Re: IPv6 End User Fee

2012-08-03 Thread William Pitcock
Hi! On Aug 3, 2012, at 6:32 PM, "Otis L. Surratt, Jr." wrote: > By end user I mean hosting clients (cloud, collocation, shared, dedicated, > VPS, etc.) of any sort. For example you have clients that would needsay > /24 for their dedicated server. If you charge a $1.00/IP which is typical

Re: IPv6 End User Fee

2012-08-03 Thread William Pitcock
Hi, On Aug 3, 2012, at 2:22 PM, "Otis L. Surratt, Jr." wrote: > Anyone charging end users for IPv6 space yet? :p > > Just wondering, with so many IPv6 resources in a single allocation it > would seem difficult to charge anything at all. > > 1. How are you making up loss of revenue on IPv4 assi

Re: Question about Martians on Vyatta

2012-06-28 Thread William Pitcock
Hi, On Jun 28, 2012, at 10:50 AM, Eric Germann wrote: > Well, I did when I checked them shortly after I saw the log messages. > > Wondering now if the routes for those bounced and in the "middle" of the > bounce, they're considered martian. Yes, that sounds reasonable. Anything that is retur

Re: Question about Martians on Vyatta

2012-06-28 Thread William Pitcock
On Jun 28, 2012, at 10:42 AM, Eric Germann wrote: > All, > > I'm trying to understand why a Vyatta 6.4 collection of routers is carping > about the following as martian routes: > > 113.107.174.14 > 27.73.1.159 > 94.248.215.60 > 95.26.105.161 > > They don't look like they fall in the traditio

Re: Request to lease IP space, or things that make you want to go hmmmmm..

2012-03-08 Thread William Pitcock
Hi, On 3/8/2012 5:40 PM, Matthew Huff wrote: Just got an email today to our account associated with our legacy ARIN address space. A firm "Precision Management of Texas" is interested in subleasing some of our IP space for "on-demand solutions for brand marketers and website promotion chiefly

nanog@nanog.org

2012-02-08 Thread William Pitcock
hi, On Feb 8, 2012, at 1:04 PM, Nicolai wrote: > On Tue, Feb 07, 2012 at 10:20:07PM -0500, Ryan Rawdon wrote: >> Assuming it is not a futile/wasted effort, where is the current best >> place/resource to report an active botnet C&C to? > > I don't know if there's a single best option, but there a

Re: XSServer / Taking down a spam friendly provider

2011-10-26 Thread William Pitcock
On Wed, 26 Oct 2011 20:22:53 -0400 Chris wrote: > > McColo and Atrivo were disconnected for much larger sins than > > spamming someone's wordpress blog. > > Many of you do not understand the scope of "just spamming a Wordpress > blog". I do understand the scope of shady SEO companies. > This i

Re: XSServer / Taking down a spam friendly provider

2011-10-26 Thread William Pitcock
On Wed, 26 Oct 2011 13:47:03 -0400 Chris wrote: > For folks who do not understand, I'm trying to "McColo" XSServer so > their lack of response in regards to abuse is gone rather than the > suggestions of scripting (guess you didn't read the full text of the > email) or you pushing a product on me

Re: SORBS contact

2011-07-28 Thread William Pitcock
On Thu, 28 Jul 2011 12:31:13 -0700 (PDT) "Brian R. Watters" wrote: > We are looking for a SORBS contact as their web site and registration > process is less than friendly if somehow you get listed by them. As I recall it, you can manually create an account on their request-tracker instance and

Re: NANOG List Update - Moving Forward

2011-07-12 Thread William Pitcock
On Tue, 12 Jul 2011 10:50:38 +0100 (BST) Tim Franklin wrote: > > Thankfully, the current test has been a success. > > Including stopping non-members from posting to the list, and other > anti-spam? > > I've got a sudden influx this morning of spam addressed to > nanog@nanog.org :( > Ditto. G

Re: Had an idea - looking for a math buff to tell me if it's possible with today's technology.

2011-05-18 Thread William Pitcock
On Wed, 18 May 2011 13:07:32 -0700 Landon Stewart wrote: > Lets say you had a file that was 1,000,000,000 characters consisting > of 8,000,000,000bits. What if instead of transferring that file > through the interwebs you transmitted a mathematical equation to tell > a computer on the other end

Re: 23,000 IP addresses

2011-05-10 Thread William Pitcock
On Tue, 10 May 2011 10:22:03 -0400 Christopher Morrow wrote: > On Tue, May 10, 2011 at 10:15 AM, Scott Brim > wrote: > > On Tue, May 10, 2011 at 09:42, Leigh Porter > > wrote: > >> So are they basing this on you downloading it or on making it > >> available for others? > > > > Without knowing t

Re: VPN tunnels between US and China dropping/slow

2011-05-10 Thread William Pitcock
On Tue, 10 May 2011 10:12:57 -0400 "Thomas York" wrote: > At my current place of business, we have several manufacturing plants > in China as well as the United States. All of the plants have an OVPN > tunnel to a datacenter here in Indianapolis which connect all of the > plants. Our China plants

Re: Cent OS migration

2011-05-09 Thread William Pitcock
On Mon, 9 May 2011 17:14:06 -0400 Lamar Owen wrote: > On Monday, May 09, 2011 04:45:36 PM Kevin Oberman wrote: > > Depends on what he is doing. BSDs tend to be far more mature than > > any Linux. They are poor systems for desktops or anything like > > that. They are heavily used as servers by man

Re: Contact for City of Panama City Beach, FL?

2011-04-14 Thread William Pitcock
On Thu, 14 Apr 2011 15:02:36 -0700 Dan Dill wrote: > http://www.pcbgov.com/city_directory.htm > > Seems like it wouldn't be hard to track down that information... Can you identify where on that page it lists a contact for the IT department of the Panama City government? I can't, because it doe

Re: IPv6 SEO implecations?

2011-03-28 Thread William Pitcock
On Mon, 28 Mar 2011 15:18:30 -0700 Wil Schultz wrote: > I'm attempting to find out information on the SEO implications of > testing ipv6 out. > > A couple of concerns that come to mind are: > > 1) www.domain.com and ipv6.domain.com are serving the exact same > content. Typical SEO standards are

Re: Why does abuse handling take so long ?

2011-03-13 Thread William Pitcock
On Sun, 13 Mar 2011 05:39:02 -0700 (PDT) goe...@anime.net wrote: > On Sun, 13 Mar 2011, Alexander Maassen wrote: > > Why o why are isp's and hosters so ignorant in dealing with such > > issues and act like they do not care? > > they don't act like they do not care. they really *don't* care. no >

Re: Ranges announced by Level3 without permitions.

2011-03-04 Thread William Pitcock
On Thu, 03 Mar 2011 15:34:11 +0100 Alfa Telecom wrote: > On 03/03/2011 03:25 PM, Brandon Ross wrote: > > On Thu, 3 Mar 2011, Alfa Telecom wrote: > > > >> Both ranges are from RIPE region and couldn't be announced from > >> ARIN ASN at all. > > > > Your premise is incorrect. Any block from any RI

Re: [BEWARE] David J. Moore

2011-03-04 Thread William Pitcock
On Thu, 03 Mar 2011 09:03:18 -0500 Leon Kaiser wrote: > This is the man who poisoned DroneBL. He is a bad man. Keep your > children safe. > http://raged.tittybang.org/ How, exactly, has kunwon1 poisoned DroneBL when he has had no RPC key for over a year? William

Re: What vexes VoIP users?

2011-03-01 Thread William Pitcock
Hi, On Tue, 1 Mar 2011 09:25:23 + (GMT) Tim Franklin wrote: > > I do not live over there, I have never seen a Vonage or Magic jack > > or any other VoIP service ad on TV in the UK, ever. > > Vonage *are* advertising on UK TV. Hardly the carpet-bombing the OP > suggests is the case in the

Re: Contact for APEWS.org?

2011-02-21 Thread William Pitcock
Hi, On Mon, 21 Feb 2011 12:41:57 -0800 Kate Gerry wrote: > We've been advised by a client that they're incorrectly listing > a /15. The listing is: > > (E-431420) 96.44.0.0/15 > > According to their FAQ they only take delistings via newsgroups and > Google News isn't co-operating with me in re

nlayer contact

2011-02-05 Thread William Pitcock
Hi, Could an nLayer network engineer contact me offlist regarding a service or core router at I'm guessing One Wilshire that is having serious problems? Thanks. William

Re: "Leasing" of space via non-connectivity providers

2011-02-05 Thread William Pitcock
Hi, On Sat, 5 Feb 2011 17:12:40 -0600 "Aaron Wendel" wrote: > How can someone steal something from you that you don’t own? > > Legacy space. The best example I can think of was Choopa's hijacking of Erie Forge and Steel's legacy space. In this case, it was theft as it was a legacy allocatio

Re: You Tube Problems

2011-02-03 Thread William Pitcock
On Fri, 4 Feb 2011 16:37:55 +1300 (FJST) Franck Martin wrote: > Any relation? > > http://mobile.slashdot.org/story/11/02/04/0043234/Verizon-To-Throttle-High-Bandwidth-Users No, that has to do with wireless users, not DSL. Wireless is an entirely different part of the Verizon empire. William

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 21:45:40 -0500 Jeffrey Lyon wrote: > All, > > I would like to extend a special thanks to one of the Spamhaus team > members for reaching out to me and offering dialogue on this matter. > He was quite polite and understanding of the situation and we came to > terms on wha

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 21:34:49 -0500 Jeffrey Lyon wrote: > We were offering a privacy protected domain registration service at > one point which we have since discontinued for obvious reasons. Ah yes! That *was* you guys. Did you know that you're still being recommended on 4chan /b/ for no-quest

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 20:38:54 -0500 Jeffrey Lyon wrote: > It's a problem with PCCW not accepting the tags, we've had this issue > with them occasionally and will need to address it with them directly. > The machine itself has also been shut down so there should not be any > further heartache. $ w

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 20:28:55 -0500 Jeffrey Lyon wrote: > Rhetorical question. Probably PCCW isn't accepting the null routes. > Why not blacklist them for having messed up communities? Why not actually nullroute the IPs instead of depending on BGP tagging? Again: "ip route 208.64.120.197 255.255.

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 20:23:17 -0500 Jeffrey Lyon wrote: > On Mon, Jan 17, 2011 at 8:21 PM, William Pitcock > wrote: > > Hi, > > > > On Mon, 17 Jan 2011 19:46:55 -0500 > > Jeffrey Lyon wrote: > > > >> Raymond, > >> > >> I

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 19:46:55 -0500 Jeffrey Lyon wrote: > Raymond, > > I do not take you for a fool, the assignment is legitimately null > routed. My traceroutes are dropping at my home ISP. I call bollocks. It's alive and kicking via BGP here. edge1.lax01# show ip bgp 208.64.120.197/32 B

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 19:42:22 -0500 Jeffrey Lyon wrote: > I fat fingered the netmask, try now. $ wget -S www.vertrouwdeapotheek.nl --2011-01-17 19:07:59-- http://www.vertrouwdeapotheek.nl/ Resolving www.vertrouwdeapotheek.nl... 208.64.120.197 Connecting to www.vertrouwdeapotheek.nl|208.64.120.19

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 19:21:19 -0500 Jeffrey Lyon wrote: > William, > > It depends, we have criteria. You can't just e-mail > ab...@blacklotus.net and expect any given web site to be immediately > shut down. There is due process and we need to make a decision on the > matter and serve it to o

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 19:13:16 -0500 Jeffrey Lyon wrote: > Bill, > > I'm getting 72.215.225.9 for that host. The nameservers just changed to ns2/ns4.codiz.net. ns2 is a bogon, the real deal is ns4 hosted at corbina.ru, which has an abuse@ that goes to /dev/null so whatever. Man. Hosting Y

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 19:11:37 -0500 Jeffrey Lyon wrote: > William, > > You're quite right, we don't. We presume that our customers are > honorable until proven otherwise. We're a legitimate U.S. based > corporation and we make ourselves available to the pertinent RBL's and > authorities as a

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 18:54:37 -0500 Jeffrey Lyon wrote: > William, > > Our company is primarily focused on the filtering of DDoS traffic. A > significant amount of our IP space is routed elsewhere via proxy or > GRE. If a customer pollutes, they pollute and thats their own > business. If the

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 18:35:22 -0500 Jeffrey Lyon wrote: > William, > > I'm not certain that any Black Lotus IP's are even connected to EFnet. Maybe not presently, but your company has a history in the IRC community. And it's not a history I would define as "good." A history of selling "protect

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 17:09:07 -0500 Jeffrey Lyon wrote: > That's fine, but the listings don't even make sense. There is no > evidence in the listing and i'm still trying to figure out a) why they > think that these new listings have anything to do with the ones we > already cleaned and b) whi

Re: IPv6 prefix lengths

2011-01-12 Thread William Pitcock
Hi, On Wed, 12 Jan 2011 22:49:15 -0500 Richard Barnes wrote: > Hi all, > > What IPv6 prefix lengths are people accepting in BGP from > peers/customers? My employer just got a /48 allocation from ARIN, and > we're trying to figure out how to support multiple end sites out of > this (probably ar

Why do ISPs still not do packet source verification in 2010?

2010-12-20 Thread William Pitcock
Hi, I am wondering why it seems that many ISPs still do not do packet source verification in 2010? Just last night I had to deal with a DoS attack that would have been impossible if more ISPs did packet source verification. I mean, it's 2010. We can do IP-level ACLs in hardware on most of the c

Re: Mastercard problems

2010-12-09 Thread William Pitcock
On Thu, 2010-12-09 at 18:34 +1100, Ben McGinnes wrote: > On 9/12/10 8:04 AM, Christopher Morrow wrote: > > On Wed, Dec 8, 2010 at 3:06 PM, Philip Dorr wrote: > >> The problem is that they were also slashdotted. The logs would also have a > >> large number of unrelated. > > > > pro-tip: the tool

Re: Want to move to all 208V for server racks

2010-12-02 Thread William Pitcock
Hi, On Thu, 2010-12-02 at 10:58 -0500, Jay Nakamura wrote: > I really want to move all newly installed internal and customer racks > over to all 208v power instead of 120v. As far as I can remember, I > can't remember any server/switch/router or any other equipment that > didn't run on 208v AC.

Re: Level 3 Communications Issues Statement Concerning Comcast's Actions

2010-11-29 Thread William Pitcock
On Mon, 2010-11-29 at 20:02 -0500, Bret Clark wrote: > On 11/29/2010 07:55 PM, Ren Provo wrote: > > http://blog.comcast.com/2010/11/comcast-comments-on-level-3.html > > > > On Mon, Nov 29, 2010 at 7:51 PM, Dave CROCKER wrote: > > > > > Okay's let's say L3 gives in to Comcast and pays them. L3

Re: wikileaks unreachable

2010-11-28 Thread William Pitcock
On Sun, 2010-11-28 at 17:07 -0500, Jeffrey Lyon wrote: > I wouldn't have thought that PRQ would have any significant protection in > place. They used to host thepiratebay. I would figure that site probably got a lot of ddos attacks... William

Re: wikileaks unreachable

2010-11-28 Thread William Pitcock
On Sun, 2010-11-28 at 16:43 -0500, Jeffrey Lyon wrote: > I'm surprised it took this long for the DDoS train to pull into the station. Wikileaks gets DDoSed all the time. My understanding is that PRQ nullrouted the IP because the DDoS is much larger this time. William

Re: Introducing draft-denog-v6ops-addresspartnaming

2010-11-19 Thread William Pitcock
On Fri, 2010-11-19 at 17:06 +0100, Richard Hartmann wrote: > On Fri, Nov 19, 2010 at 14:14, Scott Morris wrote: > > > If 8 bits is a byte, then 16 bits should be a mouthful. > > When does it become a meal and, more importantly, do you want to > supper (sic) size? > The supersize option offered

Re: Extra latency at ATT exchange for UVerse

2010-11-11 Thread William Pitcock
On Thu, 2010-11-11 at 15:39 -0500, Srikanth Sundaresan wrote: > Can anyone explain why ATT's UVerse adds significant delay to packets > compared to their ADSL service? U-Verse is actually the name of two entirely different services - VDSL and FTTP. This is a typical symptom of stupidity on behalf

Re: What must one do to avoid Gmail's retarded non-spam filtering?

2010-09-28 Thread William Pitcock
Hi, Have you checked the IronPort reputation scores for your mailserver IPs? Google uses this data as part of it's spam detection method. William On Tue, 2010-09-28 at 16:15 -0400, Erik L wrote: > I realize that this is somewhat OT, but I'm sure that others on the list > encounter the same issu

Re: Road Runner Abuse Contact

2010-09-02 Thread William Pitcock
On Thu, 2010-09-02 at 16:29 -0700, J.D. Falk wrote: > On Sep 2, 2010, at 1:43 PM, Brad Fleming wrote: > > > Any Road Runner abuse reps on the list? > > http://postmaster.rr.com/ is a good place to start. Quoting that website: | The Postmaster team is part of the Road Runner Mail Operations | te

Re: PacketShader

2010-08-23 Thread William Pitcock
Vyatta's commercial products (the bundles with OS+Hardware) come with adequate support in my experience. William (Sorry for topposting. The android email experience is depressingly lacking.) Andrew Kirch wrote: > On 8/23/2010 1:17 PM, Joel Jaeggli wrote: >> What it really comes down to is p

RE: Lightly used IP addresses

2010-08-13 Thread William Pitcock
On Fri, 2010-08-13 at 18:49 +, Nathan Eisenberg wrote: > > Isn't this a little bit like an SSL daemon? no. > One which refuses to process a revocation list on the basis of the > function of the certificate is useless. no, it's not. ssl as a form of identity assurance itself is what is usel

Re: net-neutrality

2010-08-11 Thread William Pitcock
On Wed, 2010-08-11 at 11:25 +, Sven Olaf Kamphuis wrote: > it is: > > c) RIAA/MPAA members trying to make ISPs liable for what customers do in > order to somehow fork the isp into kicking out the customer, as they > refuse to simply go to court against the customer but rather prefer to > ha

Re: net-neutrality

2010-08-11 Thread William Pitcock
On Wed, 2010-08-11 at 11:29 +, Sven Olaf Kamphuis wrote: > hmm funny, it had the piratebay on it, if you think that is a good sales point... do you actually have any legitimate customers? william

Re: I slogged through it so you don't have to -- ICANN Vertical Integration WG for dummies

2010-07-26 Thread William Pitcock
On Mon, 2010-07-26 at 14:42 -0400, Eric Brunner-Williams wrote: > But I do take your point about .co/.com, and in all fairness, it is a > decade delayed favor returned by NeuStar to Verisign for the .bz/.biz > "collaborative marketing" ploy of 2001. Or eNom's .cc/.com ploy from 1999-present. D

Re: 33-Bit Addressing via ONE bit or TWO bits ? does NANOG care?

2010-07-24 Thread William Pitcock
On Sat, 2010-07-24 at 15:50 -0400, Steven King wrote: > I am very curious to see how this would play with networks that > wouldn't support such a technology. How would you ensure communication > between a network that supported 33-Bit addressing and one that doesn't? 33-bit is a fucking retarded c

Re: Virbl: The First IPv6 enabled dnsbl?

2010-06-28 Thread William Pitcock
On Sun, 2010-01-17 at 19:16 +, Andy Davidson wrote: > On 16 Jan 2010, at 05:30, Tammy A. Wisdom wrote: > > > Mark Schouten wrote: > >> http://virbl.bit.nl/index.php#ipv6 > >> Comments on the listing method are appreciated. > > wow bind? thats gonna get slower and slower and slower. I hope y

Re: Micro-allocation needed?

2010-06-21 Thread William Pitcock
On Mon, 2010-06-21 at 23:42 +0200, Ask Bjørn Hansen wrote: > On Jun 21, 2010, at 23:34, William Pitcock wrote: > > > On Mon, 2010-06-21 at 23:32 +0200, Ask Bjørn Hansen wrote: > >> Hi everyone, > >> > >> We're going to anycast a /24 for some DNS s

Re: Micro-allocation needed?

2010-06-21 Thread William Pitcock
On Mon, 2010-06-21 at 23:32 +0200, Ask Bjørn Hansen wrote: > Hi everyone, > > We're going to anycast a /24 for some DNS servers (and possibly another UDP > based service)[1]. > > I see that ARIN are listing on https://www.arin.net/knowledge/ip_blocks.html > the smallest allocations from each pr

Re: Experience with the Dell PowerConnect 8024F - compare to the Cisco Nexus 5010

2010-06-18 Thread William Pitcock
Hi, On Fri, 2010-06-18 at 11:57 -0400, Steven Fischer wrote: > Does anyone have any experience with the Dell PowerConnect 8024F 10-gig > switch that they'd be willing to share? How does it perform? How reliable > is it? My experiences with the Dell switches have been less than favorable > to th

Re: Advice regarding Cisco/Juniper/HP

2010-06-17 Thread William Pitcock
On Thu, 2010-06-17 at 11:07 -0700, Seth Mattinen wrote: > On 6/17/2010 11:01, Sandone, Nick wrote: > > I would also add Brocade/Foundry to the mix as well. We've been deploying > > these switches with great results. Since the IOS is very similar to > > Cisco's, the transition has been quite eas

Re: 1slash8 pollution

2010-06-14 Thread William Pitcock
Hi, On Mon, 2010-06-14 at 11:35 -0700, Tom wrote: > In connecting to the conference network, I noticed this on the Westin > wireless: > > ath0: no link . got link > DHCPREQUEST on ath0 to 255.255.255.255 port 67 > DHCPREQUEST on ath0 to 255.255.255.255 port 67 > DHCPNAK from 1.2.1.3 > DH

Re: SCO UNIX Errors

2010-06-09 Thread William Pitcock
On Wed, 2010-06-09 at 23:40 -0700, jacob miller wrote: > Hi, > > Am getting the following error from my SCO UNIX box. They mean "use an operating system not made by crackheads." There's a reason why SCO switched from UNIX sales to Intellectual Property trolling after all. William

Re: Latency between GCI Anchorage and VZB in NY

2010-05-26 Thread William Pitcock
Hi, On Wed, 2010-05-26 at 11:27 -0400, Brad Beck wrote: > All, > > I've been working diligently to improve performance of interactive > applications (Citrix, terminal) that are run by users in our office > located in Anchorage, and are served by a managed Internet connection > provided by GCI. O

Re: any "bring your own bandwidth" IPv4 over IPv4 tunnel merchants?

2010-05-03 Thread William Pitcock
On Mon, 2010-05-03 at 14:12 -0400, Bill Bogstad wrote: > Like many people, I can't justify the expense of "commercial" IP > connectivity for my residence. As a result, I deal with dynamic IP > addresses; dns issues; and limitations on the services that I can host > at my residence. It just struck

Re: Terry Childs conviction

2010-04-29 Thread William Pitcock
On Thu, 2010-04-29 at 21:23 -0500, Larry Sheldon wrote: > On 4/29/2010 21:05, William Pitcock wrote: > > On Thu, 2010-04-29 at 21:48 -0400, David Krider wrote: > >> On Thu, 2010-04-29 at 16:47 -0500, William Pitcock wrote: > >>> Surely even at DeVry they teach t

Re: Terry Childs conviction

2010-04-29 Thread William Pitcock
On Thu, 2010-04-29 at 21:48 -0400, David Krider wrote: > On Thu, 2010-04-29 at 16:47 -0500, William Pitcock wrote: > > Surely even at DeVry they teach that if you refuse to hand over > > passwords for property that is not legally yours, that you are > > committing a crime. I

Re: Terry Childs conviction

2010-04-29 Thread William Pitcock
On Thu, 2010-04-29 at 15:11 -0500, Olsen, Jason wrote: > I'm a bit surprised that after the furor here on NANOG when the story > first broke (in 2008) that there's been no discussion about the recent > outcome of his trial (convicted, one count of felony network tampering). Surely even at DeVry th

Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?

2010-04-28 Thread William Pitcock
On Wed, 2010-04-28 at 14:54 -0700, David Conrad wrote: > On Apr 28, 2010, at 2:38 PM, Carl Rosevear wrote: > > I don't understand why anyone thinks NAT should be a fundamental part of > > the v6 internet > > Perhaps the ability to change service providers without having to renumber? DHCPv6 solv

Re: Tracking down reverse for ip

2010-04-15 Thread William Pitcock
On Thu, 2010-04-15 at 15:07 -0500, Dennis Burgess wrote: > I have a customer that has an IP of 12.43.95.126. Currently, I can not > get any reverse on this IP. > > > > What is the best way to find out the responciable servers for this? > Thanx in advance. > neno...@petrie:~$ dig -x 12.43.95

Re: Carrier class email security recommendation

2010-04-12 Thread William Pitcock
On Mon, 2010-04-12 at 07:09 -0700, todd glassey wrote: > On 4/12/2010 2:49 AM, Alex Kamiru wrote: > > I am in the process of sourcing for a carrier class email security > > solution that will replace our current edge spam gateways based on open > > source solutions. Some solutions that am currently

Re: Fwd: [c-nsp] capirca : Google Network Filtering Management

2010-04-09 Thread William Pitcock
On Fri, 2010-04-09 at 22:10 -0400, Steve Bertrand wrote: > Would someone from Google kindly confirm/deny this claim? I'm as patient > as any other, but I'm beginning to feel for those who have yet (but are > ready to) to trigger the filters... > > Thankfully, my 'reasonable' regex knowledge has me

Re: ARIN IP6 policy for those with legacy IP4 Space

2010-04-07 Thread William Pitcock
On Wed, 2010-04-07 at 15:31 -0500, Joe Greco wrote: > > On Apr 7, 2010, at 9:22 AM, William Herrin wrote: > > > > > On Wed, Apr 7, 2010 at 12:09 PM, John Palmer (NANOG Acct) > > > wrote: > > >> Was looking at the ARIN IP6 policy and cannot find any reference to those > > >> who have > > >> IP4 le

Re: NSP-SEC

2010-03-20 Thread William Pitcock
On Sat, 2010-03-20 at 22:12 +0200, Gadi Evron wrote: > On 3/20/10 8:37 PM, William Pitcock wrote: > > That is not what I mean and you know it. > > What do you mean than? Hank made a good point on the type of traffic > normally going through these groups. My point hasn't

Re: NSP-SEC

2010-03-20 Thread William Pitcock
On Sat, 2010-03-20 at 20:30 +0200, Hank Nussbacher wrote: > On Fri, 19 Mar 2010, William Pitcock wrote: > > > On Fri, 2010-03-19 at 08:31 -0500, John Kristoff wrote: > >> An ongoing area of work is to build better closed, > >> trusted communities without leaks. &g

Re: NSP-SEC

2010-03-19 Thread William Pitcock
On Fri, 2010-03-19 at 08:31 -0500, John Kristoff wrote: > An ongoing area of work is to build better closed, > trusted communities without leaks. Have you ever considered that public transparency might not be a bad thing? This seems to be the plight of many security people, that they have to be

Re: NSP-SEC

2010-03-18 Thread William Pitcock
On Thu, 2010-03-18 at 23:52 -0400, Patrick W. Gilmore wrote: > On Mar 18, 2010, at 11:46 PM, William Pitcock wrote: > > > Few people actually care about nsp-sec so what exactly are you getting at? > > I might argue the "few" comment, but I think it's better not t

Re: NSP-SEC

2010-03-18 Thread William Pitcock
Hello, Few people actually care about nsp-sec so what exactly are you getting at? "Guillaume FORTAINE" wrote: >Misses, Misters, > >I would want to inform you that the security of the Internet, that is >discussed in the NSP-SEC mailing-list [0] by a selected group of vendors >(Cisco, Juniper &

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread William Pitcock
On Tue, 2010-03-16 at 07:53 +, gordon b slater wrote: > Hmm, the "hey! it's open source!" factor doesn't hold much sway in the > network world, no-one will be amazed at that. Many observers are > surprised at the amount of free software employed by ISPs and the > like, but it's certainly no new

Re: YouTube AS36561 began announcing 1.0.0.0/8

2010-03-12 Thread William Pitcock
On Thu, 2010-03-11 at 22:52 -0800, Nathan wrote: > Hello, > > I'm hoping to alleviate the "what's going on!?" type messages here this time. > :) > Any IPs we can ping and get a response back from to verify everything is ok? 1.2.3.4 isn't pingable, for example. :( William

Re: Future timestamps in /var/log/secure

2010-02-26 Thread William Pitcock
On Fri, 2010-02-26 at 19:30 +, gordon b slater wrote: > On Fri, 2010-02-26 at 13:17 -0600, William Pitcock wrote: > > The syslog message sent to the local unix socket (/dev/log > > or /dev/syslog) may contain a timestamp, in which case, that timestamp > > may be used inst

Re: Future timestamps in /var/log/secure

2010-02-26 Thread William Pitcock
On Fri, 2010-02-26 at 11:29 -0700, Brielle Bruns wrote: > Isn't the timestamps inserted by syslog rather then the reporting > program itself? The syslog message sent to the local unix socket (/dev/log or /dev/syslog) may contain a timestamp, in which case, that timestamp may be used instead of th

Re: Chuck Norris Botnet and Broadband Routers

2010-02-22 Thread William Pitcock
On Mon, 2010-02-22 at 16:21 +0200, Gadi Evron wrote: > Last week Czech researchers released information on a new worm which > exploits CPE devices (broadband routers) by means such as default > passwords, constructing a large DDoS botnet. Today this story hit > international news. > What makes

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread William Pitcock
Hi, On Thu, 2010-02-11 at 13:05 -0500, Jack Carrozzo wrote: > Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See > the freebsd-isp list. FreeBSD's network stack chokes up in DDoS attacks due to interrupt flooding. We used to use FreeBSD for firewalling and basic routing, but whe

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread William Pitcock
On Wed, 2010-02-10 at 17:12 -0700, Blake Pfankuch wrote: > Anyone have some insight on a good dual stack Linux (or BSD) router distro? > Currently using IPCop but it lacks ipv6 support. I've used SmoothWall > Express but not in some time and not sure how well it works with IPv6. Not > looking

RE: DDoS mitigation recommendations

2010-01-27 Thread William Pitcock
Hi, On Tue, 2010-01-26 at 09:56 -0800, Gerald Wluka wrote: > > I am new to this mailing list - this should be a response to an already > started thread that I cannot see: > Welcome to NANOG! > > > IntelliguardIT has a new class of network appliance that installs inline > (layer 2 appliance)

Re: Anyone see a game changer here?

2010-01-22 Thread William Pitcock
On Fri, 2010-01-22 at 22:16 -0500, Steven Bellovin wrote: > On Jan 22, 2010, at 12:26 AM, Bruce Williams wrote: > > > The problem with IE is the same problem as Windows, the basic design > > is fundementally insecure and "timely updates" can't fix that. > > You do realize, of course, that IE is r

Re: he.net down/slow?

2010-01-07 Thread William Pitcock
On Thu, 2010-01-07 at 11:30 -0600, Brian Johnson wrote: > Has anyone noticed that accessing http://www.he.net or > http://ipv6.he.net is either slow or inaccessible? > > Please let me know if you have a different experience currently. It is up here. > CONFIDENTIALITY NOTICE: This email message,

Re: I don't need no stinking firewall!

2010-01-06 Thread William Pitcock
On Wed, 2010-01-06 at 01:47 -0600, James Hess wrote: > On Tue, Jan 5, 2010 at 11:41 PM, Dobbins, Roland wrote: > > On Jan 6, 2010, at 11:52 AM, Jonathan Lassoff wrote: > > DDoS attacks are attacks against capacity and/or state. Start reducing > > DDoS, by its very nature is a type of attack tha

Re: I don't need no stinking firewall!

2010-01-05 Thread William Pitcock
On Tue, 2010-01-05 at 16:24 -0500, Robert Brockway wrote: > On Tue, 5 Jan 2010, Dobbins, Roland wrote: > > > In the most basic terms, a stateful firewall performs bidirectional > > classification of communications between nodes, and makes a pass/fail > > determination on each packet based on a)

Re: RBN and it's spin-offs

2009-12-30 Thread William Pitcock
On Wed, 2009-12-30 at 23:25 -0500, Christopher Morrow wrote: > On Wed, Dec 30, 2009 at 11:13 PM, William Pitcock > wrote: > > > It "worked" against Indymedia UK: http://www.indymedia.org/fbi/ > > indymedia is in texas, no mlat required. It was an MLAT initiated

Re: RBN and it's spin-offs

2009-12-30 Thread William Pitcock
On Wed, 2009-12-30 at 20:12 -0800, Paul Ferguson wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Wed, Dec 30, 2009 at 8:05 PM, Keith Medcalf wrote: > > > > > Without a warrant, there is an absolute right to privacy. > > It continues to exist right up until either (a) one party ch

Re: Arrogant RBL list maintainers

2009-12-16 Thread William Pitcock
Hi, On Thu, 2009-12-10 at 16:55 +, Sven Olaf Kamphuis wrote: > thing is that it's illegal to maintain a database with "personal details" > which ip addresses according to various german courts are (don't ask.. > mmk? ;) ofcourse we all know ip addresses identify nodes on a network, not > perso

Re: IP to authoritative CIDR webservices

2009-12-14 Thread William Pitcock
Hi, On Mon, 2009-12-14 at 21:12 -0800, Paul Ferguson wrote: > On Mon, Dec 14, 2009 at 8:57 PM, William Pitcock > wrote: > > > Hi, > > > > Does anyone know of a webservice that converts a given IP into the > > public CIDR range that belongs to? I am devel

Re: IP to authoritative CIDR webservices

2009-12-14 Thread William Pitcock
Hi, On Mon, 2009-12-14 at 21:10 -0800, Mehmet Akcin wrote: > Current RIR whois actually does that. > > ie: search for 199.4.29 > it will show you 199.4.28/22 Yes, but it has to be parsed, and RIRs have varying whois formats. ARIN vs RIPE whois output, for example. William

IP to authoritative CIDR webservices

2009-12-14 Thread William Pitcock
Hi, Does anyone know of a webservice that converts a given IP into the public CIDR range that belongs to? I am developing a tool where IP to CIDR conversion based on RIR whois data would be useful for implementing filtersets. William

Re: Is there anyone from ASPEWS on this list?

2009-12-14 Thread William Pitcock
On Mon, 2009-12-14 at 11:32 +0100, Michelle Sullivan wrote: > Read the last paragraph again.. "will be submitted for delisting" .. not > "has been delisted and it will take 3-5 hours to propagate"... I have to > process all removals manually after the robot because the robot does get > it wrong,

Re: Is there anyone from ASPEWS on this list?

2009-12-12 Thread William Pitcock
Hi, On Sat, 2009-12-12 at 18:02 +0100, Michelle Sullivan wrote: > Michelle Sullivan wrote: > > Seth Mattinen wrote: > >> > >> You should still be able to submit a ticket to SORBS, no? I was > >> always under the impression that it was "open a ticket and wait or > >> you are moved to the back of

Re: Is there anyone from ASPEWS on this list?

2009-12-11 Thread William Pitcock
On Fri, 2009-12-11 at 23:39 +, John Levine wrote: > >ASPEWS is listing 216.83.32.0/20 as being associated with the whole > >Atrivo incident of 2008. My memory does not recall 216.83.32.0/20 being > >involved, nor the provider that belongs to. > > Since nobody but the occasional highly vocal G

RE: Is there anyone from ASPEWS on this list?

2009-12-11 Thread William Pitcock
On Fri, 2009-12-11 at 17:25 -0800, Alex Lanstein wrote: > William Pitcock wrote: > >>>Cernal and Atrivo are two different entities, Atrivo used to host > >>>Cernal, but now they have different hosting arrangements. > > I now understand the original point you wer

RE: Is there anyone from ASPEWS on this list?

2009-12-11 Thread William Pitcock
On Fri, 2009-12-11 at 09:55 -0800, Alex Lanstein wrote: > >>>Also, the fact that Atrivo is *dead* and this > >>>stuff is still listed means that anyone who gets > >>>those blocks from ARIN next are basically screwed > > Why would you say Atrivo is dead? > > r...@localhost --- {~} nslookup www.go

Is there anyone from ASPEWS on this list?

2009-12-11 Thread William Pitcock
Hi, ASPEWS is listing 216.83.32.0/20 as being associated with the whole Atrivo incident of 2008. My memory does not recall 216.83.32.0/20 being involved, nor the provider that belongs to. So it'd be cool if I could you know, talk to someone who has involvement with that, because frankly, I do no

  1   2   >