Re: Contact for OCIX (Philipsburg, SX)

2020-06-29 Thread Steve
My viewing of their website only lists i...@ocix.net (which I’ll include here in plain because it’s in plain on their website). A few OCIX members are listed on their members page (web.archive.org version here: http://web.archive.org/web/20191202000450/http://www.ocix.net/ocix/index.php?option

Re: Solutions for DoS & DDoS

2012-12-06 Thread Steve
The ideal solution is a carrier that has its own true DDoS mitigation platform, and does not rely on black hole routing . Have the carrier handle the the large bulk flood attacks, then have your own prem base mitigation platform take care of the more application specific attacks that get through

Re: Cloudflare is down

2013-03-03 Thread Steve
Known Juniper security issue . We found it during testing and discovered it is fixed in later code. I don't have the specifics in front of me right now or I'd share. This Email was sent from Steve's iPad Message: 5 Date: Sun, 3 Mar 2013 20:31:35 + From: Vinod K To: Subject: RE: Cloudflar

Fwd: [ PRIVACY Forum ] Huge attack on WordPress sites

2013-04-13 Thread Steve
This is pretty old news , this "super bot-net" of compromised Wordpress sites ( and others) has been attacking since September Sent from my iPhone ONANOG Digest, > *

Re: Radware vs Arbor

2013-09-27 Thread Steve
A10 is in pretty early stages right now on DDoS , this may be a good thing if you have time to wait and can help mold them a bit. They are still mostly enterprise focused , not really carrier grade . Radware is a little further along, but Arbor is king when it comes suitability for a carrier d

PeeringDB Satisfaction Survey open now til November 20th

2020-11-02 Thread Steve McManus
early in 2021. Steve McManus on behalf of PeeringDB Product Committee

Re: PeeringDB Satisfaction Survey open now til November 20th

2020-11-16 Thread Steve McManus
We're still looking for more responses to the PeeringDB survey. Most people took about 2-3 minutes to fill it in, so it's pretty short. Please give us your feedback if you have a moment: https://surveyhero.com/c/f7be5236 -Steve > On Nov 2, 2020, at 3:43 PM, Steve M

NANOG 81: Call For Presentations

2020-11-19 Thread Steve Feldman
our virtual platform! Sincerely, Steve Feldman On behalf of the NANOG PC

CGNAT

2021-02-19 Thread Steve Saner
oking at a solution to support 5k to 15k customers and bandwidth up to around 30-40 gig as a starting point. A solution that is as transparent to user experience as possible is a priority. Thanks -- Steve Saner ideatek HUMAN AT OUR VERY FIBER This email transmission, and any documents, files o

Email and Web Hosting

2021-07-06 Thread Steve Saner
revenue coming from these services, but cost of maintenance is becoming a challenge. We are looking at migrating to another platform or completely discontinuing those services. I'm wondering if others here have gone through that process and have any advice as to how to go about it. --

Re: Email and Web Hosting

2021-07-06 Thread Steve Saner
The current platform is a custom collection of open source software, smtp, imap, pop, webmail. Web hosting is a basic LAMP stack all php 5.2 or greater. There is no interest in growing these services. On Tue, Jul 6, 2021 at 11:02 AM Bryan Fields wrote: > On 7/6/21 10:41 AM, Steve Saner wr

Re: Email and Web Hosting

2021-07-06 Thread Steve Saner
3:26 PM, Steve Saner wrote: > > The current platform is a custom collection of open source software, > smtp, > > imap, pop, webmail. Web hosting is a basic LAMP stack all php 5.2 or > > greater. There is no interest in growing these services. > > Ok, so this really doesn

Re: Email and Web Hosting

2021-07-07 Thread Steve Saner
This is good to know. I have also considered it for a number of things. Glad to know that it works. On Wed, Jul 7, 2021 at 10:30 AM John Levine wrote: > It appears that Steve Saner said: > >-=-=-=-=-=- > > > >The issue is not an understanding of how to run the system. Th

Re: Spamhaus ASN-DROP list

2021-07-26 Thread Steve Linford
Hi, Contact the SBL team via the Lookup form at https://check.spamhaus.org/ The form says 'IP or Domain' but it will also look up ASNs so just put your ASN in. That will allow you to create a ticket with the right team and the issue should then get dealt with fairly quickly. Regards

Re: AS 3356 (Level 3) -- Community 3356:666

2021-08-04 Thread Steve Meuse
Unless, of course, your BGP policy was written long before that RFC was established and you didn't think it was worth the config upgrade to support something that had been in use since around 1998 or so :) -Steve On Wed, Aug 4, 2021 at 10:27 AM Daniel Suchy via NANOG wrote: &g

PeeringDB Hackathon - looking for feature requests

2021-08-12 Thread Steve McManus
in email, even if they're not strictly Hackathon ideas. They are always appreciated! Thanks! -Steve PeeringDB Product Committee chair

Re: Setting sensible max-prefix limits

2021-08-18 Thread Steve Lalonde
date. Our transits we use data from the weekly routing table reports and allow some expansion room. So far this works for us Regards Steve

DiviNetworks

2020-02-05 Thread Steve Saner
Has anyone here worked with DiviNetworks (https://divinetworks.com/) to "sell" their unused bandwidth? I'd be curious to hear any thoughts or experiences. Steve -- -- Steven Saner

Re: NANOG 78 Webcasts

2020-02-15 Thread Steve Feldman
ntil next week. Steve

he.net certificate expiriation

2020-02-26 Thread Steve Jones
The *.he.net cert expired today so the looking glass is inaccessible from chrome if anyone here has a contact to rectify

Re: AT&T is suspending broadband data caps for home internet customers due to coronavirus

2020-03-13 Thread Steve Meuse
r than the peak dropping at all, the peak will stretch over a longer time period. -Steve On Thu, Mar 12, 2020 at 6:50 PM Tom Paseka via NANOG wrote: > I am not worried. Residential ISPs are usually at peak in the late > evening. They have loads of capacity during the day. > > On Thu

Re: WIKI documentation Software?

2020-03-17 Thread Steve Saner
On 3/17/20 8:25 PM, Craig wrote: Then comes the task of getting the legacy wiki pages off the Mac wiki server over to the new wiki Oh, man. If you figure that one out, let me know. I'm in the same boat there.

Re: interesting troubleshooting

2020-03-20 Thread Steve Meuse
What that large flow in a single LSP? Is this something that FAT lsp would fix? -Steve On Fri, Mar 20, 2020 at 5:33 PM Nimrod Levy wrote: > I just ran into an issue that I thought was worth sharing with the NANOG > community. With recently increased visibility on keeping the In

Re: CBS Streaming NOC Contact

2020-05-18 Thread Steve Feldman
e, let me know your support ticket information and I'll attempt to escalate it. Steve > On May 18, 2020, at 9:21 AM, Jesse DuPont > wrote: > > Good morning. Does anyone have an email contact for CBS All Access streaming > NOC? We're struggling with what appear to

Re: [c-nsp] Devil's Advocate - Segment Routing, Why?

2020-06-19 Thread steve ulrich
g any further into an IOS XE > platform could be dicey at best, egg-face at worst. > > I could be wrong... never underestimate the desire of product managers and engineering teams to have their own petri dishes to swim around in. -- steve ulrich (sulrich@botwerks.*)

PeeringDB 2021 User Survey

2021-09-09 Thread Steve McManus
umentation. Please take the survey here: https://surveyhero.com/c/peeringdb2021usersurvey You have about a month to fill it in - it will be open until 23:59 on October 8th. You can read more about the survey here: https://docs.peeringdb.com/blog/peeringdb_2021_user_survey/ Thanks! -Steve

Re: PeeringDB Hackathon - looking for feature requests

2021-09-29 Thread Steve McManus
sersurvey We'd really appreciate more input from the community on what we're doing well, could be doing better, etc. Thanks! -Steve > On Aug 12, 2021, at 3:27 PM, Steve McManus wrote: > > PeeringDB is looking at participating at an upcoming NANOG Hackathon. One of > th

Re: [External] Normal ARIN registration service fees for LRSA entrants after 31 Dec 2023 (was: Fwd: [arin-announce] Availability of the Legacy Fee Cap for New LRSA Entrants Ending as of 31 December 20

2022-09-16 Thread Steve Noble
On Fri, Sep 16, 2022, 8:55 AM John Curran wrote: > Tom - > > It’s an artifact of our formation that we are presently providing services > to any customers absent any agreement > and while ARIN continues to do so (by providing basic services to legacy > customers), the long-term direction is > to

Re: [External] Normal ARIN registration service fees for LRSA entrants after 31 Dec 2023 (was: Fwd: [arin-announce] Availability of the Legacy Fee Cap for New LRSA Entrants Ending as of 31 December 20

2022-09-16 Thread Steve Noble
On Fri, Sep 16, 2022, 9:23 AM John Curran wrote: > > On 16 Sep 2022, at 12:09 PM, Steve Noble wrote: > > (This is the direction that the ARIN Board of Trustees has set based on >> community input; I will note that >> the ARIN Board is itself elected by the commun

Re: [External] Normal ARIN registration service fees for LRSA entrants after 31 Dec 2023

2022-09-16 Thread Steve Noble
John Curran wrote on 9/16/22 9:30 AM: On 16 Sep 2022, at 12:26 PM, Steve Noble <mailto:sno...@sonn.com>> wrote: On Fri, Sep 16, 2022, 9:23 AM John Curran <mailto:jcur...@arin.net>> wrote: Steve - If you have IPv4 or IPv6 resources under an RSA/LRSA, then y

Re: [External] Normal ARIN registration service fees for LRSA entrants after 31 Dec 2023

2022-09-16 Thread Steve Noble
William Herrin wrote on 9/16/22 9:28 AM: On Fri, Sep 16, 2022 at 9:09 AM Steve Noble wrote: On Fri, Sep 16, 2022, 8:55 AM John Curran wrote: It’s an artifact of our formation that we are presently providing services to any customers absent any agreement and while ARIN continues to do so

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Steve Sullivan
Hi Willy, I will ping the OARC team on your email.  Something might be up with the list. Steve On 5/15/2023 8:38 PM, Willy Manga wrote: Hi, DNS speaking, I can query G root servers; at least, that's the most important. However, from several sites, either on IPv4 or IPv6, I cannot p

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Steve Sullivan
on our self-hosted Mattermost server. Our chat server is where OARC meets the wider DNS Community. Also, I will be at NANOG 88 in Seattle in June if anyone would like to meet up. Regards, Steve Sullivan Membership Coordinator OARC Mattermost Chat: @stevos On 5/16/2023 8:52 AM, Steve Sulliva

Re: Office 365 Calendar support for macOS Calendar App

2023-05-23 Thread Steve Lalonde
recently, I’m on 13.4 now. I only fire up outlook to adjust filters on e-mail. Steve > On 23 May 2023, at 12:42, Mark Tinka wrote: > > Hi all. > > It may just be me, or it may not, but figured I'd ask... it seems like > Microsoft's 365 cloud service does not

Re: Verizon DNS Contact

2023-05-30 Thread Steve Sullivan
they all hanging out? Steve On 5/30/2023 9:56 AM, Eric Sieg wrote: Earl, Reach out to hel...@verizon.com.  That'll open a ticket that you can track.  I can't promise how quick it'll be, but you should get someone that can help. On 5/30/2023 9:14 AM, Ruberts, Earl via NANO

Re: Verizon DNS Contact

2023-05-30 Thread Steve Sullivan
It was brought to my attn in a PM that the DNS Affinity group may not be that easy to find. Try this link: <https://community.nanog.org/t/dns-affinity-group/>. Steve On 5/30/2023 11:53 AM, Steve Sullivan wrote: Hi Earl, Have you tried posting this on the DNS Affinity group in the

Re: FCC Chair Rosenworcel Proposes to Investigate Impact of Data Caps

2023-06-16 Thread Steve Meuse
I always looked at Comcast's caps as pre-emptive fodder for future FCC bargaining. The next time they want to do something with the FCC's approval and the commission wanted a concession, they would offer it up for the block. -Steve On Fri, Jun 16, 2023 at 1:41 AM Crist Clark wrote:

Re: Last Mile ISP Quality Measurements

2023-08-09 Thread Steve Pointer
Have you considered hosting a Ripe Anchor? https://atlas.ripe.net/anchors/about/ Minimal cost, good of the Internet project, good insights, answers the use case you describe. Steve P

Re: JunOS/FRR/Nokia et al BGP critical issue

2023-08-30 Thread Steve Noble
Tom Beecher wrote on 8/30/23 8:22 AM:  vendors should adopt RFC7606 Yes   and not be absolutely awful at responding to vulnerability reporting. 1. This isn't exactly new. It's been possible to do this since the original days of BGP. Literally the first thing that came into my m

Re: Someone (with clue) from GoDaddy, please pick up the red courtesy phone?

2023-08-31 Thread Steve Sullivan
G are solid partners, and colocate events OFTEN, so its a great place for DNS @ NANOG if you will. I have facilitated more than a few connections to the DNS world there. Thanks, Steve Sullivan Membership Coordinator OARC Mattermost Chat: @stevos On 8/31/2023 10:10 AM, Rubens Kuhl wrote: On Thu, A

Re: AFRINIC placed in receivership

2023-09-15 Thread Steve Sullivan
XX  was running for a Board Seat at APNIC and may have been in attendance in the recent APNIC conference. Very controversial stuff there, with lessons to be learned and remembered and situations to be avoided at all costs. Corruption and $$$. On 9/15/2023 3:05 PM, Eric Kuhnke wrote: A mu

Multi-tenant Internet Access

2019-04-11 Thread Steve Danello
over the same cabling where they were provided about 60+ standard def channels. Any guidance appreciated. Best; Steve

RE: Special Counsel Office report web site

2019-04-18 Thread Naslund, Steve
Agreed, I remember the biggest problem when the Starr Report was released was that our dial-up PoPs had all lines busy. It was a different Internet then. Steven Naslund Chicago IL > Hey Mike. > > Agreed. But the scale of a 400 page document with global interest? > Should be highly cached with

RE: Mexico

2019-05-30 Thread Naslund, Steve
You might want to check with a company called Transtelco. They are an alternate fiber provider (outside of Telmex). Steven Naslund Chicago IL From: NANOG On Behalf Of Mehmet Akcin Sent: Thursday, May 30, 2019 9:20 AM To: nanog Subject: Mexico Hi there I am looking for dark fibre in several

Re: PSA: change your fedex.com account logins

2019-05-31 Thread Steve Atkins
entication of some sort adopted by their customers. But a lot of them didn't do that (partly, I suspect, because the ESP account was accessed by multiple employees) and even if they did that didn't stop the lists that had already been downloaded. Actual compromises of the ESP, or bad behaviour of it's employees, seem to be rather rare but customer account compromise is everywhere. Cheers, Steve

Re: Level3/CenturyLink IRR Contact

2019-07-08 Thread Steve Saner
esponse back after that was that it isn't in the IRR. I wrote back showing that it in fact was in the IRR. After a couple days of no response I commented the ticket again asking for the issue to be escalated. Finally got a response back that it had

RE: 44/8

2019-07-22 Thread Naslund, Steve
I think the Class E block has been covered before. There were two reasons to not re-allocate it. 1. A lot of existing code base does not know how to handle those addresses and may refuse to route them or will otherwise mishandle them. 2. It was decided that squeezing every bit of sp

RE: 44/8

2019-07-23 Thread Naslund, Steve
In defense of John and ARIN, if you did not recognize that ARDC represented an authority for this resource, who would be? The complaints would have been even more shrill if ARIN took it upon themselves to “represent” the amateur radio community and had denied the request or re-allocated the ass

RE: 44/8

2019-07-23 Thread Naslund, Steve
>I can guarantee you that Akamai is very much run by beancounters in addition >to engineers. I have first hand experience with that. > >I can also assure you that it’s quite unlikely that any of Comcast, Netflix, >Facebook, Google, AT&T, T-Mobile, or Verizon just to name a few of the biggest >ar

RE: 44/8

2019-07-23 Thread Naslund, Steve
How about this? If you guys think your organization (club, group of friends, neighborhood association, whatever...) got screwed over by the ARDC, then why not apply for your own v6 allocation. You would then have complete control over its handling and never have to worry about it again. If yo

RE: 44/8

2019-07-23 Thread Naslund, Steve
Why bother purchasing space? CGNAT or v6 would both be better ways to go and future proof. The v4 space you purchase today will be essentially worthless. Steven Naslund Chicago IL >I really just want to know how I can purchase some more of that 44. >space :)

RE: 44/8

2019-07-23 Thread Naslund, Steve
So, if ARIN allocates a v6 assignment to ARDC how do you plan to use it without a router or BGP. Whether it's v4 or v6 you need to route it somewhere. If you have a PC, you can have a router and if you don't have a PC you probably don't need to worry about any of this. If your club can't aff

Re: User Unknown (WAS: really amazon?)

2019-07-31 Thread Steve Pointer
> OK, I'll bite. What reasons are they giving for their resistance? (And > if known, > what are the *real* reasons if different?) https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2018-October/thread.html -- Steve P

RE: The Curious Case of 143.95.0.0/16

2019-09-03 Thread Steve Spence
Very interesting story great work Ronald -Original Message- From: NANOG On Behalf Of Ronald F. Guilmette Sent: Wednesday, August 28, 2019 2:27 AM To: nanog@nanog.org Subject: The Curious Case of 143.95.0.0/16 Fair Warning: Those of you not enamored of my long-winded exposés of var

RE: NetworkLayer

2019-09-23 Thread Naslund, Steve
Just a tip, but you cannot really determine packet loss on an MPLS network with a traceroute. The nodes between the provider edge routers may not even represent your real path. Also, provider routers within their network will be handling pings much differently than they handle your actual traf

RE: IPv6 Thought Experiment

2019-10-02 Thread Naslund, Steve
A few thoughts: 1. What global organization has the ability to impose a tax on any nation’s citizens? 2. Do you not see an issue with making everyone worldwide get rid of every device that supports v4? Kind of a burden for a developing country, no? Also, a bit of an e-waste proble

RE: IPv6 Thought Experiment

2019-10-02 Thread Naslund, Steve
It's certainly financial but it's not just companies being cheap. For example for smaller companies with a limited staff and small margins. They may want to have v6 everywhere but lack the resources to do it. It would for certain speed up the process but there would be collateral damage in the p

Re: IPv6 Thought Experiment

2019-10-02 Thread Steve Pointer
> And for bonus points, consider the following: what if all certification > bodies of equipment, for certifications like FCC’s or CE in Europe, for > applications after Jan 1st 2023 would include a “MUST NOT support IPv4”.. I think a good start would be: "MUST support IPv6"!

RE: IPv6 Pain Experiment

2019-10-02 Thread Naslund, Steve
In my experience, the biggest hurdle to installing a pure IPv6 has nothing to do with network gear or network engineers. That stuff I expect to support v6. This biggest hurdle is the dumb stuff like machinery interfaces, surveillance devices, the must have IP interface on such and such of an o

RE: IPv6 Pain Experiment

2019-10-03 Thread Naslund, Steve
t I really feel like ipv6 could have > been made more human friendly and ipv4 interoperable. > >> On Oct 2, 2019, at 8:49 PM, Doug Barton wrote: >> >>> On 10/2/19 3:03 PM, Naslund, Steve wrote: >>> The next largest hurdle is trying to explain to your server

RE: IPv6 Pain Experiment

2019-10-03 Thread Naslund, Steve
>Another misconception. Humans (by and large) count in decimal, base 10. >IPv4 is not that. It only LOOKS like that. In fact, the similarity to familiar >decimal numbers is one of the reasons that people who are new to networking >stumble early on, find CIDR challenging, etc. Go ahead and read

Re: Comcast iNET Contact

2019-11-27 Thread Steve Meuse
Contact the licensing authority for your municipality. There is typically a government liaison position that *might* be able to help. If it's fiber, you have a slightly better chance of it actually being documented, but only slightly :) -Steve On Tue, Nov 26, 2019 at 2:29 PM Stephen M

Re: Comcast iNET Contact

2019-11-27 Thread Steve Meuse
In my local municipality (as part of a contract renegotiation) we swapped support of the coaxial iNet in favor of dark fiber between specific buildings, that we would be in charge of lighting ourselves. -Steve On Wed, Nov 27, 2019 at 11:15 AM Brandon Price wrote: > Are you sure it’s e

Re: Arista Switch Suggestion

2019-12-06 Thread Steve Meuse
You should be able to do that with Sflow, which they all/most support. Also, this seems like standard Ifmib stuff, any snmp poller should be able to handle that, from a metrics perspective . -Steve On Fri, Dec 6, 2019 at 4:31 PM Mike Hammett wrote: > I asked over at https://puck.nether.

RE: CDN, Steam, Origin and NAT.

2016-04-21 Thread Steve Mikulasik
I do the network for a few lan parties. Last year we had 400+ people on 3 IPs and didn't have any issues. I don't think those services are that picky anymore since the rise of CGN. Just a side thing, but my advice is to look into setting up a lancache server for Steam. -Original Message--

RE: ISP License in the USA?

2016-05-31 Thread Naslund, Steve
What you have been hearing so far is correct. You do not need a license to be an ISP other than normal business licenses in your municipality/state. The only thing I can think of would be if you were a voice carrier or wanted to become a CLEC which would give you better/cheaper access to loca

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
Two problem I see with that. 1. My TV is going to have a hard time figuring out its GPS location inside my living room. 2. It's not hard to make a device lie about a GPS position. Steven Naslund Chicago IL -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Beha

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
Their app could request your devices location. Problem is a lot of devices (like TVs, Apple TVs, most DVD player, i.e. device with built in Netflix) don't know where they are and it cannot easily be added (indoor GPS is still difficult/expensive) and even if they could should they be believed.

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
the world. Simple to implement and damn near impossible to beat. Ever hear of Slingbox? Steven Naslund Chicago IL From: Cryptographrix [mailto:cryptograph...@gmail.com] Sent: Friday, June 03, 2016 3:42 PM To: Naslund, Steve; nanog@nanog.org Subject: Re: Netflix VPN detection - actual engineer

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
Well, that's the rub of the whole issue with Netflix VPN detection. They don't actually detect the VPN, they detect a bunch of people coming from the same IP address which they assume to be done via a VPN or proxy. Any large networks sitting behind a single NAT are going to get looked at that

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
al Message - From: "Steve Naslund" To: nanog@nanog.org Sent: Friday, June 3, 2016 3:55:43 PM Subject: RE: Netflix VPN detection - actual engineer needed Wifi location depends on a bunch of problematic things. First, your SSID needs to get collected and put in a database somewhere. That it

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
Actually it's time for Netflix to get out of the network transport business and tell the content providers to get over it or not get carried on Netflix. It used to be that Netflix needed content providers, now I am starting to believe it might be the other way around. Netflix might have to tak

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
Chicago IL From: Cryptographrix [mailto:cryptograph...@gmail.com] Sent: Friday, June 03, 2016 4:56 PM To: Naslund, Steve; nanog@nanog.org Subject: Re: Netflix VPN detection - actual engineer needed Oh I'm not suggesting for a microsecond that any provenance of location can not be hacked, but I to

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
://www.ics-il.com Midwest-IX http://www.midwest-ix.com - Original Message - From: "Steve Naslund" To: nanog@nanog.org Sent: Friday, June 3, 2016 4:51:38 PM Subject: RE: Netflix VPN detection - actual engineer needed Actually it's time for Netflix to get out of the netwo

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
customers a memo explaining how badly Netflix VPN detection works and why it is so hard for us to help with it and why they should be complaining to Netflix. Steven Naslund From: Cryptographrix [mailto:cryptograph...@gmail.com] Sent: Friday, June 03, 2016 5:06 PM To: Naslund, Steve; nanog@nanog.org

RE: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Naslund, Steve
with WiFi disabled so if they told the lawyers that, they lied. Steven Naslund Chicago IL From: Cryptographrix [mailto:cryptograph...@gmail.com] Sent: Friday, June 03, 2016 5:18 PM To: Naslund, Steve; nanog@nanog.org Subject: Re: Netflix VPN detection - actual engineer needed "there

Re: Netflix VPN detection - actual engineer needed

2016-06-06 Thread Steve Atkins
few VPN providers seems a figleaf to keep the content providers happier while inconveniencing relatively few end users - anyone who's using a VPN or tunnel anyway can probably change things around to avoid the blocking with little effort. Cheers, Steve

Re: Netflix VPN detection - actual engineer needed

2016-06-08 Thread Steve Atkins
ystem. Given the number of pieces of off-the-shelf packaged software that are designed to allow the end-user, with no technical expertise required, to proxy through an HE tunnel so as to avoid Netflix geolocation[1] I don't blame Netflix for blocking HE tunnels, but I do blame them for doing so badly. Cheers, Steve [1] e.g. https://github.com/ab77/netflix-proxy

RE: Netflix banning HE tunnels

2016-06-09 Thread Steve Mikulasik
https://i.imgur.com/LvVHJZf.png I had to make this, talking about IPv6 or geo-ip in nanog is like throwing blood in the water :)

RE: NAT firewall for IPv6?

2016-07-05 Thread Naslund, Steve
Hard to know where to begin with this one, but let me take a shot at it. 1. My top priority would be to get into that Palo Alto firewall. Get Palo Alto on the phone and figure out password recovery with them. Since you don’t have the password it is possible that firewall is compromised. Do n

RE: NAT firewall for IPv6?

2016-07-05 Thread Naslund, Steve
On another note, using a firewall to stop viruses is probably not going to work in general (unless the firewall has some additional malware detection engine). Here is the issue in a nutshell. A firewall primarily controls where people can connect to and from on a network. The problem with th

RE: NAT firewall for IPv6?

2016-07-05 Thread Naslund, Steve
That is a good point. In order for your PCs to be compromised via ipv6, they would have to be able to establish ipv6 connectivity to each other or to an internet location. If your network is not configured to support ipv6 it will probably only be possible for your clients to communicate with

RE: NAT firewall for IPv6?

2016-07-05 Thread Naslund, Steve
Did you get the impression that this person asking for help was going to be able to set that up? I didn't (if he was he would probably already know what an ACL is). I do not know if the Catalyst he is looking at is his or his service providers edge devices (or maybe the consultants didn't give

RE: NAT firewall for IPv6?

2016-07-05 Thread Naslund, Steve
It is all about defense in depth. The engineers here are speaking to the network pieces (the second N in NANOG is network, right :) and we have told this person that it is unlikely that v6 in the only vector and I myself talked about malware handling on the clients themselves. From a network e

Re: Leap Second planned for 2016

2016-07-10 Thread Steve Allen
le goals, but it is only possible to pick two http://www.ucolick.org/~sla/leapsecs/picktwo.html -- Steve Allen WGS-84 (GPS) UCO/Lick Observatory--ISB 260 Natural Sciences II, Room 165 Lat +36.99855 1156 High Street Voice: +1 831 459 3046

RE: Best practices for telcoflex -48VDC cabling & other power OSI layer 1

2016-07-18 Thread Naslund, Steve
Not sure where to find it exactly but the Bellcore power wiring standard is what is used for central office installations. I think if you google Bellcore standard you will find what you are looking for. Steven Naslund Chicago IL -Original Message- From: NANOG [mailto:nanog-boun...@nano

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Steve Atkins
> On Jul 26, 2016, at 7:15 PM, Mehmet Akcin wrote: > > Have you tried to contact their Abuse?. For a long time their abuse@ alias was (literally) routed to /dev/null. I'm not sure whether that's still the case or whether they now ignore reports manually. Cheers, Steve

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Steve Atkins
> On Jul 26, 2016, at 7:58 PM, Justin Paine wrote: > > Folks, > > "For a long time their abuse@ alias was (literally) routed to /dev/null. I'm > not > sure whether that's still the case or whether they now ignore reports > manually." > >

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Steve Mikulasik
I am sure a lawyer would see it very differently, I could see someone looking at this like racketeering. They get paid to provide a service to defend against DDoS, well knowingly hosting people who conduct DDoS attacks. Cloudflare profits from both the victims and the criminals. If Cloudflare is

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Steve Atkins
> On Jul 27, 2016, at 9:17 AM, Baldur Norddahl > wrote: > > Den 27. jul. 2016 17.12 skrev "Steve Mikulasik" : >> >> Disclaimer: I have a ton of respect for Clouldflare and what they do on > the internet. > > They just lost all respect from here. W

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-28 Thread Naslund, Steve
A DDoS attack is illegal. In the United States it is considered as theft of service. The legal construct used is that the DDoS attack is a theft of CPU cycles, compute resources, and power by other than the rightful owner for its intended purposes. Steven Naslund Chicago IL -Original Mes

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-28 Thread Naslund, Steve
There are not international cyber crime laws because there is no international law enforcement agency with the reach to enforce them and because most countries like things like sovereignty. There is also an inherent conflict between private citizen hacking and state sponsored hacking and the li

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-28 Thread Naslund, Steve
Miles is right. Their thinly veiled "stress tester" thing is not going to be much of a defense. They must not have very good legal counsel. Here is the issue. Stress testing is perfectly legal as long as I am: a) Stress testing my own stuff b) Stress testing your stuff WITH Y

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-28 Thread Naslund, Steve
It is not beyond the realm of law enforcement to run down the entire chain of events all the way back to the “whodunit” and “howdunit”. It is pretty amazing what they can figure out when they put their minds to it and don’t underestimate what they can learn by getting someone in the hot seat un

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-28 Thread Naslund, Steve
;From: Phil Rosenthal [mailto:p...@isprime.com] >Sent: Thursday, July 28, 2016 11:57 AM >To: Naslund, Steve >Cc: nanog@nanog.org >Subject: Re: EVERYTHING about Booters (and CloudFlare) > >Are you of the opinion that the victim of a DDoS attack who is not a >multi-billion-dollar co

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-28 Thread Naslund, Steve
The best analogy to real world would be to look at CloudFare as an arms dealer. They don't start the war but they sure enable it. The governments probably don't care who you sell arms to until their goat gets gored and then they are coming for you. Believe me they have more than enough laws

RE: Cloudflare, dirty networks and politricks

2016-07-28 Thread Naslund, Steve
entities that do not take going to war with each other as lightly as we did back in the day. Steven Naslund Chicago IL >-Original Message- >From: J. Oquendo [mailto:joque...@e-fensive.net] >Sent: Thursday, July 28, 2016 12:17 PM >To: Phil Rosenthal >Cc: Naslund, Steve;

RE: EVERYTHING about Booters (and CloudFlare)

2016-07-29 Thread Naslund, Steve
What he said. If I am given a court order and follow it, I can't get sued when I knock you off the Internet. Steven Naslund >-Original Message- >From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Randy Bush >Sent: Friday, July 29, 2016 8:04 AM >To: chris >Cc: North American Netwo

RE: Zayo Extortion

2016-08-15 Thread Naslund, Steve
That is pretty close to my experience. I would say nearly all carriers have billing nightmares and some of them have networks that work well. Best carrier for billing is a bit like asking for the best ice skater in hell. Steven Naslund Chicago IL -Original Message- From: NANOG [m

RE: Zayo Extortion

2016-08-15 Thread Naslund, Steve
Exactly, It is unlikely they will ever be able to collect on a debt they do not have documentation to support but that does not stop them from disconnecting your service whenever they want. You might have legal recourse to go after them if they disconnect you but it won’t be fast and it won't

  1   2   3   4   5   6   7   8   9   10   >