- Test - lists.nanog.org

CERT Advisory CA-94:15.NFS.Vulnerabilities
by cert-advisory＠cert.org 19 Dec '94

19 Dec '94

============================================================================= CA-94:15 CERT Advisory December 19, 1994 NFS Vulnerabilities ----------------------------------------------------------------------------- The CERT Coordination Center is experiencing an increase in reports of root compromises caused by intruders using tools to exploit a number of NFS (Network File System) vulnerabilities. CERT recommends limiting your exposure to these attacks by implementing the security measures described in Section III below. As we receive additional information relating to this advisory, we will place it, along with any clarifications, in a CA-94:15.README file. CERT advisories and their associated README files are available by anonymous FTP from info.cert.org. We encourage you to check the README files regularly for updates on advisories that relate to your site. ----------------------------------------------------------------------------- I. Description There are tools being used by intruders to exploit a number of NFS vulnerabilities. These tools are widely available and widely distributed. II. Impact The impact varies depending on which vulnerabilities are present. In the worst case, intruders gain unauthorized root access from a remote host. III. Security Measures A. Filter packets at your firewall/router. Filter TCP port 111, UDP port 111 (portmapper), TCP port 2049, and UDP port 2049 (nfsd). Consult your vendor or your firewall documentation for detailed instructions on how to configure these ports. This measure will prevent access to NFS at your site from outside your firewall, but it will not protect you from attacks launched from your local network, behind your firewall. B. Use a portmapper that disallows proxy access. Be sure that you do this for every host that runs a portmapper. For Solaris, 2.x, use a version of rpcbind that disallows proxy access. A portmapper that disallows proxy access protects all hosts with the modified portmapper from attacks that originate either inside or outside your firewall. Because this security measure addresses only the portmapper vulnerability, we recommend combining it with measure A above. Wietse Venema has developed a portmapper that disallows proxy access. It is available by anonymous FTP from ftp.win.tue.nl:/pub/security/portmap_3.shar.Z info.cert.org:/pub/tools/nfs_tools/portmap_3.shar.Z MD5 checksum: f6a3ad98772e7a402ddcdac277adc4a6 For Solaris systems, Venema has developed a version of rpcbind that does not allow proxy access. Solaris users should install this program, not the portmapper. Rpcbind is available by anonymous FTP from the same sites as the portmapper: ftp.win.tue.nl:/pub/security/rpcbind_1.1.tar.Z info.cert.org:/pub/tools/nfs_tools/rpcbind_1.1.tar.Z MD5 checksum: 58437adcbea0a55e37d3a3211f72c08b C. Check the configuration of the /etc/exports files on your hosts. In particular: 1. Do *not* self-reference an NFS server in its own exports file. 2. Do not allow the exports file to contain a "localhost" entry. 3. Export file systems only to hosts that require them. 4. Export only to fully qualified hostnames. 5. Ensure that export lists do not exceed 256 characters. If you have aliases, the list should not exceed 256 characters *after* the aliases have been expanded. (See CA-94:02.REVISED.SunOS.rpc.mountd.vulnerability.) 6. Use the showmount(8) utility to check that exports are correct. 7. Wherever possible, mount file systems to be exported read only and export file systems read only. D. Ensure that your systems are current with patches and workarounds available from your vendor and identified in CERT advisories. The following advisories address problems related to NFS: CA-91:21.SunOS.NFS.Jumbo.and.fsirand CA-92:12.REVISED.SunOS.rpc.mountd.vulnerability CA-92:15.Multiple.SunOS.vulnerabilities.patches CA-93:15.SunOS.and.Solaris.vulnerabilities CA-94:02.REVISED.SunOS.rpc.mountd.vulnerability When you ftp to info.cert.org for advisories, also check for README files, which contain updates or clarifications. Vendors may have additional patches not covered by a CERT advisory, so be sure to contact your vendor for further information. --------------------------------------------------------------------------- The CERT Coordination Center thanks Steve Bellovin, Casper Dik, Leendert van Doorn, and Wietse Venema for their support in responding to this problem. --------------------------------------------------------------------------- If you believe that your system has been compromised, contact the CERT Coordination Center or your representative in Forum of Incident Response and Security Teams (FIRST). If you wish to send sensitive incident or vulnerability information to CERT via electronic mail, CERT strongly advises that the e-mail be encrypted. CERT can support a shared DES key, PGP (public key available via anonymous FTP on info.cert.org) or PEM (contact CERT for details). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT personnel answer 8:30 a.m.-5:00 p.m. EST(GMT-5)/EDT(GMT-4), and are on call for emergencies during other hours. CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 USA Past advisories, CERT bulletins, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from info.cert.org. CERT is a service mark of Carnegie Mellon University.

1 0

Additions to the NSFNET policy-based routing database
by sjr＠twain.merit.edu 15 Dec '94

15 Dec '94

------------------------------------------------------------------------------ The PRDB and this "NWG report" will be retired in December. Details below. ------------------------------------------------------------------------------ The following changes have been made to the NSFNET policy-based routing database and will be installed on the backbone by 08:00 EST : Total = As + Bs + Cs + Aggs Registered Networks 44065 = 30 5168 36499 2368 Configured Networks 41113 = 30 5113 33637 2333 Added Networks 172 = 0 7 143 22 Deleted Networks 1 = 0 0 1 0 IP address Net name Country Priority:AS ---------- -------- ------- ----------- 132.189/16 LILLYNET C:US 1:1225(130) 2:1225(129) 3:1225(131) 4:555 147.118/16 NATCO C:US 1:1225(130) 2:1225(129) 3:1225(131) 4:555 150.85/16 ADVANTEST C:JP 1:701(136) 2:701(134) 158.57/16 CONED C:US 1:2149 2:174 161.179/16 TRANSAMERICA-B C:US 1:701(136) 2:701(134) 162.5/16 PIERCECOUNTY C:US 1:3561(11) 2:3561(218) 164.146/15 OPENET1 C:ZA 1:701(136) 2:701(134) 5:1240 6:1239 7:1800 164.148/14 OPENET3 C:ZA 1:701(136) 2:701(134) 5:1240 6:1239 7:1800 168.198/16 NET-DAS-AU C:AU 1:297(144) 2:297(145) 192.65.142/24 NET-NDL C:US 1:1800 2:1240 192.115.45/24 ILOGIX-NET C:IL 1:2149 2:174 3:1800 4:1240 5:1133 192.135.135/24 WHS-DOM C:US 1:1225(130) 2:1225(131) 3:1225(129) 192.165.56/21 SE-SATIMB C:SE 1:1800 2:1879 3:1133 4:1240 192.204.1/24 PREP-SLIP C:US 1:3577 2:1324 193.13.96/20 SE-EY-NET C:SE 1:1800 2:1879 3:1133 4:1240 193.48.133/24 UNIV-SAVOIE14 C:FR 1:1800 2:1240 3:1133 4:1674 193.49.103/24 FR-PCW C:FR 1:1800 2:1240 3:1133 4:1674 193.54.120/24 FR-ENSICA-ME C:FR 1:1800 2:1240 3:1133 4:1674 193.54.122/24 FR-ENSICA2 C:FR 1:1800 2:1240 3:1133 4:1674 193.55.235/24 FR-NCY-CMP2 C:FR 1:1800 2:1240 3:1133 4:1674 193.92.15/24 RHOTEL C:GR 1:1800 2:1133 3:1240 193.124.248/24 MIAN C:RU 1:1800 2:1133 3:1674 4:1240 193.124.249/24 EULER C:RU 1:1800 2:1133 3:1674 4:1240 193.204.215/24 ASISDC-NET C:IT 1:293(144) 2:293(145) 3:1133 4:1674 5:1800 193.208.119/24 HARTWALL C:FI 1:701(136) 2:701(134) 193.232.174/24 BOTIK C:RU 1:1800 2:1133 3:1674 4:1240 194.49.76/24 GAI-FN C:DE 1:1324 2:1800 3:1240 4:1133 194.77.0/21 GTNNET C:DE 1:701(136) 2:701(134) 194.85.14/23 IMASHNET C:RU 1:1800 2:1133 3:1674 4:1240 196.9/16 NETBLK-GENESIS C:ZA 1:1800 2:1240 3:1239 198.15.4/22 FS4 C:US 1:1225(130) 2:1225(129) 3:1225(131) 4:555 198.35.10/24 SUB-PPPL9 C:US 1:293(145) 2:293(144) 198.35.11/24 SUB-PPPL10 C:US 1:293(145) 2:293(144) 198.35.12/24 SUB-PPPL11 C:US 1:293(145) 2:293(144) 198.39/16 NET-TRANSAMERICA-1 C:US 1:701(136) 2:701(134) 198.53.20/24 NETBLK-FONOROLA C:CA 1:2493(91) 2:2493(35) 198.53.31/24 NETBLK-FONOROLA C:CA 1:2493(35) 2:2493(91) 198.60.249/24 MVRMC4 C:US 1:685 2:73 3:101 198.68.52/24 CYBERSPACE.COM C:US 1:1240 2:1800 3:1239 198.68.53/24 CYBERSPACE.COM C:US 1:1240 2:1800 3:1239 198.77.117/24(U) GIBSON C:US 1:3561(218) 2:3561(11) 3:86 4:279 198.114.149/24 CVU-149 C:US 1:560 2:701(136) 3:701(134) 198.114.150/24 CVU-150 C:US 1:560 2:701(136) 3:701(134) 198.114.151/24 CVU-151 C:US 1:560 2:701(136) 3:701(134) 198.151.16/24 MEASUREXMSD1 C:US 1:2149 2:174 198.182.17/24 NASA-PSCNI-NET2 C:US 1:297(145) 2:297(144) 199.1.166/24 NET-ORTISDN1 C:US 1:1800 2:1240 3:1239 199.14.70/24 RTW C:US 1:1800 2:1240 3:1239 199.14.71/24 RTW C:US 1:1800 2:1240 3:1239 199.14.72/24 RTW C:US 1:1800 2:1240 3:1239 199.14.73/24 RTW C:US 1:1800 2:1240 3:1239 199.14.74/24 RTW C:US 1:1800 2:1240 3:1239 199.14.75/24 RTW C:US 1:1800 2:1240 3:1239 199.45.32/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.33/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.34/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.35/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.36/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.37/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.38/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.39/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.40/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.41/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.42/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.43/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.44/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.45/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.46/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.47/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.48/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.49/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.50/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.51/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.52/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.53/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.54/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.55/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.56/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.57/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.58/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.59/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.60/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.61/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.62/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.45.63/24 NETBLK-BVS-RESTON C:US 1:701(136) 2:701(134) 199.71.158/24 EQUIST-NET C:CA 1:1240 2:1800 3:1239 199.75.160/24(U) REDHUCYT-NW-DC-US C:US 1:3561(218) 2:3561(11) 3:86 4:279 199.76.240/20(U) SJCSD C:US 1:3561(218) 2:3561(11) 3:279 4:86 199.95.245/24 NEARNET-NYC118 C:US 1:560 2:701(136) 3:701(134) 199.95.246/24 NEARNET-NYC119 C:US 1:560 2:701(136) 3:701(134) 199.95.247/24 NEARNET-NYC120 C:US 1:560 2:701(136) 3:701(134) 199.95.248/24 NEARNET-NYC121 C:US 1:560 2:701(136) 3:701(134) 199.95.249/24 NEARNET-NYC122 C:US 1:560 2:701(136) 3:701(134) 199.95.250/24 NEARNET-NYC123 C:US 1:560 2:701(136) 3:701(134) 199.95.251/24 NEARNET-NYC124 C:US 1:560 2:701(136) 3:701(134) 199.95.252/24 NEARNET-NYC125 C:US 1:560 2:701(136) 3:701(134) 199.95.253/24 NEARNET-NYC126 C:US 1:560 2:701(136) 3:701(134) 199.95.254/24 NEARNET-NYC127 C:US 1:560 2:701(136) 3:701(134) 199.95.255/24 NEARNET-NYC128 C:US 1:560 2:701(136) 3:701(134) 199.166.7/24 COMSEC-NET C:CA 1:701(136) 2:701(134) 199.172.202/24 BERMUDA C:BM 1:701(136) 2:701(134) 199.174.71/24 NET-HELSELL C:US 1:1240 2:1800 3:1239 199.175.164/24 TECKCORP-CA C:CA 1:2493(91) 2:2493(35) 199.175.165/24 TECKCORP-CA C:CA 1:2493(91) 2:2493(35) 199.175.166/24 TECKCORP-CA C:CA 1:2493(91) 2:2493(35) 199.175.167/24 TECKCORP-CA C:CA 1:2493(91) 2:2493(35) 199.189.8/24 GLENBROOKHS C:US 1:1323 199.189.9/24 GLENBROOKHS C:US 1:1323 199.189.10/24 GLENBROOKHS C:US 1:1323 199.189.11/24 GLENBROOKHS C:US 1:1323 199.189.12/24 GLENBROOKHS C:US 1:1323 199.189.13/24 GLENBROOKHS C:US 1:1323 199.189.14/24 GLENBROOKHS C:US 1:1323 199.189.15/24 GLENBROOKHS C:US 1:1323 199.199.133/24 IHHI C:US 1:1225(130) 2:1225(129) 3:1225(131) 4:555 199.199.134/24 BACKPACK C:US 1:1225(130) 2:1225(129) 3:1225(131) 4:555 199.202.147/24 MIRANDA-NET1 C:CA 1:2493(35) 2:2493(91) 199.222.75/24 ABC-DMZ2 C:US 1:1324 200.10.201/24 REDINTA C:AR 1:3561(218) 2:3561(11) 3:86 4:279 200.12.154/24 OPSARG-NET C:AR 1:3561(218) 2:3561(11) 3:86 4:279 202.18.188/22 KPUNET C:JP 1:1240 2:1800 3:1239 202.33.52/24 RRDJNET-C-33-52 C:JP 1:2149 2:174 202.33.53/24 RRDJNET-C-33-53 C:JP 1:2149 2:174 202.48.184/21 MACNICANET C:JP 1:701(136) 2:701(134) 202.248.41/24 ONONET C:JP 1:2149 2:174 202.248.42/24 VTTNET C:JP 1:2149 2:174 203.255.0/24 GSNU-NET C:KR 1:297(144) 2:297(145) 203.255.1/24 GSNU-NET1 C:KR 1:297(144) 2:297(145) 203.255.2/24 GSNU-NET2 C:KR 1:297(144) 2:297(145) 203.255.3/24 GSNU-NET3 C:KR 1:297(144) 2:297(145) 203.255.4/24 GSNU-NET4 C:KR 1:297(144) 2:297(145) 203.255.5/24 GSNU-NET5 C:KR 1:297(144) 2:297(145) 203.255.6/24 GSNU-NET6 C:KR 1:297(144) 2:297(145) 203.255.11/24 GSNU-NET11 C:KR 1:297(144) 2:297(145) 203.255.12/24 GSNU-NET12 C:KR 1:297(144) 2:297(145) 203.255.21/24 GSNU-NET21 C:KR 1:297(144) 2:297(145) 203.255.22/24 GSNU-NET22 C:KR 1:297(144) 2:297(145) 203.255.23/24 GSNU-NET23 C:KR 1:297(144) 2:297(145) 203.255.31/24 GSNU-NET31 C:KR 1:297(144) 2:297(145) 203.255.32/24 GSNU-NET32 C:KR 1:297(144) 2:297(145) 203.255.40/24 GSNU-NET40 C:KR 1:297(144) 2:297(145) 204.19.240/24 ALROMA C:CA 1:2493(35) 2:2493(91) 204.27.139/24 VX C:US 1:1800 2:1240 3:1239 204.27.222/24 DANIELS C:US 1:1324 204.48.32/19 MTCRALENG C:US 1:1800 2:1240 204.50.30/24 NET-TEXCAN30 C:CA 1:1240 2:1800 3:1239 204.73.112/20 NETBLK-NWC3 C:US 1:1225(130) 2:1225(129) 3:1225(131) 4:555 204.73.177/24 MVA2 C:US 1:1225(130) 2:1225(129) 3:1225(131) 4:555 204.73.182/23 NETBLK-CSC5 C:US 1:1225(130) 2:1225(129) 3:1225(131) 4:555 204.75.135/24 NET-SILLY C:US 1:701(136) 2:701(134) 204.97.224/23 NET-IFU C:US 1:1239 2:1800 3:1240 204.97.226/24 NET-WNY C:US 1:1239 2:1800 3:1240 204.107.217/24 NET-LA-EDUCATION C:US 1:3561(218) 2:3561(11) 3:279 4:86 204.138.103/24 CBIE-NET C:CA 1:1240 2:1800 3:1239 204.153.52/24 LDAF-OFFICE1 C:US 1:3561(218) 2:3561(11) 3:279 4:86 204.153.53/24 LDAF-OFFICE1 C:US 1:3561(218) 2:3561(11) 3:279 4:86 204.153.54/24 LDAF-OFFICE1 C:US 1:3561(218) 2:3561(11) 3:279 4:86 204.176.164/24 ANALOGIC-NET C:US 1:701(136) 2:701(134) 204.176.165/24 ANALOGIC-NET C:US 1:701(136) 2:701(134) 204.176.166/24 ANALOGIC-NET C:US 1:701(136) 2:701(134) 204.176.167/24 ANALOGIC-NET C:US 1:701(136) 2:701(134) 204.176.214/24 EPENCIL-NET C:US 1:701(136) 2:701(134) 204.176.215/24 FLNET-NET C:US 1:701(136) 2:701(134) 204.176.220/24 KDD-NET C:US 1:701(136) 2:701(134) 204.176.222/24 RGL C:US 1:701(136) 2:701(134) 204.176.223/24 RGL C:US 1:701(136) 2:701(134) 204.198.16/20 MISSCOLL-NET1 C:US 1:3561(218) 2:3561(11) 3:279 4:86 204.212/16 SL-WEST-6 C:US 1:1240 2:1800 3:1239 204.213/16 SL-NORTHEAST-6 C:US 1:1239 2:1800 3:1240 204.213.0/18 NET-OA C:US 1:1239 2:1800 3:1240 204.214/16 SL-NORTH-6 C:US 1:1239 2:1800 3:1240 204.215/16 SL-SOUTHWEST-6 C:US 1:1240 2:1800 3:1239 Deletions: --192.76.180/24 ORBOT C:IL 1:2149 2:174 3:1800 4:1240 5:1133 Expanded listing, sorted by country, then by organization: ========================================================== Argentina --------- Instituto Nacional de Tecnologia Agropecuaria, Rivadavia 1439, (1033) Cap. Fed., ARGENTINA 1:3561(218) MCI-RESTON 2:3561(11) MCI-RESTON 3:86 SURANET Regional Network (College Park) 4:279 SURANET Regional Network (Georgia Tech) ------------- 200.10.201/24 REDINTA (AR) Pan American Health Organization, Marcelo T. de Alvear 684 4to Piso, (1395) Buenos Aires, ARGENTINA 1:3561(218) MCI-RESTON 2:3561(11) MCI-RESTON 3:86 SURANET Regional Network (College Park) 4:279 SURANET Regional Network (Georgia Tech) ------------- 200.12.154/24 OPSARG-NET (AR) Australia --------- Department of Administrative Services, PO Box 111, Dickson, ACT, AUSTRALIA 1:297(144) Nasa Science Network (FIX-East) 2:297(145) Nasa Science Network (FIX-East) ---------- 168.198/16 NET-DAS-AU (AU) Bermuda ------- Global Capital Reinsurance, 48 Church Street, Hamilton, BERMUDA 1:701(136) Alternet 2:701(134) Alternet -------------- 199.172.202/24 BERMUDA (BM) Canada ------ Alroma Scientifique Inc., 8550 boul. Pie-IX, Montreal, Quebec, H1Z 4G2, CANADA 1:2493(35) FONOROLA-EAST 2:2493(91) FONOROLA-EAST ------------- 204.19.240/24 ALROMA (CA) Canadian Bureau for International Education, 220 Laurier Avenue West, Suite 1100, Ottawa, ON, K1P 5Z9, CANADA 1:1240 ICM-Pacific 2:1800 ICM-Atlantic 3:1239 SprintLink -------------- 204.138.103/24 CBIE-NET (CA) Communications Security Establishment, 719 Heron Road, Ottawa, ON, K1A 0K2, CANADA 1:701(136) Alternet 2:701(134) Alternet ------------ 199.166.7/24 COMSEC-NET (CA) EQUIST, Inc., 2430 Meadowpine Blvd., Unit 101, Mississauga, ON, L5N 6S2, CANADA 1:1240 ICM-Pacific 2:1800 ICM-Atlantic 3:1239 SprintLink ------------- 199.71.158/24 EQUIST-NET (CA) Recherches Miranda Inc., 5695 Chemin St-Francois, Ville St-Laurent, Quebec, H4S 1W6, CANADA 1:2493(35) FONOROLA-EAST 2:2493(91) FONOROLA-EAST -------------- 199.202.147/24 MIRANDA-NET1 (CA) Teck Corporation, Suite 600, 200 Burrard Street, Vancouver, BC, V6C 3L9, CANADA 1:2493(91) FONOROLA-EAST 2:2493(35) FONOROLA-EAST -------------- 199.175.164/24 TECKCORP-CA (CA) 199.175.165/24 TECKCORP-CA (CA) 199.175.166/24 TECKCORP-CA (CA) 199.175.167/24 TECKCORP-CA (CA) Texcan Cable Ltd., 14211 Burrows Road, Richmond, British Columbia, V6V 1K9, CANADA 1:1240 ICM-Pacific 2:1800 ICM-Atlantic 3:1239 SprintLink ------------ 204.50.30/24 NET-TEXCAN30 (CA) fONOROLA Inc., Suite 205, Ottawa, Ontario, K1P - 6M1, CANADA 1:2493(91) FONOROLA-EAST 2:2493(35) FONOROLA-EAST ------------ 198.53.20/24 NETBLK-FONOROLA (CA) fONOROLA Inc., Suite 205, Ottawa, Ontario, K1P - 6M1, CANADA 1:2493(35) FONOROLA-EAST 2:2493(91) FONOROLA-EAST ------------ 198.53.31/24 NETBLK-FONOROLA (CA) Finland ------- Oy Hartwall Ab, Ristipellontie 4, Helsinki, 00390, FINLAND 1:701(136) Alternet 2:701(134) Alternet -------------- 193.208.119/24 HARTWALL (FI) France ------ ENSICA Service STE/RB, 49 avenue Leon Blum, 31056 Toulouse CEDEX, FRANCE 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1133 CERN/DANTE 4:1674 CERN/DANTE ------------- 193.54.122/24 FR-ENSICA2 (FR) ENSICA, 49 avenue Leon Blum, 31056 Toulouse CEDEX, FRANCE 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1133 CERN/DANTE 4:1674 CERN/DANTE ------------- 193.54.120/24 FR-ENSICA-ME (FR) PCWAREHOUSE, Support Technique, 9, chaussee Jules Cesar, Z.I des Beaux Soleils BP317, 95526 Cergy Pontoise cedex, FRANCE 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1133 CERN/DANTE 4:1674 CERN/DANTE ------------- 193.49.103/24 FR-PCW (FR) Universite de Nancy I, Centre de Medecine Preventive, 2, avenue du Doyen Parisot, 54500 Vandoeuvre-les-Nancy, FRANCE 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1133 CERN/DANTE 4:1674 CERN/DANTE ------------- 193.55.235/24 FR-NCY-CMP2 (FR) Universite de Savoie, Campus Universitaire du Bourget du Lac, Batiment Mont-Blanc, BP 1104, F-73011 Chambery CEDEX, FRANCE 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1133 CERN/DANTE 4:1674 CERN/DANTE ------------- 193.48.133/24 UNIV-SAVOIE14 (FR) Germany ------- GAI Informationssysteme GmbH, Seestr. 1, D-88045 Friedrichshafen, GERMANY 1:1324 ANS New York City - DNSS 35 2:1800 ICM-Atlantic 3:1240 ICM-Pacific 4:1133 CERN/DANTE ------------ 194.49.76/24 GAI-FN (DE) Gesellschaft fuer Telekommunikations und Netzwerkdienste mbH, Fontanestr. 12, 41564 Kaarst, GERMANY 1:701(136) Alternet 2:701(134) Alternet ----------- 194.77.0/21 GTNNET (DE) Greece ------ Rhodes Telematics, K. Palaiologou 28, Rhodes, 85100, GREECE 1:1800 ICM-Atlantic 2:1133 CERN/DANTE 3:1240 ICM-Pacific ------------ 193.92.15/24 RHOTEL (GR) Israel ------ I-Logix Israel, Kiryat Weizmann,Build. 12, Rehovot, ISRAEL 1:2149 PSINET-2 2:174 NYSERNet Regional Network / PSI 3:1800 ICM-Atlantic 4:1240 ICM-Pacific 5:1133 CERN/DANTE ------------- 192.115.45/24 ILOGIX-NET (IL) Italy ----- Agenzia Spaziale Italiana, Viale Regina Margherita, 202, Roma, I-00198, ITALY 1:293(144) Energy Science Network (ESnet) 2:293(145) Energy Science Network (ESnet) 3:1133 CERN/DANTE 4:1674 CERN/DANTE 5:1800 ICM-Atlantic -------------- 193.204.215/24 ASISDC-NET (IT) Japan ----- ADVANTEST CORPORATION, 1-5 Shin-tone, Ohtone-machi, Kitasaitama-gun, Saitama, 349-11, JAPAN 1:701(136) Alternet 2:701(134) Alternet --------- 150.85/16 ADVANTEST (JP) Kyoto Prefectural University, Shimogamonakaragi-cho 1, Sakyo-ku, Kyoto-shi, Kyoto 606, JAPAN 1:1240 ICM-Pacific 2:1800 ICM-Atlantic 3:1239 SprintLink ------------- 202.18.188/22 KPUNET (JP) MACNICA, Inc., Hakusan High-tech Park, 1-22-2 Hakusan, Midori-ku, Yokohama, Kanagawa, 226, JAPAN 1:701(136) Alternet 2:701(134) Alternet ------------- 202.48.184/21 MACNICANET (JP) ONO PHARMACEUTICAL CO.,LTD., 3-1-1 Sakurai, Shimamoto-cho, Mishima-gun, Osaka, JAPAN 1:2149 PSINET-2 2:174 NYSERNet Regional Network / PSI ------------- 202.248.41/24 ONONET (JP) R.R.Donnelley Japan K.K. Shinjuku Office, Donnelley Bldg., 2-28-7, Kami-Ochiai, Shinjuku-ku, Tokyo, 161, JAPAN 1:2149 PSINET-2 2:174 NYSERNet Regional Network / PSI ------------ 202.33.52/24 RRDJNET-C-33-52 (JP) 202.33.53/24 RRDJNET-C-33-53 (JP) Regional Science Institute, MIDORIYA Bld., 1-5, 2, Nagashima, aomori-shi, aomori-ken, JAPAN 1:2149 PSINET-2 2:174 NYSERNet Regional Network / PSI ------------- 202.248.42/24 VTTNET (JP) Korea, South ------------ Gyeongsang National University, 900 Gajwa-dong, Jinju, Kyungnam, 660-701, KOREA, REPUBLIC OF 1:297(144) Nasa Science Network (FIX-East) 2:297(145) Nasa Science Network (FIX-East) ------------ 203.255.0/24 GSNU-NET (KR) 203.255.1/24 GSNU-NET1 (KR) 203.255.2/24 GSNU-NET2 (KR) 203.255.3/24 GSNU-NET3 (KR) 203.255.4/24 GSNU-NET4 (KR) 203.255.5/24 GSNU-NET5 (KR) 203.255.6/24 GSNU-NET6 (KR) 203.255.11/24 GSNU-NET11 (KR) 203.255.12/24 GSNU-NET12 (KR) 203.255.21/24 GSNU-NET21 (KR) 203.255.22/24 GSNU-NET22 (KR) 203.255.23/24 GSNU-NET23 (KR) 203.255.31/24 GSNU-NET31 (KR) 203.255.32/24 GSNU-NET32 (KR) 203.255.40/24 GSNU-NET40 (KR) Russian Federation ------------------ Euler International Mathematical Institute, Pesochnaya nab. 10, S.-Petersburg, RUSSIAN FEDERATION 1:1800 ICM-Atlantic 2:1133 CERN/DANTE 3:1674 CERN/DANTE 4:1240 ICM-Pacific -------------- 193.124.249/24 EULER (RU) Institute of Machinery Russian Academy of Science, Institute of Machinery, Bardina street, 4, Moscow, RUSSIAN FEDERATION 1:1800 ICM-Atlantic 2:1133 CERN/DANTE 3:1674 CERN/DANTE 4:1240 ICM-Pacific ------------ 194.85.14/23 IMASHNET (RU) Program Systems Institute, Russian Academy of Sciences, Program Systems Institute, Pereslavl-Zalessky, 152140, RUSSIAN FEDERATION 1:1800 ICM-Atlantic 2:1133 CERN/DANTE 3:1674 CERN/DANTE 4:1240 ICM-Pacific -------------- 193.232.174/24 BOTIK (RU) Steklov Mathematical Institute RAS, Vavilova 42, Moscow, RUSSIAN FEDERATION 1:1800 ICM-Atlantic 2:1133 CERN/DANTE 3:1674 CERN/DANTE 4:1240 ICM-Pacific -------------- 193.124.248/24 MIAN (RU) South Africa ------------ Dimension Data, P.O. Box 30859, Braamfontein, 2017, SOUTH AFRICA 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1239 SprintLink -------- 196.9/16 NETBLK-GENESIS (ZA) Government of South Africa, P.O. Box Private Bag X1, Roggebaai, Capetown, 8001, SOUTH AFRICA 1:701(136) Alternet 2:701(134) Alternet 5:1240 ICM-Pacific 6:1239 SprintLink 7:1800 ICM-Atlantic ---------- 164.146/15 OPENET1 (ZA) 164.148/14 OPENET3 (ZA) Sweden ------ Ernst & Young AB, Adolf Fredriks Kyrkogata 2, Box 3143, S-103 63 Stockholm, SWEDEN 1:1800 ICM-Atlantic 2:1879 EUROPE-RS 3:1133 CERN/DANTE 4:1240 ICM-Pacific ------------ 193.13.96/20 SE-EY-NET (SE) Sodra Timber AB, S-351 89, Vaxjo, SWEDEN 1:1800 ICM-Atlantic 2:1879 EUROPE-RS 3:1133 CERN/DANTE 4:1240 ICM-Pacific ------------- 192.165.56/21 SE-SATIMB (SE) United States ------------- American Broadcasting Companies, 77 West 66th Street, New York, NY 10023, USA 1:1324 ANS New York City - DNSS 35 ------------- 199.222.75/24 ABC-DMZ2 (US) Analogic Inc., 8 Centennial Drive, Peabody, MA 01960, USA 1:701(136) Alternet 2:701(134) Alternet -------------- 204.176.164/24 ANALOGIC-NET (US) 204.176.165/24 ANALOGIC-NET (US) 204.176.166/24 ANALOGIC-NET (US) 204.176.167/24 ANALOGIC-NET (US) Back Pack Software, Inc, 475 North Cleveland Ave,Suite 211, St Paul, MN 55704, USA 1:1225(130) CICNET 2:1225(129) CICNET 3:1225(131) CICNET 4:555 Minnesota Supercomputer Center Network (MSCNet) -------------- 199.199.134/24 BACKPACK (US) Bell Atlantic Video Services, 1880 Campus Commons Drive, Reston, VA 22091, USA 1:701(136) Alternet 2:701(134) Alternet ------------ 199.45.32/24 NETBLK-BVS-RESTON (US) 199.45.33/24 NETBLK-BVS-RESTON (US) 199.45.34/24 NETBLK-BVS-RESTON (US) 199.45.35/24 NETBLK-BVS-RESTON (US) 199.45.36/24 NETBLK-BVS-RESTON (US) 199.45.37/24 NETBLK-BVS-RESTON (US) 199.45.38/24 NETBLK-BVS-RESTON (US) 199.45.39/24 NETBLK-BVS-RESTON (US) 199.45.40/24 NETBLK-BVS-RESTON (US) 199.45.41/24 NETBLK-BVS-RESTON (US) 199.45.42/24 NETBLK-BVS-RESTON (US) 199.45.43/24 NETBLK-BVS-RESTON (US) 199.45.44/24 NETBLK-BVS-RESTON (US) 199.45.45/24 NETBLK-BVS-RESTON (US) 199.45.46/24 NETBLK-BVS-RESTON (US) 199.45.47/24 NETBLK-BVS-RESTON (US) 199.45.48/24 NETBLK-BVS-RESTON (US) 199.45.49/24 NETBLK-BVS-RESTON (US) 199.45.50/24 NETBLK-BVS-RESTON (US) 199.45.51/24 NETBLK-BVS-RESTON (US) 199.45.52/24 NETBLK-BVS-RESTON (US) 199.45.53/24 NETBLK-BVS-RESTON (US) 199.45.54/24 NETBLK-BVS-RESTON (US) 199.45.55/24 NETBLK-BVS-RESTON (US) 199.45.56/24 NETBLK-BVS-RESTON (US) 199.45.57/24 NETBLK-BVS-RESTON (US) 199.45.58/24 NETBLK-BVS-RESTON (US) 199.45.59/24 NETBLK-BVS-RESTON (US) 199.45.60/24 NETBLK-BVS-RESTON (US) 199.45.61/24 NETBLK-BVS-RESTON (US) 199.45.62/24 NETBLK-BVS-RESTON (US) 199.45.63/24 NETBLK-BVS-RESTON (US) Boeing Computer Support Services, P.O. Box 240010, MSFC, AL 35812, USA 1:297(145) Nasa Science Network (FIX-East) 2:297(144) Nasa Science Network (FIX-East) ------------- 198.182.17/24 NASA-PSCNI-NET2 (US) Champlain Valley Union High School, RR 2 Box 160, Hinesburg, VT 05461, USA 1:560 NEARnet Regional Network 2:701(136) Alternet 3:701(134) Alternet -------------- 198.114.149/24 CVU-149 (US) 198.114.150/24 CVU-150 (US) 198.114.151/24 CVU-151 (US) Commodity Specialists Company, Pillsbury Center MS20W9, PO BOX 15167, Minneapolis, MN 55402, USA 1:1225(130) CICNET 2:1225(129) CICNET 3:1225(131) CICNET 4:555 Minnesota Supercomputer Center Network (MSCNet) ------------- 204.73.182/23 NETBLK-CSC5 (US) Computer Resource Technology, 5500 Main Street, Williamville, NY 14221, USA 1:1239 SprintLink 2:1800 ICM-Atlantic 3:1240 ICM-Pacific ------------- 204.97.226/24 NET-WNY (US) Consolidated Edison Co. of New York, 4 Irving Place, New York, NY 10003, USA 1:2149 PSINET-2 2:174 NYSERNet Regional Network / PSI --------- 158.57/16 CONED (US) Creative Data Consultants, 5311 East Hampton Blvd., Bayside, NY 11364, USA 1:701(136) Alternet 2:701(134) Alternet ------------- 204.75.135/24 NET-SILLY (US) Cyberlink Communications (Cyberspace), 300 Queen Anne Ave. N #396, Seattle, WA 98109, USA 1:1240 ICM-Pacific 2:1800 ICM-Atlantic 3:1239 SprintLink ------------ 198.68.52/24 CYBERSPACE.COM (US) 198.68.53/24 CYBERSPACE.COM (US) Daniels Printing LP, 40 Commercial Street, Everett, MA 02149, USA 1:1324 ANS New York City - DNSS 35 ------------- 204.27.222/24 DANIELS (US) Department of Scientific and Technological Affairs, 1889 F Street, NW, Washington, DC 20006, USA 1:3561(218) MCI-RESTON 2:3561(11) MCI-RESTON 3:86 SURANET Regional Network (College Park) 4:279 SURANET Regional Network (Georgia Tech) ------------- 199.75.160/24(U) REDHUCYT-NW-DC-US (US) Electronic Pencil, 7809 Melrose Avenue, Los Angeles, CA 90046, USA 1:701(136) Alternet 2:701(134) Alternet -------------- 204.176.214/24 EPENCIL-NET (US) FOURTH SHIFT Corporation, 7900 International Dr, Bloomington, MN 55425, USA 1:1225(130) CICNET 2:1225(129) CICNET 3:1225(131) CICNET 4:555 Minnesota Supercomputer Center Network (MSCNet) ----------- 198.15.4/22 FS4 (US) Florida Network Technologies, 7660-H Tamiami Trail, Sarasota, FL 34231, USA 1:701(136) Alternet 2:701(134) Alternet -------------- 204.176.215/24 FLNET-NET (US) Glenbrook H.S. District #225, 1835 Landwehr Road, Glenview, IL 60025, USA 1:1323 ANS Chicago - DNSS 27 ------------ 199.189.8/24 GLENBROOKHS (US) 199.189.9/24 GLENBROOKHS (US) 199.189.10/24 GLENBROOKHS (US) 199.189.11/24 GLENBROOKHS (US) 199.189.12/24 GLENBROOKHS (US) 199.189.13/24 GLENBROOKHS (US) 199.189.14/24 GLENBROOKHS (US) 199.189.15/24 GLENBROOKHS (US) Guidant Corporation (Cardiac Pacemakers), 4100 Hamline Ave. N., St. Paul, MN 55112, USA 1:1225(130) CICNET 2:1225(129) CICNET 3:1225(131) CICNET 4:555 Minnesota Supercomputer Center Network (MSCNet) ---------- 132.189/16 LILLYNET (US) HELSELL, FETTERMAN, MARTIN, TODD & HOKANSON, 1325 4TH AVE., SUITE 1500, SEATTLE, WA 98101, USA 1:1240 ICM-Pacific 2:1800 ICM-Atlantic 3:1239 SprintLink ------------- 199.174.71/24 NET-HELSELL (US) Hughes Network System, Exploration Lane, Germantown, MD 20742, USA 1:3561(218) MCI-RESTON 2:3561(11) MCI-RESTON 3:86 SURANET Regional Network (College Park) 4:279 SURANET Regional Network (Georgia Tech) ------------- 198.77.117/24(U) GIBSON (US) In Home Health Inc., Carlson Center, Suite 500, 601 Lakeshore Parkway, Minnetonka, MN, USA 1:1225(130) CICNET 2:1225(129) CICNET 3:1225(131) CICNET 4:555 Minnesota Supercomputer Center Network (MSCNet) -------------- 199.199.133/24 IHHI (US) Internet For U, 24 N. 3rd Ave #20, Highland Park, NJ 08904, USA 1:1239 SprintLink 2:1800 ICM-Atlantic 3:1240 ICM-Pacific ------------- 204.97.224/23 NET-IFU (US) Louisiana Department of Agriculture and Forestry, 5825 Florida Blvd., Baton Rouge, LA 70806, USA 1:3561(218) MCI-RESTON 2:3561(11) MCI-RESTON 3:279 SURANET Regional Network (Georgia Tech) 4:86 SURANET Regional Network (College Park) ------------- 204.153.52/24 LDAF-OFFICE1 (US) 204.153.53/24 LDAF-OFFICE1 (US) 204.153.54/24 LDAF-OFFICE1 (US) Louisiana Department of Education Management Information Systems, 3455 Florida Blvd., Baton Rouge, LA 70802, USA 1:3561(218) MCI-RESTON 2:3561(11) MCI-RESTON 3:279 SURANET Regional Network (Georgia Tech) 4:86 SURANET Regional Network (College Park) -------------- 204.107.217/24 NET-LA-EDUCATION (US) Magic Valley Regional Medical Center, 650 Addison Avenue West, Twin Falls, ID 83301, USA 1:685 NorthWestNet Regional Network 2:73 NorthWestNet Regional Network 3:101 NorthWestNet Regional Network ------------- 198.60.249/24 MVRMC4 (US) Measurex MSD, 1280 Kemper Meadow Drive, Cincinnati, OH 45240, USA 1:2149 PSINET-2 2:174 NYSERNet Regional Network / PSI ------------- 198.151.16/24 MEASUREXMSD1 (US) Memorex Telex, 3301 Terminal Drive, Raleigh, NC 27604, USA 1:1800 ICM-Atlantic 2:1240 ICM-Pacific ------------ 204.48.32/19 MTCRALENG (US) Micro Voice Applications, 900 2nd Avenue South, Minneapolis, MN 55402, USA 1:1225(130) CICNET 2:1225(129) CICNET 3:1225(131) CICNET 4:555 Minnesota Supercomputer Center Network (MSCNet) ------------- 204.73.177/24 MVA2 (US) Mississippi College, P.O. Box 4025, Clinton, MS 39058, USA 1:3561(218) MCI-RESTON 2:3561(11) MCI-RESTON 3:279 SURANET Regional Network (Georgia Tech) 4:86 SURANET Regional Network (College Park) ------------- 204.198.16/20 MISSCOLL-NET1 (US) NEARNET, 10 Moulton Street, Cambridge, MA 02138, USA 1:560 NEARnet Regional Network 2:701(136) Alternet 3:701(134) Alternet ------------- 199.95.245/24 NEARNET-NYC118 (US) 199.95.246/24 NEARNET-NYC119 (US) 199.95.247/24 NEARNET-NYC120 (US) 199.95.248/24 NEARNET-NYC121 (US) 199.95.249/24 NEARNET-NYC122 (US) 199.95.250/24 NEARNET-NYC123 (US) 199.95.251/24 NEARNET-NYC124 (US) 199.95.252/24 NEARNET-NYC125 (US) 199.95.253/24 NEARNET-NYC126 (US) 199.95.254/24 NEARNET-NYC127 (US) 199.95.255/24 NEARNET-NYC128 (US) Northwest Aerospace Training Corporation, 2600 Lone Oak Point, Eagan, MN 55121, USA 1:1225(130) CICNET 2:1225(129) CICNET 3:1225(131) CICNET 4:555 Minnesota Supercomputer Center Network (MSCNet) ---------- 147.118/16 NATCO (US) Northwestern College, 3003 North Snelling Ave, Roseville, MN 55113, USA 1:1225(130) CICNET 2:1225(129) CICNET 3:1225(131) CICNET 4:555 Minnesota Supercomputer Center Network (MSCNet) ------------- 204.73.112/20 NETBLK-NWC3 (US) Numerical Design Ltd., 1506 East Franklin Street, Suite 302, Chapel Hill, NC 27514, USA 1:1800 ICM-Atlantic 2:1240 ICM-Pacific ------------- 192.65.142/24 NET-NDL (US) On-Ramp Technologies (ISDN 1), 1950 Stemmons Freeway Suite 5061, Dallas, TX 75207, USA 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1239 SprintLink ------------ 199.1.166/24 NET-ORTISDN1 (US) Open Access, 605 Neponset Street, Canton, MA 02021, USA 1:1239 SprintLink 2:1800 ICM-Atlantic 3:1240 ICM-Pacific ------------ 204.213.0/18 NET-OA (US) PREPnet, 305 S. Craig Street, Suite 200, Pittsburgh, PA 15213, USA 1:3577 PREPnet-WEST 2:1324 ANS New York City - DNSS 35 ------------ 192.204.1/24 PREP-SLIP (US) Pierce County Information Services, 615 South 9th Street, Tacoma, WA 98405-4666, USA 1:3561(11) MCI-RESTON 2:3561(218) MCI-RESTON -------- 162.5/16 PIERCECOUNTY (US) Princeton Plasma Physics Laboratory, Forrestal Research Center, P.O. Box 451, Princeton, NJ 08543, USA 1:293(145) Energy Science Network (ESnet) 2:293(144) Energy Science Network (ESnet) ------------ 198.35.10/24 SUB-PPPL9 (US) 198.35.11/24 SUB-PPPL10 (US) 198.35.12/24 SUB-PPPL11 (US) RGL COnsulting, 1905 Ridgecrest, Garland, TX 75042, USA 1:701(136) Alternet 2:701(134) Alternet -------------- 204.176.222/24 RGL (US) 204.176.223/24 RGL (US) Rogers Tool Works Inc., 205 N. 13th Street, Rogers, AR 72756, USA 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1239 SprintLink ------------ 199.14.70/24 RTW (US) 199.14.71/24 RTW (US) 199.14.72/24 RTW (US) 199.14.73/24 RTW (US) 199.14.74/24 RTW (US) 199.14.75/24 RTW (US) St. John's County School District, 40 Orange St., St. Augustine, FL 32084, USA 1:3561(218) MCI-RESTON 2:3561(11) MCI-RESTON 3:279 SURANET Regional Network (Georgia Tech) 4:86 SURANET Regional Network (College Park) ------------- 199.76.240/20(U) SJCSD (US) Telecomet, Inc., 245 Park Avenue, 24th Floor, New York, NY 10167, USA 1:701(136) Alternet 2:701(134) Alternet -------------- 204.176.220/24 KDD-NET (US) Transamerica Telecommunications Corporation, P.O. Box 3899, Los Angeles, CA 90051, USA 1:701(136) Alternet 2:701(134) Alternet ---------- 161.179/16 TRANSAMERICA-B (US) 198.39/16 NET-TRANSAMERICA-1 (US) US Sprint, BSG, 13221 Woodland Rd, Herndon, VA 22071, USA 1:1240 ICM-Pacific 2:1800 ICM-Atlantic 3:1239 SprintLink ---------- 204.212/16 SL-WEST-6 (US) US Sprint, BSG, 13221 Woodland Rd, Herndon, VA 22071, USA 1:1239 SprintLink 2:1800 ICM-Atlantic 3:1240 ICM-Pacific ---------- 204.213/16 SL-NORTHEAST-6 (US) 204.214/16 SL-NORTH-6 (US) US Sprint, BSG, 13221 Woodland Rd, Herndon, VA 22071, USA 1:1240 ICM-Pacific 2:1800 ICM-Atlantic 3:1239 SprintLink ---------- 204.215/16 SL-SOUTHWEST-6 (US) Varimetrix Corporation, 2350 Commerce Park Dr. # 4, Palm Bay, FL 32905, FL 32905, USA 1:1800 ICM-Atlantic 2:1240 ICM-Pacific 3:1239 SprintLink ------------- 204.27.139/24 VX (US) Washington High School, 2525 N. Sherman Blvd, Milwaukee, WI 53210, USA 1:1225(130) CICNET 2:1225(131) CICNET 3:1225(129) CICNET -------------- 192.135.135/24 WHS-DOM (US) ========================================================== The following Midlevel/Regional peering sessions have also been added: AS 2041 - CRL-GATE - DNSS 11 Peer: 198.32.128.20 - CR Laboratories, Box 326, Larkspur, CA 94977, USA - gw.crl.com AS690 CIDR Squeezings Report: 9666 Nets, 150 ASs, 2355 Aggregates ------------------------------------------------------------------ 9666 (84%) of the ever-announced more-specific routes within aggregates have been withdrawn. 76 of those were withdrawn within the last week. 147 the week before that. 1274 the week before that. 150 ASs have registered aggregates in the PRDB. 100 of those are announcing aggregates. 77 have withdrawn at least one more specific route. 2355 Aggregates are configured. 1726 of these were Top-Level Aggregates (not nested in another aggregate). 1284 of these are being announced to AS690. 932 of those have at least one subnet configured (the other 352 may be saving the Internet future subnet announcements). 787 have stopped announcing at least one configured more specific route. 770 have stopped announcing half of their configured more specific routes. 710 have stopped announcing most (80%) of their more specific routes. See merit.edu:pub/nsfnet/cidr/cidr_savings for more detail. ----------------------------------------------------------- ========================================================== The configuration reports which reflect today's update will be available for anonymous ftp on nic.merit.edu by 08:00 EST : configuration reports -- nic.merit.edu:nsfnet/announced.networks: as-as.now as-gw.now ans_core.now country.now net-comp.now nets.doc nets.non-classful nets.tag.now nets.unl.now NSS routing software configuration files -- nic.merit.edu:nsfnet/backbone.configuration: gated.nss<NSS number>.t3p Information is also avaiable through the PRDB whois server. Type "whois -h prdb.merit.edu help" for details. -------------------------------------------------------------------------- PRDB CHANGES: (Updated October 25, 1994) In early December 1994, as part of the transition to the new Global Routing Registry (GRR), the Policy Routing Database (PRDB) will be retired. Many of the functions of the PRDB (including generation of router configurations for NSFNET) will be produced based on data from the Global Routing Registry. This change to the NSFNET Backbone service will involve the following changes: - The method for submitting new nets to be routed over AS690 will change. Instead of submitting a NACR to nsfnet-admin(a)merit.edu, you will need to submit a "route template" to auto-dbm(a)radb.ra.net . - Additions and entries to the new registry will be made by the Home AS which creates the route for each net, rather than being submitted by a AS690 peer AS. - Most of the PRDB reports (listed above) will no longer be produced. Equivalent information for most of these reports is available from the global Routing Registry. These are major changes to the system. These changes are being made in order to migrate NSFNET customers and the global user community to a Global Routing Registry system, which will be more capable of supporting user needs after the termination of the NSFNET Backbone services in April 1995. For more information, set your web browser to http://www.ra.net/rrinfo.html , or use anonymous ftp to obtain the files "OVERVIEW" and "transition.plan" from the directory "ftp.ra.net:pub/radb". Merit would like to minimize the number of problems that this transition may cause you. In order to help us help you through the transition, please send your concerns, your needs, and suggestions on how we can make this happen smoothly to merit-ie(a)merit.edu. The archived discussion list "db-disc(a)merit.edu" also exists for discussion of PRDB and RADB issues. Send a message to "db-disc-request(a)merit.edu" to subscribe. --Dale Johnson (dsj(a)merit.edu) -------------------------------------------------------------------------- Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line from the nic.merit.edu machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files template.net, template.net.README, template.gate, and template.as. *** Note: As of March 1, 1994, NSFNET AUP NACRs must use the template.net *** (NACR) version 7.1, or the NACR will be returned unprocessed. ******************************* --Steven J. Richardson Merit/NSFNET sjr(a)merit.edu

1 0

Change in NACR process (fwd)
by Ed Cho 15 Dec '94

15 Dec '94

Steve, Good luck. Thanks for all your help. Edward Cho ---------- Forwarded message ---------- Date: Thu, 15 Dec 1994 16:11:25 -0500 From: Elise Gerich <epg(a)merit.edu> To: regional-techs(a)merit.edu Cc: epg(a)merit.edu Subject: Change in NACR process Merit has been fortunate to have the same person handling our routing configurations for the last 5 or so years, Steve Widmayer. He has sheparded us all through the hugh growth of routing announcments and he understood the system better than anyone. to our great dismay, Steve has decided to move on, and we will miss him greatly. Since Steve's last day was Tuesday, December 13, we are now depending on Steve Richardson to help us train a new person (yet to be hired) to handle the NACRs and to help with the configuration process. Until the new person comes on board and is fully trained, we will have to move the cutoff for accepting NACRS to 09:00 EST on the day preceeding the configuration run. Please join us in wishing Steve Widmayer well in his future endeavors, and please have patience with us as we try to fill his shoes (not an easy task). --Elise

1 0

Merit has moved
by Elise Gerich 15 Dec '94

15 Dec '94

As of today, Merit has moved to: 4251 Plymouth Road Ann Arbor, MI 48105-2785 Our main phone numbers have changed to: telephone: 313-764-9430 FAX: 313-747-3185 You are welcome to come visit our new offices anytime. --Elise

1 0

Change in NACR process
by Elise Gerich 15 Dec '94

15 Dec '94

Merit has been fortunate to have the same person handling our routing configurations for the last 5 or so years, Steve Widmayer. He has sheparded us all through the hugh growth of routing announcments and he understood the system better than anyone. to our great dismay, Steve has decided to move on, and we will miss him greatly. Since Steve's last day was Tuesday, December 13, we are now depending on Steve Richardson to help us train a new person (yet to be hired) to handle the NACRs and to help with the configuration process. Until the new person comes on board and is fully trained, we will have to move the cutoff for accepting NACRS to 09:00 EST on the day preceeding the configuration run. Please join us in wishing Steve Widmayer well in his future endeavors, and please have patience with us as we try to fill his shoes (not an easy task). --Elise

1 0

Re: February Meeting
by Guy Almes 15 Dec '94

15 Dec '94

Bill, I agree that we would not be able to co-opt the ISoc meeting to be specifically North America focused. I also agree, of course, that NANOG, EOF, and the IEPG are distinct groups with distinct charters. I do not advocate any merger. But I *do* believe that it would be in the best interests of NANOG (and IEPG) for us to take advantage of this opportunity. -- Guy

2 1

Re: February Meeting
by Guy Almes 15 Dec '94

15 Dec '94

Tim, I agree with your call for co-locating/coordinating the conferences. I believe that the NANOG community will be able to positively influence the ISoc conference agenda, content, and sense of reality. -- Guy

2 2

Re: February Meeting
by tjs＠msc.edu 15 Dec '94

15 Dec '94

It appears that the advertised "ops-program(a)isoc.org" doesn't exist. Is this conference still on? Or perhaps, I was supposed to say ops-programme(a)isoc.org? (Who was it that translated some IETF document to British spelling in a fit of some-or- other?) -tjs Date: Thu, 15 Dec 94 01:17:37 -0600 From: Mailer-Daemon (Mail Delivery Subsystem) Subject: Returned mail: User unknown ----- Transcript of session follows ----- >>> RCPT To:<ops-program(a)isoc.org> <<< 550 (USER) Unknown user name in "ops-program(a)isoc.org" 550 <ops-program(a)isoc.org>... User unknown

2 1

Re: February Meeting
by tjs＠msc.edu 15 Dec '94

15 Dec '94

> Date: Fri, 9 Dec 1994 01:27:52 -0500 > From: Elise Gerich <epg(a)merit.edu> > To: nanog(a)merit.edu > Subject: February Meeting > Cc: epg(a)merit.edu, pam(a)merit.edu > > At the last NANOG meeting in Ann Arbor, we decided to have a winter > meeting in Boulder, CO. NCAR kindly offered to host the meeting > and plans were finalized to have the meeting on Thursday and Friday, > February 9 and 10, 1995. > > ISOC has proposed to host a Operations Conference in February (21-22) > in San Diego, CA. The Description and Objectives of the > conference are: > [...] > ISOC has offered to provide meeting rooms for the winter > NANOG meeting if we would like to hold the NANOG meeting > on the Monday preceeding the Conference. > [...] Without having seen an agenda for either conference, it appears to me that these two conferences are likely to have similar missions, prospective attendees, and agenda. It is not clear to me that two such [apparently] similar conferences can both thrive; one may die, or worse, both may wither as people choose one forum or the other. In particular, it may be hard to justify the travel time and expense to attend both conferences. I recommend that either: o The two conferences be collocated (in time and space) and coordinate their agendas; o The conference organizers clearly articulate how the two conferences differ and why attendance at both would be useful. The February meetings seem like a good time to start. By the way, does either conference have agenda yet? -tjs

1 0

CERT Advisory VB-94:02.dec
by cert-advisory＠cert.org 14 Dec '94

14 Dec '94

CERT Vendor-Initiated Bulletin VB-94:02 December 14, 1994 Topic: Security Advisory #0505 ULTRIX and DEC OSF/1 Source: Digital Equipment Corporation, Software Security Response Team Related CERT documents: CERT Advisory CA-94:12 "Sendmail Vulnerabilities" To aid in the wide distribution of essential security information, the CERT Coordination Center is forwarding the following information from Digital Equipment Corp. Digital urges you to act on this information as soon as possible. Digital contact information is included in the forwarded text below; please contact them if you have any questions or need further information. ===========================FORWARDED TEXT STARTS HERE========================= SOURCE: Digital Equipment Corporation - ( DSIN / DSNlink FLASH MAIL ) Software Security Response Team 17.MAY.94 PRODUCT: ULTRIX Versions 4.3, 4.3A, V4.4 DECnet-ULTRIX Version 4.2 DEC OSF/1 Versions 1.2, 1.3, 1.3A, 2.0 ADVISORY INFORMATION: SUBJECT: Security Enhanced Kit for DECNET-ULTRIX V4.2, ULTRIX V4.3 (VAX/RISC), ULTRIX V4.3A (RISC), ULTRIX V4.4 (VAX/RISC), ULTRIX Worksystem Software and DEC OSF/1 V1.2 - V2.0 IMPACT: Potential security vulnerabilities exist where, under certain circumstances user access or privilege may be expanded. SOLUTION: ULTRIX: Upgrade/Install ULTRIX to an minimum of V4.4 and install the Security Enhanced Kit DEC OSF/1: Upgrade/Install to a minimum of V1.2 and install the Security Enhanced Kit [Note: In the text below, Digital identifies OSF/1 V2.0 as the minimum. Digital has confirmed that 2.0 is correct. --CERT staff] _______________________________________________________________________________ These kits are available from Digital Equipment Corporation by contacting your normal Digital support channel or by request via DSNlink for electronic transfer. _______________________________________________________________________________ IMPACT: Digital has discovered the existence of potential security vulnerabilities in the ULTRIX V4.3, V4.3a, V4.4 and DEC OSF/1 V1.2, V1.3, V2.0 Operating Systems, and DECnet-ULTRIX V4.2. These potential vulnerabilities were discovered as a result of evaluating recent reports of potential security vulnerabilities which were distributed on the INTERNET and as a result of Digital's continued engineering efforts. The solutions to these vulnerabilities have been included in the next release of ULTRIX and DEC OSF/1. The kits have been created to correct potential security vulnerabilities which, under certain circumstances may expand user access or privilege. Digital Equipment Corporation strongly urges Customers to upgrade to a minimum of ULTRIX V4.4 and DEC OSF/1 V2.0 then apply the Security Enhanced Kit. - Please refer to the applicable Release Note information prior to upgrading your installation. _______________________________________________________________________________ KIT PART NUMBERS and DESCRIPTIONS CSC PATCH # CSCPAT_4060 V1.0 ULTRIX V4.3 thru V4.4 (Includes DECnet-ULTRIX V4.2) CSCPAT_4061 V1.0 DEC OSF/1 V1.2 thru V2.0 _______________________________________________________________ These kits will not install on versions previous to ULTRIX V4.3 or DEC OSF/1 V1.2. _______________________________________________________________ _______________________________________________________________________________ _______________________________________________________________________________ The ULTRIX Security Enhanced kit replaces the following images: /usr/etc/comsat ULTRIX V4.3, V4.3a, V4.4 /usr/ucb/lpr " " /usr/bin/mail " " /usr/lib/sendmail " " /usr/etc/telnetd ULTRIX V4.3, V4.3a only ______________________________________ for DECnet-ULTRIX V4.2 installations: /usr/etc/dlogind /usr/etc/telnetd.gw *sendmail - is a previously distributed solution. _______________________________________________________________________________ The DEC OSF/1 Security Enhanced kit replaces the following images: /usr/sbin/comsat DEC OSF/1 V1.2, V1.3 V2.0 /usr/bin/binmail /usr/bin/lpr " " /usr/sbin/sendmail DEC OSF/1 V1.2, V1.3 only /usr/bin/rdist " " /usr/shlib/libsecurity.so DEC OSF/1 V2.0 only *sendmail - is a previously distributed solution. _______________________________________________________________________________ Digital urges you to periodically review your system management and security procedures. Digital will continue to review and enhance the security features of its products and work with customers to maintain and improve the security and integrity of their systems. _______________________________________________________________________________ NOTE: For non-contract/non-warranty customers contact your local Digital support channels for information regarding these kits. ______________________________________________________________________________ ======================FORWARDED TEXT ENDS HERE=============================== CERT bulletins, CERT advisories, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from info.cert.org. If you wish to send sensitive incident or vulnerability information to CERT staff by electronic mail, we strongly advise that the e-mail be encrypted. The CERT Coordination Center can support a shared DES key, PGP (public key available via anonymous FTP on info.cert.org) or PEM (contact CERT staff for details). Internet E-mail: cert(a)cert.org Telephone: +1 412-268-7090 (24-hour hotline) CERT personnel answer 8:30 a.m.-5:00 p.m. EST(GMT-5)/EDT(GMT-4), and are on call for emergencies during other hours. Fax: +1 412-268-6989 CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 USA CERT is a service mark of Carnegie Mellon University.

1 0