Re: Network Provider Recommendation in Edmonton AB

2010-01-18 Thread Wade Peacock

Have you tried contacting Shaw Business Solutions (Formally BigPipe Inc) or 
Bell (GT /360 Networks) or even Telus?

I would expect that all should be able to provide symmetric (non cable or adsl) 
solution.

Wade

Lyndon Nerenberg (VE6BBM/VE7TFX) wrote:

I have a client in Edmonton who's looking for a network drop to their
office, something in the 2-10 MB/s range. The location is at 46 Ave.
and 99 St.

The core requirement is for a bare unfiltered *symmetric* pipe (no
ADSL).  Traffic volume will be low: 2-4 laptop VPNs plus some light
web server and email traffic.  2 Mb/s as a lower bound should be fine,
with a /28 IPv4 address block (either bridged or routed).

I've been away from Edmonton long enough now that I no longer know
who's active there, so any and all feedback is welcome.  (Vendors,
too, provided you include some real content.)  Please respect the
Reply-To header.

Cheers,

--lyndon






New netblock Geolocate wrong (Google)

2010-01-18 Thread Rosenberry, Eric
I just lit up a new IP netblock (assigned directly from ARIN) and the companies 
that provide Geolocate databases do not have the correct location information 
available yet.

Specifically Maxmind (http://www.maxmind.com/) thinks we are in Canada and 
IP2LOCATION (http://www.ip2location.com/) has no data.

For the most part this is benign or at worst slightly impacting since I often 
get redirected to global load balance nodes up in Canada instead of locally in 
the North West, however, the more major issue I am running into is that Google 
chooses to redirect all my users to www.google.cahttp://www.google.ca.

So my questions to others are:

1.   How do I get my data updated in all of the geolocate providers 
databases as quickly as possible?

2.   What geolocate database does Google use (is it homegrown?) and how do 
I get them to update my data?

Thanks.

-Eric
___
Eric Rosenberry
Sr. Network Engineer | Chief Bit Plumber



iovation
111 SW Fifth Avenue
Suite 3200
Portland, OR 97204
www.iovation.comhttp://www.iovation.com/

The information contained in this email message may be privileged, confidential 
and protected from disclosure. If you are not the intended recipient, any 
dissemination, distribution or copying is strictly prohibited. If you think 
that you have received this email message in error, please notify the sender by 
reply email and delete the message and any attachments.


Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread Olaf Baumert
Hi Eric,

On 18/01/10 14:27 -0800, Rosenberry, Eric wrote:
 So my questions to others are:
 1.   How do I get my data updated in all of the geolocate providers 
 databases as quickly as possible?
 2.   What geolocate database does Google use (is it homegrown?) and how 
 do I get them to update my data?

from past questions here i recall
http://nanog.cluepon.net/index.php/GeoIP
which leads to
http://www.google.com/support/websearch/bin/request.py?contact_type=ip
for google and others as well.

Regards,

Olaf
-- 
Olaf Baumert - https://baumert.eu - o...@baumert.eu
work +49 231 9721335 private +49 231 5702579 cell +49 172 5654177



Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread D'Arcy J.M. Cain
On Mon, 18 Jan 2010 14:27:30 -0800
Rosenberry, Eric eric.rosenbe...@iovation.com wrote:
 I just lit up a new IP netblock (assigned directly from ARIN) and the 
 companies that provide Geolocate databases do not have the correct location 
 information available yet.
 
 Specifically Maxmind (http://www.maxmind.com/) thinks we are in Canada and 
 IP2LOCATION (http://www.ip2location.com/) has no data.
 
 For the most part this is benign or at worst slightly impacting since I often 
 get redirected to global load balance nodes up in Canada instead of locally 
 in the North West, however, the more major issue I am running into is that 
 Google chooses to redirect all my users to 
 www.google.cahttp://www.google.ca.

You may also find that certain things are unavailable to your users.
Sometimes sheet music or books are only available in the US for
copyright reasons.

-- 
D'Arcy J.M. Cain da...@druid.net |  Democracy is three wolves
http://www.druid.net/darcy/|  and a sheep voting on
+1 416 425 1212 (DoD#0082)(eNTP)   |  what's for dinner.



Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread Tim Lampman

Services such as Hulu could also be affected, certain youtube files even.

D'Arcy J.M. Cain wrote:

On Mon, 18 Jan 2010 14:27:30 -0800
Rosenberry, Eric eric.rosenbe...@iovation.com wrote:
  

I just lit up a new IP netblock (assigned directly from ARIN) and the companies 
that provide Geolocate databases do not have the correct location information 
available yet.

Specifically Maxmind (http://www.maxmind.com/) thinks we are in Canada and 
IP2LOCATION (http://www.ip2location.com/) has no data.

For the most part this is benign or at worst slightly impacting since I often get 
redirected to global load balance nodes up in Canada instead of locally in the North 
West, however, the more major issue I am running into is that Google chooses to 
redirect all my users to www.google.cahttp://www.google.ca.



You may also find that certain things are unavailable to your users.
Sometimes sheet music or books are only available in the US for
copyright reasons.

  



--
Tim Lampman
Co-Owner/CTO
*Broadline Networks Inc.*
57 Colborne Street West, Brantford, ON, N3T 1K6
*p.* 1-866-546-8486
*c.* 905-746-3114
www.broadlinenetworks.com http://www.broadlinenetworks.com/ | 
t...@broadlinenetworks.com mailto:t...@broadlinenetworks.com


Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread Warren Kumari

On Jan 18, 2010, at 5:27 PM, Rosenberry, Eric wrote:

 I just lit up a new IP netblock (assigned directly from ARIN) and the 
 companies that provide Geolocate databases do not have the correct location 
 information available yet.
 
 Specifically Maxmind (http://www.maxmind.com/) thinks we are in Canada and 
 IP2LOCATION (http://www.ip2location.com/) has no data.
 
 For the most part this is benign or at worst slightly impacting since I often 
 get redirected to global load balance nodes up in Canada instead of locally 
 in the North West, however, the more major issue I am running into is that 
 Google chooses to redirect all my users to 
 www.google.cahttp://www.google.ca.
 
 So my questions to others are:
 
 1.   How do I get my data updated in all of the geolocate providers 
 databases as quickly as possible?
 
 2.   What geolocate database does Google use (is it homegrown?) and how 
 do I get them to update my data?

http://www.google.com/support/websearch/bin/request.py?contact_type=ip

If it is urgent / lots of users are grumping at you, feel free to send me an 
off-list mail including the information asked for on that page and I'll follow 
up internally. 

Something that I have often wondered is how folks would feel about publishing 
some sort of geo information in reverse DNS (something like LOC records, with 
whatever precision you like) -- this would allow the folks that geo stuff to 
automagically provide the best answer, and because you control the record, you 
can specify whatever resolution / precision you like. Based upon the sorry 
state of existing reverse, I'm suspecting that there is no point

W

 
 Thanks.
 
 -Eric
 ___
 Eric Rosenberry
 Sr. Network Engineer | Chief Bit Plumber
 
 
 
 iovation
 111 SW Fifth Avenue
 Suite 3200
 Portland, OR 97204
 www.iovation.comhttp://www.iovation.com/
 
 The information contained in this email message may be privileged, 
 confidential and protected from disclosure. If you are not the intended 
 recipient, any dissemination, distribution or copying is strictly prohibited. 
 If you think that you have received this email message in error, please 
 notify the sender by reply email and delete the message and any attachments.

--
Beware that the most effective way for someone to decrypt your data may be 
with rubber hose. --- SSH 1.2.12 README





Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread Steven Bellovin

On Jan 18, 2010, at 8:22 PM, Warren Kumari wrote:

 Something that I have often wondered is how folks would feel about publishing 
 some sort of geo information in reverse DNS (something like LOC records, with 
 whatever precision you like) -- this would allow the folks that geo stuff to 
 automagically provide the best answer, and because you control the record, 
 you can specify whatever resolution / precision you like. Based upon the 
 sorry state of existing reverse, I'm suspecting that there is no point

I don't think that that works.  Apart from the problem that you allude to -- 
people not bothering to set it up in the first place -- IP geolocation is often 
used for certain forms of access control and policy enforcement.  For example: 
Regular Season Local Live Blackout: All live, regular season games available 
via MLB.TV, MLB.com At Bat 2009 and certain other MLB.com subscription services 
are subject to local blackouts. Such live games will be blacked out in each 
applicable Club's home television territory, regardless of whether that Club is 
playing at home or away. (http://www.mlb.com/mediacenter/).  EBay has 
apparently used IP geolocation (poorly) to control access to certain auctions 
for items that are illegal in certain jurisdictions or that cannot be exported.

--Steve Bellovin, http://www.cs.columbia.edu/~smb








Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread Patrick W. Gilmore
On Jan 18, 2010, at 8:38 PM, Steven Bellovin wrote:
 On Jan 18, 2010, at 8:22 PM, Warren Kumari wrote:
 
 Something that I have often wondered is how folks would feel about 
 publishing some sort of geo information in reverse DNS (something like LOC 
 records, with whatever precision you like) -- this would allow the folks 
 that geo stuff to automagically provide the best answer, and because you 
 control the record, you can specify whatever resolution / precision you 
 like. Based upon the sorry state of existing reverse, I'm suspecting that 
 there is no point
 
 I don't think that that works.  Apart from the problem that you allude to -- 
 people not bothering to set it up in the first place -- IP geolocation is 
 often used for certain forms of access control and policy enforcement.  For 
 example: Regular Season Local Live Blackout: All live, regular season games 
 available via MLB.TV, MLB.com At Bat 2009 and certain other MLB.com 
 subscription services are subject to local blackouts. Such live games will be 
 blacked out in each applicable Club's home television territory, regardless 
 of whether that Club is playing at home or away. 
 (http://www.mlb.com/mediacenter/).  EBay has apparently used IP geolocation 
 (poorly) to control access to certain auctions for items that are illegal in 
 certain jurisdictions or that cannot be exported.

These are just ways of satisfying lawyers  courts that you at least tried to 
live up to your end of the bargain (licensing, laws, etc.).  Since many 
geo-location DBs work off SWIP records, which are obviously controlled by the 
user, and some even use in-addrs already for info, I don't see why it wouldn't 
work.

Also, this is not a silver-bullet kinda problem.  Every little bit helps.  If 
even a few % of people put LOC records into the DNS, it would help some people. 
 The danger is not of poor uptake, it's of kruft.  But that is a huge danger.  
Just no larger than SWIP or current in-addr.

-- 
TTFN,
patrick




Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread Christopher Morrow
On Mon, Jan 18, 2010 at 8:38 PM, Steven Bellovin s...@cs.columbia.edu wrote:

 On Jan 18, 2010, at 8:22 PM, Warren Kumari wrote:

 Something that I have often wondered is how folks would feel about 
 publishing some sort of geo information in reverse DNS (something like LOC 
 records, with whatever precision you like) -- this would allow the folks 
 that geo stuff to automagically provide the best answer, and because you 
 control the record, you can specify whatever resolution / precision you 
 like. Based upon the sorry state of existing reverse, I'm suspecting that 
 there is no point

 I don't think that that works.  Apart from the problem that you allude to -- 
 people not bothering to
 set it up in the first place -- IP geolocation is often used for certain 
 forms of access control and
 policy enforcement.  For example: Regular Season Local Live Blackout: All 
 live, regular season

Sure, but I don't think that warren meant s sole signal here... having
a hint is nice :)

 games available via MLB.TV, MLB.com At Bat 2009 and certain other MLB.com 
 subscription
 services are subject to local blackouts. Such live games will be blacked out 
 in each applicable
 Club's home television territory, regardless of whether that Club is playing 
 at home or away.
 (http://www.mlb.com/mediacenter/).  EBay has apparently used IP geolocation 
 (poorly) to control
 access to certain auctions for items that are illegal in certain 
 jurisdictions or that cannot be
 exported.

this describes any use of geo-location for ips though, in most cases
it's probably not half bad, but with determined 'attackers' there's
very little that can protect your spotify-music from non-swedish
folks, for instance.

Speaking of geoloc fail:
http://forum.boxee.tv/showthread.php?t=5682
(vpn your boxee traffic to a location more suitable to your watching desires)

(I think the users of geoloc in these cases understand they have a
95-98% success rate, and are willing to take the hit on the folks who
take an effort to avoid them.)

-Chris


                --Steve Bellovin, http://www.cs.columbia.edu/~smb










Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread Warren Kumari

On Jan 18, 2010, at 8:38 PM, Steven Bellovin wrote:

 
 On Jan 18, 2010, at 8:22 PM, Warren Kumari wrote:
 
 Something that I have often wondered is how folks would feel about 
 publishing some sort of geo information in reverse DNS (something like LOC 
 records, with whatever precision you like) -- this would allow the folks 
 that geo stuff to automagically provide the best answer, and because you 
 control the record, you can specify whatever resolution / precision you 
 like. Based upon the sorry state of existing reverse, I'm suspecting that 
 there is no point
 
 I don't think that that works.  Apart from the problem that you allude to -- 
 people not bothering to set it up in the first place -- IP geolocation is 
 often used for certain forms of access control and policy enforcement.  For 
 example: Regular Season Local Live Blackout: All live, regular season games 
 available via MLB.TV, MLB.com At Bat 2009 and certain other MLB.com 
 subscription services are subject to local blackouts. Such live games will be 
 blacked out in each applicable Club's home television territory, regardless 
 of whether that Club is playing at home or away. 
 (http://www.mlb.com/mediacenter/).  EBay has apparently used IP geolocation 
 (poorly) to control access to certain auctions for items that are illegal in 
 certain jurisdictions or that cannot be exported.

Ah, yes, sorry, I guess I didn't fully explain this...

This wouldn't (well, shouldn't) be used as an authoritative source -- it would 
simple be yet another signal that could be used, and would provide (if the ISP 
so chose) higher resolution.

If you think that the IP is in Uzbekistan and traceroutes, whois and RTT all 
seem to agree with that, but the published LOC type record claims that it is 
just down the road from you in NJ then, well, you would be silly to believe it.
Folks who are currently using geolocation for policy (like MLB.com) must[0] 
realize that this is a fundamentally flawed approach and is only effective 
against a non-determined audience, mustn't they? TOR / proxies / etc will all 
happily get around this blocking and seem much easier for the average user than 
poking at DNS.

W

[0]: Ok, they probably don't, but 



 
   --Steve Bellovin, http://www.cs.columbia.edu/~smb
 
 
 
 
 

--
She'd even given herself a middle initial - X - which stood for someone who 
has a cool and exciting middle name.

-- (Terry Pratchett, Maskerade)





Re: New netblock Geolocate wrong (Google)

2010-01-18 Thread Randy Bush
 Something that I have often wondered is how folks would feel about
 publishing some sort of geo information in reverse DNS (something like
 LOC records, with whatever precision you like) -- this would allow the
 folks that geo stuff to automagically provide the best answer, and
 because you control the record, you can specify whatever resolution /
 precision you like.

yes!

and smb sez:

 geolocation is often used for certain forms of access control and
 policy enforcement.  For example: Regular Season Local Live Blackout:
 All live, regular season games available via MLB.TV, MLB.com At Bat
 2009 and certain other MLB.com subscription services are subject to
 local blackouts. Such live games will be blacked out in each
 applicable Club's home television territory, regardless of whether
 that Club is playing at home or away.

first, i don't think the proportion of in-addr hackers is anywhere near
the basic inaccuracy rate of geo-loc.  so may not be of big concern.  if
it is of big concern, those concerned should not believe the in-addr
hack.

given that our westin, ashburn, and infomart equipment is often
considered to be in tokyo, this would be a big win.

randy



DIMACS/CCICADA Workshop on Secure Routing

2010-01-18 Thread Steven Bellovin
Note: we really want ops clue!


*
DIMACS/CCICADA Workshop on Secure Routing

  February 22 - 24, 2010
  DIMACS Center, CoRE Building, Rutgers University

Organizers:
  Steve Bellovin, Columbia University, smb at cs.columbia.edu
  Nick Feamster, Georgia Institute of Technology, feamster at cc.gatech.edu
  Aaron D. Jaggard, Rutgers University, adj at dimacs.rutgers.edu
  Vijay Ramachandran, Colgate University, vramachandran at colgate.edu

Presented under the auspices of the DIMACS Special Focus on
Algorithmic Foundations of the Internet and the Command, Control, and
Interoperability Center for Advanced Data Analysis (CCICADA).

   

This workshop will bring together experts in networking, algorithms,
mechanism design, and other areas to discuss recent progress and
future directions in securing network routing, including robustness in
the face of misconfiguration or rational behavior and defense against
active attacks.


Participation:

We are soliciting short abstract submissions to be considered for a
presentation at the workshop. Abstracts should be on recent progress
and future directions in secure network routing; this includes (but is
not limited to) theory, analysis, design, and experimental work
related to robustness in the face of misconfiguration or rational
behavior, defense against active attacks, and other problems relevant
to secure routing. Because there will be no published proceedings we
welcome submissions covering material that was previously presented
elsewhere (and referenced as such).

Instructions for authors: Submissions should include talk title,
speaker name, affiliation, contact information, and a short
abstract. Please mail abstracts to Aaron Jaggard (adj at
dimacs.rutgers.edu) by Friday, January 22, 2010.


Registration:

(Pre-registration deadline: February 15, 2010)

Please see website for complete registration details.

*
Information on participation, registration, accomodations, and travel can be 
found at:

 http://dimacs.rutgers.edu/Workshops/SecureRouting/

  **PLEASE BE SURE TO PRE-REGISTER EARLY**





Re: DIMACS/CCICADA Workshop on Secure Routing

2010-01-18 Thread Jeroen Massar
Steven Bellovin wrote:
 Note: we really want ops clue!
 
 
 *
 DIMACS/CCICADA Workshop on Secure Routing
 
   February 22 - 24, 2010

I recognize those dates they match NANOG48, I guess we can guess
where people will be thus: Austin, Texas and not New Jersey (magical
routing properties still doesn't allow people to be at two places at
once unfortunately...)

Might want to move those dates around a bit...

Greets,
 Jeroen



signature.asc
Description: OpenPGP digital signature


Re: DIMACS/CCICADA Workshop on Secure Routing

2010-01-18 Thread Steven Bellovin

On Jan 18, 2010, at 9:56 PM, Jeroen Massar wrote:

 Steven Bellovin wrote:
 Note: we really want ops clue!
 
 
 *
 DIMACS/CCICADA Workshop on Secure Routing
 
  February 22 - 24, 2010
 
 I recognize those dates they match NANOG48, I guess we can guess
 where people will be thus: Austin, Texas and not New Jersey (magical
 routing properties still doesn't allow people to be at two places at
 once unfortunately...)
 
 Might want to move those dates around a bit...
 
Probably not possible at this point, but yes, I should have realized that, 
especially given that I do have both on my calendar and I explained that I 
wouldn't be at NANOG because...

Oops.

--Steve Bellovin, http://www.cs.columbia.edu/~smb








Re: ASR1002

2010-01-18 Thread NetYourLife2007
HI,
Who knows how to unsubscribe the mail list?
Thanks a looot!




发件人: Kenny Sallee 
发送时间: 2010-01-07  08:36:23 
收件人: nanog 
抄送: 
主题: ASR1002 

Anyone have recommendations on solid IOS XE code for ASR 1002 that's just
doing:
- BGP
- VRF's
- Many sub-interfaces and ACL's
It shipped with 02.04.02.122-33.XND2.bin
Thanks,
Kenny