Re: Jenkins amplification

t "vpn" is the right answer - it's preferrable to publishing services to the entire world that only need to be used by empoyees. But it's not cheap or easy. -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgp9x9K3M8fTy.pgp Description: OpenPGP digital signature

Re: IPv4 and Auctions

side of the control > of the RIRs because they had no involvement in them. I don't know about others but "my" SRI-NIC allocation passed to RIPE control some while back, as a "legacy" (mnt-by: RIPE-NCC-LEGACY-MNT) block. Although it was fairly easy to predict where i

Re: Spitballing IoT Security

tion-based firewall, every problem looks like it would be easier to solve using an application-based firewall :) -- Mike Meredith, University of Portsmouth Principal Systems Engineer, Hostmaster, Security, and Timelord! pgpYa7dseBC5c.pgp Description: OpenPGP digital signature

Re: ICANN GDPR lawsuit

en leaked > on its website. " Neglecting where it goes on to say "it would be subject to a new law that “mirrors” GDPR which will come into effect in the autumn.". -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgpdyFKzJLwJ4.

Re: unwise filtering policy on abuse mailboxes

Anybody still doing > it today is doing it on purpose, which of course leads directly to the > question: why? Never assume malice ("on purpose") something which can be adequately explained by incompetance. -- Mike Meredith, University of Portsmouth Chief Systems En

Re: DNS Flag Day, Friday, Feb 1st, 2019

all in place back in 2004, and EDNS compliance was one of the tests back then. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgpApQS1bYzQY.pgp Description: OpenPGP digital signature

Re: A Zero Spam Mail System [Feedback Request]

xpect. I'm also > not 100% certain that m4 was even an option for the first sendmail It wasn't a Sendmail 8 introduction perhaps? -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgpavwLh2geSD.pgp Description: OpenPGP digital signature

Re: a detour DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

and take all them out again immediately after. -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgpCzfMA47BMs.pgp Description: OpenPGP digital signature

Re: a detour DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

ew gooey IPAM thing. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgpLPwWeNBTLF.pgp Description: OpenPGP digital signature

Re: Oracle DBA

On Wed, 13 Mar 2019 17:44:13 -0700, Randy Bush may have written: > ya. none of us run oracle Yeah but some of us walk it. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgp19LcFRTpOk.pgp Description: OpenPGP digital signature

Re: Templating/automating configuration

On Wed, 14 Jun 2017 21:35:59 +0100, Nick Hilliard may have written: > What do you think the purpose of change control / management is? To provide employment for change managers of course. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timel

Re: Recent trouble with QUIC?

s may be specific to universities in the > Apps universe. As are we. -- Mike Meredith, University of Portsmouth Principal Systems Engineer, Hostmaster, Security, and Timelord!

Re: Anycast provider for SMTP?

tried it, but I was within Indeed. Rock solid in my experience (on a "little" network). -- Mike Meredith, University of Portsmouth Principal Systems Engineer, Hostmaster, Security, and Timelord!

Re: Can somebody explain these ransomwear attacks?

bly. Ransomware gangs /do/ target infrastructure - currently known to be DNS servers (Microsoft), hypervisors, backups, etc. I wouldn't assume that they wouldn't try attacking the network itself today or in the future. -- Mike Meredith, University of Portsmouth Hostmaster, Security, and

Re: Colombia Network Operators Group

ite hasn't been categorised ("unknown") which is enough to block for an especially Evil Firewall Admin[0]. 0: I may be an Evil Firewall Admin, but I'm not an especially EFA. -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgptidFEWJqmE.pgp Description: OpenPGP digital signature

Re: Update to BCP-38?

; process used by the U.S. Military but the TL;DR version is: if you don't > have to reveal something, don't. You've ignored step 1 - identifying critical information that needs protecting. It makes sense to protect information that needs protecting and don't lose sleep over

Re: Update to BCP-38?

promised if it doesn't successfully pick up the second stage of the payload and 'phone home'. -- Mike Meredith, University of Portsmouth Chief Systems Engineer, Hostmaster, Security, and Timelord! pgpuN30Tt6VQC.pgp Description: OpenPGP digital signature

Re: VDSL

k.a "we lied to you last time, but this > time it really is..." "We mispelt it last time - it should have been 'fibber broadband'; this time it's proper 'fibre broadband'" -- Mike Meredith, University of Portsmouth Hostmaster, Security, and Chief Systems Engineer pgpBXst7CoQwF.pgp Description: OpenPGP digital signature