- Test - lists.nanog.org

RE: SWIP and Rwhois in the Real World
by Greenhagen, Robin 01 Dec '05

01 Dec '05

Can someone summarize the alternatives to the ARIN recommended RWHOIS server bits (from rwhois.org)? A quick hit on Google and Freshmeat was fairly barren. Looking for one that is mostly or fully put together, or a cookbook to assemble one from parts (i.e. MySQL, PHP, Apache, 3 rubber bands, 2 gallons of perl, etc...). Regards, Robin Greenhagen GSI http://www.gsihosting.com/

4 3

Re: GoDaddy DDoS
by Sam Crooks 01 Dec '05

01 Dec '05

So anyway, back to the original post.... does anyone from GoDaddy have any information regarding the DDoS? -- On 12/1/05, Valdis.Kletnieks(a)vt.edu <Valdis.Kletnieks(a)vt.edu> wrote: > On Thu, 01 Dec 2005 01:47:17 PST, Jay Hennigan said: > > > Has the validity of such language ever been upheld in court? > > IANAL - but apparently the use of it on *some* faxes has stood up in court, > it hasn't been tested on e-mail yet, but a number of people who have written > on it think that the indiscriminate use of disclaimers will backfire badly > if the opposing legal staff can show the company can't tell the difference > between an e-mail discussing strategy for an upcoming trial and a request > for help with BGP. URLs I found the last time I researched this: > > http://www.wendytech.com/articlesemailandprivilege.htm > http://www.mcguirewoods.com/news-resources/publications/commercial_litigati… > http://partners.nytimes.com/library/tech/00/03/cyber/cyberlaw/17law.html > > > Nobody reads it anyway. You're not actually reading this, are you? > > I didn't think so. > > I love the ones that put "please discard without reading" at the *bottom* of > the e-mail. Bonus points for having a single unwrapped 3,487 character long > line so standard-compliant MUAs that don't flow text unless it *says* text/flowed, > so you have to use the horizontal scrollbar to find the "please discard without > reading" ;) > > ObNANOG: The ones that claim you are *required* to destroy *all* copies, > including the unlinked-but-not-yet-overwritten data blocks on that RAID > you use for a mail store, and the backup tapes. I mean, after all, if they > screwed up and they want it *destroyed*, they don't want it *destroyed* in the > half-assed, just-get-the-disk-copy way that eventually helped convict > Colonel Oliver North partly on the basis of the backup tapes: > > http://www.fas.org/spp/starwars/offdocs/reagan/chron.txt > > Figuring out how to do this right, and then invoice the responsible company for the > cost, thus creating a profit center for your company, is left as an excersize > for the reader. ;) > > > >

1 0

RE: QoS for ADSL customers
by Church, Chuck 01 Dec '05

01 Dec '05

But be careful about the CPU usage and platform support for NBAR. I don't think the sup720 will do NBAR, at least that's what I heard. Chuck Church Lead Design Engineer CCIE #8776, MCNE, MCSE Netco Government Services - Design & Implementation Team 1210 N. Parker Rd. Greenville, SC 29609 Home office: 864-335-9473 Cell: 864-266-3978 cchurch(a)netcogov.com PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Ray Burkholder Sent: Thursday, December 01, 2005 8:52 AM To: Ejay Hire Cc: 'Kim Onnel'; 'NANGO' Subject: RE: QoS for ADSL customers There are a bunch of p2p and torrent custom classifier pdlm's at http://www.cisco.com/cgi-bin/tablebuild.pl/pdlm Quoting Ejay Hire <ejay.hire(a)isdn.net>: > > I got an off-list reply about using Nbar, but I've never > seen a class map that would match torrent. > > -e > > > -----Original Message----- > > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] > On > > Behalf Of Kim Onnel > > Sent: Thursday, December 01, 2005 7:12 AM > > To: Ejay Hire > > Cc: NANGO > > Subject: Re: QoS for ADSL customers > > > > Our ADSL customers traffic is 3 OC3 worth of traffic, I > dont > > think our management would buy the idea. > > > > thanks > > > > > > On 12/1/05, Ejay Hire <ejay.hire(a)isdn.net> wrote: > > > > Hello. > > > > Going back to your original question, how to keep > from > > saturating the network with residential users using > > bittorrent/edonkey et al, while suffocating business > > customers. Here goes. > > > > Netfilter/IpTables (and a slew of commercial > products I'm > > sure) has a Layer 7 traffic classifier, meaning it > can > > identify specific file transfer applications and set > a > > DiffServ bit. This means it can tell between a real > http > > request and a edonkey transfer, even if they are > both using > > http. It also has rate-limiting capability. So... > If you > > pass all of the traffic destined for your DSL > customers > > through an iptables box (single point of failure) > then you > > can classify and rate-limit the downstream rate on a > > > per-application basis. > > > > Fwiw, if you are using diffserv bits, you could push > the > > rate-limits down to the router with a qos policy in > it > > instead of doing it all in the iptables box. > > > > References on this.. The netfilter website (for > > classification info) and the Linux advanced router > tools > > (LART) (qos info/rate limiting) > > > > -e > > > > > > > -----Original Message----- > > > From: owner-nanog(a)merit.edu > [mailto:owner-nanog@merit.edu] > > On > > > Behalf Of Kim Onnel > > > Sent: Thursday, December 01, 2005 3:26 AM > > > To: NANGO > > > Subject: Re: QoS for ADSL customers > > > > > > Can any one please suggest to me any commercial or > none > > > solution to cap the download stream traffic, our > upstream > > > will not recieve marked traffic from us, so what > can be > > done ? > > > > > > > > > On 11/29/05, Kim Onnel <karim.adel(a)gmail.com> > wrote: > > > > > > Hello everyone, > > > > > > We have Juniper ERX as BRAS for ADSL, its > GigE > > > interface is on an old Cisco 3508 switch with an > old IOS, > > its > > > gateway to the internet is a 7609, our transit > internet > > links > > > terminate on GigaE, Flexwan on the 7600 > > > > > > The links are now almost always fully > utilized, we > > want > > > to do some QoS to cap our ADSL downstream, to give > room > > for > > > the Corp. customers traffic to flow without pain. > > > > > > I'm here to collect ideas, comments, advises > and > > > experiences for such situations. > > > > > > Our humble approach was to collect some p2p > ports > > and > > > police traffic to these ports, but the traffic > wasnt much, > > > > > one other thing is rate-limiting per ADSL > customers IPs, > > but > > > that wasnt supported by management, so we thought > of > > matching > > > ADSL www traffic and doing exceed action is > transmit, and > > > police other IP traffic. > > > > > > Doing so on the ERX wasnt a nice experience, > so > > we're > > > trying to do it on the cisco. > > > > > > Thanks > > > > > > > > > > > > > > > > > > > > > > -- > Scanned for viruses and dangerous content at > http://www.oneunified.net and is believed to be clean. > > -- Ray Burkholder http://www.oneunified.net ray(a)oneunified.net 441 505 7293 ------------------------------------------------- Sent from http://www.oneunified.net via IMP: http://horde.org/imp/ -- Scanned for viruses and dangerous content at http://www.oneunified.net and is believed to be clean.

1 0

GoDaddy DDoS
by Sam Crooks 30 Nov '05

30 Nov '05

Does anybody have information regarding to size and scale of the DDoS attack purported to have happened against GoDaddy today? CONFIDENTIALITY NOTICE: This message, and any attachments, are intended only for the lawful and specified use of the individual or entity to which it is addressed and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that you are STRICTLY PROHIBITED from disclosing, printing, storing, disseminating, distributing or copying this communication, or admitting to take any action relying thereon, and doing so may be unlawful. It should be noted that any use of this communication outside of the intended and specified use as designated by the sender, may be unlawful. If you have received this in error, please immediately notify us by return e-mail, fax and/or telephone, and destroy this original transmission and its attachments without reading or saving in any manner.

2 1

[Latest draft of Internet regulation bill]
by bmanning＠vacation.karoshi.com 30 Nov '05

30 Nov '05

Begin forwarded message: From: Brett Glass <brett(a)lariat.org> Date: November 9, 2005 10:43:40 AM EST Here's the latest draft of the Internet regulation bill, dated November 3rd. Note that, like earlier versions, it subjects all ISPs and VoIP providers to intensive Federal regulation and requires them to register before providing service. It also pre-empts state and local control over rights of way. For the draft text, see http://energycommerce.house.gov/108/news/11032005_Broadband.pdf --Brett Glass

27 86

RSTP - Foundry Chassis + Cisco + 802.1q + VRRPE
by Flint Barber 30 Nov '05

30 Nov '05

RSTP + 802.1q + VRRPE I have a couple of Foundry NetIron Chassis (Ironcore M4 blades, v9.0.x), Foundry SIs and some Cisco Workgroup switches 3750s(12.2). I will also be throwing a Cat 5509 into the mix at some point running 7.x code I am trying to run RSTP between them and keep having some arp aging problems (to Foundry SIXL loadbalancers from hosts attached to Cisco) and STP problems. Also running 802.1q between all of the above and VRRPE on the Foundrys. Anyone have some good resources for this mix of characters? General searches not very helpful. I can't upgrade hardware.. Also tell me if this is an irreconcilable or irreverent mix. Biggest issues seem to be arp info aging out when all hosts are on same 802.1q vlan including SIs. Thanks for any help.. -Flint

1 0

RE: Bay area data center recommendations
by Matt Bazan 30 Nov '05

30 Nov '05

http://www.upsite.com/TUIpages/whitepapers/tuitiers.html > -----Original Message----- > From: Valdis.Kletnieks(a)vt.edu [mailto:Valdis.Kletnieks@vt.edu] > Sent: Wednesday, November 30, 2005 12:15 PM > To: Matt Bazan > Cc: nanog(a)nanog.org > Subject: Re: Bay area data center recommendations > > On Wed, 30 Nov 2005 11:41:55 PST, Matt Bazan said: > > Looking for recs on bay area California data centers (within 45 > > minutes of San Francisco). Need a class IV facility. Off > list is fine. > > Is "class IV facility" a term any better defined than "tier > 1"? Googling for +"data center" +"class IV" produced some > hits of places that bragged they were class IV, and some NASA > sites talking about class IV supergiants, and other > not-obviously-relevant hits.... > >

1 0

Bay area data center recommendations
by Matt Bazan 30 Nov '05

30 Nov '05

Looking for recs on bay area California data centers (within 45 minutes of San Francisco). Need a class IV facility. Off list is fine. Thanks, Matt

2 1

rbl.cluecentral.net v2.0
by Pim van Pelt 30 Nov '05

30 Nov '05

Hi, Summary: rbl.cluecentral.net moves to ascc.dnsbl.bit.nl per 1/Dec/2005. When Sabri Berisha mailed nanog a couple of weeks ago that he would be stopping his AS and CC DNSBL lists, I'm sure many users were somewhat disappointed. Sabri has received a lot of feedback on the matter, but has decided to stop hosting the lists due to lack of time and other resources. My employer is one of the ISPs that actively use these lists in our antispam setup, so I have conferred with them and we came to the decision that BIT will start hosting the list using the same generating algorithm, but under a new domain. I have finished prototyping and have an implementation ready for production. I worked closely with Sabri to ensure that the data we will publish is compatible with his. BIT will publish new data (800MB, 8M records) on our dnsbl servers on wednesdays at around 02:00 UTC, and on our ftp/rsync server on the following day. I am looking for a couple of US based nameservers (tinydns) to which I can push the compressed data.cdb file (100M per week) and get query statistics from (details to be determined), so if any of you have such gear to share, let me know off-list and maybe we can work something out. -- Met vriendelijke groet, BIT BV / Ing P.B. van Pelt PBVP1-RIPE (PGPKEY-4DCA7E5E)

1 1

Ethernet over SDH tutorial/concepts.
by MARLON BORBA 30 Nov '05

30 Nov '05

Dear NANOGers, We are in process of choosing a new corporate ISP for our company. One of them offered us connection to their backbone using Ethernet over SDH. I'd like to find some introductory texts or prospects about that technology and some advice about its pros/cons when compared to traditional data circuits. Abraços, Marlon Borba, CISSP. -- GTER 20/GTS 02.05 - Participe! http://eng.registro.br/gter20/prog.html --

2 1