Re: Bogon filtering (don't ban me)

In Ciscoland its called Autosecure (IOS 12.3): http://www.cisco.com/warp/public/cc/pd/iosw/prodlit/cas11_ds.htm "Blocks all IANA reserved IP address blocks" The actual doc: Problem is, I still do not see

Fw: [pignet]

- Original Message - From: <[EMAIL PROTECTED]> To: "Pacific Internet Users Group Mailing List" <[EMAIL PROTECTED]> Sent: Thursday, December 02, 2004 2:47 PM Subject: [pignet] The Politics are starting > I found this in the Washington Post - Interesting? > By Shaun Waterman > UNITED PRES

Re: [OT] Re: Banned on NANOG

Alex Rubenstein wrote: We're not in school, we don't need suspensions. We need to act like adults, use this list for it's intended purpose. If someone is a dodo for a message or two here or there, then, well, we tolerate it and move on, maybe someone on the list sends that person an email saying

Re: Bogon filtering (don't ban me)

On Fri, 3 Dec 2004, J. Oquendo wrote: > > > Considering the talk of banning going on, I was reluctant to post this, > anyhow, I wondered how many (if any) have ever thought about the aspect of > vendors deciding to implement some form of default bogon filtering on their > products. With all of t

Re: Bogon filtering (don't ban me)

We've proposed what vendors need to better support bogon filtering, even wrote a draft: http://arneill-py.sacramento.ca.us/draft-py-idr-redisfilter-01.txt but last time I talked to cisco ios person (which was just two weeks ago at IPv6 Summit), it still has not been done. Perhaps couple more

Bogon filtering (don't ban me)

Considering the talk of banning going on, I was reluctant to post this, anyhow, I wondered how many (if any) have ever thought about the aspect of vendors deciding to implement some form of default bogon filtering on their products. With all of the talk about DoS botnets, and issues surrounding a

RE: [OT] Re: Banned on NANOG

I am going out on a limb here, and leaving lurk mode on this issue. If I get banned, well, Randy and I can start our own mailing list. We're as about as grumpy as each other. I disagree with William entirely. Suspensions are idiotic, and only detract from the usefulness of the list. S:N is imp

RE: [OT] Re: Banned on NANOG

On Thu, 2 Dec 2004, Joe Johnson wrote: > I wanted to say the same thing earlier, but a hands-off approach works > best on NANOG. > > The question at hand is not whether procmail will work . . . > It's whether procmail should have to work. I don't want to use procmail for nanog posts, I've long

RE: [OT] Re: Banned on NANOG

I wanted to say the same thing earlier, but a hands-off approach works best on NANOG. The question at hand is not whether procmail will work . . . It's whether procmail should have to work. Joe Johnson -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

[OT] Re: Banned on NANOG

On Thu, 2 Dec 2004, Daniel Golding wrote: > ...after we all sit down with the Merit staff and let our feelings > be known. Uh, didn't you guys do that at the last NANOG? Is someone under the misimpression that there's anyone at Merit who doesn't know your feelings?

Re: [OT] Re: Banned on NANOG

> From: Daniel Golding <[EMAIL PROTECTED]> > ... > Its entirely possible for nanog-l to be self policing, or, failing > that, for users to simply use procmail on those who wander off-topic > (for some definition of off-topic). Putting an [OT] subject banner on > such posts is also nice. i don't w

Re: is reverse dns required? (policy question)

On Thu, 2004-12-02 at 16:03, Mark Andrews wrote: > In article <[EMAIL PROTECTED]> you write: > > > >You would put in a global wildcard that says no smtp sender here. Only > >for those boxes being legitimate SMTP to outside senders you'd put in a > >more specific record as shown above. You probab

[OT] Re: Banned on NANOG

I'm under the impression that a discussion of that sort will occur in Los Vegas. There has been significant off-list chatter regarding this. Its entirely possible for nanog-l to be self policing, or, failing that, for users to simply use procmail on those who wander off-topic (for some definitio

Re: Banned on NANOG

[EMAIL PROTECTED] (nanog gonan) writes: > This whole censorship thing has me wondering as to the continued > viability of this list as a place where the clue-heavy hang out and speak > freely. Paul Vixie has been warned, randy Bush has been banned. Who > else has been banned that'd be considere

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > -Original Message- > From: Justin Ryburn [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 4:18 PM > To: Chad Skidmore; [EMAIL PROTECTED] > Subject: Re: How many backbones here are filtering the > makelovenotspam scr eensaver

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

On Thu, 2 Dec 2004, Justin Ryburn wrote: This is what scares me. Who determines the "bad guys?" I don't know anyone over at Lycos so I have no trust (or lack there of) in Lycos. Who is to say that Lycos won't decide next month that Yahoo, Google, MSN, _insert your own network here_ are "bad guys

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

>Lycos has created a large botnet (at least by most people's >definition) that is hidden in the guise of a screen saver claiming to >only go after the "bad guys". This is what scares me. Who determines the "bad guys?" I don't know anyone over at Lycos so I have no trust (or lack there of) in Ly

RE: What good is a noc team? How do you mitigate this? [was: How many backbones ...]

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > -Original Message- > From: Gadi Evron [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 3:21 PM > To: Chad Skidmore > Cc: Aaron Glenn; [EMAIL PROTECTED] > Subject: What good is a noc team? How do you mitigate this? > [was:

Re: is reverse dns required? (policy question)

In article <[EMAIL PROTECTED]> you write: > >You would put in a global wildcard that says no smtp sender here. Only >for those boxes being legitimate SMTP to outside senders you'd put in a >more specific record as shown above. You probably have to enter some dozen >to one hundred servers this wa

What good is a noc team? How do you mitigate this? [was: How many backbones ...]

Sorry your experience has been different, this is definitely one of those YMMV kinds of deals. That is a significant attack by most anyone's standards. Getting to the right security team usually ends up being the challenge. Once there however we have found many providers do a great job of deali

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > -Original Message- > From: Aaron Glenn [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 2:52 PM > To: Chad Skidmore > Cc: [EMAIL PROTECTED] > Subject: Re: How many backbones here are filtering the > makelovenotspam scr eensa

what we do know about botnets - per your questions [was: How many backbone ...]

Rich Kulawiec wrote: On Thu, Dec 02, 2004 at 04:18:52PM -0500, Hannigan, Martin wrote: Can you direct me toward a singluar entity of 1MM bots controlled by a single master? Nobody can, except the single master who's in control of same, and whoever that is -- if there is -- is unlikely to voluntari

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 5:21 PM > To: [EMAIL PROTECTED] > Subject: RE: How many backbones here are filtering the makelovenotspam > scr eensaver site? > > > [SNIP] > > > As for go180.net, you don't s

where the zombies come from, hide, and finding them [was: How many backbones here ...]

Well, it was a while ago that some Polish guys were openly advertising their 465K zombie network - I'd be most surprised if it isn't over 1M by now. And remember that hierarchical design is understood in the black hat world too. If somebody has 1M bots, it won't be 1M bots in one network, it wil

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

On Thu, Dec 02, 2004 at 04:18:52PM -0500, Hannigan, Martin wrote: > Can you direct me toward a singluar entity of 1MM bots controlled by > a single master? Nobody can, except the single master who's in control of same, and whoever that is -- if there is -- is unlikely to voluntarily share that in

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > -Original Message- > From: Steven Champeon [mailto:[EMAIL PROTECTED] > Posted At: Thursday, December 02, 2004 1:09 PM > Posted To: NANOG > Conversation: How many backbones here are filtering the > makelovenotspam scr eensaver site? > S

zombies.. again - good! here are some actual facts [was: How many backbones ...]

By all means, enlighten me. All I see from my limited pov is that bots are useless if disallowed from sending spam via port 25 outbound, and that every day sees hundreds if not thousands, of new bots trying to send spam to my users, which suggests that /nothing is being done to prevent them from u

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

on Thu, Dec 02, 2004 at 04:46:00PM -0500, Hannigan, Martin wrote: quoting me: > > > Um, not 1 million bots - in concert. > > > > And you know this how, exactly? I'm sure not convinced. > > > http://w3.cambridge-news.co.uk/business/story.asp?StoryID=65877 > > "Lycos Europe's 20 million users w

Re: Banned on NANOG

On Thu, 2 Dec 2004, nanog gonan wrote: > This whole censorship thing has me wondering as to the > continued viability of this list as a place where the Perhaps if the core purpose of the list could be maintained without having dozens of off-topic/useless/banteresque messages per day the list wou

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

On Thu, 02 Dec 2004 16:18:52 EST, "Hannigan, Martin" said: > Can you direct me toward a singluar entity of 1MM bots controlled by > a single master? Well, it was a while ago that some Polish guys were openly advertising their 465K zombie network - I'd be most surprised if it isn't over 1M by now.

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 4:28 PM > To: [EMAIL PROTECTED] > Subject: Re: How many backbones here are filtering the makelovenotspam > scr eensaver site? > > > > on Thu, Dec 02, 2004 at 04:15:34PM -0500, Ha

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

on Thu, Dec 02, 2004 at 04:18:52PM -0500, Hannigan, Martin wrote: > Can you direct me toward a singluar entity of 1MM bots controlled by > a single master? No, I cannot. I *can*, and have, forward on reports by those more in the know than I that estimate 100K new bots / day are being added, and I

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

on Thu, Dec 02, 2004 at 04:15:34PM -0500, Hannigan, Martin wrote: quoting me: > > My point was to Martin's question about what would happen if - god > > forbid - there were large botnets under the control of spammers; a > > careful reading will suggest that my major point was, duh, that there > >

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 4:14 PM > To: nanog list > Subject: Re: How many backbones here are filtering the makelovenotspam > scr eensaver site? > > > > on Thu, Dec 02, 2004 at 08:58:03PM +, Christoph

Banned on NANOG

: Susan Harris' supervisor at MERIT. Chances are, I : will be censored for this and banned almost This whole censorship thing has me wondering as to the continued viability of this list as a place where the clue-heavy hang out and speak freely. Paul Vixie has been warned, randy Bush has been ba

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 4:09 PM > To: [EMAIL PROTECTED] > Subject: Re: How many backbones here are filtering the makelovenotspam > scr eensaver site? > > > > on Thu, Dec 02, 2004 at 12:55:02PM -0800, Ch

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

on Thu, Dec 02, 2004 at 08:58:03PM +, Christopher L. Morrow wrote: > > On Thu, 2 Dec 2004, Steven Champeon wrote: > > > > > on Thu, Dec 02, 2004 at 02:56:29PM -0500, Hannigan, Martin wrote: > > > Possibly. What will happen if the Lycos botnet gets hijacked? > > > > > > The conversations betw

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

on Thu, Dec 02, 2004 at 12:55:02PM -0800, Chad Skidmore wrote: quoting me: > >What's the difference? Why is everyone so upset about Lycos and > >nobody seems to be doing much of anything about the /existing > >botnets/, which conservative estimates[1] already put at anywhere > >from 1-3K per botne

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

On Thu, 2 Dec 2004, Steven Champeon wrote: > > on Thu, Dec 02, 2004 at 02:56:29PM -0500, Hannigan, Martin wrote: > > Possibly. What will happen if the Lycos botnet gets hijacked? > > > > The conversations between the clients and the servers don't appear > > to be keyed. If a million clients got o

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -Original Message- From: Steven Champeon [mailto:[EMAIL PROTECTED] Posted At: Thursday, December 02, 2004 12:22 PM Posted To: NANOG Conversation: How many backbones here are filtering the makelovenotspam scr eensaver site? Subject: Re: Ho

Re: "Make love, not spam"....

The point behind the initiative is not to attack the email senders, but the source of money. If the spam websites are never up, then the recipients cannot buy products advertised. Without the sales, there are not finances to support the spamming. If spammers can't make money sending email, then

Re: How many backbones here are filtering the makelovenotspam screensaver site?

On Thu, 2 Dec 2004, Petri Helenius wrote: > Are there other options that qualify to the above criteria than Ericsson > EDA, Packetfront IPD and Corecess IAS? Paradyne, Siemens, Nokia, Lucent. Basically every vendor has an ethernet only option nowadays. Some are quick fixes to existing platforms

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

on Thu, Dec 02, 2004 at 02:56:29PM -0500, Hannigan, Martin wrote: > Possibly. What will happen if the Lycos botnet gets hijacked? > > The conversations between the clients and the servers don't appear > to be keyed. If a million clients got owned, it would be the > equivalent of an electronic Bu

Susan's superior?

Susan, Since you yourself have neglected and ignored my requests via email, and phone; I am now asking if the list has contact information on Susan Harris' supervisor at MERIT. Chances are, I will be censored for this and banned almost immediatly, so off-list replies are greatly helpful. Or anyo

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

On Thu, 2 Dec 2004, Hannigan, Martin wrote: > > > -Original Message- > > From: Florian Weimer [mailto:[EMAIL PROTECTED] > > Sent: Thursday, December 02, 2004 2:01 PM > > To: Brett > > Cc: Hannigan, Martin; nanog list > > Subject: Re: How many backbones here are filtering the makelovenotsp

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

> -Original Message- > From: Florian Weimer [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 2:01 PM > To: Brett > Cc: Hannigan, Martin; nanog list > Subject: Re: How many backbones here are filtering the makelovenotspam > scr eensaver site? > > > > I think Lycos did not thi

Re: My yearly post about environmental monitoring devices

[EMAIL PROTECTED] writes: > When you add Ethernet as a requirement then you are asking for an > I/O interface that is more complex and more expensive than the basic > temp/hum recorder on the PIC. Or not. http://www.lantronix.com/device-networking/embedded-device-servers/xport.html (no, it do

Re: BIND + DLZ

On Thu, 2 Dec 2004, just me wrote: I second the recommendation for PowerDNS. Dear Nanog, My apologies for not reading down the thread and seeing that the OP was looking for a way to *stop* using powerdns. My apologies also for failing once again to sign my post with my full, legal name,

Re: BIND + DLZ

I second the recommendation for PowerDNS. I built an anycasted, sql backended instant-update DNS server platform for a registrar who was interested in selling a "premium dns service" product. We looked long and hard at bind+dlz as well as PDNS. Both are great products, and the developer who w

Re: is reverse dns required? (policy question)

[EMAIL PROTECTED] wrote: On Thu, 02 Dec 2004 16:03:55 +0100, Andre Oppermann said: Reverse zone file for 10.0.0.0/24: 1.0.0.10.in-addr.arpa. IN PTR mail.example.com. _send._smtp._srv.1.0.0.10.in-addr.arpa. IN TXT "1" ftp://ftp.rfc-editor.org/in-notes/internet-drafts/draft-stumpf-dns-mta

Re: How many backbones here are filtering the makelovenotspam screensaver site?

Mikael Abrahamsson wrote: On Wed, 1 Dec 2004, Jeff Shultz wrote: They are running ADSL2+? Any idea what DSLAM/modems they are using? I'm afraid that my Swedish is insufficient (iow "non-existant") for working my way through their website, if the answer is even there. I have this information

Re: How many backbones here are filtering the makelovenotspam scr eensaver site?

I think Lycos did not think this through enough. Their response is HUGE. They've essentially launched a Denial of Service on themselves. They would not have needed the larger backbone if they cut down on the size of their response. They could have done anything with their client, but they chos

Re: is reverse dns required? (policy question)

On Thu, 02 Dec 2004 16:03:55 +0100, Andre Oppermann said: > Reverse zone file for 10.0.0.0/24: > > 1.0.0.10.in-addr.arpa. IN PTR mail.example.com. > > _send._smtp._srv.1.0.0.10.in-addr.arpa. IN TXT "1" > > ftp://ftp.rfc-editor.org/in-notes/internet-drafts/draft-stumpf-dns-mtamark

Re: My yearly post about environmental monitoring devices

I don't know if they're here yet, but, PICs with builitin Ethernet are definitely on the way. I'm not that much of a hardware geek, but, some of the hardware geeks I know have bee talking about these for a while in terms that make me think they're expecting samples any day. Owen --On Thursday, Dec

Re: Setting up DS-3 and 2 4xT1

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joshua Brady wrote: | My apologies if some may find this a little off-topic. | | However, here is my issue. I need a router, which can take 2 4xT1's | and a DS-3, while handing a Gbit for internal use. Now to complicate | the entire situation, this need

RE: My yearly post about environmental monitoring devices

> g) Inexpensive, so it can be widely deployed. That's why I suggested talking to a college sophomore. This is the kind of thing that electronics engineering students do for a 3rd year project. > A Basic Stamp might be the platform for such; I don't think that a Stamp or PICAXE will work. Thes

What is the difference between RIPE and RadB

Is : - RADb the database where AS numbers are cross referenced to IP address prefixes - RIPE is an idependent project to map out the relationship of AS's and how their locations (relative to one and other) ??? Tony _ Express yourse

Re: How many backbones here are filtering the makelovenotspam screensaver site?

Captain's Log, stardate Thu, 2 Dec 2004 09:25:15 -0500, from the fingers of Rich Kulawiec came the words: > > The site has already been hacked/defaced, per "full-disclosure".  I > can't personally verify or refute this because I can't reach it. > > ---Rsk I'm insulted! I clicked on the map of Ir

RE: is reverse dns required? (policy question)

> Quick example, though: of 6936 patterns currently in my list, if you > just run a cut on \\ (which catches either '.' or '-' as the > next char, > for the most part) you get (matches of 20 or more): > > count first left-hand pattern part > - > 1572 ^[0-9]+ >

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

> -Original Message- > From: Lionel [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 8:40 AM > To: Hannigan, Martin > Cc: nanog list > Subject: Re: How many backbones here are filtering the makelovenotspam > scr eensaver site? > > > On Thu, 2 Dec 2004 08:27:38 -0500 , "Hanni

Re: How many backbones here are filtering the makelovenotspam screensaver site?

The site has already been hacked/defaced, per "full-disclosure". I can't personally verify or refute this because I can't reach it. ---Rsk

RE: My yearly post about environmental monitoring devices

>I am looking for a device that meets the following criteria. I'd add: g) Inexpensive, so it can be widely deployed. A Basic Stamp might be the platform for such; but I've retired from hardware hacking projects. I'd suggest queries to sci.electronics.design in hopes of finding someome intere

Re: is reverse dns required? (policy question)

Steven Champeon wrote: on Wed, Dec 01, 2004 at 03:34:43PM -0500, [EMAIL PROTECTED] wrote: On Wed, 01 Dec 2004 15:02:19 EST, Steven Champeon said: Connect:dhcp.vt.edu ERROR:5.7.1:"550 go away, dynamic user" Given the number of options available at our end, I can hardly blame other sites for cons

RE: My yearly post about environmental monitoring devices

I was at a trade show yesterday and they had some interesting boxes for remote control. They don't meet your spec but someone might be interested. This box has serial and digital control connections but works via GPRS rather than Ethernet. Makes an interesting back door that could be independen

Re: Setting up DS-3 and 2 4xT1

7206VXR with appropriate PAM's Scott C. McGrath On Thu, 2 Dec 2004, Joshua Brady wrote: > > My apologies if some may find this a little off-topic. > > However, here is my issue. I need a router, which can take 2 4xT1's > and a DS-3, while handing a Gbit for internal

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Wednesday, December 01, 2004 9:06 PM > To: Suresh Ramasubramanian > Cc: nanog list > Subject: Re: How many backbones here are filtering the makelovenotspam > screensaver site? > > > > I dont know how m

Re: How many backbones here are filtering the makelovenotspam screensaver site?

On Wed, 1 Dec 2004, Jeff Shultz wrote: > They are running ADSL2+? Any idea what DSLAM/modems they are using? I'm > afraid that my Swedish is insufficient (iow "non-existant") for working > my way through their website, if the answer is even there. I have this information but I am not sure I am a

RE: My yearly post about environmental monitoring devices

Our MIS folks have used this device called "Netbotz" for a couple of years now. I have to say, especially in the later versions, that I am quite impressed by their capabilities including motion-detection cameras, alerting, and all the environmental probes you mentioned. Those little things ha

Re: My yearly post about environmental monitoring devices

> Sorry Alex, but I think you are barking up > the wrong tree. > When you add Ethernet as a requirement > then you are asking for an I/O interface > that is more complex Ethernet is cheap and trivial, drop some code in one of these (cpu is built into the rj45 socket) http://www.lantronix.com/d

Re: My yearly post about environmental monitoring devices

> I am looking for a device that meets the following criteria. > a) Reasonably small. This probably wouldn't be rack mounted; it'd be wall > mounted, desk mounted, celing mounted, etc. > b) Powered by PoE. > c) Is SNMPable over Ethernet. NOT RS232 or serial, or anything archaic > like that. Not

Re: ULA and RIR cost-recovery

On Wed, 2004-12-01 at 21:30 +0100, JP Velders wrote: > > [ ... ] > > I think the risk of ISPs handing out /64s is very small. Actually I expect > > most of the consumer ISPs (and they are the ones with the large number > > of customers) to hand out /128s. > > Uhm, one of my private (as in I'm the

Re: My yearly post about environmental monitoring devices

On Thu, 2004-12-02 at 01:12 -0500, Alex Rubenstein wrote: > > I'm sure if you peruse the archives, you'll see that I post about this > about every year. The answer to your question is 'No, I haven't found what > I am looking for yet.' > > However, the quest I am on is slightly different. > > I

Re: Setting up DS-3 and 2 4xT1

Juniper makes a cute little box which was code-named Pepsi Lite. Don't know the productized name for it, but, should be easy to find. Should handle what you're looking for just fine. Also a used M5 on Ebay would do the trick. Owen --On Thursday, December 2, 2004 2:50 AM -0500 Joshua Brady <[EMA