Re: UUNet Offer New Protection Against DDoS

2004-03-04 Thread James
in our case, we do the following setup: 1. allow up to /32 within customer's prefix(es) 2. check for 27552:666 (null comm), if matched, set to null'd nexthop 3. now match any prefixes that are longer than /22 on 0.0.0.0/1, that are longer than /22 on

Re: dealing with w32/bagle

2004-03-04 Thread Curtis Maurand
Or, like me, nobody knows about them. Maybe its time we educate our users. Curtis On Wed, 3 Mar 2004, Laurence F. Sheldon, Jr. wrote: Curtis Maurand wrote: Until there's an easy way of getting a file to your friend down the street that's as easy as sending an email, we're stuck

Re: dealing with w32/bagle

2004-03-04 Thread Jeff Shultz
** Reply to message from Laurence F. Sheldon, Jr. [EMAIL PROTECTED] on Wed, 03 Mar 2004 22:04:44 -0600 Curtis Maurand wrote: Until there's an easy way of getting a file to your friend down the street that's as easy as sending an email, we're stuck with this. There are actually

Re: dealing with w32/bagle

2004-03-04 Thread Laurence F. Sheldon, Jr.
Jeff Shultz wrote: ** Reply to message from Laurence F. Sheldon, Jr. [EMAIL PROTECTED] on Wed, 03 Mar 2004 22:04:44 -0600 Curtis Maurand wrote: Until there's an easy way of getting a file to your friend down the street that's as easy as sending an email, we're stuck with this. There are

RE: UUNet Offer New Protection Against DDoS

2004-03-04 Thread Lumenello, Jason
No, but it sounds like SLA payouts are made in the event that they fail to respond in 15 minutes after a call is made. Maybe I am misinterpreting their SLA, but this seems much different then offering blanket payments for DoS down time. I will give them credit for guaranteeing a response in 15

RE: UUNet Offer New Protection Against DDoS

2004-03-04 Thread Lumenello, Jason
This sounds like a good idea for us to consider. I think DoS attacks typically get erased in the 95% discard a lot of people use in billing though, but it still has value for the customer. Thanks! Jason -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: dealing with w32/bagle

2004-03-04 Thread Roland Perry
In article [EMAIL PROTECTED], Jeff Shultz [EMAIL PROTECTED] writes Okay, so what are several ways to share files with a friend, where you don't share any accounts or passwords, and where only your friend will be able to access them? Putting the files into an obscurely named and unlinked directory

RE: UUNet Offer New Protection Against DDoS

2004-03-04 Thread Lumenello, Jason
-Original Message- From: Christopher L. Morrow [mailto:[EMAIL PROTECTED] Sent: Thursday, March 04, 2004 11:50 AM To: Lumenello, Jason Cc: Suresh Ramasubramanian; Randy Bush; [EMAIL PROTECTED] Subject: RE: UUNet Offer New Protection Against DDoS On Thu, 4 Mar 2004, Lumenello,

Re: dealing with w32/bagle

2004-03-04 Thread Stephen Milton
dropload.com seems to me to be the perfect model for anonymous file delivery over the internet. Their system doesn't use SSL yet, but it would be the logical next step. Here is their description: Dropload is a place for you to drop your files off and have them picked up by someone else at a

Re: UUNet Offer New Protection Against DDoS

2004-03-04 Thread Deepak Jain
They also are not guaranteeing that opening up the ticket won't take more than 15 minutes. I know a number of networks (when they hear you want to open a ticket for something important), put you on hold, call/page whoever it is and then take 10 minutes to open a ticket. I know I may be

w32/bagle variants

2004-03-04 Thread Sam Stickland
For the people talking about how quickly the variants have been produced ;) http://news.bbc.co.uk/1/hi/technology/3532009.stm Seems the authors are taunting each other in the code. Sam

Re: SPAM Prevention/Blacklists

2004-03-04 Thread Anne P. Mitchell, Esq.
Also, I like sender verification, but that's me. i used it for some time, and reluctantly shut it down. blocked a lot of email abuse, but too many false positives for my taste. Could you go into more detail? ... Maybe I have others I just don't know about? How many people send legit e-mail

Re: UUNet Offer New Protection Against DDoS

2004-03-04 Thread Avleen Vig
On Thu, Mar 04, 2004 at 03:39:30PM +, Alex Bligh wrote: A lot of people seem to be doing this. there is nothing (well very little) new in the world: http://www.merit.edu/mail.archives/nanog/1999-07/msg00083.html Does anyone know if Cogent offer such a community? Anyone from Cogent on

Re: dealing with w32/bagle

2004-03-04 Thread Crist Clark
Laurence F. Sheldon, Jr. wrote: Jeff Shultz wrote: ** Reply to message from Laurence F. Sheldon, Jr. [EMAIL PROTECTED] on Wed, 03 Mar 2004 22:04:44 -0600 Curtis Maurand wrote: Until there's an easy way of getting a file to your friend down the street that's as easy as sending an email, we're

Routing Policy

2004-03-04 Thread Beprojects.com
Does anybody have a list of the hot-potato/cold-potato routing policy of the 10-20 biggest ISP's (MCI, Sprint, ATT, Verio, etc)? I know Boardwatch used to publish that in their yearly ISP guide, but I haven't been able to find it since they went out of print. Peder

Re: SPAM Prevention/Blacklists

2004-03-04 Thread Steve Linford
From Richard Welty, received 3/3/04, 19:36 -0500 (GMT): Mind if I ask why you don't use the sbl-xbl? keep in mind that the sbl is the combination of sbl classic with the xbl, where the xbl is currently a feed of the cbl that may at a later date incorporate additional lists or data. I trust you

Bagle, not that smart

2004-03-04 Thread Rubens Kuhl Jr.
This is a bagle sample I've received; it seems they have somewhat to learn about ccTLDs (there is no org.br domain), and to what FROM to choose (an address for university adminissions wouldn't send you a support message). Rubens - Original Message - From: [EMAIL PROTECTED] To: [EMAIL

RE: Bagle, not that smart

2004-03-04 Thread Alon Tirosh
Bagle seems to simply grab everything up to and not including the second '.' Right-to-Left. I doubt they took subdomains into consideration... Im sure that now that you mentioned it here, this will be fixed in the next revision (I wonder if they file bugs with themselves?) -Original

iMPLS benefit

2004-03-04 Thread sonet twister
Hello, i heard there is a way to run MPLS for layer3 VPN(2547) service without needing to run label switching in the core(LDP/TDP/RSVP) butstraight IP (aka iMPLS). Anyone runningthis in a live network yet? Thanks in advance for any information. Suki Lim Blacksburg, VA ee.VA.TECH Do you Yahoo!?

Re: dealing with w32/bagle

2004-03-04 Thread Dr. Jeffrey Race
On Thu, 4 Mar 2004 10:17:47 -0800, Stephen Milton wrote: dropload.com seems to me to be the perfect model for anonymous file delivery over the internet. I have also bookmarked, but have never used: http://www.sharemation.com/xythoswfs/webui?action=loginsubaction=newuser

Re: dealing with w32/bagle

2004-03-04 Thread Curtis Maurand
On Thu, 4 Mar 2004, Laurence F. Sheldon, Jr. wrote: Jeff Shultz wrote: ** Reply to message from Laurence F. Sheldon, Jr. [EMAIL PROTECTED] on Wed, 03 Mar 2004 22:04:44 -0600 Okay, so what are several ways to share files with a friend, where you don't share any accounts or

Re: dealing with w32/bagle

2004-03-04 Thread Curtis Maurand
Too many steps. On Thu, 4 Mar 2004, Stephen Milton wrote: dropload.com seems to me to be the perfect model for anonymous file delivery over the internet. Their system doesn't use SSL yet, but it would be the logical next step. Here is their description: Dropload is a place for

Bagle and other recent viruses (Was: warning - new trend of attempts to infect ISP users, possibly virus)

2004-03-04 Thread william(at)elan.net
On Wed, 3 Mar 2004, Stephen J. Wilcox wrote: Perhaps I'm only following this as its affecting us more, but I dont recall a time previously when I've had so many viruses hitting us and getting thro our scanners with nothing we can do about it. I dont recall seeing viruses with variants as

Re: Bagle and other recent viruses (Was: warning - new trend of attempts to infect ISP users, possibly virus)

2004-03-04 Thread william(at)elan.net
Also the followin is talking about same too: http://www.cmpnetasia.com/ViewArt.cfm?Artid=23047Catid=3subcat=50 Dueling Hackers Sparked Bagle, Netsky Worm Blitz Gregg Keizer, TechWeb News , 3-Mar-2004 Security analysts are asking themselves whether the wave of malicious worms that began

Re: iMPLS benefit

2004-03-04 Thread David Meyer
Hey Suki, On Thu, Mar 04, 2004 at 02:14:20PM -0800, sonet twister wrote: Hello, i heard there is a way to run MPLS for layer3 VPN(2547) service without needing to run label switching in the core(LDP/TDP/RSVP) but straight IP (aka iMPLS).

Re: Juniper pepsi

2004-03-04 Thread W.D.McKinney
On Wed, 2004-03-03 at 14:52, Eric Kuhnke wrote: I have heard rumors of a new low-end 1U Juniper router, aimed directly at replacing the 2600/3600 series. Supposedly its code name is Pepsi... Does anyone have more info on this? :-) No, but hope so. Dee -- W.D.McKinney [EMAIL