Re: Interesting new dns failures

2007-05-25 Thread Per Heldal
On Thu, 2007-05-24 at 17:46 +, Chris L. Morrow wrote: > which brings us back to my original comment: "we need a policy most likely > from ICANN that requires some action based on proper documentation and > evidence or wrong-doing/malfeasance. That policy needs to dictate some > monetary penalt

Re: Slate Podcast on Estonian DOS atatck

2007-05-25 Thread Per Heldal
On Thu, 2007-05-24 at 10:06 -0700, Merike Kaeo wrote: > First of it's kind that it targeted a country. Countries and govt infrastructure has been under attack before. As an example; The various parties in the Balkan conflict (former Yugoslavia) were fighting their "cyber-wars" back in the 90s. At

Re: Interesting new dns failures

2007-05-24 Thread Per Heldal
On Thu, 2007-05-24 at 12:43 +0530, Suresh Ramasubramanian wrote: > Well then - all you need is to have some way to convince registrars > take down scammer domains fast. It should be the registries responsibility to keep their registrars in line. If they fail to do so their delegation should be tr

Re: motivating security, was Re: Every incident...

2007-02-12 Thread Per Heldal
On Mon, 2007-02-12 at 09:06 -0500, Edward Lewis wrote: > I've worked in security for some time, not that it makes me an expert > but I have seen how it is promoted/advertised. > > On Feb/12/07, someone wrote: > > >Consumers are cheap and lazy. > > I think that is the wrong place to start. It

Re: Every incident is an opportunity (was Re: Hackers hit key Internet traffic computers)

2007-02-12 Thread Per Heldal
s. Maybe the market also finally would challenge the validity (or even existence) of std.disclaimer statements common in today's software licences. -- Per Heldal - http://heldal.eml.cc/

Re: register.com down sev0?

2006-10-26 Thread Per Heldal
s, class-action lawsuits, and maybe finally turn the attention to the real source of the problem; software vendors whose products are of such a dismal quality that they'd be banned worldwide from just about any market other than that for computer software. -- Per Heldal - http://heldal.eml.cc/

Re: BCP38 thread 93,871,738,435 (was Re: register.com down sev0?)

2006-10-26 Thread Per Heldal
out the existence and consequences of such restrictions, but that shouldn't be much of a problem either. I'd be more than happy to tell anyone who object to BCP38 to look elsewhere for network connectivity. -- Per Heldal - http://heldal.eml.cc/

Re: Consumers of Broadband Providers (ISP) may be open to hijack attacks (fwd)

2006-07-19 Thread Per Heldal
etworks: - permit users to choose their own address? - immediately reuse an address for an other user (unless the pool is exhausted)? //Per -- Per Heldal http://heldal.eml.cc/

Re: Multihomed to 2 ISPs - Load Balance?

2006-06-26 Thread Per Heldal
#x27;s network. Those who want to the ability control path-selection globally should participate in IETF workshops to get such functionality included in future network-architectures ;) //per -- Per Heldal http://heldal.eml.cc/

Re: 2005-1, good or bad? [Was: Re: Shim6 vs PI addressing]

2006-03-07 Thread Per Heldal
laiming it to be either is probably wrong. > I stand corrected. Was commenting from a flawed perspective. The most correct is probably to consider it a sub-layer to the existing L3. //per -- Per Heldal http://heldal.eml.cc/

Re: 2005-1, good or bad? [Was: Re: Shim6 vs PI addressing]

2006-03-06 Thread Per Heldal
ling the transport and session layers if anyone ask me (not that the old iso-model is all that relevant anymore imho). //per -- Per Heldal http://heldal.eml.cc/

Re: shim6 @ NANOG

2006-03-06 Thread Per Heldal
/id-split is implemented? If so, why bother with operational policies and deployment beyond what is of experimental nature necessary to facilitate further development? //per -- Per Heldal http://heldal.eml.cc/

Re: shim6 @ NANOG (forwarded note from John Payne)

2006-03-06 Thread Per Heldal
n motivation. Is the primary goal to solve a problem or to make a standard? Remember, quite a few important technologies were implemented, tested and even in production-use for a long time before standardisation (e.g. ssh). //per -- Per Heldal http://heldal.eml.cc/

Re: shim6 rides again (Re: protocols that don't meet the need...)

2006-02-15 Thread Per Heldal
neering. I'd say it's good for engineering-staff to do ops-work from time to time (eat their own dog food;). Organisations that practise job-rotation generally have the better solutions. //per -- Per Heldal http://heldal.eml.cc/

Re: protocols that don't meet the need...

2006-02-15 Thread Per Heldal
ould decide on new policies and decide to re-claim the entire block on e.g. a 24-month notice. ... just my $.02 compromise ;) //per -- Per Heldal http://heldal.eml.cc/

Re: protocols that don't meet the need...

2006-02-15 Thread Per Heldal
with LIRs making their own policies (fragmentation) and people telling lies to qualify as a LIR to obtain independent blocks (unless there's a way to delay v6 deployment until there is technology available to back the current policy). //per -- Per Heldal http://heldal.eml.cc/

Re: protocols that don't meet the need...

2006-02-14 Thread Per Heldal
s to convince their L8+ that their company never will rule the world alone, and that it may be wise to let their engineers cooperate with competitors on the some of the big issues. //per -- Per Heldal http://heldal.eml.cc/

Re: Yahoo, Google, Microsoft contact?

2006-02-03 Thread Per Heldal
where there are personal relations between people in 2 companies. //per -- Per Heldal http://heldal.eml.cc/

Re: Yahoo, Google, Microsoft contact?

2006-02-03 Thread Per Heldal
elsewhere in the thread; the responsible thing to do is to scale operations properly. You have to find other ways to deal with people's stipidity than to ignore them completely. //per -- Per Heldal http://heldal.eml.cc/

Re: Yahoo, Google, Microsoft contact?

2006-02-03 Thread Per Heldal
t, no exceptions! //per -- Per Heldal http://heldal.eml.cc/

Re: is this like a peering war somehow?

2006-01-20 Thread Per Heldal
etwork is just fine. It's down-prioritizing competing services that may become a problem. Like blocking all VoIP traffic not using the providers' own "gateway-service". //per -- Per Heldal http://heldal.eml.cc/

Re: is this like a peering war somehow?

2006-01-20 Thread Per Heldal
he public domain. The European telecoms industry is openly urging the UN to take control of ICANN's role. In the process they are trying to place the functions of IANA and IETF in their belowed ITU. Their ultimate goal is to eliminate IP as a product, to be able to sell access to sub-protocols as individual services. //per -- Per Heldal http://heldal.eml.cc/

Re: GoDaddy.com shuts down entire data center?

2006-01-18 Thread Per Heldal
toss any idea of anonymity for internet users. Wonder if that is what those who complain about restricive AUPs really want ;) Besides, whose authorities should do excactly what? Global legislation for the internet is just about as big an illusion as the "new economy" the internet once was

Re: Compromised machines liable for damage?

2005-12-28 Thread Per Heldal
such products are parasites which represent no customer value. Why have the monopolies we normally despise become the norm in the software industry? Or rather, why did we let them dictate a legislation that give them legroom for such behaviour. //per -- Per Heldal [EMAIL PROTECTED]

Re: Deploying IPv6 in a datacenter (Was: Awful quiet?)

2005-12-21 Thread Per Heldal
got and make the most of it. Where would we be today if early IPv4 implementations had been halted because there was no DNS, no IGP and no EGP? There was even an internet before we got CIDR ;-) //per -- Per Heldal [EMAIL PROTECTED]

Re: Two Tiered Internet

2005-12-14 Thread Per Heldal
ic on their link, provided that your access-equipment is able to handle queueing etc (given fool-proof mechanisms that enable self-service and keep your NOC out of the loop of course;). //per -- Per Heldal [EMAIL PROTECTED]

Re: Two Tiered Internet

2005-12-14 Thread Per Heldal
sucks? > All providers in your market would have to agree to do the same thing. Capped services only work for monopoly providers. //per -- Per Heldal [EMAIL PROTECTED]

Re: Two Tiered Internet

2005-12-14 Thread Per Heldal
nal advantage in large IP backbones. Bandwith in the form of long-haul dark-fiber or colors would have to be much more expensive to change that equation. //per -- Per Heldal [EMAIL PROTECTED]

Re: Recording the return path (was Re: Clueless anti-virus products/vendors)

2005-12-12 Thread Per Heldal
sense to send notification in any form other than a "5xx stuff your malware..." response. Any MTA-admin with half a clue seeing lots of such in the logs for outbound messages should know what to do. //per -- Per Heldal [EMAIL PROTECTED]

Re: Recording the return path (was Re: Clueless anti-virus products/vendors)

2005-12-12 Thread Per Heldal
you can collect from the SMTP-session or elsewhere can ever compete with the accuracy in notification gained if you reject the message in-line and leave the responsibility for sender-notification with the sending MTA. //per -- Per Heldal [EMAIL PROTECTED]

Re: classful routes redux

2005-11-08 Thread Per Heldal
On Tue, 2005-11-08 at 14:48 +, [EMAIL PROTECTED] wrote: > > With no shortage of resources (in this case AS-numbers and IP-addresses) > > we wouldn't have this discussion. Then nobody would care how an > > organisation is using the resources that are allocated to them. > > Thankfully there is

Re: classful routes redux

2005-11-08 Thread Per Heldal
On Tue, 2005-11-08 at 10:46 +, [EMAIL PROTECTED] wrote: > > >This is NOT true. Many ASes explicitly do *NOT* > > >want to send traffic to any other AS. They only want > > >to send traffic to customers, vendors or business > > >partners of some sort. > > > The point I was trying to make is: A

Re: Scalability issues in the Internet routing system

2005-10-19 Thread Per Heldal
On Wed, 2005-10-19 at 09:31 +0200, Elmar K. Bins wrote: > Susasn, > > > Using the compression ("cooking") per router can provide one level of > > abstraction [reduction of prefix space] at router. So cooking down your > > Large number of routes to a "minimum" set of routes can provide some > > l

Re: And Now for Something Completely Different (was Re: IPv6 news)

2005-10-19 Thread Per Heldal
On Tue, 2005-10-18 at 15:52 -0700, David Conrad wrote: > Hmm. Are the aliens who took the _real_ IETF and replaced it with > what's there now going to give it back? :-) > Sure they'll hand it back ... when there is no more money to be made from IETF-related technology and politicians no lon

Re: And Now for Something Completely Different (was Re: IPv6 news)

2005-10-17 Thread Per Heldal
It doesn't look like were talking about the same thing. A. Address conservation and aggregation (IPv4 and IPv6) is very important to get the most out of what we've got. Read; limit the combined routing-table to a manageable size whatever that may be. B. There seems to be widespread fear that the

Re: And Now for Something Completely Different (was Re: IPv6 news)

2005-10-17 Thread Per Heldal
mon, 17,.10.2005 kl. 11.29 -0700, Fred Baker: > OK. What you just described is akin to an enterprise network with a > default route. It's also akin to the way DNS works. No default, just one or more *potential* routes. Your input is appreciated, and yes I'm very much aware that many people who

Re: And Now for Something Completely Different (was Re: IPv6 news)

2005-10-17 Thread Per Heldal
man, 17,.10.2005 kl. 19.16 +0200, skrev Peter Dambier: > That reminds me of anycasting or routing issues. > > Hackers did use this technique to make use of ip addresses not > really allocated. There would be no need for IPv6 if this was > more widespread. > > How about claiming to be f.root-serv

Re: And Now for Something Completely Different (was Re: IPv6 news)

2005-10-17 Thread Per Heldal
man, 17,.10.2005 kl. 15.47 +, skrev Mikael Abrahamsson: > On Mon, 17 Oct 2005, Per Heldal wrote: > > > Well, let's try to turn the problem on its head and see if thats > > clearer; Imagine an internet where only your closest neighbors know you > > exist. T

Re: And Now for Something Completely Different (was Re: IPv6 news)

2005-10-17 Thread Per Heldal
man, 17,.10.2005 kl. 07.25 -0700, skrev Fred Baker: > is that anything like using, in Cisco terms, a "fast-switching cache" > vs a "FIB"? I'll bite as I wrote the paragraph you're quoting; Actually, hanging on to the old concepts may be more confusing than trying to look at it in completely n

Re: IPv6 news

2005-10-17 Thread Per Heldal
man, 17,.10.2005 kl. 14.22 +0200, skrev Jeroen Massar: > On Tue, 2005-10-18 at 01:07 +1300, Simon Lyall wrote: > > > My son tells me that is what I want so I setup a payment of $5 per month > > to him. In 10 minutes from start to finish my house's /54 is "multi-homed", > > whatever that means. >

Re: And Now for Something Completely Different (was Re: IPv6 news)

2005-10-17 Thread Per Heldal
man, 17,.10.2005 kl. 12.55 +, skrev Mikael Abrahamsson: [snip] > > MPLS on its own won't solve anything. Although MPLS has its uses, > > it smells too much like another desperate attempt from the telco-heads > > in the ITU crowd to make a packet-switched network look and behave like > > a circ

Re: And Now for Something Completely Different (was Re: IPv6 news)

2005-10-17 Thread Per Heldal
man, 17,.10.2005 kl. 07.17 +0200, skrev Mikael Abrahamsson: > Both MPLS and any tunneled VPN over IP means the core won't have to know > about all those prefixes (think aggregation of addresses regionally in the > IP case and outer label in the MPLS case). Hope you don't imply NAT and private a

Re: Choosing new transit: software help?

2005-10-14 Thread Per Heldal
fre, 14,.10.2005 kl. 10.03 -0500, skrev John Dupuy: > We are looking at getting an additional transit connection. > > In the past, we have used fixedorbit.com and the like and "guesstimated" > our best transit choices. (Other factors came into play as well, of course, > such as price...) > > A