- Test - lists.nanog.org

Re: Post-Exhaustion-phase "punishment" for early adopters
by Brandon Butterworth 09 Feb '11

09 Feb '11

> Before arin etc it was possible to request ip space and on the > form specify you would not be connecting to the Internet. So those off net users can't complain if ARIN allocated the same ranges on net. Not that it's worth doing so now. V6, drive fast. brandon

3 2

WebServer and Firewall Help
by Joshua William Klubi 09 Feb '11

09 Feb '11

Hi, I run a web-server based on ubuntu server and the LAMP stack. I used Ubuntu's UFW firewall model and have enabled only Web and SSH ports. Namely port 80 and port 22 only. Unfortunately once a while some guys get to inject some content onto our web pages. Now managements are looking at getting a well proven infrastructure to counter that. But I also think i can fall on this community to help me get the right stuff done. Where i can protect the server from such attack. I want to know what measure i can do on the server to get it protected which mysql protection I should implement. since i can see that it might be a php or mysql injection that is been used. Currently I run these security measures on it. Ubuntu UFW Fail2ban PHP model security Apache security Joshua

5 4

Root Zone DNSSEC KSK Ceremony 4 Completed
by Joe Abley 08 Feb '11

08 Feb '11

KSK CEREMONY 4 The fourth KSK ceremony for the root zone took place in El Segundo, CA, USA on Monday 2011-02-07. The Ceremony Administrator was Mehmet Akcin. The ceremony was completed successfully. Video from Ceremony 4 was recorded for audit purposes. Video and associated audit materials will be published in 1 to 2 weeks, and will be available as usual by following the "KSK Ceremony Materials" link at <https://www.iana.org/dnssec/>. Ceremony 4 included processing of a Key Signing Request (KSR) generated by VeriSign, and the resulting Signed Key Response (SKR) contained signatures for Q2 2011, for use in the root zone between 2011-04-01 and 2011-07-05. CONTACT INFORMATION We'd like to hear from you. If you have feedback for us, please send it to rootsign(a)icann.org.

1 0

Random Port Blocking at Hotels (was: Re: quietly....)
by Joel M Snyder 08 Feb '11

08 Feb '11

> If they don't document partial internet access blockage in the > contract and the contract says they are providing internet access, > then, they are in breach and you are free to depart without a > termination fee and in most cases, demand a refund for service to > date. > (Yes, I have successfully argued this on multiple occasions). > In fact, I get free internet in most of the more expensive hotel > environments as a result. It's more likely you get free internet service in expensive hotels because the guy/girl behind the front desk has been empowered to cancel out a ridiculously high charge for Internet when a guest starts jabbering at them about how the Internet didn't work for them for any reason, to keep the line moving and to make the guest happy, rather than any higher authority hunkering down with the CEO, legal staff, and CTO and saying "by God, this Owen character is right, we're in breach of contract and his definition of the purity of Internet ports has so stunned us with its symmetry and loveliness that we shall bow down and sin no more! Thank you Mr. DeLong from making the blind see again!" I mean, it's gratifying to think you've won the argument (hence: this is why they do it), but you could also have argued that they were giving out non-contiguous subnet masks or Class E addresses and it would have had the same effect. Try that next time and let us know how it works. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

12 17

Upcoming DNS-OARC Workshop
by Matthew Pounsett 08 Feb '11

08 Feb '11

Morning all, From all reports the recent DNS BoF at the Miami NANOG was well received. As a follow up, I'd like to the a moment to let everybody know about the upcoming DNS-OARC Workshop March 13th and 14th in San Francisco durning the ICANN 40 meeting. Both days are open to the public but attendees will have to register for the ICANN Meeting (free). This will be a joint workshop with the ccTLD Tech Day, a workshop put on by members of the ccNSO. The workshop brings together a wide range of DNS operators and experts for two days of presentations and discussion. Details on the meeting, venue and travel details can be found at <https://www.dns-oarc.net/oarc/workshop-201103>. We are looking for speakers and there is a option on the Registration form to indicate your interest should you have a topic that you wish to present. Thanks in advance to the folks at ICANN for hosting us and to the ccNSO Tech Day team (Dr. Eberhard W Lisse, Jay Daley) for supporting the joint meeting. For those unfamiliar with DNS-OARC, we are a non-profit organization that was created to provide a trusted platform for members of the DNS community to share information. Our members include the DNS Root Operators, TLD and ccTLD operators, commercial ISPs and research organizations. More details on DNS-OARC can be found at <https://www.dns-oarc.net>. For more information, feel free to contact Wayne MacLaurin, Executive Director of DNS-OARC at wayne(a)dns-oarc.net.

1 0

RE: Membership model
by Scott Weeks 08 Feb '11

08 Feb '11

--------------------------------------- > On Mon, Feb 07, 2011 at 12:40:41PM -0800, Owen DeLong wrote: > > > I'll happily join Newnog/NANOG and pay my dues when I can reach the > > web site ot do so on IPv6 rather than legacy IPv4. Yes it does. 2001:4970:EEEE:7777::2 I'm bugging the powers-that-be about getting forward records working. [root@wa-geeks ~]# host 2001:4970:eeee:7777::2 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.7.7.7.e.e.e.e.0.7.9.4.1.0.0.2.ip6.arpa domain name pointer www.newnog.org. -------------------------------------------------- Now your only question is check or pay pal... :-) scott

5 5

Time Warner Transit
by Christopher Wolff 08 Feb '11

08 Feb '11

Hey guys, What are you thinking about Time Warner transit lately? They claim to be fully ready to support IPv6. Thanks in advance, you can hit me offlist if you're not able to share your TWTC opinion publicly. Christopher

2 1

Re: US Warships jamming Lebanon Internet
by Denys Fedoryshchenko 08 Feb '11

08 Feb '11

Hi I'm sysadmin of Lebanese ISP. Almost at same time i got heavy interference on few of my C-Band carriers, and it looks like electronic warfare jamming, because i can see phase modulated, very weak signal, but it is completely breaking almost any communications on my carriers. Strange thing, that our uplink station confirm that interference is not local on my side, but on satellite carrier. If this will be confirmed, that means it is not just miscommunication between authorities about frequency usage, it will be intentional damage for Lebanese communications. Sure it can be coincidence in time or something else, but last 6 years i experience similar terrible interference only during 2006 Lebanon vs Israel war. >Lebanon's Telecom minister is claiming that US Navy radar is blocking the >country's Internet.. > >http://www.naharnet.com/domino/tn/NewsDesk.nsf/0/93A95CA1A4E42178C225782E00… > >>"The problem, however, is due to a coordination error related to waves," >> Nahhas told OTV, adding that an investigation was underway to find out >> whether this act is "intentional or not." > > >also at >http://www.naharnet.com/domino/tn/NewsDesk.nsf/Lebanon/EFCEF203B3C315A5C225…

6 5

Re: Weekend Gedankenexperiment - The Kill Switch
by andrew.wallace 08 Feb '11

08 Feb '11

On Tue, Feb 8, 2011 at 4:11 AM, <Valdis.Kletnieks(a)vt.edu> wrote: > On Mon, 07 Feb 2011 17:49:36 EST, Josh Smith said: > >> even if it was I suspect any service available via satellite might >> suffer from similar problems if the methods used to disrupt >> connectivity in Egypt were employed here. > > The real question isn't "If they shut you down, can you restart?". > > The real question is "If they shut you down, can you restart in a way that > avoids them attempting a second shutdown with a bullet?" > > > May I suggest - A bunker built for Scottish Office staff in the event of a nuclear attack is up for sale. The complex at Cultybraggan Camp near Comrie, Perthshire, was completed in 1990 and is believed to be one of the most advanced structures of its kind. It was built to house 150 people and protect them from nuclear, biological and electromagnetic attacks. http://www.bbc.co.uk/news/uk-scotland-tayside-central-12311164 Andrew

1 0

I've joined NEWNOG
by Owen DeLong 08 Feb '11

08 Feb '11

OK... They got the IPv6 issues resolved, the page is working great now. Yes, Paypal broke when I clicked the pay now button with IPv4 turned off. However, everything else worked. I've now paid my fee and joined NEWNOG. Thanks to the technical crew for addressing this issue so promptly and showing leadership in this area. Welcome NEWNOG to the NEW NET. Owen

1 0