Re: news from Google

2009-12-10 Thread Scott Weeks
--- m...@sizone.org wrote: From: Ken Chase topically related, it's actually news from Mozilla: http://www.computerworld.com/s/article/9142106/Mozilla_exec_suggests_Firefox_users_move_to_Bing_cites_Google_privacy_stance?source=rss_news from the horse's mouth, as it were. So, how bout that DNS. -

Re: news from Google

2009-12-10 Thread Ken Chase
topically related, it's actually news from Mozilla: http://www.computerworld.com/s/article/9142106/Mozilla_exec_suggests_Firefox_users_move_to_Bing_cites_Google_privacy_stance?source=rss_news from the horse's mouth, as it were. So, how bout that DNS. /kc -- Ken Chase - k...@heavycomputing.ca -

Re: Qwest mail admin contact?

2009-12-10 Thread Suresh Ramasubramanian
Related to any of these? http://www.spamhaus.org/sbl/listings.lasso?isp=data102.com Or maybe this - http://www.spamhaus.org/sbl/sbl.lasso?query=SBL51908 $ whois -h whois.cymru.com 128.168.0.0/16 AS | IP | AS Name 33302 | 128.168.0.0 | ONS-COS - Data 102, LLC Whatever the

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-10 Thread Chris Adams
Once upon a time, Owen DeLong said: > UPnP is a bad idea that (fortunately) doesn't apply to IPv6 anyway. > > You don't need UPnP if you'r not doing NAT. You need UPnP for a stateful firewall, whether it is mangling packets with NAT or not. I have an Xbox 360 behind an SSG-5 with no NAT, and I

Looking for MIX/NOTA members

2009-12-10 Thread Tuc
Hi, I know this is NAnog (Which NOTA may qualify for being in Miami) but I'm in need of help for MIX too. I'm involved with a client that had their range advertised by another AS. We were told by all parties involved that it has stopped, but I still seem to be seeing it on RIPE's MIX an

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-10 Thread Owen DeLong
On Dec 10, 2009, at 4:56 PM, Michael Loftis wrote: --On Wednesday, December 02, 2009 6:23 PM -0800 Mehmet Akcin > wrote: Would you consider Juniper SSG5 as a Consumer Grade router? They do IPv6 and they are pretty good in general, and cheap as well. Not as usable in the consumer space

Re: More ASN collissions

2009-12-10 Thread Rene Wilhelm
Leo Bicknell wrote: In a message written on Thu, Dec 10, 2009 at 01:35:16PM -0500, Jared Mauch wrote: As always, good research by renesys. http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml [...] I would be very interested to know if something similar happened with AS37

RE: Linux shaping packet loss

2009-12-10 Thread Keith Medcalf
> Autoneg is a required part of the gig E specification so you'd only be > causing yourself trouble by turning it off. (I don't know if > it'll also break automatic MDI/MDI-X (crossover) configuration, for > an example of something that's nice to have.) At least on 450x series enhanced linecards,

Re: Arrogant RBL list maintainers

2009-12-10 Thread John Levine
>thing is that it's illegal to maintain a database with "personal details" >which ip addresses according to various german courts are (don't ask.. I've actually looked at some of the German decisions, and I didn't see anything that would be a problem for DNSBLs But if you're getting legal advice

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-10 Thread Michael Loftis
--On Wednesday, December 02, 2009 6:23 PM -0800 Mehmet Akcin wrote: Would you consider Juniper SSG5 as a Consumer Grade router? They do IPv6 and they are pretty good in general, and cheap as well. Not as usable in the consumer space due to lack of UPnP (and Juniper is NOT interested in

Re: More ASN collissions

2009-12-10 Thread Leo Bicknell
In a message written on Thu, Dec 10, 2009 at 01:35:16PM -0500, Jared Mauch wrote: > As always, good research by renesys. > > http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml As already commented on the blog... ISC had a data entry error on an ASN for our site in Fiji. T

Re: Optical fiber question

2009-12-10 Thread Anton Kapela
Wanted to add something to this and clarify/correct a few points: > Plus, while I'm sure someone in a lab has done it, you really don't run DWDM > over multimode fiber - I'd second the opinion of it's cheap enough, go for > the single mode and get the most flexibility in your options possible. In

Re: Optical fiber question

2009-12-10 Thread Leslie
Jared Mauch wrote: On Dec 10, 2009, at 1:24 PM, Deric Kwok wrote: Hi My provider said they can provide single / mulit mode Optical fiber Apart from the length and cost different, what is the Adv/Disadv between them for our connection? The advantages are always in the distance capabilities

RE: Optical fiber question

2009-12-10 Thread Deepak Jain
> My provider said they can provide single / mulit mode Optical fiber > > > > Apart from the length and cost different, what is the Adv/Disadv > > between them for our connection? > > The advantages are always in the distance capabilities of the single > mode fiber. You can reach much further on

Re: More ASN collissions

2009-12-10 Thread christian koch
i believe john curran just posted the follow up to the list yesterday on this matter On Thu, Dec 10, 2009 at 10:51 AM, Dobbins, Roland wrote: > > On Dec 11, 2009, at 1:35 AM, Jared Mauch wrote: > > > As always, good research by renesys. > > What happens when an ASN is requested, and it's discover

Qwest mail admin contact?

2009-12-10 Thread randal k
If one is listening, can I get a Qwest mail admin to drop me a line off-list? Numerous emails to postmaster, abuse, relay, etc all seem to be deadends. Thanks, Randal

Re: More ASN collissions

2009-12-10 Thread Dobbins, Roland
On Dec 11, 2009, at 1:35 AM, Jared Mauch wrote: > As always, good research by renesys. What happens when an ASN is requested, and it's discovered that said ASN is already in use by an unauthorized network, and that some proportion of the Internet are accepting it due to a lack of appropriate r

More ASN collissions

2009-12-10 Thread Jared Mauch
As always, good research by renesys. http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml - Jared

Re: Optical fiber question

2009-12-10 Thread Jared Mauch
On Dec 10, 2009, at 1:24 PM, Deric Kwok wrote: > Hi > > My provider said they can provide single / mulit mode Optical fiber > > Apart from the length and cost different, what is the Adv/Disadv > between them for our connection? The advantages are always in the distance capabilities of the sing

Optical fiber question

2009-12-10 Thread Deric Kwok
Hi My provider said they can provide single / mulit mode Optical fiber Apart from the length and cost different, what is the Adv/Disadv between them for our connection? Thank you

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 09:27:44AM -0800, Michael Thomas wrote: > On 12/10/2009 09:06 AM, Joe Abley wrote: >> I think Mark means "the question of whether a particular address is >> statically-assigned or dynamically-assigned", but... > > Which assumes that that's the question that actually needs t

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Michael Thomas
On 12/10/2009 09:06 AM, Joe Abley wrote: On 2009-12-10, at 16:42, Michael Thomas wrote: On 12/10/2009 08:38 AM, Mark Andrews wrote: The way to do this is to put other data in the ip6.arpa/in-addr.arpa and stop trying to infer things from the PTR records. Sigh. What is the "this" to which y

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Joe Abley
On 2009-12-10, at 16:42, Michael Thomas wrote: > On 12/10/2009 08:38 AM, Mark Andrews wrote: > >> The way to do this is to put other data in the ip6.arpa/in-addr.arpa and >> stop trying to infer things from the PTR records. > > Sigh. What is the "this" to which you refer? I think Mark means "t

Re: Arrogant RBL list maintainers

2009-12-10 Thread Joe Greco
> RBLs are neither authorised (EU privacy laws anyone?), nor the appointed > authority to keep databases on "whats static or not". RIRs -are-, if > anyone should maintain a database on such things, i'd be the rirs > (which they have, it's called "whois", it just lacks a field that > indicates the t

Re: Arrogant RBL list maintainers

2009-12-10 Thread Raymond Dijkxhoorn
Hi! thing is that it's illegal to maintain a database with "personal details" which ip addresses according to various german courts are (don't ask.. mmk? ;) ofcourse we all know ip addresses identify nodes on a network, not persons, but the germans seem to mainain a different view on this, despi

Re: Arrogant RBL list maintainers

2009-12-10 Thread Sven Olaf Kamphuis
thing is that it's illegal to maintain a database with "personal details" which ip addresses according to various german courts are (don't ask.. mmk? ;) ofcourse we all know ip addresses identify nodes on a network, not persons, but the germans seem to mainain a different view on this, despite us i

Re: Arrogant RBL list maintainers

2009-12-10 Thread Raymond Dijkxhoorn
Hi! RBLs are neither authorised (EU privacy laws anyone?), nor the appointed authority to keep databases on "whats static or not". RIRs -are-, if anyone should maintain a database on such things, i'd be the rirs (which they have, it's called "whois", it just lacks a field that indicates the type

Re: Arrogant RBL list maintainers

2009-12-10 Thread Sven Olaf Kamphuis
> > On 12/10/2009 7:29 AM, Sam Hayes Merritt, III wrote: > > As previously noted in this thread, msulli...@sorbs did a fairly good > > job of documenting this in an RFC draft. I'd say its still the primary > > goto to point people at for how to do things the "right way". > > > > http://tools.ietf.o

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Michael Thomas
On 12/10/2009 08:38 AM, Mark Andrews wrote: In message<4b211da6.9000...@mtcc.com>, Michael Thomas writes: To Crocker's point though: if IETF came up with a way to publish your network's dynamic space (assuming that's The Problem!), would operators do that? Or is this another case where the energ

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Mark Andrews
In message <4b211da6.9000...@mtcc.com>, Michael Thomas writes: > On 12/10/2009 07:54 AM, Steven Champeon wrote: > > In a nutshell, if you're not clearly indicating mail sources as mail > > sources, don't expect great deliverability. If you're running a Web > > hosting shop and don't have rate-limi

Re: Arrogant RBL list maintainers

2009-12-10 Thread Michael Holstein
> I'm a bit confused by what it > means to have an "internal" static public IP "internal" means behind the firewall (which everything is, transparently). We don't NAT because we don't have to .. the 1918 space is used for stuff we don't want to be routable (like thermostats). > that they have th

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 08:11:18AM -0800, Michael Thomas wrote: > I'd say that Mikael Abrahamsson's sentiment (or at least the way I read > it) would be a better start: take a step back and ask what the problem is. Well, as I see it, the problem is a widespread and systemic failure to prevent mass

Re: best practices for PTR naming and whois (was, sadly, Re: ArrogantRBL list maintainers)

2009-12-10 Thread O'Reirdan, Michael
MAAWG has published an approach that it recommends is taken to share information as to nature of IP space. This may be of interest here. It can be found here: http://www.maawg.org/about/publishedDocuments Mike On 12/10/09 11:11 AM, "Michael Thomas" wrote: > On 12/10/2009 07:54 AM, Steven C

Re: Arrogant RBL list maintainers

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 07:43:36AM -0800, Dave CROCKER wrote: > > > On 12/10/2009 7:29 AM, Sam Hayes Merritt, III wrote: >> As previously noted in this thread, msulli...@sorbs did a fairly good >> job of documenting this in an RFC draft. I'd say its still the primary >> goto to point people at for

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Michael Thomas
On 12/10/2009 07:54 AM, Steven Champeon wrote: In a nutshell, if you're not clearly indicating mail sources as mail sources, don't expect great deliverability. If you're running a Web hosting shop and don't have rate-limited outbound smarthosts, expect all your clients' mail to be suspected of be

Re: Arrogant RBL list maintainers

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 10:48:05AM -0500, Michael Holstein wrote: > Like many places, we run seperate internal and external DNS .. when a > user requests a static IP, they can opt to make it "external", but few > do, since we point out that when they do that, they loose the anonymity > of the "gene

Re: Linux shaping packet loss

2009-12-10 Thread Michael Holstein
> What's good for really cheap gigabit, redundant, high throughput Well .. I'd say you could pick any two of those and come up with a list .. but we use Packeteer (now owned by Bluecoat) to great success. It fails the first requirement miserably, IMHO, though. I've also used these in a MDU sett

best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 09:29:15AM -0600, Sam Hayes Merritt, III wrote: > >> Creating a standard on what to put in WHOIS/DNS for >> dynamic/static/infrastructure would make a lot of sense, seems nobody is >> doing it though. > > As previously noted in this thread, msulli...@sorbs did a fairly goo

Re: Arrogant RBL list maintainers

2009-12-10 Thread Michael Holstein
> Is your network setup so chaotic that you don't know what address > chunks are allocated by DHCP or PPP? Aww .. stop it, just stop. I could send the .vsd of the network overview to everyone and there'd still be someone that'd chime in and say "Ha! you moron .. you used ORANGE lines to interco

Linux Network Generator

2009-12-10 Thread Joseph Jackson
Hey list, I've been doing some stress testing of a router this week using Network Traffic Generator from http://sourceforge.net/projects/traffic/ and while it works well I was wondering what other generators you all have used and find helpful. Maybe something that Traffic doesn't do like pro

Re: Arrogant RBL list maintainers

2009-12-10 Thread Dave CROCKER
On 12/10/2009 7:29 AM, Sam Hayes Merritt, III wrote: As previously noted in this thread, msulli...@sorbs did a fairly good job of documenting this in an RFC draft. I'd say its still the primary goto to point people at for how to do things the "right way". http://tools.ietf.org/html/draft-msull

RE: Arrogant RBL list maintainers

2009-12-10 Thread Sam Hayes Merritt, III
Creating a standard on what to put in WHOIS/DNS for dynamic/static/infrastructure would make a lot of sense, seems nobody is doing it though. As previously noted in this thread, msulli...@sorbs did a fairly good job of documenting this in an RFC draft. I'd say its still the primary goto to

Re: Arrogant RBL list maintainers

2009-12-10 Thread Ronald Cotoni
On Thu, Dec 10, 2009 at 8:20 AM, Tony Finch wrote: > On Thu, 10 Dec 2009, Chris Edwards wrote: >> On Wed, 9 Dec 2009, Michael Holstein wrote: >> >> | Their initial email said : >> | >> | [snip] >> | Trend Micro Notification: 137.148.0.0/16 added to DUL >> | [snip] >> >> Oh dear.  I can see why man

Re: Arrogant RBL list maintainers

2009-12-10 Thread Tony Finch
On Thu, 10 Dec 2009, Chris Edwards wrote: > On Wed, 9 Dec 2009, Michael Holstein wrote: > > | Their initial email said : > | > | [snip] > | Trend Micro Notification: 137.148.0.0/16 added to DUL > | [snip] > > Oh dear. I can see why many sites that once used MAPS now don't :-( It isn't just idiocy

Re: Arrogant RBL list maintainers

2009-12-10 Thread Chris Edwards
On Wed, 9 Dec 2009, Michael Holstein wrote: | Their initial email said : | | [snip] | Trend Micro Notification: 137.148.0.0/16 added to DUL | [snip] Oh dear. I can see why many sites that once used MAPS now don't :-(

Re: Linux shaping packet loss

2009-12-10 Thread Chris
Thanks to all that replied. Trial and error it is ... I'm now waiting (22 hours later) for it to break again after I changed the priority on the "default" catch-all class. It lasted five days before. I'm looking at CBQ but it's not at all friendly relative to HTB. If I'm forced to go down the pr