Re: Open Resolver Problems

2013-03-27 Thread Jared Mauch
On Mar 27, 2013, at 11:54 AM, Owen DeLong wrote: > It's been available in linux for a long time, just not in BIND… > > Here is a working ip6tales example: > > -A RH-Firewall-1-INPUT -s 2620:0:930::/48 -m state --state NEW -m udp -p udp > --dport 53 -j ACCEPT > -A RH-Firewall-1-INPUT -s 2001:4

Re: So how big was it *really*?

2013-03-28 Thread Jared Mauch
On Mar 28, 2013, at 9:29 AM, Harry Hoffman wrote: > It's interesting, this just came up on gizmodo. As I said in another > forum, take it for what it's worth: > > http://gizmodo.com/5992652/that-internet-war-apocalypse-is-a-lie I can't comment in detail, but there are some "lost in translation

Per-ASN data (Re: Open Resolver Problems)

2013-03-28 Thread Jared Mauch
I wanted to share PER-ASN data for those that are interested in this generally. If you are a contact for these ASNs, you can e-mail me from your corporate address to get access to the list. Thank you for many of you that have secured hosts COUNT ASN# 1357979 4134 1144551 8151 1089464 9121

Re: Tier 2 ingress filtering

2013-03-28 Thread Jared Mauch
See below Jared Mauch On Mar 28, 2013, at 5:04 PM, Jimmy Hess wrote: > Ingress source addresses should optimally ideally be filtered at > turnup to the list of authorized prefixes, if uRPF cannot be > implemented (uRPF is convenient, but not necessarily necessary to > imple

Re: Open Resolver Problems

2013-03-31 Thread Jared Mauch
On Mar 31, 2013, at 5:09 PM, Jimmy Hess wrote: > On 3/29/13, Scott Noel-Hemming wrote: >>> Some of us have both publicly-facing authoritative DNS, and inward >>> facing recursive servers that may be open resolvers but can't be >>> found via NS entries (so the IP addresses of those aren't exactl

Re: Open Resolver Problems

2013-04-01 Thread Jared Mauch
On Mar 31, 2013, at 11:16 PM, valdis.kletni...@vt.edu wrote: > On Sun, 31 Mar 2013 16:09:35 -0500, Jimmy Hess said: >> On 3/29/13, Scott Noel-Hemming wrote: Some of us have both publicly-facing authoritative DNS, and inward facing recursive servers that may be open resolvers but can't

Re: Open Resolver Problems

2013-04-01 Thread Jared Mauch
On Apr 1, 2013, at 4:19 PM, Niels Bakker wrote: >> On Apr 01, 2013, at 11:55 , "Milt Aitken" wrote: >>> Most of our DSL customers have modem/routers that resolve DNS externally. >>> And most of those have no configuration option to stop it. >>> So, we took the unfortunate step of ACL blocking D

Re: RFC 1149

2013-04-02 Thread Jared Mauch
On Apr 1, 2013, at 10:37 PM, George Herbert wrote: > Packets, shmackets. I'm just upset that my BGP over Semaphore Towers > routing protocol extension hasn't been experimentally validated yet. > > Whoever you are who keeps flying pigeons between my test towers, you can't > deliver packets with

Open Resolver Dataset Update

2013-04-07 Thread Jared Mauch
I've continued to update my dataset originally posted about two weeks ago. Please take a moment and review your CIDRs which may be running an open resolver. I've exposed one additional bit in the user-interface that may be helpful. Some DNS servers will respond with RCODE=0 (OK) but not provi

Re: Open Resolver Dataset Update

2013-04-08 Thread Jared Mauch
The referral, including a referral to root can be quite large. Even larger than answering a normal query. I have broken the data out for the purpose of letting people identify the IPs that provide that. Jared Mauch On Apr 8, 2013, at 3:08 AM, Tom Laermans wrote: > As far as I k

Re: Open Resolver Dataset Update

2013-04-09 Thread Jared Mauch
53(195.160.166.139) > ;; WHEN: Tue Apr 9 14:58:21 2013 > ;; MSG SIZE rcvd: 31 > > RCODE=0, Recursion available=0: > > http://openresolverproject.org/search.cgi?mode=search6&search_for=195.160.166.0%2F24 > > Hence my question, what is it doing wrong? > > Tom >

Re: Quad-A records in Network Solutions ?

2013-04-09 Thread Jared Mauch
Can you point is at the right address or form to submit regarding this? Seems like its time for both on and DS. Jared Mauch On Apr 9, 2013, at 7:48 PM, Eric Brunner-Williams wrote: > On 4/9/13 4:23 PM, Mark Andrews wrote: >> It's about time certification was lost for fai

Re: Open Resolver Dataset Update

2013-04-10 Thread Jared Mauch
I sent you a private reply, but also posting publicly… On Apr 9, 2013, at 4:55 PM, "A. Pishdadi" wrote: > In the last 2 weeks we have seen double the amount of ddos attacks, and way > bigger then normal. All of them being amplification attacks. I think the > media whoring done during the spam

Re: Fiber cut in SF Bay Area?

2013-04-16 Thread Jared Mauch
On Apr 16, 2013, at 11:45 AM, Robert Glover wrote: > Hello, > > I'm only posting this here because the Outages list appears to be broken. I'll look into that. > I've got confirmed reports (from Cogent and Megapath) that there is a fiber > cut affecting service through the South Bay. > > We

joker.com contact?

2013-04-22 Thread Jared Mauch
Can someone at Joker or someone who knows someone at Joker reach out to me? - Jared

Re: KVM

2013-04-23 Thread Jared Mauch
On Apr 23, 2013, at 5:36 PM, shawn wilson wrote: > I'm looking at an IP-KVM. I don't need anything high res as I only > need to see Linux consoles, BIOS, and RAID. What I am looking for: > Non-Java client that runs on Linux (or a WebUI that will deploy a > decent RDP or VNC session over SSL). >

Re: "It's the end of the world as we know it" -- REM

2013-04-24 Thread Jared Mauch
On Apr 23, 2013, at 5:41 PM, Valdis Kletnieks wrote: > Are you ready? I think what's very interesting for me is watching the consumer edge getting more IPv6 in north america. It's important for everyone to talk to their vendors (now is a good day to call/write them) about what their IPv6-Onl

Re: Office 365 broken on ipv6

2013-04-30 Thread Jared Mauch
FYI: Here's what I'm seeing: puck:~$ curl -v https://outlook.office365.com/ * About to connect() to outlook.office365.com port 443 (#0) * Trying 2a01:111:f400:400::2... * Connection refused * Trying 2a01:111:f400:2c16::2... * Connection refused * Trying 2a01:111:f400:2c2a::12... * Connection

Re: Tier1 blackholing policy?

2013-04-30 Thread Jared Mauch
Sounds like a no win situation. Either you let the bad guys do things or get complaints you blocked the bad guys. Jared Mauch On Apr 30, 2013, at 11:07 AM, Chris Boyd wrote: > On Tue, 2013-04-30 at 10:59 -0400, ML wrote: >> 1) Do nothing - They're supposed deliver an

Re: Tier1 blackholing policy?

2013-04-30 Thread Jared Mauch
On Apr 30, 2013, at 12:43 PM, Darius Jahandarie wrote: > I think I agree with this, and I think it can help draw a useful line. > > Large DDoS attacks can and do directly affect the service that the > "tier 1" is providing to its customers (namely, moving their bits), so > filtering such attack

Re: Tier1 blackholing policy?

2013-04-30 Thread Jared Mauch
On Apr 30, 2013, at 2:50 PM, bmann...@vacation.karoshi.com wrote: > Phone? You mean like Jitsi or Skype? > Fax? > > I'd like to see some numbers to back your assertion of "Typical" > restoration >times of days. my vendors deliver software fixes for "BGP" doesn't w

Re: Mitigating DNS amplification attacks

2013-04-30 Thread Jared Mauch
Please look at something like rate limiting. Please look at preventing these spoofed packets from entering your network and report the issue. Please provide advice and insights as well as directing customers to the openresolverproject.org website. We want to close these down, if you need an ac

Re: Tier1 blackholing policy?

2013-05-01 Thread Jared Mauch
On May 1, 2013, at 7:44 AM, Rich Kulawiec wrote: > On Tue, Apr 30, 2013 at 12:47:40PM -0400, Jared Mauch wrote: >> If the phishing attack is against an enterprise that is also an ISP, >> surely you can imagine a case where they might block traffic to prevent >> fol

Re: Google Public DNS Problems?

2013-05-01 Thread Jared Mauch
On May 1, 2013, at 1:39 PM, Tony Finch wrote: > Blair Trosper wrote: > >> Goes all the way up to the A root server before failing spectacularly. > > That is an extremely weird response. Are you sure your queries are not > being intercepted by a middlebox? What happens if you use dig +vc ? > D

Re: Historical Info

2013-05-06 Thread Jared Mauch
On May 6, 2013, at 4:14 PM, Mike Hyde wrote: > Is there a way to get the past owners on IP blocks and AS numbers? > > https://www.arin.net/resources/whowas/

Re: Traffic shaping going on?

2013-05-08 Thread Jared Mauch
On May 8, 2013, at 10:54 AM, Ray Wong wrote: > Doesn't seem directly correlated with outages, and everything seems to be > working ok, but I'm seeing about a 20-30% shift in flows from AS7792 to > AS3356. Seems unlikely that many ISPs have suddenly turned up a level3 link > on the same day/hour,

Open Resolver List, New Orleans, etc..

2013-05-09 Thread Jared Mauch
I am putting the finishing touches on a presentation I will be making later this week at the DNS-OARC meeting, but I also wanted to ask anyone here if they had data/ideas of items they are interested in seeing from the Open Resolver Project. We perform a weekly scan of the IPv4 space looking fo

Re: Open Resolver List, New Orleans, etc..

2013-05-09 Thread Jared Mauch
On May 9, 2013, at 7:32 PM, Jon Lewis wrote: > On Thu, 9 May 2013, Jared Mauch wrote: > >> Some interesting data: about 46% of the IPs that respond to a DNS query do >> not respond from port 53, meaning they are "broken" in some interesting way. > > Maybe I

Re: Open Resolver List, New Orleans, etc..

2013-05-09 Thread Jared Mauch
On May 9, 2013, at 8:26 PM, Jimmy Hess wrote: > On 5/9/13, Jared Mauch wrote: > > On a totally unrelated note... the document at that URL looks > visually almost exactly like the CentOS stock apache 2 test page. > > It's, so similar in appearance, that when o

Re: A spoof film about networking

2013-05-10 Thread Jared Mauch
On May 6, 2013, at 10:29 AM, Oliver wrote: > I cringed so hard at the EIGRP song, in fact, just thinking about it makes me > hurt inside. They posted it here: https://soundcloud.com/stickwell-productions/love_me_eigrp If you didn't watch it, at least listen to the song. You will either cri

Re: [fyo...@insecure.org: C|Net Download.Com is now bundling Nmap with malware!]

2011-12-06 Thread Jared Mauch
On Dec 7, 2011, at 2:47 AM, Owen DeLong wrote: > > > Could he send their hosting company a take-down order for the download.com > site? > > Might be feasible to take over the domain if SOPA were passed :) I am glad that CBS Interactive/CNET has started to see the light, here is hoping the

Re: Sad IPv4 story?

2011-12-09 Thread Jared Mauch
On Dec 9, 2011, at 4:12 PM, valdis.kletni...@vt.edu wrote: > I suspect the opposite is in fact true - if there is an open market, many > sites > will continue deluding themselves and make the end game that much more > painful. > If you haven't been able to sell the CFO types on the need to depl

Re: Sad IPv4 story?

2011-12-09 Thread Jared Mauch
On Dec 9, 2011, at 4:38 PM, Deepak Jain wrote: > I can tell you that (as of Dec 2011) *lots and lots* of networks (big ones, > even some of the biggest) are in no real position to support nearly universal > customer IPv6 service yet. There are networks that have IPv6 "somewhere".. > but even w

Re: Sad IPv4 story?

2011-12-13 Thread Jared Mauch
On Dec 11, 2011, at 6:52 AM, John Curran wrote: > The sooner we get the content on IPv6 in addition to IPv4, the sooner > that connecting new customers up via IPv6 without additional unique > IPv4 address space becomes viable (and obviously if we had the vast > majority of content already o

Re: De-bogon not possible via arin policy.

2011-12-14 Thread Jared Mauch
see 2012 as the date of broadband v6 becoming commonly available in the states at least. Jared Mauch On Dec 15, 2011, at 8:14, Jimmy Hess wrote: > > That would essentially provide a backdoor around normal RIR justified > need policy, if it were allowed..

Re: Wireless/Free Space Enterprise ISP in Palo Alto

2011-12-16 Thread Jared Mauch
re. A pair costs around $180 or so. Jared Mauch On Dec 16, 2011, at 1:24 PM, Darren Bolding wrote: > Apologies if this is not the most appropriate forum for this, but I am not > aware of a better list to use. > > I recently took over responsibility for the network connectivity at a

Re: what if...?

2011-12-20 Thread Jared Mauch
On Dec 20, 2011, at 11:37 AM, Eduardo A. Suárez wrote: > Hi, > > what if evil guys hack my mom ISP DNS servers and use RPZ to redirect traffic > from mom_bank.com to evil.com? > > How can she detect this? Thankfully mom_bank.com is not valid, as underscores aren't valid in dns names :) Addi

Re: next-best-transport! down with ethernet!

2011-12-30 Thread Jared Mauch
On Dec 30, 2011, at 6:01 AM, Tei wrote: > I am not dumb, I know turning webpages into applications make > webpages to fragile. But I am scared of javascripts. Javascript is > just too dawmn usefull now, browsers too broken (mostly IE), and > Javascript is like a superhero that fix all. The web

Re: AD and enforced password policies

2012-01-03 Thread Jared Mauch
On Jan 2, 2012, at 8:45 PM, Steven Bellovin wrote: > Minimum Length : 8 > Maximum Length : 12 > Maximum Repeated Characters : 2 > Minimum Alphabetic Characters Required : 1 > Minimum Numeric Characters Required : 1 > Starts with a Numeric Character > No User Nam

Re: incoming smtp from v6 addresses

2012-01-04 Thread Jared Mauch
On Jan 4, 2012, at 5:26 AM, Randy Bush wrote: >>> 7.8% is over ipv6 transport >>> but only 2% of outgoing deliveries are over ipv6. >> What's your primary configuration ? Hub, end user system ? > > the main smtp receiver and sender for maybe 100 users and a few > dozen mailing list of small to

Re: Linux Centralized Administration

2012-01-13 Thread Jared Mauch
Sounds like a poorly designed package. Wordpress does a good job of allowing back end updates without impacting the services provided, even with database changes. Part of a well designed and maintained system is the ability to do painless upgrades. Jared Mauch On Jan 12, 2012, at 7:43 PM

Re: Monday Night Footbal -- on Google?

2012-01-15 Thread Jared Mauch
On Jan 15, 2012, at 2:56 PM, Saku Ytti wrote: > Unfortunately that does exactly nothing to help with Internet scale. > > Now scaling for your local environment embedded RP might be beneficial, but > actual practical applications where you need ASM are very few. > Most vendors took out hardwar

Re: enterprise 802.11

2012-01-16 Thread Jared Mauch
On Jan 16, 2012, at 11:52 AM, Tim Franklin wrote: >> As for the iOS problem, read on here: >> http://www.net.princeton.edu/apple-ios/ios41-allows-lease-to-expire-keeps-using-IP-address.html > > That's the iOS issue - out of curiosity, what's the Mac issue? That's a poorly maintained device iss

AT&T and IPv6 Launch

2012-01-23 Thread Jared Mauch
Is there someone who can talk about how to get IPv6 on AT&T residential:? Thanks, - Jared -- snip -- ISPs participating in World IPv6 Launch will enable IPv6 for enough users so that at least 1% of their wireline residential subscribers who visit participating websites will do so using IPv6 by

Re: AT&T and IPv6 Launch

2012-01-23 Thread Jared Mauch
So i have been privately referred to att.com/ipv6 where you can find supporting CPE devices. It sounds like if you have equipment supporting ipv6 it may just appear one day "soon". Jared Mauch On Jan 23, 2012, at 2:23 PM, Jared Mauch wrote: > Is there someone who can talk abo

Re: XBOX 720: possible digital download mass service.

2012-01-27 Thread Jared Mauch
It's already done on a similar scale when apple releases new software for their mobile devices. Just don't do it if you are on a low cap plan (eg: mobile, satellite etc). Caps will be the new market discriminator IMHO. Jared Mauch On Jan 27, 2012, at 3:35 AM, Tei wrote: > Ca

Re: MD5 considered harmful

2012-01-27 Thread Jared Mauch
On Jan 27, 2012, at 3:52 PM, Patrick W. Gilmore wrote: > Your network, your decision. On my network, we do not do MD5. We do more > traffic than anyone and have to be in the top 10 of total eBGP peering > sessions on the planet. Guess how many times we've seen anyone even attempt > this att

Re: pontification bloat (was 10GE TOR port buffers (was Re: 10G switch recommendaton))

2012-01-29 Thread Jared Mauch
See below Jared Mauch On Jan 27, 2012, at 9:13 PM, George Bonser wrote: >> Router(config)# policy-map pol1 >> Router(config-pmap)# class class-default >> Router(config-pmap-c)# bandwidth per 70 >> Router(config-pmap-c)# random-detect >> Router(config-pmap-c)# ran

Re: Please help our simple bgp

2012-01-31 Thread Jared Mauch
On Jan 30, 2012, at 9:27 PM, Ann Kwok wrote: > Hello > > Our router is running simple bgp. "one BGP router, two upstreams (each 100M > from ISP A and ISP B) > We are getting full feeds tables from them > > We discover the routes is going to ISP A only even the bandwidth 100M is > full > > Can

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

2012-02-01 Thread Jared Mauch
On Feb 1, 2012, at 3:10 PM, Chris Adams wrote: > AFAIK there's no law covering the use of what party X considers their 32 > bit numbers (assigned by party A) by party Y. The US bankruptcy courts have treated these as property that can be sold/transferred comparable to other assets. (See threads

Re: Question regarding anycasting in CDN setup

2012-02-01 Thread Jared Mauch
On Feb 1, 2012, at 3:25 PM, Anurag Bhatia wrote: > I have a small question and was wondering if someone could help me with > that. > > Question is - why companies like Google, Amazon are having partial > anycasting in CDN setups? E.g if we pick a random hostname from url of > Picasa picture - lh

Re: AS8300 - Swisscom hijacking.. Just what are you testing?

2012-02-01 Thread Jared Mauch
On Feb 1, 2012, at 5:12 PM, Jeroen Massar wrote: > On 2012-02-01 22:44 , Schiller, Heather A wrote: >> >> AS8300 started announcing one of the Rove Digital dns changer IP ranges. > [..] >> I searched around and couldn't find any mention of what they might be >> testing. Anyone know? > > The

Re: Firewalls in service provider environments

2012-02-07 Thread Jared Mauch
Yes, you should. On Feb 7, 2012, at 5:34 PM, George Bonser wrote: > Been wondering if I should also block 198.18.0.0/15 as well.

Re: Anonymous planning a root-servers party

2012-02-15 Thread Jared Mauch
On Feb 15, 2012, at 5:36 PM, George Bakos wrote: > As I hadn't seen it discussed here, I'll have to assume that many > NANOGers haven't seen the latest rant from Anonymous: > > "To protest SOPA, Wallstreet, our irresponsible leaders and the > beloved bankers who are starving the world for their

Re: Common operational misconceptions

2012-02-16 Thread Jared Mauch
On Feb 15, 2012, at 7:55 PM, Nathan Eisenberg wrote: >> IPv6 is operational. > > How is this a misconception? It works fine for me... I think he left off "In Japan". There's been a lot of local politics as it relates to the broken nature of IPv6 in japan. When its there, it's not globally

Re: Common operational misconceptions

2012-02-16 Thread Jared Mauch
Wouldn't know about that part. You would have to ask an ntt employee. Jared Mauch On Feb 16, 2012, at 8:03 AM, Owen DeLong wrote: > Yes, I'm well aware of the problems being created by the attempts by NTT to > force the government to let them be a residential ISP.

Re: common time-management mistake: rack & stack

2012-02-17 Thread Jared Mauch
On Feb 17, 2012, at 3:17 AM, Brandon Butterworth wrote: >> I have noticed that a lot of very well-paid, sometimes >> well-qualified, networking folks spend some of their time on "rack & >> stack" tasks, which I feel is a very unwise use of time and talent. > > It's not a waste, it's therapeutic,

Re: Common operational misconceptions

2012-02-17 Thread Jared Mauch
On Feb 17, 2012, at 9:29 AM, -Hammer- wrote: > This list is awesome. Is anyone consolidating it? I'm still catching up on > the thread I was thinking of making a checklist out of it. - Jared

Re: Common operational misconceptions

2012-02-17 Thread Jared Mauch
I am grateful you have not used the hardware I have in the past 15 years. I haven't seen anything recently not do it, but when interfacing with a customer who knows what old stuff they may be using. Jared Mauch On Feb 17, 2012, at 12:41 PM, Sven Olaf Kamphuis wrote: > auto mdi/mi

Re: IX in France

2012-02-21 Thread Jared Mauch
On Feb 21, 2012, at 11:46 AM, Ido Szargel wrote: > Hi All, > > We are currently looking to connect to one of the IX's available in Paris, > > It seems that there are 2 "major" players - FranceIX and Equinix FR, can > anyone share their opinions about those? At my former employer we connected t

Re: IX in France

2012-02-23 Thread Jared Mauch
On Feb 23, 2012, at 12:39 PM, virendra rode wrote: > I understand this is not true peering relationship, however its an > interesting way to obtain exchange point routes and I understand this is > nothing new. I've found people who use the term 'peering' to mean something different than what

Re: Reliable Cloud host ?

2012-02-27 Thread Jared Mauch
On Feb 26, 2012, at 5:56 PM, Randy Carpenter wrote: > We require 1 or 2 very small virtual hosts to host some remote services to > serve as backup to our main datacenter. One of these services is a DNS > server, so it is important that it is up all the time. > > We have been using Rackspace Cl

Re: Reliable Cloud host ?

2012-02-27 Thread Jared Mauch
On Feb 27, 2012, at 10:28 AM, William Herrin wrote: > On Mon, Feb 27, 2012 at 9:39 AM, Jared Mauch wrote: >> Is the DNS service authoritative or recursive? If auth, you can >> solve this a few ways, either by giving the DNS name people >> point to multiple (and A)

Re: Reliable Cloud host ?

2012-02-28 Thread Jared Mauch
On Feb 27, 2012, at 2:53 PM, valdis.kletni...@vt.edu wrote: > On Mon, 27 Feb 2012 14:02:04 EST, William Herrin said: > >> The net result is that when you switch the IP address of your server, >> a percentage of your users (declining over time) will be unable to >> access it for hours, days, week

Re: dns and software, was Re: Reliable Cloud host ?

2012-03-02 Thread Jared Mauch
On Mar 1, 2012, at 10:01 AM, Michael Thomas wrote: > The real issue is that gethostbyxxx has been inadequate for a very > long time. Moving it across the kernel boundary solves nothing and > most likely causes even more trouble: what if I want, say, asynchronous > name resolution? What if I want

Re: filtering /48 is going to be necessary

2012-03-12 Thread Jared Mauch
The big issue is not the control plane but forwarding plane memory. SRAM is hot and expensive. Jared Mauch On Mar 10, 2012, at 5:50 PM, Sven Olaf Kamphuis wrote: > you did buy a new iphone i bet.. why no modern routers.

Re: Looking for some diversity in Alabama that does not involve ATT Fiber

2012-03-21 Thread Jared Mauch
How far? There are a lot of fixed wireless solutions in that space. Also building your own fiber an option? That distance comes into play as well... Jared Mauch On Mar 21, 2012, at 11:44 AM, Joe Maimon wrote: > Hey All, > > I have a site in Alabama that could really use some a

last mile, regulatory incentives, etc (was: att fiber, et al)

2012-03-22 Thread Jared Mauch
On Mar 22, 2012, at 11:05 AM, chris wrote: > I'm all for VZ being able to reclaim it as long as they open their fiber > which I don't see happening unless its by force via government. At the end > of the day there needs to be the ability to allow competitors in so of > course they shouldnt be all

Re: last mile, regulatory incentives, etc (was: att fiber, et al)

2012-03-22 Thread Jared Mauch
On Mar 22, 2012, at 1:12 PM, chris wrote: > Why is it that the big companies are controlling what happens? They have used the past decades or century to establish these assets. - Jared

Re: last mile, regulatory incentives, etc (was: att fiber, et al)

2012-03-22 Thread Jared Mauch
On Mar 22, 2012, at 1:22 PM, Keegan Holley wrote: > > 2012/3/22 Jared Mauch > > On Mar 22, 2012, at 11:05 AM, chris wrote: > > > I'm all for VZ being able to reclaim it as long as they open their fiber > > which I don't see happening unless its by force

Re: last mile, regulatory incentives, etc (was: att fiber, et al)

2012-03-22 Thread Jared Mauch
On Mar 22, 2012, at 1:24 PM, Keegan Holley wrote: > What is there that's worth having that isn't controlled by a big company of > some sort? This is done in some places. eg: http://www.allband.org/ Some states place barriers to establishing a cooperative. Call your state PUC, there are good

Re: Muni Fiber (was: Re: last mile, regulatory incentives, etc)

2012-03-23 Thread Jared Mauch
It is already a monopoly. Most places are served by one of the utilities: power, telephony or cable. He that controls the outside plant controls your fate. Jared Mauch On Mar 23, 2012, at 12:45 AM, Kris Price wrote: > Layer 3 is interesting, but is everyone happy with saying goodbye to

Re: Muni Fiber

2012-03-26 Thread Jared Mauch
On Mar 25, 2012, at 4:14 PM, Masataka Ohta wrote: > Nick Hilliard wrote: > >> most of the expense of laying fibre is associated with ducting + wayleave. > > Another important expense of FTTH is at the last yards of > dropping cables fro the laed fiber, where SS needs simple > closures and short

Re: Muni Fiber

2012-03-26 Thread Jared Mauch
Active Ethernet solution outdoor enclosure sfp+2xGE+2xPOTS is about 350 without optics Inside device is closer to 150-160. ... Certainly agree on install costs. Jared On Mar 26, 2012, at 8:23 AM, Masataka Ohta wrote: > Jared Mauch wrote: > >>> Another important expense of

Re: Muni Fiber

2012-03-27 Thread Jared Mauch
On Mar 27, 2012, at 10:02 AM, Miles Fidelman wrote: >> 2015 - First communities coming online, 100M to the home (probably Gigabit >> line rate, but throttled). > In most cases I've seen, the 100m fiber hardware is more expensive than the 1G, or the same price. The challenge here is getting th

Re: airFiber

2012-03-29 Thread Jared Mauch
You are leaving out that it's an unlicensed band, so you can use this to have a decent backhaul to your house just by rigging it yourself on each end. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: Outdoor Wireless Access Point

2012-03-31 Thread Jared Mauch
Another +1 on unifi. Very happy with price and performance. Jared Mauch On Mar 31, 2012, at 1:09 PM, Oliver Garraux wrote: >> As far as I know Ubiquiti's UniFi product doesn't yet have a single SSID >> across multiple APs. > > Unifi does use the same SSID'

Re: Outdoor Wireless Access Point

2012-04-01 Thread Jared Mauch
If you use unifi there is an outdoor version. You can mount it outside a building or on a pole. Jared Mauch On Apr 1, 2012, at 3:58 AM, valdis.kletni...@vt.edu wrote: > But there's a 22 acre field (about twice the size of the garden you are trying > to support) in the middl

Re: DNS noise

2012-04-06 Thread Jared Mauch
On Apr 6, 2012, at 4:44 PM, David Conrad wrote: > However, I would be interested in hearing what the excuses are for folks not > implementing BCP38 these days. Easy: 1) hardare support varies 2) implementing bcp-38 drives customer support costs up in cases where the customer is doing somethi

Re: IPv6 support via Charter | Ideas on BGP Tunnel via HE

2012-04-11 Thread Jared Mauch
On Apr 11, 2012, at 5:19 PM, PC wrote: > He.net tunnels are also good to have because depending on your provider, > there's still many with incomplete views of the ipv6 routing table and he > might have a path. This is a more prevalent issue with ipv6 than v4 at the > moment. This is a big prob

Re: IPv6 support via Charter | Ideas on BGP Tunnel via HE

2012-04-11 Thread Jared Mauch
On Apr 11, 2012, at 6:19 PM, William Herrin wrote: > On Wed, Apr 11, 2012 at 5:41 PM, Jared Mauch wrote: >> This is a big problem for the two providers involved in this "spat" having >> inconsistent IPv4/IPv6 business relationships (peering, etc). >> >>

Re: Network Storage

2012-04-12 Thread Jared Mauch
You can also look at a machine like this: http://www.supermicro.com/products/chassis/4U/417/SC417E16-R1400U.cfm Jared Mauch On Apr 12, 2012, at 5:47 PM, Matthew Luckie wrote: >> 1) My goal is to store the traffic may be fore ever, and analyze it in >> the future for security relat

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Jared Mauch
tcpdump -e will show source and dest mac address. On Apr 17, 2012, at 6:54 AM, Ray Soucy wrote: > tcpdump -ni eth0 'ip6 dst ff02::1' > > 06:48:48.044409 IP6 fe80::2d0:1ff:fedf:8400 > ff02::1: ICMP6, router > advertisement, length 64

Re: rpki vs. secure dns?

2012-04-30 Thread Jared Mauch
Personally I find the BitTorrent approach interesting. Jared Mauch On Apr 30, 2012, at 11:46 AM, Randy Bush wrote: >> We need more flexible, distributed architecture behind - no matter - >> which interests will be lobbied as we have got already. > > as i agree that the

Re: Problems getting to Verisign's whois server on IPv6

2012-05-01 Thread Jared Mauch
This looks to be more of an application issue for you. The rest seems to work for me: puck:~$ whois -h 2001:503:ff39:1060::74 verisign-grs.com [Querying 2001:503:ff39:1060::74] [2001:503:ff39:1060::74] Whois Server Version 2.0 ... - Jared On May 1, 2012, at 8:23 AM, TR Shaw wrote: > Nope sur

VoIP vs POTS (was Re: Operation Ghost Click)

2012-05-02 Thread Jared Mauch
On May 2, 2012, at 3:52 PM, Eric Wieling wrote: > > I doubt the g729 or GSM codecs used by VoIP and Cell phones can compare to a > POTS line. This is why many people use g711ulaw or other codec. Personally I would not work with anyone that doesn't do g711ulaw (88.2kbit when IP packet overhe

Re: VoIP vs POTS (was Re: Operation Ghost Click)

2012-05-02 Thread Jared Mauch
This device uses cellular only. Don't live in vz territory. Live in AT&T pots only land. No cable here either. Jared Mauch On May 2, 2012, at 5:33 PM, William Herrin wrote: > On 5/2/12, Jared Mauch wrote: >> Personally, I'm thinking of ditching my ISDN (gives clear

POTS Ending (Re: Operation Ghost Click)

2012-05-02 Thread Jared Mauch
On May 2, 2012, at 9:42 PM, Frank Bulk wrote: > Many states have regulations regarding how long dial tone needs to last > during a power outage. Iowa's PUC (the IUB) requires at least two hours of > backup power. We design ours for eight hours. One thing of note that I've been tracking is this

Re: Video streaming over IPv6

2012-05-15 Thread Jared Mauch
On May 15, 2012, at 1:55 PM, Carlos Martinez-Cagnazzo wrote: > Hello, > > Can anyone comment on the availability of IPv6 video streaming services? > I'm thinking about commercial, 'cloud'-based services a la U-Stream or > Make.TV. > > I can roll my own, and will eventually do so, but having a c

Re: pbx recco

2012-05-15 Thread Jared Mauch
On May 15, 2012, at 3:33 PM, Robert E. Seastrom wrote: > Randy Bush writes: > >> have a friend who is a penguinista and wants to run a simple soft pbx. >> support of soft phones, 7960s, connect to a commercial sip gate, ... >> reccos for a packaged solution. > > While Asterisk's configuration

Re: ISPs and full packet inspection

2012-05-24 Thread Jared Mauch
Inside counsel should engage with outside counsel in this case. Part of being a professional in many fields is knowing how to engage the right people (e.g.: doctors that refer you to an expert). - jared On May 24, 2012, at 9:13 AM, not common wrote: > Thanks guys, I am looking for stuff to br

Re: Industry practice for BGP costs - one time or fixed/monthly?

2012-05-25 Thread Jared Mauch
There are starting to be a major difference in cost for supporting bgp. Taking a look at routing table size, many people are going to see troubles around 512k routes. Placing you on a device that doesn't need a full table or one at all will result in lower capital costs and lower operational cos

Re: Comcast IPv6 Update

2012-06-01 Thread Jared Mauch
My understanding is that Comcast only does IPv6 on business customers that are on their "backbone" network, not those on their docsis network. If you have BGP or fiber with 7922 you should be able to get IPv6. - Jared On Jun 1, 2012, at 9:51 AM, Jimmy Sadri wrote: > Wow... I just wanted some i

Re: Comcast IPv6 Update

2012-06-01 Thread Jared Mauch
ed on a different CMTS and may use different frequencies allocated. From a business side, there is a higher SLA afforded to the users, including phone notification of planned outages, etc that would happen. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: IPv6 day and tunnels

2012-06-04 Thread Jared Mauch
On Jun 4, 2012, at 10:07 AM, Jeroen Massar wrote: > On 4 Jun 2012, at 06:36, Masataka Ohta > wrote: > >> Jeroen Massar wrote: >> > So IPv6 fixes the fragmentation and MTU issues of IPv4 by how exactly? Completely wrongly. >>> >>> Got a better solution? ;) >> >> IPv4 without P

Re: LinkedIn password database compromised

2012-06-07 Thread Jared Mauch
On Jun 7, 2012, at 2:14 AM, Aaron C. de Bruyn wrote: > Imaging signing up for a site by putting in your email and pasting > your public key. > I'm imagining my mother trying this, or trying to help her change it after the hard drive dies and the media in the safe deposit box doesn't read anymo

Re: Dear Linkedin,

2012-06-11 Thread Jared Mauch
On Jun 11, 2012, at 2:35 PM, John Levine wrote: > OK, someone shows you a Quebec driver's license. You ask for a > passport, she says, I don't have one, and points at the blue word Plus > after the words Permis de Conduire at the top of the license. Now > what? Banks and most retailers actuall

Re: NTT handing packets to Reliance (Flag Telecom) in California for BSNL block

2012-06-19 Thread Jared Mauch
eliance's > California based router and not any other router in Europe? > > Can somehow one can test & confirm the above guess of selective announcement? > > > > (*Apologize if I missed some fundamental glitch error. I am new to it.*) I've seen cases

Re: LinkedIn password database compromised

2012-06-20 Thread Jared Mauch
On Jun 20, 2012, at 5:54 PM, Matthew Kaufman wrote: > On 6/20/2012 2:39 PM, Leo Bicknell wrote: >> Users would find it much more convenient and wonder why we ever used >> passwords, I think... > > Yes. Those users who have a single computer with a single browser. For anyone > with a computer

Re: technical contact at ATT Wireless

2012-06-28 Thread Jared Mauch
On Jun 28, 2012, at 10:35 PM, Joel Maslak wrote: > Which is why enterprises generally shouldn't use RFC1918 IPs for > servers when clients are located on networks not controlled by the > same entity. Servers that serve multiple administration domains (such > as VPN users on AT&T - or on some r

<    2   3   4   5   6   7   8   9   10   11   >