Re: Spitballing IoT Security

2016-10-27 Thread Geoffrey Keating
"Ronald F. Guilmette" writes: > My iPhone 3GS "goes on the Internet". > > Through no fauly of my own, it is also, apparently, destined in short order > to "go onto" a landfill, if not here, then in China or India, where a > pitiful plethora of shoeless and sad-eyed third-world waifs will spend >

Re: Bandwidth Savings

2017-01-11 Thread Geoffrey Keating
Keenan Singh writes: > Hi Guys > > We are an ISP in the Caribbean, and are faced with extremely high Bandwidth > costs, compared to the US, we currently use Peer App for Caching however > with most services now moving to HTTPS the cache is proving to be less and > less effective. We are currentl

Re: China ISPs DNS problems on Jan 22nd - any idea what happened?

2014-01-26 Thread Geoffrey Keating
Patrick van Staveren writes: > This past Tuesday the 22nd I was witness to a widespread DNS poisoning > problem in China, whereby a lot of DNS queries were all returning the same > IP address, 65.49.2.178. Our websites became unavailable for most of our > customers in China, as with many other w

Re: Yahoo DMARC breakage

2014-04-10 Thread Geoffrey Keating
Andrew Sullivan writes: > I think DMARC is mostly useful when used correctly. There is no BCP > yet... There is, however, BCP167/RFC6377 covering DKIM and mailing lists. Some relevant sections are 4.1 and 5.3: 4.1: ... site administrators wishing to employ ADSP with a "discardable" setti

Re: Access hardware for small FTTP deployment

2014-05-16 Thread Geoffrey Keating
Chris writes: > I'm interested to see what other people are doing for these types of small > setups. Does anyone know of any other reasonably priced access switches, > 32+ SFP ports, and able to withstand 60degC or higher operating temperature? An alternative you might consider is a small A/C un

Re: Verizon Public Policy on Netflix

2014-07-11 Thread Geoffrey Keating
Miles Fidelman writes: > Either way, if one is a customer of both, one will end up paying for > the infrastructure - it's more about gorillas fighting, which bill it > shows up on, who ends up pocketing more of the profits, and how many > negative side-effects result. In this case, though, this

Re: What do people use public suffix for?

2013-04-15 Thread Geoffrey Keating
"John Levine" writes: > The public suffix list contains points in the DNS where (roughly > speaking) names below that point are under different management from > each other and from that name. It's here: http://publicsuffix.org/ > > The idea is that abc.foo.com and xyz.foo.com have the same man

Re: Shaw routing issue 12 Aug 2014

2014-08-13 Thread Geoffrey Keating
Pete Lumbis writes: > Maybe related to the 512k route issue? > http://www.bgpmon.net/what-caused-todays-internet-hiccup/ > > I've seen people reboot to recover from TCAM exception without adjusting > TCAM size only to run into the issue all over again. It's a fun way to > watch the problems roll

Re: HTTPS redirects to HTTP for monitoring

2015-01-18 Thread Geoffrey Keating
chris writes: > I have been going through something very interesting recently that relates > to this. We have a customer who google is flagging for "abusive" search > behavior. Because google now forces all search traffic to be SSL, it has > made attempting to track down the supposed "bad traffic

Re: AW: Uptick in spam

2015-10-27 Thread Geoffrey Keating
Rich Kulawiec writes: > On Tue, Oct 27, 2015 at 08:09:00AM -0400, Ian Smith wrote: > > This is the part that's been bugging me. Doesn't the NANOG server > > implement SPF checking on inbound list mail? > > Don't know, but it doesn't matter: SPF has zero anti-spam value. > (I know. I've studied

Re: United Airlines is Down (!) due to network connectivity problems

2015-07-08 Thread Geoffrey Keating
Jay Ashworth writes: > UA, WSJ /and/ NYSE all in the same day? > > Once is an accident; twice is a coincidence... > > Three times is enemy action. Or common factors. In this case, I think it's probably enough to point out it's the first Tuesday of the fiscal year. For a 24x7 organization, e

Re: ARIN IPV4 Countdown

2015-07-14 Thread Geoffrey Keating
"Tony Hain" writes: > Owen DeLong wrote: > > I vote for a /24 lotto to get rid of the rest! > > That would take too long to get organized. Just suspend fees and policy > requirements and give one to each of the first 400 requestors. Overall it > would reduce costs related to evaluating "need", s

Re: SEC webpages inaccessible due to Firefox blocking servers with weak DH ciphers

2015-07-17 Thread Geoffrey Keating
Robert Drake writes: > On 7/17/2015 4:26 AM, Alexander Maassen wrote: > > Well, this block also affects people who have old management hardware > > around using such ciphers that are for example no longer supported. In my > > case for example the old Dell DRAC's. And it seems there is no way to >

Re: multipath tcp now in production use for linux based mobile devices

2015-08-04 Thread Geoffrey Keating
"Darden, Patrick" writes: > So, obviously, MPTCP can cause problems with Stateful Firewalls (as > in asymmetric routing, out of state packets, etc.). Cisco's take on > how to deal with MPTCP is just as interesting as MPTCP itself is. ... It's not so much the statefulness of the firewall that's

Re: On topic of domains

2013-07-11 Thread Geoffrey Keating
Mark Andrews writes: > In message , Chris Hills writes: > > Whilst I am not a fan of dotless domains, as long as one uses the fully > > qualified domain name (e.g. http://ac./), there should not be any > > trouble using it in any sane software. It seems that most people aren't > > aware these day

Re: iOS 7 update traffic

2013-09-26 Thread Geoffrey Keating
Cutler James R writes: > On Sep 26, 2013, at 5:22 PM, Mark Lancaster wrote: > > > I have heard a lot of questions and debate about whether the iOS updates > > download automatically: > > > > “Available updates download automatically if your device is connected to > > Wi-Fi and a power source.”