- Test - lists.nanog.org

Re: ratios
by PETER JANSEN 07 May '02

07 May '02

Scott: Traffic ratios are one of the many parameters that ensure equality and a mutual benefit between networks in a settlement free peering relationship. Have a look at our peering policy at www.cw.com/peering. It will provide you with some information on peering with large networks. Regards Peter Jansen Global Peering Cable & Wireless Date: Tue, 07 May 2002 13:30 -0400 (EDT) From: Scott Granados <scott(a)graphidelix.net> To: nanog(a)merit.edu Sender: owner-nanog(a)merit.edu Delivered-to: nanog-outgoing(a)trapdoor.merit.edu Delivered-to: nanog(a)trapdoor.merit.edu Delivered-to: nanog(a)merit.edu Subject: ratios I'm not overly familiar with this but I wondered if someone could detail for me the basics of using ratios to determine elegibility to peer? I have heard that some carrers especially the largest require a specific ratio is this in fact true and is the logic as simple as just insuring equal use of the peer? Thanks Scott

3 2

no-ip.com spam
by Sameer R. Manek 07 May '02

07 May '02

The subjects of spam by no-ip.com has gone beyond operational issues, and has moved to a debate. If anyone has any view points they feel have not been sufficiently addressed, please respond privately via email. ------------------------------------------------------------------------- Sameer R. Manek Email: manek(a)ghur.net "What one has not experienced, one will never understand in print." --Isadora Duncan -------------------------------------------------------------------------

1 0

Effective ways to deal with DDoS attacks?
by Pete Kruckenberg 07 May '02

07 May '02

There's been plenty of discussion about DDoS attacks, and my IDS system is darn good at identifying them. But what are effective methods for large service-provider networks (ie ones where a firewall at the front would not be possible) to deal with DDoS attacks? Current method of updating ACLs with the source and/or destination are slow and error-prone and hard to maintain (especially when the target of the attack is a site that users would like to access). A rather extensive survey of DDoS papers has not resulted in much on this topic. What processes and/or tools are large networks using to identify and limit the impact of DDoS attacks? Thanks. Pete.

20 56

RE: anybody else been spammed by "no-ip.com" yet?
by Randy Neals 06 May '02

06 May '02

An example of challenge/response email authentication. http://www.myprivacy.ca/ -R -----Original Message----- From: Ralph Doncaster [mailto:ralph@istop.com] Sent: May 6, 2002 7:32 PM To: Scott Francis Cc: Forrest W. Christian; measl(a)mfn.org; Eric A. Hall; nanog(a)nanog.org Subject: Re: anybody else been spammed by "no-ip.com" yet? On Mon, 6 May 2002, Scott Francis wrote: > On Sat, May 04, 2002 at 06:01:49PM -0600, forrestc(a)imach.com said: > [snip] > > Passing laws and putting on filters don't work. Depending on each mail > > server admin to do the right thing doesn't work. We need to find > > something else that will. > > I'm beginning to think that fighting the spam itself is futile. What we > should perhaps be focusing on is removing access to whatever is being > spamvertised (frequently a get-rich-quick website, porn site, diet site, etc. > - but generally a website somewhere, that can have the plug pulled). Actually, my analysis of spam seems to indicate authentication of remote SMTP servers through a process similar to joining this list would remove 99+% of SPAM. i.e. the first email from a particular remote server that is received, requires the sender to take some action (respond with a password, click on a URL, etc.) before the mail gets through. One of these days I hope to write the procmail rules to do it (if I don't find someone that has done it already) -Ralph

1 0

Semi OT: Co-Location in Virginia/DC/Maryland
by Christopher E. Brown 06 May '02

06 May '02

Hoping some of you can send me suggestions on Datacenter/CoLo facilities in the Virginia/DC/Maryland area that can support 20 Racks Multiple providers capable of a minimum of DS3 level service (OC3s available from multiple providers preferred) Stable/Secure/Sane to use facility Usable site supplied UPS, or support for customer provided Symmetra or similar. 24/7 access Any info or leads would be great, I am not familiar with the facilities situation on the East Coast. Thanks Chris -- I route, therefore you are.

2 1

NordNog meeting 13-14 May 2002
by Kurt Erik Lindqvist 06 May '02

06 May '02

(Appologies if considered off-topic) Registration is now open for the first Nordic Operator Forum meeting in Stockholm, 13-14th of May 2002 at the Roayal Institute of Technology. The event will be free of charge. Please visit http://www.nordnog.org for information on registering and the agenda.

1 0

Williams Opinions?
by Owens, Shane (EPIK.ORL) 06 May '02

06 May '02

Does anyone have any current opinions on Williams IP service and any expected changes with the Chapter 11? Shane

3 2

Re: Williams Opinions?
by Frank Coluccio 06 May '02

06 May '02

> Does anyone have any current opinions on Williams IP service and any > expected changes with the Chapter 11? > > Shane Williams Communications Group Inc. (The "Holding Company") has filed, but this, *ostensibly*, should not affect the ongoing operations of their operating subsidiary, Williams Communications, LLC. >From the Reuters news release on the subject: -- Williams Communications Files for Chapter 11 TULSA, Okla. (Reuters) - Williams Communications Group Inc. (OTC BB:WCGR.OB - news) said on Monday it has filed for Chapter 11 bankruptcy protection in a bid to restructure and cut its debt by about $6 billion. The company said it filed for bankruptcy protection in the U.S. Bankruptcy Court for the Southern District of New York and expects to file a reorganization plan in the ``near future.'' Its operating subsidiary, Williams Communications, LLC, is not expected to be involved in the Chapter 11 reorganization process, the statement said. The company's Chapter 11 filing comes as the battered telecommunications sector continues to takes a hammering from heavy competition, a glut of fiber-optic networks and bankruptcy filings by other competitors. -- Caveat emptor, FAC.

1 0

portscan?
by blitz 06 May '02

06 May '02

I know theres knowledgable opinion on this list on this topic. Besides Gibson's (www.grc.com) port scan and www.DSLreports.com port scanning tools, is there any others you folks have found that are reliable and don't breed spam? TIA Marc

2 1

Re: anybody else been spammed by "no-ip.com" yet?
by rs＠seastrom.com 06 May '02

06 May '02

Scott Granados <scott(a)graphidelix.net> writes: > No I think your message illustrates things pretty well. I guess the > fundimental differenc here is not only does it cost usually very little > to receive these messages it costs even less infact dramatically to send > spam. It seems there is no real reason for the spammer to be concerned > with whether the mail is properly targeted or not so a full on flood is > possible and the leads generated by this flood percentage wise have to > be many factors less than the percentage of success in snailmail. It does not cost "very little" to recieve spam. At my real job (ie, not seastrom.com) we're running a very nice (but expensive) commercial product to filter this stuff, and in a given time quantum during which we processed 1.9 million messages, spam and virii accounted for about 600k (32% was the last number I saw from our stats script). It's reasonable to assume, since some unwanted messages slip through, that we're over a third of all email being UCE. So we have a choice: pay for the (very nice but expensive) commercial product, or add forty percent to our mail spool disk farm and extra cpus and ram in the mail server farm to deal with the additional influx. In the numbers we're talking about, bandwidth costs become measurable too. Spam is theft, plain and simple. ---Rob

15 20