November 2011 - Test - lists.nanog.org

Postini or Google contact
by Andy Ringsmuth 23 Nov '11

23 Nov '11

Any chance there's someone on this list from Google, or more specifically, the Postini portion? We're having some unusual mail blockages coming from one specific domain that Postini has been giving us headaches over for the past few weeks. I've got the logs to verify/help track down the problem, but I've confirmed it is within Postini. Much appreciated. ---- Andy Ringsmuth andy(a)newslink.com News Link – Manager Technology 1845 S. 11th St., Lincoln, NE 68502 (402) 475-6397 (402) 304-0083 cellular

1 0

Contact for Telefonica (AS12956)
by Brandon Ewing 23 Nov '11

23 Nov '11

Greetings, Can someone put me in contact with someone with clue in the Telefonica backbone? One of their downstreams is hijacking a prefix of mine as a /24. I've also started advertising the /24 to my upstreams, but many Telefonica customers are still seeing the bad route. I tried to check the NOC list at puck.nether.net, but it appears to be down. -- Brandon Ewing (nicotine(a)warningg.com)

2 1

RIPE 64 Call for Presentations
by Todd Underwood 23 Nov '11

23 Nov '11

Fellow builders, operators, analyzers and ponderers of networks, I suspect that the following Call for Presentations may be a useful reminder for some of you to begin working on presentations for RIPE 64 next Spring. ------------------------------- RIPE 64: Call for Presentations RIPE 64 takes place on 16-20 April 2012 in Ljubljana, Slovenia. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the Plenary, BoF and tutorial sessions at RIPE 64. The PC seeks presentations covering topics of network engineering and operations, including but not limited to: • IPv6 deployment • Managing IPv4 scarcity in operations • Commercial transactions of IPv4 addresses • Data centre technologies • Network and DNS operations • Internet governance and regulatory practices • Network and routing security * Content delivery * Internet peering and mobile data exchange Submissions ------------ Attendees of the RIPE meetings are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. Presenters who are proposing a panel or BOF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. Presenters should indicate how much time they will require (30 minutes is a common maximum duration, although some talks can be longer). Proposals for presentations must be submitted for full consideration no later than *3 February* using the online topic submission system at: http://meetings.ripe.net/pc/ Presentations submitted after this date will be considered on a space-available basis. In addition to presentations selected in advance for the plenary, the RIPE PC also offers several timeslots for “lightning talks” which are selected immediately before or during the conference. Lightning talks are short (10 mins maximum) and often involve more timely topics. Lightning talks will be announced shortly before the conference. If you are aware of a talk that might be interesting to the community, please provide us with the details and we will approach the potential speaker. If you have any questions or requests concerning content submissions, please email pc(a)ripe.net. For more information about RIPE 64, including how to register, visit: http://ripe64.ripe.net/ Kind regards, todd underwood, for the RIPE Programme Committee toddunder(a)gmail.com pc(a)ripe.net

1 0

Re: First real-world SCADA attack in US
by Dennis 22 Nov '11

22 Nov '11

Like any of the decades largest breaches this could have been avoided by following BCP's. In addition SCADA networks are easily protected via behavioral and signature based security technologies. Steven Bellovin <smb(a)cs.columbia.edu> wrote: > >On Nov 22, 2011, at 8:08 58PM, Steven Bellovin wrote: > >> >> On Nov 22, 2011, at 7:51 59PM, Valdis.Kletnieks(a)vt.edu wrote: >> >>> On Tue, 22 Nov 2011 13:32:23 -1000, Michael Painter said: >>> >>>>> http://jeffreycarr.blogspot.com/2011/11/latest-fbi-statement-on-alleged.html >>> >>>> And "In addition, DHS and FBI have concluded that there was no malicious traffic from Russia or any foreign entities, as >>>> previously reported." >>> >>> It's interesting to read the rest of the text while doing some deconstruction: >>> >>> "There is no evidence to support claims made in the initial Fusion Center >>> report ... that any credentials were stolen, or that the vendor was involved >>> in any malicious activity that led to a pump failure at the water plant." >>> >>> Notice that they're carefully framing it as "no evidence that credentials were >>> stolen" - while carefully tap-dancing around the fact that you don't need to >>> steal credentials in order to totally pwn a box via an SQL injection or a PHP >>> security issue, or to log into a box that's still got the vendor-default >>> userid/passwords on them. You don't need to steal the admin password >>> if Google tells you the default login is "admin/admin" ;) >>> >>> "No evidence that the vendor was involved" - *HAH*. When is the vendor *EVER* >>> involved? The RSA-related hacks of RSA's customers are conspicuous by their >>> uniqueness. >>> >>> And I've probably missed a few weasel words in there... >> >> They do state categorically that "After detailed analysis, DHS and the >> FBI have found no evidence of a cyber intrusion into the SCADA system of >> the Curran-Gardner Public Water District in Springfield, Illinois." >> >> I'm waiting to see Joe Weiss's response. > > >See http://www.wired.com/threatlevel/2011/11/scada-hack-report-wrong/ > > --Steve Bellovin, https://www.cs.columbia.edu/~smb > > > > > > >

1 0

Net Brain?
by Jones, Barry 22 Nov '11

22 Nov '11

Anyone using Net Brain? Just curious what you think.... ---------------------------------------- Barry Jones - CISSP GSNA P please don't print this e-mail unless you really need to. ----------------------------------------

1 0

Any recommended router. They are reliable and have good support.
by Deric Kwok 22 Nov '11

22 Nov '11

Hi Can I know any selection of Linux routers except cisco / juniper? They are reliable and have good support provided We would like to get one for testing. Thank you

15 22

Re: OT: Traffic Light Control
by Robert Bonomi 22 Nov '11

22 Nov '11

On Tue, Nov 22, 2011 at 02:26:34PM -0500, Jay Ashworth wrote: > > > Some other things to consider. > > > > Relays are more likely to fail. Yes, the relay architecture was > > carefully designed such that the most failures would not result in > > conflicting greens, > > My understanding was that it was completely impossible. You could > fail dark, but you *could not* fail crossing-green. Just to put one point to rest. I, personally, have witnessed traffic lights showing 'green both directions'. *TWICE*. One was in the mid-1960s, with what was undoubtedly relay-based control logic; the second was in the late 1990s, *probably* with solid-state 'management' controls , but I don't know for certain. (The 'relatively recent' unit's I've seen the insides of have solid-state logic driving final 'output' relays that provide power to the actual signal head.) In the first case, the pedestal-mounted control unit had been subjected to excessive impact forces, and some of the 'output' wires had shorted together.

1 0

Lossy compression HTTP proxy
by Vlad Galu 22 Nov '11

22 Nov '11

Hello, I am looking for a proprietary $subj, a la ziproxy [1]. Caching is not the main concern (well, I wouldn't mind it caching compressed JPEGs). Mobile telco people should probably know a few vendors. Thanks! [1] http://ziproxy.sourceforge.net -- PacketDam: a cost-effective software solution against DDoS http://www.packetdam.com

1 0

actual problems in networks
by Piotr 21 Nov '11

21 Nov '11

Hello There is some working service about problems in tier's networks ? Like this: http://www.backbone-news.com/ thanks Piotr

2 1

Re: First real-world SCADA attack in US
by Hal Murray 21 Nov '11

21 Nov '11

> On an Illinois water utility: > http://www.msnbc.msn.com/id/45359594/ns/technology_and_science-security That URL says: > The Nov. 8 incident was described in a one-page report from the Illinois > Statewide Terrorism and Intelligence Center, according to Joe Weiss, a > prominent expert on protecting infrastructure from cyber attacks. Joe Weiss gave a good talk at Stanford last Oct 12. http://www.stanford.edu/class/ee380/ My quick summary: The whole SCADA industry isn't tuned into network security issues. It's not part of their culture. ---------- Several years ago, Idaho National Labs ran an experiment. They blew up a diesel generator by remote control. Aurora is the buzzword. The abstract page for his talk has a link to a CNN video. It only has a few seconds of the generator. Here is a longer version on YouTube: http://www.youtube.com/watch?v=fJyWngDco3g -- These are my opinions, not necessarily my employer's. I hate spam.

1 0