- Test - lists.nanog.org

CERT Advisory - ConvexOS and ConvexOS/Secure Vulnerabilities
by CERT Advisory 16 Dec '92

16 Dec '92

CA-92:21 CERT Advisory December 16, 1992 ConvexOS and ConvexOS/Secure Vulnerabilities --------------------------------------------------------------------------- The CERT Coordination Center has received information concerning several vulnerabilities in the following CONVEX Computer Corporation products: ConvexOS/Secure, CONVEX CXbatch, CONVEX Storage Manager (CSM), and ConvexOS EMACS. These vulnerabilities can affect ConvexOS versions V6.2 - V10.2 and ConvexOS/Secure versions V9.5 and V10.0 on all supported architectures. CONVEX is aware of the vulnerabilities, and fixes or workarounds are available. Three of the fixes are implemented as full Engineering Change Notice (ECN) patches and, as such, will be shipped with all new systems as well as being released as upgrades for the products CXbatch, CSM and ConvexOS/Secure. There is a workaround available for the ConvexOS EMACS vulnerability. CONVEX is currently incorporating the fixes to these vulnerabilities into future releases of each product. Future shipments of these products should not be vulnerable to these problems. If you have any questions about the affected products, please contact your CONVEX representative or the CONVEX Technical Assistance Center (TAC) at 1-800-952-0379. ----------------------------------------------------------------------------- ConvexOS/Secure: passwd patch I. Description The "passwd" command in ConvexOS/Secure contains a security vulnerability in versions V9.5 and V10.0 of ConvexOS/Secure. This vulnerability has been fixed in ConvexOS/Secure V10.1. II. Impact Local users can gain unauthorized root access. III. Solution Obtain and install ConvexOS/Secure V10.0.2 - Part No. 710-007815-008. ------------------------------------------------------------------------------ Convex CXbatch: qmgr patch I. Description The "qmgr" command in CONVEX CXbatch versions V1.0 - V2.1.3 contains a security vulnerability. This vulnerability is present in ConvexOS V6.2 - V10.2 on systems that have installed the optional CXbatch facility. II. Impact Local users can gain unauthorized root access. III. Solution A. As root, rename the existing version of /usr/convex/qmgr and modify the permission (from 6755 to 700) to prevent misuse. # /bin/mv /usr/convex/qmgr /usr/convex/qmgr.orig # /bin/chmod 700 /usr/convex/qmgr.orig B. Next, obtain and install CONVEX CXbatch V2.1.4 - Part No. 710-007830-011. ------------------------------------------------------------------------------ Convex CSM: migmgr patch I. Description The "migmgr" command in CONVEX CSM contains a security vulnerability, in ConvexOS version V10.1 of systems that have installed the CSM facility. This vulnerability will be fixed in the next CSM release. II. Impact Local users can gain unauthorized root access. III. Solution A. As root, rename the existing version of /usr/csm/bin/migmgr and modify the permission (from 4755 to 700) to prevent misuse. # /bin/mv /usr/csm/bin/migmgr /usr/csm/bin/migmgr.orig # /bin/chmod 700 /usr/csm/bin/migmgr.orig B. Next, obtain and install CONVEX CSM V1.0.1 - Part No. 710-011315-003 ------------------------------------------------------------------------------ ConvexOS: EMACS editor workaround I. Description The EMACS Editor in ConvexOS contains a security vulnerability, in ConvexOS versions V9.0 - V10.2. II. Impact Local users can gain unauthorized access to /dev/kmem. III. Solution As root, remove the setgid bit from /usr/convex/emacs. # /bin/chmod 755 /usr/convex/emacs ------------------------------------------------------------------------------ The CERT Coordination Center wishes to thank the CONVEX Computer Corporation for their response to these problems. We would also like to thank Bob Vickers from the University of London Computer Centre, London, England, for reporting the CXbatch problem to us. ------------------------------------------------------------------------------ If you believe that your system has been compromised, contact the CERT Coordination Center or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from cert.org (192.88.209.5).

1 0

Additions to the NSFNET policy-based routing database
by Steven K. Widmayer 15 Dec '92

15 Dec '92

The following additions have been made to the NSFNET policy-based routing database and will be installed on the T3 backbone by 08:00 EST: IP address Net name Country Date Priority:AS ---------- -------- ------- ---- ----------- 128.254 FMC-NOD C:US D:12/14/92 1:555 131.163 I-CAN C:CA D:12/14/92 1:701 2:702 3:279 134.189 GDFW C:US D:12/14/92 1:1740 134.200 GOODYEAR C:US D:12/14/92 1:174 137.230 CATNET C:US D:12/14/92 1:1224 141.42 CHARITE-NET C:DE D:12/14/92 1:293 2:291 144.124 ABERNET C:GB D:12/14/92 1:297 2:372 151.110 ETN C:US D:12/14/92 1:600 155.99 UTAH-E-NET C:US D:12/14/92 1:210 2:209 156.17 WROCPOLIP C:PL D:12/14/92 1:1800 162.10 ANACOMP-SD C:US D:12/14/92 1:1740 164.8 UNI-MB-NET C:SI D:12/14/92 1:297 2:372 192.12.124 TEC-LAN1 C:US D:12/14/92 1:200 2:201 3:184 4:164 192.51.5 SPTNET C:NO D:12/14/92 1:1800 2:701 192.54.133 ACFP-NE-NET C:US D:12/14/92 1:184 2:164 192.84.90 FERNET C:SI D:12/14/92 1:297 2:372 192.86.66 TEC-LAN2 C:US D:12/14/92 1:200 2:201 192.88.9 ABERNET1 C:GB D:12/14/92 1:297 2:372 192.88.10 ABERNET2 C:GB D:12/14/92 1:297 2:372 192.94.226 OPEN-SYSTEMS C:AT D:12/14/92 1:701 192.108.138 SANET C:CS D:12/14/92 1:513 192.108.148 IAC-NET C:CS D:12/14/92 1:513 192.109.46 DVSHAN C:DE D:12/14/92 1:701 192.129.1 MPIPF-LAN C:DE D:12/14/92 1:293 2:291 192.131.145 NAWCNET C:US D:12/14/92 1:184 2:164 192.150.194 ROLAN-UNIVAQ C:IT D:12/14/92 1:513 192.150.195 LANCO-UNIVAQ C:IT D:12/14/92 1:513 192.150.196 CC-UNIVAQ C:IT D:12/14/92 1:513 192.153.18 UNINET2 C:HU D:12/14/92 1:513 192.154.45 SIGMAXI-NET C:US D:12/14/92 1:81 2:1327 192.154.51 ECS-SLIP C:US D:12/14/92 1:81 2:1327 192.154.52 ECS-FRLY C:US D:12/14/92 1:81 2:1327 192.154.53 LDG-NET C:US D:12/14/92 1:81 2:1327 192.154.54 TAC-NET C:US D:12/14/92 1:81 2:1327 192.154.55 MARTIN-NET C:US D:12/14/92 1:81 2:1327 192.160.172 SOTNET C:HU D:12/14/92 1:513 192.171.131 NERC-NET4 C:GB D:12/14/92 1:297 2:372 192.171.132 NERC-NET5 C:GB D:12/14/92 1:297 2:372 192.171.136 NERC-NET9 C:GB D:12/14/92 1:297 2:372 192.171.141 NERC-NET14 C:GB D:12/14/92 1:297 2:372 192.171.142 NERC-NET15 C:GB D:12/14/92 1:297 2:372 192.171.143 NERC-NET16 C:GB D:12/14/92 1:297 2:372 192.171.144 NERC-NET17 C:GB D:12/14/92 1:297 2:372 192.171.153 NERC-NET26 C:GB D:12/14/92 1:297 2:372 192.171.154 NERC-NET27 C:GB D:12/14/92 1:297 2:372 192.171.157 NERC-NET30 C:GB D:12/14/92 1:297 2:372 192.171.165 NERC-NET38 C:GB D:12/14/92 1:297 2:372 192.171.182 NERC-NET55 C:GB D:12/14/92 1:297 2:372 192.171.184 NERC-NET57 C:GB D:12/14/92 1:297 2:372 192.187.142 NETCOM45 C:US D:12/14/92 1:200 2:201 192.195.32 QUADRALAY C:US D:12/14/92 1:280 2:114 192.206.201 WEDNET C:US D:12/14/92 1:1331 192.215.3 NETBLK-CERFNET-3 C:US D:12/14/92 1:1740 192.215.4 NETBLK-CERFNET-4 C:US D:12/14/92 1:1740 192.231.11 PV-T1-MLF C:US D:12/14/92 1:2002 192.231.63 SCBULLDOGS C:US D:12/14/92 1:279 2:86 192.245.169 POLHEP2 C:PL D:12/14/92 1:513 193.2.1 ARNES-NET C:SI D:12/14/92 1:297 2:372 193.2.4 IJS-NET1 C:SI D:12/14/92 1:297 2:372 193.60.8 ABERNET3 C:GB D:12/14/92 1:297 2:372 193.60.9 ABERNET4 C:GB D:12/14/92 1:297 2:372 193.60.10 ABERNET5 C:GB D:12/14/92 1:297 2:372 193.60.11 ABERNET6 C:GB D:12/14/92 1:297 2:372 193.60.12 ABERNET7 C:GB D:12/14/92 1:297 2:372 193.60.13 ABERNET8 C:GB D:12/14/92 1:297 2:372 193.60.14 ABERNET9 C:GB D:12/14/92 1:297 2:372 193.60.15 ABERNET10 C:GB D:12/14/92 1:297 2:372 198.7.16 UERJ-16 C:BR D:12/14/92 1:1740 198.7.17 UERJ-17 C:BR D:12/14/92 1:1740 198.7.18 UERJ-18 C:BR D:12/14/92 1:1740 198.7.19 UERJ-19 C:BR D:12/14/92 1:1740 198.7.20 UERJ-20 C:BR D:12/14/92 1:1740 198.7.21 UERJ-21 C:BR D:12/14/92 1:1740 198.7.22 UERJ-22 C:BR D:12/14/92 1:1740 198.7.23 UERJ-23 C:BR D:12/14/92 1:1740 198.7.24 UERJ-24 C:BR D:12/14/92 1:1740 198.7.25 UERJ-25 C:BR D:12/14/92 1:1740 198.7.26 UERJ-26 C:BR D:12/14/92 1:1740 198.7.27 UERJ-27 C:BR D:12/14/92 1:1740 198.7.28 UERJ-28 C:BR D:12/14/92 1:1740 198.7.29 UERJ-29 C:BR D:12/14/92 1:1740 198.7.30 UERJ-30 C:BR D:12/14/92 1:1740 198.7.31 UERJ-31 C:BR D:12/14/92 1:1740 198.22.11 DRCNET-6 C:US D:12/14/92 1:1800 2:1240 Network IP: 128.254 Network Name: FMC-NOD Location: FMC Corporation, Northern Ordnance Division, 4800 East River Road, Minneapolis, MN 55421, USA Country Code: US 1:555 Minnesota Supercomputer Center Network (MSCNet) Network IP: 131.163 Network Name: I-CAN Location: Intergraph Canada Ltd., 3115 - 12th Street NE, Calgary, Alberta T2E 7J2, CANADA Country Code: CA 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 134.189 Network Name: GDFW Location: Computer Science Corporation, Mail Zone 5000, 6100 Western Place, Fort Worth, TX 76107, USA Country Code: US 1:1740 CERFnet Network IP: 134.200 Network Name: GOODYEAR Location: Goodyear Technical Center, 1376 Technical Way Drive, Akron, OH 44316, USA Country Code: US 1:174 NYSERNet Regional Network / PSI Network IP: 137.230 Network Name: CATNET Location: Caterpillar, Inc., P.O. Box 1875, Peoria, IL 61656-1875, USA Country Code: US 1:1224 NCSA, Champaign, IL Network IP: 141.42 Network Name: CHARITE-NET Location: Charite Berlin, Schumannstr. 20-21, D-O-1040 Berlin, GERMANY Country Code: DE 1:293 Energy Science Network (FIX-East) 2:291 Energy Science Network (FIX-West) Network IP: 144.124 Network Name: ABERNET Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 151.110 Network Name: ETN Location: Eaton Corporation, Eaton Center, 1111 Superior Avenue, Cleveland, OH 44114, USA Country Code: US 1:600 OARNET, Cleveland, OH Network IP: 155.99 Network Name: UTAH-E-NET Location: University of Utah, Computer Center, Merrill Engineering Building, Salt Lake City, UT 84112, USA Country Code: US 1:210 Westnet Regional Network (Utah Attachment) - ENSS 142 2:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 Network IP: 156.17 Network Name: WROCPOLIP Location: Technical University of Wroclaw, Computing Centre, Wybrzeze Wyspianskiego 27, 50-370 Wroclaw, POLAND Country Code: PL 1:1800 ICM (FIX-East) Network IP: 162.10 Network Name: ANACOMP-SD Location: Anacomp, Inc., 12365 Crosthwaite, Poway, CA 92120, USA Country Code: US 1:1740 CERFnet Network IP: 164.8 Network Name: UNI-MB-NET Location: University of Maribor, Maribor, SLOVENIA Country Code: SI 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.12.124 Network Name: TEC-LAN1 Location: Army Topographic Engineering Center, Information Management Office, Information System Engineering Branch, Fort Belvoir, VA 22060-5546, USA Country Code: US 1:200 BARRNet 2:201 BARRNet 3:184 Milnet (FIX-East) 4:164 Milnet (FIX-West) Network IP: 192.51.5 Network Name: SPTNET Location: Spacetec A.S., P.B. 585, N-9001 Tromso, NORWAY Country Code: NO 1:1800 ICM (FIX-East) 2:701 Alternet Network IP: 192.54.133 Network Name: ACFP-NE-NET Location: Air Force Global Weather Central, Building D, Room 7-30, Offutt Air Force Base, NE 68113, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 192.84.90 Network Name: FERNET Location: Faculty for Electrical and Computer Engineering, University of Ljubljana, SLOVENIA Country Code: SI 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.86.66 Network Name: TEC-LAN2 Location: Army Topographic Engineering Center, Information Management Office, Information System Engineering Branch, Fort Belvoir, VA 22060-5546, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.88.9 Network Name: ABERNET1 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.88.10 Network Name: ABERNET2 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.94.226 Network Name: OPEN-SYSTEMS Location: Open Systems EDV-Beratungs und HandelsgesmbH, Seilerstatte 10/11 A-1010 Wien, AUSTRIA Country Code: AT 1:701 Alternet Network IP: 192.108.138 Network Name: SANET Location: Slovak Technical University, Ilkovicova 3, CS-81219 Bratislava, CZECHO-SLOVAKIA Country Code: CS 1:513 EASInet / CERN Network IP: 192.108.148 Network Name: IAC-NET Location: Institute for Applied Cybernetics, Hanulova 5/a, CS-84416 Bratislava, CZECHO-SLOVAKIA Country Code: CS 1:513 EASInet / CERN Network IP: 192.109.46 Network Name: DVSHAN Location: DVS GmbH, Hannover, DVS GmbH, Krepenstr. 8, D-W-3000 Hannover 1, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.129.1 Network Name: MPIPF-LAN Location: Max-Planck-Institut fuer psychologische Forschung, Leopoldstr. 24, D-W-8000 Muenchen 44, GERMANY Country Code: DE 1:293 Energy Science Network (FIX-East) 2:291 Energy Science Network (FIX-West) Network IP: 192.131.145 Network Name: NAWCNET Location: Information Systems and Technical Services Dept., Naval Air Engg. Center, Building 120, Route 547, Lakehurst, NJ 08733, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 192.150.194 Network Name: ROLAN-UNIVAQ Location: Universita' dell Aquila, L'Aquila-Roio, ITALY Country Code: IT 1:513 EASInet / CERN Network IP: 192.150.195 Network Name: LANCO-UNIVAQ Location: Universita' dell'Aquila, L'Aquila-Coppito, ITALY Country Code: IT 1:513 EASInet / CERN Network IP: 192.150.196 Network Name: CC-UNIVAQ Location: Universita' dell Aquila, L'Aquila, ITALY Country Code: IT 1:513 EASInet / CERN Network IP: 192.153.18 Network Name: UNINET2 Location: Eotvos Lorand University of Sciences, Budapest Puskin U. 5-7, H-1088 Budapest, HUNGARY Country Code: HU 1:513 EASInet / CERN Network IP: 192.154.45 Network Name: SIGMAXI-NET Location: Sigma Xi, P.O. Box 13975, Research Triangle Park, NC 27709, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.51 Network Name: ECS-SLIP Location: UNC Educational Computing Service, PO BOX 12035, Research Triangle Park, NC 27709, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.52 Network Name: ECS-FRLY Location: UNC Educational Computing Service, PO BOX 12035, Research Triangle Park, NC 27709, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.53 Network Name: LDG-NET Location: Logical Design Group, Inc., 6301 Chapel Hill Road, Raleigh, NC 27607, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.54 Network Name: TAC-NET Location: The Alliance Center, 4020 West Chase Blvd., Suite 500, Raleigh, NC 27607, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.154.55 Network Name: MARTIN-NET Location: Martin Information Services, Inc., 4505 Falls of the Neuse Road, Suite 350, Raleigh, NC 27609-6265, USA Country Code: US 1:81 CONCERT 2:1327 ANS Washington D.C. - DNSS 59 Network IP: 192.160.172 Network Name: SOTNET Location: Semmelweis University of Medicine, Kalvaria ter 5., H-1089 Budapest, HUNGARY Country Code: HU 1:513 EASInet / CERN Network IP: 192.171.131 Network Name: NERC-NET4 Location: Research Vessel Services (NERC), No 1 Dock, Barry, South Glamorgan CF6 6UZ, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.132 Network Name: NERC-NET5 Location: Research Vessel Services (NERC), No 1 Dock, Barry, South Glamorgan CF6 6UZ, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.136 Network Name: NERC-NET9 Location: Institute of Terrestrial Ecology, Bush Estate, Penicuik, Midlothian EH26 0QB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.141 Network Name: NERC-NET14 Location: British Geological Survey, Murchison House, West Mains Road, Edinburgh EH9 3LA, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.142 Network Name: NERC-NET15 Location: British Geological Survey, Murchison House, West Mains Road, Edinburgh EH9 3LA, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.143 Network Name: NERC-NET16 Location: British Geological Survey, Murchison House, West Mains Road, Edinburgh EH9 3LA, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.144 Network Name: NERC-NET17 Location: British Geological Survey, Murchison House, West Mains Road, Edinburgh EH9 3LA, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.153 Network Name: NERC-NET26 Location: Institute of Terrestrial Ecology, Merlewood Research Station, Grange-over-Sands, Cumbria LA11 6JU, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.154 Network Name: NERC-NET27 Location: Institute of Terrestrial Ecology, Merlewood Research Station, Grange-over-Sands, Cumbria LA11 6JU, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.157 Network Name: NERC-NET30 Location: British Geological Survey, Murchison House, West Mains Road, Edinburgh EH9 3LA, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.165 Network Name: NERC-NET38 Location: Institute of Hydrology (NERC), Staylittle, Llanbrynmair, Powys, Wales SY19 7DB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.182 Network Name: NERC-NET55 Location: British Geological Survey, Murchison House, West Mains Road, Edinburgh EH9 3LA, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.171.184 Network Name: NERC-NET57 Location: Institute of Terrestrial Ecology, Merlewood Research Station, Grange-over-Sands, Cumbria LA11 6JU, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 192.187.142 Network Name: NETCOM45 Location: Netcom On-line Communications Services, 4000 Moorpark Avenue - Suite 209, San Jose, CA 95117, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.195.32 Network Name: QUADRALAY Location: Quadralay Corporation, 8920 Business Park Drive, Suite 206, Austin, TX 78759, USA Country Code: US 1:280 SESQUINET Regional Network 2:114 SESQUINET Regional Network Network IP: 192.206.201 Network Name: WEDNET Location: Washington Schools Information Processing Cooerative, 2000 - 200th Pl., SW, Lynnwood, WA 98036, USA Country Code: US 1:1331 ANS Seattle - DNSS 91 Network IP: 192.215.3 Network Name: NETBLK-CERFNET-3 Location: CERFnet, PO BOX 85608, San Diego, CA 92186-9784, USA Country Code: US 1:1740 CERFnet Network IP: 192.215.4 Network Name: NETBLK-CERFNET-4 Location: CERFnet, PO BOX 85608, San Diego, CA 92186-9784, USA Country Code: US 1:1740 CERFnet Network IP: 192.231.11 Network Name: PV-T1-MLF Location: IBM Corporation, 704 Quince Orchard Road, Gaithersburg, MD 20878, USA Country Code: US 1:2002 IBM-PV-AS Network IP: 192.231.63 Network Name: SCBULLDOGS Location: South Carolina State College, 300 College Avenue, NE, Orangeburg, SC 29117, USA Country Code: US 1:279 SURANET Regional Network (Georgia Tech) 2:86 SURANET Regional Network (College Park) Network IP: 192.245.169 Network Name: POLHEP2 Location: Polish Atomic Energy Agency, High Energy Physics Departament, ul.Kawiory 26A, PL-30055 Krakow, POLAND Country Code: PL 1:513 EASInet / CERN Network IP: 193.2.1 Network Name: ARNES-NET Location: Academic and Research Network of Slovenia, Ljubljana, SLOVENIA Country Code: SI 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.2.4 Network Name: IJS-NET1 Location: Jozef Stefan Institute, Ljubljana, SLOVENIA Country Code: SI 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.60.8 Network Name: ABERNET3 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.60.9 Network Name: ABERNET4 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.60.10 Network Name: ABERNET5 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.60.11 Network Name: ABERNET6 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.60.12 Network Name: ABERNET7 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.60.13 Network Name: ABERNET8 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.60.14 Network Name: ABERNET9 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 193.60.15 Network Name: ABERNET10 Location: University of Wales - Aberystwyth, Aberystwyth, Dyfed, Wales SY23 3BB, UNITED KINGDOM Country Code: GB 1:297 Nasa Science Network (FIX-East) 2:372 Nasa Science Network (FIX-West) Network IP: 198.7.16 Network Name: UERJ-16 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.17 Network Name: UERJ-17 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.18 Network Name: UERJ-18 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.19 Network Name: UERJ-19 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.20 Network Name: UERJ-20 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.21 Network Name: UERJ-21 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.22 Network Name: UERJ-22 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.23 Network Name: UERJ-23 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.24 Network Name: UERJ-24 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.25 Network Name: UERJ-25 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.26 Network Name: UERJ-26 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.27 Network Name: UERJ-27 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.28 Network Name: UERJ-28 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.29 Network Name: UERJ-29 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.30 Network Name: UERJ-30 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.7.31 Network Name: UERJ-31 Location: UERJ - UNIVERSIDADE DO ESTADO DO RIO DE JANEIRO, COINFO - COORDENACAO GERAL DE INFORMATICA, AV. Sao Francisco Xavier, 524 - BLOCO F - 1 andar, Maracana - Rio de Janeiro - RJ, CEP 20550, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 198.22.11 Network Name: DRCNET-6 Location: Dynamics Research Corporation, 60 Frontage Road, Andover, MA 01810, USA Country Code: US 1:1800 ICM (FIX-East) 2:1240 ICM (FIX-West) Network IP: 198.22.19 Network Name: TIESNET Location: Technology and Information Educational Services (TIES), 1935 West County Road B2, Roseville, MN 55113, USA Country Code: US 1:267 CICNET at UIUC 2:1225 CICNET at Argonne Labs 3:266 CICNET at MERIT 4:555 Minnesota Supercomputer Center Network (MSCNet) Total configured T3 networks: 8234 ***************************************************************** The configuration reports which reflect today's update will be available for anonymous ftp on nis.nsf.net by 08:00 EST: configuration reports -- nis.nsf.net:nsfnet/announced.networks: ans_core.now as-as.now as-gw.now as-site.now as.now country.now gate-gw.now net-comp.now net-ter.now net-net.now netcount.now non-us.now nss-as.now nss-gw.now nss.now networks sorted by AS -- nis.nsf.net:nsfnet/announced.networks: nets.as_<AS number> NSS routing software configuration files -- nis.nsf.net:nsfnet/backbone.configuration: nss<NSS number>.t3p Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line from the nis.nsf.net machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files template.net, template.gate, and template.as. ******************************* --Steve Widmayer Merit/NSFNET skw(a)merit.edu --Riaz Taherzadeh-Yazdian NSFNET/ANSNET rty(a)merit.edu

1 0

November NSFNET T3 Usage by Services
by Susan.M.Horvath＠um.cc.umich.edu 15 Dec '92

15 Dec '92

NSFNET T3 Usage by Service November 1992 Service Type % Packets % Bytes ============ ========= ======= File exchange 25 46 Networked mail 16 18 Interactive 16 6 Name lookup 5 2 Other TCP/UDP services 36 27 Non TCP/UDP services 2 1 --- --- 100 100 The categories above are defined as follows: File exchange ftp: data and control (tcp ports 20, 21) Networked mail smtp, nntp, vmnet, uucp (tcp ports 25, 119, 175, 540) Interactive telnet, finger, who, login (tcp ports 23, 79, 513, udp port 513) Name lookup domain name service (udp port 53, tcp port 53) Other TCP/UDP services all tcp/udp ports not included above (e.g. irc, talk, X-windows, appletalk) Non-TCP/UDP services icmp, egp, etc. More detailed information is available for anonymous FTP from NIC.MERIT.EDU (the Merit NIC Services machine) in the file "t3-9211.ports" on the nsfnet/statistics/1992 directory.

1 0

Additions to the NSFNET policy-based routing database
by Steven K. Widmayer 11 Dec '92

11 Dec '92

The following additions have been made to the NSFNET policy-based routing database and will be installed on the T3 backbone by 08:00 EST: IP address Net name Country Date Priority:AS ---------- -------- ------- ---- ----------- 142.222 MOHAWK-NET C:CA D:12/10/92 1:1391 2:1392 3:1393 12:602 152.120 DOTNET1 C:US D:12/11/92 1:1327 155.91 MERCK1 C:US D:12/10/92 1:97 158.189 JGVANDYKE C:US D:12/10/92 1:701 2:702 3:279 158.219 CBO C:US D:12/10/92 1:174 159.97 GRACE C:US D:12/10/92 1:174 163.207 NWSCHS C:US D:12/10/92 1:184 2:164 163.243 GOODYEAR2 C:US D:12/11/92 1:174 192.25.112 HP3-C112 C:US D:12/10/92 1:93 192.75.19 SUN-ONET C:CA D:12/10/92 1:701 2:702 3:279 192.77.52 INRS-ENER-IP C:CA D:12/10/92 1:1393 2:1391 3:1392 13:602 192.84.22 CELTECH C:US D:12/10/92 1:174 192.87.74 PAR-LAN C:NL D:12/11/92 1:513 192.88.124 MIAMI-ECE C:US D:12/10/92 1:297 2:86 192.98.22 VTYH-NET C:FI D:12/11/92 1:1800 2:701 192.104.85 SPSS1 C:US D:12/10/92 1:267 2:1225 3:266 192.139.190 LAMBTON1 C:CA D:12/10/92 1:1391 2:1392 3:1393 12:602 192.150.93 UTPAB C:US D:12/10/92 1:280 2:114 192.187.154 NETCOM57 C:US D:12/10/92 1:200 2:201 192.197.62 NIAGARA1 C:CA D:12/10/92 1:1391 2:1392 3:1393 12:602 192.203.45 ATHENA C:US D:12/10/92 1:701 2:702 3:279 192.203.69 AWS-NET C:US D:12/11/92 1:701 2:702 3:279 192.203.233 MORRIS-NET C:US D:12/10/92 1:97 192.207.159 PPL-1 C:US D:12/10/92 1:210 2:209 192.231.207 RARITANVAL C:US D:12/10/92 1:97 192.231.231 IONA C:US D:12/10/92 1:97 192.231.232 ESSEXCOUNTY C:US D:12/10/92 1:97 192.231.233 BUCKSCOUNTY C:US D:12/10/92 1:97 192.231.234 ITHACA2 C:US D:12/10/92 1:97 192.233.2 ELMS C:US D:12/10/92 1:560 2:281 5:701 192.233.7 MILES4 C:US D:12/10/92 1:560 2:281 5:701 192.233.40 JAXLAB0 C:US D:12/10/92 1:560 2:281 5:701 192.233.41 JAXLAB1 C:US D:12/10/92 1:560 2:281 5:701 192.233.42 JAXLAB2 C:US D:12/10/92 1:560 2:281 5:701 192.233.43 JAXLAB3 C:US D:12/10/92 1:560 2:281 5:701 192.245.119 FRB-MPLS-NET C:US D:12/10/92 1:267 2:1225 3:266 193.120.16 ICLITC-C16 C:IE D:12/10/92 1:701 193.120.17 ICLITC-C17 C:IE D:12/10/92 1:701 193.120.18 ICLITC-C18 C:IE D:12/10/92 1:701 193.120.19 ICLITC-C19 C:IE D:12/10/92 1:701 193.120.20 ICLITC-C20 C:IE D:12/10/92 1:701 193.120.21 ICLITC-C21 C:IE D:12/10/92 1:701 193.120.22 ICLITC-C22 C:IE D:12/10/92 1:701 193.120.23 ICLITC-C23 C:IE D:12/10/92 1:701 193.120.24 ICLITC-C24 C:IE D:12/10/92 1:701 193.120.25 ICLITC-C25 C:IE D:12/10/92 1:701 193.120.26 ICLITC-C26 C:IE D:12/10/92 1:701 193.120.27 ICLITC-C27 C:IE D:12/10/92 1:701 193.120.28 ICLITC-C28 C:IE D:12/10/92 1:701 193.120.29 ICLITC-C29 C:IE D:12/10/92 1:701 193.120.30 ICLITC-C30 C:IE D:12/10/92 1:701 193.120.31 ICLITC-C31 C:IE D:12/10/92 1:701 193.136.224 UALNET-1 C:PT D:12/11/92 1:701 193.166.18 DOMLANG-NET C:FI D:12/11/92 1:1800 2:701 198.17.24 PEOCU-NET-1 C:US D:12/10/92 1:184 2:164 198.17.25 PEOCU-NET-2 C:US D:12/10/92 1:184 2:164 198.17.26 PEOCU-NET-3 C:US D:12/10/92 1:184 2:164 198.17.27 PEOCU-NET-4 C:US D:12/10/92 1:184 2:164 198.17.28 PEOCU-NET-5 C:US D:12/10/92 1:184 2:164 Network IP: 142.222 Network Name: MOHAWK-NET Location: Mohawk College of Applied Arts and Technology, 135 Fennell Avenue West, Hamilton, Ontario L8N 3T2, CANADA Country Code: CA 1:1391 CA*net router in Toronto 2:1392 CA*net router in Montreal 3:1393 CA*net router in Quebec 12:602 CA*net router in Montreal Network IP: 152.120 Network Name: DOTNET1 Location: US Dept. of Transportation, 400 7th St., S.W., Washington, DC 20590, USA Country Code: US 1:1327 ANS Washington D.C. - DNSS 59 Network IP: 155.91 Network Name: MERCK1 Location: Merck and Co., Inc., 126 E. Lincoln Avenue, Rahway, NJ 07065, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 158.189 Network Name: JGVANDYKE Location: J. G. Van Dyke and Associates, 6701 Rockledge Drive, Suite 250, Bethesda, MD 20817, USA Country Code: US 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 158.219 Network Name: CBO Location: Congressional Budget Office, H2-486 Ford HOB, Washington, DC 20515, USA Country Code: US 1:174 NYSERNet Regional Network / PSI Network IP: 159.97 Network Name: GRACE Location: W.R. Grace & Co., One Town Center Road, Boca Raton, FL 33486, USA Country Code: US 1:174 NYSERNet Regional Network / PSI Network IP: 163.207 Network Name: NWSCHS Location: Management Engineering and Information Department, Commanding Officer, WPNSTA CHASN CODE 052C, Building 13, Goose Creek, SC 29445-8601, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 163.243 Network Name: GOODYEAR2 Location: Goodyear Technical Center, Department 450B, P. O. Box 3531, Akron, OH 44309-3531, USA Country Code: US 1:174 NYSERNet Regional Network / PSI Network IP: 192.25.112 Network Name: HP3-C112 Location: Hilco Technologies, Inc., 3300 Rider Trail South, Suite 300, Earth City, MO 63045, USA Country Code: US 1:93 MIDnet Network IP: 192.75.19 Network Name: SUN-ONET Location: Sun Microsystems of Canada, Inc., 100 Renfrew Drive, Markham, Ontario L3R 9R6, CANADA Country Code: CA 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 192.77.52 Network Name: INRS-ENER-IP Location: INRS-Energie et materiaux, 1650 Montee Sainte Julie, C.P. 1020, Varennes, Quebec J3X 1S2, CANADA Country Code: CA 1:1393 CA*net router in Quebec 2:1391 CA*net router in Toronto 3:1392 CA*net router in Montreal 13:602 CA*net router in Montreal Network IP: 192.84.22 Network Name: CELTECH Location: Cellular Technical Services Company, 2401 Fourth Avenue, Suite 808, Seattle, WA 98121, USA Country Code: US 1:174 NYSERNet Regional Network / PSI Network IP: 192.87.74 Network Name: PAR-LAN Location: Stichting Academisch Rekencentrum, Science Park Watergraafsmeer (WCW), Amsterdam, NETHERLANDS Country Code: NL 1:513 EASInet / CERN Network IP: 192.88.124 Network Name: MIAMI-ECE Location: University of Miami, Department of Electrical and Computer Engineering, McArthur Building, Room 414, 1251 Memorial Drive, Coral Gables, FL 33146, USA Country Code: US 1:297 Nasa Science Network (FIX-East) 2:86 SURANET Regional Network (College Park) Network IP: 192.98.22 Network Name: VTYH-NET Location: Vasa Tekniska Yrkeshoegskola, Wolfskavaegen 33, PB 6, SF-65201 Vasa, FINLAND Country Code: FI 1:1800 ICM (FIX-East) 2:701 Alternet Network IP: 192.104.85 Network Name: SPSS1 Location: SPSS, Inc., 444 N. Michigan Avenue, Chicago, IL 60611, USA Country Code: US 1:267 CICNET at UIUC 2:1225 CICNET at Argonne Labs 3:266 CICNET at MERIT Network IP: 192.139.190 Network Name: LAMBTON1 Location: Lambton College, 1457 London Rd., Box 969, Sarnia, ON N7T 7K4, CANADA Country Code: CA 1:1391 CA*net router in Toronto 2:1392 CA*net router in Montreal 3:1393 CA*net router in Quebec 12:602 CA*net router in Montreal Network IP: 192.150.93 Network Name: UTPAB Location: University of Texas at Brownsville, 1614 Ridgely Road, Brownsville, TX 78520, USA Country Code: US 1:280 SESQUINET Regional Network 2:114 SESQUINET Regional Network Network IP: 192.187.154 Network Name: NETCOM57 Location: Netcom On-line Communications Services, 4000 Moorpark Avenue - Suite 209, San Jose, CA 95117, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.197.62 Network Name: NIAGARA1 Location: Niagara College of Applied Arts and Technology, P.O. Box 1005, Woodlawn Road, Welland, Ontario, CANADA Country Code: CA 1:1391 CA*net router in Toronto 2:1392 CA*net router in Montreal 3:1393 CA*net router in Quebec 12:602 CA*net router in Montreal Network IP: 192.203.45 Network Name: ATHENA Location: Athena Design, Inc., 17 Saint Mary's Court, Boston, MA 02146, USA Country Code: US 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 192.203.69 Network Name: AWS-NET Location: Atlas Wireline Services, 10205 Westheimer, Suite 1000, Houston, TX 77042, USA Country Code: US 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 192.203.233 Network Name: MORRIS-NET Location: County College of Morris, 214 Grove Road, Randolph, NJ 07869, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.207.159 Network Name: PPL-1 Location: Pocatello Public Library, Brian Hughes, Idaho State Univeristy, Computer Center, Campus Box 8037, Pocatello, ID 83209-8037, USA Country Code: US 1:210 Westnet Regional Network (Utah Attachment) - ENSS 142 2:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 Network IP: 192.231.207 Network Name: RARITANVAL Location: Raritan Valley Community College, PO Box 3300, Somerville, NJ 08876, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.231.231 Network Name: IONA Location: Iona College, Computing Center, 715 North Avenue, New Rochelle, NY 10801, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.231.232 Network Name: ESSEXCOUNTY Location: Essex County College, 303 University Avenue, Newark, NJ 07102, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.231.233 Network Name: BUCKSCOUNTY Location: Bucks County Community College, Newtown, PA 18940, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.231.234 Network Name: ITHACA2 Location: Ithaca College, OIT, Phillips Hall, Danby Road, Ithaca, NY 14850, USA Country Code: US 1:97 JvNCnet Regional Network Network IP: 192.233.2 Network Name: ELMS Location: College of Our Lady of the Elms, 291 Springfield Street, Chicopee, MA 01013, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.233.7 Network Name: MILES4 Location: Miles Research Center, D1, 400 Morgan Lane, West Haven, CT 06516, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.233.40 Network Name: JAXLAB0 Location: The Jackson Laboratory, Computing Service, 600 Main Street, Bar Harbor, ME 04609, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.233.41 Network Name: JAXLAB1 Location: The Jackson Laboratory, Computing Service, 600 Main Street, Bar Harbor, ME 04609, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.233.42 Network Name: JAXLAB2 Location: The Jackson Laboratory, Computing Service, 600 Main Street, Bar Harbor, ME 04609, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.233.43 Network Name: JAXLAB3 Location: The Jackson Laboratory, Computing Service, 600 Main Street, Bar Harbor, ME 04609, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 5:701 Alternet Network IP: 192.245.119 Network Name: FRB-MPLS-NET Location: Federal Reserve Bank of Minneapolis, Research Department, 250 Marquette Avenue, Minneapolis, MN 55401, USA Country Code: US 1:267 CICNET at UIUC 2:1225 CICNET at Argonne Labs 3:266 CICNET at MERIT Network IP: 193.120.16 Network Name: ICLITC-C16 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.17 Network Name: ICLITC-C17 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.18 Network Name: ICLITC-C18 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.19 Network Name: ICLITC-C19 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.20 Network Name: ICLITC-C20 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.21 Network Name: ICLITC-C21 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.22 Network Name: ICLITC-C22 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.23 Network Name: ICLITC-C23 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.24 Network Name: ICLITC-C24 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.25 Network Name: ICLITC-C25 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.26 Network Name: ICLITC-C26 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.27 Network Name: ICLITC-C27 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.28 Network Name: ICLITC-C28 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.29 Network Name: ICLITC-C29 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.30 Network Name: ICLITC-C30 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.120.31 Network Name: ICLITC-C31 Location: ICL Information Technology Centre Ltd., South Country Business Park, Leopardstown, Dublin 18, IRELAND Country Code: IE 1:701 Alternet Network IP: 193.136.224 Network Name: UALNET-1 Location: Universidade do Algarve, Campus de Gambelas, 8000 Faro, PORTUGAL Country Code: PT 1:701 Alternet Network IP: 193.166.18 Network Name: DOMLANG-NET Location: Finnish Research Centre for Domestic Languages, Sornaisten Rantatie 25, sf-00500 Helsinki, FINLAND Country Code: FI 1:1800 ICM (FIX-East) 2:701 Alternet Network IP: 198.17.24 Network Name: PEOCU-NET-1 Location: PEO(CU), ATTN: PEO (CU)-B23, WASHINGTON, DC 20361-1014, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 198.17.25 Network Name: PEOCU-NET-2 Location: PEO(CU), ATTN: PEO (CU)-B23, WASHINGTON, DC 20361-1014, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 198.17.26 Network Name: PEOCU-NET-3 Location: PEO(CU), ATTN: PEO (CU)-B23, WASHINGTON, DC 20361-1014, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 198.17.27 Network Name: PEOCU-NET-4 Location: PEO(CU), ATTN: PEO (CU)-B23, WASHINGTON, DC 20361-1014, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 198.17.28 Network Name: PEOCU-NET-5 Location: PEO(CU), ATTN: PEO (CU)-B23, WASHINGTON, DC 20361-1014, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 198.17.29 Network Name: PEOCU-NET-6 Location: PEO(CU), ATTN: PEO (CU)-B23, WASHINGTON, DC 20361-1014, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Total configured T3 networks: 8151 The following T3 routers have also been added: AS Number: 602 AS Notes: CA*net router in Montreal AS Country Code: CA ANS: No BkBn: 690 NSS: 140.222.143 - ENSS143 University of Washington Gate: 192.35.180.25 - CA*Net Seattle RT ENSS 143 -- Seattle AS Number: 1740 AS Notes: CERFnet AS Country Code: US ANS: No BkBn: 690 NSS: 140.222.135 - sd-enss San Diego, California Gate: 132.249.32.15 - hang-fddi.cerf.net ENSS 135 - San Diego ***************************************************************** The configuration reports which reflect today's update will be available for anonymous ftp on nis.nsf.net by 08:00 EST: configuration reports -- nis.nsf.net:nsfnet/announced.networks: ans_core.now as-as.now as-gw.now as-site.now as.now country.now gate-gw.now net-comp.now net-ter.now net-net.now netcount.now non-us.now nss-as.now nss-gw.now nss.now networks sorted by AS -- nis.nsf.net:nsfnet/announced.networks: nets.as_<AS number> NSS routing software configuration files -- nis.nsf.net:nsfnet/backbone.configuration: nss<NSS number>.t3p Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line from the nis.nsf.net machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files template.net, template.gate, and template.as. ******************************* --Steve Widmayer Merit/NSFNET skw(a)merit.edu --Riaz Taherzadeh-Yazdian NSFNET/ANSNET rty(a)merit.edu

1 0

Re: Additions to the NSFNET policy-based routing database
by Susan Horvath 10 Dec '92

10 Dec '92

> Date: Wed, 9 Dec 92 15:03:44 EST > To: skw(a)merit.edu (Steven K. Widmayer) > Cc: nwg(a)merit.edu > From: aggarwal(a)nisc.jvnc.net (Vikas Aggarwal) > Any idea to make this entire structure available via gopher+wais ? > It would make things a lot easier to remember. The entire collection available via Anonymous FTP is indeed available via gopher. "Merit Network" is registered on the main gopher server at the University of Minnesota. Once you have reached our server, choose Option 2: "Anonymous FTP - nic.merit.edu". We are considering making the configuration part of the tree available more directly within our gopher server, as well as WAIS-ifying it. We will post to this group if additional facilities are added. -Susan Horvath Merit/NSFNET Information Services

1 0

CERT Advisory - Cisco Access List Vulnerability
by CERT Advisory 10 Dec '92

10 Dec '92

CA-92:20 CERT Advisory December 10, 1992 Cisco Access List Vulnerability ----------------------------------------------------------------------------- The CERT Coordination Center has received information concerning a vulnerability with Cisco routers when access lists are utilized. This vulnerability is present in Cisco software releases 8.2, 8.3, 9.0 and 9.1. Cisco Systems and CERT strongly recommend that sites using Cisco routers for firewalls take immediate action to eliminate this vulnerability from their networks. This vulnerability is fixed in Cisco software releases 8.3 (update 5.10), 9.0 (update 2.5), 9.1 (update 1.1) and in all later releases. Customers who are using software release 8.2 and do not want to upgrade to a later release should contact Cisco's Technical Assistance Center (TAC) at 800-553-2447 (Internet: tac(a)cisco.com) for more information. The following interim releases are available via anonymous FTP from ftp.cisco.com (131.108.1.111). Note: this FTP server will not allow filenames to be listed or matched with wildcards. You also cannot request the file by its full pathname. You must first cd to the desired directory (beta83_dir, beta90_dir, or beta91_dir) and then request the file desired (gs3-bfx.83-5.10, etc.). Release (Update) Filename Size Checksum 8.3 (5.10) /beta83_dir/gs3-bfx.83-5.10 1234696 02465 1206 9.0 (2.5) /beta90_dir/gs3-bfx.90-2.5 1705364 47092 1666 9.1 (1.1) /beta91_dir/gs3-k.91-1.1 2005548 59407 1959 These releases are also available on Cisco's Customer Information On-Line (CIO) service for those customers having a maintenance contract. Other customers may obtain these releases through Cisco's Technical Assistance Center or by contacting their local Cisco distributor. ----------------------------------------------------------------------------- I. Description A vulnerability in Cisco access lists allows some packets to be erroneously routed which one would expect to be filtered by the access list and vice-versa. This vulnerability can allow unauthorized traffic to pass through the gateway and can block authorized traffic. II. Problem If a Cisco router is configured to use extended IP access lists for traffic filtering on an MCI, SCI, cBus or cBusII interface, and the IP route cache is enabled, and the "established" keyword is used in the access list, then the access list can be improperly evaluated. This can permit packets which should be filtered and filter packets which should be permitted. III. Workaround This vulnerability can be avoided by either rewriting the extended access list to not use the "established" keyword, or by configuring the interface to not use the IP route cache. To disable the IP route cache, use the configuration command "no ip route-cache". Example for a serial interface: router>enable Password: router#configure terminal Enter configuration commands, one per line. Edit with DELETE, CTRL/W, and CTRL/U; end with CTRL/Z interface serial 0 no ip route-cache ^Z router#write memory IV. Solution Obtain and install the appropriate interim release listed above. Sites which are not experienced at this installation process should contact the TAC center at 800-553-2447 for assistance. --------------------------------------------------------------------------- The CERT Coordination Center wishes to thank Keith Reynolds of the Santa Cruz Operation for his assistance in identifying this problem and Cisco Systems for their assistance in providing technical information for this advisory. --------------------------------------------------------------------------- If you believe that your system has been compromised, contact the CERT Coordination Center or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from cert.org (192.88.209.5).

1 0

CERFnet Weekly Report for the week of Monday, November 30, 1992.
by Donna Bigley 10 Dec '92

10 Dec '92

############################################################################### This is the CERFnet weekly activity report for the period of Monday, November 30th through Sunday, December 6th, 1992. This report is also available through anonymous FTP from NIC.CERF.NET [192.102.249.3] in the cerfnet/cerfnet_stats subdirectory. The filename is: 6-dec-92.txt All times are in Pacific Standard Time, and in the 24-hour format. Please direct any questions or comments to: donnab(a)cerf.net or help(a)cerf.net ****************************************************************************** NETWORK OUTAGES: TICKET #: 1498 SITE: IRVINE COMPILER (ICC) SITES AFFECTED: IRVINE COMPILER (ICC) TIME STARTED: MON. 11-30-92 02:30 TIME ENDED: MON. 11-30-92 08:41 TIME STARTED: MON. 11-30-92 09:29 TIME ENDED: MON. 11-30-92 13:52 TIME STARTED: TUE. 12-01-92 15:07 TIME ENDED: TUE. 12-01-92 15:35 TIME ELAPSED: 10 hours 2 min. REASON: Equipment Trouble TICKET #: 1493 SITE: AJS SITES AFFECTED: AJS TIME STARTED: MON. 11-30-92 05:19 TIME ENDED: MON. 11-30-92 11:57 TIME ELAPSED: 6 hours 38 min. REASON: Link Failure TICKET #: 1504 SITE: CLAREMONT SITES AFFECTED: CLAREMONT TIME STARTED: TUE. 12-01-92 04:30 TIME ENDED: TUE. 12-01-92 04:49 TIME ELAPSED: 19 min. REASON: Site Activity TICKET #: 1512 SITE: SERI/KOREA SITES AFFECTED: SERI/KOREA TIME STARTED: THU. 12-03-92 04:32 TIME ENDED: THU. 12-03-92 05:05 TIME STARTED: FRI. 12-04-92 08:04 TIME ENDED: FRI. 12-04-92 15:32 TIME ELAPSED: 8 hours 1 min REASON: Link Failure (In Korea) TICKET #: 1515 SITE: API SITES AFFECTED: API TIME STARTED: THU. 12-03-92 09:19 TIME ENDED: THU. 12-03-92 09:30 TIME ELAPSED: 11 min REASON: CERFnet Scheduled Maintenance TICKET #: 1509 SITE: GETTY SITES AFFECTED: GETTY TIME STARTED: THU. 12-03-92 09:47 TIME ENDED: THU. 12-03-92 11:51 TIME ELAPSED: 2 hours 4 min REASON: Site Activity TICKET #: 1511 SITE: PAGESAT SITES AFFECTED: PAGESAT TIME STARTED: THU. 12-03-92 15:05 TIME ENDED: FRI. 12-04-92 15:39 TIME ELAPSED: 34 min REASON: Equipment Trouble TICKET #: 1513 SITE: REDE RIO/BRAZIL SITES AFFECTED: REDE RIO/BRAZIL TIME STARTED: THU. 12-03-92 18:05 TIME ENDED: FRI. 12-04-92 12:44 TIME ELAPSED: 18 hours 39 min REASON: Software Trouble (Intermittent Access during this time.) TICKET #: 1514 SITE: EMULEX SITES AFFECTED: EMULEX TIME STARTED: THU. 12-03-92 23:38 TIME ENDED: FRI. 12-04-92 23:52 TIME ELAPSED: 14 min REASON: Unknown TICKET #: 1518 SITE: CITOH SITES AFFECTED: CITOH TIME STARTED: SAT. 12-05-92 04:30 TIME ENDED: MON. 12-07-92 09:01 TIME ELAPSED: 2 days 4 hours 31 min REASON: Equipment trouble TICKET #: 1532 SITE: UCI SITES AFFECTED: CCCD, FULLERTON, EMULEX, UNOCAL, MTI, SPARTA, CMD, MDC, BECKMAN, IRVINE COMPILER CORPORATION, SYMBOL, WDC, CITOH AND UCI DIAL N' CERF. TIME STARTED: SAT. 12-05-92 10:58 TIME ENDED: SAT. 12-05-92 11:22 TIME ELAPSED: 24 min REASON: Site Scheduled Maintenance ------------------------------------------------------------------------ NETWORK ACTIVITY/OUTAGES SCHEDULED: OUTAGE DATE/TIME REASON SITES AFFECTED ------ --------- ------ -------------- SDSC DEC. 14 Router Upgrade SAIC, QUALCOMM, 18:00 - 20:00 USD, SERI/KOREA, USIU, CICESE, SDGE, API, CERF_GA, REDE RIO, SCI-HORIZON, LJCRF, AGI, BIOSYM, SEASPACE, PAGESAT, UCSD, AND SDSC DIAL N' CERF ------------------------------------------------------------------------ CERFNET TRAFFIC CAPACITY USAGE AT EACH CIRCUIT LINK LINK SPEED CAPACITY PEAK HOUR (PST) UCI/CALTECH 45.000 mbps 00.2% 14:00 SDSC/GA 10.000 mbps 00.2% 02:00 SDSC/CALTECH 1.544 mbps 14.8% 15:00 SDSC/UCI 1.544 mbps 8.9% 12:00 SDSC/UCLA 1.544 mbps 9.3% 17:00 SDSC/UCOP 1.544 mbps 5.5% 15:00 SDSC/UCR 1.544 mbps 1.1% 17:00 UCI/UCLA 1.544 mbps 1.4% 14:00 UCLA/UCSB 512 kbps 10.5% 14:00 CALTECH/HUGHES 1.544 mbps 0.1% 13:00 SDSC/AGI 1.544 mbps 0.1% 05:00 SDSC/BIOSYM 1.544 mbps 0.2% 13:00 SDSC/GD 1.544 mbps 1.1% 10:00 SDSC/PAGESAT 1.544 mbps 1.8% 11:00 SDSC/SAIC 1.544 mbps 1.6% 13:00 SDSC/SEASPACE 1.544 mbps 0.3% 12:00 UCI/CSU CO(SWRL) 1.544 mbps 5.1% 16:00 UCI/MDC 1.544 mbps 2.6% 12:00 UCLA/GETTY 1.544 mbps 0.3% 17:00 UCOP/APPLE 1.544 mbps will be available next week. UCOP/CISCO 1.544 mbps will be available next week. UCR/LLUMC 1.544 mbps 1.4% 17:00 CALTECH_CUST/AJS 56 kbps 2.6% 14:00 CALTECH_CUST/CADAM 56 kbps 1.8% 10:00 CALTECH_CUST/CITY OF HOPE 56 kbps 2.4% 08:00 CALTECH_CUST/CLAREMONT 56 kbps 28.2% 15:00 CALTECH_CUST/DASSAULT 56 kbps 0.4% 11:00 CALTECH_CUST/DISNEY 56 kbps 8.0% 09:00 CALTECH_CUST/OXY 56 kbps 12.9% 13:00 CALTECH_CUST/SCAQMD 56 kbps 0.2% 11:00 SDSC/API 56 kbps 6.1% 23:00 SDSC/CICESE 56 kbps 2.1% 09:00 SDSC/KOREA 56 kbps 13.2% 21:00 SDSC/LJCRF 56 kbps 0.7% 15:00 SDSC/QUALCOMM 56 kbps 14.3% 15:00 SDSC/REDE-RIO 56 kbps 10.1% 11:00 SDSC/SCIH 56 kbps 6.3% 18:00 SDSC/SDG&E 56 kbps 0.7% 19:00 SDSC/USD 56 kbps 9.8% 11:00 SDSC/USIU 56 kbps 3.4% 20:00 UCI/BECKMAN 56 kbps 7.3% 18:00 UCI/CCCD 56 kbps 3.7% 16:00 UCI/CMD 56 kbps 0.6% 21:00 UCI/EMULEX 56 kbps 3.0% 09:00 UCI/FULLERTON 56 kbps 2.5% 14:00 UCI/HUGHES 56 kbps 15.6% 15:00 UCI/ICC 56 kbps 6.1% 21:00 UCI/MTI 56 kbps 4.4% 17:00 UCI/SPARTA 56 kbps 8.2% 02:00 UCI/SYMBOL 56 kbps 0.4% 20:00 UCI/UNOCAL 56 kbps 9.8% 14:00 UCLA/CRSS 56 kbps 0.3% 15:00 UCLA/CSMC 56 kbps 3.4% 09:00 UCLA/DATAPRODUCTS 56 kbps 1.5% 10:00 UCLA/GTE 56 kbps 4.4% 09:00 UCLA/ISX 56 kbps 2.9% 13:00 UCLA/LITTON 56 kbps 0.5% 15:00 UCLA/PEPPERDINE 56 kbps 1.5% 07:00 UCLA/QUOTRON 56 kbps 6.4% 06:00 UCLA/SMC 56 kbps 6.0% 19:00 UCOP/FARALLON 56 kbps 7.5% 18:00 UCOP/INTEL 56 kbps 26.8% 10:00 UCOP/LSIL 56 kbps 7.3% 22:00 UCOP/NETLABS 56 kbps 8.5% 22:00 ------------------------------------------------------------------------------ SITE CISCO BOX UPTIME SINCE LAST REBOOT (as of 00:15 PST on Dec. 7, 1992): CERFnet BACKBONE CALTECH [131.215.139.253] Up: 30 days 06 hours 08 minutes CALTECH_CUST [134.24.94.2] Up: 73 days 11 hours 26 minutes SDSC LongBoard [134.24.99.254] Up: 38 days 13 hours 15 minutes SDSC Drzog [132.249.16.13] Up: 59 days 07 hours 12 minutes SDSC Hang10 [132.249.16.15] Up: 46 days 06 hours 55 minutes UCI [128.200.242.101] Up: 01 days 17 hours 50 minutes [Site Scheduled Maintenance - See Ticket #1532] UCI_CUST [134.24.92.3] Up: 01 days 17 hours 50 minutes [Site Scheduled Maintenance - See Ticket #1532] UCLA [128.97.130.10] Up: 31 days 05 hours 23 minutes UCOP [134.24.52.112] Up: 02 days 12 hours 57 minutes [CERFnet Site Activity] UCR [134.24.108.105] Up: 33 days 06 hours 56 minutes CERF 1544 AGI [134.24.202.110] Up: 37 days 03 hours 12 minutes APPLE [134.24.70.200] Up: 04 days 05 hours 05 minutes [CERFnet Site Activity] BIOSYM [134.24.57.200] Up: 178 days 07 hours 13 minutes CISCO Systems [134.24.54.200] Up: 03 days 10 hours 32 minutes [CERFnet Site Activity] CSUCO/SWRL [130.150.102.200] Up: 128 days 18 hours 22 minutes GA [134.24.20.10] Up: 33 days 04 hours 51 minutes GD [134.24.60.200] Up: 00 days 13 hours 47 minutes [Site Activity] GETTY [134.24.235.200] Up: 115 days 07 hours 02 minutes HUGHES_CIT [134.24.103.200] Up: 77 days 11 hours 11 minutes LLUMC [134.24.208.200] Up: 127 days 13 hours 45 minutes MDC [134.24.65.200] Up: 114 days 08 hours 00 minutes PAGESAT [134.24.62.200] Up: 02 days 08 hours 55 minutes [Equipment Trouble] SAIC [134.24.53.208] Up: 207 days 14 hours 10 minutes UCSB [134.24.107.107] Up: 34 days 08 hours 41 minutes WDC [134.24.82.200] Up: 16 days 16 hours 07 minutes CERF 56 AJS [134.24.104.200] Up: 117 days 13 hours 24 minutes API [134.24.224.200] Up: 44 days 08 hours 20 minutes BECKMAN [134.24.237.200] Up: 33 days 10 hours 15 minutes CADAM [134.24.239.200] Up: 43 days 11 hours 46 minutes CCCD [134.24.219.200] Up: 44 days 09 hours 29 minutes CICESE [134.24.227.200] Up: 35 days 04 hours 09 minutes CITY_OF_HOPE [134.24.233.200] Up: 23 days 11 hours 49 minutes CLAREMONT [134.24.206.109] Up: 05 days 19 hours 27 minutes [Site Activity - See Ticket #1504] CMD [134.24.218.200] Up: 93 days 07 hours 29 minutes CRSS [134.24.232.200] Up: 123 days 12 hours 16 minutes CSMC [134.24.243.200] Up: 03 days 13 hours 55 minutes [CERFnet Site Activity] DASSAULT [134.24.229.200] Up: 43 days 12 hours 16 minutes DATAPRODUCTS [134.24.211.200] Up: 35 days 17 hours 29 minutes DISNEY [134.24.207.211] Up: 111 days 19 hours 57 minutes EMULEX [134.24.209.212] Up: 16 days 17 hours 07 minutes FARALLON [134.24.56.200] Up: 13 days 09 hours 05 minutes FULLERTON [134.24.214.217] Up: 45 days 13 hours 14 minutes GTE [134.24.212.200] Up: 40 days 19 hours 15 minutes HUGHES [134.24.204.200] Up: 72 days 13 hours 34 minutes INTEL [134.24.73.200] Up: 253 days 11 hours 34 minutes ICC [134.24.238.200] Up: 02 days 11 hours 04 minutes [Unknown] LITTON [134.24.213.200] Up: 12 days 08 hours 11 minutes LJCRF [134.24.244.200] Up: 00 days 09 hours 57 minutes [Power Outage] LSIL [134.24.72.200] Up: 55 days 13 hours 24 minutes MTI [134.24.216.100] Up: 103 days 08 hours 48 minutes NETLABS [134.24.71.200] Up: 38 days 14 hours 03 minutes OXY [134.24.205.108] Up: 46 days 15 hours 32 minutes PEPPERDINE [134.24.203.218] Up: 240 days 21 hours 42 minutes QUALCOMM [134.24.200.201] Up: 19 days 04 hours 44 minutes QUOTRON [134.24.230.202] Up: 105 days 06 hours 06 minutes REDE_RIO [134.24.112.200] Up: 23 days 20 hours 12 minutes SANTA MONICA [134.24.210.219] Up: 130 days 13 hours 40 minutes SCAQMD [134.24.234.200] Up: 16 days 08 hours 47 minutes SCI-HOR [134.24.109.205] Up: 208 days 06 hours 02 minutes SDG&E [134.24.226.200] Up: 52 days 08 hours 03 minutes SEASPACE [134.24.80.200] Up: 33 days 12 hours 52 minutes SERI/KOREA [134.24.223.200] Up: 06 days 01 hours 04 minutes [Unknown] SPARTA [134.24.215.200] Up: 15 days 13 hours 03 minutes SYMBOL [134.24.245.200] Up: 31 days 13 hours 36 minutes UNOCAL [134.24.217.200] Up: 275 days 01 hours 57 minutes USD [134.24.201.106] Up: 118 days 17 hours 00 minutes USIU [134.24.222.215] Up: 64 days 13 hours 43 minutes DIAL n' CERF Plus 14.4 CITOH [161.1.1.1] Down at the time. [Equipment Trouble - See Ticket #1518] EXPERSOFT [192.231.76.1] Up: 16 days 14 hours 01 minutes GOMPERS [192.207.233.2] Up: 12 days 10 hours 03 minutes MARKV [192.122.251.6] Up: 59 days 12 hours 65 minutes PEREGRINE [192.72.253.97] Up: 36 days 23 hours 44 minutes DIAL n' CERF DNC-SDSC [134.24.1.2] Up: 76 days 04 hours 58 minutes DNC-UCI [134.24.2.2] Up: 01 days 17 hours 50 minutes [Site Scheduled Maintenance - See Ticket #1532] DNC-UCLA [134.24.3.2] Up: 23 days 15 hours 05 minutes DNC-CALTECH [134.24.4.2] Up: 10 days 10 hours 00 minutes DNC-UCOP [134.24.5.2] Up: 160 days 04 hours 29 minutes CIT-NETBLAZER [130.152.104.1] Up: 73 days 08 hours 35 minutes SDSC-NETBLAZER [192.102.249.25] Up: 16 days 06 hours 41 minutes UCI-NETBLAZER [134.24.92.2] Up: 01 days 08 hours 41 minutes [Site Scheduled Maintenance - See Ticket #1532] UCLA-NETBLAZER [134.24.93.2] Up: 31 days 16 hours 30 minutes UCOP-NETBLAZER [134.24.250.2] Up: 257 days 23 hours 54 minutes

1 0

Additions to the NSFNET policy-based routing database
by Steven K. Widmayer 09 Dec '92

09 Dec '92

Note: With today's update, the following T3 backbone reports will be available on nis.nsf.net by 08:00 EST (some report names have been changed from *3.now to *.now): configuration reports -- nis.nsf.net:nsfnet/announced.networks: ans_core.now as-as.now as-gw.now as-site.now as.now country.now gate-gw.now net-comp.now net-ter.now net-net.now netcount.now non-us.now nss-as.now nss-gw.now nss.now networks sorted by AS -- nis.nsf.net:nsfnet/announced.networks: nets.as_<AS number> NSS routing software configuration files -- nis.nsf.net:nsfnet/backbone.configuration: nss<NSS number>.t3p Also, due to requests for a more compact NWG report, the network additions will be listed first in a one line format, followed by a listing using the more complete format. *********************************************************************** The following additions have been made to the NSFNET policy-based routing database and will be installed on the T3 backbone by 08:00 EST: IP address Net name Country Date Priority:AS ---------- -------- ------- ---- ----------- 29 MILX25-TEMP C:US D:12/07/92 1:184 2:164 138.32 PPCO C:US D:12/07/92 1:93 142.71 UBC-HOSP C:CA D:12/07/92 1:1392 2:1391 3:1393 142.103 UBC1 C:CA D:12/07/92 1:1392 2:1391 3:1393 142.207 UNBC C:CA D:12/07/92 1:1392 2:1391 3:1393 148.10 ARMYCORP-B-10 C:US D:12/07/92 1:184 2:164 156.2 SNPNET C:US D:12/07/92 1:1331 159.237 UNAV C:ES D:12/07/92 1:513 164.54 APS-B C:US D:12/07/92 1:683 2:293 3:291 192.5.147 ALV-ETHER C:US D:12/07/92 1:209 2:210 192.58.211 WEENET C:US D:12/07/92 1:1331 192.75.232 MCU1 C:CA D:12/07/92 1:1391 2:1392 3:1393 192.75.233 MCU2 C:CA D:12/07/92 1:1391 2:1392 3:1393 192.75.234 MCU3 C:CA D:12/07/92 1:1391 2:1392 3:1393 192.75.235 MCU4 C:CA D:12/07/92 1:1391 2:1392 3:1393 192.88.236 ATHENA-SPINE C:US D:12/07/92 1:701 2:702 3:279 192.89.123 TELE-DATANET123 C:FI D:12/07/92 1:701 2:702 192.101.162 IFAENET-C-162 C:ES D:12/07/92 1:513 192.106.228 SARITEL C:IT D:12/08/92 1:701 2:1800 192.139.138 UREGINA1 C:CA D:12/07/92 1:1392 2:1391 3:1393 192.139.153 GEORCOLL C:CA D:12/07/92 1:1391 2:1392 3:1393 192.139.215 BPCNET1 C:CA D:12/07/92 1:1392 2:1391 3:1393 192.160.67 EEAM-AI-AT C:AT D:12/07/92 1:701 192.166.32 PARSYTEC C:DE D:12/08/92 1:701 192.166.33 PARSYTEC2 C:DE D:12/08/92 1:701 192.166.34 PARSYTEC3 C:DE D:12/08/92 1:701 192.166.35 PARSYTEC4 C:DE D:12/08/92 1:701 192.166.36 PARSYTEC5 C:DE D:12/08/92 1:701 192.166.37 PARSYTEC6 C:DE D:12/08/92 1:701 192.166.38 PARSYTEC7 C:DE D:12/08/92 1:701 192.166.39 PARSYTEC8 C:DE D:12/08/92 1:701 192.166.40 PARSYTEC9 C:DE D:12/08/92 1:701 192.166.41 PARSYTEC10 C:DE D:12/08/92 1:701 192.166.42 PARSYTEC11 C:DE D:12/08/92 1:701 192.166.43 PARSYTEC12 C:DE D:12/08/92 1:701 192.166.44 PARSYTEC13 C:DE D:12/08/92 1:701 192.166.45 PARSYTEC14 C:DE D:12/08/92 1:701 192.166.46 PARSYTEC15 C:DE D:12/08/92 1:701 192.166.47 PARSYTEC16 C:DE D:12/08/92 1:701 192.197.123 LU-NET-3 C:CA D:12/07/92 1:1392 2:1391 3:1393 192.203.65 UI-NET C:US D:12/07/92 1:701 2:702 3:279 192.206.133 DOE-PETC C:US D:12/07/92 1:204 2:1206 192.206.134 DOE-PETC2 C:US D:12/07/92 1:204 2:1206 192.206.135 DOE-PETC3 C:US D:12/07/92 1:204 2:1206 192.216.32 BARRNET-216-32 C:US D:12/08/92 1:200 2:201 192.216.33 BARRNET-216-33 C:US D:12/08/92 1:200 2:201 192.216.34 BARRNET-216-34 C:US D:12/08/92 1:200 2:201 192.216.35 BARRNET-216-35 C:US D:12/08/92 1:200 2:201 192.216.36 BARRNET-216-36 C:US D:12/08/92 1:200 2:201 192.216.37 BARRNET-216-37 C:US D:12/08/92 1:200 2:201 192.216.38 BARRNET-216-38 C:US D:12/08/92 1:200 2:201 192.216.39 BARRNET-216-39 C:US D:12/08/92 1:200 2:201 192.217.64 CICNET-C-64 C:US D:12/07/92 1:267 2:1225 3:266 192.245.96 VVI C:US D:12/07/92 1:204 2:1206 Network IP: 29 Network Name: MILX25-TEMP Location: Defense Information Systems Agency, Washington, DC 20305-2000, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 138.32 Network Name: PPCO Location: Phillips Petroleum Company, 4 IC, Bartlesville, OK 74004, USA Country Code: US 1:93 MIDnet Network IP: 142.71 Network Name: UBC-HOSP Location: University Hospital, 4500 Oak Street, Vancouver, British Columbia, CANADA Country Code: CA 1:1392 CA*net router in Montreal 2:1391 CA*net router in Toronto 3:1393 CA*net router in Quebec Network IP: 142.103 Network Name: UBC1 Location: University of British Columbia, Data Networking and Telecommunication, 6356 Agricultural Road, Vancouver, British Columbia, CANADA Country Code: CA 1:1392 CA*net router in Montreal 2:1391 CA*net router in Toronto 3:1393 CA*net router in Quebec Network IP: 142.207 Network Name: UNBC Location: University of Northern British Columbia, P.O. Bag 1950, Station A, Prince George, British Columbia, CANADA Country Code: CA 1:1392 CA*net router in Montreal 2:1391 CA*net router in Toronto 3:1393 CA*net router in Quebec Network IP: 148.10 Network Name: ARMYCORP-B-10 Location: United States Army Signal Center, Fort Gordon, ATZH-CDM, Fort Gordon, GA 30905-5000, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 156.2 Network Name: SNPNET Location: Siemens Nuclear Power Corporation, 2101 Horn Rapids Road, Richland, WA 99352, USA Country Code: US 1:1331 ANS Seattle - DNSS 91 Network IP: 159.237 Network Name: UNAV Location: Universidad de Navara, Centro de Processo de Dados, Campus Universitario, 31080 Pamolona, SPAIN Country Code: ES 1:513 EASInet / CERN Network IP: 164.54 Network Name: APS-B Location: Argonne National Laboratory Advanced Photon Source, Argonne National Lab, 9700 South Cass Avenue, Argonne, Il 60439, USA Country Code: US 1:683 Argonne Labs 2:293 Energy Science Network (FIX-East) 3:291 Energy Science Network (FIX-West) Network IP: 192.5.147 Network Name: ALV-ETHER Location: Martin Marietta Denver Aerospace, 12250 South Highway 75, Littleton, CO 80235, USA Country Code: US 1:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 2:210 Westnet Regional Network (Utah Attachment) - ENSS 142 Network IP: 192.58.211 Network Name: WEENET Location: Advanced Nuclear Fuels Corporation, 2101 Horn Rapids Road, Richland, WA 99352, USA Country Code: US 1:1331 ANS Seattle - DNSS 91 Network IP: 192.75.232 Network Name: MCU1 Location: Ministry of Colleges and Universities, Corporate Planning & Services, 900 Bay Street, 8th Floor, Toronto, Ontario M7A 1L2, CANADA Country Code: CA 1:1391 CA*net router in Toronto 2:1392 CA*net router in Montreal 3:1393 CA*net router in Quebec Network IP: 192.75.233 Network Name: MCU2 Location: Ministry of Colleges and Universities, Corporate Planning & Services, 900 Bay Street, 8th Floor, Toronto, Ontario M7A 1L2, CANADA Country Code: CA 1:1391 CA*net router in Toronto 2:1392 CA*net router in Montreal 3:1393 CA*net router in Quebec Network IP: 192.75.234 Network Name: MCU3 Location: Ministry of Colleges and Universities, Corporate Planning & Services, 900 Bay Street, 8th Floor, Toronto, Ontario M7A 1L2, CANADA Country Code: CA 1:1391 CA*net router in Toronto 2:1392 CA*net router in Montreal 3:1393 CA*net router in Quebec Network IP: 192.75.235 Network Name: MCU4 Location: Ministry of Colleges and Universities, Corporate Planning & Services, 900 Bay Street, 8th Floor, Toronto, Ontario M7A 1L2, CANADA Country Code: CA 1:1391 CA*net router in Toronto 2:1392 CA*net router in Montreal 3:1393 CA*net router in Quebec Network IP: 192.88.236 Network Name: ATHENA-SPINE Location: ATHENA Programming Incorporated, Route 3 Box 379, Hillsboro, OR 97124, USA Country Code: US 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 192.89.123 Network Name: TELE-DATANET123 Location: Telecom Finland, PO Box 228, 33101 Tampere, FINLAND Country Code: FI 1:701 Alternet 2:702 Alternet Network IP: 192.101.162 Network Name: IFAENET-C-162 Location: Institut de Fisica d'Altes Energies, Universitat Autonoma de Barcelona, Edifici C, ES-08139 Bellterra, Barcelona, SPAIN Country Code: ES 1:513 EASInet / CERN Network IP: 192.106.228 Network Name: SARITEL Location: e-mail c/o: hostmaster(a)mcsun.EU.net, or: SARITEL, ITALY Country Code: IT 1:701 Alternet 2:1800 ICM (FIX-East) Network IP: 192.139.138 Network Name: UREGINA1 Location: University of Regina, Computing Services, Regina, Saskatchewan, CANADA Country Code: CA 1:1392 CA*net router in Montreal 2:1391 CA*net router in Toronto 3:1393 CA*net router in Quebec Network IP: 192.139.153 Network Name: GEORCOLL Location: Georgian College, 1 Georgian Drive, Barrie, Ontario, CANADA Country Code: CA 1:1391 CA*net router in Toronto 2:1392 CA*net router in Montreal 3:1393 CA*net router in Quebec Network IP: 192.139.215 Network Name: BPCNET1 Location: BP Resources Canada, Suite 2400, 855 - 2nd Street S.W., Calgary, Alberta, CANADA Country Code: CA 1:1392 CA*net router in Montreal 2:1391 CA*net router in Toronto 3:1393 CA*net router in Quebec Network IP: 192.160.67 Network Name: EEAM-AI-AT Location: ELIN Energieanwendung, Penzingerstrasse 76, 1141 Wien, AUSTRIA Country Code: AT 1:701 Alternet Network IP: 192.166.32 Network Name: PARSYTEC Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.33 Network Name: PARSYTEC2 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.34 Network Name: PARSYTEC3 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.35 Network Name: PARSYTEC4 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.36 Network Name: PARSYTEC5 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.37 Network Name: PARSYTEC6 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.38 Network Name: PARSYTEC7 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.39 Network Name: PARSYTEC8 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.40 Network Name: PARSYTEC9 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.41 Network Name: PARSYTEC10 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.42 Network Name: PARSYTEC11 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.43 Network Name: PARSYTEC12 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.44 Network Name: PARSYTEC13 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.45 Network Name: PARSYTEC14 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.46 Network Name: PARSYTEC15 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.166.47 Network Name: PARSYTEC16 Location: Parsytec Computer GmbH, Juelicher Str. 338, D-W-5100 Aachen, GERMANY Country Code: DE 1:701 Alternet Network IP: 192.197.123 Network Name: LU-NET-3 Location: Lakehead University, Thunder Bay, Ontario, CANADA Country Code: CA 1:1392 CA*net router in Montreal 2:1391 CA*net router in Toronto 3:1393 CA*net router in Quebec Network IP: 192.203.65 Network Name: UI-NET Location: Unix International, 20 Waterview Blvd., Parsippany, NJ 07054, USA Country Code: US 1:701 Alternet 2:702 Alternet 3:279 SURANET Regional Network (Georgia Tech) Network IP: 192.206.133 Network Name: DOE-PETC Location: DOE Pittsburgh Energy Technology Center, P.O. Box 10940, Pittsburgh, PA 15236-0940, USA Country Code: US 1:204 PSCNET Regional Network 2:1206 PSCNET Regional Network Network IP: 192.206.134 Network Name: DOE-PETC2 Location: DOE Pittsburgh Energy Technology Center, P.O. Box 10940, Pittsburgh, PA 15236-0940, USA Country Code: US 1:204 PSCNET Regional Network 2:1206 PSCNET Regional Network Network IP: 192.206.135 Network Name: DOE-PETC3 Location: DOE Pittsburgh Energy Technology Center, P.O. Box 10940, Pittsburgh, PA 15236-0940, USA Country Code: US 1:204 PSCNET Regional Network 2:1206 PSCNET Regional Network Network IP: 192.216.32 Network Name: BARRNET-216-32 Location: BARRNet, c/o Stanford University, Pine Hall 115, Stanford, CA 94305-4122, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.216.33 Network Name: BARRNET-216-33 Location: BARRNet, c/o Stanford University, Pine Hall 115, Stanford, CA,4305-4122, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.216.34 Network Name: BARRNET-216-34 Location: BARRNet, c/o Stanford University, Pine Hall 115, Stanford, CA,4305-4122, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.216.35 Network Name: BARRNET-216-35 Location: BARRNet, c/o Stanford University, Pine Hall 115, Stanford, CA,4305-4122, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.216.36 Network Name: BARRNET-216-36 Location: BARRNet, c/o Stanford University, Pine Hall 115, Stanford, CA,4305-4122, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.216.37 Network Name: BARRNET-216-37 Location: BARRNet, c/o Stanford University, Pine Hall 115, Stanford, CA,4305-4122, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.216.38 Network Name: BARRNET-216-38 Location: BARRNet, c/o Stanford University, Pine Hall 115, Stanford, CA,4305-4122, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.216.39 Network Name: BARRNET-216-39 Location: BARRNet, c/o Stanford University, Pine Hall 115, Stanford, CA, 94305-4122, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.217.64 Network Name: CICNET-C-64 Location: CICNet, Inc., 2901 Hubbard Road, Ann Arbor, MI 48109, USA Country Code: US 1:267 CICNET at UIUC 2:1225 CICNET at Argonne Labs 3:266 CICNET at MERIT Network IP: 192.245.96 Network Name: VVI Location: VVimaging, Inc., 311 Adams Avenue, State College, PA 16803, USA Country Code: US 1:204 PSCNET Regional Network 2:1206 PSCNET Regional Network Network IP: 193.88.44 Network Name: DKNET-44 Location: DKnet (EUnet/DK), c/o DIKU, Universitetsparken 1, DK-2100 Copenhagen OE, DENMARK Country Code: DK 1:701 Alternet Total configured T3 networks: 8094 ***************************************************************** The configuration reports which reflect today's update will be available for anonymous ftp on nis.nsf.net by 08:00 EST: configuration reports -- nis.nsf.net:nsfnet/announced.networks: ans_core.now as-as.now as-gw.now as-site.now as.now country.now gate-gw.now net-comp.now net-ter.now net-net.now netcount.now non-us.now nss-as.now nss-gw.now nss.now networks sorted by AS -- nis.nsf.net:nsfnet/announced.networks: nets.as_<AS number> NSS routing software configuration files -- nis.nsf.net:nsfnet/backbone.configuration: nss<NSS number>.t3p Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line from the nis.nsf.net machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files template.net, template.gate, and template.as. ******************************* --Steve Widmayer Merit/NSFNET skw(a)merit.edu --Riaz Taherzadeh-Yazdian NSFNET/ANSNET rty(a)merit.edu

2 1

CERT Advisory - Keystroke Logging Banner
by CERT Advisory 07 Dec '92

07 Dec '92

CA-92:19 CERT Advisory December 7, 1992 Keystroke Logging Banner ----------------------------------------------------------------------------- The CERT Coordination Center has received information from the United States Department of Justice, General Litigation and Legal Advice Section, Criminal Division, regarding keystroke monitoring by computer systems administrators, as a method of protecting computer systems from unauthorized access. The information that follows is based on the Justice Department's advice to all federal agencies. CERT strongly suggests adding a notice banner such as the one included below to all systems. Sites not covered by U.S. law should consult their legal counsel. ----------------------------------------------------------------------------- The legality of such monitoring is governed by 18 U.S.C. section 2510 et seq. That statute was last amended in 1986, years before the words "virus" and "worm" became part of our everyday vocabulary. Therefore, not surprisingly, the statute does not directly address the propriety of keystroke monitoring by system administrators. Attorneys for the Department have engaged in a review of the statute and its legislative history. We believe that such keystroke monitoring of intruders may be defensible under the statute. However, the statute does not expressly authorize such monitoring. Moreover, no court has yet had an opportunity to rule on this issue. If the courts were to decide that such monitoring is improper, it would potentially give rise to both criminal and civil liability for system administrators. Therefore, absent clear guidance from the courts, we believe it is advisable for system administrators who will be engaged in such monitoring to give notice to those who would be subject to monitoring that, by using the system, they are expressly consenting to such monitoring. Since it is important that unauthorized intruders be given notice, some form of banner notice at the time of signing on to the system is required. Simply providing written notice in advance to only authorized users will not be sufficient to place outside hackers on notice. An agency's banner should give clear and unequivocal notice to intruders that by signing onto the system they are expressly consenting to such monitoring. The banner should also indicate to authorized users that they may be monitored during the effort to monitor the intruder (e.g., if a hacker is downloading a user's file, keystroke monitoring will intercept both the hacker's download command and the authorized user's file). We also understand that system administrators may in some cases monitor authorized users in the course of routine system maintenance. If this is the case, the banner should indicate this fact. An example of an appropriate banner might be as follows: This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel. In the course of monitoring individuals improperly using this system, or in the course of system maintenance, the activities of authorized users may also be monitored. Anyone using this system expressly consents to such monitoring and is advised that if such monitoring reveals possible evidence of criminal activity, system personnel may provide the evidence of such monitoring to law enforcement officials. ----------------------------------------------------------------------------- Each site using this suggested banner should tailor it to their precise needs. Any questions should be directed to your organization's legal counsel. ----------------------------------------------------------------------------- The CERT Coordination Center wishes to thank Robert S. Mueller, III, Scott Charney and Marty Stansell-Gamm from the United States Department of Justice for their help in preparing this Advisory. ----------------------------------------------------------------------------- If you believe that your system has been compromised, contact the CERT Coordination Center or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous FTP from cert.org (192.88.209.5).

1 0

Recent MBONE Events
by Jordan Becker 04 Dec '92

04 Dec '92

ANSNET/NSFNET Operational Experiences with MBONE Jordan Becker, ANS Mark Knopper, Merit During the week of 11/9 and 11/16, there were a number of operational problems during the preparation and actual operation of the IETF MBONE packet video/audiocast. This note summarizes the problems observed as we currently understand them, the corrective actions that were taken, and addresses some recommendations for avoiding similar problems during future MBONE video/audiocasts. The use of loose source route packets, and the large volume of MBONE traffic appears to have caused fairly widespread problems for several Internet service providers. However, the volume of MBONE traffic and source route optioned packets did not seem to adversely affect the ANSNET/NSFNET, as was earlier believed. There were severe routing instabilities with peer networks at several ANSNET/NSFNET border gateways including E128 (Palo Alto), E144 (FIX-E), E145 (FIX-W) and most notably at E133 (Ithaca) due to the MBONE traffic and processing of source route packets. The instability in these peer networks coupled with inefficient handling of very large and frequent routing changes introduced through EGP resulted in some ANSNET/NSFNET instabilities. Networks carrying MBONE traffic frequently stopped being advertised by external peers, and were timed out by the ENSS. The external peer then stabilized and these networks were then advertised to the ENSS by the external peer soon thereafter. This process repeated itself in a cyclical fashion. This seems to have resulted in the following problems as recorded in our BGP/EGP logs on the ENSS and neighboring CNSS routers: (1) The general flapping of routing in the Internet was keeping the ANSNET routers fairly busy processing external updates. (2) The routing implementation employed by the MBONE was very slow about stopping flows to destinations which had become unreachable. We observed unidirectional flows, most likely due to use of default routing long after the destination routes had been removed from our tables. When the ANSNET routers had lost the route to the destination host (from the peer network), the route from the destination host to the source still seemed to be working. This means the source host may still have been hearing MBONE routing updates from the destination host, even though the destination was receiving nothing, and this seemed to keep tunnels up far longer than they should have. We are seeking more information from the mrouted developers on the dynamics of this. (3) As a result of (2) above, some ANSNET routers were supporting a moderate amount of card-to-system traffic as the flows to unreachable destinations continued. While this was not a problem by itself since, the volumes were only on the order of a few hundred packets per second, the processing of these packets on an ENSS did further reduce the amount of system CPU available for the processing of routing packets, and this slowed down the updates of routing information on the ENSS interfaces. (4) The general routing performance degradation caused by (3) above occasionally left the ANSNET routers with insufficient resources to deal with major routing events, such as a large EGP neighbor's routing session being broken, in a speedy enough fashion to avoid timeouts on internal sessions (either IS-IS or IBGP) from kicking in and causing reachability of the ENSS to be lost by the external peers. This caused a few connectivity problems at various places on the ANSNET, but was by far the worst at ENSS133 (Ithaca). One reason that the degradation of ENSS133 was worse than at other places was due to the fact that Cornell was on the sending end of a fair number of MBONE tunnels, which meant the card-to-system traffic for unreachable destinations tended to be higher on the ENSS133 router than elsewhere. The events which precipitated each and every routing failure on ENSS133 were either the withdrawal of most or all of PSI's routes by its router or the timeout of the ENSS133 EGP session with the PSI router. Fully withdrawing these routes required the ENSS to withdraw the 600-700 networks PSI advertises to ANSNET from all 78 ANSNET backbone routers, and shortly thereafter, add them back to all 78 backbone routers. The same nets were also flapping on the T1 NSFNET, adding slightly to the load on ENSS133. Due to inefficiencies in redistributing EGP via IBGP (lack of aggregation of routes resulting in one system call per route per IBGP peer), ENSS133 had trouble processing back to back changes, causing an outage until both routers stabilized. There were also a couple of failures at ENSS144 during the week of 11/16 which seem to be have been prompted by the EGP sessions with two ENSS144 FIX-West peers (the MILNET peer was one) flapping at about the same time. There were several actions taken during the week of 11/16 (IETF video/audiocast) which reduced the severity of this problem including: (a) ICMP unreachable messages were turned off on the external interfaces of ENSS routers that experienced problems. These messages were being not being processed directly on the external ENSS interfaces which resulted in some inefficiency. (b) SprintLink rerouted traffic (and the MBONE tunnel) from the IETF to Cornell from the CIX (via internal PSInet path), to the T3 ANSNET path. This improved stability within PSInet and within ANSNET. (c) Cornell rerouted traffic (MBONE tunnel) to SDSC from the PSInet path to the T3 ANSNET path. (d) One of the two parallel IETF audio/video channels was disabled. (e) A default route was established on ENSS133 pointing to its adjacent internal router (CNSS49). This ensured that card<->system traffic being processed due to unreachable destinations was moved to the CNSS router which was not involved in processing EGP updates. (f) A new version of the routing software was installed on the four ENSS nodes that experienced route flapping to aggregate EGP updates from external peers before sending IBGP messages to other internal T3 routers. The combination of all of these actions stabilized ENSS133 and the other ENSS routers that experienced instabilities. There are several actions which we already have, or will soon implement to avoid ANSNET border router instabilities during future MBONE multicast events: (1) The ENSS EGP software has been enhanced to support improved aggregation of updates from external peers into IBGP update messages. The ENSS will now aggregate EGP derived routes together into a single update before flooding this to other routers across the backbone via IBGP. This improves the efficiency of the ENSS dramatically. (2) A change to the ANSNET router interface microcode has been implemented (and will be deployed during the next week) so that problems resulting from large amounts of ENSS card-system traffic will be eliminated when destinations become unreachable. Even if mrouted keeps sending traffic, this will be dropped on the incoming ENSS interface. (3) The T1 NSFNET backbone was disconnected on 12/2. The T1 network (particularly the interconnect points with the T3 system) was a major source of route flapping, and eliminating it should provide an additional margin for handling instability from other peer networks. While the changes we are making to the T3 network will significantly improve T3 network performance in dealing with external EGP peer flapping, and related MBONE routing problems, our changes will *NOT* improve the problems that other Internet networks may experience when processing source route packets, and handling routing transitions with MBONE tunnels. We recommend that each service provider develop their own internal routing plan to address this, we continue to recommend the migration to use of BGP at all border gateways, and we recommend that MBONE software be upgraded to support IP encapsulation to avoid the problems with routers that do not process loose source route optioned packets efficiently. We also are recommending that the MBONE developers explore optimizing the mrouted software to avoid the sustained unidirectional flows to unreachable destinations that we observed. Finally, it is recommended that an mrouted machine be maintained on the ENSS DMZ of each participating regional, and this node be used as a hierarchical distribution point to locations in the local campus and regional. Backhauling of traffic across campuses and regionals should be discouraged. There is another MBONE packet video/audiocast scheduled to coincide with the Concert Packet Video conference on 12/10. We would like to test the setup of the proposed tunnel topology with participating service providers prior to this event to ensure stable operation. We would suggest an off-hours maintenance window with interested service providers to test the stability of the MBONE prior to 12/10. We are open to suggestions on the timeframe for this. Tuesday evening 12/8 might be a good time for this.

1 0