- Test - lists.nanog.org

Re: [Fwd: OUTAGE: multiple outages around the country]
by Shawn "CJ" Washington 30 Apr '99

30 Apr '99

Thanks for the correction. I have never heard of these cities so I tried. Both of these outages were reported by WCOM. There are two major routes from Philly to DC. One of these routes are between Pittsburgh and DC and the alt route is between NY and DC. Remember, these are reports from WCOM. CJ Vince Fuller wrote: > > I have a report from my NOC. There are two fiber cuts, one is in North > > Royal Town, Ohio. Reason is unknown. > > Maybe "North Royalton, Ohio"? > > > The second cut is due to a train derailment in Ohio Pile, PA. > This is the cut between Philly and Washington, DC. > > Maybe "Ohiopyle, PA"? If a train crash in Ohiopyle has taken down circuits > between DC and Philly, then there is some interesting fiber routing going > on; Ohiopyle is about 150-200 miles WNW of DC and about 80 miles or so > ESE of Pittsburgh - definitely not on an obvious route between DC and > Philly... > > (Ohiopyle is also the home of the Lower Youghiogheney river, one the most > popular, and one of the easiest, whitewater runs in the east - a great > place to spend a lazy summer day...) > > --Vince

1 0

[Fwd: OUTAGE: multiple outages around the country]
by Shawn "CJ" Washington 30 Apr '99

30 Apr '99

2 1

Major WCOM Fiber cut in Ohio
by Brandon Applegate 30 Apr '99

30 Apr '99

Our CLEC (Time Warner Telecom) tells me that there is some type of major fiber cut on the WCOM network in Ohio. This is affecting our ability to dial LD (without a PIC code) as well as inbound on our 888 number (which is actually switched by Qwest) and several other long haul circuits. Anyone have any more info or corrections on this ?? -------------------------------------------------- Brandon Applegate, CCNA : Network Administrator http://www.one.net : brandon(a)one.net --------------------------------------------------

1 0

OUTAGE: multiple outages around the country
by Sean Donelan 30 Apr '99

30 Apr '99

There seems to be multiple outages (some providers have said fiber cuts) around the country. Places I know about are Eastern Tennessee Northern New Jersey Central Florida I don't know if there is a common cause, or if Murphy just thought it was a nice spring day. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

It sure would be nice if everyone would use the RA
by Christian Nielsen 30 Apr '99

30 Apr '99

Then we could filter better. cxn:~$ whois -h whois.ra.net 2711 %% No entries found for the selected source(s). cxn:~$ whois -h whois.ra.net as2711 %% No entries found for the selected source(s). cxn:~$ whois -h whois.ra.net as-2711 %% No entries found for the selected source(s). They are sending UUNet Sprint, CW and others routes. * 6.0.0.0 157.130.197.29 43 999 0 701 2711 8175 7170 1455 i * 209.1.169.118 43 998 0 701 2711 8175 7170 1455 i * 157.130.12.201 43 998 0 701 2711 8175 7170 1455 i * 137.39.23.9 44 998 0 701 2711 8175 7170 1455 i *> 24.0.0.0/13 157.130.197.29 43 999 0 701 2711 1239 6172 i * 209.1.169.118 43 998 0 701 2711 1239 6172 i * 157.130.12.201 43 998 0 701 2711 1239 6172 i * 137.39.23.9 44 998 0 701 2711 1239 6172 i *> 24.8.0.0/15 157.130.197.29 43 999 0 701 2711 1239 6172 i * 209.1.169.118 43 998 0 701 2711 1239 6172 i * 157.130.12.201 43 998 0 701 2711 1239 6172 i * 137.39.23.9 44 998 0 701 2711 1239 6172 i *> 24.40.32.0/19 157.130.197.29 43 999 0 701 2711 1239 6172 i * 209.1.169.118 43 998 0 701 2711 1239 6172 i * 157.130.12.201 43 998 0 701 2711 1239 6172 i * 137.39.23.9 44 998 0 701 2711 1239 6172 i Christian.

2 2

The Cidr Report
by Tony Bates 30 Apr '99

30 Apr '99

This is an auto-generated mail on Fri Apr 30 12:00:00 PDT 1999 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 30Apr99 0) General Status Table History ------------- Date Prefixes 230499 58766 240499 58380 250499 58344 260499 58454 270499 58458 280499 58561 290499 58602 300499 58568 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 71.0.2.0/24 from AS1239 *** Bogus 221.43.160.0/19 from AS12323 AS Summary ---------- Number of ASes in routing system: 4878 Number of ASes announcing only one prefix: 2461 (1329 cidr, 1132 classful) Largest number of cidr routes: 376 announced by AS701 Largest number of classful routes: 799 announced by AS701 1) Gains by aggregating at the origin AS level --- 30Apr99 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 360 148 212 58.9% BCnet Backbone AS577 292 182 110 37.7% Bell Canada Backbone AS4293 289 182 107 37.0% IMCI AS174 603 502 101 16.7% Performance Systems International AS4755 175 87 88 50.3% Videsh Sanchar Nigam Ltd. India AS2493 211 126 85 40.3% iSTAR Internet, Inc. AS4200 167 94 73 43.7% AGIS (Apex Global Information Ser AS3749 136 63 73 53.7% TECNET AS7657 193 121 72 37.3% The Internet Group Limited AS1267 94 24 70 74.5% IUNET-AS AS7496 98 29 69 70.4% Power Up AS1239 550 485 65 11.8% SprintLink Backbone AS7545 111 47 64 57.7% TPG Internet Pty Ltd AS1785 384 321 63 16.4% NYSERNet Backbone AS7046 264 202 62 23.5% UUNET-CUSTOMER AS10928 112 50 62 55.4% UNKNOWN AS1221 451 392 59 13.1% AARNET-AS AS4740 329 272 57 17.3% Ozemail Pty Ltd (ASN-OZEMAIL) AS9269 66 10 56 84.8% Hong Kong CTI AS3493 238 184 54 22.7% INTERLINK AS719 474 421 53 11.2% LANLINK autonomous system AS72 93 41 52 55.9% Schlumberger Information Network AS803 79 35 44 55.7% SaskNet Backbone AS5674 80 36 44 55.0% PBI-NET-BLK AS3737 109 71 38 34.9% PenTeleData Inc. (ASN-PTD) AS1 499 465 34 6.8% BBNPLANET AS7122 110 78 32 29.1% MTS ADVANCED Network Policy AS4307 32 1 31 96.9% SVINET-1 AS2907 209 178 31 14.8% SINET AS11515 32 1 31 96.9% UNKNOWN For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

NetSOL blames Microsoft for its problems...
by John Fraizer 30 Apr '99

30 Apr '99

Will it ever end? Now they're blaming Microsoft for their problems. I personally use netscape and received the same error this individual is complaining about. >Return-Path: <help(a)internic.net> >Received: from csrb.internic.net (198.41.1.85) by intranet.com.mx with SMTP > (Eudora Internet Mail Server 2.2); Thu, 29 Apr 1999 13:11:36 -0500 >Received: (help@localhost) by csrb.internic.net (8.9.1/SLAM-1) id OAA22954; Thu, 29 Apr 1999 14:11:07 -0400 (EDT) >Message-Id: <199904291811.OAA22954(a)csrb.internic.net> >Subject: Re: [NIC-990427.ad30] CAN't access you secure Payment pagey >To: jbiquez(a)intranet.com.mx (Jorge Biquez) >Date: Thu, 29 Apr 1999 14:11:07 -0400 (EDT) >In-Reply-To: <3.0.5.32.19990427141554.00e326a0(a)intranet.com.mx> from "Jorge Biquez" at Apr 27, 99 02:15:54 pm >X-MTS-Ticket: 990427.ad30 >X-MTS-Type: Question >X-MTS-Priority: Normal >X-MTS-Mode: Unknown >X-MTS-Status: Open >X-MTS-Timestamp: 990427152528 >From: help(a)networksolutions.com >Reply-To: help(a)networksolutions.com >X-Mailer: ELM [version 2.4 PL24 PGP2] >MIME-Version: 1.0 >Content-Type: text/plain; charset=US-ASCII >Content-Transfer-Encoding: 7bit > > >Thank you for contacting Network Solutions. > >The problem that you are experiencing in obtaining a secure connection >is an error within the Microsoft web browser. Microsoft web browsers >often have problems connecting to sites which use advanced Secure >Socket Layers. > >Since the error is actually within the web browser itself it must be >corrected by Microsoft. > >We recommend you use a browser such as Netscape Navigator to gain >access to our Web site. The software is available as a free download >from Netscape's Web site at www.netscape.com. > >We will be glad to assist you in reserving your domain names by >Telephone. From the United States, dial toll-free 1-888-642-9675. >Outside of the U.S., dial 1-703-742-0914. > >Best regards, >Jon L >Network Solutions > >World Wide Web: http://www.networksolutions.com >E-Mail: help(a)networksolutions.com >================================================================== >> >> Hello. >> >> I need to pay for some domains and I just can access the page. I receive >> this error: >> >> >> This script should be referenced with a METHOD of POST. >> >> >> What's happening? >> >> JB > >

7 8

RE: DNS Related Mailing Lists
by Steve Riley (MCS) 30 Apr '99

30 Apr '99

There's a lot of DNS information at the DNS Resources Directory, at http://www.dns.net/dnsrd. There is a page with pointers to some DNS mailing lists: http://www.dns.net/dnsrd/lists.html. ______________________________________________________________________ Steve Riley Consultant - Microsoft Telecommunications Practice in Denver, Colorado email: mailto:steriley@microsoft.com call: +1 303 521-4129 (cellular) page: +1 888 440-6249 or mailto:4406249@skytel.com Applying computer technology is simply finding the right wrench to pound in the correct screw. -----Original Message----- From: William R. Lorenz [mailto:wrl@nacs.net] Sent: Friday, April 30, 1999 11:59 AM To: nanog(a)merit.edu Subject: DNS Related Mailing Lists NANOG Members, Where can I find additional information about a decent DNS mailing list? On Wed, 28 Apr 1999, Dean Robb wrote: :As pointed out on the DNS lists, it seems that NSI has a real problem :with the customer services people not knowing what they're doing and :needs some serious training. Perhaps that training should include basic :reading skills. --- __o William R. Lorenz <wrl(a)nacs.net> --- _-\<,_ New Age Consulting Service, Inc. [http://www.nacs.net] --- (_)/ (_) Proud of Cleveland - [http://www.cleveland.com]

1 0

RE: Contact handles disappearing mysteriously from the whois database!
by Derrick Bennett 30 Apr '99

30 Apr '99

Seeing as how my main technical contact was completly missing from Internic I called them. I was told by their helpdesk that Whois is being updated and will be unreliable and/or useless until sometime next week after May 1. I was told that their database is fine and that all the information is there and I should just trust them that all would be okay. They did not have an answer as to why they did not announce this before hand or gave warning as to the length of the outage. Also I must note that I had to go to bigyellow.com to find their phone number as they seemed to have removed it completely from their new website and the "about" portion of their site is forwarded to a black hole. just my .02 and frustration. Derrick Bennett

14 25

A new means of exploiting systems to relay UBE (fwd)
by joshua grubman 30 Apr '99

30 Apr '99

pardon the cross-posting. --- joshua grubman http://false.net http://sarcastic.net "note to self... noone cares" ---------- Forwarded message ---------- Date: Fri, 30 Apr 1999 10:18:47 -0400 (EDT) From: Network Operations <netops(a)DN.NET> To: spam-l(a)peach.ease.lsoft.com Cc: abuse(a)DN.NET, jg(a)false.net Subject: A new means of exploiting systems to relay UBE Hi folks, I've honestly been too busy to read the current threads in any detail, so if I'm addressing an issue which has already been discussed, please ignore me. Lately we've come across an increasing number of reseller web machines where users have uploaded a set of cgi's with intent to exploit said machine as a spam engine. Since the scripts invoke sendmail locally, they are capiable of delivering mail at an alarming rate. I will post these scripts to the end of this message. This is particularly disturbing, as all of these servers have been configured with anti-relay rulesets, and many of our customers are not savvy enough to realize that this is NOT relay spam or to track down the users who own the cgi's and terminate their accounts. This creates a HUGE problem for firms who offer colocation, hosting, or managed servers to web resellers. Since these scripts don't require telnet access, any bozo with a cgi-bin directory and an ftp account can turn a legitimate customer into a spamhaus. The resources required for a provider to log into a customer system (assuming they even have root!), disable an account, and educate thousands of web resellers as to why their ISP is making changes to their system make this issue even harder to address. In the last few days we've come across three systems, each hosting a few hundred web users, where this software has been installed. On one of the systems, multiple instanstances of the software had been uploaded under various accounts. I am attatching a tarred and gzipped copy of a cgi-bin directory containing this software. This was pulled directly from a reseller server. The subscriber lists have been cleared out, and modifications have been made to the code to make it unusable. If you have a good working knowledge of perl, you should pick through it. Be very afraid. If anybody has any ideas as to how this can be stopped, please share them. Thanks -josh Josh Grubman <joshg(a)dn.net> Senior Systems Engineer Manager, Abuse Coordination --- Security & Abuse Coordination Team digitalNATION Internet Services http://www.dn.net / (703) 642 2800 DO NOT use this address for reporting problems! uce & network abuse: abuse(a)dn.net connectivity issues: noc(a)dn.net

1 0