Fw: new message

2015-10-26 Thread Steve Bertrand
Hey! New message, please read <http://arsios.de/given.php?6yl> Steve Bertrand

Fw: new message

2015-10-26 Thread Steve Bertrand
Hey! New message, please read <http://floridadentalanesthesia.com/steps.php?y8> Steve Bertrand

Fw: new message

2015-10-25 Thread Steve Bertrand
Hey! New message, please read <http://theartistsontheblock.com/years.php?gi4t> Steve Bertrand

RE: minimum IPv6 announcement size

2013-09-24 Thread Steve Bertrand
> -Original Message- > From: Owen DeLong [mailto:o...@delong.com] > Sent: September-24-13 12:19 > To: Randy Bush > Cc: NANOG Mailing List > Subject: Re: minimum IPv6 announcement size > > > On Sep 24, 2013, at 11:00 AM, Randy Bush wrote: > > >> I am running a network that is operating o

Bandwidth at Caesars Casino in NJ

2013-09-10 Thread Steve Bertrand
We're just about to light up an infrastructure within Caesars in Atlantic City, and I'm wondering who can provide possible multi-homed access in that area (kudos if you're already in the building). Although the need is imminent, we do not have our own ARIN IP space, nor are we looking to multi-

ScopServ questions

2013-04-15 Thread Steve Bertrand
Hi all, This isn't a NANOG problem, but I'm out of my league on this and am wondering if anyone can contact me off-list or point me in a direction if they can help me resolve an expensive exploit against a branch office asterisk box. Thanks, Steve -- Steve Bertrand AMAYA | Seni

RE: Why do some providers require IPv6 /64 PA space to have public whois?

2012-12-09 Thread Steve Bertrand
> > Ok, so I'll give you that tunneling a really short bit, tunneling > isn't too bad, but native is most of the time better. > > So sad that some companies mess up in such a way that their > customers rather tunnel than use their native infra... :-( The ISPs are unfortunately behind what the tun

Re: Commerical Backup Solutions

2012-05-20 Thread Steve Bertrand
On 2012-05-17 16:59, Mike Lyon wrote: We used Acronis and it was a nightmare as was their off-shored support model. Never again... Wouldn't touch them with a 10 foot pole. Switched to Iron Mountain LiveVault which backs everything up over the wire. It has basic reporting functions but not extrem

Re: Programmers with network engineering skills

2012-03-13 Thread Steve Bertrand
On 2012-03-13 16:33, Joe Greco wrote: Joe Greco wrote: The ideal world contains a mix of techniques. Yes and copying parts of relevant code of an MTA could be one. May actually be one of the few sane ones. You cannot just blindly leave it to the MTA to decide what's valid. Along that path

Canadian ops working under a U.S. TN visa

2012-02-16 Thread Steve Bertrand
I am in the last-moment phase of moving from Canada to the U.S. for a one-year contract. Tomorrow I will be crossing at the Peace Bridge at Niagara to apply for my TN visa. Could anyone here who may have gone through this process contact me off-list to answer a few simple questions? Thank yo

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 22:12, Mark Andrews wrote: In message<4f3c6703.4050...@gmail.com>, Steve Bertrand writes: On 2012.02.15 19:55, Nathan Eisenberg wrote: IPv6 is operational. How is this a misconception? It works fine for me... Imagine an operator who is v6 ignorant, with a home provid

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 19:19, Masataka Ohta wrote: > IPv6 is operational. This is an intriguing statement. Any ops/eng I know who have claimed this, actually know what they are talking about, so it is factual. I've never heard anyone claim this in a way that could be a misconception. I state further in t

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 19:55, Nathan Eisenberg wrote: IPv6 is operational. How is this a misconception? It works fine for me... Imagine an operator who is v6 ignorant, with a home provider who implements v6 half-assed, and tries to access a v6 site that has perhaps v6-only accessible nameservers, w

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 19:23, Steve Bertrand wrote: On 2012.02.15 15:47, John Kristoff wrote: I have a handful of common misconceptions that I'd put on a top 10 list, but I'd like to solicit from this community what it considers to be the most annoying and common operational misconcepti

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 15:47, John Kristoff wrote: I have a handful of common misconceptions that I'd put on a top 10 list, but I'd like to solicit from this community what it considers to be the most annoying and common operational misconceptions future operators often come at you with. It is ok to us

Re: UDP port 80 DDoS attack

2012-02-09 Thread Steve Bertrand
On 2012.02.08 14:23, Drew Weaver wrote: Stop paying transit providers for delivering spoofed packets to the edge of your network and they will very quickly develop methods of proving that the traffic isn't spoofed, or block it altogether. =) I firmly believe in this recourse, amongst others..

Re: Firewalls in service provider environments

2012-02-07 Thread Steve Bertrand
On 2012.02.07 20:47, Suresh Ramasubramanian wrote: On Wed, Feb 8, 2012 at 4:04 AM, George Bonser wrote: I typically also include traffic to/from: TCP/UDP port 0 169.254.0.0/16 192.0.2.0/24 198.51.100.0/24 203.0.113.0/24 Been wondering if I should also block 198.18.0.0/15 as well. suresh@fro

Re: UDP port 80 DDoS attack

2012-02-05 Thread Steve Bertrand
On 2012.02.05 22:30, Keegan Holley wrote: > 2012/2/5 Steve Bertrand On 2012.02.05 20 :37, Keegan Holley wrote: Source RTBH often falls victim to rapidly changing or spoofed source IP"s. It also isn't as widely supported as it should be. I never said

Re: UDP port 80 DDoS attack

2012-02-05 Thread Steve Bertrand
On 2012.02.05 20:37, Keegan Holley wrote: 2012/2/5 Dobbins, Roland S/RTBH - as opposed to D/RTBH - doesn't kill the patient. Again, suggest you read the preso. Source RTBH often falls victim to rapidly changing or spoofed source IP"s. It also isn't as widely supported as it should be. I ne

Re: Facebook issue

2010-12-16 Thread Steve Bertrand
On 2010.12.16 16:34, andrew.wallace wrote: > Anyone having issue with Facebook? Back up now from Toronto. Steve

Re: peering, derivatives, and big brother

2010-12-16 Thread Steve Bertrand
On 2010.12.13 16:28, Dorn Hetzel wrote: > Yeah, well, sorta. sorta not so much :) LOL. Mark-to-market... facilitating the booking of revenue to make it *appear* as though a business unit has a successful product. Steve

Re: Route reflector/server appliance for access router aggregation

2010-07-13 Thread Steve Bertrand
On 2010.07.13 10:06, Jack Carrozzo wrote: > On the subject of route reflection, I've run into a few people happy with > Quaggo or openBGPd on intel hardware. You can throw a 1U box together with > dual PSUs, a bunch of ram, and SSD/CF disks for far less than a C or J setup > and won't be wasting mo

Re: Mikrotik & OC-3 Connection

2010-07-05 Thread Steve Bertrand
On 2010.07.05 17:26, Jonathon Exley wrote: > In terms of FOSS routing platforms, I think Vyatta has a better user > interface than Mikrotik. > IMHO if the CLI is awkward then there a higher risk of misconfiguration. > I haven't used either enough to comment about stability. ...not that I'd like t

Re: Country Level BGP Data

2010-06-28 Thread Steve Bertrand
On 2010.06.28 22:06, Bill Woodcock wrote: > > On Jun 28, 2010, at 5:58 PM, Paul Stewart wrote: >> Does anyone know of BGP statistical data based on country? If I wanted >> to know "top 5 service providers in country XYZ based on number of BGP >> peers" for example, is there something that can tel

Dividing up a small IPv4 block

2010-06-21 Thread Steve Bertrand
Hi all, I've got a local v4 peer (ie. an ISP whom I lease fibre from to feed my clients, they peer with me directly, and we're about to provide mutual transit for one another). They (hereinafter 'client') have recently received a /22 from ARIN. The client's immediate need is to re-assign a /23 to

Re: Todd Underwood was a little late

2010-06-18 Thread Steve Bertrand
On 2010.06.18 08:49, Chris Adams wrote: > Once upon a time, Steve Bertrand said: >> If all IP blocks are tied down to null, and urpf is enabled in loose >> mode on an interface, it will catch cases where someone is sourcing >> traffic to you using IPs from the unassigned s

Re: Todd Underwood was a little late

2010-06-18 Thread Steve Bertrand
On 2010.06.18 09:06, William Herrin wrote: > On Fri, Jun 18, 2010 at 8:37 AM, Steve Bertrand wrote: >> If all IP blocks are tied down to null, and urpf is enabled in loose >> mode on an interface, it will catch cases where someone is sourcing >> traffic to you using IPs from

Re: Todd Underwood was a little late

2010-06-18 Thread Steve Bertrand
On 2010.06.17 17:10, William Herrin wrote: > On Thu, Jun 17, 2010 at 12:38 AM, Roy wrote: >> On 6/16/2010 7:43 PM, Jon Lewis wrote: >>> With a larger >>> network, multiple IP blocks, ***numerous multihomed customers***, some of >>> which >>> use IP's we've assigned them, it gets a little more co

Team Cymru BOGON feed over IPv6

2010-06-08 Thread Steve Bertrand
off and on list feedback welcome. I'd personally like to get an idea of how many people are: 1) using the new Team Cymru BOGON lists *via BGP* 2) use the new v4 list 3) use the v6 list 4) monitor the Cymru BGP session as diligently as they would a peer/provider session 5) attempted the BOGON peer

Re: Strange practices?

2010-06-07 Thread Steve Bertrand
On 2010.06.07 18:48, Murphy, Jay, DOH wrote: > Steve, > > We are obviously interpreting this in different slants. Agreed ;) > Definition of Transit service: for example, AS200 is said to receive transit > service from, let's say AS3356, if through this connection, AS200 receives > connectivit

Re: Strange practices?

2010-06-07 Thread Steve Bertrand
On 2010.06.07 17:59, Murphy, Jay, DOH wrote: > > > "So if the enterprise loses connectivity to one of these two providers, does > the provider without working connectivity to the enterprise have mechanism in > place to cease originating the address space?" > > > > Yes, BGP updates. ...ag

Re: Strange practices?

2010-06-07 Thread Steve Bertrand
On 2010.06.07 18:10, Murphy, Jay, DOH wrote: > Yes, the customer has an AS number, it's just from the private AS number > block, e.g. AS 65000..when the block is routed to the AS running BGP, it is > tagged with that ISP's public AS number, and announced to the world in this > manner. ...but t

Re: Strange practices?

2010-06-07 Thread Steve Bertrand
On 2010.06.07 17:49, Murphy, Jay, DOH wrote: > "Has anyone ever heard of a multi-homed enterprise not running bgp with > either of 2 providers, but instead, each provider statically routes a block > to their common customer and also each originates this block in BGP?� > > As stated before...yes

Re: useful bgp example

2010-05-17 Thread Steve Bertrand
On 2010.05.17 21:24, Jared Mauch wrote: > I have some examples here: > > http://puck.nether.net/bgp/ that may help you. Along with Jared's excellent help site, here are others that I'd *highly* recommend reading/following *anything* that these two people offer as far as BGP is concerned. I've pos

Re: useful bgp example

2010-05-17 Thread Steve Bertrand
On 2010.05.17 19:15, Deric Kwok wrote: > Hi > > My company will get 2 upstream provider. We will plan 2 routers and > each router to connect one provider to use bgp for redundant. > Do you have any useful bgp example and website to set it up? One ``website'' I have in mind, but first, *ensure* th

Re: Surcharge for providing Internet routes?

2010-05-01 Thread Steve Bertrand
On 2010.05.01 17:42, Steve Bertrand wrote: > On 2010.05.01 16:43, ML wrote: >> Has anyone here heard of or do they themselves charge extra for >> providing a complete internet table to customers? > > ... I've never heard of it, but iow, I'd pay more if I could ge

Re: Surcharge for providing Internet routes?

2010-05-01 Thread Steve Bertrand
On 2010.05.01 16:43, ML wrote: > Has anyone here heard of or do they themselves charge extra for > providing a complete internet table to customers? ... I've never heard of it, but iow, I'd pay more if I could get my upstreams to provide the full table... Is there a market? I doubt it. Steve

Re: Internap Looking Glass / Route Server

2010-05-01 Thread Steve Bertrand
On 2010.05.01 12:41, Randy Bush wrote: >> I'm looking for a public looking glass / route server connected to >> Internap - preferably in Los Angeles. Does such a thing exist? > > similar subject, so excuse my piggybacking > > i am looking for looking glass softwhere which will run against junos,

Re: Edu versus Speakeasy Speedtest

2010-04-30 Thread Steve Bertrand
On 2010.04.29 17:31, Robert Enger - NANOG wrote: > 1) The capacity that a campus has into I2 or NLR is different than the > BW the campus purchases from their commercial provider(s). > 2) The commercial BW test sites are not optimized for speed. They do > not have unlimited capacity network con

Re: [dns-operations] Desire to migrate back to BIND

2010-04-28 Thread Steve Bertrand
On 2010.04.28 05:54, Franck Martin wrote: > Webmin? Webmin has already been recommended, and I appreciate the thought. However...there's just no way that I'm going there... Steve

Re: [dns-operations] Desire to migrate back to BIND

2010-04-28 Thread Steve Bertrand
On 2010.04.28 05:34, Phil Regnauld wrote: > Had forgotten to answer the list... > > On 28/04/2010, at 07.07, Steve Bertrand wrote: > >> What I ask of the members of the community, is if you can make a >> recommendation on a piece of software that can bridge the gap so

Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?

2010-04-27 Thread Steve Bertrand
On 2010.04.28 00:04, Josh Hoppes wrote: > I'll preface this that I'm more of an end user then a network > administrator, but I do feel I have a good enough understanding of the > protocols and > network administration to submit my two cents. You are always welcome to do so. > The issue I see with

Re: [Nanog] Re: IPv6 rDNS - how will it be done?

2010-04-27 Thread Steve Bertrand
On 2010.04.27 21:00, David Conrad wrote: > On Apr 27, 2010, at 5:47 PM, Jason 'XenoPhage' Frisvold wrote: >> On Apr 27, 2010, at 8:42 PM, Mark Andrews wrote: >>> Windows will just populate the reverse zone as needed, if you let >>> it, using dynamic update. If you have properly deployed BCP 39 >>>

Re: Connectivity to an IPv6-only site

2010-04-27 Thread Steve Bertrand
On 2010.04.23 02:50, Steve Bertrand wrote: > http://onlyv6.com > All findings will be publicly posted. I'm currently evaluating my options to best automate some of the findings that I've got so far (I didn't ask for a common format for replies, so most will be manual). Ho

Re: IPAM

2010-04-26 Thread Steve Bertrand
On 2010.04.26 12:13, Jason J. W. Williams wrote: > We've been using IPplan for about 5 years pretty effectively. It could use a > UI refresh but it's decent. Does not do v6. Steve

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 02:50, Steve Bertrand wrote: > http://onlyv6.com ...email me with your v6 addr/AS whether you can/can't get to that site. I want to thank everyone thus far for all of the feedback. I've received at least four dozen off list replies, and expect many more after the

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 03:28, Mohacsi Janos wrote: > Hi, > What is your method to discover who cannot connect to your webserver? Earlier, in haste, I mistook your "What" for 'why' the first time I read your question. My method to discover is very clear cut... either you can get to the site, or you ca

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 03:35, Larry Sheldon wrote: >>From my PC at home (Cox in Omaha) I can't even get a nameserver that > knows the site. Larry... let me explain why. Although you might not understand, others will, and you may remember this as something when you do use IPv6. Believe me, nobody can reme

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 03:39, Larry Sheldon wrote: > On 4/23/2010 02:35, Larry Sheldon wrote: > >> >From my PC at home (Cox in Omaha) I can't even get a nameserver that >> knows the site. > > I should point out that I am really stupid about v6--I don't know if I > should be able to find a nameserver or no

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 03:28, Mohacsi Janos wrote: > Hi, > What is your method to discover who cannot connect to your webserver? No. It's not *who* but *why*. This is a personal research project. I'm trying to identify where breakage happens when trying to connect to an IPv6-only network. There are

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 02:50, Steve Bertrand wrote: > This is a no-brainer, because I know that everyone who reads this will > visit the link. All I request is an off-list message stating if you > could get there or not (it won't be possible to parse my weblogs for > those who can'

Fwd: [c-nsp] capirca : Google Network Filtering Management

2010-04-09 Thread Steve Bertrand
Would someone from Google kindly confirm/deny this claim? I'm as patient as any other, but I'm beginning to feel for those who have yet (but are ready to) to trigger the filters... Thankfully, my 'reasonable' regex knowledge has me ready to list a heaping pile of filth into the ether, if the comm

Re: legacy /8

2010-04-05 Thread Steve Bertrand
On 2010.04.05 09:20, Steve Bertrand wrote: > On 2010.04.02 19:29, John Palmer (NANOG Acct) wrote: >> Was looking for the "allocated" file on the ARIN website, but can't >> remember >> where it is. They used to have a file with one line per allocation that &

Re: legacy /8

2010-04-05 Thread Steve Bertrand
On 2010.04.02 19:29, John Palmer (NANOG Acct) wrote: > > - Original Message - From: "Majdi S. Abbas" > To: "John Palmer (NANOG Acct)" > Cc: "NANOG list" > Sent: Friday, April 02, 2010 5:52 PM > Subject: Re: legacy /8 > > >> On Fri, Apr 02, 2010 at 05:48:44PM -0500, John Palmer (NANOG

Re: Posting from freebie E-mail Accounts

2010-03-30 Thread Steve Bertrand
> On Wed, 31 Mar 2010, Steve Bertrand wrote: > >> On 2010.03.30 23:42, Andrew D Kirch wrote: >> >>> I am proposing that the NANOG administration drop everything >>> originating >>> from commonly used webmail providers, >> >> I oppose

Re: Posting from freebie E-mail Accounts

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:42, Andrew D Kirch wrote: > I am proposing that the NANOG administration drop everything originating > from commonly used webmail providers, I oppose this proposal. There are very legitimate (and legal) reasons why people may want to post to an operational list, using an addres

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:50, Anton Kapela wrote: > > On Mar 30, 2010, at 11:34 PM, Jorge Amodio wrote: > >> "The title, Engineer, and its derivatives should be reserved for those >> individuals whose education and experience qualify them to practice in >> a manner that protects public safety. Strict use

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:47, Jorge Amodio wrote: > that's right Steve, as I said before, what you do and how you do it, > and in particular what do you contribute to the networking community > will speak much better of yourself than any title you can imagine. > > Do you think that folks like Tim Berners-L

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:34, Jorge Amodio wrote: > Ok, let see. In several countries the use of the "title" engineer > applies to people that achieved a certain technical degree, I'm not > sure that applies uniformly but in Latin America using the engineer > title without having achieved that degree is ill

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:30, Larry Sheldon wrote: > On 3/30/2010 22:14, Steve Bertrand wrote: >> Hi all, >> >> This is perhaps a rather silly question, but one that I'd like to have >> answered. >> >> I'm young in the game, and over the years I'v

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:22, bmann...@vacation.karoshi.com wrote: > On Tue, Mar 30, 2010 at 11:14:52PM -0400, Steve Bertrand wrote: >> Hi all, >> >> This is perhaps a rather silly question, but one that I'd like to have >> answered. >> >> I'm young in th

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:20, Jorge Amodio wrote: > I'd say that probably around here for those like me that have been in > operations/engineering management positions we don't give a squat > about what title your biz card says you have, your actions and > performance speak by themselves. > > There are no

Finding content in your job title

2010-03-30 Thread Steve Bertrand
Hi all, This is perhaps a rather silly question, but one that I'd like to have answered. I'm young in the game, and over the years I've imagined numerous job titles that should go on my business card. They went from cool, to high-priority, to plain unimaginable. Now, after 10 years, I reflect ba

Re: IPv6, multihoming, and customer allocations

2010-03-16 Thread Steve Bertrand
On 2010.03.16 21:06, Steve Bertrand wrote: > On 2010.03.16 17:01, Joel Jaeggli wrote: >> >> >> On 03/16/2010 07:38 AM, Rick Ernst wrote: >>> Regurgitating the original e-mail for context and follow-up. >>> >>> General responses (some that didn'

Re: IPv6, multihoming, and customer allocations

2010-03-16 Thread Steve Bertrand
On 2010.03.16 17:01, Joel Jaeggli wrote: > > > On 03/16/2010 07:38 AM, Rick Ernst wrote: >> Regurgitating the original e-mail for context and follow-up. >> >> General responses (some that didn't make it to the list): >> - "There really is that much space, don't worry about it." >> - /48s for

Re: IP4 Space

2010-03-04 Thread Steve Bertrand
On 2010.03.04 22:26, Steve Bertrand wrote: > On 2010.03.04 16:53, William Herrin wrote: >> On Thu, Mar 4, 2010 at 4:44 PM, Stan Barber wrote: >>>> On Mar 4, 2010, at 1:30 PM, William Herrin wrote: >>>> Because we expect far fewer end users to multihome tomorr

Re: IP4 Space

2010-03-04 Thread Steve Bertrand
On 2010.03.04 16:53, William Herrin wrote: > On Thu, Mar 4, 2010 at 4:44 PM, Stan Barber wrote: >>> On Mar 4, 2010, at 1:30 PM, William Herrin wrote: >>> Because we expect far fewer end users to multihome tomorrow than do today? >> >> I would suggest that the ratio of folks that will multihome und

Re: IP4 Space

2010-03-04 Thread Steve Bertrand
On 2010.03.04 20:55, Owen DeLong wrote: > Folks, I know that IPv4 is down to bread crumbs. > > That's why I'm ready for IPv6 and hopefully the rest of you are or will be > soon. > > However, let's consider how much address space is saved by going from /30 to > /31 > on every point-to-point link

Re: Location of upstream connections & BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 20:48, jim deleskie wrote: > Absolutely. I've worked on networks where I'm was amazed on someday > we held it all together, but that is truly when you learn the most. I'm very, very happy that there are people out there who can actually see that... Steve

Re: Location of upstream connections & BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 20:45, jim deleskie wrote: > Of course all designs are limited to the budget you have to build the > network :) Heh, yeah, but it's unbelievable what one can learn on an eBay diet when they put their entire heart, soul and dedication into it! Steve

Re: Location of upstream connections & BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 20:19, Jared Mauch wrote: > On Feb 17, 2010, at 7:10 PM, Steve Bertrand wrote: > >> Hey all, >> >> I've got a couple of questions that I'd like operational feedback about. >> . >> >> Although we're an ISP, we currently are onl

Re: Location of upstream connections & BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 19:41, jim deleskie wrote: > Border/Core/Access is great thinking when your a sales rep for a > vendor that sells under power kit. No reason for it any more. Hi Jim, Unfortunately, I have a mix of EOL Cisco gear in my network, along with other random custom-built software routers,

Re: Location of upstream connections & BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 19:38, Scott Weeks wrote: > --- st...@ibctech.ca wrote: > > layered. My thinking is that my 'upstream' connections should be moved > out of the core, and onto the edge. My reasoning for this is so that I > > What do other providers do? Are your transit peers connected directly to >

Location of upstream connections & BGP templates

2010-02-17 Thread Steve Bertrand
Hey all, I've got a couple of questions that I'd like operational feedback about. . Although we're an ISP, we currently are only an access provider. We don't yet provide any transit services, but the requirement for us to do so may creep up on a very small scale shortly. Nonetheless... I'm on th

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Seth Mattinen wrote: > On 2/12/2010 15:03, Steve Bertrand wrote: >> What time frame do you determine to be instability? The following is >> from a box that has ~25 neighbours. Since the box was reloaded (6w3d >> ago), I've had the same uptime with the Team Cymru neighbour

Re: dns interceptors

2010-02-12 Thread Steve Bertrand
Jim Richardson wrote: > On Fri, Feb 12, 2010 at 2:15 PM, Randy Bush wrote: >> i just lost ten minutes debugging what i thought was a server problem >> which turned out to be a dns trapper on the wireless in the changi sats >> lounge. this is not the first time i have been caught by this. >> >> wh

Re: dns interceptors

2010-02-12 Thread Steve Bertrand
Jared Mauch wrote: > On Feb 12, 2010, at 5:15 PM, Randy Bush wrote: > >> i just lost ten minutes debugging what i thought was a server problem >> which turned out to be a dns trapper on the wireless in the changi sats >> lounge. this is not the first time i have been caught by this. >> >> what ar

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Seth Mattinen wrote: > On 2/12/2010 13:47, Tim Wilde wrote: >> On 2/12/2010 4:21 PM, Mr. James W. Laferriere wrote: >>> I've a question for the CYMRU Team , My reasoning for posting here >>> is to get a much wide knowledge base . >>> Does or Is the 'Bogon Peering' Product(?) , Only at the

Re: BIRD vs Quagga

2010-02-12 Thread Steve Bertrand
Fried, Jason (US - Hattiesburg) wrote: > I was wondering what kind of experience the nanog userbase has had with these > two packages. Quagga++. I've never tried the other. I use Quagga for OSPF, OSPFv3 and BGP (IPv4 and IPv6). With a bit of trickery, it fits in nicely with my RANCID setup, and

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Thomas Magill wrote: > In efforts to further protect us against threats I am considering > establishing Bogon peers to enable me to filter unallocated address > space. I am just wondering if this is a worthwhile step to take and if > anyone has ran into any issues or points of concern that I may w

Re: Linux Router distro's with dual stack capability

2010-02-12 Thread Steve Bertrand
Jack Carrozzo wrote: > Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See > the freebsd-isp list. Raises hand. I do, on these boxes: http://www.mikrotikrouter.net/ Steve

Re: Cymru Bogon Route Help

2010-02-01 Thread Steve Bertrand
Chris Gotstein wrote: > I'm in the process of trying to setup bgp peering with Cymru to receive > the bogon route list. I've got everything setup using the examples they > have listed, but can't get the filtering to actually work on the > incoming bgp. Using a Cisco 7200 router. Any off-list hel

Re: Using /126 for IPv6 router links

2010-01-27 Thread Steve Bertrand
Igor Gashinsky wrote: > On Wed, 27 Jan 2010, Pekka Savola wrote: > > :: On Tue, 26 Jan 2010, Igor Gashinsky wrote: > :: > Matt meant "reserve/assign a /64 for each PtP link, but only configure > the > :: > first */127* of the link", as that's the only way to fully mitigate the > :: > scanning-typ

Re: Using /126 for IPv6 router links

2010-01-26 Thread Steve Bertrand
Igor Gashinsky wrote: > On Mon, 25 Jan 2010, Matt Addison wrote: > > :: You're forgetting Matthew Petach's suggestion- reserve/assign a /64 for > :: each PtP link, but only configure the first /126 (or whatever /126 you > :: need to get an amusing peer address) on the link. > > Matt meant "reser

Re: Enhancing automation with network growth

2010-01-26 Thread Steve Bertrand
Steve Bertrand wrote: > Can anyone offer up ideas on how you manage any automation in this > regard for their infrastructure gear traffic graphs? (Commercial options > welcome, off-list, but we're as small as our budget is). By popular request, a list of the most suggested sof

Re: Enhancing automation with network growth

2010-01-25 Thread Steve Bertrand
I want to thank everyone who responded on, and off-list to this thread. I've garnered valuable information that ranges within the technical, business applicability, to 'common-sense' arenas. There is a lot of information that I have to go over now, and a few select pieces of software that I'm goi

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Steve Bertrand
Pekka Savola wrote: > On Wed, 20 Jan 2010, Stefan Fouant wrote: >> Completely agree on the disturbing observation of the increase in >> rate-limiting as a primary mitigation mechanism for dealing with >> DDoS. I've >> seen more and more people using this as a mitigation strategy, against my >> adv

Enhancing automation with network growth

2010-01-20 Thread Steve Bertrand
Hi all, I'm reaching the point where adding in a new piece of infrastructure hardware, connecting up a new cable, and/or assigning address space to a client is nearly 50% documentation and 50% technical. One thing that would take a major load off would be if my MRTG system could simply update its

Re: d000::/8 from AS28716

2010-01-11 Thread Steve Bertrand
Mark Jackson wrote: > I'd say that is a bogus route/AS announcement. > I see nothing in the address assignment for that. But I see traffic > started originating around 12/15/2009. I envision that work will be done in this regard shortly. God willing, our RIRs will be handing out prefixes to every

Re: Bonded SDSL

2010-01-05 Thread Steve Bertrand
sth...@nethelp.no wrote: >> Sorry that I'm coming into this thread late (I have just subscribed), >> but since I see people discussing DSL with beefy upstream, I thought I >> would be brave and ask: do you esteemed high-end network op folks think >> that there may be anyone in the world who might b

Re: D/DoS mitigation hardware/software needed.

2010-01-05 Thread Steve Bertrand
Adrian Chadd wrote: > On Tue, Jan 05, 2010, Dobbins, Roland wrote: > >> None of the large, well-known Web properties on the Internet today - at >> least, the ones which stay up and running, heh - have stateful firewalls in >> front of them. Including prominent vendors of said stateful firewall

Re: Bonded SDSL (was RE: ITU G.992.5 Annex M - ADSL2+M Questions)

2010-01-05 Thread Steve Bertrand
Michael Sokolov wrote: > Frank Bulk - iName.com wrote: > >> We offer it, but practically speaking we haven't gotten much higher than 1.5 >> Mbps on the upstream. > > Sorry that I'm coming into this thread late (I have just subscribed), > but since I see people discussing DSL with beefy upstream,

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-02 Thread Steve Bertrand
Wade Peacock wrote: > We had a discussion today about IPv6 today. During our open thinking the > topic of client equipment came up. > We all commented that we have not seen any consumer grade IPv6 enable > internet gateways (routers/firewalls), a kin to the ever popular Linksys > 54G series, DLinks

Re: BGP Peer Selection Considerations

2009-11-09 Thread Steve Bertrand
a...@baklawasecrets.com wrote: > Hi, > > Thanks to everyone that replied to my post on failover configuration. This > has lead me to this post. I'm at a point now where I'm looking at > dual-homing with two BGP peers upstream. Now what I am looking at doing is > as follows: > > BGP Peer wit

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Adrian Chadd wrote: > On Mon, Nov 02, 2009, Richard A Steenbergen wrote: > >> If you don't like the service you're getting, vote with your money and >> buy from someone else. This is quite simply not a NANOG issue, but in >> the interests of being helpful the best advice I can give you is this: >

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Richard A Steenbergen wrote: > On Mon, Nov 02, 2009 at 12:42:51AM -0500, Steve Bertrand wrote: >> This isn't just my DSL provider, its a business class connection >> provider who also happens to provide my (hrm.. our) primary Internet >> connection. >> >> Are

Re: Upstream BGP community support

2009-11-01 Thread Steve Bertrand
jim deleskie wrote: > Agree'd :) > > On Sat, Oct 31, 2009 at 9:34 PM, Randy Bush wrote: >>> Here is the problem as I see it. Sure some % fo the people using BGP >>> are bright nuff to use some upstreams communities, but sadly many are >>> not. So this ends up breaking one or more networks, who

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Richard A Steenbergen wrote: > On Sun, Nov 01, 2009 at 11:54:07PM -0500, Steve Bertrand wrote: >> I'm not a political person. Take it for what it is worth. >> >> I personally know people who do both: >> >> - practice but not preach >> - preach but don&#x

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Patrick W. Gilmore wrote: >> - practice good behaviour (bcp38) and don't preach it > > Did you mean preach but don't practice it? While I appreciate everyone > who "preaches" it, I am not going to complain in the slightest at any > "big guy" who practices BCP38. Just the opposite, I'm going to p

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Steve Bertrand wrote: > Seems to me that some people have issues when a thread is taken over. > capiche... > > However, it also seems to me that there are people here who are > intelligent engineers who are afraid to speak, due to the size of the > company they work for. >

  1   2   >