- Test - lists.nanog.org

Wcom Fiber Cut Again
by Eric D. Madison 05 Aug '97

05 Aug '97

Looks like there is another large fiber cut in the LA area today.. we are on reroute at the moment.. only 1 DS3 today. Year of the Backhoe continues! Anyone out there using the Wcom ATM backbone for transport? If so, how many outages have there been in the last month??? Eric _______________________________________________________ Eric D. Madison - Senior Network Engineer - ACSI - Advanced Data Services - ATM/IP Backbone Group 24 Hour NMC/NOC (800)291-7889 Email: noc(a)acsi.net

2 1

Re: Transit over the MFS meet points as a product?
by Danny McPherson 05 Aug '97

05 Aug '97

> If this happens, will MFS attempt to police the meet point > and force anyone who is currently providing "transit" to purchase > and user this "product"? I don't see how they'd differentiate the traffic.. > Will it change/worsen the performance of the heavier traffic > sites by "stealing" customers from the larger traffic sources, and > then dumping traffic upon those already overloaded circuits making > the HoLB problem all the worse? If this happens I'd suggest everyone at the NAPs deploy some type of MAC-layer filtering. It's far to easy (and seemingly common) for providers to forget to set "next-hop-self" on NAP routes .. so what I foresee is providers selling transit via the exchanges ...and then never seeing the traffic bound to *their* unsuspecting peers. > Does anyone really care whether or not transit is sold over > the MFS meet points, and if so, what are the operation concerns? I personally don't think it's a good idea, there are enough traffic related problems without "additional" transit-only connections. Perhaps this is MFS's ploy to sell MAC-layer filtering ;-) -danny

2 1

Transit over the MFS meet points as a product?
by Chris A. Icide 05 Aug '97

05 Aug '97

Rumor has it that MFS is planning to release a "product" that will provide an official way to provide transit through their meet points. From what I've heard, it will be offered through MFS meet point customers current interfaces. Anyone have any thoughts on this? I had some thoughts myself: If this happens, will MFS attempt to police the meet point and force anyone who is currently providing "transit" to purchase and user this "product"? Will it change/worsen the performance of the heavier traffic sites by "stealing" customers from the larger traffic sources, and then dumping traffic upon those already overloaded circuits making the HoLB problem all the worse? Does anyone really care whether or not transit is sold over the MFS meet points, and if so, what are the operation concerns? Chris A. Icide Nap.Net, L.L.C.

3 2

Re: Your opinion please on DOS attack ...
by Andy Pitts 05 Aug '97

05 Aug '97

> From owner-nanog(a)merit.edu Mon Aug 4 20:10 EDT 1997 > X-Sender: ldv2(a)texoma.net > Date: Mon, 04 Aug 1997 19:07:50 -0500 > To: nanog(a)merit.edu > From: Larry Vaden <vaden(a)texoma.net> > Subject: Your opinion please on DOS attack ... > Mime-Version: 1.0 > > Please excuse me if this is off topic; if so, I would appreciate a pointer > to the correct list. > > We've received a few thousand late this afternoon of email messages similar > to the below. > > What do you make of this? Is there a defense other than blocking the > alleged IP range? > > Your opinion appreciated. > > Larry > > ----- > > Aug 4 18:50:06 mail sendmail[29805]: SAA29805: > <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown > Aug 4 18:50:06 mail sendmail[29805]: SAA29805: from=<>, size=0, class=0, > pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79] > Aug 4 18:50:07 mail sendmail[29786]: SAA29786: > <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown > Aug 4 18:50:07 mail sendmail[29786]: SAA29786: from=<>, size=0, class=0, > pri=0, nrcpts=0, proto=SMTP, relay=upsmot03.msn.com [204.95.110.85] > Aug 4 18:50:09 mail sendmail[29810]: SAA29810: > <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown > Aug 4 18:50:09 mail sendmail[29810]: SAA29810: from=<>, size=0, class=0, > pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79] > > It is worth looking at the sendmail web page (www.sendmail.org) There are some rule sets to help with spamming. One will prevent relaying through your site by rejecting any mail that does not originate or terminate within your domain. This will stop any relying. There is another rule set that will reject any mail if the domain in the "From:" line does not resolve. Although this will not stop all spam, it does get a lot of it. This all works with sendmail 8.6. RBDC was for a time a favorite relay site for many and caused us no end of trouble. sendmail 8.6 and the anti-relaying patch stopped all that cold. -- Andy Pitts : "Knowledge is a deadly friend andy(a)rbdc.rbdc.com : When no one sets the rules." http://www.rbdc.com : --King Crimson--

1 0

Re: Another end to spam
by Jon Stevens 05 Aug '97

05 Aug '97

sendmail 8.8.7 includes some spam filter rulesets from eric in the knecht.mc file... very clear and very easy to install... another cool package that i just found is at <http://consult.ml.org/> called spamcan...it dumps everything in a file...although, the patches are for 8.8.6... -jon

1 0

Your opinion please on DOS attack ...
by Larry Vaden 05 Aug '97

05 Aug '97

Please excuse me if this is off topic; if so, I would appreciate a pointer to the correct list. We've received a few thousand late this afternoon of email messages similar to the below. What do you make of this? Is there a defense other than blocking the alleged IP range? Your opinion appreciated. Larry ----- Aug 4 18:50:06 mail sendmail[29805]: SAA29805: <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown Aug 4 18:50:06 mail sendmail[29805]: SAA29805: from=<>, size=0, class=0, pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79] Aug 4 18:50:07 mail sendmail[29786]: SAA29786: <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown Aug 4 18:50:07 mail sendmail[29786]: SAA29786: from=<>, size=0, class=0, pri=0, nrcpts=0, proto=SMTP, relay=upsmot03.msn.com [204.95.110.85] Aug 4 18:50:09 mail sendmail[29810]: SAA29810: <_-MetHOd-MaN-_(a)mail.texoma.net>... User unknown Aug 4 18:50:09 mail sendmail[29810]: SAA29810: from=<>, size=0, class=0, pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79]

1 0

NAPs
by Anthony Lemons 04 Aug '97

04 Aug '97

Anyone know if there is a list of all the NAPs? Also, is there a NAP located in Columbus, Ohio? Anthony

3 2

Non-ISP companies multi-homing?
by netops 04 Aug '97

04 Aug '97

Does anyone know of any non-ISP companies that have decided to multi-home? Is this a major trend for non-ISP companies running mission-critical applications on the Internet? So far, I only know of a couple, with PointCast being one of them. Thanks, Lincoln Silver FlyCast Communications

12 11

RE: Mainframe Operations
by Meany John P 04 Aug '97

04 Aug '97

What does this have to do with NANOG? > -----Original Message----- > From: Al Smith [SMTP:Al.Smith@mail.tju.edu] > Sent: Monday, August 04, 1997 8:41 AM > To: nanog(a)merit.edu > Subject: Mainframe Operations > > I need to know where I can gather more information on being a > mainframe > operator. > > -Al Smith > al.smith(a)mail.tju.edu

1 0

Re: Summary of ANTI-spam techniques now available
by Graham Toal 04 Aug '97

04 Aug '97

> >The more people running sites who have this information, the better. > > Graham Toal, a TISPA member, replaces routine CHECKCOMPAT (which was > designed to be local code) in conf.c in sendmail with extensive code. His > approach has made Eric Allman's www.sendmail.org page and can be found at > <http://www.gtoal.com/spam/sendmail.html>. Although the code can be tweaked to bounce spam immediately, usually it just tags it with an extra header and allows the user to filter or delete it with procmail or Eudora filters. It implements a scoring system and has been pretty stable for the last month or so with very few modifications being needed to the ruleset any more. (In fact, Tispa members will have been wondering why I've been so quiet on the subject of spam on our mailing list recently - that's why - it's so long since I've had any I don't have much to say on the subject any more :-)) > Graham indicates "Anyone else who is not a Tispa member who wishes to use > this code > must request and be given explicit permission from me." Which is almost always granted unless your surname happens to be Wallace :-) It's really just a way to make sure I keep a mailing list of everyone using the code so I can notify people of bug fixes. (Of which there's been one so far) I was CC'd this mail; I'm not a member of nanog (though I guess I should be; too many lists, too little time) so if there's any further discussion on this topic that I can help with, I'd appreciate if someone could forward me any articles that need a reply or remember to cc gtoal(a)vt.com when you post them. Thanks. Thanks G

1 0