Re: Arbor Networks DoS defense product

2002-05-15 Thread Rob Thomas
rd this from me before, so I'll spare you the rave. :) What percentage of all Internet traffic is DoS? Unclear. Until the data is gathered, it can not be analyzed, and the data is rarely collected. Thanks, Rob. -- Rob Thomas http://www.cymru.com/~robt ASSERT(coffee != empty);

Re: Arbor Networks DoS defense product

2002-05-15 Thread Rob Thomas
in the very active underground economy). Thanks, Rob. -- Rob Thomas http://www.cymru.com/~robt ASSERT(coffee != empty);

Re: Arbor Networks DoS defense product

2002-05-15 Thread Rob Thomas
s about the mad fast honeypot residing within your prefixes. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com/~robt ASSERT(coffee != empty);

Re: Arbor Networks DoS defense product

2002-05-15 Thread Rob Thomas
hand you could say "serves 'em right for being hacked!" On the other hand, you could wonder why it is that the non-geek broadband users must be system, network, and firewall administrators. Thanks, Rob. -- Rob Thomas http://www.cymru.com/~robt ASSERT(coffee != empty);

Re: Arbor Networks DoS defense product

2002-05-15 Thread Rob Thomas
ttack types as the bots. On the receiving end, upwards of 80% of all the woe I track is not TCP. Thanks, Rob. -- Rob Thomas http://www.cymru.com/~robt ASSERT(coffee != empty);

Re: Canonical bogon list?

2002-05-20 Thread Rob Thomas
Hi, Kevin. ] Does anyone know of a source for a reliable bogon list? The best I know if ] is from Rob Thomas, but his last template update was 10/01, and IANA's ] made allocations since then. Actually, the mistake is that I've updated my template yet failed to change the date. D

Re: DoS on ftp port

2002-05-21 Thread Rob Thomas
ties. If the server(s) now part of the warez network have popular things on them, you will take quite a beating on bandwidth. By the way, several of the warez bots are also flooders, e.g. can be used to packet victims. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Bogon list

2002-06-04 Thread Rob Thomas
! Be the first in your ASN to join the CREDITS section. :) Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Bogon list

2002-06-04 Thread Rob Thomas
I already have. My social life is proof of that. :) Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Oh, I almost forgot...

2002-06-04 Thread Rob Thomas
always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Inconsistent routes, was Re: mail-abuse.org down?

2002-06-09 Thread Rob Thomas
Hi, all. ] Define "lots". I see about 500 inconsistent routes in BGP, have seen them I see a few more than that: http://www.cymru.com/BGP/incon01.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Inconsistent routes, was Re: mail-abuse.org down?

2002-06-09 Thread Rob Thomas
Hi, all. Aside from the restaurants, how's Toronto? :) ] http://www.cymru.com/BGP/incon01.html The list can be found here: http://www.cymru.com/BGP/incon01-list.txt This is the output of a very beta script. Comments welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(c

Updated bogon list

2002-07-04 Thread Rob Thomas
ml Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: DOS attack from PANAMSAT

2002-07-06 Thread Rob Thomas
00 - 18000 bots, it isn't all that necessary to mask the source IPs. :/ Just my $.02, of course. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Bogus bogon?

2002-07-08 Thread Rob Thomas
nt in social engineering? :-) No, an experiment in not-enough-coffee-and-making-mods-late-at-night. :) Thanks and apologies! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Bogus bogon?

2002-07-08 Thread Rob Thomas
wever. It seems this prefix would best be used internally. What do others think? Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Prefix delta

2002-07-08 Thread Rob Thomas
. To whomever you are - thanks. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: What is a reasonable range for global BGP table size?

2002-07-17 Thread Rob Thomas
Hi, Rob. ] How big is the global BGP table running these days? I'm seeing an average of around 115K prefixes. The delta isn't very high. You can see some data here: http://www.cymru.com/BGP Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: What is a reasonable range for global BGP table size?

2002-07-17 Thread Rob Thomas
reate first. Suggestions are welcome and encouraged. :) Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Are you lame? :)

2002-07-26 Thread Rob Thomas
have moved here: http://www.cymru.com/DNS/dns.html My thanks to the authors of the lamers.sh script, which I modified to suit my purposes. Comments and feedback are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

DNS monitoring changes

2002-07-28 Thread Rob Thomas
. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

IANA IPv4 allocations and bogon updates: 89/8, 90/8 and 91/8

2005-07-06 Thread Rob Thomas
- <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Bogus ASN monitoring - <http://www.cymru.com/BGP/asnbogusrep.html> Please feel free to contact Team Cymru <[EMAIL PROTECTED]> wit

Re: [afnog] ARIN to allocate from 74/8 & 75/8

2005-09-20 Thread Rob Thomas
resses prior to announcing the test prefixes. 74.63.1.2 75.127.1.2 76.191.1.2 Sorry those weren't announced sooner! Thanks, Rob, for Team Cymru. -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.

Re: [afnog] ARIN to allocate from 74/8 & 75/8

2005-09-20 Thread Rob Thomas
] and statistical reliability. presumably that is coming and just ] hasn't been discussed or carried out yet. Yep, that's being done since we announced the prefixes. More details to come shortly. :) Todd, thanks for checking on these prefixes and sharing what you see! Thanks, Ro

Re: [afnog] ARIN to allocate from 74/8 & 75/8

2005-09-20 Thread Rob Thomas
EMAIL PROTECTED] Thanks, Rob. -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.

RE: [afnog] ARIN to allocate from 74/8 & 75/8

2005-09-22 Thread Rob Thomas
Cymru do all the work. Fire up a peering session to the Bogon route-servers today! <http://www.cymru.com/BGP/bogon-rs.html> As always, if you are having difficulty reaching the three test IP addresses, please drop us a note at [EMAIL PROTECTED] Thanks! Rob. -- Rob Thomas http://www.

Re: cymru down?

2005-10-31 Thread Rob Thomas
ardent Cubs fan, cursing the Sox. ;) We continue to debug it with our peers. Stay tuned! Apologies for the inconvenience. Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty);

Re: cymru down?

2005-10-31 Thread Rob Thomas
r own, I should probably ask them to change that. Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty);

Re: cymru down?

2005-11-02 Thread Rob Thomas
Thanks, Rob, for Team Cymru. -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty);

Re: a record?

2005-11-14 Thread Rob Thomas
While IPv6 obviously presents a huge address space, the miscreants don't have to scan all of it, or compromise much more than a few devices on it, to reap a reward. Just enough is good enough. I'll take a pina colada anyway. :) Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com

Re: blocking unallocated subnets

2005-12-02 Thread Rob Thomas
> Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty);

Re: blocking unallocated subnets

2005-12-02 Thread Rob Thomas
ore. Take it with a grain of salt. :) Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty);

Team Cymru outage

2005-12-18 Thread Rob Thomas
Hi, NANOGers. Just a FYI - we at Team Cymru are upgrading some of our infrastructure today. This will result in partial and complete outages for most of the day. We will be back online, new and improved, by the end of the day. Thanks! Rob, for Team Cymru. -- Rob Thomas Team Cymru http

Re: Bogon filtering

2004-12-03 Thread Rob Thomas
work to earn your trust with each project. I think we've done a fair job of that. Suggestions and feedback (along with coffee) are always welcome! Thanks, Rob, not the only member of Team Cymru. :) -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.

RE: Bogon filtering (don't ban me)

2004-12-04 Thread Rob Thomas
deploy more if necessary. By the way we recommend that folks peer with at least two of the Bogon route-servers. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Bogon filtering (don't ban me)

2004-12-05 Thread Rob Thomas
prefix-list that would permit you to filter on a prefix and anything more specific. Stay tuned! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Bogon filtering (don't ban me)

2004-12-05 Thread Rob Thomas
the RIB clean. That means the use of filtering. We and others provide those as well: <http://www.cymru.com/Documents/secure-bgp-template.html> <http://www.cymru.com/gillsr/documents/junos-bgp-template.htm> <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Templates

Re: Bogon filtering (don't ban me)

2004-12-05 Thread Rob Thomas
us why. Suggestions are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: IPv6, IPSEC and deep packet inspection

2004-12-31 Thread Rob Thomas
. So while a new approach to security with IPv6 may be warranted, many of the same old threats await you there. Thanks, Rob. -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.

Re: IPv6, IPSEC and DoS

2005-01-01 Thread Rob Thomas
ssume that encrypted packets keep them safe. Encryption != security. Thanks, Rob. -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.

Re: 72.18.160.0/19 Please Check Filters - BOGON Filtering IP Space 72.0.0.0/8

2005-01-19 Thread Rob Thomas
Hi, Bryan. ] Rob T - this should be a periodic FAQ: ] ]http://www.cymru.com/Bogons/ That's a great idea! Everyone knows I don't send out nearly enough email. :) Seriously, we'll try to be better about sending out regular reminders. Thanks! Rob. -- Rob Thomas http://www.c

Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19

2005-01-20 Thread Rob Thomas
s would be rather obvious, and they are, yet no one notices. Most of these compromised routers are at the end of FR or frac-T connections. I suspect a great many of them were configured once, then left to rot with the same code and configuration for years and years. Thanks, Rob. -- Rob Thomas htt

RE: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19

2005-01-21 Thread Rob Thomas
Hi, Hank. ] How would this scale for say 200K routers? 2M? -Hank Dave Deitrich of Team Cymru will be presenting on this very topic at the next NANOG. Short answer: We're ready when you are. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.

Re: Vonage complains about VoIP-blocking

2005-02-15 Thread Rob Thomas
uses TFTP to update itself as well. Please note that I am NOT advocating the blocking of TFTP. Thanks, Rob. -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.

Re: Obsolete bogon filtering

2005-03-10 Thread Rob Thomas
llowing URL. <http://www.cymru.com/BGP/bogon-rs.html> Thanks, Rob, for Team Cymru. -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.

IANA IPv4 allocations and bogon update: 41/8

2005-04-14 Thread Rob Thomas
gusrep.html> Please feel free to contact Team Cymru <[EMAIL PROTECTED]> with any comments, questions, or concerns. Thank you for your continued support. Rob. - -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); -BEGIN PGP SIGNATURE- Version: PGP 6.5.2 iQCVAwUBQl578Fk

IANA IPv4 allocations and bogon update: 73/8

2005-03-30 Thread Rob Thomas
free to contact Team Cymru <[EMAIL PROTECTED]> with any comments, questions, or concerns. Thank you for your continued support. Rob, for Team Cymru. - -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999. -BEGIN PGP SIGNATURE- Version: PGP 6.5.2 iQCVAwUBQk

IANA IPv4 allocations and bogon updates: 74/8, 75/8, 76/8, 189/8, 190/8

2005-06-21 Thread Rob Thomas
ring - <http://www.cymru.com/BGP/asnbogusrep.html> Please feel free to contact Team Cymru <[EMAIL PROTECTED]> with any comments, questions, or concerns. Thank you for your continued support. Rob, for Team Cymru. - -- Rob Thomas http://www.cymru.com Shaving

Updated DNS monitoring

2002-08-28 Thread Rob Thomas
ments, feedback, donated data, and peering sessions are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Updated DNS monitoring

2002-08-28 Thread Rob Thomas
who are having difficulty viewing the site: I apologize, and I'm trying to find a way to alleviate the paucity of available bandwidth into my home lab. Stay tuned! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

DNS monitoring - mirror site

2002-08-28 Thread Rob Thomas
is a great community. Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Updated DNS monitoring, take 2

2002-09-05 Thread Rob Thomas
/dnsmirror/ I will shortly have an additional web server on a much faster set of links, as well as another mirror. For the impatient, I recommend the MIT site. Don't forget to check the Lame Report while you're there. :) Comments and feedback are always welcome! Thanks, Rob. -- Rob T

Updated BGP monitoring

2002-09-12 Thread Rob Thomas
/index.html The bogus ASN page, complete with a colorful graph, can be found here: http://www.cymru.com/BGP/asnbogusrep.html Comments and feedback are always welcome! My thanks to those who donate peering and gear to my monitoring efforts. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT

Updated ASN allocation to ARIN

2002-10-01 Thread Rob Thomas
. You can see the list of networks that leak bogus ASNs here: http://www.cymru.com/BGP/asnbogusrep.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Root DNS Server Issues?

2002-10-01 Thread Rob Thomas
Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: DNS issues various

2002-10-24 Thread Rob Thomas
log use spoofed source addresses. Does anti-spoofing help? Yes. It is but one of many mitigation strategies. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

ICMP filtering, was Re: ICANN Targets DDoS Attacks

2002-10-29 Thread Rob Thomas
or me, that would be welcome as well. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: ICMP filtering, was Re: ICANN Targets DDoS Attacks

2002-10-30 Thread Rob Thomas
to add to the Secure IOS Template. I need more time and more coffee. :) http://www.cymru.com/Documents/secure-ios-template.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

IANA IPv4 allocation list format change

2002-10-30 Thread Rob Thomas
odify your scripts. My own script claimed that several new allocations had been made. It's fixed now. :) http://www.iana.org/assignments/ipv4-address-space My thanks to the IANA folks for this change! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Lame reports - thanks!

2002-10-30 Thread Rob Thomas
free to send them to [EMAIL PROTECTED] Be the first on your block to fill my lamer file system. :) Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Bogon filtering, was Re: Telus (AS852) problems ?

2002-11-10 Thread Rob Thomas
/Documents/bogon-list.html Please take a few moments to read the list and adjust your filters accordingly. The folks in 69.0.0.0/8 will thank you. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: current apnic prefixes

2002-11-12 Thread Rob Thomas
Hi, Randy. ] what is the apnic equivalent of that document? Is this close to what you require? http://www.apnic.net/db/min-alloc.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Next NANOG meeting/stats

2002-11-18 Thread Rob Thomas
] None of the below events are related to network operations. Nordnog is. Just a small point of order: FIRST is definitely related to network operations, albeit with a focus on secure network operations. :) -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

82/8 allocated to RIPE

2002-11-23 Thread Rob Thomas
BGP Template (ported to Juniper by Steve Gill) http://www.cymru.com/Documents/secure-bgp-template.html http://www.qorbit.net/documents/junos-bgp-template.pdf Secure BIND Template http://www.cymru.com/Documents/secure-bind-template.html Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee

New ASN allocation from IANA to RIPE

2002-12-04 Thread Rob Thomas
CREDITS section! :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

HTTP proxies, was Re: Operational Issues with 69.0.0.0/8...

2002-12-06 Thread Rob Thomas
umber. :/ Watch out for those TCP 1080, 3128, and 8080 flows. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Operational Issues with 69.0.0.0/8...

2002-12-06 Thread Rob Thomas
Hi, NANOGers. ] Why don't we all go bug Rob Thomas for a bogon update mailing list, ] and stop pissing and moaning on this one. :) I (and Steve Gill) am more than happy to create such a list. Heck, you don't even have to bug me! :) I've even pondered the idea of hosting a WH

Re: Operational Issues with 69.0.0.0/8...

2002-12-09 Thread Rob Thomas
Hi, Eddy. ] Give Rob Thomas official authority, a paycheck, and the necessary ] bandwidth. ;-) Hehe! I'll second that! :) No one would support it, though, once they saw my lousy code. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Operational Issues with 69.0.0.0/8...

2002-12-10 Thread Rob Thomas
he task. That might be two days, or two decades. I'm willing and happy to do it until that day comes. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Bogon announcement list

2002-12-13 Thread Rob Thomas
, Barry Greene, and Rob Thomas) update when such allocations are made. These announcements will be made as we detect such allocations. The list is moderated by Steve Gill, Barry Greene, Jared Mauch, and Rob Thomas. It is open to anyone who wishes to subscribe. Aliases are welcome to subscribe. To

Bogus ASN tracking

2002-12-23 Thread Rob Thomas
e the full path and better tracking. The report is updated hourly, and you will find it here: http://www.cymru.com/BGP/asnbogusrep.html Comments and feedback are always welcome! Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

dns2go.com contact?

2002-12-28 Thread Rob Thomas
Hi, NANOGers. Does anyone have a reliable contact at dns2go.com? I have tried all of the usual aliases with no success. :( Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

The Bogon Reference Page

2003-01-02 Thread Rob Thomas
, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-16 Thread Rob Thomas
able to send during a TCP amplification attack is a bonus prize, but is not required for the attack to succeed. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: FW: Re: Is there a line of defense against Distributed Reflectiveattacks?

2003-01-18 Thread Rob Thomas
the login and password. This isn't limited to Cisco routers, however. I collected an impressive list of broadband and other vendor routers as well, for a total of just over 30K compromised routers in 2002. As Chris points out, this is an issue that requires vigilance beyond teams at ISPs. ] ad

Re: FW: Re: Is there a line of defense against Distributed Reflectiveattacks?

2003-01-19 Thread Rob Thomas
ess support phonecalls. I agree. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: DOS?

2003-01-25 Thread Rob Thomas
the point of creating a DoS on the router. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: management interface accessability (was Re: Worm / UDP1434)

2003-01-26 Thread Rob Thomas
. They may be infected, and will fire up their VPN tunnels Monday morning. This may introduce the worm into the chewy center of many corporate networks. Hopefully folks have put the proper filters in place on their VPN access points. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee

Re: management interface accessability (was Re: Worm / UDP1434)

2003-01-26 Thread Rob Thomas
] Wait, but isn't your corporate network 'secure' cause its got a super kewl ] firewall infront of it?? HAHAHA! Would that be the stateful firewall that filled up and fell over due to all the worm probes? ;) -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: management interface accessability (was Re: Worm / UDP1434)

2003-01-26 Thread Rob Thomas
Hey, Chris. ] or the one that steathily permitted udp 1434 from the outside world :( Yeah. :( This is yet another reason why I tell folks with firewalls NOT to allow everything from the internal (often mistakenly labelled "trusted") net to the external nets. Thanks, Rob. -- Rob T

Re: .org whois

2003-01-29 Thread Rob Thomas
Hi, Adam. ] Anyone know anything about this? I can't find anything on ICANN's web site ] regarding a switch. I noticed it on 8 Jan, and adjusted my monitoring accordingly. http://www.cymru.com/DNS/gtlddns-o.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

New IANA IPv4 allocations and bogon updates

2003-02-13 Thread Rob Thomas
This includes links to the Secure IOS Template, Secure Juniper Template, bogon monitoring, and other associated references. Both 222/8 and 223/8 were withdrawn from the bogon route-server as of 13 FEB 02:01:00 US CST. Thanks! Rob, for Team Cymru. -- Rob Thomas http://www.cymru.com ASSERT(coffee

Change in homeland security threat level

2003-02-27 Thread Rob Thomas
Hi, NANOGers. For those of you tracking the DHS threat level - The Homeland Security threat level is very likely to be lowered one notch today, according to Marcus Sachs. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: BGP to doom us all

2003-02-28 Thread Rob Thomas
. However, raising the bar even a little can yield impressive results. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: anti-spam vs network abuse

2003-02-28 Thread Rob Thomas
difficult) way to trace back the attack to the sources. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: BGP to doom us all

2003-02-28 Thread Rob Thomas
hosts. These are some of the warning signs. ] Who cares? If the other routers are configured correctly, they wont take ] tainted advertisements. If they are not configured correctly, any Super ] Secure BGP wont help. Yep, thus my constant raving about prefix filtering. :) Thanks, Rob. -- Rob

Re: BGP to doom us all

2003-02-28 Thread Rob Thomas
pain caused by the average scan and sploit crowd. Pick good passwords, limit access, keep routing tables clean, etc. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Rob Thomas
t Rob is considering setting up an LDAP server as an Yep, it is high on my burgeoning to-do list. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

RE: 69/8...this sucks

2003-03-10 Thread Rob Thomas
Hi, NANOGers. ] I bet for example we could get Rob Thomas to update his templates to ] include scarier warnings... For the right amount of coffee, I just might. ;) Seriously, I'm all for it. Here is what I have on the Bogon List page: NOTE WELL! IANA allocations change over tim

RE: 69/8...this sucks

2003-03-11 Thread Rob Thomas
is service, I'm happy to provide it for as long as there is a need. This is a free service, and not at all cumbersome to the members of Team Cymru. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: cw to att? issue?

2003-03-12 Thread Rob Thomas
nd comments are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: route filtering in large networks

2003-03-12 Thread Rob Thomas
about folks web surfing 10/8. :) There are things that go wrong, however, and I firmly believe in filtering both on ingress and egress (at the edge, to be clear). This is an extra bit of protection in case something bad happens, be it malware, fat fingers, etc. Thanks, Rob. -- Rob Thomas http://www.c

ASN allocation update

2003-03-25 Thread Rob Thomas
this change. You should update any filters you have. The bogus ASN report, which shows ASNs leaking private, unallocated, and reserved ASNs, is located here: <http://www.cymru.com/BGP/asnbogusrep.html> Thanks, Rob, for Team Cymru. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Team Cymru Darknet Project

2004-06-03 Thread Rob Thomas
tworks and the flows on them. Comments, feedback, and coffee are always welcome! :) Thanks! Rob, for Team Cymru. - -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); -BEGIN PGP SIGNATURE- Version: PGP 6.5.2 iQCVAwUBQL/W4VkX3QAo5sgJAQG3QQP9FT6jwkPbdLaCFBLds4ftjFaNGA

Updated monitoring pages from Team Cymru

2004-10-13 Thread Rob Thomas
page at the following URL. <http://www.cymru.com/Darknet/> We hope you find this of use. Comments and suggestions are always welcome! Thanks! Rob, for Team Cymru. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Re: 71/8 and 72/8 reminder/plea

2004-11-15 Thread Rob Thomas
rnet garbage. :) <http://www.cymru.com/Reach/garbage.html> <http://www.cymru.com/Reach/darknet.html> Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Issues in New York?

2003-05-30 Thread Rob Thomas
power issue, so we are looking for any "me too" incidents we can find. Is anyone else having issues down there? Replies on or off list appreciated. Alif Terranson Savvis Communications (314) 628-7602 Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

Update to the bogon route-server project

2003-05-30 Thread Rob Thomas
me to buy a cup of coffee for Rob at the SLC NANOG if you feel kindly. :) You can read more about the project here: <http://www.cymru.com/BGP/bogon-rs.html> You can read more about bogon filtering and tracking here: <http://www.cymru.com/Bogons/> Thanks! Rob, for Team Cymru. --

Re: Pesky spammers are using my mailbox

2003-06-01 Thread Rob Thomas
st arrived, and I look pretty darn NANOGish if I do say so myself. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

RE: Fast TCP?

2003-06-05 Thread Rob Thomas
now ] mentality. For those who herd bots, this in theory provides the capability to get-it-done-right *AND* get-it-done-now. :/ Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

  1   2   >