- Test - lists.nanog.org

i'd like to know your opinions on the com/net wildcard issue
by Paul Vixie 24 Oct '03

24 Oct '03

see http://sa.vix.com/~vixie/comnetsurv/ this is not an icann thing btw, it's just me.

10 9

Contact for AS237 (You know... MERIT :)
by Jeroen Massar 24 Oct '03

24 Oct '03

-----BEGIN PGP SIGNED MESSAGE----- This might sound quite funny, but alas here it goes... I have been trying to contact AS237, and as the registry contains: <SNIP> OrgName: Merit Network Inc. OrgID: MICH <SNIP> ASNumber: 237 ASName: MERIT-AS-14 ASHandle: AS237 Comment: RegDate: 1988-09-12 Updated: 2002-10-01 OrgTechHandle: MICHN-ARIN OrgTechName: MichNet Operations OrgTechPhone: +1-734-936-0822 OrgTechEmail: michnet.operations(a)merit.edu - ---->8 I tried mailing michnet.operations(a)merit.edu but have not received any response as of yet. Is there somebody alive at Merit? ("we know those", yes they also host this mailinglist :) As for the why of contacting, we are very close in determining where the Ghost Routes in the IPv6 routing tables are coming from but we are still having difficulties contacting some parties. For 3ffe:1f00::/24, see GRH's url at: http://www.sixxs.net/tools/grh/lg/?show=evilbogons&find=::/0 The green ASN's are the ISP's feeding GRH so we can easily check if they have it or not. Thus we have left: ... 6175 [ 237 12199 10318 ] 5623 ... 6175 has it in it's table, 5623 doesn't, quite obviously 237 is passing it to 6175, but does 12199 give it to 237 ? :) So if 237 (MERIT) can enlighten us if they have it or not or even better set up a peering with GRH it would all make a huge difference. If anybody has contacts for 12199 (UUNET-RD) or 10318 who are the prime suspect, don't hesitate to speak up. On a related note 3ffe:8070::/28 is being announced by MERIT (237) but according to the registry it should be announced by 278. Who are also announcing it by the way. Something fishy at MERIT ? :) And if you got an IPv6 feed and want to share it check: http://www.sixxs.net/tools/grh/peering/ The more views the better as it does allow better checking where things go wrong. Greets, Jeroen -----BEGIN PGP SIGNATURE----- Version: Unfix PGP for Outlook Alpha 13 Int. Comment: Jeroen Massar / jeroen(a)unfix.org / http://unfix.org/~jeroen/ iQA/AwUBP5huZSmqKFIzPnwjEQKx5QCguQ1xeXxjNVr3QJvCnSAcvZq6QSEAoJwR 03DiCZdaD5bgilFwRS4ADbSR =AGiE -----END PGP SIGNATURE-----

1 0

NANOG stats
by Susan Harris 23 Oct '03

23 Oct '03

Greetings - here's some info about the last meeting, next meeting, and the list. -------------------------------------------------------------------------------- NANOG 29 - Chicago 2nd joint meeting with ARIN Host: Server Central Network ---------------------------- Total attendees: 518 Speakers: 39 (3 panels) Total attending both NANOG & ARIN 123 % women at NANOG 7% NAPs represented: 7 Univ/college/schools 17 Asia/Pacific/Africa 27 Europe 33 Attendees representing vendors ~18% Attendees representing ISPs ~50% Other (R&E, gov't., content provider, consultant) ~32% Concurrent RealMedia viewers: up to 144 Concurrent multicast viewers: ~20 to 30 Unique multicast viewers: ~50 to 100 Meeting coordination: Merit DNS, DHCP, Squid cache: Measurement Factory Multicast: Univ. of Oregon Sponsors: Avici, Force10, Alcatel, Adlex Arbor, Cisco, Juniper, Packet Design PAIX, Procket, Redback, Riverhead Meeting slides available: http://www.nanog.org/mtg-0310/agenda.html RealMedia stream available in 2-3 weeks Next Meeting: NANOG 30 ---------------------- Feb. 8-10, Miami Hosted by Terremark, who also hosted NANOG 24. NANOG Email List Stats ---------------------- Direct NANOG subscribers 7,391 nanog-post 5,544 nanog-announce 617 nanog-digest 1,083

1 0

BGP RFCs and BCPs - query
by Peter Galbavy 23 Oct '03

23 Oct '03

Sorry, I know many are going to think I should go and scan rfc-index.txt etc., but there is no real better group of people to ask for definitive pointers. I am going to be *trying* to work on some (free) BGP code and stuff aftre I leave my day job (tomorrow!), and I will be spending my spare time in the next week or two reviewing to current RFCs - I am about 3 years out of date in addition to any normal memory loss. Can anyone (off list) point me at the current active list of BGP and related RFCs, primarily for IPv4 but v6 info is welcome. What of the experimental attributes etc. are actually not experimental nowadays and any indication of vendor support compatibility issues that may be published. I *will* be reviewing the rfc-index.txt files but these lists never give the real world picture IMHO. I can summarise (on or off) the list if there is interest. rgds, -- Peter

1 0

Re: Heads-up: AT&T apparently going to whitelist-only inbound mail
by Stewart, William C (Bill), RTSLS 23 Oct '03

23 Oct '03

As a followup to Steve Bellovin's note, to clarify several comments people sent to the list, note that while AT&T's email folks decided not to take this approach (actually they'd decided that before somebody goofed up and sent the draft email anyway, sigh :-), it was never something that would have affected inbound email from the Internet to AT&T customers or outbound email from AT&T customers to the Internet. This was strictly for inbound email to AT&T's corporate mail servers at att.com, which were getting pounded with much more spam than usual. We'd rather not lose mail to j.random.salesrep(a)att.com either, but inbound mail is still slow even though they've cleaned up most of the mess. Technically I guess this isn't operational (unless you're trying to reach att.com email addresses), but if they'd done some of the things that people thought that the message said they were going to do, it would have been. Bill Stewart Usual-disclaimer: this is my opinion, not AT&T's official statements.

3 2

Re: China Telecom filtering nameservers
by John Kristoff 23 Oct '03

23 Oct '03

On Wed, Oct 22, 2003 at 11:23:08PM -0700, Joe Zhu wrote: > well...if it's really problem, someone will help. But if it's smart a$$ > comment like this, not sure. I'm not sure what exactly you took offense too, but if I offended someone, particularly our international neighbors I apologize. In my experience there has been a language barrier problem, which has hindered even the initial dialog via email or telephone. My intention was to convey that the issue is a known problem, what I thought might be going on and that I didn't yet have a good solution. John

1 0

RE: Heads-up: AT&T apparently going to whitelist-only inbound mai l
by Bowden, Terry 23 Oct '03

23 Oct '03

When individual employees of a large corporation speak to the general public, they need to put in a disclaimer. When a large corporation speaks to the general public, the disclaimer is not necessary. Bill was quite right to put a disclaimer after his personal remarks. For the official statement, look in the thread for the Press Release which was also inserted by Bill Stewart presumably after getting clearance from AT&T's Public Relations people. It stated AT&T STATEMENT - CURRENT SPAM ATTACK - 10/22/03 AT&T and a number of other large companies have seen a marked increase in the amount of incoming SPAM in recent days. A team of experts that includes members from AT&T Labs, Network Services, and Corporate Security has implemented a number of procedures to remediate this situation and minimize its impact on those trying to send e-mail to "att.com" addresses. As of this morning - Wednesday, October 22nd - the level of incoming e-mail messages is returning to normal and the situation appears to be well in hand. Although all AT&T e-mail servers are fully operational at this time, some incoming messages are experiencing intermittent delays as SPAM filtering continues at all network gateways. Customers who received e-mail bulletins from AT&T Monday and Tuesday requesting specific information are advised to disregard those messages. They were inadvertently sent out in error and we apologize for any confusion or inconvenience they may have caused. Network reliability is one of our top priorities at AT&T, so for obvious reasons we will not be providing more detailed information regarding the specific security procedures implemented to curb this SPAM attack. We have no intention of helping those who generate this type of computer and Internet mischief. Regards, ________________________________ Terry Bowden AT&T Service Delivery Manager NZ

1 0

Anyone from Rackshack/EV1 listening?
by drew＠gothambus.com 23 Oct '03

23 Oct '03

If anyone from Rackshack/EV1.net is listening, please drop me a note off-list. I have an issue that I'm having a hard time resolving through regular channels. Thanks! Drew Linsalata The Gotham Bus Company, Inc. Co-Location and Dedicated Access Solutions http://www.gothambus.com

1 0

How long much advanced notice do ISPs need to deploy IPv6?
by Sean Donelan 23 Oct '03

23 Oct '03

How much notice is adequate when changing widely used behavior on the Internet? When the ARPANET changed from NCP to TCP/IP how many days advance notice was needed? When the Internet changed from IPv4 to IPv6 how many days advance notice was needed? When the COM and NET zone behvior was changed to eliminate NXDOMAIN how many days advance notice was needed?

4 3

Unusual GET requests
by Brian Bruns 22 Oct '03

22 Oct '03

Hmmm, this is probably offtopic, but I can't seem to find anything online which explains this and I've never seen it before. Maybe someone else here has seen this in their logs or has any idea what would do this? Its obviously trying to gather some sort of information, could it be a prelude to some sort of DoS or exploit thats not publically known yet? 68.63.88.173 - - [21/Oct/2003:19:47:49 -0500] "GET /pad-Files HTTP/1.1" 404 322 "-" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:49 -0500] "GET /PAD-FILES HTTP/1.1" 404 322 "-" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:49 -0500] "GET /Pad-Files HTTP/1.1" 404 322 "-" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:48 -0500] "GET /Pad-files HTTP/1.1" 404 322 "-" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:48 -0500] "GET /pad-files HTTP/1.1" 404 322 "-" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:48 -0500] "GET /PAD-FILE HTTP/1.1" 404 321 " -" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:48 -0500] "GET /Pad-file HTTP/1.1" 404 321 " -" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:47 -0500] "GET /pad-File HTTP/1.1" 404 321 " -" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:47 -0500] "GET /Pad-File HTTP/1.1" 404 321 " -" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:44 -0500] "GET /PadFiles HTTP/1.1" 404 321 " -" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:44 -0500] "GET /Padfiles HTTP/1.1" 404 321 " -" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:44 -0500] "GET /PADFILES HTTP/1.1" 404 321 " -" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:44 -0500] "GET /padfiles HTTP/1.1" 404 321 " -" "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /PadFile HTTP/1.1" 404 320 "- " "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /Padfile HTTP/1.1" 404 320 "- " "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /PADFILE HTTP/1.1" 404 320 "- " "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /padfile HTTP/1.1" 404 320 "- " "libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /Pads HTTP/1.1" 404 317 "-" " libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /PADS HTTP/1.1" 404 317 "-" " libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:42 -0500] "GET /pads HTTP/1.1" 404 317 "-" " libwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:42 -0500] "GET /Pad HTTP/1.1" 404 316 "-" "l ibwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:42 -0500] "GET /PAD HTTP/1.1" 404 316 "-" "l ibwww-perl/5.65" 68.63.88.173 - - [21/Oct/2003:19:47:42 -0500] "GET /pad HTTP/1.1" 404 316 "-" "l ibwww-perl/5.65" -------------------------- Brian Bruns The Summit Open Source Development Group Open Solutions For A Closed World / Anti-Spam Resources http://www.sosdg.org ICQ: 8077511

3 2