Re: VMware Training

Why bother with a clustering FS, then, if you cannot actually /use it/ as one? - jra On February 19, 2014 10:44:22 PM EST, Jimmy Hess wrote: >On Wed, Feb 19, 2014 at 2:06 PM, Jay Ashworth wrote: > >> - Original Message - >> > From: "Eugeniu Patrascu" >> [snip] >> My understanding of "cl

Re: VMware Training

On Wed, Feb 19, 2014 at 2:06 PM, Jay Ashworth wrote: > - Original Message - > > From: "Eugeniu Patrascu" > [snip] > My understanding of "cluster-aware filesystem" was "can be mounted at the > physical block level by multiple operating system instances with complete > safety". That seems

Re: spamassassin

On 02/19/14 22:22, Randy Bush wrote: >> http://www.gossamer-threads.com/lists/spamassassin/users/183433 > > as blabby as nanog, and not really specific > >> body BAYES_99 eval:check_bayes('0.99', '0.999') >> body BAYES_999 eval:check_bayes('0.999', '1.00') >> score BAYES_99 0 0 3.8 3.5 >> score B

Re: VMware Training

On Wed, Feb 19, 2014 at 12:14 PM, Phil Gardner wrote: Seeing you are a Linux admin;VMware's prof. training offerings are basic "point and click" things, not very Linux-admin friendly; no advanced subjects or even CLI usage in "Install, Configure, Manage". If you are already at the level of

Re: spamassassin

> http://www.gossamer-threads.com/lists/spamassassin/users/183433 as blabby as nanog, and not really specific > body BAYES_99 eval:check_bayes('0.99', '0.999') > body BAYES_999 eval:check_bayes('0.999', '1.00') > score BAYES_99 0 0 3.8 3.5 > score BAYES_999 0 0 4.0 3.7 and this is a replacement

Re: spamassassin

On 2/19/2014 6:48 PM, Randy Bush wrote: Daniel is correct, he gets a cookie! The the others: please learn to recognize when you have no clue. simon, you just do not understand the purpose of the nanog list We've been having the same problem here for the last three days. I tracked it down to B

Re: spamassassin

Yo Randy! On Thu, 20 Feb 2014 10:48:49 +0800 Randy Bush wrote: > > We've been having the same problem here for the last three days. I > > tracked it down to BAYES_999. Glad to see other people are suffering > > as much as I am. :) > > as the fix is not yet out, would be cool if someone with mor

Re: spamassassin

> Daniel is correct, he gets a cookie! The the others: please learn to > recognize when you have no clue. simon, you just do not understand the purpose of the nanog list > We've been having the same problem here for the last three days. I > tracked it down to BAYES_999. Glad to see other people a

NTP DRDos Blog post

Folks, I just posted http://nwtime.org/ntp-winter-2013-network-drdos-attacks/ . In general we've never allowed comments to blog posts on that site; we're currently discussing if we should allow them for this post. I'd love to hear any feedback about the post. Thanks... -- Harlan Stenn http:/

Re: GEO location issue with google

For future reference, the last time this issue came up someone said doing this was a good way to get their geo stuff fixed automatically: http://tools.ietf.org/html/draft-google-self-published-geofeeds-02 I haven't messed with it yet, but it seems like a good idea. I want to write something t

Re: random dns queries with random sources

Joe Maimon wrote: > What is the purpose of this? It may be an experiment that rate limiting is useless to suppress amplification against attacks simultaneously on many targets. A better protection should be to shutdown secure DNS, which is not very secure.

random dns queries with random sources

Davis, Having seen this in the past, and managing both open resolvers and authoritative servers for several large eyeball networks, I think your assumption is correct this definitely smells like C&C traffic being handled via DNS. Just my 2c - YMMV - All sales final, As is - Dale Rumph - Network

Re: VMware Training

- Original Message - > From: "Eugeniu Patrascu" > If you want block storage, just export an iSCSI device to the ESXi machines > (tgtadm on RedHat is all you need and a few gigs of free space). VMFS is > cluster aware so you can export the same volume to independent ESXi hosts > and as lon

Re: VMware Training

Hey Phil, I recently did the VCP certification/course through VMWare however I was working with the technology over the past 5 years. Based off your desire to gain experience with it, my recommendation is to load up VMware Workstation on your computer and deploy ESXi instances as the guests. This i

Re: VMware Training

On Wed, Feb 19, 2014 at 8:14 PM, Phil Gardner wrote: > Not sure if this list is the best place, but it is probably the only list > that I'm on that won't give me a bunch of grief about the chosen technology. > > I looked at VMware's site, and there are a ton of options. I'm wondering > if anyone h

VMware Training

Not sure if this list is the best place, but it is probably the only list that I'm on that won't give me a bunch of grief about the chosen technology. I looked at VMware's site, and there are a ton of options. I'm wondering if anyone has some basic suggestions or experiences. I'm a Linux adm

Looking for an Amazon EC2 East Contact

Seeing pretty consistent packet loss to/from instances in EC2 East (54.80 IPs) from various vantage points. Working through normal support channels, but looking for a contact to help expedite. Thanks, Ray

RE: random dns queries with random sources

They are, and dropping them just as fast. It seems like the last a day or two, and then move on to another domain name. They are similar enough that the bots probably work off a formula to determine valid requests. It may be a coincidence, if you believe in those, but this type of C&C traffic

Re: random dns queries with random sources

Beeman, Davis wrote: rather the authoritative name server in these domains is the rouge DNS server in use by the bad actor running a botnet. Davis Beeman Network Security Engineer Somebody must be registering these domain names. And I should be able to compile a list of the auth servers

Deadline Approaching [was: Ad Hoc BCOP Committee - Call for Volunteers]

Hello again NANOGers, FYI - The deadline for BCOP committee nominations is 28 February. We have received several great candidates already and are hoping to receive several more! If you are interested in joining this grassroots effort to make the Internet a safer, more predictable place (or know

Re: random dns queries with random sources

Or if you tell your bots to use a set of open resolvers, it helps hide them by a step. On Wed, Feb 19, 2014 at 8:32 AM, Simon Perreault < simon.perrea...@viagenie.ca> wrote: > Le 2014-02-19 11:28, Dobbins, Roland a écrit : > >> I am late to this train, but it appears no one else has brought this

Re: random dns queries with random sources

Le 2014-02-19 11:28, Dobbins, Roland a écrit : >> I am late to this train, but it appears no one else has brought this up. It >> is a DNS tunneling setup, not an attack. > > This makes a lot of sense - good insight, will look into this further! I use this for free wi-fi in airports and such:

Re: random dns queries with random sources

On Feb 19, 2014, at 10:57 PM, Beeman, Davis wrote: > I am late to this train, but it appears no one else has brought this up. It > is a DNS tunneling setup, not an attack. This makes a lot of sense - good insight, will look into this further! ---

RE: random dns queries with random sources

I am late to this train, but it appears no one else has brought this up. It is a DNS tunneling setup, not an attack. I have been dealing with one of these lately as well. They were using some open resolvers in my network to reflect, but the "random" hostnames in the queries are tunneled traff

Re: spamassassin

Daniel is correct, he gets a cookie! The the others: please learn to recognize when you have no clue. We've been having the same problem here for the last three days. I tracked it down to BAYES_999. Glad to see other people are suffering as much as I am. :) Simon Le 2014-02-19 01:46, Daniel Staa

RE: GEO location issue with google

Hi Heather, Thanks you very much for sorting out this issue. Praveen Unnikrishnan Network Engineer PMGC Technology Group Ltd T: 020 3542 6401 M: 07827921390 F: 087 1813 1467 E: p...@pmgroupuk.com [cid:image004.png@01CF2D72.C52965E0] [cid:image002.jpg@01CE1663.96B30

Re: random dns queries with random sources

> It has been ongoing for a week or so (but not constant). The domain > names have a pattern but are comprised of components that appear to be > randomly generated. The source IP addresses for the queries appear to be > non duplicated and randomly generated. > > query logs are available for uni

Re: random dns queries with random sources

> Premature send - I meant to add 'Or against the authoritative servers for > 5kkx.com?' > > We've been seeing a spate of reflected (not amplified) DNS attacks against > various authoritative servers in Europe for the past week or so, bounced > through some type of consumer DSL broadband CPE wi

Re: random dns queries with random sources

Hello everyone I can see such crap traffic from over couple of weeks now but yes it appeared all of sudden and I was also wondering if I am alone experiencing it. 2014-02-19 14:30 GMT+08:00 Joe Maimon : > > > Dobbins, Roland wrote: > >> >> On Feb 19, 2014, at 1:07 PM, Joe Maimon wrote: >> >>