FW: Where is this info coming from?

2004-03-20 Thread Eric Krichbaum
When I use a looking glass tool like GASP or lg.level3.net etc. on our 66.118.64.0/19 space, it's shows up as MOUNTAINNET which we haven't used for years.  ARIN's whois info shows it correctly.  Where should I go to correct this, please?   Eric Krichbaum  

Re: UDP port 4000 traffic: likely a new worm

2004-03-20 Thread Rodney Joffe
times PST) -jr * Josh Richards <[EMAIL PROTECTED]> [20040320 11:10]: > > Confirmed. We had our first customer (colo) hit yesterday evening at > 20:43 PST. Additionally, they experienced the hard drive corruption (which > was added to the ISC diary entry within the last severa

Re: UDP port 4000 traffic: likely a new worm

2004-03-20 Thread Scott Call
Has anyone figured out the collateral damage if 4000/udp were to be blocked for a couple of days? Since the exploit is in the ICQ code of ISS's products, does blocking 4000/udp block ICQ as well? Thanks -S -- Scott Call Router Geek, ATGi, home of $6.95 Prime Rib I make the world a better

Re: Personal Co-location Registry

2004-03-20 Thread Richard A Steenbergen
On Sat, Mar 20, 2004 at 04:02:37PM -0800, Micah McNelly wrote: > > You could use dual vertical PDU's with serial management connected to a 1u > serial console / KVM solution. There are a few vendors working on PDU's with > IP / SNMP based management solutions but I don't think they have been > in

Re: Personal Co-location Registry

2004-03-20 Thread Adam Rothschild
On 2004-03-20-18:42:10, Deepak Jain <[EMAIL PROTECTED]> wrote: > If someone is doing this, especially wrt to 1U servers, perhaps > someone could provide a pointer to a reboot solution that would > allow a single reboot device to control 42+ 1Us in a single > rack. From my occasional interest in th

Suresh in the WSJ

2004-03-20 Thread Fred Heutte
Forgive the continuing thread on s**m, but there was a good article on the front page of the Friday Wall Street Journal's Marketplace section, "The Spam-China Link." Countries like China, South Korea and Taiwan "are becoming centers of Internet fraud, the way Grand Cayman or the Bahamas are

Re: Personal Co-location Registry

2004-03-20 Thread Micah McNelly
You could use dual vertical PDU's with serial management connected to a 1u serial console / KVM solution. There are a few vendors working on PDU's with IP / SNMP based management solutions but I don't think they have been introduced into the marketplace. Something like this could work: http://ww

Re: Personal Co-location Registry

2004-03-20 Thread Deepak Jain
many servers are also starting to feature IPMI ... i'm happy to add to the registry a list of things like pc-weasel and rtty and rocketport, but i'd like to have some confidence that it's a comprehensive list, which means that someone more familiary with the field has to build it. -- If someone i

Re: Personal Co-location Registry

2004-03-20 Thread Paul Vixie
[EMAIL PROTECTED] (Michael Hanulec) writes: > many servers are also starting to feature IPMI ... if somebody posts a summary of command/control options for remote colo boxes i'd love to include it, or a pointer to it, at www.vix.com/personalcolo. i like the pc-weasel but i admit that my main sy

Re: UDP port 4000 traffic: likely a new worm

2004-03-20 Thread Josh Richards
265 (all times PST) -jr * Josh Richards <[EMAIL PROTECTED]> [20040320 11:10]: > > Confirmed. We had our first customer (colo) hit yesterday evening at > 20:43 PST. Additionally, they experienced the hard drive corruption (which > was added to the ISC diary entry within the l

Re: UDP port 4000 traffic: likely a new worm

2004-03-20 Thread Josh Richards
Mbit/s before we took them off-line. -jr * Johannes B. Ullrich <[EMAIL PROTECTED]> [20040320 00:44]: > Looks like there may be a worm going around hitting systems that run > BlackIce. Common characteristics of the packets: Source port 4000 (but > random target port) and the string

Re: Personal Co-location Registry

2004-03-20 Thread Michael Hanulec
many servers are also starting to feature IPMI <[EMAIL PROTECTED]> which allows for the remote console (that provides the VGA output slow.. only good for emergencies or for Windows servers) and power cycling of servers. Compaq/HP includes this feature in their Proliant servers, and many other whi

Re: Prodigy

2004-03-20 Thread Suresh Ramasubramanian
Curt Akin writes on 3/20/2004 9:02 PM: Anyone have a security contact e-mail at prodigy.net? [EMAIL PROTECTED] bounces with user unknown. Prodigy = SBC. http://www.pch.net/inoc-dba/directory/company.html has five entries for SBC. -- srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9 manager

Prodigy

2004-03-20 Thread Curt Akin
Anyone have a security contact e-mail at prodigy.net? [EMAIL PROTECTED] bounces with user unknown. -- Best regards, Curt 42.7% of all statistics are made up on the spot.

Re: Personal Co-location Registry

2004-03-20 Thread Robert E. Seastrom
John Todd <[EMAIL PROTECTED]> writes: >While I do prefer a "real" serial LOM kit (i.e.: Sun Microsystems) ... >RealWeasel is too expensive (even with the hypothetical NANOG > discount) though extremely nice. As previously mentioned, I can > purchase an entire system with serial console

Re: Progress against spam

2004-03-20 Thread Eric Brunner-Williams in Portland Maine
Two weeks ago at the Rome meeting of ICANN I made a proposal informally to a few other registrars that we look into this. I'd not heard that AOL was going to do something similar. Basically, something EPP-esque, so that registrars, a smaller body to define one, or more levels of "trust", than "u

Progress against spam

2004-03-20 Thread Henry Linneweh
AOL Blocks Spammers' Web Sites http://www.washingtonpost.com/wp-dyn/articles/A9449-2004Mar19.html   I think this is noteworthy and may help...   -Henry

UDP port 4000 traffic: likely a new worm

2004-03-20 Thread Johannes B. Ullrich
Looks like there may be a worm going around hitting systems that run BlackIce. Common characteristics of the packets: Source port 4000 (but random target port) and the string "insert witty message here". details will be posted here: http://isc.sans.org/diary.html as I get them together. -- CTO