Re: The Internet's Immune System

2003-11-12 Thread Valdis . Kletnieks
On Wed, 12 Nov 2003 18:56:50 EST, Jamie Reid <[EMAIL PROTECTED]> said: > It would be useful if these sites allowed you to query them with CIDR ranges > to see if your site had originated any traffic that triggered their sensor > array I've always wondered how to do this securely in an ad-hoc mann

Re: GFI Security Suite

2003-11-12 Thread Michael A Tomasura
My company is using GFI MailSecurity for Exchange/SMTP 8 now. We have tested GFI MailEssentials for Exchange/SMTP. They work like they say they do. They give us very little trouble. It seems like the products from GFI are getting better. I wouldn't say they are perfect. http://kbase.gfi.com/s

Re: ARIN, where art thou?

2003-11-12 Thread william
On Wed, 12 Nov 2003, Randy Bush wrote: > > > It looks like they are back up now. > > s/they/you/ It wasnt just him. I can see in the log period when recusive lookups to arin were failing (connection timed out). There was definetly a problem 20 minutes ago. I can actually see two periods of ab

Re: ARIN, where art thou?

2003-11-12 Thread Randy Bush
> It looks like they are back up now. s/they/you/

Re: ARIN, where art thou?

2003-11-12 Thread Haesu
It looks like they are back up now. I think it was short outage. Sorry to those who got distracted by the false alarm here.. -hc -- Haesu C. TowardEX Technologies, Inc. Consulting, colocation, web hosting, network design and implementation http://www.towardex.com | [EMAIL PROTECTED] Cell: (978)

Re: Google down?

2003-11-12 Thread Jay Hennigan
On Wed, 12 Nov 2003, Jim Wood wrote: > Looks like google is down too ARIN and Google both work fine from AS4927. -- Jay Hennigan - CCIE #7880 - Network Administration - [EMAIL PROTECTED] WestNet: Connecting you to the planet. 805 884-6323 WB6RDV NetLojix Communications, Inc. - h

Re: Portable Cooling

2003-11-12 Thread David Lesher
Speaking on Deep Background, the Press Secretary whispered: > > > There are air to water a/c units or chillers. We used one such unit. > They can be located just about anywhere since they can pump, or be fed > water through a hose, and drain via another hose. > > In fact we have the unit st

Re: Google down?

2003-11-12 Thread matt
> > Looks like google is down too > Both google and arin are working fine from here; could be a localized upstream provider issue on your end?

Re: ARIN, where art thou?

2003-11-12 Thread Chris Adams
Once upon a time, Haesu <[EMAIL PROTECTED]> said: > I am trying from different locations and its not connecting.. traceroute > dies after arin-gw.customer.alter.net whois.arin.net and www.arin.net are working from here. It appears they block traceroute. -- Chris Adams <[EMAIL PROTECTED]> System

Google down?

2003-11-12 Thread Jim Wood
Looks like google is down too

ARIN, where art thou?

2003-11-12 Thread Haesu
Does any one know if ARIN just went down? I am trying from different locations and its not connecting.. traceroute dies after arin-gw.customer.alter.net Thanks, -hc -- Haesu C. TowardEX Technologies, Inc. Consulting, colocation, web hosting, network design and implementation http://www.towarde

Re: The Internet's Immune System

2003-11-12 Thread Johannes Ullrich
As far as reporting is concerned, we do have a number of ways you can query our DShield data. First of all, by prefix (right now only /8, /16, /24). But we do send out daily custom reports per request. Just send me an e-mail. There is also a test version of a report by ASN: http://www.dshield.or

Re: The Internet's Immune System

2003-11-12 Thread Paul Vixie
here's what i learned about a white-hat registry. nobody cares. this is perceived as an assymetric benefit, where the costs (even if there's no money, there's still effort in registering initial and new address space or AS#'s or whatever) are borne by the network owner and the benefits are felt

Re: The Internet's Immune System

2003-11-12 Thread Jamie Reid
It would be useful if these sites allowed you to query them with CIDR ranges to see if your site had originated any traffic that triggered their sensor arrays. The IDS community never seems to have wrapped its collective head around routing information. Looking up single IP addrs is just cosmet

Re: The Internet's Immune System

2003-11-12 Thread Bryan Bradsby
> Devise a system that assumes owners of IP space WANT to know about problems. > report --open-proxy 192.168.1.1 and have a report sent to whoever needed to know about it. http://www.Incidents.org http://www.Dshield.org/howto.php http://www.MyNetWatchman.com -bryan bradsby

GFI Security Suite

2003-11-12 Thread Wesley Vaux
Has anyone or does anyone currently or recently used any of the products by GFI?  What are your thoughts about these products if you have.   Thanks for your input.     Wes Vaux, CCNA, CCDA Network Security Engineer, 9000 Regency Pkwy Ste 500 Cary, NC 27511 t 919.463.6782 f 919.4

Re: Portable Cooling

2003-11-12 Thread Michael Loftis
--On Wednesday, November 12, 2003 16:07 + [EMAIL PROTECTED] wrote: I searched the archives and couldn't find anything about a portable cooling units so am resorting to posting, sorry if its redundant. I am setting up a development lab and need additional cooling on a temporary basis. IMHO

Re: The Internet's Immune System

2003-11-12 Thread Christopher X. Candreva
On Wed, 12 Nov 2003, David A. Ulevitch wrote: > Automated techniques are the only thing that will stop it but is your > idea "fast enough?" I don't think so. Relying on user reports is good > for compromises and spambots but it won't do anything to stop CodeRed or > Nimda. True -- but I did sa

Re: The Internet's Immune System

2003-11-12 Thread David A. Ulevitch
Christopher X. Candreva wrote: So in the above example, if I receive the report for 192.168.1.1 being an open proxy, I might have my system configured, because that is a residential DSL IP, to automaticly do a full port scan on it to look for open proxies, and if I confirm that it is open shut the

The Internet's Immune System

2003-11-12 Thread Christopher X. Candreva
On Sun, 2 Nov 2003, Paul Vixie wrote: > so listen up. just because many of the infected hosts won't be disinfected, > don't assume that there's no value in tracking and reporting them, or that > there's no reason to spend money listening to and acting on complains about > them. the internet's

RE: Portable Cooling

2003-11-12 Thread Dave Hilton
Might you be referring to a "MovinCOOL" by the company named DENSO ? We have one of the model 10SFU-1 - got them from the Grainger catalog. We named ours Snuffleupagus :) Dave Hilton Staff System Administrator entelos(r) Foster City, CA "Linux is like a wigwam - No Gates, no Windows, Apac

Re: Point of sale RAS hardware?

2003-11-12 Thread Paul S. Brown
Last time I did this I cheated and bought a bunch of the old 4-to-a-card USR Rackmount Couriers second hand and shoved a Digiboard in the back of a PC and sent them init strings to lock them to V22 negotiation. Worked well. Obviously this isn't an option if you want to do it on a large scale, o

Re: Portable Cooling

2003-11-12 Thread John Kinsella
Yea, I got one in my little server room in the office. Building gave me the choice of getting one of those when I moved in, or throwing a full blown water chiller based system in the AC room, I took the cheaper path. Works OK, wish I had gotten one model bigger than what I have (the smallest).

Re: uRPF-based Blackhole Routing System Overview

2003-11-12 Thread Scott McGrath
Vendor C calls it DHCP snooping and to the best of my knowledge it is only available under IOS not CatOS Scott C. McGrath On Fri, 7 Nov 2003, Greg Maxwell wrote: > > On Fri, 7 Nov 2003, Robert A. Hayden wrote: > > [snip] > > One final note. This system is prett

Point of sale RAS hardware?

2003-11-12 Thread Jeffrey Paul
Does anyone know of a good RAS product that supports the fast train times needed for point of sale terminals (specifically the ability to turn off data compression, error detection, and speed negotiation)? Most every one I've seen is aimed at serving as-fast-as-possible dialup network access to n

Re: Portable Cooling

2003-11-12 Thread Michael . Dillon
>I searched the archives and couldn't find anything about a portable cooling >units so am resorting to posting, sorry if its redundant. >I am setting up a development lab and need additional cooling on a temporary >basis. All cooling units move heat from point A to point B. The end result is

RE: Portable Cooling

2003-11-12 Thread Geo.
www.ppe.com shows them there. Geo. -Original Message- >basis. I recall a product called, "move n kool"? It looked like the robot

Re: Portable Cooling

2003-11-12 Thread Phil Rosenthal
On Nov 12, 2003, at 10:43 AM, Fisher, Shawn wrote: I searched the archives and couldn't find anything about a portable cooling units so am resorting to posting, sorry if its redundant. I am setting up a development lab and need additional cooling on a temporary basis. I recall a product call

RE: Portable Cooling

2003-11-12 Thread kwallace
Check with Home Depot, they have some for about $400 - from Maytag; also APC makes one, but not sure of cost or source. -Keith -Original Message- From: Fisher, Shawn [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2003 10:43 AM To: Nanog List (E-mail) Subject: Portable Cooling

Portable Cooling

2003-11-12 Thread Fisher, Shawn
I searched the archives and couldn't find anything about a portable cooling units so am resorting to posting, sorry if its redundant. I am setting up a development lab and need additional cooling on a temporary basis. I recall a product called, "move n kool"? It looked like the robot on lost in

Re: Router with 2 (or more) interfaces in same network

2003-11-12 Thread Stephen J. Wilcox
> I think it will if you specify a netmask, otherwise it uses, wrongly in my > view, an old style classless netmask based on the old class A B and C rules. On a side issue then.. : Why do so many vendors automatically generate a classful netmask? Surely the correct practice is to force the inpu

Re: Router with 2 (or more) interfaces in same network

2003-11-12 Thread Neil J. McRae
> Errr, no. FreeBSD won't let you do this. I think it will if you specify a netmask, otherwise it uses, wrongly in my view, an old style classless netmask based on the old class A B and C rules. Neil.