Re: eBay is looking for network heavies...

2015-06-06 Thread Joe Hamelin
On Fri, Jun 5, 2015 at 11:11 PM, Elmar K. Bins e...@4ever.de wrote:

 eyeronic.des...@gmail.com (Mike Hale) wrote:

  We need a pool on what percentage of readers just googled traceroute.

 None of course!


No, they read the man page, of course!

--
Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474






Re: eBay is looking for network heavies...

2015-06-06 Thread Scott Weeks


--- j...@nethead.com wrote:
From: Joe Hamelin j...@nethead.com

Back in 2000 at Amazon, HR somehow decided to have me do the phone
interviews for neteng.  I'd go through questions on routing and what not,
then at the end I would ask questions like, Who was Jon Postel?  Who is
Larry Wall?  Who is Paul Vixie? What are layers 8  9? Explain the RTFM
protocol.  What is NANOG?  Those answers (or long silences) told me more
about the candidate than most of the technical questions.
---


Now that's a good interview question series.  It shows that 
the person cares, rather than just doing a job.

scott

ps.  I never thought of RTFM as a protocol, but I like it.  
It's a protocol between engineers.  The conservative in 
what you send part... :-)


Re: eBay is looking for network heavies...

2015-06-06 Thread Joe Hamelin
Back in 2000 at Amazon, HR somehow decided to have me do the phone
interviews for neteng.  I'd go through questions on routing and what not,
then at the end I would ask questions like, Who was Jon Postel?  Who is
Larry Wall?  Who is Paul Vixie? What are layers 8  9? Explain the RTFM
protocol.  What is NANOG?  Those answers (or long silences) told me more
about the candidate than most of the technical questions.

--
Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474


Re: eBay is looking for network heavies...

2015-06-06 Thread Elmar K. Bins
eyeronic.des...@gmail.com (Mike Hale) wrote:

 We need a pool on what percentage of readers just googled traceroute.

None of course!



Re: eBay is looking for network heavies...

2015-06-06 Thread Dorian Kim
Those who cannot remember the past are condemned to repeat it”


-Santayana

Quite relevant in our industry that seems be more hell bent on rehashing ideas
and plot lines than Hollywood.

-dorian


 On Jun 6, 2015, at 6:43 AM, shawn wilson ag4ve...@gmail.com wrote:
 
 My first thought on reading that was who the hell cares if a person
 knows about internet culture. But than I had to reconsider - it's a
 very apt way of telling if someone read the right books :)
 
 I would also add Ritchie, Thompson, and Diffie to that list (since you
 ask about Larry, it's only appropriate).
 
 On Sat, Jun 6, 2015 at 6:32 AM, jim deleskie deles...@gmail.com wrote:
 I remember you asking me who Jon was :)  I have since added to my list of
 interview questions... sad but the number of people with clue is declining
 not increasing.
 
 
 On Sat, Jun 6, 2015 at 3:13 AM, Joe Hamelin j...@nethead.com wrote:
 
 Back in 2000 at Amazon, HR somehow decided to have me do the phone
 interviews for neteng.  I'd go through questions on routing and what not,
 then at the end I would ask questions like, Who was Jon Postel?  Who is
 Larry Wall?  Who is Paul Vixie? What are layers 8  9? Explain the RTFM
 protocol.  What is NANOG?  Those answers (or long silences) told me more
 about the candidate than most of the technical questions.
 
 --
 Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474
 



Re: eBay is looking for network heavies...

2015-06-06 Thread shawn wilson
On Fri, Jun 5, 2015 at 9:57 PM, James Laszko jam...@mythostech.com wrote:
 I asked one of my guys to tracert in windows for something and he executed 
 pathping.  I have never seen that in 25 years  Go figure!


Yep, I learned something new (though IDK I'll ever use it - I'm
guessing it's useless trivia, esp since I haven't done much with
Windows in ~6 years now). My default traceroute is:

nmap -Pn -p0 --traceroute host


Looking for network administration service

2015-06-06 Thread dave

Dear all,

We are looking for a network engineer to help us maintain our network.  
Devices used: Brocade RX4 router and Force10 switches.


Is there any company/individuals that can provide such service on a  
monthly retainer or project basis?


Thank you in advance.

Regards,
-dave



Re: eBay is looking for network heavies...

2015-06-06 Thread Stephen Satchell

On 06/06/2015 03:32 AM, jim deleskie wrote:

I remember you asking me who Jon was:)   I have since added to my list of
interview questions... sad but the number of people with clue is declining
not increasing.


It's not a question of clue, but of history.  How many CS grads are 
exposed to the details of the development of the Internet and 
Information Technology?


Many of us know of Jon Postel because we experienced and appreciated his 
work for the Internet when he was alive.  Ditto Richard Stevens.  Now I 
ask you:  how many students would delve into history that deeply?  How 
many universities/colleges/trade schools would include that information 
in their curriculum?


Moving on...Larry Wall -- I'm finding that the new generation of people 
don't use Perl any more, instead favoring Python for some reason. 
Indeed, my current job's management insists I learn Python, even though 
Perl has much more support for Cisco equipment as part of CPAN.  So, 
given that bias, it wouldn't be surprising that the up-and-coming 
wouldn't know who invented a tool they don't use.  Guido van Rossum, 
they know, maybe.


People exposed only to Windows may or may not know about Paul Vixie's 
contributions to our world -- again, it's history that would be arcane 
for those who never dabbled in Unix or Unix-like systems, or didn't 
follow Internet politics.  (Yes, BIND is implemented on Windows systems 
-- I consult to an ISP who suffers through the pain caused by the 
decision to do so -- but using a piece of software and knowing the 
history of that software are two different things, particularly when a 
person isn't doing DNS admin full-time.)


If your goal is to play Gotcha!, you need to go farther afield.

What is ARPAnet, and what role did it play in the development of the 
Internet?  What is XNS?  What is ThickNet?  ThinNet?  Expand and 
explain CTS, RTS, CD/DCD, MR, TR, RC, TC.  What is V.35?  HSSI?  ITU? 
T1 and E1, and what is the difference?  And so on through ISO level 1.


Who was Thomas Watson?  Who was Hollerith...and how did his invention 
trace its origins to silk tapestry?  What problem was Hollerith trying 
to solve?  Who is (were) Ken Olson and Harlan Anderson?  Throw in Ada 
Lovelace and Grace Hopper.  What is the significance of a 30 centimeter 
piece of twisted-pair wire, which Admiral Hopper would hand out at 
lectures?  What is COBOL?  (And I'm not referring to the planet Kobol 
that is part of the Battlestar Galactia universe.)  Who were Ken 
Thompson, Brian Kernighan, Dennis Ritchie, and Phillip Plauger?   Bill 
Joy?  And so on, and so on, second star to the right and straight on 
'till morning...


Here's the topper:  who was (is) Al Gore, and what part did he play in 
the birth of the Internet as we know it today?  Try not to howl as some 
of the answers you will get.


Re: eBay is looking for network heavies...

2015-06-06 Thread Brandon Ross
I also concur.  There is most certainly a negative correlation between 
certs and clue in my experience, having met 10s of certificate holders.


Long ago when the MCSE was more popular, I actually started putting MCSE 
need not apply on job postings because everyone I interviewed that had 
one was not just clue challenged, but had negative clue.


On Fri, 5 Jun 2015, jim deleskie wrote:


Based on the number of certified people I've interviewed over the last
20yr, my default view lines up with Jared's 100%

On Fri, Jun 5, 2015 at 10:38 PM, Mike Hale eyeronic.des...@gmail.com
wrote:


We need a pool on what percentage of readers just googled traceroute.
On Jun 5, 2015 6:28 PM, na...@cdl.asgaard.org wrote:


On 5 Jun 2015, at 17:45, Łukasz Bromirski wrote:

 On 06 Jun 2015, at 02:26, Jared Mauch ja...@puck.nether.net wrote:



 On Jun 5, 2015, at 7:13 PM, John Fraizer j...@op-sec.us wrote:


Head of line for CCIE / JNCIE but knowledge and experience trumps a
piece
of paper every time!



Can you please put these at the back of the line?  My experience is

that

the cisco certification (at least) is evidence of the absence of actual
troubleshooting skills.  (or my standards of what defines “expert” are
different than the rest of the world).



Jared, don’t generalize.

True - there are people that are ‘paper’ CCIE/JNCIEs - but let’s not
start a rant unless you've met tens of CCIEs/JNCIEs and all of them
didn’t know a jack. About troubleshooting.



't

We had one CCIE at a previous job who just didn't click no matter how
much we tried to train on the architecture.  Eventually in one backbone
event, he kept saying that the problem couldn't be with a given router
because traceroute worked.  When it was pointed out that the potential
fault wouldn't cause traceroute to fail, we got a very puzzled look.  We
then asked him to explain how traceroute worked.  He spectacularly

failed.


It became a tongue-in-cheek interview question.  What was boggling was

the

number of *IE's that failed trying to explain traceroute's mechanics.

My test, as crass as it is.  If your CV headlines with a JCIE/CCIE, I am
pretty certain that you have very little real-world experience.  If it's

a

footnote somewhere, that's ok.

Christopher




—
CCIE #15929 RS/SP, CCDE #2012::17
(not that I’d know anything about troubleshooting of course)




--
李柯睿
Avt tace, avt loqvere meliora silentio
Check my PGP key here: http://www.asgaard.org/cdl/cdl.asc
Current vCard here: http://www.asgaard.org/cdl/cdl.vcf
keybase: https://keybase.io/liljenstolpe







--
Brandon Ross  Yahoo  AIM:  BrandonNRoss
+1-404-635-6667ICQ:  2269442
 Skype:  brandonross
Schedule a meeting:  http://www.doodle.com/bross


Re: eBay is looking for network heavies...

2015-06-06 Thread shawn wilson
My first thought on reading that was who the hell cares if a person
knows about internet culture. But than I had to reconsider - it's a
very apt way of telling if someone read the right books :)

I would also add Ritchie, Thompson, and Diffie to that list (since you
ask about Larry, it's only appropriate).

On Sat, Jun 6, 2015 at 6:32 AM, jim deleskie deles...@gmail.com wrote:
 I remember you asking me who Jon was :)  I have since added to my list of
 interview questions... sad but the number of people with clue is declining
 not increasing.


 On Sat, Jun 6, 2015 at 3:13 AM, Joe Hamelin j...@nethead.com wrote:

 Back in 2000 at Amazon, HR somehow decided to have me do the phone
 interviews for neteng.  I'd go through questions on routing and what not,
 then at the end I would ask questions like, Who was Jon Postel?  Who is
 Larry Wall?  Who is Paul Vixie? What are layers 8  9? Explain the RTFM
 protocol.  What is NANOG?  Those answers (or long silences) told me more
 about the candidate than most of the technical questions.

 --
 Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474



Re: eBay is looking for network heavies...

2015-06-06 Thread jim deleskie
I remember you asking me who Jon was :)  I have since added to my list of
interview questions... sad but the number of people with clue is declining
not increasing.


On Sat, Jun 6, 2015 at 3:13 AM, Joe Hamelin j...@nethead.com wrote:

 Back in 2000 at Amazon, HR somehow decided to have me do the phone
 interviews for neteng.  I'd go through questions on routing and what not,
 then at the end I would ask questions like, Who was Jon Postel?  Who is
 Larry Wall?  Who is Paul Vixie? What are layers 8  9? Explain the RTFM
 protocol.  What is NANOG?  Those answers (or long silences) told me more
 about the candidate than most of the technical questions.

 --
 Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474



Re: eBay is looking for network heavies...

2015-06-06 Thread tvest
You are such an optimist ;-)

Sometimes those who can remember the past get to repeat it anyway.

TV

On June 6, 2015 6:53:20 AM EDT, Dorian Kim dor...@blackrose.org wrote:
Those who cannot remember the past are condemned to repeat it”

   
 -Santayana

Quite relevant in our industry that seems be more hell bent on
rehashing ideas
and plot lines than Hollywood.

-dorian


 On Jun 6, 2015, at 6:43 AM, shawn wilson ag4ve...@gmail.com wrote:
 
 My first thought on reading that was who the hell cares if a person
 knows about internet culture. But than I had to reconsider - it's a
 very apt way of telling if someone read the right books :)
 
 I would also add Ritchie, Thompson, and Diffie to that list (since
you
 ask about Larry, it's only appropriate).
 
 On Sat, Jun 6, 2015 at 6:32 AM, jim deleskie deles...@gmail.com
wrote:
 I remember you asking me who Jon was :)  I have since added to my
list of
 interview questions... sad but the number of people with clue is
declining
 not increasing.
 
 
 On Sat, Jun 6, 2015 at 3:13 AM, Joe Hamelin j...@nethead.com wrote:
 
 Back in 2000 at Amazon, HR somehow decided to have me do the phone
 interviews for neteng.  I'd go through questions on routing and
what not,
 then at the end I would ask questions like, Who was Jon Postel? 
Who is
 Larry Wall?  Who is Paul Vixie? What are layers 8  9? Explain the
RTFM
 protocol.  What is NANOG?  Those answers (or long silences) told
me more
 about the candidate than most of the technical questions.
 
 --
 Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474
 

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.


Re: eBay is looking for network heavies...

2015-06-06 Thread shawn wilson
On Sat, Jun 6, 2015 at 8:33 AM, tvest tv...@eyeconomics.com wrote:
 You are such an optimist ;-)

 Sometimes those who can remember the past get to repeat it anyway.


I remember seeing a slide deck for devs saying all new web apps are
recreating mail, write, wall, and finger (the person posted it on FB,
so of course I can't find it for ref)


Re: eBay is looking for network heavies...

2015-06-06 Thread shawn wilson
On Sat, Jun 6, 2015 at 12:27 PM, Dave Taht dave.t...@gmail.com wrote:
 On Sat, Jun 6, 2015 at 6:53 AM, Brandon Ross br...@pobox.com wrote:
 I also concur.  There is most certainly a negative correlation between certs
 and clue in my experience, having met 10s of certificate holders.

 Oh good. Maybe my total lack of ever pursuing one of these things is actually
 a qualification of sorts?


Meh, certs can be fun. I've never taken one and not learned something.
I don't think someone should put me in charge of designing a SOC
because I have a Security+ or that BestBuy should trust people with
(or w/o) and A+ to fix computers. But I'll bet the journey people took
to get that cert taught them something. Having gained the cert, does
that mean it doesn't belong on a resume? No. If you hire someone with
just a cert to manage your network, does that put you among the
biggest dumbasses to ever hire someone? Absolutely. Further, HR who
look for certs are probably doing themselves a disservice but if it
works for them, who am I to tell them otherwise. If you want to work
for the company, get the cert or don't.


Re: eBay is looking for network heavies...

2015-06-06 Thread Dave Taht
On Sat, Jun 6, 2015 at 6:53 AM, Brandon Ross br...@pobox.com wrote:
 I also concur.  There is most certainly a negative correlation between certs
 and clue in my experience, having met 10s of certificate holders.

Oh good. Maybe my total lack of ever pursuing one of these things is actually
a qualification of sorts?

I keep searching things like dice and monster out of perverse bemusement,
trying to find anyone actually looking for my actual skillset.

-- 
Dave Täht
What will it take to vastly improve wifi for everyone?
https://plus.google.com/u/0/explore/makewififast


Re: eBay is looking for network heavies...

2015-06-06 Thread Stefan
Sort of back-tracking on the OP JD - is one to derive from the posting and
requirements for the job(s) that:

1. the need arises because of the eBay - PayPal split?
2. is PayPal leaving with the openstack [need for] expertise and associated
IaaS parts (http://www.openstack.org/user-stories/paypal/), while eBay is
keeping a more traditional infra setup?
​
Stefan

On Sat, Jun 6, 2015 at 8:53 AM, Brandon Ross br...@pobox.com wrote:

 I also concur.  There is most certainly a negative correlation between
 certs and clue in my experience, having met 10s of certificate holders.

 Long ago when the MCSE was more popular, I actually started putting MCSE
 need not apply on job postings because everyone I interviewed that had one
 was not just clue challenged, but had negative clue.


 On Fri, 5 Jun 2015, jim deleskie wrote:

  Based on the number of certified people I've interviewed over the last
 20yr, my default view lines up with Jared's 100%

 On Fri, Jun 5, 2015 at 10:38 PM, Mike Hale eyeronic.des...@gmail.com
 wrote:

  We need a pool on what percentage of readers just googled traceroute.
 On Jun 5, 2015 6:28 PM, na...@cdl.asgaard.org wrote:

  On 5 Jun 2015, at 17:45, Łukasz Bromirski wrote:

  On 06 Jun 2015, at 02:26, Jared Mauch ja...@puck.nether.net wrote:



  On Jun 5, 2015, at 7:13 PM, John Fraizer j...@op-sec.us wrote:


 Head of line for CCIE / JNCIE but knowledge and experience trumps a
 piece
 of paper every time!


 Can you please put these at the back of the line?  My experience is

 that

 the cisco certification (at least) is evidence of the absence of actual
 troubleshooting skills.  (or my standards of what defines “expert” are
 different than the rest of the world).


 Jared, don’t generalize.

 True - there are people that are ‘paper’ CCIE/JNCIEs - but let’s not
 start a rant unless you've met tens of CCIEs/JNCIEs and all of them
 didn’t know a jack. About troubleshooting.


 't

 We had one CCIE at a previous job who just didn't click no matter how
 much we tried to train on the architecture.  Eventually in one backbone
 event, he kept saying that the problem couldn't be with a given router
 because traceroute worked.  When it was pointed out that the potential
 fault wouldn't cause traceroute to fail, we got a very puzzled look.  We
 then asked him to explain how traceroute worked.  He spectacularly

 failed.


 It became a tongue-in-cheek interview question.  What was boggling was

 the

 number of *IE's that failed trying to explain traceroute's mechanics.

 My test, as crass as it is.  If your CV headlines with a JCIE/CCIE, I am
 pretty certain that you have very little real-world experience.  If it's

 a

 footnote somewhere, that's ok.

 Christopher



  —
 CCIE #15929 RS/SP, CCDE #2012::17
 (not that I’d know anything about troubleshooting of course)



 --
 李柯睿
 Avt tace, avt loqvere meliora silentio
 Check my PGP key here: http://www.asgaard.org/cdl/cdl.asc
 Current vCard here: http://www.asgaard.org/cdl/cdl.vcf
 keybase: https://keybase.io/liljenstolpe




 --
 Brandon Ross  Yahoo  AIM:
 BrandonNRoss
 +1-404-635-6667ICQ:
 2269442
  Skype:
 brandonross
 Schedule a meeting:  http://www.doodle.com/bross



Re: eBay is looking for network heavies...

2015-06-06 Thread Clayton Zekelman


Reminds me of:

http://dilbert.com/strip/2000-08-31

At 12:27 PM 06/06/2015, Dave Taht wrote:

On Sat, Jun 6, 2015 at 6:53 AM, Brandon Ross br...@pobox.com wrote:
 I also concur.  There is most certainly a 
negative correlation between certs

 and clue in my experience, having met 10s of certificate holders.

Oh good. Maybe my total lack of ever pursuing one of these things is actually
a qualification of sorts?

I keep searching things like dice and monster out of perverse bemusement,
trying to find anyone actually looking for my actual skillset.

--
Dave Täht
What will it take to vastly improve wifi for everyone?
https://plus.google.com/u/0/explore/makewififast




RE: Verizon FiOS outbound mail TLS problem - Superpages people here?

2015-06-06 Thread Ray
We had a similar issue around November last year where an upgrade on our
 PostFix MTA to a current version of OpenSSL, which has Mandatory TLS 
enabled for certain recipient domains, suddenly started generating the 
same errors with just one recipient domain.

We eventually figured
 out that the problem was they were running an outdated version of the 
AsyncOS on their Cisco IronPorts. Firmware versions prior to 8.02 had 
several problems with TLS and one of them was an inability to 
interoperate with senders who used a newer version of OpenSSL. Their 
IronPort logs in fact showed a TLS connection was established when it 
wasn't. (We had switched them to Opportunistic TLS to be able to send 
emails but their logs still showed TLS while a PCAP showed clear text 
SMTP.)

As soon as that company updated their IronPorts to a v8.5 
variant the problem went away. They would not tell us what version they 
used to run but did confirm it was prior to v8.02.

Interestingly, www.checktls.com
 said they were OK. The admins at Check TLS confirmed that, at that time
 (the end of 2014), they were running a version of OpenSSL on their 
website that was still compatible with the older AsyncOS version. 

FWIW,

Ray
 Date: Thu, 4 Jun 2015 11:46:35 -0500
 From: bl...@ispn.net
 To: nanog@nanog.org
 Subject: Re: Verizon FiOS outbound mail TLS problem - Superpages people here?
 
 I have no relation, but as a mail server operator I can say that I 
 wouldn't be surprised if this is actually a TLS version mismatch or 
 intolerance problem. I would suggest ensuring that both ends support TLS 
 1.0, 1.1, and 1.2 and use version tolerant TLS implementations. Next on 
 the short list would be not having compatible cyphers between the two 
 servers.
 
 Either way, since the error was a 403 error, the expected behavior would 
 be to queue and retry in plain text; Sounds like a broken MTA 
 implementation or misconfiguration if the sending servers do not revert 
 to plain text.
 
 --Blake
 
 Jay Ashworth wrote on 6/4/2015 11:15 AM:
  Anyone on the list who does outbound delivery for Verizon (which I think
  is actually Superpages)?  A client has smart-hosted outbounds to *one*
  of his customers bouncing suddenly with
 
 Deferred: 403 4.7.0 TLS handshake failed.
 
  *My* inclination is to think that a cert expired somewhere, but his non-tech
  contact there tells him that the tech people think things are ok.
 
  I'm trying to get a mailer log fragment from them.
 
  Cheers,
  -- jra
 
 
  

Re: Tunable SFP

2015-06-06 Thread Eric Litvin
Hi Frank - we have DWDM SFP TUNABLES - stateside. They are both tunable and 
reconfigurable. 

Eric Litvin
Luma Optics
650 996 7270

Sent from my iPhone

 On Jun 6, 2015, at 12:16 PM, Frank Bulk frnk...@iname.com wrote:
 
 Upon second look, these are reconfigurable.  Doesn't appear to be the same
 as tunable. =(
 
 Frank
 
 -Original Message-
 From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Frank Bulk
 Sent: Saturday, June 06, 2015 2:07 PM
 To: nanog@nanog.org
 Subject: RE: Tunable SFP
 
 Thanks, that's very helpful.  They have several models there:
 https://www.flexoptix.net/en/produkte/transceiver.html?fo_tra_formfactor=sfp
 #fo_tra_formfactor=sfpfo_tra_interface=05_dwdm_100ghzgan_data=true
 
 Frank
 
 -Original Message-
 Sent: Saturday, June 06, 2015 1:44 PM
 To: Frank Bulk
 Subject: Re: Tunable SFP
 
 Check out https://www.flexoptix.net/en/
 
 This topic came up last month and a lot of people recommended this 
 vendor.  Hope it helps.
 
 On 6/6/2015 10:45 AM, Frank Bulk wrote:
 Thanks -- can you point me to any suppliers?
 
 Frank
 
 -Original Message-
 From: Jared Mauch [mailto:ja...@puck.nether.net]
 Sent: Saturday, June 06, 2015 12:41 PM
 To: Frank Bulk
 Cc: nanog@nanog.org
 Subject: Re: Tunable SFP
 
 They do exist. They tend to have tighter link budgets as compared to XFP
 tunable optics. Don't expect to go as far due to the receiver sensitivity.
 
 Jared Mauch
 
 On Jun 6, 2015, at 1:29 PM, Frank Bulk frnk...@iname.com wrote:
 
 Anyone know if tunable SFPs exist?  I've googled around on this, but only
 found fixed wave-length SFPs.
 
 Or of a tunable SFP+ that can operate in SFP port as 1G?
 
 Frank
 
 
 


RE: Verizon FiOS outbound mail TLS problem - Superpages people here?

2015-06-06 Thread Ray
Oh, and the way we narrowed it down was somewhat oblique. Because their logs 
said a TLS connection was established we had a hard time convincing them it 
wasn't. They were convinced it was us who was broke.

We had to send them a PCAP and then they ran one and got the same results. We 
were communicating via their IronPort secure email system and I noticed that 
the Cisco copyright notice on their messages was from 2012. That put me on the 
path to look at the Cisco release notes. Once I pointed out that they seemed to 
be a bit behind and there were fixes in later versions, the conversation went 
in a different direction. :-)
 From: sixsigm...@hotmail.com
 To: bl...@ispn.net; nanog@nanog.org
 Subject: RE: Verizon FiOS outbound mail TLS problem - Superpages people here?
 Date: Sat, 6 Jun 2015 19:13:38 -0400
 
 We had a similar issue around November last year where an upgrade on our
  PostFix MTA to a current version of OpenSSL, which has Mandatory TLS 
 enabled for certain recipient domains, suddenly started generating the 
 same errors with just one recipient domain.
 
 We eventually figured
  out that the problem was they were running an outdated version of the 
 AsyncOS on their Cisco IronPorts. Firmware versions prior to 8.02 had 
 several problems with TLS and one of them was an inability to 
 interoperate with senders who used a newer version of OpenSSL. Their 
 IronPort logs in fact showed a TLS connection was established when it 
 wasn't. (We had switched them to Opportunistic TLS to be able to send 
 emails but their logs still showed TLS while a PCAP showed clear text 
 SMTP.)
 
 As soon as that company updated their IronPorts to a v8.5 
 variant the problem went away. They would not tell us what version they 
 used to run but did confirm it was prior to v8.02.
 
 Interestingly, www.checktls.com
  said they were OK. The admins at Check TLS confirmed that, at that time
  (the end of 2014), they were running a version of OpenSSL on their 
 website that was still compatible with the older AsyncOS version. 
 
 FWIW,
 
 Ray
  Date: Thu, 4 Jun 2015 11:46:35 -0500
  From: bl...@ispn.net
  To: nanog@nanog.org
  Subject: Re: Verizon FiOS outbound mail TLS problem - Superpages people 
  here?
  
  I have no relation, but as a mail server operator I can say that I 
  wouldn't be surprised if this is actually a TLS version mismatch or 
  intolerance problem. I would suggest ensuring that both ends support TLS 
  1.0, 1.1, and 1.2 and use version tolerant TLS implementations. Next on 
  the short list would be not having compatible cyphers between the two 
  servers.
  
  Either way, since the error was a 403 error, the expected behavior would 
  be to queue and retry in plain text; Sounds like a broken MTA 
  implementation or misconfiguration if the sending servers do not revert 
  to plain text.
  
  --Blake
  
  Jay Ashworth wrote on 6/4/2015 11:15 AM:
   Anyone on the list who does outbound delivery for Verizon (which I think
   is actually Superpages)?  A client has smart-hosted outbounds to *one*
   of his customers bouncing suddenly with
  
  Deferred: 403 4.7.0 TLS handshake failed.
  
   *My* inclination is to think that a cert expired somewhere, but his 
   non-tech
   contact there tells him that the tech people think things are ok.
  
   I'm trying to get a mailer log fragment from them.
  
   Cheers,
   -- jra
  
  
 
  

Digitalocean and recent issues

2015-06-06 Thread Randy
Hello. I work with digitalocean droplets or virtual machines for my 
home business. While great for running cheap websites and server 
applications, I have noticed recently that I keep getting issues with my 
other VPN droplet I setup.
Firstly, I kept getting blocked by google, it claims automated queries. 
I don't browse google too often..

Also had an issue with outbound mail on another droplet.
Now I'm blocked by... Pizzahut.com
Can't order a pizza over my VPN.

One might think that there is some virus, but I assure you, there is 
not, Ive ran tcpdum captures and realtime captures for wireshark, I 
don't notice any other traffic other then the traffic I initiate by 
browsing, or doing a few search terms.

And I've always paid for my pizza order!

Is any one else experiencing issues like this? is there something I'm 
missing, I have no idea but the pizzahut thing has got me very irked.




Re: stacking pdu

2015-06-06 Thread Meagan

Server tech makes some devices that are powered independently but can be 
managed as a single unit.  We have 2pdus per cabinet on separate circuits, 
which share a management controller and can provide stats for both circuits.


 On Jun 5, 2015, at 12:51 AM, shawn wilson ag4ve...@gmail.com wrote:
 
 Well, I was kinda thinking this would turn out to be a dumb question / have
 an obvious answer. Apparently not. But it seems I can't go buy a solution
 either. I guess there isn't much of a market (though I am just talking
 software - maybe someone could make an update :) ).
 
 !DSPAM:55712b43141331257586274!
 


Issue with cache @ 198.6.100.25 (UUNET)

2015-06-06 Thread Phil Daws
Hello:

Hopefully somebody may be able to help us ? Our domain appears to be having 
issue at 198.6.100.25 and showing the following:

innovot.com.120 IN  MX  10 domain.not.configured.

Yet when I dig @8.8.8.8 or @8.8.4.4 all works absolutely fine.  Our secondaries 
are all with DNS Made Easy and we did switch from GoDaddy to FastHosts as the 
registrar.  Would somebody be able to flush the cache on the domain please ?

Thank you in advance.
-- 
Phil Daws 

(null)


Re: eBay is looking for network heavies...

2015-06-06 Thread John Fraizer
Just to be clear, CERTS are NOT a requirement for these positions. They
will head-of-line someone for a phone screen. THAT IS ALL!  And if you've
got a cert, you had better know your stuff because if your cert says you're
an EXPERT.  I'm gonna expect you to be one!

John Fraizer
--Sent from my Android phone.
Please excuse any typos.
On Jun 6, 2015 5:50 PM, Randy randy_94...@yahoo.com wrote:

 $employers don't help in this regard either by requiring said certs. Such
 requirements; IMO, lead to folks preparing/passing such tests just for
 $day_job only without any real desire to understand how
 things-actually-workwhy.



 - Original Message -
 From: John Fraizer j...@op-sec.us
 To: Łukasz Bromirski luk...@bromirski.net
 Cc: nanog@nanog.org
 Sent: Friday, June 5, 2015 5:55 PM
 Subject: Re: eBay is looking for network heavies...

 Folks,

 It's just a piece of paper in my opinion.  A person either knows their
 stuff or they don't.  Less than 5min on a phone screen and I will know if
 they bought their certification(s) or earned them.  Sadly, I've spoken to
 far too many who give some validation to Jared's comment. I'm wondering how
 many proctors have been paid off or if people are buying fake id's for
 smart people and paying them to sit for the tests posing as them.

 John Fraizer
 --Sent from my Android phone.
 Please excuse any typos.
 On Jun 5, 2015 5:45 PM, Łukasz Bromirski luk...@bromirski.net wrote:

 
   On 06 Jun 2015, at 02:26, Jared Mauch ja...@puck.nether.net wrote:
  
  
   On Jun 5, 2015, at 7:13 PM, John Fraizer j...@op-sec.us wrote:
  
   Head of line for CCIE / JNCIE but knowledge and experience trumps a
  piece
   of paper every time!
  
   Can you please put these at the back of the line?  My experience is
 that
   the cisco certification (at least) is evidence of the absence of actual
   troubleshooting skills.  (or my standards of what defines “expert” are
   different than the rest of the world).
 
  Jared, don’t generalize.
 
  True - there are people that are ‘paper’ CCIE/JNCIEs - but let’s not
  start a rant unless you've met tens of CCIEs/JNCIEs and all of them
  didn’t know a jack. About troubleshooting.
 
  —
  CCIE #15929 RS/SP, CCDE #2012::17
  (not that I’d know anything about troubleshooting of course)



Re: eBay is looking for network heavies...

2015-06-06 Thread Larry Sheldon

On 6/5/2015 23:35, Faisal Imtiaz wrote:

'pathping' . learned something new today... Did not know such a
command existed in windows..

Been working with computers for over 30 years, while I don't care as
to what it says about how much I know, but it sure reminds me that
that their is always something more that one can learn !


Thank You.

:)


+1

Amazing.


--
sed quis custodiet ipsos custodes? (Juvenal)


Re: eBay is looking for network heavies...

2015-06-06 Thread Larry Sheldon

On 6/6/2015 05:43, shawn wilson wrote:

My first thought on reading that was who the hell cares if a person
knows about internet culture. But than I had to reconsider - it's a
very apt way of telling if someone read the right books :)

I would also add Ritchie, Thompson, and Diffie to that list (since you
ask about Larry, it's only appropriate).


I find it interesting that I have not note a mention of people like 
Radia Pearlman and [name advancing years have stolen from me] that wrote 
a 3 volume set (I think it was) (that I can not find in the 
post-great-downsizing-bookshelves-disarray at the moment*).


*did a little Binging--Not W. Richard Stevens although the subconscious 
thinks steven might have been the first name.


NO!  Douglas E. Comer Internetworking with TCP/IP
(Nice try subconscious!  Volume 3 is co-authored by David L. Stevens.)
--
sed quis custodiet ipsos custodes? (Juvenal)


Re: eBay is looking for network heavies...

2015-06-06 Thread Stephen Satchell

On 06/06/2015 07:17 PM, John Fraizer wrote:

And if you've
got a cert, you had better know your stuff because if your cert says you're
an EXPERT.  I'm gonna expect you to be one!


X -- math quantity denoting the unknown
SPURT -- drip of water under pressure

X-SPURT -- unknown drip under pressure


RE: eBay is looking for network heavies...

2015-06-06 Thread F.L. Whiteley
Kind of a cack-handed way of doing MTR, but surprising to find that it's been 
around since NT.  New option for some of the troubleshooting from client boxen. 
 Guess you had to buy into some of that MS certification stuff.  Gee, I'll have 
to ask Davis and Brian if it was in one of their Windows Secrets books;^)

Frank Whiteley

-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Larry Sheldon
Sent: Saturday, June 06, 2015 8:25 PM
To: nanog@nanog.org
Subject: Re: eBay is looking for network heavies...

On 6/5/2015 23:35, Faisal Imtiaz wrote:
 'pathping' . learned something new today... Did not know such a 
 command existed in windows..

 Been working with computers for over 30 years, while I don't care as 
 to what it says about how much I know, but it sure reminds me that 
 that their is always something more that one can learn !


 Thank You.

 :)

+1

Amazing.


--
sed quis custodiet ipsos custodes? (Juvenal)



Re: Digitalocean and recent issues

2015-06-06 Thread Anil Kumar

 On Jun 7, 2015, at 7:31 AM, Randy na...@afxr.net wrote:
 
 Firstly, I kept getting blocked by google, it claims automated queries. I 
 don't browse google too often..
 Also had an issue with outbound mail on another droplet.
 Now I'm blocked by... Pizzahut.com
 
 Is any one else experiencing issues like this? is there something I'm missing.
 

There is probably a lot of abuse of IP addresses at Digital Ocean, $5 per month 
and an API is a magnet for that to happen.

I also see droplets rebooting due to an issue on the underlying physical node 
where the Droplet runs”. This happened a few times each on 3 different droplets 
during the last 45 days (all at NY DC).

AK



Re: Issue with cache @ 198.6.100.25 (UUNET)

2015-06-06 Thread Christopher Morrow
;; QUESTION SECTION:
;innovot.com.   IN  MX

;; ANSWER SECTION:
innovot.com.85061   IN  MX  10 zmx01.gos.innovot.com.
innovot.com.85061   IN  MX  20 zmx01.mah.innovot.com.

;; Query time: 47 msec
;; SERVER: 198.6.100.25#53(198.6.100.25)

seems fixed now though.

On Sat, Jun 6, 2015 at 9:41 AM, Phil Daws phil.d...@innovot.com wrote:
 Hello:

 Hopefully somebody may be able to help us ? Our domain appears to be having 
 issue at 198.6.100.25 and showing the following:

 innovot.com.120 IN  MX  10 domain.not.configured.

 Yet when I dig @8.8.8.8 or @8.8.4.4 all works absolutely fine.  Our 
 secondaries are all with DNS Made Easy and we did switch from GoDaddy to 
 FastHosts as the registrar.  Would somebody be able to flush the cache on the 
 domain please ?

 Thank you in advance.
 --
 Phil Daws

 (null)


Tunable SFP

2015-06-06 Thread Frank Bulk
Anyone know if tunable SFPs exist?  I've googled around on this, but only
found fixed wave-length SFPs.

Or of a tunable SFP+ that can operate in SFP port as 1G?

Frank



Re: hiring net engs (was: eBay rudely recruiting on list)

2015-06-06 Thread Randy Bush
nanog as dinosaur food


RE: Tunable SFP

2015-06-06 Thread Frank Bulk
Thanks -- can you point me to any suppliers?

Frank

-Original Message-
From: Jared Mauch [mailto:ja...@puck.nether.net] 
Sent: Saturday, June 06, 2015 12:41 PM
To: Frank Bulk
Cc: nanog@nanog.org
Subject: Re: Tunable SFP

They do exist. They tend to have tighter link budgets as compared to XFP
tunable optics. Don't expect to go as far due to the receiver sensitivity. 

Jared Mauch

 On Jun 6, 2015, at 1:29 PM, Frank Bulk frnk...@iname.com wrote:
 
 Anyone know if tunable SFPs exist?  I've googled around on this, but only
 found fixed wave-length SFPs.
 
 Or of a tunable SFP+ that can operate in SFP port as 1G?
 
 Frank




Re: Tunable SFP

2015-06-06 Thread Jared Mauch
https://www.finisar.com/optical-transceivers/ftlx6872mcc

Finisar is now selling direct now. Let me know in private if you need a sales 
contact there. 

Jared Mauch

 On Jun 6, 2015, at 1:45 PM, Frank Bulk frnk...@iname.com wrote:
 
 Thanks -- can you point me to any suppliers?
 
 Frank
 
 -Original Message-
 From: Jared Mauch [mailto:ja...@puck.nether.net] 
 Sent: Saturday, June 06, 2015 12:41 PM
 To: Frank Bulk
 Cc: nanog@nanog.org
 Subject: Re: Tunable SFP
 
 They do exist. They tend to have tighter link budgets as compared to XFP
 tunable optics. Don't expect to go as far due to the receiver sensitivity. 
 
 Jared Mauch
 
 On Jun 6, 2015, at 1:29 PM, Frank Bulk frnk...@iname.com wrote:
 
 Anyone know if tunable SFPs exist?  I've googled around on this, but only
 found fixed wave-length SFPs.
 
 Or of a tunable SFP+ that can operate in SFP port as 1G?
 
 Frank
 


RE: Tunable SFP

2015-06-06 Thread Frank Bulk
Thanks, that's very helpful.  They have several models there:
https://www.flexoptix.net/en/produkte/transceiver.html?fo_tra_formfactor=sfp
#fo_tra_formfactor=sfpfo_tra_interface=05_dwdm_100ghzgan_data=true

Frank   

-Original Message-
Sent: Saturday, June 06, 2015 1:44 PM
To: Frank Bulk
Subject: Re: Tunable SFP

Check out https://www.flexoptix.net/en/

This topic came up last month and a lot of people recommended this 
vendor.  Hope it helps.

On 6/6/2015 10:45 AM, Frank Bulk wrote:
 Thanks -- can you point me to any suppliers?

 Frank

 -Original Message-
 From: Jared Mauch [mailto:ja...@puck.nether.net]
 Sent: Saturday, June 06, 2015 12:41 PM
 To: Frank Bulk
 Cc: nanog@nanog.org
 Subject: Re: Tunable SFP

 They do exist. They tend to have tighter link budgets as compared to XFP
 tunable optics. Don't expect to go as far due to the receiver sensitivity.

 Jared Mauch

 On Jun 6, 2015, at 1:29 PM, Frank Bulk frnk...@iname.com wrote:

 Anyone know if tunable SFPs exist?  I've googled around on this, but only
 found fixed wave-length SFPs.

 Or of a tunable SFP+ that can operate in SFP port as 1G?

 Frank





RE: Tunable SFP

2015-06-06 Thread Frank Bulk
Upon second look, these are reconfigurable.  Doesn't appear to be the same
as tunable. =(

Frank

-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Frank Bulk
Sent: Saturday, June 06, 2015 2:07 PM
To: nanog@nanog.org
Subject: RE: Tunable SFP

Thanks, that's very helpful.  They have several models there:
https://www.flexoptix.net/en/produkte/transceiver.html?fo_tra_formfactor=sfp
#fo_tra_formfactor=sfpfo_tra_interface=05_dwdm_100ghzgan_data=true

Frank   

-Original Message-
Sent: Saturday, June 06, 2015 1:44 PM
To: Frank Bulk
Subject: Re: Tunable SFP

Check out https://www.flexoptix.net/en/

This topic came up last month and a lot of people recommended this 
vendor.  Hope it helps.

On 6/6/2015 10:45 AM, Frank Bulk wrote:
 Thanks -- can you point me to any suppliers?

 Frank

 -Original Message-
 From: Jared Mauch [mailto:ja...@puck.nether.net]
 Sent: Saturday, June 06, 2015 12:41 PM
 To: Frank Bulk
 Cc: nanog@nanog.org
 Subject: Re: Tunable SFP

 They do exist. They tend to have tighter link budgets as compared to XFP
 tunable optics. Don't expect to go as far due to the receiver sensitivity.

 Jared Mauch

 On Jun 6, 2015, at 1:29 PM, Frank Bulk frnk...@iname.com wrote:

 Anyone know if tunable SFPs exist?  I've googled around on this, but only
 found fixed wave-length SFPs.

 Or of a tunable SFP+ that can operate in SFP port as 1G?

 Frank







Re: Access to nanog.cluepon.net

2015-06-06 Thread Josh Luthman
Hasn't been working for about 20 minutes or more for me as well.


Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Sat, Jun 6, 2015 at 1:27 PM, Frank Bulk frnk...@iname.com wrote:

 I'd like to update some material on nanog.cluepon.net (not very responsive
 to HTTP requests right now) and my account doesn't work anymore.  I reached
 out to Richard S. but have not heard back from him - anyone else here who
 has admin access and can set me up again?

 Frank




Riot Games

2015-06-06 Thread Alistair Mackenzie
Hi,

Is there anyone on this list from Riot Games that can reach out to me?

I'm having some issues with customers reaching your network.

Thanks,
Alistair


Re: hiring net engs

2015-06-06 Thread Michael Thomas



On 6/6/15 10:34 AM, Randy Bush wrote:

nanog as dinosaur food

Don't you mean nanog as dinosaur water cooler?

Mike


Access to nanog.cluepon.net

2015-06-06 Thread Frank Bulk
I'd like to update some material on nanog.cluepon.net (not very responsive
to HTTP requests right now) and my account doesn't work anymore.  I reached
out to Richard S. but have not heard back from him - anyone else here who
has admin access and can set me up again?

Frank



Re: Tunable SFP

2015-06-06 Thread Jared Mauch
They do exist. They tend to have tighter link budgets as compared to XFP 
tunable optics. Don't expect to go as far due to the receiver sensitivity. 

Jared Mauch

 On Jun 6, 2015, at 1:29 PM, Frank Bulk frnk...@iname.com wrote:
 
 Anyone know if tunable SFPs exist?  I've googled around on this, but only
 found fixed wave-length SFPs.
 
 Or of a tunable SFP+ that can operate in SFP port as 1G?
 
 Frank


Re: Riot Games

2015-06-06 Thread Trent Farrell
Hi Alistair (and anyone else interested), the best place to reach our team
is via peer...@riotgames.com.

Thanks!

On Sat, Jun 6, 2015 at 10:35 AM, Alistair Mackenzie magics...@gmail.com
wrote:

 Hi,

 Is there anyone on this list from Riot Games that can reach out to me?

 I'm having some issues with customers reaching your network.

 Thanks,
 Alistair




-- 

*Trent Farrell*

*Riot Games*

*IP Network Engineer*

E: tfarr...@riotgames.com | IE:  +353 83 446 6809 | US: +1 424 285 9825

Summoner name: Foro


Re: hiring net engs (was: eBay rudely recruiting on list)

2015-06-06 Thread manning
On 6June2015Saturday, at 10:34, Randy Bush ra...@psg.com wrote:

 nanog as dinosaur food


(not top-posting for your reading pleasure)

Why do you love Marshal Rose?
Why do you hate Jeff Case?
Why would you buy Paul Traina a drink?
Does Paul Francis deserve sainthood?

 (must add this to the Cult of Personality quiz)