Re: short, two part question ICANN Vs. The World

2014-06-24 Thread manning bill

On 23June2014Monday, at 22:55, Keith Medcalf kmedc...@dessus.com wrote:

 The question at hand is.. Do countries/businesses have to affiliate or
 utilize any of those services provided by ICANN other than the assignment
 of an IP address?  
 
 No.

except for RFC 1918 and ULA space, which require no coordination 
whatsoever

 
 And can you get away with LAN/CAN/MAN stand-alone systems [instead of 
 utilizing DNS-via-ICANN]??
 
 Yes.
 
 Example:
 
 
 Is it legal to cut off those DNS systems and loop in backwards?  (instead
 of bidirectional).  **  I don't want my city/schools/other systems hooked
 into the World Wide Web. // someone let me know when you get a chance.
 
 Yes.  Sounds like you want private (discontiguous) network space.  There is 
 no need to be a part of the internet if you don't want to be, but that desire 
 does not prevent you in any way from utilizing internet technology 
 discontiguously (ie, separate and apart from the Internet).
 

what does “loop in backwards” mean?

it is possible (and there are production systems) to “tap” the Internet and 
load/fill/examine DNS caches of Internet DNS traffic.   NSA and its industrial 
partners (like Farsight Security)
do this for a living.   there are many corporations that have built/use 
enclaved or walled garden networks for internal use that have no visibility to 
the Internet or its applications (like WWW).
Its not that hard to do… folks have been doing it for decades. 


/bill
PO Box 12317
Marina del Rey, CA 90295
310.322.8102

short, two part question ICANN Vs. The World

2014-06-23 Thread stovetop 202
Topic: ICANN Vs. The World.

The question at hand is.. Do countries/businesses have to affiliate or utilize 
any of those services provided by ICANN other than the assignment of an IP 
address?  And can you get away with LAN/CAN/MAN stand-alone systems [instead of 
utilizing DNS-via-ICANN]??
Example: 
Is it legal to cut off those DNS systems and loop in backwards?  (instead of 
bidirectional).  **  I don't want my city/schools/other systems hooked into the 
World Wide Web. // someone let me know when you get a chance.



RE: short, two part question ICANN Vs. The World

2014-06-23 Thread Michael O Holstein
Short answer,

Yes .. provided you don't care if anyone can see it.

Take a look at what NEW.NET tried with DNS back in the day.

Cheers,

Michael Holstein
Cleveland State University

From: NANOG nanog-boun...@nanog.org on behalf of stovetop 202 
stovetop_...@yahoo.com
Sent: Sunday, June 22, 2014 7:45 PM
To: nanog@nanog.org
Subject: short, two part question ICANN Vs. The World

Topic: ICANN Vs. The World.

The question at hand is.. Do countries/businesses have to affiliate or utilize 
any of those services provided by ICANN other than the assignment of an IP 
address?  And can you get away with LAN/CAN/MAN stand-alone systems [instead of 
utilizing DNS-via-ICANN]??
Example:
Is it legal to cut off those DNS systems and loop in backwards?  (instead of 
bidirectional).  **  I don't want my city/schools/other systems hooked into the 
World Wide Web. // someone let me know when you get a chance.



Re: short, two part question ICANN Vs. The World

2014-06-23 Thread stovetop 202
What do you mean by if anyone can see it?
The lines are now closed off from the public's view.. but the textbooks still 
teach you that you should be able to have access freely.  Is it the data on the 
hard line that you're worried people can see?




On Monday, June 23, 2014 4:05 PM, Michael O Holstein 
michael.holst...@csuohio.edu wrote:
 


Short answer,

Yes .. provided you don't care if anyone can see it.

Take a look at what NEW.NET tried with DNS back in the day.

Cheers,

Michael Holstein
Cleveland State University


From: NANOG nanog-boun...@nanog.org on behalf of stovetop 202 
stovetop_...@yahoo.com
Sent: Sunday, June 22, 2014 7:45 PM
To: nanog@nanog.org
Subject: short, two part question ICANN Vs. The World

Topic: ICANN Vs. The World.

The question at hand is.. Do countries/businesses have to affiliate or utilize 
any of those services provided by ICANN other than the assignment of an IP 
address?  And can you get away with LAN/CAN/MAN stand-alone systems [instead of 
utilizing DNS-via-ICANN]??
Example:
Is it legal to cut off those DNS systems and loop in backwards?  (instead of 
bidirectional).  **  I don't want my city/schools/other systems hooked into the 
World Wide Web. // someone let me know when you get a chance.


Re: short, two part question ICANN Vs. The World

2014-06-23 Thread John Levine
In article 1403558512.59036.yahoomail...@web161403.mail.bf1.yahoo.com you 
write:
What do you mean by if anyone can see it?

You can easily set up your own tree of DNS names and servers.  The
protocol is public, and the software is widely available for free.

But if your DNS names and servers aren't findable starting from the
ICANN root, your names won't resolve for anyone other than you and
your close friends who happen to be using your names rather than
ICANN's names.

Like the guy said, read up on the failure of NET.NET, and about a
dozen other alternate roots.  Warning: you quickly get deep into
tinfoil hat territory with the other alternates.

R's,
John



Re: short, two part question ICANN Vs. The World

2014-06-23 Thread Randy Bush
 Is it legal to cut off those DNS systems and loop in backwards?
  (instead of bidirectional).  **  I don't want my city/schools/other
 systems hooked into the World Wide Web. // someone let me know when
 you get a chance.

please do so on your network.  it will reduce the nut postings on the
internet.

randy


Re: short, two part question ICANN Vs. The World

2014-06-23 Thread Justin M. Streiner

On Mon, 23 Jun 2014, stovetop 202 wrote:


What do you mean by if anyone can see it?
The lines are now closed off from the public's view.. but the textbooks 
still teach you that you should be able to have access freely.  Is it 
the data on the hard line that you're worried people can see?


It would help if you'd provide an explanation of what you're trying to 
accomplish.  It almost sounds like some combination of firewalls and proxy 
servers to provide some separation between your network(s) and the rest of 
the global Internet might be a more functional solution than doing odd 
things with DNS.


Bear in mind that a lot of the answers you get will probably be along the 
lines of it depends or this might work, and come with an implied 
disclaimer (no guarantees).  People might also recommend that you consider 
engaging a consultant to design/build what you need.


jms


RE: short, two part question ICANN Vs. The World

2014-06-23 Thread Keith Medcalf
The question at hand is.. Do countries/businesses have to affiliate or
utilize any of those services provided by ICANN other than the assignment
of an IP address?  

No.

And can you get away with LAN/CAN/MAN stand-alone systems [instead of 
utilizing DNS-via-ICANN]??

Yes.

Example:


Is it legal to cut off those DNS systems and loop in backwards?  (instead
of bidirectional).  **  I don't want my city/schools/other systems hooked
into the World Wide Web. // someone let me know when you get a chance.

Yes.  Sounds like you want private (discontiguous) network space.  There is no 
need to be a part of the internet if you don't want to be, but that desire does 
not prevent you in any way from utilizing internet technology discontiguously 
(ie, separate and apart from the Internet).