- Test - lists.nanog.org

Re: Internet connection secure from surveilance?
by bdragon＠gweep.net 10 Sep '02

10 Sep '02

> Here is my reply to Joe > > Your solution is good. In general, anyone worried about this kind of invasion of privacy > should arrange to run their own root servers. The more the merrier. This is not neccessarily > about having multiple roots with colliding TLDs, but about security from surveillance. A better solution would be to turn off recursion, this _may_ lead to partitioning away from the rest of the internet, just as running a local root may lead to partitioning away. The benefit, of course, is that you don't worry about someone tapping into any sub-domain dns server. Slightly better than that is to disconnect from the network entirely. This will help prevent someone from eavesdropping on other protocols as well. Again, this may lead to partitioning away from the rest of the network.

1 0

Re: How do you stop outgoing spam?
by sal.sabella＠hushmail.com 10 Sep '02

10 Sep '02

Susan, why do your rules not apply to Jane? I realize she's a larger-than-life figure here, but enough is enough. I won my bet with my boss that she would violate AUP at least five (5) times and not get removed from the list. Please read the NANOG FAQ at http://www.nanog.org/aup.html. If there are further hypocrisies on your part, I'll have to ask Brad Knowles for an AOL account to post from. Sal >Please do not post personal messages on the NANOG mailing list, > which >focuses on Internet engineering and operations issues. In my la >st message >to you I pointed to our AUP: > > http://www.nanog.org/aup.html > >If there are further AUP violations on your part, we'll need to > remove >your posting privileges from the list. > >Susan Harris, Ph.D. >Merit Network/Univ. of Mich. > > >On Tue, 10 Sep 2002 sal.sabella(a)hushmail.com wrote: > >> >> >> "Marshall Eubanks" wrote: >> > When I am at a cafe I use a web based encrypted email progr >am, and >> > if I email a large attachment (say a pdf file), then it goe >s http >> > outbound. >> >> When I am at a cafe, I eat, drink, and sometimes converse wit >h others. >> >> > Again, when I go to a cafe in another city, I am generally >there >> > to get some work done >> >> Again, when I go to a cafe in another city, I am generally th >ere to eat, drink, converse, and soak in the local sights. >> >> I might be in Burbank next week on business. We should meet >up then. Think you could get me tickets and a VIP backstage tour at the Tonight Show? I'd like to meet with NBC execs and weigh the pros and cons of multicasting your band's performance in PIM Dense vs. Sparse mode. You're a great musician BTW. Tell Jay I said hi. >> >> Sal Sabella >> >> >> >> >> Get your free encrypted email at https://www.hushmail.com >> > > > Get your free encrypted email at https://www.hushmail.com

1 0

Re: How do you stop outgoing spam?
by sal.sabella＠hushmail.com 10 Sep '02

10 Sep '02

"Marshall Eubanks" wrote: > When I am at a cafe I use a web based encrypted email program, and > if I email a large attachment (say a pdf file), then it goes http > outbound. When I am at a cafe, I eat, drink, and sometimes converse with others. > Again, when I go to a cafe in another city, I am generally there > to get some work done Again, when I go to a cafe in another city, I am generally there to eat, drink, converse, and soak in the local sights. I might be in Burbank next week on business. We should meet up then. Think you could get me tickets and a VIP backstage tour at the Tonight Show? I'd like to meet with NBC execs and weigh the pros and cons of multicasting your band's performance in PIM Dense vs. Sparse mode. You're a great musician BTW. Tell Jay I said hi. Sal Sabella Get your free encrypted email at https://www.hushmail.com

1 0

Deja vu all over again
by sal.sabella＠hushmail.com 10 Sep '02

10 Sep '02

"Pawlukiewicz Jane" wrote: > Quick Question, how much memory does the bgp tables actually take. I'm > estimating 32 mb in my plan, but I'm worried that's not enough. Jane, nothing with you is ever "quick". Rather than just searching google to find the answers to your silly questions, you have to waste all our time. I don't care what bet you have going with your boss, or how many full views you're attempting to cram into that 700 series ISDN router. Repeat after me, Jane: SEARCH FIRST, ASK QUESTIONS LATER. Sal Sabella Get your free encrypted email at https://www.hushmail.com

1 0

VU#210321
by CERT(R) Coordination Center 10 Sep '02

10 Sep '02

-----BEGIN PGP SIGNED MESSAGE----- Hello, The CERT/CC has recently seen discussions in a public forum detailing potential vulnerabilities in several TCP/IP implementations (Linux, OpenBSD, and FreeBSD). We are particularly concerned about these types of vulnerabilities because they have the potential to be exploited even if the target machine has no open ports. The messages can be found here: http://lists.netsys.com/pipermail/full-disclosure/2002-September/001667.html http://lists.netsys.com/pipermail/full-disclosure/2002-September/001668.html http://lists.netsys.com/pipermail/full-disclosure/2002-September/001664.html http://lists.netsys.com/pipermail/full-disclosure/2002-September/001643.html Note that one individual claims two exploits exist in the underground. At this point in time, we do not have any more information, nor have we been able to confirm the existence of these vulnerabilities. We would appreciate any feedback or insight you may have. We will continue to keep an eye out for further discussions regarding this topic. FYI, Ian Ian A. Finlay CERT (R) Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA USA 15213-3890 -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use Charset: noconv iQCVAwUBPX3/VqCVPMXQI2HJAQFEqQQAr54e9c5SGgrIfmK5+EWqSOdvySKRtjwa 6dE4Z4DcoyHS57W5BEwW2OSXSGwrBL+mzippfTEnwAVT/otLYAADsnlPSQioRYNi qHVh8yRXgh3kBgx3cMdhe3NC6zaSWffOsc/EvhkCDo2xa8FQItOqE5MjOeASjt1L st5qq4mgM+E= =kHt1 -----END PGP SIGNATURE-----

2 2

Talked about this before
by Pawlukiewicz Jane 10 Sep '02

10 Sep '02

Hi, Quick Question, how much memory does the bgp tables actually take. I'm estimating 32 mb in my plan, but I'm worried that's not enough. Thanks, Jane

7 7

What have we learned in 3 decades? Not much.
by Valdis.Kletnieks＠vt.edu 09 Sep '02

09 Sep '02

The guys who did the Multics penetration tests for the Air Force have re-released it, with commentary on what 30 years has changed (and more importantly, not changed). Most depressing quote: Thus, systems that are weaker than Multics are consid- ered for use in environments in excess of what even Mul- tics could deliver without restructuring around a security kernel. There really seem to be only four possible con- clusions from this: either (1) today's systems are really much more secure than we claim; (2) today's potential attackers are much less capable or motivated; (3) the in- formation being processed is much less valuable; or (4) people are unwilling or unable to recognize the compel- ling need to employ much better technical solutions. http://domino.watson.ibm.com/library/cyberdig.nsf/papers/FDEFBEBC9DD3E35485…

1 0

IP address fee??
by Owens, Shane (EPIK.ORL) 09 Sep '02

09 Sep '02

Quick question, does there exist a practice of charging customer for IP address blocks used? My theory is that the first Class C is included with the service, but I'm wondering what happens when the customer wants 2,3,4 or more? Shane

31 66

Network Attacks
by Manolo Hernandez 09 Sep '02

09 Sep '02

How are you all handling network attacks from say China? We had attack today from China Aerospace. RIPE said it was unallocated, ARIN said it was APNIC, APNIC has no valid info on them. What can one do? -- Manolo Hernandez - Network Administrator "The only source of knowledge is experience." - A. Einstein

3 2

Praise to XO's Security/Abuse
by John M. Brown 09 Sep '02

09 Sep '02

Jason at XO's security/abuse staff. Very helpful chap Solved a problem with a downstream client of theirs that was pounding a network I help out.... Yes, I know off topic, but more on topic as this list SHOULD be about people HELPING people do good in these difficult times. YMMV, but I'm happy. Have a great day John Brown Chagres Technologies, Inc

4 3