Re: default routes question or any way to do the rebundant

2008-03-21 Thread Scott McGrath
I'll take that bet Valdis [EMAIL PROTECTED] wrote: On Fri, 21 Mar 2008 16:44:39 EDT, Martin Hannigan said: I dont think that there's any issue at all to be honest. NANOG isn't just for the clued. And more to the point - if somebody manages to go through all the hoops needed to a

Re: default routes question or any way to do the rebundant

2008-03-21 Thread Scott McGrath
If we do not help the newbies how will they ever become clued. I can certainly remember when I did not know a bit from a byte. Oh and btw I'll take 5 of those STM64's on special... Regards all - Scott Martin Hannigan wrote: On Fri, Mar 21, 2008 at 4:29 PM, Barry Shein <[EMAIL PROTECTED]>

Re: EU Official: IP Is Personal

2008-01-24 Thread Scott McGrath
We have a similar system based around Cisco's CNR which is a popular DHCP/DNS system used by large ISP's and other large organization and it is the IP+Timestamp coupled with the owner to MAC relationship which allows unique identification of a user and we have strict data retention policies

Re: An Attempt at Economically Rational Pricing: Time Warner Trial

2008-01-22 Thread Scott McGrath
Consumers have been conditioned through advertising that 'bigger is better' so bigger numbers imply a better service in their minds. Look at the current flat panel TV size madness there is a formula for calculating the size of a display based on distance to the viewer I live in a older house

Re: An Attempt at Economically Rational Pricing: Time Warner Trial

2008-01-21 Thread Scott McGrath
I think a rate limited plan would appeal to most customers as it would give them a fixed monthly budget item. But I am pretty sure this will not happen in the US based on experiences with the broadband by cell providers who prefer a 'bill-by-byte' method with no mechanism to stop loss in th

Re: An Attempt at Economically Rational Pricing: Time Warner Trial

2008-01-19 Thread Scott McGrath
27;always on' access are a pipe dream as my service is 'on most of the time'. Roderick Beck wrote: Universities don't face a profit calculus. And universities are also instituting rationing as well. -R. Sent wirelessly via BlackBerry from T-Mobile. -Original Message---

Re: An Attempt at Economically Rational Pricing: Time Warner Trial

2008-01-18 Thread Scott McGrath
Why does the industry as a whole keep trying to drag us back to the old days of Prodigy, CompuServe, AOL and really high rates per minute of access. I am old enough to remember BOS>c202202 The 'Internet' only took off in adoption once flat rate pricing became the norm for access. Yes

Re: resnets and naming

2007-02-16 Thread Scott McGrath
We have similar problems here I can talk offnet about the remediation tools and systems we use here many of which are cheap and applicable to a service provider environment as most large edu's are more comparable to a small town service provide than a enterprise network. we recently upgraded

Re: Collateral Damage

2006-01-18 Thread Scott McGrath
1 Yes 2 No 3 No 4 No -Original Message- From: "Patrick W. Gilmore" <[EMAIL PROTECTED]> Subj: Collateral Damage Date: Tue Jan 17, 2006 4:44 pm Size: 2K To: [EMAIL PROTECTED] cc: "Patrick W. Gilmore" <[EMAIL PROTECTED]> My previous post sparked quite a bit of traffic (mostly to me

Re: the future of the net

2005-11-17 Thread Scott McGrath
Thought provoking article and the consumer side of the 'net is already heading there i.e. no VPN on many 'broadband' lines unless you pay for 'business' CoS (which I do). Does anyone here remember the Dow Jones Information service in which you are billed by the minute AND the service you access

Re: fcc ruling on dsl providers' access to infrastructure

2005-08-08 Thread Scott McGrath
I believe it is called facism. A big bald Italian mentioned something about trains running on time. Randy Bush wrote: From: Randy Bush <[EMAIL PROTECTED]> Date: Sun, 7 Aug 2005 11:22:23 -1000 To: "Christopher L. Morrow" <[EMAIL PROTECTED]> Subject: Re: fcc ruling on dsl providers' access to in

Re: OMB: IPv6 by June 2008

2005-07-08 Thread Scott McGrath
PROTECTED]> To: "David Conrad" <[EMAIL PROTECTED]>; "Alexei Roudnev" <[EMAIL PROTECTED]> Cc: "Mohacsi Janos" <[EMAIL PROTECTED]>; "Daniel Golding" <[EMAIL PROTECTED]>; "Scott McGrath" <[EMAIL PROTECTED]>; Sent: Thursda

Re: OMB: IPv6 by June 2008

2005-07-07 Thread Scott McGrath
t; Jeroen Massar wrote: > > > On Thu, 2005-07-07 at 10:39 -0400, Scott McGrath wrote: > > >>4 - Retrain entire staff to support IPv6 > > > > > > You have to train people to drive a car, to program a new VCR etc. What > > > is so odd about this? > &g

Re: OMB: IPv6 by June 2008

2005-07-07 Thread Scott McGrath
cGrath On Wed, 6 Jul 2005, Edward Lewis wrote: > At 10:57 -0400 7/6/05, Scott McGrath wrote: > > >IPv6 would have been adopted much sooner if the protocol had been written > >as an extension of IPv4 and in this case it could have slid in under the > >accounting departm

Re: OMB: IPv6 by June 2008

2005-07-07 Thread Scott McGrath
se will be created, which do > not looks so. > - Original Message - > From: "Daniel Golding" <[EMAIL PROTECTED]> > To: "Scott McGrath" <[EMAIL PROTECTED]>; "David Conrad" > <[EMAIL PROTECTED]> > Cc: > Sent: Wednesday, July 06,

Re: OMB: IPv6 by June 2008

2005-07-06 Thread Scott McGrath
tors part of the equation. Scott C. McGrath On Wed, 6 Jul 2005, David Conrad wrote: > On Jul 6, 2005, at 7:57 AM, Scott McGrath wrote: > > IPv6 would have been adopted much sooner if the protocol had been > > written > > as an extension of IPv4 and in this case it c

Re: OMB: IPv6 by June 2008

2005-07-06 Thread Scott McGrath
We are already behind in innovation as most networks these days are run by accountants instead of people with an entrepaneur's sprit. We need good business practices so that the network will stay afloat financially I do not miss the 'dot.com' days. But what we have now is an overemphasis on co

Re: 3rd Party Cisco CWDM GBICs?

2005-02-15 Thread Scott McGrath
Look into Finisar. I believe Finisar is the OEM for the Cisco CWDM GBIC's as they look identical (With the obvious exception of the label) They have 16 Lambda's available At 05:33 PM 2/14/2005, Arnold Nipper wrote: On 14.02.2005 20:52 Aaron Thomas wrote Hi List, Cisco currently provides 8 lambdas

RE: High Density Multimode Runs BCP?

2005-01-26 Thread Scott McGrath
Operations & Infrastructure > [EMAIL PROTECTED] > > > > > -Original Message- > > From: Scott McGrath [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, January 26, 2005 6:44 PM > > To: Hannigan, Martin > > Cc: Thor Lancelot Simon; nanog@mer

RE: High Density Multimode Runs BCP?

2005-01-26 Thread Scott McGrath
Hi, Thor We used it to create zone distribution points throughout our datacenter's which ran back to a central distribution point. This solution has been in place for almost 4 years. We have 10Gb SM ethernet links traversing the datacenter which link to the campus distribution center. The o

Re: High Density Multimode Runs BCP?

2005-01-26 Thread Scott McGrath
Look into MPO cabling MPO uses fiber ribbon cables the most common of which is 6x2 six strands by two layers Panduit has several solutions which use cartridges so you get a cartridge with your desired termination type and run the MPO cable between the cartridges. This cabling under another nam

Re: Setting up DS-3 and 2 4xT1

2004-12-02 Thread Scott McGrath
7206VXR with appropriate PAM's Scott C. McGrath On Thu, 2 Dec 2004, Joshua Brady wrote: > > My apologies if some may find this a little off-topic. > > However, here is my issue. I need a router, which can take 2 4xT1's > and a DS-3, while handing a Gbit for internal

Name resolution in the .MIL domain

2004-11-19 Thread Scott McGrath
Several of our researchers have pointed out that sites in the .MIL TLD are unreachable. Did a nslookup and got a interesting result > server ns.mit.edu Default Server: NOC-CUBE.mit.edu Address: 18.18.2.25 Aliases: ns.mit.edu > www.army.mil Server: NOC-CUBE.mit.edu Address: 18.18.2.25 Ali

Re: 10GE access switch router

2004-09-30 Thread Scott McGrath
Extreme makes such a device but it is not truly wirespeed i.e. it goes wirespeed on ports associated with a particular ASIC but the ASIC to ASIC links apparently cannot forward a full ASIC to another full ASIC without dropping frames. But that may be an academic concern and is unlikely to happen

Re: Cisco moves even more to china.

2004-09-24 Thread Scott McGrath
The current wave of outsourcing is driven by greed and greed alone. What's going on now would make Gordon Gekko blush. There is nothing stopping the companies from paying the workers in India or China the prevailing wage in the developed countries which would really accelerate growth in these c

RE: Cisco moves even more to china.

2004-09-24 Thread Scott McGrath
Too Late CDL drivers are already outsourced a couple of years ago we agreed to allow Mexican trucking firms access to the entire CONUS. Before that they were limited to 100 Miles from the border. Become a mechanic or plumber instead... Scott C. McGrath On Thu, 23

Re: Multi-link Frame Relay OR Load Balancing

2004-09-16 Thread Scott McGrath
In my experience the breakeven point for a Frame Relay DS3 is 6 DS1 circuits. DS3's tend to be more reliable than DS1's as the ILEC usually installs a MUX at your site instead of running to the nearest channel bank and running the T1's over copper with a few repeaters thrown in for good measure

Re: Odd behavior from p4-0-0.MAR1.Austin-TX.us.xo.net

2004-09-10 Thread Scott McGrath
burn > Tier II Router Support > XO Communications > > - Original Message - > From: "Justin Ryburn" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]>; "Scott McGrath" <[EMAIL PROTECTED]>; > <[EMAIL PROTECTED]> > Sent: Fri

Odd behavior from p4-0-0.MAR1.Austin-TX.us.xo.net

2004-09-10 Thread Scott McGrath
We are originating traffic from AS11 and we are seeing an apparent loop downstream from the router listed in the header when attempting to connect to rsync1.spamhaus.org. Is this problem unique to us or are others seeing the same behavior. Scott C. McGrath

Re: optics pricing (Re: Weird GigE Media Converter Behavior)

2004-09-02 Thread Scott McGrath
Ordered them when they first became available order is still on "New Product Hold". BTW they use standard infiniband cables Scott C. McGrath On Thu, 2 Sep 2004, Thomas Kernen wrote: > > > > > > On the other hand, it'd be nice to see a copper 10GBIC, even if its max

Re: sms messaging without a net?

2004-08-05 Thread Scott McGrath
Use TAP (telocator access protocol) your monitoring application dials a modem pool logs on and sends a text message to the subscriber. Verizon, Cingular, Nextel all offer this service as does Skytel and most of the paging vendors. Scott C. McGrath On Tue, 3 Aug 2004

Re: Surge Protection

2004-07-22 Thread Scott McGrath
Polyphaser does make excellent surge supression gear they make it for all communications services. i.e. Broadcast Radio, television, cell sites, gov't/military. Being a ham I use their gear myself expensive but cheaper than a new rig. Especially since the rig is connected to a structure designe

RE: concern over public peering points [WAS: Peering point speed publicly available?]

2004-07-09 Thread Scott McGrath
A minitel - in the United States! Scott C. McGrath On Thu, 8 Jul 2004, Ian Dickinson wrote: > > >>Which almost begs the question - what's the oddest "WTF??" anybody's willing to > >>admit finding under a raised floor, or up in a ceiling or cable chase or > >>similar

RE: Strange behavior of Catalyst4006

2004-06-29 Thread Scott McGrath
Joe, If you are using NAT 0 you need to have a static translation enabled. Otherwise when the machine first comes up it arp's which creates an xlate entry on the PIX which times out when the inactivity timer runs out. This causes behavior similar to what you are experiencing

Re: Attn MCI/UUNet - Massive abuse from your network

2004-06-25 Thread Scott McGrath
Well said sir! Scott C. McGrath On Fri, 25 Jun 2004 [EMAIL PROTECTED] wrote: > > > From the AOL theft article: > > "The revelations come as AOL and other Internet providers have > > ramped up their efforts to track down the purveyors of spam, which > > has grown in

RE: Homeland Security now wants to restrict outage notifications

2004-06-24 Thread Scott McGrath
is a valuable thing unfortunately we are losing it bit by bit. Scott C. McGrath On Thu, 24 Jun 2004, Harris, Michael C. wrote: > Scott McGrath said: > See > > http://www.theregister.co.uk/2004/06/24/network_outages/ > > for the gory

RE: Homeland Security now wants to restrict outage notifications

2004-06-24 Thread Scott McGrath
;s voluntary efforts are > sufficient." > > -Tad > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Scott McGrath > Sent: Thursday, June 24, 2004 12:58 PM > To: [EMAIL PROTECTED] > Subject: Homeland Security n

Homeland Security now wants to restrict outage notifications

2004-06-24 Thread Scott McGrath
See http://www.theregister.co.uk/2004/06/24/network_outages/ for the gory details. The Sean Gorman debacle was just the beginning this country is becoming more like the Soviet Union under Stalin every passing day in its xenophobic paranoia all we need now is a new version of the NKVD to enforc

RE: Even you can be hacked

2004-06-11 Thread Scott McGrath
But wouldn't an interocitor with electron sorter option give you much more reliable packet delivery... Scott C. McGrath On Fri, 11 Jun 2004, Fisher, Shawn wrote: > > Hmm, so your on earth? > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTE

Re: OT: Looking for Ethernt/Optical Device

2004-06-01 Thread Scott McGrath
Finisar also has CWDM optics in both the SFP and GBIC form factor and they are quite a bit less expensive than the Cisco solution and they do have a 16 lambda passive OADM as well as the 4 and 8 lambda models. Scott C. McGrath On Tue, 1 Jun 2004, Erik Haagsman wrote:

Re: Type of Service (TOS)

2004-05-10 Thread Scott McGrath
Grath On Mon, 10 May 2004, Vicky Rode wrote: > Hi, > > Do you know by default if the routers pass the TOS bits? > > > regards, > /vicky > > > Scott McGrath wrote: > > > > > The answer is it depends. routers _usually_ honor the TOS bits unless > &g

Re: Type of Service (TOS)

2004-05-10 Thread Scott McGrath
The answer is it depends. routers _usually_ honor the TOS bits unless they are configured to clear or rewrite them. We use the TOS bits for designating traffic classes so in some cases we rewrite the TOS bits set by the host so in your case we would modify the TOS bits.

Re: Filtering network content based on User Subscription

2004-05-08 Thread Scott McGrath
Joe, Your best bet in this case is to place a appropriately sized firewall at the customer's site, i.e. Cisco PIX 501 - 515 series or SonicWall's equivalent and link it to a WebSense or N2H2 content filtering server at your NOC. the short version of how this works us The firewall sends the URL

Re: The Uneducated Enduser (Re: Microsoft XP SP2 (was Re: Lazy network operators - NOT))

2004-04-20 Thread Scott McGrath
Operating systems bundled with a retail computer _should_ be reasonably secure out of the box. OS X can be placed on a unprotected internet connection in a unpatched state and it's default configuration allows it to be patched to current levels without it being compromised. On the other hand Wi

Re: UPS and generator interaction?

2004-03-29 Thread Scott McGrath
Brian, The way the generators usually are set up is an transfer switch at the input of the UPS. When commercial power is lost the ATS signals the Genset to start and once the input voltage stablizes the UPS shuts down. This scenario assumes the use of a line interactive UPS which includes the U

Re: Redirecting mail (Re: Throttling mail)

2004-03-25 Thread Scott McGrath
Ray, Take a look at IOS server load balancing. You create a virtual server with your public IP address and bind 1 or more real servers to this "serverfarm". The nice thing about IOS SLB is that it is part of the IOS image in native mode on the 65xx and the 72xx series. It runs on a couple of

Re: who offers cheap (personal) 1U colo?

2004-03-16 Thread Scott McGrath
Painting with a broad brush the differentiation between student and administrative networks is based on location,role and ownership A public ethernet port in a library is a "student" network even though "administrative" computers may be connected from time to time. The librarian's machine is att

RE: Will your cisco have the FBI's IOS?

2004-03-15 Thread Scott McGrath
ld we would not need locks on our doors, passwords for our systems. In situations like this who watches the watchers?. Currently a judge does in the future... Scott C. McGrath On Mon, 15 Mar 2004, Sean Donelan wrote: > > On Mon, 15 Mar 2004, Scott McGrath wrote: >

Re: hey had eric sent you

2004-03-15 Thread Scott McGrath
Bit hard by same bug. What version of code are you running on the 6513 8.1(2) fixes the bug on the 6x48 line cards. What happens is that packets of 64 bytes or less are silently dropped. Replacing linecards will not help unless there is another bug of which I am not aware. With a little digg

RE: Will your cisco have the FBI's IOS?

2004-03-15 Thread Scott McGrath
This is part of a law enforcement wishlist which has been around for a long time (See Magic Lantern, Clipper Chip et. al. for examples). What is desired here is a system by which all communications originating/or terminating at $DESIGNATED_TARGET can be intercepted with no intervention by and/or

Re: Enterprise Multihoming

2004-03-12 Thread Scott McGrath
As Marshall noted multi-homing gives you the ability to switch providers easily. This ability also gives you leverage with your network providers since vendor lock-in does not exist. This is a strong business case for multihoming and is one the financial types understand and appreciate. In a p

Re: T1 Customer CPE Replacement?

2004-02-23 Thread Scott McGrath
Have you tried a softnet depot maintenance agreement. This entitles you to IOS upgrades but H/W replacement is some negotiated percentage of list price. The other guys _may_ be cheaper in the short run but hardware replacement is always like having a root canal cant speak for Netopia but I have

RE: Anti-spam System Idea

2004-02-17 Thread Scott McGrath
We do block port 25 as suggested in earlier in the thread. Now the problem is the spambots use our smarthost(s) to spew their garbage and the smarthosts are blocked. there is an easy if somewhat impractical anwswer ;~} access-list network-egress deny ip any any log Think of all the bandwidth

Re: ISS X-Force Security Advisories on Checkpoint Firewall-1 and VPN-1

2004-02-05 Thread Scott McGrath
On PIX'en and FWSM it is very easy to disable the evil NAT all you need is to enter the "nat 0" command in global configuration mode. This allows the PIX to pass addresses untranslated. The Pixen are still based on intel hardware but to the best of my knowledge they have never had a HDD and I

Re: Misplaced flamewar... WAS: RE: in case nobody else noticed it, there was a mail worm released today

2004-01-29 Thread Scott McGrath
On Wed, 28 Jan 2004, Alexei Roudnev wrote: > > > > > > Most Windows boxes are running with administrative privledges. That makes > > Windows a willing accomplice. The issue isn't that people click on > > attachments, but that there are no built in safeguards from what happens > > next. > Thi

nanog@merit.edu

2004-01-28 Thread Scott McGrath
What about using byte intervals to BEEFDEAD its space in memory ;~) Scott C. McGrath On Wed, 28 Jan 2004, Adam Maloney wrote: > > On Wed, 2004-01-28 at 00:12, Jay Hennigan wrote: > > I have an AT&T T-1 taking errors. Their trouble reporting number dumps > > me into

Re: Outbound Route Optimization.

2004-01-26 Thread Scott McGrath
This was one of the pipe dreams that RSVP was _supposed_ to solve in that you could set up a end to end path with precisely specified characteristics. problem is _all_ the devices in the path need to support RSVP. Now the snake oil salesmen are coming out with boxes which purport to monitor the

Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Scott McGrath
Both the ISL _and_ the Dotq headers are stripped off at the trunk interface so they _both_ change the packet size but neither alters the payload. Scott C. McGrath On Mon, 26 Jan 2004 [EMAIL PROTECTED] wrote: > > > ISL _DOES NOT CHANGE_ packet size. > > An 802.1q ta

Re: What's the best way to wiretap a network?

2004-01-20 Thread Scott McGrath
Scott C. McGrath On Tue, 20 Jan 2004, Eriks Rugelis wrote: > > Sean Donelan wrote: > > Assuming lawful purposes, what is the best way to tap a network > > undetectable to the surveillance subject, not missing any > > relevant data, and not exposing the installer to

Re: sniffer/promisc detector

2004-01-19 Thread Scott McGrath
That's what I assumed but I asked the question anyhow just to confirm my assumption(s). Scott C. McGrath On Mon, 19 Jan 2004, Gerald wrote: > On Sat, 17 Jan 2004, Scott McGrath wrote: > > > The question here is what are you trying to defend agai

Re: One-element vs two-element design

2004-01-17 Thread Scott McGrath
Point taken, Availability would have been a better term to use. >From a customers standpoint limited availability of bits is still better than no bits flowing and in an ideal world your published capacity would be N rather than N+1. Appreciate the thoughtful comments Regards - Scott

Re: One-element vs two-element design

2004-01-17 Thread Scott McGrath
I personally favor the N+1 design model as it allows maintenance to be performed on network elements without causing outages which makes the customers happy. In many instances you can leverage the N+1 model to share the load between the devices thereby increasing network capacity. As an addtion

Re: sniffer/promisc detector

2004-01-17 Thread Scott McGrath
It is also possible to sniff a network using only the RX pair so most of the tools to detect cards in P mode will fail. The new Cisco 6548's have TDR functionality so you could detect unauthorized connections by their physical characteristics. But there are also tools like ettercap which exploi

Re: Looking for power metering equipment...

2004-01-15 Thread Scott McGrath
Concur with you need wattage not amperage. There is a 'relatively' cheap method of doing this however local electrical codes may put a damper on this type of project. You put a current transformer on each branch circuit. A 'typical' current transformer will generate 1Millivolt per Milliampe

RE: PC Routers (was Re: /24s run amuck)

2004-01-15 Thread Scott McGrath
You buy a OSM from Cisco and you can queue and do QoS based upon bgp index or AS Scott C. McGrath On Wed, 14 Jan 2004, Michel Py wrote: > > > Deepak Jain wrote: > > With a network boot OS for each POP, you can do > > version control much much more easily. > > Th

Re: Wirespeed 24-port L3 switches

2004-01-08 Thread Scott McGrath
I think you are expecting too much from a 24 port switch. All these devices are meant to sell at a "price" and most of the buyers are using the L3 features as a checklist elimination option and in my experience most of these switches are never used as anything other than a dumb L2 switch but the

RE: GSR, 7600, Juniper M?, oh my!

2004-01-08 Thread Scott McGrath
If you choose the 7600's I would highly recommend going with the Sup720's the price difference is not that great and they incorporate the SFM which gives you the option of running dCEF on your WAN cards. Scott C. McGrath On Thu, 8 Jan 2004, Josh Fleishman wrote: >

Re: Minimum Internet MTU

2003-12-22 Thread Scott McGrath
Or the X.25/IP gateways beloved of Airlines who are also good at complaining when traffic is dropped on the floor Scott C. McGrath On 22 Dec 2003, Robert E. Seastrom wrote: > > > Chris Brenton <[EMAIL PROTECTED]> writes: > > > I agree, this is a bit of a loaded

Re: WLAN shielding

2003-12-01 Thread Scott McGrath
There is an adage in the Wireless industry. If it will hold water it will hold RF Energy. Unfortunately this is true and the only method by which you can prevent the egress of 2.4 GHz signals from a defined area is by the use of a faraday cage and since the wavelength is short you need a very

RE: [Activity logging & archiving tool]

2003-11-25 Thread Scott McGrath
CiscoWorks also polls the devices for configuration changes and generates a diff if you so desire. If you have set up AAA you will have an audit log of when changes were applied and who applied them. Scott C. McGrath On Tue, 25 Nov 2003 [EMAIL PROTECTED] wrote: >

Re: Anit-Virus help for all of us??????

2003-11-25 Thread Scott McGrath
The minimalist approach has support advantages as well. Because of the small image size a reimage can be accomplished quickly. For better or worse many network tools/utilities only run under win[*] requiring a windows box for many of these Win98SE fits nicely. My app load is small i.e. bro

Re: uRPF-based Blackhole Routing System Overview

2003-11-12 Thread Scott McGrath
Vendor C calls it DHCP snooping and to the best of my knowledge it is only available under IOS not CatOS Scott C. McGrath On Fri, 7 Nov 2003, Greg Maxwell wrote: > > On Fri, 7 Nov 2003, Robert A. Hayden wrote: > > [snip] > > One final note. This system is prett

Re: Yankee Group declares core routing obsolete (was Re: Anybodyusing GBICs?)

2003-10-31 Thread Scott McGrath
Funny I thought a "switch" was a multiport bridge... uses the MAC headers to flood. ahh makes me long for the days of Kalpana. Scott C. McGrath On Fri, 31 Oct 2003, Stephen Sprunk wrote: > > Thus spake "Daniel Golding" <[EMAIL PROTECTED]> > > Hmm. Don't you just lov

Re: IPv6 NAT

2003-10-31 Thread Scott McGrath
Agreed NAT's do not create security although many customers believe they do. NAT's _are_ extremely useful in hiding network topologies from casual inspection. What I usually recommend to those who need NAT is a stateful firewall in front of the NAT. The rationale being the NAT hides the topolo

Re: [arin-announce] IPv4 Address Space (fwd)

2003-10-30 Thread Scott McGrath
That was _exactly_ the point I was attempting to make. If you recall there was a case recently where a subcontractor at a power generation facility linked their system to an isolated network which gave unintentional global access to the isolated network. a NAT at the subcontrator's interface wo

Re: [arin-announce] IPv4 Address Space (fwd)

2003-10-30 Thread Scott McGrath
> On Wed, 29 Oct 2003, Scott McGrath wrote: > > > Life would be much simpler without NAT howver there are non-computer > > devices which use the internet to get updates for their firmware that most > > of us would prefer not to be globally reachable due to the human err

Re: [arin-announce] IPv4 Address Space (fwd)

2003-10-29 Thread Scott McGrath
etc) The other case as pointed out by another poster is overlapping networks which need NAT until a renumbering can be accomplished. Scott C. McGrath On Wed, 29 Oct 2003, Miquel van Smoorenburg wrote: > > In article <[EMAIL PROTECTED]>, > Scott McGr

Re: [arin-announce] IPv4 Address Space (fwd)

2003-10-29 Thread Scott McGrath
And sometimes you use NAT because you really do not want the NAT'ed device to be globally addressible but it needs to have a link to the outside to download updates. Instrument controllers et.al. The wisdom of the design decision to use the internet as the only method to provide software updat

Re: NTP, possible solutions, and best implementation

2003-10-03 Thread Scott McGrath
Two relevant points on GPS/LORAN 1 - GPS has two positioning systems 1 - SPS Standard Positioning Service which is what all civillian uses of GPS utilize for positioning and timing uses and this can be degraded or disabled with no notice to the user community b

Re: NTP, possible solutions, and best implementation

2003-10-03 Thread Scott McGrath
The recommendations of others to place the Stratum 1 source behind another box is indeed good operational practice. However if you _really_ want to provide Stratum 1 services there are a couple of options 1 - Purchase a Cesium clock this is a Primary Time/Frequency standard which does no

Re: ethernet-based temperature sensors

2003-09-04 Thread Scott McGrath
The environmental monitors which APC sells work well and they can be configured via BOOTP. They are in the $200 range. They also sell units which install into the smart slot on APC ups units which gives you remote control of the UPS as well as the environmental monitoring.

Re: Cisco filter question

2003-08-22 Thread Scott McGrath
Geo, Look at your set interface Null0 command the rest is correct you want to set the next hop to be Null0. How to do this is left as an exercise for the reader. Scott C. McGrath On Fri, 22 Aug 2003, Geo. wrote: > > Perhaps one of you router experts can answer t

Re: Sea sponge builds a better glass fiber

2003-08-21 Thread Scott McGrath
The natural enemy in this case would be the filefish or the angelfish who eat the sponges... Scott C. McGrath On Thu, 21 Aug 2003, David Meyer wrote: > > >> I'm still waiting for the discovery of its natural enemy, the Backhoeiosaur. > > All kidding aside, my

Re: Plano, TX Legacy: Fiber Provider or Wireless & Wireless question

2003-08-20 Thread Scott McGrath
Wireless is a good option but you might want to look at the licensed services as well. Licensing in most cases is a formality handled by the vendor along with a nominal "user fee" sent to the FCC. Unlicensed systems are regulated by part 15 of the FCC regulations which read DEVICE MUST ACCEP

Re: Did Sean Gorman's maps show the cascading vulnerability in Ohio?

2003-08-18 Thread Scott McGrath
T) > > From: Scott McGrath <[EMAIL PROTECTED]> > > Sender: [EMAIL PROTECTED] > > > > > > > > Information should be free. This however assumes that people will be > > _responsible_ for what is done with the information. > > > > On Manuel and

Re: Did Sean Gorman's maps show the cascading vulnerability in Ohio?

2003-08-18 Thread Scott McGrath
to ensure that the information is used responsibly. Having "secrets" benefits no one except the keeper of the secrets. Scott C. McGrath On Mon, 18 Aug 2003, Paul Wouters wrote: > > On Mon, 18 Aug 2003, Scott McGrath wrote: > > > Remember wh

Re: Did Sean Gorman's maps show the cascading vulnerability in Ohio?

2003-08-18 Thread Scott McGrath
manuscripts you generally need to prove to the curator that you have a legitimate scholarly interest in the documents not simply random curiousity. Scott C. McGrath On Mon, 18 Aug 2003, Mr. James W. Laferriere wrote: > > Hello Scott , > > On Mon, 18 Aug

Re: Did Sean Gorman's maps show the cascading vulnerability in Ohio?

2003-08-18 Thread Scott McGrath
A measured response is needed. Obviosly we do not want the vulnerabilities disclosed to bored teenagers looking for "excitement". We need controlled access to this data so that those of us who need the data to fix vulnerabilities can gain access to it but access is denied to people without a leg

Re: Gigabit Media Converter

2003-08-14 Thread Scott McGrath
Where can you get CWDM GBIC's for under 400. Most vendors charge 5-10x that price. Scott C. McGrath On Tue, 12 Aug 2003, Vincent J. Bono wrote: > > Thanks for all the links and help! > > The issue is cost and space, and all the products that will work seem to > cos

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Scott McGrath
No answer on that one, However Mac OS X also includes a built in firewall. On the configuration angle, the Microsoft ICF (Internet Connection Firewall) blocks everything by default. Scott C. McGrath On Thu, 14 Aug 2003, John Neiberger wrote: > > Sean Donelan <

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Scott McGrath
ipchains and similar firewalls are indeed far superior. I manage "real" firewalls as part of my responsibilities. However the new microsoft policy will help protect the network from Joe and Jane average who buy a PC from the closest "big box" store and hook it up to their cable modem so they ca

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Scott McGrath
The checkpoint and Pix Boxen are what we use here. But we also use ipchains to secure things at a host level. Scott C. McGrath On Thu, 14 Aug 2003, Drew Weaver wrote: > > > ipchains and similar firewalls are indeed far superior. I manage "real" > firewalls as par

Re: Cisco vulnerability and dangerous filtering techniques

2003-07-23 Thread Scott McGrath
Another argument for OSPF authentication it seems. However we are still out of luck in the STP announcements unless you configure all the neat little *guard features (bpdu,root etc) from Cisco et al. On Wednesday, July 23, 2003, at 12:34 PM, [EMAIL PROTECTED] wrote: Like I said, it's not

IOS Vulnerability

2003-07-16 Thread Scott McGrath
For full details about the vulnerability see http://www.cisco.com/en/US/products/hw/routers/ps341/products_security_advisory09186a00801a34c2.shtml Scott C. McGrath