Verizon (uu.net) DNS managers out there?

e NIC side is done; we just need to get those nameservers to stop doing zone transfers and stop thinking that they are authoritative for the zone. Thanks, jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus

Searchable archives of the list?

IPv4 space through ipway? Thanks, jms --- Joel M Snyder - Opus One - j...@opus1.com

Re: Coverage of the .to internet outage

ty by providing satellite capacity on Horizons 3e and Intelsat18 at that time. -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: DMVPN via Internet or Private APN

s also claim better pricing on big contracts, but rarely is this true, because of the sharp and continuous drop in costs for Internet worldwide. Go with vanilla. It's easier to pour syrup and nuts on top than it is to dig out those disgusting frozen marshmallow chunks from the rocky road so

Re: 60ms cross continent

Ts, replacing an incumbent provider, and the rationale for all that money and all that equipment and all that work is "the bits must flow." (Plus, there are also still many places outside of capital cities in the world where the Internet is truly awful and if you want bits, you have to bring

Re: Colo in Africa

G (Southern African equivalent of NANOG) as information sources. Anyway: I can get more specific, but it's hard to really offer super-specific advice on a vague question because, you know, Africa. That's a big topic. jms -- Joel M Snyder, 1404 East Lind Road, Tu

premiumcolo.net IP address rental

as to whether anyone has had any experience with them or knows the back story. Also, is there some reason that there is no official searchable archive of the nanog mailing list? (or dependable unofficial one...)? Best in the new year to you all, jms -- Joel M Snyder, 1404 East Lind Road,

Re: OSPF vs ISIS - Which do you prefer & why?

rrow very quickly. It's not ideal; that's just the way it is. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: Any recommendations for FXS/FXO hardware with Cisco Unified CME

LS (i.e., both ends authenticate each other with certificates) for both HTTPS provisioning and for SIP signalling. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Any recommendations for FXS/FXO hardware with Cisco Unified CME

with Sipura/Linksys. I have had good results with Audiocodes+Asterisk, but not in the Cisco PBX environment. Does anyone have boots-on-the-ground knowledge of good analog gateway choices that play very nicely with Cisco PBX? jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 S

Re: Office 365 Expert

I couldn't help but giggle at the kinds of numbers you guys are throwing around here for people to read email and work on spreadsheets. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: Urgent

> OP is a troll, best to ignore and block: Be nice. Randy can be abrasive, but calling him a troll seems out of line. I like to think of him as a hobbit with shorter temper than average. Not everyone here will agree with me :-) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality)

Shouldn't there be a rule against using "RIP" in the subject line of a NANOG post? Every time I see that, a shudder goes down *my* spine. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.com

Re: TWC (AS11351) blocking all NTP?

#x27;re one of that handful, then you've pretty much got to allow that NTP traffic in, although you're also probably, hopefully, clue-full enough not to let random hosts make you a DDoS accelerator. (the other) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner

Re: ARIN WHOIS for leads

x27;t give out your phone number (or give out a phone number that makes it hard for anyone but a real person who really wants to talk to you to get to you). How did our little capitalist industry suddenly become a "you must have permission to contact me by any means no matter what" indu

Re: huawei

Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: chargen is the new DDoS tool?

European university, in which case you use liters. Older systems of measuring security involving mass (pounds and kilos) have been deprecated, and you should not be using them anymore in serious evaluations, although some older CSOs will insist. jms -- Joel M Snyder, 1404 East Lind Road, Tucs

Re: Andros Island Connectivity?

balancers can make really horrible ERP apps (*ahem* Oracle eBusiness *cough* *cough* *cough*) work a lot better as well, if you decide not to use Citrix. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: Network Storage

ld be to start with Solera and then look at NetWitness if you don't like Solera. This assumes you have budget. If this is a back-of-the-envelope "hey, let's grab some packets and do something with them" kind of exercise, then filter your tcpdumps a lot better. jms --

Re: Question about peering

graphies may not be all that interesting, but some facilities do charge an arm and a leg (or maybe PCCW is screwing us over on the proposal). jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Cool IPs: 1.234.35.245 brute force SSHing

Normally I wouldn't say anything to anyone about anything so mundane as brute-force SSH attacks, but this one caught my eye just because of the IP address: 1.234.35.245 I wanna get a connection in Korea so I can have 1.234.56.78. jms -- Joel M Snyder, 1404 East Lind Road, T

Bluetooth-to-Serial (was: Re: Colo Vending Machine)

and also powered from the serial port if available. You can dangle the RJ45 one from a Cisco router literally forever without a battery and it will BT-to-serial for 20 or 30 feet. If you can find one, buy it as it's the perfect compromise between the BluePort and the IOGear. jms -- Joel

Re: DNS Attacks

[1] suffer, BoFH-style. jms [1] "'em" in this case is "your customer service reps" who will see a 'higher than normal call volume' should the FBI's warning mean anything. -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Op

Re: time sink 42

0, but it is about twice as hard to get anything done with it as the bottom-of-the-line $19.95 P-Touch that takes M tapes. Anyone got a solution for *that* particular problem? Should I get a better TZ-compatible labeler? jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Pa

Re: ASA log viewer

of Splunk which may help. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Barracuda Networks is at it again: Any Suggestions as to an Alternative

and see if it helps in your mail stream. (Every stream is different, so my results may not match your results.) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: Barracuda Networks is at it again: Any Suggestions as to an Alternative?

fflist and I'll outline it for you. I'd be interested in seeing you put your money where your mouth is regarding catch rate and false positive rate. Contact me off-list with a place where I can FTP a VM of one of your appliances. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ,

Random Port Blocking at Hotels (was: Re: quietly....)

mean, it's gratifying to think you've won the argument (hence: this is why they do it), but you could also have argued that they were giving out non-contiguous subnet masks or Class E addresses and it would have had the same effect. Try that next time and let us know how it works

Re: Is Cisco equpiment de facto for you?

requirements and doing YOUR OWN testing, not by looking at point tests to see if one product version/model/device beats another in a particular small set of performance tests. Obligatory disclaimer: we don't compete directly with Tolly, but we do get paid by the magazines to do testing and

[WOB] RE: NTP Server

Complete WOB, but I whenever people start talking about NTP, I always start trying to figure out how I could justify one of these for the data center: http://www.inovasolutions.com/network-clocks/products/analog-network-clocks.htm (PoE, SNTP, ANALOG clock) jms -- Joel M Snyder, 1404 East

Re: Out-of-band paging

it better, cheaper, more robust, etc., but I think it's important to balance these things. (I should also note, if anyone had any doubts, that I'm also one of those mom-and-pop ISPs, not Time-Warner or Verizon, so my concept of alerting is a bit different from someone who is trying to k

Re: Out-of-band paging (was: Web expert ...)

ations like major power outages which would eventually take down cell towers w/o generators (or with malfunctioning generation) aren't a real concern because you usually have plenty of notice before the power goes all the way out... jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ,

RE: Strange practices?

y to load balance (i.e., treats it as active/passive not true active/active), then it's not a bad solution. Ugly, but given the vast chalice of despair that is the global BGP table, hardly a drop in the bucket. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Pa

Re: Niksun Probe

If you want flows, there's LOTS of great products for flow monitoring, starting with Cisco and moving your way out through both open source and commercial products. But if you are considering Niksun, then flows are not what you're after. Packets are what you're after. jms -- J

Re: Niksun Probe

are adding. But if you just want capture, Endace might be a good solution. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: Carrier class email security recommendation

u say "Carrier Class." Feel free to contact me offline if you need more observations, etc. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

RE: Solar Flux

another effect of solar flares is UV radiation, so a good pair of sunglasses and some high-SPF sunblock would be good to have, plus make you look less like a nerd. Unless you use that zinc stuff on your nose, in which case you look more like a nerd. YMMV. jms -- Joel M Snyder, 1404 East

RE: What is "The Internet" TCP/IP or UNIX-to-UNIX ? (Jim Mercer)

/www.opus1.com/www/jms/diss.html) on it. And among the 848 references, this "Antonov" character (a...@hq.demos.su) even gets quoted three times (assuming you're not also V.S.Antonov who wrote "Interfacing Tasks of Systems SM and ES Computers and Ways of Their Solution" i

Re: legacy /8

selves into the phone line over a 2500 set with a frayed cord... (you can go on this way for a long time... We now return you to your regularly scheduled IPv3 NANOG troll...) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...

RE: Best VPN Appliance

pending on why you're asking for this, my results may or may not be applicable. For example, features like delegated and partitioned management, which are SP-critical but often ignored in the enterprise, weren't really part of my evaluation. jms -- Joel M Snyder, 140

Looking Glass software - what's the current state of the art?

e has done a better job and I should be just downloading and using an open source tool. What's the current thinking on a good standalone Looking Glass that can be opened to the Internet-at-large? jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One

RE: Spamhaus

eputation services you include, the more likely it is you're going to have false positives. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: Spamhaus and Barracuda Networks BRBL

ition of "better," you could either say "BRBL is better" or "BRBL is worse." It would generally depend on your sensitivity to FPs. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

RE: Spamhaus ...

as part of their anti-spam cocktail beyond simple "go/no-go" of a typical reputation service. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: How polluted is 1/8?

t useful packet. However, you don't get a /8 unless a T3 is small potatoes to you, hence... jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.comhttp://www.opus1.com/jms

Re: SORBS on autopilot?

they wouldn't be worth using. (My information is based on monthly testing of anti-spam appliances we have conducted for the past 5 years. For example, this month we are looking at 43 different appliances and 25 reputation sevices) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85

Re: Cloud service [was: RE: EC2 and GAE means end of ip

red with default settings) of them simply send anyway even if the certificate smells like week-old fish. Put it another way: I ran (accidentally) for two years with an expired certificate on one of our mail servers and didn't get a single peep about misbehaving mail. But most of this disc