RE: IPv6 Space Management. Tracking, not Allocating

2010-11-17 Thread Leigh Porter
Darn it, I thought IPv6 managed all that kind of stuff automatically ? You mean I still have to do some work? ;-) -- Leigh -Original Message- From: chip [mailto:chip.g...@gmail.com] Sent: 17 November 2010 17:23 To: nanog Subject: IPv6 Space Management. Tracking, not Allocating There'

RE: Consequences of BGP Peering with Private Addresses

2011-06-16 Thread Leigh Porter
, but did anybody suggest just using IPv6 for this? -- Leigh Porter __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __

RE: Consequences of BGP Peering with Private Addresses

2011-06-16 Thread Leigh Porter
And that will teach me not to read the thread! -- Leigh From: Tom Hill [t...@ninjabadger.net] Sent: 16 June 2011 13:46 To: nanog@nanog.org Subject: RE: Consequences of BGP Peering with Private Addresses On Thu, 2011-06-16 at 11:30 +, Leigh Porter

Re: VMware ESX LACP Support

2011-06-20 Thread Leigh Porter
Does not out of the box mean that there is an LACP 'fix' ? -- Leigh Porter On 20 Jun 2011, at 21:45, "Josh Smith" wrote: > ESX does NOT support LACP out of the box. Not sure about the nexus 1kv. > > > Thanks, > Josh Smith > KD8HRX > email/jabber:

RE: [pfSense Support] Strange TCP connection behavior 2.0 RC2 (+3)

2011-06-28 Thread Leigh Porter
Indeed, we had similar issues on a 3G radio network. Long RTTs made it impossible to reach the maximum potential throughput of the network. I installed one of these: http://www.fastsoft.com/home/ And the problem just went away. -- Leigh Porter > -Original Message- > From:

RE: [pfSense Support] Strange TCP connection behavior 2.0 RC2 (+3)

2011-06-28 Thread Leigh Porter
> -Original Message- > From: Andreas Ott [mailto:andr...@naund.org] > Sent: 28 June 2011 16:27 > To: Eugen Leitl; williamejs...@googlemail.com > Cc: NANOG list > Subject: Re: [pfSense Support] Strange TCP connection behavior 2.0 RC2 > (+3) > > -andreas > [who has to explain this about on

RE: [pfSense Support] Strange TCP connection behavior 2.0 RC2 (+3)

2011-06-28 Thread Leigh Porter
> -Original Message- > From: Cameron Byrne [mailto:cb.li...@gmail.com] > Sent: 28 June 2011 16:53 > To: Leigh Porter > Cc: Andreas Ott; Eugen Leitl; williamejs...@googlemail.com; NANOG list > Subject: Re: [pfSense Support] Strange TCP connection behavior 2.0 RC2 > (

RE: [pfSense Support] Strange TCP connection behavior 2.0 RC2 (+3)

2011-06-29 Thread Leigh Porter
on scheduler, but the results kind of spoke for themselves really. Similarly we have had good results with WiMAX networks. -- Leigh Porter UK Broadband __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __

RE: Firewall Appliance Suggestions

2011-06-30 Thread Leigh Porter
I use JuNOS Juniper for just this and it works well. However, I have not used the GUI for configuring it, but the command line is very usable. However, if you have a NOC Monkey, I would be tempted to create your own front end for configuring stuff and have an XML interface to the real boxes..

Re: Looking for tw telecom folk to resolve IPv6 access to their site

2011-07-02 Thread Leigh Porter
-- Leigh Porter On 2 Jul 2011, at 14:47, "Frank Bulk" wrote: > IPv6 access to TW Telecom's website, www.twtelecom.com, has been down almost > continuously since Wednesday evening. For dual-stacked users browsing their > site but not using Google Chrome this can

RE: OT: Given what you know now, if you were 21 again...

2011-07-14 Thread Leigh Porter
On 14/07/2011 9:08 a.m., Larry Stites wrote: > Given what you know now, if you were 21 and just starting into networking / > communications industry which areas of study or specialty would you > prioritize? > Rebeccah Harris in my physics lectures. She was clearly up for it. -- Leigh

RE: OOB

2011-07-26 Thread Leigh Porter
AND the DSL going down at the same time is minimal, especially as the DSL is copper to a local exchange. -- Leigh Porter From: Jeff Kell [jeff-k...@utc.edu] Sent: 26 July 2011 16:00 To: nanog Subject: Re: OOB On 7/26/2011 10:19 AM, Jensen Tyler wrote

Re: network issue help

2011-08-10 Thread Leigh Porter
I just wish spammingtree was on by default. -- Leigh Porter On 10 Aug 2011, at 22:47, "Jason Biel" wrote: > Is it to the point where I can just forward the emails from help desk to > NANOG so I don't have to answer them? > > Biel > > On Wed, Aug 10,

RE: How long is your rack?

2011-08-16 Thread Leigh Porter
purely practical. I took on some ideas for backup though, so I am sorting out a backblaze account and using Randy's fantastic sync thing that he mentioned. I really do not want 18 months of research to vanish. -- Leigh Porter __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __

RE: How long is your rack?

2011-08-16 Thread Leigh Porter
> -Original Message- > From: Randy Bush [mailto:ra...@psg.com] > Sent: 16 August 2011 08:37 > To: Leigh Porter > Cc: North American Network Operators' Group > Subject: Re: How long is your rack? > > > I really do not want 18 months of research to vani

RE: How long is your rack?

2011-08-16 Thread Leigh Porter
> -Original Message- > From: Greg Ihnen [mailto:os10ru...@gmail.com] > Sent: 16 August 2011 11:57 > To: Leigh Porter > Cc: Bryan Irvine; Lyndon Nerenberg (VE6BBM/VE7TFX); nanog@nanog.org > Subject: Re: How long is your rack? > > > On Aug 16, 2011, at

RE: OSPF vs IS-IS

2011-08-17 Thread Leigh Porter
employ. But really, if they get OSPF then IS-IS is not hard to grasp. -- Leigh Porter __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __

RE: IPv6 version of www.qwest.com/www.centurylink.com has been down for 10 days

2011-08-18 Thread Leigh Porter
ations that have active AAAA records to break peoples connectivity to their resources. -- Leigh Porter __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __

Re: NANOG Digest, Vol 43, Issue 53

2011-08-20 Thread Leigh Porter
Why not use wireless for it all if the bandwidth is enough. 5.8ghz kit is pretty cheap and fast. -- Leigh Porter On 20 Aug 2011, at 04:16, "Frank Bulk" wrote: > You can order custom-made patch cables that are outdoor rated from any > decent company that sells fiber patch cab

RE: East Coast Earthquake 8-23-2011

2011-08-24 Thread Leigh Porter
gest in VA in well over a century. Think > of the _trillions_ of dollars which could have been put into > healthcare, public safety, hell, better networking equipment :) we > could have used instead of making all buildings

RE: PuTTY alt-keys (was Re: 16-User Network)

2011-08-31 Thread Leigh Porter
> -Original Message- > From: Jay Ashworth [mailto:j...@baylink.com] > Sent: 31 August 2011 14:34 > To: NANOG > Subject: Re: PuTTY alt-keys (was Re: 16-User Network) > > - Original Message - > > From: "Joe Hamelin" > > > On Wed, Aug 31, 2011 at 4:19 AM, Jay R Ashworth > > wrote

RE: Do Not Complicate Routing Security with Voodoo Economics

2011-09-04 Thread Leigh Porter
be horribly anti-pola to the > affected customers, like white hot wires. and one just does not do > that > to customers. > > randy Presumably you can change that behaviour with communities? -- Leigh Porter __ Th

RE: NAT444 or ?

2011-09-07 Thread Leigh Porter
sues. A+P would be nicer perhaps, but none of the CPE I have will support it. I'll try and give people who do NAT in their CPE a public address for as long as I can, but it'll soon run out and then NAT444 will have to b

RE: NAT444 or ?

2011-09-07 Thread Leigh Porter
> -Original Message- > From: Randy Bush [mailto:ra...@psg.com] > Sent: 07 September 2011 11:18 > To: Leigh Porter > Cc: North American Network Operators' Group > Subject: Re: NAT444 or ? > > > I'm going to have to deploy NAT444 with dual-stack real

RE: NAT444 or ?

2011-09-07 Thread Leigh Porter
> -Original Message- > From: Daniel Roesen [mailto:d...@cluenet.de] > Sent: 07 September 2011 17:38 > To: nanog@nanog.org > Subject: Re: NAT444 or ? > > On Wed, Sep 07, 2011 at 12:16:28PM +0200, Randy Bush wrote: > > > I'm going to have to deploy NAT444 with dual-stack real soon now. > >

RE: NAT444 or ?

2011-09-07 Thread Leigh Porter
> -Original Message- > From: Seth Mos [mailto:seth@dds.nl] > Sent: 07 September 2011 20:26 > To: NANOG > Subject: Re: NAT444 or ? > > I think you have the numbers off, he started with 1000 users sharing > the same IP, since you can only do 62k sessions or so and with a > "normal" tim

RE: NAT444 or ?

2011-09-07 Thread Leigh Porter
> -Original Message- > From: David Israel [mailto:da...@otd.com] > Sent: 07 September 2011 21:23 > To: nanog@nanog.org > Subject: Re: NAT444 or ? > > On 9/7/2011 3:24 PM, Seth Mos wrote: > > I think you have the numbers off, he started with 1000 users sharing > the same IP, since you can

RE: NAT444 or ?

2011-09-07 Thread Leigh Porter
> -Original Message- > From: valdis.kletni...@vt.edu [mailto:valdis.kletni...@vt.edu] > Sent: 07 September 2011 23:14 > To: Dorn Hetzel > Cc: Leigh Porter; NANOG > Subject: Re: NAT444 or ? > > On Wed, 07 Sep 2011 16:13:26 EDT, Dorn Hetzel said: > > &g

RE: NAT444 or ?

2011-09-08 Thread Leigh Porter
> -Original Message- > From: Owen DeLong [mailto:o...@delong.com] > Sent: 08 September 2011 01:22 > To: Leigh Porter > Cc: Seth Mos; NANOG > Subject: Re: NAT444 or ? > > > Considering that offices, schools etc regularly have far more than 10 > users p

RE: NAT444 or ?

2011-09-08 Thread Leigh Porter
> -Original Message- > From: Seth Mos [mailto:seth@dds.nl] > Sent: 08 September 2011 06:43 > To: NANOG > Subject: Re: NAT444 or ? > > > Op 8 sep 2011, om 07:26 heeft Geoff Huston het volgende geschreven: > > > > > On 08/09/2011, at 2:41 AM,

RE: NAT444 or ?

2011-09-09 Thread Leigh Porter
k, it's probably high time for letting the thing die :-) > > Warm regards > > Carlos You could say the same thing about NAT44 from the very start! IPv4 just needs to die sooner rather than later. For now though, there is a good many

Re: Hurricane Katia

2011-09-10 Thread Leigh Porter
Nar it's ok, it'll pass the UK and it'll all be fine, just like the other time.. -- Leigh Porter On 10 Sep 2011, at 14:57, "andrew.wallace" wrote: > I'm hearing on the news wire 80mph winds will come to UK over

RE: NAT444 or ?

2011-09-11 Thread Leigh Porter
> -Original Message- > From: Cameron Byrne [mailto:cb.li...@gmail.com] > Ip mobility via gtp or mobile ip generally does not work when you nat > at the > 'edge'. If you don't want your ip address to change every time you > change > cell sites, the nat has to be centralized. > > Cb Inde

RE: Why are we still using the CA model? (Re: Microsoft deems all DigiNotar certificates untrustworthy, releases updates)

2011-09-12 Thread Leigh Porter
when they ask for dodgy certs so they can intercept something.. No, as soon as you have somebody who is not yourself in control without any third party verifiably independent oversight then you have to carefully define what you mean by

RE: ouch..

2011-09-14 Thread Leigh Porter
> -Original Message- > From: Always Learning [mailto:na...@u61.u22.net] > Sent: 14 September 2011 14:39 > To: N. Max Pierson > Cc: nanog@nanog.org > Subject: Re: ouch.. > > > On Wed, 2011-09-14 at 08:33 -0500, N. Max Pierson wrote: > > > Either way, it's pathetic. If someone is going t

RE: ouch..

2011-09-14 Thread Leigh Porter
-services/routing/mx-series/mx960/#modules -- Leigh > -Original Message- > From: Paul [mailto:p...@paulgraydon.co.uk] > Sent: 14 September 2011 16:48 > To: James Jones; Leigh Porter > Cc: nanog@nanog.org; Always Learning > Subject: Re: ouch.. > > http://

Re: ouch..

2011-09-14 Thread Leigh Porter
I'm looking forward to the awful experience of NAT444 promoting IPv6. -- Leigh Porter On 15 Sep 2011, at 00:37, "Mark Gauvin" wrote: > Nat444 or frontal labotomy hmm let's see at least with the second I > would still be able to make a living as a micro soft netw

Re: ouch..

2011-09-15 Thread Leigh Porter
That will either be because you exceeded your port count or the RTSP ALG is broken. -- Leigh Porter On 15 Sep 2011, at 07:48, "valdis.kletni...@vt.edu" wrote: > On Thu, 15 Sep 2011 06:36:42 -, Leigh Porter said: >> I'm looking forward to the awful experience

RE: Disappointing ARIN - A great advertisement for the USA ?

2011-09-16 Thread Leigh Porter
> -Original Message- > From: Randy Bush [mailto:ra...@psg.com] > Sent: 16 September 2011 16:05 > To: John Curran > Cc: NANOG list > Subject: Re: Disappointing ARIN - A great advertisement for the USA ? > > > If you have a particular suggestion for changing whois, please > > feel free to

RE: wet-behind-the-ears whippersnapper seeking advice on building a nationwide network

2011-09-16 Thread Leigh Porter
> -Original Message- > From: Charles N Wyble [mailto:char...@knownelement.com] > Sent: 16 September 2011 20:47 > To: nanog@nanog.org > Subject: wet-behind-the-ears whippersnapper seeking advice on building > a nationwide network > > > > Wow this turned into a very long post > > On

RE: wet-behind-the-ears whippersnapper seeking advice on building a nationwide network

2011-09-16 Thread Leigh Porter
> -Original Message- > From: Randy Bush [mailto:ra...@psg.com] > Sent: 16 September 2011 21:38 > To: Randy Carpenter > Cc: North American Network Operators' Group > Subject: Re: wet-behind-the-ears whippersnapper seeking advice on > building a nationwide network > > > As an ISP, ARIN wil

RE: wet-behind-the-ears whippersnapper seeking advice on building a nationwide network

2011-09-18 Thread Leigh Porter
> -Original Message- > From: Frank Bulk [mailto:frnk...@iname.com] > Sent: 18 September 2011 23:14 > To: 'Charles N Wyble'; nanog@nanog.org > Subject: RE: wet-behind-the-ears whippersnapper seeking advice on > building a nationwide network > > Where I live in rural America, I would not b

Re: SDH Fiber Problem

2011-09-19 Thread Leigh Porter
What exactly do you mean by meaningful traffic? ICMP from port to port works, can you pass TCP? SSH between routers? Establish a TCP session over it? Are you using Juniper SRXs ? :-) -- Leigh Porter On 19 Sep 2011, at 08:24, "jacob miller" wrote: > I have tried the pings a

Re: SDH Fiber Problem

2011-09-19 Thread Leigh Porter
It does sound like an MTU issue. Symptoms are typical. Did you try pings end to end with DF bit set and full size datagrams? -- Leigh Porter On 19 Sep 2011, at 09:15, "jacob miller" wrote: > By meanigful traffic I mean traffic like Http traffic > > Am able to ssh no pr

Re: SDH Fiber Problem

2011-09-19 Thread Leigh Porter
Did you try turning it off and on again? ;-) -- Leigh Porter On 19 Sep 2011, at 10:21, "jacob miller" wrote: > I have triend to do a ping with the DF bit set. > Maximum am able to get to is 1600. > This am guessing is because of the fact I have set the mtu size on My

RE: Mails to Google being blocked for illegal attachments

2011-09-30 Thread Leigh Porter
Yeah.. +1 reasons not to use Google Aps.. -- Leigh Porter > -Original Message- > From: Meftah Tayeb [mailto:tayeb.mef...@gmail.com] > Sent: 30 September 2011 13:19 > To: foks; nanog@nanog.org > Subject: Re: Mails to Google being blocked for illegal attachments > &

Re: events

2011-10-04 Thread Leigh Porter
8pussy.org ? -- Leigh Porter On 4 Oct 2011, at 10:59, "Ben Roeder" wrote: > Hi Mike, > We have used octopussy ( http://www.8pussy.org/dokuwiki/doku.php?id=home yes > it is work safe :-) ) with ok results. > Have used sec ( simple event correlator http://simple-

Re: passive bandwidth estimation

2011-10-05 Thread Leigh Porter
I used a passive TCP RTT calculator and TCP re-trans monitor to guess the conditions to a host or group of hosts with some success. I the. Derived the network "weather" from this and it worked pretty well to dynamically tune DPI box policing for wireless networks. It also makes cool graphs. Esp

RE: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread Leigh Porter
s just that I haven't personally seen a full > blown failure like that without human help. You have not seen VIP2-40s and CEF in action ;-) -- Leigh Porter __ This email has been scanned by the MessageLabs Email Sec

RE: [outages] News item: Blackberry services down worldwide

2011-10-12 Thread Leigh Porter
> -Original Message- > From: D. Marshall Lemcoe Jr. [mailto:fo...@lemcoe.com] > Sent: 12 October 2011 18:01 > Cc: nanog@nanog.org > Subject: Re: [outages] News item: Blackberry services down worldwide > > Haven't received an e-mail on my Blackberry since around 4AM, located > in Atlanta.

RE: [outages] News item: Blackberry services down worldwide

2011-10-14 Thread Leigh Porter
> -Original Message- > From: Nikolay Shopik [mailto:sho...@inblock.ru] > Sent: 14 October 2011 10:17 > To: nanog@nanog.org > Subject: Re: [outages] News item: Blackberry services down worldwide > > On 13/10/11 19:56, Jared Mauch wrote: > > Rebuilding this trust can take some time. I do

Re: Outgoing SMTP Servers

2011-10-26 Thread Leigh Porter
On 25 Oct 2011, at 09:34, "Tim" wrote: > This sadly is very common. It is getting more common by the day it seems but > this practice has started almost a decade ago. > > An easy work around is to use a custom port as they seem to just block port > 25 as a bad port but leave just about everythin

Re: Outgoing SMTP Servers

2011-10-26 Thread Leigh Porter
servers and we can set them a bespoke profile for rate limiting and message size etc etc. That worked rather well because people's email got out and SPAM was largely stopped. The Ironports were darn good boxes if a little pricey, -- Leigh Porter __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __

Re: Recommendation for customer monitoring network tool/portal for a large ISP

2011-10-27 Thread Leigh Porter
I looked at Statseeker a while back and it was very good. -- Leigh On 27 Oct 2011, at 09:47, "Alex Nderitu" wrote: > Hello, > What solutions do you guys in the fixed network business/ISPs use to provide > customer portals for network KPI reporting to customers in a fixed network on > real

RE: Hands and Eyes for London and Amsterdam

2011-10-31 Thread Leigh Porter
For London: http://www.netsumo.com/ -- Leigh Porter > -Original Message- > From: Mike Rae [mailto:mike@sjrb.ca] > Sent: 31 October 2011 16:26 > To: nanog@nanog.org > Subject: Hands and Eyes for London and Amsterdam > > Hi : > > Looking for some recomm

RE: IPv6 beta support for Android phones

2011-11-07 Thread Leigh Porter
s > once for 5 to 10+ year life ...) > Most networks seem to dish out address space behind a LSN box these days. I have three dongle things from three networks in the UK, none of them give me a public address. -- Leigh Porter ___

Re: Performance Issues - PTR Records

2011-11-07 Thread Leigh Porter
e is no way I would allow that either. But really, providing a reverse zone and forward zone to match is a case of five minutes and a shell script or a DNS that as Steinar said, will synthesise results. It's really not all that difficult.. -- Leigh Porter __

Re: Performance Issues - PTR Records

2011-11-07 Thread Leigh Porter
On 7 Nov 2011, at 14:03, "Bjørn Mork" wrote: > Leigh Porter writes: > >> Indeed, there is no way I would allow that either. But really, >> providing a reverse zone and forward zone to match is a case of five >> minutes and a shell script or a DNS that a

Re: TATA problems?

2011-11-07 Thread Leigh Porter
My 10.4r1.9 boxes died also but I saw interfaces go down whilst bgpd seemed stable. -- Leigh On 7 Nov 2011, at 15:34, "Pierre-Yves Maunier" wrote: > 2011/11/7 Tom Hill > >> On Mon, 2011-11-07 at 10:00 -0500, Todd Snyder wrote: >>> We seem to be having some problems with our tata links -

Re: General Internet Instability

2011-11-07 Thread Leigh Porter
On 7 Nov 2011, at 16:41, "Todd Snyder" wrote: > On Mon, Nov 7, 2011 at 11:27 AM, Richard Golodner < > rgolod...@infratection.com> wrote: > >> On Mon, 2011-11-07 at 11:09 -0500, Todd Snyder wrote: >>> Can anyone point to any authoritative updates about this? >> >>I think Jared's sugges

Re: TATA problems?

2011-11-07 Thread Leigh Porter
Any thoughts on just how wide read this was? Did every Juniper that receives Internet BGP updates with the affected software break? Or did it die out quite quickly? -- Leigh On 7 Nov 2011, at 19:55, "John van Oppen" wrote: > We saw several customers go away this morning as well. Our netwo

Re: XO blocking individual IP's

2011-11-08 Thread Leigh Porter
So if you want to launch a DoS attack against a specific IP address you spoof TCP3389 SYNs to networks single homed to XO and they will null it for you. -- Leigh On 8 Nov 2011, at 04:36, "Blake T. Pfankuch" wrote: > Oh yes! Good lord I about went insane with this. I was working with a > c

Re: where was my white knight....

2011-11-08 Thread Leigh Porter
On 8 Nov 2011, at 18:24, "Dobbins, Roland" wrote: > > On Nov 9, 2011, at 1:14 AM, wrote: > >> that was/is kindof orthoginal to the question... would the sidr plan for >> routing security have been a help in this event? > > SIDR is intended to provide route-origination validation - it isn't

Re: where was my white knight....

2011-11-08 Thread Leigh Porter
would expect a high incidence of change to trigger something sensible to mitigate this kind of craziness from happening. I am sure enough people have had incorrectly scaled RADIUS farms blow up when a load of DSLAMS vanish and come back again not to repeat such storms. -- Leigh Porter

Re: Arguing against using public IP space

2011-11-13 Thread Leigh Porter
I was involved in a security review of a SCADA system a couple of years ago. Their guy was very impressed with himself and his "Internet air-gap" but managed to leave all their ops consoles on both the SCADA network and their internal corp LAN. Their corp LAN was a mess with holes through their

Re: Arguing against using public IP space

2011-11-15 Thread Leigh Porter
On 14 Nov 2011, at 18:52, "McCall, Gabriel" wrote: > Chuck, you're right that this should not happen- but the reason it should not > happen is because you have a properly functioning stateful firewall, not > because you're using NAT. If your firewall is working properly, then having > publi

Re: Arguing against using public IP space

2011-11-15 Thread Leigh Porter
On 15 Nov 2011, at 15:36, "Owen DeLong" wrote: > > On Nov 15, 2011, at 2:57 AM, Leigh Porter wrote: > >> >> >> On 14 Nov 2011, at 18:52, "McCall, Gabriel" >> wrote: >> >>> Chuck, you're right that this should n

Re: Arguing against using public IP space

2011-11-15 Thread Leigh Porter
edu] > Sent: Tuesday, November 15, 2011 9:17 AM > To: Leigh Porter > Cc: nanog@nanog.org; McCall, Gabriel > Subject: Re: Arguing against using public IP space > >> And this is totally overlooking the fact that the vast majority of > *actual* attacks these days are web-based drive-b

RE: Have they stopped teaching Defense in Depth?

2011-11-16 Thread Leigh Porter
> -Original Message- > From: Jay Ashworth [mailto:j...@baylink.com] > Sent: 16 November 2011 13:38 > To: NANOG > Subject: Re: Have they stopped teaching Defense in Depth? > > - Original Message - > > From: "Jimmy Hess" > > > Or, the attack is against a legitimate user's outboun

Re: First real-world SCADA attack in US

2011-11-21 Thread Leigh Porter
I checked the SCADA boxes used in our "smart" building. They are all using 127.0.0.1 Is that a security risk? -- Leigh Porter On 21 Nov 2011, at 19:20, "Arturo Servin" wrote: > >I wonder if they are using private IP addresses. > > -as > > On 21

Re: First real-world SCADA attack in US

2011-11-21 Thread Leigh Porter
On 21 Nov 2011, at 20:23, "Ryan Pavely" wrote: > Might I suggest using 127.0.0.2 if you want less spam :P > > Pretty scary that folks have > 1. Their scada gear on public networks, not behind vpns and firewalls. Do people really do that? Just dump a /24 of routable space on a network and use

Re: Any recommended router. They are reliable and have good support.

2011-11-22 Thread Leigh Porter
Brocade have some reasonable boxes. -- Leigh Porter On 22 Nov 2011, at 15:40, "Deric Kwok" wrote: > Hi > > Can I know any selection of Linux routers except cisco / juniper? > > They are reliable and have good support provided > > We would like to get

Re: Any recommended router. They are reliable and have good support.

2011-11-22 Thread Leigh Porter
Has anybody had experience of mikrotik support? Is it any good? Any thoughts about the time to fix bugs? -- Leigh On 22 Nov 2011, at 15:57, "Faisal Imtiaz" wrote: > mikrotik family .. you can have all sizes and shapes of routers .. > lots of support available online or from independent consu

Re: Any recommended router. They are reliable and have good support.

2011-11-22 Thread Leigh Porter
wireless and much more. > thank you > > ----- Original Message - From: "Leigh Porter" > > To: > Cc: "nanog list" > Sent: Tuesday, November 22, 2011 6:02 PM > Subject: Re: Any recommended router. They are reliable and have good support. > > > Has a

RE: Odd router brokenness

2011-11-23 Thread Leigh Porter
> -Original Message- > From: Mark Radabaugh [mailto:m...@amplex.net] > Sent: 23 November 2011 16:53 > To: NANOG list > Subject: Re: Odd router brokenness > > On 11/23/11 11:33 AM, Saku Ytti wrote: > > On (2011-11-23 09:41 -0500), Mark Radabaugh wrote: > > > >> The question is: How does

RE: Looking for a Tier 1 ISP Mentor for career advice.

2011-12-01 Thread Leigh Porter
I am looking for just such a person now. Good Juniper, some Cisco and Sysadmin experience with an ISP background.. I expect it will be immensely difficult to find somebody. What makes it even more frustrating is that just such a person was not all that long ago made redundant! So if anybody is

RE: Looking for a Tier 1 ISP Mentor for career advice.

2011-12-01 Thread Leigh Porter
> -Original Message- > From: Leo Bicknell [mailto:bickn...@ufp.org] > Sent: 01 December 2011 16:15 > To: nanog@nanog.org > Subject: Re: Looking for a Tier 1 ISP Mentor for career advice. > It's a wonderful double edged sword. Someone who can think their way > out of a myriad of technic

RE: Looking for a Tier 1 ISP Mentor for career advice.

2011-12-02 Thread Leigh Porter
> -Original Message- > From: Thorsten Dahm [mailto:t.d...@resolution.de] > Sent: 02 December 2011 12:28 > To: nanog@nanog.org > Subject: Re: Looking for a Tier 1 ISP Mentor for career advice. > > Am 12/1/11 9:35 PM, schrieb David Radcliffe: > > Since I like to work and code (I spend 10 hou

RE: IP addresses are now assets

2011-12-02 Thread Leigh Porter
or requiring the space within the next 12 months BEFORE they part with their cash. It would be most amusing for somebody to buy space, hand over the money and then have ARIN deny the transfer. So I do wonder, how is this policy is being enforced and will ARIN be investigating

RE: IP addresses are now assets

2011-12-02 Thread Leigh Porter
> -Original Message- > From: Justin M. Streiner [mailto:strei...@cluebyfour.org] > Sent: 02 December 2011 19:26 > To: Leo Bicknell > Cc: NANOG > Subject: Re: IP addresses are now assets > > On Fri, 2 Dec 2011, Leo Bicknell wrote: > > > In a message written on Thu, Dec 01, 2011 at 11:04:

RE: On Working Remotely

2011-12-04 Thread Leigh Porter
This pretty much says it all, I think: http://www.youtube.com/watch?v=co_DNpTMKXk -- Leigh > -Original Message- > From: Keegan Holley [mailto:keegan.hol...@sungard.com] > Sent: 04 December 2011 18:50 > To: Jay Ashworth > Cc: NANOG > Subject: Re: On Working Remotely > > Maybe I have a d

RE: Sad IPv4 story?

2011-12-12 Thread Leigh Porter
> -Original Message- > From: Vitkovsky, Adam [mailto:avitkov...@emea.att.com] > Sent: 12 December 2011 09:19 > To: Eric Parsonage; valdis.kletni...@vt.edu > Cc: nanog@nanog.org > Subject: RE: Sad IPv4 story? > > > and models that doesn't take "we may not get IPv4 space" into account > and

RE: Your Christmas Bonus Has Arrived

2011-12-13 Thread Leigh Porter
> -Original Message- > From: Chaim Rieger [mailto:chaim.rie...@gmail.com] > Sent: 14 December 2011 06:10 > To: IPv4 Brokers; nanog@nanog.org > Subject: Re: Your Christmas Bonus Has Arrived > > What do you have for those that don't do the whole Jesus thing ? > That would be Hell.. --

Re: Recognized Address Transfer Facilitators (was: Your Christmas Bonus Has Arrived)

2011-12-14 Thread Leigh Porter
I love the anti v6 stuff on some of their sites! http://www.iptrading.com/news/news.htm -- Leigh On 14 Dec 2011, at 12:21, "John Curran" wrote: > On Dec 14, 2011, at 12:40 AM, Patrick W. Gilmore wrote: > >> I believe this company is the one that sold the MS & Borders blocks, so they >> ma

Re: Speed Test Results

2011-12-23 Thread Leigh Porter
They are completely unreliable and not to be trusted except for an occasional general indication of speed. -- Leigh Porter On 23 Dec 2011, at 09:20, "jacob miller" wrote: > Hi, > > Am having a debate on the results of speed tests sites. > > Am interested i

Re: Ethernet From China to Singapor or Hong Kong ?

2012-01-02 Thread Leigh Porter
I'd second PCCW. I have contacts there if you drop me a mail off list. -- Leigh Porter UKBroadband PCCW... On 2 Jan 2012, at 14:08, "Paul Rolland" wrote: > Hello, > > On Mon, 2 Jan 2012 14:30:47 +0100 > Olivier CALVANO wrote: > >> anyone have contac

DC wiring standards

2012-01-03 Thread Leigh Porter
Hi all, Does anybody know where I can find standards for DC cabling for -48v systems? I'm looking for general best common practices, cable colouring etc. Thanks, -- Leigh Porter __ This email has been scanned b

Re: OSS Systems

2012-01-05 Thread Leigh Porter
was to build our own mail system. Not that it was an issue, it never went wrong, but these days I'd just send people to gmail or something. -- Leigh Porter __ This email has been scanned by the Symantec Email Security.

Re: anycast load balancing issue

2012-01-06 Thread Leigh Porter
On 6 Jan 2012, at 07:33, "Måns Nilsson" wrote: > > Thanks all who made me think a second round and solve this. Hence why people prefer to ask people and not GOOG et-al. -- Leigh Porter __ This email has

Re: VPC=S/MLT?

2012-01-13 Thread Leigh Porter
as shown >> up 8 years late and is trying to hype it up to compensate? > > vpc/vlt/mlag/s/mlt > I am using the Brocade version, Multi Chassis Trunking (MCT), and it really does make things a lot nicer. -- Leigh Porter ___

Re: Whois 172/12

2012-01-15 Thread Leigh Porter
On 15 Jan 2012, at 07:39, "Ted Fischer" wrote: > Hi all, > > Tearing what's left of my hair out. > > A customer is getting scanned by a host claiming to be "172.0.1.216". > > I know this is bogus, but I want to go back to the customer with as > much authoritative umph as I can (heaven f

Re: enterprise 802.11

2012-01-15 Thread Leigh Porter
I use ruckus in town and city installs and despite rather a lot of other APs it performs very well. I don't have experience of them in high connected station density though. -- Leigh Porter On 15 Jan 2012, at 19:33, "Ken King" wrote: > I need to choose a wireless solutio

Re: DNS Attacks

2012-01-17 Thread Leigh Porter
the firewall as it is rather under specified (not my idea..). It did originate from Chinese address space and consisted of DNS queries for lots of hosts. There was also a port-scan in the traffic and a SYN attack on a few hosts on the same small subnet as the DNS, a web server and an

RE: DNS Attacks

2012-01-18 Thread Leigh Porter
Yeah like I say, it wasn't my idea to put DNS behind firewalls. As long as it is not *my* firewalls I really don't care what they do ;-) -- Leigh Porter > -Original Message- > From: Dennis [mailto:den...@justipit.com] > Sent: 18 January 2012 12:55 > To: Leigh Po

RE: RIS raw data

2012-01-19 Thread Leigh Porter
> -Original Message- > From: Peter Kristolaitis [mailto:alte...@alter3d.ca] > Sent: 19 January 2012 16:04 > To: nanog@nanog.org > Subject: Re: RIS raw data > > On 12-01-19 10:46 AM, valdis.kletni...@vt.edu wrote: > > On Thu, 19 Jan 2012 21:52:52 +0900, Randy Bush said: > > > >> uselessne

RE: juniper mx80 vs cisco asr 1000

2012-01-19 Thread Leigh Porter
it looks like a capable box. You would do well to look at the MX80 fixed chassis, it comes with 48 1G interfaces and 4 10G interfaces. They are pretty good value, I think. -- Leigh Porter __ This email has been scanned by t

Re: 10G switchrecommendaton

2012-01-26 Thread Leigh Porter
Let's see how many vendors you get listed! I would go for Brocade. -- Leigh Porter On 26 Jan 2012, at 20:24, "Deric Kwok" wrote: > Hi all > > I would like to have 10G switchrecommendaton > Ipref software can test around 9.2G but we can have congestion over 6G &

Re: 10G switchrecommendaton

2012-01-27 Thread Leigh Porter
On 27 Jan 2012, at 10:21, "Fabien Delmotte" wrote: > I worked for Extreme, and I deployed a lot of X650 (24 10G ports) for > DataCenter environment. The box is really good. > In fact if you use the box at a layer 2 it is perfect, BUT DON'T use their > BGP code, they never understood what is BG

Re: Console Server Recommendation

2012-01-30 Thread Leigh Porter
On 30 Jan 2012, at 16:10, "Ray Soucy" wrote: > What are people using for console servers these days? We've > historically used retired routers with ASYNC ports, but it's time for > an upgrade. > > OpenGear seems to have some nice stuff, anyone else? > +1 for OpenGear. I asked this same quest

Re: Console Server Recommendation

2012-01-30 Thread Leigh Porter
On 30 Jan 2012, at 18:41, "Brent Jones" wrote: > Another +1 to Opengear > Just buy the units that have the pinout for your devices, or you may need > adapters. And making them gets boring very quickly! -- Leigh __ This email

  1   2   3   >