- Test - lists.nanog.org

Re: Quote from Kashpureff / Re: question about per. hack
by Jay＠Iperdome.com 22 Jul '97

22 Jul '97

As a new subscriber to this list, I am pleased to see a diversity of opinions without *flaming*. At 03:32 PM 7/22/97 -0500, Aaron Abelard wrote: >I'm sick of paying the NIC to, and in reality I think Kashpureff's hack is >pretty elegant. However, I disagree that capitalism is /pure evil/. Once >upon a time the net was driven by research and academia, but that day has >passed. The net as it stands now is in poor shape, and a with the latest >intense round of backhoe attacks and DNS problems the enormous amount of >capital invested in the internet will have to be protected. This is when >those capitalist companies will finally start to hash out technologies >that make the internet more redundandt. Agreed! >The problem and, I >believe, the solution lies with the root name servers. Until people >accept and use more than the current InterNIC root server we won't be able >to announce any more domain name strategies. Agreed! All in all, I *do* think that NSI has done a good job with their role as registrar and Root Server Operator. I even think that their recent glitch was not to be unexpected, and any registrar could have a similar glitch at some point in their future. My only issue with NSI is that they stand to benefit without ever facing any financial risk (NSF funding ==> collect fees as a government sanctioned monopoly ==> cashing out via IPO). Open the name space up to true competition (i.e. not the gTLD-MoU), and all netizens will benefit. Regards, Jay Fenello President, Iperdome, Inc. 404-250-3242 http://www.iperdome.com

2 1

Re: BIND vulnerability to "additional information" hack
by Paul A Vixie 22 Jul '97

22 Jul '97

since these questions are common, i've decided to publish the answer on NANOG. > I was under the impression that the vulnerability to bogus "additional > information" was a thing of pre-4.9 BINDs, and that all versions of > 4.9.x are safe. What you wrote here implies that only 4.9.5-P1 and > later are actually safe. there are varying degrees of corruption. to protect against alternic, you have to run 8.1.1 or 4.9.6. even 4.9.5-P1 is susceptible. > I'm responsible for a number of nameservers on the Internet, at a > number of sites. Most of them are running BIND 4.9.3 and a few are > running 4.9.4 and 4.9.5; none are yet running any version of BIND 8. 4.9.6 is your friend. it's a drop-in, zero insertion force replacement for 4.9.*. it's not as good in general as 8.1.1, but it protects against alternic cache pollution as well as 8.1.1, which is as well as we can do it without full DNSSEC. > Although they will all eventually be upgraded, I'm considering how > urgent it is to upgrade them all now. Are they vulnerable to this hack? YES.

1 0

Re: Quote from Kashpureff / Re: question about per. hack
by Curt Howland 22 Jul '97

22 Jul '97

> > taking money for an essential service and trying to make a profit, is > > PURE EVIL and goes against everything that I belive "the net" should be. > > Sure! Money, of course, is the root of all evil. No, LOVE OF MONEY is the root of all evil, or so the quote goes. Basically envey, jelousy, coveting your neighbors YP-X... > NSI does a good job at what they do, and 50 bucks a year really isn't > much to whine about. I have no problem with paying them, when I choose to use them. The fact that they are the only game in town, by goverment fiat, is objectionable. Honestly, I like the idea of competing NIC's. Not exactly sure how to do it without just as much an arbitrary fiat as what I object to in the first place. The *idea* of the Alternic is excelent. Their execution is prosecutable. > Grow up Mr. Mathias. Profit is the only reason you have a job, food in > your grocery store, and an Internet to complain about. Couldn't agree more. Viva la almighty BUCK. > Jesse "I'm Capitalist and I'm proud" Caulfield. Curt-

1 0

Network problem update (fwd)
by Robert Bowman 22 Jul '97

22 Jul '97

> > Time: 1410 EST > Date: 22 July 1997 > > >From approximately 1300-1400 EST we experienced a cisco IOS feature which > caused significant instability in our network. > > We currently have the network undercontrol and routing instabilities > should clear up in the next 20-30 minutes. If you continue to have > problems, please contact the Sprintlink NOC. Thank you. > > Sarah Garfinkel > Sprintlink NOC > > Is this the "no router bgp <insert your AS>" feature?

1 0

RE: Quote from Kashpureff / Re: question about per. hack
by Chris A. Icide 22 Jul '97

22 Jul '97

Maybe the name registration service should be operated by a not-for-profit organization governed by a board of directors elected by the users of the service? ;-) Chris -----Original Message----- From: Mathias K. [SMTP:ripper@dataway.com] Sent: Tuesday, July 22, 1997 2:46 PM To: nanog(a)merit.edu Subject: Re: Quote from Kashpureff / Re: question about per. hack I don't think that some kind of knee jerk reaction like blocking all addresses that have ever been associated with alternic is in order. Certainly Kashpureff has gone off the deep end, but am I the only one here who thinks that he is essentially fighting the good fight? I'm sick of paying the internic every year just for the privilege of participating in their name service. The centralized nature of the system is a real drag, and I'm hoping that some genius out there is working on the next generation that will allow anyone to associate their ip address with anything they want. I believe that the capitalist aspect of what the internic is doing; taking money for an essential service and trying to make a profit, is PURE EVIL and goes against everything that I belive "the net" should be. So although I don't particularly like they way that Kashpureff is staging his rebellion, I do believe in his cause. -mat ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ mathias kolehmainen + ripper(a)dataway.com (ripper(a)secretagent.bob) ninewood http://www.roomfullaspies.com/9wood public key http://www.roomfullaspies.com/pgpkey.asc

1 0

NANOG and NAIR Synergy
by Jim Fleming 22 Jul '97

22 Jul '97

Is there any synergy that can be gained by having NANOG members and the proposed NAIR founders work together to allocate from the following /8 ? It seems that many of the proposed NAIR founders are also active in NANOG which is sponsored by Merit which is partially funded by the NSF. ========== Merit Network Inc. (NET-MERIT) 4251 Plymouth Road, Suite C Ann Arbor, MI 48105-2785 Netname: MERIT Netnumber: 35.0.0.0 Coordinator: Ogden, Jeff (JO143) jogden(a)MERIT.EDU 313-764-9430 (FAX) 313-647-3185 Domain System inverse mapping provided by: DNS.MERIT.NET 198.108.1.42 DNS2.MERIT.NET 198.109.36.3 DNS3.MERIT.NET 198.108.130.5 DNS.UCAR.EDU 192.52.106.6 Record last updated on 02-Apr-97. Database last updated on 22-Jul-97 04:12:22 EDT. ===========

1 0

Fiber Cut New Orlenas - Baton Rouge
by Eric Wieling 22 Jul '97

22 Jul '97

Sprint reports that there is a fiber "incident" between New Orleans and Baton Rouge. -- Eric Wieling (eric(a)ccti.net) Corporate Communications Technology Sales: 504-585-7303 (sales(a)ccti.net) Support: 504-525-5449 (support(a)ccti.net) A BellSouth Communications Specialist. No, I don't work for BellSouth, I'm just on the phone with them so much that I'm an expert at getting them to do things.

1 0

Re: question about per. hack
by Jay＠Iperdome.com 22 Jul '97

22 Jul '97

Thanks for the URL. FYI, Iperdome canceled our beta test with Eugene last week after he redirected www.internic.net At 11:49 AM 7/22/97 -0500, you wrote: > >http://www.merit.edu/mail.archives/html/nanog/msg03147.html > Regards, Jay Fenello President, Iperdome, Inc. 404-250-3242 http://www.iperdome.com

1 0

Re: DC fiber cut: field report
by Vadim Antonov 22 Jul '97

22 Jul '97

Sean M. Doran <smd(a)clock.org> wrote: >PDH protection switching is slow and ugly, but it allows >fall-back connectivity to be oversold or not provisioned in >the first place. That is, you can sell people "cheapo" circuits >which have no backup, and even more, circuits which will fail >when an unrelated circuit used by a customer buying an expensive >circuit fails. Yep. I would say that telcos have rather strong incentive to keep PDH in place. It may actually be a good deal for IP people -- you can get more capacity at a lower price, and handle redundancy at level 3 (hey, interior re-routing is fast). Of course, to get advantage of that practice one may want to work closely with telco to understand their modes of failure, and write a language protecting topology of his network overlay. >If you have spare fibres in the ground, light them up to >protect your primary SDH paths. Nyah. Protection does not generate more sales, and so does not seem attractive to sales folks. The ones calling for protection are engineers inside telcos, and they are usually ignored. >You don't need an additional MUX, you don't need extra DAXCs, >and you don't need to scurry around reprogramming lots of equipment >when someone wrecks your fibre. It's technical staff who's doing all the scurrying. Sales people already got their comission and are quite happy. My prediction is that redundancy of telco data services won't improve at all until they find a way to reconcile need for redundancy and desire to sell all the capacity they got. Native IP networks seem to have the ability to provide that. --vadim

1 0

RE: Quote from Kashpureff
by Wheeler, Jesse W 22 Jul '97

22 Jul '97

Sounds like a Hitler of the Internet.. "Absolute power corrupts absolutely." -- Don't Remember \|/ (oo ) ( <_ ) ---------------o00o-----o00o---------------- Jesse W. Wheeler Quality Assurance Analyst Reynolds & Reynolds HSD-PDX --------------------------------------------------------------- >---------- >From: Aaron Abelard[SMTP:aaron@abelard.com] >Sent: Tuesday, July 22, 1997 10:39 AM >To: nanog(a)merit.edu >Cc: ekashp(a)alternic.net >Subject: Quote from Kashpureff > > >I'm truly demonstrating the power of what it is that >we can do," said Kashpureff. "We can literally go >down through the top 100 Web sites and switch >them one-for-one, finding the best match - we can >have all kinds of fun with this thing. I can take >China off the air if I choose to do so." > >(http://www.wired.com/news/news/politics/story/5232.html) > >I wonder if he is /trying/ to get himself in trouble? > > Aaron Abelard / aaron(a)abelard.com / http://www.abelard.com/ > "Nunc Lento Sunito Dicunt, Moreris" (Donne) > "Lasciate tutto speranza, voiche entrate" (Dante) > "kinda like a cloud i was up way up in the sky" (NIN) > "Once more unto the breech, dear friend" (Shakespeare) > > >

1 0