Re: Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-11 Thread Mikael Abrahamsson
On Mon, 11 Aug 2014, Colton Conor wrote: How stable and feature rich are both of their platforms? How do both of I have played around with the Edgerouter ER-5. It's a fairly immature product compared to Cisco and Juniper. One of the bigger problems is that they don't really release fixes for

Re: Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-11 Thread Rubens Kuhl
> > I personally feel like at this level of traffic, A entry level of linux > server (like dell r210) with adequate domain knowledge is the best > combination. It would happily do most stuff you throw at it, if you know > how to use it. Entry level hardware solution tries to hide details from >

Re: Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-11 Thread Yucong Sun
EdgeRouter only support "hardware accelerated" routing with limited features. If you start playing with firewall filters, gre tunnels etc you would have to be careful about how they decrease your performance. I personally tried to use a edgerouter to replace my j2350 with 300mbps traffic. I first

Re: Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-11 Thread Eric Harrison
I ported one of our Juniper SRX configs to an EdgeRouter Lite and it was a relatively painless experience. I benchmarked the end results and it would do ~1gbps without breaking much of a sweat. Not bad at all for a <$100 box. We keep some on the shelf, just in case of an emergency. At that price,

RE: Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-11 Thread Tony Wicks
Personally I have a simple matrix for routing and switching, if the customer can afford it I use Juniper, if they can afford it and really want Cisco then I will use Cisco. If the customer wants to put something in that will "just work" for years to come I use Juniper. If they want the cheapest

Re: Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-11 Thread Rubens Kuhl
On Mon, Aug 11, 2014 at 9:22 PM, Colton Conor wrote: > I am interested to hear opinions on Mikrotik and Ubiquiti Networks routing > and switching products. I know both hardware providers are widely deployed > in WISP networks, but I am less interested in their wireless solutions and > more in the

Re: Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-11 Thread Faisal Imtiaz
Should we say, both products are an acquired taste ? :) Are they perfect, no, but then what is ? Do they do the Job, yes. Do they work well ? yes. Do they do everything under the sun ? No... but then what does ? Each has it's own set of peculiarities. However, what actually sets them apart from

Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-11 Thread Colton Conor
I am interested to hear opinions on Mikrotik and Ubiquiti Networks routing and switching products. I know both hardware providers are widely deployed in WISP networks, but I am less interested in their wireless solutions and more in their wired products. I know most of their switches and routers a

Re: Dealing with abuse complaints to non-existent contacts

2014-08-11 Thread Franck Martin
On Aug 10, 2014, at 8:19 AM, Gabriel Marais wrote: > Hi Nanog > > I'm curious. > > I have been receiving some major ssh brute-force attacks coming from random > hosts in the 116.8.0.0 - 116.11.255.255 network. I have sent a complaint to > the e-mail addresses obtained from a whois query on one

Re: Dealing with abuse complaints to non-existent contacts

2014-08-11 Thread charles
On 2014-08-10 10:19, Gabriel Marais wrote: Hi Nanog I'm curious. I have been receiving some major ssh brute-force attacks coming from random hosts in the 116.8.0.0 - 116.11.255.255 network. I have sent a complaint to the e-mail addresses obtained from a whois query on one of the IP Addresses

Re: Dealing with abuse complaints to non-existent contacts

2014-08-11 Thread John Levine
>RBL / BGP blackholes based on bad registration info? That's sort of what the Spamhaus DROP list does. Many (most?) of the entries are ancient abandoned allocations that have been hijacked by crooks.

Re: Dealing with abuse complaints to non-existent contacts

2014-08-11 Thread Rich Kulawiec
On Sun, Aug 10, 2014 at 11:25:36PM +0500, Alexander Merniy wrote: > Move ssh to a non-standart port + fail2ban - best solution. No, it is not. The best solution is to enumerate the ranges from which legitimate ssh connections will originate and firewall *everything* else. Yes, this means (gasp!