RE: L2 redundant VPN

2013-01-22 Thread Adam Vitkovsky
Run MPLS over these four boxes and build L2 pseudowires across Using link bundling and one router at each end has faster convergence and it's cheaper, you can do l2tpv3 if you can't have mpls adam

Re: Security reporting response handling [was: Suggestions for the future on your web site]

2013-01-22 Thread Matt Palmer
On Mon, Jan 21, 2013 at 11:23:16PM -0500, Jean-Francois Mezei wrote: This article may be of interest: http://arstechnica.com/security/2013/01/canadian-student-expelled-for-playing-security-white-hat/ Basically, a Montreal student, developping mobile software to interface with schools

Re: Security reporting response handling [was: Suggestions for the future on your web site]

2013-01-22 Thread Suresh Ramasubramanian
On Tuesday, January 22, 2013, Matt Palmer wrote: That article doesn't justify security review, it justifies not being a complete knob when someone reports a security hole in your site. There are so many site vulnerabilities these days that they're not news. What *is* news is when the

RE: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-22 Thread Jamie Bowden
From: valdis.kletni...@vt.edu [mailto:valdis.kletni...@vt.edu] On Fri, 18 Jan 2013 09:03:31 -0500, William Herrin said: On the technical side, enterprises have been doing large-scale NAT for more than a decade now without any doomsday consequences. CGN is not different. Corporate

Re: DNS resolver addresses for Sprint PCS/3G/4G

2013-01-22 Thread Robert Drake
On 1/16/2013 7:13 PM, Jay Ashworth wrote: I've noticed, for quite some time, that there seems to be a specific category of slow that I see in using apps on my HTC Supersonic/Sprint EVO, on both their 3G and 4G networks, and I wonder if it isn't because the defined resolvers are 8.8.4.4 and

Re: Security reporting response handling [was: Suggestions for the future on your web site]

2013-01-22 Thread Alain Hebert
Hi, (Mind the English, like my French, its awful) Going from, what seems to be, a non-service impacting XSS scan to expulsion is a bit of a trek. I'm sure there is a big chunk of story missing. Beside, a 20yo is rarely aware of the proper etiquette when it comes to scanning

Tw telecom noc/routing contact needed

2013-01-22 Thread Eric J Esslinger
I've been fighting with an issue with a Time Warner Telecom customer whose site is unreachable from our ip blocks, as well as a number of other ip blocks within my upstream's network according to the call I made to them. All I'm getting through listed arin contacts are apparantly unmonitored

RE: Tw telecom noc/routing contact needed

2013-01-22 Thread Eric J Esslinger
Someone from Time warner has gotten in contact with me, thanks. __ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 -Original Message- From: Eric J Esslinger Sent: Tuesday, January 22,

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-22 Thread Valdis . Kletnieks
On Mon, 21 Jan 2013 23:23:16 -0500, Jean-Francois Mezei said: This article may be of interest: http://arstechnica.com/security/2013/01/canadian-student-expelled-for-playing-security-white-hat/ Basically, a Montreal student, developping mobile software to interface with schools system found

RE: CGN fixed/hashed nat question

2013-01-22 Thread Dan Wing
-Original Message- From: Eric Oosting [mailto:eric.oost...@gmail.com] Sent: Monday, January 21, 2013 9:06 AM To: NANOG Subject: CGN fixed/hashed nat question Let me start out by saying I'm allergic to CGN, but I got to ask the question: Some of the CGN providers are coming out

Re: CGN fixed/hashed nat question

2013-01-22 Thread Dobbins, Roland
On Jan 23, 2013, at 4:52 AM, Dan Wing wrote: If using the CGN configuration, then no logging event needs to be generated. Behavioral/statistical telemetry is very important for security, traffic engineering/capacity planning, and troubleshooting purposes. The overwhelming need for it is