- Test - lists.nanog.org

Re: Blocking Internet Gaming
by Scott Gifford 07 Jan '02

07 Jan '02

"James" <james(a)james-web.net> writes: > What kind of games specifically? > > Like online Java games (Bejeweled)? Or games like Quake, Unreal, Tribes > etc? > > The latter is much easier, just block all traffic to/from the default > ports which use them. A quick google would yield what they use. I'll > give you a quick hint and say Quake3 is 29760-5 or so and Tribes1/2 is > 28000-28005 or so. Doesn't that cause trouble with occasionally blocking ephemeral ports? If you're not allowing incoming connections of any kind (including non-PASV FTP) it shouldn't matter, but blocking ports above 1024 always makes me nervous... ----ScottG.

5 4

Re: Blocking Internet Gaming
by Spencer.Wood＠dot.state.oh.us 07 Jan '02

07 Jan '02

>From our experience, the best product we have found is Websense. It works with Different Firewalls along with Proxy Servers. It's not 100% full proof, but it does a pretty good job.... The best feature is being able to select different types or categories of web sites, and when people can use them. Spencer ************************************************************ Spencer Wood, Network Manager Ohio Department Of Transportation 1320 Arthur E. Adams Drive Columbus, Ohio 43221 E-Mail: Spencer.Wood(a)dot.state.oh.us Phone: 614.387.0710/Fax: 815.361.0714/Pager: 866.591.9954 ************************************************************* wgray(a)wwns.net (Walter Gray) Sent by: owner-nanog(a)merit.edu 01/06/2002 08:03 PM To: <nanog(a)merit.edu> cc: Subject: Blocking Internet Gaming Does anybody know of any good software or way to restrict Internet gaming on a corporate Network?

2 1

Road Runner
by Andy Brezinsky 06 Jan '02

06 Jan '02

Hello, Does anyone have a contact for the NOC or a dns admin of Road Runner (Wisconsin)? One of their dns servers are reporting bad data. Regards, ~Andy Brezinsky ByteHosting Internet Services

1 0

ISP stats?
by bmanning＠vacation.karoshi.com 05 Jan '02

05 Jan '02

This isn't quite ISP specific but might be useful... http://www.ep.net/stats.html --bill

2 2

MetroIX Beta Testers
by Jeffrey Meltzer 05 Jan '02

05 Jan '02

Hi, We're looking for a few more ISP's to turn up some "test" peering at MetroIX in NYC. If you're currently at 60 Hudson or 25 Broadway (due to Enron's demise - where the 111 8th POP currently is, I don't want to turn anyone up there until we get the switch moved), and preferably do not currently peer at NYIIX, give me a shout off list. More info is available at http://www.metroix.net/ Jeff

1 0

HS protocol analyzer
by Mike Duckett 05 Jan '02

05 Jan '02

Looking for HS protocol analyzers options that can, minimally, filter real time traffic (e.g., ports, applications, sessions/conversations, byte/bit offsets) at rates up to and exceeding OC-3/12 and GigE. Being limited to a few seconds makes troubleshooting or analysis very difficult if not impossible. Our routers are able to keep up with a decent amount of "high touch" and still maintain the pace of traffic flow by employing accelerators (e.g., ASICs). Great.. Now, how do we troubleshoot problems?

1 0

The Cidr Report
by CIDR Report 05 Jan '02

05 Jan '02

This is an auto-generated mail on Fri Jan 4 23:00:01 PST 2002 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. NEW: Check http://www.employees.org/~tbates/cidr-report-region.html for the regional version of this report. NEW: Check http://www.employees.org/~tbates/autnums.html for a complete list of autonomous system number to name mappings as used by the CIDR-Report. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to GX Networks for giving me access to their routing tables once a day. Please send any comments about this report directly to CIDR Report <cidr-report(a)cisco.com>. ------------------------------------------------------------------------------ CIDR REPORT for 04Jan02 0) General Status Table History ------------- Date Prefixes 281201 104604 291201 104688 301201 104724 311201 104773 010102 104589 020102 104745 030102 104663 040102 104733 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 9125 Number of ASes announcing only one prefix: 4154 (4154 cidr, 0 classful) Largest number of cidr routes: 759 announced by AS701 Largest number of classful routes: 0 announced by 1) Gains by aggregating at the origin AS level --- 04Jan02 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS1221 1175 901 274 23.3% Telstra Pty Ltd AS701 1363 1136 227 16.7% UUNET Technologies, Inc. AS4151 308 172 136 44.2% USDA AS577 318 194 124 39.0% Bell Advanced Communications Inc. AS16473 198 77 121 61.1% Bell South AS7018 811 695 116 14.3% AT&T AS6595 171 61 110 64.3% DoD Education Activity Network As AS705 283 183 100 35.3% UUNET Technologies, Inc. AS17557 174 84 90 51.7% Pakistan Telecom AS7046 309 223 86 27.8% UUNET Technologies, Inc. AS19632 93 10 83 89.2% Metropolis Intercom S.A. AS8010 120 38 82 68.3% PublicNet Communications, Inc. AS4755 235 153 82 34.9% Videsh Sanchar Nigam Ltd. Autonom AS2048 185 105 80 43.2% State of Louisiana AS12302 108 32 76 70.4% MobiFon S.A. AS1239 466 392 74 15.9% Sprint AS724 231 166 65 28.1% DLA Systems Automation Center AS703 282 220 62 22.0% UUNET Technologies, Inc. AS3464 160 98 62 38.8% Alabama SuperComputer Network AS4200 113 56 57 50.4% Apex Global Information Services, AS16758 63 6 57 90.5% IKON Office Solutions AS3908 319 263 56 17.6% Supernet, Inc. AS13999 70 14 56 80.0% Mega Cable S.A. de C.V. AS6471 122 67 55 45.1% ENTEL CHILE S.A. AS19834 63 8 55 87.3% NetForce, Inc. AS4323 367 313 54 14.7% Time Warner Communications, Inc. AS1 509 455 54 10.6% BBN Planet AS2149 323 270 53 16.4% Performance Systems, Inc. AS209 297 246 51 17.2% Qwest AS7303 99 49 50 50.5% Telecom Argentina Stet-France Tel For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

teleglobe broken?
by Paul Nguyen 05 Jan '02

05 Jan '02

anyone able to use any of the routes they get from teleglobe right now? like at paix? -p

1 0

RE: teleglobe broken?
by Martin, Steve 04 Jan '02

04 Jan '02

Not at PAIX...looks like BGP is broken: Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 207.45.196.77 4 6453 2355400 267091 0 0 0 00:12:44 Active But traffic did shift to AADS. Regards, Steve Steve Martin Sr. Manager; Network Engineering and Ops Conxion Corporation 4201 Burton Drive Santa Clara, CA 95054 DID: 408.566.8565 FAX: 408.988.0003 Cell: 408.309.7109 Pager: page.steve(a)conxion.net -----Original Message----- From: Paul Nguyen [mailto:paul@gotrice.com] Sent: Friday, January 04, 2002 4:16 PM To: nanog(a)merit.edu Subject: teleglobe broken? anyone able to use any of the routes they get from teleglobe right now? like at paix? -p

1 0

RE: FATPipe vs. BGP
by Lee Watterworth 04 Jan '02

04 Jan '02

F5 announced a new product which will apparently accomplish the same thing, although there are no technical documents available for it yet... http://secure.f5.com/news/releases/release121201.html <http://secure.f5.com/news/releases/release121201.html> -Lee -----Original Message----- From: James Smith [mailto:jsmith@PRESIDIO.com] Sent: January 3, 2002 5:43 PM To: nanog(a)merit.edu Subject: FATPipe vs. BGP Anyone deploy FATPipe boxes yet? Just got through a preso about it, they bill it as a highly survivable VPN solution, but also as a way of getting multiple inbound/outbound/backup pipes to work from multiple providers without having to use BGP. They actually use DNS with a short TTL (under 10 seconds) to do the failover on inbound. With failover related to TTL, I can guess which way the users want the knob to turn... My concern is the need for the box to be your primary (authoritative) DNS in this role, with no secondary DNS support (available in the 2.0 release, I was told). No need to tell me how bad of an idea this is, what I'm looking for is actual "by golly, we did it, and this is what we ran into" stories. Especially from multi-site, multi-sub-domain sites. I bet it is a pain to keep all those primary DNS servers in sync... http:\\www.fatpipeinc.com <http:\\www.fatpipeinc.com> James H. Smith II NNCDS NNCSE Systems Engineer The Presidio Corporation <include> fancy.sig

1 0