Re: Does anybody out there use Authentication Header (AH)?

2012-01-02 Thread TR Shaw
As far as real world examples, I know of none that use AH only. All the operational uses I have seen in use are tunnels. I would guess that if there are any it would be because some minimally technical COI rep thought that by using it it would provide some minimalist support of their

Ethernet From China to Singapor or Hong Kong ?

2012-01-02 Thread Olivier CALVANO
Hi anyone have contact of a operator (CHina Telecom ? CPC ?) that can provide L2 Link from China to Singapor or if not direct link, China to Hong Kong. Thanks Olivier

Re: Hotmail / MSN blacklisting policies.

2012-01-02 Thread Rich Kulawiec
First, this should probably be on mailop instead of here. Second, given the unceasing torrent of spam emitted by Hotmail/MSN on a systemic, chronic basis, it's ironic that they'd block *anyone*. ---rsk

Re: Ethernet From China to Singapor or Hong Kong ?

2012-01-02 Thread ポール・ロラン
Hello, On Mon, 2 Jan 2012 14:30:47 +0100 Olivier CALVANO o.calv...@gmail.com wrote: anyone have contact of a operator (CHina Telecom ? CPC ?) that can provide L2 Link from China to Singapor or if not direct link, China to Hong Kong. PCCW ? Paul -- TelcoTV Awards 2011 - Witbe winner in

Re: Ethernet From China to Singapor or Hong Kong ?

2012-01-02 Thread Leigh Porter
I'd second PCCW. I have contacts there if you drop me a mail off list. -- Leigh Porter UKBroadband PCCW... On 2 Jan 2012, at 14:08, Paul Rolland r...@witbe.net wrote: Hello, On Mon, 2 Jan 2012 14:30:47 +0100 Olivier CALVANO o.calv...@gmail.com wrote: anyone have contact of a

Re: Ethernet From China to Singapor or Hong Kong ?

2012-01-02 Thread Chris McDonald
Third and I also work there :) On Monday, January 2, 2012, Leigh Porter leigh.por...@ukbroadband.com wrote: I'd second PCCW. I have contacts there if you drop me a mail off list. -- Leigh Porter UKBroadband PCCW... On 2 Jan 2012, at 14:08, Paul Rolland r...@witbe.net wrote: Hello,

Re: AD and enforced password policies

2012-01-02 Thread Robert Luethje
You would set those in users section of AD. AD can be very quirky when it wants to. Robert - Original Message - From: Jones, Barry bejo...@semprautilities.com To: Nanog@nanog.org Sent: Monday, January 02, 2012 3:27 PM Subject: AD and enforced password policies Hello all. Happy New

Re: AD and enforced password policies

2012-01-02 Thread Jimmy Hess
On Mon, Jan 2, 2012 at 2:27 PM, Jones, Barry bejo...@semprautilities.comwrote: I have a requirement to enforce password policies on AD (a tacacs and windows domain). I don't have a great deal of Windows AD knowledge - so a newbie ;-) this is a little off topic, but I thought I'd ask... This

RE: AD and enforced password policies

2012-01-02 Thread Blake T. Pfankuch
I would very much agree with this as far as the user annoyance side. We have had customers enforce 12 characters and complexity for all users, and you end up with sticky notes under the keyboard or other objects on the desk. I would also make sure to set a reasonable timeout to force a

Re: AD and enforced password policies

2012-01-02 Thread Gary Buhrmaster
On Mon, Jan 2, 2012 at 22:32, Jimmy Hess mysi...@gmail.com wrote: The sole root cause for easily guessable passwords is not lack of technical restrictions. It's also: lazy or limited memory humans who need passwords that they can remember. Firstname1234!    is very easy to guess, and

Re: AD and enforced password policies

2012-01-02 Thread Steven Bellovin
On Jan 2, 2012, at 7:05 PM, Gary Buhrmaster wrote: On Mon, Jan 2, 2012 at 22:32, Jimmy Hess mysi...@gmail.com wrote: The sole root cause for easily guessable passwords is not lack of technical restrictions. It's also: lazy or limited memory humans who need passwords that they can

Re: AD and enforced password policies

2012-01-02 Thread Lyndon Nerenberg
I just went through some calculations for a (government) site that has the following rules: [...] Under the plausible assumption that very many people will start with a string of digits, continue with a string of lower-case letters to reach seven characters, and then add a period, there are

Re: AD and enforced password policies

2012-01-02 Thread Steven Bellovin
On Jan 2, 2012, at 9:10 PM, Lyndon Nerenberg wrote: I just went through some calculations for a (government) site that has the following rules: [...] Under the plausible assumption that very many people will start with a string of digits, continue with a string of lower-case letters to

Re: AD and enforced password policies

2012-01-02 Thread Jimmy Hess
On Mon, Jan 2, 2012 at 8:16 PM, Steven Bellovin s...@cs.columbia.edu wrote: On Jan 2, 2012, at 9:10 PM, Lyndon Nerenberg wrote: OK -- let's let the set of punctuation be .,; and allow seven choices for where it goes. That increases the work factor by 21 -- still not that large a space for