- Test - lists.nanog.org

bind 9.2.3rc3 successful
by William Allen Simpson 23 Sep '03

23 Sep '03

Thought I'd mention that I helped setup BIND 9.2.3rc3 on a yellowdog linux powercomputing machine tonight. It worked. And the mail queues began clearing out. Just for an oddball success report. Are others having similar luck? What needs to be done to make this a standard feature set? Is somebody working on an RFC? -- William Allen Simpson Key fingerprint = 17 40 5E 67 15 6F 31 26 DD 0D B9 9B 6A 15 2C 32

8 8

Windows updates and dial up users
by Sean Donelan 23 Sep '03

23 Sep '03

Larry Seltzer has a nice column about the difficulties of keeping up with Windows patches if you have a dialup connection. http://www.eweek.com/article2/0,4149,1272162,00.asp "It occurred to me that one way to make things easier for dial-up users, and even broadband users in many cases, would be to issue periodic update CDs. Imagine a disc with all of the updates on it and a program, it could even be written in Windows Script Host, to check a system for which updates need to be installed, apply them in the correct order and even reboot in between. Such a program would not be hard to write." [...] "I recently put this suggestion to Microsoft and their response basically avoided the whole issue. Why wouldn't the company want to offer such a CD, assuming that's the motivation behind their stonewalling?"

8 12

Re: bind patches++ (Re: Wildcards)
by Paul Vixie 23 Sep '03

23 Sep '03

> Hello Paul , All , Is there a url listing the TLD's that > officially use wild cards in their deployment ? nope. right now you just have to know. we're trying to keep a list of places that either use wildcards and have been accepted by the community, or don't use wildcards but run bind8 or other old broken software that incorrectly sends answers rather than referrals when queried for data held as subzone glue... > > see www.isc.org/products/BIND/delegation-only.html for details. ...and that's where you'll find it. it's very possible that declaring a small number of zones delegation-only will be less work and less intrusive than trying to find/list the exceptions.

1 0

Re: bind 9.2.3rc3 successful
by Paul Vixie 23 Sep '03

23 Sep '03

> Now all I need is a patched version of the 9.3 snapshot tree, so I > don't need to kill my dnssec stuff :P (And it's time for a > non-snapshot bind version with full dnssec capabilities anyway :) if you ask that question on bind-users(a)isc.org, i promise to answer. but i do not think details of that nature are interesting on nanog@.

1 0

FW: ISS Security Brief: ProFTPD ASCII File Remote Compromise Vulnerability
by Ingevaldson, Dan (ISS Atlanta) 23 Sep '03

23 Sep '03

-----Original Message----- From: ISS XForce Sent: Tuesday, September 23, 2003 10:54 AM To: first-teams(a)first.org Subject: ISS Security Brief: ProFTPD ASCII File Remote Compromise Vulnerability *** PGP SIGNATURE VERIFICATION *** *** Status: Good Signature *** Signer: X-Force <xforce(a)iss.net> (0x7DF5E1BD) *** Signed: 9/23/2003 10:52:05 AM *** Verified: 9/23/2003 11:51:58 AM *** BEGIN PGP VERIFIED MESSAGE *** Internet Security Systems Security Brief September 23, 2003 ProFTPD ASCII File Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a flaw in the ProFTPD Unix FTP server. ProFTPD is a highly configurable FTP (File Transfer Protocol) server for Unix that allows for per-directory access restrictions, easy configuration of virtual FTP servers, and support for multiple authentication mechanisms. A flaw exists in the ProFTPD component that handles incoming ASCII file transfers. Impact: An attacker capable of uploading files to the vulnerable system can trigger a buffer overflow and execute arbitrary code to gain complete control of the system. Attackers may use this vulnerability to destroy, steal, or manipulate data on vulnerable FTP sites. Affected Versions: ProFTPD 1.2.7 ProFTPD 1.2.8 ProFTPD 1.2.8rc1 ProFTPD 1.2.8rc2 ProFTPD 1.2.9rc1 ProFTPD 1.2.9rc2 Note: Versions previous to version 1.2.7 may also be vulnerable. For the complete ISS X-Force Security Advisory, please visit: http://xforce.iss.net/xforce/alerts/id/154 ______ About Internet Security Systems (ISS) Founded in 1994, Internet Security Systems (ISS) (Nasdaq: ISSX) is a pioneer and world leader in software and services that protect critical online resources from an ever-changing spectrum of threats and misuse. Internet Security Systems is headquartered in Atlanta, GA, with additional operations throughout the Americas, Asia, Australia, Europe and the Middle East. Copyright (c) 2003 Internet Security Systems, Inc. All rights reserved worldwide. Permission is hereby granted for the electronic redistribution of this document. It is not to be edited or altered in any way without the express written consent of the Internet Security Systems X-Force. If you wish to reprint the whole or any part of this document in any other medium excluding electronic media, please email xforce(a)iss.net for permission. Disclaimer: The information within this paper may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information. X-Force PGP Key available on MIT's PGP key server and PGP.com's key server, as well as at http://www.iss.net/security_center/sensitive.php Please send suggestions, updates, and comments to: X-Force xforce(a)iss.net of Internet Security Systems, Inc. *** END PGP VERIFIED MESSAGE *** -+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+ This message was posted through the FIRST mailing list server. Contact your team's FIRST representative to (un)subscribe, DO NOT REDISTRIBUTE BEYOND MEMBERS OF FIRST TEAMS UNLESS THE AUTHOR OF THIS MESSAGE GRANTS EXPRESS PERMISSION TO REDISTRIBUTE -+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+

1 0

ICANN asks VeriSign to pull redirect service
by Eric Germann 23 Sep '03

23 Sep '03

http://msnbc-cnet.com.com/2100-1024_3-5079768.html?part=msnbc-cnet&tag=alert &form=feed&subj=cnetnews "The agency that oversees Internet domain names has asked VeriSign to voluntarily suspend a new service that redirects Web surfers to its own site when they seek to access unassigned Web addresses, rather than return an error message. " ========================================================================== Eric Germann CCTec ekgermann(a)cctec.com Van Wert OH 45891 http://www.cctec.com Ph: 419 968 2640 Fax: 603 825 5893 "The fact that there are actually ways of knowing and characterizing the extent of one’s ignorance, while still remaining ignorant, may ultimately be more interesting and useful to people than Yarkovsky" -- Jon Giorgini of NASA’s Jet Propulsion Laboratory

6 5

Re: Cheap temperature sensors
by Robert Boyle 23 Sep '03

23 Sep '03

At 06:29 AM 9/23/2003, you wrote: >I hate to point this out but this sounds spammy as hell, and while I've >been on this list a very short time, very very big alarm bells went off >when I read it. I have no financial interest in the company and I was just letting the list know about a cheap solution that works really, really well for a tremendous price. That's an elusive thing to find and I managed to locate something that many of us need. >If you aren't a spammer, compare your review with what spammers write, >noting key phrases "I bought one and WOW!" rings IMMEDIATE spam bells, >further you went from buying one (note above) to "I purchased 10 >individual temperature sensors and two temp/humidity sensors," for a total >of 12. All comparable solutions were $2000-3000 for the same number of sensors. I was half expecting to loose $445 to a scam company in Slovakia. I was very pleasantly surprised and I wanted to share my positive experience. I was excited because of the ease of setup and the dirt cheap price. If you don't need them. Ignore the post. If you do, or if someone searching the archives does, they will find my post useful. It is a lot more on topic than a lot of the nanog noise. >So I figure I'm going to call Tellurian tomorrow, and confirm you exist, >hoping you'll forgive me for my lack of faith. Look at the archives. I've been a nanog poster for years and an ISP for even longer. Tellurian has been providing Internet access since 1995. I am _clearly_ not a spammer! >Relatedly, don't capitalize words for emphasis, It's a stylistic choice. I don't believe in html posting. In plain text, I have caps and _underlines_. That's it. > I note a previous post that stated that people will be able to search > these lists when you're looking for employment and one must chose one's > words carefully. I haven't done anything wrong and I never wrote anything I will regret in the future. I really don't get it. >Anyway, I will give you a ring tomorrow, hoping that you do exist, and >that you did send this, if not we can figure out exactly what's going on, >and get it back to the list. I am real. Look at our web site and look at the archives. I bought a cheap and elegant solution to a problem we all have and I wanted to share that positive experience with the list to benefit others. I was hesitant to buy it because it looked too good to be true and they are located in Slovakia (no offense to others from SK), but it works and I'm very impressed. Again, I have absolutely NO connection to them other than as a satisfied customer. -Robert Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

2 1

Re: bind patches++ (Re: Wildcards)
by Paul Vixie 23 Sep '03

23 Sep '03

this feature is only in the latest release candidate is 9.2.3rc3. our patches to 9.2.2 and 9.1 only support "delegation-only" zones. to get the "root-delegation-only" option you need 9.2.3rc3. see www.isc.org/products/BIND/delegation-only.html for details. re: > Date: Sat, 20 Sep 2003 14:22:57 -0400 (EDT) > From: "Mr. James W. Laferriere" <babydr(a)baby-dragons.com> > To: Paul Vixie <vixie(a)vix.com> > Cc: nanog(a)merit.edu > Subject: Re: bind patches++ (Re: Wildcards) > > Hello Paul , Am I correct in the understanding that the below > tells me that 9.2.2p2 does NOT contain the ablility to do > root-delegation-only ? Tia , JimL > -- > +------------------------------------------------------------------+ > | James W. Laferriere | System Techniques | Give me VMS | > | Network Engineer | P.O. Box 854 | Give me Linux | > | babydr(a)baby-dragons.com | Coudersport PA 16915 | only on AXP | > +------------------------------------------------------------------+

2 1

RE: [nanog]: Re: Cheap temperature sensors
by Tomas Daniska 23 Sep '03

23 Sep '03

> All comparable solutions were $2000-3000 for the same number > of sensors. I > was half expecting to loose $445 to a scam company in > Slovakia. I was very > pleasantly surprised and I wanted to share my positive > experience. I was <no-scam> actually being from .sk, i just can tell that what you might consider a crap price in .us gets you a reasonably good product here there are several companies here developing measurement and power systems, both telco- and industry- grade and they have great renome abroad if you need flexibility in [reasonably priced] custom-built products, i believe the best bet is one of these companies </no-scam> sorry if this disturbed you -- deejay a.k.a. -- Tomas Daniska systems engineer Tronet Computer Networks Plynarenska 5, 829 75 Bratislava, Slovakia tel: +421 2 58224111, fax: +421 2 58224199 A transistor protected by a fast-acting fuse will protect the fuse by blowing first.

1 0

Anybody from AT&T?
by Jay Greenberg 23 Sep '03

23 Sep '03

Anyone from AT&T on the list? I just bought a Cisco 7507 with a full AT&T config on it from March 2003. Maybe someone should be changing passwords and snmp com strong, etc? It has an AT&T asset number on it, if that helps you identify how that got overlooked. Contact me if necessary. -- Jay Greenberg, CCIE #11021 -------------------------- www.free-labs.com -Free Cisco Rack Rental- --------------------------

1 0