Re: Connectivity issue between Verizon and Amazon EC2 (NTT issue?)

2014-07-24 Thread Valdis . Kletnieks
On Wed, 23 Jul 2014 06:31:06 -0700, Ca By said: > Fooled me once shame on you. Fooled me twice... Dont by service from > companies that allow peering wars to happen at paying customers expense > (verzon, cogent, ...) There's one coax coming into my domicile, and the owner of the other end of the

EFF gets into the CPE router software business..

2014-07-24 Thread Valdis Kletnieks
So the EFF is pushing development of an open CPU router https://www.eff.org/deeplinks/2014/07/building-open-wireless-router https://openwireless.org/ It's currently targeting WNDR3800's and based on the CeroWRT software (which works pretty well in my own experience). What will possibly be intere

Re: TCP Window Scaling issue

2014-07-24 Thread Valdis . Kletnieks
On Thu, 24 Jul 2014 14:33:56 -0400, Zach Hill said: > First is the SYN from Server A to Server B http://i.imgur.com/E5cu4ev.png Was this captured with tcpdump on Server A on its way out, or on Server B on its way in, or at some other point using a span port? The answer matters if we're suspectin

Re: EFF gets into the CPE router software business..

2014-07-25 Thread Valdis . Kletnieks
On Thu, 24 Jul 2014 22:06:38 -0700, George Herbert said: > Any idea how well CeroWRT stands up to nation-state level intrusion efforts? If they are as determined as FBI v Scarfo (the FBI pulled a black bag job to install a keystroke logger in a mobster's PC to capture his PGP passphrase), it's pr

Re: Question about migrating to IPv6 with multiple upstreams.

2011-06-14 Thread Valdis . Kletnieks
On Tue, 14 Jun 2011 13:04:11 EDT, Ray Soucy said: > A better solution; and the one I think that will be adopted in the > long term as soon as vendors come into the fold, is to swap out > RFC1918 with ULA addressing, and swap out PAT with NPT; then use > policy routing to handle load balancing and

Re: The stupidity of trying to "fix" DHCPv6

2011-06-15 Thread Valdis . Kletnieks
On Wed, 15 Jun 2011 19:04:44 +0200, sth...@nethelp.no said: > How big is huge? To some degree it depends on how broadcast "chatty" > the protocols used are - but there's also the matter of having a > size which makes it possible to troubleshoot. Personally I'd prefer > an upper limit of a few hund

Re: Large jump in global table prefix count?

2011-06-15 Thread Valdis . Kletnieks
On Wed, 15 Jun 2011 22:51:52 EDT, Chris Griffin said: > PrefixesChange ASnum AS Description > 19227 115->19342 AS15557 LDCOMNET NEUF CEGETEL (formerly LDCOM > NETWORKS) Somehow, I get the feeling that a network engineer at AS15557 is about to have a very bad

Re: Cogent depeers ESnet

2011-06-19 Thread Valdis . Kletnieks
On Sun, 19 Jun 2011 03:15:09 CDT, Robert Bonomi said: > Anybody got draft language for a SLA clause that requires routing 'at least > one hop _past_ the provider's network edge' for every AS visible at major > public peering points and/or LookingGlass sites? *every* ASN? Oh my. ;) pgpZ65dL0bm

Re: Address Assignment Question

2011-06-20 Thread Valdis . Kletnieks
On Mon, 20 Jun 2011 09:26:30 EDT, Steve Richardson said: > *definitely* concerns me. One thing they do say is that they need > several IPs per block to assign to their MTAs to handle such a large > amount of email (3 to 5 million per day). Being primarily focused on > layers 1 through 4, I don't

Re: ICANN to allow commercial gTLDs

2011-06-21 Thread Valdis . Kletnieks
On Mon, 20 Jun 2011 18:39:00 MDT, Joel Maslak said: > I wonder what sort of money .wpad would be worth... I was thinking .gbmh myself... pgpRDYInukJWY.pgp Description: PGP signature

Re: Yup; the Internet is screwed up.

2011-06-22 Thread Valdis . Kletnieks
On Wed, 22 Jun 2011 15:52:17 CDT, Erik Amundson said: > I agree, the whole use of the terms 'need' and 'want' in this conversation > are ridiculous. It's the Internet. The entire thing isn't a 'need'. It's > not like life support or something that will cause loss of life if it isn't > there. If

Re: BGP Design question.

2011-06-23 Thread Valdis . Kletnieks
On Thu, 23 Jun 2011 07:44:33 CDT, -Hammer- said: > Agreed. At an enterprise level, there is no need to risk extended > downtime to save a buck or two. Redundant hardware is always a good way > to keep Murphy out of the equation. And as far as hardware failures go, > it's not that common. Nowaday

Re: NDP DoS attack (was Re: Anybody can participate in the IETF (Was: Why is IPv6 broken?))

2011-07-15 Thread Valdis . Kletnieks
On Thu, 14 Jul 2011 23:13:03 PDT, Owen DeLong said: > On Jul 14, 2011, at 8:24 PM, Jimmy Hess wrote: > > In most cases if you have a DoS attack coming from the same Layer-2 > > network that a router is attached to, > > it would mean there was already a serious security incident that > > occured to

Re: dynamic or static IPv6 prefixes to residential customers

2011-07-26 Thread Valdis . Kletnieks
On Tue, 26 Jul 2011 16:02:14 PDT, Leo Vegoda said: > Do German web sites not track users with cookies, then? There's a subtle but significant difference between what cookies give you, which is "This is the same entity that visited our page at 7:48PM last Tuesday", and what easily trackable IP addr

Re: dynamic or static IPv6 prefixes to residential customers

2011-07-26 Thread Valdis . Kletnieks
On Tue, 26 Jul 2011 18:25:30 PDT, Scott Weeks said: > (who's still bristling from the last discussion about this where Valdis kept > saying "Privacy is dead. Get used to it." Man, leave one smiley off and it follows you for life. ;) http://mailman.nanog.org/pipermail/nanog/2011-May/036270.htm

Re: SORBS contact

2011-07-28 Thread Valdis . Kletnieks
On Thu, 28 Jul 2011 12:31:13 PDT, "Brian R. Watters" said: > We are looking for a SORBS contact as their web site and registration process > is less than friendly if somehow you get listed by them. You're new here, aren't you? :) (Sorry, couldn't resist. Previous discussion on NANOG: http://ww

Re: [BULK] Re: SORBS contact

2011-07-28 Thread Valdis . Kletnieks
On Thu, 28 Jul 2011 14:16:23 PDT, "Brian R. Watters" said: > Thanks .. their attempts to reach us are blocked via our Barrcacuda's due to > the fact that they are sending with a blank FROM: and as such Barracuda thinks > its SPAM Please clarify. Are they sending MAIL FROM:(syntactically

Re: [BULK] Re: SORBS contact

2011-07-29 Thread Valdis . Kletnieks
On Fri, 29 Jul 2011 09:48:44 EDT, William Herrin said: > Correction: It's a standard way to denote that "this mail is a bounce > report." Correction to your correction: What the RFC actually says: 4.5.5. Messages with a Null Reverse-Path There are several types of notification messages tha

Re: [BULK] Re: SORBS contact

2011-07-30 Thread Valdis . Kletnieks
On Fri, 29 Jul 2011 23:52:50 +0200, Michelle Sullivan said: > reference to bounce messages and mailing lists.) The registration email > has a null return path because people will put in forged addresses and > we don't want them to do that in the first place, and if they do it, we > certainly don'

Re: [BULK] Re: SORBS contact

2011-07-30 Thread Valdis . Kletnieks
On Sat, 30 Jul 2011 09:46:13 EDT, William Herrin said: > Point taken. Bounce reports, temporary failure reports and successful > delivery reports. Nevertheless, it still isn't for "other > programmatically generated mail." In fact, the next paragraph in RFC > 5321 4.5.5 says: > > "All other types

Re: [BULK] Re: SORBS contact

2011-07-31 Thread Valdis . Kletnieks
On Sat, 30 Jul 2011 15:18:17 EDT, William Herrin said: > 2. I assume the subscription request came from a web page because if > it was from an email request you received then you ignored my SPF > records when generating the confirmation request. That was OK in 2001 > but in 2011 you ought not be d

Re: [BULK] Re: SORBS contact

2011-07-31 Thread Valdis . Kletnieks
On Sun, 31 Jul 2011 18:36:22 EDT, William Herrin said: > On Sun, Jul 31, 2011 at 2:32 PM, wrote: > >That sort of shoots your "If Woody had gone straight to the > >SPF record, none of this would have happened" claim. > > My WHAT claim? What you said: > 2. I assume the subscription request came

Re: dynamic or static IPv6 prefixes to residential customers

2011-08-03 Thread Valdis . Kletnieks
On Tue, 02 Aug 2011 22:37:55 PDT, Joel Jaeggli said: > there are 38453 ASes that appear in the DFZ this week and I don't see > that number growing to 1 billion anytime soon. Exactly. Right now, how many routes flap if Comcast drops a state's worth of cable customers for a moment? What does *your*

Re: FTTH CPE landscape

2011-08-04 Thread Valdis . Kletnieks
On Thu, 04 Aug 2011 13:30:35 PDT, Owen DeLong said: > On Aug 4, 2011, at 8:35 AM, Jay Ashworth wrote: > >> - Generic consumer grade NAT/Firewall > > > > Hobby horse: please make sure it support bridge mode? Those of us who > > want to put our own routers on the wire will hate you otherwise. > > >

Re: IPv6 end user addressing

2011-08-05 Thread Valdis . Kletnieks
On Fri, 05 Aug 2011 12:17:48 EDT, Brian Mengel said: > In reviewing IPv6 end user allocation policies, I can find little > agreement on what prefix length is appropriate for residential end > users. /64 and /56 seem to be the favorite candidates, with /56 being > slightly preferred. > > I am most

Re: IPv6 end user addressing

2011-08-05 Thread Valdis . Kletnieks
On Fri, 05 Aug 2011 10:56:25 MDT, Brielle Bruns said: > On 8/5/11 10:38 AM, valdis.kletni...@vt.edu wrote: > > and I don't think*anybody* is big > > enough to actually burn through a /24 allocation (feel free to prove me > > wrong.. > > ;) > > Never doubt the ability of certain Asian countries t

Re: US internet providers hijacking users' search queries

2011-08-05 Thread Valdis . Kletnieks
On Fri, 05 Aug 2011 17:04:51 PDT, Bino Gopal said: > http://www.newscientist.com/article/dn20768-us-internet-providers-hijacking-users-search-queries.html > > Thoughts? You're new here, aren't you? ;) Anybody who was around when a certain DNS provider started providing a wildcard for *.com and *.

Re: AT&T -> Qwest ... Localpref issue?

2011-08-07 Thread Valdis . Kletnieks
On Sun, 07 Aug 2011 08:53:05 CDT, Graham Wooden said: > I should also note that Centurylink has been less than cooperative on even > thinking about changing my routes to a pref of 70 on our behalf (they don't > accept communities). I think time to get the account rep involved ... "they don't accep

Re: IPv6 end user addressing

2011-08-07 Thread Valdis . Kletnieks
On Sun, 07 Aug 2011 20:47:48 EDT, Randy Carpenter said: > Does AT&T seriously serve the entire state of Indiana from a single POP??? > Sounds crazy to me. It makes sense if they're managing to bill customers by the cable mile from their location to the POP. Imagine a POP in Terre Haute or Indiana

Re: IPv6 end user addressing

2011-08-08 Thread Valdis . Kletnieks
On Mon, 08 Aug 2011 10:15:17 +0200, Mohacsi Janos said: > - Home users - they usually don't know what is subnet. Setting up > different subnets in their SOHO router can be difficult. Usually the > simple 1 subnet for every device is enough for them. Separating some > devices into a separate su

Re: IPv6 end user addressing

2011-08-08 Thread Valdis . Kletnieks
On Mon, 08 Aug 2011 16:12:00 +0200, Mohacsi Janos said: > You don't have to count the all > 0 and all > 1 as reserved maybe each deeice can see /57 or /58 or /59 > depending of capabilities your devices As I said further down the note - you

Re: IPv6 end user addressing

2011-08-09 Thread Valdis . Kletnieks
On Tue, 09 Aug 2011 11:24:03 +1200, Jonathon Exley said: > Silly confidentiality notices are usually enforced by silly corporate IT > departments and cannot be removed by mere mortal employees. > They are an unavoidable part of life, like Outlook top posting and spam. They may all three be things

Re: network issue help

2011-08-10 Thread Valdis . Kletnieks
On Wed, 10 Aug 2011 23:37:04 +0200, Tim Vollebregt said: > http://www.amazon.com/Networking-Dummies-Doug-Lowe/dp/0470534052 > > Here you go.. Oh, and he wants to read this helpful guide by Eric S. Raymond, too: http://www.catb.org/~esr/faqs/smart-questions.html Deric doesn't know he wants to..

Re: network issue help

2011-08-10 Thread Valdis . Kletnieks
On Wed, 10 Aug 2011 19:33:53 EDT, Stefan Fouant said: > Is there an acronym for RTFM when there are a volume of manuals that need to > be read? Sure there is. LMGTFY :) pgpxwWlaRuDsF.pgp Description: PGP signature

Re: network issue help

2011-08-10 Thread Valdis . Kletnieks
On Wed, 10 Aug 2011 21:22:11 EDT, Christopher Morrow said: > folks do get that deric's primary language isn't English right? so > asking him to explain is probably 'ok'. > (yes, he could have put more details into his mail, yes it would have > been more helpful and quicker to an answer for him...)

Re: [BULK] Re: SORBS contact

2011-08-11 Thread Valdis . Kletnieks
On Thu, 28 Jul 2011 16:17:02 CDT, trinity.edu's mailer, *not* "Brian R. Watters" said: > Sender: brwatt...@absfoc.com > Subject: Re: [BULK] Re: SORBS contact > Message-Id: <1d95a7a9-8340-45e7-b803-03f1827326e1@brw-abs-office> > Recipient: ge...@trinity.edu.test-google-a.com, Forwarded: > gerno.

Re: NANOGers home data centers - What's in your closet?

2011-08-12 Thread Valdis . Kletnieks
On Fri, 12 Aug 2011 18:28:57 CDT, Charles N Wyble said: > I'm curious what other NANOGers have in their home compute centers? On > the extreme end of course we have mr morris :) > with his uber lab: http://smorris.uber-geek.net/lab.htm He doesn't get out much, does he? :) > So what's in NANOGers

Re: Verizon Business - LTE?

2011-08-16 Thread Valdis . Kletnieks
On Tue, 16 Aug 2011 10:53:24 EDT, Christopher Morrow said: > anyway, they do these donkey things because they can :( people have no > real option (except not to play the game, ala war games). My brother recently tried to get a smartphone without a data plan (as the phone he wanted was also Wifi-c

Re: What do you do when your Home ISP is down?

2011-08-18 Thread Valdis . Kletnieks
On Thu, 18 Aug 2011 10:21:57 PDT, Mark Keymer said: > I am wondering what some of you guys do when your home ISP is down. At > least those of you that don't give yourself internet. If I was busy with something mission-critical for work, the data center is 15 minutes from where I live. If I was bu

Re: Level 3 Peering Guidelines

2011-08-26 Thread Valdis . Kletnieks
On Fri, 26 Aug 2011 21:32:00 EDT, "Patrick W. Gilmore" said: > Next time Cogent de-peers someone, customers do not care who was being > more reasonable. They care that their links are broken. Wouldn't that mostly affect people who are silly enough to single-home to a Tier-1 that gets involved in

Re: Level 3 Peering Guidelines

2011-08-27 Thread Valdis . Kletnieks
On Sat, 27 Aug 2011 13:56:35 EDT, "Patrick W. Gilmore" said: > And the customers still don't care. They just care _that_ it affected > them - at least during the problem. Although one can hope they care > enough to change their behavior afterward. And yet, people still single-home to Tier-1s. Go

Re: New Natural Disaster! 8/27/2011 Hurricane Irene

2011-08-30 Thread Valdis . Kletnieks
On Sun, 28 Aug 2011 09:01:45 PDT, "andrew.wallace" said: > It looks like the DHS, FEMA got this emergency wrong... by the time it got to > NYC it was the equivalent of a normal day in Scotland I doubt you actually have the sort of flooding Vermont is seeing as a normal day. http://www.msnbc.msn.c

Re: PuTTY alt-keys (was Re: 16-User Network)

2011-08-31 Thread Valdis . Kletnieks
On Wed, 31 Aug 2011 09:32:43 EDT, Jay Ashworth said: > Nah; I have the patched version of sudo, with beer google protection built > in -- you have to supply a random command line switch from a definition > before it lets you execute the first command. "The real reason GNU ls is 8-bit-clean is so t

Re: Silently dropping QoS marked packets on the greater Internet

2011-09-02 Thread Valdis . Kletnieks
On Fri, 02 Sep 2011 17:48:17 +0300, Saku Ytti said: > Seems in this instance someone has deployed QoS and is trusting markings from > Internet, which is just broken, as they cannot anymore guarantee that customer > video/voice etc works during congestion, so the QoS product is broken. Except you

Re: iCloud - Is it going to hurt access providers?

2011-09-03 Thread Valdis . Kletnieks
On Sat, 03 Sep 2011 11:20:13 -, Skeeve Stevens said: > My guess is that 99% of consumer internet access is Asymmetrical (DSL, Cable, > wireless, etc) and iCloud when launched will 'upload' obscene amounts of > gigs of music, tv, backups, email, photos, documents/data and so on to their > idata

Re: iCloud - Is it going to hurt access providers?

2011-09-04 Thread Valdis . Kletnieks
On Sat, 03 Sep 2011 18:38:40 EDT, Jay Ashworth said: > Two people making the same mistake: end-user support telephone calls don't > generally go to datacenters, do they? Maybe they've figured out how to let an AI answer the phones. All you need is text-to-speech, speech-to-text, and the script

Re: Do Not Complicate Routing Security with Voodoo Economics

2011-09-04 Thread Valdis . Kletnieks
On Sun, 04 Sep 2011 16:16:45 EDT, Sharon Goldberg said: > Point 2: "The security threat model is unrealistic and misguided" > > Our paper does not present a security threat model at all. We do not > present a new security solution. Unfortunately for all concerned, it's going to be *perceived* as

Re: Handicapped Supporting ISP's -- Was Re: NANOG Digest, Vol 44, Issue 21

2011-09-06 Thread Valdis . Kletnieks
On Tue, 06 Sep 2011 11:32:57 PDT, Everett Batey said: > If you can offer any lead(s) to service providers who may subsidize / > partially subsidize adult handicapped for internet service in LA County CA, > please, advise me on or off net. I can't help with the query as phrased - but would you also

Re: iCloud - Is it going to hurt access providers?

2011-09-07 Thread Valdis . Kletnieks
On Wed, 07 Sep 2011 09:28:28 PDT, Joel jaeggli said: > The way to achieve a return on invested capital is to attract and retain > customers who pay for a service which they find compelling. Only true if long-term returns on investment are suitable for consideration instead of short-term returns.

Re: NAT444 or ?

2011-09-07 Thread Valdis . Kletnieks
On Wed, 07 Sep 2011 16:13:26 EDT, Dorn Hetzel said: > Perhaps it can be made ever so slightly less ugly if endpoints get an > "address" that consists of a 32 bit IP address + (n) upper bits of port > number. > > This might be 4 significant bits to share an IP 16 ways, or 8 significant > bits to s

Re: CGN and CDN (was Re: what about the users re: NAT444 or ?)

2011-09-09 Thread Valdis . Kletnieks
On Fri, 09 Sep 2011 11:09:38 EDT, jean-francois.tremblay...@videotron.com said: > A very interesting point. In order to save precious CGN resources, > it would not be surprising to see some ISPs asking CDNs to provide > a private/non-routed behind-CGN leg for local CDN nodes. > > For this to w

Re: Hurricane Katia

2011-09-10 Thread Valdis . Kletnieks
On Sat, 10 Sep 2011 06:55:33 PDT, "andrew.wallace" said: > I'm hearing on the news wire 80mph winds will come to UK over the next 72 > hours. Probably 80kph was intended. Why is this at all newsworthy? You've previously stated that Irene-like conditions are "normal" for Scotland, so it shouldn

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases updates

2011-09-11 Thread Valdis . Kletnieks
On Sun, 11 Sep 2011 10:19:39 PDT, Joel jaeggli said: > To pop up the stack a bit it's the fact that an organization willing to > behave in that fashion was in my list of CA certs in the first place. > Yes they're blackballed now, better late than never I suppose. What does > that say about the pot

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases updates

2011-09-11 Thread Valdis . Kletnieks
On Sun, 11 Sep 2011 13:00:09 MDT, Keith Medcalf said: > The current system provides no more authentication or confidentiality > than if everyone simply used self-signed certificates. Not strictly true. The current system at least gives you "you have reached the hostname your browser tried to reac

Re: Why are we still using the CA model? (Re: Microsoft deems all DigiNotar certificates untrustworthy, releases updates)

2011-09-11 Thread Valdis . Kletnieks
On Sun, 11 Sep 2011 15:20:51 PDT, "Aaron C. de Bruyn" said: > I'm pretty fond of the idea proposed by gpgAuth.One key to rule them > all (and one password) combined with the client verifying the > server.It's still in its infancy, but it works. Yes, but it needs to be something that either (a) Joe

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases

2011-09-12 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 04:39:52 -, Marcus Reid said: > You don't have to have the big fat Mozilla root cert bundle on your > machines. Some OSes "ship" with an empty /etc/ssl, nobody tells you who > you trust. And for those OS's (who are they, anyhow) that ship empty bundles, how many CAs do yo

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases updates

2011-09-12 Thread Valdis . Kletnieks
On Sun, 11 Sep 2011 22:01:47 EDT, Christopher Morrow said: > If I have a thawte cert for valdis.com on host A and one from comodo > on host B... which is the right one? You wouldn't have 2 certs for that... I'd have *one* cert for that. And if when you got to the IP address you were trying to reac

Re: vyatta for bgp

2011-09-12 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 20:12:43 -, "Dobbins, Roland" said: > This contradicts my experience - I've repeatedly witnessed only a few mb/sec > of 64-byte packets making software-based routers fall over, including just > last > month. On the flip side, there's a *lot* of sites that have to make trad

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases

2011-09-12 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 22:31:59 +0200, Måns Nilsson said: > Since you are from Sweden, and in an IT job, you probably have personal > relations to someone who has personal relations to one of the swedes > or other nationalities that were present at the key ceremonies for the > root. Once you've estab

Re: vyatta for bgp

2011-09-13 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 20:48:31 CDT, Jimmy Hess said: > One thing.. the OP was asking about anyone using Vyatta for BGP. > Using Vyatta for BGP doesn't necessarily mean the Vyatta unit is actually a > device > forwarding the packets... someone could be using it as a route server, or for > otherwis

Re: vyatta for bgp

2011-09-13 Thread Valdis . Kletnieks
On Mon, 12 Sep 2011 22:38:57 BST, Nick Hilliard said: > Let's throw some figures around (ridiculously simplified): a company has a > choice between a pair of $10k software routers or something like a pair of > MX80s for $25k each. So, one solution costs $20k; the other $50k. $30k > cost differe

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases

2011-09-13 Thread Valdis . Kletnieks
On Tue, 13 Sep 2011 16:29:30 +0200, Tei said: > He, I just want to self-sign my CERT's and remove the ugly warning that > browsers shows. I don't want to pay 1000$ a year, or 1$ a year for that. I The warning is there for a *reason* - namely that if you have a self-signed cert, a first time visito

Re: ouch..

2011-09-14 Thread Valdis . Kletnieks
On Wed, 14 Sep 2011 08:44:10 CDT, "N. Max Pierson" said: > Define Cisco in your context please. Cisco marketing?? Cisco sales?? Cisco > TAC? Cisco product development?? Cisco outsourced PR campaign? Wouldn't be the first time a company has hired a shop, stuck a link to the result on their home pa

Re: ouch..

2011-09-14 Thread Valdis . Kletnieks
On Thu, 15 Sep 2011 06:36:42 -, Leigh Porter said: > I'm looking forward to the awful experience of NAT444 promoting IPv6. In NAT444, no one can hear you scream pgpBLlUFzt9KM.pgp Description: PGP signature

Re: Open Letters to Sixxs

2011-09-15 Thread Valdis . Kletnieks
On Thu, 15 Sep 2011 17:01:33 +0200, Meftah Tayeb said: > Good thinking mike > i do have a VoIp carrier single homed with Cogent. > any solution? Sure. Make sure you have alternate plans for when Cogent gets into another peering tiff. Not *if*, but *when*. And you probably want to have a long, d

Re: How to begin making my own ISP?

2011-09-16 Thread Valdis . Kletnieks
On Fri, 16 Sep 2011 18:42:18 -, bmann...@vacation.karoshi.com said: > Configure Quagga w/ the obtained ASN and announce the IP prefix(es). > TaDa ... You are an ISP! Now all you need is a business plan that pays for the rack space. ;) pgpKBjfFJNMbn.pgp Description: PGP signature

Re: wet-behind-the-ears whippersnapper seeking advice on building a nationwide network

2011-09-19 Thread Valdis . Kletnieks
On Sun, 18 Sep 2011 13:17:57 PDT, Cameron Byrne said: > Call me optimistic but ipv6 does not have these issues... > > For anyone making STRATEGIC choices about ipv4 investments... beware of > sharks in these waters, not just the cgn pains For many of us (especiially the ones who have ipv6 d

Re: IPv6 side of www.charter.com has been down since Friday, September 16 5:12 am Central

2011-09-19 Thread Valdis . Kletnieks
On Mon, 19 Sep 2011 13:57:55 EDT, Nick Olsen said: > Takes our HE tunnel to get out. Were also Native with Cogent (Not that it > gets us anything..) > > No dice. wget throws a timeout from here too, from the internet2 side. % traceroute6 -A www.charter.com traceroute to www.charter.com (2607:f

Re: wet-behind-the-ears whippersnapper seeking advice on building a nationwide network

2011-09-19 Thread Valdis . Kletnieks
On Tue, 20 Sep 2011 05:32:04 +0200, Randy Bush said: > you left out one connection via a chevy full of hollerith cards and the > second a canoe full of 7 track tape in waterproof containers. Does anybody actually *have* a functional 7 track drive? I remember seeing a story on PBS (may have been

Re: insurance

2011-09-20 Thread Valdis . Kletnieks
On Tue, 20 Sep 2011 07:59:00 EDT, harbor235 said: > Curious if anyone out there is acting as an independent contractor, > consultant, or small business, > if so do you use professional liability insurance? I don't consult myself, but is *anybody* crazy enough to do consulting in the litigation-cr

Re: wet-behind-the-ears whippersnapper seeking advice on building a nationwide network

2011-09-20 Thread Valdis . Kletnieks
On Tue, 20 Sep 2011 16:13:57 EDT, Dorn Hetzel said: > "full time connection to two or more providers" should be satisfied when the > network involved has (or has contracted for and will have) two or more > connections that are diverse from each other at ANY point in their path > between the end net

Re: Internet mauled by bears

2011-09-22 Thread Valdis . Kletnieks
On Thu, 22 Sep 2011 11:55:04 EDT, Chuck Church said: > Can we take this offline? I don't believe livestock behavior patterns have > much operational content. What's the mathematical difference between modelling a sheep stampede and modelling a slashdotting? The word is "sheeple" for a reason...

Re: Question on 95th percentile and Over-usage transit

2011-09-23 Thread Valdis . Kletnieks
On Fri, 23 Sep 2011 18:51:59 +0200, Pradeep Bangera said: > Malayter in his earlier message. Hence I am wondering, whether the > pricing should be a linear(CDR*[95th peak]) or sub-linear (like the > above)? Yes. :) I think you'll find actual contracts out in the wild that do it either way, and p

Re: Nxdomain redirect revenue

2011-09-26 Thread Valdis . Kletnieks
On Mon, 26 Sep 2011 10:36:51 EDT, Christopher Morrow said: > I'm curious, is there some belief that the use of hte nxdomain > hijacking/rewriting is actually of use to 'users' ? "of use to users" is, in general, incompatible with "race to the bottom". pgpmyfEAAQ3sZ.pgp Description: PGP signatu

Re: Nxdomain redirect revenue

2011-09-27 Thread Valdis . Kletnieks
On Tue, 27 Sep 2011 09:27:00 EDT, Christopher Morrow said: > On Tue, Sep 27, 2011 at 7:50 AM, Jimmy Hess wrote: > > I would rather see DNSSEC and TLS/HTTPS get implemented end to end. > > how does tls/https help here? if you get sent to the 'wrong host' > whether or not it does https/tls is irrel

Re: Nxdomain redirect revenue

2011-09-27 Thread Valdis . Kletnieks
On Tue, 27 Sep 2011 10:20:25 EDT, William Allen Simpson said: > It's not legal for an ISP to modify computer data. Especially > digitally signed data. That's a criminal offense. Citation? Hint - a *big* chunk of ISPs have NAT deployed, and that's messing with packet headers. Much as many of u

Re: Nxdomain redirect revenue

2011-09-28 Thread Valdis . Kletnieks
On Tue, 27 Sep 2011 16:09:03 PDT, Owen DeLong said: > No, it isn't because it requires you to send the domain portion of the URL > in clear text and it may be that you don't necessarily want to disclose even > that much information about your browsing to the public. If that's an actual concern, I

Re: facebook spying on us?

2011-09-29 Thread Valdis . Kletnieks
On Thu, 29 Sep 2011 18:43:49 +0530, Glen Kent said: > Any idea why these connections are established (with facebook and > akamaitechnologies) and how i can kill them? Since my laptop has > several connections open with facebook, what kind of information is > flowing there? Probably you visited oth

Re: Synology Disk DS211J

2011-09-30 Thread Valdis . Kletnieks
On Fri, 30 Sep 2011 04:14:39 -, bmann...@vacation.karoshi.com said: > > Tell me how that flys with the customers in your household... > > They are freeloaders, not customers. If they -PAID- > for service, then it would be a different conversation. Time to cue up "Move it on over"

Re: Facebook insecure by design

2011-10-02 Thread Valdis . Kletnieks
On Sun, 02 Oct 2011 08:38:36 PDT, Michael Thomas said: > I'm not sure why lack of TLS is considered to be problem with Facebook. > The man in the middle is the other side of the connection, tls or otherwise. Ooh.. subtle. :) pgpOeyIJAJoCA.pgp Description: PGP signature

Re: F.ROOT-SERVERS.NET moved to Beijing?

2011-10-02 Thread Valdis . Kletnieks
On Sun, 02 Oct 2011 17:30:37 EDT, Todd Underwood said: > 2) can any root server operator who serves data inside of china verify > that the data that they serve have not been rewritten by the great > firewall? DNSSEC should help this issue dramatically. This however could be problematic if the Ch

Re: F.ROOT-SERVERS.NET moved to Beijing?

2011-10-02 Thread Valdis . Kletnieks
On Sun, 02 Oct 2011 12:08:35 PDT, Leo Bicknell said: > ISC has verified our PEK2 route was being leaked further than > intended, and for the moment we have pulled the route until we can > get confirmation from our partners that the problem has been resolved. So Leo - you don't have to give us a f

Re: F.ROOT-SERVERS.NET moved to Beijing?

2011-10-02 Thread Valdis . Kletnieks
On Mon, 03 Oct 2011 11:29:43 +0530, Suresh Ramasubramanian said: > 120K domains - basically cnnic seems to have finally got tired of russian No, I think Randy was referring to this sort of thing: http://www.theregister.co.uk/2011/02/18/fed_domain_seizure_slammed/ pgpZ8g15XRvjK.pgp Description:

Re: F.ROOT-SERVERS.NET moved to Beijing?

2011-10-03 Thread Valdis . Kletnieks
On Mon, 03 Oct 2011 15:07:02 PDT, Leo Bicknell said: > If we went back to hosts.txt this pesky DNS infrastructure would > be totally unnecessary. You're just saying that because you're hoping your employer will get to sell bandwidth to SRI-NIC.ARPA ;) pgpjuWWXhHkU5.pgp Description: PGP signatu

Re: Telus mail server admin

2011-10-07 Thread Valdis . Kletnieks
On Fri, 07 Oct 2011 05:40:39 -1000, Paul Graydon said: > Which I do. But note the original complaint was not about using > ridiculously long disclaimers on a mailing list, it was about the > ridiculously long disclaimer, full stop. If your corporate policy insists on huge disclaimers regarding

Re: Telus mail server admin

2011-10-07 Thread Valdis . Kletnieks
On Fri, 07 Oct 2011 13:43:00 EDT, Rich Kulawiec said: > I'd like to see it made list policy that anyone posting with such an > appended threat be given exactly what they're demanding -- i.e., > unsubscribed immediately and permanently. Every once in a while, I reply back and remind the person with

Re: meeting network

2011-10-10 Thread Valdis . Kletnieks
On Mon, 10 Oct 2011 10:44:12 EDT, Randy Bush said: > o no hotel believe that we'll actually be significantly high use. > they simply can not conceive of it. ietf, apricot, ... have > seen this time and time again To be fair, that's not a hotel-only problem. We've seen that problem w

Re: Enterprise WiFi list recommendations?

2011-10-10 Thread Valdis . Kletnieks
On Mon, 10 Oct 2011 11:04:07 EDT, James M Keller said: > On 10/10/2011 11:01 AM, James M Keller wrote: > > All, > > > > I'm looking for some mailing list recommendations for wifi operations > > community, any commendations? > > > > Thanks in advance. > > > Besides a proofreader :) No, commendation

Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread Valdis . Kletnieks
On Wed, 12 Oct 2011 07:47:13 PDT, "andrew.wallace" said: > Guys the outage has moved to U.S and Canada, I think we need to look at this > perhaps being sabotage. It ain't sabotage till you rule out "misconfigured router". Consider the actual real-world threat models and their likelyhoods: 1) In

Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread Valdis . Kletnieks
On Wed, 12 Oct 2011 09:52:02 CDT, -Hammer- said: > What kills me is what they have told the public. The lost a "core > switch". I don't know if they actually mean network switch or not but > I'm pretty sure any of us that work on an enterprise environment know > how to factor N+1 just for these

Re: [routing-wg] BGP Update Report

2011-10-16 Thread Valdis . Kletnieks
On Sun, 16 Oct 2011 09:39:13 EDT, John Peach said: > not really, given that he is not the sender, the mailing list is We want to get pedantic, who generated the Message-ID: for the mail in question? ;) pgp3yje0gvcXQ.pgp Description: PGP signature

Re: The Cidr Report

2011-10-16 Thread Valdis . Kletnieks
On Sun, 16 Oct 2011 10:06:10 EDT, "William F. Maton Sotomayor" said: > A similar thing was done at a USENIX in Monterey over a decade ago. The > point behind that one was to drive home how bad it was for the attendees > to use telnet to their boxes at the mothership. Nothing like seeing > peo

Re: BGP Peers as basis of available routes

2011-10-19 Thread Valdis . Kletnieks
On Wed, 19 Oct 2011 15:21:27 +0800, "Nathanael C. Cariaga" said: > Thanks for the prompt response. Actually our requirement is to find a > webhosting provider whose routes are widely advertised locally and > regionally. That's different from who the provider peers with. We (AS1312) don't peer

Re: Did Internap lose all clue?

2011-10-20 Thread Valdis . Kletnieks
On Thu, 20 Oct 2011 19:39:51 CDT, Jack Bates said: > On 10/20/2011 4:03 PM, Ryan Rawdon wrote: > > "You should expect.1 to respond to ping and such, but not 2 > prefix>.0 as that is only capable of representing a subnet and not a network > > interface of any kind, or any machine, at all" > Honestl

Re: Outgoing SMTP Servers

2011-10-25 Thread Valdis . Kletnieks
On Tue, 25 Oct 2011 02:35:31 PDT, Owen DeLong said: > If they are using someone else's mail server for outbound, how, exactly do > you control > whether or not they use AUTH in the process? 1) You don't even really *care* if they do or not, because... 2) if some other site is running with an un

Re: Outgoing SMTP Servers

2011-10-27 Thread Valdis . Kletnieks
On Thu, 27 Oct 2011 13:53:34 -, Brian Johnson said: > It is interesting that some people who fully understand that the Internet is > composed of many networks run by people with different interests can say what > is best for the Internet as a whole. How my organization (or yours or anybody > e

Re: Outgoing SMTP Servers

2011-10-27 Thread Valdis . Kletnieks
On Thu, 27 Oct 2011 18:17:22 -, Brian Johnson said: > So... I'm in complete agreement with your statement, but The Wikipedia > reference is not pertinent. So I point out the tragedy of the commons, you agree with it, but the Wikipedia reference that talks about the same exact thing isn't pert

Re: Outgoing SMTP Servers

2011-10-28 Thread Valdis . Kletnieks
On Thu, 27 Oct 2011 23:44:16 EDT, William Herrin said: > For our purpose, describing the Internet as a commons fundamentally > misunderstands its nature. You *do* realize that for all your nice "Thei Internet Is Not A Commons" ranting, the basic problem is that some people (we'll call them spamme

Re: Performance Issues - PTR Records

2011-11-06 Thread Valdis . Kletnieks
On Mon, 07 Nov 2011 01:09:19 CST, Robert Bonomi said: > You're missing some 'obvious' considerations. Consider a spam complaint > sent with 'full headers' included. The rDNS _at_the_time_of_the_crime_ > is present in the complaint. And if the rDNS isn't provided, any sane MTA will have included

Re: [outages] More notes

2011-11-08 Thread Valdis . Kletnieks
On Tue, 08 Nov 2011 09:21:37 +0100, Stephane Bortzmeyer said: > I disagree. The official bug statement from Juniper in August was > trying very hard to downplay the importance of the bug ("Given the > complexity of conditions required to trigger this issue, the > probability of exploiting this defe

<    1   2   3   4   5   6   7   8   9   10   >