- Test - lists.nanog.org

RE: Mainframe Operations
by Meany John P 04 Aug '97

04 Aug '97

What does this have to do with NANOG? > -----Original Message----- > From: Al Smith [SMTP:Al.Smith@mail.tju.edu] > Sent: Monday, August 04, 1997 8:41 AM > To: nanog(a)merit.edu > Subject: Mainframe Operations > > I need to know where I can gather more information on being a > mainframe > operator. > > -Al Smith > al.smith(a)mail.tju.edu

1 0

Re: Summary of ANTI-spam techniques now available
by Graham Toal 04 Aug '97

04 Aug '97

> >The more people running sites who have this information, the better. > > Graham Toal, a TISPA member, replaces routine CHECKCOMPAT (which was > designed to be local code) in conf.c in sendmail with extensive code. His > approach has made Eric Allman's www.sendmail.org page and can be found at > <http://www.gtoal.com/spam/sendmail.html>. Although the code can be tweaked to bounce spam immediately, usually it just tags it with an extra header and allows the user to filter or delete it with procmail or Eudora filters. It implements a scoring system and has been pretty stable for the last month or so with very few modifications being needed to the ruleset any more. (In fact, Tispa members will have been wondering why I've been so quiet on the subject of spam on our mailing list recently - that's why - it's so long since I've had any I don't have much to say on the subject any more :-)) > Graham indicates "Anyone else who is not a Tispa member who wishes to use > this code > must request and be given explicit permission from me." Which is almost always granted unless your surname happens to be Wallace :-) It's really just a way to make sure I keep a mailing list of everyone using the code so I can notify people of bug fixes. (Of which there's been one so far) I was CC'd this mail; I'm not a member of nanog (though I guess I should be; too many lists, too little time) so if there's any further discussion on this topic that I can help with, I'd appreciate if someone could forward me any articles that need a reply or remember to cc gtoal(a)vt.com when you post them. Thanks. Thanks G

1 0

Mainframe Operations
by Al Smith 04 Aug '97

04 Aug '97

I need to know where I can gather more information on being a mainframe operator. -Al Smith al.smith(a)mail.tju.edu

1 0

Sunday in Tallahassee
by Bob Broedel 03 Aug '97

03 Aug '97

Dear NANOG Folk ... Haven't seen anything on nanog or the outage lists about this, but things are looking pretty bad from Tallahassee. Any idea what is happening with connectivity this weekend? (Sunday evening) Sincerely, Bob Broedel Meteorology Dept. Florida State University, Tallahassee ============================ huey.bro> date Sun Aug 3 19:00:38 EDT 1997 huey.bro> check21 //// a ping to BBN ... ----198.102.72.10 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss //// a ping to CENTEL ... ----198.102.72.25 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss //// a ping to AADS ... ----198.32.130.12 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss //// a ping to MAE-East ... ----192.41.177.181 PING Statistics---- 4 packets transmitted, 1 packets received, 75% packet loss /// a ping to MAE-West ... ----198.32.136.14 PING Statistics---- 4 packets transmitted, 2 packets received, 50% packet loss /// a ping to PacBell ... ----206.13.28.11 PING Statistics---- 4 packets transmitted, 1 packets received, 75% packet loss /// a ping to Sprint ... ----192.157.69.11 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss /// a ping to DivCom ... ----199.250.21.20 PING Statistics---- 4 packets transmitted, 0 packets received, 100% packet loss /// a ping to FIRN ... ----198.102.72.20 PING Statistics---- 4 packets transmitted, 1 packets received, 75% packet loss ======================= ========================== Bob Broedel, Engineer = Strike Out ALS ! = Meteorology / 404 Love Building = (Lou Gehrig's Disease) = FLORIDA STATE UNIVERSITY = List Owner: = Tallahassee, Florida 32306-4520 USA = ALS INTEREST GROUP = ================================================================ TEL: 850-644-6840 (work, answering machine), 850-576-4906 (home) FAX: 850-644-9642 ATTN:BROEDEL E-mail: bro(a)huey.met.fsu.edu TELEX (AT&T EasyLink): 5106014520 (TALLY-KRAS FL) ================================================================ 24 hour active hand-held cellular phone 904(soon 850)-556-4286 ================================================================

1 0

Internet Building topology
by Stephen Balbach 03 Aug '97

03 Aug '97

Hi, I am designing an "Internet Building" concept using ethernet. Below is a model using 2 cisco Catalyst 1912's (12 port ethernet switch) and a cisco 2501. Switch 2 is on the 2nd floor and Switch 1 is in 1st floor. Does this look like a viable topology? Are there other/better ways to approach this for scaleability? Thanks for any ideas/experiences. x.x.x.0 /26 (Customer 2nd floor) | | x.x.x.64 /26 (Customer 2nd floor) | | | | Switch 2 (2nd floor) A | B | C VLAN 1 = A+C | VLAN 2 = B+C | | | (cable drop between 1st and 2nd floor) | | | Switch 1 (first floor) A | B | C VLAN 1 = B + C | | cisco (first floor) ip secondary x.x.x.0 /26 ip secondary x.x.x.64 /26 | | | T1 to Internet | |

1 0

Re: how to protect name servers against cache corruption
by smd＠clock.org 03 Aug '97

03 Aug '97

"William Allen Simpson" <wsimpson(a)greendragon.com> writes: > The Ferguson quote was on the NANOG list, and seemed > very mild Hahhahahahahahahhaha, well most quotes would to you, Bill. Sean. (yet another rude asshole bastard)

1 0

Re: Summary of ANTI-spam techniques now available
by Bill Woodcock 03 Aug '97

03 Aug '97

> Can i deduce from this that you have blocked PSI We did. Cut the spam attempts here by about 75%, and I haven't had any complaints from customers. We subsequently switched over to Sendmail 8.8.6 with filtering, of course, but I don't think we've bothered to remove the PSI filter from our router... :-) Bad attitude, I know, and now I'll probably have to go remove it, so I can feel like I'm still one of hte good guys, promoting connectivity and trust, etc. -Bill

1 0

Re: Summary of ANTI-spam techniques now available
by David Stoddard 02 Aug '97

02 Aug '97

FWIW, we have an anti-spam list on our site that is used by a lot of other ISPs on the net. It contains all of the known Cyberpromo domains and IP address blocks, and a ton of other stuff. You can get our active list anytime by sending an email message to: spamlist(a)us.net The list is ready to load into sendmail 8.8.6 using the filter rules available at: http://www.informatik.uni-kiel.de/%7Eca/email/chk-newmap.html BTW, we will remove any entry in the file as long as the spammer agrees to sign and notarize a contract that establishes damages at $10,000 per incident if it happens again (and we WILL enforce the contract). If they are ISPs, I want to talk personally to the owner of the company. We don't put entries into the list lightly, and we don't remove them lightly either. Dave Stoddard US Net Incorporated 301-572-5926 dgs(a)us.net

1 0

Re: An end to spam through Graphnet
by Bill Woodcock 02 Aug '97

02 Aug '97

Jon taught J.D. to suck eggs thusly: > I just implemented the check_* stuff on my server...it works > great and was fairly easy to do... I noticed that the LocalIP stuff wasn't actually working, but haven't had a chance to check into why yet... Anybody actually seen that one in action? -Bill ______________________________________________________________________________ bill woodcock woody(a)zocalo.net woody(a)nowhere.loopback.edu user(a)host.domain.com

3 2

Re: how to protect name servers against cache corruption
by Francois Beauregard 02 Aug '97

02 Aug '97

Another thing people tend to forget is the legacy systems that still need to be maintained... It's extremely easy to say "let's scrap BIND and build a better DNS system", but hey guys, you still need to support ALL PLATFORMs... Until you find me the GOD that will do this all in one shot, I'll prefer to go with Vixie's code... he got pretty good at it over time :-) And I think that Paul can confirm that like everybody else, he only have 24 hours in a day and only one head and one set of arms... Considering that, he is doing a VERY good job, give him some time and he will come up with the solution to those security issue, no one better then him knows the holes in the code/system... So unless there is some specific attacks GOING ON CURRENTLY on the net, can we get back to the main topic of discussion... At 16:09 97-08-01 -0700, Dave Crocker wrote: >Ben, > >At 10:30 PM 7/29/97 -0400, Ben Black wrote: >>so a statement from paul that the internet is effectively broken until >>DNSSEC is acceptable to you even if there are known ways to combat known >>attacks? >> >>stop worshipping long enough to think about the ramifications of this. > > Reponsible participation in public discussion is a difficult challenge for >even the most capable contributor. For others, the challenge is quite >basic. They must listen carefully. They must consider carefully. They >must stay on the topic. They must use professional language and avoid ad >hominem distractions. > > The fact that the security on your house is not optimal, it does not mean >that your house has no security. The fact that there are attacks which are >still feasible on the DNS does not mean that the DNS doesn't work. >("Broken" means doesn't work, in case there is confusion about your use of >language.) > > So please note that your response to this thread reduce it to an >inaccurate assessment. Given the importance of the DNS and the difficulty >which the general public has dealing with network security issues, it would >be highly irresponsible to propagate inaccurate statements like the one above. > >d/ >-------------------- >Dave Crocker >Internet Mail Consortium +1 408 246 8253 >675 Spruce Dr. fax: +1 408 249 6205 >Sunnyvale, CA 94086 USA info(a)imc.org , http://www.imc.org Sincerely ---------------------------------- Francois Beauregard FBorg(a)fbli.com FBLI.COM We love feedbacks and live by them Sales : Sales(a)fbli.com 1 (888) FBLI.COM Tech support : Support(a)fbli.com 1 (514) 349-0455 Internet Web : http://www.fbli.com ICQ : 1907537 Montreal, Canada ----------------------------------

1 0