- Test - lists.nanog.org

Re: Your opinion please on DOS attack ...
by Andy Pitts 05 Aug '97

05 Aug '97

> From owner-nanog(a)merit.edu Mon Aug 4 20:10 EDT 1997 > X-Sender: ldv2(a)texoma.net > Date: Mon, 04 Aug 1997 19:07:50 -0500 > To: nanog(a)merit.edu > From: Larry Vaden <vaden(a)texoma.net> > Subject: Your opinion please on DOS attack ... > Mime-Version: 1.0 > > Please excuse me if this is off topic; if so, I would appreciate a pointer > to the correct list. > > We've received a few thousand late this afternoon of email messages similar > to the below. > > What do you make of this? Is there a defense other than blocking the > alleged IP range? > > Your opinion appreciated. > > Larry > > ----- > > Aug 4 18:50:06 mail sendmail[29805]: SAA29805: > <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown > Aug 4 18:50:06 mail sendmail[29805]: SAA29805: from=<>, size=0, class=0, > pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79] > Aug 4 18:50:07 mail sendmail[29786]: SAA29786: > <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown > Aug 4 18:50:07 mail sendmail[29786]: SAA29786: from=<>, size=0, class=0, > pri=0, nrcpts=0, proto=SMTP, relay=upsmot03.msn.com [204.95.110.85] > Aug 4 18:50:09 mail sendmail[29810]: SAA29810: > <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown > Aug 4 18:50:09 mail sendmail[29810]: SAA29810: from=<>, size=0, class=0, > pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79] > > It is worth looking at the sendmail web page (www.sendmail.org) There are some rule sets to help with spamming. One will prevent relaying through your site by rejecting any mail that does not originate or terminate within your domain. This will stop any relying. There is another rule set that will reject any mail if the domain in the "From:" line does not resolve. Although this will not stop all spam, it does get a lot of it. This all works with sendmail 8.6. RBDC was for a time a favorite relay site for many and caused us no end of trouble. sendmail 8.6 and the anti-relaying patch stopped all that cold. -- Andy Pitts : "Knowledge is a deadly friend andy(a)rbdc.rbdc.com : When no one sets the rules." http://www.rbdc.com : --King Crimson--

1 0

Re: Another end to spam
by Jon Stevens 05 Aug '97

05 Aug '97

sendmail 8.8.7 includes some spam filter rulesets from eric in the knecht.mc file... very clear and very easy to install... another cool package that i just found is at <http://consult.ml.org/> called spamcan...it dumps everything in a file...although, the patches are for 8.8.6... -jon

1 0

Your opinion please on DOS attack ...
by Larry Vaden 05 Aug '97

05 Aug '97

Please excuse me if this is off topic; if so, I would appreciate a pointer to the correct list. We've received a few thousand late this afternoon of email messages similar to the below. What do you make of this? Is there a defense other than blocking the alleged IP range? Your opinion appreciated. Larry ----- Aug 4 18:50:06 mail sendmail[29805]: SAA29805: <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown Aug 4 18:50:06 mail sendmail[29805]: SAA29805: from=<>, size=0, class=0, pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79] Aug 4 18:50:07 mail sendmail[29786]: SAA29786: <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown Aug 4 18:50:07 mail sendmail[29786]: SAA29786: from=<>, size=0, class=0, pri=0, nrcpts=0, proto=SMTP, relay=upsmot03.msn.com [204.95.110.85] Aug 4 18:50:09 mail sendmail[29810]: SAA29810: <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown Aug 4 18:50:09 mail sendmail[29810]: SAA29810: from=<>, size=0, class=0, pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79]

1 0

NAPs
by Anthony Lemons 04 Aug '97

04 Aug '97

Anyone know if there is a list of all the NAPs? Also, is there a NAP located in Columbus, Ohio? Anthony

3 2

Non-ISP companies multi-homing?
by netops 04 Aug '97

04 Aug '97

Does anyone know of any non-ISP companies that have decided to multi-home? Is this a major trend for non-ISP companies running mission-critical applications on the Internet? So far, I only know of a couple, with PointCast being one of them. Thanks, Lincoln Silver FlyCast Communications

12 11

RE: Mainframe Operations
by Meany John P 04 Aug '97

04 Aug '97

What does this have to do with NANOG? > -----Original Message----- > From: Al Smith [SMTP:Al.Smith@mail.tju.edu] > Sent: Monday, August 04, 1997 8:41 AM > To: nanog(a)merit.edu > Subject: Mainframe Operations > > I need to know where I can gather more information on being a > mainframe > operator. > > -Al Smith > al.smith(a)mail.tju.edu

1 0

Re: Summary of ANTI-spam techniques now available
by Graham Toal 04 Aug '97

04 Aug '97

> >The more people running sites who have this information, the better. > > Graham Toal, a TISPA member, replaces routine CHECKCOMPAT (which was > designed to be local code) in conf.c in sendmail with extensive code. His > approach has made Eric Allman's www.sendmail.org page and can be found at > <http://www.gtoal.com/spam/sendmail.html>. Although the code can be tweaked to bounce spam immediately, usually it just tags it with an extra header and allows the user to filter or delete it with procmail or Eudora filters. It implements a scoring system and has been pretty stable for the last month or so with very few modifications being needed to the ruleset any more. (In fact, Tispa members will have been wondering why I've been so quiet on the subject of spam on our mailing list recently - that's why - it's so long since I've had any I don't have much to say on the subject any more :-)) > Graham indicates "Anyone else who is not a Tispa member who wishes to use > this code > must request and be given explicit permission from me." Which is almost always granted unless your surname happens to be Wallace :-) It's really just a way to make sure I keep a mailing list of everyone using the code so I can notify people of bug fixes. (Of which there's been one so far) I was CC'd this mail; I'm not a member of nanog (though I guess I should be; too many lists, too little time) so if there's any further discussion on this topic that I can help with, I'd appreciate if someone could forward me any articles that need a reply or remember to cc gtoal(a)vt.com when you post them. Thanks. Thanks G

1 0

Mainframe Operations
by Al Smith 04 Aug '97

04 Aug '97

I need to know where I can gather more information on being a mainframe operator. -Al Smith al.smith(a)mail.tju.edu

1 0

Sunday in Tallahassee
by Bob Broedel 03 Aug '97

03 Aug '97

Dear NANOG Folk ... Haven't seen anything on nanog or the outage lists about this, but things are looking pretty bad from Tallahassee. Any idea what is happening with connectivity this weekend? (Sunday evening) Sincerely, Bob Broedel Meteorology Dept. Florida State University, Tallahassee ============================ huey.bro> date Sun Aug 3 19:00:38 EDT 1997 huey.bro> check21 //// a ping to BBN ... ----198.102.72.10 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss //// a ping to CENTEL ... ----198.102.72.25 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss //// a ping to AADS ... ----198.32.130.12 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss //// a ping to MAE-East ... ----192.41.177.181 PING Statistics---- 4 packets transmitted, 1 packets received, 75% packet loss /// a ping to MAE-West ... ----198.32.136.14 PING Statistics---- 4 packets transmitted, 2 packets received, 50% packet loss /// a ping to PacBell ... ----206.13.28.11 PING Statistics---- 4 packets transmitted, 1 packets received, 75% packet loss /// a ping to Sprint ... ----192.157.69.11 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss /// a ping to DivCom ... ----199.250.21.20 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss /// a ping to FIRN ... ----198.102.72.20 PING Statistics---- 4 packets transmitted, 1 packets received, 75% packet loss ======================= ========================== Bob Broedel, Engineer = Strike Out ALS ! = Meteorology / 404 Love Building = (Lou Gehrig's Disease) = FLORIDA STATE UNIVERSITY = List Owner: = Tallahassee, Florida 32306-4520 USA = ALS INTEREST GROUP = ================================================================ TEL: 850-644-6840 (work, answering machine), 850-576-4906 (home) FAX: 850-644-9642 ATTN:BROEDEL E-mail: bro(a)huey.met.fsu.edu TELEX (AT&T EasyLink): 5106014520 (TALLY-KRAS FL) ================================================================ 24 hour active hand-held cellular phone 904(soon 850)-556-4286 ================================================================

1 0

Internet Building topology
by Stephen Balbach 03 Aug '97

03 Aug '97

Hi, I am designing an "Internet Building" concept using ethernet. Below is a model using 2 cisco Catalyst 1912's (12 port ethernet switch) and a cisco 2501. Switch 2 is on the 2nd floor and Switch 1 is in 1st floor. Does this look like a viable topology? Are there other/better ways to approach this for scaleability? Thanks for any ideas/experiences. x.x.x.0 /26 (Customer 2nd floor) | | x.x.x.64 /26 (Customer 2nd floor) | | | | Switch 2 (2nd floor) A | B | C VLAN 1 = A+C | VLAN 2 = B+C | | | (cable drop between 1st and 2nd floor) | | | Switch 1 (first floor) A | B | C VLAN 1 = B + C | | cisco (first floor) ip secondary x.x.x.0 /26 ip secondary x.x.x.64 /26 | | | T1 to Internet | |

1 0