Re: Tightened DNS security question re: DNS amplification attacks.

2009-01-29 Thread Florian Weimer
* Mark Andrews: > The most common reason for recursive queries to a authoritative > server is someone using dig, nslookup or similar and forgeting > to disable recursion on the request. dnscache in "forward only" mode also sets the RD bit, and apparently does not restrict itself

ISP Unbundling circuits

2009-01-29 Thread itmailinglist
Hi everyone, Is it common for an ISP to install a lased line (circuit) and when the service ends, the service is not unbundled again but all the cabling is left where it is? I have even seen that a circuit is still active on there exchanges after years and no one at the ISP seems to care that

Re: ISP Unbundling circuits

2009-01-29 Thread Jay Nugent
Greetings, On Thu, 29 Jan 2009, itmailinglist wrote: > Hi everyone, > Is it common for an ISP to install a lased line (circuit) and when the > service ends, the service is not unbundled again but all the cabling is left > where it is? I have even seen that a circuit is still active on there > ex

Re: ISP Unbundling circuits

2009-01-29 Thread Colin Alston
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jay Nugent wrote: >*EVERY* ISP I have consulted for has failed to perform the simplest of > Order Entry processes, including an item-by-item checklist of what to do > when a customer disconnects. At each ISP we have found numerous circuits > st

Re: ISP Unbundling circuits

2009-01-29 Thread Etaoin Shrdlu
Colin Alston wrote: I even have a cabinet full of patch/cross-connect gear at one site. The teleco took some of the NTU kit from it when it was cancelled, said they would be back for the rest and 2 years later there it stands :) Murpheys' law says the instant I tie it to the roof of my car, the

Re: ISP Unbundling circuits

2009-01-29 Thread Michael Holstein
Is it common for an ISP to install a lased line (circuit) and when the service ends, the service is not unbundled again but all the cabling is left where it is? I have even seen that a circuit is still active on there exchanges after years and no one at the ISP seems to care that they are wasti

Re: ISP Unbundling circuits

2009-01-29 Thread Wayne E. Bouchard
On Thu, Jan 29, 2009 at 03:31:40PM +0200, Colin Alston wrote: > Circuits seems worse, but they also don't seem to track their CPE at > all. We have boxes full of various teleco CPE, including some Cisco 800 > and 1600 routers. I guess it costs more than it's worth to recover it, > but the irritatin

NetFlow Research

2009-01-29 Thread pmeaux MEAUX
I am doing some research at the University of Colorado on NetFlow and its potential to influence BGP routing policies. Are there any examples where review of NetFlow data has caused a change in a BGP routing policy? How often are these changes made and what would be the most common reasons fo

Re: ISP Unbundling circuits

2009-01-29 Thread Bruce Robertson
Sometimes it's the telco. We've issued disconnects for copper-based T1s, and seen the HDSL card still powered years later. itmailinglist wrote: Hi everyone, Is it common for an ISP to install a lased line (circuit) and when the service ends, the service is not unbundled again but all the

RE: -48VDC equipment recommendations

2009-01-29 Thread Holmes,David A
For large plants, the Sageon brand is excellent and for small scale, 48 VDC @ 30 amps the Argus brand is excellent. The Sageon units are stand-alone. The Argus units are rm @ 19" and 23". We use both. David -Original Message- From: Frank Bulk [mailto:frnk...@iname.com] Sent: Wednesday,

Re: ISP Unbundling circuits

2009-01-29 Thread Seth Mattinen
Colin Alston wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jay Nugent wrote: *EVERY* ISP I have consulted for has failed to perform the simplest of Order Entry processes, including an item-by-item checklist of what to do when a customer disconnects. At each ISP we have found numerou

Re: Tightened DNS security question re: DNS amplification attacks.

2009-01-29 Thread Phil Pennock
On 2009-01-29 at 14:01 +0100, Florian Weimer wrote: > * Mark Andrews: > > The most common reason for recursive queries to a authoritative > > server is someone using dig, nslookup or similar and forgeting > > to disable recursion on the request. Useful to know, thanks. So someone perf

Re: ISP Unbundling circuits

2009-01-29 Thread Mark Kent
On a slightly related topic, a US-based colo outfit used by a company I work with wants a fee to disconnect power to the cage. The tenant had been there for years and, at contract renewal time, was lobbied hard ($$) by the colo company to reduce power consumption. The tenant worked for a few mont

Re: ISP Unbundling circuits

2009-01-29 Thread Wayne E. Bouchard
I've never been happy with 'deinstall' fees of any sort. To me, this is just a cost of doing business. The time necessary to remove such is just accepted. It is assumed that the terms of the contract are long enough that such costs become insignificant and should not be something that gets passed a

Re: ISP Unbundling circuits

2009-01-29 Thread JC Dill
Mark Kent wrote: On a slightly related topic, a US-based colo outfit used by a company I work with wants a fee to disconnect power to the cage. The tenant had been there for years and, at contract renewal time, was lobbied hard ($$) by the colo company to reduce power consumption. Did they m

Re: ISP Unbundling circuits

2009-01-29 Thread Jeffrey Lyon
I think they should pay *you* a deinstall fee just for suggesting something like that. Jeff On Thu, Jan 29, 2009 at 3:35 PM, JC Dill wrote: > Mark Kent wrote: >> >> On a slightly related topic, a US-based colo outfit used by a company >> I work with wants a fee to disconnect power to the cage.

Paypal DNS Problems?

2009-01-29 Thread B C
As the subject says really, paypal's DNS servers don't appear to be responding for me... [r...@oracle1 oracle]# dig @a.gtld-servers.net paypal.com ; <<>> DiG 9.2.4 <<>> @a.gtld-servers.net paypal.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:

Re: Paypal DNS Problems?

2009-01-29 Thread John Martinez
B C wrote: > As the subject says really, paypal's DNS servers don't appear to be > responding for me... > > > [r...@oracle1 oracle]# dig @a.gtld-servers.net paypal.com > > ; <<>> DiG 9.2.4 <<>> @a.gtld-servers.net paypal.com > ;; global options: printcmd > ;; Got answer: > ;; ->>HEADER<<- opcod

RE: Paypal DNS Problems?

2009-01-29 Thread Bill Blackford
Looks ok here. -b -Original Message- From: John Martinez [mailto:jmarti...@zero11.com] Sent: Thursday, January 29, 2009 1:56 PM Cc: nanog@nanog.org Subject: Re: Paypal DNS Problems? B C wrote: > As the subject says really, paypal's DNS servers don't appear to be > responding for me... >

Re: Paypal DNS Problems?

2009-01-29 Thread Gary E. Miller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yo John! On Thu, 29 Jan 2009, John Martinez wrote: > > As the subject says really, paypal's DNS servers don't appear to be > > responding for me... > I'm not seeing any issues. > Is anyone else? That, and payflow.verisign.com, were down for me two.

Re: Paypal DNS Problems?

2009-01-29 Thread B C
On Thu, Jan 29, 2009 at 10:03 PM, Gary E. Miller wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Yo John! > > On Thu, 29 Jan 2009, John Martinez wrote: > >> > As the subject says really, paypal's DNS servers don't appear to be >> > responding for me... > >> I'm not seeing any issues.

Re: New ISP to market, BCP 38, and new tactics

2009-01-29 Thread Steve Bertrand
Raoul Bhatia [IPAX] wrote: > hello steve, > > Steve Bertrand wrote: >> I've done much research on RPSL, BCP 38, and other basic filter methods >> (and from a systems standpoint, I always follow an >> allow,allow,default-deny approach) , and I am willing to follow all >> standards and recommended

Shaping on a large scale

2009-01-29 Thread Bruce Grobler
Hi, Does anyone know of any Shaping appliances to shape customers based on IP, allow for a quota per IP and qos mechanisms like LLQ?, This is should be something that can sit in between two border router's and support a small ISP (2 customers), also an opensource solution would be great