- Test - lists.nanog.org

RE: Northpoint is toast
by Doane, Andrew 23 Mar '01

23 Mar '01

ATT has picked up the assets from the US Bankruptcy Court. http://www.att.com/press/item/0,1354,3726,00.html -Andrew -----Original Message----- From: Gary E. Miller [mailto:gem@rellim.com] Sent: Thursday, March 22, 2001 8:12 PM To: nanog(a)merit.edu Subject: Northpoint is toast Yo All! This just in from Northpoint: "[...] As a result, the cessation of services to our customers and the complete shut down of our network is imminent. [...] " Details at http://www.northpoint.net Get ready to man the phones. RGDS GARY --------------------------------------------------------------------------- Gary E. Miller Rellim 20340 Empire Ave, Suite E-3, Bend, OR 97701 gem(a)rellim.com Tel:+1(541)382-8588 Fax: +1(541)382-8676

2 1

Northpoint is toast
by Gary E. Miller 23 Mar '01

23 Mar '01

Yo All! This just in from Northpoint: "[...] As a result, the cessation of services to our customers and the complete shut down of our network is imminent. [...] " Details at http://www.northpoint.net Get ready to man the phones. RGDS GARY --------------------------------------------------------------------------- Gary E. Miller Rellim 20340 Empire Ave, Suite E-3, Bend, OR 97701 gem(a)rellim.com Tel:+1(541)382-8588 Fax: +1(541)382-8676

1 0

Fwd: [Interchange-announce] Security advisory
by Matt Clauson 23 Mar '01

23 Mar '01

Apologies if this is off-topic -- however, I know Interchange is a popular vending system, and thought it would be in the best interests of anyone here to proactively fix their systems, lest customer data get leaked, ala Egghead.com. --mec ---------- Forwarded Message ---------- Subject: [Interchange-announce] Security advisory Date: Thu, 22 Mar 2001 19:20:21 -0600 (CST) From: Jon Jensen <jon(a)akopia.com> To: interchange-announce(a)lists.akopia.com, interchange-users(a)lists.akopia.com A serious security vulnerability has been found in the default installation of the Interchange demo stores 'barry', 'basic', and 'construct' distributed in Interchange versions 4.5.3 through 4.6.3. Using a group login that had no password set by default, it is possible to log in to the back-end administration area and view and alter products, orders, and customer information. If you set up a store based on one of those demos and did not remove all default user and group accounts, you should immediately make the following change: In all installed catalog directories, as well as the catalog templates in the Interchange software directory, edit the products/access.asc file, changing this line: :backup<tab><tab>Backup to look like this: :backup<tab>*<tab>Backup As with all other Interchange database source files, the placement of the tabs is significant. You could also simply delete that line altogether. Make sure to restart Interchange so your change takes effect. This problem has been fixed in Interchange 4.6.4, to be released shortly. As well as blocking password access on that group, there are now also tighter checks on login attempts. Group logins, user names with invalid characters, and blank passwords will all be rejected without consulting the access database. Many thanks to Jud Harris <jud-lists(a)copernica.com> for finding and reporting this problem on the interchange-users list: http://lists.akopia.com/pipermail/interchange-users/2001-March/005939.html Jon _______________________________________________ Interchange-announce mailing list Interchange-announce(a)lists.akopia.com http://lists.akopia.com/mailman/listinfo/interchange-announce -------------------------------------------------------

1 0

Re: Clear Channel on a T1
by Ron Buchalski 22 Mar '01

22 Mar '01

>From: "Douglas A. Dever" <dever(a)hq.oh.verio.net> >Reply-To: dever(a)verio.net >To: CARL.P.HIRSCH(a)sargentlundy.com >CC: nanog(a)merit.edu >Subject: Re: Clear Channel on a T1 >Date: Thu, 22 Mar 2001 14:56:46 -0500 (EST) > > > > >I'm quite suprised they'd offer you a data circuit that wasn't b8zs. I >think they're just using this as a way to get an extra couple of bucks per >month per circuit. Without falling into a long discorse about timing on a >DS1, the bottom line is that you get ~1.54Mbit/sec because the data stream >is manipulated to maintain timing. A non-clear channel data circuit would >only use 7 bits for data, with the 8th bit always being a 1 to maintain >timing. Forcing the 8th bit to a '1' isn't done to maintain timing. The 8th bit was forced to a '1' to maintain ones density on the T1 line. Early T1 specs did not allow more than 15 consecutive zeros to be transmitted because the T1 repeaters along the line rely on periodic pulses to keep their oscillators active. It was not a problem for voice circuits, since voice DS0s would contain a '1' for the signaling bit, but there is a potential for data DS0s to contain a long string of zeros, and several contiguous data DS0s could result in a long sequence of zeros (more than 15). In fact, older CSUs would inject a '1' if more than 15 consecutive zeros were sent, thus corrupting the bit stream. For a voice DS0, it was probably not detected. For a data DS0, it would result in a corrupted data frame. Of course, in the "modern" world, with B8ZS line coding insuring that there will always be line transitions (to keep the T1 repeaters happy), a constant stream of zeros can be sent on the data channels, and the line coding will inject ones (and remove them at the other end) so forcing the 8th bit to a one is no longer needed. -rb _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com

2 1

Re: Early warning system
by Sean Donelan 22 Mar '01

22 Mar '01

I should know better to ask a bunch of engineers if something is a good idea, they immediately start problem solving instead of considering if it should be done at all. I think the power industry is similar to most other industries when it comes to proactive notification of problems. ISPs are bad at it, airlines are bad at it, and the power industry is bad at it. The National Weather Service is the best, and they are correct only 50% of the time :-) Some power companies notify law enforcement in advance (a good idea if you are really concerned about criminal activity), others don't. Some notify large, important customers, others don't. Some notify the media, others don't. Some notify end-users, others don't. The City of Palo Alto has a web page, the City of Almeda phones end-users. PG&E pages large customers. Before doing anything, the first question which must be answered is If you had advanced notification of (5 seconds, 60 seconds, 5 minutes, etc) would it make a practical difference in what you do? If the answer is yes, how much would it be worth to you, for how much advance notice?

2 1

Clear Channel on a T1
by CARL.P.HIRSCH＠sargentlundy.com 22 Mar '01

22 Mar '01

Can anybody give me some info on what exactly "Clear Channel" means in relation to a DS1 circut? My gut tells me that it's only relevant with voice Ts... thanks, -carl hirsch network analyst sargent & lundy llc

3 2

Early warning system
by Sean Donelan 22 Mar '01

22 Mar '01

During the rolling blackouts on Monday and Tuesday, one of the complaints was the lack of notice before the lights went out. Would it be useful if you received advanced notice before a rolling blackout? Or would you do nothing different, and wait for it? Cal-ISO, PG&E, etc have said they don't give warnings because they don't have a way of contacting lots of people at the same time. The net has a system for relaying messages to thousands of systems in a few seconds. People tweaked NNTP to forward messages almost instantly, across multiple links. NNTP is a tried, and well-known protocol. Multicast and other multi-user messaging systems also exist. If we got early warning from PG&E, Cal-ISO, etc is it worth the effort to provide advance notification to NOCs? Or do most providers not care?

8 7

using ARIN assigned address in Asia
by Kenji Anzai 22 Mar '01

22 Mar '01

Hi, I have a question which was originally I was asked by my client. Our client has IP address space that was originally assigned from ARIN. Their address space is a big enough to separate to /20 each. I am not sure about internaltionl IP address assignment. They would like to use front half (/20) in North America. And, they would like to use the other half of the address space (/20) in Asia. Is there any problems doing this? thanks, Kenji

8 9

EP.net Issues
by Joe Wood 22 Mar '01

22 Mar '01

Hello (Hopefully to someone at ISI). I have been having issues reaching EP.net for a while; Your border serving your BBNcircuit is reporting address unreachable for 198.32.4.0/24. Since I cannot see your annoucements through PBI, I have no other path into ISI. Are you currently having issues with your IGP? Or is there a reason why BBN customers cannot reach EP.net? Thanks Ahead for Fixing this, Joe --- Joe Wood Flying Crocodile, Inc. Senior Network Engineer Network Operations <joew(a)flyingcroc.net> 2001 Sixth Avenue, Suite 3302 206.269.0190 Seattle WA 98121

4 8

Network Monitoring in a Firewall Complex
by Tim Lund 22 Mar '01

22 Mar '01

All, I have been tasked with architecthing a network monitoring/backup solution for systems which reside within a firewall complex. The firewall uses a compartmentalized approach by placing systems which perform similar functions in the same protective zone. I have some ideas on how to accomplish this. I am leaning toward placing an additional interface into all of the systems and creating a management network. The management network would need to maintian the compartmentalization approach so that a security failure on one system would not allow the managment network to be used as a path of attack to other systems. Theoretcially I believe I could use a multilayer switch to provide to control traffic between the interfaces on the management network whil allowing for the management/backup servers to route to each target host. The managment network would also allow backups and other management activities without impacting the bandwidth of the production network. I would prefer not to design this in a vacuum and was wondering how others have done this or any pitfalls if anyone has tried the management network. The solution needs to be scalable and manageable. As this falls within the realm of network security I am not sure how forthcoming people will feel but I would appreciate any and all assistance that you might be willing to provide.

2 1