- Test - lists.nanog.org

Micorsoft's Sender ID Authentication......?
by Fergie (Paul Ferguson) 13 Jun '05

13 Jun '05

Wasn't there a lot of turmoil within the IETF last year on sender authentication because Microsoft was trying to push it's own sender ID authetication mechasnisms as a draft standard? Or maybe I'm confused... Microsoft Adds Sender ID Anti-Spoofing Protocol To Exchange 2003 SP2 http://www.techweb.com/wire/security/164301084 - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

20 35

RE: ISP's Contact List
by Hank Nussbacher 13 Jun '05

13 Jun '05

At 10:18 AM 13-06-05 -0400, Sanfilippo, Ted wrote: >Suresh, Broken. My IP, which has been allocated to Israel for about 15 years shows up as in China and no whois site is *that* broken. -Hank > Sorry I meant GEOBYTES --- http://www.geobytes.com/IpLocator.htm > When I enter my new /16 at this site it translates to Canada and > it shouldn't. ARIN reports the address properly on the ARIN lookup. I > have sent emails to the Geobytes website two weeks ago, they confirmed to > me they have the email, but have done nothing to date to fix the problem. > So my customers are getting a little upset because when they go to a > website they are directed to the .ca portion. > >Ted > >-----Original Message----- >From: Suresh Ramasubramanian [mailto:ops.lists@gmail.com] >Sent: Monday, June 13, 2005 9:04 AM >To: Sanfilippo, Ted >Cc: nanog(a)merit.edu >Subject: Re: ISP's Contact List > > >On 13/06/05, Sanfilippo, Ted <Ted.Sanfilippo(a)paetec.com> wrote: > > > > Also, I ran into a problem with a new /16 block we received from ARIN. > > The IP-Country info points to Canada which is not accurate. We are a US > > based company. I had placed a request into Geobyte to make the change > to US, > > I am still waiting. Does anyone know if there is a central database that > > these companies pull from to gather country info? If its ARIN, it should > > have been corrected. > > > >Sorry if I seem dense but how or where does geobyte come into the >picture at all when you receive an IP block from ARIN. If the contact >information for that /16 has an error in it, then ARIN has a fairly >well documented procedure to change contact information for a netblock >and you can follow it. > >Geobytes seems to use ARIN data along with what is basically wild >guessing to find where an IP is located. If they make a wrong guess - >its an issue thats localized to them. > >-- >Suresh Ramasubramanian (ops.lists(a)gmail.com) > > > +++++++++++++++++++++++++++++++++++++++++++ > This Mail Was Scanned By Mail-seCure System > at the Tel-Aviv University CC.

1 0

Best practice ACLs for a internet facing border router?
by Drew Weaver 13 Jun '05

13 Jun '05

I'm just curious if anyone has ever published a list of what is an agreed upon best practice list of ACLs for an internet facing border router. I'm talking about things like bogons, private Ip addresses, et cetera. If anyone is aware of anything like this I'd like to see it. Thanks, -Drew

4 3

2u colo @ 1 Wilshire
by matthew zeier 13 Jun '05

13 Jun '05

I need to collocate a 2u 3750 at 1 Wilshire - if you have resources, please contact me offline. -- matthew zeier - "Curiosity is a willing, a proud, an eager confession of ignorance." - Leonard Rubenstein

1 0

ISP's Contact List
by Sanfilippo, Ted 13 Jun '05

13 Jun '05

Does anyone know if their is a comprised list of ISP contacts available anywhere ( other then through ARIN/RIPE and iNOC phone) Also, I ran into a problem with a new /16 block we received from ARIN. The IP-Country info points to Canada which is not accurate. We are a US based company. I had placed a request into Geobyte to make the change to US, I am still waiting. Does anyone know if there is a central database that these companies pull from to gather country info? If its ARIN, it should have been corrected. Thanks Ted

4 3

RE: Best practice ACLs for a internet facing border router?
by Daniel Senie 13 Jun '05

13 Jun '05

At 10:16 AM 6/13/2005, Frotzler, Florian wrote: >ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Template >s/ > >Florian The original question didn't specify whether the interest was prefixes or packet filters. For packet filtering, the above URL is not going to help, but a read of BCP38 would be in order. Edge sites with no downstreams can very easily filter the source addresses leaving their network and ensure no bogus-sourced packets leave, be they RFC1918, or spoofs. > > -----Original Message----- > > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > > Behalf Of Drew Weaver > > Sent: Montag, 13. Juni 2005 16:28 > > To: nanog(a)merit.edu > > Subject: Best practice ACLs for a internet facing border router? > > > > > > I'm just curious if anyone has ever published a list of > > what is an agreed upon best practice list of ACLs for an > > internet facing border router. I'm talking about things like > > bogons, private Ip addresses, et cetera. If anyone is aware > > of anything like this I'd like to see it. > > > > Thanks, > > -Drew > > > >

1 0

Re: Outage queries and notices (was Re: GBLX congestion in Dallas area )
by Fergie (Paul Ferguson) 13 Jun '05

13 Jun '05

What's the matter with simply using the mailing list? Don't reinvent the wheel. - ferg -- "Jay R. Ashworth" <jra(a)baylink.com> wrote: > >The Internet needs a PA system. > > There is this sparsely deployed technology called multicast which would > work for this application. Well, that's fine, at the transport layer, but I think more an application layer solution is called for. Something akin to news.announce.important on Usenet? -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

4 3

RE: ISP's Contact List
by Hannigan, Martin 13 Jun '05

13 Jun '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Sanfilippo, Ted > Sent: Monday, June 13, 2005 10:19 AM > To: Suresh Ramasubramanian > Cc: nanog(a)merit.edu > Subject: RE: ISP's Contact List > > > > Suresh, > > Sorry I meant GEOBYTES --- http://www.geobytes.com/IpLocator.htm > When I enter my new /16 at this site it translates to > Canada and it shouldn't. ARIN reports the address properly on > the ARIN lookup. I have sent emails to the Geobytes website > two weeks ago, they confirmed to me they have the email, but > have done nothing to date to fix the problem. So my customers > are getting a little upset because when they go to a website > they are directed to the .ca portion. > > Ted So tell them to ignore it. It may not be using ARIN data for the locator. It thinks I'm in [mumble] and my ARIN data says I'm nowhere near [mumble].

1 0

RE: Best practice ACLs for a internet facing border router?
by Frotzler, Florian 13 Jun '05

13 Jun '05

ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Template s/ Florian > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Drew Weaver > Sent: Montag, 13. Juni 2005 16:28 > To: nanog(a)merit.edu > Subject: Best practice ACLs for a internet facing border router? > > > I'm just curious if anyone has ever published a list of > what is an agreed upon best practice list of ACLs for an > internet facing border router. I'm talking about things like > bogons, private Ip addresses, et cetera. If anyone is aware > of anything like this I'd like to see it. > > Thanks, > -Drew > >

1 0

Program Committee nominees
by Steve Feldman 12 Jun '05

12 Jun '05

The open nomination period for candidates to fill the three open NANOG Program Committee postions has ended. I am pleased to announce that we have eleven people who have accepted nominations: They are (in random order): Richard Steenbergen Joe Abley John Murphy Todd Underwood Christopher Morrow Christopher Quesada Pete Kruckenberg Jay Adelson Patrick Gilmore Henry (Hank) Kilmer Aaron Hughes As required by the draft NANOG charter[1], the current Program Committee members[2] will now begin the difficult task of choosing from among these fine candidates. The charter does not specify a procedure, so after some discussion we have decided to do this: Now through Wednesday, June 15: - Accept comments from the public on the nominees Wednesday, June 15: - Hold a conference call to discuss the nominees and review the voting process Thursday, June 16: - Each current PC member will vote for three of the candidates Friday, June 17: - Tabulate the votes, the top three are selected - Notify the candidates of the results - Announce the results to the mailing list We encourage you to submit any comments on these nominees that you would like us to consider while making our decisions. Please send your comments to "nanogpc(a)nanog.org" by Wednesday. As always, questions or comments on this process or any Program Committee activities are welcomed; feel free to send them either to me or the PC as a whole. Steve Feldman PC Chair [1] NANOG draft charter: http://www.nanog.org/charter05.html [2] Program Committee members: http://www.nanog.org/pc.html

1 0