Re: DDos syn attack

2002-12-30 Thread Paul Vixie
> wow, break bind in a new and horrid way to accomplish this task :) Nice... > perhaps mr. vixie will add this functionality for us? patches welcomed. -- Paul Vixie

Re: AOL & Cogent

2002-12-30 Thread Stephen J. Wilcox
On Mon, 30 Dec 2002, Leo Bicknell wrote: > In a message written on Sun, Dec 29, 2002 at 10:32:25PM +, Paul Vixie wrote: > > there we go again, talking technology and making the technological kind > > of sense. peering isn't a technology decision, it's a business decision. > > This depends

Re: AOL & Cogent

2002-12-30 Thread Stephen J. Wilcox
On 30 Dec 2002, Jeff S Wheeler wrote: > > On Mon, 2002-12-30 at 06:37, Basil Kruglov wrote: > > For my not-so-bright customers I simply want traceroutes to look good when > > they run one from Level3-homed site. Obviously a ~5-7 hops to us looks > > really disturbing, try to explain to one of t

Re: DDos syn attack

2002-12-30 Thread Christopher L. Morrow
On Mon, 30 Dec 2002, Chris Wedgwood wrote: > > On Mon, Dec 30, 2002 at 08:09:17AM -0800, Randy Bush wrote: > > > actually, a bunch of research now shows that low ttls on A RRs (that > > are not the A RRs of NS RRs) has little effect. > > maybe this could help find the attacking nwtwork? assumin

Re: AOL & Cogent

2002-12-30 Thread E.B. Dreger
JSW> Date: 30 Dec 2002 13:59:40 -0500 JSW> From: Jeff S Wheeler JSW> So the obvious solution is to prepend your advertisements JSW> toward cogent, which will cause them to carry less of your JSW> inbound traffic. ...although the exact effects depend on your particular mix of upstreams. LOCAL_P

Re: AOL & Cogent

2002-12-30 Thread Jeff S Wheeler
On Mon, 2002-12-30 at 06:37, Basil Kruglov wrote: > For my not-so-bright customers I simply want traceroutes to look good when > they run one from Level3-homed site. Obviously a ~5-7 hops to us looks > really disturbing, try to explain to one of them that there is no problem. After some off-list d

Re: DDos syn attack

2002-12-30 Thread Andrew Dorsett
On Mon, 30 Dec 2002, Christopher L. Morrow wrote: > wouldn't dns lookups be a bit time consuming and introduce a dos on the > dos ?? if you had to look up each time you crafted a packet it'd take alot > more effort to pound out 100kpps, no? Most of the flooders I've seen (I'm > no programmer so I

Re: DDos syn attack

2002-12-30 Thread Christopher L. Morrow
On Mon, 30 Dec 2002, Randy Bush wrote: > > This is also a very viable solution, provided the customer has > > provisioned for this with lower ttls on their DNS records, which > > ALOT of people (thankfully) don't do > > actually, a bunch of research now shows that low ttls on A RRs > (that are n

Re: AOL & Cogent

2002-12-30 Thread Paul Vixie
> Is it just me or does all this make Internap's Business model look > really good? i think it's just you.

Re: AOL & Cogent

2002-12-30 Thread Paul Vixie
> Similarly to peering, a base amount is required to make this crazy > thing we all run work. As we've seen with companies like PSI, those > who terminate, or loose significant peering generally end up dead. no part of worldcom's failure traces to uunet's decision to restrict their peering back

Re: DDos syn attack

2002-12-30 Thread Randy Bush
> This is also a very viable solution, provided the customer has > provisioned for this with lower ttls on their DNS records, which > ALOT of people (thankfully) don't do actually, a bunch of research now shows that low ttls on A RRs (that are not the A RRs of NS RRs) has little effect. in the c

Re: DC power versus AC power

2002-12-30 Thread Stephen Sprunk
Thus spake Robert E. Seastrom <[EMAIL PROTECTED]>: > "Stephen Sprunk" <[EMAIL PROTECTED]> writes: > >> Thus spake joe mcguckin <[EMAIL PROTECTED]>: >>> It only takes 30ma to put your heart into atrial fibrillation. In >>> the usa, gfi's are set to trip at 5ma. >> >> Did you mean 5A, or am I misund

Re: AOL & Cogent

2002-12-30 Thread Stephen Sprunk
Thus spake David Diaz <[EMAIL PROTECTED]>: > Is it just me or does all this make Internap's Business model look > really good? http://finance.yahoo.com/q?s=INAP&d=t "EPS (ttm) -1.23" -- triple their current share price -- doesn't make their business model look so hot. S

Re: DC power versus AC power

2002-12-30 Thread David Lesher
I deny saying: > But they are there for reason. They are typ. full of power to powDer -- A host is a host from coast to [EMAIL PROTECTED] & no one will talk to a host that's close[v].(301) 56-LINUX Unless the host (that isn't close)

Re: DC power versus AC power

2002-12-30 Thread Robert E. Seastrom
"Stephen Sprunk" <[EMAIL PROTECTED]> writes: > Thus spake joe mcguckin <[EMAIL PROTECTED]>: > > It only takes 30ma to put your heart into atrial fibrillation. In the > > usa, gfi's are set to trip at 5ma. > > Did you mean 5A, or am I misunderstanding GFIs? it's 5ma. http://www.national.com/ds

Re: DC power versus AC power

2002-12-30 Thread Steven M. Bellovin
In message <004f01c2b018$4ac14900$[EMAIL PROTECTED]>, "Stephen Sprunk" wr ites: > >Thus spake joe mcguckin <[EMAIL PROTECTED]>: >> It only takes 30ma to put your heart into atrial fibrillation. In the >> usa, gfi's are set to trip at 5ma. > >Did you mean 5A, or am I misunderstanding GFIs? > No --

Re: DC power versus AC power

2002-12-30 Thread David Lesher
Unnamed Administration sources reported that Stephen Sprunk said: > > > > It only takes 30ma to put your heart into atrial fibrillation. In the > > usa, gfi's are set to trip at 5ma. > > Did you mean 5A, or am I misunderstanding GFIs? 5ma is correct. It takes very little current to cause fibri

Re: AOL & Cogent

2002-12-30 Thread David Diaz
Is it just me or does all this make Internap's Business model look really good? At 9:50 -0500 12/30/02, Leo Bicknell wrote: In a message written on Sun, Dec 29, 2002 at 10:32:25PM +, Paul Vixie wrote: there we go again, talking technology and making the technological kind of sense. peer

Re: DC power versus AC power

2002-12-30 Thread David Lesher
Unnamed Administration sources reported that Robert E. Seastrom said: > > Bottom line is that one should buy breakers and fuses that are > designed for use in DC powerplants, rather than trying to cheap out > with something you picked up at Home Depot or Pep Boys. I'm sure I'm > wasting my breat

Re: DDos syn attack

2002-12-30 Thread Christopher L. Morrow
On 30 Dec 2002, Mike Hyde wrote: > > Just wondering how people have delt with DDOS syn attacks on port 80 of > a customers server? We had an attack a couple of days ago, and it 1) acl the traffic (Stop immediate pain) 2) blackhole ip in question 3) track via: http://www.secsup.org/Tracking/ to

Re: DC power versus AC power

2002-12-30 Thread Stephen Sprunk
Thus spake joe mcguckin <[EMAIL PROTECTED]>: > It only takes 30ma to put your heart into atrial fibrillation. In the > usa, gfi's are set to trip at 5ma. Did you mean 5A, or am I misunderstanding GFIs? > Normally 48VDC wouldn't be considered a 'lethal' voltage (I've talked > to telephone technic

Re: Public thanks to UUNet security

2002-12-30 Thread Christopher L. Morrow
Mark, I'm sure that Damon will be happy to see this, I know I sure am. Thanks for the note. --Chris ([EMAIL PROTECTED]) ### ## UUNET Technologies, Inc. ## ## Manager ## ## Custo

Re: AOL & Cogent

2002-12-30 Thread Leo Bicknell
In a message written on Sun, Dec 29, 2002 at 10:32:25PM +, Paul Vixie wrote: > there we go again, talking technology and making the technological kind > of sense. peering isn't a technology decision, it's a business decision. This depends on how you define business decision. I view a busines

DDos syn attack

2002-12-30 Thread Mike Hyde
Just wondering how people have delt with DDOS syn attacks on port 80 of a customers server? We had an attack a couple of days ago, and it overwelmed both the customers firewall and, when we tried to turn up filtering on a 7600 cisco router, the router also. We ended up having the customer change

Re: AOL & Cogent

2002-12-30 Thread Basil Kruglov
On Mon, Dec 30, 2002 at 08:14:45AM -0500, Omachonu Ogali wrote: > > For my not-so-bright customers I simply want traceroutes to look good when > > they run one from Level3-homed site. Obviously a ~5-7 hops to us looks > > really disturbing, try to explain to one of them that there is no problem. >

Public thanks to UUNet security

2002-12-30 Thread Mark Radabaugh
Since the good things so rarely get mentioned... I would like to publicly thank UUNet's network operations for dealing with a DOS attack quickly and efficiently yesterday. I am happy to say it only required one phone call of less than 15 minutes to get the appropriate filtering in place. Mark R

Re: DC power versus AC power

2002-12-30 Thread Robert E. Seastrom
"Barton F Bruce" <[EMAIL PROTECTED]> writes: > Typical 120/208V small branch circuit breakers in small buildings and homes > have an interrupting capacity rated at 10,000 amps, and should not be > deployed where that can be exceeded. It will be on the label. It's worth noting that the interrupt

Re: AOL & Cogent

2002-12-30 Thread Omachonu Ogali
On Mon, Dec 30, 2002 at 05:37:10AM -0600, Basil Kruglov wrote: > > On Sat, Dec 28, 2002 at 09:45:21PM -0500, Richard A Steenbergen wrote: > > > 2. I think I asked this before, why wouldn't Cogent prepend > > > customer prefixes to Level3 or set BGP4 community for multihomed sites, > > > homed w/

Re: AOL & Cogent

2002-12-30 Thread Basil Kruglov
On Sat, Dec 28, 2002 at 09:45:21PM -0500, Richard A Steenbergen wrote: > > 2. I think I asked this before, why wouldn't Cogent prepend > > customer prefixes to Level3 or set BGP4 community for multihomed sites, > > homed w/ Cogent + someone else. > > You got your answer to this before, what par

Re: DC power versus AC power

2002-12-30 Thread Barton F Bruce
A few points: Below 50 volts, anyone can do the wiring. No licensed electrician is needed im most jurisdictions. Total fault current available determines the damage that will be done when something like a wrench falls across bus bars. Time, too, counts. If you can't vaporize the whole wrench bef