July 2008 - NA-Discuss - lists.icann.org

Re: [NA-Discuss] [ga] Root-Servers missing: g.root-servers.net andk.root-servers.net
by Jeffrey A. Williams July 29, 2008

July 29, 2008

Kim and all There are two statements you state are facts that the evidence does not bare out. 1.) G & K root servers were down or unreachable for a short period of time "Prior" to the complaint. I have that data confirming such. 2.) The person to which you refer to in the attacks routed through the IANA was Dr. Joe Baptista, and he is essentially correct and was very explicit as to what, how, and why such attacks occasionally occur. The data of such has also been preserved and can be verified. The data in *your attachment* is *not relevant* to the attacks which Dr. Joe explicitly articulated very clearly and briefly. But it is not really relevant to further belabor this incident, as it was not a significant incident of concern, but may be one possible or likely reference if future incidents of a similar nature occur at some unknown future date. Kim Davies wrote: > In the interests of bringing some facts into this thread, I hope this clarifies: > > * neither the G or K root are operated by ICANN or IANA; > > * neither was offline in the last few days prior to the complaint; > > * the original person who observed problems with the K root spoke with the K root operator on another list and the issue was identified as likely local to the observer's network, not to the root server; > > * as for the claim that "the US Military like the Canadian military complex often gets attacks routed through the IANA", I have no idea what this means. Perhaps the complainant could explain precisely that they mean. > > Attached is a graph of the responsiveness of all 13 root servers for the last 48 hours, as tested from 69 testing points around the world. If it was predominantly offline it would show as a solid red bar. As you can see one such event occured for G root, but that was at 1600 GMT on Monday, after this thread had started. By looking at that in more detail detail on the second graph, we can see it was still up and answering, but was problematic reaching it from many test sites. (If it was offline it will be universally red all the way down the graph) > > kim > > ------------------------------------------------------------------------ > ------ > NA-Discuss mailing list > NA-Discuss(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/na-discuss_atlarge-lists.ic… > > Visit the NARALO online at http://www.naralo.org > ------ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

FWD again: Re: [ga] Apple Still Has Not Patched the DNS Hole
by Jeffrey A. Williams July 29, 2008

July 29, 2008

Patrick and all, Sorry Patrick, but the security hole in DNS/Bind has been known for years. And ISC knew it was because I and several people told and demonstrated many times of this hole in DNS/Bind back in 2000. Why wasn't it addressed by ISC than? So Dan wasn't the first by a long shot in making this and other security holes in DNS known. We fixed it in our DNS shortly after we confirmed it back in 2000. We named our product BindPlus and is being used currently by WISE providers sense 2001. Incompatance of this sort and magnitude should never be taken lightly and in my professional opinion, cannot be tolorated at all! For further refrence to what I am contending review the archives at: http://www.dnso.org/mailinglists.html In case some are missing due to creative editing, I still have three archived copies. Patrick Vande Walle wrote: > Jeffrey A. Williams wrote: > > All, > > > > As an example to another thread and for Joe's edification. > > > > An article up at TidBITS on http://db.tidbits.com/article/9706 > > Apple's unexplained failure to patch the DNS vulnerability that we have > > been http://it.slashdot.org/article.pl?sid=08/07/25/1334254&tid=172 > > discussing for a > > http://it.slashdot.org/article.pl?sid=08/07/21/2212227&tid=172 > > few weeks now. "Apple uses the popular Internet Systems > > Consortium BIND DNS server which was one of the first tools patched, > > but Apple has yet to include the fixed version in Mac OS X Server, > > despite > > being notified of vulnerability details early in the process and being > > informed of the coordinated patch release date. > > > Sometimes, it may be wise to wait: > > "The group responsible for maintaining the internet's most popular > domain name software BIND has admitted it caused problems by > fast-tracking a security patch designed to fix the widescale DNS flaw > discovered by researcher Dan Kaminsky this month." > > http://www.zdnet.com.au/news/security/soa/DNS-patch-causes-BIND-blunder/0,1… > > Patrick Vande Walle > > -- > Patrick Vande Walle > Check my blog: http://patrick.vande-walle.eu Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

[Fwd: Re: [At-Large] Number of Recipients to Mailing Lists]
by Jeffrey A. Williams July 29, 2008

July 29, 2008

All, See below... -------- Original Message -------- Subject: Re: [At-Large] Number of Recipients to Mailing Lists Date: Tue, 29 Jul 2008 00:23:46 -0700 From: "Jeffrey A. Williams" <jwkckid1(a)ix.netcom.com> Organization: IDNS and Spokesman for INEGroup To: At-Large Staff <staff(a)atlarge.icann.org>,GAC Rep <ssene(a)ntia.doc.gov> CC: At-Large Worldwide <alac(a)atlarge-lists.icann.org>,Cheryl Langdon-Orr <cheryl(a)hovtek.com.au> References: <C4B5BDD4.54C7B%staff(a)atlarge.icann.org> Nick and all, Thank you for admitting that the chair is interested in censorship. Such a practice, as you should know is a very questionable one in that it violates IETF standard, is prelude to a waste of bandwidth, limits freedom of expression which is also a very questionable Constitutional issue/violation in the US, is not in keeping with the MOU, and serves as a significant potential for Forwarding to other recipients that would normally have been "CC'ed" in the original post, and BTW, "CC'ing" is not cross posting by definition, and also serves as an influence on additionally wasting electricity, which in the present resource conservation movement of such a resource gives the appearance of misuse under the law intentionally. In any event, and as a result of this belated notice, I shall resend my posts of today to ALL of the original recipients separately in accordance to this horrible and illegitimate notice accordingly. At-Large Staff wrote: > Dear All: > > In keeping with a request from the Chair of the ALAC, responding to many > community requests, the total number of recipients of emails to the At-Large > lists has been limited to five per email. > > This is by way of helping to reduce crossposting and of multiple copies of > the same message being received by recipients who are at the same time > direct recipients of a message and mailing list members. > > If you receive a bounce from the mailing lists, and you are subscribed and > routinely are able to send emails to that list, please look at the number of > recipients the message had. > -- > Regards, > > Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul > ICANN At-Large Staff > email: staff(a)atlarge.icann.org > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Apple Still Has Not Patched the DNS Hole
by Jeffrey A. Williams July 28, 2008

July 28, 2008

All, As an example to another thread and for Joe's edification. An article up at TidBITS on http://db.tidbits.com/article/9706 Apple's unexplained failure to patch the DNS vulnerability that we have been http://it.slashdot.org/article.pl?sid=08/07/25/1334254&tid=172 discussing for a http://it.slashdot.org/article.pl?sid=08/07/21/2212227&tid=172 few weeks now. "Apple uses the popular Internet Systems Consortium BIND DNS server which was one of the first tools patched, but Apple has yet to include the fixed version in Mac OS X Server, despite being notified of vulnerability details early in the process and being informed of the coordinated patch release date. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] Root-Servers missing: g.root-servers.net andk.root-servers.net
by Jeffrey A. Williams July 28, 2008

July 28, 2008

Joe and all, Well I thank you for the digression as it is useful and informational to a great extent. I would slightly disagree that the US or Canadian Military does a "fairly good job of protecting their infrastructure", as you stated. The may and seemingly do now, but this is a recent occurrence as you know the Pentagon's and the Air Forces Email was grossly hacked only a few months ago and was made newsworthy accordingly, and rightfully so. What is significant and noteworthy is that only recently has it been finally fully recognized of the inherent insecurity of current and prevalent configurations of DNS at various levels. These security holes have been known for some time but were denied of down played when several of us in 2001 made note of such to ICANN and the IANA. Ergo, as the delay in excepting these security deficiencies have now come home to roost, as it were, and causing significant havoc rather precipitously. Some DN holders and Service providers still have not made the necessary adjustments and/or remain in denial. Yes the Roots are working now, but were down for a short time, and seemingly for good reason(s). Joe Baptista wrote: > > > On Sun, Jul 27, 2008 at 8:26 PM, Jeffrey A. > Williams <jwkckid1(a)ix.netcom.com> wrote: > > Joe and all, > > Yes indeed the US Military like the Canadian military > complex > often gets attacks routed through the IANA. Frankly this is > or > has been concerning. I for one am glad to see that as you > indicated > that the US Military establishment has finnaly taken the > wise and > necessary course of action and filtered out the IANA mess. > > > Thats not exactly what may be happening. IANA may not the issue. > Their network could of been under attack and they took the necessary > precautions - like filtering out icmp - not IANA. The roots are > working last time i checked. > > And the U.S. military does a fairly good job of protecting their > infrastructure. Mind you when the Republicans commissioned me to do a > sweep of the DOD DNS infrastructure years ago - they were not looking > very pretty. They are much improved these days. They of all realize > the internet is a dangerous place to be. And they take the > appropriate precautions. > > Mind you - I understand the China military find the whole USG, DoD, > IANA infrastructure very vulnerable to attack - and make fun of it at > parties. I think most of that is attributed to vulnerabilities in the > DNS. > > anyway - sorry I digressed. > > regards > joe baptista > > > > > Joe Baptista wrote: > > > I got the same thing on my end this morning. But it has > since been > > fixed. There indeed is an issue at 198.26.75.42 - which > is the > > department of defense - usa - but it might just be some > filtering is > > being done to ward off an attack. DoD gets a lot of cyber > attacks on > > a daily basis so it looks like 198.26.75.42 is filtering > out icmp at > > the iana g.root. > > > > regards > > joe baptista > > > > On Mon, Jul 28, 2008 at 10:25 AM, Peter Dambier > <peter(a)pccf.net> > > wrote: > > > > > > Hello, > > > > I guess it might be a local glitch, anycast? > > > > Root-Servers SOA records > > > > > soa(".","2008072800","a.root-servers.net","198.41.0.4"). > > > soa(".","2008072701","b.root-servers.net","192.228.79.201"). > > > > > > soa(".","2008072800","c.root-servers.net","192.33.4.12"). > > > soa(".","2008072800","d.root-servers.net","128.8.10.90"). > > > soa(".","2008072800","e.root-servers.net","192.203.230.10"). > > > > > > soa(".","2008072800","f.root-servers.net","192.5.5.241"). > > error(".","g.root-servers.net","192.112.36.4","no > > response"). > > > soa(".","2008072800","h.root-servers.net","128.63.2.53"). > > > soa(".","2008072800","i.root-servers.net","192.36.148.17"). > > > soa(".","2008072800","j.root-servers.net","192.58.128.30"). > > error(".","k.root-servers.net","193.0.14.129","no > > response"). > > > soa(".","2008072800","l.root-servers.net","199.7.83.42"). > > > soa(".","2008072800","m.root-servers.net","202.12.27.33"). > > > > > > Trying traceroute says > > > > traceroute to g.root-servers.net (192.112.36.4), 64 > hops > > max, 40 byte packets > > 1 yttrium.anul.nsa (7.19.30.39) 1 ms 0 ms 0 ms > > 2 * * * > > 3 217.0.78.58 (217.0.78.58) 46 ms 45 ms 44 ms > > 4 62.154.15.161 (62.154.15.161) 177 ms 177 ms > 178 ms > > 5 62.156.128.158 (62.156.128.158) 176 ms 178 ms > 177 ms > > 6 cer-core-02.inet.qwest.net (205.171.139.149) 178 > ms > > 177 ms 178 ms > > 7 chi-core-01.inet.qwest.net (67.14.9.10) 178 ms > 178 ms > > 178 ms > > 8 * chi-edge-08.inet.qwest.net (205.171.20.118) > 177 ms * > > 9 216.207.8.198 (216.207.8.198) 189 ms 190 ms > 188 ms > > 10 198.26.75.33 (198.26.75.33) 188 ms 190 ms 189 > ms > > 11 198.26.75.42 (198.26.75.42) 188 ms 190 ms 188 > ms > > 12 * * * > > 13 * * * > > > > So routing does not know where to find "g". > > > > traceroute to k.root-servers.net (193.0.14.129), 64 > hops > > max, 40 byte packets > > 1 yttrium.anul.nsa (7.19.30.39) 1 ms 0 ms 0 ms > > 2 * * * > > 3 217.0.78.54 (217.0.78.54) 46 ms 45 ms 45 ms > > 4 194.25.6.201 (194.25.6.201) 63 ms 63 ms 64 ms > > 5 f10.router.linx.k.ripe.net (217.79.160.94) 61 > ms 62 > > ms 61 ms > > 6 k.root-servers.net (193.0.14.129) 64 ms 63 ms > 63 ms > > > > "k" has come back or has been redirected. > > > > Kind regards > > Peter > > > > -- > > Peter and Karin Dambier > > Planet Communication and Computing Facility > > Rimbacher Strasse 16 > > D-69509 Moerlenbach-Bonsweiher > > +49(6209)795-816 (Telekom) > > +49(6252)750-308 (VoIP: sipgate.de) > > mail: peter(a)pccf.net > > http://www.pccf.net/ > > http://www.peter-dambier.de/ > > http://iason.site.voila.fr/ > > https://sourceforge.net/projects/iason/ > > > > > > > > > > -- > > Joe Baptista > > www.publicroot.org > > PublicRoot Consortium > > > ---------------------------------------------------------------- > > > The future of the Internet is Open, Transparent, > Inclusive, > > Representative & Accountable to the Internet community > @large. > > > ---------------------------------------------------------------- > > > Office: +1 (360) 526-6077 (extension 052) > > Fax: +1 (509) 479-0084 > > > > > Regards, > > Spokesman for INEGroup LLA. - (Over 281k > members/stakeholders strong!) > "Obedience of the law is the greatest freedom" - > Abraham Lincoln > > "Credit should go with the performance of duty and not with > what is > very often the accident of glory" - Theodore Roosevelt > > "If the probability be called P; the injury, L; and the > burden, B; > liability depends upon whether B is less than L multiplied > by > P: i.e., whether B is less than PL." > United States v. Carroll Towing (159 F.2d 169 [2d Cir. > 1947] > ===== > ========================================================= > Updated 1/26/04 > CSO/DIR. Internet Network Eng. SR. Eng. Network data > security IDNS. > div. of Information Network Eng. INEG. INC. > ABA member in good standing member ID 01257402 E-Mail > jwkckid1(a)ix.netcom.com > My Phone: 214-244-4827 > > > > > > -- > Joe Baptista > www.publicroot.org > PublicRoot Consortium > ---------------------------------------------------------------- > The future of the Internet is Open, Transparent, Inclusive, > Representative & Accountable to the Internet community @large. > ---------------------------------------------------------------- > Office: +1 (360) 526-6077 (extension 052) > Fax: +1 (509) 479-0084 > > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

ALAC Review Final Report Available; Consultation Open
by At-Large Staff July 28, 2008

July 28, 2008

Dear All: ALAC Review: Final Report by Independent Evaluator Released 25 July 2008 ICANN is posting the summary ( http://www.icann.org/reviews/alac/summary-alac-independent-review-25jul08.pd f PDF, 85K) and final report ( http://www.icann.org/reviews/alac/alac-independent-review-final-25jul08.pdf [PDF, 561K] of the Independent Review of the ALAC submitted by Westlake Consulting. These documents will be available shortly in multiple languages. ICANN is seeking public comment on the report. Details on the public comment forum can be found at this URL: http://www.icann.org/en/public-comment/public-comment-200809.html#alac-rev-j ul08. The Chair of the ALAC requests that all ALSes consider the report carefully and make comments during the public comment period. It is envisaged that an ALAC response will be produced with full consultation by the At-Large community. Westlake Consulting was selected by ICANN's Board to conduct the independent review of the At-Large Advisory Committee (ALAC) and related structures. Key objectives of the review include: * [To determine] whether the ALAC has a continuing purpose in the ICANN structure; and, * If so, whether any change in structure or operations is desirable to improve its effectiveness. This review is part of ICANN's ongoing commitment to its evolution and improvement. ICANN's bylaws require periodic, independent examinations of the role and operation of key elements of ICANN. More information about ICANN Independent Reviews is available at <http://www.icann.org/en/reviews/>. -- Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

3 2

Re: [NA-Discuss] [ga] Root-Servers missing: g.root-servers.net and k.root-servers.net
by Jeffrey A. Williams July 28, 2008

July 28, 2008

Joe and all, Yes indeed the US Military like the Canadian military complex often gets attacks routed through the IANA. Frankly this is or has been concerning. I for one am glad to see that as you indicated that the US Military establishment has finnaly taken the wise and necessary course of action and filtered out the IANA mess. Joe Baptista wrote: > I got the same thing on my end this morning. But it has since been > fixed. There indeed is an issue at 198.26.75.42 - which is the > department of defense - usa - but it might just be some filtering is > being done to ward off an attack. DoD gets a lot of cyber attacks on > a daily basis so it looks like 198.26.75.42 is filtering out icmp at > the iana g.root. > > regards > joe baptista > > On Mon, Jul 28, 2008 at 10:25 AM, Peter Dambier <peter(a)pccf.net> > wrote: > > > Hello, > > I guess it might be a local glitch, anycast? > > Root-Servers SOA records > > soa(".","2008072800","a.root-servers.net","198.41.0.4"). > soa(".","2008072701","b.root-servers.net","192.228.79.201"). > > soa(".","2008072800","c.root-servers.net","192.33.4.12"). > soa(".","2008072800","d.root-servers.net","128.8.10.90"). > soa(".","2008072800","e.root-servers.net","192.203.230.10"). > > soa(".","2008072800","f.root-servers.net","192.5.5.241"). > error(".","g.root-servers.net","192.112.36.4","no > response"). > soa(".","2008072800","h.root-servers.net","128.63.2.53"). > soa(".","2008072800","i.root-servers.net","192.36.148.17"). > soa(".","2008072800","j.root-servers.net","192.58.128.30"). > error(".","k.root-servers.net","193.0.14.129","no > response"). > soa(".","2008072800","l.root-servers.net","199.7.83.42"). > soa(".","2008072800","m.root-servers.net","202.12.27.33"). > > > Trying traceroute says > > traceroute to g.root-servers.net (192.112.36.4), 64 hops > max, 40 byte packets > 1 yttrium.anul.nsa (7.19.30.39) 1 ms 0 ms 0 ms > 2 * * * > 3 217.0.78.58 (217.0.78.58) 46 ms 45 ms 44 ms > 4 62.154.15.161 (62.154.15.161) 177 ms 177 ms 178 ms > 5 62.156.128.158 (62.156.128.158) 176 ms 178 ms 177 ms > 6 cer-core-02.inet.qwest.net (205.171.139.149) 178 ms > 177 ms 178 ms > 7 chi-core-01.inet.qwest.net (67.14.9.10) 178 ms 178 ms > 178 ms > 8 * chi-edge-08.inet.qwest.net (205.171.20.118) 177 ms * > 9 216.207.8.198 (216.207.8.198) 189 ms 190 ms 188 ms > 10 198.26.75.33 (198.26.75.33) 188 ms 190 ms 189 ms > 11 198.26.75.42 (198.26.75.42) 188 ms 190 ms 188 ms > 12 * * * > 13 * * * > > So routing does not know where to find "g". > > traceroute to k.root-servers.net (193.0.14.129), 64 hops > max, 40 byte packets > 1 yttrium.anul.nsa (7.19.30.39) 1 ms 0 ms 0 ms > 2 * * * > 3 217.0.78.54 (217.0.78.54) 46 ms 45 ms 45 ms > 4 194.25.6.201 (194.25.6.201) 63 ms 63 ms 64 ms > 5 f10.router.linx.k.ripe.net (217.79.160.94) 61 ms 62 > ms 61 ms > 6 k.root-servers.net (193.0.14.129) 64 ms 63 ms 63 ms > > "k" has come back or has been redirected. > > Kind regards > Peter > > -- > Peter and Karin Dambier > Planet Communication and Computing Facility > Rimbacher Strasse 16 > D-69509 Moerlenbach-Bonsweiher > +49(6209)795-816 (Telekom) > +49(6252)750-308 (VoIP: sipgate.de) > mail: peter(a)pccf.net > http://www.pccf.net/ > http://www.peter-dambier.de/ > http://iason.site.voila.fr/ > https://sourceforge.net/projects/iason/ > > > > > -- > Joe Baptista > www.publicroot.org > PublicRoot Consortium > ---------------------------------------------------------------- > The future of the Internet is Open, Transparent, Inclusive, > Representative & Accountable to the Internet community @large. > ---------------------------------------------------------------- > Office: +1 (360) 526-6077 (extension 052) > Fax: +1 (509) 479-0084 > > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] Root-Servers missing: g.root-servers.net and k.root-servers.net
by Jeffrey A. Williams July 27, 2008

July 27, 2008

Peter and all, It may be that ICANN is doing so maintanance on G & K root servers. But they are clearly offline or not reachable. This isn't a big problem however. Certainly they should be in process of implimenting DNSSEC, and perhaps that is why G & K are in this status presently. In any event, that would be the SSAC's call I believe. So perhaps if your curious enough, you might want to contact ICANN's SSAC and try to find out what the reason is. Peter Dambier wrote: > Hello, > > I guess it might be a local glitch, anycast? > > Root-Servers SOA records > > soa(".","2008072800","a.root-servers.net","198.41.0.4"). > soa(".","2008072701","b.root-servers.net","192.228.79.201"). > soa(".","2008072800","c.root-servers.net","192.33.4.12"). > soa(".","2008072800","d.root-servers.net","128.8.10.90"). > soa(".","2008072800","e.root-servers.net","192.203.230.10"). > soa(".","2008072800","f.root-servers.net","192.5.5.241"). > error(".","g.root-servers.net","192.112.36.4","no response"). > soa(".","2008072800","h.root-servers.net","128.63.2.53"). > soa(".","2008072800","i.root-servers.net","192.36.148.17"). > soa(".","2008072800","j.root-servers.net","192.58.128.30"). > error(".","k.root-servers.net","193.0.14.129","no response"). > soa(".","2008072800","l.root-servers.net","199.7.83.42"). > soa(".","2008072800","m.root-servers.net","202.12.27.33"). > > Trying traceroute says > > traceroute to g.root-servers.net (192.112.36.4), 64 hops max, 40 byte packets > 1 yttrium.anul.nsa (7.19.30.39) 1 ms 0 ms 0 ms > 2 * * * > 3 217.0.78.58 (217.0.78.58) 46 ms 45 ms 44 ms > 4 62.154.15.161 (62.154.15.161) 177 ms 177 ms 178 ms > 5 62.156.128.158 (62.156.128.158) 176 ms 178 ms 177 ms > 6 cer-core-02.inet.qwest.net (205.171.139.149) 178 ms 177 ms 178 ms > 7 chi-core-01.inet.qwest.net (67.14.9.10) 178 ms 178 ms 178 ms > 8 * chi-edge-08.inet.qwest.net (205.171.20.118) 177 ms * > 9 216.207.8.198 (216.207.8.198) 189 ms 190 ms 188 ms > 10 198.26.75.33 (198.26.75.33) 188 ms 190 ms 189 ms > 11 198.26.75.42 (198.26.75.42) 188 ms 190 ms 188 ms > 12 * * * > 13 * * * > > So routing does not know where to find "g". > > traceroute to k.root-servers.net (193.0.14.129), 64 hops max, 40 byte packets > 1 yttrium.anul.nsa (7.19.30.39) 1 ms 0 ms 0 ms > 2 * * * > 3 217.0.78.54 (217.0.78.54) 46 ms 45 ms 45 ms > 4 194.25.6.201 (194.25.6.201) 63 ms 63 ms 64 ms > 5 f10.router.linx.k.ripe.net (217.79.160.94) 61 ms 62 ms 61 ms > 6 k.root-servers.net (193.0.14.129) 64 ms 63 ms 63 ms > > "k" has come back or has been redirected. > > Kind regards > Peter > > -- > Peter and Karin Dambier > Planet Communication and Computing Facility > Rimbacher Strasse 16 > D-69509 Moerlenbach-Bonsweiher > +49(6209)795-816 (Telekom) > +49(6252)750-308 (VoIP: sipgate.de) > mail: peter(a)pccf.net > http://www.pccf.net/ > http://www.peter-dambier.de/ > http://iason.site.voila.fr/ > https://sourceforge.net/projects/iason/ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Patch DNS Servers Faster
by Jeffrey A. Williams July 25, 2008

July 25, 2008

All, As an FYI: Austrian CERT used data from one of their authoritative DNS server to measure the rate at which the http://it.slashdot.org/article.pl?sid=08/07/08/195225&tid=172 latest DNS patch (source port randomization) is being rolled out to larger recursive name servers. While about http://cert.at/static/cert.at-0802-DNS-patchanalysis.pdf half the traffic (PDF) they receive is now using source port randomization, their data suggest that this is due to ISPs who roll out such fixes immediately. The rate of patching has fallen to disappointingly low levels since. If your ISP isn't patched, perhaps it is time to switch." After details of the DNS vulnerability http://it.slashdot.org/article.pl?sid=08/07/21/2212227&tid=172 leaked, researchers |)ruid and HD Moore [4]released attack code; ZDNet's security blog has http://blogs.zdnet.com/security/?p=1546 an analysis. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] Report: Registrars & Steroids
by Jeffrey A. Williams July 25, 2008

July 25, 2008

Peter and all My remarks and concerns interspersed below Peters. Peter Dambier wrote: > Yes, I think it is a good idea. Let us take Microsoft offline, > because they are selling the software that was used to create > all that spam in the first place. Not all spam originates for Microsoft products, but what does, should be either fixed immediately, or yes, banned entirely. > > > And dont forget to take Boing offline too because they are selling > weapons that most likely you and me are not allowed to carry - > e.g. bomber airplanes. Only the B-52 is or was built by Boing that remains in service but no longer produced. Lockheed Martin builds the still in production "Bomber planes" that remain in production. The rest are of Russian design an manufacture. However Bomber planes are not related to Registrars or Steroids nor are they a hazard unless mis-used. > > > Cars are not safe for children. That is why we have to get rid of > them. In germany we have successfully banned autobusses from cities > because they are sending more carbon dust through their exhaust pipes > than SUVs do. Cars are only unsafe to children if being operated by children that are not capable of operating a car safely or by adults that also cannot operate a car safely. They are otherwise an enanament object and are as such in and of themselves, not unsafe or dangerous. > > > How about free speach - it is mostly four letter words anyhow. > Why bother? Well I rarely use "Four Letter" words as this Email in response can attest to. So this argument has no real relevance also accordingly. Free speech has little if anything to do with the sale online, of Steroids. Steroids if sold to anyone without a Dr.'s order, is an illegal activity. Advertising them online in an of itself is not, but selling Steroids in an unsafe and illegal manner online IS a intentionally harmful and illegal activity, and such web sites should be shut down either permanently or temporarily. In conclusion, and to a degree what I think Danny's point is, is that ICANN and DOC/NTIA are seemingly remiss in their oversight responsibilities regarding those Domains and their Registrars whom are the Registrar of record, are actively engaging in harmful and illegal activities, either directly or indirectly. Ignorance my be bliss, but it cannot be tolerated indefinitely in cases/instances such as the sale of Steroids via a Domain name' web site in an illegal manner. So either ICANN or the Registrar needs to step up if either is to meet it's legal responsibilities and/or mandate. Failing such, than when noticed by any user, he/she has a legal responsibility to report such illegal activities accordingly. Notifying ICANN, DOC/NTIA and the Registrar of record would/should also be very helpful/useful as well so as to hopefully alert law enforcement of their complicity accordingly. > > > Cheers > Peter > > Danny Younger wrote: > > [Forwarded message] > > > > Networks of steroid dealing domains are sponsored through U.S.-based > > companies who refuse to shut them down even after being notified. > > > ... > > -- > Peter and Karin Dambier > Planet Communication and Computing Facility > Rimbacher Strasse 16 > D-69509 Moerlenbach-Bonsweiher > +49(6209)795-816 (Telekom) > +49(6252)750-308 (VoIP: sipgate.de) > mail: peter(a)pccf.net > http://www.pccf.net/ > http://www.peter-dambier.de/ > http://iason.site.voila.fr/ > https://sourceforge.net/projects/iason/ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0