- NZNOG - lists.nznog.org

FW: SANS Flash: Urgent Request For Help In Stopping DOS Attacks
by Frank March 30 Mar '00

30 Mar '00

Folks: This message was circulated by Jay Garden, who have a talk last week to the GOVIS security forum (inaugural meeting in fact) on the recent spate of DOS attacks. I pass it on for your interest, information and possible action. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 > -----Original Message----- > From: Jay Garden (GCSB) [SMTP:jay(a)gcsb.govt.nz] > Sent: Friday, 31 March 2000 11:21 > To: GOVIS Security Forum > Subject: Fw: SANS Flash: Urgent Request For Help In Stopping DOS > Attacks > > Please action as you see fit. > Cheers, > Jay. > > > > To: Jay Garden (SD070339) > > > Sent: Wednesday, March 29, 2000 6:37 PM > > > From: Alan Paller, Research Director, The SANS Institute > > > > > > This is an urgent request for your cooperation to slow down the wave > of > > > denial of service attacks? > > > > > > As you may know, denial of service (DOS) attacks are virulent and > still > > > very dangerous. These are the attacks responsible for the many outages > > > reported recently in the press and others that have been kept more > secret. > > > DOS attacks are a source of opportunities for extortion and a > potential > > > vehicle for nation-states or anyone else to cause outages in the > computer > > > systems used by business, government, and academia. DOS > > > attacks, in a nutshell, comprise a world-wide scourge that > > > has already been unleashed and continues to grow in > > > sophistication and intensity. > > > > > > One effective defense for these attacks is widely available and > > > is neither expensive nor difficult to implement, but requires > > > Internet-wide action; that's why we're writing this note to > > > request your cooperation. > > > > > > The defense involves straightforward settings on routers that > > > stop key aspects of these attacks and, in doing that, reduce > > > their threat substantially. These settings will not protect you > > > from being attacked, but rather will stop any of the > > > computers in your site from being used anonymously in attacking > > > others. In other words, these settings help protect your systems > > > from being unwitting assistants in DOS attacks, by eliminating > > > the anonymity upon which such attacks rely. If everyone > > > disables the vehicles for anonymity in these attacks, the attacks > > > will be mitigated or may cease entirely for large parts of the net. > > > > > > The simple steps can be found at the SANS website at the URL > > > http://www.sans.org/dosstep/index.htm and will keep your site > > > from contributing to the DOS threat. Tools will soon be > > > publicly posted to determine which organizations have and have > > > not protected their users and which ones have systems that > > > still can be used as a threat to the rest of the community. > > > > > > More than 100 organizations in the SANS community have tested > > > the guidelines, which were drafted by Mark Krause of UUNET with > > > help from security experts at most of the other major ISPs and > > > at the MITRE organization. The testing has improved them > > > enormously. (A huge thank-you goes to the people who did the > > > testing.) > > > > > > We hope you, too, will implement these guidelines and reduce > > > the global threat of DOS attacks. > > > > > > We also urge you to ask your business partners and universities and > > > schools with which you work to implement these defenses. And if you > > > use a cable modem or DSL connection, please urge your service provider > > > to protect you as well. > > > > > > As in all SANS projects, this is a community-wide initiative. > > > If you can add to the guidelines to cover additional routers and > systems, > > > we welcome your participation. > > > > > > Alan > > > > > > Alan Paller > > > Director of Research > > > SANS Director of Research > > > sansro(a)sans.org > > > 301-951-0102 > > > > > > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Serious technical comment
by Nevil Brownlee 29 Mar '00

29 Mar '00

Hello Donald: I saw your call for papers for Uniforum 2000, it looks interesting. > I believe this is the only conference left in New Zealand where there's > room for serious technical content. (I'd be interested if anyone >knows of another one.) How about Passive & Active Measurements Workshop, PAM2000 see http://pam2000.cs.waikato.ac.nz This is a two-day workshop on network measuremnts, with about 20 papers from all over the world. If you're interested in this, it's not too late to register, you can do that on the Web site. (This is the first PAM workshop, I hope they'll become an annual event, but - alas - they'll probably be hosted at other places around the world). Cheers, Nevil +---------------------------------------------------------------------+ | Nevil Brownlee Director, Technology Development | | Phone: +64 9 373 7599 x8941 ITSS, The University of Auckland | | FAX: +64 9 373 7425 Private Bag 92019, Auckland, New Zealand | +---------------------------------------------------------------------C --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

I have resigned from Victoria University
by Russell Sharpe 28 Mar '00

28 Mar '00

Hi All I have resigned from Victoria University in order to take up a position as Network Consultant with Compaq New Zealand. My new position involves Data / Voice integration projects, which I feel is the place to be! My last day at VUW is Friday April 28th, I will be starting at Compaq on Monday 1st May. My thanks go out to all who have provided helpful support and friendship over the last few years (2.5 at VUW), and hope that these friendships will continue. Tim Lewis, Craig Reynolds and myself will be partaking at the Loaded Hog in Bond St on Friday the 14th April after work for those who wish to have a get together. My direct number at Compaq is yet unknown, but I will be able to be reached at russell.sharpe(a)compaq.com or +64 4 4965800. kind regards Russell Sharpe ------------------------------------------------------------ Russell Sharpe Phone:+64 4 463 5554 Network Manager Fax: +64 21 218 1289 Information Technology Services Cell: +64 21 682 541 Victoria University of Wellington russell.sharpe(a)vuw.ac.nz PO Box 600 Wellington www.vuw.ac.nz New Zealand ------------------------------------------------------------ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Uniforum NZ 2000 Call for Papers
by Donald Neal 28 Mar '00

28 Mar '00

In case people missed it, the Call for Papers has now been issued for this year's Uniforum NZ conference . It says in part: "UniForum is about systems interoperability and the future direction of computing. ... We would particularly welcome abstracts about NDS, DNS and Active Server implementation and integration. We look for technical implementation abstracts on Linux, Win2K, Cluster computing and on web based applications. ... If you have an idea which you believe will be of interest and value to the NZ technical community please submit an abstract. SAGE-NZ will also be participating with UniForum this year, so system administration topics will have a dedicated stream, as well as the inclusion of ISOCNZ and internet papers. This residential conference provides an immersion environment where the speakers and attendees have extended opportunities in the "social" interludes to discuss the concepts being presented." "Important Dates for most speakers: NOW!! Registration of Interest March 22nd Commitment to Present a Paper April 5th Abstract and Speaker Profile Required April 19th Notification of Presentation Acceptance August 23rd Publication Materials Required" See http://www.uniforum.org.nz/ for full details. I believe this is the only conference left in New Zealand where there's room for serious technical content. (I'd be interested if anyone knows of another one.) - Donald Neal --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

job@waikato - network engineer
by Warwick Glendenning 27 Mar '00

27 Mar '00

Hi Folks See the url http://www.waikato.ac.nz/hrm/external/vacancies/adminsupp.html#G00/73 Regards Warwick ********************************************* Warwick Glendenning Manager - IT Infrastructure Information & technology Services Division University of Waikato Private Bag 3105 Hamilton, NZ Tel:07-8384363 Fax:07-8384066 cellphone:025-356121 email:warwickg(a)waikato.ac.nz <<Warwick Glendenning.vcf>>

1 0

[lin@darkmere.gen.nz: Computer Science Seminar, 1 PM, Wednesday April 5th, 2000 (fwd)]
by Joe Abley 25 Mar '00

25 Mar '00

----- Forwarded message from Lin Nah <lin(a)darkmere.gen.nz> ----- Date: Sun, 26 Mar 2000 01:16:27 +1200 (NZST) From: Lin Nah <lin(a)darkmere.gen.nz> To: jabley(a)patho.gen.nz Subject: Computer Science Seminar, 1 PM, Wednesday April 5th, 2000 (fwd) Subject: Computer Science Seminar, 1 PM, Wednesday April 5th, 2000 WHO..... Bob Fink, Lawrence Berkeley National Laboratory WHEN.... 1 PM, Wednesday April 5th, 2000 WHERE... Computer Science Seminar Room (Rm 246, Maths/Physics Bldg) ABSTRACT A next generation Internet Protocol, called IPv6, has been designed to solve various problems with the current IPv4 protocol. This talk will present the background and technical details of IPv6, how a transition from IPv4 to IPv6 might be done for the worldwide Internet, and what the status of implementation and deployment is. Bob Fink, a Lawrence Berkeley National Laboratory computer scientist, is the Assoicate Head for Research for ESnet, the Energy Sciences Network of the US Dept. of Energy. He is a co-chair of the "NGtrans" IPv6 Transition working group of the IETF, and leads the 6bone IPv6 Testbed project. He is currently organizing and leading the international 6REN initiative to create worldwide IPv6 production network services by organizing Research and Education Networks worldwide. All welcome. John +------------------------------------------------------------+ | See http://www.cs.auckland.ac.nz/seminars <http://www.cs.auckland.ac.nz/seminars> for a list of | | present and past seminars, as well as instructions on how | | to arrange to give a seminar at the department. | | | | See http://www.cs.auckland.ac.nz/techrep <http://www.cs.auckland.ac.nz/techrep> for on-line | | copies of Computer Science Department technical reports. | +------------------------------------------------------------+ ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Cybercrime swbsite
by Lin Nah 15 Mar '00

15 Mar '00

Since there's been discussion in here regarding DDOS, perhaps someone here may be interested in the new cyber crime website http://www.cybercrime.gov/ It tells you how to report a crime, what they do etc. Lin (one of those who read nznog via the web archive) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Domainz web site off-air - Sunday 18:00 - Update
by Patrick O'Brien 12 Mar '00

12 Mar '00

Good morning, The Domainz site is still down. Actrix had a part flown in from Auckland last night but this did not fix their problem. Another replacement part is being flown down from Auckland this morning. They indicate that the site should be running again mid morning, around 11:00. We'll keep you updated. Regards, Patrick -----Original Message----- From: newz-flash-admin(a)domainz.net.nz [mailto:newz-flash-admin(a)domainz.net.nz]On Behalf Of Patrick O' Brien Sent: Sunday, March 12, 2000 7:17 PM To: NewZ-Flash(a)domainz.net.nz Subject: [NewZ-Flash] Domainz web site off-air - Sunday 18:00 NewZ-Flash readers. Notification that the Domainz web site is currently off-air. The site is hosted by Actrix Networks and they are currently working to resolve a problem with their web server software. Current estimates indicate the site will be operable later tonight, Sunday. There are no issues at Waikato. Apologies for any inconvenience. My regards, PATRICK J O'BRIEN Fax: (04) 473-4569 Voice: (04) 473-4567 Mail: P.O.BRIEN(a)DOMAINZ.NET.NZ Web: http://www.DOMAINZ.NET.NZ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

RE: [isocnz-l]I presume http://www.domainz.net.nz/ is down?
by Peter Mott 12 Mar '00

12 Mar '00

> The Domainz site is still down. > > Actrix had a part flown in from Auckland last night but this did not fix > their problem. Another replacement part is being flown down from Auckland > this morning. This is an excellent example of why DOMAINZ should not be the only registrar for .nz. Fortunately under the current system, ISP's dont need the DOMAINZ website to maintain the registry. Under the new system, a failure of the DOMAINZ site will bring us all to a halt. A business critical site should be located on a bullet proof dedicated host, and in the unlikely event of failure, be setup so a move to another host is doable in minutes, not days. regards Peter Mott Chief Enthusiast 2Day.com -/- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

[NewZ-Flash] Domainz web site off-air - Sunday 18:00
by Patrick O' Brien 12 Mar '00

12 Mar '00

NewZ-Flash readers. Notification that the Domainz web site is currently off-air. The site is hosted by Actrix Networks and they are currently working to resolve a problem with their web server software. Current estimates indicate the site will be operable later tonight, Sunday. There are no issues at Waikato. Apologies for any inconvenience. My regards, PATRICK J O'BRIEN Fax: (04) 473-4569 Voice: (04) 473-4567 Mail: P.O.BRIEN(a)DOMAINZ.NET.NZ Web: http://www.DOMAINZ.NET.NZ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1