Re: People trying to sell "ARIN Leads"

2022-04-08 Thread Rob Seastrom
On Apr 8, 2022, at 19:01, John Curran wrote: > > Please forward each solicitation (in full with headers) to us via > > > (Unique emails that are only used in the Whois entry are the easiest > violations to pursue by far - so reporting such activity can make a huge > difference.) Wouldn’t

Re: People trying to sell "ARIN Leads"

2022-04-08 Thread Rob Seastrom
> On Apr 8, 2022, at 2:40 PM, na...@jima.us wrote: > > Of course, plausible deniability goes out the window when you receive sales > emails on an address that ONLY exists in ARIN Whois. > > But no one would put a "canary trap" email in ARIN Whois...right? I know of nobody who would do any such

Re: Non-default X.509 certs on EdgeOS?

2020-12-31 Thread Rob Seastrom
> On Dec 31, 2020, at 9:08 AM, Brielle wrote: > > Don’t just replace the lighttpd cert files anymore - has been obsolete way of > doing it for a looong time. Guilty. Thanks for the clue; I had literally no idea that things had evolved (and honestly, hadn't done much to my config other than

Non-default X.509 certs on EdgeOS?

2020-12-31 Thread Rob Seastrom
I realize that Ubiquiti may be in the same “too ashamed to talk publicly about it” bucket as Mikrotik, so feel free to email me off list instead of replying publicly - is anyone else here running non-default x.509 certs for the web GUI on the Ubiquiti EdgeRouter? [*] I thought I had a fairly

Re: Cable Company Hotspots

2020-11-23 Thread Rob Seastrom
On Nov 22, 2020, at 12:42, Lady Benjamin PD Cannon wrote: > > Rod, that’s exactly how they are delivering it. Unclear wether it’s over a > separately provisioned bandwidth channel, or wether it shares the aggregate > capacity of the HFC. It shares the aggregate bandwidth of the HFC but not yo

Re: crypto frobs

2020-03-24 Thread Rob Seastrom
> On Mar 23, 2020, at 8:48 PM, William Herrin wrote: >> If they *do* steal both, >> they can bruteforce the SSH passphrase, but after 5 tries of guessing >> the Yubikey PIN it self-destructs. > > What yubikey are you talking about? I have a password protecting my > ssh key but the yubikeys I'v

Re: Cost Recovery Surcharge & Va Personal Property Tax Recovery for IP Transit

2020-01-08 Thread Rob Seastrom
 >> On Jan 6, 2020, at 10:30, William Herrin wrote: > >> - Va Personal Property Tax Recovery (1.8%) > If it's not written in to your contract, it's a breach of contract. Either > way it's a deceitfully imposed surcharge, not a state tax. Virginia does not > tax the sale of services like trans

Re: DOCSIS 3.1 upstream

2016-04-21 Thread Rob Seastrom
> On Apr 20, 2016, at 6:12 PM, Jean-Francois Mezei > wrote: > > On 2016-04-20 13:09, Rob Seastrom wrote: > >> Going to D3.1 in a meaningful way means migrating to either a mid-split at >> 85 MHz or a high split at 200 MHz > > Thanks. This is what I expect

Re: DOCSIS 3.1 upstream

2016-04-20 Thread Rob Seastrom
> On Apr 14, 2016, at 10:43 PM, Jean-Francois Mezei > wrote: > > Also, have cablecos with such limits for upstream begun to upgrade the > cable plant to increase the upstream bandwidth ? Canadian cablecos have > told the regulator it would be prohibitively expensive to do so, but > incumbents t

Re: Netflix stuffing data on pipe

2016-01-04 Thread Rob Seastrom
I haven't done packet dumps to verify the behavior (too busy catching up on holiday email) but I can't help but wonder if IW10 (on by default in FreeBSD 10 which I believe might be what Netflix has underneath) is causing this problem, and that maybe a more gentle CWND ramp-up (or otherwise tweak

Re: announcement of freerouter

2015-12-29 Thread Rob Seastrom
> On Dec 29, 2015, at 4:08 AM, Josh Reynolds wrote: > > It wasn't about trolling, it was about legitimate prior art and reasonably > so. Also, there's potentially a confusing association between the two. > > I'm glad the terminology was removed. Since it's an operating system for routing IP,

Re: Broadband Router Comparisons

2015-12-24 Thread Rob Seastrom
> On Dec 23, 2015, at 10:38 PM, Lorell Hathcock wrote: > > That's a good troubleshooting technique when the customer is cooperative and > technically competent. ... and has ethernet on anything in the house, which is increasingly a bad thing to rely on. Got an iPad, a smart phone, and a MacB

Multi-core clamp on ammeter

2015-11-28 Thread Rob Seastrom
Hi folks, I own a Megger MMC850 which will read amps in a multi-core cable, such as the 10 gauge SEOOW cable one often finds feeding rack PDUs. Datasheet here: http://www.mouser.com/ds/2/263/MMC850_DS_en_V02-15853.pdf Apparently they've been discontinued. Pity. Anyone know of a suitable rep

Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Rob Seastrom
Guarantee there's no BLISS-32 on Johnny's machine. The source to the LAT software he's talking to *may* be in BLISS-36. It's more likely in MACRO-10. -r (does this gray hair make me look old?) George Michaelson writes: > Dec gave you the source on Microfiche. If you want to change LAT just r

Re: Whats' a good product for a high-density Wireless network setup?

2015-06-21 Thread Rob Seastrom
Stephen Satchell writes: > ... They just couldn't believe that 300 people could max out their system > ... > Last year, the group AVERAGED four devices each. A *camping* event that I go to, that is by and large not a technology-oriented consituency, averaged 2.6 devices per attendee. -r

Re: Anycast provider for SMTP?

2015-06-20 Thread Rob Seastrom
"Joe Abley" writes: > http://tools.ietf.org/html/draft-vandergaast-edns-client-subnet-02 > > There are privacy concerns, here. But we might posit that you've > already in the business of trading privacy for convenience if you're > using a public resolver. Personally, I've always thought the p

Re: Anycast provider for SMTP?

2015-06-18 Thread Rob Seastrom
Ray Soucy writes: > You can certainly do anycast with TCP, and for small stateless services it > can be effective. You can't do anycast for a stateful application without > taking the split-brain problem into account. In my experience, the thing that makes anycast work *well* is having the con

Re: stacking pdu

2015-06-04 Thread Rob Seastrom
William Herrin writes: > Isn't it against the NEC and the fire code to stack power strips? We > all do it, but isn't it against code? Sorry to be late to the party (I plead vacation), but no, afaik it is not. About as close as the NEC comes art 400.8 - you can't use flexible cord as a substitu

Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Rob Seastrom
More like "at least be willing to man up and learn your way around some platform other than RHEL without whining if there is a business need for it". -r Josh Reynolds writes: > *grumble, grumble, grumble* > "Get off my lawn!" > :) > > > On May 7, 201

Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Rob Seastrom
Josh Reynolds writes: > It really bothers me to see that people in this industry are so > worried about a change of syntax or terminology. If there's one > thing about the big vendors that bothers me, it's that these > batteries of vendor specific tests have allowed many "techs" to get > lazy. T

Re: IPTV providers in IN/Chicago

2015-04-28 Thread Rob Seastrom
Brandon Martin writes: > The network in > question is IPv4 multicast capable and could somewhat trivially (I > think) be IPv6 multicast capable (it is definitely IPv6 unicast > capable). You'd be surprised how many edge devices (unfortunately) support IPv6 multicast only to the degree necessary

Re: vendor spam OTD

2015-04-27 Thread Rob Seastrom
Suresh Ramasubramanian writes: > Given weâ(TM)re going down this âoewhat is spamâY\.. rathole again, spam is > generally defined as unsolicited BULK email Correct, and moreover it's generally conceded that having a perl script insert "Dear Robert" at the beginning of the email message is insuff

Re: vendor spam OTD

2015-04-27 Thread Rob Seastrom
Stephen Satchell writes: > On 04/27/2015 07:02 PM, Rob Seastrom wrote: >> Anyone else been spammed by Andy Boland at "Function5 Technology >> Group"? > > I'm not sure it's fair to class the e-mail as "spam", but he is one > persistent fell

vendor spam OTD

2015-04-27 Thread Rob Seastrom
Anyone else been spammed by Andy Boland at "Function5 Technology Group"? -r

Re: IPTV providers in IN/Chicago

2015-04-27 Thread Rob Seastrom
Brandon Martin writes: > Anyone know of an IPTV provider/wholesaler who I could meet in > Indianapolis (Henry St/Lifeline) or Chicago (Cermak/Equinix)? "IPTV" implies, or used to imply, multicast (or unicast, whichever, swap them with a few DCMs) MPEG2-TS feeds. If that's what you want, fine,

Re: reclaiming arin IP allocations?

2015-04-15 Thread Rob Seastrom
Rob Seastrom writes: > goe...@anime.net writes: > >> "Note ARIN has attempted to validate the data for this POC, but has received >> no response from the POC since 2013-11-06" >> >> So if the owner does not care to respond to ARIN, what now? >

Re: reclaiming arin IP allocations?

2015-04-15 Thread Rob Seastrom
goe...@anime.net writes: > "Note ARIN has attempted to validate the data for this POC, but has received > no response from the POC since 2013-11-06" > > So if the owner does not care to respond to ARIN, what now? POC validation has an extraordinarily low success rate (under 50% if memory serves

Re: Fixing Google geolocation screwups

2015-04-08 Thread Rob Seastrom
shawn wilson writes: > On Apr 8, 2015 7:19 AM, "Rob Seastrom" <[[r...@seastrom.com]]> wrote: >> >> >> Blair Trosper <[[blair.tros...@gmail.com]]> writes: >> >> > MaxMind (a great product) >> >> I've heard anecdotal ac

Re: Fixing Google geolocation screwups

2015-04-08 Thread Rob Seastrom
Blair Trosper writes: > MaxMind (a great product) I've heard anecdotal accounts of MaxMind intentionally marking all address blocks assigned to a VPN vendor as "open proxy" even when advised repeatedly that the disputed addresses (a) had no VPN services running on them either inbound or outboun

Re: Last-call DoS/DoS Attack BCOP

2015-03-25 Thread Rob Seastrom
Christopher Morrow writes: > On Tue, Mar 24, 2015 at 5:27 AM, Rob Seastrom wrote: >> >> John Kristoff writes: >> >>> If the attack is an infrastructure attack, say a routing interface that >>> wouldn't normally receive or emit traffic from its ass

Re: Last-call DoS/DoS Attack BCOP

2015-03-24 Thread Rob Seastrom
John Kristoff writes: > If the attack is an infrastructure attack, say a routing interface that > wouldn't normally receive or emit traffic from its assigned address > except perhaps for network connectivity testing (e.g. traceroute) or > control link local control traffic (e.g. local SPF adjace

Supporting network time software development/maintenance (was: Re: BCOP appeals numbering scheme -- feedback requested)

2015-03-16 Thread Rob Seastrom
New subject so as to minimize threadjacking, not the least because this is important stuff. Harlan Stenn writes: >> Releng is hard and thankless but adds enormous value and >> serves as a forcing function for some level of review, cursory though >> it may be. > > I think so too. > > Hey everyb

Re: BCOP appeals numbering scheme -- feedback requested

2015-03-15 Thread Rob Seastrom
Charles N Wyble writes: > Use a git repository. > Make tagged releases. > This enables far easier distributed editing, translating, mirroring etc. And A fine idea in theory, but not quite as much traction in reality as bcp38. Creating a need for a BCP for retrieving BCPs so that you get the ri

Re: BCOP appeals numbering scheme -- feedback requested

2015-03-15 Thread Rob Seastrom
William Norton writes: > Agreed - Hence the “Current” in the title. Maybe the date of the > document will be the key to let people know that they have the most > current version. The date of a single document is of scant use in determining its currency unless there is some sort of requireme

Re: optical gear cooling requirements

2015-03-03 Thread Rob Seastrom
Alex Rubenstein writes: > My question: have the > optical folks woken up and made things cool front to back, or are > they still in to the bottom to top world? Unless something's changed, AT&T NEDS still reads "Systems exhausting more than 50 W/sq ft must exhaust the air vertically.". You can

Re: Symmetry, DSL, and all that

2015-03-03 Thread Rob Seastrom
you're not seeing FIOS commercials that talk about how great their symmetry is... when you live in a place that there is no FIOS. It's almost as if someone knows how to target their marketing dollars isn't it? Shocking. > Steven Naslund > Chicago IL Rob Seastrom Leesburg VA 75 symmetric FIOS, 9.9ms to Equinix.

Re: Symmetry, DSL, and all that

2015-03-03 Thread Rob Seastrom
"Naslund, Steve" writes: >>From a Verizon press release last summer, all FIOS speeds are now symmetric. > > And no one cares. I don't even see Verizon commercials crowing > about how great it is to have symmetry. If customers loved it that > much don't you think they would market that way? Y

Re: OT - Small DNS "appliances" for remote offices.

2015-02-19 Thread Rob Seastrom
Denys Fedoryshchenko writes: > Beaglebone has gigabit mac, but due some errata it is not used in > gigabit mode, it is 100M (which is maybe enough for small office). But > it is "hardware" mac. The Beaglebone Black rev C BOM calls out the ethernet phy chip as LAN8710A-EZC-TR which is 10/100 so

Re: OT - Small DNS "appliances" for remote offices.

2015-02-19 Thread Rob Seastrom
Bryan Seitz writes: > odroid-c1 + eMMC module + RTC battery + case + power adapter. > Should run you about $75 *AND* wouldn't be bad for running NTP as > well. I haven't looked into the details of the clock, so "wouldn't be bad" is probably true, "notably good", well, that would be a task for s

Re: OT - Small DNS "appliances" for remote offices.

2015-02-18 Thread Rob Seastrom
"Robert Webb" writes: > What I do not like about the Pi is the network port is on the USB > bus and thus limited to USB speeds.  Pretty much all of the ARM boards have their ethernet ports on HSIC channels (480mbit/sec, no-transceiver-phy USB for on-board use - maximum length is 10cm). The Pi

Re: OT - Small DNS "appliances" for remote offices.

2015-02-18 Thread Rob Seastrom
Justin Wilson - MTIN writes: > Have you looked at Mikrotik? > www.mikrotik.com > > It may be lacking for DNS options you want, but worth a look. I'd definitely recommend mikrotik for a cheap and cheerful router. DNS server (the original subject of this message)? Not so much. -r

Re: OT - Small DNS "appliances" for remote offices.

2015-02-18 Thread Rob Seastrom
Peter Kristolaitis writes: > Not "industrial grade", but Raspberry Pis are pretty great for this > kind of low-horsepower application. Throw 2 at each site for > redundancy and you have a low-powered, physically small, cheap, dead > silent, easily replaceable system for ~$150 per site. The Pi

Re: Interesting BFD discussion on reddit

2015-02-16 Thread Rob Seastrom
n almost never bet on the TTL value to secure the protocol. > > > > Dave > > > > On Tue, Feb 17, 2015 at 7:03 AM, Rob Seastrom <[[r...@seastrom.com]]> wrote: > > Dave Waters <[[davewaters1...@gmail.com]]> writes: > > &g

Re: Interesting BFD discussion on reddit

2015-02-16 Thread Rob Seastrom
Dave Waters writes: > http://www.reddit.com/r/networking/comments/2vxj9u/very_elegant_and_a_simple_way_to_secure_bfd/ > > Authentication mechanisms defined for IGPs cannot be used to protect BFD > since the rate at which packets are processed in BFD is very high. > > Dave One might profitably a

Re: IPv6 allocation plan, security, and 6-to-4 conversion

2015-01-30 Thread Rob Seastrom
Eric Louie writes: > I'm putting together my first IPv6 allocation plan. The general layout: > /48 for customers universally and uniformly > /38 for larger regions on an even (/37) boundary > /39 for smaller regions on an even (/38) boundary You really really really don't want to subnet on non

Re: Recommended wireless AP for 400 users office

2015-01-30 Thread Rob Seastrom
Paul Nash writes: > Ruckus is also *way* easier to configure than Cisco. Some of the > Cisco folk that I know think that that is a point in favour of > Cisco, as it adds to job security :-) That matches my experience with Cisco 802.11 kit. Way too many knobs exposed, and guidance on how to se

Re: Recommended wireless AP for 400 users office

2015-01-30 Thread Rob Seastrom
Manuel Marín writes: > I was wondering if you can recommend or share your experience with APs that > you can use in locations that have 300-500 users. I friend recommended me > Ruckus Wireless, it would be great if you can share your experience with > Ruckus or with a similar vendor. My experi

Re: cable modem firmware upgrade

2015-01-30 Thread Rob Seastrom
"Paul Stewart" writes: > That has been my experience as well (only from the RF side) and I would > believe this was a design choice. The ISP usually wants to keep control > over the firmware versions of the CM for various technical/support reasons > versus having consumers mess with the firmwa

Re: PDU for high amp 48Vdc

2015-01-30 Thread Rob Seastrom
None of the stuff you'll make has UL or NEBS approval unless you pay for that. I'd be inclined to suck it up and pay for remote hands to turn a switch unless you own the colo or they're casual enough that they don't care (your insurance company might though). Should you decide to go ahead and bu

Re: Fibre Channel Network

2015-01-04 Thread Rob Seastrom
symack writes: > Hello Everyone, > > Have a few FC cards and a switch that I would like to use for backplane > related packets (ie, local network). I am totally new to FC and would like > to know will I need a router to be able to communicate between the nodes? > What I plan on doing is connecti

Re: Got a call at 4am - RAID Gurus Please Read

2014-12-12 Thread Rob Seastrom
Jon Lewis writes: > OpenSolaris (or even Solaris 11), ZFS, Stable. Pick one. Maybe > two. Three? Yeah right. Anyone who's used it hard, under heavy load, > should understand. The most recent release of OpenSolaris was over 5 years ago. You're working from (extremely) dated information. Th

Re: Got a call at 4am - RAID Gurus Please Read

2014-12-11 Thread Rob Seastrom
Barry Shein writes: > From: Randy Bush >>> We are now using ZFS RAIDZ and the question I ask myself is, why >>> wasn't I using ZFS years ago? >> >>because it is not production on linux, which i have to use because >>freebsd does not have kvm/ganeti. want zfs very very badly. snif. > > I keep

Re: Got a call at 4am - RAID Gurus Please Read

2014-12-11 Thread Rob Seastrom
sectors on one of the other disks in >>> the array after a power / ups issue rebooted our storage box. >>> >>> We are now using ZFS RAIDZ and the question I ask myself is, why wasn't I >>> using ZFS years ago? >>> >>> +1 for ZFS and RAIDZ >>&g

Re: Got a call at 4am - RAID Gurus Please Read

2014-12-11 Thread Rob Seastrom
Gary Buhrmaster writes: > There is always Illumos/OnmiOS/SmartOS > to consider (depending on your particular > requirements) which can do ZFS and KVM. 2.5-year SmartOS user here. Generally speaking pretty good though I have my list of gripes like everything else I touch. -r

Re: Got a call at 4am - RAID Gurus Please Read

2014-12-10 Thread Rob Seastrom
The subject is drifting a bit but I'm going with the flow here: Seth Mos writes: > Raid10 is the only valid raid format these days. With the disks as big > as they get these days it's possible for silent corruption. How do you detect it? A man with two watches is never sure what time it is.

CAs with dual stacked CRL/OCSP servers

2014-12-05 Thread Rob Seastrom
At $DAYJOB, we have some applications that we would like to be all hipster and *actually check* for certificate revocation. I know this is way out there in terms of trendiness and may offend some folks. Difficulty: the clients are running on single stacked IPv6. We have recently been advised by

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Rob Seastrom
Bill Woodcock writes: >> On Dec 4, 2014, at 7:35 AM, Andrew Gallo wrote: >> >> In my informal conversations, what I got was that lawyers read the >> agreement, said 'no, we wont sign it' and then dropped it. If >> specific legal feedback isn't making it back to ARIN, then we need >> to start p

Re: Buying IP Bandwidth Across a Peering Exchange

2014-11-26 Thread Rob Seastrom
Colton Conor writes: > Some might ask why not get a cross connect to the provider. It is cheaper > to buy an port on the exchange (which includes the cross connect to the > exchange) than buy multiple cross connects. Plus we are planning on getting > a wave to the exchange, and not having any ph

Re: I am about to inherit 26 miles of dark fiber. What do I do with it?

2014-11-10 Thread Rob Seastrom
While short and to the point, what Fletcher said is likely to be the best advice in this thread. Getting someone on staff who understands *both* outside plant architecture and balance sheets... and can co-develop a business model that involves the lateral build-out from the six POPs around town

Re: Is it unusual to remove defunct rr objects?

2014-11-02 Thread Rob Seastrom
Baldur Norddahl writes: > On 1 November 2014 23:18, Rob Seastrom wrote: > >> Where on the public Internet? >> >> Do networks run by organizations such as SITA, ARINC, BT Radianz, UK >> MOD, and US DOD that use globally unique space and may interconnect >> wi

Re: Is it unusual to remove defunct rr objects?

2014-11-01 Thread Rob Seastrom
Jimmy Hess writes: > Do the internet route registries exist to track routes that are not > to appear on the public internet? I think not. What's "the public Internet"? Does it mean "the DFZ as seen at Jimmy Hess' router, with his set of upstreams"? If so, I can assure you that there are pl

Re: Why is .gov only for US government agencies?

2014-10-20 Thread Rob Seastrom
Nick Hilliard writes: > On 19/10/2014 13:05, Matthew Petach wrote: >> Would love to get any info about the history >> of the decision to make it US-only. > > incidentally, why does the .gov SOA list usadotgov.net in its SOA? The web > site for the domain looks like it's copied from drjanicepost

Re: fema.net dnssec issues

2014-10-17 Thread Rob Seastrom
Antonio Querubin writes: > Anybody have a good DNS tech contact at FEMA? I tried to report a > dnssec problem to them but apparently the contact listed in whois is > out of the office. In the meantime we have a near hurricane-strength > storm approaching. fema.net looks like it belongs to who

Re: IPV6 Multicast Listener storm control?

2014-09-23 Thread Rob Seastrom
Richard Holbo writes: > I am seeing issues with IPV6 multicast storms in my network that are fairly > low volume (1-2mbit), but that are causing service disruptions due to CPU > load on the switches and that the network is a Point to MultiPoint wireless > network. OK, well one comment in my pre

Re: IPV6 Multicast Listener storm control?

2014-09-23 Thread Rob Seastrom
Richard Holbo writes: > I have about 500 IPV4 clients on a vlan served by Cisco ME3400, Catalyst > 3750 and 3560 switches. These are switched back to a routed interface and > IP addresses are assigned by DHCP. We are not using IPV6 at all, and I > don't have control of the clients. This confi

Re: IP Geolocation Issue

2014-09-21 Thread Rob Seastrom
Good luck with that. My past experience with them (while not as bad as dealing with certain fast-n-loose RBLs) has been less than encouraging. -r Alex Wacker writes: > You can submit corrections to maxmind here: > https://www.maxmind.com/en/correction > > On Wed, Sep 17, 2014 at 6:17 PM, Jose

Re: Prefix hijacking, how to prevent and fix currently

2014-08-29 Thread Rob Seastrom
Matthew Kaufman writes: > I look forward to the ARIN fee schedule for legacy IPv4 holder RPKI > registrations. I'd assume that it would be included in your annual LRSA maintenance fees. -r

Re: [HFC] pooling modems in layer2

2014-08-12 Thread Rob Seastrom
"Toney Mareo" writes: > Hello > > I think it's kind of an isp secret but I would be curious how do > people distribute modems to pools before they would even reach the > actual IP network so on layer2: > > http://dl.packetstormsecurity.net/papers/evaluation/docsis/Service_Distribution.jpg Nobod

Re: Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions

2014-08-12 Thread Rob Seastrom
Denis Fondras writes: > May we discuss IPv6 support ? Last time I checked, UBNT was lagging > behind... I've been running an IPv6 tunnel ( FIOS) with one end being Mikrotik and the other being UBNT (ER-Lite) since January 2013. The UBNT is in a fairly simple-minded configuration so I can't spe

Re: Remooted: a deployment design for Muni Fiber (was Re: Muni Fiber and Politics)

2014-08-05 Thread Rob Seastrom
Matthew Kaufman writes: > In the meantime, I'd like to see the city where an ISP can buy as many > of the microducts as they want. I'd like to buy them all, > please... though I have no intention of running anything though them, > as I'm an investor in the local cable TV company. The fire ants

Re: Huawei Atom Router

2014-08-05 Thread Rob Seastrom
To be fair, they've fixed one of the big concerns that were raised with them a couple of years ago: google for huawei + psirt now actually returns usable results. No idea how well the interface with them works when you're actually trying to report a vulnerability (maybe someone can speak up). -r

Re: Net Neutrality...

2014-07-18 Thread Rob Seastrom
Michael Thomas writes: > On 7/17/14, 2:15 PM, valdis.kletni...@vt.edu wrote: >> /me makes popcorn and waits for 4K displays to drop under US$1K and >> watch the network providers completely lose their shit > > http://www.amazon.com/Seiki-SE39UY04-39-Inch-Ultra-120Hz/dp/B00DOPGO2G > > $339! >

Re: Listing or google map of peering exchange

2014-07-09 Thread Rob Seastrom
"Dennis Burgess" writes: > Looking for a good listing of US/Canada peering exchange, similar to > Torx in Toronto..Google map listing would be nice J "Similar to Torx in Toronto", assuming you're OK with 4 points instead of 6, would be Robertson/Scrulox. Get 'em at Canadian Tire. -r

Re: US patent 5473599

2014-05-07 Thread Rob Seastrom
Matt Palmer writes: > On Wed, May 07, 2014 at 05:57:01PM -0400, David Conrad wrote: >> However, assume that the OpenBSD developers did document their protocol >> and requested an IESG action and was refused. Do you believe that would >> justify squatting on an already assigned number? > > I'm g

Re: US patent 5473599

2014-05-07 Thread Rob Seastrom
Eygene Ryabinkin writes: > If you hadn't seen the cases when same VRIDs in the same network were > used for both VRRP and CARP doesn't mean that they aren't occurring in > the real world. We use CARP and VRRP quite extensively and when we > first were hit by this issue, it was not that funny.

Re: Getting pretty close to default IPv4 route maximum for 6500/7600 routers.

2014-05-06 Thread Rob Seastrom
I just recently got four sets off eBay. Purportedly genuine Cisco. A shade over $100. Raid the departmental beer fund. :) -r Vlade Ristevski writes: > It would probably be a good time to upgrade the memory on my 7206 > NPE-G1 as well (512MB). I was going to replace the router but am going

Re: Shared Transition Space VS. BGP Next Hop [was: Re: Best practices IPv4/IPv6 BGP (dual stack)]

2014-05-05 Thread Rob Seastrom
Randy Bush writes: >> Ah, so you're in the camp that a /10 given to one organization for >> their private use would have been better than reserving that /10 for >> _everyone_ to use. We'll have to agree to disagree there. > > you forced an rfc allocation. that makes public space, and is and wil

Re: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-08 Thread Rob Seastrom
Me writes: > Thanks for the expanded list, I had some of these already. I'm not > comfortable in letting some online code that I can't see test my site > though. If that's true, you might want to consider immediately disconnecting your systems from the Internet and never re-connecting them. Af

Re: Fwd: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-08 Thread Rob Seastrom
Randy Bush writes: > you might like (thanks smb, or was it sra) > > openssl s_client -connect google\.com:443 -tlsextdebug 2>&1| grep 'server > extension "heartbeat" (id=15)' || echo safe protip: you have to run this from a device that actually is running 1.0.x, i.e. supports the heartbeat ex

Re: Recommendation on NTP appliances/devices

2014-04-03 Thread Rob Seastrom
Chris Adams writes: > Once upon a time, Rob Seastrom said: >> Along the same lines I'm troubled by the lack of divergent sources >> these days - everything seems slaved to GPS either directly or >> indirectly (might be nice to have stuff out there that got its time

Re: Recommendation on NTP appliances/devices

2014-04-03 Thread Rob Seastrom
On a tangential note, it's all very nice to say "We have brand X and like them", but I'd be curious to hear from folks who have deployed at least four divergent brands with non-overlapping GPS chip sets and software [*] to keep a conspiracy of errors from causing the time to suddenly be massively

Re: L6-20P -> L6-30R

2014-03-20 Thread Rob Seastrom
Lamar Owen writes: > Actually, there is no NEC 384.16 any more, at least in the 2011 code. Guilty. I reflexively reached for my 2008 copy since that's the code of record here where I live. Glad we're not on 2011, wish we were still on 2005; a lot of stupidity has crept in since then. Tamper-

Re: L6-20P -> L6-30R

2014-03-19 Thread Rob Seastrom
Jay Ashworth writes: > It is exactly that: no one says you *can't* wire a 20A branch circuit with > #10. > > It is even *possible*, though unlikely, that if you did so, you wouldn't > have to derate it to 80%. I would have to reread the Code to be sure. It's not the conductor that you're dera

Re: L6-20P -> L6-30R

2014-03-19 Thread Rob Seastrom
Alex Rubenstein writes: > But my point remains. Appliance/load wire size is often, and many > times smaller than the ampacity of the circuit. > > Heck, how many times have you plugged in a 14 gauge extension cord > to a 5-20R? I do this all the time. In (all our) defense, lamp cord is the clos

Re: L6-20P -> L6-30R

2014-03-19 Thread Rob Seastrom
Alex Rubenstein writes: > Go look at any standard household lamp. It has a 5-15P on the end of > it, which could be plugged into an outlet rated for 20 amps (5-20R), > with 16 gauge lamp cord rated for 10 amps or less. Mine all seem to be NEMA 1-15P, some (most?) with 18 AWG wire. Have I been

Re: NetBSD as a TimeCapsule?

2014-03-18 Thread Rob Seastrom
Atticus writes: > Use avahi. Isn't that built into netatalk3? -r

Re: DNS Resolving issues. So for related just to Cox. But could be larger.

2014-03-10 Thread Rob Seastrom
Thanks Bill. Clearly my Google-fu was failing because of plugging in anachronistic terms when searching for a document that is only barely old enough to drive. -r bmann...@vacation.karoshi.com writes: > RFC 2182 > > > > On Mon, Mar 10, 2014 at 02:57:06PM -0400, Rob

Re: DNS Resolving issues. So for related just to Cox. But could be larger.

2014-03-10 Thread Rob Seastrom
Larry Sheldon writes: > On 3/7/2014 5:03 AM, Rob Seastrom wrote: > >> for decades. i have a vague recollection of an rfc that said >> secondary nameservers ought not be connected to the same psn (remember >> those?) but my google fu fails me this early in the morning

Re: DNS Resolving issues. So for related just to Cox. But could be larger.

2014-03-07 Thread Rob Seastrom
bmann...@vacation.karoshi.com writes: > sorry for the poor attempt at humour... > it was ancient practice to hang many names (not cnames) > off a single IP address. all perfectly legal from a DNS POV. > > rs.example.org. in a 10.10.10.53 > nick.example.com. in a 10.10.10.53 > bb

Re: DNS Resolving issues. So for related just to Cox. But could be larger.

2014-03-06 Thread Rob Seastrom
Nick Hilliard writes: >> haven't you heard about "anycast"?? > > rs probably has. The owner of 199.73.57.122, probably not. indeed. there are many pieces of evidence that this is not an anycast prefix. proof is left as an exercise to those who can perform traceroutes from multiple conti

Re: DNS Resolving issues. So for related just to Cox. But could be larger.

2014-03-05 Thread Rob Seastrom
"Paul S." writes: > For all it's worth, it might be Cox ignoring TTLs and enforcing their > own update times instead. > > Wait 24-48 hours, and it should probably fix it all up. Possibly. > I'm not seeing anything majorly broken with your system except the SOA > EXPIRE being ridiculously large

Re: [SPAM]RE: [SPAM]RE: Mikrotik Cloud Core Router and BGP real life experiences?

2014-01-02 Thread Rob Seastrom
from speccing their kit when the task calls for something that's surprisingly good considering how inexpensive it is! So maybe from a business perspective they were entirely correct to blow me off - at least where it comes to "revenue attributable to Rob Seastrom", the negative impact has been nil. -r

Re: [SPAM]RE: [SPAM]RE: Mikrotik Cloud Core Router and BGP real life experiences?

2014-01-02 Thread Rob Seastrom
Justin Wilson writes: > The biggest problem with Mikrotik is you just can¹t call them up for > support on buggy code. In a critical network this can be a major problem. I've contacted them (via email) and the experience seems to be exactly the same as dealing with first level TAC at the b

Re: turning on comcast v6

2013-12-11 Thread Rob Seastrom
Eric Oosting writes: > It brings a tear to my eye that it takes: > > 0) A long standing and well informed internet technologist; > 1) specific, and potentially high end, CPE for the res; > 2) specific and custom firmware, unsupported by CPE manufacturer ... or > anyone; > 3) hand installing seve

Re: Naive IPv6 (was AT&T UVERSE Native IPv6, a HOWTO)

2013-12-04 Thread Rob Seastrom
Brian Dickson writes: > Rob Seastrom wrote: > >> "Ricky Beam" > gmail.com<http://mailman.nanog.org/mailman/listinfo/nanog>> >> writes: >> > >> * On Fri, 29 Nov 2013 08:39:59 -0500, Rob Seastrom > <http://mailman.nanog.org/mailman/lis

Re: AT&T UVERSE Native IPv6, a HOWTO

2013-12-03 Thread Rob Seastrom
Cutler James R writes: > Does this mean we can all get back to solving real IPv6 deployment and > operations problems? I sure hope so. :) > I certainly hope you all can finally see which is the better business choice > between: > > 1. Using up to around 10% of IPv6 space to make our netwo

Re: AT&T UVERSE Native IPv6, a HOWTO

2013-12-02 Thread Rob Seastrom
"Ricky Beam" writes: > On Fri, 29 Nov 2013 08:39:59 -0500, Rob Seastrom wrote: >> So there really is no excuse on AT&T's part for the /60s on uverse 6rd... > ... > Handing out /56's like Pez is just wasting address space -- someone > *is* payi

Re: AT&T UVERSE Native IPv6, a HOWTO

2013-12-02 Thread Rob Seastrom
jean-francois.tremblay...@videotron.com writes: >> IPv4-thinking.  In the fullness of time this line of reasoning [...] > > Hopefully, the fullness of time won't apply to 6RD (this is what > was being discussed here, not dual-stack). I agree but there's a subtlety here - we don't want to get peo

Re: Europe-to-US congestion and packet loss on he.net network, and their NOC@ won't even respond

2013-12-01 Thread Rob Seastrom
Matthew Petach writes: > Using a 1/10th of a second interval is rather anti-social. > I know we rate-limit ICMP traffic down, and such a > short interval would be detected as attack traffic, > and treated as such. This should be obvious to everyone here but just in case, there's also a huge dif

Re: AT&T UVERSE Native IPv6, a HOWTO

2013-11-29 Thread Rob Seastrom
jean-francois.tremblay...@videotron.com writes: > Offering /48s out of a single /16 block, to take a simple example, > would use a whole /32. Sounds as if your organization can justify more than the /32 "minimum/default" allocation of IPv6 then (I'd imagine you have more than a minimum-assignme

  1   2   >