S-BGP and IP prefix aggregation

2005-12-01 Thread 王娜
I have a question about S-BGP. When IP prefix is aggregated, and a S-BGP speaker receives a route announcement with the aggregated ip prefix, how does it verify the authority of the AS to announce the IP prefix.  The aggregated IP prefix should have not address attestation.    [EMAIL PR

Re: Confidentiality disclaimers, was: GoDaddy DDoS

2005-12-01 Thread eric
On Thu, 2005-12-01 at 16:20:28 -0800, Dan Hollis proclaimed... > > IMO, such disclaimers are incompatible with the nanog ml, anyone posting > from such disclaimer-encumbered accounts should be forcefully > unsubscribed. If you can't post from a disclaimer-free account, you > shouldn't be posti

Re: Confidentiality disclaimers, was: GoDaddy DDoS

2005-12-01 Thread Suresh Ramasubramanian
On 12/2/05, Dan Hollis <[EMAIL PROTECTED]> wrote: > > IMO, such disclaimers are incompatible with the nanog ml, anyone posting > from such disclaimer-encumbered accounts should be forcefully > unsubscribed. If you can't post from a disclaimer-free account, you > shouldn't be posting to the list, pe

Re: Confidentiality disclaimers, was: GoDaddy DDoS

2005-12-01 Thread Dan Hollis
On Thu, 1 Dec 2005, Jay Hennigan wrote: On Thu, 1 Dec 2005, Mark Smith wrote: [Dire threats regarding confidentiality, etc. snipped.] On Wed, 30 Nov 2005 16:18:52 -0700 "Sam Crooks" <[EMAIL PROTECTED]> wrote: This confidentiality notice almost DoS'd my MUA ! One would think that those posting

Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability

2005-12-01 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability Document ID: 68322 Advisory ID: cisco-sa-20051201-http http://www.cisco.com/warp/public/707/cisco-sa

RE: SWIP and Rwhois in the Real World

2005-12-01 Thread Jon Lewis
On Wed, 7 Sep 2005, Randy Bush wrote: Can someone summarize the alternatives to the ARIN recommended RWHOIS server bits (from rwhois.org)? A quick hit on Google and Freshmeat was fairly barren. i use irrd I'm curious how you or anyone else using irrd deals with the following issues: 1

Re: QoS for ADSL customers

2005-12-01 Thread Greg Boehnlein
On Thu, 1 Dec 2005, Sean Donelan wrote: > On Thu, 1 Dec 2005, Kim Onnel wrote: > > > Can any one please suggest to me any commercial or none solution to cap the > > download stream traffic, our upstream will not recieve marked traffic from > > us, so what can be done ? > > Step 1: Please ident

RE: QoS for ADSL customers

2005-12-01 Thread Sean Donelan
On Thu, 1 Dec 2005, Ejay Hire wrote: > Going back to your original question, how to keep from > saturating the network with residential users using > bittorrent/edonkey et al, while suffocating business > customers. Here goes. I still don't see the requirement for application level classificatio

Re: QoS for ADSL customers

2005-12-01 Thread Sean Donelan
On Thu, 1 Dec 2005, Kim Onnel wrote: > Can any one please suggest to me any commercial or none solution to cap the > download stream traffic, our upstream will not recieve marked traffic from > us, so what can be done ? Step 1: Please identify how you identify your Corp. customers. Once you exp

Re: GoDaddy DDoS

2005-12-01 Thread Sam Crooks
So anyway, back to the original post does anyone from GoDaddy have any information regarding the DDoS? -- On 12/1/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > On Thu, 01 Dec 2005 01:47:17 PST, Jay Hennigan said: > > > Has the validity of such language ever been upheld in court? > > IAN

Re: Confidentiality disclaimers, was: GoDaddy DDoS

2005-12-01 Thread Valdis . Kletnieks
On Thu, 01 Dec 2005 01:47:17 PST, Jay Hennigan said: > Has the validity of such language ever been upheld in court? IANAL - but apparently the use of it on *some* faxes has stood up in court, it hasn't been tested on e-mail yet, but a number of people who have written on it think that the indiscr

RE: QoS for ADSL customers

2005-12-01 Thread Church, Chuck
But be careful about the CPU usage and platform support for NBAR. I don't think the sup720 will do NBAR, at least that's what I heard. Chuck Church Lead Design Engineer CCIE #8776, MCNE, MCSE Netco Government Services - Design & Implementation Team 1210 N. Parker Rd. Greenville, SC 29609 Home

Re: QoS for ADSL customers

2005-12-01 Thread Mikael Abrahamsson
On Thu, 1 Dec 2005, Kim Onnel wrote: Our ADSL customers traffic is 3 OC3 worth of traffic, I dont think our management would buy the idea. Any way you do limiting depending on any level over L3, you're going to fail in the long run (people will start to move ports around or go encrypted).

Re: QoS for ADSL customers

2005-12-01 Thread Neil Harris
Sean Donelan wrote: The problem with waiting until the PE or BRAS to do the classification is most access providers use traffic aggregation in the access network (e.g. ATM/DSL, Cable, WiFi, etc). This means the interfaces on the BRAS or PE are oversubscribed and the access network interface w

RE: QoS for ADSL customers

2005-12-01 Thread Scott Morris
There was a 3.0 PDLM release on 11/1/05 for Bittorrent traffic. See http://www.cisco.com/cgi-bin/tablebuild.pl/pdlm Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ejay Hire Sent: Thursday, December 01, 2005 8:41 AM To: 'Kim Onnel' Cc: 'NANGO' S

RE: QoS for ADSL customers

2005-12-01 Thread Ray Burkholder
There are a bunch of p2p and torrent custom classifier pdlm's at http://www.cisco.com/cgi-bin/tablebuild.pl/pdlm Quoting Ejay Hire <[EMAIL PROTECTED]>: > > I got an off-list reply about using Nbar, but I've never > seen a class map that would match torrent. > > -e > > > -Original Messag

RE: QoS for ADSL customers

2005-12-01 Thread Ejay Hire
I got an off-list reply about using Nbar, but I've never seen a class map that would match torrent. -e > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Kim Onnel > Sent: Thursday, December 01, 2005 7:12 AM > To: Ejay Hire > Cc: NANGO > Subject: Re

Re: QoS for ADSL customers

2005-12-01 Thread Kim Onnel
Our ADSL customers traffic is 3 OC3 worth of traffic, I dont think our management would buy the idea. thanksOn 12/1/05, Ejay Hire <[EMAIL PROTECTED]> wrote: Hello.Going back to your original question, how to keep fromsaturating the network with residential users usingbittorrent/edonkey et al, whil

RE: QoS for ADSL customers

2005-12-01 Thread Ejay Hire
Hello. Going back to your original question, how to keep from saturating the network with residential users using bittorrent/edonkey et al, while suffocating business customers. Here goes. Netfilter/IpTables (and a slew of commercial products I'm sure) has a Layer 7 traffic classifier, meaning

Re: BGP Security and PKI Hierarchies

2005-12-01 Thread Andre Oppermann
[EMAIL PROTECTED] wrote: It's hard to imagine an organization who can afford to run a network using BGP to announce a class C block and not be able to afford $1250 per year. The Internet != for-profit-only corporate netspace. In that case, the organization is not an ISP which means that they

Re: BGP Security and PKI Hierarchies

2005-12-01 Thread Michael . Dillon
> > It's hard to imagine an organization who can afford to run > > a network using BGP to announce a class C block and not > > be able to afford $1250 per year. > > The Internet != for-profit-only corporate netspace. In that case, the organization is not an ISP which means that they are not grow

Confidentiality disclaimers, was: GoDaddy DDoS

2005-12-01 Thread Jay Hennigan
On Thu, 1 Dec 2005, Mark Smith wrote: [Dire threats regarding confidentiality, etc. snipped.] > > On Wed, 30 Nov 2005 16:18:52 -0700 > "Sam Crooks" <[EMAIL PROTECTED]> wrote: > > This confidentiality notice almost DoS'd my MUA ! One would think that those posting here would have the clue to rea

Re: QoS for ADSL customers

2005-12-01 Thread Kim Onnel
Can any one please suggest to me any commercial or none solution to cap the download stream traffic, our upstream will not recieve marked traffic from us, so what can be done ?On 11/29/05, Kim Onnel <[EMAIL PROTECTED]> wrote: Hello everyone, We have Juniper ERX as BRAS for ADSL, its GigE interfa

Re: GoDaddy DDoS

2005-12-01 Thread Mark Smith
On Wed, 30 Nov 2005 16:18:52 -0700 "Sam Crooks" <[EMAIL PROTECTED]> wrote: This confidentiality notice almost DoS'd my MUA ! > > > CONFIDENTIALITY NOTICE: > This message, and any attachments, are intended only for the lawful and > specified use of the individual or entity to which it is addres

Re: GoDaddy DDoS

2005-12-01 Thread Kim Onnel
It could be a DoS that used a software vulnerability though.On 12/1/05, Christopher L. Morrow <[EMAIL PROTECTED] > wrote:On Wed, 30 Nov 2005, Sam Crooks wrote:> the source I have seen so far is: >>> http://news.com.com/GoDaddy.com+suffers> +outage/2110-7349_3-5977187.html?tag=nefd.hed>stuck through