Re: [swinog] SwiNOG-6 announcement / Call for presentations

2003-02-27 Thread Nicolas FISCHBACH
Andre Oppermann wrote:

 [...]
Yea, I guess in the end I am complaining. I personally rather have
Nicolas giving a talk about the newest security issues with our
equipement  [...]
Thanks for the support Andre, but I won't make it to Swinog #6 :-(
I'll try to come up with some stuff for #7 ;-))
If of interest, have a look at this:

Service Provider Backbone Security Forum (Cisco)
Amsterdam 02-03/April
URL: https://programs.regweb.com/cisco/sp_security_forum/
Contact: [EMAIL PROTECTED]
Nico.
--
Nicolas FISCHBACH ([EMAIL PROTECTED]) http://www.securite.org/nico/
Senior Manager - IP Engineering/Security - COLT Telecom
Securite.Org Team http://www.securite.org/
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


[swinog] TR: RIPE Down or DOSed ?

2003-02-27 Thread Jerome Tissieres
Same problem here.. does anybody have more info ?

Jerome


-Message d'origine-
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] la part de
Marshall Eubanks
Envoye : jeudi, 27. fevrier 2003 16:05
A : [EMAIL PROTECTED]
Objet : RIPE Down or DOSed ?



Can anyone else get to ripe.net ?
I cannot seem to access the whois or any other service (my ripe traffic 
goes through Sprint).
When I ping peach.ripe.net, I get 90%+ missing packets + destination 
host unreachable
from inside Sprint.


  Regards
  Marshall Eubanks


--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] TR: RIPE Down or DOSed ?

2003-02-27 Thread ueli
On Thu, 27 Feb 2003 16:11:39 +0100
Jerome Tissieres [EMAIL PROTECTED] wrote:

 Same problem here.. does anybody have more info ?

I have seen following email: 

From: Paul Vlaar [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Subject: ICMP DDOS attack
Date: Thu, 27 Feb 2003 16:16:16 +0100
Sender: [EMAIL PROTECTED]
User-Agent: Mutt/1.3.28i

Hi there,

(apologies for a partly duplicate mail, here's some additional info)

We are currently seeing what looks very like a DDOS attack against
various hosts within 193.0.0.0/23 receiving a very high volume of icmp
echo replies.

We are 193.148.15.68 and 193.148.15.71, AS .

Being a DDOS we cannot immediately establish which peers we are receiving
this traffic from and would appreciate any assistance in blocking this
you can provide.

Also, a lot of peerings on both our interfaces have broken down and come
back a couple of times during the last hour or so, as the incoming
traffic is simply filling up our 100Mbit interfaces.


Thanks in advance,

Paul Vlaar
RIPE NCC

 
 Jerome
 
 
 -Message d'origine-
 De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] la part de
 Marshall Eubanks
 Envoye : jeudi, 27. fevrier 2003 16:05
 A : [EMAIL PROTECTED]
 Objet : RIPE Down or DOSed ?
 
 
 
 Can anyone else get to ripe.net ?
 I cannot seem to access the whois or any other service (my ripe traffic 
 goes through Sprint).
 When I ping peach.ripe.net, I get 90%+ missing packets + destination 
 host unreachable
 from inside Sprint.
 
 
   Regards
   Marshall Eubanks
 
 
 --
 [EMAIL PROTECTED] Maillist-Archive:
 http://www.mail-archive.com/swinog%40swinog.ch/


-- 
The software said it requires Windows 95 or better,
 so I installed Linux
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] backbone solution spam

2003-02-27 Thread Fredy Kuenzler
Steven Glogger wrote:
 
 hmm... everybody also got spam from backbone solutions??

Yes. Twice.

I hope people know now where _not_ to buy.

F.
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


RE: [swinog] backbone solution spam

2003-02-27 Thread Steven Glogger
i talked to mr. vontobel today for about 30 minutes

they got their data from the twix tel...
but he lied to me and told such shit as: it's allowed and if i mind it, i
could click on the link to unsubscribe..blablabla

i told him, that his action was total illegal... but he didn't took notice
of it..

-steven

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 Behalf Of Fredy Kuenzler
 Sent: Thursday, February 27, 2003 4:54 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [swinog] backbone solution spam


 Steven Glogger wrote:
 
  hmm... everybody also got spam from backbone solutions??

 Yes. Twice.

 I hope people know now where _not_ to buy.

 F.
 --
 [EMAIL PROTECTED] Maillist-Archive:
 http://www.mail-archive.com/swinog%40swinog.ch/


--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


RE: [swinog] backbone solution spam

2003-02-27 Thread Felix Rauch
On Thu, 27 Feb 2003, Steven Glogger wrote:
 i told him, that his action was total illegal... but he didn't took
 notice of it..

Even though it's not legally binding you might want to point him to
http://spam.trash.net/urteil2.html

- Felix
-- 
Felix Rauch, research assistant at laboratory for computersystems, ETH Zuerich
http://www.nice.ch/~felix/Member of Swiss Internet User Group: www.siug.ch
This article contains my personal view only! Use of my addresses for marketing
purposes is hereby strictly prohibited according to swiss privacy laws.

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


[swinog] Coincidence?

2003-02-27 Thread Pascal Gloor
guess where the company responsible for .iq (iraq) is located

http://www.iana.org/root-whois/iq.htm


Texas, US !

coincidence?

P.
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] Coincidence?

2003-02-27 Thread Andre Oppermann
Viktor Steinmann wrote:
 
 I guess, that's just fine - some TX guys could use a little more (.)iq :-)

Hey, wait! What's all the fuss in the UN about? They've invaded .iq
already!

-- 
Andre


 Cheers,
 Viktor
 
 On Friday 28 February 2003 08:40, Andre Oppermann wrote:
  Pascal Gloor wrote:
   guess where the company responsible for .iq (iraq) is located
  
   http://www.iana.org/root-whois/iq.htm
  
   Texas, US !
  
   coincidence?
 
  No. Just convenient! ;)
 --
 [EMAIL PROTECTED] Maillist-Archive:
 http://www.mail-archive.com/swinog%40swinog.ch/
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/