Re: route for linx.net in Level3?

2013-04-04 Thread Paul Ferguson
On Thu, Apr 4, 2013 at 1:26 PM, Adam Vitkovsky wrote: > Check out: http://www.bcp38.info Right on. :-) - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Louisiana Optical Network Initiative

2013-05-02 Thread Paul Ferguson
t; representative from Capital One but after leaving several voice mails I have >> yet to get a call back. >> >> Thank you in advance for anyone's assistance, >> >> John Caffery >> Information Technology Consultant >> Louisiana Optical Network Initiative - LONI >> O 225.578.7263 >> C 225.252.3046 >> www.loni.org<http://www.loni.org/> >> >> > > -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Louisiana Optical Network Initiative

2013-05-02 Thread Paul Ferguson
Hang on -- University of New Orleans's AS is 23666? Looks like "SISTELINDO-AS-ID PT Sistelindo Mitralintas": http://www.cidr-report.org/cgi-bin/as-report?as=as23666 ? - ferg On Thu, May 2, 2013 at 3:22 PM, Paul Ferguson wrote: > John, > > Can you provide the prefi

Re: Louisiana Optical Network Initiative

2013-05-02 Thread Paul Ferguson
In the original message, he said 23666 - ferg On Thu, May 2, 2013 at 4:59 PM, David Walker wrote: > On 03/05/2013, John D Caffery wrote: >> The UNO AS number is 23666 ... > > 26333 right? > -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Louisiana Optical Network Initiative

2013-05-02 Thread Paul Ferguson
Ya think? :-) - ferg On Thu, May 2, 2013 at 7:45 PM, wrote: > On Thu, 02 May 2013 17:05:36 -0700, Paul Ferguson said: >> In the original message, he said 23666 > > But 'whois as23666' points at Indonesia, not Louisiana, so I suspect > some transcription errors

Re: Overall Netflix bandwidth usage numbers on a network?

2011-12-16 Thread Paul Stewart
I'll take a guess they are back logged - they have been working on our traffic stats since a week before that posting made it to nanog list --- Sent via IPhone On 2011-12-16, at 9:16 AM, "Dennis Burgess" wrote: > Same here. > > --- > Den

RE: Speed Test Results

2011-12-23 Thread Paul Stewart
a different way, if a customer is getting 20X1 Internet service and the speedtest shows 17 X 0.8 then case closed - if they are getting a speedtest result of 5 X 0.5 then our helpdesk will take a further look - this is really in rough terms... Paul -Original Message- From: jacob

Re: SSL Certificates

2012-01-06 Thread Paul Norton
I second The SSL Store (http://www.thesslstore.com/) -- Paul Norton Systems Administrator Neoverve - www.neoverve.com Neoverve Blog - http://blog.neoverve.com/ On 1/6/2012 7:31 AM, Ken A wrote: theSSLstore has good reseller pricing on a variety of certs. ~ $10 domain validated rapidssl certs

Re: So... my colo was just bought.

2012-01-10 Thread Paul WALL
George, We appreciate your sponsorship but using the NANOG mailing list to sell your colo is inappropriate. Best Regards, Paul On Tue, Jan 10, 2012 at 6:20 PM, George Fitzpatrick wrote: > If folks are having colo. issues please take a look at Telx. > We will be in San Diego as well. &g

In search of uplink vendor

2012-01-12 Thread Paul Kaminsky
SV1 or SV5 (San Jose) DC's - this is not mandatory, we're open for suggestions If you feel your company measures up or is a cut above the rest, please get in touch with us to discuss the specific details. Cheers Paul

Linux Centralized Administration

2012-01-12 Thread Paul Stewart
Hey folks. just curious what people are using for automating updates to Linux boxes? Today, we manually do YUM updates to all the CentOS servers . just an example but a good one. I have heard there are some open source solutions similar to that of Red Hat Network? Cheers, Paul

RE: Linux Centralized Administration

2012-01-12 Thread Paul Stewart
Awesome! I remember someone telling me about this before and couldn't remember the name til now... Cheers, Paul -Original Message- From: Daniel Ankers [mailto:md1...@md1clv.com] Sent: Thursday, January 12, 2012 4:08 PM To: Paul Stewart Subject: Re: Linux Centralized Administr

Re: Linux Centralized Administration

2012-01-12 Thread Paul Graydon
On 01/12/2012 03:51 PM, chaim.rie...@gmail.com wrote: On 1/12/2012 4:43 PM, Jimmy Hess wrote: On Thu, Jan 12, 2012 at 3:02 PM, Paul Stewart wrote: Today, we manually do YUM updates to all the CentOS servers . just an example but a good one. I have heard there are some open source

Re: Linux Centralized Administration

2012-01-12 Thread Paul Graydon
On 01/12/2012 03:51 PM, chaim.rie...@gmail.com wrote: On 1/12/2012 4:43 PM, Jimmy Hess wrote: On Thu, Jan 12, 2012 at 3:02 PM, Paul Stewart wrote: Today, we manually do YUM updates to all the CentOS servers . just an example but a good one. I have heard there are some open source

Re: Megaupload.com seized

2012-01-19 Thread Paul Graydon
On 01/19/2012 12:41 PM, Ryan Gelobter wrote: The megaupload.com domain was seized today, has anyone noticed significant drops in network traffic as a result? http://www.scribd.com/doc/78786408/Mega-Indictment http://techland.time.com/2012/01/19/feds-shut-down-megaupload-com-file-sharing-website/

RE: Megaupload.com seized

2012-01-19 Thread Paul Stewart
For us (AS11666), about 3-4% of total traffic typically Paul -Original Message- From: Paul Graydon [mailto:p...@paulgraydon.co.uk] Sent: Thursday, January 19, 2012 6:27 PM To: nanog@nanog.org Subject: Re: Megaupload.com seized On 01/19/2012 12:41 PM, Ryan Gelobter wrote: >

Re: Megaupload.com seized

2012-01-20 Thread Paul Graydon
her each take-down should apply to just an individual user's link to a file or whether the file itself should be removed. That could be different from circumstance to circumstance. Paul

RE: Console Server Recommendation

2012-01-30 Thread Paul Stewart
We really like Lantronix .. use them a lot. Paul -Original Message- From: Ray Soucy [mailto:r...@maine.edu] Sent: Monday, January 30, 2012 11:09 AM To: NANOG Subject: Console Server Recommendation What are people using for console servers these days? We've historically used re

Bid Software

2012-01-31 Thread Paul Stewart
olks using today and your experiences? Thanks, Paul

Re: non-congested comcast peers?

2012-01-31 Thread Paul WALL
e same time. You could try Cogent, AT&T, or Savvis, though they'll probably fill up now that I've mentioned it. Drive Slow (like a download going over Comcast-GBLX), Paul Wall

Re: bgp history lookup tool?

2012-02-04 Thread Paul Thornton
withdrawals and it would be useful to have a peek and > see if any such event concerning our prefix/as was seen anywhere. RIPE's RIS does this - http://ris.ripe.net Paul.

Re: Common operational misconceptions

2012-02-16 Thread Paul Thornton
t;> *huge* misconception about the operational status of IPv6 (imho). >> >> Steve > > By that definition, IPv4 is non-operational. > > You can break anything if you try hard enough. This being well demonstrated by most of the "Internet" access provided by hotels, for example. -- Paul

Re: Hi speed trading - hi speed monitoring

2012-02-16 Thread Paul Graydon
toring (not sure how good his monitoring was, though.) Paul

Re: Common operational misconceptions

2012-02-16 Thread Paul Graydon
s only in theory. Just having a grasp of that makes all the world of difference when it comes to troubleshooting. Start at layer 1 and work upwards (unless you're able to make appropriate intuitive leaps.) Is it physically connected? Are the link lights flashing? Can traffic route to it, etc. etc. Paul

Re: Common operational misconceptions

2012-02-17 Thread Paul Graydon
On 02/17/2012 04:29 AM, Leo Bicknell wrote: In a message written on Thu, Feb 16, 2012 at 08:50:11PM -1000, Paul Graydon wrote: At the same time, it's shocking how many network people I come across with no real grasp of even what OSI means by each layer, even if it's only in the

Re: Hi speed trading - hi speed monitoring

2012-02-17 Thread Paul Graydon
rting at which point you can see the pattern emerge where the automatic trading algorithms started doing their thing. Definitely too volatile. Paul

Re: Common operational misconceptions

2012-02-17 Thread Paul Graydon
emely hard to mold someone's thinking patterns by the time they're adults. When we interview we try to spend more time trying to gauge problem solving capabilities than anything else, after first quickly establishing their technical level. Paul On 2/17/2012 8:43 AM, Kenneth M.

Re: Common operational misconceptions

2012-02-18 Thread Paul Graydon
On 2/17/2012 10:55 PM, Michael Painter wrote: Paul Graydon wrote: Give me someone who can already think and analyse over someone who 'knows' it all, any day. You can be qualified to the hilt but absolutely useless in the real world (I've watched CCNP and higher struggling to

Re: Reliable Cloud host ?

2012-02-27 Thread Paul Graydon
aaS et al For what little it's probably worth mentioning, Amazon provides a shared storage platform in the form of EBS, Elastic Block Storage, which you can choose to use as your root device on your server if you so wish (wouldn't advise you do, latency is unpredictable), or you can have it mounted wherever is relevant for your data (the most common route). That's their non-physical server dependent storage provision. If you pay extra it'll replicate, or even replicate between availability zones. You can also choose to have Amazon monitor and ensure sufficient numbers of your server are running through autoscale. Paul

Re: Evil Bit and Spread Spectrum IP Addressing - NANOG Source Address Shaping

2012-03-04 Thread Paul Graydon
... Great, that's another filter to add to my mailserver. Paul On 3/4/2012 6:22 AM, Guru NANOG wrote: Common Misconception: One additional bit of IPv4 Addressing will solve world hunger The Evil Bit (or spare unused bit) can be used to store (restore) one bit The Left-Most bit of the 3

Re: Whitelist of update servers

2012-03-12 Thread Paul Graydon
On 03/12/2012 10:05 AM, Maverick wrote: Is there a whitelist that applications have to talk to in order to update themselves? Which applications? What updates?

Re: Whitelist of update servers

2012-03-12 Thread Paul Graydon
f it's necessary to be talking about blacklisting/whitelisting sites under such conditions as PCs in a prison you're really better off just paying for something like a Websense to take care of it. Paul

Re: Programmers with network engineering skills

2012-03-12 Thread Paul Graydon
?:[^()<>@,;:\\".\[\] \000-\031]+(?:(?:(?:\r\n)?[ \t])+|\Z|(?=[\[" ()<>@,;:\\".\[\]]))|\[([^\[\]\r\\]|\\.)*\](?:(?:\r\n)?[ \t])*)(?:\.(?:(?:\r\n) ?[ \t])*(?:[^()<>@,;:\\".\[\] \000-\031]+(?:(?:(?:\r\n)?[ \t])+|\Z|(?=[\["()<> @,;:\\".\[\]]))|\[([^\[\]\r\\]|\\.)*\](?:(?:\r\n)?[ \t])*))*(?:,@(?:(?:\r\n)?[ \t])*(?:[^()<>@,;:\\".\[\] \000-\031]+(?:(?:(?:\r\n)?[ \t])+|\Z|(?=[\["()<>@, ;:\\".\[\]]))|\[([^\[\]\r\\]|\\.)*\](?:(?:\r\n)?[ \t])*)(?:\.(?:(?:\r\n)?[ \t] )*(?:[^()<>@,;:\\".\[\] \000-\031]+(?:(?:(?:\r\n)?[ \t])+|\Z|(?=[\["()<>@,;:\\ ".\[\]]))|\[([^\[\]\r\\]|\\.)*\](?:(?:\r\n)?[ \t])*))*)*:(?:(?:\r\n)?[ \t])*)? (?:[^()<>@,;:\\".\[\] \000-\031]+(?:(?:(?:\r\n)?[ \t])+|\Z|(?=[\["()<>@,;:\\". \[\]]))|"(?:[^\"\r\\]|\\.|(?:(?:\r\n)?[ \t]))*"(?:(?:\r\n)?[ \t])*)(?:\.(?:(?: \r\n)?[ \t])*(?:[^()<>@,;:\\".\[\] \000-\031]+(?:(?:(?:\r\n)?[ \t])+|\Z|(?=[\[ "()<>@,;:\\".\[\]]))|"(?:[^\"\r\\]|\\.|(?:(?:\r\n)?[ \t]))*"(?:(?:\r\n)?[ \t]) *))*@(?:(?:\r\n)?[ \t])*(?:[^()<>@,;:\\".\[\] \000-\031]+(?:(?:(?:\r\n)?[ \t]) +|\Z|(?=[\["()<>@,;:\\".\[\]]))|\[([^\[\]\r\\]|\\.)*\](?:(?:\r\n)?[ \t])*)(?:\ .(?:(?:\r\n)?[ \t])*(?:[^()<>@,;:\\".\[\] \000-\031]+(?:(?:(?:\r\n)?[ \t])+|\Z |(?=[\["()<>@,;:\\".\[\]]))|\[([^\[\]\r\\]|\\.)*\](?:(?:\r\n)?[ \t])*))*\>(?:( ?:\r\n)?[ \t])*))*)?;\s*) Paul

Re: how to report spam to Yahoo!

2012-03-22 Thread Paul Bennett
ork in a pinch. Plain-text, no attachments, etc. Don't expect anything more than an autoreply, but all complaints do get processed. -- Paul

Re: how to report spam to Yahoo!

2012-03-22 Thread Paul Graydon
for their grey-listing/rate limiting report message. I've given up trying to report anything e-mail related to Yahoo, mostly just apologise to end users and suggest they use another e-mail provider. Paul On 03/21/2012 03:27 AM, Chuck Anderson wrote: Yahoo!'s abuse contact from w

Re: last mile, regulatory incentives, etc

2012-03-23 Thread Paul Graydon
considered below average." To be fair to the initiative at least its goal is for universal access to 1Gbps by 2018, something they term 'ultra-high-speed' (not sure where that definition comes from): http://hawaii.gov/gov/broadband-policy-outline/ Paul

Re: SORBS?!

2012-04-04 Thread Paul Graydon
to "light blue touch paper and retire to a safe distance" territory even mentioning them. There is a good chance you might get a reply from Sorbs here, they almost always seem to respond when things get raised on NANOG. Paul On 04/04/2012 09:53 AM, Chris Conn wrote: Hello, Is anyone fro

Re: Colocation in New York for a POP

2012-04-19 Thread Paul WALL
Stay away from the NYIIX. It goes down every month or two, and its current management is not competent. There are plenty of competitive options, including Equinix and Telx/TIE (which is free or close to it). Drive Slow, Paul Wall On 4/19/12, Abdelkader Chikh Daho wrote: > Hi everyone, >

Re: Operation Ghost Click

2012-04-26 Thread Paul Graydon
Based on conversations on this list a month or so ago, ISPs were contacted with details of which of their IPs had compromised boxes behind them, but it seems the consensus is that ISP were going to just wait for users to phone support when it broke rather than be proactive about it. Paul

rpki vs. secure dns?

2012-04-27 Thread Paul Vixie
http://tech.slashdot.org/story/12/04/27/2039237/engineers-ponder-easier-fix-to-internet-problem > "The problem: Border Gateway Protocol (BGP) enables routers to > communicate about the best path to other networks, but routers don't > verify the route 'announcements.' When routing problems erupt, '

RE: IPv6 monitoring...

2012-05-01 Thread Paul Stewart
We are using Solarwinds on our systems. it's one commercial system to consider. Paul -Original Message- From: Vytautas V Grigaliunas [mailto:v...@fnal.gov] Sent: May-01-12 4:31 PM To: nanog@nanog.org Subject: IPv6 monitoring... Greetings... What are people using for

Re: Cogent for ISP bandwidth

2012-05-14 Thread Paul WALL
Cogent is really better suited as a tertiary provider. Not a bad option, but you don't want to lose redundancy when they get involved in their peering dispute or de-peering du jour. Drive Slow, Paul Wall On 5/14/12, Michael J McCafferty wrote: > Jason, > > I agree with John. You

RE: Cogent for ISP bandwidth

2012-05-16 Thread Paul Stewart
I liked Cogent when we had them years ago but due to routing instability (off the charts) and unplanned down time every single month we dropped them. they call me every 3-6 months (different person each time) and I tell them to go away Paul -Original Message- From: Tim

Commerical Backup Solutions

2012-05-17 Thread Paul Stewart
have been using Bacula but it lacks bare metal options and doesn't have any nice reporting options (Executive Dashboard etc) Thanks for any input, Paul

RE: Spam from inteliquent.com subject "nanog"

2012-05-22 Thread Paul Stewart
Nothing here for what it's worth.... Paul -Original Message- From: Jay Hennigan [mailto:j...@west.net] Sent: Monday, May 21, 2012 11:01 PM To: nanog@nanog.org Subject: Spam from inteliquent.com subject "nanog" Anyone else just get this? Curious if they're sc

Current IPv6 state of US Mobile Phone Carriers

2012-05-22 Thread Paul Porter
ext step will be to reach out to the carriers themselves, but I figured many of their Network Engineers are probably on the NANOG mailing list and this would be a great place to start. Thanks in advance for your time and assistance. Sincerely, - Paul Porter -- *Paul G. Porter *GREE Inte

Re: Current IPv6 state of US Mobile Phone Carriers

2012-05-22 Thread Paul Graydon
On 05/22/2012 01:21 PM, Cameron Byrne wrote: On May 22, 2012 4:00 PM, "Paul Porter" wrote: Hi NANOG, I'm looking for some information on the four largest US mobile phone carriers and the current state of their IPv6 infrastructure. Specifically, we are trying to figure out:

Re: Current IPv6 state of US Mobile Phone Carriers

2012-05-22 Thread Paul Graydon
On 05/22/2012 01:40 PM, Paul Graydon wrote: On 05/22/2012 01:21 PM, Cameron Byrne wrote: On May 22, 2012 4:00 PM, "Paul Porter" wrote: Hi NANOG, I'm looking for some information on the four largest US mobile phone carriers and the current state of their IPv6 infrastructure

vixie, father of multitudes

2012-05-23 Thread paul vixie
<http://boingboing.net/2012/03/29/paul-vixies-firsthand-accoun.html> He was there, and Put The Fix In, to down the network. Certainly news to Phil Almquist and the entire BIND development team at UCB. Paul was at DECWRL and cut his teeth

isc - a good business

2012-05-28 Thread paul vixie
greetings. i didn't notice this before, and i want to complete the record. i'm paying more attention to the quoting this time, too. > On Wed, May 23, 2012 at 04:33:28PM -0400, Christopher Morrow wrote: > > On Wed, May 23, 2012 at 1:40 AM, wrote: > > > Paul will be t

Re: isc - a good business

2012-05-28 Thread paul vixie
s on about, i can't tell. the software is free, and isc cherishes our relevance. if you catch us doing wierd layer ten stuff that bugs you, give a shout. maybe we don't really mean it. > ... and i run and appreciate the software. that's why we're here. paul

Re: rpki vs. secure dns?

2012-05-28 Thread Paul Vixie
nt of need. that's nuts for a lot of reasons, one of which is its potentially and unmanageably circular dependency on the acceptance of a route you don't know how to accept or reject yet. my take-away from this thread is: very few people take RPKI seriously, but even fewer take ROVER seriously. -- Paul Vixie KI6YSY

Re: isc - a good business

2012-05-28 Thread Paul Vixie
(all caught up after this.) Jay Ashworth writes: > - Original Message - >> From: "paul vixie" > >> On 5/28/2012 11:52 AM, Randy Bush wrote: >> > ... maybe a bit too much layer ten for my taste. ... >> >> on that, we're trying to im

Re: rpki vs. secure dns?

2012-05-28 Thread paul vixie
On 5/28/2012 9:42 PM, David Conrad wrote: > On May 28, 2012, at 1:59 PM, Paul Vixie wrote: >> third, rsync's dependencies on routing (as in the RPKI+ROA case) are not >> circular (which i think was david conrad's point but i'll drag it to here.) > Nope. My poin

Re: rpki vs. secure dns?

2012-05-29 Thread paul vixie
On 5/29/2012 10:27 AM, Stephane Bortzmeyer wrote: > On Mon, May 28, 2012 at 10:01:59PM +, > paul vixie wrote > a message of 37 lines which said: > >> i can tell more than that. rover is a system that only works at all >> when everything everywhere is working well,

Re: Bogon list update for prefix for 5.1.0.0/19

2012-05-29 Thread Paul Cupis
On 28/05/12 22:19, Seth Mattinen wrote: On 5/28/12 6:31 AM, Evgeniy Aikashev wrote: We are AS21219 - PJSC Datagroup and owner of 5.1.0.0/19 block. Our customers have no access to some part of Internet if they use these IPs. Could you please update your bogon filters to permit this range. Do y

Re: rpki vs. secure dns?

2012-05-29 Thread Paul Vixie
you fetched has only the risk of staleness or invalidity, but never reachability. as others have stated, there is no reference collection of bad ideas. otherwise we would have written this one up in 1996 when a couple of dns people looked at the routing system and said 'hey what about something like [ROVER]?' and the routing people explained in detail why it wouldn't work. paul

Re: rpki vs. secure dns?

2012-05-29 Thread Paul Vixie
is the effect of seeing one of those rrsets but not the other? (here again we see the disadvantage of starting from incomplete information.) On 2012-05-30 4:24 AM, Shane Amante wrote: > On May 29, 2012, at 8:44 PM, Paul Vixie wrote: >> ... >> >> the problem is in time domain bo

Re: isc - a good business

2012-05-30 Thread Paul Vixie
On 2012-05-30 12:53 AM, Nabil Sharma wrote: > Paul: > > Where can we read details about the services ISC provided to the FBI, > and how they were compensated? it's in the AP News article published a few weeks ago. for an example: http://www.foxnews.com/scitech/2012/04/23/hundr

Re: Configuration Systems

2012-06-07 Thread Paul Graydon
is you've also got to go into the realms of private clouds (using, for example, openstack), on your own infrastructure in your own datacenter. That's before you even start delving into PaaS, SaaS "clouds" etc. "Cloud" is a marketing term, not an engineering one. Paul

Re: Configuration Systems

2012-06-07 Thread Paul Graydon
On 06/07/2012 12:59 PM, valdis.kletni...@vt.edu wrote: On Thu, 07 Jun 2012 12:12:09 -1000, Paul Graydon said: what cloud is you've also got to go into the realms of private clouds (using, for example, openstack), on your own infrastructure in your own datacenter. Same definition. The

A's for www.xfinitytv.com

2012-06-08 Thread Paul WALL
I'm not learning any records for Streampix (www.xfinitytv.com), only A's. The domains this site redirects to are available over a v6 transport, but not the actual streaming. Anyone know what's going on? Thanks, Paul Wall

Re: Dear Linkedin,

2012-06-08 Thread Paul Graydon
nconvenience might be having to log into each of whatever sites it is you're concerned about and changing the password on them. Paul

Re: Dear Linkedin,

2012-06-08 Thread Paul Graydon
On 06/08/2012 10:02 AM, Scott Weeks wrote: --- lyn...@orthanc.ca wrote: From: Lyndon Nerenberg On 2012-06-08, at 12:48 PM, Michael Thomas wrote: I'm sorry, my brain doesn't hold that many passwords. Unless you're a savant, neither does yours. So what you're telling me and the rest of the world

Re: Dear Linkedin,

2012-06-08 Thread Paul Graydon
On 06/08/2012 10:22 AM, Michael Thomas wrote: On 06/08/2012 12:56 PM, Paul Graydon wrote: Use a password safe. Simple. Most of them even include secure password generators. That way you only have one password to remember stored in a location you have control over (and is encrypted), and

nanog@nanog.org

2012-06-08 Thread Paul Graydon
In my case I rely on Password Safe (http://passwordsafe.sourceforge.net/), Password Gorilla (https://github.com/zdia/gorilla/wiki/) and Dropbox. PasswordSafe has android and windows clients. The windows client will work under wine on linux if you really want, but it's a bit of a pain. Passwor

nanog@nanog.org

2012-06-08 Thread Paul Graydon
On 06/08/2012 11:07 AM, Andrew Sullivan wrote: On Fri, Jun 08, 2012 at 05:00:14PM -0400, Tyler Haske wrote: KeePass, KeyPassDroid and Dropbox. Yes, of course, I'll just upload all my passwords to a place totally under the control of someone (well, actually, _two_ other ones) else, and then pray

Re: Our first inbound email via IPv6

2012-06-10 Thread Paul Vixie
cting ipv6 spam based on source address. for more information see: http://www.circleid.com/posts/20110607_two_stage_filtering_for_ipv6_electronic_mail/ paul

Re: Our first inbound email via IPv6

2012-06-10 Thread Paul Vixie
so, we'll all need network operators to whitelist the parts of their address spaces that they plan to send e-mail from, so that we can avoid having to blackhole things one /64 at a time. as before: for more information see: http://www.circleid.com/posts/20110607_two_stage_filtering_for_ipv6_electronic_mail/ paul

Re: ROVER routing security - its not enumeration

2012-06-10 Thread Paul Vixie
, arguments from non-operators should and do carry less weight.) -- Paul Vixie KI6YSY

rate limiting (Re: Open DNS Resolver reflection attack Mitigation)

2012-06-10 Thread Paul Vixie
he 15 million open recursives would be good to see fixed. at the moment most attacks are using authority servers, where it's far easier to automatically tell attack flows from non-attack flows. -- Paul Vixie KI6YSY

Re: Patch Management - Windows & RHEL/CentOS based on Date

2012-06-13 Thread Paul Graydon
but I believe that's Windows only. RedHat have Satellite that patches and a whole lot more but that comes at a premium. There is also SpaceWalk from them: http://spacewalk.redhat.com/ that manages RedHat, CentOS and Scientific Linux patching. Paul

Re: Whois data compromised?

2012-06-26 Thread Paul Graydon
owners of SWINGINGCOMMUNITY.COM, BEYONDWHOIS.COM, SHQIPHOST.COM, NASHHOST.NET and UNIMUNDI.COM playing games. Probably a stupid question, but what do they gain by doing such? Paul

F-ckin Leap Seconds, how do they work?

2012-06-30 Thread Paul WALL
Comments? Drive Slow Paul

Re: F-ckin Leap Seconds, how do they work?

2012-06-30 Thread Paul Graydon
On 6/30/2012 3:16 PM, Paul WALL wrote: Comments? Drive Slow Paul Not very well if you have a modern box (RHES/CentOS 6) and Java apps running on them. RHES/CentOS 5 merrily ignored it. Worse, just bouncing the Java stack didn't fix it, it required the box to be rebooted. A siz

Re: FYI Netflix is down

2012-07-02 Thread Paul Graydon
d no back-plane meant they were unable to reconfigure it to route around the problem. Paul

Re: F-ckin Leap Seconds, how do they work?

2012-07-03 Thread Paul Graydon
On 7/3/2012 1:53 PM, Owen DeLong wrote: UTC (and the system clock) should not move backwards, but, rather they repeat second 59. UTC goes 58->59->00 most of the time, but during a leap second, it should go 58->59->59->00). It's not so much going backwards as dropping a chime. If they do that, t

RE: Akamai infrastructure tech

2012-07-13 Thread Paul Stewart
That's unusual... we've gone through hard drive replacements many times and always gotten a detailed email from them before the hard drive arrived Paul -Original Message- From: Robert Glover [mailto:robe...@garlic.com] Sent: July-13-12 2:32 PM To: nanog@nanog.org Subje

LISP vs. IRON vs. BGP (was Re: BGPttH. Neustar can do it, why can't we?)

2012-08-23 Thread Paul Vinciguerra
> Wes Felter > IBM Research - Austin IRON looks interesting. I will look at that in more depth. We provide true multi-homing across providers (usually what we find most people mean when they say BGP) and v6 to the home via LISP. The traffic can be configured for load sharing across li

RE: Level 3 BGP Advertisements

2012-08-29 Thread Paul Vinciguerra
ve provided addressing from your aggregate to your customer and they have indicated that they are multi-homing, you need to preserve their prefix-length in your outbound advertisements, or the redundant provider carries the inbound traffic. Is this also frowned on? To me, this is the multihoming tax we all pay for. Paul

RE: MTU mismatch on one link

2012-08-31 Thread Paul Vinciguerra
You need to raise your MTU above that on the other side and do a ping size sweep. Unlike at Layer-3 when you can use set a DF bit and get back an ICMP error, at Layer-2 when you exceed the far side's MTU, the packets are silently dropped. Paul Vinciguerra CCIE# 10291 120 W Park A

Re: 172.0.0.0/12 has been Allocated

2012-09-02 Thread Paul Bennett
ormous customer base is hungry for it. -- Paul Bennett

RE: Layer2 over Layer3

2012-09-12 Thread Paul Vinciguerra
ASR supports OTV if you can do multicast over L3. Although, you may not need L2 extensions in the end. -Original Message- From: Philip Lavine [mailto:source_ro...@yahoo.com] Sent: Wednesday, September 12, 2012 6:23 PM To: NANOG list Subject: Layer2 over Layer3 To all,   I am trying to

Re: Big Temporary Networks

2012-09-14 Thread Paul Thornton
e actually need from these temporary addresses. Veering slightly off-topic for NANOG, but is this worth taking onto the address policy mailing list ahead of RIPE65 to ensure people who aren't in the WG session are aware of the issue - and can therefore support (or question) any prop

RE: Layer2 over Layer3

2012-09-14 Thread Paul Vinciguerra
Philip, Here is the best reference I know of to address your issue. http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11_493718.html#wp9000281 From: Philip Lavine [mailto:source_ro...@yahoo.com] Sent: Friday, September 14, 2012 6:06 PM To: David Swafford; Paul

Re: The Department of Work and Pensions, UK has an entire /8

2012-09-18 Thread Paul Thornton
that the addresses are not unused. Not announced != Not used. Paul.

RE: IPv4 address length technical design

2012-10-07 Thread Paul Vinciguerra
> > Ok, then let's take a step back, perhaps not permanently, and say DNS > resolution is only really useful for routers with more than just a > single default external route. > > So DNS could be reduced to an inter-router only protocol, similar to > BGP in some sense. LISP DDT uses a lookup

Issues encountered with assigning .0 and .255 as usable addresses?

2012-10-22 Thread Paul Zugnoni
Curious whether it's commonplace to find systems that automatically regard .0 and .255 IP addresses (ipv4) as src/dst in packets as traffic that should be considered invalid. When you have a pool of assignable addresses, you should expect to see x.x.x.0 and x.x.x.255 in passing traffic (ie. VIP

Re: Network scan tool/appliance horror stories

2012-10-29 Thread Paul Thornton
ccess then invite them to scan the LAN and see if said machines are picked up. My experience of these things a year or two ago was that most of these companies thought everyone had an internal flat IPv4 network in RFC1918 space and that was that. YMMV of course. Paul. -- Paul Thornton

Re: Richard Bennett, NANOG posting, and Integrity

2014-07-27 Thread Paul WALL
right now, right? Drive Slow, Paul Wall

Re: Richard Bennett, NANOG posting, and Integrity

2014-07-28 Thread Paul WALL
funding him and AEI. Call it whatever you want, I think "lobbyist" is the best word choice. Drive Slow, Paul Wall On Mon, Jul 28, 2014 at 7:12 AM, mcfbbqroast . wrote: > Wait, I'm confused? > > Of the ISPs can't handle 5mbps of traffic when a customer wants to watch

Re: Many players make up application performance (was Re: Richard Bennett, NANOG posting, and Integrity)

2014-07-29 Thread Paul WALL
It is common courtesy around these parts to not libel your customers, especially when they're paying you lots of money and making up 30% of your incoming traffic. That you're posting in "hypotheticals" does not mask your true messaging. Drive Slow, Paul Wall On Tue, Jul

Re: Many players make up application performance (was Re: Richard Bennett, NANOG posting, and Integrity)

2014-07-29 Thread Paul WALL
? This question comes up about once a month, absent any good solutions, so insight would be appreciated. Drive Slow, Paul Wall On Tue, Jul 29, 2014 at 5:25 PM, McElearney, Kevin wrote: > > > On 7/29/14, 12:45 PM, "valdis.kletni...@vt.edu" > wrote: > >>On

Re: EBAY reachability issues

2014-07-31 Thread Paul S.
Appears to be loading just fine from here in Sg. On Jul 31, 2014 11:21 PM, "Mike A" wrote: > On Thu, Jul 31, 2014 at 02:38:13PM +, Drew Weaver wrote: > > We've been seeing some issues with getting to Ebay this morning, only a > very select few of their GSLB sites in DNS seem to be responding

Re: [j-nsp] Viability of EX4300 in a primarily l3 environment?

2014-08-06 Thread Paul S.
a case oppened in jtac to try solve it Sent from my iPhone On 06/08/2014, at 07:15, Sebastian Wiesinger wrote: * Paul S. [2014-08-02 05:18]: Hi folks, We're considering the EX4300 to run routing (l3) for a few hypervisors of ours that are connected via l2. Primarily interested due to t

Re: [j-nsp] Viability of EX4300 in a primarily l3 environment?

2014-08-06 Thread Paul S.
On 8/6/2014 午後 09:13, Vincent Bernat wrote: ❦ 6 août 2014 20:54 +0900, "Paul S." : Correct me if I'm wrong, but doesn't OSPF require the AFL license anyway to be 'legitly' ran? OSPF does not need a feature license on those models (it is needed on EX2200). AF

Re: Dealing with abuse complaints to non-existent contacts

2014-08-10 Thread Paul S.
It would appear you've done your part in trying to reach out (and subsequently failed), so the next step to go is dropping all traffic from it. Nothing wrong with trying to protect your own customer from people who cannot be bothered to do their own due diligence. On 8/11/2014 午前 12:19, Gabr

Re: So Philip Smith / Geoff Huston's CIDR report becomes worth a good hard look today

2014-08-13 Thread Paul Ferguson
d Tony Li from several years ago which illustrated this, but cannot find a reference at the moment - -- Paul Ferguson VP Threat Intelligence, IID PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC

Re: So Philip Smith / Geoff Huston's CIDR report becomes worth a good hard look today

2014-08-13 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Apologies for replying to my own post, but... below: On 8/13/2014 7:05 AM, Paul Ferguson wrote: > On 8/13/2014 6:52 AM, Warren Kumari wrote: > >> Am I overly cynical, or does this all work out perfectly for >> some vendors? I

Re: So Philip Smith / Geoff Huston's CIDR report becomes worth a good hard look today

2014-08-13 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 8/13/2014 11:09 AM, joel jaeggli wrote: > On 8/13/14 8:55 AM, Paul Ferguson wrote: >> Apologies for replying to my own post, but... below: >> >> On 8/13/2014 7:05 AM, Paul Ferguson wrote: >> >> >>

<    1   2   3   4   5   6   7   8   9   10   >