- Test - lists.nanog.org

RE: Large-datagram hop-by-hop delivery mechanism
by Mohler, Jeff 04 Aug '99

04 Aug '99

>I am seeking a mechanism for reliable delivery of large blobs through a >network of occasionally-connected hosts that can forward the blobs using >available transport protocols. > >I can't find it, though. Most of the networking materials I can find >deal more with immediate-transmission networks, where the destination >host is reachable at the instant that the source host transmits. (This >isn't a catenet.) > >If anyone knows of such a common or standardized system, please drop me >a note. sounds to me like email, where the sending host tries again and again over a defined period of time to delivery data. no? --- Or (God help us) UUCP if scheduling is a factor.

1 0

SYN spoofing
by bandregg＠redhat.com 04 Aug '99

04 Aug '99

This past weekend I was contacted by several groups ranging from NASA to a small service provider in the Bay area regarding one of our hosts port scanning their networks using RESET packets. In each of these cases the machine seemed to be scanning random addresses in their networks on random, non-reserved (+1024), ports. After investigating these claims it appears as if someone is sending SYN packets to this machine (which serves ftp, which explains why the ports are open through the cisco) with a spoofed source address causing the machine to send RESET packets back to the spoofed host and setting off their firewalls. I cannot seem to get past level-1 or level-2 support from my upstream, GTE/BBN to find out where these packets are coming from to track this down. So, I come to you... Two currently on-going attacks are using the spoofed source addresses from the networks 134.50.x.x and 130.221.x.x. If you see activity from these networks inside of your borders, but the networks are not inside of your borders please contact me off of the list. Oh yeah, and filter this stuff out people, this is unacceptible. -- Bryan C. Andregg * <bandregg(a)redhat.com> * Red Hat, Inc. 1024/625FA2C5 F5 F3 DC 2E 8E AF 26 B0 2C 31 78 C2 6C FB 02 77 1024/0x46E7A8A2 46EB 61B1 71BD 2960 723C 38B6 21E4 23CC 46E7 A8A2

18 26

Re: more internic fun, and an idea
by Dan Bustillos - Datalink Computer Services 04 Aug '99

04 Aug '99

Hey all, I started a domain change on 6-28-99. It took 3 more tries and a call on 7-28-99 to get anything done. Their excuse: Uh. We have had a backlog and it is taking extra time to process. Did they forget to change the excuse of the day calander or something. I can understand 2 weeks at the most to process these simple changes. But, they seem to take a lot longer when ever they feel like it. Also, if you ever decide to call them call 703-742-0400 . This is the Admin office. Just ask for customer service and you get right through. I have never had a busy signal or had to wait more than 3 minutes. Thank you, Dan Bustillos Datalink Computer Services (530) 897-6400 (888) 328-4638 ******************* "Error, No Keyboard - Press F1 to continue" Only on a PC would you see this error. Never on my mac.

1 0

All in One....
by Joyce 04 Aug '99

04 Aug '99

FREE E-COMMERCE IF YOU HOST WITH US!! Tired of expensive e-commerce software, set up fees and leasing contracts? Here is the deal: You host your site with us and you get free E-Commerce, including a merchant account, real-time software and shopping cart. If you wish to stay with your current hosting company you still can get the same deal. Check it out first and make an informed decision. You have never seen a package deal like this before: - Your own merchant account with one of the lowest rates in the industry - Real-Time software to accept VISA, MASTERCARD, AMEX, DISCOVER/NOVUS, DINERSCLUB/CARTE BLANCHE, JCB - Direct deposit within 48 hrs into your checking account - Shopping Cart store front software with an easy to use web based interface - Real-Time Credit Card Processing software - Virtual terminal for phone/fax/mail orders - E-mail receipts - Recurring billing feature with batch uploads - Automatic batch closing - Address verification system (AVS) - Back office to 24/7 access account history - 50 MB (megabytes) of disk space - 1 GB (gigabyte) of data transfer per month - 15 POP3 E-mail accounts - Unlimited alias E-mail addresses - Live web site statistics - Unlimited FTP uploads - Anonymous FTP - Telnet access (UNIX) - CGI directory for your own scripts - Site control panel - Installation included - Tech support included All this and more when you sign up for our E-Commerce Hosting plan for ONLY $69.95 per month and a one time set up fee of $199.00. That 's right. NO ADDITIONAL SET UP FEES or application fees for your merchant account real-time software or shopping cart storefront. A one-stop E-Commerce solution. And the best is: NO LEASING, NO LONG TERM COMMITMENT. YOU CAN CANCEL ANYTIME. Request our free E-mail information by replying to: mailto:bmalin93@yahoo.com?subject=INFO_PLEASE *************************************************** Remove at mailto:harr751@hotbot.com?subject=remove ***************************************************

1 0

Cable & Wireless Outage
by Jeffrey Meltzer 03 Aug '99

03 Aug '99

Just found out that CWI had 9 DS3's down for about 1/2 hour around 3:30pm EST today. The circuts connected NYC, Chicago, Philadelphia and Washington DC Jeffrey Meltzer Sr. Network Administrator VillageNet, Inc. http://www.villagenet.com

1 0

Re: core router down
by Sean Donelan 03 Aug '99

03 Aug '99

linneweh(a)concentric.NET (Henry R. Linneweh) writes: > >globalcenter core router takes a dump 0730am PDT Yeah, FGC has had a run of these. The Associated Press did a story a few weeks ago about it. I haven't been posting about them because FGC has been pretty good about giving out information about the problem when I call them, even when I didn't identify myself. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

2 1

core router down
by Henry R. Linneweh 03 Aug '99

03 Aug '99

globalcenter core router takes a dump 0730am PDT

1 0

Re: SYN spoofing
by Ron Buchalski 03 Aug '99

03 Aug '99

>From: Randy Bush <randy(a)psg.com> >To: Joe Shaw <jshaw(a)insync.net> >CC: John Fraizer <John.Fraizer(a)EnterZone.Net>,Dan Hollis ><goemon(a)sasami.anime.net>, bandregg@redhat.com,nanog@merit.edu >Subject: Re: SYN spoofing >Date: Mon, 2 Aug 1999 17:09:55 +0200 (CEST) > > > > How hard is it really to put a filter on your outbound links that says > > drop all ip traffic heading out these links that isn't from my IP space? > >trivial. only one gotcha. if it is a backbone router, it will fall over >dead. beyond that, not a problem. > >backbone level traffic can not be packet filtered by current real routers. >but we've had this discussion a few times already. > >randy > Which is why it's more scaleable to do packet filtering at the edge, and leave the core to do what it does best...switch packets. -rb _______________________________________________________________ Get Free Email and Do More On The Web. Visit http://www.msn.com

3 3

CA vs. CA IOS ?
by Brandon Applegate 03 Aug '99

03 Aug '99

If things of this nature should be posted to a different list, please let me know (the mail addr) and I will post there. What is the the difference between the CA and CC trees ?? According to release notes, They each support a different family of PA interfaces etc. Is this to say that one does not support what the other does ?? TIA -------------------------------------------------- Brandon Applegate, CCNA : Network Administrator http://www.one.net : brandon(a)one.net --------------------------------------------------

2 1

Geographic routing hack
by Martin Cooper 03 Aug '99

03 Aug '99

Some weeks ago I noticed that 167.216.128.247/32 (www.digisle.net) appears to reach web servers located in physically different places broadly dependent on where you see it from. I presume this is done by advertising the same prefix from border routers which are in seperate IGP domains or something (confederations maybe?), but I wonder what people's views on the concept are, since it could potentially be quite confusing in certain circumstances (e.g. debugging routing problems) ? Superficially it seems like a 'cool hack' for geographic content-distribution (which is what Digital Island do), but up until now I've always seen this sort of thing done by exploiting NS record sorting order properties with the kludge of different A records in the various zonefiles, and I wondered if doing it with routing policy in this way is strictly RFC compliant (or for that matter if anyone cares if it isn't) ? M.

4 4