Re: OSP Management

2023-11-01 Thread michael brooks - ESC
We used to have an FTE for ArcGIS. We got by pretty well until we needed to document circuits down to the NIC level, and then we lost that FTE altogether. PatchManager was chosen from an RFP for its granularity and (seeming) user-friendliness. michael brooks Sr. Network Engineer Adams 12 Five S

Re: Charter DNS servers returning invalid IP addresses

2023-11-01 Thread Jason J. Gullickson via NANOG
This is very interesting. I did some poking-around and found other Squarespace customers with similar issues (in their case it was Google complaining that their sites were suspicious and therefore couldn't serve Google ads). The leading theory is that the "canned" Squarespace sites are using

Re: [EXTERNAL] DNS filtering in practice, Re: Charter DNS servers returning malware filtered IP addresses

2023-11-01 Thread Michael Thomas
On 10/28/23 3:13 AM, John Levine wrote: It appears that Michael Thomas said: If you're one of the small minority of retail users that knows enough about the technology to pick your own resolver, go ahead. But it's a reasonable default to keep malware out of Grandma's iPad. How does this lin

Re: [EXTERNAL] DNS filtering in practice, Re: Charter DNS servers returning malware filtered IP addresses

2023-11-01 Thread Delong.com via NANOG
> On Nov 1, 2023, at 13:28, Michael Thomas wrote: > > > On 10/28/23 3:13 AM, John Levine wrote: >> It appears that Michael Thomas said: If you're one of the small minority of retail users that knows enough about the technology to pick your own resolver, go ahead. But it's a r

Re: swedish dns zone enumerator

2023-11-01 Thread Amir Herzberg
Randy, thanks for sharing, I didn't know this is actually done. Any idea if they use something clever or just exhaustive search? thanks Amir -- Amir Herzberg Comcast professor of Security Innovations, Computer Science and Engineering, University of Connecticut Homepage: https://sites.google.com/s

Re: swedish dns zone enumerator

2023-11-01 Thread Mark Andrews
While I see evidence for the claim, 5 character left hand label and all non-existant. I also see QNAME minimisation in action as the QTYPE is NS. This could just be a open recursive servers using QNAME minimisation. With QNAME minimisation working correctly all parent zones should see is NS qu

Re: swedish dns zone enumerator

2023-11-01 Thread Randy Bush
ya, right, and at a whole bunch of other cctld servers from a network called domaincrawler-hosting shall we smoke another? /home/randy> sudo tcpdump -pni vtnet0 -c 500 port 53 and net 193.235.141 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on vtnet0, lin