November 2011 - Test - lists.nanog.org

OT -- seeking a knowledgable AS 701 technical contact.
by Robert Bonomi 17 Nov '11

17 Nov '11

Apologies for the noise, but I have been absolutely unable -- despite literally *hours* of trying --to contact anyone at _any_ of the published Verizon Business phone numbers who has any comprehension of what I am talking about -- to wit: "I am looking for someone with _any_ awareness/knowledge of Verizon Business's public-access anonymous FTP server, with the hostname 'ftp.uu.net'." The published Verizon Business technical contact number -- both in 'whois' for uu.net, and Jared's NOC contact list is only the 'ticket center', and won't open a ticket for someone who is not Verizon customer. "Customer service" doesn't know what 'ftp' is, and vacillates between thinking it is a circuit problem, or that I am having a problem with -my- domain. Call-transfer to 'technical support' was answered by someone handling 'delinquent payments'. Another transfer attempt ended up on somebody's cell phone.

3 2

Re: economic value of low AS numbers
by Owen DeLong 17 Nov '11

17 Nov '11

On Nov 17, 2011, at 9:44 AM, Dave Hart wrote: > On Thu, Nov 17, 2011 at 17:32, Owen DeLong <owen(a)delong.com> wrote: >> ARIN policy does not currently support the transfer of AS numbers in >> this manner. IMHO, it shouldn't, but, there is a policy proposal to >> do so. I suggest that anyone interested in this subject review the >> proposal and join the discussion on arin-ppml. >> >> Owen >> (Speaking only for myself and not on behalf of the ARIN AC) > > Thanks. My policy search was focused on arin.net, but I didn't find > what you apparently know. In particular, there's no reference to > transfer of AS numbers in the NRPM, nor could I find any policy or > procedure regarding updating POC or any other information associated > with an AS registration. Do keep in mind I was referring specifically > to legacy AS numbers, where it is not clear to me ARIN policy would > control, particularly in the case of a merger or acquisition. > ARIN is the successor registry to the prior registries that distributed AS Numbers, so, I believe that they are subject to ARIN policy. I realize there are others that have different opinions, but I really don't want to engage in that debate here. ARIN policy currently does not provide for transfer of AS numbers other than through NRPM 8.2 for merger/acquisition. Martin Hannigan proposed the following: http://lists.arin.net/pipermail/arin-ppml/2011-September/023136.html which is on the AC docket as Proposal 158. Personally, I do not favor this proposal. I don't think there is good reason to allow the transfer of ASNs and I think that allowing transfers of IPv6 numbers is a really bad idea. However, anyone with an interest in this proposal, whether in favor or opposed should bring their opinion to arin-ppml. > Would you refer me to the current ARIN policy regarding transfers of > or updates to ASN registrations? > Updates are processed through the standard ARIN-online process like updates to any other number resources. If you want additional assistance on that, I suggest contacting the registration services help desk by phone (703-227-0660) or email (hostmaster(a)arin.net) Owen

1 0

Comcast DNS Contact?
by Steve Polyack 17 Nov '11

17 Nov '11

Could a Comcast DNS admin please contact me off-list? We're seeing lots of queries from local Comcast resolvers for a domain which we haven't hosted in nearly a year. Thanks, Steve

1 0

IP Options
by harbor235 17 Nov '11

17 Nov '11

Is it just me or has there been an increase in packets with IP options set hitting our front door? There are ways to mitigate e.g. IP options selective discard, and ACL IP options support. ACL entries on the edge appear to be the best way identify and log the source. IP options selective discard drops packets silently so from my view they are not as effective. Is anyone doing anything else to identify and mitigate? I have been seeing hits on our firewalls but would rather take care of it at our edge with little or no impact. Mike

2 3

Arguing against using public IP space
by Jason Lewis 17 Nov '11

17 Nov '11

I don't want to start a flame war, but this article seems flawed to me. It seems an IP is an IP. http://www.redtigersecurity.com/security-briefings/2011/9/16/scada-vendors-… I think I could announce private IP space, so doesn't that make this argument invalid? I've always looked at private IP space as more of a resource and management choice and not a security feature.

29 96

Last call for participation in the Arbor 2011 WISR opsec survey.
by Dobbins, Roland 16 Nov '11

16 Nov '11

[Apologies if you've already seen this message in other forums.] We'd be grateful if folks who've yet to do so would take a few minutes to participate in the 2011 WISR opsec survey - responses will be tabulated on Sunday, 20Nov11, and input from the operational community is greatly appreciated! This link redirects to the http/s-enabled survey tool: <http://www.arbornetworks.com/survey/ISR2011> Thanks much! ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> The basis of optimism is sheer terror. -- Oscar Wilde

1 0

Re: OT -- seeking a knowledgable AS 701 technical contact.
by Christopher Morrow 16 Nov '11

16 Nov '11

sorry grant :( (gmail user fail) On Wed, Nov 16, 2011 at 8:12 PM, Christopher Morrow <morrowc.lists(a)gmail.com> wrote: > On Wed, Nov 16, 2011 at 8:12 PM, Christopher Morrow > <morrowc.lists(a)gmail.com> wrote: >> what are you trying to do with ftp.uu.net? is it broken in some way? >> > > is it possibly that no login info works on it? > > $ ftp ftp.uu.net > Connected to ftp.uu.net. > 220 FTP server ready. > Name (ftp.uu.net:morrowc): anonymous > 331 Guest login ok, send your complete e-mail address as password. > Password: > 530 Login incorrect. > Login failed. > ftp> quit > > >> On Wed, Nov 16, 2011 at 5:51 PM, Grant Ridder <shortdudey123(a)gmail.com> wrote: >>> Hi, >>> >>> If i remember right, Verizon Business has 3 or 4 different help desks. >>> From my experience, none of the help desks know anything about the others. >>> I dont have any numbers off hand unfortunately. >>> >>> -Grant >>> >>> On Wed, Nov 16, 2011 at 4:35 PM, Robert Bonomi <bonomi(a)mail.r-bonomi.com>wrote: >>> >>>> >>>> Apologies for the noise, but I have been absolutely unable -- despite >>>> literally *hours* of trying --to contact anyone at _any_ of the published >>>> Verizon Business phone numbers who has any comprehension of what I am >>>> talking about -- to wit: >>>> >>>> "I am looking for someone with _any_ awareness/knowledge of Verizon >>>> Business's public-access anonymous FTP server, with the hostname >>>> 'ftp.uu.net'." >>>> >>>> The published Verizon Business technical contact number -- both in 'whois' >>>> for uu.net, and Jared's NOC contact list is only the 'ticket center', and >>>> won't open a ticket for someone who is not Verizon customer. >>>> >>>> "Customer service" doesn't know what 'ftp' is, and vacillates between >>>> thinking it is a circuit problem, or that I am having a problem with -my- >>>> domain. >>>> >>>> Call-transfer to 'technical support' was answered by someone handling >>>> 'delinquent payments'. Another transfer attempt ended up on somebody's >>>> cell phone. >>>> >>>> >>>> >>>> >>> >> >

1 0

OpenSource IPTV and VoD Solution
by Meftah Tayeb 16 Nov '11

16 Nov '11

Hello Guys i'm looking for a solution to stream diferent DVB transponders through RTSP VLC look like complicated a bit i use MumuDVB for Multicasting but i didn't found anything for RTSP any help Would by welcome thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746 __________ Information from ESET NOD32 Antivirus, version of virus signature database 6633 (20111115) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

5 6

Security Contact from k12.fl.us
by Nathan Eisenberg 16 Nov '11

16 Nov '11

Please contact me off-list.

1 2

[ISC Security Advisory] BIND 9 Resolver crashes after logging an error in query.c
by Peter Losher 16 Nov '11

16 Nov '11

BIND 9 Resolver crashes after logging an error in query.c Summary: Organizations across the Internet reported crashes interrupting service on BIND 9 nameservers performing recursive queries. Affected servers crashed after logging an error in query.c with the following message: "INSIST(! dns_rdataset_isassociated(sigrdataset))" Multiple versions were reported being affected, including all currently supported release versions of ISC BIND 9. ISC is actively investigating the root cause and has produced patches which prevent the crash. Further information will be made available soon. CVE: CVE-2011-4313 Document Version: 1.1 Document URL: http://www.isc.org/software/bind/advisories/cve-2011-4313 Posting date: 16 Nov 2011 Program Impacted: BIND Versions affected: All currently supported versions of BIND, 9.4-ESV, 9.6-ESV, 9.7.x, 9.8.x Severity: Serious Exploitable: Remotely Description: An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. ISC is working on determining the ultimate cause by which a record with this particular inconsistency is cached.At this time we are making available a patch which makes named recover gracefully from the inconsistency, preventing the abnormal exit. The patch has two components. When a client query is handled, the code which processes the response to the client has to ask the cache for the records for the name that is being queried. The first component of the patch prevents the cache from returning the inconsistent data. The second component prevents named from crashing if it detects that it has been given an inconsistent answer of this nature. CVSS Score: 7.8 CVSS Equation: (AV:N/AC:L/Au:N/C:N/I:N/A:C) Workarounds: No workarounds are known. The solution is to upgrade. Upgrade BIND to one of the following patched versions: BIND 9.8.1-P1, 9.7.4-P1, 9.6-ESV-R5-P1, 9.4-ESV-R5-P1 Active exploits: Under investigation Solution: Patches mitigating the issue are available at: https://www.isc.org/software/bind/981-p1 https://www.isc.org/software/bind/974-p1 https://www.isc.org/software/bind/96-esv-r5-p1 https://www.isc.org/software/bind/94-esv-r5-p1 ISC is receiving multiple reports and working with multiple customers on this issue. Please E-mail all questions, packet captures, and details to security-officer(a)isc.org We very much appreciate all reports received on this issue. Related Documents: Do you have Questions? Questions regarding this advisory should go to security-officer(a)isc.org. ISC Security Vulnerability Disclosure Policy: Details of our current security advisory policy and practice can be found here: https://www.isc.org/security-vulnerability-disclosure-policy Legal Disclaimer: Internet Systems Consortium (ISC) is providing this notice on an "AS IS" basis. No warranty or guarantee of any kind is expressed in this notice and none should be implied. ISC expressly excludes and disclaims any warranties regarding this notice or materials referred to in this notice, including, without limitation, any implied warranty of merchantability, fitness for a particular purpose, absence of hidden defects, or of non-infringement. Your use or reliance on this notice or materials referred to in this notice is at your own risk. ISC may change this notice at any time. A stand-alone copy or paraphrase of the text of this document that omits the document URL is an uncontrolled copy. Uncontrolled copies may lack important information, be out of date, or contain factual errors. -- [ plosher(a)isc.org | Senior Operations Architect | ISC | PGP E8048D08 ]

1 0