Re: Microsoft O365 DNS issue

2021-06-25 Thread harbor235
I found the routing, peering, and dns support number. Hopefully that will help Mike On Fri, Jun 25, 2021 at 4:51 PM harbor235 wrote: > Noggers, > > Having some O365 DNS issues, looks like we are getting directed to EMEA > instead of US. Anybody understand O365 A record location

Microsoft O365 DNS issue

2021-06-25 Thread harbor235
Noggers, Having some O365 DNS issues, looks like we are getting directed to EMEA instead of US. Anybody understand O365 A record location syntax? Any one else have issues being directed to EMEA? Is there a direct MS O365 DNS support number? I have the O365 biz support? Mike

Re: replaying captured traffic

2019-11-26 Thread harbor235
500, harbor235 wrote: > > I am hoping someone can provide wisdom regarding the dos and don'ts > > replaying captured traffic? > > Googling 'pcap replay' yields many hits. > > > Is open source tools sufficient? > > > > Can PCAPs be replayed? > > This is an

replaying captured traffic

2019-11-26 Thread harbor235
I am hoping someone can provide wisdom regarding the dos and don'ts replaying captured traffic? Is open source tools sufficient? Can PCAPs be replayed? How is this accomplished? partial rewriting IP headers Recommended tools? Mike

Re: Tiered operations support

2019-08-23 Thread harbor235
> Miles Fidelman >> >> >> ---harbor...@gmail.com wrote: >> >> Maybe you want some of them to leave, if they're "not >> a professional organization". Get some fresh folks >> from professional minded organizations and see if >> the other

Tiered operations support

2019-08-23 Thread harbor235
Hi noggers, First some background; I have inherited a real-time services delivery infrastructure that while technically functional is absent of a wworking tiered operational support structure. In addition, the infrastructure was not implemented with technology best practices and has some

broken DNS

2018-06-07 Thread harbor235
I was hoping for some DNS wisdom, would a change in a SOA record cause a DNSSEC broken trust chain? incorrect RRSIG? Mike

Re: Inexpensive software bgp router that supports route tags?

2015-07-01 Thread harbor235
Quagga supports BGP communities, Mike On Wed, Jul 1, 2015 at 11:19 AM, David H ispcoloh...@gmail.com wrote: Hi all, I was wondering if anyone can recommend a software (preferable), or hardware-based router with an API, that supports BGP with tags on advertised routes? I want to use it for

Re: The US government has betrayed the Internet. We need to take it back

2013-09-06 Thread harbor235
The biggest mistake everyone is making is that while we are talking about what the USGOV/NSA in this instance you assume this is the only entity behaving in this manner. Morpheus http://www.imdb.com/name/nm401/?ref_=tt_trv_qu: This is your last chance. After this, there is no turning back.

Level3 L2VPN service

2013-08-15 Thread harbor235
Anybody have any experiences they want to share with Level3's L2VPN service? I am looking for performance, stability, and support issues? thank you, Mike

Re: JunOS IPv6 announcements over IPv4 BGP

2012-12-21 Thread harbor235
I would push back on that request, any issues with V4 also impact V6. Segmentation is this case is good. Mike On Fri, Dec 21, 2012 at 1:45 PM, Pete Ashdown pashd...@xmission.com wrote: I've got a peer who wishes me to send my IPv6 announcements over IPv4 BGP. I'm running around in circles

Re: High CPU utilization w/VRF NAT - Cat6500

2012-11-13 Thread harbor235
What Supervisior do you have? If its an older SUP NAT may be done in software, which sounds like you are currently experiencing. Its not hard to max out a 6500 CPU. -Mike On Tue, Nov 13, 2012 at 1:44 PM, Kenneth McRae kenneth.mc...@dreamhost.comwrote: I would recommend you do this on a

Re: MD5 considered harmful

2012-01-31 Thread harbor235
My thoughts are that you should filter traffic routed directly to your BGP speaking devices, traffic routing through a edge device and to an edge device are treated differently. BGP session protection using a MD5 password by itself is not securing the control plane, but it is a component of an

Re: MD5 considered harmful

2012-01-31 Thread harbor235
Sounds like we want a well thought out plan in place in case there is a screw up with an org's lack of planning and management capabilities.. Mike On Tue, Jan 31, 2012 at 12:56 PM, Nick Hilliard n...@foobar.org wrote: On 31/01/2012 16:40, David Barak wrote: Because downtime is a

vrf address familiy upgrade

2011-12-06 Thread harbor235
I was wondering if anyone has had experience with the vrf cli upgrade command that upgrades an existing V4 only VRf to a multi-protocol vrf? command: (config)# vrf upgrade-cli multi-af-mode My issue is that it fails to upgrade the my, one of the pre-requisites is that the vrf must

IP Options

2011-11-17 Thread harbor235
Is it just me or has there been an increase in packets with IP options set hitting our front door? There are ways to mitigate e.g. IP options selective discard, and ACL IP options support. ACL entries on the edge appear to be the best way identify and log the source. IP options selective discard

Re: IP Options

2011-11-17 Thread harbor235
...@gmail.com wrote: got pcaps? On Thu, Nov 17, 2011 at 10:04 AM, harbor235 harbor...@gmail.com wrote: Is it just me or has there been an increase in packets with IP options set hitting our front door? There are ways to mitigate e.g. IP options selective discard, and ACL IP options support. ACL

MPLS TE

2011-11-04 Thread harbor235
TE lab testing flushing out how TE works, configured a primary and backup tunnel between PEs, both directions. Primary is dynamic and backup is explicit, initially priorities were the same, I then choose to make one tunnel preferred over the other adjusting the priorities, I choose the tunnel that

Re: MPLS TE

2011-11-04 Thread harbor235
: harbor235 [mailto:harbor...@gmail.com] Sent: Friday, November 04, 2011 5:10 PM To: NANOG list Subject: MPLS TE TE lab testing flushing out how TE works, configured a primary and backup tunnel between PEs, both directions. Primary is dynamic and backup is explicit, initially priorities were

events

2011-09-30 Thread harbor235
What is everyone using to collect, alert, and analyze syslog data? I am looking for something that can generate reports as well as support multiple vendors. We have done some home grown stuff in the past but would be interested in something that incorprates all the best features. Soalrwinds,

insurance

2011-09-20 Thread harbor235
Curious if anyone out there is acting as an independent contractor, consultant, or small business, if so do you use professional liability insurance? What should I look out for and is there any good brokers that offer inexpensive yet reliable insurance? thanks as always, Mike

Re: insurance

2011-09-20 Thread harbor235
So what is the difference with EO and professional insurance? Mike On Tue, Sep 20, 2011 at 10:20 AM, Dave Ellis d...@colo4.com wrote: My wife works for an insurance Agency and handles small business lines. Want me to have her contact you? On 09/20/2011 08:00 AM, harbor235 wrote: Than you

TDM voice DOS

2011-08-16 Thread harbor235
Anyone been involved with TDM voice DOS attacks? My thoughts are that if the phone call originates as an IP call somewhere in the wild, then typical abuse security incident notifications may help in the interim. At least potentially identify through customer records or make them move on where they

Re: TDM voice DOS

2011-08-16 Thread harbor235
the complication is that the the attack victim is not IP .. Can't turn up a firewall or router to mitigate. mike On Tue, Aug 16, 2011 at 12:57 PM, Charles N Wyble char...@knownelement.comwrote: On 08/16/2011 11:46 AM, harbor235 wrote: Anyone been involved with TDM voice DOS attacks

OOB

2011-07-26 Thread harbor235
I am curious what is the best practice for OOB for a core infrastructure environment. Obviously, there is an OOB kit for customer managed devices via POTS, Ethernet, etc ... And there is OOB for core infrastructure typically a separate basic network that utilizes diverse carrier and diverse path

Re: OOB

2011-07-26 Thread harbor235
on our AS. Pierre-Yves 2011/7/26 harbor235 harbor...@gmail.com I am curious what is the best practice for OOB for a core infrastructure environment. Obviously, there is an OOB kit for customer managed devices via POTS, Ethernet, etc ... And there is OOB for core infrastructure typically

ipv6 address family with vrf

2011-07-13 Thread harbor235
Has anyone been able to configure ipv4 and ipv6 AFI with VRF instances simultaneously? Using the 7200 and 12.4(25e), under the ipv6 address family the VRF sub commands are not visible, must be a feature? thanx in advance, Mike

Re: ipv6 address family with vrf

2011-07-13 Thread harbor235
hmmm, looks like I am looking for the multiprotocol vrf feature that is only supported in the modular IOS trains for the CRS and ASR platforms, can anyone confirm that? Mike On Wed, Jul 13, 2011 at 9:14 AM, harbor235 harbor...@gmail.com wrote: Has anyone been able to configure ipv4 and ipv6

riverbed steelhead

2011-04-21 Thread harbor235
Anyone out there have experience with Riverbed Steelhead products? Do they improve TCP performance over WAN links? is it worth the price? mike

365x24x7

2011-04-15 Thread harbor235
If I were going to provide a 365x24x7 NOC, how many teams of personnel do I need to fully cover operations? I assume minimally you need 3 teams to cover the required 24 hr coverage, but there is off time and schedule rotation? thoughts, experience? Mike

Re: 365x24x7

2011-04-15 Thread harbor235
Guys, Thanx alot, there is some great stuff here, also some stuff I had not thought of. thanx again, Mike On Fri, Apr 15, 2011 at 10:36 AM, Tony Finch d...@dotat.at wrote: harbor235 harbor...@gmail.com wrote: If I were going to provide a 365x24x7 NOC, how many teams of personnel do I

Re: Level 3 Agrees to Purchase Global Crossing

2011-04-11 Thread harbor235
combining the companies will allow them to maximize efficeinecies by the elimination of overlapping functions, hopefully paving the way to profitability. Job cuts here we come Mike On Mon, Apr 11, 2011 at 10:41 AM, Mike Walter mwal...@3z.net wrote: I find it amusing that the article

Re: LISP

2011-04-11 Thread harbor235
http://www.lisp4.net/ Mike On Mon, Apr 11, 2011 at 10:49 AM, Christina Klam ck...@ias.edu wrote: All, One of our ISP is planning to do a LISP deployment. (1) Does anyone know if Sprint uses LISP? (2) Does anyone know of any good guides/documentation of LISP? Thank you, Christina Klam

IRSCP

2011-01-05 Thread harbor235
I was curious if anyone has heard off or is playing around with Intelligent Route Service Control Point? Looks like there are some trials going on and it has potential to centralize routing descsions as well as a DDOS mitigation tool, thoughts? harbor235 ;}

Cell sites

2010-10-26 Thread harbor235
not exist. thanx in advance, harbor235 ;}

Re: Road Runner Abuse Contact

2010-09-02 Thread harbor235
I always feel bad when roadrunners get abused . On Thu, Sep 2, 2010 at 4:43 PM, Brad Fleming bdfle...@gmail.com wrote: Any Road Runner abuse reps on the list? If so, could you please contact me off-list?

Re: I don't need no stinking firewall!

2010-01-09 Thread harbor235
I think we are over looking what an enterprise class firewall accomplishes from a security perspective and what a firewalls function is in the overall security posture of a network. First, statefull inspection by itself is not the only security feature of a firewall, it is one security feature of

Re: I don't need no stinking firewall!

2010-01-09 Thread harbor235
Other security features in an Enterprise Class firewall; -Inside source based NAT, reinforces secure traffic flow by allowing outside to inside flows based on configured translations and allowed security policies Terrible from an availability perspective, troubleshooting perspective,