RE: amazonaws.com?

2008-05-30 Thread michael.dillon
 So to get Amazon to police their customers either requires 
 regulation or an external economic pressure. Blocking AWS 
 from folk's mail servers would apply some pressure,

No it would not. That is what AWS wants you to to. 

 making 
 areas of the net go dark to AWS would apply more pressure 
 faster. A considerable amount of pressure could be placed by 
 a big enough money damages lawsuit but that has a feedback 
 delay of months to years.

And such lawsuits can go both ways. As soon as a company moves
beyond protective blocking of port 25, to punitive blocking of
all traffic from AWS, they run the risk of being the target of
a damages lawsuit. Not to mention complaints from their own
customers.

There simply is no simple solution to this problem.

--Michael Dillon



Re: amazonaws.com?

2008-05-30 Thread Robert E. Seastrom

I'm not on the MLC (which doesn't have any community representatives
on it at present) anymore.

Nonetheless, I implore everyone to consider this thread dead.  It's
run far enough afield on speculation and analogies that I for one
think it's fairly out of scope.

Thanks,

---Rob





BGP Update Report

2008-05-30 Thread cidr-report
BGP Update Report
Interval: 28-Apr-08 -to- 29-May-08 (32 days)
Observation Point: BGP Peering with AS2.0

TOP 20 Unstable Origin AS
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS15169  316375  2.7%2378.8 -- GOOGLE - Google Inc.
 2 - AS4538   136309  1.2%  27.7 -- ERX-CERNET-BKB China Education 
and Research Network Center
 3 - AS614096355  0.8% 106.2 -- IMPSAT-USA - ImpSat USA, Inc.
 4 - AS949883516  0.7%  67.0 -- BBIL-AP BHARTI BT INTERNET LTD.
 5 - AS22773   74090  0.6%  36.1 -- CCINET-2 - Cox Communications 
Inc.
 6 - AS238665395  0.6%  44.7 -- INS-AS - ATT Data 
Communications Services
 7 - AS17974   64506  0.6% 139.0 -- TELKOMNET-AS2-AP PT 
Telekomunikasi Indonesia
 8 - AS958361158  0.5%  50.7 -- SIFY-AS-IN Sify Limited
 9 - AS919855489  0.5% 111.4 -- KAZTELECOM-AS Kazakhtelecom 
Corporate Sales Administration
10 - AS701154916  0.5%  48.9 -- FRONTIER-AND-CITIZENS - 
Frontier Communications of America, Inc.
11 - AS651751873  0.5%  76.4 -- RELIANCEGLOBALCOM - Reliance 
Globalcom Services, Inc
12 - AS475549493  0.4%  29.9 -- VSNL-AS Videsh Sanchar Nigam 
Ltd. Autonomous System
13 - AS815148301  0.4%  38.7 -- Uninet S.A. de C.V.
14 - AS638946761  0.4%  23.0 -- BELLSOUTH-NET-BLK - 
BellSouth.net Inc.
15 - AS647844190  0.4%  44.9 -- ATT-INTERNET3 - ATT WorldNet 
Services
16 - AS11492   44091  0.4%  35.8 -- CABLEONE - CABLE ONE
17 - AS17488   43143  0.4%  37.5 -- HATHWAY-NET-AP Hathway IP Over 
Cable Internet
18 - AS701842048  0.4%  28.7 -- ATT-INTERNET4 - ATT WorldNet 
Services
19 - AS24731   41096  0.4% 513.7 -- ASN-NESMA National Engineering 
Services and Marketing Company Ltd. (NESMA)
20 - AS629841052  0.3%  53.0 -- COX-PHX - Cox Communications 
Inc.


TOP 20 Unstable Origin AS (Updates per announced prefix)
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS26829   33281  0.3%   33281.0 -- YKK-USA - YKK USA,INC
 2 - AS17834   12211  0.1%   12211.0 -- KYOBOAUTO-AS-KR Kyobo Auto 
Insurance CO.,LTD
 3 - AS42787   35901  0.3%   11967.0 -- MMIP-AS MultiMedia IP Ltd.
 4 - AS286467141  0.1%7141.0 -- Confederacao Interestadual das 
Cooperativas Ligadas ao Sicredi
 5 - AS36384   18882  0.2%6294.0 -- GOOGLE-IT - Google Incorporated
 6 - AS309295091  0.0%5091.0 -- HUTCB Hidrotechnical Faculty - 
Technical University
 7 - AS403593964  0.0%3964.0 -- SOUTHEASTERNMILLS-ROME - 
Southeastern Mills, Inc.
 8 - AS353243748  0.0%3748.0 -- ECH-WILL-AS E.C.H. Will
 9 - AS16466   17907  0.1%3581.4 -- AVAYA AVAYA
10 - AS329963451  0.0%3451.0 -- AGRIBANK-STPAUL - AgriBank, FCB
11 - AS23082   17085  0.1%3417.0 -- MPHI - Michigan Public Health 
Institute
12 - AS299103027  0.0%3027.0 -- IACP - INTL. ASSN OF CHIEF OF 
POLICEI
13 - AS9122 2995  0.0%2995.0 -- TECHNOELECTROSERVIS-AS 
Technoelektroservis Ltd.
14 - AS105515605  0.1%2802.5 -- RAPID-CITY-REGIONAL - Rapid 
City Regional Hospital
15 - AS343782703  0.0%2703.0 -- RUG-AS Razgulay Group
16 - AS15169  316375  2.7%2378.8 -- GOOGLE - Google Inc.
17 - AS447302286  0.0%2286.0 -- ALFAGOMMA Alfa Gomma s.p.a.
18 - AS569129154  0.2%2242.6 -- MITRE-AS-5 - The MITRE 
Corporation
19 - AS353092206  0.0%2206.0 -- NERO-AG-AS Nero AG
20 - AS47212   23175  0.2%2106.8 -- UGD-AS University Goce Delcev


TOP 20 Unstable Prefixes
Rank Prefix Upds % Origin AS -- AS Name
 1 - 125.23.208.0/20   37848  0.3%   AS9498  -- BBIL-AP BHARTI BT INTERNET LTD.
 2 - 193.33.184.0/23   35853  0.3%   AS42787 -- MMIP-AS MultiMedia IP Ltd.
 3 - 12.108.254.0/24   33281  0.3%   AS26829 -- YKK-USA - YKK USA,INC
 4 - 192.12.120.0/24   28636  0.2%   AS5691  -- MITRE-AS-5 - The MITRE 
Corporation
 5 - 221.128.192.0/18  26803  0.2%   AS18231 -- EXATT-AS-AP IOL NETCOM LTD
 6 - 213.91.175.0/24   17150  0.1%   AS8866  -- BTC-AS Bulgarian 
Telecommunication Company Plc.
 7 - 210.92.148.0/24   12211  0.1%   AS17834 -- KYOBOAUTO-AS-KR Kyobo Auto 
Insurance CO.,LTD
 8 - 203.63.26.0/2410050  0.1%   AS9747  -- EZINTERNET-AS-AP EZInternet Pty 
Ltd
 9 - 193.239.114.0/24   9817  0.1%   AS31003 -- IRON-MOUNTAIN-UK-AS Iron 
Mountain UK Ltd
10 - 221.135.230.0/23   9266  0.1%   AS9583  -- SIFY-AS-IN Sify Limited
11 - 84.23.102.0/24 8625  0.1%   AS24731 -- ASN-NESMA National Engineering 
Services and Marketing Company Ltd. (NESMA)
 AS34400 -- ASN-ETTIHADETISALAT Etihad 
Etisalat
12 - 64.201.128.0/208536  0.1%   AS11915 -- TELWEST-NETWORK-SVCS-STATIC - 
TEL WEST COMMUNICATIONS LLC
13 - 

The Cidr Report

2008-05-30 Thread cidr-report
This report has been generated at Fri May 30 21:17:45 2008 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.

Check http://www.cidr-report.org for a current version of this report.

Recent Table History
Date  PrefixesCIDR Agg
23-05-08266670  167326
24-05-08266754  167382
25-05-08266501  166389
26-05-08266731  166040
27-05-08266584  166616
28-05-08266831  167687
29-05-08267378  168129
30-05-08267397  167991


AS Summary
 28457  Number of ASes in routing system
 11987  Number of ASes announcing only one prefix
  4919  Largest number of prefixes announced by an AS
AS4538 : ERX-CERNET-BKB China Education and Research Network 
Center
  88356864  Largest address span announced by an AS (/32s)
AS721  : DISA-ASNBLK - DoD Network Information Center


Aggregation Summary
The algorithm used in this report proposes aggregation only
when there is a precise match using the AS path, so as 
to preserve traffic transit policies. Aggregation is also
proposed across non-advertised address space ('holes').

 --- 30May08 ---
ASnumNetsNow NetsAggr  NetGain   % Gain   Description

Table 266995   1680319896437.1%   All ASes

AS4538  4919  876 404382.2%   ERX-CERNET-BKB China Education
   and Research Network Center
AS4755  1640  218 142286.7%   VSNL-AS Videsh Sanchar Nigam
   Ltd. Autonomous System
AS6389  1994  620 137468.9%   BELLSOUTH-NET-BLK -
   BellSouth.net Inc.
AS9498  1167   67 110094.3%   BBIL-AP BHARTI BT INTERNET
   LTD.
AS22773  945   66  87993.0%   CCINET-2 - Cox Communications
   Inc.
AS18566 1044  279  76573.3%   COVAD - Covad Communications
   Co.
AS11492 1226  491  73560.0%   CABLEONE - CABLE ONE
AS8151  1233  506  72759.0%   Uninet S.A. de C.V.
AS4323  1459  741  71849.2%   TWTC - Time Warner Telecom,
   Inc.
AS1785  1022  323  69968.4%   AS-PAETEC-NET - PaeTec
   Communications, Inc.
AS17488 1073  375  69865.1%   HATHWAY-NET-AP Hathway IP Over
   Cable Internet
AS19262  898  205  69377.2%   VZGNI-TRANSIT - Verizon
   Internet Services Inc.
AS2386  1439  886  55338.4%   INS-AS - ATT Data
   Communications Services
AS6478   948  409  53956.9%   ATT-INTERNET3 - ATT WorldNet
   Services
AS19916  638  119  51981.3%   ASTRUM-0001 - OLM LLC
AS18101  686  186  50072.9%   RIL-IDC Reliance Infocom Ltd
   Internet Data Centre,
AS4766   878  391  48755.5%   KIXS-AS-KR Korea Telecom
AS7011  1076  604  47243.9%   FRONTIER-AND-CITIZENS -
   Frontier Communications of
   America, Inc.
AS4134   825  381  44453.8%   CHINANET-BACKBONE
   No.31,Jin-rong Street
AS17676  525   83  44284.2%   GIGAINFRA BB TECHNOLOGY Corp.
AS855597  165  43272.4%   CANET-ASN-4 - Bell Aliant
AS6197  1007  591  41641.3%   BATI-ATL - BellSouth Network
   Solutions, Inc
AS4668   675  272  40359.7%   LGNET-AS-KR LG CNS
AS7018  1396  997  39928.6%   ATT-INTERNET4 - ATT WorldNet
   Services
AS22047  565  169  39670.1%   VTR BANDA ANCHA S.A.
AS9443   467   85  38281.8%   INTERNETPRIMUS-AS-AP Primus
   Telecommunications
AS3602   455   80  37582.4%   AS3602-RTI - Rogers Telecom
   Inc.
AS4808   521  147  37471.8%   CHINA169-BJ CNCGROUP IP
   network China169 Beijing
   Province Network
AS7029   554  183  37167.0%   WINDSTREAM - Windstream
   Communications Inc
AS16814  426   66  36084.5%   NSS 

Power/temperature monitoring

2008-05-30 Thread Frank Bulk
Hopefully monitoring the status of a network is on-topic.

I'm looking for temperature and power monitoring unit to install in some
remote BWA cabinets.  We had two incidents where we lost power in a town and
we weren't aware of it until the backup batter drained to empty, and another
situation where the cabinet became too cold.  Because these cabinets are
less than 19 wide and just 3-5 deep, I need something quite small.  I did
find one product but it requires four components (unit with built-in
temperature sensor, adapter, and AC power sensor, plus power supply)

Perhaps there's someone on this list who has gone down this road and can
point me to a good product.

Required:
- temperature sensor
- 110 VAC power monitoring (on/off, not necessarily current)
- Ethernet interface (at least SNMP, Web GUI and 

Optional:
- fed via 12 VDC power
- 12 VDC power monitoring (current)
- humidity sensor


Frank




Re: Power/temperature monitoring

2008-05-30 Thread Jeremy Anderson
http://akcp.com/company/sensorProbe8.htm

Everything you need.  

Jeremy


On Fri, 2008-05-30 at 09:58 -0500, Frank Bulk wrote:
 Hopefully monitoring the status of a network is on-topic.
 
 I'm looking for temperature and power monitoring unit to install in some
 remote BWA cabinets.  We had two incidents where we lost power in a town and
 we weren't aware of it until the backup batter drained to empty, and another
 situation where the cabinet became too cold.  Because these cabinets are
 less than 19 wide and just 3-5 deep, I need something quite small.  I did
 find one product but it requires four components (unit with built-in
 temperature sensor, adapter, and AC power sensor, plus power supply)
 
 Perhaps there's someone on this list who has gone down this road and can
 point me to a good product.
 
 Required:
 - temperature sensor
 - 110 VAC power monitoring (on/off, not necessarily current)
 - Ethernet interface (at least SNMP, Web GUI and 
 
 Optional:
 - fed via 12 VDC power
 - 12 VDC power monitoring (current)
 - humidity sensor
 
 
 Frank
 
 




Re: Power/temperature monitoring

2008-05-30 Thread Mike Tancsa

At 10:58 AM 5/30/2008, Frank Bulk wrote:


Required:
- temperature sensor
- 110 VAC power monitoring (on/off, not necessarily current)
- Ethernet interface (at least SNMP, Web GUI and


We have been using Uptime Devices.  Our units have room for 3 
sensors (we have 2 temp and one for humidity).  Web, SNMP, ethernet, 
external AC power blob. Its a fairly small form factor and it has 
been reliable for us over the years.  Alerts work as expected and 
havent had any false positives either over the years.


---Mike 





Re: Power/temperature monitoring

2008-05-30 Thread Matthew Crocker


We used an Uptime Device and it didn't work out too well.  We switched  
to an AKCP SensorProbe8-60 http://www.akcp.com/company/sensorProbe8X60.htm 
 which has worked out better.


We need a lot of dry contacts to monitor our alarm relays (Cisco  
ONS15454, Taqua T7000, Liebert HVACs, Generator, Fire Suppression,  
etc, etc...)




On May 30, 2008, at 11:10 AM, Mike Tancsa wrote:


At 10:58 AM 5/30/2008, Frank Bulk wrote:


Required:
- temperature sensor
- 110 VAC power monitoring (on/off, not necessarily current)
- Ethernet interface (at least SNMP, Web GUI and


We have been using Uptime Devices.  Our units have room for 3  
sensors (we have 2 temp and one for humidity).  Web, SNMP, ethernet,  
external AC power blob. Its a fairly small form factor and it has  
been reliable for us over the years.  Alerts work as expected and  
havent had any false positives either over the years.


   ---Mike






[NANOG-announce] New NANOG Mail List Committee

2008-05-30 Thread Philip Smith
Hi everyone,

In its recent meeting, the SC selected four volunteers from the 
community to join Sue Joiner of Merit on the Mail List Committee.

The new team is as follows:

   Sue Joiner  (appointed by Merit)
   Simon Lyall (term finishes in October 2009)
   Kris Foster (term finishes in October 2009)
   David Barak (term finishes in October 2008)
   Tim Yocum   (term finishes in October 2008)

The SC would like to thank the four successful volunteers for their 
willingness to contribute their time and energy to assist with 
supporting the NANOG mail list.

The SC also would like to thank Michael K Smith, John Osman and Alex 
Pilosov for also stepping forward and offering to help. We hope you will 
be willing to volunteer again when two positions on the MLC become 
available in October.

Kind regards,

Philip Smith
SC Chair
--

___
NANOG-announce mailing list
[EMAIL PROTECTED]
http://mailman.nanog.org/mailman/listinfo/nanog-announce



Re: Power/temperature monitoring

2008-05-30 Thread Chris Boyd


We've got a couple of the (beta test) mini goose climate monitors  
installed.  Takes up less space than the big APC boxes we've been using.


http://www.itwatchdogs.com/

--Chris



RE: Power/temperature monitoring

2008-05-30 Thread Frank Bulk
Do you know if they have a AC power probe?

Frank

-Original Message-
From: Alex Rubenstein [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 30, 2008 10:28 AM
To: Mike Tancsa; [EMAIL PROTECTED]; nanog@nanog.org
Subject: RE: Power/temperature monitoring

We've started using ControlByWeb, specifically
http://www.controlbyweb.com/temperature/index.html .. POE, and handles
four probes. We just don't use their probes, we buy them elsewhere (it's
plain old one wire).



 -Original Message-
 From: Mike Tancsa [mailto:[EMAIL PROTECTED]
 Sent: Friday, May 30, 2008 11:11 AM
 To: [EMAIL PROTECTED]; nanog@nanog.org
 Subject: Re: Power/temperature monitoring

 At 10:58 AM 5/30/2008, Frank Bulk wrote:

 Required:
 - temperature sensor
 - 110 VAC power monitoring (on/off, not necessarily current)
 - Ethernet interface (at least SNMP, Web GUI and

 We have been using Uptime Devices.  Our units have room for 3
 sensors (we have 2 temp and one for humidity).  Web, SNMP, ethernet,
 external AC power blob. Its a fairly small form factor and it has
 been reliable for us over the years.  Alerts work as expected and
 havent had any false positives either over the years.

  ---Mike




RE: Power/temperature monitoring

2008-05-30 Thread Tony Patti
   I agree with Chris -- we also have been using the ITWatchDogs products
   for years,

   and both the products and company have been wonderful to work with.

   Tony Patti

   CIO
   S. Walter Packaging Corp.



   -Original Message-
   From: Chris Boyd
   Sent: 5/30/2008 11:40 AM
   To: nanog@nanog.org
   Subject: Re: Power/temperature monitoring
   We've got a couple of the (beta test) mini goose climate monitors
   installed. Takes up less space than the big APC boxes we've been using.
   http://www.itwatchdogs.com/
   --Chris


Need Infiniband card recommendation

2008-05-30 Thread Jobe Bittman
Is anyone using Infiniband cards under linux? I'm trying to find a supported
card other than the Cisco one.

-- 
Jobe Bittman


Re: Need Infiniband card recommendation

2008-05-30 Thread Christian
try http://www.mellanox.com/

On Fri, May 30, 2008 at 12:24 PM, Jobe Bittman [EMAIL PROTECTED]
wrote:

 Is anyone using Infiniband cards under linux? I'm trying to find a
 supported
 card other than the Cisco one.

 --
 Jobe Bittman



Re: Need Infiniband card recommendation

2008-05-30 Thread Andrew Mulholland
On Fri, May 30, 2008 at 09:24:28AM -0700, Jobe Bittman wrote:
 Is anyone using Infiniband cards under linux? I'm trying to find a supported
 card other than the Cisco one.

Whats wrong with the cisco ones?

We're using their DDR ones here under Ubuntu 7.10 and haven't
experienced any issues.

They appear to be just 'Mellanox Technologies MT25208 InfiniHost III Ex'
though..

best wishes




Large number of DNS probes in last 24 hours

2008-05-30 Thread Jim Wise
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I've seen a surprising number of attempted recursive DNS requests 
against unpublished non-recursive DNS servers in the last 24 hours or 
so, many of them obviously probes of some sort (query for . IN NS, 
eg).

Is anyone else seeing this?  Is it new?  Or did some botnet just reach 
this corner of the IP space?

- -- 
Jim Wise
[EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (NetBSD)

iD8DBQFIQDPbq/KRbT0KwbwRAuzVAJ0QRpMw59U7U2qfpEdHOeIt+YVzxgCeLQK4
0HeEYDsVW4VI6ahbjE8xphQ=
=QV9h
-END PGP SIGNATURE-



Re: Large number of DNS probes in last 24 hours

2008-05-30 Thread Lynda

Jim Wise wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I've seen a surprising number of attempted recursive DNS requests 
against unpublished non-recursive DNS servers in the last 24 hours or 
so, many of them obviously probes of some sort (query for . IN NS, 
eg).


Is anyone else seeing this?  Is it new?  Or did some botnet just reach 
this corner of the IP space?


Yes, no, and yes. I've seen this sort of thing severe enough that I 
simply took the servers down for a day (yes, really), even considering 
the severe inconvenience that caused.


--
Die Gedanken sind frei




Re: Large number of DNS probes in last 24 hours

2008-05-30 Thread John Menerick
I have seen this as well on my fringe IP-space networks.  Just a  
botnet or two running along the range.  A cost of doing business :\


John Menerick
http://icehax.us



On May 30, 2008, at 10:11 AM, Lynda wrote:


Jim Wise wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I've seen a surprising number of attempted recursive DNS requests  
against unpublished non-recursive DNS servers in the last 24 hours  
or so, many of them obviously probes of some sort (query for . IN  
NS, eg).


Is anyone else seeing this?  Is it new?  Or did some botnet just  
reach this corner of the IP space?


Yes, no, and yes. I've seen this sort of thing severe enough that I  
simply took the servers down for a day (yes, really), even  
considering the severe inconvenience that caused.


--
Die Gedanken sind frei







cluepon irrweb.com

2008-05-30 Thread Christian
anyone know whats going on with this  - still a work in progress? plans/etc?


Re: Large number of DNS probes in last 24 hours

2008-05-30 Thread Michael Still
Jim Wise wrote:
 I've seen a surprising number of attempted recursive DNS requests 
 against unpublished non-recursive DNS servers in the last 24 hours or 
 so, many of them obviously probes of some sort (query for . IN NS, 
 eg).
 
 Is anyone else seeing this?  Is it new?  Or did some botnet just reach 
 this corner of the IP space?

I have seen PlanetLab experiments doing this. What are the originating
IP addresses?

Mikal