Re: TACACS+ server recommendations?

2023-09-25 Thread Bernhard Schmidt
In gmane.org.operators.nanog, Mike Lewinski via NANOG wrote: >> https://www.shrubbery.net/tac_plus/  > > That tac_plus has python 2 dependencies and so has been removed from > Debian packages. That's not surprising given the last update was 2015 > and Python 2 was EOL in 2020: > https://www.python

Contact for BGP at nic.mil (AS721 AS27064)

2013-04-14 Thread Bernhard Schmidt
Hello, if someone from nic.mil (AS721 and/or AS27064) is present please contact me off-list. I have a persistent routing issue from your network to one of my prefixes at AS29259 that I can't get cleared, even by bouncing the prefix. whois-contact (hostmas...@nic.mil) did not answer. Thanks, Bernh

Re: Office 365 broken on ipv6

2013-04-30 Thread Bernhard Schmidt
Nick Hilliard wrote: > https://outlook.office365.com does not work on ipv6; looks like this has > been broken for some while. > > Can someone from Microsoft please fix? > >> crumpet:/Users/nick% telnet -6 outlook.office365.com 443 >> Trying 2a01:111:f400:1000::9... >> telnet: connect to address 2

Re: Could not send email to office 365

2013-05-14 Thread Bernhard Schmidt
Jason Sherron wrote: Hello Jason, > I'm an engineer on the Microsoft Office365 Exchange Online > ("outlook.office365.com") network team. I'm gathering forensics > specific to IPv6 reports -- are people still experiencing IPv6-related > issues? I am interested solely in failures that are IPv6 con

Re: incoming smtp from v6 addresses

2012-01-06 Thread Bernhard Schmidt
Randy Bush wrote: > for incoming mail that is *accepted*, i.e. not stuff like > 2012-01-04 00:37:28 REJECT because 118.39.80.118 listed in > rbl-plus.mail-abuse.org > 2012-01-04 00:37:28 H=(nexo.es) [118.39.80.118] F= > rejected RCPT : blocked because 118.39.80.118 > is in blacklist at

Re: filtering /48 is going to be necessary

2012-03-09 Thread Bernhard Schmidt
Jeff Wheeler wrote: Hello Jeff, > On Fri, Mar 9, 2012 at 3:23 AM, Mehmet Akcin wrote: >> if you know anyone who is filtering /48 , you can start telling them >> to STOP doing so as a good citizen of internet6. > > I had a bit of off-list discussion about this topic, and I was not > going to bri

Re: filtering /48 is going to be necessary

2012-03-09 Thread Bernhard Schmidt
On 09.03.2012 17:04, PC wrote: I think ARIN issues /48s for Provider independent space as the minimum allocation size, so I'm guessing we shouldn't filter below that. At least, that's what's in their current policies. Note that I explicitly wrote: | I used to be (or still am) on the same page

Re: filtering /48 is going to be necessary

2012-03-09 Thread Bernhard Schmidt
On 09.03.2012 20:31, Owen DeLong wrote: Hi, Let us not forget that there is also the issue of PA /48s being advertised (quasi-legitimately) for some end-user organizations that are multi-homed but choose not to get PI space. It is not uncommon to obtain a PA /48 from provider A and also adverti

chargen is the new DDoS tool?

2013-06-11 Thread Bernhard Schmidt
Heya everyone, we have been getting reports lately about unsecured UDP chargen servers in our network being abused for reflection attacks with spoofed sources http://en.wikipedia.org/wiki/Character_Generator_Protocol | In the UDP implementation of the protocol, the server sends a UDP | datagram

Re: chargen is the new DDoS tool?

2013-06-11 Thread Bernhard Schmidt
Brielle Bruns wrote: Hey, >> we have been getting reports lately about unsecured UDP chargen servers >> in our network being abused for reflection attacks with spoofed sources >> >> http://en.wikipedia.org/wiki/Character_Generator_Protocol >> >> | In the UDP implementation of the protocol, the s

Re: {SPAM?} Re: IPv6 Deployment for the LAN

2009-11-07 Thread Bernhard Schmidt
Adrian Chadd wrote: >> As already said, wireless in infrastructure mode (with access points) >> always sends traffic between clients through the access point, so a >> decent AP can filter this. > How does the client determine that the traffic came from the AP versus > another client? I'm not exa

Re: Google Over IPV6

2009-03-28 Thread Bernhard Schmidt
Athanasios Douitsis wrote: > Heard that they are somewhat picky about who they -enable. Our campus > has had native IPv6 everywhere and upwards all the way to Geant for many > years. We are thinking of applying in the hopes that it will boost IPv6 > usage. Did you have any trouble getting th

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-02 Thread Bernhard Schmidt
Wade Peacock wrote: > We had a discussion today about IPv6 today. During our open thinking > the topic of client equipment came up. We all commented that we have > not seen any consumer grade IPv6 enable internet gateways > (routers/firewalls), a kin to the ever popular Linksys 54G series, > DLi

Re: Mac OS X 10.7, still no DHCPv6

2011-03-03 Thread Bernhard Schmidt
Mikael Abrahamsson wrote: > On a more serious note, I can on my Ubuntu machine just "apt-get install > wide-dhcpv6-client" and I get dhcpv6, it'll properly put stuff in > resolv.conf for dns-over-ipv6 transport, even though the connection > manager knows nothing about it, at least dual stack w

Re: World of Warcraft may begin using IPv6 on Tuesday

2011-04-26 Thread Bernhard Schmidt
Kevin Day wrote: > Anyone from Activision/Blizzard who would like to chime in with more > details? :) I'm definitely not from either of those, but I've found this link: http://us.blizzard.com/support/article.xml?locale=en_US&tag=IPv6&rhtml=true --- What is IPv6? Internet Protocol version 6 (

Re: IPv6 foot-dragging

2011-05-12 Thread Bernhard Schmidt
Anthony Francis - Handy Networks LLC wrote: > I can confirm full IPV6 connectivity from HE. How can you confirm that when HE just admitted to be lacking IPv6 routes from Cogent and a couple of other players? Bernhard

Re: IPv6 foot-dragging

2011-05-12 Thread Bernhard Schmidt
Hi, > Bernhard Schmidt wrote on 05/12/2011 06:27:38 AM: > >> Anthony Francis - Handy Networks LLC wrote: >> >> > I can confirm full IPV6 connectivity from HE. >> >> How can you confirm that when HE just admitted to be lacking IPv6 routes >&