Re: Area Social Activity

2008-02-14 Thread Gregory Hicks


> Date: Thu, 14 Feb 2008 11:20:53 -0800
> From: Jay Hennigan <[EMAIL PROTECTED]>
> To: nanog@merit.edu
> Subject: Re: Area Social Activity
> 
> 
> Rod Beck wrote:
> > I am suggesting a Certified Drinkers Event in the hotel bar Sunday evening.
> 
> Any Hash House Harriers in our midst?

I partook whilst deployed to HongKong and Spain (some 12 years
ago...).  Haven't had occasion since then though.
> 
> --
> Jay Hennigan - CCIE #7880 - Network Engineering - [EMAIL PROTECTED]
> Impulse Internet Service  -  http://www.impulse.net/
> Your local telephone and internet company - 805 884-6323 - WB6RDV

-------
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
2655 Seely Ave M/S 9A1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision."

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: DreamHost Contact?

2007-12-30 Thread Gregory Hicks


> Date: Sun, 30 Dec 2007 21:42:21 -0500
> From: Michael Greb <[EMAIL PROTECTED]>
> To: nanog@merit.edu
> Subject: DreamHost Contact?
> 
> 
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> I've attempted to contact DreamHost NOC or Abuse departments via the
> numbers in whois but just get voice mail and no call back.
> 
> I've got a user sending a lot of UDP traffic to 208.113.189.13 port 22.
> This traffic is very likely undesirable and I'd be willing to pull the
> plug immediately if I can get confirmation from DreamHost.  Failing that

Port 22?  Isn't that ssh?  Doesn't ssh have the capability to forward X or 
whatever via ssh?

> I've opened an abuse ticket with the customer and given them 12 hours to
> respond.
> 
> - --
> Michael Greb
> Linode.com, LLC
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.7 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFHeFcN0Qbp4bPZvesRAncgAJ98S3v+I/+wxal0lWZn/9GRHimqUgCg1tXW
> 5CnD7nmJBMDy4Jht2vxkk2k=
> =wtUq
> -END PGP SIGNATURE-

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 9B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision."

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Can P2P applications learn to play fair on networks?

2007-10-26 Thread Gregory Hicks


> From: "Geo." <[EMAIL PROTECTED]>
> To: 
> Subject: Re: Can P2P applications learn to play fair on networks?
> Date: Fri, 26 Oct 2007 06:18:01 -0400
> 
> 
> 
> > The problem is that ISPs work under the assumption that users only
> > use a certain percentage of their available bandwidth, while (some)  users 
> > work under the assumption that they get to use all their  available 
> > bandwidth 24/7 if they choose to do so.
> 
> My home dsl is 6mb/384k, so what exactly is the true cost of a dedicated 
> 384K of bandwidth? I mean what you say would be true if we were talking 

Dunno, but I've got a 3m/384k line for about DSL business class for $105/month. 
 
Don't think I can do better pricewise, but...

> download but for most dsl up speed is so insignificant compared to downspeed 
> I have trouble believing that the true cost for 24x7 isn't being paid. It's 
> just that some of the cable services are offering more up speed (1mb plus) 
> and so are getting a disproportionate amount of fileshare upload traffic (if 
> a download takes X minutes more is upload by a source on a 1mb upload pipe 
> compared to a 384k upload pipe so the upload totals are greater for the 
> cable isp).
> 
> Geo.
> 
> George Roettger
> Netlink Services 
> 

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 9B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision."

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Every incident is an opportunity (was Re: Hackers hit key Internet traffic computers)

2007-02-12 Thread Gregory Hicks


> Date: Mon, 12 Feb 2007 11:38:10 -0500
> From: "D'Arcy J.M. Cain" 
> 
> On Mon, 12 Feb 2007 09:51:38 -0600
> Dave Pooser <[EMAIL PROTECTED]> wrote:
> > Marshall beat me to it. I have a T-shirt that says "Mac: So 
> > simple my parents can use it." It's funny because it's true.
> 
> Why do I keep hearing "My parents are stupid" in these sorts of
> comments?  Just wait.  They get smarter as you get older.

My father was NOT stupid.  He could use several of the more popular
"word processors" (Wang being the last one he had used) but he could
NOT, for the life of him, get used to using MS Word.  Or anything else
associated with Windoze.  The command sequences just "didn't make sense
to him ("Why do I have to go push "start" when I want to shut the
system down?")

-

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Comment spammers chewing blogger bandwidth like crazy

2007-01-13 Thread Gregory Hicks


> Date: Sat, 13 Jan 2007 20:14:23 + (GMT)
> From: "Chris L. Morrow" <[EMAIL PROTECTED]>
> 
> On Sat, 13 Jan 2007, Gregory Hicks wrote:
> 
[...]
> > >
> > > this isn't in the ukraine, it's in NYC behind ISPrime. Phil is 
fairly
> > > hhelpful, you might ask them to 'figure out what the heck is going 
on'
> > > with that ip :)
> > >
> > > -Chris
> > > (unless the ukraine got a whole lot closer to IAD than I thought:
> > > 64 bytes from 195.225.177.46: icmp_seq=1 ttl=55 time=13.1 ms
> > > 64 bytes from 195.225.177.46: icmp_seq=2 ttl=55 time=24.5 ms
[...]
> yes, but 'whois info' is not often 'correct' especially in this case,
> traceroute to it, unless ISPrime has some time-space vortex that ip
> (that one of the /22) is actually in NYC. speed-o-light don't often 
lie...

Yup!.  Should have looked further.  Chris is right.

(Learn from the master! - I *should* have known better...)

Behind at least two levels of ISPrime...

Thanks!

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 9B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Comment spammers chewing blogger bandwidth like crazy

2007-01-13 Thread Gregory Hicks


> Date: Sat, 13 Jan 2007 18:58:02 + (GMT)
> From: "Chris L. Morrow" <[EMAIL PROTECTED]>
> Subject: Re: Comment spammers chewing blogger bandwidth like crazy
> To: Thomas Leavitt <[EMAIL PROTECTED]>
> Cc: nanog 
> 
> 
> 
> On Sat, 13 Jan 2007, Thomas Leavitt wrote:
> 
> > Why has 195.225.177.46, an IP in Ukraine, been eating a tremendous
> > amount of bandwidth? What are they doing?
> 
> this isn't in the ukraine, it's in NYC behind ISPrime. Phil is fairly
> hhelpful, you might ask them to 'figure out what the heck is going on'
> with that ip :)
> 
> -Chris
> (unless the ukraine got a whole lot closer to IAD than I thought:
> 64 bytes from 195.225.177.46: icmp_seq=1 ttl=55 time=13.1 ms
> 64 bytes from 195.225.177.46: icmp_seq=2 ttl=55 time=24.5 ms

Um-m-m-m...

% Information related to '195.225.176.0 - 195.225.179.255'

inetnum:195.225.176.0 - 195.225.179.255
netname:NETCATHOST
descr:  NetcatHosting
country:UA
admin-c:VS1142-RIPE
tech-c: VS1142-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower:  RIPE-NCC-HM-PI-MNT
mnt-by: NETCATHOST-MNT
mnt-routes: NETCATHOST-MNT
notify: [EMAIL PROTECTED]
changed:[EMAIL PROTECTED] 20040304
source: RIPE
remarks:***
remarks:* Abuse contacts: [EMAIL PROTECTED] *
remarks:***

person:   Vsevolod Stetsinsky
address:  01110, Ukraine, Kiev, 20Á, Solomenskaya street. room 206.
phone:+38 050 6226676
e-mail:   [EMAIL PROTECTED]
nic-hdl:  VS1142-RIPE
changed:  [EMAIL PROTECTED] 20040303
source:   RIPE

> )

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 9B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Broadband ISPs taxed for "generating light energy"

2006-10-11 Thread Gregory Hicks


> Date: Wed, 11 Oct 2006 14:16:05 -0400
> From: "Steven M. Bellovin" <[EMAIL PROTECTED]>
> 
> On Wed, 11 Oct 2006 13:57:17 -0400, Joseph S D Yao 
<[EMAIL PROTECTED]>
> wrote:
> 
> > 
> > On Tue, Oct 10, 2006 at 11:36:41AM -0400, Joe Loiacono wrote:
> > > Notice the date: October 10. That is the Indian equivalent of our 
April 1.
> > 
> > 
> > Ah.  Culture clash.  Therefore the story can be relegated to the 
same
> > coop as the IP-carrying pigeons.
> > 
> > The sole justification for asking this is to help us all remember 
this
> > for any further similar postings that might otherwise cause lengthy 
and
> > weighty discussions on something so lightweight.
> > 
> > Why is 10 October their 01 April?
> > 
> It's 10/10, which if viewed as the binary number 1010 is 10 base 10.
> Surely that has to mean something!  (Well, I just made it up, but it
> sounds goodd)

My wife (Korean) tole me yesterday that the past weekend was "Chusok"
(or Korean 'Thanksgiving' - Actually, the Harvest Festival)...  So
maybe India has something similar...?

> 
> 
>   --Steven M. Bellovin, http://www.cs.columbia.edu/~smb

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 9B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: fyi-- [dns-operations] early key rollover for dlv.isc.org

2006-09-22 Thread Gregory Hicks


> Date: Fri, 22 Sep 2006 19:55:39 -0400
> From: Joseph S D Yao <[EMAIL PROTECTED]>
> To: Fergie <[EMAIL PROTECTED]>
> Cc: nanog@merit.edu
> Subject: Re: fyi-- [dns-operations] early key rollover for dlv.isc.org
> 
> 
> On Fri, Sep 22, 2006 at 11:39:51PM +, Fergie wrote:
> > Hmmm. It wouldn't have anything to do with prime numbers, now would
> > it? :-)
> 
> 
> Well, yes, but there are an infinite number of them.
> 
> Of course, 17 is the most prime of them all.

isc.org announced the early key rollover just as a discussion about
"exponent 3 damage spreads" on the cryptography list was heating up.

This discussion started with a statement that:

> I've just noticed that BIND is vulnerable to:
>
> http://www.openssl.org/news/secadv_20060905.txt
>
> Executive summary:
>
> RRSIGs can be forged if your RSA key has exponent 3, which is BIND's
> default. Note that the issue is in the resolver, not the server.
>
> Fix:
>
> Upgrade OpenSSL.

So I thought that the early key rollover was due to this.  Yet it seems
to me that this discussion is still recommending that "-e 3" be used.

Regards,
GRegory hicks
---
I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: NANOG Spam?

2006-07-05 Thread Gregory Hicks


> Subject: NANOG Spam?
> Date: Wed, 5 Jul 2006 12:56:19 -0500
> From: "Joe Johnson" <[EMAIL PROTECTED]>
> To: 
> 
> 
> Am I the only one to get this email?  Headers say merit.edu sent it.  
I
> have NANOG whitelisted, though, so it came to my mailbox.
> 
[...snip spam...]

No, I got it as well but Postini caught it for me.  So I hadn't seen
it...

Just a "joe-job" though.  The headers are forged.  See the IP address
in thi FIRST "Received-by:" header.  Came from Spain.

[...snip later headers...]
Received: from trapdoor.merit.edu (unknown [84.232.124.32])
by trapdoor.merit.edu (Postfix) with SMTP id AD0CF91265
for <[EMAIL PROTECTED]>; Wed,  5 Jul 2006 13:39:15 -0400 
(EDT)
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Content-type: text/html;
 Charset=Windows-1251
---

% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '84.232.124.0 - 84.232.125.255'

inetnum:84.232.124.0 - 84.232.125.255
netname:TELELEPE-NET
descr:  Television Por Cable
descr:  Hermanos Ponce Garcia S.L.
descr:  Local TV and ISP Provider
country:es
admin-c:GPP18-RIPE
tech-c: GPP18-RIPE
status: ASSIGNED PA
mnt-by: SERVIHOSTING-MNT
source: RIPE
changed:[EMAIL PROTECTED] 20060126

person: Gregorio Ponce Pozuelo
address:C/Niña, 31
address:21440 Lepe (Huelva) SPAIN
phone:  +34 959645086
fax-no: +34 959158409
e-mail: [EMAIL PROTECTED]
nic-hdl:GPP18-RIPE
notify: [EMAIL PROTECTED]
mnt-by: SERVIHOSTING-MNT
changed:[EMAIL PROTECTED] 20060126
source: RIPE

% Information related to '84.232.0.0/17AS29119'

route:  84.232.0.0/17
descr:  ServiHosting Networks S.L.
descr:  First Allocation
remarks:**
remarks:|For ABUSE/SPAM/SCANS issues |
remarks:|send mail to [EMAIL PROTECTED]  |
remarks:|or Fax at number +34.966982510  |
remarks:**
origin: AS29119
mnt-by: SERVIHOSTING-MNT
notify: [EMAIL PROTECTED]
changed:[EMAIL PROTECTED] 20060113
source:     RIPE

Regards,
Gregory Hicks

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 9B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: IP failover/migration question.

2006-06-27 Thread Gregory Hicks


> From: [EMAIL PROTECTED]
> Date: Tue, 27 Jun 2006 11:20:38 -0400
> 
> On Tue, 27 Jun 2006 14:51:30 BST, Andy Davidson said:
> > Popular web browsers running on popular desktop operating systems  
> > also display extra-long dns cache time 'bugs'.
> 
> A well known fact, which leads right into your next comment...
> 
> > 24 hours + outage whilst stale dns disappears will never do in  
> > internet retail.
> 
> And yet, with 90% of the net implementing the "will never do" scenario,
> we manage to get a lot of internet retail done anyhow.  I'm obviously going
> to need a *lot* more caffeine to sort through that conundrum 

OR, it *could* be that the retailers know about the way 'things'
operate and don't make many changes once they get their site up...

---

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: wrt joao damas' DLV talk on wednesday

2006-06-13 Thread Gregory Hicks


> From: Randy Bush <[EMAIL PROTECTED]>
> Date: Tue, 13 Jun 2006 15:16:50 -0700
> To: Paul Vixie <[EMAIL PROTECTED]>
> Cc: nanog@merit.edu
> Subject: Re: wrt joao damas' DLV talk on wednesday 
> 
> 
> > therefore registrars (like alice's... remember alice? this is a song about
> > alice) have no place to go with registrant KSK data at this time.  this in
> > turn keeps most registrars from bothering to collect or store this "useless"
> > data.  ISC proposes to accept this KSK data (in the form of DLV RRs) via
> > authenticated automated processes whereby "lots of keys" can be sent to us
> > by interested/participating registrars.  we do not have a good way of 
knowing
> > whether somebody is or isn't the registrant for bankofamerica.com, but we
> > think that bank of america's registrar does have a way of authenticating the
> > registrant.  and we know how to authenticate bankofamerica.com's registrar.
> > so there IS a more scalable, untouched-by-human-hands, trust path available.
> 
> thanks for actual technalia.
> 
> ( first, i suspect much of the confusion could come from your
> thinking that the place up on skyline is *the* alice's restaurant.
> it isn't.  the real one was in stockbridge, mass, and rather
> short-lived.  so you can see why one might wonder about isc's
> validation methods.  :-)

Actually, Paul might have been talking about Alice, Bob, and Mike.
Well knows personages in cryptography circles.  Alice and Bob want to
exchange keys Mike is in the middle trying to figure out what alice and
Bob are up to and also trying to thwart the exchange if possible.  Or
at the very least, gain knowledge of the keys so that Mike can read
Alice's and Bob's message traffic.

> 
> i think if you amplified on and detailed the above, and went into
> how re-delegation and key changes would handled, it would go a long
> way to clarifying the isc dlv registry's security process.
> 
> you're also welcome to use some of the cctlds and other zones i
> manage as outlying/strange examples.  e.g. NG, which i could sign,
> but neither ng nor i have an established relationship to isc.  and
> then i hope to get rid of it soon (been working with the in-country
> folk for five years on this, and the illumination at the end of the
> tunnel might be a light as opposed to a train!), and how it would
> be rolled would be of interest.  and say psg.com, registered
> through retsiger, who we might assume, for sake of example, will
> not play.
> 
> randy
> 

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Gregory Hicks

 From the BBC "Daily news", Technology section:
 
 * Net clocks suffering data deluge *
Home hardware maker D-Link has been accused of denting the net's
ability to tell the time accurately.
Full story:
http://news.bbc.co.uk/go/em/-/2/hi/technology/4906138.stm



Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Gregory Hicks


> Date: Tue, 14 Feb 2006 09:47:50 -0500
> From: "Jon R. Kibler" <[EMAIL PROTECTED]>
> 
> > Date: Thu, 09 Feb 2006 00:14:23 -0800
> > From: Declan McCullagh 
> > 
> > I've posted the text here:
> > http://www.politechbot.com/docs/markey.data.deletion.bill.020806.pdf
> > 
> > A summary is here:
> > http://news.com.com/2100-1028_3-6036951.html
> > "A bill just announced in Congress would require every Web site operator 
> > to delete information about visitors, including e-mail addresses, if the 
> > data is no longer required for a "legitimate" business purpose.
> > 
> > An open question is whether Rep. Ed Markey's bill would require that 
> > Internet addresses be deleted by default from Apache and other web 
> > server logs. One reading is that it would be. But it's not clear whether 
> > an IP address falls under the definition of personal information.
> > 
> > This bill applies to anyone running a web site, including individuals 
> > and bloggers. So it's not just companies that have to worry.
> > 
> 
> Original posting from Declan McCullagh's PoliTech mailing list.
> Thought NANOGers would be interested since, if this bill passes, it
> would impact almost all of us. Just imagine the impact on security of
> not being able to login IP address and referring page of all web
> server connections!

Jon:

The proposed bill states to delete when data is no longer required for
"legitimate" business purposes.

If you business model requires that you keep the logs for some
"tracking" function, then keep them.  As long as the logs are required
for business purposes.  Once the business purpose finishes, then delete
them.

How is this different that the way we operate now?  Except that, if the
bill passes, then - possible/probably - our "privacy policy" (such as
they are) will have to state the business purposes...

IANAL, but my $0.002 worth.

Regards,
Gregory Hicks


---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: nanog.org website - 403s?

2006-02-11 Thread Gregory Hicks


> Date: Sat, 11 Feb 2006 10:29:43 -0700
> From: Michael Loftis <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: nanog.org website - 403s?
> 
> 
> 
> 
> --On February 11, 2006 10:09:42 PM +1300 Mark Foster 
<[EMAIL PROTECTED]> 
> wrote:
> 
> >
> > Anyone else seeing 403's when trying to pull anything other than the
> > index page from www.nanog.org?
> 
> Not everywhere but almost every single page yes.  mailinglist.html 
still 
> works...
> 
> someones FTP client or ssh/scp client set with wrong umask? :D

All the ones that I tried I received "Forbidden  You don't have 
permission to access ..."


-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | 
San Jose, CA 95134  | 

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Modelling a large ISP network with C-BGP

2006-02-02 Thread Gregory Hicks


> Cc: [EMAIL PROTECTED]
> From: Christian Kuhtz <[EMAIL PROTECTED]>
> Subject: Re: Modelling a large ISP network with C-BGP
> Date: Thu, 2 Feb 2006 17:19:50 -0500
> To: Gregory Hicks 
> 
> 
> On Feb 2, 2006, at 5:02 PM, Gregory Hicks wrote:
> 
> >
> >> From: Christian Kuhtz <[EMAIL PROTECTED]>
> >> Date: Thu, 2 Feb 2006 15:38:57 -0500
> >>
> >> On Feb 2, 2006, at 3:34 PM, Alain Hebert wrote:
> >>>
> >>> I fail to see a usage for smaller ISP that are using BGP only
> >>> for peering and OSPF internaly.
> >>
> >> Why would you need to sim this at small scale?
> >
> > How about for a net that has 540+ networks?  It would be  
> > interesting to see what happens if you perturb this BEFORE you do
> > the perturbation...
> 
> *sigh*
> 
> You just made me speechless.  All I can come with is "Well, DUH!"

Christian:

Honestly, I didn't *mean* to make you speechless!  It just happened...

What I *meant* to write was

... 540+ SUBnets.  We have several /16 addresses and some 35K hosts right now - 
but 
still growing...  All this is hiding behind one AS...  (used to be three ASes)
> 
> *sigh*
> 

---
I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: Modelling a large ISP network with C-BGP

2006-02-02 Thread Gregory Hicks


> From: Christian Kuhtz <[EMAIL PROTECTED]>
> Date: Thu, 2 Feb 2006 15:38:57 -0500
> 
> On Feb 2, 2006, at 3:34 PM, Alain Hebert wrote:
> >
> >I fail to see a usage for smaller ISP that are using BGP only  
> > for peering and OSPF internaly.
> 
> Why would you need to sim this at small scale?

How about for a net that has 540+ networks?  It would be interesting to
see what happens if you perturb this BEFORE you do the perturbation...

> 
> Thanks,
> Christian
> 

-------
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




RE: Gothcas of changing the IP Address of an Authoritative DNS Server

2005-12-14 Thread Gregory Hicks


> From: "Ejay Hire" <[EMAIL PROTECTED]>
> To: "'Eric Kagan'" <[EMAIL PROTECTED]>, 
> Subject: RE: Gothcas of changing the IP Address of an Authoritative DNS Server
> Date: Wed, 14 Dec 2005 13:15:42 -0600
> 
> 
> assuming you've got the old box and the new one running
> concurrently, you could run tcpdump on the old box with a
> filter to only catch dns requests to the old ip.  Let it run
> for 24-48 hours and you could see who/what was still
> querying the old ip.

This topic comes up frequently on [EMAIL PROTECTED] ...

Might query there but many of these responses have covered much of what is 
discussed there.

Regards,
Gregory Hicks

> 
> -e
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> On 
> > Behalf Of Eric Kagan
> > Sent: Tuesday, December 13, 2005 2:45 PM
> > To: nanog@merit.edu
> > Subject: Gothcas of changing the IP Address of an 
> > Authoritative DNS Server
> > 
> > We need to move our Primary DNS server from legacy IP
> space 
> > provided by our upstreams to our ARIN Assigned IP space.
> I 
> > am looking for advice and any gotchas.  I couldn't find
> any 
> > white papers to this affect or archived articles or
> postings. 
> >  If someone does have a resource for this or find this
> could 
> > be valuable, I can certainly gather all the info and
> document 
> > it.  Most of the Registrars I have seen now use the 
> > Authoritative DNS Server Host names for the domain name 
> > registrations vs the IP Address. For most of our
> customers, 
> > we register and host the DNS.  I have confirmed almost all
> 
> > the customers have either Network Solutions, Tucows, Go
> Daddy 
> > and Register.com.
> >  
> > Can I simply change the IP address of our DNS server and 
> > update the DNS Host Record with our registrar with the new
> IP 
> > and any A / NS records we have ?  As long as other
> customers 
> > domains have our DNS Server FQDN as the Host, they should
> not 
> > need to make any changes, correct ?   I would love to
> think 
> > its that simple, but there is always a gotcha.  Does
> anyone 
> > know of any main registries using just the IP Address
> where 
> > the customer might need to go in and make those changes
> for 
> > each and every domain ?  Any input, advice or ideas is
> appreciated.
> >  
> > Thanks
> > Eric
> >  
> > 
> 

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: the future of the net

2005-11-16 Thread Gregory Hicks


> Cc: nanog@merit.edu
> From: Gordon Cook <[EMAIL PROTECTED]>
> Subject: Re: the future of the net
> Date: Wed, 16 Nov 2005 21:08:26 -0500
> To: Randy Bush <[EMAIL PROTECTED]>
> 
> 
> I hit it right after randy posted it and read the whole thing...very  
> good very rich ...filled with links and yeah
> 
> now its gone and the text seems not to be retrievable from my cache.

I just read the page - and have a copy if you want...

> 
> Doc Searles will surely say what the heck happened???  spooky
> 
> and i agree with the kevin werbach quote - be very afraid.
> 
> On Nov 16, 2005, at 8:53 PM, Randy Bush wrote:
> 
> >
> >
> >> Oh, the irony - all I get is:
> >> Access denied
> >> You are not authorized to access this page.
> >> I guess in the future the net is going to be exactly the same is it
> >> it now...
> >>
> >>> http://www.linuxjournal.com/article/8673
> >>>
> >
> > same here not half an hour after i read it at that url
> >
> > i guess the sbc ceo did not like the article.  too bad,
> > as the first third was *very* well framed, if a bit on
> > the hyperbolic.
> >
> > perhaps someone with connections at linuxjournal can
> > sort this out for us.  i'm a bsd user.
> >
> > randy
> >
> >
> >
> >
> 

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: New improved Linux-foo(l) Worm noise

2005-11-08 Thread Gregory Hicks


> Date: Wed, 9 Nov 2005 01:15:06 +
> From: n3td3v <[EMAIL PROTECTED]>
> To: nanog@merit.edu
> Subject: Re: New improved Linux-foo(l) Worm noise
> 
> 
> Hehehe, where has Fergie been lately? I kind of miss his online media
> article updates.

Moved to another list.  Everyone 'dumped' on the updates...

> On 11/8/05, Randy Bush <[EMAIL PROTECTED]> wrote:
> >
> > are you really an alias for fergie?
> >
> >
> 

-
I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: fleet.navy.mil DNS / network ops contact please

2005-10-28 Thread Gregory Hicks


> Date: Fri, 28 Oct 2005 10:36:22 +0530
> From: Suresh Ramasubramanian <[EMAIL PROTECTED]>
> To: Curtis Doty <[EMAIL PROTECTED]>
> Subject: Re: fleet.navy.mil DNS / network ops contact please
> Cc: NANOG 
> 
> 
> On 27/10/05, Curtis Doty <[EMAIL PROTECTED]> wrote:
> >
> > The information you seek is traditionally stored in the SOA record.
> >
> > fleet.navy.mil SOA ns1.fleet.navy.mil. prnoc.fleet.navy.mil. 2005090600
> > 1800 900 360 1800
> >
> > Why there is no @ sign is a mystert left to the reader of the RFCs or of
> > the Cricket book. :-/
> >
> 
> Traditionally, yes.  But again, TIA for a fleet.navy.mil network /
> dns contact ..  Email sent to quite a few role accounts, I assure you
> - no response that i know of And no navy.mil dns / network ops
> contacts in the puck.nether.net list eithet ..

Is this a connectivity issue?  If so, ...

I seem to remember reading somewhere in the news that the US Military
has cut off connectivity with all commercial sites/networks for members
deployed or overseas.  While I did not have email and such when *I* was
deployed 13-15 years ago, it may be that "fleet.navy.mil" is considered
part of that portion of the MILnet that was cutoff.

Regards,
Gregory Hicks

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: [fergie-spew] RE: FW: Crews Survey Rita's Damages

2005-09-25 Thread Gregory Hicks


> Date: Mon, 26 Sep 2005 02:45:29 + (GMT)
> From: "Christopher L. Morrow" <[EMAIL PROTECTED]>
> 
> On Mon, 26 Sep 2005, Fergie (Paul Ferguson) wrote:
> 
> >
> > I take issue with what you folks think is relative.
> 
> (I think I may be in a smaller group, but I don't mind the news posts
> actually...and the subject tag seems like its a nice addition)

Count me in the smaller group...  I enjoy the posts.  But a subject tag
isn't really necessary.  I can generally figure out what is on topic or
not and use the delete key when not on topic.

I think the list would be a poorer placw w/o those posts.  My opinion.

Regards,
Gregory Hicks
-----
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: CircleID: News from the E-mail Authentication Summit in NYC

2005-07-21 Thread Gregory Hicks


> Date: Thu, 21 Jul 2005 22:12:28 -0700
> From: Dave Crocker <[EMAIL PROTECTED]>
> To: nanog@merit.edu
> Subject: Re: CircleID: News from the E-mail Authentication Summit in NYC
> X-Songbird-SpamCheck: 
> 
> 
> 
> 
> > At The Email Authentication Implementation Summit in New York City last 
> > week, 
> > several major ISPs surprised attendees with their announcement that they 
> > are 
> > jointly backing a single authentication standard.
> 
> 
> More details are at <http://mipassoc/mass>.

That should be http://mipassoc.org/mass
> 
> Participation by the ops community is *strongly* encouraged.
> 
> -- 
>  
>d/
> 
>   Dave Crocker
>   Brandenburg InternetWorking
>   +1.408.246.8253
>   dcrocker  a t ...
>   WE'VE MOVED to:  www.bbiw.net

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Recall: SORBs

2005-07-06 Thread Gregory Hicks


> Date: Wed, 6 Jul 2005 21:20:10 +0530
> From: Suresh Ramasubramanian <[EMAIL PROTECTED]>
> 
> On 06/07/05, Alex Rubenstein <[EMAIL PROTECTED]> wrote:
> > What is scarier --
> > 
> > a) microsoft providing this feature
> > 
> > b) someone with the ability to type "conf t, router bgp",
> > connected to the global internet, and thinking
> > that recalling a message would work?
> 
> [b] most assuredly
> 
> [a] has its uses, when used internally in an exchange groupware
> environment

Yeah BUT!  A message can only be "recalled" if it has NOT been read.
If the message goes to a 'list' of people, the ones that have NOT read
the message will not see it.  Those that HAVE read it, get to keep the
original message.

So it really doesn't do what one would think it does.

Regards,
Gregory Hicks

> 
> -- 
> Suresh Ramasubramanian ([EMAIL PROTECTED])
> 

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: source for GIS-correlated fiber conduit data

2005-07-05 Thread Gregory Hicks


> Date: Tue, 05 Jul 2005 20:09:39 + (GMT)
> From: "Christopher L. Morrow" <[EMAIL PROTECTED]>
> 
> On Tue, 5 Jul 2005, Justin M. Streiner wrote:
> 
> > On Mon, 4 Jul 2005, Sam Crooks wrote:
> >
> > > Can anyone point me in the direction of a source for fiber cable
> > > installations correlated to GIS data?
> >
> > You will probably have difficulty in getting this from your carriers of
> > choice.  Chances are, if they provide anything at all, it would be done
> > under NDA.
> 
> Didn't Sean Doran do this out of GMU about 2 years ago? and get slapped
> with some silly classification by the us-gov for it? (or am I thinking of
> another sean?)

Someone did but it was not limited to fiber but included utilities...

And did get slapped down for putting together publicly available info
into a usable form...

-
I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: AUP for NANOG?

2005-04-15 Thread Gregory Hicks


> From: Per Gregers Bilse <[EMAIL PROTECTED]>
> Date: Fri, 15 Apr 2005 09:46:14 +0100
> 
> On Apr 14,  9:22am, Scott Grayban <[EMAIL PROTECTED]> wrote:
> > The more bashing I hear here the less I want to ask a question here.
> > I'm not stupid but I am worried that one question might spark a rash of 
flames back at me.
> > 
> > This is a newbies point of view.
> 
> Thanks for braving it.-)
> 
> It would be interesting if we knew the newbie:bully:oldie ratio on NANOG.
> As an oldie, I would rather see "clueless" newbie questions as opposed to
> contentless rants and posturing, and I don't believe any kind of "edge" vs
> "core" split of NANOG is good.  Networking is end-to-end, and what is
> needed is a "tech" vs "non-tech" split.
> 
> In the old days we had a list called com-priv which effectively worked as
> the non-tech counterpart; anything to do with domain names, law suits,
> business practices, peering politics, legislation and regulation, etc,
> etc, etc would go on com-priv.  Many, if not most, people subscribed to
> both lists, but kept things separate in their heads and in their postings.
> That didn't mean NANOG was a panacea for newbies, but just getting today's
> S/N ratio under control would be of great help.

We HAVE such a list:  [EMAIL PROTECTED]

It has been around for several years now...  Unfortunately, not too much 
used...

Regards,
Gregory Hicks

> 
>   -- Per
> 

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: AOL scomp

2005-03-02 Thread Gregory Hicks


> Date: Wed, 2 Mar 2005 10:25:56 +0530
> From: Suresh Ramasubramanian <[EMAIL PROTECTED]>
> 
> 
> On Tue, 01 Mar 2005 09:28:31 -0500, Vinny Abello <[EMAIL PROTECTED]> wrote:
> > I can attest that we do not see the same here as you are seeing (1 in 100).
> > I'd agree more with the 1/3 being stupid AOL users reporting regular
> > messages that were either forwarded from their own account that we host to
> 
> Well - there's a way out, sort of.
> 
> 1. Route .forwarded email out a separate IP (besides cutting down on
> accepting and forwarding spam)
> 
> or
> 
> 2. Find some way - like an X-Forwarded-For header, that AOL can tag on.

There aready ARE such headers...  "Resent-From:",  "Resent-To:", ...

> 
> --srs
> 
> -- 
> Suresh Ramasubramanian ([EMAIL PROTECTED])

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Any news about Diego Garcia?

2004-12-27 Thread Gregory Hicks



RE: Status of FCAPS model? Useful? Obsolete?

2004-11-08 Thread Gregory Hicks


> From: "Hannigan, Martin" <[EMAIL PROTECTED]>
> Date: Mon, 8 Nov 2004 23:54:39 -0500 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> > Sent: Monday, November 08, 2004 8:52 PM
> > 
[...snip...]
> > Does the FCAPS model still hold currency among network 
> > managers/engineers 
> > today? 
> 
> What's FCAPS?

FCAPS is the (supposedly) ISO model for network management (See wiki
def at http://www.free-definition.com/FCAPS.html).  It is an acronym
for Fault, Configuration, Accounting, Performance, and Security...

Other misc definitions:
http://www.nwfusion.com/details/6184.html
http://searchnetworking.techtarget.com/sDefinition/0,,sid7_gci752173,00.html
http://www.iec.org/online/tutorials/ems/topic03.html

However, Forrester Research seems to think that FCAPS is obsolete (at a
cost of $99 to read other than the first sentence) unless you are a
registered Forrester client (I am not).
http://www.forrester.com/Research/LegacyIT/Excerpt/0,7208,29439,00.html

Other references do not deem it dead just yet.

Regards,
Gregory Hicks

> 
> 
> -M<

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



RE: Another one bites the dust

2004-10-14 Thread Gregory Hicks


> From: "Scott Morris" <[EMAIL PROTECTED]>
> To: "'Husan Sarris'" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
> Subject: RE: Another one bites the dust
> Date: Thu, 14 Oct 2004 13:26:55 -0400
> 
> 
> Now perhaps this is a little off, but given the logic that you suggest his
> mention of He Who Had a Short Mustache might be offensive (by merely
> mentioning the name)...  Aren't you therefore guilty of the same offensive
> violation?  Gratuitous mentioning does imply that there is a context, and
> the context is something that would/should/could become offensive.
> 
> *shrug*
> 
> Seems odd.  Humor is good occasionally.  Oblique and non-meritorious
> censorship, however, is not.
> 
> Bear in mind, I apparantly haven't paid attention or noticed any of his past
> behavior that may have warranted this.  But it seems equally
> counter-productive to the operation of the list for what he did as what you
> did in order to let him know that. 

I doubt very much that Susan is actually writing these messages.

> 
> IMHO,
> 
> Scott
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Husan Sarris
> Sent: Thursday, October 14, 2004 1:03 PM
> To: [EMAIL PROTECTED]
> Subject: Another one bites the dust
> 
> 
> Stephen - although you have often been a valuable contributor to the NANOG
> list, you received your "last warning" about list AUP violations last
> spring.  Because of your non-operational post below, and your gratuitous
> mention of Hitler, which could be offensive to some, we have removed your
> posting privileges from the NANOG list for a period of four months.
> Please refer to the AUP:
> 
>   http://www.nanog.org/aup.html
> 
> Susan Harris, Ph.D.
> Merit Network/Univ. of Mich.
> 
> 
> On Wed, 13 Oct 2004, Stephen J. Wilcox wrote:
> 
> >
> > On Wed, 13 Oct 2004, Christian Malo wrote:
> >
> > > FREE RICHARD
> >
> > Of course my understanding of revoking posting privileges is that you 
> > cant post to the list.. not you are imprisoned in the merit dungeons, 
> > i think that punishment is reserved for Bandy/Husan/etc
> >
> > However I do like some humor being injected onto the list, so long as 
> > the SNR doesnt diminish too much it can help to inject some life 
> > inbetween the 'paging bob smith' / 'anyone help me configure bgp' / path
> mtu / urpf cyclical debates..
> > actually we've not had Hitler discussed for a while, perhaps I can 
> > start a thread... ooops
> >
> > Steve
> 

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: Cisco moves even more to china.

2004-09-23 Thread Gregory Hicks


> Date: Thu, 23 Sep 2004 16:49:11 -0700 (PDT)
> From: Nicole <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Cisco moves even more to china.
> 
> 
> 
> 
>  Lovely, Just lovely. Just heard On CNN, Lou Dobbs. (but can't find it on
> their site)
> 
>  During a Beijing news conference John Chambers (Cisco CEO) Says "We believe 
in
> giving something back and truly becoming a Chineese company."  "China will
> become the IT center or the world" "China will become the largest economy in 
the
> world."
> 
>  CNN Reports: Cisco is investing 32 Million into Changi and is training
> 10's of thousands of Chineese university students in Cisco technology.
> 
>  So.. I guess we will be cranking out those H1b's...Plan to kiss your raises
> and or jobs bye bye to some specialized cheap imported Cisco trained 
networking
> person from China. 

Yeah, but don't they already have a company over there that is
producing Cisco stuff?  Or did I mis-read a lawsuit?

> 
> 
>  *SIGH*
> 
> 
>   Nicole
> 
> 
> --
>  |\ __ /|   (`\
>  | o_o  |__  ) )   
> //  \\ 
>   -  [EMAIL PROTECTED]  -  Powered by FreeBSD  -
> --
>  "The term "daemons" is a Judeo-Christian pejorative.
>  Such processes will now be known as "spiritual guides"
>   - Politicaly Correct UNIX Page
> 
>  Opportunity is missed by most people because it is dressed in overalls and
> looks like work.
>- Thomas Edison
> 
>  "Microsoft isn't evil, they just make really crappy operating systems."
>- Linus Torvalds
> 
> 

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: IMP #1

2004-09-01 Thread Gregory Hicks


> Cc: [EMAIL PROTECTED]
> From: Iljitsch van Beijnum <[EMAIL PROTECTED]>
> Subject: Re: IMP #1
> Date: Thu, 2 Sep 2004 01:19:36 +0200
> To: Peter H Salus <[EMAIL PROTECTED]>
> 
> 
> On 1-sep-04, at 22:40, Peter H Salus wrote:
> 
> > Tomorrow (Sept. 2) it will be 35 years since IMP #1
> > was plugged in at Len Kleinrock's lab at UCLA.
> 
> > Happy Birthday!
> 
> Well, one IMP does not a network make... When did they connect the 
> second one?

Dunno when they connected the second one, but #10 (Univ of Utah) was
connected sometime during the academic year in 1970-71...  That's when
I was hired as a "research assistant" to implement some initial RFCs
(like FTP...)

Regards,
Gregory Hicks
> 

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: Senator Diane Feinstein Wants to know about the Benefits of P2P

2004-08-30 Thread Gregory Hicks


> Date: Mon, 30 Aug 2004 16:39:56 -0400
> From: Mike Tancsa <[EMAIL PROTECTED]>
> 
> At 04:12 PM 30/08/2004, Dan Hollis wrote:
> 
> >yep md5 made the news recently because it's been cracked:
> >
> >http://techrepublic.com.com/5100-22-5314533.html
> >http://www.rtfm.com/movabletype/archives/2004_08.html#001055
> 
> Thats a misleading over simplification.  A collision being found implies 
> something different than "its cracked."  A weakness that was theorized 
> sometime ago has been demonstrated in practice.  Finding collisions and 
> altering files in a useful way to produce a duplicate hash are different 
> things.  There are FAR bigger security concerns than this one right now IMHO.
> 
> I recall even seeing posts about people claiming this meant original data 
> being reconstructed from the checksum!  That would be truly amazing since I 
> could reconstruct a 680MB ISO from just 61d38fad42b4037970338636b5e72e5a. Wow!

Actually...  

The "collision" problem discovered means that there might be MULTIPLE 680MB 
files that give the same checksum.  

Of course, the utility of most of these files would be an exercise left to the 
'cracker' if you were looking for an OS patch but ended up with the contents of 
an encyclopeida.

Regards,
Gregory Hicks

---
I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: Addresses for latest spam

2004-06-08 Thread Gregory Hicks

Isn't this called a "dictionary" attack?

> To: Adi Linden <[EMAIL PROTECTED]>
> Cc: [EMAIL PROTECTED]
> Subject: Re: Addresses for latest spam 
> From: [EMAIL PROTECTED]
> Date: Tue, 08 Jun 2004 11:44:50 -0400
> 
> On Tue, 08 Jun 2004 09:06:35 CDT, Adi Linden <[EMAIL PROTECTED]>  said:
> > 
> > Does anyone know how the latest email worms assemble the email addresses 
> > they use? I am getting a large amount of junk destined for non-existant 
> > (never existant) email accounts. So the address cannot be taken from the 
> > various address books on the compromised PC's.
> 
> I'll place bets on there being '[EMAIL PROTECTED]' and '[EMAIL PROTECTED]'
> in the address books, and the worm is creating all 4 combinations of left and
> right hand sides (and possibly other permutations too).  So you're sitting at
> domain1.net and seeing '[EMAIL PROTECTED]' bouncing (and possibly
> '[EMAIL PROTECTED]' as well)
> 
> And of course, if it finds 200 addresses, you'll get the 1 valid LHS that
> was attached to your domain - and 199 LHS's that used to be attached
> to 199 other domain names and were probably never valid at your site.
> 
> But since it's a compromised PC that belongs to somebody else and the
> spammer isn't paying for the bandwidth, they might as well try all 200x200,
> because they know 200 of them were valid, and maybe they'll get lucky
> and another 50 or 75 of the cross-product will happen to match too...

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: Spamcop

2004-05-11 Thread Gregory Hicks


> Date: Tue, 11 May 2004 11:51:10 -0700
> From: Vicky Rode <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
> Subject: Spamcop
> 
> 
> Hi there,
> 
> Just wondering why was my e-mail thread (Hierarchical Credit-based 
> Queuing (HCQ): QoS) dated 5/9/2004 9:36 PM reported as a spam? Just 
> trying to understand so that I don't repeat it. Below is a cut and paste 
> of the reported incident.

Vicky:

I'm guessing here, but it was probably because the *.rr.com addresses
originate a LOT of spam and someone has a procmail filter that
automatically refers any mail from that domain to spamcop...

Or it could be that someone didn't like what you wrote and reported it
...

Dunno.

Remember, I said that I'm **guessing**.

Regards,
Gregory Hicks

> 
> 
> Please advice.
> 
> 
> regards,
> /vicky
> 
> 
>  cut here --
> 
> Return-Path: <[EMAIL PROTECTED]>
> Received: from vamx01.mgw.rr.com ([24.28.193.148]) by
> acme-reston.va.rr.com
>(Post.Office MTA v3.5.3 release 223
>ID# 0-59787U25L25S0V35) with SMTP id com
>for <[EMAIL PROTECTED]>; Mon, 10 May 2004 10:42:14 -0400
> Received: from vmx2.spamcop.net (vmx2.spamcop.net [206.14.107.117])
>   by vamx01.mgw.rr.com (8.12.10/8.12.8) with ESMTP id
> i4AEkwhn017175
>   for <[EMAIL PROTECTED]>; Mon, 10 May 2004 10:47:01 -0400 (EDT)
> Received: from sc-app3.verio.ironport.com (HELO spamcop.net)
> (192.168.11.203)
>by vmx2.spamcop.net with SMTP; 10 May 2004 07:47:00 -0700
> Received: from [68.13.211.63] by spamcop.net
>   with HTTP; Mon, 10 May 2004 14:47:01 GMT
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: [SpamCop (24.30.181.126) id:988145978]Hierarchical Credit-based
> Queuing (HCQ): QoS
> Precedence: list
> Message-ID: <[EMAIL PROTECTED]>
> Date: Sun, 9 May 2004 21:36:30 -0700 (PDT)
> X-SpamCop-sourceip: 24.30.181.126
> X-Mailer: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR
> 1.0.3705)
>   via http://www.spamcop.net/ v1.3.4
> X-Virus-Scanned: Symantec AntiVirus Scan Engine
> 
> [ SpamCop V1.3.4 ]
> This message is brief for your comfort.  Please use links below for
> details.
> 
> Email from 24.30.181.126 / Sun, 9 May 2004 21:36:30 -0700 (PDT)
> http://www.spamcop.net/w3m?i=z988145978zab5cec781dcfa15ae459c11bd03b7bef
> z
> 
> [ Offending message ]
> Return-path: 
> Envelope-to: x
> Delivery-date: Mon, 10 May 2004 00:39:15 -0400
> Received: from [198.108.1.26] (helo=trapdoor.merit.edu)
>   by wilma.widomaker.com with esmtp (Exim 3.36 #1)
>   id 1BN2ZP-000Jo6-00
>   for x; Mon, 10 May 2004 00:39:15 -0400
> Received: by trapdoor.merit.edu (Postfix)
>   id B68EC91206; Mon, 10 May 2004 00:36:37 -0400 (EDT)
> Delivered-To: x
> Received: by trapdoor.merit.edu (Postfix, from userid 56)
>   id 8645591243; Mon, 10 May 2004 00:36:37 -0400 (EDT)
> Delivered-To: x
> Received: from segue.merit.edu (segue.merit.edu [198.108.1.41])
>   by trapdoor.merit.edu (Postfix) with ESMTP id 50AFD91206
>   for ; Mon, 10 May 2004 00:36:34 -0400 (EDT)
> Received: by segue.merit.edu (Postfix)
>   id 3B3955914F; Mon, 10 May 2004 00:36:34 -0400 (EDT)
> Delivered-To: x
> Received: from ms-smtp-02-eri0.socal.rr.com
> (ms-smtp-02-qfe0.socal.rr.com [66.75.162.134])
>   by segue.merit.edu (Postfix) with ESMTP id EAB7358E5D
>   for ; Mon, 10 May 2004 00:36:33 -0400 (EDT)
> Received: from [192.168.2.2] (cpe-24-30-181-126.socal.rr.com
> [24.30.181.126])
>   by ms-smtp-02-eri0.socal.rr.com (8.12.10/8.12.7) with ESMTP id
> i4A4aUce025659
>   for ; Sun, 9 May 2004 21:36:30 -0700 (PDT)
> Message-ID: <[EMAIL PROTECTED]>
> Date: Sun, 09 May 2004 21:36:41 -0700
> From: Vicky Rode <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> User-Agent: Mozilla Thunderbird 0.6 (Windows/20040502)
> X-Accept-Language: en-us, en
> MIME-Version: 1.0
> To: x
> Subject: Hierarchical Credit-based Queuing (HCQ): QoS
> X-Enigmail-Version: 0.83.6.0
> X-Enigmail-Supports: pgp-inline, pgp-mime
> Content-Type: text/plain; charset=us-ascii; format=flowed
> Content-Transfer-Encoding: 7bit
> X-Virus-Scanned: Symantec AntiVirus Scan Engine
> Sender: owner-x
> Precedence: bulk
> Errors-To: [EMAIL PROTECTED]
> X-Loop: nanog
> 
> 
> 
> Hi there,
> 
> 
> Just wondering if anyone out there has either implemented or looked into
> 
> this queuing method for quality of service implementation.
> This solution is offered (hardware solution) and patented by
> foursticks.com. According to foursticks, "HCQ achieves the 

Re: hotmail-msn

2004-04-30 Thread Gregory Hicks


> From: "Geo." <[EMAIL PROTECTED]>
> Date: Fri, 30 Apr 2004 08:28:32 -0400
> 
> Is everyone else still having problems delivering email to MSN and
> Hotmail?  It seems the queues have gotten even longer over the past
> 24 hours instead of improving. Was just wondering if it's us or if
> everyone is seeing this?

George:

We've got the problem.  I was going to call Hotmail later today - after
I got to the office.  (I've got to find the message that gives the
pointer to the list of NOCs...)

Regards,
Gregory Hicks

> 
> Geo.
> 

---------
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Spam with no purpose?

2004-03-31 Thread Gregory Hicks


> Date: Wed, 31 Mar 2004 22:18:03 -0500
> From: Deepak Jain <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Spam with no purpose?
> 
> 
> 
> Can someone explain to me (publicly or privately) why someone would 
send 
> spam with no product to sell, no position to pitch, nothing except 
text 
> designed to get by a spam filter -- without even HTML to KNOW it got 
by 
> a spam filter..

It is a probe to verify the address.  since it did not bounce, the 
address is verified.

Some spam filters filter out empty messages.  The words avoid this.

Regards,
Gregory Hicks

> 
> For example:
> 
> From: Joe Legitimate <[EMAIL PROTECTED]>
> To: Deepak Jain <[EMAIL PROTECTED]>
> Subject: [dictionary word]
> 
> [dictionary word] [dictionary word] [dictionary word] [dictionary 
word] 
> [dictionary word] [dictionary word] [dictionary word] [dictionary 
word] 
> [dictionary word] [dictionary word] [dictionary word] [dictionary 
word] 
> [dictionary word] [dictionary word] [dictionary word] [dictionary 
word] 
> [dictionary word] [dictionary word] [dictionary word] [dictionary 
word]
> 
> --- EOM ---
> 
> I don't understand why one would waste the time, if its a test, why 
> would it get out in public?
> 
> I would like to think I am being naive, but I just don't see the 
upside 
> unless it were particularly targeted at me or my mailserver to 
determine 
> our response or response time, etc.
> 
> Thanks in advance,
> 
> DJ
> 

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: Source address validation (was Re: UUNet Offer New Protection

2004-03-08 Thread Gregory Hicks


> From: Paul Vixie <[EMAIL PROTECTED]>
> Date: 08 Mar 2004 06:35:16 +
> 
> 
> [EMAIL PROTECTED] (Ken Diliberto) writes:
> 
[...snip...]
> > 
> > We're now blocking all SMTP traffic leaving the campus from non-blessed
> > sources (read mail servers).  The first day doing this we had comments
> > about less junk mail traffic.  We block traffic we consider harmful that
> > shouldn't leave the campus.  We're trying to do our part.
> > 
> > Any suggestions how we can do better?
> 
> yes.  contact the nanog program committee so you can come to san francisco
> and tell the rest of us how you did it -- both in the ones and zeros, and
> in the dollars and cents.

Paul:

This is MY take and not Ken's...

Firewall:  block port 25 from all internal hosts except those
'recognized' as mail servers.

For a user or department to get a mail server set up and 'recognized',
they probably have to go through some sort of "qualification" and
scanning process to ensure that the mail host is configured
correctly...

Going to San Francisco is still a good idea though.

Regards,
Gregory Hicks

> -- 
> Paul Vixie

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



[IP] VeriSign prepares to relaunch "Site Finder" -- calls technologists "biased"

2004-02-09 Thread Gregory Hicks

 From Dave Farber's IP list...
 
 ---


http://www.washingtonpost.com/wp-dyn/articles/A25819-2004Feb9_2.html

VeriSign Reconsiders Search Service

"Site Finder was not controversial with users, 84 percent of whom said
they liked it as a helpful navigation service," said Tom Galvin,
VeriSign's vice president of government relations. "We continue to look
at ways we can offer the service while addressing the concerns that
were raised by a segment of the technical community."

Galvin said that the continued opposition stems from "an ideological
belief by a narrow section of the technological community who don't
believe you should innovate the core infrastructure of the Internet."

Critics also claim that VeriSign must run the domains as a public
trust, not a profit-making opportunity. VeriSign is the sole operator
of the dot-com and dot-net registries under a contract with ICANN.

"I don't begrudge them their profit, but someone in an effectively
regulated monopoly position shouldn't use their power for their own
profit, beyond the terms under which the community gave it to them,"
said Steven Bellovin, co-director of the Internet Engineering Task
Force's Security Area.

Paul Rothstein a law professor at Georgetown University and a paid
VeriSign consultant, said that the critics have some legitimate
objections but others are motivated by the scientific and technology
communities' "bias on policy."

Still, he added, it would be tough for VeriSign to win the public
relations war because its opponents are highly regarded technologists.

ICANN will reserve judgment until VeriSign decides to relaunch Site
Finder, said General Counsel John Jeffrey. VeriSign assured ICANN that
it would give 60 to 90 days' warning to resolve any remaining
technological problems, Jeffrey said.

In the meantime, ICANN is waiting for a final report on Site Finder
from its Security and Stability Advisory Committee. Committee Chairman
Steve Crocker said he doubts that Site Finder can be changed enough
that it won't threaten the Internet's underlying infrastructure.

"I thought people were relieved that they took it down and it's hard to
believe that there would be any quietness if they brought it back,"
Crocker said.



_Related Coverage_
• 
<http://www.washingtonpost.com/wp-dyn/articles//wp-dyn/articles/A57670-2003Oct7.html>
VeriSign Service Spawns More Criticism 
(washingtonpost.com, Oct 7, 2003)

<http://www.washingtonpost.com/wp-dyn/articles//wp-dyn/articles/A42107-2003Oct3.html>
VeriSign Agrees To Shut Down Search Service 
(The Washington Post, Oct 4, 2003)
• 
<http://www.washingtonpost.com/wp-dyn/articles//wp-dyn/articles/A64437-2003Sep25.html>
With Site Finder, VeriSign Sparks Internet-wide Criticism
(washingtonpost.com, Sep 25, 2003)

_ICANN Headlines_

<http://www.washingtonpost.com/wp-dyn/articles//wp-dyn/articles/A13538-2004Feb4.html>
Congress Eyes Internet Fraud Crackdown 
(washingtonpost.com, Feb 4, 2004)

<http://www.washingtonpost.com/wp-dyn/articles//wp-dyn/articles/A23641-2004Jan16.html>
XO Owner Again Bids For Telecom 
(The Washington Post, Jan 17, 2004)

<http://www.washingtonpost.com/wp-dyn/articles//wp-dyn/articles/A47327-2003Dec8.html>
U.N. Sets Aside Debate Over Control of Internet 
(The Washington Post,Dec 9, 2003)

<http://www.washingtonpost.com/wp-dyn/technology/techpolicy>
Tech Policy Section

-

Archives at: http://www.interesting-people.org/archives/interesting-people/


- End Forwarded Message -


---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

Just because "We've always done it that way" is not necessarily a good
reason to continue to do so...  Grace Hopper, Rear Admiral, United
States Navy



RE: MS is vulnerable

2004-01-29 Thread Gregory Hicks

(Setting Reply-to: [EMAIL PROTECTED] )

> From: "Matthew Kaufman" <[EMAIL PROTECTED]>
> Date: Thu, 29 Jan 2004 09:31:58 -0800
> 
> > This MS v Unix debate is a very interesting discussion.
> 
> To some of you. To others of us, it is a long-dead horse.
> 
> > However, I'd like to take a moment to inject my observations.
> 
> I'd like the NANOG list to be restricted to Network Operations
> issues, or at the very least, Network Operations plus the politics and
> ranting thereof.

And this is why we have the nanog offtopic list at 

[EMAIL PROTECTED]

>From a previous message In March 2003:

> This seems like an apropos point to remind people of the existance of
> [EMAIL PROTECTED]  All of the friendly bickering with
> the people you know and love and/or loathe; 100% less of the
> annoying-of-Susan and people-looking-for-operational-content.
>
> To subscribe, drop a line to [EMAIL PROTECTED]

Regards,
Gregory Hicks
---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

Just because "We've always done it that way" is not necessarily a good
reason to continue to do so...  Grace Hopper, Rear Admiral, United
States Navy



Re: Sabotage investigation of fiber cuts in Northwest

2003-11-02 Thread Gregory Hicks


> From: [EMAIL PROTECTED]
> Date: Sun, 02 Nov 2003 22:12:20 -0500
> 
> On Sun, 02 Nov 2003 21:37:30 EST, "Robert M. Enger" 
<[EMAIL PROTECTED]>  said:
> 
> > You'd think after three previous disruptions, that Qwest would
> > have enabled some form of redundancy.
> 
> Redundancy hell.  How about a *PADLOCK*?

You mean that these places aren't even locked?  Who has (had) the key?
That'd be the first place I looked.

Oh well...  Back to lurk mode.

---------
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



SEC-Letter (was: Re: NOAA warning for rf communications)

2003-10-24 Thread Gregory Hicks
he "Atmospheric" in NOAA does not extend to the
astral.  Absolutely no funds are provided for solar observation.  Such
activities are rightly the bailiwick of the National Aeronautics and
Space Administration and the Air Force.

Needless to say, there is no evidence to suggest that NASA and the Air
Force agree that one or the other, or both, should operate the Nation's
civilian space weather service.

CONCLUSION
Unless SEC's appropriation level is increased in Conference, the best
outlook is that Space Environment Center shrinks to less than half its
capability (House mark), and the worst is that space weather will
disappear from NOAA (Senate mark).  In this case, the Nation's space
weather service will have to be reconstituted in some other agency, at
greater cost and lesser capability, to meet the Nation's needs.


**
Ernest Hildner
Director, Space Environment CenterTel: 303-497-3311
Manager, NOAA Space Weather Program   Fax: 303 497-3645
325 Broadway, Boulder, CO 80305   www.sec.noaa.gov

- End Forwarded Message -


---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

Just because "We've always done it that way" is not necessarily a good
reason to continue to do so...  Grace Hopper, Rear Admiral, United
States Navy



Re: Wired mag article on spammers playing traceroute games with trojaned boxes

2003-10-09 Thread Gregory Hicks


> Date: Thu, 9 Oct 2003 10:51:08 -0500
> Subject: Re: Wired mag article on spammers playing traceroute games with 
trojaned boxes
> From: Chris Boyd <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> 
> 
> 
> On Thursday, October 9, 2003, at 10:04  AM, Suresh Ramasubramanian 
> wrote:
> 
> >
> > http://www.wired.com/news/business/0,1367,60747,00.html
> >
> > -- 
> > srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
> > manager, outblaze.com security and antispam operations
> >
> >
> >
> 
> I found one of these today, as a matter of fact.  The spam was 
> advertising an anti-spam package, of course.
> 
> The domain name is vano-soft.biz, and looking up the address, I get
> 
> Name:vano-soft.biz
> Addresses:  12.252.185.129, 131.220.108.232, 165.166.182.168, 
> 193.165.6.97
>12.229.122.9
> 
> A few minutes later, or from a different nameserver, I get
> 
> Name:vano-soft.biz
> Addresses:  131.220.108.232, 165.166.182.168, 193.165.6.97, 12.229.122.9
>12.252.185.129
> 
> This is a real Hydra.  If everyone on the list looked up vano-soft.biz 
> and removed the trojaned boxes, would we be able to kill it?

This is NOT a hydra.  The IP addresses are the same but presented
differently.  This happens because of THIS setup in DNS:

vano-soft.biz.  IN A 131.220.108.232
IN A 165.166.182.168
IN A 193.165.6.97
IN A 12.229.122.9
IN A 12.252.185.129

This setup is called "Round-robin" because the name server provides the
first IP address FIRST to the first query; the second IP address first
to the second query; the third IP address first to the third query; ...
to the fifth query.  Then it starts over with the first IP Address in
response to the sixth query...

In each case, ALL IP addresses are provided in response to each query.

Yes, the TTL may be a bit low, but it is a workable setup...

And no, I am NOT condoning what vano-soft.biz is doing, just trying to
explain why, when you checked the first time, you got one answer, and
when you checked sometime later, you got a different answer...

(Donning flameproof underwear...)

Regards,
Gregory Hicks

---

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

Just because "We've always done it that way" is not necessarily a good
reason to continue to do so...  Grace Hopper, Rear Admiral, United
States Navy



Re: FW: e-bay

2003-09-26 Thread Gregory Hicks


> From: Mike Tomasura <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: FW: e-bay
> Date: Fri, 26 Sep 2003 12:25:52 -0400
> 
> 
> 
> > I guess e-bay had some problems? A few users got this message from them.
> > 
> > Dear eBay user!
> > 
> > At 09.24.2003 our company has lost a number
> > of accounts in the system during the database
> > maintenance. If you have an active account, please
> > click on the link below to update your credit card
> > information. If you have problems with your account, please let us know
> > at email [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>

Nope!  It is a 'credit card harvesting scam'...  (Or whatever the term
dujour is today...)

Good for identity theft purposes and for stealing credit card numbers
to run up someone else's bill...

I mean...  Look at it:  Poor grammar, poor punctuation, ...

> > 
> > https://cgi.ebay.com/saw-cgi/eBayISAPI.dll?UpdateInformation
> > <https://e%31bay.com/saw-cgi/?UpdateInformation> 

Also, if this is for real, it looks like eBay has bigger problems:
Connection refused to both of these URLs.

Regards,
Gregory Hicks

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | 

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

Just because "We've always done it that way" is not necessarily a good
reason to continue to do so...  Grace Hopper, Rear Admiral, United
States Navy



Re: VeriSign SMTP reject server updated

2003-09-25 Thread Gregory Hicks


> Date: Thu, 25 Sep 2003 11:12:05 -0400 (EDT)
> From: Gerald <[EMAIL PROTECTED]>

[...snip...]
> 
> Ugh...sucked in. Can we get back to network operation discussions. Someone
> make a Verisign gripe/commiserate list. I'll sign up.

[EMAIL PROTECTED] ...?

Regards,
Gregory Hicks


> 
> G
> 
> - How are ya? Never been better, ... Just once I'd like to be better.

-------
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | 

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

Just because "We've always done it that way" is not necessarily a good
reason to continue to do so...  Grace Hopper, Rear Admiral, United
States Navy



Re: Some very strange network behaviors

2003-09-11 Thread Gregory Hicks


> Date: Thu, 11 Sep 2003 13:35:37 -0700
> From: Crist Clark <[EMAIL PROTECTED]>
> 
> Mike Lewinski wrote:
> > 
[...snip...]
> OS's IP stack is misbehaving badly, Zone Alarm should not see the traffic
> on the LAN that does not have his MAC address on it.
> 
> How would a switch/router be deciding that these other IP addresses 
> should go to his PC's NIC (MAC address)?

Unless the switch got confused when the MAC address changed as it
did...?  Then the switch would go into "broadcast" or "flood" mode
where every packet is delivered to evey port because the switch doesn't
know where to send it.

Regards,
Gregory Hicks

> -- 
> Crist J. Clark   [EMAIL PROTECTED]
> Globalstar Communications(408) 933-4387

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: virus or hacked?

2003-08-20 Thread Gregory Hicks

> From: Chris Todd <[EMAIL PROTECTED]>
> Date: Wed, 20 Aug 2003 09:32:30 -0700
> 
> 
> Good morning:
> I was wondering if anyone has seen this message on a win2k server
> before and might be able to help me

Chris:

This is the new spam technique using the windows "admin" pop-up
vector.

Supposed to be used by an Admin to send messages of some import to all
their users on a particular server.

That the popup showed up means you have some patching to do as well as
some (3 - I think) ports to block on your firewall.

See the NANOG archives for more details.

Regards,
Gregory Hicks

> 
> Message from destroyer to you on 8/19/2003 11:24:53pm
> Make this your last pop-up ever Destroy all these pop-up for a 
fraction of
> the price of our competitors!!!
> go to www. messagdestroyer.net
> 
> This is all in a plain windows box(gray box with an ok button at the 
bottom
> and the X is the upper right corner)
> 
> Any help or insight would much appreciated!!
> 
> Thanks
> Chris Todd
> Computer Technician
> Western Newspapers, Inc.
> (928)775-2499
> 
> Resistance is Futile

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: To send or not to send 'virus in email' notifications?

2003-08-20 Thread Gregory Hicks


> Date: Wed, 20 Aug 2003 10:25:28 -0400
> From: Joe Maimon <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: To send or not to send 'virus in email' notifications?
> 
> 
> Considering the amount of email traffic generated by responding to 
> forged  virus laden email from culprits like sobig should email virus 
> scanning systems be configured to send notifications back to sender or 
not?

Not.




Re: maybe this should be on sec focus but.

2003-08-01 Thread Gregory Hicks

It seems to come with a message attachment of "message.zip".

The body of the message goes something like this:
-
From: Admin 
Sent: Friday, August 01, 2003 11:25 AM
To: 
Subject: your account 
Importance: High



Hello there,

I would like to inform you about important information regarding your
email address. This email address will be expiring. Please read
attachment for details.

---
Best regards, Administrator


Attachment seems to be "message.zip"
-
I would have sent this to the security list, but I got dropped today.

Regards,
Gregory Hicks

> Date: Fri, 1 Aug 2003 14:27:26 -0400
> From: Damian Gerow <[EMAIL PROTECTED]>
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> Subject: Re: maybe this should be on sec focus but.
> X-GPG-Key-Id: 0xB841F142
> X-GPG-Fingerprint: C7C1 E1D1 EC06 7C86 AF7C  57E6 173D 9CF6 B841 F142
> 
> 
> Thus spake Drew Weaver ([EMAIL PROTECTED]) [01/08/03 14:25]:
> > I have had like 4 users call and tell me that they're 
receiving
> > email from [EMAIL PROTECTED] with a unidentified attachment, 
possibly a
> > worm that exploits the new Microsoft vulnerability last week, all 4 
of these
> > people reported that their updated this morning antivirus software 
missed
> > it.
> 
> The latest NAI definitions catch it as Exploit-Codebase (which I 
*think* is
> just a general catchall).  We have an open ticket with F-Prot for 
this, and
> are currently waiting on updated definitions from them.
> 
>   - Damian

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



Re: New Cisco Vulnerability

2003-07-16 Thread Gregory Hicks

> From: "Vincent J. Bono" <[EMAIL PROTECTED]>
> Date: Wed, 16 Jul 2003 15:17:54 -0400
> 
> Hello All,
> 
> There seem to be rumors going around that there is a new major Cisco
> vulnerability but only the major backbones are being given fixes
> right now.

Not 100% true...  Anyone with a Catalyst 4000/5000/6000 can get it -
free.  See this URL for details.

http://www.cisco.com/warp/public/707/cisco-sa-20030709-swtcp.shtml

> Something about packets malformed in a certain manner cause the
> router to wedge.

True.

Regards,
Gregory Hicks

> Can anyne shed any light on or off list?
> 
> -vb
> 
> 
> 
> 
> 

-----
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton



FC: Colorado state senate delays vote on "mini-DMCA" bill

2003-04-01 Thread Gregory Hicks
bled programming services.   This private viewing has been
generally legal under federal law (Satellite Viewers Rights Act), but
very few of the program providers have actually given any kind of
express consent for the public to watch and thus the mini-DMCA
provisions requiring such consent would possibly render even possession
of such dishes illegal in states where such laws are in effect.

And while the argument is more stretched, it also seems that
someone might argue that police scanners used to monitor public safety
communications (expressly permitted under federal law) might fall under
this rubric too, as the public safety agencies may not have give
express consent.   Under the Mass. bill this would criminalize mere
possession of such radio equipment.

-- 
Dave Emery N1PRE,  [EMAIL PROTECTED]  DIE Consulting, Weston, Mass 02493
PGP fingerprint 1024D/8074C7AB 094B E58B 4F74 00C2 D8A6 B987 FB7D F8BA 8074 C7AB




-
POLITECH evening reception in New York City at 7 pm, April 1, 2003 at CFP:
http://www.politechbot.com/events/cfp2003/
-
POLITECH -- Declan McCullagh's politics and technology mailing list
You may redistribute this message freely if you include this notice.
To subscribe to Politech: http://www.politechbot.com/info/subscribe.html
This message is archived at http://www.politechbot.com/
Declan McCullagh's photographs are at http://www.mccullagh.org/
Like Politech? Make a donation here: http://www.politechbot.com/donate/
-


- End Forwarded Message -


---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

Just because "We've always done it that way" is not necessarily a good
reason to continue to do so...  Grace Hopper, Rear Admiral, United
States Navy



Re: Getting a Host Record

2003-03-13 Thread Gregory Hicks


> Date: Wed, 12 Mar 2003 19:01:16 -0800
> From: [EMAIL PROTECTED] (Will Yardley)
> To: Gregory Hicks 
> Subject: Re: Getting a Host Record
> 
> On Wed, Mar 12, 2003 at 06:31:07PM -0800, Gregory Hicks wrote:
> 
> > whois -h whois.completewhois.com dreamhost.com
> > Elan Complete Whois Server, Version 0.83h05, compiled on Jan 27, 2003, 
> > 18:21 PDT
> 
> The original message was about getting a HOST (i.e., nameserver) record,
> not getting the whois record for the domain itself.

Sorry!  After I sent that off, I re-read your message...  (I need to
read, re-read, and then again, I think...)

I don't recall that I've EVER been able to get info on an individual
host as you want.

I've been using 'whois' since the early-mid '80s whilst I was running
the Info-IBMPC Digest (it is now defunct when I got out of the
military...).

I used to take a FQDN host name, submit to whois, and if I got a "no
such record", I'd back the host name off, then any sub-domains, then
...  Until I got a match that looked 'reasonable'.  Whois stopped being 
convenient to use about the time Network Solutions went 'commercial' (about '98 
or so?).

This is what I did for ns1.dreamhost.com.  There used to be fully
maintained 'hinfo' records in DNS, but not, I believe, in the whois
database...  I think the best you can do now is to get SOA for an
individual host...

Oh well.  I'll read better next time.

regards,
Gregory Hicks

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton

Just because "We've always done it that way" is not necessarily a good
reason to continue to do so...  Grace Hopper, Rear Admiral, United
States Navy



Re: Level3 routing issues?

2003-01-25 Thread Gregory Hicks


> From: "Jack Bates" <[EMAIL PROTECTED]>
> To: "Avleen Vig" <[EMAIL PROTECTED]>, "Bill Woodcock" 
<[EMAIL PROTECTED]>
> Cc: "Mikael Abrahamsson" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
> Subject: Re: Level3 routing issues?
> Date: Sat, 25 Jan 2003 11:28:59 -0600
> 
> 
> From: "Avleen Vig"
> 
> >
> 
> > Let's not blame MS for admins who don't know how to secure their 
> > boxes :-)
> > A patch was released mid-2002 and was also part of SQL Server SP3
> >

Actually, I think a patch has been around since 1996 or so...  See CERT
advisory posted much earlier last night.

Regards,
Gregory Hicks

> Has it been verified that the mid-2002/SP3 patches work? I haven't 
> heard anything difinitive on this yet.
> 
> Jack Bates
> Network Engineer
> BrightNet Oklahoma
> 

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton




Re: Bin Laden Associate Warns of Cyberattack

2002-11-19 Thread Gregory Hicks

Charter doesn't apply here...: [EMAIL PROTECTED]

Regards,
Gregory Hicks

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff




Re: Whitehouse Tackels Cybersecurity

2002-09-20 Thread Gregory Hicks


There IS another list that goes to about the same group of people...

NANOG-OT  [EMAIL PROTECTED]

Just a thought...

Regards,
Gregory Hicks

> Date: Fri, 20 Sep 2002 14:39:08 +0200
> From: Brad Knowles <[EMAIL PROTECTED]>
> 
> At 8:05 AM -0400 2002/09/20, Susan Harris wrote:
> 
> >  Brad, this message contains no technical content.  Please keep political
> >  commentary in private email. Refer to the NANOG list AUP:
> >
> > http://www.nanog.org/aup.html
> >
> >  Upon your next AUP violation, we'll need to remove your posting priveleges
> >  from the list.
> >
> >  Susan Harris, Ph.D.
> >  Merit Network/Univ. of Mich.
> 
>   If I'm going to get one of these messages every time I submit 
> something to the list, then you might as well go ahead and 
> unsubscribe me now.
> 
>   If the list isn't about discussion, and other people continue to 
> post on the same subjects but don't get treated the same way, then 
> you have some very serious personal issues that you need to resolve.
> 
> -- 
> Brad Knowles, <[EMAIL PROTECTED]>
> 
> "They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety."
>  -Benjamin Franklin, Historical Review of Pennsylvania.
> 
> GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI$ P+>++ L+ !E W+++(--) N+ !w---
> O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
> tv+(+++) b+() DI+() D+(++) G+() e++> h--- r---(+++)* z(+++)

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

You can have it done good, fast, or cheap -- pick any two.




Re: IP address fee??

2002-09-05 Thread Gregory Hicks



> Date: Thu, 05 Sep 2002 11:00:43 -0700
> From: "Jeff Shultz" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: IP address fee??
> 
> 
> Possibly because that is what they are still teaching them as in
> school? 

As much as I hate to interject this...  CIDR is fairly new to me, but
referring to a "Class C" address conveys some pretty specific information ...
Similar to referring to 139.98/24.

To *me*, Class C implies a specific address range (probably no longer
needed) with specific masks, et al...

Oh well, back to lurk mode...

Regards,
gregory Hicks

> 
> Seriously... I'm not sure that the teachers I had for networking and
> systems admin had ever heard of CIDR. 
> 
> The textbooks hadn't. It was a nice bump in the learning curve when I
> hit the real world. 
> 
> *** REPLY SEPARATOR  ***
> 
> On 9/5/2002 at 1:48 PM Richard A Steenbergen wrote:
> 
> >On Thu, Sep 05, 2002 at 01:36:27PM -0400, Derek Samford wrote:
> >> Shane,
> >> There is a practice on that (At least here.). Generally
> we
> >> provide a Class C to our customers at no additional charge, but we
> have
> >
> >Why in this day and age, 9 years after the invention of CIDR, are we
> still 
> >refering to "class C"'s?
> >
> >-- 
> >Richard A Steenbergen <[EMAIL PROTECTED]>
> http://www.e-gerbil.net/ras
> >PGP Key ID: 0x138EA177  (67 29 D7 BC E8 18 3E DA  B2 46 B3 D8 14 36 FE
> B6)
> 
> 
> -- 
> Jeff Shultz
> Network Support Technician
> Willamette Valley Internet
> 503-769-3331 (Stayton)
> 503-390-7000 (Salem)
> [EMAIL PROTECTED] 
> 
> ...most of us have as our claim to fame the ability to talk to 
> inanimate objects and convince them they want to listen to us.
>   -- Valdis Kletnieks in a.s.r
> 

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1  | Fax:  408.894.3400
San Jose, CA 95134   | Internet: [EMAIL PROTECTED]

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

You can have it done good, fast, or cheap -- pick any two.




FC: RIAA presses Verizon for name of peer-to-peer subscriber (was: Verision being sued?)

2002-08-21 Thread Gregory Hicks



- Begin Forwarded Message -

Date: Wed, 21 Aug 2002 10:55:57 -0600
To: [EMAIL PROTECTED]
From: Declan McCullagh <[EMAIL PROTECTED]>
Subject: FC: RIAA presses Verizon for name of peer-to-peer subscriber
X-Author: Declan McCullagh is at http://www.mccullagh.org/
X-News-Site: Cluebot is at http://www.cluebot.com/



http://news.com.com/2100-1023-954658.html

Music body presses anti-piracy case
By Declan McCullagh
August 21, 2002, 6:54 AM PT

ASPEN, Colo.--In what may become a new legal front in its war against
online copying, the Recording Industry Association of America has
asked a federal court for help in tracing an alleged peer-to-peer
pirate.

On Tuesday, the RIAA asked a federal judge in Washington, D.C., for an
order compelling Verizon Communications to reveal the name of a
customer accused of illegally trading hundreds of songs. Citing
privacy concerns and potential legal liability, Verizon has refused to
comply with a subpoena the RIAA sent last month.

"It's not that they don't want to turn over the name," said Mitch
Glazier, an RIAA senior vice president. "It's that they don't want to
be liable for turning over a subscriber's name."

Until now, the entertainment industry has relied on civil lawsuits
aimed at corporations, not individuals, to limit widespread copyright
infringement on peer-to-peer networks. Now, however, the RIAA is
revising its strategy and appears ready to sue individuals swapping
songs over the Internet.

At issue in the RIAA's request is an obscure part of the Digital
Millennium Copyright Act (DMCA) that permits a copyright owner to send
a subpoena ordering a "service provider" to turn over information
about a subscriber. It is not necessary to file a lawsuit to take
advantage of the DMCA's expedited subpoena process.

[...]




-
POLITECH -- Declan McCullagh's politics and technology mailing list
You may redistribute this message freely if you include this notice.
To subscribe to Politech: http://www.politechbot.com/info/subscribe.html
This message is archived at http://www.politechbot.com/
Declan McCullagh's photographs are at http://www.mccullagh.org/
-
Like Politech? Make a donation here: http://www.politechbot.com/donate/
Recent CNET News.com articles: http://news.search.com/search?q=declan
CNET Radio 9:40 am ET weekdays: http://cnet.com/broadband/0-7227152.html
-


- End Forwarded Message -----


-----
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton

You can have it done good, fast, or cheap -- pick any two.




Re: Microslosh vision of the future

2002-08-12 Thread Gregory Hicks



> Date: Mon, 12 Aug 2002 12:23:05 -0400
> From: William Warren <[EMAIL PROTECTED]>
> 

> a little bit of humor never hurt anything..not even nanog will be 
> destroyed..

How about <[EMAIL PROTECTED]>?

Wasn't this set up for this very purpose?

> Sam Hayes Merritt, III wrote:

> > does this belong on nanog?

> >   On Mon, 12 Aug 2002, William Warren wrote:

> > >  Microsoft has shown itself time and time again it thinks it can 
> > >  get away with something like that and going by Microsoft's past 
> > >  behaviorsdo not be surprised to see Microsoft try this exact 
> > >  scheme later on down
> > >  [...snip rest of rhetoric...]

Regards,
Gregory Hicks

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton

You can have it done good, fast, or cheap -- pick any two.




Re: The Cidr Report - web site inaccessible ?

2002-07-14 Thread Gregory Hicks



> Date: Sun, 14 Jul 2002 21:36:01 +0300 (IDT)
> From: Rafi Sadowsky <[EMAIL PROTECTED]>
> 
>  Is it just me ?

Internet-wide.

I sent a note to Philip Smith re this very item.

The wesite IS down.

> Date: Sun, 14 Jul 2002 08:56:34 +1000
> From: Philip Smith <[EMAIL PROTECTED]>
>
> Gregory,
>
> Yes, the website is down at the moment due to a failure on the server 
- > I'm told it will be back in the next few days... Sorry about this.
> We'd no obvious way of telling everyone without spamming the whole
> mailing list...
>
> (If it isn't back by the next report, I'll have to do that..)
>
> best wishes!
>
> philip
> --

At 00:07 13/07/2002 -0700, Gregory Hicks wrote:
>Um-m-m-m...  I tried to get to your report...  But failed with this
>error for each URL (listed below) shown in the CIDR report.
[...snip...]
Unquote

Regards,
Gregory Hicks

> 
[...snip remainder of both messages...]

-
Gregory Hicks   | Principal Systems Engineer
Cadence Design Systems  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax:  408.894.3479
San Jose, CA 95134  | Internet: [EMAIL PROTECTED]

Never attribute to malice that which is adequately explained by
ignorance or stupidity.

Asking the wrong questions is the leading cause of wrong answers

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton

You can have it done good, fast, or cheap -- pick any two.




Re: anybody else been spammed by "no-ip.com" yet?

2002-05-03 Thread Gregory Hicks



> Date: Fri, 3 May 2002 15:27:08 -0700 (PDT)
> From: Scott Granados <[EMAIL PROTECTED]>
> 
> I realize this statement I'm about to make is going to open a huge... 
> can o worms but ... and hoefully everyone knows I mean this in the most 
> friendly responsible way ever but I'm not sure entirely what the big 
> deal with spam is.  Honestly sure I get it like everyone else, in some 
[...snip...]
> money. Today with flat rate access and many people not paying on a per 
> packet basis it seems to me that the responsibility lies with the end 
> user to filter properly and or dress that delete key.  I always shut 
[...snip...]

The problem with this is that, yes, to the END USER, there is no direct
cost involved.

However, in order to maintain the same level of service, the ISP is
forced to go get a bigger pipe and/or bigger, faster routers and/or
servers.  (Raises prices a bit per account)

The transit provider raises the costs to the ISP because the packet
count has gone way up.

The backbone provider has equipment running a bit hotter because of the
increased packet count.  This may cause them to either increase the
bill to the transit provider and/or procure bigger and better equipment
(to handle the load) before their planned replacement time...

The peers to this ISP are forced to get either bigger pipes and/or more
costly equipment (routers) in order to handle the increased packet
count they might be seeing.

In all of this, the bozo (well..., 'user' really) originating the email
(well, spam) has not paid a thing other than a temporary interruption
in service for one of his throw-away accounts and is still paying a
'flat rate' for the POP (dial-in) service that HIS isp is providing.

For snail mail junk mail (aka spam), the mailer bears ALL of the costs
and, if there is insufficient returns on their junk mail, is forced to
stop.  A 'spammer' does not see these costs and thus has no incentive
to find another model to do business.

We get, for our 7K users, upwards of 25,000+ unwanted messages per day
that make it past our not so rigid filters.

My $0.02 worth.  Use the delete key...

Regards,
Gregory Hicks


> 
> On Fri, 3 May 2002, Mitch Halmu wrote:
> 
> > 
> > 
> > On Fri, 3 May 2002, Paul Vixie wrote:
> > 
> > > > I hate to sound like the big idiot here, but what exactly in the email
> > > > you received indicates no-ip.com spammed? It looks to me like you just
> > > > have some secret "admirer" who thought you wanted a no-ip.com account,
> > > > and no-ip.com emailed you to confirm that you do want the account.
> > > 
> > > spam is like pollution in that (a) whenever you're not sure if you're
> > > doing it, you probably are, and (b) if everybody did whatever it is,
> > > life would be universally worse for, well, everybody.
> > > 
> > > > Random disclaimer: Yes, we're a competitor of no-ip.com's... And yes, we
> > > > used to send similar emails to people signing up for an account,
> > > > although nowadays instead of sending them an initial password we send a
> > > > confirm URL instead.
> > > 
> > > that's the right approach.  no-ip's problem was they presumed my 
permission.
> > >
> > 
> > You don't even have to be in the "big idiot" league to figure out that in 
> > both the "wrong" and the "right" approach as sanctioned above by a higher 
> > authority, an email message (aka spam) is sent to the presumed subscriber.
> > 
> > One sends a password, one asks for permission to issue a password on their
> > site. What's the difference in the annoy factor, if indeed one were to be 
> > subscribed by a secret "admirer"?
> > 
> > Mr. Halmu chose to think, rather than bindly obey...
> > 
> > --Mitch
> > NetSide




Re: UUNET instability?

2002-04-25 Thread Gregory Hicks



> Date: Thu, 25 Apr 2002 14:00:44 -0500
> From: J Bacher <[EMAIL PROTECTED]>
> 
> At 02:51 PM 4/25/2002 -0400, Sean Donelan wrote:
> 
> >That's unusual.  A train derailment usually effects more than one
> >provider, and normally does not cause network-wide BGP resets.
> 
> Some C&W transport was lost as well.  They also have a master ticket open.
> 
> >On Thu, 25 Apr 2002, Daniel Kelley wrote:
> > > UUNET support says that the outage relates to a train derailment in the
> > > northeast that occured this morning.  master ticket no. 562655.

Thought this happened YESTERDAY - 4/24 ...  Another one?

> > >
> > > dan
> > >
> > > > Anyone else seeing routing instability through UUNET or have any more
> > > > details?  I saw a significant drop in my inbound and outbound traffic to
> > > > them around 10:00AM EDT.  UUNET has a prompt on their phone menus about
> > > > network instability, but didn't elaborate.  Their NOC doesn't have any
> > > > more details as of yet that they're passing along.

---
Gregory Hicks| Principal Systems Engineer
Cadence Design Systems   | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1
San Jose, CA 95134

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff