Re: [asterisk-users] Packet8 hacked

2009-01-23 Thread Steve Totaro
On Fri, Jan 23, 2009 at 2:19 AM, Michael mich...@networkstuff.co.nz wrote:
 On Fri, 23 Jan 2009 20:13:22 Peter Evans wrote:
 On Fri, Jan 23, 2009 at 07:08:16AM +, Gordon Henderson wrote:
  On Fri, 23 Jan 2009, Dean Collins wrote:
   Nope it's going to a sedo advertising domain parking site.
 
  Looks like a normal website to me (from the UK). I'd check that the DNS
  servers you're using haven't been hacked...

 Fine from New Zealand too.

 ___
 -- Bandwidth and Colocation Provided by http://www.api-digital.com --

 asterisk-users mailing list
 To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Fine using ATT's (at least I think they belong to ATT) DNS servers
(Also do NTP).  I will make this thread useful to someone.

Listed below because they are easy to remember and have never failed
me even when a customer's ISP's DNS is down, I get the call Our
Internet is Down but they can ping my servers by IP.  Also, can
speed up complaints of a slow network (if DNS lookups are the reason
for the slowness.

4.2.2.1
4.2.2.2
4.2.2.3

-- 
Thanks,
Steve Totaro
+18887771888 (Toll Free)
+12409381212 (Cell)

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Packet8 hacked

2009-01-23 Thread Kristian Kielhofner
On Fri, Jan 23, 2009 at 9:18 AM, Steve Totaro
stot...@asteriskhelpdesk.com wrote:

 Fine using ATT's (at least I think they belong to ATT) DNS servers
 (Also do NTP).  I will make this thread useful to someone.

 Listed below because they are easy to remember and have never failed
 me even when a customer's ISP's DNS is down, I get the call Our
 Internet is Down but they can ping my servers by IP.  Also, can
 speed up complaints of a slow network (if DNS lookups are the reason
 for the slowness.

 4.2.2.1
 4.2.2.2
 4.2.2.3

 --
 Thanks,
 Steve Totaro
 +18887771888 (Toll Free)
 +12409381212 (Cell)

Steve,

  Those are Level(3)s anycast DNS servers - part of internet legend!

  I once talked to a Level(3) engineer about how many queries those
things do (combined) and it was amazing.  I don't remember the exact
number but it was something in the TENS OF MILLIONS/day, maybe more.
It was one of those numbers (especially for daily traffic) that you
just don't really comprehend.

  I've read (on NANOG, of course) that Level(3) actually encourages
(at least doesn't discourage) their public use.  They log the queries
and sell the results for data mining purposes (DNS Alexa perhaps).

-- 
Kristian Kielhofner
http://blog.krisk.org
http://www.submityoursip.com
http://www.astlinux.org
http://www.star2star.com

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Packet8 hacked

2009-01-23 Thread Jeff LaCoursiere

On Fri, 23 Jan 2009, Kristian Kielhofner wrote:

 On Fri, Jan 23, 2009 at 9:18 AM, Steve Totaro
 stot...@asteriskhelpdesk.com wrote:

 Fine using ATT's (at least I think they belong to ATT) DNS servers
 (Also do NTP).  I will make this thread useful to someone.

 Listed below because they are easy to remember and have never failed
 me even when a customer's ISP's DNS is down, I get the call Our
 Internet is Down but they can ping my servers by IP.  Also, can
 speed up complaints of a slow network (if DNS lookups are the reason
 for the slowness.

 4.2.2.1
 4.2.2.2
 4.2.2.3

 --
 Thanks,
 Steve Totaro
 +18887771888 (Toll Free)
 +12409381212 (Cell)

 Steve,

  Those are Level(3)s anycast DNS servers - part of internet legend!

  I once talked to a Level(3) engineer about how many queries those
 things do (combined) and it was amazing.  I don't remember the exact
 number but it was something in the TENS OF MILLIONS/day, maybe more.
 It was one of those numbers (especially for daily traffic) that you
 just don't really comprehend.

  I've read (on NANOG, of course) that Level(3) actually encourages
 (at least doesn't discourage) their public use.  They log the queries
 and sell the results for data mining purposes (DNS Alexa perhaps).


Can you imagine the cache they hold?  Surely the most abused DNS servers 
in the world.  That is why they seem to speed up your slow Internet 
links.

j

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Packet8 hacked

2009-01-23 Thread Kevin P. Fleming
Jeff LaCoursiere wrote:

 Can you imagine the cache they hold?  Surely the most abused DNS servers 
 in the world.  That is why they seem to speed up your slow Internet 
 links.

They are also sitting 'right next to' one of the root servers, so when
you send them a recursive query they don't have far to go to start at
the top of the tree.

-- 
Kevin P. Fleming
Digium, Inc. | Director of Software Technologies
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
skype: kpfleming | jabber: kpflem...@digium.com
Check us out at www.digium.com  www.asterisk.org

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Packet8 hacked

2009-01-23 Thread David Backeberg
 Listed below because they are easy to remember and have never failed
 me even when a customer's ISP's DNS is down, I get the call Our
 Internet is Down but they can ping my servers by IP.  Also, can
 speed up complaints of a slow network (if DNS lookups are the reason
 for the slowness.

 4.2.2.1
 4.2.2.2
 4.2.2.3
 oh come now.

the best one is the only palindromic name server I've encountered: 4.2.2.4

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Packet8 hacked

2009-01-23 Thread Dean Collins
Service Alerts/Updates

1/23/2009 2:00am PST: 

Due to a global DNS (name server) issue with register.com, Packet8
servers and services became unreachable for customers using certain ISPs
including ATT, Cox, and Verizon while customers on other ISPs such as
Comcast and Level3 were impacted very briefly due to quick DNS update
recovery. As of 1:30am PST our tests show that all DNS servers of the
known impacted ISPs have been updated correctly, and Packet8 customers
on these networks should be able to reach our services. If you
experience any issue using your Packet8 service or reaching the Packet8
website, please reboot your network (by rebooting the DSL/Cable modem,
router, Packet8 phones and computers) to clear any cache information.

 

 

 

Unfortuately for some reason even though I rebooted my server timewarner
didn't update etc, problem fixed itself in the morning.

 

 

Regards,

 

Dean Collins

Cognation Inc

d...@cognation.net

+1-212-203-4357   New York

+61-2-9016-5642   (Sydney in-dial).

+44-20-3129-6001 (London in-dial).

 

 -Original Message-

 From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-

 boun...@lists.digium.com] On Behalf Of Kristian Kielhofner

 Sent: Friday, 23 January 2009 11:37 AM

 To: Asterisk Users Mailing List - Non-Commercial Discussion

 Subject: Re: [asterisk-users] Packet8 hacked

 

 On Fri, Jan 23, 2009 at 9:18 AM, Steve Totaro

 stot...@asteriskhelpdesk.com wrote:

 

  Fine using ATT's (at least I think they belong to ATT) DNS servers

  (Also do NTP).  I will make this thread useful to someone.

 

  Listed below because they are easy to remember and have never failed

  me even when a customer's ISP's DNS is down, I get the call Our

  Internet is Down but they can ping my servers by IP.  Also, can

  speed up complaints of a slow network (if DNS lookups are the
reason

  for the slowness.

 

  4.2.2.1

  4.2.2.2

  4.2.2.3

 

  --

  Thanks,

  Steve Totaro

  +18887771888 (Toll Free)

  +12409381212 (Cell)

 

 Steve,

 

   Those are Level(3)s anycast DNS servers - part of internet legend!

 

   I once talked to a Level(3) engineer about how many queries those

 things do (combined) and it was amazing.  I don't remember the exact

 number but it was something in the TENS OF MILLIONS/day, maybe more.

 It was one of those numbers (especially for daily traffic) that you

 just don't really comprehend.

 

   I've read (on NANOG, of course) that Level(3) actually encourages

 (at least doesn't discourage) their public use.  They log the queries

 and sell the results for data mining purposes (DNS Alexa perhaps).

 

 --

 Kristian Kielhofner

 http://blog.krisk.org

 http://www.submityoursip.com

 http://www.astlinux.org

 http://www.star2star.com

 

 ___

 -- Bandwidth and Colocation Provided by http://www.api-digital.com --

 

 asterisk-users mailing list

 To UNSUBSCRIBE or update options visit:

http://lists.digium.com/mailman/listinfo/asterisk-users

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Packet8 hacked

2009-01-23 Thread Steve Edwards
On Fri, 23 Jan 2009, Steve Totaro wrote:

 Also, can speed up complaints of a slow network...

Just what we all need -- faster complaints :)

Thanks in advance,

Steve Edwards  sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
Newline Fax: +1-760-731-3000

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Packet8 hacked

2009-01-23 Thread Fred Posner

On Jan 23, 2009, at 12:44 PM, Steve Edwards wrote:

 On Fri, 23 Jan 2009, Steve Totaro wrote:

 Also, can speed up complaints of a slow network...

 Just what we all need -- faster complaints :)



TMC posted an article on the Packet8 DNS outage:

http://www.tmcnet.com/usubmit/2009/01/23/3936498.htm



___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


[asterisk-users] Packet8 hacked

2009-01-22 Thread Dean Collins
Looks like www.packet8.com http://www.packet8.com/  has been hacked
:-(

The phone service is offline as well.

 

Interesting to note that the whois is showing an update today but
doesn't look like details have changed.

 

   Domain Name: PACKET8.NET
   Registrar: REGISTER.COM, INC.
   Whois Server: whois.register.com
   Referral URL: http://www.register.com
   Name Server: NS1-EQIX-SJO.PACKET8.NET
   Name Server: NS1-L3-SJO.PACKET8.NET
   Name Server: NS2-EQIX-SJO.PACKET8.NET
   Name Server: NS2-L3-SJO.PACKET8.NET
   Status: clientTransferProhibited
   Updated Date: 22-jan-2009
   Creation Date: 26-apr-2002
   Expiration Date: 26-apr-2014
 
 Last update of whois database: Fri, 23 Jan 2009 00:17:28 EST 

 

 

 

Anyone else on this list using packet8? 

 

Regards,

Dean Collins
Cognation Inc
d...@cognation.net
mailto:d...@cognation.net +1-212-203-4357   New York
+61-2-9016-5642   (Sydney in-dial).
+44-20-3129-6001 (London in-dial).

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Packet8 hacked

2009-01-22 Thread D Tucny
2009/1/23 Dean Collins d...@cognation.net

  Looks like www.packet8.com has been hacked L

 The phone service is offline as well.

 Anyone else on this list using packet8?


Not using packet8, but, the website looks normal to me...

What are you seeing?

d
___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Packet8 hacked

2009-01-22 Thread Dean Collins
Nope it's going to a sedo advertising domain parking site.

 

Regards,

Dean Collins
Cognation Inc
d...@cognation.net
mailto:d...@cognation.net +1-212-203-4357   New York
+61-2-9016-5642   (Sydney in-dial).
+44-20-3129-6001 (London in-dial).



From: asterisk-users-boun...@lists.digium.com
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of D Tucny
Sent: Friday, 23 January 2009 12:47 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Packet8 hacked

 

2009/1/23 Dean Collins d...@cognation.net

Looks like www.packet8.com http://www.packet8.com/  has been hacked
:-(

The phone service is offline as well.

 

Anyone else on this list using packet8? 


Not using packet8, but, the website looks normal to me...

What are you seeing?

d 

 

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Packet8 hacked

2009-01-22 Thread Steve Edwards
On Fri, 23 Jan 2009, Dean Collins wrote:

 Nope it's going to a sedo advertising domain parking site.

Looks like a real web site to me.

Thanks in advance,

Steve Edwards  sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
Newline Fax: +1-760-731-3000

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Packet8 hacked

2009-01-22 Thread Gordon Henderson
On Fri, 23 Jan 2009, Dean Collins wrote:

 Nope it's going to a sedo advertising domain parking site.

Looks like a normal website to me (from the UK). I'd check that the DNS 
servers you're using haven't been hacked...

Gordon

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Packet8 hacked

2009-01-22 Thread Michael
On Fri, 23 Jan 2009 20:13:22 Peter Evans wrote:
 On Fri, Jan 23, 2009 at 07:08:16AM +, Gordon Henderson wrote:
  On Fri, 23 Jan 2009, Dean Collins wrote:
   Nope it's going to a sedo advertising domain parking site.
 
  Looks like a normal website to me (from the UK). I'd check that the DNS
  servers you're using haven't been hacked...

Fine from New Zealand too.

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users