- Test - lists.nanog.org

Re: shim6 @ NANOG (forwarded note from John Payne)
by David Meyer 01 Nov '05

01 Nov '05

John, On Thu, Oct 27, 2005 at 02:08:50AM +1000, Geoff Huston wrote: > > From: John Payne <john(a)sackheads.org> > > Subject: shim6 @ NANOG > > Date: Wed, 26 Oct 2005 09:11:45 -0400 > > > Public thanks to Dave, Geoff, Vijay, Ted and Jason for their > involvement in bringing shim6 to the NANOG conference. > > The messages I heard were: > > 1) Traffic engineering, traffic engineering and traffic engineering > - do NOT put this in the hands of the end system, this needs to > be site level, or at the very least the site needs to be able to > override the end system's decisions. > > 2) The first hit is of critical importance to content providers (many > of whom couldn't legitimately justify a /32). Hunting through DNS to > find a locator that works won't fly. > > 3) It was good to hear in a widespread forum that shim6 is not > expected to be THE only multihoming solution. However, we were left > uninformed as to where the other work is going on. Thanks. I'd also like to thank Geoff, Jason, Vijay, Ted, and everyone to participated in the BOF. I found the session to be quite productive, and I hope that it will form the foundation for an ongoing dialog. The IAB is hoping to do the next IAB "BOF" at APRICOT, so with any luck, see you all there. Thanks again all, Dave

3 2

EUSecWest/London Call for Papers and PacSec/Tokyo announcements
by Dragos Ruiu 01 Nov '05

01 Nov '05

url: http://eusecwest.com url: http://pacsec.jp (PacSec/Tokyo Announcement below...) EUSecWest/core06 CALL FOR PAPERS -------------------------------- London Security Summit February 20/21 2006 LONDON, United Kingdom -- Applied technical security will be the focus of a new annual conference from the organizers of CanSecWest, and PacSec, which is sponsored by the U.K. Ministry of Defence - where the eminent figures in the international security industry will get together with leading European researchers to share best practices and technology. The most significant new discoveries about computer network hack attacks and defenses, commercial security solutions, and pragmatic real world security experience will be presented in central London at the Victoria Park Plaza hotel on February 20 and 21. The EUSecWest meeting provides international researchers a relaxed, comfortable environment to learn from informative tutorials on key developments in security technology, and to collaborate and socialize with their peers in one of the world's hubs of IT activity - downtown London. In addition to the usual one hour tutorials, panel sessions and highly entertaining 5 minute "lightning" talks, this conference will also feature a new session called "Elevator Focus Groups". Featuring several short sessions, these commercial presentations will showcase new, significantly used, or dramatically innovative products in the information security realm. Each selected vendor will have a short 10 minute presentation ("elevator pitch"), after which 10 minutes of audience Q&A and interactive discussion amongst the expert security practitioners attending will follow. In this session both the audience and the vendors can get valuable feedback from world leading experts. The attendees can get user evaluations and learn from sharing experiences about real world security applications and the practical uses of the products - the "focus group." Hence the name: Elevator Focus Groups. The EUSecWest conference will also feature the availability of the Security Masters Dojo expert network security sensei instructors, and their advanced, and intermediate, hands-on training courses - featuring small class sizes and practical application excercises to maximize information transfer. We would like to announce the opportunity to submit papers, lightning talk proposals, and elevator focus candidate products for selection by the EUSecWest technical review committee. Please make your proposal submissions before December 1st 2006. Slides for the papers must be submitted by February 1st 2006. Some invited papers have been confirmed, but a limited number of speaking slots are still available. The conference is responsible for travel and accomodations for the speakers. If you have a proposal for a tutorial session then please email a synopsis of the material and your biography, papers and, speaking background to core06(a)eusecwest.com. Only slides will be needed for the February paper deadline, full text does not have to be submitted. The EUSecWest/core06 conference consists of tutorials on technical details about current issues, innovative techniques and best practices in the information security realm. The audiences are a multi-national mix of professionals involved on a daily basis with security work: security product vendors, programmers, security officers, and network administrators. We give preference to technical details and new education for a technical audience. The conference itself is a single track series of presentations in a lecture theater environment. The presentations offer speakers the opportunity to showcase on-going research and collaborate with peers while educating and highlighting advancements in security products and techniques. The focus is on innovation, tutorials, and education instead of product pitches. Some commercial content is tolerated, but it needs to be backed up by a technical presenter - either giving a valuable tutorial and best practices instruction or detailing significant new technology in the products. Paper proposals should consist of the following information: 1) Presenter, and geographical location (country of origin/passport) and contact info (e-mail, postal address, phone, fax). 2) Employer and/or affiliations. 3) Brief biography, list of publications and papers. 4) Any significant presentation and educational experience/background. 5) Topic synopsis, Proposed paper title, and a one paragraph description. 6) Reason why this material is innovative or significant or an important tutorial. 7) Optionally, any samples of prepared material or outlines ready. Please include the plain text version of this information in your email as well as any file, pdf, or html attachments. Please forward the above information to core06(a)eusecwest.com to be considered for placement on the speaker roster, have your lightning talk scheduled, or submit your product for inclusion in the focus groups. Advance discount registration is now available for EUSecWest at http://eusecwest.com. =================================================== PacSec/core05 Conference Tokyo November 14-16 ----------------------------------------------------------- We would like to announce the final list of Security Masters Dojo courses that will be offered on the 14th at Aoyama Diamond Hall. Seats are available for all courses currently, but course registration is limited to only ten students each. The hands-on courses offered will be: Sinan 'noir' Eren & Nicolas Waisman - Immunity Win32 Reliable Heap Explotation Gerardo Richarte - Core Security Technologies Assembly for Exploit Writing Marty Roesch - Sourcefire Advanced IDS Deployment and Optimization Maximillian Dornseif & Thorsten Holtz - Aachen University Advanced Honeypot Tactics Philippe Biondi - EADS Mastering the Network with SCAPY We would also like to announce the final lineup of talks and apologize that the presentation from "sowhat" of the Chinese Xfocus group will be delayed to CanSecWest in April due to travel documentation issues. The final talks for PacSec in two weeks on November 15/16 will be: Andrea Barisani - Gentoo Building a modern LDAP based security framework. Cedric "Sid" Blancher - EADS WiFi traffic injection based attacks Javier Burroni - CORE SDI Using Neural Networks for remote OS identification Maximillian Dornseif - Laboratory for Dependable Distribute Systems Watching hackers hack - attack visualization van Hauser - thc Attacking the IPv6 protocol suite Adam Jacobs - Oracle Commercial Software and How Can We Fix It? Chris Jordan - Endeavor Security Writing Better Intrusion Prevention Signatures Hiroshi Shinotsuka - Symantec Advances in Trojan Threats Window Snyder - formerly Microsoft A new perspective on internal security. Ilja van Sprundel - Suresec Unix Kernel Auditing Mark Uemura - PWC Fault Redundant IPV6 Wireless Firewalls Yuji Ukai - eeye Real-Time OS Based Embedded Systems Using the JTAG Emulator Christian Wieser - Oulu University Secure Programming Group VoIP: SIP robustness and RTP security Registration: --------------- Seats are still available for PacSec, and registration is open at: https://pacsec.jp/register.html Security Masters Dojo/Tokyo registration is now open at: https://pacsec.jp/courses.html Contact core05(a)pacsec.jp for registration support or corporate sponsorship inquiries. -- World Security Pros. Cutting Edge Training, Tools, and Techniques Tokyo, Japan November 14-16 2005 http://pacsec.jp pgpkey http://dragos.com/ kyxpgp

1 0

Re: UltraDNS - are there any brain cells left?
by Rodney Joffe 01 Nov '05

01 Nov '05

Hell Matt, On 10/14/05 1:50 PM, "Matt Ghali" <matt(a)snark.net> wrote: > > > I understand that since secondary.com operations were picked up by > UltraDNS, there's been a signifigant brain drain within UDNS > operations, and from what I've heard, there isn't a lot of smarts > left there. > As one of the remaining idiots, allow me to respond to you initially here on NANOG - albeit 2 weeks later after being on the road at NANOG and ARIN. You're obviously hoping that posting an inflamatory note in a public forum will get you more action from UltraDNS, or will help show the world how clueful you are. Either way, so be it. If you want to follow up to this, do so by emailing me privately. The list already has way too much noise from home cable and dsl users with zero responsibility for real networks of any significance. > > This anecdotal theory is borne out by empirical evidence- they seem > unable to come up with the TSIG key they use when slaving my zones. > Perhaps you could provide a snippet of this empirical evidence - perhaps logs of any successful zone transfers from your master to any UltraDNS slave that was achieved via use of TSIG? There have been 3,900 transfers so far into UltraDNS from your various masters that have occurred successfully without the benefit of a TSIG key, starting on the day (October 9, 2002) that UltraDNS voluntarily took responsibility for the 5,000 odd free accounts that the original Nominum provided under secondary.com, and that UltraDNS has continued to provide at no charge. On that day, a large number of secondary.com users (many of them on NANOG) responded properly to the UltraDNS emailed instructions, and they have successfully been doing zone transfers using TSIG. You seem adamant that you were using TSIG until your server failed a few months ago, at which time you began allowing zone transfers in the clear. When asked by our support staff what ip address you had configured within the UltraDNS UI, you indicated that it was another of your hostname/ip addresses. This validated my findings - and the responses you have continued to receive from our support staff - you have never transferred your zone to UltraDNS using TSIG. That's because you cannot configure TSIG zone transfers within the UltraDNS UI - TSIG transfers occur to a dedicated set of TSIG servers within UltraDNS, and as all users of TSIG within UltraDNS know, the UltraDNS UI then shows the IP address for transfers as the dedicated UltraDNS TSIG axfr servers, *not* those of the user's. I think that you have us confused with some other provider of yours. Our logs and system confirm that your free secondary.com domains (such as snark.net) have *never* been transferred to UltraDNS using TSIG, but have always been done using normal axfr. > > Secondary.com used a TSIG key, and UltraDNS continued using the same > key (for my account, at least). Uh, you obviously mean someone else. UltraDNS has never used your TSIG key to do transfers for snark.net, as far as I can tell. Once again, do you have any records of any TSIG transfers to us? > Earlier this year, I lost the key > when my nameserver had a nasty double-disk failure. > H'mmmm. Forgive me for being confused - this was whose stupidity and lack of brain cells? The lack of backups of critical data like TSIG keys, etc? > Since then, I've > been allowing axfr based on IP address, which is less preferable for > many reasons. > Our TSIG servers (they are different machines to our normal axfr machines) have audit trails back to October 9, 2002. There is no record of your zone having ever been configured within them. > > I've recently had a chance to try setting up TSIG based transfer > authentication again, but UltraDNS now claims no knowledge of such a > key. Nope. We have never transferred data from you to our TSIG servers. So we have never had a key for that domain, or the zone it is in. > > Are there any other secondary.com/UltraDNS customers out there who > have TSIG transfers configured? Perhaps you could contact UltraDNS > support and let them know which key they are using. And that would help you precisely how? Unless you think that the same key is used for more than one customer? In which case I am now almost positive that you have UltraDNS confused with some other DNS service provider. > > thanks, and sorry for the rant. Whatever. I get the feeling that NANOG (from 11 or 12 years of participation) is not the best place for folks to work out their personal issues that require rants. Rodney Joffe Apparent Brainless Dolt UltraDNS

4 3

FW: [CYBERTEL] FCC Distinguished Engineering Fellow
by Jim Romary 01 Nov '05

01 Nov '05

-----Original Message----- From: Telecom Regulation & the Internet [mailto:CYBERTELECOM-L@LISTSERV.AOL.COM] On Behalf Of Robert Cannon Sent: Monday, October 31, 2005 4:02 PM To: CYBERTELECOM-L(a)LISTSERV.AOL.COM Subject: [CYBERTEL] FCC Distinguished Engineering Fellow The Federal Communications Commission would like to announce the creation of a new senior level advisory position, the Distinguished Engineering Fellow. Analogous to the Chief Economist position, the Distinguished Engineering Fellow will work out of the Office of Strategic Planning and Policy Analysis, the Commission's primary source of long-range communications policy development, analysis and evaluation. Candidates should have expertise in some or all of the following areas: TCP/IP, routing, interconnection, peering, transit, IPv6, security, network performance, spam, Next Generation Networks, Internet over broadband, and VoIP. He or she will advise the Commissioners and staff on these and related engineering issues, working closely with Commission engineers, MBAs, economists and lawyers to analyze new technological developments. If you know an academic that would be interested in this one-year visiting position, please have him or her contact Jonathan Levy at 202-418-2048 or jonathan.levy(a)fcc.gov. =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~= Cybertelecom :: An educational non profit dedicated to raising awareness of and participation in Federal Internet Policy. www.cybertelecom.org

1 0

L3 purchases Wiltel from Leucadia
by Joe McGuckin 01 Nov '05

01 Nov '05

www.forbes.com/business/manufacturing/feeds/ap/2005/10/31/ap2308682.html -- Joe McGuckin ViaNet Communications 994 San Antonio Road Palo Alto, CA 94303 Phone: 650-213-1302 Cell: 650-207-0372 Fax: 650-969-2124

1 0

feedback from new conference attendees
by Todd Underwood 31 Oct '05

31 Oct '05

folx, a number of people involved with nanog in various official and unofficial capacities have been having in-depth discussions about how to make the nanog conference more accessible and productive to newcomers. i'm collecting anecdotal (totally bereft of scienctific value) data about newcomers' experiences at the most recent nanog conference, in an effort to understand general reaction and suggestions for improvement. this is a supplement, and not a replacement for the survey results that are always excellent and useful. if los angeles was your first nanog conference and you feel like describing your experience, i'm particularly interested in: --what did you expect to get out of the conference? --what did you get out of the conference? --what aspect of the conference was most valuable to you (tutorials, general session, BOFs, beer 'n' gear, informal social time, the terminal room, hotel pool, etc.)? --what aspect of the conference was most frustrating to you (location, schedule, content, food, dress code, tshirt, time zone, etc.)? --will you attend another nanog? when? if not, why not? if not, is there anything that would convince you to? --anything else i'm missing. replies in private email, pls. i'll be collecting results and am happy to share with interested parties. thanks, t. -- _____________________________________________________________________ todd underwood chief of operations & security renesys - internet intelligence todd(a)renesys.com www.renesys.com

1 0

Cogent problems in Miami?
by Chris Ranch 31 Oct '05

31 Oct '05

Hello Folks, Is it just us, or are others experiencing loss/latency/bgp flapping within Cogent (AS174) network in Miami? I'm not a direct customer; my upstream is working with them, and was wondering. This appears to have started for us 10/29/05 19:40 EDT. Thanks, Chris Ranch

1 0

ASN database files from LACNIC or AFRINIC?
by Andreas Ott 30 Oct '05

30 Oct '05

Hello, I am currently looking for ASN databases from LACNIC and AFRINIC the same way they are provided at ftp://ftp.arin.net/pub/rr/arin.db ftp://ftp.ripe.net/ripe/dbase/ripe.db.gz ftp://ftp.apnic.net/apnic/whois-data/APNIC/apnic.RPSL.db.gz I've traversed their respective ftp.[lacnic|afrinic].net servers to no avail. I would appreciate any hints where to download this data if it exists. NB: we do know that looking up from a dowloaded file might not be up-to-date anymore the older the file gets. However, the application usually does more lookups than the online queries permit us to do. We will keep this updated asynchronously. Thanks, andreas -- Andreas Ott andreas(a)naund.org

4 5

Re: ASN database files from LACNIC or AFRINIC?
by Geoff Huston 30 Oct '05

30 Oct '05

nice try, but the data is not entirely consistent :-( Geoff At 02:30 PM 29/10/2005, Rubens Kuhl Jr. wrote: >ftp://ftp.lacnic.net/pub/stats/lacnic/delegated-lacnic-latest has IP >space and ASN allocations. ASN lines look like this: > >lacnic|MX|asn|278|1|19890331|allocated >lacnic|AR|asn|676|1|19900523|allocated >lacnic|BR|asn|1251|1|19910405|allocated >lacnic|MX|asn|1292|1|19910524|allocated > >They mirror similar information from other RIRs: >ftp://ftp.lacnic.net/pub/stats/afrinic/delegated-afrinic-latest >ftp://ftp.lacnic.net/pub/stats/arin/delegated-arin-latest > > >My guess is the other RIRs mirror LACNIC's info as well... and it >would be nice to have an all merged delegated-latest, wouldn't it ? >I'll try to find one, or ask LACNIC folks if they can do one. > > >Rubens > > > > > >On 10/28/05, Andreas Ott <andreas(a)naund.org> wrote: > > > > Hello, > > > > I am currently looking for ASN databases from LACNIC and AFRINIC > > the same way they are provided at > > > > ftp://ftp.arin.net/pub/rr/arin.db > > ftp://ftp.ripe.net/ripe/dbase/ripe.db.gz > > ftp://ftp.apnic.net/apnic/whois-data/APNIC/apnic.RPSL.db.gz > > > > I've traversed their respective ftp.[lacnic|afrinic].net servers > > to no avail. I would appreciate any hints where to download this > > data if it exists. > > > > NB: we do know that looking up from a dowloaded file might > > not be up-to-date anymore the older the file gets. However, the > > application usually does more lookups than the online queries > > permit us to do. We will keep this updated asynchronously. > > > > Thanks, andreas > > -- > > Andreas Ott andreas(a)naund.org > >

1 0

AOL Postmaster contact?
by David Hubbard 29 Oct '05

29 Oct '05

Are there any AOL Postmasters on the list? I'm having an issue that the toll-free regular AOL Postmaster helpdesk telling me will take 3-5 business days to resolve, and it's more urgent then that. Thank you David

2 1