- Test - lists.nanog.org

Re: Is the .to (Tonga) domain completely rogue and should be removed?
by digitalunix＠altavista.net 02 Oct '98

02 Oct '98

---------- Forwarded message ---------- Date: Fri, 2 Oct 1998 11:26:29 -0700 From: digitalunix(a)altavista.net To: hostmaster(a)internic.net Subject: Rogue Domain std.com To Whom it May Concern, Over the past 48 hours I have received numerous complaints about large numbers of negative cluons eminating from the domain std.com. As a Network Solutions, Inc. customer I must request that you BORK BORK BORK FREE THE INTERNET BORK BORK BORK remove this domain from the .com TLD as soon as possible in order to avoid the possibility of Negative Cluon Proliferation, which will undoubtedly happen when the number of negative cluons on the internet exceeds the number of positive cluons by a factor of 2 or more. This situation opresses the positive cluons to the point where they no longer appear on as long as an NCP situation exists. Thank you for your expeditious actions in dealing with this problem. Sincerely, A Concerned NSI Customer ---------------------------------------------------------------- Get your free email from AltaVista at http://altavista.iname.com

1 0

Sorry -- No subject
by Bill Becker 02 Oct '98

02 Oct '98

Here you go, Randy... tonga>en Password: tonga tonga# sh running-tonga ##################### Current configuratonga: ! ! Last configuratonga change at 09:57:39 EDT Fri Oct 2 1998 ! NVRAM config last tongated at 10:00:50 EDT Fri Oct 2 1998 ! version 10.3 (tonga) service timestamps log tonga service tonga-encryption no service tcp-small-tonga ! hostname tonga ! clock tongazone EST -tonga clock tonga-time EDT recurring enable secret 5 ToNgA enable password 7 tOnGa ! ip subnet-tonga no ip source-tonga ip domain-list .to ! -- more --

1 0

. (root) zone rouge, should be removed
by Chris Cappuccio 02 Oct '98

02 Oct '98

I strongly recommend removing the root zone, for what are soon to be obvious reasons. I was recently made aware that people are using it for distribution of materials that may be inappropriate. I have also found that it has been used for illegal purposes. Please direct all future correspondence on this matter to chris(a)[12.7.96.3] --- "Microsoft is to quality software what McDonalds is to gourmet cooking"

3 2

Re: Is the .to (Tonga) domain completely rogue and should be removed?
by Dean Anderson 02 Oct '98

02 Oct '98

> > We now return you to TongaV8, in progress.. > > ^^^^^^^ > > Karl Whats this mean?? --Dean ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean(a)av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2 1

Milk attack
by Steve Nash 02 Oct '98

02 Oct '98

Im curious if anyone knows of the "milk" attack. Our network was just slammed by such an attack for about an hour all aimed at one of our core routers. A "sh ip cache x.x.x.x x.x.x.x fl" on it showed this: SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts B/Pk Active Fa0/0 208.10.5.2 Local X.X.X.X 11 0498 0017 164K1028 985.3 except from 10 to 15 hosts all nailing us at the same time. The protocol as you see is "11" which I have been unable to find information about. There was no way to filter it and access-lists denying protocol "11" showed 0 matches. Anyone have any ideas? -- \\|// -(@ @)- ==oOO==(_)==OOo========================================================= Steven Nash snash(a)lightning.net l i g h t n i n g i n t e r n e t s e r v i c e s l l c Chief Backbone Engineer -- Network Engineering http://www.lightning.net

3 2

The Man would like to know [was: Is the .to (Tonga) domain completely rogue and should beremoved?}
by scott w 02 Oct '98

02 Oct '98

"His view was that the US host so many smut sites and many other things yet they continue. So why is it that the Kingdom of Tonga that is trying to make some money from domain name registrations is the subject of so much debate. He said it does not make any sense. He said he will have someone look into the matter though."

1 1

Re: A Message from Exodus (fwd)
by Dean Anderson 02 Oct '98

02 Oct '98

At 05:54 PM 10/1/98 -0400, Adam Rothschild wrote: >Uggggh. So many people have requested this privately, I can't take it! > >So, here goes. Note that some of the information in the spam is totally >false. Some is just plain funny/silly, such as: > >"If GTE/BBN has a brown-out tomorrow, their customers are out of luck if >their network fails. At Exodus, traffic for all of our customers would >just get rerouted either though our own backbone, or through another major >Internet carrier (like UUNet)." IF their network failed, they would be out of luck... ;-) IF the GTE customer fails, Exodus customers would get rerouted... Thats reassuring ;-) Marketing speak. Gotta love it. --Dean ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean(a)av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2 1

Re: Is the .to (Tonga) domain completely rogue an
by egullich＠tonic.to 01 Oct '98

01 Oct '98

Mr. Shein: > With all due respect, I think your management of the .to domain is a > hazard to the internet and should be ceased immediately. By your gross > negligence you are providing safe haven to criminals. I'm sorry, but your reply leaves me somewhat mystified. If you could be more specific as to what acts of "gross negligence" you believe Tonic is guilty of in its management of the .TO top level domain, we would take your opinions under serious evaluation and see if there are ways we could improve the operation of our registry. > As of this minute, about 2:30PM EDT 10/1/98, the domain-hijacker > spammers have a web address in the .to domain and are > spamming/domain-forging to advertise this, as they have been > doing for weeks. In my last posting, I brought to your attention the existence of our pioneering antispam policy. If you could be specific as to which "domain-hijacker spammers have a web address in the .to domain" and send a copy of the spam(s) to hostmaster(a)tonic.to, we would be able to warn the domain name holders, and/or terminate their domain name registration if they are in repeated violation of our antispam policy. Regards, - Eric Gullichsen Tonic Corporation Kingdom of Tonga Network Information Center http://www.tonic.to Email: egullich(a)tonic.to

3 2

Re: A Message from Exodus (fwd)
by Sanjay Dani 01 Oct '98

01 Oct '98

> Uggggh. So many people have requested this privately, I can't take it! > > So, here goes. Note that some of the information in the spam is totally > false. Some is just plain funny/silly, such as: > > "If GTE/BBN has a brown-out tomorrow, their customers are out of luck if > their network fails. At Exodus, traffic for all of our customers would > just get rerouted either though our own backbone, or through another major > Internet carrier (like UUNet)." Looks like revenue desperation. What with the tanking stock market and too aggressive pricing, I would be looking for signs of troubles at a company that uses the language in the spam you quoted. Not someone I would trust to run my data center.

1 0

Re: Is the .to (Tonga) domain completely rogue an
by egullich＠tonic.to 01 Oct '98

01 Oct '98

Mr. Shein: > You know, Mr Gullichsen, you can answer every complaint you get with > "why didn't you tell us this before!", but it's not fooling anyone. I don't answer every complaint with that reply, nor did I answer your complaint in that manner. What I did was to bring to your attention Tonic's published antispam policy, and to request that if you were having problems with SPAM involving any .TO domain names, that you inform us as to what those names are, so we can deal with them in accordance with our policy. > So why was the Consulate's web page changed from an advertisement for > a software company to something having to do with the Kingdom of Tonga > in the past couple of hours? We recently moved a number of servers to a colocated facility for improved bandwidth. The mail POP for the Consulate was one of these, and now runs on a machine supporting a number of virtual IP addresses. There is no web page for the Consulate, and as a result of the fact that there was no explicit VirtualHost directive for sfconsulate.gov.to in the Apache config file, web accesses defaulted to another virtual IP on the same machine, which is that of a software company. As a result of your discovering this, I recently added a VirtualHost directive so that accesses to port 80 on the sfconsulate.gov.to IP address return the Tonga Visitor's Bureau home page, www.vacations.tvb.gov.to Thank you for pointing this out. You may note that the Tonga Visitor's Bureau home page also prominently features an advertisement for Tonic. This is intentional. Regards, - Eric Gullichsen Tonic Corporation Kingdom of Tonga Network Information Center http://www.tonic.to Email: egullich(a)tonic.to

6 5