New IANA IPv4 Allocations

2003-11-17 Thread Steve Conte
Greetings,

This is to inform you that the IANA has allocated 83/8 and 84/8 to the RIPE 
NCC.

For a full list of IANA allocations please see 
:  http://www.iana.org/assignments/ipv4-address-space

Thanks,

Steve
---
Steve Conte - IANA
[EMAIL PROTECTED]
PGP KeyID: E72D5F30


IETF Area Director position

2003-11-17 Thread Geoff Huston
I'm posting this on behalf of Rich Draves, the chair of the
IETF Nominations Committee. Please direct any followup
questions to Rich at [EMAIL PROTECTED]
Thanks,

  Geoff Huston



Last week Randy Bush resigned from his position as Operations &
Management Area Director for the IETF. This creates a mid-term vacancy
that the IETF NomCom needs to fill. Randy's replacement will have a
one-year term.
Please submit nominations for Randy's O&M Area Director position to
[EMAIL PROTECTED] The deadline for these nominations is noon (Pacific
Time) on December 1.
Any member of the IETF community may nominate any member of the IETF
community for any open position. Self-nominations are permitted.
Please also send the NomCom your feedback on the past performance of the
incumbents, feedback on potential nominees, or your thoughts on what the
NomCom should keep in mind when considering candidates.
All input to the nomcom will be kept strictly confidential.

Thanks,
Rich




New IANA IPv4 allocations and bogon updates: 83/8 and 84/8

2003-11-17 Thread Rob Thomas

Hi, team.

[ Apologies to those who have received this post in other fora. ]

The numerous Team Cymru bogon projects have been updated to reflect the
following IANA allocations on November 15, 2003:

83/8   Nov 03   RIPE NCC
84/8   Nov 03   RIPE NCC

IANA allocations change over time, so please check regularly to ensure
you have the latest filters if you are not using the bogon BGP feed(s).
We do announce updates to the bogon projects to the FIRST community, as
well as on lists such as NANOG, isp-routing, isp-security, isp-bgp,
cisco-nsp, and bogon-announce.  We can not stress this point strongly
enough - these allocations change. If you do not adjust your filters,
you will be unable to access perhaps large portions of the Internet.
Worse yet, you may end up blocking access for people who transit through
you.

Please do not blindly apply any filters or blocks to your network
without carefully considering the ramifications of doing so.

As a point of reference, the master Bogon Reference Page can be found
here:

http://www.cymru.com/Bogons/index.html

A quick summary of the documents and projects that have been updated
include the following:

HTTP
   The Bogon List
   The Text Bogon List, Unaggregated
   The Text Bogon List, Aggregated
   Secure BIND Template
   Secure IOS Template (Cisco)
   Secure BGP Template (Cisco)
   Secure JUNOS Template (Juniper)
   Secure JUNOS BGP Template (Juniper)
   Ingress Prefix Filter Templates, Loose and Strict (Cisco)
   Ingress Prefix Filter Template, Loose (Juniper)
   Ingress Prefix Filter Template, Strict (Juniper)
BGP
   Bogon route-server *

RADb
   fltr-unallocated
   fltr-martian
   fltr-bogons
DNS
   Bogon (bogons.cymru.com) zone

Monitoring
   Bogon prefix monitoring

* All of the bogon peers have received the appropriate BGP prefix
updates.

Please feel free to contact Team Cymru with any comments, questions, or
concerns.

Thanks!
Rob, for Team Cymru.
-- 
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);



Level 3 Help

2003-11-17 Thread Hansen, Kevin
Title: Level 3 Help





Could someone from Level 3 please contact me off the list.  Thank you.


-KJH


++
Kevin J. Hansen
Architect
Global Network
Thomson Legal & Regulatory
[EMAIL PROTECTED]
651-687-8466
++






IETF needs a new Ops Aarea Director

2003-11-17 Thread Eliot Lear
As some of you may already know, Randy Bush has resigned as Ops Area 
Director for the IETF.  The community was well served by Randy, 
particularly because he has a good head on his shoulders and strong ties 
with the operational community.

If you or someone you know would like to have broad impact on protocol 
development, the IETF needs a well qualified successor.  The job is not 
an easy one, however, and it pays $0.

Nominations are being taken by the IETF NOMCOM.  The announcement can be 
found here:

http://www.ietf.org/mail-archive/ietf-announce/Current/msg27262.html

Regards,

Eliot



Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Scott Francis
On Mon, Nov 17, 2003 at 09:40:01AM -0500, [EMAIL PROTECTED] said:
> > Valdis Kletnieks responded:
> > > > It doesn't take long for the average mechanic to learn that buying cheap
> > > > wrenches is a bad idea.
> > 
> > to which Alex replied:
> > > Do you take your car to McLaren service center? Why not? They definitely
> > > have better tools.
> > 
> > To which I say:
> > No, but if the mechanic I did go to had a habit of using tools that
> > regularly caused my car to halt and catch fire with me in it, I think I'd
> > switch mechanics until I found somebody that used more reliable tools.

Alex said:
> Again, for the end customer, the level of damage that they are experiencing
> is too little to bother.

I would definitely take exception to that statement, based only on the end
users of Wintel machines I hear from (the rest of my family). They come
fairly close to being average Windows end-users, have zero knowledge other
than 'click here', and the latest round of worms and the truckload of
critical security updates in the last month has had me on the phone trying to
walk them through WindowsUpdate at least half a dozen times in the past week
or two (as they're on dial-up, getting in from outside is a bit trickier).

My dad threatens to turn the computer into a pile of twisted aluminum on a
regular basis due to all the problems he's facing (some of which are due to
the typical Windows user experience, some are due to worms, some to dialup,
some to hardware (printer ink cartridges), all of which are exacerbated by
lack of knowledge and experience). This is not what I would qualify as a
level of damage "too little to bother" with.

Shoulda bought them a Mac last year ...
-- 
Scott Francis || darkuncle (at) darkuncle (dot) net
  illum oportet crescere me autem minui


pgp0.pgp
Description: PGP signature


Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Alex Yuriev

> Valdis Kletnieks responded:
> > > It doesn't take long for the average mechanic to learn that buying cheap
> > > wrenches is a bad idea.
> 
> to which Alex replied:
> > Do you take your car to McLaren service center? Why not? They definitely
> > have better tools.
> 
> To which I say:
> No, but if the mechanic I did go to had a habit of using tools that regularly
> caused my car to halt and catch fire with me in it, I think I'd switch
> mechanics until I found somebody that used more reliable tools.

Again, for the end customer, the level of damage that they are experiencing
is too little to bother.

Alex



Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Scott Francis
> > On Mon, 17 Nov 2003 06:26:50 EST, Alex Yuriev said:
> > 
> > > Because for people outside our little industry the software is a tool to
> > > get a JOB done, not the job itself.

Valdis Kletnieks responded:
> > It doesn't take long for the average mechanic to learn that buying cheap
> > wrenches is a bad idea.

to which Alex replied:
> Do you take your car to McLaren service center? Why not? They definitely
> have better tools.

To which I say:
No, but if the mechanic I did go to had a habit of using tools that regularly
caused my car to halt and catch fire with me in it, I think I'd switch
mechanics until I found somebody that used more reliable tools.
-- 
Scott Francis || darkuncle (at) darkuncle (dot) net
  illum oportet crescere me autem minui


pgp0.pgp
Description: PGP signature


Update to IANA IPv4 Page: 83/8 and 84/8 assigned to RIPE

2003-11-17 Thread O'Neil,Kevin


Just noticed in this:

http://www.iana.net/assignments/ipv4-address-space dated 2003-Nov-14


...
082/8   Nov 02   RIPE NCC(whois.ripe.net)
083/8   Nov 03   RIPE NCC(whois.ripe.net)
084/8   Nov 03   RIPE NCC(whois.ripe.net)
085/8   Sep 81   IANA - Reserved
...


Kevin O'Neil
OCLC Inc.
614-764-6271



Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Joe Abley


On 17 Nov 2003, at 11:17, todd glassey wrote:

H - I would have used a different picture - I would have said that 
 "the
average Ferrari Owner to realizes that if they don't tune their horse, 
it
dies on them...  while they are driving it.", So why don't the 
operators of
Microsoft OS instances? -
It's an avalanche of metaphors! I'm being buried alive!



Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread todd glassey


- Original Message -
From: "Jeffrey Paul" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; "Alex Yuriev" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, November 17, 2003 7:25 AM
Subject: RE: Santa Fe city government computers knocked out by worm





> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> Behalf Of [EMAIL PROTECTED]
> Sent: Mon, 2003-11-17 10:23
> To: Alex Yuriev
> Cc: [EMAIL PROTECTED]
> Subject: Re: Santa Fe city government computers knocked out by worm
>
>
> On Mon, 17 Nov 2003 06:26:50 EST, Alex Yuriev said:
>
> > Because for people outside our little industry the software
> is a tool
> > to get a JOB done, not the job itself.
>
> It doesn't take long for the average mechanic to learn that
> buying cheap wrenches is a bad idea.

Which is probably why they end up buying the expensive, supported one
(like everyone else).  It's also why they get worms.

-j

H - I would have used a different picture - I would have said that  "the
average Ferrari Owner to realizes that if they don't tune their horse, it
dies on them...  while they are driving it.", So why don't the operators of
Microsoft OS instances? -

Todd




Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Valdis . Kletnieks
On Mon, 17 Nov 2003 15:25:08 GMT, Jeffrey Paul said:

> Which is probably why they end up buying the expensive, supported one
> (like everyone else).  It's also why they get worms.

I said cheap, not inexpensive. There's a difference. :)


pgp0.pgp
Description: PGP signature


Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread kenw

On Mon, 17 Nov 2003 06:26:50 -0500 (EST), you wrote:

>
>> >No explaination why Sante Fe officials had not patched the city's
>> >computers in the three months since Microsoft announced the vulnerability
>> >and released the software updates.  Nor why Sante Fe didn't have up to
>> >date anti-virus programs running on its computers.
>> 
>> Nor why they were using such rubbish software for a mission-
>> critical system.
>> 
>Because for people outside our little industry the software is a tool to get
>a JOB done, not the job itself.
>
>Alex

A perceptive comment, but not actionable.

This incident is what happens when non-tool oriented people must use tools.
Our responsibility is to teach; theirs is to learn.

Some people spend too much time sharpening their tools.  Others too little.
Neither is innocent when the job fails to get done. 

/kenw


Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Alex Yuriev

> On Mon, 17 Nov 2003 06:26:50 EST, Alex Yuriev said:
> 
> > Because for people outside our little industry the software is a tool to get
> > a JOB done, not the job itself.
> 
> It doesn't take long for the average mechanic to learn that buying cheap
> wrenches is a bad idea.

Do you take your car to McLaren service center? Why not? They definitely
have better tools.

Alex



Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Steven M. Bellovin

In message <[EMAIL PROTECTED]>, Sean 
Donelan writes:
>
>The US is still losing relatively major city government computer networks
>due to the Nachi/Welchia worm.
>
>Sante Fe city government's entire computer network was knocked offline
>on Friday by the Nachi worm.  City employees could not access e-mail or
>work with their computers all day Friday, and the Santa Fe Public Library
>was not able to access the Internet.
>
>Officials say the worm infected the system when an employee downloaded
>music on a city computer.  The article says the worm was able to infect
>the city computer system by first disabling the system's virus detection
>system.  Both statements would be notable because known versions of
>Nachi/Welchia don't spread that way.
>
>http://kobtv.com/index.cfm?viewer=storyviewer&id=6232&cat=HOME
>
>No explaination why Sante Fe officials had not patched the city's
>computers in the three months since Microsoft announced the vulnerability
>and released the software updates.  Nor why Sante Fe didn't have up to
>date anti-virus programs running on its computers.
>

I draw a different conclusion from the article:  the channel from the 
techs who worked on it to the reporter was lossy...  As you note, Nachi/
Welchia aren't spread by music downloads, nor do they disable AV 
software.  I suspect that a Trojan'ed file-sharing program is more 
likely the culprit.

--Steve Bellovin, http://www.research.att.com/~smb




RE: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Jeffrey Paul



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
> Behalf Of [EMAIL PROTECTED]
> Sent: Mon, 2003-11-17 10:23
> To: Alex Yuriev
> Cc: [EMAIL PROTECTED]
> Subject: Re: Santa Fe city government computers knocked out by worm 
> 
> 
> On Mon, 17 Nov 2003 06:26:50 EST, Alex Yuriev said:
> 
> > Because for people outside our little industry the software 
> is a tool 
> > to get a JOB done, not the job itself.
> 
> It doesn't take long for the average mechanic to learn that 
> buying cheap wrenches is a bad idea.


Which is probably why they end up buying the expensive, supported one
(like everyone else).  It's also why they get worms.

-j


Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Valdis . Kletnieks
On Mon, 17 Nov 2003 06:26:50 EST, Alex Yuriev said:

> Because for people outside our little industry the software is a tool to get
> a JOB done, not the job itself.

It doesn't take long for the average mechanic to learn that buying cheap
wrenches is a bad idea.



pgp0.pgp
Description: PGP signature


Re: Santa Fe city government computers knocked out by worm

2003-11-17 Thread Alex Yuriev

> >No explaination why Sante Fe officials had not patched the city's
> >computers in the three months since Microsoft announced the vulnerability
> >and released the software updates.  Nor why Sante Fe didn't have up to
> >date anti-virus programs running on its computers.
> 
> Nor why they were using such rubbish software for a mission-
> critical system.
> 
Because for people outside our little industry the software is a tool to get
a JOB done, not the job itself.

Alex