Re: Linux shaping packet loss

2009-12-10 Thread Chris
Thanks to all that replied. Trial and error it is ... I'm now waiting (22 hours later) for it to break again after I changed the priority on the default catch-all class. It lasted five days before. I'm looking at CBQ but it's not at all friendly relative to HTB. If I'm forced to go down the

Re: Arrogant RBL list maintainers

2009-12-10 Thread Chris Edwards
On Wed, 9 Dec 2009, Michael Holstein wrote: | Their initial email said : | | [snip] | Trend Micro Notification: 137.148.0.0/16 added to DUL | [snip] Oh dear. I can see why many sites that once used MAPS now don't :-(

Re: Arrogant RBL list maintainers

2009-12-10 Thread Tony Finch
On Thu, 10 Dec 2009, Chris Edwards wrote: On Wed, 9 Dec 2009, Michael Holstein wrote: | Their initial email said : | | [snip] | Trend Micro Notification: 137.148.0.0/16 added to DUL | [snip] Oh dear. I can see why many sites that once used MAPS now don't :-( It isn't just idiocy like

Re: Arrogant RBL list maintainers

2009-12-10 Thread Ronald Cotoni
On Thu, Dec 10, 2009 at 8:20 AM, Tony Finch d...@dotat.at wrote: On Thu, 10 Dec 2009, Chris Edwards wrote: On Wed, 9 Dec 2009, Michael Holstein wrote: | Their initial email said : | | [snip] | Trend Micro Notification: 137.148.0.0/16 added to DUL | [snip] Oh dear.  I can see why many

RE: Arrogant RBL list maintainers

2009-12-10 Thread Sam Hayes Merritt, III
Creating a standard on what to put in WHOIS/DNS for dynamic/static/infrastructure would make a lot of sense, seems nobody is doing it though. As previously noted in this thread, msulli...@sorbs did a fairly good job of documenting this in an RFC draft. I'd say its still the primary goto to

Re: Arrogant RBL list maintainers

2009-12-10 Thread Dave CROCKER
On 12/10/2009 7:29 AM, Sam Hayes Merritt, III wrote: As previously noted in this thread, msulli...@sorbs did a fairly good job of documenting this in an RFC draft. I'd say its still the primary goto to point people at for how to do things the right way.

Linux Network Generator

2009-12-10 Thread Joseph Jackson
Hey list, I've been doing some stress testing of a router this week using Network Traffic Generator from http://sourceforge.net/projects/traffic/ and while it works well I was wondering what other generators you all have used and find helpful. Maybe something that Traffic doesn't do like

Re: Arrogant RBL list maintainers

2009-12-10 Thread Michael Holstein
Is your network setup so chaotic that you don't know what address chunks are allocated by DHCP or PPP? Aww .. stop it, just stop. I could send the .vsd of the network overview to everyone and there'd still be someone that'd chime in and say Ha! you moron .. you used ORANGE lines to

best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 09:29:15AM -0600, Sam Hayes Merritt, III wrote: Creating a standard on what to put in WHOIS/DNS for dynamic/static/infrastructure would make a lot of sense, seems nobody is doing it though. As previously noted in this thread, msulli...@sorbs did a fairly good job

Re: Linux shaping packet loss

2009-12-10 Thread Michael Holstein
What's good for really cheap gigabit, redundant, high throughput Well .. I'd say you could pick any two of those and come up with a list .. but we use Packeteer (now owned by Bluecoat) to great success. It fails the first requirement miserably, IMHO, though. I've also used these in a MDU

Re: Arrogant RBL list maintainers

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 10:48:05AM -0500, Michael Holstein wrote: Like many places, we run seperate internal and external DNS .. when a user requests a static IP, they can opt to make it external, but few do, since we point out that when they do that, they loose the anonymity of the generic

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Michael Thomas
On 12/10/2009 07:54 AM, Steven Champeon wrote: In a nutshell, if you're not clearly indicating mail sources as mail sources, don't expect great deliverability. If you're running a Web hosting shop and don't have rate-limited outbound smarthosts, expect all your clients' mail to be suspected of

Re: Arrogant RBL list maintainers

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 07:43:36AM -0800, Dave CROCKER wrote: On 12/10/2009 7:29 AM, Sam Hayes Merritt, III wrote: As previously noted in this thread, msulli...@sorbs did a fairly good job of documenting this in an RFC draft. I'd say its still the primary goto to point people at for how to

Re: best practices for PTR naming and whois (was, sadly, Re: ArrogantRBL list maintainers)

2009-12-10 Thread O'Reirdan, Michael
MAAWG has published an approach that it recommends is taken to share information as to nature of IP space. This may be of interest here. It can be found here: http://www.maawg.org/about/publishedDocuments Mike On 12/10/09 11:11 AM, Michael Thomas m...@mtcc.com wrote: On 12/10/2009 07:54

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 08:11:18AM -0800, Michael Thomas wrote: I'd say that Mikael Abrahamsson's sentiment (or at least the way I read it) would be a better start: take a step back and ask what the problem is. Well, as I see it, the problem is a widespread and systemic failure to prevent

Re: Arrogant RBL list maintainers

2009-12-10 Thread Michael Holstein
I'm a bit confused by what it means to have an internal static public IP internal means behind the firewall (which everything is, transparently). We don't NAT because we don't have to .. the 1918 space is used for stuff we don't want to be routable (like thermostats). that they have the

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Mark Andrews
In message 4b211da6.9000...@mtcc.com, Michael Thomas writes: On 12/10/2009 07:54 AM, Steven Champeon wrote: In a nutshell, if you're not clearly indicating mail sources as mail sources, don't expect great deliverability. If you're running a Web hosting shop and don't have rate-limited

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Michael Thomas
On 12/10/2009 08:38 AM, Mark Andrews wrote: In message4b211da6.9000...@mtcc.com, Michael Thomas writes: To Crocker's point though: if IETF came up with a way to publish your network's dynamic space (assuming that's The Problem!), would operators do that? Or is this another case where the energy

Re: Arrogant RBL list maintainers

2009-12-10 Thread Sven Olaf Kamphuis
On 12/10/2009 7:29 AM, Sam Hayes Merritt, III wrote: As previously noted in this thread, msulli...@sorbs did a fairly good job of documenting this in an RFC draft. I'd say its still the primary goto to point people at for how to do things the right way.

Re: Arrogant RBL list maintainers

2009-12-10 Thread Raymond Dijkxhoorn
Hi! RBLs are neither authorised (EU privacy laws anyone?), nor the appointed authority to keep databases on whats static or not. RIRs -are-, if anyone should maintain a database on such things, i'd be the rirs (which they have, it's called whois, it just lacks a field that indicates the type of

Re: Arrogant RBL list maintainers

2009-12-10 Thread Sven Olaf Kamphuis
thing is that it's illegal to maintain a database with personal details which ip addresses according to various german courts are (don't ask.. mmk? ;) ofcourse we all know ip addresses identify nodes on a network, not persons, but the germans seem to mainain a different view on this, despite us

Re: Arrogant RBL list maintainers

2009-12-10 Thread Raymond Dijkxhoorn
Hi! thing is that it's illegal to maintain a database with personal details which ip addresses according to various german courts are (don't ask.. mmk? ;) ofcourse we all know ip addresses identify nodes on a network, not persons, but the germans seem to mainain a different view on this,

Re: Arrogant RBL list maintainers

2009-12-10 Thread Joe Greco
RBLs are neither authorised (EU privacy laws anyone?), nor the appointed authority to keep databases on whats static or not. RIRs -are-, if anyone should maintain a database on such things, i'd be the rirs (which they have, it's called whois, it just lacks a field that indicates the type of

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Joe Abley
On 2009-12-10, at 16:42, Michael Thomas wrote: On 12/10/2009 08:38 AM, Mark Andrews wrote: The way to do this is to put other data in the ip6.arpa/in-addr.arpa and stop trying to infer things from the PTR records. Sigh. What is the this to which you refer? I think Mark means the

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Michael Thomas
On 12/10/2009 09:06 AM, Joe Abley wrote: On 2009-12-10, at 16:42, Michael Thomas wrote: On 12/10/2009 08:38 AM, Mark Andrews wrote: The way to do this is to put other data in the ip6.arpa/in-addr.arpa and stop trying to infer things from the PTR records. Sigh. What is the this to which

Re: best practices for PTR naming and whois (was, sadly, Re: Arrogant RBL list maintainers)

2009-12-10 Thread Steven Champeon
on Thu, Dec 10, 2009 at 09:27:44AM -0800, Michael Thomas wrote: On 12/10/2009 09:06 AM, Joe Abley wrote: I think Mark means the question of whether a particular address is statically-assigned or dynamically-assigned, but... Which assumes that that's the question that actually needs to be

Optical fiber question

2009-12-10 Thread Deric Kwok
Hi My provider said they can provide single / mulit mode Optical fiber Apart from the length and cost different, what is the Adv/Disadv between them for our connection? Thank you

Re: Optical fiber question

2009-12-10 Thread Jared Mauch
On Dec 10, 2009, at 1:24 PM, Deric Kwok wrote: Hi My provider said they can provide single / mulit mode Optical fiber Apart from the length and cost different, what is the Adv/Disadv between them for our connection? The advantages are always in the distance capabilities of the single

More ASN collissions

2009-12-10 Thread Jared Mauch
As always, good research by renesys. http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml - Jared

Re: More ASN collissions

2009-12-10 Thread Dobbins, Roland
On Dec 11, 2009, at 1:35 AM, Jared Mauch wrote: As always, good research by renesys. What happens when an ASN is requested, and it's discovered that said ASN is already in use by an unauthorized network, and that some proportion of the Internet are accepting it due to a lack of appropriate

Qwest mail admin contact?

2009-12-10 Thread randal k
If one is listening, can I get a Qwest mail admin to drop me a line off-list? Numerous emails to postmaster, abuse, relay, etc all seem to be deadends. Thanks, Randal

Re: More ASN collissions

2009-12-10 Thread christian koch
i believe john curran just posted the follow up to the list yesterday on this matter On Thu, Dec 10, 2009 at 10:51 AM, Dobbins, Roland rdobb...@arbor.netwrote: On Dec 11, 2009, at 1:35 AM, Jared Mauch wrote: As always, good research by renesys. What happens when an ASN is requested, and

RE: Optical fiber question

2009-12-10 Thread Deepak Jain
My provider said they can provide single / mulit mode Optical fiber Apart from the length and cost different, what is the Adv/Disadv between them for our connection? The advantages are always in the distance capabilities of the single mode fiber. You can reach much further on this, but

Re: Optical fiber question

2009-12-10 Thread Leslie
Jared Mauch wrote: On Dec 10, 2009, at 1:24 PM, Deric Kwok wrote: Hi My provider said they can provide single / mulit mode Optical fiber Apart from the length and cost different, what is the Adv/Disadv between them for our connection? The advantages are always in the distance

Re: Optical fiber question

2009-12-10 Thread Anton Kapela
Wanted to add something to this and clarify/correct a few points: Plus, while I'm sure someone in a lab has done it, you really don't run DWDM over multimode fiber - I'd second the opinion of it's cheap enough, go for the single mode and get the most flexibility in your options possible. In

Re: More ASN collissions

2009-12-10 Thread Leo Bicknell
In a message written on Thu, Dec 10, 2009 at 01:35:16PM -0500, Jared Mauch wrote: As always, good research by renesys. http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml As already commented on the blog... ISC had a data entry error on an ASN for our site in Fiji.

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-10 Thread Michael Loftis
--On Wednesday, December 02, 2009 6:23 PM -0800 Mehmet Akcin meh...@akcin.net wrote: Would you consider Juniper SSG5 as a Consumer Grade router? They do IPv6 and they are pretty good in general, and cheap as well. Not as usable in the consumer space due to lack of UPnP (and Juniper is

Re: Arrogant RBL list maintainers

2009-12-10 Thread John Levine
thing is that it's illegal to maintain a database with personal details which ip addresses according to various german courts are (don't ask.. I've actually looked at some of the German decisions, and I didn't see anything that would be a problem for DNSBLs But if you're getting legal advice

RE: Linux shaping packet loss

2009-12-10 Thread Keith Medcalf
Autoneg is a required part of the gig E specification so you'd only be causing yourself trouble by turning it off. (I don't know if it'll also break automatic MDI/MDI-X (crossover) configuration, for an example of something that's nice to have.) At least on 450x series enhanced linecards,

Re: More ASN collissions

2009-12-10 Thread Rene Wilhelm
Leo Bicknell wrote: In a message written on Thu, Dec 10, 2009 at 01:35:16PM -0500, Jared Mauch wrote: As always, good research by renesys. http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml [...] I would be very interested to know if something similar happened with

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-10 Thread Owen DeLong
On Dec 10, 2009, at 4:56 PM, Michael Loftis wrote: --On Wednesday, December 02, 2009 6:23 PM -0800 Mehmet Akcin meh...@akcin.net wrote: Would you consider Juniper SSG5 as a Consumer Grade router? They do IPv6 and they are pretty good in general, and cheap as well. Not as usable in

Looking for MIX/NOTA members

2009-12-10 Thread Tuc
Hi, I know this is NAnog (Which NOTA may qualify for being in Miami) but I'm in need of help for MIX too. I'm involved with a client that had their range advertised by another AS. We were told by all parties involved that it has stopped, but I still seem to be seeing it on RIPE's MIX

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-10 Thread Chris Adams
Once upon a time, Owen DeLong o...@delong.com said: UPnP is a bad idea that (fortunately) doesn't apply to IPv6 anyway. You don't need UPnP if you'r not doing NAT. You need UPnP for a stateful firewall, whether it is mangling packets with NAT or not. I have an Xbox 360 behind an SSG-5 with

Re: Qwest mail admin contact?

2009-12-10 Thread Suresh Ramasubramanian
Related to any of these? http://www.spamhaus.org/sbl/listings.lasso?isp=data102.com Or maybe this - http://www.spamhaus.org/sbl/sbl.lasso?query=SBL51908 $ whois -h whois.cymru.com 128.168.0.0/16 AS | IP | AS Name 33302 | 128.168.0.0 | ONS-COS - Data 102, LLC Whatever

Re: news from Google

2009-12-10 Thread Ken Chase
topically related, it's actually news from Mozilla: http://www.computerworld.com/s/article/9142106/Mozilla_exec_suggests_Firefox_users_move_to_Bing_cites_Google_privacy_stance?source=rss_news from the horse's mouth, as it were. So, how bout that DNS. /kc -- Ken Chase - k...@heavycomputing.ca

Re: news from Google

2009-12-10 Thread Scott Weeks
--- m...@sizone.org wrote: From: Ken Chase m...@sizone.org topically related, it's actually news from Mozilla: http://www.computerworld.com/s/article/9142106/Mozilla_exec_suggests_Firefox_users_move_to_Bing_cites_Google_privacy_stance?source=rss_news from the horse's mouth, as it were. So, how