Re: [NANOG] 10GE router resource

2008-05-19 Thread Henning Brauer
* Aaron Glenn [EMAIL PROTECTED] [2008-03-26 03:14]: On Tue, Mar 25, 2008 at 6:15 PM, Patrick Clochesy [EMAIL PROTECTED] wrote: Very interesting study I had not seen, and a bummer. That really puts a cramp in my advocation of our CARP+pf load balancers/firewalls/gateways. Than again,

Re: [NANOG] Installation troubles with GlobalCrossing

2008-05-19 Thread Erich Hohermuth
Dear list, Thanks to everyone who has respond to me by privat mails. I just want to ask if anyone else have major troubles to install new or upgrade services with Global Crossing ? It seems that I'm not the only one who has troubles with installations and trouble tickets in the past 12

Re: [NANOG] Installation troubles with GlobalCrossing

2008-05-19 Thread Robert Bonomi
From [EMAIL PROTECTED] Mon May 19 06:30:15 2008 From: Erich Hohermuth [EMAIL PROTECTED] To: nanog@nanog.org Date: Mon, 19 May 2008 13:29:39 +0200 Subject: Re: [NANOG] Installation troubles with GlobalCrossing Dear list, Thanks to everyone who has respond to me by privat mails. I just

Re: [NANOG] IOS rootkits

2008-05-19 Thread Paul Wall
On Sat, May 17, 2008 at 5:45 PM, [EMAIL PROTECTED] wrote: It's the people who pop up and smear Gadi that I really wonder about. There seems to be no good reason for this, unless possibly they are blackhats of some sort. I remember a few years ago when William Leibzon posted about his work

[NANOG] Earthlink Relayed Spam Increase

2008-05-19 Thread Jason J. W. Williams
Hey Y'all, We're seeing a marked increase of spam originating from Earthlink mail servers over the past week and a half. Is anyone else seeing a spike localized to Earthlink as well? Thank you in advance. Best Regards, Jason --- Jason J. W. Williams COO/CTO, DigiTar

Re: [NANOG] IOS rootkits

2008-05-19 Thread Deepak Jain
Wouldn't this level of verification/authentication of running code be a pretty trivial function via RANCID or similar tool? I understand *why* we are worried about rootkits on individual servers. On essentially closed platforms this isn't going to be rocket science. It may seem odd by today's

Re: [NANOG] IOS rootkits

2008-05-19 Thread Buhrmaster, Gary
I understand *why* we are worried about rootkits on individual servers. On essentially closed platforms this isn't going to be rocket science. It may seem odd by today's BCPs, but booting up from golden images via write-protected hardware or TFTP or similar is pretty

Re: [NANOG] IOS rootkits

2008-05-19 Thread Deepak Jain
Buhrmaster, Gary wrote: I understand *why* we are worried about rootkits on individual servers. On essentially closed platforms this isn't going to be rocket science. It may seem odd by today's BCPs, but booting up from golden images via write-protected hardware or TFTP or similar

Re: [NANOG] Earthlink Relayed Spam Increase

2008-05-19 Thread Kameron Gasso
Jason J. W. Williams wrote: We're seeing a marked increase of spam originating from Earthlink mail servers over the past week and a half. Is anyone else seeing a spike localized to Earthlink as well? We've seen a fair amount lately. Additionally, a couple of people I assist with

Re: [NANOG] Installation troubles with GlobalCrossing

2008-05-19 Thread Drew Weaver
The only issue I had with them recently was the aforementioned 5Mbps ICMP rate-limiting on an inappropriately sized circuit and not understanding why I thought it was inappropriate to apply that filter to circuits of any size without any thought to how it would (to a lesser extent

Re: [NANOG] Installation troubles with GlobalCrossing

2008-05-19 Thread Paul Wall
5mb limit ingressing/traversing their backbone? Or 5mb limit to their router's control plane? Important to differentiate between the two. I'd call the former totally unacceptable, and actionable per SLA 'till resolved (besides, whoever got taken down by a multi-gigabit PING FLOOD?); the latter

Re: [NANOG] Installation troubles with GlobalCrossing

2008-05-19 Thread Christopher Morrow
On Mon, May 19, 2008 at 6:03 PM, Paul Wall [EMAIL PROTECTED] wrote: 5mb limit ingressing/traversing their backbone? Or 5mb limit to their router's control plane? Important to differentiate between the two. I'd call the former totally unacceptable, and actionable per SLA 'till resolved