- Test - lists.nanog.org

Re: filtering long prefixes
by Sean Doran 21 Sep '95

21 Sep '95

Credit where it's due: I note that PSI is currently announcing 206.0.0.0/13 with no more-specific prefixes. While I have had my differences with PSI, particularly wrt allocations made in The Swamp, I feel I have to praise them for doing a remarkably good job of aggregation in their newer CIDR blocks. Thanks, PSI! (Now, about your old stuff...) Sean. - -- Sean Doran <smd(a)sprint.net>

1 0

updated web pointer
by bmanning＠ISI.EDU 20 Sep '95

20 Sep '95

The ISI/RA web pointers have been updated. http://info.ra.net/div7/ra --bill

2 2

CERT Advisory CA-95:11 - Sun Sendmail -oR Vulnerability
by CERT Advisory 19 Sep '95

19 Sep '95

============================================================================= CA-95:11 CERT Advisory September 19, 1995 Sun Sendmail -oR Vulnerability ----------------------------------------------------------------------------- The CERT Coordination Center has received reports of problems with the -oR option in sendmail. The problem is present in the version of sendmail that is available from Sun Microsystems, Inc. in SunOS 4.1.X, including patches 100377-19 (for SunOS 4.1.3), 101665-04 (for SunOS 4.1.3_U1), and 102423-01 (for SunOS 4.1.4). ***This vulnerability is widely known and is currently being actively exploited by intruders.*** The CERT staff recommends installing the appropriate patches as soon as they are available from Sun Microsystems. Alternatives are installing a wrapper or installing sendmail version 8.6.12; see Section III for details. (Although sendmail 8.7 recently became available, we have not yet reviewed it.) As we receive additional information relating to this advisory, we will place it in: ftp://info.cert.org/pub/cert_advisories/CA-95:11.README We encourage you to check our README files regularly for updates on advisories that relate to your site. ----------------------------------------------------------------------------- I. Description There is a problem with the way that the Sun Microsystems, Inc. version of sendmail processes the -oR option. This problem has been verified as existing in the version of sendmail that is in SunOS 4.1.X, including patches 100377-19 (for SunOS 4.1.3), 101665-04 (for SunOS 4.1.3_U1), and 102423-01 (for SunOS 4.1.4). The -oR option specifies the host, called the mail hub, to which mail should be forwarded when a user on a client of that hub receives mail. This host can be identified with the -oR option on the command line as -oRhost_name or in the configuration file as: ORhost_name or by NFS mounting the /var/spool/mail directory from a file server, probably from the mail hub. In this case, the host name of the file server is used as the forwarding host identified as host_name above. All these configurations are vulnerable. II. Impact By exploiting the vulnerabilities, local users may be able to gain unauthorized root access and subsequently read any file on the system, overwrite or destroy files, or run programs on the system. Remote users cannot exploit this vulnerability. III. Solutions A. Install a patch from Sun when it becomes available. As of the date of this advisory, patches are not available to fix this problem. B. Install the sendmail wrapper available from ftp://ftp.cs.berkeley.edu/ucb/sendmail/sendmail_wrapper.c ftp://ftp.auscert.org.au/pub/auscert/tools/sendmail_wrapper.c Checksum: MD5 (sendmail_wrapper.c) = fb53f92b6fc539766cd69e8b08909ba1 C. An alternative to using the patch or wrapper is to install sendmail 8.6.12 and the sendmail restricted shell program ("smrsh"). (Although sendmail 8.7 recently became available, we have not yet reviewed it.) 1. Install sendmail 8.6.12 Sendmail is available by anonymous FTP from ftp://ftp.cs.berkeley.edu/ucb/sendmail ftp://info.cert.org/pub/tools/sendmail/sendmail.8.6.12 ftp://ftp.auscert.org.au/pub/mirrors/ftp.cs.berkeley.edu/ucb/sendmail ftp://ftp.cert.dfn.de/pub/tools/net/sendmail Checksums: MD5 (sendmail.8.6.12.base.tar.Z) = 31591dfb0dacbe0a7e06147747a6ccea MD5 (sendmail.8.6.12.cf.tar.Z) = c60becd7628fad715df8f7e13dcf3cc6 MD5 (sendmail.8.6.12.misc.tar.Z) = 6212390ca0bb4b353e29521f1aab492f MD5 (sendmail.8.6.12.patch) = 10961687c087ef30920b13185eef41e8 MD5 (sendmail.8.6.12.xdoc.tar.Z) = 8b2252943f365f303b6302b71ef9a841 A note on configuration: Depending upon the currently installed sendmail program, switching to a different sendmail may require significant effort, such as rewriting the sendmail.cf file. We strongly recommend that if you change to sendmail 8.6.12, you also change to the configuration files that are provided with that version. In addition, a paper is available to help you convert your sendmail configuration files from Sun's version of sendmail to one that works with version 8.6.12: "Converting Standard Sun Config Files to Sendmail Version 8" by Rick McCarty of Texas Instruments Inc. This paper is included in the sendmail.8.6.12.misc.tar.Z file and is located in contrib/converting.sun.configs. 2. Install the sendmail restricted shell program To restrict the sendmail program mailer facility, install the sendmail restricted shell program (smrsh) by Eric Allman (the original author of sendmail), following the directions included with the program. Copies of this program may be obtained from ftp://info.cert.org/pub/tools/smrsh ftp://ftp.uu.net/pub/security/smrsh The checksums are MD5 (README) = fc4cf266288511099e44b664806a5594 MD5 (smrsh.8) = 35aeefba9714f251a3610c7b1714e355 MD5 (smrsh.c) = d4822ce7c273fc8b93c68e39ec67739c --------------------------------------------------------------------------- The CERT Coordination Center thanks AUSCERT for providing the sendmail wrapper. --------------------------------------------------------------------------- If you believe that your system has been compromised, contact the CERT Coordination Center or your representative in the Forum of Incident Response and Security Teams (FIRST). If you wish to send sensitive incident or vulnerability information to CERT staff by electronic mail, we strongly advise that the email be encrypted. The CERT Coordination Center can support a shared DES key, PGP (public key available via anonymous FTP on info.cert.org) or PEM (contact CERT staff for details). Internet email: cert(a)cert.org Telephone: +1 412-268-7090 (24-hour hotline) CERT personnel answer 8:30 a.m.-5:00 p.m. EST(GMT-5)/EDT(GMT-4), and are on call for emergencies during other hours. Fax: +1 412-268-6989 Postal address: CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 USA CERT advisories and bulletins are posted on the USENET newsgroup comp.security.announce. If you would like to have future advisories and bulletins mailed to you or to a mail exploder at your site, please send mail to cert-advisory-request(a)cert.org. Past CERT publications, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from info.cert.org. Copyright 1995 Carnegie Mellon University This material may be reproduced and distributed without permission provided it is used for noncommercial purposes and the copyright statement is included. CERT is a service mark of Carnegie Mellon University.

1 0

The InterNIC's talk at NANOG
by peterb＠telerama.lm.com 17 Sep '95

17 Sep '95

Thanks for spending an hour, hour and a half talking about your plans for the domain name system without once mentioning your plans to start charging registration. That's why I go to NANOG -- so I can find out about major policy changes from "USA Today" and "Good Morning America". Peter PS: Mind you, I think it's completely reasonable for the NIC to charge, and have no opposition to the policy. But it would have been appropriate for you to have mentioned it in that forum. -- "Actually, you just think that's a telephone. Really, it's the alarm that rings whenever I get out of my chair." -- E.S. Peter Berger. System Administrator, Telerama Public Access Internet http://www.lm.com/~peterb Serving Pittsburgh since 1991.

1 0

Another tool to look at?
by sob＠academ.com 15 Sep '95

15 Sep '95

> bing can be found (thanks to www.infoseek.com) at > > http://www.cnam.fr/Network/bing.html > > dennis This has been briefly disucssed on the IAP list. -- Stan | Academ Consulting Services |internet: sob(a)academ.com Olan | For more info on academ, see this |uucp: amdahl!academ!sob Barber | URL- http://www.academ.com/academ |Opinions expressed are only mine.

1 0

Re: Other flapping prefixes. Compare and contrast.
by kwe＠6SigmaNets.com 14 Sep '95

14 Sep '95

At 7:40 AM 9/11/95, Hans-Werner Braun wrote: > >Well, while Sean's wording at times is, ahem, suboptimal, he is >referring to a real problem in the Internet System, and in fact one >that the North American Network Operators Group should take >responsibility for, at least for the North American part. The problem >is what others believe is a strength: an anarchic system of many >autonomous service providers with little or no service model/metrics >(neither for the local nor for the system level), and no well defined >rules of conduct for interoperation and problem resolution. H-W; There was once, and still technically may be, the "User Connectivity Problems" (UCP) working group in the IETF Ops area that began a process for coordination among the then regional NSFnet network's NOCs back in '90 or so. Much of the work accomplished by UCP on developing process for NOC-to-NOC coordination is still valid, but the players have increased in number and are re-inventing this wheel. So, the Internet anarchy has been under attack for some time now. If there is any interest (I know, hacking the configs is #1, formal coordination and documentation are a distant #2) I'll go look up some of the documents. --Kent

1 0

agenda page is up
by sob＠academ.com 14 Sep '95

14 Sep '95

The "home" page for the latest NANOG is up at the following URL: http://www.academ.com/nanog/september1995/index.html The notes will be filled in over the weekend and the slide will be filled in as I get them and process them. Enjoy. -- Stan | Academ Consulting Services |internet: sob(a)academ.com Olan | For more info on academ, see this |uucp: amdahl!academ!sob Barber | URL- http://www.academ.com/academ |Opinions expressed are only mine.

1 0

New Home for GateD
by Martyne Hallgren 13 Sep '95

13 Sep '95

Folks, Earlier this year, we (Cornell) confronted two events that have had serious implications for the GateDaemon project. Our NSF grant ended in April and the GateD technical leadership has been drawn onto higher priority projects for our campus. At that time, we determined we had three choices in regards to the future of GateD project: a) continue with a maintenance/modest enhancement focus b) shut the project down completely or c) find GateD a new caretaker. Because we believe the GateD continues to be important to the Internet community and requires development and enhancement beyond mere bug-fixes, we chose c) as our plan of action. I am pleased to announce that we are close to reaching closure on the transfer of the GateD project, software and the GateD Consortium to MERIT Network Systems for the University of Michigan. They agree to assume all obligationsand duties of the Licensor of the GateD redistribution licenses and as the Lead Institution under the current GateD Consortium agreement. They are receiving all consortium revenues for fiscal yr 95-96 and beyond, to support this project. They agree to operate the Consortium as provided by the agreements for a period of one year. I have complete confidence in the MERIT staff, led by Elise Gerich, to guide GateD into the future. Susan Hares will be the primary technical contact. They will give this project a burst of energy and focus from their unique position in the Internetworking world. I sincerely hope you will join me in supporting MERIT for the University of Michigan as the new Lead institution. You may contact Elise Gerich at epg(a)merit.edu or Susan Hares at skh(a)merit.edu University of Michigan Merit Network Systems 4251 Plymouth Road Ann Arbor, MI 48109-2785 telephone: 313-764-9430 FAX: 313-747-3185 Please feel free to contact me with any questions or concerns. I am continuing to work on the GateD Consortium as we wrap up the final details of the handoff. The Cornell Office of Sponsored Programs will be sending out an official notice to redistribution license holders and consortium members via paper mail in the near future. Best Regards, Martyne M. Hallgren Executive Director Cornell GateD Consortium

1 0

Lost coat
by Matt Mathis 13 Sep '95

13 Sep '95

There was a black coat left after the Tuesday meeting in Pittsburgh. Please claim it and we will arrange to have it shipped. --MM--

1 0

Speakers: 6th Maryland Workshop on Very High Speed Networks
by Account of Maryland Center for Telecommunications Research 12 Sep '95

12 Sep '95

******************************************************************************* Speaker List 6TH MARYLAND WORKSHOP ON VERY HIGH SPEED NETWORKS ******************************************************************************* 1. Inder Gopal: IBM Watson Research Center (Keynote Address) Electronic Commerce: Technical Issues and Challenges 2. J. H. Maestas: Sandia National Laboratories Experiences with SONET Transport Networks 3. Rick Wilder: MCI The NSF's very-high-speed Backbone Network Service: Architecture and Project Plans 4. J. H. Naegle: Sandia National Laboratories Progress with ATM at Sandia National Laboratories 5. Mani B. Srivastava, P. Agrawal, A. Asthana, M. Cravatts, E. Hyden, P. Krzyzanowski, P. Mishra, B. Narendran, and J. Trotter: AT&T SWAN: Testbed for Mobile Networked Computing 6. Jonathan M. Smith: Univ of Pennsylvania TCP/IP performance of the Penn Afterburner ATM Link Adapter 7. Brad Makrucki: BellSouth Telecomm What's Wrong with Equivalent Bandwidth? 8. Robert J. Aiken: Department of Energy/ Lawrence Livermore Lab The ENERGY of HIgh Speed Networking 9. Vern Paxson: LBL Adapting to Wide-Area Network Dynamics 10. Magda El Zarki: Univ. of Pennsylvania Video over ATM Quality Control 11. Michael Levender: Stratacom Applications Support Over ATM: An Update 12. Bernie Hudson: University of Ottawa High Speed Network Connecting Canada, Europe and North Africa 13. Thomas vonDeak: NASA Lewis Research Center Status of the NASA Advanced Communications Technology Satellite (ACTS) Program and B-ISDN Development 14. Guru Parulkar: Washington University Error Control for Continuous Media Applications 15. Anujan Varma: University of California FAST: A Hardware Simulation Testbed for ATM Network 16. Raj Jain: NSU Traffic management in ATM Networks 17. Donald Smith: Bellcore Adaptive Congestion Controls in SS7 and Implications for Broadband Signaling 18. Javad Boroumand: NASA Goddard Space Flight Center NASA EOSDIS Project ATM Prototyping 19. Ted Faber: USC/ISI Research in the ATOMIC-2 Project at ISI 20. Jorg Liebeherr, I. F. Akyildiz and D. Sarkar: Univ. of Virginia An Explicit Rate Control Scheme for ABR Traffic with Heterogeneous Service Requirements 21. Roch Guerin: IBM Watson Research Center (To be confirmed) <<TITLE(High Speed Networking)>> 22. Bob Collet: Sprint <<TITLE(Sprint's SONET Infrastructure)(To be confirmed)>> NOTE: Other speakers to be confirmed. --------------------------------------------------- 6th Maryland Workshop on Very High Speed Networks --------------------------------------------------- OCTOBER 30-31, 1995 Maryland Center for Telecommunications Research Department of Computer Science and Electrical Engineering University of Maryland Baltimore County The Maryland Center for Telecommunications Research (MCTR) and Department of Computer Science and Electrical Engineering at the University of Maryland Baltimore County (UMBC) in participation with the University of Maryland Institute for Advanced Computer Studies (UMIACS), IEEE Communication Society - Gigabit Networking Technical Committee, and IDA/Center for Computing Sciences will hold the 6th Maryland Workshop on Very High Speed Networks on October 30-31, 1995 at the UMBC campus. The Workshop will be held in Ballroom of University Center on the UMBC campus. The workshop is supported by IBM, SUN and Sprint. The goal of the Workshop is to bring together experts in related areas to discuss progress and research issues in the design and implementation of very high speed communication networks. Each of the previous workshops attracted approximately 150 researchers representing academia, industry and government. The two day meeting will include invited speakers and contributed presentations. Papers on selected presentations will appear in a special issue of the Journal of High Speed Networks. For more information on MCTR and directions to UMBC check our home- page on WWW.(http://www.cs.umbc.edu/~mctr) A registration fee of $150 will include two lunches and conference proceeding. For questions regarding the technical content of the workshop or giving a presentation, please contact the workshop organizer, Dr. Deepinder Sidhu, at Tel: (410) 455-3028, Fax: (410) 455-3969, Email: mctr(a)cs.umbc.edu. ------------------------------------------------------------------------------- 6th Maryland Workshop on Very High Speed Networks (October 30-31, 1995) Registration Form Name: ---------------------------------------------------------------------- Affiliation: ------------------------------------------------------------- Address: ------------------------------------------------------------- ------------------------------------------------------------- Phone: Fax: Email: ---------------- ------------- ------------ Dietary Restriction : Vegetarian Kosher ---------- ------------ ------------------------------------------------------------------------------- Mail checks (payable to University of Maryland Foundation) and registration form to Dr. D. P. Sidhu, Maryland Center for Telecommunications Research, University of Maryland Baltimore County, Baltimore, MD 21228. All funds for this event will be managed by the UM foundation. We plan to provide free admission to a limited number of students if a grant application is approved. Please DO NOT include hotel accommodation expenses in your payment for the Workshop Registration. Room payment should be made directly to the hotel you selected for stay. The following hotels are closest to UMBC campus. Some hotels may offer reduced rate. To obtain the reduced rate, you must identify yourself as an attendee of this workshop. BWI Airport is approximately five miles from UMBC Campus. 1. Sheraton International Hotel - BWI Airport. Closest to airport and UMBC campus. Tel: (410) 859-3300 or (800) 638-5858 2. Holiday Inn - BWI Airport. Close to airport and UMBC campus. Tel: (410) 859-8400 or (800) HOLIDAY 3. Omni Inner Harbor Hotel. Close to Downtown Baltimore / Inner Harbor. About 20 minutes drive to UMBC campus. Tel: (410) 752-1100 or (800) 843-6664

1 0