Re: United Airlines is Down (!) due to network connectivity problems

2015-07-08 Thread Paul Ferguson
tems. This is a > classic fault in amateur investigation: an early opinion will lead > you into confirmation bias, irrationally accepting data agreeing > with your opinions and rejecting that disproving it. > > -mel beckman > >> On Jul 8, 2015, at 10:07 AM, Paul Ferguson &

Re: Dual stack IPv6 for IPv4 depletion

2015-07-08 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 7/8/2015 6:51 PM, Mel Beckman wrote: > This is where we have to excise our IPv4 "fear of waste" reflex. Excise or exercise? I am partially serious. - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 1

Re: Dual stack IPv6 for IPv4 depletion

2015-07-08 Thread Paul Ferguson
ary > brakes like "/48 sounds too big to me, let's make it 1/256th of > that." > Pop history: "640k should been enough for anyone..." http://archive.wired.com/politics/law/news/1997/01/1484 - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprin

Re: Possible Sudden Uptick in ASA DOS?

2015-07-10 Thread Paul Hoogsteder
- register a CCO account - in ASDM choose Tools > Check for ASA/ASDM Updates - follow the onscreen instructions Paul.

Re: Possible Sudden Uptick in ASA DOS?

2015-07-10 Thread Paul Ferguson
If you are > talking about any other bug please clarify or point me for further > readings, I am still looking for a reaction. > Eddi: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cis co-sa-20141008-asa - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key

Re: BIS re-regulating crypto is on the table...

2015-07-14 Thread Paul Ferguson
15-11642/wassena ar-arrangement-2013-plenary-agreements-implementation-intrusion-and-surv eillance-items > > manning bmann...@karoshi.com PO Box 12317 Marina del Rey, CA > 90295 310.322.8102 > > > > - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C

Re: Dual stack IPv6 for IPv4 depletion

2015-07-15 Thread Paul Ferguson
both feature upgrades and security fixes/enhancements. It is tremendously frustrating. - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2 -BEGIN PGP SIGNATURE- Version: GnuPG v2 iF4EAREIAAYFAlWnA/oACgkQKJasdVTchbJAWAD8Dh

Re: AW: AW: Prefix-Hijack by AS7514

2015-07-16 Thread Paul S.
I let IIJ know too, hopefully they'll filter it soon. On 7/17/2015 午後 03:30, Jürgen Jaritsch wrote: Hi, we also sent them an mail, but their MX is not reachable for us :( best regards Jürgen Jaritsch Head of Network & Infrastructure ANEXIA Internetdienstleistungs GmbH Telefon: +43-5-0556-3

Re: ISP in NYC

2015-07-17 Thread Paul S.
Rather than a peer, it might be an okay idea to try out peering at NYIIX (and if the funds permit to get transport, AMS-IX/DE-CIX). You'll quickly find that peering is *very* useful in Europe, if you have any EU bound traffic at all. On 7/17/2015 午後 04:06, Colin Johnston wrote: good isp's /

Re: Yandex DNS with Sophos antivirus blocking TrendMicro services

2015-07-28 Thread Paul Ferguson
> It will be more efficient, if you report this issue here: > > https://feedback2.yandex.ru/dns/ > > -- wbr, Oleg. > > "Anarchy is about taking complete responsibility for yourself." > Alan Moore. > - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key

Re: DDOS Simulation

2015-07-28 Thread Paul S.
Seeing as the 'traditional' ways to launch big DDoS attacks are illegal, and you're after a 'legit' company to offer this... Yeah, I don't think you'll get too far. You'll either have to roll your own testsuite on a lan environment, or ... On 29/7/2015 3:31 AM, Dovid Bender wrote: We are look

Re: Working with Spamhaus

2015-07-29 Thread Paul Ferguson
nd such. Ancient history I guess, but still > .. > > > > —srs > >> On 29-Jul-2015, at 10:06 AM, Bob Evans >> wrote: >> >> Would be nice to have an RBL service that attended NANOG >> meetings. Would make for a more trusted RBL we can tell customers >> t

Re: Working with Spamhaus

2015-07-29 Thread Paul Ferguson
>> customers to make use. Spamhaus ever attend a NANOG meetings ? >> Thank You Bob Evans CTO > > - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2 -BEGIN PGP SIGNATURE- Version: GnuPG v2 iF4EAREIAAYFAlW5DBsACgkQK

Re: Experience on Wanguard for 'anti' DDOS solutions

2015-08-10 Thread Paul Ferguson
e... > I think that would definitely depend on how the network is base-lined. That is sometimes more of an art than a science. :-) - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2 -BEGIN PGP SIGNATURE

Re: advice dealing with clean-mx

2015-08-11 Thread Paul Ferguson
ful that these may be the 'stories' of frustrated > fraudsters. > > I honestly do not know how to evaluate this situation. If clean-mx > is legit then it would make sense to have a relationship with them > . If they are not then how does one deal with them? > > t

Re: PRISM: NSA/FBI Internet data mining project

2013-06-07 Thread Paul Ferguson
vers (120k annual salary), and you've got >> just $2k for G&A overhead. >> >> That's a heck of an efficient operation they'd have to be >> running to listen in on all the traffic for the supposed >> budget number claimed. >> >> I'm late for work; I'll follow up with a runthrough of the >> other model, doing on-site digestion and processing >> later, but I think you can see the point--it's not realistic >> to think they can handle the volumes of data being >> claimed at the price numbers listed. If they could, >> the major providers would already be doing it for >> much cheaper than they are today. I mean, the >> Utah datacenter they're building is costing them >> $2B to build; does anyone really think if they're >> overpaying that much for datacenter space, they >> could really snoop on provider traffic for only >> $238K/month? >> >> More later--and remember, this is purely my own >> rampant speculation, I'm not speaking for anyone, >> on behalf of anyone, or even remotely authorized >> or acknowledged by any entity on this rambling, >> so please don't go quoting this anywhere else, >> it'll make you look foolish, and probably get me >> in trouble anyhow. :( >> >> Matt > > -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Bogons filtering

2013-06-10 Thread Paul Ferguson
more-unallocated-slash8s-01.txt > > -- > "Subvert the paradigm." - C.K. Prahlad > > > -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Prism continued

2013-06-12 Thread Paul Ferguson
On Wed, Jun 12, 2013 at 6:30 PM, wrote: > > Ask the ex-CEO of Qwest what happens if you try to turn down an > offer the NSA makes you. :) +1 - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

TWT 24.55.0.0/18 blacklisted by Team Cymru 38.229.66.20

2013-06-14 Thread Paul Zugnoni
0 routes (458303 active, 2 holddown, 2 hidden) Restart Complete Prefix Nexthop MED LclprefAS path * 24.55.0.0/1838.229.66.2065332 I >From all my transit providers, it's origin is 11427. Paul Zugnoni

Re: Need help in flushing DNS

2013-06-19 Thread Paul Ferguson
ist. >> >> While you're at it, www.usps.com, www.fidelity.com, and other well >> known sites have had DNS poisoning problems. When I restarted my >> cache, they look OK. >> >> >> -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Need help in flushing DNS

2013-06-19 Thread Paul Ferguson
300 IN NS ns2620.ztomy.com. ;; Query time: 143 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Jun 20 07:48:06 2013 ;; MSG SIZE rcvd: 74 - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Need help in flushing DNS

2013-06-19 Thread Paul Ferguson
Hanlon's razor? Misconfiguration. Perhaps not done in malice, but I have no idea where the poison leaked in, or why. :-) - ferg On Wed, Jun 19, 2013 at 10:49 PM, Alex Buie wrote: > Anyone have news/explanation about what's happening/happened? > > > On Wed, Jun 19,

Re: Need help in flushing DNS

2013-06-20 Thread Paul Ferguson
Toonk wrote: > .-- My secret spy satellite informs me that at 2013-06-19 10:34 PM Paul > Ferguson wrote: > >> ; <<>> DiG 9.7.3 <<>> @localhost yelp.com A > >> ;; ANSWER SECTION: >> yelp.com. 300 IN A 204.11.56.20 > > Interesting to

Re: Need help in flushing DNS

2013-06-20 Thread Paul Ferguson
e-due-to-possible-dns-hijacki >> ng/<http://techcrunch.com/2013/06/19/linkedin-outage-due-to-possible-dns-hijacking/> >> >> Frank >> >> -Original Message- >> From: Jimmy Hess [mailto:mysi...@gmail.com] >> Sent: Thursday, June 20, 2013 1:23 AM >> To: P

Re: Need help in flushing DNS

2013-06-20 Thread Paul Ferguson
onymous have tried >> coordinating a few >> >> brandon >> > > > > -- > Phil Fagan > Denver, CO > 970-480-7618 -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Need help in flushing DNS

2013-06-21 Thread Paul Ferguson
aking the poisoned entry? > > Being new to this, i still dont understand how could a hacker gain access to > the DNS server and corrupt the entry there? Wouldnt it require special admin > rights, etc. to log in? > > Glen > > > On Thu, Jun 20, 2013 at 11:32 AM, Paul Fer

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
g -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
pace, so it *will* require a lot more diligence. - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
l maintain these reports for the term of the Agreement unless a > shorter period is required by law or approved by ICANN, and will provide > them to ICANN upon request." > > Great, Let's see what happens. If history is any teacher... - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
Now you are thinking. :-) - ferg On Tue, Jul 2, 2013 at 9:15 PM, Larry Sheldon wrote: > Makes me wonder if concern for routing table size is worrying about the > right thing. > -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
uire > further mechanisms if the initial ones fail. > Of course, we all know that makes a huge difference. Cheers, - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: .nyc - here we go...

2013-07-02 Thread Paul Ferguson
encourage you to go read the output of the Variant Issues > Project. Full disclosure: I had a hand in.) Why are we talking about this > non-news now? We all knew about three years ago, at the latest, that ICANN > was planning to do this. If we didn't, shame on us. > > A -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: Ciena 6200 clue?

2013-07-03 Thread Paul Stewart
cost savings by powering off all of >their equipment. > Awesome - sorry, can't resistŠ. :) Paul

Re: questions regarding prefix hijacking

2013-08-07 Thread Paul Ferguson
misunderstood something and > this isn't possible? > > > regards, > Martin > -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: questions regarding prefix hijacking

2013-08-07 Thread Paul Ferguson
ng work to secure BGP and you may want to read up on > 'RPKI' which is further along that track. > I hope it has better adoption than BCP38/BCP84. :-) - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: questions regarding prefix hijacking

2013-08-07 Thread Paul Ferguson
generally due to configuration error -- for instance: http://www.renesys.com/2008/02/pakistan-hijacks-youtube-1/ Having said that, there are quite a few documented cases of it being done intentionally, and for nefarious purposes. - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Re: questions regarding prefix hijacking

2013-08-07 Thread Paul Donner
> It appears AS3549 is announcing 10.0.0.0/8. I noticed it from an > AS3549 customer. > >>From GBLX looking glass, ATL1 > > traceroute > Protocol [ip]: ip > Target IP address: 10.0.0.1 > Source address: > Numeric display [n]: n > Timeout in seconds [3]: 1 > Probe count [3]: 2 > Minimum Time to Li

Re: Looking for a part-time contractor..

2013-08-12 Thread Chris Paul
oking for a house to buy here in California since March, the prices have increased by 10% and upwards, so I'm kind of motivated to work extra right now. The thing though is you might find someone cheaper than me. I'll quote you $150/hour for this work right now. Many thanks! CP -

Re: How big is the Internet?

2013-08-14 Thread Paul Ferguson
gt; I don't want to argue, but perhaps a Hilbert Graph? :-) - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com

Internet Surveillance and Boomerang Routing: A Call for Canadian Network Sovereignty

2013-09-07 Thread Paul Ferguson
e transmissions expose Canadians to potential U.S. surveillance activities – a violation of Canadian network sovereignty." http://lawprofessors.typepad.com/media_law_prof_blog/2013/09/routing-internet-transmission-across-the-canada-us-border-and-us-surveillance-activities.html Cheers, - ferg -

Re: Internet Surveillance and Boomerang Routing: A Call for Canadian Network Sovereignty

2013-09-08 Thread Paul Ferguson
th the current state of affairs, they ought to concentrate on writing laws, not code. -- Paul Ferguson Vice President, Threat Intelligence Internet Identity, Tacoma, Washington USA IID --> "Connect and Collaborate" --> www.internetidentity.com

Re: Internet Surveillance and Boomerang Routing: A Call for Canadian Network Sovereignty

2013-09-10 Thread Paul Ferguson
not good Internet. yyz-yvr is faster via the united states. physics doesn't respect poltical boundries. There are still a lot of people that care about the sheer principle of the issue. Please do not discount that with math. - ferg -- Paul Ferguson Vice President, Threat Intelligence Int

Re: iOS 7 update traffic

2013-09-19 Thread Paul Ferguson
in our graphs going to our ISP here at McGill, anyone else noticing a big spike? [image: internet-sw1 - Traffic - Te0/7 - To Internet1-srp (IR Canet) - TenGigabitEthernet0/7] Zachary McGibbon -- Paul Ferguson Vice President, Threat Intelligence Internet Identity, Tacoma, Washington U

Re: iOS 7 update traffic

2013-09-19 Thread Paul Ferguson
Okay, that makes sense. Just wanted to ensure it wasn't something more sinister. Thanks, - ferg On 9/19/2013 11:05 AM, Mikael Abrahamsson wrote: On Thu, 19 Sep 2013, Paul Ferguson wrote: Can someone please explain to a non-Apple person what the hell happened that started generati

Re: d6991.com traffic

2013-09-23 Thread Paul Ferguson
: CNC Group CHINA169 Shan1xi Province Network descr: Addresses from CNNIC country:CN origin: AS4837 mnt-by: MAINT-CNCGROUP-RR changed:ab...@cnc-noc.net 20060926 source: APNIC % This query was served by the APNIC Whois Service version 1.68 (WHOIS3) -

Re: d6991.com traffic

2013-09-23 Thread Paul Ferguson
chris -- Paul Ferguson Vice President, Threat Intelligence Internet Identity, Tacoma, Washington USA IID --> "Connect and Collaborate" --> www.internetidentity.com

Re: CBL Abuse

2013-10-03 Thread Paul Ferguson
On 10/3/2013 8:55 AM, J. Oquendo wrote: Does someone know of a direct contact with someone at cbl.abuse.org have a quick question/comment/concern I would like to address that WILL get lost in "forms" method of "contact us." Answering off-list. - ferg -- Paul Fer

Re: google / massive problems

2013-10-09 Thread Paul Ferguson
d 2317) Charset: utf-8 wj8DBQFSVYDTq1pz9mNUZTMRArDeAJ44GjAt1uzY4++dKDmrPWhBfm3a2wCcCqGB w6FrRdogRvpTomaMdcqO9hU= =OMUq -END PGP SIGNATURE- -- Paul Ferguson Vice President, Threat Intelligence Internet Identity, Tacoma, Washington USA IID --> "Connect and Collaborate" --> www.internetidentity.com

Re: comcast ipv6 PTR

2013-10-09 Thread Paul Ferguson
) Charset: utf-8 wj8DBQFSVYuKq1pz9mNUZTMRAo5dAKCCuFYjseatheC9upjRRgkzcFJ5LwCfUhhd Krgz0IA6e5dbllo8NgXbzV0= =mehI -END PGP SIGNATURE- -- Paul Ferguson Vice President, Threat Intelligence Internet Identity, Tacoma, Washington USA IID --> "Connect and Collaborate" --> www.internetidentity.com

Re: comcast ipv6 PTR

2013-10-09 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/9/2013 10:08 AM, Chris Adams wrote: Once upon a time, Paul Ferguson said: >That's not necessarily true -- some (very large) organizations using >DMARC will reject mail from hosts without a PTR record. And that's a goo

Re: comcast ipv6 PTR

2013-10-14 Thread Paul Ferguson
As which do not. :-) - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 10.2.0 (Build 2317) Charset: utf-8 wj8DBQFSXJwqq1pz9mNUZTMRAkJKAKCGLnO9qEGXv5LIKxCBiZhwf7HwHQCggksf Fn3GhVzeKyHG5cSc7y5GXJw= =Gtw1 -----END PGP SIGNATURE- -- Paul Ferguson Vice President, Threat Intellig

Re: If you're on LinkedIn, and you use a smart phone...

2013-10-25 Thread Paul WALL
Adding Zaid Ali Khan for feedback. On Fri, Oct 25, 2013 at 10:45 AM, Shrdlu wrote: > I hate to do this, but it's something that anyone managing email > servers (or just using a smart phone to update LI) needs to know > about. I just saw this on another list I'm on, and I know that there > are f

Re: large scale ipsec

2013-11-01 Thread Paul Stewart
Can you give us an idea of “large scale” in your mind? Also, site to site deployments or remote access or both? Paul On 11/1/2013, 9:38 AM, "Jan Schaumann" wrote: >Hello, > >Who here on this list has deployed IPSec or other comparable lower layer >encryption in a large

Re: Automatic abuse reports

2013-11-13 Thread Paul Bennett
s hard to find out, but I'm so very much not speaking in an official capacity here. -- Paul

Re: A new forum for discussing large scale TLS/SSL and other crypto deployment issues

2013-11-15 Thread Paul Ferguson
> knoweldge coming out of this conversation. > -BEGIN PGP SIGNATURE- Version: PGP Desktop 10.2.0 (Build 2317) Charset: utf-8 wj8DBQFShq/fq1pz9mNUZTMRArY9AJ4xUozLVnzPsMUPTuYPpFpjm0mZswCfcT/r H/jH8L1Hk1Ra4/CYkRF3KRc= =kPz+ -END PGP SIGNATURE- -- Paul Ferguson Vice President, Th

Re: NAT64 and matching identities

2013-11-18 Thread Paul WALL
MSOs logging subscriber flows, what could possibly go wrong? Drive slow, like a Sandvine under load, Paul Wall On Mon, Nov 18, 2013 at 8:03 PM, Tom Taylor wrote: > > On 18/11/2013 3:06 PM, Justin M. Streiner wrote: > >> It's looking more and more like NAT64 will be in our

Re: What routers do folks use these days?

2013-11-29 Thread Paul Stewart
Juniper throughout on our side now … former Cisco shop. Overall, quite happy …. MX,M,E,EX,SRX etc… Paul On Nov 29, 2013, at 11:18 AM, Darren O'Connor wrote: > We are using Juniper MX and Brocade XMRs for our P and PE routers. > > > > Thanks > Darren > htt

Re: Someone’s Been Siphoning Data Through a Huge Security Hole in the Internet

2013-12-06 Thread Paul Ferguson
the route-views data. Most recently the past two days 701 has done a large MITM of traffic. In other news, you can go read the other thread on this that happened already. http://mailman.nanog.org/pipermail/nanog/2013-November/062257.html - Jared -- Paul Ferguson PGP Public Key ID: 0x63546533

Re: BRAS

2013-12-11 Thread Paul Stewart
this point have l2tp tunnels coming in (such as wholesale from ILEC provider) but in early January we will have one in production (wholesale AGAS service via Bell Canada). Paul On 12/11/2013, 1:44 PM, "Nitzan Tzelniker" wrote: >MX480 works for me as LNS with Ericson Smartedge as

Re: BRAS

2013-12-11 Thread Paul Stewart
What kind of issues? How many subs and what code? Paul On 12/11/2013, 11:14 AM, "Nilesh Kahar" wrote: >Basically I am facing issues with MX80 LNS scenario. So just to make sure >with community whether anyone is having similar problem. >Also wanted to know about any othe

Re: What routers do folks use these days?

2013-12-11 Thread Paul WALL
Based on what? On Thu, Nov 28, 2013 at 9:59 PM, Mehmet Akcin wrote: > Look at Juniper, MX Series. > > mehmet > > On Nov 28, 2013, at 9:37 PM, Jawaid Desktop wrote: > > > We're a service provider, and we have a network full of Cat6509's. We > are finding that we are outgrowing them from the sta

Re: BRAS

2013-12-12 Thread Paul Stewart
I thought that was resolved? Don’t have an L2TP scenario at the moment but will in early January so will have to follow up with engineering to confirm… Many thanks, Paul On 12/12/2013, 8:36 AM, "Nilesh Kahar" wrote: >There is a significant delay for user termination via L2TP;

Re: Best practice on TCP replies for ANY queries

2013-12-12 Thread Paul Ferguson
ering southeast, 4 or 5, occasionally 6 at >> first. >> Rough, becoming slight or moderate. Showers, rain at first. Moderate or >> good, >> occasionally poor at first. >> >> > > -BEGIN PGP SIGNATURE- Version: PGP Desktop 10.2.0 (Build 2317) Charset: utf-8 wj8DBQFSqhvyq1pz9mNUZTMRAiXgAKCDaQ1KmlVCjXKffz0bVmHRGpbwxgCfXEk7 tHQx8SXtY/xNFLm2L3Uu8x8= =tTIW -END PGP SIGNATURE- -- Paul Ferguson PGP Public Key ID: 0x63546533

Re: do ISPs keep track of end-user IP changes within thier network?

2013-12-16 Thread Paul Stewart
Back in the day (geesh I feel old just saying that), I deployed a lot of PM3’s …. Then we moved to Ascend TNT Max stuff - that was very exciting back then! :) Paul On 12/16/2013, 3:16 PM, "vinny_abe...@dell.com" wrote: >Dell - Internal Use - Confidential > >PM3's

Re: ddos attacks

2013-12-18 Thread Paul Stewart
We use Arbor for this - works quite well…. Peakflow/TMS .. We don’t do anything announcement wise upstream but don’t see why you couldn’t via communities... I’ve looked at one cloud based solution to date and decided appliance is a better solution specific to our needs. Paul On 12/18/2013, 11

Re: ddos attacks

2013-12-19 Thread Paul Ferguson
ful. >>> >>> Tore >>> >>> >> > > -BEGIN PGP SIGNATURE- Version: PGP Desktop 10.2.0 (Build 2317) Charset: utf-8 wj8DBQFSs0qFq1pz9mNUZTMRAlHzAJ4snDXa9MSpzSAniMUKcea0L521jQCgxHLH gBUm4ScmJlf5FsC5kJJrmZs= =tLUd -END PGP SIGNATURE- -- Paul Ferguson PGP Public Key ID: 0x63546533

Re: NSA able to compromise Cisco, Juniper, Huawei switches

2013-12-31 Thread Paul Ferguson
op 10.2.0 (Build 2317) Charset: utf-8 wj8DBQFSwywoq1pz9mNUZTMRAtFaAKDrbdnfnnPOP6G0DSRUxK4WmbtGhwCfRaQ/ V7MRFxg+dGwNKZgx4qK0Ogs= =XiSA -END PGP SIGNATURE- -- Paul Ferguson PGP Public Key ID: 0x63546533

Re: NSA able to compromise Cisco, Juniper, Huawei switches

2013-12-31 Thread Paul Ferguson
ird party. > That's really interesting. Where are these Cisco devices manufactured? - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 10.2.0 (Build 2317) Charset: utf-8 wj8DBQFSw1z/q1pz9mNUZTMRAvbIAKCYZn3slg1wMak/nlc/hb3ZHkS29wCg3ucb OJTl+SLgBtQDMGi+cTdDRtQ= =VAdw -END PGP SI

Re: turning on comcast v6

2014-01-03 Thread Paul Ferguson
eason not to include default route in the configuration for DHCPv6, and it's long overdue. As I’ve said before, if we’re going to bother doing it, we should just include RIO options, but otherwise, I agree with you. Owen -- Paul Ferguson PGP Public Key ID: 0x63546533

Re: Comcast/Level3 issues

2014-01-04 Thread Paul WALL
The people pushing this policy are not without a face and name. They read this mailing list, and attend our conferences. You'll want to talk to John Schanz, Kevin McElearney, and Barry Tishgart. Drive Slow (like a Comcast peering port), Paul Wall On Fri, Jan 3, 2014 at 10:55 AM, Scott Be

Re: turning on comcast v6

2014-01-06 Thread Paul Ferguson
ches which have otherwise > designated uplink ports, it is logical to make those ports default > to RA allowed while defaulting to not allowing RAs from other ports > by default. Some people do not want switches making IP address assignments. That's all. :-) - - ferg - -- Paul Fergu

Re: Comcast/Level3 issues

2014-01-06 Thread Paul WALL
etwork and internal politics/peering discussions. Do you know who the poster is? https://encrypted.google.com/search?q=28619103+dslreports+site:www.dslreports.com&biw=1000&bih=1000 Drive Slow, Paul WALL On Sun, Jan 5, 2014 at 6:17 PM, McElearney, Kevin wrote: > FWIW, we work with each issu

Re: [VoiceOps] (cross post) VoIP heat charts...

2014-01-13 Thread Paul Timmins
On Jan 9, 2014, at 2:38 PM, Jay Ashworth wrote: > - Original Message - >> >> >> Looking to "heat chart" where fraudelent calls are going. > > So you want to be able to feed "NPANXX Count" to something that will map > the call counts on a US map. > > You have anything that does NPANXX

Re: OpenNTPProject.org

2014-01-14 Thread Paul Ferguson
nfigured has > low-benefit, only that machine can stop attacking (but whole > world). That does *not* make it an unworthy goal, nor should it stop people from encouraging it's implementation. - - ferg (co-author of BCP38) - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 -BEGIN

Re: Internet Routing Registries - RADb, etc

2014-01-15 Thread Paul Ferguson
t; finally, what can be done to correct or remove these entries (as a > non-customer of either RADb or Level3)? > > Thanks in advance, --Blake > > > > - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (M

Re: NetSol opts domain customers into $1800 Security program?

2014-01-22 Thread Paul Ferguson
.. what, 1996 or 7, and started charging for them; > I moved to Domain Discover almost immediately... but this seems > *wildly* over the top. > > How many domains do *you* have? > > Cheers, > -- jra > - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 -BEGIN PGP SIGNA

Re: NetSol opts domain customers into $1800 Security program?

2014-01-22 Thread Paul Ferguson
ny more and turn >> out the lights. >> >> I'd love to be a fly on the wall for the phone call from their >> credit card processor regarding chargeback percentage about three >> weeks after this hits. Popcorn required for sure. >> >> -- Jay Hennigan

Re: An IPv6 address for new cars in 3 years?

2007-06-28 Thread Paul Ferguson
erzOVvThto9I= =q+zp -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

Re: China prefix hijack

2010-04-09 Thread Paul Vixie
ical intent because china-vs-google's been in the news a lot today? i'm more inclined to blame the heavy solar wind this month and to assume that chinanet's routers don't use ECC on the RAM containing their RIBs and that chinanet's router jockeys are in quite a sweat about this bad publicity. -- Paul Vixie KI6YSY

Re: Commodore PET, was: Re: legacy /8

2010-04-11 Thread Paul Vixie
seems like i saw an Apple I at that show, and also a SOL, which i remember thinking very highly of since it had an S-100 bus. the PET was there but with the itty bitty keyboard the machine was a bit of a head-scratcher for the crowd. -- Paul Vixie KI6YSY

Re: legacy /8

2010-04-11 Thread Paul Vixie
g the "chicken little dance". however, for many networks, growth is life, and for them, free pool depletion is a problem. -- Paul Vixie Chairman, ARIN BoT

Re: legacy /8

2010-04-11 Thread Paul Vixie
e nature and location of that tipping point amount to reading tea leaves. nevertheless if everybody who can deploy dual-stack does so, we'll reach that tipping point sooner and it'll be less spectacular. -- Paul Vixie Chairman, ARIN BoT

Re: legacy /8

2010-04-11 Thread Paul Vixie
pulation and serves a global economy. if the rate of endpoint growth does not continue beyond ipv4 pool exhaustion we'll have a problem. if it does, we'll also have a problem but a different problem. i'd like to pick the easiest problem and for that reason i'm urging dual-stack ipv4/ipv6 for all networks new or old. -- Paul Vixie Chairman, ARIN BoT

Re: Solar Flux

2010-04-11 Thread Paul Vixie
f.root-servers.net. IN 2001:500:2f::14:0 f.root-servers.net. IN 2001:510:2f::f f.root-servers.net. IN 2101:500:2f::f f.root-servers.net. IN 2109:500:2f::f f.root-servers.net. IN LOC \# 16 20 01 05 00 00 2f 00 00 00 00 00 00 00 00 00 0f -- Paul Vixie KI6YSY

Re: FCC dealt major blow in net neutrality ruling favoring, Comcast

2010-04-11 Thread Paul WALL
t use. ... > Research Fellow > Information Technology and Innovation Foundation It should probably be noted, for purpose of establishing bias, that Richard is a Washington lobbyist, hired to represent Comcast on regulatory matters. What he views as overstepping legal bounds, others may view as protecting consumers... Drive Slow, Paul Wall

Re: legacy /8

2010-04-12 Thread Paul Vixie
> From: David Conrad > Date: Sun, 11 Apr 2010 13:52:24 -1000 > > On Apr 11, 2010, at 10:57 AM, Paul Vixie wrote: > > ... i'd like to pick the easiest problem and for that reason i'm urging > > dual-stack ipv4/ipv6 for all networks new or old. > > Is anyon

Re: FCC dealt major blow in net neutrality ruling favoring, Comcast

2010-04-12 Thread Paul WALL
ink tank in an > analyst capacity, not as a lobbyist, and not on the Comcast payroll. You neglected to mention that the "think tank" (where I'm from in Houston, we call them lobbys) is funded by Comcast, among other big cable/telecom players. Drive Slow, Paul Wall

Re: getting the hint

2010-04-16 Thread Paul Vixie
miscreant VIA PRIVATE EMAIL or a note tied to > a brick, but do not prate incessantly about it on the list. +1. -- Paul Vixie KI6YSY

Re: .cn / china registrars in US/canada ?

2010-04-17 Thread Paul Ferguson
z9mNUZTMRAj7DAKCIZzeGspJL+/Dozak+p1VFiJTu1gCgjUt4 z/bpggSpEwq6SkpOgOmr0zs= =qGA2 -END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

RE: Juniper firewalls - SSG or SRX

2010-04-19 Thread Paul Stewart
least that was my experience... Paul -Original Message- From: Mehmet Akcin [mailto:meh...@icann.org] Sent: April-19-10 9:48 PM To: Jeffrey Negro; nanog@nanog.org Subject: Re: Juniper firewalls - SSG or SRX SRX seems very new and many comment it as unstable, this includes some

Re: IPAM

2010-04-28 Thread Emanuel Paul
IPPlan currently does have IPv6 functionality, but we're still on BETA phase. The BETA is pretty stable and feature rich, but we're have some work to do before we officially release it. BETA version can be found on: http://sourceforge.net/projects/iptrack/files/ On Wed, Apr 28, 2010 at 6:10 AM, l

Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?

2010-04-29 Thread Paul Timmins
David Conrad wrote: On Apr 28, 2010, at 2:38 PM, Carl Rosevear wrote: I don't understand why anyone thinks NAT should be a fundamental part of the v6 internet Perhaps the ability to change service providers without having to renumber? Number your internal network on ULA, and put public

Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?

2010-04-30 Thread Paul Timmins
David Conrad wrote: Paul, On Apr 29, 2010, at 8:29 AM, Paul Timmins wrote: If you change ISPs, send out an RA with the new addresses, wait a bit, then send out an RA with lifetime 0 on the old address. Even if this works (and I know a lot of applications that use the socket() API

Re: BGP (in)security makes the AP wire

2010-05-10 Thread Paul Bosworth
> I am very skeptical whenever I see claims of this nature "If I do X I can > bring down large global system Y in a matter of minutes/hours" where X > involves something reasonably simple any single person with some skill could > do. > > -- > http://goldmark.org/jeff/stupid-disclaimers/ > > -- Paul H Bosworth GSEC, GCFW, GCIH CCNP, CCIP, CCDP

Re: Rugged wireless bridge

2010-05-11 Thread Paul Bosworth
e have any > suggestions on a wireless bridge and an outdoor rated switch if such > exists? > How do people provide IP to outdoor locations like a surface parking lot? > > Thanks, > Andrey > > -- > Andrey Khomyakov > [khomyakov.and...@gmail.com] > -- Paul H Bosworth GSEC, GCFW, GCIH CCNP, CCIP, CCDP

Re: POE switches and lightning

2010-05-13 Thread Paul Timmins
I put mine before the injector), and also works well with T1s and POTS. -Paul

Re: ipv6 transit over tunneled connection

2010-05-14 Thread Paul Timmins
GBLX was great with native IPv6 setup. VZB was nearly impossible to get them to set it up, and I'm tunneled to a router halfway across the country. The router I was going to had serious PMTU issues that they recently cleared up, so now it's working satisfactorily. -Paul Brielle B

Re: Off-Topic: use laptop only as USB power supply

2010-05-20 Thread Paul Timmins
I think the last dell business notebook I had my hands on has a bios setting that enables usb power when the laptop is off and plugged into the AC adapter. It's not on by default. If you have one, you may want to check. -Paul Matthias Flittner wrote: -BEGIN PGP SIGNED MESSAGE-

Re: Nato warns of strike against cyber attackers

2010-06-08 Thread Paul Ferguson
n and force them to do so, unfortunately. $.02, - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.5.3 (Build 5003) wj8DBQFMDrt9q1pz9mNUZTMRAl7nAKC3hrq4Jbyq3HzOPJBrQFSDAESroACgxzPu ZiRk4x2DQGNqPcLOn/iqDIA= =x4JB -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: Nato warns of strike against cyber attackers

2010-06-08 Thread Paul Ferguson
fYcKJ I0tMJo4UuD7OrFiF8H6L/cA= =+5X/ -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

<    2   3   4   5   6   7   8   9   10   11   >