- Test - lists.nanog.org

NANOG 32 PGP key signing (fwd)
by Susan Harris 05 Oct '04

05 Oct '04

Thanks John! One slight modification - we'll be meeting in Fairfax B rather than in the ballroom. ---------- Forwarded message ---------- Date: Mon, 4 Oct 2004 19:42:49 -0500 From: John Kristoff <jtk(a)northwestern.edu> To: nanog(a)merit.edu Subject: NANOG 32 PGP key signing Those of you attending NANOG 32 are encouraged to submit your public PGP key to take part in the regular key signing event. Even if you may not be able to attend the group PGP key signing event, but will be at NANOG 32, you are encouraged to submit your key anyway. You can always meet up with other PGP key users and sign keys on your own time. Adding your public key to NANOG 32's key ring is easy. Just upload your public key here: <https://www.biglumber.com/x/web?keyring=7840> or send me an email with your PGP public key inline with the subject 'NANOG PGP key' if you'd rather and I'll do it for you. As usual, the group PGP signing event will occur following the nsp-sec BoF on Monday night. Full details for the NANOG 32 PGP signing event can be found here: <http://www.nanog.org/pgp.html> Feel free to drop me an email offlist if you need any assistance, particularly if you are setting up PGP for the first time. John

1 0

Blackhole Routes
by Abhishek Verma 05 Oct '04

05 Oct '04

Hi, There are ways to add static routes that can be blackholed. I can understand the utility of such routes if those are installed in my forwarding table. What bewilders me is why would anyone want to advertise "blackhole" routes using say, BGP? Is it only to prevent some sort of DoS attacks or are there other uses also of advertising black hole routes? Thanks, Abhishek -- Class of 2004 Institute of Technology, BHU Varanasi, India

22 36

China Telecom Contact
by Josh Fleishman 05 Oct '04

05 Oct '04

I'm looking for an Engineering contact at China Telecom. An English speaker is preferred. Thanks and sorry about the spam, however this is urgent. Josh _____________________________ Josh Fleishman Staff Network Engineer, CCNP Earthlink, Inc

1 0

NANOG 32 PGP key signing
by John Kristoff 05 Oct '04

05 Oct '04

Those of you attending NANOG 32 are encouraged to submit your public PGP key to take part in the regular key signing event. Even if you may not be able to attend the group PGP key signing event, but will be at NANOG 32, you are encouraged to submit your key anyway. You can always meet up with other PGP key users and sign keys on your own time. Adding your public key to NANOG 32's key ring is easy. Just upload your public key here: <https://www.biglumber.com/x/web?keyring=7840> or send me an email with your PGP public key inline with the subject 'NANOG PGP key' if you'd rather and I'll do it for you. As usual, the group PGP signing event will occur following the nsp-sec BoF on Monday night. Full details for the NANOG 32 PGP signing event can be found here: <http://www.nanog.org/pgp.html> Feel free to drop me an email offlist if you need any assistance, particularly if you are setting up PGP for the first time. John

1 0

Draft NANOG Agenda
by Susan Harris 04 Oct '04

04 Oct '04

NANOG32 DRAFT Agenda October 17-19, 2004 Reston, Virginia Sunday Tutorials/Reception -------------------------- 1:30 - 3:00 p.m. BGP Multihoming Techniques Level: Introductory Philip Smith, Cisco 1:30 - 3:00 p.m. Options for Blackhole and Discard Routing Level: Introductory/Intermediate Joe Soricelli, Juniper Wayne Gustavus, Verizon 3:00 - 3:30 p.m. BREAK 3:30 - 5:00 p.m. BGP Multihoming Techniques (cont'd.) 3:30 - 5:00 p.m. Internet Number Resource Management and Administration Level: Introductory Ray Plzak/Richard Jimmerson, ARIN 5:00 - 7:00 p.m. AOL WELCOME RECEPTION 7:30 - 8:15 p.m. ISP Security Toolkits Level: Introductory/Intermediate Tim Battles, AT&T 7:30 - 9:00 p.m. IPv6 Deployment and Case Studies Level: Introductory/Intermediate Salman Asadullah and Ciprian Popoviciu, Cisco Monday, October 18 ------------------ 9:00 a.m. Welcome, Introductions Ray Plzak, ARIN Rich Collela, AOL Ron da Silva, Time Warner Cable Susan Harris, Merit 9:20 a.m. Good Engineering Practice as it Applies to Unlicensed Wireless Networks Tim Pozar, Late Night Software 10:05 a.m. 802.1X: Deployment Experiences and Obstacles to Widespread Adoption Terry Simons, University of Utah; open1x.org Jon Snyder, Portland State University 10:35 a.m. BREAK 11:05 a.m. Extension of Multi-Service Networks Dave Siegel, Global Crossing 11:35 a.m. Network Design to Support Very High-Capacity Streaming and Caching Infrastructures Vijay Gill, AOL Time Warner 12:00 p.m. LUNCH (on your own) 1:30 p.m. Impressions: An Overview of the Global IPv6 Routing Table Gert Doering, SpaceNet AG, author Cathy Wittbrodt, presenter 2:00 p.m. Botnets John Kristoff, Northwestern University 2:45 p.m. What Will Stop Spam? Charles Stiles, AOL 3:05 p.m. Optical Switching, a Great Tool In Platform Migration at AMS-IX Romeo Zwart, Amsterdam Internet Exchange 3:35 p.m. BREAK 4:05 p.m. RESEARCH FORUM -------------- Sizing Router Buffers Guido Appenzeller, Stanford University Performing BGP Experiments on Semi-Realistic Internet Environment Ke Zhang, Soon-Tee Teoh, Shih-Ming Tseng, Chen-Nee Chuah, Kwan-Liu Ma, and Felix Wu, University of California, Davis Monday Evening BOFs & Key Signing --------------------------------- 7:30 - 9:00 p.m. ISP Security and NSP-SEC BOF VII Danny McPherson, Arbor, and Merike Kaeo, Double Shot Security, moderators 9:00 - 9:30 p.m. PGP Key Signing John Kristoff, Northwestern University, host 9:00 - 10:30 p.m. Optimizing Operational Input to ARIN: What Is Needed and How Do We Get It? ARIN Staff, moderators Tuesday, Oct. 19 ---------------- 9:00 a.m. Evolving the Core: Deployment Challenges and the Internet Scott Marcus, FCC 9:30 a.m. A History of IPv4 and ASN Allocations Geoff Huston and George Michaelson, APNIC, authors Philip Smith, Cisco, presenter 9:45 a.m. DNS Anomalies and Their Impact on DNS Cache Servers Katsuyasu Toyama, Keisuke Ishibashi, Tsuyoshi Toyono, Katsuyasu Toyama, NTT Labs; Masahiro Ishino, Chika Yoshimura, NTT Communications; Kazunori Fujiwara, JPRS 10:15 a.m. BREAK 10:45 a.m. DNSSEC Deployment: Big Steps Forward; Several Steps to Go Steve Crocker, Shinkuro 11:15 a.m. Tracking Global Threats with the Internet Motion Sensor Michael Bailey, Evan Cooke, University of Michigan Danny McPherson, Arbor Networks, Tim Battles, AT&T 11:45 a.m. RPSLng Status Update Larry Blunk, Merit 12:00 p.m. LUNCH (on your own) 1:30 p.m. Detecting Inconsistent Advertisements from Neighboring ASes Nick Feamster, MIT, Z. Morley Mao, Univ. of Michigan Jennifer Rexford, AT&T Research 2:00 p.m. aflow - a Network Analysis Tool Dan Ardelean, ARIN/Purdue University 2:30 p.m. LinkRank: A Tool for Diagnosis of BGP Routing Dynamics Mohit Lad, UCLA; Dan Massey, Colorado State University; Lixia Zhang, UCLA 3:00 p.m. Life and Times of J-Root Piet Barber, Matt Larson, Mark Kosters, and Pete Toscano, Verisign 3:30 p.m. Adjourn

1 0

Pasporte in UK?
by Stefan Baltus 04 Oct '04

04 Oct '04

Dear collegues, Anybody on-line from Pasporte UK? (www.pasporte.co.uk) We seem to be having connectivity issues between our networks. Please contact me off-list. Stefan -- Stefan Baltus <stefan.baltus(a)xbn.nl> XB Networks B.V. Manager Engineering Televisieweg 2 telefoon: +31 36 5462400 1322 AC Almere fax: +31 36 5462424 The Netherlands

1 0

Re: Blackhole Routes
by guy 04 Oct '04

04 Oct '04

I know that my current employer is setup to reject /32s from peers as well as not to send them to peers. (Customers too for that matter save for the ones that have a bgp session to our null router). Having one's upstream propagate out /32s that they want null routed because of an attack probably won't scale past the original upstream. I guess all the tier1s could setup a whole network of special bgp sessions to each other's blackhole routers (those that implement this method) set up to implicitly trust each other's announcements, which in turn means that said network would need to implicitly trust all their peers' downstreams. Call me a realist, but I just don't see that happening anytime soon. Guy Tal On Thu, 30 Sep 2004, Richard A Steenbergen wrote: You can't authentication a prefix coming in from a peer that says to route a /24 to them any better or any worse. What difference does it make if you route the traffic to them and they blackhole it, or if you blackhole it locally based on their routing information? If it is a leak or a malicious route, you track it down and plug it the same way you do with an existing route that doesn't have the blackhole community set. I'm not saying that those methods are perfect by any means, but adding a global blackhole community at least changes nothing from the status quo.

1 0

Looking for cogent tech
by Jonas Frey 03 Oct '04

03 Oct '04

Hi, could a cogent routing-tech please contact me off-list? Havent gotten an answer from noc@ for 3+ hours. Thanks. Regards, Jonas Frey Probe Networks

1 0

Not just Cisco is moving to China
by Hank Nussbacher 02 Oct '04

02 Oct '04

http://www.commsdesign.com/news/market_news/showArticle.jhtml?articleID=479… -Hank

1 0

FYI: RFC 3882 on Configuring BGP to Block Denial-of-Service Attacks
by Fergie (Paul Ferguson) 02 Oct '04

02 Oct '04

Given recent discussions on blackholing traffic, this may be of interest. - ferg [snip] A new Request for Comments is now available in online RFC libraries. RFC 3882 Title: Configuring BGP to Block Denial-of-Service Attacks Author(s): D. Turk Status: Informational Date: September 2004 Mailbox: doughan.turk(a)bell.ca Pages: 8 Characters: 19637 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-turk-bgp-dos-07.txt URL: ftp://ftp.rfc-editor.org/in-notes/rfc3882.txt This document describes an operational technique that uses BGP communities to remotely trigger black-holing of a particular destination network to block denial-of-service attacks. Black-holing can be applied on a selection of routers rather than all BGP-speaking routers in the network. The document also describes a sinkhole tunnel technique using BGP communities and tunnels to pull traffic into a sinkhole router for analysis. [snip] -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

2 2