- Test - lists.nanog.org

Re: spamassassin
by Larry Sheldon 19 Feb '14

19 Feb '14

On 2/18/2014 8:42 PM, Randy Bush wrote: >> They are smart and dkim sign their messages; even though it's invalid I >> believe that's why it has such a low bayes score. > > lots of the spam getting through has no dkim > >> It's getting marked as ham and not spam. Are you positive your >> definitions are still updating? > > sa-update has run. and it runs cleanly > > randy > > From a posting on NANAE: > On 2/18/2014 6:09 PM, Larry Sheldon wrote: >> Received: from [207.254.213.223] (helo=drone166.ral.icpbounce.com) > > Larry, icpbounce.com is IContact aka Vocus. I don't know whether the > managers of Vocus are as whitehat as those of IContact were before the > buyout, but Andrew Barrett was still in charge of abuse/deliverability > when I last checked and he *does* respond quickly and effectively to > spam complaints. Try sending this to abuse(a)icontact.com. -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

1 0

"Everyone should be deploying BCP 38! Wait, they are …."
by Jay Ashworth 19 Feb '14

19 Feb '14

Here's a piece which uses the MIT ANA data to assert that the job is mostly done already. Unless I'm very much mistaken, it appears that a large percentage of the failed BCP 38 spoofing tests listed in that data are actually due to customer side NAT routers dropping packets... which is of course egress filtering rather than ingress filtering, and thus doesn't actually apply to our questions. Am I interpreting that correctly? http://www.senki.org/everyone-should-be-deploying-bcp-38-wait-they-are/ (Oh, and bcp38.info is now the number 2 Ghit for "bcp38"; thanks to 5 new contributors for signing up to help so far this week.) Cheers, - jra -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.

7 8

Fibre/Layer2 In San Jose
by Geraint Jones 19 Feb '14

19 Feb '14

Hi I am wondering if anyone knows anyone with Fibre or L2 service between Equinix SV1 (11 Great Oaks) and CoreSite (55 S Market). It seems we need it sooner rather than later. Thanks. -- Geraint Jones Director of Systems & Infrastructure Koding https://koding.com geraint(a)koding.com Phone (415) 653-0083

1 0

Work Practices of Cyber Security Professionals
by Muhammad Adnan 18 Feb '14

18 Feb '14

Dear Sir/Madam, I am a university researcher who is investigating the development of new, usable tools that will improve the work practices of cyber security professionals. As a first step to achieve this goal, I am undertaking a survey to gain an in-depth understanding of the day-to-day activities of cyber security professionals. The targeted participants for this survey are those who perform security related activities as a part of their job (e.g. security analysts, network administrators, penetration testers). I would be very grateful if you could spare some time and complete this short (10 minutes) survey for me. It can be accessed at the following link: http://edu.surveygizmo.com/s3/1536165/Work-Practices-of-Cyber-Security-Prof… If you have questions or concerns about this research, please contact me ( Muhammad.Adnan(a)gcu.ac.uk) or my Ph.D. supervisor Dr. Mike Just ( Mike.Just(a)gcu.ac.uk) both at the Interactive and Trustworthy Technologies research group (http://www.ittgroup.org/) Glasgow Caledonian University, UK. Kind regards, Adnan

2 2

HP to Cisco fiber
by Eric J Esslinger 18 Feb '14

18 Feb '14

I've talked to HP and Cisco and neither side will commit to any kind of answer to this question, so I thought I'd ask it here: Does anyone know if a Cisco switch equipped with a 1000BASE-BX10-D SFP will connect to an HP switch equipped with a HP X122 1G SFP LC BX-U Transceiver J9143B SFP, assuming they are already talking over dual fiber links and both units support the single fiber sfp's? (they do). All the specs look like they should but Cisco and HP are doing the old 'will neither confirm nor deny interoperability'. Off list reply is fine, I'd like someone with a definite 'yes I did it and it works fine' or 'no I tried it and it did not', not 'it should' because that's where I'm at for the moment. ------------------------------------- Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpunet.com/ (931)433-1522 ext 165 This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

2 1

BCP38 filtering on Mobile IP networks
by Jay Ashworth 18 Feb '14

18 Feb '14

I note that the MIT ANA tester is only for desktop OSs, and none of the network tools I've collected for Android have BCP38 filter testing built in. Does anyone know if there are such tools for Android and for iOS? I assume that tether testing from a PC would be useless, as the NAT implementation would drop the packets -- does anyone know if there are any leaky NAT implementations that *won't* drop packets with bogus source addresses? Or, alternatively, does anyone know *authoritatively* that any cell carrier's mobile IP network already implements BCP38? And if so, why aren't they bragging about it; at least here? :-) I have added the Small Business page to BCP38.info. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

1 0

looking for feedback on virtual/dedicated server providers in latin/south america/UK
by Carlos Kamtha 18 Feb '14

18 Feb '14

Hi, Just wondering if anyone could share some experiences with server providers specifically in argentina, columbia and costa rica, and pretty much anywhere in the UK region. Please respond offlist. Any feedback would be greatly appreciated. :) Carlos.

2 1

Re: OpenNTPProject.org
by Derek Andrew 18 Feb '14

18 Feb '14

nmap -sU -pU:123 -Pn -n --script=ntp-monlist serverIP On Mon, Jan 13, 2014 at 3:07 PM, Jared Mauch <jared(a)puck.nether.net> wrote: > Greetings, > > With the recent increase in NTP attacks, I wanted to advise the community > of a few things: > > There are about 1.2-1.5 million of these servers out there. > > 1) You can search your IP space to find NTP servers that respond to the > ‘MONLIST’ queries. > > 2) I’ve found some vendors have old embedded versions of NTP including > ILO/Service Processors and other parts of the “internet of things”. > > 3) You want to upgrade NTP, or adjust your ntp.conf to include ‘limited’ > or ‘restrict’ lines or both. (I defer to someone else to be an expert in > this area, but am willing to learn :) ) > > 4) Please prevent packet spoofing where possible on your network. This > will limit the impact of spoofed NTP or DNS (amongst others) packets from > impacting the broader community. > > 5) Some vendors don’t have an easy way to alter the ntp configuration, or > have not or won’t be updating NTP, you may need to use ACLs, firewall > filters, or other methods to block this traffic. I’ve heard of many > routers being used in attacks impacting the CPU usage. > > Take a moment and see if your devices respond to the following > query/queries: > > ntpdc -n -c monlist 10.0.0.1 > ntpdc -n -c loopinfo 10.0.0.1 > ntpdc -n -c iostats 10.0.0.1 > > 6) If you do VMs/Servers and have a template, please make sure that they > do not respond to NTP requests. > > Thanks! > > - Jared > -- Copyright 2014 Derek Andrew (excluding quotations) +1 306 966 4808 Information and Communications Technology University of Saskatchewan Peterson 120; 54 Innovation Boulevard Saskatoon,Saskatchewan,Canada. S7N 2V3 Timezone GMT-6 Typed but not read.

32 63

Telia contact
by Jay Coley 18 Feb '14

18 Feb '14

Hi, If there are any Telia engineers lurking about could you please contact me off-list regarding a routing question? Thanks! --J

1 0

Telia contact
by Jay Coley 18 Feb '14

18 Feb '14

Hi, If there are any Telia engineers lurking about could you please contact me off-list regarding a routing question? Thanks! --J

1 0