- Test - lists.nanog.org

Re: Denial of Service Attacks disguised as Spam...
by gary flynn 05 Jan '98

05 Jan '98

> From: Dean Anderson <dean(a)av8.com> > Subject: Re: Denial of Service Attacks disguised as Spam... > > >many respects, he is forging his identity and I cannot imagine that > >forgery is legal. > > The ability to send anonymous email will probably remain protected. Also, > the legal beagles I know tell me it is perfectly legal to use an alias as > long as it is not done for fraudulent purposes. Ah, but sooner or later, we're going to have fairly universal certificate based authentication of some type ( IPSEC and/or application layer ). Then it will be a simple manner of refusing unauthenticated connections as policy or desires dictate. Someone may be able to send anonymous mail but nobody will have to read it :) The low level stuff will provide the ability to reliably trace packet level attacks and perhaps make decisions at the router level. The higher level stuff will provide the ability to implement authorization rules at the application or server level. You want to deliver mail to my mail server, you better tell me who you are. You want to send packets through my router, you best be authenticated in some way. Gary Flynn Network Analyst James Madison University

1 0

Re: Things to do to make the network better
by owen＠DeLong.SJ.CA.US 05 Jan '98

05 Jan '98

> I will also point out that many of the recent "smurf" attacks and > similar problems people are having on the net would be gone if people > would just carefully filter internal/external addresses on their > border machines, that is, prevent packets claiming to be from "inside" > networks from coming in from the "outside", and prevent packets > claiming to be from "outside" networks from going out from the > "inside". The latter will stop your network from *ever* being the > source of a wide variety of packet forgery attacks, and is necessary > to being a good network citizen. The former will stop your network > from being the subject of a wide variety fo packet forgery attacks, > and is necessary to make your customers even remotely safe on the net. That's great if you're a downstream provider with no transit customers. However, when you become a transit provider, it becomes much more difficult to determine inside vs. outside, since you're more in the middle between two "outsides" that pass traffic through you. Owen

3 2

Re: Denial of Service Attacks disguised as Spam...
by dlr＠bungi.com 05 Jan '98

05 Jan '98

[In the message entitled "Denial of Service Attacks disguised as Spam..." on Dec 31, 15:30, Barry Shein writes:] > > We're being fooled, we're allowing criminals to operate without > challenge. > Not entirely without challenge. See http://maps.vix.com/rbl/ -- Dave Rand dlr(a)bungi.com http://www.bungi.com

1 0

NOC phone number
by Richard Welty 05 Jan '98

05 Jan '98

not that anyone is likely to have a burning need for it just yet, but for the general information of nanog subscribers, here is the phone number for INet Solution's NOC: 518-432-4638 x1204 (my extension is x1202) richard -- Richard Welty Chief Internet Engineer, INet Solutions welty(a)inet-solutions.net http://www.inet-solutions.net/~welty/ 888-311-INET

1 0

FYI: BGP Security Analysis
by rja＠corp.home.net 05 Jan '98

05 Jan '98

Folks interested in Paul Vixie's recent thread (and others interested in inter-domain routing) should read: ftp://ds.internic.net/internet-drafts/draft-murphy-bgp-secr-00.txt which is a preliminary security analysis of BGP. It is also useful for folks to read draft-heffernan-* and to actually deploy the TCP MD5 Authentication option for BGP sessions (to protect against low-level attacks, not as protection for bogus prefix advertisements from otherwise legitimate BGP peers). Apologies for posting content onto NANOG and disturbing the usual noise. Ran rja(a)home.net

1 0

Re: Three common lies
by Sean M. Doran 05 Jan '98

05 Jan '98

(4) NANOG is a high-content technical mailing list for Internet operators. Sean.

1 0

Three common lies
by Hank Nussbacher 05 Jan '98

05 Jan '98

This appeared recently on rec.humor and I figured some people here would enjoy it: (1) The check is in the mail (2) I promise not to come in your mouth (3) For automatic removal from our emailing list, type "remove" in the subject box and email it back to us Cheers, Hank

1 0

Give Your Child "One of the Best Children's Videos""
by Zf1818WiI＠worktow1est.com 04 Jan '98

04 Jan '98

The holidays are upon us. If you're like a lot of people, you struggle to find gifts for your children that will entertain and amuse them at the same time. Well, here's a gift that will delight your child - A Is For Airplane! "A Is For Airplane" is the award-winning educational video that shows kids all the fun and teamwork involved in running an airline. "A Is For Airplane" gets viewers behind the scenes at the airport! Kids get to see: * The ticket counter! * Inside the baggage system! * On the ramp with the baggage loaders and fuelers! * In the catering kitchens! * Inside the control tower! * In the hangar with the mechanics! * At the boarding gate! * And even in the COCKPIT of a real Boeing 757! Parenting Magazine calls "A Is For Airplane" "One of the Best Videos of 1996!" It's also Approved by the Parent's Choice Foundation! Thousands of copies of "A Is For Airplane" have been sold for $14.95, but as an Internet Special this holiday season you can get "A Is For Airplane" for only $11.95 (plus shipping and handling.) ORDER TODAY FOR GUARANTEED HOLIDAY DELIVERY! You can order "A Is For Airplane" by calling our toll-free number - 800-250-4210. If you'd like more information, visit our Website at www.ppmm.com/jfp/jfp1297.htm or CLICK HERE! Thank you for your time... Johnson Family Productions Madison, WI

1 0

aggregation tool
by Jared Mauch 02 Jan '98

02 Jan '98

How many backbone NSP's would use a bgp aggreation tool that was setup similar to the route-views.oregon-ix.net or route-server.cerf.net that you would be able to do queries on to say "what might I not be aggregating correctly?" I'm working on such a tool that would be able to speak eBGP to a router (multihop or otherwise) and give this information. I've noticed a few providers that have /16's that announce each specific /24 or almost each one also, this would also make it possible to generate lists of folks that clog the routing table. I've sent e-mail to some of these folks today... Please direct responses directly to me if you're interested, or if you have something useful on this topic for *everyone* on nanog, include them also. - Jared -- ----------------- jared(a)puck.nether.net - Nether Network ------------------ CICNet/IAGNet/QUALnet/NetherNet - finger jared(a)puck.nether.net for pgp key

1 0

The Cidr Report
by Tony Bates 02 Jan '98

02 Jan '98

This is an auto-generated mail on Fri Jan 2 12:00:00 PST 1998 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 02Jan98 0) General Status Table History ------------- Date Prefixes 261297 47433 271297 47424 281297 47380 291297 47497 301297 47601 311297 47560 010198 47266 020198 47531 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 3075 Number of ASes announcing only one prefix: 1452 (758 cidr, 694 classful) Largest number of cidr routes: 521 announced by AS3561 Largest number of classful routes: 973 announced by AS701 1) Gains by aggregating at the origin AS level --- 02Jan98 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS2493 698 391 307 44.0% iSTAR Internet, Inc. AS4293 417 199 218 52.3% IMCI AS174 882 675 207 23.5% Performance Systems International AS816 571 399 172 30.1% UUNET Canada (ASN-UUNETCA-AS4) AS3602 457 300 157 34.4% Sprint Canada Inc. AS3749 190 54 136 71.6% TECNET AS701 973 878 95 9.8% Alternet AS839 123 31 92 74.8% North West Territories Regional N AS3751 119 46 73 61.3% SNET-AS AS5668 102 37 65 63.7% Century Telephone Inc. AS2048 153 88 65 42.5% LaNet AS3804 202 140 62 30.7% Bell Solutions AS1 869 808 61 7.0% BBNPLANET AS549 218 161 57 26.1% ONet Backbone AS271 111 56 55 49.5% BCnet Backbone AS7545 115 63 52 45.2% TPG Internet Pty Ltd AS3464 119 67 52 43.7% Alabama Research and Education Ne AS1239 580 528 52 9.0% SprintLink Backbone AS4763 126 75 51 40.5% Telstra New Zealand AS4747 114 64 50 43.9% Taiwan Telecommunication Network AS4648 190 140 50 26.3% NZIX 2 AS72 84 36 48 57.1% Schlumberger Information Network AS719 505 460 45 8.9% LANLINK autonomous system AS3561 936 894 42 4.5% MCI AS1221 256 215 41 16.0% AARNET-AS AS684 82 43 39 47.6% Manitoba Regional Network Backbon AS6181 60 21 39 65.0% FUSE-NET AS4740 330 291 39 11.8% ASN-OZEMAIL (Ozemail Pty Ltd) AS2711 96 57 39 40.6% SUNBELT-AS AS1691 164 125 39 23.8% BCTEL For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0