Re: Impacts of Encryption Everywhere (any solution?)

ta from client to server), and of course sensitive information would be returned HTTPS only. Why doesn't that exist? -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Companies using public IP space owned by others for internal routing

In a message written on Mon, Dec 18, 2017 at 08:58:37AM -0500, Jason Iannone wrote: > My previous employer used 198.18/15 for CE links on IPVPN services. This one is mostly legit: https://tools.ietf.org/html/rfc5735 -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bickn

Re: Novice sysadmins

t, and 25% good, but I also think the 'net continues to miss out on the 25% good and could seriously use some of it. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Novice sysadmins (was: Suggestions for a more privacy conscious email provider)

eekly sendmail buffer overrun bugs, the finger back bombs, the rlogin spoofing attacks. Turns out bored college students were very good at creating mischeff. There was no banishment. There were plenty of bad things. > Ok, I'll shut up now. Good plan. -- Leo Bicknell - bickn...@ufp.or

Re: Broadcast television in an IP world

in use by millions. It's not just live TV, in the sense of sports. Many businesses leave on their favorite news channel 24x7x365, people still tune into topical shows (evening news, the late show) on schedules, etc. And some of them also do things like push software and guide data using mult

Re: What's the point of prepend communities?

In a message written on Mon, Oct 30, 2017 at 07:56:43PM +0100, Michael Hallgren wrote: > But keep in mind that 'prepend communities' are fragile: I decide by local > preference whereto I send my traffic. Absolutely, but they are still very useful in many situations. -- Leo

Re: What's the point of prepend communities?

er traffic. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: What's the point of prepend communities?

munity for 3, you get: 1 2 3 3 5 1 2 4 5 And you just forced all traffic to the second, shorter path. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Gonna be a long day for anybody with CPE that does WPA2..

y simply upgrading AP's. Sure, Windows, Mac, Linux...but also Android and iOS...and that "smart" TV, the streaming stick plugged into it, the nanny cam, etc, etc, etc. :( -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: 4 or smaller digit ASNs

for 2^32-1. "We have the biggest ASN!" -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Temp at Level 3 data centers

rate 80-90 degree input without damage. But that's not the question here. The question is if the temp is within the range specified in the contract. If it is, deal with it, and if it is not, hold your vendor to delivering what they promised. -- Leo Bicknell - bickn...@ufp.org PGP

Re: Why don't large carriers use alternate communication routes?

In a message written on Tue, Oct 10, 2017 at 07:19:15PM -0400, Sean Donelan wrote: > Are the penalties for subscribe outages so minimal that it makes business > sense not to use backup alternate routes? There are penalties for subscriber outages? Do tell! Where? -- Leo Bicknell -

Re: New TRANSLANT cable - US/VA to ES

s Windows Updates/second? -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Max Prefix Out, was Re: Verizon 701 Route leak?

That way you can insure restoration at the speed of your NOC, and not at the speed of your peer's. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: DevOps workflow for networking

r end write mem Then tftp the config to a server, have the script see e0 has description bar. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Microsoft O365 labels nanog potential fraud?

or that matter, setting up DKIM is horrendously complicated for no good reason... -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: WEBINAR TUESDAY: Can We Make IPv4 Great Again?

going to change the Internet, bigly. And, what about the e-mails? I mean, come on, what are those SMTP people hiding? [For the humor impared, it's a joke folks.] -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Cellular enabled console server

ck Google search landed me at > BlackBox LES1204A-3G-R2, but I've never actually used such a device. This > would be for use in the USA. OpenGear all the way. Models for every need. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Juniper Advertise MED on EBGP session.

at I needed. It works perfectly. Many, many thanks. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Juniper Advertise MED on EBGP session.

it may be impossible on JunOS. Anyone have a tip or trick? -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Passive Optical Network (PON)

egenerates to special SFP's and a splitter, which is pretty dang simple. However, this is clearly a corner case, and I agree with your assessment overall. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: BGP Route Reflector - Route Server, Router, etc

ull tables. So what's the actual "scaling" problem? -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Fiber Costs [Was: Re: SoCal FIOS outage(?) / static IP readdressing]

er utilities, and so on that drives much of the cost is fascinating. Perhaps I could have phrased better, I don't care so much that it's $15/foot in Frostbite Falls, but I am very interested in why it is $15/foot in Frostbite Falls. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://

Fiber Costs [Was: Re: SoCal FIOS outage(?) / static IP readdressing]

builds at > 30k a mile. In a message written on Wed, Jan 04, 2017 at 09:08:51AM -0500, Shawn L wrote: > Depending on the area and conditions (rock, etc). We're seeing > > $4 /foot Aerial > $5-$7 /foot direct bury > $10 - $14 /foot directional bore -- Leo Bicknell - bic

Re: SoCal FIOS outage(?) / static IP readdressing

e a regulator issue to me. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: SoCal FIOS outage(?) / static IP readdressing

$15/month insurance that I could do my job was money well spent. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Benefits (and Detriments) of Standardizing Network Equipment in a Global Organization

e number of the national BU's will not follow that advice, for perhaps good and often bad reason. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Benefits (and Detriments) of Standardizing Network Equipment in a Global Organization

hod saves captial. But in terms of technical resilliance, if there's a bug that takes out all cores or all edges the whole network is down, and there's actually 2x the risk as it could happen at either layer! -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: PGP signature

Re: Benefits (and Detriments) of Standardizing Network Equipment in a Global Organization

e vendor. Want maximum resilliance and/or negotiating power, go 2 vendor. Inherit a mess, learn to live in a 3+ vendor world. It's not that one is better than the other, it's just they require different approaches to get the same outcome. -- Leo Bicknell - bickn...@ufp.org PGP keys a

Re: Forwarding issues related to MACs starting with a 4 or a 6 (Was: [c-nsp] Wierd MPLS/VPLS issue)

n the packet and guessing because too many 4 and 6 MACs were already deployed. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpfoqPpxwNSM.pgp Description: PGP signature

Re: Forwarding issues related to MACs starting with a 4 or a 6 (Was: [c-nsp] Wierd MPLS/VPLS issue)

boxes that work. And if the vendor who supplied these did not fix it, I would give them no more business. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpUIMyQ7cxeB.pgp Description: PGP signature

Re: Accepting a Virtualized Functions (VNFs) into Corporate IT

severe network quarantine, for instance per host firewalls to lock down the devices. I'm not sure why the OP was asking, but if they are developing a new product of this type I might suggest they consider their response to a customer who says they need endpoint security on it before building it.

Re: Spitballing IoT Security

prepaid mailing label. Once you’ve deleted your data, ship your device to us, and we’ll handle the rest." -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgp60Yt_YI5U7.pgp Description: PGP signature

Re: Should abuse mailboxes have quotas?

to mean that there isn't someone > actively reading, acting on, and deleting e-mail from abuse@. Are there any ISP's left that read and respond to abuse@ in a timely fashion? I haven't seen one in at least a decade. Maybe I e-mail the wrong ones. -- Leo Bicknell - bickn

Re: Spitballing IoT Security

and/or recycled, see http://www.apple.com/iphone/trade-up/. If your device is too old for that program, they will still take it for free and recycle it in an enviornmentally friendly way, see http://www.apple.com/recycling/. No iPhone should ever end up in a landfill. If it does, it's your

Re: Spitballing IoT Security

imported. To really minimize burden, these security items could be added to one of the existing schemes so there is no additional org. But the idea that a certification per country is difficult is pretty much debunked by the fact that it is that way already, multiple times over in most cases.

Re: Spitballing IoT Security

egulations that if you want to import a product for sale it must be safe. It's not a new or novel concept, pretty much every country has some scheme like it. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgprvh44CzuFD.pgp Description: PGP signature

Re: Death of the Internet, Film at 11

eone who builds roads can make an unsafe car safe. Yes, both the network operator and rood operator play a role in building safe infrastructure (BCP38, deformable barriers), but neither can do anything for a manufacturer who builds a device that is wholely deficient in the first place. -- Leo Bicknell -

Re: MPLS in the campus Network?

every L3 VPN could be in every building, with each port dynamically assigning the VLAN based on the user's login! Imagine never manually configuring them again. Write a script that makes all the colleges (20? 40? 60?) appear in every building all attached to their own MPLS VPN's

Re: MPLS in the campus Network?

f hurt. Particularly if you want long, stable life ride with the crowd. Use a platform many others are using for the same job. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpALqdUJoKza.pgp Description: PGP signature

Re: Two BGP peering sessions on single Comcast Fiber Connection?

t actually doing the math that you'll be more reliable with a single quality router (elminiation of complexity), and that if you really need maximum uptime that you had better get a second circuit, on a diverse path, into a different router probably from a different carrier. -- Leo Bicknell -

Re: BCP38 adoption "incentives"?

ink). At this point there's no excuse, anyone who has gear who can't do that has been asleep at the switch. It's been a standard feature in too much gear for too long. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpsnqYUh9bKQ.pgp Description: PGP signature

Re: Optical Wave Providers

s widely (low margin, requires clued customer) but if you ask they are available. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpnUWAuWR2RV.pgp Description: PGP signature

Re: NANOG67 - Tipping point of community and sponsor bashing?

be small, like $5/mo. That's $60 year to do nothing, and even if the $40 an hour fiber tech spends a hour troubleshooting _every fiber_ (which doesn't happen) the colo still makes money. Cross connects are our industry's $100 gold plated HDMI cables. -- Leo Bicknell - bickn

Re: NANOG67 - Tipping point of community and sponsor bashing?

resentation was asking people to do was step back, look at the situation, and reevaluate that particular tradeoff. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgp34MlQA3jBY.pgp Description: PGP signature

Re: NANOG67 - Tipping point of community and sponsor bashing?

bunch of operators getting together to discuss their common issues and figure out if there if there is a path forward to make things better. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgp8_ySfki63Z.pgp Description: PGP signature

Re: intra-AS messaging for route leak prevention

A ingested, but at least you won't pass it on to peers and spoil the rest of the Internet. Basically both ingress and egress filtering have weaknesses, and in some cases doing both can provide some mitigation. It's the old adage "belt and suspenders". -- Leo Bicknell - bickn..

Re: IPv6 is better than ipv4

do 20 of them, and IPv6 isn't even on the list. Our planning window is crisis to crisis, err, I mean quarter to quarter. Will my web site go down this quarter if I don't deploy it? Otherwise we can put that off. Sadly, I wish all these answers were some sort of carachture of reality, but I think they are too many folks reality. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpEleSm0I3QP.pgp Description: PGP signature

Re: LLDP via SNMP

really makes it difficult to consume the data by script. Lots of special cases. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpZ7GiEeRfO8.pgp Description: PGP signature

Re: Question on peering strategies

ps only 100 oddballs between the two. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpFwAqCYOOJR.pgp Description: PGP signature

Re: Cost-effectivenesss of highly-accurate clocks for NTP

rhaps another way, is it possible to get say 10's or 100's of nanosecond accuracy in the lan/campus? -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpE9K0yZ7Yjy.pgp Description: PGP signature

Re: NIST NTP servers

her, and those three outliers are 10 and 35 microseconds off. That's pretty impressive! I didn't have to buy any of them, because various trustable entities run those infrastructures. Some of the trustable entites are the same ones that send the time up to the GPS satellites. :) -- Le

Re: CALEA

is is likely the wrong list for asking such questions, and the few who do answer is likely to be smaller providers where people wear multiple hats. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpWM43j2G20q.pgp Description: PGP signature

Re: NIST NTP servers

8 to get me to move to your "hacked" time. Good luck. Redundancy is the solution, not a new single point of failure. GPS can be part of the redundancy, not a sole solution. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpZ8nfasXwtV.pgp Description: PGP signature

Re: NIST NTP servers

as several have suggested. You'll then have high quality false ticker rejection. Configure all of your devices to get NTP from the servers you run using authentication. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpRuzcNumYGj.pgp Description: PGP signature

Re: Latency, TCP ACKs and upload needs

send 1070 ACKs back upstream, at 64 bytes each, or about 68Kbps. Well under the 1Mbps upstream bandwidth. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpRCAH4V8jii.pgp Description: PGP signature

Re: phone fun, was GeoIP database issues and the real world consequences

that again. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgp00UyD7hxZ7.pgp Description: PGP signature

Re: phone fun, was GeoIP database issues and the real world consequences

ybe 10% of all cell phones are primarly used in the "wrong" area? -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgpw6JzSDGLKQ.pgp Description: PGP signature

Re: GeoIP database issues and the real world consequences

9076 W (MaxMind Corporate HQ) Maybe after seeing what it's like to be on the receiving end of their own inaccuracy they will be a bit more motivated to fix it. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgp7PpJPfkx2n.pgp Description: PGP signature

Re: /27 the new /24

heir supernets_, and will not reannounce them. -- Leo Bicknell - bickn...@ufp.org PGP keys at http://www.ufp.org/~bicknell/ pgp6DMytjZoko.pgp Description: PGP signature

Re: How to force rapid ipv6 adoption

and Fios > service would be v6-enabled before the end of the following week lol. If only people were forced to deploy IPv6...like perhaps because they couldn't get any more IPv4 addresses. Maybe we should stop issuing IPv4 addresses? (Did I need to put sarcasam tags around that, I hope not!)

Re: NetFlow - path from Routers to Collector

eople pick fast and cheap. They are not wrong, you are not right. Just a different lifestyle choice. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ pgpjRA813DA9_.pgp Description: PGP signature

Re: So Philip Smith / Geoff Huston's CIDR report becomes worth a good hard look today

olved/Critical limit pushed out long enough to give us a few more years/ -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: Muni Fiber and Politics

flexibility on both sides of that boundary, and the least chance of "stupidity" from players on either side. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: Muni Fiber and Politics

gt; serving a VoIP box may… >> >> Even in those cases where there isn't a layer 3 operator nor a chance for a >> viable resale of layer 1/2 services. >> -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: Muni Fiber and Politics

d, vrs buying prepackaged sand at the local home improvement store. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: Muni Fiber and Politics

criminatory basis to any providers, that there would ever be zero layer 3 operators. Maybe it’s a corner case that will occur in one small town somewhere that the long haul is crazy expensive to reach, but it’s not a general problem that policy needs to optimize to handle. -- Leo Bickn

Re: Muni Fiber and Politics

y. But I think some well crafted L2 services could actually _expand_ consumer choice. I mean running a dark fiber GigE to supply voice only makes no sense, but a 10M channel on a GPON serving a VoIP box may… -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/

Re: Muni Fiber and Politics

antly hugely more flexible. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: A simple proposal

they will have to spend money to fix. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: AOL Mail updates DMARC policy to 'reject'

ing my data is representative of the Internet, but I remember a time when they were 50% of the addresses on my mailing lists. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: DMARC -> CERT?

en thrown at technical measures over the years into better laws, tools for law enforcement, and helping them build cases we'd be several orders of magnitude better off than technological solutions that are little more than wack-a-mole. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440

Re: [ PRIVACY Forum ] Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping

/www.imperialviolet.org/2014/02/22/applebug.html http://blog.existentialize.com/the-story-of-the-gnutls-bug.html -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: Managing IOS Configuration Snippets

g1/2/3 is dropping packets, "show run" to see who's configure on it sort of operations. I don't know of any platform that has implemented this sort of config framework though. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bickn

Re: Why won't providers source-filter attacks? Simple.

forts need to focus on getting the BCP38 stuff into those standards, ideally as mandatory defaults. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: best practice for advertising peering fabric routes

ils to past uRPF. (Business class) ISP's don't break PMTU-D, end users break it with the equipment they connect. So a smart user connecting equipment that is properly configured should be able to expect it to work properly. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440

Re: best practice for advertising peering fabric routes

n buy a VPN appliance and manage their own VPN's with no vendor lock-in. MPLS VPN revenues would tumble, and customers would move more fluidly between providers. That's terrible if you're an ISP. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: best practice for advertising peering fabric routes

e points that are "too big to fail". Since some of these exchanges are so big, everyone else must bend to their needs. I think the world would be a better place if some of these were broken up into smaller exchanges and they imposed less restrictions on their participants. --

Re: best practice for advertising peering fabric routes

d, imagine if there was a more sinister attack, taking out the physical infrastructure of an exchange. That can't be "fixed" with a routing advertisement. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: best practice for advertising peering fabric routes

world has not ended. YMMV, some assembly required, batteries not included, actual conditions may affect product performance, do not taunt the happy fun ball, and consult a doctor if your network is up for more than four hours. -- Leo Bicknell - bickn...@ufp.org - CCIE 34

Re: turning on comcast v6

ease? How many dozens of technologies are we going to invent to try and avoid putting a default route in DHCP? -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: turning on comcast v6

telligent admins (ha!). What happens when Joe Home User buys a new Linksys and wants to plug it in to get a firmware update before installing it? Are we really supposed to expect that every Joe Homeowner understands RA Guard and configures it for their home network? -- Leo

Re: turning on comcast v6

y configured IPv4 box. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: turning on comcast v6

ignore RA's. We can't have an option to ignore RA's in devices, because at the moment RA's are the only way to get a default route so it doesn't make sense. Someone has to go first, the other side will follow. I suggest it makes a lot more sense to get working DHCP, befor

Re: NSA able to compromise Cisco, Juniper, Huawei switches

a router, can be "persistently" infected. The hardware industry needs to do better. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: turning on comcast v6

s that the status quo does not work for many folks, but for some reason these two solutions get pushed over a simple DHCP router assignment option. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: turning on comcast v6

realized how soft and squishy it was. Injecting a route into RIP allowed you to hijack rsh sessions, for example. Lots of people who were admins at that time learned through personal pain and late night hacking that sending a dynamic route to a box via an unauthenticated protocol was a r

Re: turning on comcast v6

going to rely on smart people deploying networking devices we might as well give up and go home now. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: turning on comcast v6

e IETF mailing lists and help them get what they need, so IPv6 deployment can proceed apace. If you really don't think there is harm, help them go get what they (think they?) need. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: turning on comcast v6

ng people who want to deploy it in some slightly different way than you did? -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/

Re: turning on comcast v6

are safer than most. There are devices not on this list that meet your criteria as well. I believe the absolute cheapest at NewEgg is the D-Link DIR 655, which is $63.99 with "Extra savings .. promo code" right now: http://www.newegg.com/Product/Product.aspx?Item=N82E16833127215 --

Re: turning on comcast v6

PE. The way to get new software is to buy new hardware, which is really only a good solution when the feature set required is stable over long periods of time. There are plenty of low end residential style boxes that "just work" with Comcast's setup out of the box with vendor i

Re: AT&T UVERSE Native IPv6, a HOWTO

are thus "out". In fact they can make a histogram from 1 to 256 networks per household, and show us how many request each number of subnets. I challenge Comcast, AT&T, and others to do just that, and publish it on a regular basis, if only to make people stop talking about this

Re: Reverse DNS RFCs and Recommendations

match. (in shorthand) 10.0.0.1 PTR webhosting.foo.com webhosting.foo.com A 10.0.0.1 www.sitea.com A 10.0.0.1 www.siteb.com A 10.0.0.1 www.sitec.com A 10.0.0.1 -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: Pad 1310nm cross-connects?

er in-spec. For any real connections (over a fiber path more trivial than a jumper) a light meter should be used, the value checked, and an attenuator that places the circuit 1-2dB inside of the safe zone of the receiver should be used. -- Leo Bicknell - bickn...@ufp.org - CC

Re: Policy-based routing is evil? Discuss.

do this is possible, but quite annoying in my experience. I don't think it's possible to make a Cisco or Juniper do this sort of thing in any reasonable way. A number of manufacturers have developed custom solutions around this idea. -- Leo Bicknell - bickn...@ufp.org - CCI

Re: iOS 7 update traffic

er/ 4: http://9to5mac.com/2013/09/10/apple-makes-iwork-apps-iphoto-and-imovie-free-with-all-new-ios-devices/ 5: http://support.apple.com/kb/DL1683 -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: common method to count traffic volume on IX

bunch of routers speaking unicast to each other. The only way to get a difference is if there is packet loss, IN - loss = OUT. -- Leo Bicknell - bickn...@ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/

Re: common method to count traffic volume on IX

counting traffic on links between > the switches in fabric will count some of the traffic multiple times. Sounds like a marketing opportunity. customer--s1--s2--s3--s4--s5--s6--s7--s8--s9--s10--customer Presto, highest volume IX! Maybe I should patent that idea. -- Leo Bicknell - bic

Re: Yahoo is now recycling handles

In a message written on Thu, Sep 05, 2013 at 12:17:28AM -0400, valdis.kletni...@vt.edu wrote: > On Wed, 04 Sep 2013 20:47:40 -0500, Leo Bicknell said: > > There's still the much more minor point that when I tried to "self > > serve" I ended up at a blank page on

  1   2   3   4   5   6   >