RE: Cogent now peering with Sprint?

2006-10-30 Thread Ed Ray
I have seen it at other places as well: Tracing the route to portus.netsecdesign.com (66.6.208.6) 1 sl-bb24-ana-13-0.sprintlink.net (144.232.1.138) 4 msec 4 msec 0 msec 2 sl-st21-la-13-0.sprintlink.net (144.232.20.69) 4 msec 4 msec 4 msec 3 p12-3.core01.lax05.atlas.cogentco.com (154.54

RE: Cogent now peering with Sprint?

2006-10-30 Thread Bob Collie
That looks like a transit connection that Cogent bought at Ashburn, VA, not SFI peering connection. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Ray Sent: Tuesday, October 31, 2006 12:11 AM To: nanog@merit.edu Subject: Cogent now peering with Sprin

Cogent now peering with Sprint?

2006-10-30 Thread Ed Ray
I never thought Sprint would ever renew its relationship with Sprint: Tracing the route to portus.netsecdesign.com (66.6.208.6) 1 sl-bb24-rly-9-0.sprintlink.net (144.232.14.122) 0 msec 0 msec 0 msec 2 sl-st22-ash-6-0.sprintlink.net (144.232.20.189) 0 msec 4 msec 0 msec 3 p15-2.core01.ia

ELI Issues in Seattle (Tukwila)?

2006-10-30 Thread Bill Sehmel
Anyone else noticing ELI latency issues around the Seattle (Tukwila) area? Thanks Bill Sehmel -- Bill Sehmel - [EMAIL PROTECTED] -- 1-206-242-2743 Systems Administrator, HopOne Internet Corp. SEA2 NOC Bandwidth & full range of carrier/web host colo + networking services: http://www.hopo

Re: CWDM equipment (current favorites)

2006-10-30 Thread alex
On Mon, 30 Oct 2006, Deepak Jain wrote: > A few years ago, NANOG had a discussion regarding various CWDM vendors. > Repeatedly MRV was brought up as a good option for metro-area LAN type > applications. There's been some discussions more recently, such as (coauthored by yours truly): http://ww

Re: (OT)MSN/hotmail postmaster contact

2006-10-30 Thread Edward F. Klimowicz
That number is a voicemail trap. The option that is supposed to direct me where to get more help gives me an e-mail address. When I send to that e-mail address, I get a "550 5.1.1 User unknown" bounce. Edward F. Klimowicz Voicenet Systems Administration [EMAIL PROTECTED] 215.259.2131 Pedram M

Re: (OT)MSN/hotmail postmaster contact

2006-10-30 Thread Pedram M
Try: (1)(650) 964-7200, 10:00 AM - 5:00 PM Pacific Standard Time, Monday through Friday.I think that may work, got it here:http://www.hotmail.msn.com/cgi-bin/dasp/ua_info.asp?pg=faq On 10/30/06, Edward F. Klimowicz <[EMAIL PROTECTED]> wrote: Is there a postmaster from MSN/Hotmail out there?  Mail f

Re: Sagonet - Failing miserably with network security Someone needs to handle this.

2006-10-30 Thread Gadi Evron
On Mon, 30 Oct 2006, Jordan Medlen wrote: > > Customer has been nuked. This is the time to mention that unlike a couple of years ago, Sagonet is very responsive to C&C reports, and deals with them very efficiently and quickly. Sagonet is a pleasure to work with on botnet abuse issues.

(OT)MSN/hotmail postmaster contact

2006-10-30 Thread Edward F. Klimowicz
Is there a postmaster from MSN/Hotmail out there? Mail from my domain to any of yours is being junked and randomly blackholed. No progress has been made yet with the normal tech support. Please reply off list if you can help. -- Edward F. Klimowicz Voicenet Systems Administration [EMAIL PROTEC

Re: CWDM equipment (current favorites)

2006-10-30 Thread Mikael Abrahamsson
On Mon, 30 Oct 2006, Deepak Jain wrote: We need to place a new order for some new fiber builds and were considering some other vendors. Especially in the nx2.5G and nx10G (are CWDM x-cievers even available in 10G yet?) range. Anyone have any new favorites? I have recommended Transmode (www.t

Re: Sagonet - Failing miserably with network security Someone needs to handle this.

2006-10-30 Thread Jordan Medlen
Customer has been nuked. -- Jordan Medlen Sago Networks On Oct 30, 2006, at 11:54 AM, Lasher, Donn wrote: Not that this is his real name, or business, but a whois on the IP yields: [whois.arin.net] Sago Networks SAGO-20030401 (NET-65-110-32-0-1) 65.110.32.

CWDM equipment (current favorites)

2006-10-30 Thread Deepak Jain
A few years ago, NANOG had a discussion regarding various CWDM vendors. Repeatedly MRV was brought up as a good option for metro-area LAN type applications. Since then, I have actually touched some of the MRV product line personally and found it (and their customer support)... less than ide

Re: advise on network security report

2006-10-30 Thread Scott Weeks
Rick Wesson <[EMAIL PROTECTED]> wrote: : I would appreciate a bit of advise on : a service I am about to deploy. Thank you for asking rather than just doing! :-) : I'm expecting to post a weekly report once a : month to nanog, would this be disruptive? Only if you don't tag the subject l

Re: advise on network security report

2006-10-30 Thread Steve Atkins
On Oct 30, 2006, at 9:44 AM, Randy Bush wrote: o being put on a major DNS black list (spamcop, spamhaus, ahbl etc.) o hosting malware or phishing sites, open proxies o sending LOTS of SPAM, virus o IRC abuse o Botnet C&C o hoping glue/fast flux o abusive, vulnerable web servers Some

Re: advise on network security report

2006-10-30 Thread Jim Popovitch
On Mon, 2006-10-30 at 09:21 -0800, Roland Dobbins wrote: > > On Oct 30, 2006, at 8:53 AM, Rick Wesson wrote: > > > I'm expecting to post a weekly report once a month to nanog, would > > this be disruptive? Hmmm, a weekly report once a month, this should be interesting. :-) -Jim P.

Re: advise on network security report

2006-10-30 Thread Randy Bush
>> o being put on a major DNS black list (spamcop, spamhaus, ahbl etc.) >> o hosting malware or phishing sites, open proxies >> o sending LOTS of SPAM, virus >> o IRC abuse >> o Botnet C&C >> o hoping glue/fast flux >> o abusive, vulnerable web servers > > Some of those are clearly ludicro

Re: advise on network security report

2006-10-30 Thread Steve Atkins
On Oct 30, 2006, at 9:23 AM, Rick Wesson wrote: Fergie wrote: Rick, It would interesting to know how you classify "incidents" in the table below any one of the following: o being put on a major DNS black list (spamcop, spamhaus, ahbl etc.) o hosting malware or phishing sites, open p

Re: advise on network security report

2006-10-30 Thread Rick Wesson
Fergie wrote: Rick, It would interesting to know how you classify "incidents" in the table below any one of the following: o being put on a major DNS black list (spamcop, spamhaus, ahbl etc.) o hosting malware or phishing sites, open proxies o sending LOTS of SPAM, virus o IRC abuse

Re: advise on network security report

2006-10-30 Thread Roland Dobbins
On Oct 30, 2006, at 8:53 AM, Rick Wesson wrote: I'm expecting to post a weekly report once a month to nanog, would this be disruptive? Far better to simply post a pointer to your new list, IMHO, and let folks subscribe if the so choose. As it is, many of these various automated posting

Re: advise on network security report

2006-10-30 Thread Fergie
Rick, It would interesting to know how you classify "incidents" in the table below - ferg -- Rick Wesson <[EMAIL PROTECTED]> wrote: I would appreciate a bit of advise on a service I am about to deploy. I've spoken at different venues (including nanog) on global infection rates of bot

RE: Sagonet - Failing miserably with network security Someone needs to handle this.

2006-10-30 Thread Lasher, Donn
Not that this is his real name, or business, but a whois on the IP yields: [whois.arin.net] Sago Networks SAGO-20030401 (NET-65-110-32-0-1) 65.110.32.0 - 65.110.63.255 Anton Tenev SAGO-65-110-62-120 (NET-65-110-62-120-1) 65.11

advise on network security report

2006-10-30 Thread Rick Wesson
I would appreciate a bit of advise on a service I am about to deploy. I've spoken at different venues (including nanog) on global infection rates of bots and the general degradation of well behaved hosts. I now track around 2.2M abuse events per day and now have the capability to produce re