Re: Pros and Cons of Cloud Computing in dealing with DDoS

2009-11-05 Thread Paul Ferguson
a 5 lb. bag, so to speak. :-) - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.5.3 (Build 5003) wj8DBQFK83sEq1pz9mNUZTMRAnvkAJ9XcDIi7XTE32nMtwJfwCflq6hcdgCfXmPT OkqNIuL8OH+BN6S4UxlfdSc= =kqaC -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Eng

Re: What DNS Is Not

2009-11-08 Thread Paul Wall
> of caching we're taking money out of peoples' wallets.  This is just not > true with the exception of very few companies whose job it is to answer DNS > requests. I don't know why Paul is so concerned, just think how many F root mirrors it helps him sell to unsuspect

Re: What DNS Is Not

2009-11-08 Thread Paul Ferguson
NATURE- Version: PGP Desktop 9.5.3 (Build 5003) wj8DBQFK96suq1pz9mNUZTMRAni8AKDyw1NMu2FuXFVQ8vDjLSOONy8T2ACg+tNJ 2sJl1I22u18nJw0PPg1juL4= =QI6K -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: What DNS Is Not

2009-11-09 Thread Paul Vixie
way based on the identity of the querier. perhaps my language in the ACM Queue article was imprecise ("delivering facts rather than policy") and i should have stuck with the longer formulation ("incoherent responses crafted based on the identity of the querier rather than on the authoritative data"). -- Paul Vixie KI6YSY

Re: paix palo attitude

2008-10-01 Thread Paul Wall
IIJ had some empty space when I was there the other day, you should ask them for a feed and some Us. :) Seriously though, is the requirement to be physically plugged into the fabric an important one? Might some ebgp multihop feeds to a remote route collector suffice? Drive Slow, Paul Wall On

Re: Wall it off, make it go away

2008-10-02 Thread Paul Vixie
ve that the reason so much cybercrime > originates there is for political reasons (state sponsorship) rather > than economic ones. ... No. That's not what I want and that's not what I believe. -- Paul Vixie

Re: cnn.com - Homeland Security seeks cyber counterattack system (Einstein 3.0)

2008-10-06 Thread Paul Ferguson
't heard about the "Server in the Sky": http://www.technovelgy.com/ct/Science-Fiction-News.asp?NewsNum=1405 :-) - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFI6kgoq1pz9mNUZTMRAs/3AKD02p1Mt+UL8SSEKnl0H/3Lx0lpYwCg06GM zZnHo2DydtR8ho/ZgcA41Js= =zpoo -

Re: Fwd: cnn.com - Homeland Security seeks cyber counterattack system(Einstein 3.0)

2008-10-07 Thread Paul Ferguson
ATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFI67Hsq1pz9mNUZTMRAmZ8AJ4laDWWB3fwLxxoh/UPcztosaJVagCeI6fL d+wsLTa0XlDQkE5LV/vtSOo= =J9y/ -----END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: cnn.com - Homeland Security seeks cyber counterattack system(Einstein 3.0)

2008-10-07 Thread Paul Ferguson
BziZU35R6FQvJXI5z2IZQCgrLm5 HwyiU+h4wElXQGLsN7O+Pao= =2OhO -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: Nanog 44 Hockey Event -- Last Call

2008-10-07 Thread Paul Ferguson
NHL Hockey game -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFI7DYyq1pz9mNUZTMRAqFwAJ0Y072Gu3QIgJ8KafO6NsDaqe8UUACeLHEt Jxe4cJn7pulvJLt6FnHoF/o= =pk5R -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the

RE: LVL3 Issues?

2008-10-10 Thread Paul Stewart
A city, IP address or something along those lines would be helpful ;) We have a level(3) connection and haven't seen anything yet today.... Paul -Original Message- From: Josh Marchant [mailto:[EMAIL PROTECTED] Sent: October 10, 2008 10:32 AM To: nanog@nanog.org Subject: LVL3 I

Re: LVL3 Issues?

2008-10-10 Thread Paul Wall
I've seen these a few times, usually traced back to LAG issues on their Force10s (ebr in traceroute). Drive Slow, Paul Wall On 10/10/08, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > It sounds like an issue that we've seen twice with them. They'll be > routing an en

Re: DDoS Attack in Progress.

2008-10-10 Thread Paul Ferguson
P SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFI76Ucq1pz9mNUZTMRAiJoAJ9v5DTn5TZZtBwno+c4JB/zun0AeQCg7vqz uS4eSff62RIus6Qi1foH8II= =S4jc -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: Peering for beginners

2008-10-11 Thread Paul Ferguson
ZTMRAiJsAKCJG7ZkM4wgV0sNCNKMZW+cFcWGFACgpIT4 J4LVFTsIFXluEmTUQCwfmUY= =y8y3 -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

RE: peeringdb admin contact?

2008-10-13 Thread Paul Stewart
They always respond very quickly anytime I email them you sure there isn't any spam filters etc. playing nasty on you? ;) -Original Message- From: matthew zeier [mailto:[EMAIL PROTECTED] Sent: October 13, 2008 3:53 PM To: NANOG Subject: peeringdb admin contact? Been trying to get some

Re: The DDOS problem & security BOF: Am i mistaken?

2008-10-15 Thread Paul Vixie
poisonining events, too. we're scanning the hell out of all the open recursives, and we're not finding much poison, in spite of all the "please stop querying our nameserver!" complaints we incite. so while i want dnssec, i'm pretty comfortable with 16-bit port randomization as a stopgap. rodney's free inline recursive dns frontend could just do 16-bit port randomization if all we want is an until-there-is-dnssec stopgap. -- Paul Vixie

Re: the attack continues..

2008-10-18 Thread Paul Ferguson
res.rr.com 89.113.48.227 -PTR-> 89-113-48-227.nat.dsl.orel.ru 87.103.174.101 -PTR-> 87-103-174-101.pppoe.irtel.ru 84.47.161.244 -PTR-> 84-47-161-244.apmt.ru [...] - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFI+kJBq1pz9mNUZTMRApbGAJ9WamkW0

In Memoriam: Abha Ahuja

2008-10-20 Thread Paul Ferguson
- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFI/C1Qq1pz9mNUZTMRAucmAJ9SltkxADgCmC3fu9vTatb7QqeZNgCgiLPw 9oIJ6crCAXiJ1WGtUB9SKmQ= =FCpY -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's

Peering - Benefits?

2008-10-29 Thread Paul Stewart
some but looking to develop a concrete list of appealing reasons etc. such as: -control over routing between networks -security aspect (being able to filter/verify routes to some degree) -latency/performance Just looking for other positive ideas etc...;) Cheers!

RE: Peering - Benefits?

2008-10-29 Thread Paul Stewart
Thanks! That's a really good one and surprised myself I missed it..;) _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2008 3:28 PM To: Paul Stewart Cc: nanog@nanog.org Subject: Re: Peering - Benefits? * PGP Sign

RE: Peering - Benefits?

2008-10-29 Thread Paul Stewart
Thanks - I believe the wording meant was "alternative path" versus connection... in other words if an AS has issues with one or more upstream providers for whatever reason, you have good chances the peering connection will remain in better shape (not always granted, but good odds)

RE: Peering - Benefits?

2008-10-30 Thread Paul Stewart
mber of them in various parts of the world currently which adds another level of redundancy per say.... Take care, Paul -Original Message- From: HRH Sven Olaf Prinz von CyberBunker-Kamphuis MP [mailto:[EMAIL PROTECTED] Sent: Thursday, October 30, 2008 9:04 AM To: Paul Stewart Cc: [EMAIL PR

RE: Peering - Benefits?

2008-10-30 Thread Paul Stewart
hat peering isn't for everyone... definitely... Take care, Paul -Original Message- From: Patrick W. Gilmore [mailto:[EMAIL PROTECTED] Sent: Thursday, October 30, 2008 12:15 PM To: NANOG list Subject: Re: Peering - Benefits? On Oct 30, 2008, at 10:49 AM, Todd Underwood wrote:

RE: Peering - Benefits?

2008-10-30 Thread Paul Stewart
climb right now) And yes, with our peering costs - the unit costs drop off considerably as they pick up so the longer term will be that peering will be considerably more economical than transit even with long haul costs... Cheers! Paul -Original Message- From: Patrick W. Gilmore [mailto

Re: Sprint / Cogent

2008-10-30 Thread Paul Fleming
Cogent are experiencing communications difficulties in the DC (and probably other) areas. Theories include a potential depeering. Not a theory. Indeed. It appears, using Sprint's looking glass, that they're completely partitioned from Cogent. YMMV. -brandon -

RE: Peering - Benefits?

2008-10-31 Thread Paul Stewart
Hi there... We've done the financial study and we've taken great lengths in netflow analysis to do estimated traffic flows at each peering location etc. This was factored before I posted and as I mentioned in an earlier posting - the cost element is pretty much addressed already with our transit/p

RE: Peering - Benefits?

2008-10-31 Thread Paul Stewart
ve and negative reasons for peering that perhaps we didn't take into consideration beyond how we do it today... the only change for our peering will be the element of long hauling the traffic and expanding it into larger scales - that's about it. Basically I have all the answers I'm look

RE: Sprint / Cogent

2008-10-31 Thread Paul Stewart
Best guess would be traffic ratio related - that always seems to be related to de-peering. One side doesn't like the amount of traffic coming in versus going out etc... Paul -Original Message- From: Justin Shore [mailto:[EMAIL PROTECTED] Sent: Friday, October 31, 2008 9:03

Re: Peering - Benefits?

2008-10-31 Thread Paul Vixie
"Paul Stewart" <[EMAIL PROTECTED]> writes: > ... > > My question was meant at a much higher level - a level where costs are > equal for peering/transit and all the "technical" and the "financial" > homework has been done already now

RE: Peering - Benefits?

2008-10-31 Thread Paul Stewart
k you. My question should have read specifically - "what points do you make with senior management to move towards larger, more diverse peering options compared to today?" Thank you however - I do have all the info I require and we're moving ahead... Best regards, Paul -Original M

Re: Sprint / Cogent dispute over?

2008-11-02 Thread Paul Wall
On Sun, Nov 2, 2008 at 6:05 PM, Brandon Galbraith <[EMAIL PROTECTED]> wrote: > Seeing as Cogent is going to try tooth and nail to keep their new found Tier > 1 status (and not pay anyone for transit), I would think this would bode > worse for Sprint, since most of their transit customers could migr

Re: Another driver for v6?

2008-11-02 Thread Paul Vixie
ing points is if some kind of "governance" makes them do so. -- Paul Vixie

Re: Sprint v. Cogent, some clarity & facts

2008-11-02 Thread Paul Wall
ement with NTT (AS 2914)? If it's not transit, what is it? Does Akamai have peering arrangements with Cogent directly? Paul

Re: Sprint / Cogent dispute over?

2008-11-03 Thread Paul Vixie
fact that folks speak about tiers here may be a red flag to regulators. forgetting the "t" word for the moment, peering is a business decision involving both tactical cost:benefit and strategic cost:benefit, and ultimately we can expect cogent and sprint to work it out on that basis, not on the "t" word basis. -- Paul Vixie

Re: Sprint / Cogent dispute over?

2008-11-03 Thread Paul Vixie
27;t implicitly agree to pay, as signalled by their lack of disconnection after their 90 day notice. None of us who aren't parties to the dispute can do other than wonder, ponder, guess. -- Paul Vixie

Re: NTP Md5 or AutoKey?

2008-11-03 Thread Paul Ferguson
l > signatures and X.509 certificates (AutoKey Security)? > I'm just wondering -- in globak scheme of security issue, is NTP security a major issue? Just curious. - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: Sprint v. Cogent, some clarity & facts

2008-11-05 Thread Paul Vixie
aster on the > Internet for people to wake up and smell the coffee? The Internet is no > longer a kewl tool built and operated by the cognoscenti to meet their > own interests. It is now part of every nation's and everbody's critical > infrastructure. It needs to be engineered and operated better so that it > does not end up partitioning for dumb reasons. that sounds like justification for government regulation, if true. -- Paul Vixie

Re: [funsec] McColo: Major Source of Online Scams and Spams Knocked Offline (fwd)

2008-11-12 Thread Paul Ferguson
QQCeJMUS PmOiEoLms6r/V1IxJqcLMlk= =2xEG -----END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

RE: Verizon/UU.net/Alternet Routing issue

2008-11-12 Thread Paul Jasa
Same here. Saw the issue from Los Angeles, and from New York. Traces were dropping a few hops into the Verizon cloud. BGP stayed up, but routing went nowhere. Paul From: jamie rishaw [mailto:[EMAIL PROTECTED] Sent: Wed 11/12/2008 3:14 PM To: Peter Beckman

Re: Router Choice

2008-11-14 Thread Paul Wall
Whoa, excessive use of "!"...this isn't IOS ICMP output. For those of you who want to have a chuckle, grep the word "exit" on any of these fine 7750/7450 router configurations. Seeing a router configuration that contains 10,000+ instances of the word "exit" makes me recall the fine book FINAL EXIT

McColo: Are the 'Lights On" at Telia?

2008-11-15 Thread Paul Ferguson
. - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFJH5Hiq1pz9mNUZTMRAjJpAKCHaM0OofsH67j44SQPdZAo+3poPQCg4bK0 r32lLCsm//pcaPC91wTmuiA= =QjCr -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fe

Re: McColo: Are the 'Lights On" at Telia?

2008-11-15 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Nov 15, 2008 at 7:22 PM, Paul Ferguson <[EMAIL PROTECTED]> wrote: > If they are, then I sure wish that someone would explain reconnecting > McColo: > > http://www.cidr-report.org/cgi-bin/as-report?as=as26780 > > Wit

Re: McColo: Are the 'Lights On" at Telia?

2008-11-15 Thread Paul Ferguson
FG+e -END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: McColo: Are the 'Lights On" at Telia?

2008-11-15 Thread Paul Ferguson
=TeXa -END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: McColo: Are the 'Lights On" at Telia?

2008-11-16 Thread Paul Ferguson
- 208.72.168.0/21 Withdrawn - 208.72.173.0/24 Withdrawn - - ferg On Sat, Nov 15, 2008 at 8:10 PM, Paul Ferguson <[EMAIL PROTECTED]> wrote: > >> If they are, then I sure wish that someone would explain reconnecting >> McColo: >> >> http

Re: IPv6 routing /48s

2008-11-18 Thread Paul Timmins
You too, huh? On Tue, 2008-11-18 at 10:05 -1000, Antonio Querubin wrote: > On Tue, 18 Nov 2008, Christopher Morrow wrote: > > > traceroute6 to the ISC's v6 allocation(s) for f-root ... (from inside > > 701) oh, not working... > > traceroute6 to ipv6.google.com from inside 701, oh... not working e

Re: IPv6 routing /48s

2008-11-18 Thread Paul Timmins
6 packet too big somehow, so the packet just disappears into thin air. -Paul On Tue, 2008-11-18 at 13:48 -1000, Antonio Querubin wrote: > On Tue, 18 Nov 2008, Paul Timmins wrote: > > > You too, huh? > > Is your IPv6 tunnel with vzb using GRE or 6-in-4 encapsulation? > > Antonio Querubin > whois: AQ7-ARIN

Re: an over-the-top data center

2008-12-02 Thread Paul Cosgrove
ned datacentres, so despite the complexities of recovery Deepak is largely right when he said that no one cares about blast proof server farms, at least in the peaceful parts of the world. Paul.

RE: Yahoo DNS broken?

2008-12-03 Thread Paul Stewart
I talked to Yahoo! NOC a little while ago and they are working on the issue - definitely DNS related and appears to possibly be east coast only details are vague but they are aware of it and no ETA yet... Paul -Original Message- From: Nathan Ward [mailto:[EMAIL PROTECTED] Sent

Telecom Collapse?

2008-12-03 Thread Paul Ferguson
3017) wj8DBQFJN3+vq1pz9mNUZTMRApD5AKCQZPe5Nctn2OkE4kVWiZ7y7rJ4qwCgsQn6 nCNVbqAfPfALdEtbU2p1fg0= =/pUF -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

RE: Telecom Collapse?

2008-12-04 Thread Paul Stewart
t has enough portable generators to keep ALL their sites up. Have I seen my cell go down in a power outage? Yes Have I seen my landline go down in a power outage when I had them? Yes Take care, Paul -Original Message- From: Joe Abley [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04,

Re: Telecom Collapse?

2008-12-04 Thread Paul Bosworth
r) to use their electrical outlets to charge their cellphones. These options are of course quite an inconvenience compared to having battery on a POTS line during an outage, but then again maintaining a POTS line just for outages is quite an inconvenience on most peoples' budget, too. -- Paul H Bo

Re: Telecom Collapse?

2008-12-04 Thread Paul Bosworth
ce. > >... > > >--Steve Bellovin, > http://www.cs.columbia.edu/~smb<http://www.cs.columbia.edu/%7Esmb> > -- Paul H Bosworth CCNP, CCNA, CCDA

Re: Telecom Collapse?

2008-12-04 Thread Paul Bosworth
hardened POTS infrastructure. You make a good point about the data lines that feed cell towers. Of the cell site outages I have dealt with, every one of them was due to data line loss. phb On Thu, Dec 4, 2008 at 10:54 AM, Jack Bates <[EMAIL PROTECTED]> wrote: > Paul Bosworth wrote:

Re: Telecom Collapse?

2008-12-04 Thread Paul Bosworth
>> >>The FCC proposed in May 2007 that all cell towers have a >>minimum of eight hours of backup power, which would switch on >>if a tower lost its regular energy source. >> > > Time for Power over Wireless (PoW), I guess... j/k > > jms > > -- Paul H Bosworth CCNP, CCNA, CCDA

Re: Telecom Collapse?

2008-12-04 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Dec 3, 2008 at 10:59 PM, Paul Ferguson <[EMAIL PROTECTED]> wrote: > > I deliberated for a while on whether to send this, or not, but I figure > it might be of interest to this community: > > http://techliberation.c

Re: McColo and SPAM

2008-12-05 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Dec 5, 2008 at 11:10 PM, Paul Kelly :: Blacknight <[EMAIL PROTECTED]> wrote: > We saw a dramatic decrease. Attached is our dnsbl mirror in .ie, it > mirrors spamhaus amoungst other things. > McColo was just an exercise in &

Re: Netblock reassigned from Chile to US ISP...

2008-12-12 Thread Paul Ferguson
9mNUZTMRArkZAJ42wBsiviQOeX/Ei6gPCY+Rk8zRjQCdHDfg djeldwF25CYOUsDoGQQzKPs= =jkIf -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: Netblock reassigned from Chile to US ISP...

2008-12-12 Thread Paul Ferguson
d 3017) wj8DBQFJQ2R7q1pz9mNUZTMRArY+AJ0VRvOLF/xEBzAKHysNKRo668ucQwCgmhL9 ZoPn/XhkTcABuVQwFBKa2qk= =sdw8 -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: Netblock reassigned from Chile to US ISP...

2008-12-12 Thread Paul Ferguson
ur shoulder must be getting pretty heavy... so forget it. - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFJQ2eRq1pz9mNUZTMRAsWNAKDU1/u/PH3xTNQAfGJqZIpT6H6jpQCg+cbM nxKsQOt+2vwa92pA3oWqI5w= =vmia -----END PGP SIGNATURE- -- "Fergie",

Security Intelligence [Was: Re: Netblock reassigned from Chile to US ISP...]

2008-12-13 Thread Paul Ferguson
TAKD30/yrEYWu1ep4v7cOH2q3++aKRQCg2Sad wwap7dwpUiOv6r/w5st04KQ= =AZDw -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: Security Intelligence [Was: Re: Netblock reassigned from Chile to US ISP...]

2008-12-13 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Not in the habit of responding to my e-mail, but... On Sat, Dec 13, 2008 at 12:29 AM, Paul Ferguson wrote: > > On Sat, Dec 13, 2008 at 12:22 AM, James Hess wrote: > >> >> An in-depth strategy with hundreds or thousands

RE: Level 3 issues

2008-12-28 Thread Paul Stewart
What country, location, where you fed from?? -Original Message- From: marco [mailto:ma...@zero11.com] Sent: December 28, 2008 12:59 PM To: nanog@nanog.org Subject: Level 3 issues is anyone having issues with Level3?

RE: Level 3 issues

2008-12-28 Thread Paul Stewart
Ahh.. yes seeing that now here from Toronto ON - didn't see this issue when the original poster sent the first message... it's now happening here too... Shutting down their session until something looks "better" -Original Message- From: Pierre-Henri [mailto:phac...@gmail.com] Sent: Decem

Re: Ethical DDoS drone network

2009-01-04 Thread Paul Ferguson
NrsCCluieKHegdk= =jUJU -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Hirschmann Switches?

2009-01-05 Thread Paul Wall
I'm looking for feedback from users of the Hirschmann (Belden) ethernet switches in a service provider environment. Private or public appreciated. Drive Slow, Paul Wall

DNSSEC vs. X509 (Re: Security team successfully cracks SSL...)

2009-01-05 Thread Paul Vixie
sal. (yet.) but i'm investigating, and i recommend others do likewise. -- Paul Vixie

Re: Estimate of satellite vs. Land-based traffic

2009-01-06 Thread Paul Donner
Jeffrey, While technically you are correct, I would say that you probably should also add a category for mobile communications LAND/SEA/AIR. The traffic for these will be increasing in time as vendors are starting to put switches and routers on-board spacecraft making applications that were

Re: Estimate of satellite vs. Land-based traffic

2009-01-06 Thread Paul Donner
6 Jan 2009, Paul Donner wrote: WRT Kevin's query, if you are concerned about a solar incident and it's affects on satcom, you might want to take a look at what user base (e.g. which mobile users and what impact loss of comm will have on what they are doing) is affected rather than unders

RE: Anyone notice strange announcements for 174.128.31.0/24

2009-01-12 Thread Paul Stewart
ially) Paul -Original Message- From: Majdi S. Abbas [mailto:m...@latt.net] Sent: Monday, January 12, 2009 1:49 PM To: Michienne Dixon Cc: nanog@nanog.org Subject: Re: Anyone notice strange announcements for 174.128.31.0/24 On Mon, Jan 12, 2009 at 12:40:42PM -0600, Michienne Dixon wrote: >

RE: Anyone notice strange announcements for 174.128.31.0/24

2009-01-12 Thread Paul Stewart
next time before wasting a lot of people's time... Paul -Original Message- From: Michienne Dixon [mailto:mdi...@nkc.org] Sent: Monday, January 12, 2009 2:20 PM To: nanog@nanog.org Subject: RE: Anyone notice strange announcements for 174.128.31.0/24 The IAR was the source of my notice

RE: Anyone notice strange announcements for 174.128.31.0/24

2009-01-12 Thread Paul Stewart
For us, it was annoying - we look for prefix hijackings or what appear to be. In this case it was a false alarm but one that consumed NOC resources to troubleshoot and resolve... later to find out it was an "academic test" and nothing was really going on. Paul -Original Message

RE: Anyone notice strange announcements for 174.128.31.0/24

2009-01-12 Thread Paul Stewart
uite honest I'd be interesting in seeing/hearing the results ... but I believe a more careful approach is in order with consideration for the folks effected. Paul -Original Message- From: deles...@gmail.com [mailto:deles...@gmail.com] Sent: January 12, 2009 6:00 PM To: Michien

Re: Anyone notice strange announcements for 174.128.31.0/24

2009-01-12 Thread Paul Wall
relates to impact today. Also, I'd agree announcing other peoples' ASNs, without their permission, is in bad form. It's okay he's doing it to you, but I bet Randy would be a lot less smiley if you were to announce random paths with 3130. Drive Slow, Paul Wall

RE: Anyone notice strange announcements for 174.128.31.0/24

2009-01-13 Thread Paul Stewart
it that was the only time we've ever had an issue or until this new incident an alarm condition. So, now for "academic purposes" we see another alarm and fear the worst. Yes, treating it as a P1 makes sense for us so far - we're batting 50/50 for legit problems with this s

RE: Anyone notice strange announcements for 174.128.31.0/24

2009-01-13 Thread Paul Stewart
oping that history wasn't repeating itself (previously explained) and thankfully it wasn't ... but until the time is spent to make absolutely sure how do you know?? At the end of the day, it wasn't a serious operational issue but raised a number of concerns I believe Paul -

"IP networks will feel traffic pain in 2009" (C|Net & Cisco)

2009-01-20 Thread Paul Vixie
"Cisco VNI projections indicate that IP traffic will increase at a combined annual growth rate (CAGR) of 46 percent from 2007 to 2012, nearly doubling every two years. This will result in an annual bandwidth demand on the world's IP networks of approximately 522 exabytes2, or more than half a zetta

Re: Level3 NOC Contact

2009-01-20 Thread Paul Wall
IP space and they don't really care as I am not a direct > customer of theirs. 1-877-4-LEVEL3. The e-mail box isn't regularly monitored or responded to. Drive Slow, Paul Wall

Re: Inauguration streaming traffic

2009-01-20 Thread Paul Wall
etitors to be extra certain they could handle the traffic spike. With so many involved, and in the interests of full disclosure, do you or Comcast have any fiscal interest in BitGravity's streaming of this event? ;) Drive Slow Paul Wall

RE: inauguration streams review

2009-01-21 Thread Paul Stewart
Just curious on that note with COW .. did you have much security related problems setting up stuff nearby? -Original Message- From: Mike Lyon [mailto:mike.l...@gmail.com] Sent: Wednesday, January 21, 2009 1:52 PM To: Jack Carrozzo Cc: nanog@nanog.org Subject: Re: inauguration streams revie

Re: DNS Amplification attack?

2009-01-21 Thread Paul Vixie
practices that take account of packet source address spoofing as an unduring property of the internet. > We all should be taking this as a opportunity to find where > the leaks are in the BCP 38 deployment and correct them. > > Mark yea, verily. and maybe track down

Re: Are we really this helpless? (Re: isprime DOS in progress)

2009-01-24 Thread Paul Ferguson
e all need to bite the bullet and just do it. -BEGIN PGP SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFJe8qeq1pz9mNUZTMRAmXvAJ4h2V/p6Ak+woMbT9BTCOYrEKMlXACdFaFe icfmMA4432St/zl5j3yfQiA= =iWAr -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: Tightened DNS security question re: DNS amplification attacks.

2009-01-27 Thread Paul Vixie
i guess i'll start one and hope that various auditors will use google and notice me.) -- Paul Vixie

Re: Tightened DNS security question re: DNS amplification attacks.

2009-01-28 Thread Paul Vixie
> Pretty soon we need an RBL for DNS-oriented DDoS attacks. =) in the classic sense, you're wrong. in a neoclassic sense: "maybe". let me explain. the original RBL was designed to reject TCP/25 (SMTP) transactions based on source address reputation. we had a false start where we blackholed the

RE: can I ask mtu question

2009-01-30 Thread Paul Stewart
Depends on the hardware - GSR's have different MTU's than 7600's for example (and dependant on linecard too). We use 9216 between 7206VXR and 7606 for example. No, the change is immediate - "show interface" will tell you among other commands... Paul -Original Mess

RE: All Google Search Results: "This site may harm your computer."

2009-01-31 Thread Paul Stewart
Yeah, weird here if I'm logged in everything works - if I logout stuff breaks.. at least to google.ca (southern Ontario as well). -Original Message- From: steven.glog...@swisscom.com [mailto:steven.glog...@swisscom.com] Sent: January 31, 2009 10:16 AM To: nanog@nanog.org Subject: Re: A

RE: Private use of non-RFC1918 IP space

2009-02-02 Thread Paul Stewart
o much and next time call someone who knows what they are doing "you got ripped off, sorry about your luck" Oh, and their internal IP space = www.cnn.com ;) Paul -Original Message- From: sth...@nethelp.no [mailto:sth...@nethelp.no] Sent: February 2, 2009 1:56 PM

RE: Private use of non-RFC1918 IP space

2009-02-02 Thread Paul Stewart
What reason could you possibly have to use non RFC 1918 space on a closed network? It's very bad practice - unfortunately I do see it done sometimes.... Paul -Original Message- From: Trey Darley [mailto:t...@kingfisherops.com] Sent: February 2, 2009 10:48 AM To: nanog@nanog.org Su

Peer Filtering

2009-02-02 Thread Paul Stewart
gister at a IRR and the only party that pays the price is us in that sense.. Am I thinking right on this? ;) Cheers, Paul "The information transmitted is intended only for the person or entity to wh

RE: Peer Filtering

2009-02-03 Thread Paul Stewart
not nearly as attractive downstream giving the other carrier involved an advantage. I can see this is where convenience/economics start to kick in ;( Appreciate all the replies on-list and off-list - it seems there is about 80/20 split on people doing prefix-list vs IRR filtering

Re: Private use of non-RFC1918 IP space

2009-02-03 Thread Paul Timmins
s. Continue to run IPv4 internally for this application. There's no logical reason that IPv4 can't continue to coexist for decades. Heck, people still run IPX, right? -Paul

Re: v6 & DSL / Cable modems [was: Private use of non-RFC1918 IP space (IPv6-MW)]

2009-02-05 Thread Paul Timmins
lable name server by the time IPv6-only networks are in operation. And if not, hardcode em. It's not like your usual nameserver will be behind a nat anyway, and generally, a DNS server is a DNS server.* -Paul * Yes, there are times when your DNS server might be serving active directory

Re: v6 & DSL / Cable modems

2009-02-05 Thread Paul Vixie
devices. the fundamental implication is, forget about address space, it's paperwork now, it's off the table as a negotiating item or any kind of constraint. but the size of the routing table is still a bogeyman, and IPv6 arms that bogeyman with nukes. -- Paul Vixie

Re: v6 & DSL / Cable modems [was: Private use of non-RFC1918 IP space (IPv6-MW)]

2009-02-06 Thread Paul Jakma
for "hierarchical routing of bits past 64 is highly rare"). Think of IPv6 as a 64bit network address + host address. At least for now. regards, -- Paul Jakma p...@clubi.ie p...@jakma.org Key ID: 64A2FF6A Fortune: If you don't have a nasty obituary you probably didn't matter. -- Freeman Dyson

From San Jose to Google.com - via Europe

2009-02-06 Thread Paul Ferguson
-BEGIN PGP SIGNATURE- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFJjMlLq1pz9mNUZTMRAkRxAJ44p1olXBSJATT3IFf+vkKyAvmOxQCdES0P 9EwfbAHSX0ioHiKE2rLRV2c= =9v8s -END PGP SIGNATURE- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at

Re: From San Jose to Google.com - via Europe

2009-02-06 Thread Paul Ferguson
pKQhsMyuoFSRE= =2i5n -END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/

Re: From San Jose to Google.com - via Europe

2009-02-06 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Feb 6, 2009 at 3:55 PM, Paul Ferguson wrote: > > On Fri, Feb 6, 2009 at 3:51 PM, Tony Rall wrote: > >> Maybe you didn't read the thread "L3: Google from DC via the >> Netherlands? " >> >>

Re: 97.128.0.0/9 allocation to verizon wireless

2009-02-08 Thread Paul Wall
couple of lab GRE tunnels. Drive Slow, Paul Wall

Re: 97.128.0.0/9 allocation to verizon wireless

2009-02-08 Thread Paul Wall
over ARIN's eyes doesn't mean Verizon is too. :) Drive Slow, Paul Wall

Cogent Question - Increments Question

2009-02-11 Thread Paul Stewart
r pricing it shows 10 meg increments - is their enterprise customers different from their service provider customers on product offering? I've only dealt with them on the service provider front and found this information so far confusing Just looking for feedback on increments itself

<    4   5   6   7   8   9   10   11   12   13   >