Re: Prefix hijacking, how to prevent and fix currently

2014-08-29 Thread Paul WALL
rown-up with real work to do. Drive slow, Paul

Re: The Next Big Thing: Named-Data Networking

2014-09-05 Thread Paul Ferguson
it ain't gonna replace TCP/IP, DNS, or IP addresses anytime soon. :-) - - ferg - -- Paul Ferguson VP Threat Intelligence, IID PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (MingW32)

Re: The Next Big Thing: Named-Data Networking

2014-09-05 Thread Paul Ferguson
x27;em, right? :-) > Compare & contrast: There is still large-scale resistance (for lack of a better term) to IPv6 deployment, so what chance does deployment of Named Data-Networking stand? :-) - - ferg > On September 5, 2014 10:27:18 AM EDT, Paul Ferguson > wrote: > > On 9/

Re: The Next Big Thing: Named-Data Networking

2014-09-05 Thread Paul Ferguson
ning DNS >>> /and Google/ into IP in place of, y'know, IP addresses. ] >>> >>> Cheers, -- jra -- Jay R. Ashworth Baylink >>> j...@baylink.com Designer The Things I Think >>> RFC 2100 Ashworth & Associates

Re: The Next Big Thing: Named-Data Networking

2014-09-05 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 9/5/2014 12:49 PM, valdis.kletni...@vt.edu wrote: > On Fri, 05 Sep 2014 12:38:13 -0700, Paul Ferguson said: >> The principle questions still stand unanswered: >> >> What is the motivation for this? What do you gain? Does it

Fwd: Interesting problems with using IPv6

2014-09-07 Thread Paul Ferguson
Sun, 7 Sep 2014 09:28:45 + From: l.w...@surrey.ac.uk To: i...@ietf.org http://blog.bimajority.org/2014/09/05/the-network-nightmare-that-ate-my-week/ Interesting scaling concerns... Lloyd Wood http://about.me/lloydwood [end] - -- Paul Ferguson VP Threat Intelligence, IID PGP Pub

Re: Here comes iOS 8...

2014-09-17 Thread Paul S.
Later, I think it requires 5.7G of free space on the device -- but the download is not that big. On 9/18/2014 午前 11:04, JoeSox wrote: Grant, Do you have a reference? Someone just told me it is more around 5GB. -- Later, Joe On Wed, Sep 17, 2014 at 10:31 AM, Grant Ridder wrote: For those

Re: cogent update suppression, and routing loops

2014-10-02 Thread Paul S.
First time I'm seeing it, and I've been a Cogent client for quite a while. Have you tried getting in touch with their NOC yet? They're one of the most responsive in the industry. On 10/3/2014 午前 01:03, ryanL wrote: hi. relatively new cogent customer. is what i've stated in my subject line kin

Re: IPv6 Default Allocation - What size allocation are you giving out

2014-10-08 Thread Paul S.
I'm allocating /64s in /56 boundaries per customer. Allows me to give the client more should they need it without fuss. On 10/9/2014 午前 10:18, Erik Sundberg wrote: I am planning out our IPv6 deployment right now and I am trying to figure out our default allocation for customer LAN blocks. So w

Re: IPv6 Default Allocation - What size allocation are you giving out

2014-10-09 Thread Paul S.
I've been using /36s per location, but hm -- great question. How easy is it to get a larger allocation anyway? In RIPE, i.e: you just ask and get a /29 with no questions asked. On 10/9/2014 午後 11:31, Faisal Imtiaz wrote: Selection of a default prefix is easy. Here are the steps. 4. Keeping

Re: NTT high packet loss from US and BR to AU?

2014-10-22 Thread Paul S.
Does it actually persist to your destination? Loss in transit paths is simply ICMP de-prioritization unless it's losing packets all the way to the last hop. On 10/23/2014 午後 01:18, Javier J wrote: Anyone else notice this? Or is this an AWS issue in APAC that hasn't been reported yet? AU-NY(

Re: Reporting DDOS reflection attacks

2014-11-07 Thread Paul Bennett
e, directed to abuse@ the main domain for that ISP. http://www.ietf.org/rfc/rfc5070.txt http://www.ietf.org/rfc/rfc5965.txt -- Paul W Bennett

Re: DDOS, IDS, RTBH, and Rate limiting

2014-11-09 Thread Paul S.
I've used the first one, and hacked on the second. WANGuard, when deployed properly, works amazingly well. ddosmon is only useful if you have netflow v5 flows (or sflow that can get converted to nfv5), but also works well when coupled with exabgp / openbgpd. I added some per ip limiting / ex

Re: Equinix Virginia - Ethernet OOB suggestions

2014-11-10 Thread Paul S.
I'd be doubtful if anyone will feel like offering a /23 with OOB as justification these days, sadly. Good luck nonetheless. On 11/10/2014 午後 11:00, Ruairi Carroll wrote: Hey, VPN setup is not really a viable option (for us) in this scenario. Honestly, I'd prefer to just call it done already a

Contact at internode / iiNet (AS4739)?

2014-11-10 Thread Paul S.
Hey, If anyone from the routing / peering team of Internode / iiNet happens to frequent this list, could you reach me off-list? I've been having routing problems with my peering session to you for a few months already, and haven't been able to get a response off the helpdesk. Thanks, and s

Re: Cisco CCNA Training

2014-11-11 Thread Paul S.
GNS3, while unofficial, is what I'd recommend for that. On 11/11/2014 午後 11:59, Colton Conor wrote: Does CBT or any of these other subscription based learning courses include a Cisco IOS simulator so we don't have to buy a Cisco lab or equipment? On Sun, Nov 2, 2014 at 7:36 PM, Scott Morris wr

Re: Zayo opinions

2014-11-12 Thread Paul S.
Agree, cuustomer service is really not upto par these days. All my other carriers do better from that standpoint, but the network performance isn't all that bad. Just pray that nothing breaks... On 11/13/2014 午前 08:22, Christopher Nielsen wrote: We had circuits with Abovenet in San Jose and

Re: Route Science

2014-11-16 Thread Paul S.
There's another option called the Noction IRP. I've been told that it's a cheaper FCP replacement. On 11/17/2014 午前 12:42, Phil Bedard wrote: Didn't Avaya completely drop the old Route Science line at this point? Internap still sells their FCP appliance which does similar things and of course

Re: abuse reporting tools

2014-11-19 Thread Paul Bennett
ly towards single badguy / single incident). With that power comes greater complexity, though. I'll have to look at Net::Abuse::Utils since that's the first I've ever heard of it and I don't know what it can do. If it can't make IODEF, I'm a capable Perl programmer, so I can take a look, but no promises. -- Paul W Bennett

Re: abuse reporting tools

2014-11-19 Thread Paul Bennett
> Don't forget IETF RFC 5970 "IODEF" Sorry, that's 5070, not 5970. Slip of the finger. -- Paul W Bennett

Re: abuse reporting tools

2014-11-20 Thread Paul Bennett
work abuse should be *EASY*. Say it with me ... *EASY*. No promises, at this stage, but I thought some of you would like to know that this project is at least in the pre-planning stages. -- Paul W Bennett

Re: DDOS, IDS, RTBH, and Rate limiting

2014-11-20 Thread Paul S.
WANguard from andrisoft has worked well on this for us. It supports flow telemetry and mirrored ports both (We use flows strictly), and does what it says it does. No complaints. On 11/21/2014 午後 12:00, Robert Duffy wrote: I've been using NTOP for couple of years. I'm mostly looking for some

Transit, Exchange Point Agreements, and Acceptable Use?

2014-11-21 Thread Paul Ferguson
ticle is here: http://www.channel4.com/news/spy-cable-revealed-how-telecoms-firm-worked-with-gchq My question is this: Do willful actions such as these violate peering, transit, and/or exchange agreements in any way? Thanks, - - ferg - -- Paul Ferguson VP Threat Intelligence, IID PGP Public Ke

Re: Transit, Exchange Point Agreements, and Acceptable Use?

2014-11-21 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/21/2014 7:07 AM, Daniel Corbe wrote: > > Paul Ferguson writes: > >> I'll apologize up front if this offends anyone's sensitivities as >> to what is relevant for list conversation... but one sentence in &g

Re: Transit, Exchange Point Agreements, and Acceptable Use?

2014-11-21 Thread Paul Ferguson
, - - ferg > Dave > > > -Original Message- From: NANOG > [mailto:nanog-boun...@nanog.org] On Behalf Of Paul Ferguson Sent: > Friday, November 21, 2014 7:59 AM To: NANOG Subject: Transit, > Exchange Point Agreements, and Acceptable Use? > > I'll apologize

Re: abuse reporting tools

2014-11-25 Thread Paul Bennett
On Thu, Nov 20, 2014 at 6:44 AM, Paul Bennett wrote: > Inspired by this thread (and other recent similar ones about how hard > it is to report abuse in the right format to the right people), I've > decided I'm going to start work on [a] Perl module Well ... preliminary grou

Re: Anyone else having trouble reaching thepiratebay.se? AS39138

2014-11-26 Thread Paul S.
No problem here in Los Angeles either, but seeing a lone route through Atrato only. flags destination gateway lpref med aspath origin *>194.71.107.0/24 <> 100 0 3491 5580 39138 22351 2.207 51040 i * 194.71.107.0/24 <> 100 0 174 5580 39138

Re: Low-numbered ASes being hijacked? [Re: BGP Update Report]

2014-11-30 Thread Paul S.
Do these people never check what exactly they end up originating outbound due to a config change, if that's really the case? On 11/30/2014 午後 11:24, Pierfrancesco Caci wrote: "Simon" == Simon Leinen writes: Simon> Some suspicious paths I'm seeing right now: Simon> 133439 5 S

Re: Cisco CCNA Training (Udemy Discounted Training)

2014-12-04 Thread Paul S.
Share them anyway? Juniper's certs have enough demand as well :) On 12/5/2014 午前 05:13, Eric Litvin wrote: have some juniper but not cisco. On Thu, Dec 4, 2014 at 12:08 PM, Bacon Zombie wrote: Anybody got codes valid for December? On 14 Nov 2014 18:07, "Wakefield, Thad M." wrote: Since th

Re: ASN Domain for rDNS

2014-12-10 Thread Paul S.
Just been using the .net version of our company domain for router/interface IPs. Also own the AS.com/net and .as though, primarily to not get squatted on. On 12/10/2014 午前 09:30, Keefe John wrote: I've been seeing more and more carriers(and even small ISPs) using as.net as their domain f

Re: Carrier-grade DDoS Attack mitigation appliance

2014-12-10 Thread Paul S.
Tons of such companies exist; BlackLotus/Staminus/Prolexic/Voxility to name a few within the US. Service provided is usually based on proprietary algorithms that may or may not do what you want it to do, though. On 12/11/2014 10:39 AM, Javier J wrote: What about DDOS protection as a service?

Subject: Call for Presentations - DNS-OARC Spring Workshop, May 2015

2014-12-18 Thread Paul Ebersman
Apologies if you are on multiple lists and see multiple copies of this email. - The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mit

Re: DDOS solution recommendation

2015-01-10 Thread Paul S.
While it indeed is true that attacks up to 600 gbit/s (If OVH and CloudFlare's data is to be believed) have been known to happen in the wild, it's very unlikely that you need to mitigate anything close. The average attack is usually around the 10g mark (That too barely) -- so even solutions th

Re: DDOS solution recommendation

2015-01-10 Thread Paul S.
ur network. Hibernia Networks blocks them for us. Ammar On 11 Jan 2015, at 8:37 am, Paul S. wrote: While it indeed is true that attacks up to 600 gbit/s (If OVH and CloudFlare's data is to be believed) have been known to happen in the wild, it's very unlikely that you need to mitigate anyth

Re: DDOS solution recommendation

2015-01-10 Thread Paul S.
Very true. Last year's Atrato outages in NY come to mind on this one. On 1/11/2015 午後 01:51, Roland Dobbins wrote: On Jan 11, 2015, at 11:37 AM, Paul S. wrote: Obviously, concerns are different if you're an enterprise that's a DDoS magnet -- but for general service pr

Re: DDOS solution recommendation

2015-01-11 Thread Paul S.
There's the Cisco xRV too, should be decent for playing around with. On 1/12/2015 午前 12:08, Dave Bell wrote: Maybe try the Cisco CSR1000v. In the trial mode it won't give you a decent throughput, but should have all features enabled. On 11 January 2015 at 15:02, Ammar Zuberi wrote: I’m stuck

Re: scaling linux-based router hardware recommendations

2015-01-26 Thread Paul S.
Like Mike mentioned, the feature list in RouterOS is nothing short of impressive -- problem is that pretty much everything in there is inherently buggy. That and one hell of a painful syntax-schema to work with too. On 1/27/2015 午前 10:57, Tony Wicks wrote: And the solution to this issue is -

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Paul S.
Anyone aware of any dpdk enabled solutions in the software routing space that doesn't cost an arm and a leg? vMX certainly does. On 1/27/2015 午後 04:33, Pavel Odintsov wrote: Hello! Looks like somebody want to build Linux soft router!) Nice idea for routing 10-30 GBps. I route about 5+ Gbps in

Re: scaling linux-based router hardware recommendations

2015-01-28 Thread Paul S.
That's the problem though. Everyone has presentations for the most part, very few actual tools that end users can just use exist. On 1/28/2015 午後 08:02, Robert Bays wrote: On Jan 27, 2015, at 8:31 AM, Jim Shankland wrote: My expertise, such as it ever was, is a bit stale at this point, and

Re: Recommended wireless AP for 400 users office

2015-01-29 Thread Paul Nash
groups of users to different VLANs (all on a single SSID), just different username/password to connect. Signal penetration is the best that I have ever seen, and makes the Cisco Aironet enterprise stuff look really really silly. paul > On Jan 29, 2015, at 4:46 AM, Eduardo Schoed

RE: cable modem firmware upgrade

2015-01-29 Thread Paul Stewart
That has been my experience as well (only from the RF side) and I would believe this was a design choice. The ISP usually wants to keep control over the firmware versions of the CM for various technical/support reasons versus having consumers mess with the firmware. Paul On Wednesday, January

RE: Recommended wireless AP for 400 users office

2015-01-29 Thread Paul Stewart
idea to use UBNT but it definitely turned me off of their product after digging into their gear... Again as someone pointed out, for residential and perhaps SOHO applications it can probably work well - and in my opinion it's priced for that market. Paul -Original Message- F

Re: Recommended wireless AP for 400 users office

2015-01-29 Thread Paul Nash
and segregation fairly trivial (for non-trivial values of trivial :-)). paul > On Jan 29, 2015, at 11:18 AM, Tyler Mills wrote: > > Most of the issues are related to firmware. Most of my UBNT experience was > with the UAP-Pro and the UAP-AC, and it wasn't a good experience. &

RE: Recommended wireless AP for 400 users office

2015-01-29 Thread Paul Stewart
It was all users getting randomly disconnected ... the AP's stayed online but the traffic would completely halt for 15-30 seconds at a time. Their association with the AP would stay in tact .... Paul -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of

RE: Recommended wireless AP for 400 users office

2015-01-29 Thread Paul Stewart
Open – it was just for a trade show setting .. few years ago …. Thanks, Paul From: Mike Lyon [mailto:mike.l...@gmail.com] Sent: Thursday, January 29, 2015 12:07 PM To: Paul Stewart Cc: Mike Hammett; NANOG Subject: RE: Recommended wireless AP for 400 users office Just curious, were

RE: cable modem firmware upgrade

2015-01-30 Thread Paul Stewart
] Sent: Friday, January 30, 2015 6:49 AM To: Paul Stewart Cc: 'Nathan Anderson'; 'A MEKKAOUI'; nanog@nanog.org Subject: Re: cable modem firmware upgrade "Paul Stewart" writes: > That has been my experience as well (only from the RF side) and I would > believe

Re: Recommended wireless AP for 400 users office

2015-01-30 Thread Paul Nash
Cisco. Some of the Cisco folk that I know think that that is a point in favour of Cisco, as it adds to job security :-) paul > On Jan 29, 2015, at 12:02 PM, Edwards, Jermaine wrote: > > Ruckus should work fine for you. You need to have a controller and need a > good RF

Re: Recommended wireless AP for 400 users office

2015-02-01 Thread Paul Nash
anything ever again. paul > On Feb 1, 2015, at 9:41 AM, Dennis Bohn wrote: > > We are substantially larger and use Aruba, but I am wondering why no one > has mentioned Meraki (now cisco-meraki). We tried one of their give-away > aps and it seemed fine, with the 'cl

Re: Verizon FiOS contact?

2015-02-03 Thread Paul S.
isn't pnap a direct vz customer either way? I know it's in the DFW blend which we have, not sure about NY. It shouldn't be out of their ability to complain. On 2/4/2015 午後 01:35, Christopher Morrow wrote: On Tue, Feb 3, 2015 at 11:02 PM, Charles Gagnon wrote: Anyone from VZ FiOS network on t

Re: Recommended wireless AP for 400 users office

2015-02-04 Thread Paul Nash
ing INSIDE your network. Not just your WAN traffic, which would be bad enough. paul

Re: Recommended wireless AP for 400 users office

2015-02-04 Thread Paul Nash
contents I can see ….” With Ruckus (or almost any other) gear, I have to either open up a hole through my firewall or grab the packet traces and send them to the tech folk. They don’t have uncontrolled access to my internal traffic out of the box. paul > On Feb 4, 2015, at 8:31 AM,

Re: Input Regarding Cogent and NTT

2015-02-05 Thread Paul S.
As a current Cogent customer, my experience on the service side of things is similar. Very responsive (I called on a Sunday and had someone with good enough clue + router access pick up instantly.) NOC is competent, and my sales guys (I've had two so far) are not pushy at all. I don't have a

Re: Synful Knock questions...

2015-09-15 Thread Paul Ferguson
n't want to take the time to check. You would need to capture > the MD5 from a known good image, and watch for changes. > - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2 -BEGIN PGP SIGNATURE- Ver

Re: IX Peering - BGP Session Filtering Best Practice

2015-09-21 Thread Paul WALL
You might want to check out Console by IIX (www.iix.net). They are re-shaping peering automation with SDN. Drive Slow, Paul WALL On 9/21/15, Erik Sundberg wrote: > Just wondering how far everyone is going on filtering BGP sessions when > peering with other content providers and carrier

Re: Prefix hijacking by AS20115

2015-09-28 Thread Paul S.
+1, this is the only sensible advice here. NSPs actually do seem to care about not letting things like these happen. On 2015/09/29 01:24 PM, Hank Nussbacher wrote: At 23:11 28/09/2015 -0400, Josh Luthman wrote: Start announcing their prefixes? Contact the upstreams of AS20115 - Cogent, Leve

Re: Quick Update on the North American BCOP Efforts

2015-09-30 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 9/30/2015 8:25 PM, Jay Ashworth wrote: > Guessing no one cares. Darwinism. - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2 -BEGIN PGP SIGNATURE- Vers

Re: IPv6 Irony.

2015-10-13 Thread Paul S.
Anyone in a network administrator position struggling with IPv6 (and not willing to fix that out of their own initiative) has no business running any network. You should hire better staff. On 10/13/2015 06:56 PM, Max Tulyev wrote: On our network, we had to spent times more money in people tha

Re: Packetfront/Waystream gear

2015-10-15 Thread Paul S.
Their products seem to be named 'MPC' or 'ASR,' reminds me of J and C respectively. Very unique way of naming things, I must say. On 10/15/2015 06:08 AM, rdrake wrote: Does anyone have experience running Packetfront hardware in a production network? We've looked at a few and they seem to be p

Fw: new message

2015-10-25 Thread Paul Rolland
Hey! New message, please read <http://throughaglassdarkly.net/wind.php?y> Paul Rolland

Fw: new message

2015-10-25 Thread Paul Rolland
Hey! New message, please read <http://funezy.com/made.php?hwx> Paul Rolland

Fw: new message

2015-10-25 Thread Paul Rolland
Hey! New message, please read <http://takestockinyourlife.com/youth.php?n7pb> Paul Rolland

Fw: new message

2015-10-25 Thread Paul Ferguson
Hey! New message, please read <http://bambooco.ru/life.php?gasg> Paul Ferguson

Fw: new message

2015-10-25 Thread Paul Stewart
Hey! New message, please read <http://africancichlidphotos.com/behind.php?wvwqc> Paul Stewart

Can someone do something about this "Fw: New message" spam?

2015-10-26 Thread Paul S.
Hi, Can someone from the moderator team take a look? This has been going on for a while.

Re: configuration sanity check

2015-10-29 Thread Paul Ferguson
Be careful in your search for RATs -- in the security world it also stands for Remote Access Trojan. :-) - ferg On October 29, 2015 3:06:23 PM EDT, Jesse McGraw wrote: >Historically there was RAT (Router Audit Tool). You'll have to do some > >googling to see where it's hosted now and whether

Re: Opinions on Arista 7280?

2015-11-24 Thread Paul S.
Tom, Could you expand further on this? On 11/25/2015 07:29 AM, Tom Hill wrote: And in relation to Brocade: I'd feel very uncomfortable throwing any *new* money at MLXe, CER or CES. Strategy for those families seems to have fallen off of a cliff.

SevOne Monitoring

2015-11-25 Thread Paul Stewart
Hey folks. Looking for feedback from actual customers on SevOne for network monitoring . anyone using them and willing to share thoughts online/offline? They have an appealing system for network monitoring and considering it as a replacement to Solarwinds. Cheers, Paul

Re: IPv6 Cogent vs Hurricane Electric

2015-12-04 Thread Paul WALL
ere peering doesn't happen. going to nanog and yelling about peering by saying that you're a victim isn't a mutual benefit last i checked. their lack of peering doesn't demand another moment of our attention. choose wisely. Drive slow, Paul WALL

Re: IPv6 Cogent vs Hurricane Electric

2015-12-04 Thread Paul S.
It is worth noting that HE indeed provides the full view, it's the other side that has an issue. (Since HE isn't really a tier 1, their transit relationships with Telia and other carriers "save" them) Cogent -> HE dies with unreachable on the first hop though, and that's an issue for Cogent

Re: IPv6 Cogent vs Hurricane Electric

2015-12-04 Thread Paul S.
11:43 AM, Paul S. wrote: It is worth noting that HE indeed provides the full view, it's the other side that has an issue. (Since HE isn't really a tier 1, their transit relationships with Telia and other carriers "save" them) Cogent -> HE dies with unreachable on the fi

Re: Is RouteViews dead? Is there any alternatives?

2015-12-08 Thread Paul S.
RIPE stats also takes a feed similarly. On 12/9/2015 01:24 AM, Kurt Kraut via NANOG wrote: Hi, For the past couple of months I've been attempting to add new Autonomous Systems to the RouteViews project and got no response. Talking to other AS in my area, I wasn't able to find no new BGP operat

Re: Opinions on Cologix data centers?

2015-12-15 Thread Paul S.
I recommend them for everything other than the quality of their remote hands. They could do with some improvements in this department. We have space at Cologix Dallas (within Infomart), and it's all fine. We run our own ASN too though, so no idea on the bandwidth side of things. On 12/15/2015

Re: http://rtros.nop.hu/

2016-01-01 Thread Paul S.
I'm not sure if these URLs are supposed to resolve `-` On 1/1/2016 05:51 PM, mate csaba wrote: On 01/01/2016 09:40 AM, Randy Bush wrote: opinions? yep. do not click on strange urls. never. and disable flash! and activate firewall. this one http://fun.nop.hu/cisco-asa.jpg or this one http:

RE: [NANOG] IPv4 subnets for lease?

2016-01-06 Thread Paul Stewart
Definitely there is - don't have any names handy but there were a few companies at NANOG Montreal that chased me down re: leasing IP space (and of course selling). Paul -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Javier J Sent: Tuesday, January 5,

Re: ICYMI: FBI looking into LA fiber cuts, Super Bowl

2016-01-19 Thread Paul Ferguson
r "normal" network issues >> then we would of heard of injuries before. > > I think that line refers to drone operators ... > - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B

Re: Equipment Supporting 2.5gbps and 5gbps

2016-01-30 Thread Paul S.
>> I would kill for a 24-port 10GbE Juniper switch for ~$2,500. You can't even get a 24-port 1GbE for that. EX4200s are abundant for much less in Ebay (for the 24port 1g requirement). In the 10G space though, indeed, Juniper is expensive. On 1/30/2016 05:03 PM, Jonas Bjork wrote: Dear Mr. Car

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Paul Thornton
ortunately it is hard to simultaneously allow legitimate unauthenticated use without allowing abusive route objects. Which is why there is a lot of head-scratching here; I don't have an answer to that one. Paul.

Verizon Fios, WashDC gateway problem

2016-02-17 Thread Paul Paukstelis
Apologies for a post as a non-expert, but it was suggested that I see if any Verizon techs are reading here and to solicit opinions on fixing a peculiar problem. I noticed about a month ago that all upload traffic from my home router (Fios) to a specific work machine was extremely slow. I firs

Re: Verizon Fios, WashDC gateway problem

2016-02-17 Thread Paul Paukstelis
Tue, Feb 16, 2016 at 8:54 PM, Paul Paukstelis mailto:shocksofmig...@gmail.com>> wrote: Apologies for a post as a non-expert, but it was suggested that I see if any Verizon techs are reading here and to solicit opinions on fixing a peculiar problem. I noticed about a mon

Re: google search threshold

2016-02-29 Thread Paul S.
DO's SG range is allocated out of a single /64 (I think?) and Google basically asks for captcha on every single request over IPv6. :( We're using it as a corporate vpn. On 3/1/2016 01:49 AM, Keenan Tims wrote: FWIW I have seen the captchas more often on IPv6 both from home and the office than

RE: Citrix Sales Reps?

2016-03-23 Thread Paul Stewart
You too ? I gave up ... after calling their local offices, their toll free number, emails, phone calls, etc. -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Scott Fisher Sent: Tuesday, March 22, 2016 1:34 PM To: NANOG list Subject: Citrix Sales Reps? I

Re: Getting hit hard by CHINANET

2015-03-17 Thread Paul S.
All 6 of my upstreams (Most of them tier 1s, except Internap which is a tier 3?) have cooperated just fine in blocking problematic IPs if needed in emergencies. I did not have to argue. On 3/18/2015 午後 02:26, Mark Tinka wrote: On 18/Mar/15 04:13, Roland Dobbins wrote: Also, asking your u

Re: Getting hit hard by CHINANET

2015-03-17 Thread Paul S.
On 3/18/2015 午後 02:44, Mark Tinka wrote: On 18/Mar/15 07:31, Paul S. wrote: All 6 of my upstreams (Most of them tier 1s, except Internap which is a tier 3?) have cooperated just fine in blocking problematic IPs if needed in emergencies. In the data plane for the link facing you, or through

Re: Getting hit hard by CHINANET

2015-03-23 Thread Paul S.
+1, I've had good luck with this as well. My experiences pretty much mirror yours, NOC says no, had to ask my SE to take care of it. Didn't have any issues after. On 3/23/2015 午後 11:55, Ca By wrote: On Sun, Mar 23, 2014 at 3:43 AM, Justin M. Streiner wrote: On Mon, 23 Mar 2015, Ca By wrote:

Re: Prefix hijack by INDOSAT AS4795 / AS4761

2015-03-26 Thread Paul S.
Same here. These Indosat guys can't seem to catch a break =/ On 3/26/2015 午後 11:43, Peter Rocca wrote: We just received a similar alert from bgpmon - part of 108.168.0.0/17 is being advertised as /20's - although we're still listed as the origin. We are 40788. 108.168.64.0/20 4795 4795 4761 9

Re: BGP offloading (fixing legacy router BGP scalability issues)

2015-04-02 Thread Paul S.
Do you have data on '100% of the traffic' being bad? I happen to have a large Chinese clientbase, and this is not the case on my network. On 4/2/2015 午後 04:35, Colin Johnston wrote: or ignore/block russia and north korea and china network blocks takes away 5% of network ranges for memory head

Re: BGP offloading (fixing legacy router BGP scalability issues)

2015-04-02 Thread Paul S.
: On 2 Apr 2015, at 08:40, Paul S. wrote: Do you have data on '100% of the traffic' being bad? as a example anything in 163data.com.cn is bad Colin I happen to have a large Chinese clientbase, and this is not the case on my network. On 4/2/2015 午後 04:35, Colin Johnston wrote:

Re: BGP offloading (fixing legacy router BGP scalability issues)

2015-04-02 Thread Paul S.
David Barroso's (Spotify) SDN Internet Router [0] comes to mind. 0 - https://github.com/dbarrosop/sir On 4/2/2015 午後 07:47, Baldur Norddahl wrote: Filtering countries is a bad idea, but it is probably possible to create filters so 99% of your actual traffic is handled by a relatively small subs

RE: Small IX IP Blocks

2015-04-05 Thread Paul Stewart
contacts of whom many of them didn't know the mask had changed in the first place. Paul -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Bill Woodcock Sent: Saturday, April 4, 2015 10:36 PM To: Mike Hammett Cc: NANOG list Subject: Re: Small IX IP Blocks >

Re:

2015-05-07 Thread Paul Ferguson
there's something wiggy and everyone is being treated as a DMARC > encumbered sender. > > I'm on a gazillion lists, and this is the only one which seems to have this particularly annoying problem. - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprin

Re:

2015-05-07 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 5/7/2015 7:23 PM, Paul Ferguson wrote: > I'm on a gazillion lists, and this is the only one which seems to > have this particularly annoying problem. And fixed! Apologies for the noise. - - ferg - -- Paul Ferguson PGP Pu

Recommended 10GE ISCSI SAN switch

2015-05-12 Thread Paul S.
Hi guys, We're shortly going to be getting some 10G SANs, and I was wondering what people were using as SAN switches for 10G SANs. It is my understanding that low buffer sizes make most 'normal' 10G ethernet switches unsuitable for the job. We're pretty much an exclusive Juniper shop, but a

nanog@nanog.org

2015-05-12 Thread Paul Lam
e in So Cal. fuel YOUTH ENGAGEMENT Paul Lam | Network Administrator T: +1(613) 224-6738 x257 | M: www.fuelyouth.com<http://www.fuelyouth.com>

nanog@nanog.org

2015-05-12 Thread Paul Lam
I've observed past behaviour of image and page content "optimization" ‎(i.e. > minifying, recompression) that causes problems for a site over this type of > connection when using plaintext. > > M. > > Original Message > From: Paul Lam > Sent: Tues

Re: Route Optimization Products

2015-05-15 Thread Paul S.
Problem in this space is, none of the products offered are genuinely affordable. When your route optimization software costs more monthly than yet another link to yet another tier one provider... `-` On 5/16/2015 午前 12:27, Rafael Possamai wrote: Internap also has a product called MIRO, altho

Call for Presentations - DNS-OARC Fall Workshop, Oct 2015

2015-06-24 Thread Paul Ebersman
Apologies if you are on multiple lists and see multiple copies of this email. - The next DNS-OARC Fall Workshop will take place in Montreal on Oct 3rd and 4th, the weekend before NANOG65. DNS-OARC is requesting proposals for presentations, with a preference for DNSSEC work. We are

Today's Supreme Court ruling

2015-06-26 Thread Paul WALL
I hear the Supreme Court just ruled IPv6 legal in all states... What does this mean for the backward people who have been steadily resisting deploying the current version of the Internet Protocol? Drive Slow, Paul

RE: World's Fastest Internet™ in Canadaland

2015-06-26 Thread Paul Stewart
fore they fully deployed). The interesting part was that the development consisted of 4400 active users the last time I heard but the bandwidth to upstream provider was still only a single GigE and was not hitting serious saturation levels most of the time. Paul -Original Message--

Re: United Airlines is Down (!) due to network connectivity problems

2015-07-08 Thread Paul Ferguson
>> >> >> - -- >> TTFN, patrick >> >>> On Jul 08, 2015, at 10:06 , Marshall Eubanks >>> wrote: >>> >>> http://www.reuters.com/article/2015/07/08/us-ual-flights-idUSKCN0PI1 IX20150708 >>> >>> >>>

Re: United Airlines is Down (!) due to network connectivity problems

2015-07-08 Thread Paul Ferguson
tivity for various applications. We fixed the router." https://twitter.com/barronstechblog/status/618816643821633536 - - ferg On 7/8/2015 9:36 AM, Paul Ferguson wrote: > All completely coincidental networking issues, not related to > anything malicious. > > - ferg > > &g

<    1   2   3   4   5   6   7   8   9   10   >