Re: junos config commit question

2022-02-16 Thread Andrew Fried
n you're hosed after the first "commit". -- Andrew Fried andrew.fr...@gmail.com

Re: Dyn DDoS this AM?

2016-10-21 Thread Andrew Fried
The brutal reality in todays world is that anyone that relies on the Internet is just asking for stuff like this. No service is safe. Andrew Andrew Fried andrew.fr...@gmail.com On 10/21/16 5:58 PM, Randy Bush wrote: > anyone who relies on a single dns provider is just asking for stuff s

Re: remote serial console (IP to Serial)

2016-03-08 Thread Andrew Fried
The Lantronix Spiders work well and aren't a "do-it-yourself" option: http://www.lantronix.com/products/lantronix-spider/ Andrew Andrew Fried andrew.fr...@gmail.com On 3/8/16 10:30 AM, greg whynott wrote: > Recently I have taking over the responsibility of managing about 1

Re: load balancer product for dns content switching

2015-08-27 Thread Andrew Fried
While still in pre-production state, you might want to look at: http://dnsdist.org/ Andrew Andrew Fried andrew.fr...@gmail.com On 8/27/15 3:13 PM, Brooks Bridges wrote: > Spent quite a bit of time researching products out there looking for one > that will do content switching based

Re: Ars Technica on IPv4 exhaustion

2014-06-17 Thread Andrew Fried
protect their income from leasing IPv4 addresses doesn't matter to the vast majority of the end users; they simply can't access IPv6 via IPv4 only networks, without using some kludgy, complicated tunneling protocols. Andy -- Andrew Fried andrew.fr...@gmail.com On 6/17/14, 5:48 PM, Ja

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-10 Thread Andrew Fried
++1 Andrew Fried andrew.fr...@gmail.com On 5/10/14, 2:42 PM, Patrick W. Gilmore wrote: > Nice discussion about history & motivations. Not completely correct, but it's > always fun to argue over history, and over motivations, since both are open > to intepretation. >

Re: spamassassin hole again?

2014-04-13 Thread Andrew Fried
Any chance you could provide a *clue* as to what you're seeing, eg message subject, from, etc??? Andrew Fried andrew.fr...@gmail.com On 4/13/14, 1:00 AM, Babak Farrokhi wrote: > We are not using spamasassin and only major RBLs in place and seeing the same > wave of spam. Seems like a

Re: Cogent - ATT issue?

2014-04-02 Thread Andrew Fried
My connectivity between Fios and Cogent in Washington DC has been mostly down for the past hour. Andrew Andrew Fried andrew.fr...@gmail.com On 4/2/14, 3:03 PM, Eric wrote: > Anyone know if there is a connectivity issue between Cogent and ATT in the > northeast? We're seeing rand

Re: Verizon FIOS IPv6?

2014-01-07 Thread Andrew Fried
You fared better than I did. I also am a Verizon Business customer, and when I called and inquired about ipv6 I was told that they didn't carry that channel. :) Andrew Fried andrew.fr...@gmail.com On 1/7/14, 11:28 PM, Stephen Frost wrote: > * Christopher Morrow (morrowc.li...@gmail.co

Re: List of CDNs?

2013-11-14 Thread Andrew Fried
. Andy Andrew Fried andrew.fr...@gmail.com On 11/14/13, 5:11 PM, Patrick W. Gilmore wrote: > List of CDNs would be difficult, but not impossible. Although they do > different things, so a simple list is unlikely to be as useful as it looks. > > A lost of CDN "DC nodes" is no

Re: Cogent IPV6 connectivity to fireball.acr.fi

2013-11-03 Thread Andrew Fried
>From AS54054 in Ashburn, VA I can ping your address but traceroute's aren't making it through. Andrew Andrew Fried andrew.fr...@gmail.com On 11/3/13, 1:30 PM, Clinton Work wrote: > IPV6 connectivity to fireball.acr.fi is failing inside Cogent AS174. I > have already conta

Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS)

2013-06-20 Thread Andrew Fried
Not so easy and straightforward to do. You'll find that a lot of the big names out there frequently tweak DNS, which will result in a non-stop stream of "alerts". Andy Andrew Fried andrew.fr...@gmail.com On 6/20/13 3:57 PM, Jared Mauch wrote: > It seems there may be a nee

Re: Google Public DNS Problems?

2013-05-01 Thread Andrew Fried
Your IPs may have been rate limited... Andy Andrew Fried andrew.fr...@gmail.com On 5/1/13 12:38 PM, Blair Trosper wrote: > That's all well and good, but I certainly wouldn't expect "nslookup > gmail.com" or for "nslookup google.com" to return SERVFAIL > &

Re: Time Warner Cable YouTube throttling

2013-03-06 Thread Andrew Fried
;> 6 144.232.8.209 (144.232.8.209) 187.038 ms 115.363 ms 117.669 ms A handoff between Verizon and Sprint shouldn't incude a 100ms delay. Andy Andrew Fried andrew.fr...@gmail.com On 3/6/13 9:25 PM, Min wrote: > 3 traces all indicated the last hub are 80~100ms faster than the > secon

Re: [outages] www.dns-ok.us down

2012-07-06 Thread Andrew Fried
indefinitely is actually not a good thing. Andy Andrew Fried andrew.fr...@gmail.com On 7/6/12 5:40 PM, Jay Ashworth wrote: > So... might large and medium ISPs not redirect DNS to those known addresses > to a resolver in house, which would log the client IPs and let them > know whom t

Re: DNS Changer items

2012-07-06 Thread Andrew Fried
The subnets will probably be held until the conclusion of the criminal trials. After that, the addresses may be held back from assignment for a while (e.g. a year), but eventually they'll get reassigned. Andrew Fried andrew.fr...@gmail.com On 7/6/12 4:45 PM, Roy wrote: > On 7/6/2012

Re: DNS Changer items

2012-07-06 Thread Andrew Fried
27;re coming up with a pretty detailed list of "lesson's learned" from this operation and being able to implement ideas like yours will hopefully be considered in advance "next time". Andy Andrew Fried andrew.fr...@gmail.com On 7/6/12 3:58 PM, Tomas L. Byrnes wrote: > I

Re: DNS Changer items

2012-07-06 Thread Andrew Fried
14 hours. How much more of a graceful ramp down could there have been? Andy Andrew Fried andrew.fr...@gmail.com On 7/6/12 1:52 PM, Cameron Byrne wrote: > So insteading of turning the servers off, would it not have been helpful to > have the servers return a "captive portal"

Re: DNS Changer items

2012-07-06 Thread Andrew Fried
The dns-ok.us site is getting crushed from all the sudden media interest. We're trying to tweak it to handle the 50,000 or so simultaneous connections. Andy Andrew Fried andrew.fr...@gmail.com On 7/6/12 12:34 PM, Eric J Esslinger wrote: > A) The DNS changer working group site http:/

Re: Domain changer statistics by ASN

2012-07-05 Thread Andrew Fried
We have data going back to November 8, 2011. Generating a report of over 2,000 ASNs, by day, would be too large an attachment for NANOG. I'll produce a follow up report in less than 3 hours with data from July 5th. Would that help? Andy Andrew Fried andrew.fr...@gmail.com On 7/5/12 5:

Domain changer statistics by ASN

2012-07-05 Thread Andrew Fried
that these numbers need to come down by Sunday. if you find this of use, I can regenerate new reports later this afternoon with data from the 5th. Andy -- Andrew Fried andrew.fr...@gmail.com dcwg-asns-20120704.txt.bz2 Description: BZip2 compressed data

Re: Operation Ghost Click

2012-04-26 Thread Andrew Fried
I suggest you reach out to Shadowserver or Team Cymru if you're a netblock owner. They can provide daily reports of infected IPs. Andy Andrew Fried andrew.fr...@gmail.com On 4/26/12 5:50 PM, Leigh Porter wrote: > > On 26 Apr 2012, at 22:47, "Andrew Latham" > mailto:l

Re: Hijacked Network Ranges

2012-01-31 Thread Andrew Fried
The interesting thing is that I'm not seeing any new "hosts" from those subnets in passive dns. It almost seems that their purpose for hijacking the space was to direct traffic to themselves, possibly for collecting login attempts. Andrew Fried andrew.fr...@gmail.com On 1/31/12

Re: POP3 DoS attacks and mailanyone.net?

2009-09-01 Thread Andrew Fried
). Doesn't look gmail related from that perspective... Andrew Andrew Fried andrew.fr...@gmail.com Winn Johnston wrote: > Issues with gmail.com > > here in DC > > Winn Johnston > > From: u...@3.am [...@3.am] > Sent: Tuesday, Se

DNS DDoS

2009-01-28 Thread Andrew Fried
| arin | 2004-07-29 | GBLX Global Crossing Ltd. 4565| 70.86.80.98 | 70.84.0.0/14| US | arin | 2004-07-29 | MEGAPATH2-US - MegaPath Networks Inc. 6461| 70.86.80.98 | 70.84.0.0/14| US | arin | 2004-07-29 | MFNX MFN - Metromedia Fiber Network -- Andrew

DNS DDoS - New Hosts

2009-01-27 Thread Andrew Fried
) | ++-+ | 202.104.106.49 | 45 | | 210.21.218.138 | 48 | | 63.217.28.226 |1153 | | 64.57.246.146 |1559 | | 67.192.144.0 | 11765 | | 76.9.16.171| 582 | ++-+ -- Andrew Fried andrew.fr...@gmail.com

DNS DDoS Host list

2009-01-26 Thread Andrew Fried
84 | | 206.71.158.30 | 34327 | | 210.21.218.138 | 84 | | 63.217.28.226 |2696 | | 66.230.160.1 |3541 | | 76.9.16.171|1355 | ++-----+ -- Andrew Fried andrew.fr...@gmail.com

Re: isprime DOS in progress

2009-01-25 Thread Andrew Fried
92 | +---+-+ -- Andrew Fried andrew.fr...@gmail.com David Andersen wrote: > I'm not sure you're entirely out of the water yet: > > 17:13:45.680944 76.9.16.171.53868 > .53: 58451+ NS? . (17) > 17:13:45.681251 .53 > 76.9.16.171.5

Re: isprime DOS in progress

2009-01-24 Thread Andrew Fried
:53 imhotep named[32762]: client 204.11.51.61#43330: view > ext: query (cache) './NS/IN' denied > Jan 24 09:43:54 imhotep last message repeated 2 times > Jan 24 09:53:56 imhotep named[32762]: client 63.217.28.226#53: view > ext: query (cache) './NS/IN' denied > Jan 24 10:05:28 imhotep named[32762]: client 208.78.169.234#42517: > view ext: query (cache) './NS/IN' denied > Jan 24 10:05:28 imhotep last message repeated 2 times > Jan 24 10:26:09 imhotep named[32762]: client 206.71.158.30#18971: view > ext: query (cache) './NS/IN' denied > Jan 24 10:26:11 imhotep named[32762]: client 206.71.158.30#47622: view > ext: query (cache) './NS/IN' denied > Jan 24 10:26:13 imhotep named[32762]: client 206.71.158.30#16077: view > ext: query (cache) './NS/IN' denied > > > -- Andrew Fried andrew.fr...@gmail.com

Re: godaddy spam / abuse suspensions?

2008-11-16 Thread Andrew Fried
t 12:19 PM, Rohan Sheth <[EMAIL PROTECTED]> wrote: > >> Name has been suspended for "supposed" abuse by the godaddy abuse team. >> >> I believe the only recourse is to email [EMAIL PROTECTED] (cc >> [EMAIL PROTECTED]) asking what they want to release the domain to >> you. I believe the usual charge is like $75 or so. >> >> --Rohan >> >> > > > -- Andrew Fried [EMAIL PROTECTED]

Re: community real-time BGP hijack notification service

2008-09-12 Thread Andrew Fried
Mail being what it is today, testing message delivery is an excellent idea. I'll implement that feature this weekend. Andy Skywing wrote: > It might be useful to have an option to generate an example alert mail for > purposes of setting up necessary mail processing rules and that sort. Just a