- Test - lists.nanog.org

Re: Smurf tone down
by Havard.Eidnes＠runit.sintef.no 03 May '99

03 May '99

> > 3) Can't manage it. Providers are understaffed with clueful people. > > Is this really that hard? > > access-list 175 permit icmp any any > int bleh/bleh > rate-limit input access-group 175 128000 8000 8000 conform-action transmit exceed-action drop > rate-limit output access-group 175 128000 8000 8000 conform-action transmit exceed-action drop I agree, the above isn't all that hard. However, I'd argue that the above is in some sense wrong. There's no need to put all ICMP traffic in the same basket; some ICMP traffic is required for e.g. path MTU discovery to work. So, instead I'd use access-list 175 permit icmp any any echo-reply But you all knew that already, right? ;-) - Håvard

1 0

Re: Smurf tone down
by Ron Buchalski 03 May '99

03 May '99

>From: Leo Bicknell <bicknell(a)ufp.org> >To: stuart(a)tech.org (Stephen Stuart) >CC: bicknell(a)ufp.org, alex(a)nac.net, twinders@spc.cc.tx.us,nanog@merit.edu >Subject: Re: Smurf tone down >Date: Sat, 1 May 1999 17:28:51 -0400 (EDT) > > >In a previous e-mail, Stephen Stuart said: > > > > It's also avail in 11.1.2x(CC) for the 7xxx's. > > > > > > 7[25].. > > > > > > There are no new CC images for 7000's. > > > > But the rsp images work if you have an RSP7000, yes? > > Correct. Cisco makes this confusing. ^^^^^^^^^ > >RP No CC >RP+SP No CC >RP+SSP No CC >RSP7000 CC > What's the confusion? The 11.1CC train runs on all RSP-based 7xxx systems. That means RSP7000s and 7500s. -rb _______________________________________________________________ Get Free Email and Do More On The Web. Visit http://www.msn.com

1 0

None
by Timothy R. McKee 03 May '99

03 May '99

Christian & NANOG in general: Our apologies for the BGP problem. We turned down our peering with UUNET today due to serious routing problems in Raleigh NC. When our NOC personnel reestablised the peering, they failed to utilize the peer-group that includes all of our outbound route filtering. Additional documentation and training will be implemented Monday - in the interim any BGP alterations will be performed by Backbone Engineering. We will audit our RA entries and verify that all of our routing data is present and correct. Tim McKee, Chief Technology Officer Info Avenue Internet Services, LLC

5 4

NTP sources at EPs?
by R.P. Aditya 03 May '99

03 May '99

Do any Exchange Points operate NTP Stratum 1 or 2 clocks for participants to sync off of? If not, it might be a good service to provide at an IX. There is a good list of GPS based NTP servers at: http://www.eecis.udel.edu/~ntp/hardware.html Thanks, Adi

3 3

OUTAGE: Satellite/Beeper failure (not an old message about Galaxy IV)
by Sean Donelan 01 May '99

01 May '99

Mexico lost pager service when the Solidaridad I satellite failed today. Satmex did not have an estimate when service could be restored. Users are being transferred on a space available basis to other satellites. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

Smurf tone down
by alex＠nac.net 01 May '99

01 May '99

Hello, To help quench the effects of smurf attacks on our network, we CEF-CAR all ICMP on our egress points to about 200% of normal ICMP flows. However, when a upstream becomes full of ICMP (even though we dump most of it), it still affects our external connectivity. My question is, why don't larger upstream providers use CEF-CAR (assuming that most use this) do the same to limit the effect of smurf attacks on thier (and subsequently, thier customers') networks? The floor is open for flames. -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP; we have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

9 14

Re: OUTAGE: multiple outages around the country
by Sean Donelan 01 May '99

01 May '99

SEAN(a)dra.COM (Sean Donelan) writes: >There seems to be multiple outages (some providers have said fiber cuts) >around the country. Geez, did someone let some of Milosevic's people in the country with backhoes? I've now also received a report of a Texas fiber cut (frontier or als) and outages in Deleware, Ohio, Maryland, Michigan, New York, Pennsylvania, Virginia, West Virginia (mci or worldcom). It still isn't clear if there is one or more than one cut in the northeast. I'm also not sure where the Tennessee and Florida outages are originating, or if they are connected with the ones mentioned above. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

4 3

Re: fiber cuts (fwd) on behalf of Pat Young
by larrys＠lexis-nexis.com 01 May '99

01 May '99

>>>>> Forwarded message from Pat Young <xdice(a)mindspring.net> On Fri, Apr 30, 1999, Larry Snyder <larrys(a)lexis-nexis.com> quoth: > > "Jamie D." <jamie(a)CERF.net> wrote: > > > > Worldcom has fiber cut in DC that affects 5664 DS-3's > > woohoo > > > > > That would probably be the one between DC and Pittsburg. I have it on > good (Ann Arbor) authority that at least some of the North Royalton > cut has been restored. I'm just glad it's not me answering phones :-( > -ls- > I've been on the phone with various vendors all night (funny how wcom affects so much of this, hmm? ;-) ) Anyway - it's not 5664 DS3's - the train wreck is scattered over approx 5664 feet of track - and WorldCom is prevented from getting in there to start repairs until the local authorities, CSX, and NTSB (I think, guessing on that one) have finished their investigation. The guy I just got off the phone with told me that this particular cut will likely be down all night. I'd post this to NANOG, but I didn't sign up for posting access, since I don't really have much to post. :-) If you could post it, I'd greatly appreciate it. :-) Cheers.. -Pat "One World, One Web, One Program." - Microsoft Promotional Ad "Ein Volk, Ein Reich, Ein Führer" - Adolf Hitler << End forwarded message

1 0

None
by Jamie D. 01 May '99

01 May '99

Worldcom has fiber cut in DC that affects 5664 DS-3's woohoo

2 1

Re: OUTAGE: multiple outages around the country
by Sean Donelan 01 May '99

01 May '99

mathews(a)hawaii.EDU (Robert Mathews-ICICX) writes: >Very Briefly... thought that I would interject/contribute a tid-bit >on outages elsewhere -- than what seems to be known. Thanks for the Hawaii update. As one person said, the backhoes are trying to make the end-of-month quota. Just to spread this out over a few more carriers. A person reported an OC-48 outage hit Los Angeles early this morning (gte?), so it looks like both coasts are getting hit. Today's animal incident report. A deer got tangled in some power cables at a microwave relay station outside of Colorado Springs(us west) on April 27 disrupting emergency phone service for eight hours. Why does the animal kingdom hate US West? Last year's gopher took out a US West facility too. Today's money request. We know who is the father of the Internet, who should be memorialized as the father of modern computer science? http://news.bbc.co.uk/hi/english/sci/tech/newsid_330000/330376.stm Anyone know where I can get a replacement tape for my Turing machine? -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0