiar indeed, but maybe he is really just very new to the customs and conventions of the Anglophone Internet community? Just wondering... MS

7 8

Any old Nokia DSLAMs gathering dust?
by msokolov＠ivan.Harhan.ORG 17 Mar '10

17 Mar '10

Hello NANOGers, I wonder, would anyone here happen to have an unused Nokia / Diamond Lane Speedlink DSLAM chassis that's laying around gathering dust and which you wouldn't mind donating to an open source xDSL CPE project? Just wondering if anyone here might perchance have one they are trying to get rid of - after all, one man's garbage is another man's treasure... MS

1 0

Re: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems
by charles＠knownelement.com 17 Mar '10

17 Mar '10

Mods, Can we get the spam off the list? Its getting old. ------Original Message------ From: Guillaume FORTAINE To: nanog(a)nanog.org Subject: CSIRT - Backbone Security : Runtime Monitoring and DynamicReconfiguration for Intrusion Detection Systems Sent: Mar 17, 2010 5:14 PM Misses, Misters, Let me introduce myself : Guillaume FORTAINE, Engineer in Computer Science. Me and my partners, INVEA-TECH (please see the attached file invea.pdf) [0] and Cognitive Security (please see the attached file cs.pdf) [1], are currently working on High-Speed Network Security Solutions. By the way, we would greatly appreciate to invite you to a further reading of the publication entitled "Obeseus – a lightweight DDOS detector for big attacks" (please see the attached file obeseus2.pdf) The point mentioned: "Would be self-learning with black lists" in this publication is of particular interest . We think that this last one is pretty much the core of a system that does big attack detection on backbones and is driving the new tools in this area according to our readings. The abilities to be assisted on the learning phase, to detect and block zero-day attacks. That's why we would greatly appreciate to invite you to a further reading about our methodology (please see the attached files paper4.pdf, Camnep.pdf and CognitiveSecurity.pdf). For a demo : http://demo.cognitivesecurity.cz/ We look forward to your answer, Best Regards, Guillaume FORTAINE Tel : +33(0)631092519 Mail : gfortaine(a)gfortaine.biz Google Wave : gfortaine(a)googlewave.com [0] http://www.invea-tech.com/ [1] http://www.cognitivesecurity.cz/ > > > Sent via BlackBerry from T-Mobile

3 2

Re: Youtube CSIRT - Backbone Security : Runtime Monitoring and Dynamic Reconfiguration for Intrusion Detection Systems
by Nathan Hickson 17 Mar '10

17 Mar '10

Hello Mister. Please refer to: http://nanog.org/mailinglist/ Specifically... Acceptable Use Policy "5. Product marketing is prohibited." and "7. Using list as source for private marketing initiatives is prohibited." I don't appreciate you harvesting my email address for the purposes prohibited above. I also don't appreciate 7136k of attachment spam. Sincerely, Mister Pissed. P.S. Nanog consists of females too. Stop calling us all Mister, please. On Wed, Mar 17, 2010 at 4:17 PM, Guillaume FORTAINE <gfortaine(a)gfortaine.biz> wrote: > Dear Nathan, > > Let me introduce myself : Guillaume FORTAINE, Engineer in Computer > Science. Me and my partners, INVEA-TECH (please see the attached file > invea.pdf) [0] and Cognitive Security (please see the attached file > cs.pdf) [1], are currently working on High-Speed Network Security > Solutions. > > By the way, we would greatly appreciate to invite you to a further > reading of the publication entitled "Obeseus – a lightweight DDOS > detector for big attacks" (please see the attached file obeseus2.pdf) > > The point mentioned: "Would be self-learning with black lists" in this > publication is of particular interest . We think that this last one is > pretty much the core of a system that does big attack detection on > backbones and is driving the new tools in this area according to our > readings. The abilities to be assisted on the learning phase, to > detect and block zero-day attacks. > > That's why we would greatly appreciate to invite you to a further > reading about our methodology (please see the attached files > paper4.pdf, Camnep.pdf and CognitiveSecurity.pdf). > > For a demo : > > http://demo.cognitivesecurity.cz/ > > We look forward to your answer, > > Best Regards, > > Guillaume FORTAINE > Tel : +33(0)631092519 > Mail : gfortaine(a)gfortaine.biz > Google Wave : gfortaine(a)googlewave.com > > [0] http://www.invea-tech.com/ > [1] http://www.cognitivesecurity.cz/ > -- Nathan Hickson

4 3

IPv6 enabled carriers?
by Charles Mills 17 Mar '10

17 Mar '10

Does anyone have a list of carriers who are IPv6 capable today? I would assume this would be rolled out in larger cities first but anything outside of "testbed environments" and "trials" as in Comcast's recent announcement seems to be all that is available. I'm being tasked with coming up with an IPv6 migration plan for a data center. Mostly interested in if ATT, Level3, GLBX, Saavis, Verizon Business and Qwest are capable as those are the typical ones I deal with. Thanks...Chuck

17 20

Re: Recommendations for reverse DNS providers
by Brielle Bruns 17 Mar '10

17 Mar '10

Same general practices for forward dns apply to reverse as well - you should have a secondary on a separate netblock/provider/connection from the master nameserver. Also depends on what's going to be on the netblocks your hosting rdns for. If its a bunch of mail servers, rdns is kinda important from an anti-abuse perspective. Same with dynamic clients. ------Original Message------ From: Gregory Hicks To: nanog(a)nanog.org To: mike.lyon(a)gmail.com ReplyTo: Gregory Hicks Subject: Re: Recommendations for reverse DNS providers Sent: Mar 17, 2010 5:11 PM > Date: Wed, 17 Mar 2010 16:08:03 -0700 > From: Mike Lyon <mike.lyon(a)gmail.com> > > Hello, > > I am curious what folks recommend these days for reverse DNS > providers? UltraDNS? FreeDNS? BIND No difference between a forward and reverse zone to BIND. Both work well... > > Thank You, > Mike --------------------------------------------------------------------- Gregory Hicks | Principal Systems Engineer | Direct: 408.569.7928 People sleep peaceably in their beds at night only because rough men stand ready to do violence on their behalf -- George Orwell The price of freedom is eternal vigilance. -- Thomas Jefferson "The best we can hope for concerning the people at large is that they be properly armed." --Alexander Hamilton -- Brielle Bruns http://www.sosdg.org / http://www.ahbl.org

1 0

Re: Recommendations for reverse DNS providers
by Gregory Hicks 17 Mar '10

17 Mar '10

> Date: Wed, 17 Mar 2010 16:08:03 -0700 > From: Mike Lyon <mike.lyon(a)gmail.com> > > Hello, > > I am curious what folks recommend these days for reverse DNS > providers? UltraDNS? FreeDNS? BIND No difference between a forward and reverse zone to BIND. Both work well... > > Thank You, > Mike --------------------------------------------------------------------- Gregory Hicks | Principal Systems Engineer | Direct: 408.569.7928 People sleep peaceably in their beds at night only because rough men stand ready to do violence on their behalf -- George Orwell The price of freedom is eternal vigilance. -- Thomas Jefferson "The best we can hope for concerning the people at large is that they be properly armed." --Alexander Hamilton

1 0

Recommendations for reverse DNS providers
by Mike Lyon 17 Mar '10

17 Mar '10

Hello, I am curious what folks recommend these days for reverse DNS providers? UltraDNS? FreeDNS? Thank You, Mike

1 0

Re: Signing of the ARPA zone
by Joe Abley 17 Mar '10

17 Mar '10

Colleagues, This is a follow-up to the operational announcement regarding changes to the ARPA top-level domain that was sent on 2010-03-10. Apologies in advance for duplicates received through different mailing lists. As of 2010-03-17 1630 UTC all the authoritative servers for ARPA are serving a signed ARPA zone. We would like to solicit feedback from the technical community to allow us to identify any operational ill-effects that this change has caused. We will monitor this mailing list for feedback, and I will also distribute any feedback sent to me personally so that it can be considered. If no harmful effects have been identified by 2010-03-21 the trust anchor for the ARPA zone will be published through the IANA ITAR at <https://itar.iana.org/>. Regards, Joe Begin forwarded message: > From: Joe Abley <joe.abley(a)icann.org> > Date: 10 March 2010 16:13:46 EST > To: Joe Abley <joe.abley(a)icann.org> > Subject: Signing of the ARPA zone > > Colleagues, > > This is a technical, operational announcement regarding changes to the ARPA top-level domain. Apologies in advance for duplicates received through different mailing lists. > > No specific action is requested of operators. This message is for your information only. > > The ARPA zone is about to be signed using DNSSEC. The technical parameters by which ARPA will be signed are as follows: > > KSK Algorithm and Size: 2048 bit RSA > KSK Rollover: every 2-5 years, scheduled rollover to follow RFC 5011 > KSK Signature Algorithm: SHA-256 > Validity period for signatures made with KSK: 15 days; new signatures published every 10 days > ZSK Algorithm and Size: 1024 bit RSA > ZSK Rollover: every 3 months > ZSK Signature Algorithm: SHA-256 > Authenticated proof of non-existence: NSEC > Validity period for signatures made with ZSK: 7 days; zone generated and re-signed twice per day > > The twelve root server operators [1] will begin to serve a signed ARPA zone instead of the (current) unsigned ARPA zone during a maintenance window which will open at 2010-03-15 0001 UTC and close at 2010-03-17 2359 UTC. Individual root server operators will carry out their maintenance at times within that window according to their own operational preference. > > The trust anchor for the ARPA zone will be published in the ITAR [2], and in the root zone in the form of a DS record once the root zone is signed. > > If you have any concerns or require further information, please let me know. > > Regards, > > > Joe Abley > Director DNS Operations, ICANN > > [1] <http://www.root-servers.org/> > [2] <https://itar.iana.org/>

1 0

Re: IPv6 in Education Question
by Timothy Shortall 17 Mar '10

17 Mar '10

Jens Link <lists(a)quux.de> wrote: Todd Christell <tchristell(a)springnet.net> writes: > So Im giving an introductory talk on IPv6 for a state wide conference > for tech coordinators for education. I have the usual catechism of > reasons/advantages from the network side but was wondering if there were > any good education specific applications of v6. My major goal is to > help them understand the situation so that they can make use of the base > of educators in our state to help spread the work about IPv6. It's not a question of if but when IPv6 will be used on large scale in the interned. So, form the educational side it's beneficial if students learn about IPv6. So much for the theory I did quite a number of presentations on IPv6 some of them in at university in Germany (not as some official talk but some user group / some students asked me too). Some quotes: "We don't' have time for this." "Well our network equipment is 14 years old, we don't have a budget for new stuff." "We'll implement IPv6 in 13 years, it's when my colleague retires." /me: "Cool. You have IPv6." Professor: "I configured the tunnel myself. Our network people don't this the topic." Jens -- ------------------------------------------------------------------------- | Foelderichstr. 40 | 13595 Berlin, Germany | +49-151-18721264 | | http://www.quux.de | http://blog.quux.de | jabber: jenslink(a)guug.de | -------------------------------------------------------------------------

1 0