- Test - lists.nanog.org

Fw: Symantec Mail Security detected that you sent a message containing prohibited content (SYM:32487773651441470267)
by P.Schroebel 21 May '04

21 May '04

----- Original Message ----- From: <sysadmin(a)reasoning.com> To: <crossfire(a)smsonline.net> Sent: Thursday, May 20, 2004 8:30 PM Subject: Symantec Mail Security detected that you sent a message containing prohibited content (SYM:32487773651441470267) > Subject of the message: 66.164.232.0/24 HI-JACKED, I need some help > Recipient of the message: "NANOG" <nanog(a)merit.edu> > > > > And what Symantec Mail Security detect? Peter

1 0

Charter: host problem
by Hannigan, Martin 21 May '04

21 May '04

Charter, your abuse and security mailboxes are bouncing as unavailable. Can someone from Charter security or network please respond privately regarding a host issue at your customer TAIS in Asheville, NC? Thanks. -- Martin Hannigan (c) 617-388-2663 VeriSign (w) 703-948-7018 Network Enginer IV Operations & Infrastructure hannigan(a)verisign.com

2 1

List of dynamic IP's
by Bob Martin 20 May '04

20 May '04

Does anyone know of a list of dynamic IP's by ISP? I'm looking for something akin to this list from AOL http://postmaster.info.aol.com/info/servers.html TIA Bob Martin

4 4

Load Balancing Multiple DS3s (outgoing) on a 7500
by Drew Weaver 20 May '04

20 May '04

Does anyone know of an article, or documentation regarding load balancing the traffic on 3 or more FastEthernet interfaces on the outgoing direction? Right now we're running BGP internally, and the routes that are being chosen based upon the final BGP decision step or what I like to call the 'IP address tie breaker' which is not always optimal. We have a cisco 7500 that is connected to 4 other Cisco 7500s which each have 45Mbps ds3s to the Internet, we would like to load balance the outgoing traffic across all 4 of these 7500s, can anyone shine any advice my way? I noticed that there are instructions on Cisco's site regarding doing LB on 12000s. Anyways thanks in advance ;-) -Drew

10 11

Yahoo to MSN problems
by Hank Nussbacher 20 May '04

20 May '04

http://help.yahoo.com/help/us/groups/messages/messages-19.html Attention Hotmail and MSN users Hotmail and MSN mail users are currently experiencing delays of up to 1 day in receiving Groups messages. If delays exceed this, we may begin to not deliver older messages. We are sorry that you are experiencing delay in receiving messages at your hotmail.com or msn.com email address. Yahoo! has contacted MSN and has determined that the source of the problem resides on their end. They are aware of the issue, but do not yet have an estimate of when the problem will be fixed. We thank you for your patience and apologize for any inconvenience this may have caused. ------------------------------------- Anyone know more? -Hank

3 2

Re: ntp config tech note
by Peter Lothberg 20 May '04

20 May '04

> One minor (operational! -- gasp) addition: > > More modern copies of ntpd have a '-g' option that will allow > the clock to jump once at boot time. If you have not told the kernel to refuce to change the time when the system is in multiuser mode for security reasons. -Peter There is an easy workaround, just make sure your local clock in the computer is as close to UTC as you can....

1 0

Cisco's Statement about IPR Claimed in draft-ietf-tcpm-tcpsecure
by David Krause 20 May '04

20 May '04

Looks like Cisco is now trying to patent security.... http://www.ietf.org/ietf/IPR/cisco-ipr-draft-ietf-tcpm-tcpsecure.txt Title: Cisco's Statement about IPR Claimed in draft-ietf-tcpm-tcpsecure Received: April 26, 2004 From: Robert Barr <rbarr(a)cisco.com> Cisco is the owner of one or more pending patent applications relating to the subject matter of "Transmission Control Protocol security considerations" <draft-ietf-tcpm-tcpsecure-00.txt>. If technology in this document is included in a standard adopted by IETF and any claims of any Cisco patents are necessary for practicing the standard, any party will be able to obtain a license from Cisco to use any such patent claims under reasonable, non-discriminatory terms, with reciprocity, to implement and fully comply with the standard. For information contact: Robert Barr Worldwide Patent Counsel Cisco Systems 408-525-9706 rbarr(a)cisco.com

10 12

RE: Barracuda Networks Spam Firewall
by Brian Battle 20 May '04

20 May '04

Eric, > There's one rule that will wipe out ~90% of spam, but nobody seems to have > written it yet. > > if URL IP addr is in China then score=100 > > support for a generic lookup list of cidr blocks would get another 9% I agree that geographically classifying the URL's embedded in the spams would be pretty slick, using the china.blackholes.us and cn-kr.blackholes.us RBLs has been pretty effective at reducing our spamload, as a supplement to the standard lookup services. They do not descriminate between legit mails and spam mails from china. Everything from those IP blocks gets classified as spam. Luckily we don't ever get any client emails from those countries at this point and can use these filters without worrying about false-positives. (I think the doubleclick.blackholes.us is pretty funny too) There are others at: http://www.blackholes.us/ Is anyone else out there using these blackholes? I wonder how often they get updated. Brian Battle Confluence

1 0

FW: RE: List of dynamic IP's
by Nicole 19 May '04

19 May '04

Not Ip's but domain names etc I block. You can perhaps generate some from this? http://www.unixgirl.com/blockeddomains.html Nicole On 19-May-04 the GW commando coersion squad reported Bob Martin said : > > Does anyone know of a list of dynamic IP's by ISP? > I'm looking for something akin to this list from AOL > http://postmaster.info.aol.com/info/servers.html > > TIA > > Bob Martin -- |\ __ /| (`\ | o_o |__ ) ) // \\ - nmh(a)daemontech.com - Powered by FreeBSD - ------------------------------------------------------ "The term "daemons" is a Judeo-Christian pejorative. Such processes will now be known as "spiritual guides" -Politicaly Correct UNIX Page http://www.nonsenseband.com *** Spam Sucks and I get tons of it. So I have some tight spam filters. If any email to me bounces, please use your secret decoder ring and please send to blabgoo at yahoo dot com :)

1 0

Slides for NANOG31 IPsec tutorial
by Duane Wessels 19 May '04

19 May '04

If you plan to attend Sunday's hands-on tutorial for using the IPsec server at NANOG, you may want to have a look at the slides in advance. You can find them at: http://www.packet-pushers.net/NANOG/ipsec/ Unix users, in particular, may need to prepare their systems by building a new kernel and/or installing an IKE daemon. The slides contain URLs for sample configuration files and startup scripts. Those files are also available at the above URL. Duane W.

1 0