- Test - lists.nanog.org

True Cost of Firewalling
by Ben Kirkpatrick 12 Jun '98

12 Jun '98

Has anyone done a good comparison recently of the packet forwarding speeds of suns and ciscos? Sure it seems easier to front-end a sun and use it as a firewall, but how well can a sun forward ip? Thanks, Ben Kirkpatrick Data Engineering ELI Corporate HQ Third Floor 4400 NE 77th Avenue Vancouver, WA 98662 desk 360.816.3508 pager 888.997.8363

3 2

Re: gated
by Paul Vixie 12 Jun '98

12 Jun '98

peter(a)wonderland.org (Peter Galbavy) writes: > Once I thought the GPL a virus and evil, but with the recent > profiliation of previously free software becoming hijacked and > used for profit *and still claiming to be the definitive source > for the software* is getting tiresome. gated and X11 are two > examples of this. What next ? How muuch of >your< code is > being sold by others claiming to own it ? all of it. the amazing part is when folks remove the copyrights and authorship credits, even though the copyrights just specify that the copyrights shall not be removed and that i not be sued -- there are no other restrictions in rtty, bind, cron, or even my little libraries like bitstring and avltree. i've twice now been hired as a consultant by companies who were, unknowingly it seemed, including my code in their products after editing out the original copyrights and credits. (in one case i was paid to fix a bug in code the payor didn't know was originally mine.) but you know what? i'm flattered. all that hype about how commercial grade code can only come from strong engineering companies with good funding, real management, and so on -- and there's my code at the heart of a couple of products i won't mention here, with my name ripped out. seeing my code used in this way just tells me that i don't charge enough when i'm out consulting. and for the record, i still think the GPL is very evil. and also for the record, we're commercializing BIND since i'm no longer able to fund it out of my own pocket (my pocket is now empty) and we ended up not getting the kind of donations we needed as a nonprofit. while i'm committed to keeping a freely redistributable version and to shipping source code, i've got to be realistic about my mortgage payment and the lack of speed and quality of BIND's evolution when it can only get worked on by volunteers. in that sense i very much applaud what the merit folks have done with gated, and what the sendmail,inc. guys are doing with sendmail. > I think we should now disappear, since this is NANOG and this thread > is not quite an operational issue. Yet. as a coauthor of RFC 2010 and as the specific author of section 2.1, i don't agree. reference implementations with widely reviewable source code are THE reason that the internet can be "operated" at all. -- Paul Vixie La Honda, CA "Many NANOG members have been around <paul(a)vix.com> longer than most." --Jim Fleming pacbell!vixie!paul (An H.323 GateKeeper for the IPv8 Network)

4 4

Re: So... what's the best routing solution for..
by John Fraizer 12 Jun '98

12 Jun '98

At 02:07 AM 6/12/98 -0400, you wrote: > >He said this was an ethernet handoff from the isp; they are not simply >going to plug him into a switch; he will most likely get a port on a >cisco; they should be able to apply policies for him.. no? > >I don't see why he even needs a router, unless there is a lack of a trust >of the upstream's ability to filter.. Or if you know beforehand they will >not? Depending on his upstream, the ethernet connection he gets may be off of one of their backbone routers. In that case, it would not be wise for them to load it up with filters for each client. Let it do it's job as a backbone router and have the customer get a 2514 or a *nix box with some sort of firewall util. ------- John Fraizer (root) | __ _ | The System Administrator | / / (_)__ __ ____ __ | The choice mailto:root@EnterZone.Net | / /__/ / _ \/ // /\ \/ / | of a GNU http://www.EnterZone.Net/ | /____/_/_//_/\_,_/ /_/\_\ | Generation A 486 is a terrible thing to waste...

1 0

Network Event Reporting Facility
by Sean Donelan 12 Jun '98

12 Jun '98

CNN has been reporting on the MCI fiber cut in Manhattan. Since various other carriers lease each other's facilities, it has also been affecting worldcom, uunet and others. Sprint and AT&T claim they haven't been affected. The last report I got around 6pm, MCI hadn't located the actual fiber cut or cause; only the general vicinity. I have not found an official statement on this outage on the MCI web site. I had posted the following a couple of weeks ago to the outage-discuss(a)academ.com mailing list, but other network operators may be interested in methods for keeping their customers informed about operational issues (besides relying on CNN). ==================================================================== I'm off charging at windmills again. I've written up a protocol so network providers can inform their users (and maybe other providers) about significant network events in a distributed, robust manner. If you recognize parts of this, I have stolen the best ideas from half-a-dozen other protocols, News, NTP, SDR, and even OSPF and RIP. Since communication satellites, pagers, SS7 networks, SONET rings and so forth have been known to fail from time to time, simply relying on any single method for notifying users about problems isn't sufficient. The net has suffered from the 'flash-crowd' effect when everyone tries to check centralized information sources such as web servers. I have attempted to address some of the issues in other notification methods. Namely I've tried to give provider control and authentication of messages, as well as giving enough information so end-users to filter messages of interest to them. I've tried to assume if someone can abuse the system, they will; so things are a bit paranoid. Stale messages remain a problem of any notification system, so I tried to give providers an explicit mechanism to cancel messages within their own network. I would appreciate any interested persons looking over my current attempt at writing a draft at http://dranet.dra.com/nerf.html. I have also set up a mailing list nerf-l(a)listserv.dra.com (subscribe by sending a message to listserv(a)listserv.dra.com) for interested people. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

2 1

Re: WorldNIC
by Dean Robb 12 Jun '98

12 Jun '98

At 11:31 6/12/98 +0900, you wrote: >On Thu, 11 Jun 1998, Dean Robb wrote: > >> Let's remember for a moment that not all net.users are net.savvy. I think >> the TLDs SHOULD have a logical category structure. If I'm trying to find >> an educational institution, I'd expect to find it in the .edu TLD, a >> commercial organization in .com, etc. As I recall, that's the entire >> purpose in naming the TLDs as they are. > >Let's remember that not all net.users and net.resources are located in >north.america. And that not all net.names are registered with the >same.nic. I think its time you opened your eyes a.bit. Eyes open just fine. Even here, there's no reason one cannot register as a .us domain. However, the question arises...what has your comment got to do with the correct use of TLDs? What do spammers and nails have in common? They're both intended for hammering. Dean Robb PC-Easy On-site computer services (757) 495-EASY [3279]

3 2

RE: Dijkstra Simulator
by Rob Wilson 12 Jun '98

12 Jun '98

Was that Exodus again.... Didn't you guys already take most of their clients anyway?? -----Original Message----- From: Alan Hannan [SMTP:alan@globalcenter.net] Sent: Thursday, June 11, 1998 8:23 PM To: Jim Boyle Cc: nanog(a)merit.edu Subject: Re: Dijkstra Simulator > p.s. - how is that ip navigator treating you - is there any other than the > big C? (oops -that's little c, isn't it?). frontier globalcenter is not planning to use ip navigator in the core of our network today. we are moving away from ip/atm and towards ip/sonet&ip/wdm. We have 1 oc12 using packet over sonet up today, and several oc3s; phased deployment of oc12 and oc48 starting 3Q98 and completed in 1Q99. we are exploring using ip navigator in our l2 aggregation frame and atm networks. big C/A,J,T,L,N little c they all have reasonable products, just some are more reasonable than others. what really burns me is when a company we are working with under nda tells our competition what we are exploring, and when they publish press releases about their customers without that customers approval. -alan

1 0

InterNIC question I forgot to ask...
by elezar＠pfrc.org 12 Jun '98

12 Jun '98

A question occurred to me after the InterNIC presentation at NANOG, and I couldn't track down the gentleman doing the presentation. This is probably something that needs research anyway. The statistics on NEW domain registrations are interesting. What are the statistics on domains that are released because they are never paid for? If this is better directed to a different list, let me know. -- Jeffrey Haas "He that breaks a thing to find out what it is has elezar(a)pfrc.org left the paths of wisdom." (Or works for Fermilab...)

2 1

Re: Dijkstra Simulator
by Daniel O. Awduche 12 Jun '98

12 Jun '98

The WANDL network planning and analysis software can be used for this purpose (and much more). Alternatively, you can trivially write an all "pairs shortest path" program, using, for example, the Floyd-Warshall dynamic programming algorithm (See "Introduction to Algorithms," by Corman, Leiserson, and Rivest). The same result can be gotten by running Dijkstra's algorithm |V| times (once for each node), where |V| is the cardinality of the set of nodes in your network graph. /Dan. Alan Hannan said: > > Could someone provide a reference for a Dijkstra simulator? > > Ideally this would take three sets of inputs (links, nodes, > metrics) and produce edge-pair traffic flows. > > Any suggestions appreciated, especially for GPL stuff that has > code. > > -a

3 2

WorldNIC
by Chris Cappuccio 12 Jun '98

12 Jun '98

What's this deal about InterNIC forwarding all request to WorldNIC? If I send in a (filled out) registration template to hostmaster(a)internic.net, it's completed by InterNIC... I think the real fraud is in WorldNIC and other registrars (like Netnames in the UK) selling vanity names in country TLDs. IANA encourages this. WorldNIC has an offer for $17,545 USD that will register a domain in all 72 TLDs (or 5 domains in all 72 TLDs for $87,725 USD)... ******************************************************** Chris Cappuccio voice: +1-541-317-3437 System Administrator fax: +1-541-317-3402 Empire Net, Inc. 20310 Empire Ave chris(a)empnet.com Suite A-100 Bend, OR 97701 http://www.EmpireNet.net/ ********************************************************

19 34

Re: So... what's the best routing solution for..
by Joe Provo - Network Architect 12 Jun '98

12 Jun '98

[blah blah blah] Hrm, stinks like any religious war circling around the term "best". NODlist, please. Warning! operational content below! There was an ugly fiber cut affecting the northeast today -- anyone have detailed data? Joe

3 2