Re: Advice regarding Cisco/Juniper/HP

2010-06-22 Thread Bill Stewart
On Thu, Jun 17, 2010 at 6:52 AM, James Smith ja...@jamesstewartsmith.com wrote: we're in the process of building a DR site. Assume for purposes of discussion that all the vendors have equivalent quality equipment with approximately equivalent features. I can think of four occasions you'd need a

Re: Did Internet Founders Actually Anticipate Paid, Prioritized Traffic?

2010-09-17 Thread Bill Stewart
On Tue, Sep 14, 2010 at 6:51 PM, Steven Bellovin s...@cs.columbia.edu wrote: No, they bought ATT, which [...]  But yes, SBC is the controlling piece of the new ATT. As for the two /8s -- not quite.  Back in the 1980s, ATT got 12/8.  We soon learned that we couldn't make good use of it,

Re: Did Internet Founders Actually Anticipate Paid, Prioritized Traffic?

2010-09-17 Thread Bill Stewart
Sorry, fat-fingered something when I was trying to edit. On Fri, Sep 17, 2010 at 2:12 PM, Bill Stewart nonobvi...@gmail.com wrote: On Tue, Sep 14, 2010 at 6:51 PM, Steven Bellovin s...@cs.columbia.edu wrote: No, they bought ATT, which [...]  But yes, SBC is the controlling piece of the new

Re: Did Internet Founders Actually Anticipate Paid, Prioritized Traffic?

2010-09-19 Thread Bill Stewart
On Sat, Sep 18, 2010 at 2:34 AM, JC Dill jcdill.li...@gmail.com wrote: Jack Bates wrote: And yet, I'm pretty sure there are providers that have different pipes for business than they do for consumer, and probably riding some of the same physical medium. This creates saturated and unsaturated

Re: Online games stealing your bandwidth

2010-09-28 Thread Bill Stewart
On Sat, Sep 25, 2010 at 5:17 PM, Matthew Walster matt...@walster.org wrote: Plenty of people sell p2p caches but they all work using magic, smoke and mirrors. Somehow that seems appropriate for gaming networks; maybe add some swords or old Gandalf boxes. In general distributing gaming software

Re: The scale of streaming video on the Internet.

2010-12-04 Thread Bill Stewart
On Fri, Dec 3, 2010 at 9:35 AM, Leo Bicknell bickn...@ufp.org wrote: - Ratio needs to be dropped from all peering policies.  It made sense  back when the traffic was two people e-mailing each other.  It was  a measure of equal value.  However the net has evolved.  In the  face of streaming

Re: Connectivity status for Egypt

2011-01-28 Thread Bill Stewart
On 1/28/11, andrew.wallace andrew.wall...@rocketmail.com wrote: We should be asking the Egyptians to stagger the return of services so that infrastructure isn't affected, when connectivity is deemed to be allowed to come back online. Well, yeah, it has to be done carefully, otherwise the first

Re: Ipv6 for the content provider

2011-01-28 Thread Bill Stewart
On 1/26/11, Owen DeLong o...@delong.com wrote: And if your servers behind the LB aren't prepared for it, you lose a LOT of logging data, geolocation capabilities, and some other things if you go that route. Of course, anybody expecting a current IPv4 geolocation service to provide accurate

Re: DSL options in NYC for OOB access

2011-01-28 Thread Bill Stewart
On 1/24/11, Andy Ashley li...@nexus6.co.za wrote: Im looking for a little advice about DSL circuits in New York, specifically at 111 8th Ave. Going to locate a console server there for out-of-band serial management. The router will need connectivity for remote telnet/ssh access from the NOC.

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-01 Thread Bill Stewart
On 2/1/11, Chuck Anderson c...@wpi.edu wrote: What would your recommended solution be then for disconnected networks? Every home user and enterprise user requests GUA directly from their RIR/NIR/LIR at a cost of hunderds of dollars per year or more? A typical home user will have a /56 of

Re: Where to buy Internet IP addresses

2009-05-04 Thread Bill Stewart
You have RFC3041 and similar techniques, stateless autoconfig, and a variety of other general things that make it really awful for the default ethernet network size to be something besides a /64. ... I would definitely prefer to see a /56, or maybe a /48, handed out today. When I first

Re: Packet loss statistics

2009-05-28 Thread Bill Stewart
On Thu, May 28, 2009 at 9:55 AM, Ric Messier kil...@washere.com wrote: Here is the Qwest link mentioned, by the way, in case anyone else is interested. http://stat.qwest.net/statqwest/perfRptIndex.jsp The equivalent ATT network performance portal page is http://www.att.com/ipnetwork and

Re: FCCs RFC for the Definition of Broadband

2009-08-25 Thread Bill Stewart
It's not a technical question, it's a political one, so feel free to squelch this for off-topicness if you want. Technically, broadband is faster than narrowband, and beyond that it's fast enough for what you're trying to sell; tell me what you're trying to sell and I'll tell you how fast a

Re: ISP customer assignments

2009-10-19 Thread Bill Stewart
If you've got an addressing system with enough bits that you don't have to start stealing them, it makes sense to pick some boundary length between our-problem : their-problem 128 bits is long enough, and changing protocols is nasty enough, that it should let you Never Have To Do It

Re: ISP customer assignments

2009-10-20 Thread Bill Stewart
On Mon, Oct 19, 2009 at 7:07 PM, Nathan Ward na...@daork.net wrote: On 20/10/2009, at 3:02 PM, Bill Stewart wrote: plus want the ability to take their address space with them when they change ISPs (because there are too many devices and applications that insist on having hard-coded IP

Re: Congress may require ISPs to block fraud sites H.R.3817

2009-11-08 Thread Bill Stewart
If you're a consumer broadband provider, and you use a DNS blackhole list so that any of your subscribers who tries to reach bigbank1.fakebanks.example.com gets redirected to fakebankwebsitelist.sipc.gov, you might be able to claim that you complied with the law, though the law's aggressive enough

Re: What DNS Is Not

2009-11-09 Thread Bill Stewart
Hi, Paul - I share your dislike of DNS services that break the DNS model for profit in ways that break applications. For instance, returning the IP address of your company's port-80 web server instead of NXDOMAIN not only breaks non-port-80-http applications, it also breaks the behaviour that

Re: SPF Configurations

2009-12-06 Thread Bill Stewart
On Sun, Dec 6, 2009 at 2:56 PM, Sean Donelan s...@donelan.com wrote: In particular, what anti-forgery/security controls should network operators implement and check; and what anti-forgery/security controls should network operators not implement or check? Depends a bit on whether you're

Re: Outgoing SMTP Servers

2011-11-03 Thread Bill Stewart
On Mon, Oct 31, 2011 at 6:23 AM, Brian Johnson bjohn...@drtel.com wrote: For clarity it's really bad for ISPs to block ports other than 25 for the purposes of mail flow control... correct? Yes, correct. If you're using another mail submission port, you're connecting to a mail service that has

Re: IPv6 prefixes longer then /64: are they possible in DOCSIS networks?

2011-11-30 Thread Bill Stewart
On Tue, Nov 29, 2011 at 3:46 AM, Dmitry Cherkasov doctor...@gmail.com wrote: Currently I research on IPv6 provisioning systems and I need to decide whether the ability to use longer then /64 prefixes should be supported in them or not. If we restrict user to using /64 per network we need to

Re: IPv6 prefixes longer then /64: are they possible in DOCSIS networks?

2011-11-30 Thread Bill Stewart
On Wed, Nov 30, 2011 at 1:18 PM, Mark Blackman m...@exonetric.com wrote: ... and I'm not sure why SLAAC wanted more than 48 bits. One reason IPv6 addresses are 128 bits long instead of 40, 48, 64 or 80 is because converting from IPv4 to IPv6 is really painful and we don't want to ever have to do

Re: Looking for a Tier 1 ISP Mentor for career advice.

2011-11-30 Thread Bill Stewart
Another really useful skill is knowing what it looks like to be a customer / end user of one of those networks. Sure, it's fun to crank obscure BGP load-balancing techniques, but you also need to know where the industry as a whole is going technically and business-wise. Tier 1s sell to Tier 2s,

Protocols for Testing Intrusion Detection?

2012-05-14 Thread Bill Stewart
I'm looking for recommended protocols to use for testing intrusion detection and maybe also firewall logging. Basically I need some kind of protocol that it's ok to discard traffic for in a production network, so I can be sure that the various systems that should be detecting it and generating

Re: an over-the-top data center

2008-12-08 Thread Bill Stewart
Data centers in used nuclear bunkers aren't new - www.thebunker.net has done that for a decade in the UK. They found that having a cool-looking site made it easy to sell to bankers who wanted reassurance about physical security, and at least with the computer technology of the time it was easy to

Re: What to do when your ISP off-shores tech support

2009-01-04 Thread Bill Stewart
Assuming that what you're getting from Verizon is copper and not FIOS, there should be a number of small to medium-sized ISPs that will provide you with Layer 3 Internet Service using that copper. It will cost you a few dollars a month more, but not a lot more, and you'll not only have more chance

Re: Ethical DDoS drone network

2009-01-07 Thread Bill Stewart
On Mon, Jan 5, 2009 at 4:11 PM, Roland Dobbins rdobb...@cisco.com wrote: In my experience, once one has an understanding of the performance envelopes and has built a lab which contains examples of the functional elements of the system (network infrastructure, servers, apps, databases, clients,

Re: Estimate of satellite vs. Land-based traffic

2009-01-07 Thread Bill Stewart
At least in the US, satellite use is fairly limited compared to fiber and copper, mainly in the following areas - TV broadcast - Data and voice to remote areas (a few hundred Alaska villages, some connectivity up to oil drilling areas in Alaska, though there's also fiber, plus some Internet

Re: Which is more efficient?

2009-01-15 Thread Bill Stewart
On Wed, Jan 14, 2009 at 12:56 PM, Murphy, Jay, DOH jay.mur...@state.nm.us wrote: In your humble opinion, which transmission method is more efficient, packet or cell? ... Trying to make a decision on the transport mode for cost, delay, jitter, ROI, etcetera. It really depends on what your

Re: can I ask mtu question

2009-02-03 Thread Bill Stewart
Which standard are you referring to? AFAIK, nothing above 1500 is standardised I've had two different kinds of customer requests for jumbo frames - customers that want very large frames for performance reasons; Many ethernet switches support 9000 or more, some don't, and some technologies

Re: [Update] Re: New ISP to market, BCP 38, and new tactics

2009-02-04 Thread Bill Stewart
On Tue, Feb 3, 2009 at 5:43 PM, Steve Bertrand st...@ibctech.ca wrote: What I was hoping for (even though I'm testing something that I know won't work) is that I can break something so I could push v4 traffic over a v6-only core. Is there _any_ way to do this (other than NAT/tunnel etc)? If

Re: Private use of non-RFC1918 IP space

2009-02-09 Thread Bill Stewart
On Sun, Feb 8, 2009 at 11:42 PM, Joel Jaeggli joe...@bogus.com wrote: FD00::/8 ula-l rfc 4139 s/4139/4193/ -- Thanks; Bill Note that this isn't my regular email account - It's still experimental so far. And Google probably logs and indexes everything you send it.

Re: Dynamic IP log retention = 0?

2009-03-13 Thread Bill Stewart
On Fri, Mar 13, 2009 at 2:15 PM, valdis.kletni...@vt.edu wrote:  After all, you didn't *really* care that the IP was assigned to a computer belonging to Herman Munster, 1313 Mockingbird Lane.  What you actually *wanted* was for somebody (preferably Covad) to hand Herman a clue. Yeah. I miss

Re: Broadband Subscriber Management

2009-04-25 Thread Bill Stewart
On Fri, Apr 24, 2009 at 7:27 AM, Frank Bulk frnk...@iname.com wrote: So what were you doing than, RFC 1483? Back when I worked with ATT's business-market DSL folks, used RFC 1483 rather than annoy customers with PPPoE, and we provided ATM to lots of CLECs that did the same. (I don't know what

Re: 240/4

2007-10-16 Thread Bill Stewart
On 10/16/07, Justin M. Streiner [EMAIL PROTECTED] wrote: The effort someone would spend figuring out if 204/4 is reachable and not-pain-inducing in their infrastructure is better spent figuring out how to make IPv6 work within their sphere of responsibilities. I agree. The current rate

Re: ingress SMTP

2008-09-12 Thread Bill Stewart
toned down my vehemence about the blocking issue a bit - there's enough zombieware out there that I don't object strongly to an ISP that has it blocked by default but makes it easy for humans to enable. -- Thanks; Bill Stewart Note that this isn't my regular email account - It's still

Re: DNS question, null MX records

2010-01-04 Thread Bill Stewart
On Tue, Dec 15, 2009 at 7:46 AM, Eric J Esslinger eesslin...@fpu-tn.com wrote: So in any case, due to customer privacy concerns we feel we can't do that. If you don't want to handle email for the long-obsolete customer accounts, but just don't want to send that mail to anybody else, it's pretty

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-12 Thread Bill Stewart
A password recovery method I've found very frustrating is to use the serial number or similar value that's on a label on the bottom of the equipment. It's just fine for desktop hardware - but for rack-mounted gear, it's not uncommon to find out that you need this information *after* somebody's

Re: I don't need no stinking firewall!

2010-01-14 Thread Bill Stewart
On Wed, Jan 13, 2010 at 9:37 PM, Warren Kumari war...@kumari.net wrote: I can now place a checkbox in the Is there a firewall? column of the insert random acronym here audit. In most cases, you can check the same box if you use an appropriately designed stateless firewall instead of an

Re: Using /126 for IPv6 router links

2010-01-29 Thread Bill Stewart
On Wed, Jan 27, 2010 at 1:19 PM, Igor Gashinsky i...@gashinsky.net wrote: 1) ping-ponging of packets on Sonet/SDH links 2) ping sweep of death ... For most people, using /127's will be a lot operationaly easier then maintain those crazy ACLs, but, like I said before, YMMV.. I'm in the /112

Re: Fiber Cut in CA?

2010-02-02 Thread Bill Stewart
On Tue, Feb 2, 2010 at 12:04 AM, char...@knownelement.com wrote: That is one long protect path. Yikes. There be mountains in the way, with deserts in between, and not a lot of people to justify diversity or railroads and highways to run it along. Not many carriers have more than one fiber route

Re: austin eats

2010-02-17 Thread Bill Stewart
On Tue, Feb 16, 2010 at 8:02 PM, Kevin Oberman ober...@es.net wrote: It's mostly the obvious places. Oddly, Fogo de Chao, a churrascaria that opened a year ago is missing from the list as is my personal By the way, Fogo de Chao is a very strange place to eat if you're a vegetarian. I once went

Re: Security Guideance

2010-02-24 Thread Bill Stewart
On Tue, Feb 23, 2010 at 11:46 AM, Paul Stewart pstew...@nexicomgroup.net wrote: The problem is that a user on this box appears to be launching high traffic DOS attacks from it towards other sites.  These are UDP based floods that move around from time to time - most of these attacks only last

Re: [Fwd: [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group]

2010-02-26 Thread Bill Stewart
Maybe I'm dense, but I don't see the problem. One of the great things about IPv6's address space being mindbogglingly large is that there's plenty of it to experiment with. If the ITU wants an RIR-sized block to do RIR-like work, so what? If they wanted a /2 or /4 I'd be concerned, or if there

Re: Network Naming Conventions

2010-03-15 Thread Bill Stewart
- Beers (the main server got to be anchor, which made our ex-Navy boss happy and seemed more professional than some others - Mountains, mostly volcanic - Psychoactive chemicals (the database is on speed, the development project's on prozac...) - Friends at Princeton used quarks (Up is down today.)

Re: IPv6 in Education Question

2010-03-18 Thread Bill Stewart
You're either going to have to sell them on future-proofing or We're sailing off the edge of the world in two years, there be dragons there, train your folks now. Remember that there are two IPv6 transitions - introducing IPv6 and forcing some people onto it - getting rid of IPv4 after IPv6

Re: IP4 Space

2010-03-24 Thread Bill Stewart
it seems to me that we'll have widespread ipv4 for +10 years at least, How many 10 year old pieces of kit do you have on your network? Ten years ago we were routing appletalk and IPX.  Still doing that now? Ten years ago I was still telling a few customers that Novell Netware had supported

Re: 100% want IPv6 - Was: New Linksys CPE, IPv6 ?

2010-04-01 Thread Bill Stewart
On Thu, Apr 1, 2010 at 5:00 AM, Joe Greco jgr...@ns.sol.net wrote: And on that note, I enclose the following, which was rejected by the RFC Editor, but seems relevant to this discussion, so here's the draft. Well of course it was rejected - using 257/8 sets the Evil Bit - you need to make that

Re: Books for the NOC guys...

2010-04-02 Thread Bill Stewart
On Fri, Apr 2, 2010 at 8:36 AM, Eliot Lear l...@cisco.com wrote:  On 4/2/10 2:09 PM, Robert E. Seastrom wrote: So, what are you having your up-and-coming NOC staff read? Practice of System and Network Administration by Limoncelli, Hogan, and Challup.  I may be biased, being married to Hogan.

Re: what about 48 bits?

2010-04-05 Thread Bill Stewart
On Mon, Apr 5, 2010 at 10:51 AM, Steven Bellovin s...@cs.columbia.edu wrote: On Apr 5, 2010, at 1:43 52PM, valdis.kletni...@vt.edu wrote: Steve is talking mid-80s pricing, not mid-90s.  By '93 or so, the fact that Ethernet was becoming ubiquitous had already forced the price down. Yup.  10

Re: ARIN IP6 policy for those with legacy IP4 Space

2010-04-07 Thread Bill Stewart
Isn't there an automatic allocation for those of us who have legacy IP space. If not, is ARIN saying we have to pay them a fee to use IP6?  Isn't this a disincentive for us to move up to IP6? If you're a very small company looking for larger than /32, maybe it's an issue. If you're a

Re: ARIN IP6 policy for those with legacy IP4 Space

2010-04-09 Thread Bill Stewart
One really good thing about spam was that, before it became a big problem, all Usenet / Internet discussions had a risk of devolving into libertarians vs. socialists flamewars, but that got replaced by *%^%* spammers, and eventually we got that nice little checklist as a way to quiet even those

Re: Router for Metro Ethernet

2010-04-12 Thread Bill Stewart
On Mon, Apr 12, 2010 at 10:55 AM, Dylan Ebner dylan.eb...@crlmed.com wrote: However, this router also has 2 100mb connections from local lans that it is also terminiating. For our 100mb metro e connections we use 3845s. The 100 mb service terminates into NM-GEs, which have a faster

Re: Router for Metro Ethernet

2010-04-14 Thread Bill Stewart
On Tue, Apr 13, 2010 at 9:12 PM, Tony Varriale tvarri...@comcast.net wrote: From: Bill Stewart nonobvi...@gmail.com Be careful using 3845s for 100 Mbps connections or above The 3825 says 179mbps on their spec sheet.  Not sure where you are getting your numbers but they are way off. All

Re: DSL aggregation.... NO

2010-04-15 Thread Bill Stewart
On Thu, Apr 15, 2010 at 2:05 PM, Bill Lewis ble...@hottopic.com wrote: Group, Since I'm told that DSL aggregation / mux is currently not possible, we are looking at doing stream splitting via a technology like FatPipe uses. Anyone have this in production usage? Or something similar? It

Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?

2010-04-29 Thread Bill Stewart
On Tue, Apr 27, 2010 at 3:24 PM, Owen DeLong o...@delong.com wrote: Here's an exercise.  Wipe a PC.  Put it on that cable modem with no firewall.  Install XP on it.  See if you can get any service packs installed before the box is infected. 1.      Yes, I can.  I simply didn't put an IPv4

Re: any bring your own bandwidth IPv4 over IPv4 tunnel merchants?

2010-05-03 Thread Bill Stewart
On Mon, 3 May 2010 14:12:45 -0400 Bill Bogstad bogs...@pobox.com wrote: Like many people, I can't justify the expense of commercial IP connectivity for my residence.  As a result, I deal with dynamic IP .. On Mon, May 3, 2010 at 11:27 AM, Gregory Edigarov g...@bestnet.kharkov.ua wrote: Holly

Re: Surcharge for providing Internet routes?

2010-05-03 Thread Bill Stewart
Back when I was on that side of the house, if you bought transit from 7018 and were managing your own routers, you got your choice of BGP or static, and BGP could have full routes, our-customer routes, default routes, and maybe some other variants. No charge for any of those options, but if you

Re: Internationalized domain names in the root

2010-05-06 Thread Bill Stewart
I'm getting three different behaviours from Firefox - I have the page open in a tab. The tab header is in Arabic script. (And the page itself renders fine in Arabic.) - When I go to that tab, the main Firefox window title shows boxes (i.e. don't have the font for this.) - When I go to that tab,

Re: 365x24x7

2011-04-17 Thread Bill Stewart
Variable scheduling of staff is often deemed more fair, but I think it makes things less stable.  People are constantly having to change their life. Rotating shifts between daytime and nighttime is a horrible thing to do to your workers, both for their health and their attention span. Full-time

Re: 365x24x7

2011-04-18 Thread Bill Stewart
On Sun, Apr 17, 2011 at 8:00 AM, Jay Ashworth j...@baylink.com wrote: The TV master control facility in which I'm working presently does it by doing overlapping 10 hour shifts; it takes 10 people to have 2 on-shift at all times.  You work 6 hours with one person, and 4 with the other. My

Re: So... is it time to do IPv6 day monthy yet?

2011-06-10 Thread Bill Stewart
So should monthly IPv6 day be the same week as Microsoft Patch Tuesday? :-)

Re: NANOGers home data centers - What's in your closet?

2011-09-07 Thread Bill Stewart
Friends of mine recently bought a large traditionally-designed house. The former servant's quarters are now the server room.