Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-07 Thread Bjørn Mork
"Jeffrey I. Schiller" writes: > An option I saw years ago (I forgot on whose equipment) was a default > password which was a function of the equipment's serial number. So you > had to have the algorithm and you needed the serial number which was not > related to the MAC. So if you didn't have phy

RE: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-07 Thread Nathan Eisenberg
Matthew Palmer [mpal...@hezmatt.org] > To be fair, he was just asking about factory resetting the device > because > the current password was unknown, then reconfiguring the device (I'm > willing > to be generous and assume that the reconfiguration included setting a > new, > secure password). Tha

qwest outage no notice

2010-01-07 Thread Mike
We just had a qwest outage of about 2 mins at 1:41am pst. When I called to report it I was told it was a 200+ emergency software upgrade due to a security concern, and that we will get a notice later after the fact. Normally we get notices in advance, even for software upgrades due to security

Re: qwest outage no notice

2010-01-07 Thread Steve Ryan
Any other specifics? Got a trouble ticket ID? I'm located in the NW (Talent, Oregon, just over CA border..) and we have a few customers on Qwest T1's and the like. We also have a customer who gets MPLS directly from Q. We've yet to hear of any outages for our customers - but I suppose the

Re: qwest outage no notice

2010-01-07 Thread sthaug
> We just had a qwest outage of about 2 mins at 1:41am pst. When I called > to report it I was told it was a 200+ emergency software upgrade due to > a security concern, and that we will get a notice later after the fact. > Normally we get notices in advance, even for software upgrades due to >

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-07 Thread Sean Donelan
On Thu, 7 Jan 2010, Dobbins, Roland wrote: Which goes to show that they just really don't get it when it comes to security. Maybe they should look here at all the entries for 'default credentials': Actually, should be 'default password'. Default credentials may be a more generic descriptio

RE: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-07 Thread Jason Shearer
I kind of liked the way the Symantec Vraptor (piece of junk) firewalls used to do it. Factory reset from the front panel, set addressing and it generates new passwords displayed on the LCD. Jason *** NOTICE--The attached communication contains privileged and confidential information. If you a

RE: qwest outage no notice

2010-01-07 Thread Jason Shearer
Notices were left at the discretion of Qwest account teams. There was no mass notification. Jason -Original Message- From: Mike [mailto:mike-na...@tiedyenetworks.com] Sent: Thursday, January 07, 2010 4:04 AM To: NANOG list Subject: qwest outage no notice We just had a qwest outage of a

Re: qwest outage no notice

2010-01-07 Thread Jeremy Rossi
Give the nature of the issue from juniper I am guessing that a large number of companies were doing upgrades over the last few days as fast as they could. http://j.mp/8XaReK has the details I know of now. On Jan 7, 2010, at 5:14 AM, Steve Ryan wrote: > Any other specifics? Got a trouble tick

Re: qwest outage no notice

2010-01-07 Thread Chris Adams
Once upon a time, Mike said: > We just had a qwest outage of about 2 mins at 1:41am pst. When I called > to report it I was told it was a 200+ emergency software upgrade due to > a security concern, and that we will get a notice later after the fact. > Normally we get notices in advance, even f

rj21/centronics cable mounting

2010-01-07 Thread Ingo Flaschberger
Hi, I'm searching "something", to secure mount/connect a rj21 cable to a device. I have a angled plug like this: http://commons.wikimedia.org/wiki/File:RJ21-female-connector.jpg It can only be screwed to the device at the top side, and is "loose" at the down side. I have seen a type of "kno

Re: qwest outage no notice

2010-01-07 Thread Steven Saner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Jan 7, 2010, at 4:04 AM, Mike wrote: We just had a qwest outage of about 2 mins at 1:41am pst. When I called to report it I was told it was a 200+ emergency software upgrade due to a security concern, and that we will get a notice later aft

Re: qwest outage no notice

2010-01-07 Thread JoeSox
On Thu, Jan 7, 2010 at 4:06 AM, wrote: >> We just had a qwest outage of about 2 mins at 1:41am pst. When I called >> to report it I was told it was a 200+ emergency software upgrade due to >> a security concern, and that we will get a notice later after the fact. >> Normally we get notices in adv

Re: rj21/centronics cable mounting

2010-01-07 Thread William Herrin
On Thu, Jan 7, 2010 at 10:05 AM, Ingo Flaschberger wrote: > I'm searching "something", to secure mount/connect a rj21 cable to a device. > I have a angled plug like this: > http://commons.wikimedia.org/wiki/File:RJ21-female-connector.jpg > > It can only be screwed to the device at the top side, an

RE: qwest outage no notice

2010-01-07 Thread Matlock, Kenneth L
We also got email notifications about 'emergency maintenance' on our Qwest circuits, from their notice: Reason For Maintenance: EMERGENCY MAINTENANCE TO IMPLEMENT A SOFTWARE PATCH FOR NETWORK RELIABILITY Sure sounds like it's all related to the Juniper advisory to me

Re: rj21/centronics cable mounting

2010-01-07 Thread Ingo Flaschberger
Dear William, I'm searching "something", to secure mount/connect a rj21 cable to a device. I have a angled plug like this: http://commons.wikimedia.org/wiki/File:RJ21-female-connector.jpg http://www.cisco.com/en/US/i/01-10/55001-6/55501-56000/55735.jpg http://www.patentstorm.us/p

Re: rj21/centronics cable mounting

2010-01-07 Thread Robert Boyle
At 10:05 AM 1/7/2010, you wrote: I'm searching "something", to secure mount/connect a rj21 cable to a device. I have a angled plug like this: http://commons.wikimedia.org/wiki/File:RJ21-female-connector.jpg It can only be screwed to the device at the top side, and is "loose" at the down side.

Re: rj21/centronics cable mounting

2010-01-07 Thread Joe Greco
> Dear William, > > >> I'm searching "something", to secure mount/connect a rj21 cable to a > >> device. > >> I have a angled plug like this: > >> http://commons.wikimedia.org/wiki/File:RJ21-female-connector.jpg > > > http://www.cisco.com/en/US/i/01-10/55001-6/55501-56000/55735.jpg >

Re: qwest outage no notice

2010-01-07 Thread Jack Bates
sth...@nethelp.no wrote: We received 7 Juniper Security Advisories today. My guess is that this is the reason for the Qwest outage you've seen. Yeah, they refused to notify due to security concerns from what they told me last night. Notification was performed after maintenance was complete.

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-07 Thread Steven Bellovin
On Jan 6, 2010, at 11:38 PM, Joe Hamelin wrote: > On Wed, Jan 6, 2010 at 7:19 PM, Dobbins, Roland wrote: >> Which goes to show that they just really don't get it when it comes to >> security. Maybe they should look here at all the entries for 'default >> credentials': > > Roland, this isn't

Re: qwest outage no notice

2010-01-07 Thread Mike
Yeah, they refused to notify due to security concerns from what they told me last night. Notification was performed after maintenance was complete. Ok, so the next question is, what harm would a simple advance notice of 'emergency maintenance' caused, vs the very real hassle and inconvenie

RE: qwest outage no notice

2010-01-07 Thread Richey
That should read... Yeah, they refused to notify due to [marketing] concerns from what they Richey -Original Message- From: Mike [mailto:mike-na...@tiedyenetworks.com] Sent: Thursday, January 07, 2010 12:04 PM Cc: nanog@nanog.org Subject: Re: qwest outage no notice > Yeah, they ref

he.net down/slow?

2010-01-07 Thread Brian Johnson
Has anyone noticed that accessing http://www.he.net or http://ipv6.he.net is either slow or inaccessible? Please let me know if you have a different experience currently. Thanks - Brian CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended

Re: qwest outage no notice

2010-01-07 Thread Chris De Young
Mike wrote: > We just had a qwest outage of about 2 mins at 1:41am pst. When I called > to report it I was told it was a 200+ emergency software upgrade due to > a security concern, and that we will get a notice later after the fact. Hmm - I got notice in advance. I'll have to go search for the em

Re: qwest outage no notice

2010-01-07 Thread Bret Clark
This is one reason why companies should use twitter...great for those impromptu emergency messages. Our electrical utility company uses twitter and I have to admit that it's nice to know what is going on ahead of time even if it is a short message! On Thu, 2010-01-07 at 10:31 -0700, Chris De Youn

Re: he.net down/slow?

2010-01-07 Thread Tim Burke
Can't access http://he.net from my location here in Chicago... traceroute to he.net (216.218.186.2), 30 hops max, 40 byte packets 1 10.65.44.1 (10.65.44.1) 2.504 ms 1.039 ms 0.653 ms 2 * * * 3 te-2-3-ur04.romeoville.il.chicago.comcast.net (68.86.119.205) 13.648 ms 13.693 ms 13.477

RE: he.net down/slow?

2010-01-07 Thread Paul Stewart
No issues from Toronto area on an HE connection... -Original Message- From: Tim Burke [mailto:t...@tburke.us] Sent: Thursday, January 07, 2010 12:43 PM To: nanog@nanog.org Subject: Re: he.net down/slow? Can't access http://he.net from my location here in Chicago... traceroute to he.net (

Re: rj21/centronics cable mounting

2010-01-07 Thread Bryan Fields
Ingo Flaschberger wrote: > Any ideas where to get this or any other ideas how to get a good > connection? (retro-fit). Easy way to solve this is to lace it in place with some no. 9 wax twine. I do this on most of these connectors, it's more secure then the cheesy velcro loops. http://en.wikiped

Re: he.net down/slow?

2010-01-07 Thread Brad Fleming
no issues in Kansas City (area) via Internet2 at 12:10pm Central. On Jan 7, 2010, at 11:30 AM, Brian Johnson wrote: Has anyone noticed that accessing http://www.he.net or http://ipv6.he.net is either slow or inaccessible? Please let me know if you have a different experience currently. Thanks

Re: he.net down/slow?

2010-01-07 Thread William Pitcock
On Thu, 2010-01-07 at 11:30 -0600, Brian Johnson wrote: > Has anyone noticed that accessing http://www.he.net or > http://ipv6.he.net is either slow or inaccessible? > > Please let me know if you have a different experience currently. It is up here. > CONFIDENTIALITY NOTICE: This email message,

Re: he.net down/slow?

2010-01-07 Thread Jed Smith
On Jan 7, 2010, at 12:30 PM, Brian Johnson wrote: > Has anyone noticed that accessing http://www.he.net or > http://ipv6.he.net is either slow or inaccessible? Both are up here from both locations I'm bothered to try (business Comcast, Net Access Corp MMU). JS

4.1 earthquake in SF Bay region (was Re: he.net down/slow?)

2010-01-07 Thread JC Dill
Brian Johnson wrote: Has anyone noticed that accessing http://www.he.net or http://ipv6.he.net is either slow or inaccessible? We had a 4.1 earthquake here in the SF Bay area at about 10:09 PST. http://earthquake.usgs.gov/earthquakes/recenteqsus/Quakes/nc71336726.php I believe he.net's p

Re: 4.1 earthquake in SF Bay region (was Re: he.net down/slow?)

2010-01-07 Thread Seth Mattinen
JC Dill wrote: > Brian Johnson wrote: >> Has anyone noticed that accessing http://www.he.net or >> http://ipv6.he.net is either slow or inaccessible? >> > > We had a 4.1 earthquake here in the SF Bay area at about 10:09 PST. > http://earthquake.usgs.gov/earthquakes/recenteqsus/Quakes/nc71336726

Re: 4.1 earthquake in SF Bay region (was Re: he.net down/slow?)

2010-01-07 Thread Mike Lyon
I think the he.net problems occurred before the quake... -Mike On Thu, Jan 7, 2010 at 10:56 AM, JC Dill wrote: > Brian Johnson wrote: > >> Has anyone noticed that accessing http://www.he.net or >> http://ipv6.he.net is either slow or inaccessible? >> >> > > We had a 4.1 earthquake here in the

Re: he.net down/slow?

2010-01-07 Thread Fearghas McKay
On 7 Jan 2010, at 18:18, William Pitcock wrote: ...why would you have that on a mailing list post? because the mail server that adds it is too dumb to differentiate between list and direct mail? f

RE: qwest outage no notice

2010-01-07 Thread Greg Olson
Probably related to this: http://www.theregister.co.uk/2010/01/07/juniper_critical_router_bug/ -Original Message- From: Chris De Young [mailto:c...@arizona.edu] Sent: Thursday, January 07, 2010 9:32 AM To: Mike Cc: NANOG list Subject: Re: qwest outage no notice Mike wrote: > We just ha

Re: 4.1 earthquake in SF Bay region (was Re: he.net down/slow?)

2010-01-07 Thread Matthew Kaufman
Mike Lyon wrote: I think the he.net problems occurred before the quake... -Mike They did. I was looking at what it looked like from here when the building started swaying. Matthew Kaufman

Re: 4.1 earthquake in SF Bay region (was Re: he.net down/slow?)

2010-01-07 Thread John Adams
I'm in downtown SF and felt nothing. -j On Jan 7, 2010, at 11:18 AM, Matthew Kaufman wrote: Mike Lyon wrote: I think the he.net problems occurred before the quake... -Mike They did. I was looking at what it looked like from here when the building started swaying. Matthew Kaufman --- Jo

RE: he.net down/slow?

2010-01-07 Thread Brian Johnson
> > On 7 Jan 2010, at 18:18, William Pitcock wrote: > > > ...why would you have that on a mailing list post? > > because the mail server that adds it is too dumb to differentiate > between list and direct mail? > > f Bingo! ;) - Brian CONFIDENTIALITY NOTICE: This email message, incl

Re: 4.1 earthquake in SF Bay region (was Re: he.net down/slow?)

2010-01-07 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Jan 7, 2010 at 11:32 AM, John Adams wrote: > I'm in downtown SF and felt nothing. > I live & work virtually on top of the epicenter of the quake this morning - -- it was pretty mild, but still caused some dish rattling, building swaying, etc

RE: qwest outage no notice

2010-01-07 Thread Dylan Ebner
Same thing for us in Minnesota. Brief outage and emergency outage notification came after the outage. The outage window was for 6:00-12:00GMT, and the outage came at 6:15GMT. We didn't get the notice until 10:30GMT. Qwest had a major outage over the Xmas weekend in MN. I wonder if this is rela

Re: he.net down/slow?

2010-01-07 Thread Valdis . Kletnieks
On Thu, 07 Jan 2010 13:51:41 CST, Brian Johnson said: > > On 7 Jan 2010, at 18:18, William Pitcock wrote: > > > ...why would you have that on a mailing list post? > > because the mail server that adds it is too dumb to differentiate > > between list and direct mail? > Bingo! ;) That sort of gratu

Re: qwest outage no notice

2010-01-07 Thread Scott Weeks
--- mike-na...@tiedyenetworks.com wrote: From: Mike Ok, so the next question is, what harm would a simple advance notice of 'emergency maintenance' caused, vs the very real hassle and inconvenience that DS3-down in the middle of the night caused for operations staff? I personally was yanked o

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-07 Thread Ricky Beam
On Wed, 06 Jan 2010 18:24:26 -0500, Jeffrey I. Schiller wrote: An option I saw years ago (I forgot on whose equipment) was a default password which was a function of the equipment's serial number. So you had to have the algorithm and you needed the serial number which was not related to the MAC

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-07 Thread Ricky Beam
On Wed, 06 Jan 2010 19:13:28 -0500, Nick Hale wrote: I think the vendor you're thinking of was Cabletron (now Enterasys). I had to call them and give them the Serial Number for them to provide me with the default password to the system after a hard reset (this was for an ELS100-24TXG 'switch').

Re: I don't need no stinking firewall!

2010-01-07 Thread Jay Hennigan
Nenad Andric wrote: On Tue Jan 05, 2010 at 01:04:01PM -0800, Jay Hennigan wrote: Or better: - Allow from anywhere port 80 to server port > 1023 established Adding "established" brings us back to stateful firewall! Not really. It only looks to see if the ACK or RST bits are set. Thi

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-07 Thread Joe Greco
> While we're on the subject, a lot of leibert gear has a dip switch/jumper > block to turn passwords off entirely. (of course, that requires physical > access and a power cycle.) So do a lot of HP/Compaq servers with integrated lights out management. Don't think you even need to power cycle (

Re: Experiences with Comcast Ethernet/Transit service

2010-01-07 Thread Brent Jones
On Wed, Dec 23, 2009 at 1:10 AM, Brandon Galbraith wrote: > We're looking at using Comcast's (business) transit and private ethernet > services at several client locations and I wanted to see what experiences > others have had regarding this. Off-list replies are preferred. > > Thanks, > -brandon