pardon za translit. nekotorye vozmozhno budut proinformirovany iz "kompetentnykh istochnikov", nekotorye net. pishu eto pis'mo, chtoby podcherknut' vazhnost' dannogo bug'a, kotoryj cisco derzhala v sekrete (minimum - tol'ko to, chto mne izvestno) 2.5 mesyatsa. primerno 2.5 mesyatsa nazad my zakonchili ocherednoj upgrade IOS vo vsej nashej ne malen'koj seti. ne proshlo i nedeli kak vsplyla cisco s rekomendatsiej *nemedlenno* upgradit'sya na sled. versiyu. my, estestvenno, stali nedoumevat': da vy chto, okhreneli? my zh tol'ko chto upgrade zakonchili. oni togda priznalis', chto obnaruzhili v IOS *takoj* bug, o kotorom skazat' ne mogut, no esli ne khotim nepriyatnostej na popu, to nado upgradit'sya. :D nu ladno, sdelali upgrade, po-bystren'komu, za nedelyu. vchera v conference call'e (u nas s nimi takovye prokhodyat raz v nedelyu, po otkrytym cases, etc.) oni nakonets-to priznalis', chto v IOS imeet mesto byt' ochen' ser'eznaya dyra, kotoraya suschestvovala vo vsekh trains so vremen tsarya Gorokha, a imenno s version 10.0. skazali, chto na dnyakh opublikujut oficial'noe soobschenie na website. segodnya vecherom oni ego taki opublikovali: http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml est' tak zhe versiya dlya tekh, u kogo est' support contract: http://www.cisco.com/en/US/customer/products/hw/routers/ps341/products_secur... no po-moemu ona nichem ne otlichaetsya :-) primechatel'no to, chto oni rekomendujut ACLs as workaround, kotorye na nekotorykh platformakh prosto protivopokazany. bezboleznennogo vam upgrade'a, dorogie kollegi :-) osobenno tebe, Doka@ :-) P.S. ne podumajte chto zanimayus' reklamoj, no ochen' rekomenduju Juniper. bug'ov na nes-ko poryadkov men'she chem u Cisco, priyaten v ispol'zovanii, men'she hidden commands, unbeatable support, i JunOS sdelana iz FreeBSD 4, kotoroe bol'shinstvo zdes' prisutstvujuschikh ves'ma lyubit :-) moemu frustration with Cisco prosto net predela. esli vdrug kogo zainteresujet pochemu imenno, pishite off list - a to vdrug zdes' est' predstaviteli onoj - pob'yut escho.. :-)) Regards, Igor Chunikhin. =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message