Re: FW: Getting pretty close to default IPv4 route maximum for 6500/7600routers.

2014-06-09 Thread Andrew Jones
Even if the first numbers were correctly calculated, they don't allow for further deaggregation of already advertised prefixes, which shouldn't be underestimated as the commercial value of each address increases... On 10.06.2014 06:17, Bryan Tong wrote: I botched those numbers. Let me fix.

Re: High throughput bgp links using gentoo + stipped kernel

2013-05-19 Thread Andrew Jones
As for migration to another OS, I find FreeBSD better as a matter of network performance. The last time I checked OpenBSD was either lacking or was in the early stages of multiple cores support. If you do decide to go the FreeBSD route (you can run openbgpd on FreeBSD if you like), check out th

Re: Common operational misconceptions

2012-02-19 Thread Andrew Jones
On Mon, 20 Feb 2012 11:17:32 +0900, Masataka Ohta wrote: >draft-ohta-urlsrv-00.txt > >DNS SRV RRs of a domain implicitly specify servers and port numbers >corresponding to the domain. > >By combining URLs and SRV RRs, no port numbers have to be specified >explicitly in URLs,

Requesting off-list contact from a verizon.net mail admin

2012-07-10 Thread Andrew Jones
;s not) or the address is dynamic (it's not). Thanks, Andrew Jones Daraco Services

NFSen plugin - ddd

2012-08-02 Thread Andrew Jones
Hi All, Does anyone have a copy of the DDoS detection plugin for NFSen called ddd that they could send to me? According to a blog article [1] I read, it used to be available at [2]. It's not there, and I haven't had any luck trying to track it down the usual ways. If anyone is able to provide a cop

Re: NFSen plugin - ddd

2012-08-06 Thread Andrew Jones
Plugin > > I have not submitted a request for it but if you happen to come accross > this plugin, I would be interested. > > On Fri, Aug 03, 2012 at 01:55:21PM +1000, Andrew Jones wrote: >> Hi All, >> Does anyone have a copy of the DDoS detection plugin for NFSen calle

RE: Cisco devices mass config

2012-11-04 Thread Andrew Jones
Downloads work fine for me, looks like something's changing forward slashes to backslashes in the download URL for you... Try these links: http://sharontools.com/Products/Download/Mass%20config%20v1.8.rar http://sharontools.com/Products/Download/MassConfig%20v1.8%20-%20User%20manual.pdf -Jonesy

Re: Indonesian ISP Moratel announces Google's prefixes

2012-11-06 Thread Andrew Jones
It's widely accepted that you only advertise your peers' routes to customers, and you only advertise your own, and your customers' routes to your upstreams. On 07.11.2012 15:48, Jian Gu wrote: What do you mean hijack? Google is peering with Moratel, if Google does not want Moratel to advertise

Re: Indonesian ISP Moratel announces Google's prefixes

2012-11-06 Thread Andrew Jones
It looks like nLayer have routes learned through Moratel which have local-pref set to anywhere up to 250 (learned from private peers), while the routes learned from direct peering relationships to Google on public peering have a local-pref of 200. This explains why the routes from Moratel would

Re: Recovering from spam resulting from compromised account

2012-11-21 Thread Andrew Jones
Hi Dave, Try this page, linked from the google help page you referenced: https://support.google.com/mail/bin/answer.py?hl=en&answer=81126&rd=1 Hope that helps Andrew On 22.11.2012 13:29, Dave Sotnick wrote: Thanks Matthew. Sadly, most of the bounce responses have URLs that point you to a help p

Re: Keeping Track of Data Usage in GB Per Port

2014-10-15 Thread Andrew Jones
This all becomes even more complicated when some traffic isn't counted (Eg. "free facebook") on a given service which generally then necessitates the need for some level of flow-based accounting, even if it's just collecting flows for the free traffic to subtract from the port counters. I can s

Re: automatic / intelligent fiber optic patch panel (iow SDN @ layer 0)

2014-12-09 Thread Andrew Jones
http://www.laser2000.de/out/media/glimmerglass_system_100%281%29.pdf On 10.12.2014 10:21, Arnold Nipper wrote: I'm looking for a modular, cost-effective automatic / intelligent fibre optic patch panel. I'm not looking at these photonic x-connects, but really for something which does the patc

RE: Comcast thinks it ok to install public wifi in your house

2014-12-10 Thread Andrew Jones
It reads to me like it's not a separate Wi-Fi radio on a different channel, but just an additional SSID being broadcast: http://wifi.comcast.com/faqs.html ctrl+f "Does the new Home Hotspot impact my Internet speeds or data usage?" On 11.12.2014 14:55, Phil Bedard wrote: It won't overlap with

Re: A multi-tenant firewall for an MSSP

2015-08-17 Thread Andrew Jones
Is there a multi-tennant capable UTM from Sophos? Or are you using a vm instance per customer? Thanks, Andrew On 17.08.2015 16:47, Colin Johnston wrote: sophos utm works great :) Colin On 17 Aug 2015, at 05:56, Rakesh M wrote: I have seen one of our customers using Sophos and they are rel

Re: Network Segmentation Approaches

2015-05-06 Thread Andrew Jones
It depends on the software used and implementation. Many rulesets for pf on BSD start with 'block in on interfaceX' for instance, because it uses a "last match wins" system, unless you use the 'quick' keyword to make rule processing stop if that rule matches. Andrew On 07.05.2015 08:30, Scott

Re: WaPo writes about vulnerabilities in Supermicro IPMIs

2013-08-15 Thread Andrew Jones
On 16.08.2013 12:46, Jay Ashworth wrote: - Original Message - From: "Brandon Martin" As to why people wouldn't put them behind dedicated firewalls, imagine something like a single-server colo scenario. Most such providers don't offer any form of lights-out management aside from mayb

Re: BRAS

2013-12-10 Thread Andrew Jones
On 11.12.2013 17:11, Nick Cameo wrote: Sir whatever that is an acronym for, you have my undivided. This is going to make for an interesting thread in about 6 hours. http://en.wikipedia.org/wiki/Broadband_Remote_Access_Server

Re: Telephones for Noisy Data Centers

2009-06-17 Thread Andrew Jones
Michael J McCafferty wrote: On Wed, 2009-06-17 at 18:38 -0700, sean head wrote: Nathan Ward wrote: On 18/06/2009, at 1:31 PM, Michael J McCafferty wrote: All, I'd be OK if we were in a facility that was only average in terms of noise, but we are not. I need an exceptional p