Re: NG Firewalls & IPv6

2018-04-03 Thread Jima
the NAT64 support in ASA (although it sadly doesn't support the Well-Known Prefix) -- no love in ScreenOS, as far as I've ever found. - Jima > On Apr 2, 2018, at 16:58, Joe Klein wrote: > > All, > > At security and network tradeshows over the last 15 years, I have asked

Re: Geolocation: IPv4 Subnet blocked by HULU, and others

2017-12-27 Thread Jima
o's email). Weird corner cases abound, but it sounds like someone dropped the ball on getting this corrected. Tsk. - Jima

Re: Geolocation: IPv4 Subnet blocked by HULU, and others

2017-12-27 Thread Jima
om AfriNIC. One might consider Hulu et al not so at-fault with that fact in consideration. - Jima

Re: Waste will kill ipv6 too

2017-12-22 Thread Jima
lso, I doubt the vast majority of CenturyLink's residential customer base a) has non-tunneled IPv6 or b) receives a /48.) If anyone from AS209 wants to clean up those SWIPs, they're welcome to ping me off-list. :-) - Jima

Re: AS202746 Hijacks: Is Telia (a) stupid, or (b) lazy, or (c) complicit?

2017-08-13 Thread Jima
t with "I don't care about this, so fooey on your initiative." There may be a pointed statement in there -- thanks. ;-) Jima

Re: Multicom Hijacks: Do you peer with these turkeys (AS35916)?

2017-08-04 Thread Jima
later AS35916 withdrew the announcement entirely, possibly because of the traffic engineering implications of that filtering (not sure). Short-term, it's a win, but long-term we may not have seen the last of this prefix. Jima On 2017-08-03 06:24, Jima wrote: A few years back, Ronald

Re: Multicom Hijacks: Do you peer with these turkeys (AS35916)?

2017-08-03 Thread Jima
fixes had one less upstream. Years later now, I have a different job, and a circuit with AS209. I'll see if I can't scare someone up (if it's still active by the time I get into the office). Thanks Ronald. Rest assured that many of us remember. :-) Jima On 2017-08-03 05

Re: Some advice on IPv6 planning and ARIN request, please

2017-07-07 Thread Jima
request, as long as you have a logical addressing plan to justify it. Jima

Re: IPv6 traffic percentages?

2017-06-23 Thread Jima
enough mergers & acquisitions), RFC1918 runout becomes a serious, legitimate concern. That's been a big selling point for me. Jima

Re: CenturyLink in Advanced Talks to Merge With Level 3 Communications - Interweb is doomed

2016-10-28 Thread Jima
s and TWTC's mutual customers, and probably a long list of other M&A I'm not thinking of off-hand.) OK, I lied about it being great anyway. Jima

Re: transferring [legacy] address space from arin to ripe

2016-03-18 Thread Jima
legacy space. Apparently my data analytics skills are sharp enough to have found those networks in under 5 minutes. A /16, a /22 (effectively), and two /24s, right? I see another /18 got transferred to RIPE the day after yours, so apparently you're not the only one doing this. Jima

Re: Dual stack IPv6 for IPv4 depletion

2015-07-05 Thread Jima
I don't have any skin in the game, but the following devices popped into my head while reading that paragraph: http://www.gogo6.com/gogoware/gogoserver http://www.gogo6.com/gogoware/gogocpe Jima On 2015-07-05 00:13, Mel Beckman wrote: I predict some enterprising inventor will c

Re: Thousands of hosts on a gigabit LAN, maybe not

2015-05-08 Thread Jima
oject, the more expensive it sounds. Jima

Re: v6 deagg

2015-02-19 Thread Jima
That might be a little more valid once we move past 2000::/3 -- at the moment, more like IPv4 /29s. Alas, /48 seems to be the generally accepted maximum prefix length, so, yeah, this could be unfortunate. Jima On 2015-02-19 20:16, manning bill wrote: and then there are the loons who

Re: Wireless Connectivity - Heber City, UT area

2014-11-14 Thread Jima
width, and look into point-to-point wireless. Jima

Re: Hijacking machine: ASAS201640 / AS200002

2014-10-31 Thread Jima
-inclusive, but I would look at https://stat.ripe.net/widget/routing-history#w.resource=AS201640 . Unlike last time, I don't have any contacts at the relevant ISPs. Shame. Jima

Re: Public DNS64

2014-08-15 Thread Jima
ke a meme out of 64:ff9b::/96? :-) Jima

Re: Public DNS64

2014-08-15 Thread Jima
environment. Jima

Re: Muni Fiber and Politics

2014-08-05 Thread Jima
but they were about as plentiful as the supporters.) So, in theory, the model is great. In practice, it's too soon to tell -- but only due to layer 8+ problems. Jima

Re: Muni Fiber and Politics

2014-07-21 Thread Jima
SF Bay Area. Don't forget the various SLC suburbs with their sub-$100 1000/1000 FTTH service, and choice of eight layer-3 providers. (Sorry.) Jima

Re: Verizon Public Policy on Netflix

2014-07-17 Thread Jima
s: http://blog.level3.com/global-connectivity/verizons-accidental-mea-culpa/ BRB, I need to make some popcorn. Jima

Re: Verizon Public Policy on Netflix

2014-07-14 Thread Jima
o have all but abandoned it. Dave, Thank you for clarifying what seemed, at a distance, to be a rather strange decision. That assessment also explains away some routing oddities I've observed over the years. Jima

Re: Verizon Public Policy on Netflix

2014-07-13 Thread Jima
in: https://www.peeringdb.com/private/facility_view.php?id=1875 Beyond that, I have no idea -- this is the 350-mile view. Jima

Re: Verizon Public Policy on Netflix

2014-07-13 Thread Jima
"only true") IXP in Colorado, so I'm honestly a bit puzzled as to a) your indignation and b) their decision. Jima

Re: Verizon Public Policy on Netflix

2014-07-12 Thread Jima
7;t exist. Except when, as in the original example, it's not. Jima

Re: Verizon Public Policy on Netflix

2014-07-10 Thread Jima
those would be a hard sell for Netflix, no doubt about it. I guess I'm just glad that my home ISP can justify anteing up for a pipe to SIX, resources for hosting OpenConnect nodes, and, for that matter, an ASN. Indeed, not everyone can. Jima

Re: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-09 Thread Jima
site already whether you like it or not. Diodes Is it wrong that I read that like this? http://jima.us/201404/diodes.jpg (Sorry.) Jima

Re: Is there such a thing as a 10GBase-T SFP+ transciever

2014-02-01 Thread Jima
meter; no idea what the passive/active breakdown might be (they don't appear to offer that information as freely). I've mostly used the 3-meter HP DACs so far, and I've been rather happy with them, particularly the cost savings under 2x 10gbit SFP+ fiber transceivers. Jima O

Re: subrate SFP?

2013-08-31 Thread Jima
rackmount Gen8.) Jima On 2013-08-31 13:38, Joel Jaeggli wrote: WOL uses 100Mb/s, the phy draws less that way. Sent from my iPhone On Aug 31, 2013, at 10:13, Charles N Wyble wrote: On hp proliant gen8 servers with management and ilo on same port, with the server off the ports show up as 100mb

Re: WaPo writes about vulnerabilities in Supermicro IPMIs

2013-08-15 Thread Jima
On 2013-08-15 19:00, Jay Ashworth wrote: Presumably, everyone else's are very religious as well. Is anyone here stupid enough not to put the management interfaces behind a firewall/VPN? That was my initial thought, too. Jima

Re: One of our own in the Guardian.

2013-07-14 Thread Jima
On 2013-07-13 20:15, Jima wrote: I can happily state that XMission is my home ISP, with UTOPIA (city-involved fiber optic provider) as the local loop. (Really, who has 100/100 at home?) Thanks to everyone who responded -- my list of places I'm willing to live is roundin

Re: One of our own in the Guardian.

2013-07-13 Thread Jima
latest patches $network_vendor has sent Pete allows him to get IPv6 to me, though. :-P Jima

Spam to NANOG-specific email addresses?

2013-06-15 Thread Jima
Esteemed colleagues, Did anyone else get a Twitter invite from @washsuntimes to their NANOG-use-only email addresses? Granted, mine was with my old one, but it was still very much specific to this list. Maybe not the best place to harvest addresses. Jima

Re: Office 365 broken on ipv6

2013-04-30 Thread Jima
13-04-03; the appropriate team was notified, but I guess someone dropped the ball. Oops. Jima

Re: IPv6 and HTTPS

2013-04-27 Thread Jima
On 2013-04-27 11:01, Owen DeLong wrote: On Apr 26, 2013, at 9:55 PM, Jima wrote: On 2013-04-26 01:29, Don Gould wrote: I agree with others that there is still way to much XP and other non supporting platforms and I suspect that by the time we get those out of the system we'll be most o

Re: IPv6 and HTTPS

2013-04-26 Thread Jima
ctly connected to the internet anyway, even with ACLs -- or so I gleaned from the nice folks from DHS. ;-) Jima

Re: IPv6 and HTTPS

2013-04-26 Thread Jima
P for IPv6 -- just enable the stack. (It's not the greatest implementation, but `ipv6 install` is still an easier sell than "replace your computer.") Jima

Re: BCP38 tester?

2013-04-01 Thread Jima
good luck testing with nmap (-S and -e are relevant) while running tcpdump (and filtering for the protocols/ports) on a remote host. I can happily report that someplace upstream of my home connection is doing some filtering -- nice. I still need to test at work. Jima

Re: IPV6 in enterprise best practices/white papaers

2013-01-27 Thread Jima
enterprise network deployment. Yes and no. OS tuning can be rolled out via AD GPO, or other configuration management frameworks that might be present for other OSes (Puppet, CFEngine, etc). Jima

Re: IPV6 in enterprise best practices/white papaers

2013-01-27 Thread Jima
ve advised. Jima

Re: [SHAME] Spam Rats

2013-01-10 Thread Jima
On Thu, January 10, 2013 7:53 am, Suresh Ramasubramanian wrote: > As for v6 how popular do you see it getting for mail? Are you implying that when the internet otherwise moves on to IPv6, we'll still inexplicably use IPv4 for mail? Jima

Re: William was raided for running a Tor exit node. Please help if you can.

2012-12-02 Thread Jima
iny of the exit node. Jima

Re: Brasil/Mexico/Argentina connectivity

2012-11-15 Thread Jima
r) BT, Level 3/Global Crossing, and Verizon in a number of countries. I suspect any of the three have access in all of the countries listed. I imagine there are others, but those are the ones that sprung to mind. Jima

RE: Sandy seen costing telco, cable hundreds of millions of dollars

2012-11-07 Thread Jima
ther context, but there's not a sites-online statistic for them. I suppose it's worth noting that this wouldn't be the first time they've caught flak for their (in)ability to cover NYC sufficiently. Jima

Re: www.ipv6.facebook.com not loading

2012-10-25 Thread Jima
facebook.com . I honestly never noticed that they added an for www.ipv6.facebook.com . Hardly scientific, but http://www.googlefight.com/index.php?lang=en_GB&word1=www.v6.facebook.com&word2=www.ipv6.facebook.com seems to support my memory to some degree. Jima

Re: Please, talk me down.

2012-10-16 Thread Jima
ploy all your internal assets on IPv6 -- thus reducing the query load AND getting your systems ready for the future. I'm _this_ close to turning IPv6 off entirely. Anyone want to talk me off this ledge? Go right ahead. But first, what company is this, so the rest of us can know to avoid doing business? ;-) Jima

RE: So what's the deal with 10Gbase-T

2012-10-03 Thread Jima
Odd wording on the timing; I'm aware of at least one manufactured 1U system with onboard SFP+ that's been available since Q1-Q2 of this year. (I don't work for the manufacturer, just for a fairly happy customer.) Jima On Wed, Oct 3, 2012, at 7:54am, Drew Weaver wrote:

Re: So what's the deal with 10Gbase-T

2012-10-01 Thread Jima
on't exist. Jima On Mon, Oct 1, 2012 at 2:10pm, Andreas Echavez wrote: > Mostly backwards compatibility; simplicity. We're planning for some > super-high-density virtualization/storage projects mixed in with lower > bandwidth gear, and sticking to one type of cable for eve

Re: So what's the deal with 10Gbase-T

2012-10-01 Thread Jima
cables? Those seem fairly well supported. Jima

Re: using ULA for 'hidden' v6 devices?

2012-01-26 Thread Jima
s NAT64 instances (64:ff9b::/96 is a blocker if you actually want to allow NAT64 to RFC1918 space). While I can see the potential appeal of the second point, I'm not sure I'd agree with it myself. Jima

Re: How to begin making my own ISP?

2011-09-16 Thread Jima
han the nuts-n-bolts side of things. However, if you really want to get advice about the tech side of it, I'd consider looking for an internship with an ISP. Of course, another possible mistake was to assume that the majority of NANOG members work for ISPs (as such). Other entities operate networks, y'know. Jima

Re: ouch..

2011-09-15 Thread Jima
> Once upon a time, Jima said: >> On Thu, 15 Sep 2011, Owen DeLong wrote: >> > I was at Valley Fair mall the other day. Micr0$0ft is apparently >> building >> > a >> > new store directly across from the Apple store there. >> >> It's funn

Re: ouch..

2011-09-15 Thread Jima
ross from the Apple store there. It's funny; they did the exact same thing at Mall of America maybe a year ago. I guess your report confirms it was a strategy, rather than a really absurd coincidence. Jima

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases

2011-09-13 Thread Jima
since I had two StartSSL certs issued yesterday afternoon. Jima

Re: IPv6 version of www.qwest.com/www.centurylink.com has been down for 10 days

2011-09-05 Thread Jima
38::/32 (SixXS tunnel) 2001:4978::/32 (SixXS tunnel) 2001:470::/32 (HE tunnel) That gives me a really bad feeling of what might be wrong, but I'll leave it to the professionals. Jima On 2011-09-05 19:57, Frank Bulk wrote: Strange, not for me. nagios:/etc/nagios3# ping6

Re: NANOGers home data centers - What's in your closet?

2011-08-16 Thread Jima
lted when UPSes for mission-critical installations need to be spec'd out. (And by "mission-critical," I'm not talking about datacenters.) Jima

Re: dynamic or static IPv6 prefixes to residential customers

2011-08-02 Thread Jima
have BGP or anything; my DSL provider offered it to me half-jokingly once, but since the other side (Time Warner Cable) wouldn't to it, I didn't take them up on it. Alas, I will maintain that any household that multi-homes at this stage is, indeed, abnormal. Jima

Re: Looking for tw telecom folk to resolve IPv6 access to their site

2011-07-02 Thread Jima
P. AFAIK there's no byte counters or correlation between IPs and the elements that were fetched from them. Jima

Re: The stupidity of trying to "fix" DHCPv6

2011-06-15 Thread Jima
s for the citation, right. I also probably should also have cited http://en.wikipedia.org/wiki/Comparison_of_IPv6_support_in_operating_systems -- the notable holdouts to RDNSS (that support DHCPv6) seem to be Windows, Solaris, AIX, and IBM i. Unfortunate. Jima

Re: The stupidity of trying to "fix" DHCPv6

2011-06-15 Thread Jima
else (NTP servers, Domain Controllers, etc) in DHCP! Oh, oops; you did touch upon this. You might want to let the people who've implemented RDNSS in software know that the IETF is working on it. I'm sure that'll be a relief. Jima

Re: ip 6 questions

2011-06-15 Thread Jima
lesk barely has IPv6 support (>10.2) and I'm yet to hear about it from CPanel. FWIW: http://go.cpanel.net/ipv6 -- TL;DR: not there yet. Jima

Re: The stupidity of trying to "fix" DHCPv6

2011-06-11 Thread Jima
ation for 2001::/16 would have to go through their servers. Compare: 0.0.2.in-addr.arpa. 1.0.0.2.in-addr.arpa. Oops. And yes, I tested this little theory -- it actually applies to large chunks of 2000::/4. Jima

Re: The stupidity of trying to "fix" DHCPv6

2011-06-10 Thread Jima
the M bit.) Jima

Re: ipv6 day DDoS threat?

2011-06-07 Thread Jima
6 FUD this week. Jima

Re: v6 proof of life

2011-06-07 Thread Jima
those-Supermicro-board's part. That's not to say there's a route back, by any means. Jima

Re: Microsoft's participation in World IPv6 day

2011-06-02 Thread Jima
geeky plaything. :-( Jima

Re: Microsoft's participation in World IPv6 day

2011-06-02 Thread Jima
some organizations still are). Jima

Re: Yahoo and IPv6

2011-05-15 Thread Jima
soft's behalf. With the money they may be sinking into the technology, I would contend they have something to lose by not making it work. As has been discussed at length on this list, this is NOT an unfixable issue. Jima

Re: Yahoo and IPv6

2011-05-14 Thread Jima
ument for your point anyway, since apparently symmetric NAT monkey-wrenches it, too: http://forums.adobe.com/message/3602495 ) Jima

Re: Yahoo and IPv6

2011-05-14 Thread Jima
producing in 2007, although I don't know if it shipped with an IPv6-capable firmware.) Even printing isn't the last holdout. :-) Home entertainment devices, on the other hand... :-( Jima

Re: IPv6 foot-dragging

2011-05-11 Thread Jima
, but I've seen some indications that there may be some inaccuracies (Allstream announcing 2001:04c8::/33, for instance). Jima

Re: SIXXS contact

2011-04-26 Thread Jima
On 2011-04-26 20:00, Andrew Kirch wrote: My goal here isn't to bash HE, just to note that I have _REALLY_ bad routes to it. I had no trouble setting up a tunnel with them. Have you checked Gogo6 at all? Jima

Re: Easily confused...

2011-04-16 Thread Jima
thing that ambitious...but I might be wishing for too much. (Also, that 123 block seems to have been allocated in 2006, so it'd be even more unprofessional to start projects with that space since then.) Jima

Re: Bubba is a 75 year old woman looking to make some extra cash

2011-04-07 Thread Jima
tural enemies of the Babushka. Jima

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Jima
prove otherwise. Thank you for your forthright answer. I can't speak for others, but I appreciate the clarification. Jima

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Jima
to do with it. I guess we can call this a victory for the community? I dunno. Jima

Re: Using Region-X assigned IP space in Region-Y?

2011-03-27 Thread Jima
/24 assuming he has the correct information for his route objects and visible through the RIR database. Some transit providers dislike announcing smaller networks, and thus have lower limits. Jima

Re: CSI New York fake IPv6

2011-03-20 Thread Jima
rds.ieee.org/develop/regauth/oui/oui.txt ) Jima

Re: IPv4 address shortage? Really?

2011-03-07 Thread Jima
d need to be laid out and discussed, which will probably cost us a few years...too bad we don't have a plan that could be put into action sooner, or maybe even was already deployed. Anyway, the needless ROT13 text fairly well convinced me that our messages may be traveling over an ethernet bridge. Jima

Re: Christchurch New Zealand

2011-02-24 Thread Jima
vehicle. What is your next move? Wait for a winner to prevail. Whoever comes out on top is clearly more prepared to deal with emergencies. Jima

Re: Random Port Blocking at Hotels (was: Re: quietly....)

2011-02-05 Thread Jima
year. I think you owe Mark $10. Jima

Re: Found: Who is responsible for no more IP addresses

2011-01-27 Thread Jima
he-internet-has-run-out-of-ip-addresses-and-what-happens-after-that-is-anyones-guess/story-e6frfro0-1225995086627 Of course, you won't find (most of) the inaccuracies there now; they edited the article after the fact (and after Fox copied them). The only proof I had for myself reading it l

Re: IPv6 - real vs theoretical problems

2011-01-12 Thread Jima
we're quickly getting to the point where your average joe IS somewhat likely to have different classes of devices that might benefit from being on separate subnets. Jima

Re: Problems with removing NAT from a network

2011-01-08 Thread Jima
e A record (i.e., under skype.com), and based on a response (if any), replace the known IP value with the IP which with one wants to connect. A little weird, but it's a thought. Jima

Re: IPv6 - real vs theoretical problems

2011-01-06 Thread Jima
p; /48 mindset is flawed, but as a timely counterpoint to people expounding the virtues of 3177 without cautiously acknowledging that its recommendations aren't necessarily for everyone. I apologize if my intentions weren't terribly clear -- that may be a good cue for me to go to bed. Jima

Re: NIST IPv6 document

2011-01-06 Thread Jima
ot;Upon entering the PROBE state...") Pardon me if that's the wrong RFC. Jima

Re: IPv6 - real vs theoretical problems

2011-01-06 Thread Jima
gning out /48 and /64's. I can sleep at night now! :P http://tools.ietf.org/html//rfc3177 I can't tell if you're trolling, or if you didn't get the memo from Monday. I guess I'll lean toward the latter. http://www.ietf.org/mail-archive/web/v6ops/current/msg06820.html Jima

Re: The tale of a single MAC

2011-01-03 Thread Jima
r maybe this type of thing isn¹t big of deal... ? Out of curiosity, have you checked if there's a sticker on the board with the MAC address(es)? I know a lot of vendors do that. Jima

Re: Wireless IPv6

2010-12-28 Thread Jima
's still IPv4, albeit with NAT. Jima

Re: How do you do rDNS for IPv6 ?

2010-12-05 Thread Jima
ators). I'm pretty happy with the results, but I'd love to hear if anyone's come up with more elegant solutions. Jima

Re: Want to move to all 208V for server racks

2010-12-03 Thread Jima
inet is > all about smaller conductors. So 208/480 to each cabinet's UPS, and DC from there? I'm not sure how feasible that is. Jima

Re: Want to move to all 208V for server racks

2010-12-03 Thread Jima
if you're running your AC power through UPSes -- especially online ones (where there's a constant AC-DC-AC conversion happening). Go to DC for the batteries, never come back. It's a tempting notion. Jima

Re: Earthlink MX from *Earthlink* dynamic IPs blocked?

2010-12-03 Thread Jima
tware) has done a good job of smarthost-ing mail away from solitary instances with minimal pain; any reason you couldn't use that? Jima

Re: Level 3 Communications Issues Statement Concerning Comcast'sActions

2010-12-01 Thread Jima
ocumentation disagrees. As does the usage tracking system: http://jima.tk/201012/unlimited.png Grandfathered-in account, now on a MiFi device. Jima