Re: DSLAM

2014-03-03 Thread Eric
I can do it. Sent from my iPhone > On Mar 3, 2014, at 12:40 PM, "Nick Olsen" wrote: > > Hey Guys, I need a 24 port ADSL (2, +, It's all the same in my book) DSLAM. > And I need it by tomorrow. > > Normal channels seem to be impacted by weather. Not to mention we've been > pretty unhappy wit

Cogent - ATT issue?

2014-04-02 Thread Eric
Anyone know if there is a connectivity issue between Cogent and ATT in the northeast? We're seeing random timeouts to some systems we have in an ATT data center but only from sources on Cogent's network. Thanks... - Eric :)

Re: IP Address Management IPAM software for small ISP

2012-12-27 Thread Eric
I ran Zenoss for a network with about 5k - 7k switches/APs, about 100 L3 devices (routers, firewalls), and about 50 servers/appliances without any polling problems. This was a few years ago on the open source product. With that said, we were reluctant to expand this to monitor the rest of our

Berlin ISP

2013-04-17 Thread Eric
Hello, I'm looking for about a 10-20mbps ISP circuit for our Berlin office. Any recommendations on who provides access there and might be able to deal with us in English? Eric

Re: Is AS information useful for security?

2011-12-15 Thread Eric
It's useful in terms of remediation as it can help identify through which "door" packets entered your network. Though, as others will undoubtedly point out, it's trustworthiness will depend upon how you derive the AS mapping and upon other security features (e.g. uRPF) -

Re: IP Management Software

2011-12-16 Thread Eric
you didn't specify "open source"' so I'll throw out IPControl by BT/INS. I used it at my last place to manage about 100k+ DNS entries (3x /16s, misc blocks, RFC1918) and our DNS/DHCP servers. Worked great but not cheap :) -- Eric :) On Dec 16, 2011, at 4:46 PM,

Re: did AS174 and AS4134 de-peer?

2012-03-08 Thread Eric
+1 - Eric On Mar 7, 2012, at 7:37 PM, Michael Sinatra wrote: > On 03/07/12 16:10, Patrick W. Gilmore wrote: >> On Mar 7, 2012, at 19:06 , Jim Cowie wrote: >> >>> As a meta-comment: this "Quick Look" style of blog is an experiment we're >>> try

Securing OOB

2012-04-23 Thread Eric
firewall? Eric :)

Android lack of DHCPv6 purchasing decisions?

2015-10-26 Thread Eric
Hi All, I have a question for people that deal with mobile devices in enterprise. Have you decided not to purchase Android devices due to the lack of DHCPv6 support and consider Apple or some other vendor devices instead? It's been thrown around here, discussed and it's absurd so I'm curious what

Re: Network diagnostics for the end user

2013-06-24 Thread Eric
+1. It's especially helpful for wireless troubleshooting in a campus environment. You can get a lot of info from the AP, but tend not to know what the client is seeing and it's great for catching transient events (oh, whenever the elevator goes by...) Eric On Jun 22, 2013, a

Re: Exchange Point

2013-08-28 Thread Eric
There's also the bug R&E data center being built in Holyoke and I'm guessing most fiber runs back to people who put stuff there will go via Springfield... Might be of interest to people who don't have/want dark fiber all the way... I also think (but might be off) that OSEAN and some other regi

Re: CenturyLink/Level 3 combined AS

2019-06-07 Thread Eric Flanery (eric)
ot; suite, not the "Qwest" suite (both on the same floor); so it seems that 209 is provision-able at former L3 facilities. Other recent entirely new CL turn-ups with us, out of rural COs belonging to Frontier, have also been with 209. --Eric

Re: ISP License in the USA?

2016-05-31 Thread Eric Flanery (eric)
ndous technical resource, it is not your attorney. There are a number of telecommunications focused law firms out there, with knowledgeable lawyers. It would be a good idea to establish a relationship with one, if you intend to enter the increasingly complex legal minefield of being an ISP. --Eric On

Re: ISP License in the USA?

2016-06-06 Thread Eric Flanery (eric)
These are the two I'm most familiar with: Lerman Senter, as Faisal mentioned: http://www.lermansenter.com/ Rini O'Neil: http://rinioneil.com/ --Eric

Re: carrier comparison

2014-02-06 Thread Eric Flanery (eric)
Vlade, When you say that "they still advertise your routes", do you mean: A: That you were having them originate your routes, and they failed to stop doing so when they had problems? Or... B: That routes you were originating continued to be propagated by them, even though your session with them

Re: MACsec SFP

2014-06-24 Thread Eric Flanery (eric)
s, to enable whatever 'special' features to be operated without requiring any particular support from the host device beyond the MSA. 1G/100M SFPs that provide PoE ('passive' 18v or 24v would be most appreciated.) No vendor lock! --Eric On Tue, Jun 24, 2014 at 10:19 A

Re: MACsec SFP

2014-06-25 Thread Eric Flanery (eric)
we need to deal with 16 different wavelengths, and three different transmit powers, giving us 48 different modules to deal with (DWDM would/will only make that worse). If we could cut that to one, or even three, it would make things much simpler, from planning to stocking and sparing. --Eric On Wed,

Re: Optical Transport Platform

2014-08-25 Thread Eric Flanery (eric)
y cheaper (that I've found). If you are looking for a 'platform', with _any_ sort of bells or whistles, they aren't what you are looking for. but, if you just want a cheap way to squeeze multiple channels onto a strand or two, they rock. --Eric On Mon, Aug 25, 2014 at 1:36 PM,

Re: Microwave link capacity

2016-04-07 Thread Eric Flanery (eric)
license upgrade costing a few hundred dollars; to a complete tear-down and re-build of the towers (to support much larger antennas, for example), costing hundreds of thousands. It can even involve adding additional sites as relays, potentially pushing the cost into the millions. --Eric On Mon

Re: ZyXEL Gear

2013-11-27 Thread Eric Flanery (eric)
I'll add that if you are comfortable with MikroTik, and can wait a few months, they have announced a device with 12 SFP slots, and one SFP+ slot. It's the CCR1016-12S-1S+, and I expect it to come in well under $1k. --Eric (not OP) On Wed, Nov 27, 2013 at 8:32 AM, Andrew D Kirch wrot

Residential GPON last mile for network engineers (Telus AS852 and others)

2020-10-13 Thread Eric Kuhnke
With the growth of gigabit class single fiber GPON last mile services, I imagine a number of people reading the list must have subscribed to such by now. Something that I have observed, and shared observations with a number of colleagues, is that very often a person who works for ($someAS) lives i

Re: Ingress filtering on transits, peers, and IX ports

2020-10-13 Thread Eric Kuhnke
Aside from the BCPs currently being discussed for ingress filtering, I would be very interested in seeing what this traffic looked like from the perspective of your DNS servers' logs. I assume you're talking about customer facing recursive/caching resolvers, and not authoritative-only nameservers.

Re: Residential GPON last mile for network engineers (Telus AS852 and others)

2020-10-13 Thread Eric Kuhnke
CPE entirely. In an ideal world, personally I would be totally fine with keeping a telco provided small ONT configured as a dumb L2 bridge, with one optical interface single strand (SC/APC) going to the ISP, and 1000BaseT to my own router. On Tue, Oct 13, 2020 at 6:51 PM Eric Dugas wrote: >

Re: Ingress filtering on transits, peers, and IX ports

2020-10-13 Thread Eric Kuhnke
ce_port), or similar... On Tue, Oct 13, 2020 at 7:50 PM Chris Adams wrote: > Once upon a time, Eric Kuhnke said: > > Considering that one can run an instance of an anycasted recursive > > nameserver, under heavy load for a very large number of clients, on a > $600 > > 1

Re: Hurricane Electric AS6939

2020-10-14 Thread Eric Kuhnke
For small ISPs looking at setting up their first ever presence at an IX point, you almost certainly would not be ordering an actual 'wave' (eg: a specific DWDM channel on a legacy 10G DWDM platform, handed off to you with 1310/LX interfaces at both ends), but lit layer 2 transport service between t

Re: Hurricane Electric AS6939

2020-10-14 Thread Eric Kuhnke
<https://twitter.com/mdwestix> >> The Brothers WISP <http://www.thebrotherswisp.com/> >> <https://www.facebook.com/thebrotherswisp> >> <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> >> -- >> *From: *"E

Re: Hurricane Electric AS6939

2020-10-14 Thread Eric Kuhnke
ter.com/ICSIL> > Midwest Internet Exchange <http://www.midwest-ix.com/> > <https://www.facebook.com/mdwestix> > <https://www.linkedin.com/company/midwest-internet-exchange> > <https://twitter.com/mdwestix> > The Brothers WISP <http://www.thebrotherswisp.com/> &

Re: Ingress filtering on transits, peers, and IX ports

2020-10-14 Thread Eric Kuhnke
I think he means packet captures from an example, voluntarily-tested recursive nameserver subject to this attack. On Wed, Oct 14, 2020 at 11:53 AM Casey Deccio wrote: > Hi Bryan, > > > On Oct 14, 2020, at 12:43 PM, Bryan Holloway wrote: > > > > I too would like to know more about their methodo

Re: Linux router network cards

2020-10-24 Thread Eric Kuhnke
In addition to Jared's advice, I would recommend calculating PCI-Express bandwidth bus points for whatever platform one is using. For instance using the Intel X710-DA4, which could be capable in a maximal scenario of 80Gbps of traffic, ensure it's in at least a PCI-E 3.0 x4 slot. And calculate the

Re: Linux router network cards

2020-10-25 Thread Eric Kuhnke
If building a lower end/low cost router this is absolutely a consideration. In single socket regular ATX form factor, and products in the price range of $165 for a motherboard and $250-400 price range for a CPU. Comparing the PCI-E lanes available on an Intel Core i7 series to something AMD zen/ze

Re: cheap MPLS router recommendations

2020-10-26 Thread Eric Kuhnke
If we're talking about whitebox router and ipifusion, what we're really talking about is vyatta/vyOS and the linux foundation DANOS stuff on an ordinary x86-64 server that has a weird shape. https://www.ipinfusion.com/commercial-version-of-danos-product-page/ https://www.danosproject.org/ In whi

dark fiber connection between 111 E 8th and Coresite NYC1 or NYC2

2020-10-30 Thread Eric Germann
Looking for a recommendation of a provider who can give us a dark fiber cross connect or an L2 connection between the two in the subject for an AWS Direct Connect out of Coresite Thanks Eric

Re: FCC Announces All Of Puerto Rico To Have Access To High-Speed Broadband Service

2020-11-02 Thread Eric Kuhnke
The press release doesn't reference at all, but Aeronet (the largest WISP in Puerto Rico, and an operator of gigabit class service in MDUs) has been testing Facebook/Terragraph 802.11ay 60 GHz based, point to multipoint last mile stuff for a while now. Very short range, high speed, high capacity.

Re: Phoenix-IX Contact

2020-11-10 Thread Eric Kuhnke
Always a good time for network operators to consider the risks of having any one person as a single point of failure for something kind of important: https://en.wikipedia.org/wiki/Bus_factor Disaster recovery and continuity of business plans should always include the concept of what if some perce

Re: Phoenix-IX Contact

2020-11-10 Thread Eric Kuhnke
I presume that the biggest telcos, cable MSOs and such in the Phoenix region already operate PNIs with each other, so the real question would be what population of ISPs and how much traffic would go across an IX if you subtract the top-six largest last mile service providers. On Tue, Nov 10, 202

OpenNMS, openstreetmap, geocoding APIs and SNMP

2020-12-10 Thread Eric Kuhnke
Anyone that has used a recent version of OpenNMS has probably noticed that the default home page view now includes an openstreetmap based view of node/device status, by geographical location. Section 18.3 here: https://docs.opennms.org/opennms/releases/latest/guide-admin/guide-admin.html https://

Re: 95th billing and automation

2020-12-10 Thread Eric Kuhnke
'cacti' isn't really a monolithic thing. Ultimately it's a gui front end for rra files and rrdtool. If one chooses not to go down the route of disk space intensive but lossless time series database interface metric storage (influxdb or similar), we are talking about what level of detail is lost ov

Are the days of the showpiece NOC office display gone forever?

2020-12-16 Thread Eric Kuhnke
With the covid19 situation, obviously lots of ISPs have their NOC personnel working from home, with VPN (or remote desktop) access to all the internal tools, VoIP at home, etc. In the traditional sense, by "showpiece NOC" I mean a room designed for the purpose of having large situational awareness

Re: Are the days of the showpiece NOC office display gone forever?

2020-12-16 Thread Eric Kuhnke
90’s 😊 > > > > P > > > > *From:* NANOG *On Behalf Of *Eric > Kuhnke > *Sent:* Wednesday, December 16, 2020 3:50 PM > *To:* nanog@nanog.org list > *Subject:* Are the days of the showpiece NOC office display gone forever? > > > > With the covid

Re: Are the days of the showpiece NOC office display gone forever?

2020-12-16 Thread Eric Kuhnke
Perhaps I should have clarified: "from the perspective of persons who have the word "Sales" in their job titles, considered to be impressive looking for customer tours" On Wed, Dec 16, 2020 at 4:25 PM Randy Bush wrote: > > In the traditional sense, by "showpiece NOC" I mean a room designed for

Re: Nashville

2020-12-29 Thread Eric Kuhnke
>From a few days ago. Obviously centralizing lots of ss7/pstn stuff all in one place has a long recovery time when it's physically damaged. Something to think about for entities that own and operate traditional telco COs and their plans for disaster recovery. Nv1 Here is the latest update: 6:46

Re: Where do your 911 fees go and why does 911 fail

2020-12-29 Thread Eric Kuhnke
The massive 911 failure in WA state a few years ago was ultimately caused by a failure in CenturyLink/legacy qwest transport equipment, where the PSAP register was physically located in Colorado and inaccessible from the point of view of network equipment in WA. On Tue, Dec 29, 2020, 1:19 PM Matt

Just a heads up, apparently Ubiquiti had a breach.

2021-01-11 Thread eric-list
Official statement: https://mailchi.mp/ubnt/account-notification?e=30527b2904 Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300

Re: Parler

2021-01-18 Thread Eric Kuhnke
Googling "Rob Monster Epik" will tell you just about everything you need to know about that organization. On Wed, Jan 13, 2021 at 3:42 PM Matt Corallo wrote: > In case anyone thought Amazon was being particularly *careful* around > their enforcement of Parler's ban...this is from > today on parl

Re: DoD IP Space

2021-01-20 Thread Eric Kuhnke
Organizations that I have seen doing as you describe, because they ran out of RFC1918 IP space, are also often using their existing private IP space wastefully in the first place. Rather than using DoD /8s internally, if they absolutely need to support v4-only equipment on their internal management

Re: DoD IP Space

2021-01-20 Thread Eric Kuhnke
Additionally, examples of impersonating a corporate entity to acquire unused IP space (Erie Forge and Steel's /16, anyone?) undoubtedly fall under existing, pre-internet interstate commerce fraud laws... http://web.mit.edu/net-security/Camp/2003/DBowie_IP_Hijacking.pdf https://www.wired.com/image

Re: Nice work Ron

2021-01-21 Thread Eric Kuhnke
> How many other Belize defuncts do they have? How many offshore countries like Belize are there in the region? Based on my cursory knowledge of offshore corporate registrations in Belize, Panama and the Cayman Islands, identifying those locations which are only mailboxes versus actual business o

Broadcom P2100G 100G PCI-E 4.0 interface and Linux

2021-02-02 Thread Eric Kuhnke
This might be a long shot, but if there is anyone out there with a system that has one of these in it, running a very recent Linux kernel: https://www.broadcom.com/products/ethernet-connectivity/network-adapters/100gb-nic-ocp/p2100g I'm looking for a copy of the output from 'dmesg' on boot and ou

Starlink terminal data acquisition for network engineers

2021-02-06 Thread Eric Kuhnke
an index of all data that can be polled cd /home/eric/starlink-grpc-tools /home/eric/go/bin/grpcurl -plaintext \ -protoset-out dish.protoset \ 192.168.100.1:9200 \ describe SpaceX.API.Device.Device /home/eric/go/bin/grpcurl \ -plaintext \ -d {\"get_history\":{}} \ 192.168.100.1:9200 \

Re: Problems with newish IP block assignment issues from ARIN

2021-02-08 Thread Eric Kuhnke
One common cause of this issue is entities out there that have very old 'bogons' filters in place for the larger block, as an entire /8, /12 to /16 size of space that, many years ago, was unallocated space. Without getting the end point organizations running the httpd, firewalls or whatever to fix

Re: DoD IP Space

2021-02-11 Thread Eric Kuhnke
You don't, you wastefully assign a /24 to every unique thing that you think needs an internal management IP block (even if there's 5 things that answer pings there), and decide it's too much work to renumber things. Easy for a big ISP that's also acquired many small/mid-sized ISPs to run out of v4

RIPE Atlas probe available on SpaceX Starlink beta terminal

2021-02-11 Thread Eric Kuhnke
https://atlas.ripe.net/probes/1001821/ I am running what I believe to be the first RIPE Atlas probe on a Starlink beta test terminal. When searching the index of public probes I did not find any other probes with "spacex" or "starlink" in the descriptions. This probe is at present not contained

Infomart Dallas is on generator

2021-02-15 Thread Eric Kuhnke
I have now heard from two reliable sources that Infomart Dallas is presently on generator, and is likely to remain so until the cold weather/electrical supply emergency in Texas has abated. No network impact seen yet.

Re: Infomart Dallas is on generator

2021-02-15 Thread Eric Kuhnke
http://www.ercot.com/ The 501c(4) nonprofit entity which controls the Texas grid. They've been publishing load shedding updates. On Mon, Feb 15, 2021, 5:07 PM Randy Bush wrote: > > From the latest update it sounds like rolling power outages in Dallas as > > most places in Texas > > > https://ww

Re: Texas internet connectivity declining due to blackouts

2021-02-15 Thread Eric Kuhnke
See also, regional maps here. Thanks to CAIDA and the IODA project. https://ioda.caida.org/ioda/dashboard On Mon, Feb 15, 2021, 5:54 PM Sean Donelan wrote: > Not as bad as Myanmar (14%), Internet connectivity in Texas has been > declining today. According to NetBlocks, which normally monitors

Re: dumb question: are any of the RIR's out of IPv4 addresses?

2021-02-16 Thread Eric Kuhnke
That depends on your definition of grey market, there is an officially approved ARIN IP block transfer process for people who are buying, via brokers, discrete /24s and larger. On Tue, Feb 16, 2021, 4:46 PM Michael Thomas wrote: > > On 2/16/21 4:18 PM, Fred Baker wrote: > > You may find this a

Re: Viable Third Option?

2021-02-17 Thread Eric Kuhnke
In the context of Montreal, to clarify, when you say Zayo are you referring to Zayo Canada (former AT&T Canada/MTS-Allstream), or AS6461, the original Abovenet AS which is Zayo USA's IP transit network? On Wed, Feb 17, 2021 at 11:17 AM Eric Dugas via NANOG wrote: > The details y

Re: Famous operational issues

2021-02-18 Thread Eric Kuhnke
On that note, I'd be very interested in hearing stories of actual incidents that are the cause of why cardboard boxes are banned in many facilities, due to loose particulate matter getting into the air and setting off very sensitive fire detection systems. Or maybe it's more mundane and 99% of the

Re: Carrier Neutral Site - Freetown, Sierra Leone?

2021-02-18 Thread Eric Kuhnke
There is really no such thing since there is just the one cable landing station. I've previously spent months working in network infrastructure and telecom in Sierra Leone, contact me off-list if you're serious about getting something done there. On Thu, Feb 18, 2021 at 9:46 AM Rod Beck wrote:

Re: Carrier Neutral Site - Freetown, Sierra Leone?

2021-02-19 Thread Eric Kuhnke
Sierra Leone is very much *not* French speaking, in the context of ISPs and telecom. There may be a significant minority of people who do speak French due to its regional proximity to other countries, for business, but the language of higher education, business, finance, telecom, real estate and s

Re: Famous operational issues

2021-02-20 Thread Eric Kuhnke
>From a datacenter ROI and economics, cooling, HVAC perspective that might just be the best colo customer ever. As long as they're paying full price for the cabinet and nothing is *dangerous* about how they've hung the 2U server vertically, using up all that space for just one thing has to be a lot

Re: Famous operational issues

2021-02-23 Thread Eric Kuhnke
I would be more interested in seeing someone who HASN'T crashed a Cisco 6500/7600, particularly one with a long uptime, by typing in a supposedly harmless 'show' command. On Tue, Feb 23, 2021 at 2:26 PM Justin Streiner wrote: > An interesting sub-thread to this could be: > > Have you ever unint

Is there an established method for reporting/getting removed a company with 100% false peeringdb entries?

2021-03-04 Thread Eric Kuhnke
First, take a look at this: https://www.peeringdb.com/asn/18894 Now look at these (or use your own BGP table analysis tools): https://bgp.he.net/AS18894 https://stat.ripe.net/18894 The claimed prefixes announced, traffic levels and POPs appear to have no correlation with reality in global v4/

Re: DPDK and energy efficiency

2021-03-04 Thread Eric Kuhnke
A great deal of this discussion could be resolved by the use of a $20 in-line 120VAC watt meter [1] plugged into something as simple as a $500 1U server with some of the DPDK-enabled network cards connected to its PCI-E bus, running DANOS. Characterizing the idle load, average usage load, and abso

Re: DPDK and energy efficiency

2021-03-05 Thread Eric Kuhnke
rposes. On Fri, Mar 5, 2021 at 8:09 AM Tom Hill wrote: > On 05/03/2021 00:26, Eric Kuhnke wrote: > > A great deal of this discussion could be resolved by the use of a $20 > > in-line 120VAC watt meter [1] plugged into something as simple as a $500 > > 1U server with some of the

Re: DPDK and energy efficiency

2021-03-05 Thread Eric Kuhnke
For comparison purposes, I'm curious about the difference in wattage results between: a) Your R640 at 420W running DPDK b) The same R640 hardware temporarily booted from a Ubuntu server live USB, in which some common CPU stress and memory disk/IO benchmarks are being run to intentionally load the

Microsoft Exchange zero day

2021-03-05 Thread Eric Kuhnke
ISPs/NSPs with customers running self hosted or on-premises Exchange may want to be aware of this. https://krebsonsecurity.com/2021/03/at-least-3-u-s-organizations-newly-hacked-via-holes-in-microsofts-email-software/ https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchan

Re: DPDK and energy efficiency

2021-03-05 Thread Eric Kuhnke
an Knight wrote: > On 2021-03-05 15:40, Eric Kuhnke wrote: > > > For comparison purposes, I'm curious about the difference in wattage > > results between: > > > > a) Your R640 at 420W running DPDK > > > > b) The same R640 hardware temporarily booted

RE: OVH datacenter SBG2 in Strasbourg on fire ????

2021-03-12 Thread eric-list
nest comparatively with what I'm used to from typical US based ILECs on outages. Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300

Re: an IP hijacking attempt

2021-03-17 Thread Eric Kuhnke
I would encourage anyone who is not familiar with the full situation to read the recent history of AFRINIC events: https://afrinic.net/ast/pdf/afrinic-whois-audit-report-full-20210121.pdf https://afrinic.net/20200826-ceo-statement-on-ip-address-misappropriation https://krebsonsecurity.com/2019/1

Re: Perhaps it's time to think about enhancements to the NANOG list...?

2021-03-18 Thread Eric Kuhnke
Perhaps the sales, marketing and 'business development' people who've never typed "enable" or "configure" into a router a single day in their lives might be better served with a dedicated list that is mission focused on bizdev, and not operational issues. On Thu, Mar 18, 2021 at 3:29 PM Matthew

Re: Perhaps it's time to think about enhancements to the NANOG list...?

2021-03-20 Thread Eric Kuhnke
In my opinion we have two very different types of 'contact me off list' things going on here. We have commercial solicitations and people looking to make contacts for buying transport circuits, capacity, etc. And then on the other hand we have 'contact me off list' asks related to network operati

Re: Perhaps it's time to think about enhancements to the NANOG list...?

2021-03-20 Thread Eric Kuhnke
It's one thing to use a GUI tool when it's convenient and quick. I think anyone that's ever experienced setting up a Unifi controller would probably prefer provisioning a new 802.11ac AP from the GUI rather than doing it manually at a command line. But it's another thing to consider that we have a

Re: OT: Re: Younger generations preferring social media(esque) interactions.

2021-03-23 Thread Eric Kuhnke
For persons considering mattermost, I would recommend instead looking into a self hosted Matrix + Synapse (matrix protocol server daemon) setup, which is fully open source. https://en.wikipedia.org/wiki/Matrix_(protocol) Element is one typical GUI client for it, but there are many options. https:

Re: IP reputation lookup (prefix not single IP)

2021-03-25 Thread Eric Kuhnke
I think you will find that most SMTP / anti-spam focused RBL tools give a very similar result for IP reputation on a per /24 block basis, for any randomly chosen IP in the block, particularly where the /24 in question has previously been used and announced by a dedicated server/VPS/virtual server h

Re: IP reputation lookup (prefix not single IP)

2021-03-25 Thread Eric Kuhnke
Nothing more than anecdotal evidence, when I last looked into the externally available network details on a number of low-budget VPS hosting companies... I would say that if anything, a person who really knows what they're doing operating a properly MX, will face more difficulties today than they

Re: 10 years from now... (was: internet futures)

2021-03-28 Thread Eric Kuhnke
I would also concur that the likelihood of Starlink (or a Oneweb, or Kuiper) terminal being used successfully to bypass the GFW or similar serious Internet censorship, in an authoritarian environment, is probably low. This is because: a) It has to transmit in known bands. b) It has to be located

Re: 10 years from now... (was: internet futures)

2021-03-28 Thread Eric Kuhnke
e road of life is paved > with flat squirrels who could not make a decision. > > >-Original Message- > >From: NANOG On Behalf Of > >Eric Kuhnke > >Sent: Sunday, 28 March, 2021 18:24 > >To: na...@jima.us > >Cc: nanog@nanog.org > >Subject: Re: 10

Re: 10 years from now... (was: internet futures)

2021-03-28 Thread Eric Kuhnke
scope compact cassegrain dish up there. Pretty typical thing already for embassies, the big difference would be that that they'll have more market options for high-throughput service. On Sun, Mar 28, 2021 at 10:18 PM Mark Tinka wrote: > > > On 3/29/21 02:23, Eric Kuhnke wrote: > >

Re: 10 years from now...

2021-03-28 Thread Eric Kuhnke
start > > jamming uplink > > frequencies, which will affect the service in whole region. > > And in the worst case, it will give reason to use anti-satellite weapons. > > > > > > On 2021-03-29 03:23, Eric Kuhnke wrote: > >> I would also concur that

Re: 10 years from now... (was: internet futures)

2021-03-29 Thread Eric Kuhnke
I am doing this right now. A starlink CPE is a fairly ordinary DIA link that exists in cgnat space from the perspective of whatever router you plug into it. The starlink indoor 'router' is optional. Whatever you plug into the high power PoE injector will be given a DHCP lease and a default route o

Re: My First BGP-Hijacking Explanation

2021-04-08 Thread Eric Kuhnke
If one follows the social media accounts of the Pakistan version of the FCC, nowadays they're just banning anything they find insulting or illegal in the local legal system, and ordering ISPs to null route big chunks of IP space. As an anecdotal data point, the only effect this has had is teaching

Re: OOB management options @ 60 Hudson & 1 Summer

2021-04-15 Thread Eric Kuhnke
Before getting rid of the cellular based OOB, look into some more detail about exactly what LTE modems are in those. I've seen some remarkable results from equipment using the 600/700 bands (tmobile, verizon) for getting signal into deeply buried concrete structures. There's a lot of different type

Malicious SS7 activity and why SMS should never by used for 2FA

2021-04-17 Thread Eric Kuhnke
https://lucky225.medium.com/its-time-to-stop-using-sms-for-anything-203c41361c80 https://krebsonsecurity.com/2021/03/can-we-stop-pretending-sms-is-secure-now/ Anecdotal: With the prior consent of the DID holders, I have successfully ported peoples' numbers using nothing more than a JPG scan of a

Re: Malicious SS7 activity and why SMS should never by used for 2FA

2021-04-18 Thread Eric Kuhnke
One of my main problems with SMS 2FA from a usability standpoint, aside from SS7 hijacks and security problems, is that it cannot be relied upon when traveling in many international locations. I have been *so many places* where there is just about zero chance of my T-Mobile SIM successfully roaming

Re: Malicious SS7 activity and why SMS should never by used for 2FA

2021-04-19 Thread Eric Kuhnke
I would start with cellular carriers and nations that intentionally take steps to block anything VoIP as a threat to their revenue model. Or because anything vpn/ipsec/whatever related is a threat to local Internet censorship laws. Plenty of places the sort of ipsec tunnel used for vowifi is not u

Re: Submitting Fake Geolocation for blocks to Data Brokers and RIRs

2021-04-22 Thread Eric Kuhnke
I sincerely doubt that any actual *law* could be enforced against an ISP which is a legal entity in one location, yet has multiple discrete /23 or /24 blocks and without any obfuscation choose to announce them from multiple different geographic locations. Configurations where an AS has multiple isl

Re: Broken Mini-SAS cable removal?

2021-04-23 Thread Eric Litvin
Joe’s response is spot on. I would also suggest you look at the “latching finger” mechanism on a spare, then apply some of the techniques Joe suggests. Eric Luma optics Sent from my iPhone > On Apr 23, 2021, at 8:27 AM, Joe Klein wrote: > > Try shim stock or a feeler gaug

Re: FCC fines for unauthorized carrier changes and consumer billing

2021-04-23 Thread Eric Kuhnke
Did the FCC ever collect its $50 million from "Sandwich Isles Telecommunications" for blatant fraud? At this scale I wonder how or why certain people are not in federal prison. https://www.google.com/search?channel=fs&q=fcc+sandwich+isles https://docs.fcc.gov/public/attachments/FCC-20-131A1_Rcd.

Re: Myanmar internet - something to think about if you're having a bad day

2021-04-28 Thread Eric Kuhnke
It should be noted that Telenor has been one of the nationwide license holders for 3GPP cellular bands in Pakistan for a long time, and has encountered the same issues with regional network shutdowns, and government orders to block certain netblocks or services. Not to the same extent as what's go

Re: Myanmar internet - something to think about if you're having a bad day

2021-04-28 Thread Eric Kuhnke
(openvpn, wireguard, etc) and their continuing development, etc. On Wed, Apr 28, 2021 at 11:03 AM Christopher Morrow wrote: > (I'm sure i'll regret this, but...) > > On Wed, Apr 28, 2021 at 1:48 PM Eric Kuhnke wrote: > >> It should be noted that Telenor has been one of

Re: link monitoring

2021-04-29 Thread Eric Kuhnke
The Junipers on both sides should have discrete SNMP OIDs that respond with a FEC stress value, or FEC error value. See blue highlighted part here about FEC. Depending on what version of JunOS you're running the MIB for it may or may not exist. https://kb.juniper.net/InfoCenter/index?page=content&

Re: link monitoring

2021-04-29 Thread Eric Kuhnke
gt; FCC License KJ6FJJ > > Sent from my iPhone via RFC1149. > > On Apr 29, 2021, at 2:32 PM, Eric Kuhnke wrote: > >  > The Junipers on both sides should have discrete SNMP OIDs that respond > with a FEC stress value, or FEC error value. See blue highlighted part here >

Re: Call for academic researchers (Re: New minimum speed for US broadband connections)

2021-05-30 Thread Eric Kuhnke
An interesting question would be to quantify and do statistical analysis on the following: Take a set of 1000 or more residential last mile broadband customers on an effectively more-than-they-can-use connection (symmetric 1Gbps active ethernet or similar). On a 60s interval, retrieve SNMP traffi

Re: Call for academic researchers (Re: New minimum speed for US broadband connections)

2021-05-31 Thread Eric Kuhnke
If one installs smokeping on a raspberry pi using a wired ethernet interface to a home router, on a DOCSIS3 residential last mile segment, and copies over a well chosen targets file for things to test, and sets it to a 60s interval, all other settings at default... It's quite rare to find a networ

Re: New minimum speed for US broadband connections

2021-05-31 Thread Eric Kuhnke
Perhaps you may be unfamiliar with the business model of cities, counties or local PUDs running the fiber last mile network (at OSI layer 1) and providing ethernet transport/VLAN handoffs, installing the OLTs and ONTs, and third party ISPs using that network to provide IP, support, billing and over

Re: New minimum speed for US broadband connections

2021-05-31 Thread Eric Kuhnke
I think it has been true for many years that: a) a vast majority of residential gigabit/symmetric customers, or gigabit asymmetric (docsis3 500-1000 down, 16-50 up) no longer have a device in their home with a 1000BaseT port on it, or don't know if they do. in some cases literally the only cat5e c

Re: New minimum speed for US broadband connections

2021-05-31 Thread Eric Kuhnke
Perhaps there should be some sort of harsher penalty for ILECs and other large near-monopoly last mile local carriers that outright lie on their form 477 data or take significant subsidy funds and then fail to build what they promised. Numerous states' attorney generals have gone after them on this

OSI layer 1 and revisiting labelmakers in the year 2021

2021-06-05 Thread Eric Kuhnke
I am still using a Dymo 4200 [1] which is generally okay. I am wondering if anyone or their field tech team has recently changed to a better label maker in terms of feature set, battery life/charging or label consumable cost. Surely there must be something better out there. Strong preference for

Re: Google uploading your plain text passwords

2021-06-11 Thread Eric Kuhnke
I think you have only found the tip of the iceberg of things that Chrome and Google does without your express consent. On Fri, Jun 11, 2021 at 9:48 AM William Herrin wrote: > On Fri, Jun 11, 2021 at 9:38 AM Jan Schaumann via NANOG > wrote: > > William Herrin wrote: > > > It turns out that ever

  1   2   3   4   5   6   7   8   9   10   >