- Test - lists.nanog.org

DNS scans by IANA
by Andrew Fried 03 Oct '03

03 Oct '03

5 4

needed Comcast engineer with clue
by Gordon Cook 03 Oct '03

03 Oct '03

I apologize for bringing this to the list, but i have expended approximately 22 hours since monday on the problem without resolution and without consistent replies or consistent reliable response from comcast. The short version of situation is that i am getting between 11% and 52% packet loss to various IP adress. From the terminal window on OSX i run ping -s 1024 xxx.xx.xxx.xxx where the x's are the ip number. Under these conditions i cannot successfully sen an email with a two meg attachment. 609 394 2288 is the local number of the Trenton NJ office a few miles from my house. calls to there were routed to a national call center so that effort just failed. If i could only reach someone in their engineering dept locally who could run some configuration tests on their local routers switches etc, they could probably save further visits to my house... next one scheduled sunday between 1 and 3pm. The network at the physical level is fine. This is a layer 3 tcp/ip problem. I have replaced my cable modem and done hours of trouble shooting within my house to confirm it is not on my side of the network. I was promised an engineer this morning with laptop. They didn't keep the promise and sent a tech who checked the physical signal and went away and apparently scheduled sundays visit. comcast please contact me off list..email or phone numbers below -- ============================================================= The COOK Report on Internet, 609 882-2572 (PSTN) 703 738-6031 (Vonage) Subscription info & prices at http://cookreport.com/subscriptions.shtml License Exempt Wireless Report http://cookreport.com/12.07-08.shtml Purchase ten years of back issues at http://www.cafeshops.com/cookreportinter.6936314 E-mail cook(a)cookreport.com or use cook(a)oldcolo.com Free World Dial up 17318 =============================================================

1 0

Re: the gauntlet is thrown
by Peter H Salus 03 Oct '03

03 Oct '03

Scott Bradner writes: >> http://www.icann.org/correspondence/twomey-to-lewis-03oct03.htm God, I wish that Twomey had had someone proofread. It's a bit late to request a report by "15 January 2003." Peter --------------------------------------------------------- Peter H. Salus, Ph.D. 40 IH 35 N #4A3 Austin, TX 78701 Chief Knowledge Officer, InternetPerils, Inc. peter(a)netpedant.com +1 512 478-7562

1 0

Re: NTP, possible solutions, and best implementation
by Robert M. Enger 03 Oct '03

03 Oct '03

As Mr. Dillon observed, regional service seems prudent, if only to minimize timing problems at the IP layer, much less for reliability purposes. An alternate time source could be the GLONASS system. Receivers do exist, but I have never used one. Sanity checking sources could include WWVB in the US, and many others: http://www.cl.cam.ac.uk/~mgk25/lf-clocks.html The US FAA is transmitting WAAS correction signals. Depending on the algorithms in the GPS receiver, this may result a reduction in PPS jitter. (although any such jitter is probably swamped by the jitter at the IP layer) There is at least one GPS receiver that will deliver 20PPS output, if needed. It is often possible to directly interrogate the GPS receiver to find out how many satellites it can see, and what the signal strengh conditions are. This will allow you to verify the adequacy of the outside antenna installation. If this is serious business, then it might be prudent to make a permanent connection that allows this interrogation (terminal server interface), and to check the constellation visibility and signal conditions on a periodic basis, not just at installation time. (Someone might put something else up on the roof that blocks your antenna's view of a portion of the sky...) Best wishes, Bob Enger ----- Original Message ----- From: "Ariel Biener" <ariel(a)fireball.tau.ac.il> To: <nanog(a)merit.edu> Sent: Thursday, October 02, 2003 10:54 AM Subject: NTP, possible solutions, and best implementation > > > > Hi, > > > Assuming one wanted to provide a high profile (say, at the TLD level) NTP > service, how would you go about it ? > > The possibilities I encountered are diverse, the problem is not the > back-end device (be it a GPS based NTP source + atomic clock backup, based on > cesium or similar), but the front end to the network. Such a time service is > something that is considered a trusted stratum 1 server, and assuring that no > tampering with the time is possible is of very high priority, if not top > priority. > > There are a few NTP servers solutions, I like the following comparison > between one company's products (Datum, merged into Symmetricom): > > http://www.ntp-systems.com/product_comparison.asp > > However, when you put such a device on a network, you want to have some > kind of clue about the investment made in that product when security comes to > mind, and also the turnaround time for bug fixes should such security bug > become public. Here is the problem, or actually, my problem with these > devices. I know that if I use a Unix machine or a Cisco router as front end > to the network for this back-end device, then if a bug in NTP occurs, Cisco > or the Unix vendor will fix it quickly. BUT!, if I want to put the device > itself on the network, as this is what a NTP device was built for, I feel > that I have no real sense of how secure the device really is, and how long it > would take for the vendor to actually fix the bug, should such be discovered. > It's a black box, and I am supposed to provide a secure time source based on > ... "what ?" > > This is my dillema. While I don't want to put a NTP front end, which > becomes a stratum 2 in this case, but to provide direct stratum 1 service to > stratum 2 servers in the TLD in question, I do not know how can I safely > trust a device that I have no experience with how the vendor deals with bugs, > and also, I have no idea what is the underlying software (although it's safe > to assume that it is an implementation of xntpd, in one form or the other). > > Did any of you have to create/run/maintain such a service, and does any of > you have experience with vendors/products that can be trusted when security > is concerned (including the vendor and the products I specified above). > > thanks for your time, > > --Ariel > > > -- > Ariel Biener > e-mail: ariel(a)post.tau.ac.il > PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html >

2 1

Re: NANOG 29 hotels
by Michael.Dillon＠radianz.com 03 Oct '03

03 Oct '03

>Can anyone recommend a hotel close to NANOG29, sub $200/night room rate, >with internet access in the room, with availability 18-22 Oct? I can't find >any on the list on www.nanog.org with availability (or are > $200/night). I've always liked the look of the House of Blues hotel with its spiral cylinder car park tower next door. You can find out more details on their web page http://www.loewshotels.com/hotels/chicago/default.asp but I don't really know about Internet access in the hotel. --Michael Dillon

1 0

Re: Alternative Satellite news feed needed
by Robert Boyle 03 Oct '03

03 Oct '03

At 02:57 PM 10/2/2003, you wrote: >On Thu, 2 Oct 2003, Marshall Eubanks wrote: > > I have found a possible source of satellite bandwidth for this, assuming a > > critical mass of users could be accumulated to pay for it. Interested > parties > > should send me an email off list please. > >If a critical mass of users could be accumulated to pay for it, I imagine >Cidera would still be in business. If Cidera had ever returned our calls or email to tell us the services they offered after they installed the dish on the roof of our datacenter and the server and satellite receiver in our rack, they might still be in business. :P From those I've talked to, I'm not the only one who never actually used any services from them because we weren't sure exactly what those services were or what they cost. Something about a DS3 of bandwidth for an ihave news feed for $350-500/month was mentioned before they installed anything and I agreed to it verbally. They were awfully anxious to get that dish installed. Perhaps due to loan covenants that they deploy x installations per month? -Robert btw- Installation of the dish and the PIII 1U server with mirrored HDDs were all given to us for free. I REALLY didn't get their business model and I still don't... Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

5 4

The Cidr Report
by cidr-report＠potaroo.net 03 Oct '03

03 Oct '03

This report has been generated at Fri Oct 3 21:48:03 2003 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 26-09-03 124718 88960 27-09-03 125283 89018 28-09-03 125443 89017 29-09-03 125620 88973 30-09-03 125599 89081 01-10-03 125771 89067 02-10-03 125674 89148 03-10-03 125747 89341 AS Summary 15851 Number of ASes in routing system 6276 Number of ASes announcing only one prefix 1436 Largest number of prefixes announced by an AS AS701 : ALTERNET-AS UUNET Technologies, Inc. 73465088 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 03Oct03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 126581 89358 37223 29.4% All ASes AS6198 1217 356 861 70.7% BATI-MIA BellSouth Network Solutions, Inc AS6197 983 284 699 71.1% BATI-ATL BellSouth Network Solutions, Inc AS4323 675 197 478 70.8% TW-COMM Time Warner Communications, Inc. AS701 1436 1000 436 30.4% ALTERNET-AS UUNET Technologies, Inc. AS7018 1405 985 420 29.9% ATT-INTERNET4 AT&T WorldNet Services AS7843 530 140 390 73.6% ADELPHIA-AS Adelphia Corp. AS3908 919 544 375 40.8% SUPERNETASBLK SuperNet, Inc. AS4355 392 108 284 72.4% ERMS-EARTHLNK EARTHLINK, INC AS1221 975 692 283 29.0% ASN-TELSTRA Telstra Pty Ltd AS6347 348 86 262 75.3% DIAMOND SAVVIS Communications Corporation AS1239 915 659 256 28.0% SPRINTLINK Sprint AS22773 289 39 250 86.5% CCINET-2 Cox Communications Inc. Atlanta AS27364 314 70 244 77.7% ACS-INTERNET Armstrong Cable Services AS4134 354 118 236 66.7% CHINANET-BACKBONE No.31,Jin-rong Street AS22909 296 60 236 79.7% DNEO-OSP1 Comcast Cable Communications, Inc. AS17676 269 36 233 86.6% GIGAINFRA Softbank BB Corp. AS25844 242 15 227 93.8% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS209 505 294 211 41.8% ASN-QWEST Qwest AS6140 340 134 206 60.6% IMPSAT-USA ImpSat AS11305 230 38 192 83.5% INTERLAND-NET1 Interland Incorporated AS9583 277 101 176 63.5% SATYAMNET-AS Satyam Infoway Ltd., AS2386 377 203 174 46.2% INS-AS AT&T Data Communications Services AS4519 178 4 174 97.8% MAAS Maas Communications AS6327 201 27 174 86.6% SHAW Shaw Communications Inc. AS14654 173 2 171 98.8% WAYPORT Wayport AS2048 253 86 167 66.0% LANET-1 State of Louisiana AS9498 184 21 163 88.6% BBIL-AP BHARTI BT INTERNET LTD. AS705 402 245 157 39.1% ALTERNET-AS UUNET Technologies, Inc. AS5786 160 6 154 96.2% UPRENET University of Puerto Rico AS9800 203 52 151 74.4% UNICOM CHINA UNICOM Total 15042 6602 8440 56.1% Top 30 total Possible Bogus Routes 24.119.0.0/16 AS11492 CABLEONE CABLE ONE 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. 66.41.192.0/18 AS13367 CCCH-AS3 Comcast Cable Communications Holdings, Inc 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.143.2.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 140.240.0.0/13 AS1 GNTY-1 Genuity 142.105.0.0/21 AS19800 GCPUD-ORG Grant County Public UtilityDistrict 142.105.220.0/22 AS3908 SUPERNETASBLK SuperNet, Inc. 142.105.224.0/22 AS3908 SUPERNETASBLK SuperNet, Inc. 142.105.228.0/22 AS3908 SUPERNETASBLK SuperNet, Inc. 142.105.232.0/22 AS3908 SUPERNETASBLK SuperNet, Inc. 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 165.212.0.0/16 AS7424 USANET USA.Net 166.16.0.0/16 AS7132 SBIS-AS SBC Internet Services - Southwest 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.71.0/24 AS719 AS719 LANLINK autonomous system 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.153.136.0/21 AS568 SUMNET-AS DISO-UNRRA 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.152.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.154.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.166.18.0/24 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.0.180.0/24 AS4058 APNIC-4058 Asia Pacific Network Information Centre 202.3.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.4.252.0/22 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.44.112.0/20 AS17458 CWNETDG-IO-AP Cable and Wireless 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.93.64.0/19 AS9425 I-NEXT-AS-AP Inter.net Philippines border AS 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.136.254.0/23 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.142.130.0/23 AS17820 DIL-AP DIRECT INTERNET LTD. 202.142.132.0/22 AS17820 DIL-AP DIRECT INTERNET LTD. 202.143.48.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.143.56.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.179.64.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.65.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.66.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.67.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.189.234.0/23 AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. 203.10.17.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.18.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.19.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.21.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.22.0/24 AS9266 VIPER-AU-AP Vipernet 203.10.23.0/24 AS9266 VIPER-AU-AP Vipernet 203.32.4.0/23 AS7617 APNIC-AS-2-BLOCK Asia Pacific Network Information Centre 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.86.2.0/23 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.122.96.0/20 AS7722 RIVERNET-AS-AP Rivers Network P/L 203.122.112.0/20 AS7722 RIVERNET-AS-AP Rivers Network P/L 203.129.126.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 203.129.127.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 203.132.95.0/24 AS9787 CONCEPT-AU-AP Concept Networks 203.132.97.0/24 AS7652 VIANET-AS-AP Vianet Communications Pty Ltd 203.132.99.0/24 AS7657 TIG-US-PAS-AP The Internet Group Limited 203.132.102.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.103.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.104.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.105.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.106.0/24 AS9398 ARACHNET-AS-AP Arachnet 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.109.0/24 AS10141 CALOUNDRA-AS-AP Caloundra.net 203.132.110.0/24 AS7598 ALPHALINK-AS-AP Alphalink Pty Limited - Melbourne, Australia 203.132.111.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.112.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.118.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 203.132.123.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.124.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.125.0/24 AS4817 TECHEX1-AS-AP Techex Primary Netblock 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 203.135.224.0/19 AS4058 APNIC-4058 Asia Pacific Network Information Centre 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.29.189.0/24 AS3956 TX-METRO Texas Metronet 204.52.232.0/24 AS7177 DFWNET DFW Internet Services, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.126.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.194.110.0/23 AS10588 ICSNET Intelligent Computer Solutions, Inc 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.65.232.0/23 AS701 ALTERNET-AS UUNET Technologies, Inc. 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.151.128.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.160.0/19 AS4355 ERMS-EARTHLNK EARTHLINK, INC 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.213.0.0/19 AS6453 TELEGLOBE-AS Teleglobe Inc 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 216.226.108.0/22 AS3602 SPRINT-CA-AS Sprint Canada Inc. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: NTP, possible solutions, and best implementation
by Michael.Dillon＠radianz.com 03 Oct '03

03 Oct '03

>So what you are suggesting basically is to add an application layer sanity >checker and DoS preventer, am I right ? More or less, yes. The main thing is to have something in front of the clocks that can be used to block or mitigate network abuse activities like DoS. And if this front-end is a UNIX box then it is easy to take a simple proxy such as udprelay and extend it to do some application layer checking. --Michael Dillon

1 0

ICMP Blocking Woes
by CA Windon 03 Oct '03

03 Oct '03

Dear NANOG-ers, I work for an information security company that is dependant upon ICMP for network mapping purposes (read: traceroute). On or about August 18, we were told, our upstream provider began blocking ICMP packets at its border in the Chicago NAP in an effort to cut down on the propagation of 'MSBlast'. This has effected our ability to accurately map our customers networks. We've been in contact with an engineer in this provider's NOC who is either unable or unwilling to remove this ACL for our block of IPs. Currently, we've been given two options. (1) Deal with the effect of the ACL until 'MSBlast' traffic subsides, or (2) they are willing to reroute our traffic out of the Chicago NAP to a border router that, they claim, does not have the same ACL. The problem with option 2 is that they would force us to renumber. This is a problem for us, as it would impact our customers as well. What options can I take to my management that would cause the least impact to the services we provide while not causing undue work for our clients. Also, what other options could I suggest to my upstream provider? TIA, C. Windon __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com

15 20

RE: Internet privacy
by Dr. Jeffrey Race 03 Oct '03

03 Oct '03

On Thu, 2 Oct 2003 12:08:27 -0400, Jeffrey Meltzer wrote: >What valid reason would you have for getting in contact with a domain owner, >if they've unlisted themselves and don't want to be contacted? > >Netblock info, yes, because that's where the abuse comes from. Domains are >forged a lot more than IP's are. As long as you can see some contact info >for 1.2.3.4, who cares what the listed contact info for spammer.com is? You need it for a legal service address Jeffrey Race

1 0