- Test - lists.nanog.org

CERFnet Weekly Report for the week of Monday, May 18, 1992.
by Donna Bigley 28 May '92

28 May '92

############################################################################### This is the CERFnet weekly activity report for the period of Monday, May 18th through Sunday, May 24th, 1992. This report is also available through anonymous FTP from NIC.CERF.NET [192.102.249.3] in the cerfnet/cerfnet_stats subdirectory. The filename is: 24-may-92.txt All times are in Pacific Standard Time, and in the 24-hour format. Please direct any questions or comments to: donnab(a)cerf.net or help(a)cerf.net ****************************************************************************** NETWORK OUTAGES: TICKET #: 995 SITE: SERI/KOREA SITES AFFECTED: SERI/KOREA TIME STARTED: Mon 5-18-92 04:31 TIME ENDED: Mon 5-18-92 04:39 TIME ELAPSED: 8 minutes REASON: Link Failure TICKET #: 996 SITE: CICESE SITES AFFECTED: CICESE TIME STARTED: Mon 5-18-92 08:02 TIME ENDED: Mon 5-18-92 10:37 TIME ELAPSED: 2 hours 35 minutes REASON: Power Outage TICKET #: 990 SITE: CIT SITES AFFECTED: CIT, CIT Dial N' CERF, City Of Hope, OXY, Disney, Claremont, Cadam, and SCAQMD. TIME STARTED: Mon 5-18-92 09:49 TIME ENDED: Mon 5-18-92 10:14 TIME ELAPSED: 25 minutes REASON: Unknown TICKET #: 999 SITE: UCR-SDSC SITES AFFECTED: UCR-SDSC TIME STARTED: Tue 5-19-92 09:06 TIME ENDED: Tue 5-19-92 09:15 TIME ELAPSED: 9 minutes REASON: Unknown TICKET #: 983 SITE: UCLA-UCSB SITES AFFECTED: UCLA-UCSB TIME STARTED: Tue 5-19-92 09:07 TIME ENDED: Tue 5-19-92 09:11 TIME ELAPSED: 4 minutes REASON: Unknown TICKET #: 998 SITE: CICESE SITES AFFECTED: CICESE TIME STARTED: Tue 5-19-92 10:01 TIME ENDED: Tue 5-19-92 10:04 TIME STARTED: Tue 5-19-92 10:16 TIME ENDED: Tue 5-19-92 15:48 TIME ELAPSED: 5 hours 35 minutes (Intermittent Access) REASON: Power Outage TICKET #: 995 SITE: SERI/KOREA SITES AFFECTED: SERI/KOREA TIME STARTED: Wed 5-20-92 09:31 TIME ENDED: Wed 5-20-92 09:45 TIME STARTED: Wed 5-20-92 15:51 TIME ENDED: Wed 5-20-92 15:53 TIME STARTED: Wed 5-20-92 22:40 TIME ENDED: Wed 5-20-92 22:42 TIME ELAPSED: 18 minutes REASON: Link Failure TICKET #: 998 SITE: CICESE SITES AFFECTED: CICESE TIME STARTED: Wed 5-20-92 10:41 TIME ENDED: Wed 5-20-92 15:16 TIME ELAPSED: 4 hours 35 minutes (Intermittent Access) REASON: Site Scheduled Maintenance TICKET #: 1002 SITE: EMULEX SITES AFFECTED: EMULEX TIME STARTED: Thurs 5-21-92 02:21 TIME ENDED: Thurs 5-21-92 03:01 TIME ELAPSED: 40 minutes (Intermittent Access) REASON: Unknown TICKET #: 1000 SITE: CISCO SITES AFFECTED: CISCO TIME STARTED: Thurs 5-21-92 13:51 TIME ENDED: Thurs 5-21-92 14:22 TIME ELAPSED: 31 minutes REASON: CERFnet/Site Scheduled Maintenance TICKET #: 995 SITE: SERI/KOREA SITES AFFECTED: SERI/KOREA TIME STARTED: Fri. 5-22-92 01:12 TIME ENDED: Fri. 5-22-92 01:22 TIME ELAPSED: 10 min. REASON: Unknown TICKET #: 1003 SITE: UCLA-UCSB SITES AFFECTED: UCLA-UCSB TIME STARTED: Sun. 5-24-92 18:40 TIME ENDED: Mon. 5-25-92 08:04 TIME ELAPSED: 13 hours 24 min. REASON: Link Failure ------------------------------------------------------------------------ CERFNET TRAFFIC CAPACITY USAGE AT EACH CIRCUIT LINK LINK SPEED CAPACITY PEAK HOUR (PDT) UCI/CALTECH 45.000 mbps 00.1% 22:00 SDSC/CALTECH 1.544 mbps 08.0% 13:00 SDSC/UCI 1.544 mbps 08.8% 11:00 SDSC/UCLA 1.544 mbps 05.9% 14:00 SDSC/UCOP 1.544 mbps 03.0% 13:00 UCI/UCLA 1.544 mbps 08.8% 11:00 SDSC/UCR 512 kbps 03.6% 21:00 UCLA/UCSB 512 kbps 08.5% 14:00 SDSC/AGI 1.544 mbps 00.1% 18:00 SDSC/BIOSYM 1.544 mbps 00.1% 08:00 SDSC/GD 1.544 mbps 01.1% 12:00 SDSC/SAIC 1.544 mbps 00.7% 10:00 SDSC/SCAQMD 1.544 mbps 00.1% 12:00 UCI/CSU CO(SWRL) 1.544 mbps 03.4% 14:00 UCOP/APPLE 1.544 mbps 00.8% 02:00 UCOP/CISCO 1.544 mbps 00.2% 18:00 UCR/LLUMC 1.544 mbps 00.3% 21:00 CALTECH/CADAM 56 kbps 00.3% 20:00 CALTECH/CITY OF HOPE 56 kbps 00.3% 20:00 CALTECH/CLAREMONT 56 kbps 19.9% 13:00 CALTECH/DISNEY 56 kbps 05.3% 15:00 CALTECH/OXY 56 kbps 08.3% 17:00 SDSC/AJS 56 kbps 01.6% 12:00 SDSC/KOREA 56 kbps 05.1% 17:00 SDSC/QUALCOMM 56 kbps 06.3% 15:00 SDSC/SCIH 56 kbps 05.2% 13:00 SDSC/USD 56 kbps 05.3% 09:00 SDSC/USIU 56 kbps 00.4% 14:00 SDSC/XEROX 56 kbps 00.3% 20:00 UCI/CMD 56 kbps 01.7% 12:00 UCI/EMULEX 56 kbps 12.6% 15:00 UCI/FULLERTON 56 kbps 03.9% 11:00 UCI/HUGHES 56 kbps 01.0% 16:00 UCI/MTI 56 kbps 06.7% 12:00 UCI/SPARTA 56 kbps 03.1% 11:00 UCI/UNOCAL 56 kbps 01.2% 14:00 UCLA/ISX 56 kbps 00.9% 19:00 UCLA/PEPPERDINE 56 kbps 00.9% 18:00 UCLA/QUOTRON 56 kbps 09.8% 21:00 UCLA/SMC 56 kbps 02.2% 09:00 UCOP/FARALLON 56 kbps 04.1% 09:00 UCOP/INTEL 56 kbps 14.8% 14:00 UCOP/LSIL 56 kbps 07.4% 21:00 UCOP/NETLABS 56 kbps 13.9% 19:00 ------------------------------------------------------------------------------ SITE CISCO BOX UPTIME SINCE LAST REBOOT (as of 00:15 PST on May 25, 1992): CERFnet BACKBONE CALTECH [131.215.139.253] Up: 06 days 14 hours 02 minutes [Unknown - Please see ticket #990.] SDSC LongBoard [134.24.99.254] Up: 08 days 17 hours 46 minutes SDSC Drzog [132.249.16.13] Up: 11 days 14 hours 24 minutes SDSC Hang10 [132.249.16.15] Up: 11 days 14 hours 24 minutes UCI [128.200.1.101] Up: 25 days 16 hours 04 minutes UCLA [128.97.130.10] Up: 49 days 06 hours 28 minutes UCOP [134.24.52.112] Up: 61 days 16 hours 38 minutes UCR [134.24.108.105] Up: 64 days 06 hours 48 minutes CERF 1544 AGI [134.24.202.110] Up: 101 days 13 hours 54 minutes APPLE [134.24.70.200] Up: 210 days 06 hours 15 minutes BIOSYM [134.24.57.200] Up: 13 days 13 hours 52 minutes CISCO Systems [134.24.54.200] Up: 03 days 10 hours 16 minutes [Site Scheduled Maintenance - Please see ticket #1000.] CSUCO/SWRL [130.150.102.200] Up: 30 days 18 hours 08 minutes GA [134.24.221.200] Up: 01 days 14 hours 21 minutes [Power Outage] GD [134.24.60.200] Up: 24 days 16 hours 18 minutes LLUMC [134.24.208.200] Up: 187 days 12 hours 02 minutes MDC [134.24.65.200] Up: 96 days 09 hours 50 minutes SAIC [134.24.53.208] Up: 11 days 14 hours 10 minutes SCAQMD [134.24.234.200] Up: 157 days 14 hours 27 minutes SDSU [192.77.100.101] Up: 10 days 16 hours 29 minutes UCSB [134.24.107.107] Up: 187 days 07 hours 38 minutes CERF 56 AJS [134.24.225.101] Up: 128 days 14 hours 17 minutes CADAM [134.24.229.200] Up: 110 days 13 hours 01 minutes CICESE [134.24.227.200] Up: 05 days 09 hours 44 minutes [Power Outage - Please see ticket #998.] CITY_OF_HOPE [134.24.233.200] Up: 05 days 13 hours 48 minutes [Unknown] CLAREMONT [134.24.206.109] Up: 58 days 17 hours 39 minutes CMD [134.24.218.200] Up: 118 days 13 hours 14 minutes DATAPRODUCTS [134.24.211.104] Up: 54 days 09 hours 33 minutes DISNEY [134.24.207.211] Up: 44 days 10 hours 00 minutes EMULEX [134.24.209.212] Up: 43 days 12 hours 12 minutes FARALLON [134.24.56.200] Up: 19 days 04 hours 39 minutes FULLERTON [134.24.214.217] Up: 06 days 21 hours 03 minutes [Power Outage] GTE [134.24.212.200] Up: 70 days 16 hours 57 minutes HUGHES [134.24.204.200] Up: 33 days 10 hours 48 minutes INTEL [134.24.73.200] Up: 57 days 11 hours 34 minutes LSIL [134.24.72.200] Up: 19 days 08 hours 26 minutes MTI [134.24.216.100] Up: 29 days 09 hours 34 minutes NETLABS [134.24.71.200] Up: 60 days 08 hours 51 minutes OXY [134.24.205.108] Up: 48 days 16 hours 27 minutes PEPPERDINE [134.24.203.218] Up: 44 days 21 hours 42 minutes QUALCOMM [134.24.200.201] Up: 14 days 00 hours 52 minutes QUOTRON [134.24.230.202] Up: 09 days 06 hours 29 minutes SANTA MONICA [134.24.210.219] Up: 26 days 06 hours 29 minutes SCI-HOR [134.24.109.205] Up: 12 days 06 hours 02 minutes SEASPACE [134.24.80.200] Up: 46 days 11 hours 26 minutes SERI/KOREA [134.24.223.200] Up: 48 days 00 hours 40 minutes SPARTA [134.24.215.200] Up: 55 days 10 hours 57 minutes UNOCAL [134.24.217.200] Up: 80 days 01 hours 57 minutes USD [134.24.201.106] Up: 15 days 02 hours 56 minutes USIU [134.24.222.215] Up: 323 days 17 hours 07 minutes XEROX [134.24.51.207] Up: 207 days 23 hours 22 minutes DIAL n' CERF DNC-SDSC [134.24.1.2] Up: 11 days 14 hours 31 minutes DNC-UCI [134.24.2.2] Up: 25 days 15 hours 58 minutes DNC-UCLA [134.24.3.2] Up: 49 days 06 hours 25 minutes DNC-CALTECH [134.24.4.2] Up: 57 days 05 hours 42 minutes DNC-UCOP [134.24.5.2] Up: 11 days 14 hours 23 minutes SDSC-NETBLAZER [192.102.249.25] Up: 11 days 14 hours 28 minutes UCLA-NETBLAZER [134.24.93.2] Up: 02 days 12 hours 21 minutes [Unknown]

1 0

CERT Advisory - SunOS Environment Variables
by CERT Advisory 27 May '92

27 May '92

=========================================================================== CA-92:11 CERT Advisory May 27, 1992 SunOS Environment Variables and setuid/setgid Vulnerability --------------------------------------------------------------------------- The Computer Emergency Response Team/Coordination Center (CERT/CC) has received information concerning a vulnerability involving environment variables and setuid/setgid programs under Sun Microsystems Computer Corporation SunOS. This vulnerability exists on all Sun architectures running SunOS 4.0 and higher. In-house and third-party software can also be impacted by this vulnerability. For example, the current versions of rnews, sudo, smount, and npasswd are known to be vulnerable under SunOS. See the Description section of this advisory for details of how to identify software which may be vulnerable. The workaround detailed in this advisory can be used to protect vulnerable software on SunOS operating system versions for which patches are unavailable, or for local or third party software which may be vulnerable. Sun has provided patches for SunOS 4.1, 4.1.1, and 4.1.2 programs which are known to be impacted by this vulnerability. They are available through your local Sun Answer Center as well as through anonymous ftp from the ftp.uu.net (137.39.1.9) system in the /systems/sun/sun-dist directory. Fix PatchID Filename Checksum login and su 100630-01 100630-01.tar.Z 36269 39 sendmail 100377-04 100377-04.tar.Z 14692 311 Note: PatchID 100630-01 contains the international version of /usr/bin/login. PatchID 100631-01 contains the domestic version of /usr/bin/login and is only available from Sun Answer Centers for sites that use the US Encryption Kit. Please note that Sun will occasionally update patch files. If you find that the checksum is different please contact Sun or the CERT/CC for verification. --------------------------------------------------------------------------- I. Description A security vulnerability exists if a set-user-id program changes its real and effective user ids to be the same (but not to the invoker's id), and subsequently causes a dynamically-linked program to be exec'd. A similar vulnerability exists for set-group-id programs. In particular, SunOS /usr/lib/sendmail, /usr/bin/login, /usr/bin/su, and /usr/5bin/su are vulnerable to this problem. II. Impact Local users can gain unauthorized privileged access to the system. III. Solution A. Obtain and install the patches from Sun or from ftp.uu.net following the provided instructions. B. The following workaround can be used to protect vulnerable binaries for which patches are unavailable for your SunOS version, or for local or third party software which may be vulnerable. The example given is a workaround for /usr/lib/sendmail. 1. As root, rename the existing version of /usr/lib/sendmail and modify the permissions to prevent misuse. # mv /usr/lib/sendmail /usr/lib/sendmail.dist # chmod 755 /usr/lib/sendmail.dist 2. In an empty temporary directory, create a file wrapper.c containing the following C program source (remember to strip any leading white-space characters from the #define lines). /* Start of C program source */ /* Change the next line to reflect the full pathname of the file to be protected by the wrapper code */ #define COMMAND "/usr/lib/sendmail.dist" #define VAR_NAME "LD_" main(argc,argv,envp) int argc; char **argv; char **envp; { register char **cpp; register char **xpp; register char *cp; for (cpp = envp; cp = *cpp;) { if (strncmp(cp, VAR_NAME, strlen(VAR_NAME))==0) { for (xpp = cpp; xpp[0] = xpp[1]; xpp++); /* void */ ; } else { cpp++; } } execv(COMMAND, argv); perror(COMMAND); exit(1); } /* End of C program source */ 3. As root, compile the C program source for the wrapper and install the resulting binary. # make wrapper # mv ./wrapper /usr/lib/sendmail # chown root /usr/lib/sendmail # chmod 4711 /usr/lib/sendmail 4. Steps 1 through 3 should be repeated for other vulnerable programs with the appropriate substitution of pathnames and file names. The "COMMAND" C preprocessor variable within the C program source should also be changed to reflect the appropriate renamed system binary. --------------------------------------------------------------------------- The CERT/CC wishes to thank the following for their assistance: CIAC, PCERT, and in particular Wietse Venema of Eindhoven University, The Netherlands, for his support in the analysis of and a workaround for this problem. We also wish to thank Sun Microsystems Computer Corporation for their prompt response to this vulnerability. --------------------------------------------------------------------------- If you believe that your system has been compromised, contact CERT/CC or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT/CC personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. Computer Emergency Response Team/Coordination Center (CERT/CC) Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous ftp from cert.org (192.88.209.5).

1 0

2451 copies of a CERT Advisory
by Edward DeHart 27 May '92

27 May '92

I would like to apologize to everyone who received more than one copy of the last CERT Advisory. The offending address that caused sendmail to crash and burn without updating the queue file has been removed. A Sun advisory will be sent out this morning. I hope that it will not be overlooked due to yesterday's mailer loop. Thank you, Ed DeHart Computer Emergency Response Team Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 24-hour hotline: CERT/CC personnel answer 7:30a.m. to 6:00p.m. EST(GMT-5)/EDT(GMT-4), and are on call for emergencies during other hours.

1 0

NSF recompete mailing list.
by Gene.Hastings＠boole.ece.cmu.edu 26 May '92

26 May '92

Bob Aiken announced a mailing distribution list at the NSF for information (& discussions?) about the backbone recompetition. Send a request to recompete-request(a)cise.nsf.gov or recompete-request(a)nsf.gov. A copy of the announcement of the availabiltiy of the IINREN inplementation plan was sent to that list. I have not as yet seen anything else. Gene

1 0

CERT Advisory - AIX crontab Vulnerability
by CERT Advisory 26 May '92

26 May '92

=========================================================================== CA-92:10 CERT Advisory May 26, 1992 AIX crontab Vulnerability --------------------------------------------------------------------------- The Computer Emergency Response Team/Coordination Center (CERT/CC) has received information concerning a vulnerability in crontab(1) in version 3.2 of IBM's AIX operating system. IBM is aware of this problem and a fix is available as apar number "ix26997" for AIX version 3.2. The version information for the patched /usr/bin/crontab is shown in the following what(1) output: % what /usr/bin/crontab 04 1.23 com/cmd/cntl/cron/crontab.c, cmdcntl, bos320, 9218320f 4/8/92 11:50:42 07 1.8 com/cmd/cntl/cron/permit.c, bos, bos320 4/25/91 17:16:59 11 1.15 com/cmd/cntl/cron/cronsub.c, bos, bos320 8/18/91 20:42:32 06 1.9 com/cmd/cntl/cron/funcs.c, bos, bos320 6/8/91 21:22:40 If your crontab contains older modules than the above output indicates, we suggest that you install the fix. --------------------------------------------------------------------------- I. Description The distributed version of /usr/bin/crontab contains a security vulnerability. II. Impact Local users can gain unauthorized root access to the system. III. Solution The CERT/CC suggests that sites install the fix that IBM has made available. As an interim step, we suggests that sites prevent all non-root users from running /usr/bin/crontab by removing (or renaming) the /var/adm/cron/cron.allow and /var/adm/cron/cron.deny files. - Obtain the fix from IBM Support. 1. To order from IBM call 1-800-237-5511 and ask that the fix be shipped. Patches may be obtained outside the U.S. by contacting your local IBM representative. 2. If you are on the Internet, use anonymous ftp to obtain the fix from software.watson.ibm.com (129.34.139.5). Patch Filename Checksum AIX 3.2 pub/aix3/cronta.tar.Z 02324 154 The patch must be retrieved using binary mode. - Install the fix following the instructions in the README file. --------------------------------------------------------------------------- The CERT/CC would like to thank Fuat Baran of Advanced Network & Services, Inc. for bringing this security vulnerability to our attention and IBM for their quick response to this problem. --------------------------------------------------------------------------- If you believe that your system has been compromised, contact CERT/CC or your representative in FIRST (Forum of Incident Response and Security Teams). Internet E-mail: cert(a)cert.org Telephone: 412-268-7090 (24-hour hotline) CERT/CC personnel answer 7:30 a.m.-6:00 p.m. EST(GMT-5)/EDT(GMT-4), on call for emergencies during other hours. Computer Emergency Response Team/Coordination Center (CERT/CC) Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Past advisories, information about FIRST representatives, and other information related to computer security are available for anonymous ftp from cert.org (192.88.209.5).

1 0

Re: Additions, etc. to the NSFNET policy-based routing database
by Belinda Sue Blair 26 May '92

26 May '92

Regional techs and others, Greetings. Since nsfnet-admin received an incredibly low number of Network Announcement Change Requests over the Memorial Day weekend in this fine nation of ours, I am unilaterally, in the fine Haig tradition, postponing the configuration window one day to Tuesday night/Wednesday morning. NACRs will be accepted for this run until 2pm-ish Tuesday and the installation window will be from 05:00-08:00 Wednesday morning. If you need any configurations installed before then, please message trouble(a)merit.edu and state that you need an emergency config. The NOC can then page me and I will deal with it from there. Apologies for any inconvenience. Thanks, -B. Sue Blair Merit Network Operations

1 0

Handy.node.list available on nis.nsf.net
by bsb 22 May '92

22 May '92

Regional techs, Lastly, there is a handy.node.list available on nis.nsf.net. I removed it from the end of the template.gate and template.as form and put it in its own file, so it will be easier to generate and keep up-to-date with the rest of the exciting, important, and informative NIS reports. A copy is appended below for your convenience. Thanks, -B. Sue Blair Merit / NSFNET --------------- nis.nsf.net: nsfnet/announced.networks/handy.node.list T3 Backbone: T1 Backbone: D/ENSS# City NSS# City ----- ------------- ---- ------------- 11 ANS-San Francisco, CA 5 NSF-Pittsburgh, PA 19 ANS-Los Angeles, CA 6 NSF-San Diego, CA 27 ANS-Chicago, IL 7 NSF-Boulder, CO 35 ANS-New York, NY 8 NSF-Princeton, NJ 43 ANS-Cleveland, OH 9 NSF-College Park, MD 51 ANS-Hartford, CT 10 NSF-Ithaca, NY 59 ANS-Washington D.C. 11 NSF-Houston, TX 67 ANS-Houston, TX 12 NSF-Champaign, IL 75 ANS-Greensboro, NC 13 NSF-Palo Alto, CA 83 ANS-St. Louis, MO 14 NSF-Seattle, WA 91 ANS-Seattle, WA 15 NSF-Salt Lake City, UT 99 ANS-Denver, CO 16 NSF-Lincoln, NE 128 NSF-Palo Alto, CA 17 NSF-Ann Arbor, MI 129 NSF-Urbana-Champaign, IL 18 NSF-Atlanta, GA 130 NSF-Chicago, IL 19 NSF-Boston, MA 131 NSF-Ann Arbor, MI 132 NSF-Pittsburgh, PA 133 NSF-Ithaca, NY 134 NSF-Boston, MA 135 NSF-San Diego, CA 136 NSF-College Park, MD 137 NSF-Princeton, NJ 138 NSF-Atlanta, GA 139 NSF-Houston, TX 140 NSF-Lincoln, NE 141 NSF-Boulder, CO 142 NSF-Salt Lake City, UT 143 NSF-Seattle, WA 144 NSF-Palo Alto, CA #2 - Ames 145 NSF-College Park #2 - Fix-East 150 NSF-Raleigh, NC 151 ANS-Blacksburg, VA 152 ANS-West Lafayette, IN 155 ANS-White Plains, NY 158 ANS-Southfield, MI 160 ANS-Elmsford, NY 163 ANS-New York, NY 164 ANS-Yorktown Heights, NY 165 ANS-Lexington, KY 168 ANS-Columbus, OH 174 ANS-Austin, TX 200 NSF/ANS-ShowNSS-varied locations

1 0

New template.as available
by bsb 22 May '92

22 May '92

Regional-techs, Again, greetings. The dreaded template.as has been updated as well. The latest version is 2.2 dated May 22, 1992. A copy is appended for your convenience. Thanks, -B. Sue Blair Merit / NSFNET --------------- [nis.nsf.net:nsfnet/announced.networks/template.as] Version 2.2 22 May 1992 NSFNET Configuration Request Template for the NSFNET policy-based routing data base ---- Autonomous System Contact Information ---- This template is to register new ASes with nsfnet-admin. It sets up the preliminaries and designates individuals who are responsible for the adminstration of an Autonomous System. This information is needed to facilitate smooth operations between the NSFNET and the Autonomous System. This information should be submitted to nsfnet-admin(a)merit.edu. ***************************************************************************** ---- Autonomous System Contact Information---- 1) Is this new information or a change in previous information (new/change): 2) If this is a new AS, please indicate routing restrictions. Please choose type a, b, or c list: If type b, please list ASes that you would like to ignore: type a list) Hear about the backbone only: Example: announcetoAS xxx norestrict ASlist 690 (T3) announcetoAS xxx norestrict ASlist 145 (T1) type b list) Hear about everything except certain ASes: Example: announcetoAS xxx norestrict ASlist 22 26 38 60 68 73 81 86 93 97 101 114 145 164 174 177 178 179 181 etc. type c list) Other. Please explain: 2) Autonomous System number/name: 3) ENSS/NSS number associated with AS: 4) 2 Administrative contacts: --Please provide the names, postal addresses, electronic addresses, and telephone numbers for items 4 - 6. These contacts do not have to be six individuals; some individuals may play dual roles within your organization. 5) At least 2 Technical contacts: 6) At least 2 designated Routing contacts: --The designated Routing contacts are the individuals that the AS designates to represent the AS with the NSFNET staff. 7) NOC phone number and email address: NOC hours: --If you have a NOC and you would like your NOC to be the first point of contact in the event of a problem, please provide the above information. 8) After hours contact procedures: --If you would like to be contacted outside of normal business hours, or outside of your normal NOC hours, please provide any pertinent contact names and phone numbers. 9) Special trouble-shooting instructions for the Merit/NSFNET NOC: 10) Additional comments (optional): --------------------------------------------------------------------- Configurations installations are performed Tuesday and Friday morning from 05:00-08:00 Eastern time, so some instability on the backbones may be experienced during this window. Requests for the Tuesday morning config window should be submitted to nsfnet-admin by noon Monday. Requests for the Friday morning config window should be submitted by noon Thursday. To get a current listing of nodes and node numbers on the T1 and T3 backbone, you can anonymous ftp to nis.nsf.net, cd to /nsfnet/ announced.networks and get the file handy.node.list.

1 0

New Template.gate form available on nis.nsf.net
by bsb 22 May '92

22 May '92

Regional-techs, Greetings. There is a spiffy new template.gate form appended below for your convenience. It is available on nis.nsf.net via anonymous ftp in the nsfnet/announced.networks directory. It is dated May 22, 1992 (version 3.2) and erases some of the ambiguity of the previous version while maintaining the old esoteric lameness. Enjoy! -B. Sue Blair Merit / NSFNET --------------- [nis.nsf.net:nsfnet/announced.networks/template.gate] Version 3.2 22 May 1992 NSFNET Configuration Request Template for the NSFNET policy-based routing data base ---- EGP/BGP Peer Change Request ---- This template is to request announcement of EGP/BGP peers to the NSFNET backbone. Configuration requests may only be submitted by the designated routing contacts for the Autonomous Systems of the NSFNET. Configuration requests should be submitted to nsfnet-admin(a)merit.edu. Please read the explanation at the bottom of this form if you are unfamiliar with its contents. --------------------------------- CUT HERE ----------------------------------- ---- EGP/BGP Peer Change Request ---- Router Internet Address: Router Internet Name: Router AS Number: Is this a new AS (y/n): (If so, please fill out a template.as form as well) ENSS and/or NSS number colocated with router: Router physical location (if different than ENSS/NSS): Should BGP1, BGP2, or EGP be used: For BGP1 only: linktype H or D: EGP metric out (T1 default=128 / T3 default=127): BGP metric out (T1 default=128 / T3 default=127): Router Type/Manufacturer: Software Version: Addition, Deletion or Change?(A/D/C): Additional Comments (optional): --------------------------------- CUT HERE ----------------------------------- ***************************************************************************** EXAMPLE: Suppose a New Cisco HyBridge with the Internet address 35.1.1.125 and the domain name NSFNET-GW.MERIT.EDU should be co-located with NSS 17 (Ann Arbor), running BGP as using the Autonomous System number 233. It should not receive routing information from the DDN/MILNET (AS 164 and AS 184) and its own routed should not be advertised into AS 177. Their EGP/BGP peer change request would be filled in as follows: ---- EGP/BGP Peer Change Request ---- Router Internet Address: 35.1.1.125 Router Internet Name: NSFNET-GW.MERIT.EDU Router AS Number: 233 Is this a new AS (y/n): n ENSS and/or NSS number colocated with router: NSS17 Router physical location (if different than ENSS/NSS): Should BGP1, BGP2, or EGP be used: BGP1 For BGP1 only: linktype D or H: H EGP metric out (T1 default=128 / T3 default=127): BGP metric out (T1 default=128 / T3 default=127): Router Type/Manufacturer: Cisco HyBridge Software version: 8.1 Addition, Deletion or Change?(A/D/C): A Additional Comments (optional): ----------------------------------------------------------- Configurations installations are performed Tuesday and Friday morning from 05:00-08:00 Eastern time, so some instability on the backbones may be experienced during this window. Requests for the Tuesday morning config window should be submitted to nsfnet-admin by noon Monday. Requests for the Friday morning config window should be submitted by noon Thursday. To get a current listing of nodes and node numbers on the T1 and T3 backbone, you can anonymous ftp to nis.nsf.net, cd to /nsfnet/ announced.networks and get the file handy.node.list.

1 0

Additions to the NSFNET policy-based routing database
by Riaz Taherzadeh-Yazdian 22 May '92

22 May '92

The following networks have been added to the NSFNET policy-based routing database: T1 Network: ---------- Network IP: 146.149 Network Name: JPMORGAN Location: JP Morgan, 60 Wall Street, 8th Floor, New York, New York 10260, USA Country Code: US 1:750 T1-T3 Network Interconnect (Ann Arbor, MI) 2:756 T1-T3 Network Interconnect (Princeton, NJ) 3:754 T1-T3 Network Interconnect (Houston, TX) 4:751 T1-T3 Network Interconnect (San Diego, CA) Network IP: 146.164 Network Name: REDE-UFRJ Location: Federal University of Rio de Janeiro, Nucleo de Computacao Eletronica, Caixa Postal 2324, CEP 20.001, Rio de Janeiro, RJ, BRAZIL Country Code: BR 1:1740 CERFnet 12:754 T1-T3 Network Interconnect (Houston, TX) 13:751 T1-T3 Network Interconnect (San Diego, CA) Network IP: 157.99 Network Name: FNET-PASTEUR Location: Institut Pasteur, 25 rue du Docteur Roux, 75724 PARIS Cedex 15, FRANCE Country Code: FR 1:1800 ICM-FIX-E 2:1238 ICM-NORDUNET Network IP: 161.33 Network Name: IMAGEN Location: QMS Inc., 1 Magnum Pass Road, Mobile, AL, USA Country Code: US 1:701 Alternet 2:702 Alternet 10:750 T1-T3 Network Interconnect (Ann Arbor, MI) 11:756 T1-T3 Network Interconnect (Princeton, NJ) 20:279 SURANET Regional Network (Georgia Tech) Network IP: 192.82.231 Network Name: CHORUS-USA Location: Chorus, 15262 NW Greenbrier Parkway, Beaverton, OR 97006-5764, USA Country Code: US 1:701 Alternet 2:702 Alternet 10:750 T1-T3 Network Interconnect (Ann Arbor, MI) 11:756 T1-T3 Network Interconnect (Princeton, NJ) 20:279 SURANET Regional Network (Georgia Tech) Network IP: 192.84.123 Network Name: AFSOC Location: Air Force Special Operations Command, AFSOC/SCX Bld. 1, Hurlburt Field, FL 32544-5000, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 192.109.59 Network Name: YAN-MS Location: Zentralamt fuer Mobilfunk, Referat Z2, Roddestrasse 12, D-W-4400, Muenster, GERMANY Country Code: DE 1:701 Alternet 2:1800 ICM-FIX-E 3:1238 ICM-NORDUNET Network IP: 192.121.34 Network Name: SE-NFR Location: NFR, Bos 6711, S-113 85 Stockholm, Sweden Country Code: SE 1:701 Alternet Network IP: 192.124.130 Network Name: RASTEROPS Location: RasterOps, 2500 Walsh Avenue, Santa Clara, CA 95050, USA Country Code: US 1:701 Alternet 2:702 Alternet 10:750 T1-T3 Network Interconnect (Ann Arbor, MI) 11:756 T1-T3 Network Interconnect (Princeton, NJ) 20:279 SURANET Regional Network (Georgia Tech) Network IP: 192.133.32 Network Name: N-POLAR Location: Norwegian Polar Research Institute, Boks 158, N-1330 Oslo Lufthavn, NORWAY Country Code: NO 1:701 Alternet Network IP: 192.138.220 Network Name: NEB-NET Location: New England Biolabs, Inc., 32 Tozer Road, Beverly, MA 01915, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network 3:1384 NEARnet Regional Network 4:1383 NEARnet Regional Network 10:750 T1-T3 Network Interconnect (Ann Arbor, MI) 11:756 T1-T3 Network Interconnect (Princeton, NJ) 20:701 Alternet Network IP: 192.147.12 Network Name: ADELPHI2 Location: Adelphi University, South Avenue, Garden City, Long Island, NY 11010, USA Country Code: US 1:97 JvNCnet Regional Network 10:750 T1-T3 Network Interconnect (Ann Arbor, MI) 11:756 T1-T3 Network Interconnect (Princeton, NJ) Network IP: 192.148.222 Network Name: KENTLAW Location: Chicago-Kent College of Law at IIT, 565 West Adams, Chicago, IL 60661, USA Country Code: US 1:267 CICNET at UIUC 2:266 CICNET at MERIT 10:750 T1-T3 Network Interconnect (Ann Arbor, MI) 11:756 T1-T3 Network Interconnect (Princeton, NJ) Network IP: 192.153.150 Network Name: FTBENNINGEMH Location: UASISC-Ft. Benning, Director, USAISC-Fort Benning, ASQNB-ZBO-I, Ft. Benning, GA 31905-6204, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 192.153.151 Network Name: STEWART-NET5 Location: TAFZP-IMM (TCC), Bldg. 9, Ft. Stewart, GA 31314-5000, USA Country Code: US 1:184 Milnet (FIX-East) 2:164 Milnet (FIX-West) Network IP: 192.156.133 Network Name: IBM-IRAD-DMZ Location: IBM Federal Sector Corporation, MC 5600, 3700 Bay Area Blvd, Houston TX 77058, USA Country Code: US 1:114 SESQUINET Regional Network 2:1700 SESQUINET Regional Network 12:754 T1-T3 Network Interconnect (Houston, TX) 13:751 T1-T3 Network Interconnect (San Diego, CA) Network IP: 192.160.73 Network Name: CABLELABS Location: Cable Television Laboratories, Inc., 1050 Walnut Street, Suite 500, Boulder, CO 80302, USA Country Code: US 1:209 Westnet Regional Network (Colorado Attachment) 2:210 Westnet Regional Network (Utah Attachment) 12:754 T1-T3 Network Interconnect (Houston, TX) 13:751 T1-T3 Network Interconnect (San Diego, CA) Network IP: 192.169.16 Network Name: CORNERSTONE1 Location: Cornerstone Research, 1000 El Camino Real, ste. 250, Menlo Park, CA, 94025, USA Country Code: US 1:200 BARRNET Regional Network 2:201 BARRNet Regional Network 12:754 T1-T3 Network Interconnect (Houston, TX) 13:751 T1-T3 Network Interconnect (San Diego, CA) Network IP: 192.169.17 Network Name: CORNERSTONE2 Location: Cornerstone Research, 1000 El Camino Real, ste. 250, Menlo Park, CA, 94025, USA Country Code: US 1:200 BARRNET Regional Network 2:201 BARRNet Regional Network 12:754 T1-T3 Network Interconnect (Houston, TX) 13:751 T1-T3 Network Interconnect (San Diego, CA) Network IP: 192.169.18 Network Name: CORNERSTONE3 Location: Cornerstone Research, 1000 El Camino Real, ste. 250, Menlo Park, CA, 94025, USA Country Code: US 1:200 BARRNET Regional Network 2:201 BARRNet Regional Network 12:754 T1-T3 Network Interconnect (Houston, TX) 13:751 T1-T3 Network Interconnect (San Diego, CA) Total configured T1 networks: 5484 T3 Network: ---------- Network IP: 139.82 Network Name: PUC-RIO Location: Pontificia Universidade Catolica do Rio de Janeiro, Rua Marques de Sao Vicente 225, Gavea, CEP 22453 - Rio De Janeiro - RJ, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 146.134 Network Name: LNCC Location: Laboratorio Nacional de Computacao Cientifica, R. Lauro Muller 455, 22.290-Rio de Janeiro, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 146.149 Network Name: JPMORGAN Location: JP Morgan, 60 Wall Street, 8th Floor, New York, New York 10260, USA Country Code: US 1:1324 ANS New York City - DNSS 35 Network IP: 146.164 Network Name: REDE-UFRJ Location: Federal University of Rio de Janeiro, Nucleo de Computacao Eletronica, Caixa Postal 2324, CEP 20.001, Rio de Janeiro, RJ, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 147.65 Network Name: IMPA Location: Instituto de Matematica Pura e Aplicada, Estrada Dona Castorina, 110 Horto, CEP 22460 Rio de Janeiro RJ, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 152.84 Network Name: LAFEX-B Location: Laboratorio Fisica Experimental Altas Energias/LAFEX (NET-LAFEX-B), R. Dr.Xavier Sigaud 150 5oAND., CEP 22290 Rio Janeiro, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 152.92 Network Name: IPRJ Location: Instituto Politecnico do Rio de Janeiro, C.P. 97282, Nova Friburgo RJ 28630, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 157.86 Network Name: FIOCRUZ Location: Fundacao Oswaldo Cruz (Oswaldo Cruz Foundation), Rio de Janeiro, RJ, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 161.33 Network Name: IMAGEN Location: QMS Inc., 1 Magnum Pass Road, Mobile, AL, USA Country Code: US 42:702 Alternet 43:701 Alternet Network IP: 192.82.231 Network Name: CHORUS-USA Location: Chorus, 15262 NW Greenbrier Parkway, Beaverton, OR 97006-5764, USA Country Code: US 42:702 Alternet 43:701 Alternet Network IP: 192.124.130 Network Name: RASTEROPS Location: RasterOps, 2500 Walsh Avenue, Santa Clara, CA 95050, USA Country Code: US 42:702 Alternet 43:701 Alternet Network IP: 192.132.35 Network Name: OBSN Location: CNPz Observatorio Nacional, Rua General Jose Cristino, 77 - Rio de Janeiro, CEP 20921 - BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 192.138.220 Network Name: NEB-NET Location: New England Biolabs, Inc., 32 Tozer Road, Beverly, MA 01915, USA Country Code: US 1:560 NEARnet Regional Network 2:281 NEARnet Regional Network Network IP: 192.147.12 Network Name: ADELPHI2 Location: Adelphi University, South Avenue, Garden City, Long Island, NY 11010, USA Country Code: US 1:97 ENSS 137 - Princeton Network IP: 192.148.222 Network Name: KENTLAW Location: Chicago-Kent College of Law at IIT, 565 West Adams, Chicago, IL 60661, USA Country Code: US 1:267 CICNET at UIUC 2:1225 CICNET at Argonne Labs 3:266 CICNET at MERIT Network IP: 192.153.88 Network Name: REDE-IBASE Location: Instituto Brasileiro de Analises Sociais, Rua Vicente de Souza, 29, Rio de Janeiro 22251, BRAZIL Country Code: BR 1:1740 CERFnet Network IP: 192.156.133 Network Name: IBM-IRAD-DMZ Location: IBM Federal Sector Corporation, MC 5600, 3700 Bay Area Blvd, Houston TX 77058, USA Country Code: US 1:114 SESQUINET Regional Network 2:1700 SESQUINET Regional Network Network IP: 192.160.73 Network Name: CABLELABS Location: Cable Television Laboratories, Inc., 1050 Walnut Street, Suite 500, Boulder, CO 80302, USA Country Code: US 1:209 Westnet Regional Network (Colorado Attachment) - ENSS 141 2:210 Westnet Regional Network (Utah Attachment) - ENSS 142 Network IP: 192.169.16 Network Name: CORNERSTONE1 Location: Cornerstone Research, 1000 El Camino Real, ste. 250, Menlo Park, CA, 94025, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.169.17 Network Name: CORNERSTONE2 Location: Cornerstone Research, 1000 El Camino Real, ste. 250, Menlo Park, CA, 94025, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Network IP: 192.169.18 Network Name: CORNERSTONE3 Location: Cornerstone Research, 1000 El Camino Real, ste. 250, Menlo Park, CA, 94025, USA Country Code: US 1:200 BARRNet 2:201 BARRNet Total configured T3 networks: 3666 ***************************************************************** The configuration reports, map information sheets, and configuration files which reflect these changes are available for anonymous ftp on nis.nsf.net as usual. nsfnet/announced.networks - configuration reports latest report for: - NSFNET T1 has the file extension .now - NSFNET T3 has the file extension 3.now nsfnet/backbone.configuration - configuration files for the routing software for each NSS latest report for: - NSFNET T1 has the file format config.nss# - NSFNET T3 has the file extension .t3p Please send all requests for configuration changes to nsfnet-admin(a)merit.edu using the NSFNET configuration forms. The forms are available on-line. from the nis.nsf.net machine. Use ftp and the anonymous login to get on the machine. Do a "cd nsfnet/announced.networks" and get the files TEMPLATE.NET, TEMPLATE.GATE, and TEMPLATE.AS. ******************************* -B. Sue Blair Merit / NSFNET Riaz Taherzadeh-Yazdian Merit / NSFNET

1 0