Dnssec and ptr records

2011-10-18 Thread Eric J Esslinger
Quick question for those who have researched things more closely. I have signed all my forward zones and think I've crossed my I's and dotted my T's, but one thing I'm not sure of... Are we supposed to setup signing for reverse dns zones? __ Eric Esslinger Information Se

Re: Dnssec and ptr records

2011-10-18 Thread Randy Bush
> Are we supposed to setup signing for reverse dns zones? yes

Re: Dnssec and ptr records

2011-10-18 Thread Phil Regnauld
Eric J Esslinger (eesslinger) writes: > Quick question for those who have researched things more closely. I have > signed all my forward zones and think I've crossed my I's and dotted my T's, > but one thing I'm not sure of... > > Are we supposed to setup signing for reverse dns zones?

RE: Dnssec and ptr records

2011-10-18 Thread Eric J Esslinger
> -Original Message- > From: Phil Regnauld [mailto:regna...@nsrc.org] > Sent: Tuesday, October 18, 2011 9:18 AM > To: Eric J Esslinger > Cc: 'nanog@nanog.org' > Subject: Re: Dnssec and ptr records > > > Eric J Esslinger (eesslinger) writes: > > Quick question for those who have researched

Re: Dnssec and ptr records

2011-10-18 Thread bmanning
On Tue, Oct 18, 2011 at 09:13:54AM -0500, Eric J Esslinger wrote: > Quick question for those who have researched things more closely. I have > signed all my forward zones and think I've crossed my I's and dotted my T's, > but one thing I'm not sure of... > > Are we supposed to setup signing for

Re: Dnssec and ptr records

2011-10-18 Thread Edward Lewis
At 9:13 -0500 10/18/11, Eric J Esslinger wrote: Are we supposed to setup signing for reverse dns zones? To the DNS, a zone is a zone. The terms "forward" and "reverse" as zone adjectives were invented by humans. ;) The high-level view of signing the "reverse zones" is the same as for "for

Re: Dnssec and ptr records

2011-10-18 Thread John Curran
On Oct 18, 2011, at 10:21 AM, Eric J Esslinger wrote: > Well it makes sense we should, just that all the examples, discussion, and > such I've read dealt with forward records. > > I guess I get to dig some more. Thanks. Eric - Your in-addr zone first needs to be signed and then the DS record

Re: Dnssec and ptr records

2011-10-18 Thread John Curran
(Presuming, of course, that you've got an ARIN assignment or allocation. If you're in a provider-assigned block, you'll need to chat with your ISP about the DS linkage for your PTR zones... /John ) On Oct 18, 2011, at 12:31 PM, John Curran wrote: > On Oct 18, 2011, at 10:21 AM, Eric J Esslinger

RE: Dnssec and ptr records

2011-10-18 Thread Eric J Esslinger
> -Original Message- > From: John Curran [mailto:jcur...@arin.net] > Sent: Tuesday, October 18, 2011 11:56 AM > To: Eric J Esslinger > Cc: nanog@nanog.org Operators' Group > Subject: Re: Dnssec and ptr records > > > (Presuming, of course, that you've got an ARIN assignment > or allocation.

Re: Microsoft Job Poaching on NANOG

2011-10-18 Thread Fearghas McKay
On 18 Oct 2011, at 22:06, Cutler James R wrote: > Since the message in question was not seen on the full list, it probably came > from the MS event attendance list. and they were quite open at the event about wanting contact details for recruitment purposes... f

Re: Microsoft Job Poaching on NANOG

2011-10-18 Thread Brett Watson
On Oct 18, 2011, at 5:03 PM, Babak Pasdar wrote: > Is Microsoft trying to poach people off the NANOG list? IMHO this is > inappropriate. There's a lot more than just MS doing it after this NANOG, and it's damned annoying. I've had it happen over the years just a few times, but it's unprecede

Re: Microsoft Job Poaching on NANOG

2011-10-18 Thread Jack Bates
On 10/18/2011 10:02 PM, Brett Watson wrote: There's a lot more than just MS doing it after this NANOG, and it's damned annoying. I've had it happen over the years just a few times, but it's unprecedented this year, as far as I'm concerned (and did I mentioned damned annoying?). -b That's why

BGP Peers as basis of available routes

2011-10-18 Thread Nathanael C. Cariaga
Hi! We're currently evaluating web hosting providers in the APAC region and one of the criteria that we are currently considering is the availability of routes going to the web hosting provider. In this regard, I would like to ask for your idea regarding this. Is it safe to conclude that t