- Test - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 12 Dec '03

12 Dec '03

This report has been generated at Fri Dec 12 21:47:24 2003 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 05-12-03 128663 90423 06-12-03 128656 90356 07-12-03 128631 90247 08-12-03 128530 90341 09-12-03 128679 90366 10-12-03 128743 90273 11-12-03 128672 90436 12-12-03 128773 90445 AS Summary 16242 Number of ASes in routing system 6471 Number of ASes announcing only one prefix 1396 Largest number of prefixes announced by an AS AS701 : ALTERNET-AS UUNET Technologies, Inc. 74639616 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 12Dec03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 128972 90500 38472 29.8% All ASes AS6197 800 306 494 61.8% BATI-ATL BellSouth Network Solutions, Inc AS4134 610 121 489 80.2% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 676 207 469 69.4% TW-COMM Time Warner Communications, Inc. AS701 1396 962 434 31.1% ALTERNET-AS UUNET Technologies, Inc. AS7018 1390 962 428 30.8% ATT-INTERNET4 AT&T WorldNet Services AS7843 504 121 383 76.0% ADELPHIA-AS Adelphia Corp. AS6198 561 221 340 60.6% BATI-MIA BellSouth Network Solutions, Inc AS209 857 531 326 38.0% ASN-QWEST Qwest AS22909 321 13 308 96.0% DNEO-OSP1 Comcast Cable Communications, Inc. AS1239 963 673 290 30.1% SPRINTLINK Sprint AS22773 317 32 285 89.9% CCINET-2 Cox Communications Inc. Atlanta AS4355 383 101 282 73.6% ERMS-EARTHLNK EARTHLINK, INC AS27364 354 78 276 78.0% ACS-INTERNET Armstrong Cable Services AS1221 938 669 269 28.7% ASN-TELSTRA Telstra Pty Ltd AS17676 287 42 245 85.4% GIGAINFRA Softbank BB Corp. AS6347 329 85 244 74.2% DIAMOND SAVVIS Communications Corporation AS25844 243 16 227 93.4% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS6140 346 132 214 61.8% IMPSAT-USA ImpSat AS14654 202 2 200 99.0% WAYPORT Wayport AS9583 248 55 193 77.8% SATYAMNET-AS Satyam Infoway Ltd., AS11305 230 37 193 83.9% INTERLAND-NET1 Interland Incorporated AS2386 403 219 184 45.7% INS-AS AT&T Data Communications Services AS4519 194 13 181 93.3% MAAS Maas Communications AS6327 204 28 176 86.3% SHAW Shaw Communications Inc. AS20115 581 413 168 28.9% CHARTER-NET-HKY-NC Charter Communications AS2048 250 84 166 66.4% LANET-1 State of Louisiana AS9929 199 34 165 82.9% CNCNET-CN China Netcom Corp. AS6478 203 39 164 80.8% ATT-INTERNET3 AT&T WorldNet Services AS15270 204 41 163 79.9% AS-PAETEC-NET PaeTec.net -a division of PaeTecCommunications, Inc. AS1761 177 25 152 85.9% TGSCNET General Services Commission Total 14370 6262 8108 56.4% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 ANDARA-HSI Andara High Speed Internet c/o Halifax Cable Ltd. 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 64.62.64.0/24 AS3549 GBLX Global Crossing 64.62.126.0/23 AS25700 SWIFTDESK SWIFTDESK VENTURE 66.41.192.0/18 AS13367 CCCH-AS3 Comcast Cable Communications Holdings, Inc 69.8.128.0/17 AS7260 NORLIGHT Norlight Telecommunications 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.143.2.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.64.84.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.71.0/24 AS719 AS719 LANLINK autonomous system 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.136.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.152.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.154.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.114.156.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.160.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.0.180.0/24 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.4.252.0/22 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.72.112.0/22 AS22351 INTELSAT-1 INTELSAT 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.179.64.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.65.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.66.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.67.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.68.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 203.29.222.0/24 AS22934 EBROADBANDNOW E Broadband Now Inc. 203.32.4.0/23 AS7617 APNIC-AS-2-BLOCK Asia Pacific Network Information Centre 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.86.2.0/23 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 203.132.95.0/24 AS9787 CONCEPT-AU-AP Concept Networks 203.132.97.0/24 AS7652 VIANET-AS-AP Vianet Communications Pty Ltd 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.111.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.112.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.118.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 203.132.123.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.124.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.125.0/24 AS4817 TECHEX1-AS-AP Techex Primary Netblock 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.125.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBIT 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.213.0.0/19 AS6453 TELEGLOBE-AS Teleglobe Inc 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.36.46.0/24 AS7176 GENUITY-AS7176 Genuity 216.36.47.0/24 AS7176 GENUITY-AS7176 Genuity 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 218.211.0.0/16 AS4788 TMNET-AS-AP TMnet, Telekom Malaysia Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Former WorldCom C.E.O. John Sidgmore Dies at 52
by joe mcguckin 12 Dec '03

12 Dec '03

(From the New York Times) WASHINGTON (AP) -- John Sidgmore, the WorldComexecutive who helped reveal the accounting troubles that led to the biggest bankruptcy filing in U.S. history, died Thursday at 52. He died of complications associated with acute pancreatitis, said B. Jay Cooper, a family spokesman. http://www.nytimes.com/aponline/business/AP-Obit-Sidgmore.html

1 0

Microsoft Probes Flaw That Could Help Fraudsters Create Fake Web Sites
by Mike Tomasura 11 Dec '03

11 Dec '03

Did anyone else see this? http://www.secunia.com/internet_explorer_address_bar_spoofing_test http://news.google.com/url?ntc=0M4C0&q=http://www.informationweek.com/story/ showArticle.jhtml%3FarticleID%3D16700218

4 3

Re: Anyone from NeuLeve.bizl listening?
by Joe St Sauver 11 Dec '03

11 Dec '03

#Drew Linsalata writes on 12/11/2003 10:03 AM: # #If anyone has real contact info for these folks, or anyone from NeuLevel #is listening, please drop me a note off-list. A cracker/spammer has #decided to list one of our customer servers as a secondary nameserver #for a bunch of spam domains and we're getting hammered with spam #complaints that really have nothing to with us. Speaking of NeuLevel, I believe the problems with .biz domains and incorrect registration data are more general in nature than just this one example, a point I attempt to make in an invited guest commentary for Syllabus.com: "The Curious Correlation Between .biz Domains, Bad Whois Data, and Spam" http://www.syllabus.com/news_article.asp?id=9618&typeid=153 And as noted in the NeuLevel quote in that article, if you've got a problem with a particular .biz domain registration, you really need to get that problem fixed by the particular .biz registrar who did that domain's registration. Regards, Joe

3 2

RE: DS3 questions.
by Temkin, David 11 Dec '03

11 Dec '03

With a box like the Adtran Atlas you'd be able to give them the PRI's and hand the rest off as a DS-3 or HSSI. -Dave -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Drew Weaver Sent: Thursday, December 11, 2003 11:59 AM To: 'nanog(a)merit.edu' Subject: DS3 questions. We have a scenario where we have a DS3 at a Customer location that they want to use for both Data/PRI(voice) They need 8 Voice PRIs and they want to use the remainder of the DS3 for data. If we channelize this DS3, my question is, is it possible to use the unused portion of the DS3 as a fractional DS3, or would we have to terminate the rest as single T1s? Thanks, -Drew IMPORTANT: The information contained in this email and/or its attachments is confidential. If you are not the intended recipient, please notify the sender immediately by reply and immediately delete this message and all its attachments. Any review, use, reproduction, disclosure or dissemination of this message or any attachment by an unintended recipient is strictly prohibited. Neither this message nor any attachment is intended as or should be construed as an offer, solicitation or recommendation to buy or sell any security or other financial instrument. Neither the sender, his or her employer nor any of their respective affiliates makes any warranties as to the completeness or accuracy of any of the information contained herein or that this message or any of its attachments is free of viruses.

2 1

DS3 questions.
by Drew Weaver 11 Dec '03

11 Dec '03

We have a scenario where we have a DS3 at a Customer location that they want to use for both Data/PRI(voice) They need 8 Voice PRIs and they want to use the remainder of the DS3 for data. If we channelize this DS3, my question is, is it possible to use the unused portion of the DS3 as a fractional DS3, or would we have to terminate the rest as single T1s? Thanks, -Drew

3 2

Anyone from NeuLeve.bizl listening?
by Drew Linsalata 11 Dec '03

11 Dec '03

Given that there are no phone numbers anywhere on the NeuLevel (.biz registrar) site and email to support(a)neulevel.biz is going unanswered, I'll ask here. If anyone has real contact info for these folks, or anyone from NeuLevel is listening, please drop me a note off-list. A cracker/spammer has decided to list one of our customer servers as a secondary nameserver for a bunch of spam domains and we're getting hammered with spam complaints that really have nothing to with us. Thanks! -- Drew Linsalata The Gotham Bus Company, Inc. Colocation and Dedicated Access Solutions http://www.gothambus.com

3 2

Re: Anyone from NeuLeve.bizl listening?
by Joe St Sauver 11 Dec '03

11 Dec '03

As a number of folks have mentioned, there was a typo in the URL I just provided; the corrected URL is: http://www.syllabus.com/news_article.asp?id=8618&typeid=153 Sorry about that, Joe

1 0

Whitelisting mechanism in SORBS.
by Matthew Sullivan 11 Dec '03

11 Dec '03

Hi All, My appologies for the public post, I'd have rather replied to the individuals who mailed me in response of a previous post, however time has passed and I have a huge inbox, and of course I would like to solicit more entries from those interested and just waiting to see what it is. The whitelisting system previously discussed is now nearly complete..... The database and administration interface are indeed complete. I am therefore inviting those who wanted to whitelist to submit the following information to me off list: - ISP Name. - Email address of primary ISP/company contact incase of issues (bounced alerts for your company will go here along with any communication from SORBS). - Out facing IP addresses of your outgoing mailservers (last hop in the headers). - Netblocks you wish to receive reports/alerts for. (Plain text CIDR format list Minimum /32 maximum /8) - A list of email addresses where you wish the alerts to go to. The system works as follows: For the mailservers: When spam is received at a spamtrap (automated and/or manual) you will have your server listed with a 1 hour TTL, you will be sent a coded URL to the nominated alert email addresses. Using that coded URL you can delist your server immediately from the SORBS spam DB (no fine etc). The coded URL will timeout after 48 hours, if you have not used the URL by this time you will not be able to automatically remove yourself and the listing TTL will revert to the default (6 hours for an automated listings and 48 hours for a manual listings). You will receive no more than 1 URL per hour per IP address. The full headers (minus desitination email addresses of all spams received relating to a particular URL) will be available using the coded URL. Using the URLs to view the headers will not acknowledge the termination of the spammer - there is an extra step similar to that in spamcop. Each whitehat entry has a 'whiteness' value - each expired URL will make your whiteness decrease by 1, each time you use a valid URL it will go up 1. If further spam is received from an address to an automated spamtrap within 1 hour *after* you have used the URL, and acknowledged termination, for that IP your whiteness will decrease by 5. Using the URL and acknowledgement indicates you have identified and stopped the flow of spam, if you choose to delist yourself before you stop the flow that is considered not whitehat - hence the peanlty when you get caught (mail queuing in our system has been thought of and taken care of). You can get a maximum whiteness of 9 and a minimum of -9, for anything below 1 (ie -8 through 0 inclusive) you will be treated as not whitehat and will still get keys and be subject to normal TTLs (6 & 48). If you get to -9 you will be considered blackhat and removed from the system. For the network lists: Same principles as the mailserver IP however URLs will expire after 7 days, and TTLs are 6 hours by default. Anyone caught listwashing will be removed. Minimum entry is owning your own /24 (as found in public whois ;-)) Initial 'whiteness' will be 3. Note: The whitelist/whitehat system is completely independant of the ISP reporting system which will provide weekly reports to ISPs/companies requesting them. Yours Matthew

1 0

RoadRunner contact
by Brian Bruns 11 Dec '03

11 Dec '03

Hello all, I dont suppose anyone here might have a direct contact for the people at Road Runner in regards to DNS management and/or their abuse desk? Contact me off-list please. Thanks. -- Brian Bruns The Summit Open Source Development Group Open Solutions For A Closed World / Anti-Spam Resources http://www.sosdg.org The AHBL - http://www.ahbl.org

1 0