- Test - lists.nanog.org

Washington Post article: Dissertation Could Be Security Threat
by Mike Suter 08 Jul '03

08 Jul '03

http://www.washingtonpost.com/wp-dyn/articles/A23689-2003Jul7.html Sean Gorman's professor called his dissertation "tedious and unimportant." Gorman didn't talk about it when he went on dates because "it was so boring they'd start staring up at the ceiling." But since the Sept. 11, 2001, attacks, Gorman's work has become so compelling that companies want to seize it, government officials want to suppress it, and al Qaeda operatives -- if they could get their hands on it -- would find a terrorist treasure map. Tinkering on a laptop, wearing a rumpled T-shirt and a soul patch goatee, this George Mason University graduate student has mapped every business and industrial sector in the American economy, layering on top the fiber-optic network that connects them. [...]

1 0

MFN/AboveNet blocking pac-rim.net/spamshield.org MX
by Kai Schlichting 08 Jul '03

08 Jul '03

Coming back from my vacation, I had to discover that some losers (who, no doubt, had something to lose as far as their hijacked IP space is concerned) have attempted to DoS the MX for pac-rim.net/spamshield.org by sending a few 100,000 spams with randomized @pac-rim.net return addresses around June 25/26th, and us seeing 10,000's of bounces generated by misbehaving mail hosts that bounce to MAIL FROM: addresses sometime after their mail back-end decides that the recipients don't exist (nice AOL-style abuse amplifier, just un-AOL-like unthrottled). At the same time, MFN/Above.net seems to have null0'd 208.241.101.2 (in response to that? we have yet to see a SINGLE complaint/forwarded copy), thus denying transit of all their non-multihomed downstreams (or those that transit through them to the UUnet /10 aggregate this IP lives in) to our MXs, as well as the SpamShield.org website and the private SpamShield DNSBL zone origin host. While we have to suffer constantly under attempts of unlawful trespass originating from MFN/Above.net's customers, with never a peep of a follow-up after the auto-reply coming back from abuse(a)above.net (and in quite a few cases with such trespass continuing unabated) we've never bothered to null0 more than a surrounding /22 around for such abuse for more than a brief amount of time (1-3 days max). Whoever is wielding 'enable' power at MFN/AboveNet may want to re-think what abuse actually is - and may want to consult with his boss at this time wether it was appropriate to block a DoS victims' MX without contacting same beforehand. Meanwhile it seems that it took Above.net a LOT longer to null0 hijacked IP space (like: a couple weeks) announced from customer AS 26891 than it took them to null0 a /32 they seemed to perceive as a threat that isn't paying them: # routes (20030515): # 199.120.163.0/24 from AS: 26891 (upstreams: 6461), # 199.120.164.0/24 from AS: 26891 (upstreams: 6461), # 199.166.200.0/22 from AS: 26891 (upstreams: 6461), # 199.201.151.0/24 from AS: 26891 (upstreams: 6461), # 199.201.152.0/24 from AS: 26891 (upstreams: 6461), # 204.19.162.0/24 from AS: 26891 (upstreams: 6461 23352), (all gone now) Waiting for AboveNet/MFN's mail on this - and no, renumbering the host to another IP number would be too annoying. bye,Kai -------- sonet:~# tcptraceroute -s 208.241.101.2 whois.gandi.net Selected device exp0, address 208.241.101.2, port 58193 for outgoing packets Tracing the path to whois.gandi.net (80.67.173.20) on TCP port 80, 30 hops max [...] 4 0.so-1-1-0.XL2.NYC1.ALTER.NET (152.63.19.98) 10.150 ms 8.815 ms 10.136 ms 5 0.so-7-0-0.XL2.NYC8.Alter.Net (152.63.0.37) 13.199 ms 11.889 ms 12.103 ms 6 0.so-3-0-0.XR2.NYC8.ALTER.NET (152.63.19.34) 16.530 ms 13.251 ms 11.268 ms 7 182.ATM6-0.BR1.NYC8.ALTER.NET (152.63.23.173) 8.762 ms 7.053 ms 10.339 ms 8 * * * 9 * * * ^C sonet:~# tcptraceroute -s another.address.on.the.same.box whois.gandi.net Selected device exp0, address x.x.x.x, port 58185 for outgoing packets Tracing the path to whois.gandi.net (80.67.173.20) on TCP port 80, 30 hops max [...] 4 0.so-1-1-0.XL2.NYC1.ALTER.NET (152.63.19.98) 9.631 ms 8.728 ms 10.066 ms 5 0.so-7-0-0.XL2.NYC8.Alter.Net (152.63.0.37) 9.621 ms 8.731 ms 10.017 ms 6 0.so-3-0-0.XR2.NYC8.ALTER.NET (152.63.19.34) 9.663 ms 8.736 ms 10.131 ms 7 182.ATM5-0.BR1.NYC8.ALTER.NET (152.63.23.77) 19.588 ms 9.054 ms 10.067 ms 8 200.atm6-0.pr1.lga2.us.mfnx.net (208.184.231.245) 29.625 ms 36.590 ms 29.811 ms 9 so-2-2-0.cr2.lga2.us.mfnx.net (216.200.127.169) 49.795 ms 35.010 ms 29.780 ms 10 so-0-0-0.cr2.lga1.us.mfnx.net (208.184.232.197) 49.766 ms 28.664 ms 39.752 ms 11 so-6-0-0.cr2.lhr3.uk.above.net (64.125.31.181) 99.797 ms 103.668 ms 99.700 ms 12 so-0-0-0.cr1.lhr3.uk.above.net (208.184.231.145) 109.793 ms 108.402 ms 99.705 ms 13 pos12-0.cr1.cdg2.fr.above.net (64.125.31.130) 109.857 ms 107.870 ms 109.774 ms 14 pos0-2.er1a.cdg2.fr.above.net (208.184.231.205) 109.799 ms 108.622 ms 109.779 ms 15 gitoyen-voltaire-gw.gitoyen.net (62.4.73.30) 119.632 ms 111.625 ms 109.781 ms 16 80.67.168.6 (80.67.168.6) 129.879 ms 119.700 ms 109.803 ms 17 jd.gandi.net (80.67.173.20) [open] 109.893 ms 1.390 ms 119.798 ms

4 3

New danger to cabling - Can your datacenter prevent this?
by Eric Kuhnke 07 Jul '03

07 Jul '03

http://colofinder.net/gallery/view_album.php?set_albumName=cable-eater A bit of humor on a boring monday afternoon. Next week, we're turning this rabbit loose under the floor at 25 Broadway! muahahahahaha. just kidding.

2 1

donotcall.gov - special interests vs the public interest
by Roger Marquis 04 Jul '03

04 Jul '03

Tried the website again this morning (7/4) and got: "We're sorry. The site is unavailable at the moment. Please try again later." Which is not surprising given the underlying technology: # HEAD www.donotcall.gov Server: Microsoft-IIS/5.0 X-Powered-By: ASP.NET Another busy government site using the least secure web server software. You can imagine the backend. Their javascript is also broken. It could be worse I suppose, if managed by the USPS... The site and exceptions list are great examples of the level of special interest influence in DC. Unfortunately, their influence is also a roadblock to national security: Bruce Schneier <http://www.counterpane.com/crypto-gram-0210.html#1> Marcus Ranum <http://www.tisc2002.com/newsletters/414.html> Anyone here familiar with the subcontractor list for DNC's Internet servers? -- Roger Marquis Roble Systems Consulting http://www.roble.com/

3 2

[Article] donotcall.gov - too many loopholes
by Hank Nussbacher 04 Jul '03

04 Jul '03

http://www.fortune.com/fortune/ontech/0,15918,462261,00.html Hank Nussbacher

2 1

The Cidr Report
by cidr-report＠potaroo.net 04 Jul '03

04 Jul '03

This report has been generated at Fri Jul 4 21:06:58 2003 AEST. The report analyses the BGP Routing Table of the Route-Views router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as6447 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 27-06-03 139252 99596 28-06-03 139843 100000 29-06-03 139456 83002 30-06-03 142850 74521 01-07-03 143033 98601 02-07-03 142640 18440 03-07-03 142667 99153 04-07-03 142783 97924 AS Summary 15604 Number of ASes in routing system 6035 Number of ASes announcing only one prefix 5262 Largest number of prefixes announced by an AS AS15290: ATTCA-15290 AT&T Canada Telecom Services Company 73223936 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 04Jul03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 142767 97931 44836 31.4% All ASes AS15290 5262 267 4995 94.9% ATTCA-15290 AT&T Canada Telecom Services Company AS705 2355 1285 1070 45.4% ALTERNET-AS UUNET Technologies, Inc. AS18566 619 8 611 98.7% COVAD Covad Communications AS7132 838 232 606 72.3% SBIS-AS SBC Internet Services - Southwest AS4716 1304 731 573 43.9% POWEREDCOM POWEREDCOM, Inc. AS3908 1800 1278 522 29.0% SUPERNETASBLK SuperNet, Inc. AS11305 549 80 469 85.4% INTERLAND-NET1 Interland Incorporated AS701 1520 1069 451 29.7% ALTERNET-AS UUNET Technologies, Inc. AS690 1607 1165 442 27.5% MERIT-AS-27 Merit Network Inc. AS4323 605 181 424 70.1% TW-COMM Time Warner Communications, Inc. AS7018 1367 948 419 30.7% ATT-INTERNET4 AT&T WorldNet Services AS189 690 302 388 56.2% GENUITY-AS189 Genuity AS702 1022 640 382 37.4% ALTERNET-AS UUNET Technologies, Inc. AS7843 609 238 371 60.9% ADELPHIA-AS Adelphia Corp. AS1221 1125 779 346 30.8% ASN-TELSTRA Telstra Pty Ltd AS3215 553 220 333 60.2% AS3215 France Telecom Transpac AS6197 523 232 291 55.6% BATI-ATL BellSouth Network Solutions, Inc AS6198 479 188 291 60.8% BATI-MIA BellSouth Network Solutions, Inc AS1239 964 676 288 29.9% SPRINTLINK Sprint AS6347 387 116 271 70.0% DIAMOND SAVVIS Communications Corporation AS7046 1335 1080 255 19.1% UUNET-CUSTOMER UUNET Technologies, Inc. AS25844 259 11 248 95.8% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS3356 624 383 241 38.6% LEVEL3 Level 3 Communications, LLC AS27364 306 83 223 72.9% ACS-INTERNET Armstrong Cable Services AS22773 224 8 216 96.4% CCINET-2 Cox Communications Inc. Atlanta AS209 645 443 202 31.3% ASN-QWEST Qwest AS4755 435 241 194 44.6% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS17676 250 67 183 73.2% GIGAINFRA XTAGE CORPORATION AS2386 408 231 177 43.4% INS-AS AT&T Data Communications Services AS17557 341 172 169 49.6% PKTELECOM-AS-AP Pakistan Telecom Total 29005 13354 15651 54.0% Top 30 total Possible Bogus Routes 5.5.5.0/24 AS1239 SPRINTLINK Sprint 24.119.0.0/16 AS11492 CABLEONE CABLE ONE 24.223.128.0/17 AS11060 NEO-RR-COM Time Warner Cable Northeast Ohio 39.0.0.0/8 AS4554 EP0-BLK-ASNBLOCK-4 Exchange Point Blocks 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 63.0.0.0/8 AS226 LOS-NETTOS-AS Los Nettos 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. 66.41.192.0/18 AS13367 ATT-BBND-B AT&T Broadband 66.98.128.0/19 AS13749 EVERYONES-INTERNET Everyones Internet, Inc. 66.98.160.0/20 AS13749 EVERYONES-INTERNET Everyones Internet, Inc. 66.118.32.0/20 AS11457 TEXLINK Tex-Link Communications, Inc. 66.207.54.80/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 67.45.23.120/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 67.45.53.192/29 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.240.0.0/13 AS1 GNTY-1 Genuity 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 165.212.0.0/16 AS7424 USANET USA.Net 166.16.0.0/16 AS7132 SBIS-AS SBC Internet Services - Southwest 171.64.0.0/10 AS1 GNTY-1 Genuity 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.83.14.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.25.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.136.80.0/24 AS719 AS719 LANLINK autonomous system 192.136.84.0/24 AS719 AS719 LANLINK autonomous system 192.136.85.0/24 AS719 AS719 LANLINK autonomous system 192.153.136.0/21 AS568 SUMNET-AS DISO-UNRRA 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.168.4.0/24 AS21166 AS21166 SatGate autonomous system 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.161.200.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 200.58.240.0/24 AS7997 CO-EMSA-LACNIC EMTELCO S.A. 202.3.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.145.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.146.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.152.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.155.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.156.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.157.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.4.252.0/22 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.6.96.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.97.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.99.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.10.72.0/21 AS9716 AUSTAR-AS-AP Austar Entertainement 202.44.112.0/20 AS17458 CWNETDG-IO-AP Cable and Wireless 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.130.224.0/20 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.240.0/21 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.248.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.130.252.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.136.254.0/23 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.136.254.0/24 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.140.230.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.232.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.234.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.235.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.142.130.0/23 AS17820 DIL-AP DIRECT INTERNET LTD. 202.142.132.0/22 AS17820 DIL-AP DIRECT INTERNET LTD. 202.143.48.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.143.56.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.161.0.0/19 AS10097 FLOWCOM flow communications level 2 541 kent st sydney nsw 2000 202.161.0.0/21 AS4634 -No Whois Entry- 202.161.8.0/21 AS4634 -No Whois Entry- 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.173.32.0/19 AS9671 APNIC-AS-3-BLOCK Asia Pacific Network Information Centre 203.12.222.64/26 AS4802 WANTREE-AS-AP Wantree Development 203.12.222.192/26 AS4802 WANTREE-AS-AP Wantree Development 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.78.125.0/24 AS17653 PCM-HK-AP Pacific Century Matrix 203.84.192.0/19 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.192.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.208.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.86.2.0/23 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.90.192.0/20 AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 203.135.224.0/19 AS4058 APNIC-4058 Asia Pacific Network Information Centre 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.29.189.0/24 AS11755 WAYMARKCOMM Waymark Internet Services, Inc. 204.52.232.0/24 AS7177 DFWNET DFW Internet Services, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.240.0/21 AS11572 MEDIACOM Mediacom,llc / RidgeNet 204.194.110.0/23 AS10588 ICSNET Intelligent Computer Solutions, Inc 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 205.151.0.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.126.0.0/19 AS5750 FLEXNET-HAWAII FlexNet Inc. 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.191.96.0/19 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.92.0.0/14 AS2551 ICG ICG NetAhead, Inc. 207.145.232.192/26 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.65.232.0/23 AS701 ALTERNET-AS UUNET Technologies, Inc. 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.104.198.0/24 AS6137 SISNA SISNA, Inc. 209.104.199.0/24 AS6137 SISNA SISNA, Inc. 209.104.218.0/24 AS6137 SISNA SISNA, Inc. 209.104.219.0/24 AS6137 SISNA SISNA, Inc. 209.104.252.0/22 AS12030 PACIFIC-ONLINE-PON Pacific Online Services 209.108.0.0/14 AS2551 ICG ICG NetAhead, Inc. 209.151.128.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 209.160.73.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.160.209.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.160.0/19 AS4355 ERMS-EARTHLNK EARTHLINK, INC 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.4.20.0/22 AS10095 -No Whois Entry- 210.4.60.0/24 AS10095 -No Whois Entry- 210.4.61.0/24 AS10095 -No Whois Entry- 211.27.156.0/24 AS9768 PUBNET1-AS KT 211.27.156.192/26 AS9768 PUBNET1-AS KT 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.19.244.192/27 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 216.115.178.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.179.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.182.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.183.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.184.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.189.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.190.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.191.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.153.0.0/17 AS6203 ISDN-NET ISDN-Net Inc. 216.211.177.0/24 AS14473 KNET KNet, Inc. 216.226.108.0/22 AS3602 SPRINT-CA-AS Sprint Canada Inc. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

NOC contact for he.net
by Roy 04 Jul '03

04 Jul '03

I have lost my copy of the contact list for the NOCs. Can someone supply the contact ingo for he.net?

7 10

Re: National Do Not Call Registry has opened
by Matthew Black 03 Jul '03

03 Jul '03

Has anyone noticed an obvious hole in the new DNC Registry? Anyone can start sending delete requests to remove another person's phone number from the list. Since they don't save anything about the request other than the phone number and date (see Privacy Policy; they don't collect e-mail or IP addresses), a devious person could remove your phone number from the list. Simply go to the webpage, enter a phone number and a throw-away address from YAHOO.COM. After receiving the confirmation e-mail, simply reply YES. Why didn't they require delete requests to come only from the phone as opposed to annonymous web requests? matthew black network analyst california state university, long beach

1 0

Clueful comcast routing help needed, possible 69/8 filter issue?
by nanog 03 Jul '03

03 Jul '03

Looking for a Comcast/ATT network contact. I've gone through the published addresses and phone numbers, and noone seems to have a clue. There may be a 69/8 routing filter in place that that affects us in the dc area. thanks bill

1 0

RE: RATE-Limiting and
by Vandy Hamidi 03 Jul '03

03 Jul '03

>From what I'm gathering, it's probably best to mark and police based on an access list similar to From Any to <web server> eq 80, or something to that effect. Maybe something like From <Firewal NAT IP> to Any eq any for internal users and police based on that. I don't think you can police based on individual flows that are defined by an aggregate ACL. So basically you can prevent public site traffic and Internal traffic from affecting each other, but not from affecting itself. An internal high-load user can slow down other users, but can be stopped from affecting web site performance. Scott M, do you think the Microflow policer you referred to can limit traffic based on individual flows within a defined range (acl)? -=Vandy=- -----Original Message----- From: Scott McGrath [mailto:mcgrath@fas.harvard.edu] Sent: Thursday, July 03, 2003 12:53 PM To: Vandy Hamidi Cc: Jack Bates; Andy Dills; prue; nanog(a)merit.edu Subject: Re: RATE-Limiting and Depends on the equipment you have installed. If you are running a 65xx/76xx if you are running mls with full flow masks you can set up a microflow policer which would allow you to mark or drop traffic on a per flow basis Scott C. McGrath On Thu, 3 Jul 2003, Vandy Hamidi wrote: > > Excellent point. It does depend on the traffic type. > Though I don't like to complicated my configs, you can always use CAR (cisco rate limiting) through an ACL to protect against the file transfer from the core servers issue you referred to below. It can make sure a high bandwidth xfer won't suck up all your available B/W. > > Does anyone out there know how to limit B/W based on Flow or individual sessions? Or even just source (where source is random). For example, a CAR where each IP source gets no more than X% of B/W (still allowing bursts if bandwidth is available). I think some QOS tagging and queuing would have to be involved. > > -=Vandy=- > > -----Original Message----- > From: Jack Bates [mailto:jbates@brightok.net] > Sent: Thursday, July 03, 2003 4:43 AM > To: Andy Dills > Cc: Vandy Hamidi; prue; nanog(a)merit.edu > Subject: Re: Newbie network upgrade question, apologies in advance to > NANOG > > > Andy Dills wrote: > > > > Yes, but the original poster was dealing with DS3s connected to different > > NAPs, which is why the packet out-of-order issue can be significant. > > > > I'd say that a more significant issue is customer throughput. The nice > aspect of per conn is that it not only tends to keep a decent load > balance, it also limits bandwidth hogs from saturating all circuits. > This of course depends on your desired result. An example in my case is > my helpdesk. They are off two t1's with dsl and dialup customers. I'd > prefer them not to tank both t1's when transfering files to and from the > core servers. > > -Jack >

1 0