Re: Best practices inquiry: tracking SSH host keys

2006-07-09 Thread Shumon Huque
On Sun, Jul 09, 2006 at 04:37:42PM -0400, Steven M. Bellovin wrote: > > We already have a deployed key management infrastructure at our > > site (Kerberos). If it were (practically) possible to authenticate > > login sessions to routers with it, we'd definitely use it. I can't > > see us deploy

Re: NANOG Spam?

2006-07-09 Thread William Allen Simpson
BTW, the site(s) is/are still up, 5 days and counting Now the original http://oarwind.info/ct/ redirects to http://oarwind.info/e/ct/

Re: NANOG Spam?

2006-07-09 Thread William Allen Simpson
Christian Seitz <[EMAIL PROTECTED]> wrote: In article <[EMAIL PROTECTED]> you wrote: oarwind.info. AS | IP | Registry | AS Name 6724| 81.169.143.178 | ripencc | STRATO Strato AG How did you resolve this? Is there something wrong with my DNS or did you make a mistake

Re: Cleaning up (was: NANOG Spam)?

2006-07-09 Thread William Allen Simpson
Impressive response from [EMAIL PROTECTED] This is the Postfix program at host bran.de.cw.com. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to If you do so, please includ

Fwd: (RADIATOR) OSC hosts RadiusExpert Wiki

2006-07-09 Thread Hugh Irvine
Hello Everyone - For those of you who may be interested in RADIUS and/or DIAMETER. regards Hugh Open System Consultants (OSC) has established a free resource for the RADIUS user community to collect and share information about configuring and implementing RADIUS protocol devices and so

Re: Best practices inquiry: tracking SSH host keys

2006-07-09 Thread Steven M. Bellovin
On Sun, 9 Jul 2006 14:47:13 -0400, Shumon Huque <[EMAIL PROTECTED]> wrote: > On Thu, Jul 06, 2006 at 04:52:52PM -0400, Steven M. Bellovin wrote: > > > > SSH is a distributed single point of failure, just like the old thick > > yellow Ethernet. Remember how reliable and easy to debug that was? >

Re: Copper thefts in california

2006-07-09 Thread Joe Abley
On 7-Jul-2006, at 16:41, Sean Donelan wrote: In addition to the traditional backhoe threat, as the price of copper increased so has the threat of people stealing telephone trunk cables containing copper wire. At least when this happens in other places there's the prospect of attractive bas

Re: Best practices inquiry: tracking SSH host keys

2006-07-09 Thread Shumon Huque
On Thu, Jul 06, 2006 at 04:52:52PM -0400, Steven M. Bellovin wrote: > > SSH is a distributed single point of failure, just like the old thick > yellow Ethernet. Remember how reliable and easy to debug that was? > > More seriously, the original virtue of SSH was that it could be deployed > witho

Re: Best practices inquiry: tracking SSH host keys

2006-07-09 Thread Shumon Huque
On Fri, Jul 07, 2006 at 10:18:35AM -0400, David Nolan wrote: > --On Thursday, July 06, 2006 18:22:48 -0700 Jeremy Chadwick > <[EMAIL PROTECTED]> wrote: > > >Speaking purely from a system administration point of view, Kerberos > >is also a nightmare. Not only does the single-point-of-failure > >

Re: CFP: DA Workshop - ISOI

2006-07-09 Thread Gadi Evron
On Sun, 9 Jul 2006, Joseph S D Yao wrote: > On Sat, Jul 08, 2006 at 09:37:02AM -0500, Gadi Evron wrote: > > > > This is a call for papers for a DA Workshop (ISOTF/TISF DA). Its name is: > > Internet Security Operations and Intelligence Workshop or ISOI for short. > > > > DA stands for Drone Armi

Re: Cleaning up (was: NANOG Spam)?

2006-07-09 Thread Allen Parker
On 7/9/06, William Allen Simpson <[EMAIL PROTECTED]> wrote: > The spam beneficiary was, of course, a US entity pretending to be from > Germany, with a throwaway obscured Yahoo address: > > Domain Name:OARWIND.INFO > ... > Tech Name:Audrey Pokela > Tech Organization:Audrey Pokela > Tech Street1:

Cleaning up (was: NANOG Spam)?

2006-07-09 Thread William Allen Simpson
Given that we identified the abusive hosting, and the abusive spam source, and sent messages to the abuse addresses, did anybody receive a response? I did not! Three (3) days have elapsed. It's time to clean up this particular miscreant. It's time for the upstreams to turn off service. Thes

Re: CFP: DA Workshop - ISOI

2006-07-09 Thread Joseph S D Yao
On Sat, Jul 08, 2006 at 09:37:02AM -0500, Gadi Evron wrote: > > This is a call for papers for a DA Workshop (ISOTF/TISF DA). Its name is: > Internet Security Operations and Intelligence Workshop or ISOI for short. > > DA stands for Drone Armies (botnets), which is the main subject of this > work