- Test - lists.nanog.org

Worldcom Fiber Cut (FLA)
by Mark Moore 04 May '99

04 May '99

Worldcom has a fiber cut between on New England Ave in Winterpark affecting 97 DS3's. There are no technicians on site yet. Looks like AT&T circuits have been affected also. ~mark ---------------------------- Mark Moore <mark(a)gleim.com> Network Administrator Gleim Publications, Inc. http://www.gleim.com (352) 375-0772 ext. 116 (800) 87-GLEIM ext. 116 FAX: (352) 375-6940 -----------------------------

1 0

UUNET contact needed...
by Rich Sena 04 May '99

04 May '99

to resolve peering issue in and around DEIX in Germany -- I am nothing if not net-Q! - ras(a)poppa.thick.net

2 2

Re: Smurf tone down
by sthaug＠nethelp.no 03 May '99

03 May '99

> > access-list 175 permit icmp any any > > int bleh/bleh > > rate-limit input access-group 175 128000 8000 8000 conform-action transmit exceed-action drop > > rate-limit output access-group 175 128000 8000 8000 conform-action transmit exceed-action drop > > I agree, the above isn't all that hard. > > However, I'd argue that the above is in some sense wrong. > There's no need to put all ICMP traffic in the same basket; some > ICMP traffic is required for e.g. path MTU discovery to work. > So, instead I'd use > > access-list 175 permit icmp any any echo-reply With all the smurf amplifiers available, it is of course easier to generate several Mbps of ICMP Echo Reply than it is to generate large amounts of other ICMP traffic. However, if your network is exposed to several Mbps of inbound ICMP *other* than Echo Reply, it may be equally bad for your network. So I prefer to leave it as 'icmp any any'. Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no

1 0

Re: Smurf tone down
by Havard.Eidnes＠runit.sintef.no 03 May '99

03 May '99

> > 3) Can't manage it. Providers are understaffed with clueful people. > > Is this really that hard? > > access-list 175 permit icmp any any > int bleh/bleh > rate-limit input access-group 175 128000 8000 8000 conform-action transmit exceed-action drop > rate-limit output access-group 175 128000 8000 8000 conform-action transmit exceed-action drop I agree, the above isn't all that hard. However, I'd argue that the above is in some sense wrong. There's no need to put all ICMP traffic in the same basket; some ICMP traffic is required for e.g. path MTU discovery to work. So, instead I'd use access-list 175 permit icmp any any echo-reply But you all knew that already, right? ;-) - Håvard

1 0

Re: Smurf tone down
by Ron Buchalski 03 May '99

03 May '99

>From: Leo Bicknell <bicknell(a)ufp.org> >To: stuart(a)tech.org (Stephen Stuart) >CC: bicknell(a)ufp.org, alex(a)nac.net, twinders@spc.cc.tx.us,nanog@merit.edu >Subject: Re: Smurf tone down >Date: Sat, 1 May 1999 17:28:51 -0400 (EDT) > > >In a previous e-mail, Stephen Stuart said: > > > > It's also avail in 11.1.2x(CC) for the 7xxx's. > > > > > > 7[25].. > > > > > > There are no new CC images for 7000's. > > > > But the rsp images work if you have an RSP7000, yes? > > Correct. Cisco makes this confusing. ^^^^^^^^^ > >RP No CC >RP+SP No CC >RP+SSP No CC >RSP7000 CC > What's the confusion? The 11.1CC train runs on all RSP-based 7xxx systems. That means RSP7000s and 7500s. -rb _______________________________________________________________ Get Free Email and Do More On The Web. Visit http://www.msn.com

1 0

None
by Timothy R. McKee 03 May '99

03 May '99

Christian & NANOG in general: Our apologies for the BGP problem. We turned down our peering with UUNET today due to serious routing problems in Raleigh NC. When our NOC personnel reestablised the peering, they failed to utilize the peer-group that includes all of our outbound route filtering. Additional documentation and training will be implemented Monday - in the interim any BGP alterations will be performed by Backbone Engineering. We will audit our RA entries and verify that all of our routing data is present and correct. Tim McKee, Chief Technology Officer Info Avenue Internet Services, LLC

5 4

NTP sources at EPs?
by R.P. Aditya 03 May '99

03 May '99

Do any Exchange Points operate NTP Stratum 1 or 2 clocks for participants to sync off of? If not, it might be a good service to provide at an IX. There is a good list of GPS based NTP servers at: http://www.eecis.udel.edu/~ntp/hardware.html Thanks, Adi

3 3

OUTAGE: Satellite/Beeper failure (not an old message about Galaxy IV)
by Sean Donelan 01 May '99

01 May '99

Mexico lost pager service when the Solidaridad I satellite failed today. Satmex did not have an estimate when service could be restored. Users are being transferred on a space available basis to other satellites. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

Smurf tone down
by alex＠nac.net 01 May '99

01 May '99

Hello, To help quench the effects of smurf attacks on our network, we CEF-CAR all ICMP on our egress points to about 200% of normal ICMP flows. However, when a upstream becomes full of ICMP (even though we dump most of it), it still affects our external connectivity. My question is, why don't larger upstream providers use CEF-CAR (assuming that most use this) do the same to limit the effect of smurf attacks on thier (and subsequently, thier customers') networks? The floor is open for flames. -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP; we have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

9 14

Re: OUTAGE: multiple outages around the country
by Sean Donelan 01 May '99

01 May '99

SEAN(a)dra.COM (Sean Donelan) writes: >There seems to be multiple outages (some providers have said fiber cuts) >around the country. Geez, did someone let some of Milosevic's people in the country with backhoes? I've now also received a report of a Texas fiber cut (frontier or als) and outages in Deleware, Ohio, Maryland, Michigan, New York, Pennsylvania, Virginia, West Virginia (mci or worldcom). It still isn't clear if there is one or more than one cut in the northeast. I'm also not sure where the Tennessee and Florida outages are originating, or if they are connected with the ones mentioned above. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

4 3