- Test - lists.nanog.org

Williams Telecom
by Wesley Vaux 10 Feb '04

10 Feb '04

If there is someone on the list from Williams Telecom please contact me. Thanks, Wes Vaux, CCNA, CCDA Network Security Engineer, 9000 Regency Pkwy Ste 500 Cary, NC 27511 t 919.463.6782 f 919.463.1290 Global Knowledge Experts Teaching Experts http://www.globalknowledge.com <blocked::http://www.globalknowledge.com/>

1 0

Re: question on ptr rr
by Michael.Dillon＠radianz.com 10 Feb '04

10 Feb '04

>> We need to start with an Email Service Consortium with a code of email >> server practices in which the larger ISPs agree to stop accepting SMTP >> connections from anyone who is not in the consortium or a customer. This >> will get everyone implementing a set of well-known and consistent controls. >...is not practical. Remember the true street-level definition of spam: >"spam is e-mail you didn't want that wasn't sent by me or my customers." >Trying to form an E-S-C under those conditions is unthinkable or useless. That's why I maintain that we should not be trying to solve the man-in-the-street's SPAM problem. ISPs can't do that. But ISP's could join together into a consortium to solve the serious weaknesses in the overall Internet email service architecture that allow SPAM to thrive. Once the architecture has been fixed, spammers will find it hard to do joe-jobs or to send spam anonymously. When it is easier to identify the actual sender of a spam message, then ISPs will find it much easier to enforce their AUPs on abuse. --Michael Dillon

1 0

Re: Dumb users spread viruses
by Michael.Dillon＠radianz.com 10 Feb '04

10 Feb '04

>So I guess my point is that after years of >resistance to Outlook, even I am reconsidering due to high user demand and >a void in the market for a robust group calendaring and task management >application. Does anyone have any pointers for me. Something that fills the >organizations needs and that will work with Eudora? Hmmm... If you go to http://www.eudora.com/techsupport/tutorials/esp/ it says this: Create an ESP Group and subscribe your work email address and your home email address. Make a change to your calendar at home - and the changes will be synchronized with your calendar at work! Presumably this means that it will synchronize the standard iCal files used by products like Mozilla Calendar and Apple's OS X iCalendar. A quick bit of googling shows several universities are using Eudora in conjunction with a calendaring program called Meeting Maker. --Michael Dillon

1 0

Need some info on network management
by Savitha Kumar 10 Feb '04

10 Feb '04

Hi, I am a Post Graduate student from India and network management is my area of interest. I have been browsing through the net on different network management tools available in the market. In all of them, accounting management which is one of the FCAPS functionality is not supported on any of the NMS's. So I thought it would make sense if I contact a network operations group regarding this. Can you please throw some light on the following - 1. Why is "accounting" not part of most of the NMS's? 2. What do service providers use for billing their customers? It would be great if you could help me on this. Thanks a lot for your valuable time! Regards, Savitha ________________________________________________________________________ Yahoo! India Education Special: Study in the UK now. Go to http://in.specials.yahoo.com/index1.html

2 2

Monumentous task of making a list of all DDoS Zombies.
by Drew Weaver 10 Feb '04

10 Feb '04

Is there a list maintained anywhere of all hosts that have been identified as a DDoS zombie? Or attack box? We got hit with an attack from more than 60 IPs last night and I'd like to add them to any list that anyone has started. Thanks, -Drew

14 25

Microsoft Messenger sign-on issues
by Sean Donelan 10 Feb '04

10 Feb '04

I do not know why Messenger is having difficulties. But if you are looking for status updates to feed your front desk folks, the MSN network status web page for Messenger is http://support.msn.com/networkstatusresults.aspx?ProductNum=100&ProductName… Messenger Feature: Sign In The .NET Messenger Service is temporarily experiencing difficulty. You may be unable to sign in. Please try again later. Location: N/A Last Update: Monday, 09 February 2004 21:15:00 GMT Next Update: Monday, 09 February 2004 23:15:00 GMT

1 0

WG Last Call: draft-ietf-v6ops-isp-scenarios-analysis-01.txt (fwd)
by Pekka Savola 10 Feb '04

10 Feb '04

FYI, Feedback is welcome, either to the list (v6ops(a)ops.ietf.org) or to me and the document editor (in Cc:) directly. ---------- Forwarded message ---------- Date: Fri, 6 Feb 2004 07:58:44 +0200 (EET) From: Pekka Savola <pekkas(a)netcore.fi> To: v6ops(a)ops.ietf.org Cc: jonne.soininen(a)nokia.com, mikael.lind(a)teliasonera.com Subject: WG Last Call: draft-ietf-v6ops-isp-scenarios-analysis-01.txt Hi all, This is a WG Last Call for comments on sending draft-ietf-v6ops-isp-scenarios-analysis-01.txt, " Scenarios and Analysis for Introducing IPv6 into ISP Networks" to the IESG for consideration as BCP: http://www.ietf.org/internet-drafts/draft-ietf-v6ops-isp-scenarios-analysis… Please review these documents carefully, and send your feedback to the list. Please also indicate whether or not you believe that this document is ready to go to the IESG. There has been a lack of extensive reviews from the start, so reviewing this document would be especially welcome. The last call will end in about 2.5 weeks, on 24th February. Pekka & Jonne

1 0

Re: Where can I find a list of IPs and their regions.
by sgorman1＠gmu.edu 10 Feb '04

10 Feb '04

Best bet is probably to use CAIDA's Netgeo: http://www.caida.org/tools/utilities/netgeo/ It can give some squirely answers, and is not actively maintained, but good stuff for being free ----- Original Message ----- From: Arnold Nipper <arnold(a)nipper.de> Date: Monday, February 9, 2004 7:53 pm Subject: Re: Where can I find a list of IPs and their regions. > > On 10.02.2004 01:43 Matthew Crocker wrote: > > > > I've look at IANA but it doesn't give enough detailed > information. I > > would like to find a list of /8 or /16s and what geographic > region the > > exist in. I know it isn't an exact science but something close > would be > > nice. I know 210/8 & 211/8 are APNIC, I likes to know stuff > like > > 210.100/16 is Korea and 210.120/16 is China, etc. Does anyone > have a > > list I can pull from? > > Have a look at http://www.aso.icann.org/stats/index.html and > retrieve > up-to-date files from APNIC, ARIN, LACNIC and RIPE. > > > > -- Arnold > > >

1 0

Re: Network and security experts (was Re: Dumb users spread viruses)
by Kevin Oberman 10 Feb '04

10 Feb '04

> Date: Mon, 9 Feb 2004 12:41:26 -0500 (EST) > From: Sean Donelan <sean(a)donelan.com> > Sender: owner-nanog(a)merit.edu > > > On Mon, 9 Feb 2004, John Payne wrote: > > --On Sunday, February 8, 2004 10:46 PM +0000 Paul Vixie <vixie(a)vix.com> > > wrote: > > > There is nothing wrong with a user who thinks they should not have to know > > > how to protect their computer from virus infections. > > However, someone attending NANOG should at least have cleaned up slammer > > before connecting to the wireless... > > I have never seen any evidence that security experts or network operators > are any better at practicing security than any other user group. In every > forum I've been at, the infection rates have been similar regardless of > the attendees security experience. > > Sometimes the attendees know about the issue, but do not have the power > to fix it, e.g. corporate IT deparment controls the laptop they are > required to use. Other times, they are oblivious to the equipment being > infected. > > I wouldn't be surprised if I went to a meeting at the Department of > Homeland Security or NSA, their infection rates are similar. At a recent large (last 6 months) trade show, the show network saw a bunch infected systems pop up at once. The problem was tracked (fairly quickly) to machines brought up by a vendor in their booth that lacked a number of recent Microsoft Windows Critical Updates. I can't say who the vendor was, but they REALLY should have been the FIRST to install any patches. If this happens, what hope do we have for "normal" users. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: oberman(a)es.net Phone: +1 510 486-8634

2 1

Re: question on ptr rr
by Michael.Dillon＠radianz.com 10 Feb '04

10 Feb '04

>buy a 1U, put it in a colo center (should cost you about $50/month) and >proxy all your outbound mail from there. stop thinking of broadband as >anything other than a lastmile protocol between your house and your own >piece of the internet core. This is darn good advice. And to expand on it further, it is time to stop thinking of Simple Mail Transport Protocol (SMTP) as the way for everybody to send email. For some strange reason we have managed to develop two protocols for end users to use in talking to their mail service provider (POP and IMAP) but neither of them allow the end user to send email. One would think that an authenticated session with an email service provider would be the natural protocol to use for injecting end user email into the system. Imagine a world in which only ISPs run SMTP servers which only talk directly to other servers with which they have an offline relationship. A world in which everybody hands over their email to an ISP for onward delivery in order to get it into the system. A world in which it is virtually impossible to send anonymous or forged email without the cooperation of an ISP. To get to this world we have to stop trying to fix the SPAM problem. Instead, we have to fix the email architecture problems which have created the environment in which SPAM can thrive. A new architecture might not prevent SPAM but if it makes spamming hard to do and has rate limits that make it very hard to do high volumes of unauthorized email then most people will not care about the small volume of SPAM. We need to start with an Email Service Consortium with a code of email server practices in which the larger ISPs agree to stop accepting SMTP connections from anyone who is not in the consortium or a customer. This will get everyone implementing a set of well-known and consistent controls. We need to add email sending capability to both POP and IMAP so that eventually we can all block port 25 entirely from broadband/dialup edges. And we need to reinstate the use of SMTP relays in order for smaller ISPs to have access to the core of the email system. --Michael Dillon

8 8