- Test - lists.nanog.org

RE: Pitfalls of annoucing /24s
by Forrest 17 Oct '03

17 Oct '03

True enough, but are there any providers currently that filter /24's from the old Class C space that /24's were assigned directly from? I realize that if proposal 2002-3 does get passed but everyone filters those prefixes then it will be a completely worthless proposal, and even worse than using PA space. It seems to me that proposal 2002-3 could enable providers to filter more efficiently however. They could accept the long prefixes out of the micro-assignment block, while filtering out all the garbage /24's in the other space caused by people needlessly announcing every /24 out of their large aggregate. Forrest On Wed, 15 Oct 2003, Andrew Dul wrote: > Forrest, > > Even if ARIN passes this policy that will not make any provider change > their filtering policy. It is true that many providers do use the ARIN > allocation sizes to create their filtering rules but the two are not > inherently linked. Any ASN can choose the filter on what ever rule set > they choose. > > Andrew >

5 4

ISC causes stability problems
by Sean Donelan 17 Oct '03

17 Oct '03

An "anonymous reader" using almost identical language to Verisign public statements, submitted the following to Slashdot: "After .COM and .NET started using a wildcard, the internet community busily started creating patches to various pieces of software to circumvent this. It was said that this was a grave problem to the internet. Several official BIND patches were announced over the next few days. However, it turns out they weren't necessarily too well thought through. Usage of the patch unexpectedly broke at least 7 Top Level Domains, ISC announced 3 weeks later, after users started having problems. The .NAME registry has sent a formal letter to ICANN's Security and Stability Advisory Comittee to warn against using the BIND patch, which they will look into in their next meeting. The intention may have been good, but... Stability? Anyone?" NSI negotiated an agreement with ICANN overseen by the Department of Commerce so it could keep acting as the registry and registrar for .COM and .NET. NSI/Verisign entered into this agreement of its own free will in order to extend its registry and registrar contracts for many years. NSI/Verisign agreed to follow several procedural safeguards, which some other registrar/registries like .NAME didn't. As part of the agreement NSI/Verisign split domain name operations into two parts. The VeriSign COM NET Registry managed the COM and NET registry and zone files. Verisign GRS committed to fair and equitable treatment of all ICANN registrars accreditated by ICANN. The Registry systems are supposed to have "total separation" from other VeriSIgn systems. Quoting their web site: "Since the establishment of the Registry division in 1999, a primary focus of the entire staff has been developing and maintaining effective structural and procedural measures to provide an effective, credible separation between its Registry and affiliated Registrar businesses." The Registry (not the Registrar) is responsible for generating the .COM and .NET zone files from information submitted by all accredited registrars on an equal basis. Assuming Verisign defends its position that wildcards in a top-level zone don't create security or stability problems, how will the Verisign GRS make the wildcard capability available to all ICANN acredited .COM and .NET registrars without creating a conflict of interest? Why shouldn't all ICANN accredited registrars be able to enter wildcards in the .COM and .NET zone files on a equal access basis? Or is the Verisign GRS favoring its corporate sibling by entering special information in the .COM or .NET zone files for its sibling's benefit without offering the same capability to all other registrars. Registry Code of Conduct http://www.icann.org/tlds/agreements/verisign/registry-agmt-appi-com-25may0…

8 7

Backdoor Trojan behind BigPond, Internet spam woes
by Sean Donelan 16 Oct '03

16 Oct '03

http://www.zdnet.com.au/newstech/security/story/0,2000048600,20279775,00.htm Backdoor Trojan behind BigPond, Internet spam woes By Andrew Colley, ZDNet Australia 15 October 2003 U.S.-based Internet security researchers have confirmed that a worm is behind the sharp jump in spam activity battering Telstra's BigPond and other major global ISPs since early last week. UPDATE: BigPond service recovery may take 'several weeks' By Iain Ferguson, ZDNet Australia 14 October 2003 Telstra has conceded it may be several weeks before BigPond e-mail service levels return to normal as the telecommunications carrier wrestles with delays caused by a steep ongoing surge in traffic.

1 0

RE: Tomatoes for Verisign at NANOG 29
by Dave Hilton 16 Oct '03

16 Oct '03

In reference to some earlier politically active days: Hey! Hey! Ver - i - sign ! How Many Domains Do You Think Are Thine? Hilton

1 0

RE: Tomatoes for Verisign at NANOG 29
by Vachon, Scott 16 Oct '03

16 Oct '03

> all > those who approve > of the wildcards would put their token-of-choice in another pile. > Might I suggest the "joker" out of a deck of playing cards ? ; ) Learn more about Paymentech's payment processing services at www.paymentech.com THIS MESSAGE IS CONFIDENTIAL. This e-mail message and any attachments are proprietary and confidential information intended only for the use of the recipient(s) named above. If you are not the intended recipient, you may not print, distribute, or copy this message or any attachments. If you have received this communication in error, please notify the sender by return e-mail and delete this message and any attachments from your computer.

2 1

Re: Tomatoes for Verisign at NANOG 29
by Owen DeLong 16 Oct '03

16 Oct '03

I have no religion about the particular choice of fruit/vegetable (yes, I know tomatoes are technically fruit). However, I think we should try to stick to Red and the symbolism of the tomato cannot be denied. It has long been used as a response to bad implementation and that is exactly what we are responding to here. I would welcome your oranges or any other fruit/vegetable of protest, but, I think tomatoes make the best statement. I have no financial or other interest in tomatoes (although I think they're tasty), and there is no tomato cabal of which I am aware. Owen --On Thursday, October 16, 2003 16:02 -0400 Robert Drake <rdrake(a)sprint.net> wrote: > You guys aren't members of a secret tomato vendor cabal or anything > are you? > > Is other fruit allowed during the silent protest? I'm thinking about > bringing oranges. > > :) > > Robert > > Owen DeLong(owen@delong.com)@2003-10-16 12:01:04 -0700: >> >> I would also suggest that we try to make contact with a second-harvest or >> other organization that may be able to use the tomatoes afterwards. >> >> Owen >> >> >> --On Thursday, October 16, 2003 11:36 -0700 "Wayne E. Bouchard" >> <web(a)typo.org> wrote: >> >> > >> > Just a brief statement that kinda goes without saying but I'll say it >> > anyway. >> > >> > >> > Although I'm not going to be there personally, I do intend to watch >> > the netcast. >> > >> > I would just ask (and I'm sure merit folks share this) that despite >> > the actions that have been taken by verisign and the conflicts etc, >> > that people please be curteous and not just outright harrass their >> > representatives but allow them to make their presentation as they >> > intend. (The last thing we need to do is lend credence to the >> > statements that have been made in the press regarding this community.) >> > >> > On Thu, Oct 16, 2003 at 11:19:59AM -0700, JC Dill wrote: >> >> >> >> Dan and Owen, I nominate you two for the tomato acquisition and >> >> distribution committee. >> >> >> >> To recap: At NANOG 29 in Chicago, on Monday October 20th at 9:15 am a >> >> session on "VeriSign's Wildcard Record: Effects and Responses" will be >> >> held, with Mark Kosters and Matt Larson from VeriSign and Suzanne >> >> Woolf from ISC: >> >> >> >> <http://www.nanog.org/mtg-0310/dns.html> >> >> >> >> If you are attending NANOG 29, please attend this session and wear a >> >> red shirt. If possible, please buy/bring a tomato. Take your tomato >> >> to the front of the room and place them in a pile before Verisign, to >> >> make it absolutely clear how you feel about Verisign's wildcards and >> >> sitefinder. Please do not throw your tomatoes. >> >> >> >> I wish I could be there! >> >> >> >> Now to make sure that someone with clue from the Chicago Sun Times and >> >> the Chicago Tribune are both there, with photographers. Does anyone >> >> on this list have any contacts at either of these papers? >> >> >> >> jc >> > >> > --- >> > Wayne Bouchard >> > web(a)typo.org >> > Network Dude >> > http://www.typo.org/~web/ >> >> >> > > -- > Robert Drake > Sprintlink NTAC Internet > +140 464 90 372 (03 45 3C 6F 04)

1 0

Re: Tomatoes for Verisign at NANOG 29
by Stewart, William C (Bill), RTSLS 16 Oct '03

16 Oct '03

I have to agree with Scott. Be professional. Y'all can use tomato.net as examples if you want (though actually that one belongs to buydomains.com, which buys potentially resellable domain names.) A more important concern is that they keep mentioning that they've been talking to web users and looking out for the interests of web consumers, while not mentioning their impact on email users and consumers.

1 0

RE: Tomatoes for Verisign at NANOG 29
by Dan Lockwood 16 Oct '03

16 Oct '03

I will do my best to get the tomatos. How many do you think we will need? Dan -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of JC Dill Sent: Thursday, October 16, 2003 12:12 To: NANOG Subject: Re: Tomatoes for Verisign at NANOG 29 At 12:00 PM 10/16/2003, Owen DeLong wrote: >Agreed. I plan to wear a red shirt and bring a tomatoe. The tomato >will sit quietly on the table near me. It will not be used as a >projectile no matter how much Verisign tries to convince me it should. >Really. I will not throw the tomato at Verisign no matter how much they >deserve it. > >Wayne is right. For this to have the desired effect, we need to make >it a peaceful and symbolic protest, not a brawl. EXACTLY. >I would also suggest that we try to make contact with a second-harvest >or other organization that may be able to use the tomatoes afterwards. Great idea! Can we count on Dan for tomato acquisition and for Owen for post-protest dispersal to a foodbank? jc (I so wish I could be there!) -- JC Dill 370 Altair #353 Sunnyvale, CA 94086 650-669-1664 jcdill(a)vo.cnchost.com AIM: UltraJCDill Y!IM: jcdill

1 0

RE: Site Finder
by Dan Lockwood 16 Oct '03

16 Oct '03

Recognizing that I am not an 'expert', I have got to ask just one question. Can these people at Verisign really think that they know better than all of the real experts that have worked with/on the DNS over the years. It seems rather silly to assume that a few people have more knowledge than the collective community. Furthermore, I feel that Ray makes an excellent point in that the concensus seems to be that we, as the Internet community, do _NOT_ want this type of tinkering with something that works very well; especially since the purpose is to increase advertising revenue. Verisign is clearly acting against the concensus. What effective action can we take as a collective group to get the point across that we will not tollerate this type of behavior? Dan -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Ray Bellis Sent: Thursday, October 16, 2003 8:08 To: nanog list Subject: Site Finder Quoting Rusty Lewis from http://verisign.com/corporate/news/2003/pr_20031007b.html?sl=070804 "We will continue to take feedback from both Internet users and the technical community on how we can ensure that the service is available for the many Internet users who clearly like it." Well that's very simple Rusty - stop screwing around with *our* DNS and write a plugin for IE to catch NXDOMAIN, just like the Google toolbar does. That'll allow 90% of the browsing population a *choice*, something the wildcard clearly does not. Ray -- Ray Bellis, MA(Oxon) - Technical Director community internet plc - ts.com Ltd Windsor House, 12 High Street, Kidlington, Oxford, OX5 2PJ tel: +44 1865 856000 email: ray.bellis(a)community.net.uk fax: +44 1865 856001 web: http://www.community.net.uk/

6 7

Re: Tomatoes for Verisign at NANOG 29
by Scott Bradner 16 Oct '03

16 Oct '03

> Dan and Owen, I nominate you two for the tomato acquisition and > distribution committee. lets not tomatoes != knowledge (nor are an indicator of same) Scot

4 3