HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
on the subject now that I look. Were these folks mistaken or am I missing something? Any help would be appreciated. -- -Hammer- I was a normal American nerd -Jack Herer

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
And two seconds after I hit send I find an updated article http://www.cisco.com/en/US/docs/ios-xml/ios/ipapp_fhrp/configuration/xe-3s/fhp-vrrp.html facepalm If you have more information I still welcome it. I'm going to go sit in the corner now... -Hammer- I was a normal American nerd

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
Correction. Still looking for something IPv6 specific. -Hammer- I was a normal American nerd -Jack Herer On 8/20/2012 9:39 AM, -Hammer- wrote: And two seconds after I hit send I find an updated article http://www.cisco.com/en/US/docs/ios-xml/ios/ipapp_fhrp/configuration/xe-3s/fhp

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
is parity such a difficult task? -Hammer- I was a normal American nerd -Jack Herer On 8/20/2012 9:51 AM, Nick Hilliard wrote: On 20/08/2012 15:41, -Hammer- wrote: Correction. Still looking for something IPv6 specific. Last time I looked, the support looked like this: XR: v4: HSRPv1, VRRP

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
feet. I'll have to stick with HSRP and LL addressing. If anyone knows different please let me know. Thanks PS: Yes, I still have some ISL. :( On legacy environments only though. I promise. Nothing new in years... -Hammer- I was a normal American nerd -Jack Herer On 8/20/2012 3:31 PM, Owen

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
That's good to know. Seriously. I can point that out to the Cisco guys... :) -Hammer- I was a normal American nerd -Jack Herer On 8/20/2012 3:10 PM, sth...@nethelp.no wrote: Yeah I see the disconnect. I'm assuming that what I see is what I get. Which means I'm going to stick with HSRP

Re: NAT66 was Re: using reserved IPv6 space

2012-07-17 Thread -Hammer-
I have almost one hundred FWs. Some physical. Some virtual. Various vendors. Your point is spot on. -Hammer- I was a normal American nerd -Jack Herer On 7/16/2012 8:55 PM, Lee wrote: On 7/16/12, Owen DeLong o...@delong.com wrote: Why would you want NAT66? ICK!!! One of the best benefits

Re: using reserved IPv6 space

2012-07-17 Thread -Hammer-
-Hammer- I was a normal American nerd -Jack Herer On 7/16/2012 11:18 PM, Jimmy Hess wrote: On 7/16/12, -Hammer- bhmc...@gmail.com wrote: hurdles. Example? HSRP IPv6 global addressing on Cisco ASR platform. If HSRP is a legacy proprietary protocol; try VRRP. Stateless autoconfig

Re: using reserved IPv6 space

2012-07-17 Thread -Hammer-
There's are routing and switching people and there are security people. And they look at things different. That, IMHO, is the root of the emotion on this thread. No one is actually wrong except me for stirring the pot as the OP. :) -Hammer- I was a normal American nerd -Jack Herer On 7/17

Re: using reserved IPv6 space

2012-07-16 Thread -Hammer-
space with the WAN design team. What I'm trying to say is that Roberts comments are spot on. It is a very different way of thinking on a small scale and a large scale and you can't take your IPv4 logic and apply it. I've tried and it's just slowing me down. -Hammer- I was a normal American nerd

Re: using reserved IPv6 space

2012-07-16 Thread -Hammer-
Inline - -Hammer- I was a normal American nerd -Jack Herer 1) (This one is currently a personal issue) I am still building up a true IPv6 skillset. Yes, I understand it for the most part but now is the time to apply it. Frankly, IMHO, the best way to build up a truly useful IPv6 skill set

Re: using reserved IPv6 space

2012-07-16 Thread -Hammer-
I agree. Most are naive. Not all. -Hammer- I was a normal American nerd -Jack Herer On 7/16/2012 11:34 AM, valdis.kletni...@vt.edu wrote: On Mon, 16 Jul 2012 11:09:28 -0500, -Hammer- said: ---That is clearly a matter of opinion. NAT64 and NAT66 wouldn't be there if there weren't enough

Re: using reserved IPv6 space

2012-07-14 Thread -Hammer-
Guys, The whole purpose of this is that they do NOT need to be global. Security thru obscurity. It actually has a place in some worlds. Does that make sense? Or are such V4-centric approaches a bad thing in v6? On 7/13/12 8:41 PM, Brandon Ross br...@pobox.com wrote: On Fri, 13 Jul 2012, Owen

Re: using reserved IPv6 space

2012-07-14 Thread -Hammer-
bashes head against wall Thank you all. It's not the protocol that hurts. It's rethinking the culture/philosophy around it. -Hammer- On 7/14/12 3:20 PM, Owen DeLong o...@delong.com wrote: They're a bad thing in IPv6. The only place for security through obscurity IMHO is a small round

using reserved IPv6 space

2012-07-13 Thread -Hammer-
this than in an IPv4 scenario. I know, not apples to apples but for this question they are close enough. Unless there is something IPv6 specific that is influencing this -- -Hammer- I was a normal American nerd -Jack Herer

Re: using reserved IPv6 space

2012-07-13 Thread -Hammer-
Leo/Jeroen, Thank you both. That is the simple answer that I wasn't thinking of. I'm not as IPv6 savvy as I need to be (yet) so I haven't put all the pieces together when trying to look at the bigger picture. Thanks again. -Hammer- I was a normal American nerd -Jack Herer On 7/13/2012

Re: using reserved IPv6 space

2012-07-13 Thread -Hammer-
I think they would. I'm just a bit too new to this. Thanks. -Hammer- I was a normal American nerd -Jack Herer On 7/13/2012 10:05 AM, TJ wrote: On Fri, Jul 13, 2012 at 10:38 AM, -Hammer- bhmc...@gmail.com mailto:bhmc...@gmail.com wrote: OK. I'm pretty sure I'm gonna get some flak

Re: using reserved IPv6 space

2012-07-13 Thread -Hammer-
for Internal services. I'm finally getting to the point where I'm looking past the vastness of the numbers and just focusing on subnets and masks and subnetting and whatnot. -Hammer- I was a normal American nerd -Jack Herer On 7/13/2012 11:11 AM, Tom Cooper wrote: On Fri, Jul 13, 2012 at 11:05 AM

Re: LinkedIn password database compromised

2012-06-07 Thread -Hammer-
I gotta agree with Aaron here. What would be my motivation to trust an open and public infrastructure? With my business or personal keys? -Hammer- I was a normal American nerd -Jack Herer On 6/7/2012 2:37 PM, Aaron C. de Bruyn wrote: On Thu, Jun 7, 2012 at 12:24 PM, Owen DeLongo

Re: LinkedIn password database compromised

2012-06-07 Thread -Hammer-
Thank you for educating without insulting. Always professional Owen. It's appreciated. -Hammer- I was a normal American nerd -Jack Herer On 6/7/2012 3:18 PM, Owen DeLong wrote: A proper CA does not have your business or personal keys, they merely sign them and attest to the fact

Re: ISPs and full packet inspection

2012-05-24 Thread -Hammer-
You should be discussing this with inside counsel. Not NANOG. -Hammer- I was a normal American nerd -Jack Herer On 5/24/2012 7:50 AM, not common wrote: Hello, I am looking for some guidance on full packet inspection at the ISP level. Is there any regulations that prohibit or provide

Re: ISPs and full packet inspection

2012-05-24 Thread -Hammer-
by technology my advice would be to direct them to legal. You should be picking up a pattern here -Hammer- I was a normal American nerd -Jack Herer On 5/24/2012 8:13 AM, not common wrote: Thanks guys, I am looking for stuff to bring to my legal team (which is one guy, that can't spell IP

Re: ISPs and full packet inspection

2012-05-24 Thread -Hammer-
And if your legal can't figure it out that is exactly what outside counsel is for. -Hammer- I was a normal American nerd -Jack Herer On 5/24/2012 8:22 AM, -Hammer- wrote: The problem is that it is strictly a jurisdictional question. I'm not trying to throw it back at you. But I can't

Re: ISPs and full packet inspection

2012-05-24 Thread -Hammer-
Very nice Patrick -Hammer- I was a normal American nerd -Jack Herer On 5/24/2012 8:19 AM, Patrick Darden wrote: 0. General Reference http://en.wikipedia.org/wiki/Deep_packet_inspection#DPI_at_network.2FInternet_service_providers e.g. Lawful Intercept 1. network neutrality -- lots

Re: Squeezing IPs out of ARIN

2012-04-25 Thread -Hammer-
and whatnot so I could share more detailed information with them. -Hammer- I was a normal American nerd -Jack Herer On 4/25/2012 10:34 AM, Owen DeLong wrote: There is not a new policy added on to prevent hoarding. What is required is what has been required for several years. Utilization

Re: Squeezing IPs out of ARIN

2012-04-25 Thread -Hammer-
purchase/lease/rent/titlepawn/etc. We paid for and got a block of IPs. -Hammer- I was a normal American nerd -Jack Herer On 4/25/2012 11:13 AM, valdis.kletni...@vt.edu wrote: On Wed, 25 Apr 2012 10:54:39 -0500, -Hammer- said: I can say that I recently completed the purchase of a large IPv6

Re: Squeezing IPs out of ARIN

2012-04-25 Thread -Hammer-
Sorry everyone. Bad choice of words. I simply meant they have their money and we have our allocation. Stand down. Move along. Nothing to see here. -Hammer- I was a normal American nerd -Jack Herer On 4/25/2012 11:55 AM, Owen DeLong wrote: No, you didn't. You may have completed

Re: Squeezing IPs out of ARIN

2012-04-25 Thread -Hammer-
Killing me softly Owen -Hammer- I was a normal American nerd -Jack Herer On 4/25/2012 1:15 PM, Owen DeLong wrote: Nope... You paid for and received registration services for a block of IP Addresses. Anyone can use those integers for many purposes, but, only you are registered to use

Re: Looking for some diversity in Alabama that does not involve ATT Fiber

2012-03-29 Thread -Hammer-
Joe, We have a wide variety of both Internet and MPLS (WAN) circuits in Alabama from ATT and ITC/Deltacom (Now Earthlink Business). They both have a significant footprint in Alabama. Check with Earthlink Business. -Hammer- I was a normal American nerd -Jack Herer On 3/21/2012 10:44 AM

Re: Whitelist of update servers

2012-03-12 Thread -Hammer-
Can you be a little more specific? Otherwise I think your answer would be The Internet -Hammer- I was a normal American nerd -Jack Herer On 3/12/2012 3:05 PM, Maverick wrote: Is there a whitelist that applications have to talk to in order to update themselves?

Re: root zone stats

2012-03-12 Thread -Hammer-
Shouldn't eh be Canada and not Western Sahara? -Hammer- I was a normal American nerd -Jack Herer On 3/12/2012 3:10 PM, Marco Davids (Prive) wrote: On Mon, 12 Mar 2012, Marco Davids (Prive) wrote: Some nice info here, too: http://bgp.he.net/report/dns .cw seems to be missing. Oops

Re: Clueful road runner contact?

2012-03-05 Thread -Hammer-
Wile E Coyote knows all about him. Sorry, couldn't resist. -Hammer- I was a normal American nerd -Jack Herer On 3/5/2012 3:26 PM, goe...@anime.net wrote: Anyone have a clueful road runner contact? -Dan

Re: Cisco CAT6500 IOS Simulator

2012-02-23 Thread -Hammer-
I'm sure that virtualizing the sup would be possible. But having to come up with all the line cards would be a nightmare. I'd love for someone Internal to tell me I'm wrong but until we can get a 3560 or a 3750X on Dynamips I wouldn't push for a 6500 or a Nexus. -Hammer- I was a normal

Re: Cisco CAT6500 IOS Simulator

2012-02-22 Thread -Hammer-
NO. There is no method. Go to Ebay and buy one. Sorry. Or if you are a big enough customer you can ask Cisco to mock up your solution in one of their labs. -Hammer- I was a normal American nerd -Jack Herer On 2/22/2012 9:48 AM, Hank Nussbacher wrote: On Wed, 22 Feb 2012, Carlos Asensio

Re: WW: Colo Vending Machine

2012-02-21 Thread -Hammer-
Can someone give me a link or part number on the Raritan site? I see LCD consoles but they are the generic slide out versions. Looking for the netbook concept referenced below -Hammer- I was a normal American nerd -Jack Herer On 2/21/2012 3:51 AM, Owen DeLong wrote: +1 for Raritan

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
This list is awesome. Is anyone consolidating it? I'm still catching up on the thread -Hammer- I was a normal American nerd -Jack Herer On 2/17/2012 1:05 AM, Carsten Bormann wrote: On Feb 17, 2012, at 07:50, Paul Graydon wrote: what OSI means Yet another common misconception popping

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Let me simplify that. If you are over 35 you know how to troubleshoot. Yes, I'm going to get flamed. Yes, there are exceptions in both directions. -Hammer- I was a normal American nerd -Jack Herer On 2/17/2012 8:29 AM, Leo Bicknell wrote: In a message written on Thu, Feb 16, 2012 at 08:50

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Well said. An American tragedy. -Hammer- I was a normal American nerd -Jack Herer On 2/17/2012 9:01 AM, Brandt, Ralph wrote: Hammer, you are at least 75% right. You will get flamed and in most cases, the 35 year age is close to right. But then in Programming where I spent most of my

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
. They have a unique understanding of the layers. I had that understanding in my 20s. The technology is so complicated these days that many folks miss those fundamentals and go right into VSS on the 6500s or MPLS over Juniper. In the end, it all comes in time. -Hammer- I was a normal American

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
If you do, please share it. Thank you. -Hammer- I was a normal American nerd -Jack Herer On 2/17/2012 9:36 AM, Jared Mauch wrote: On Feb 17, 2012, at 9:29 AM, -Hammer- wrote: This list is awesome. Is anyone consolidating it? I'm still catching up on the thread I was thinking

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
): telnet 1.2.3.4 1433 What? It answered? So the SQL service is running? Then it ain't the network dude So many times people don't pick up on that. But when they do, it's like a light bulb went off and they see the world differently. Like subnetting -Hammer- I was a normal American nerd

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Well put and great example Owen. -Hammer- I was a normal American nerd -Jack Herer On 2/17/2012 12:59 PM, Owen DeLong wrote: This reminds me of what I think is the biggest root misconception of the 20th and 21st centuries: Rapid step-by-step training can replace conceptual education

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Still buzzing over that cheap auto insurance eh? :) Wait till people stop carding you. -Hammer- I was a normal American nerd -Jack Herer On 2/17/2012 1:42 PM, Ray Soucy wrote: As someone who was born in 1984 I respectfully disagree. ;-) On Fri, Feb 17, 2012 at 9:52 AM, -Hammer-bhmc

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
I couldn't argue with any of that. Again, there are exceptions on either side. -Hammer- I was a normal American nerd -Jack Herer On 2/17/2012 2:40 PM, Ray Soucy wrote: Maybe ;-) I don't think it's an age thing, though. The number of people who have a real interest in technology, and how

Re: Common operational misconceptions

2012-02-15 Thread -Hammer-
Switching VS Bridging Collision Domain VS Broadcast Domain L2 in general is the layer that the new folks often misunderstand. I once had someone ask me what a hub was. That pretty much told me how old I was -Hammer- I was a normal American nerd -Jack Herer On 2/15/2012 2:47 PM, John

Re: Common operational misconceptions

2012-02-15 Thread -Hammer-
operate. They don't understand header manipulation vs payload. -Hammer- I was a normal American nerd -Jack Herer On 2/15/2012 3:52 PM, Dan White wrote: Packet loss at hop X in traceroute/mtr does not necessarily point to a problem at hop X.

Re: Dear RIPE: Please don't encourage phishing

2012-02-10 Thread -Hammer-
hijacked. -Hammer- I was a normal American nerd -Jack Herer On 2/10/2012 11:51 AM, valdis.kletni...@vt.edu wrote: On Fri, 10 Feb 2012 09:37:01 PST, Leo Bicknell said: We know how to sign and encrypt web sites. We know how to sign and encrypt e-mail. We even know how to compare keys

IPv6 dual stacking and route tables

2012-02-03 Thread -Hammer-
, I'm an end customer. Not a carrier. So my concern is (A) my Internet facing applications and (B) my users who eventually will surf IPv6. Any guidance would be appreciated. Thanks. -Hammer- I was a normal American nerd -Jack Herer

Re: IPv6 dual stacking and route tables

2012-02-03 Thread -Hammer-
I'm doing it. A lot of kinks to work out this year. -Hammer- I was a normal American nerd -Jack Herer On 2/3/2012 2:28 PM, Jeroen Massar wrote: On 2012-02-03 21:10 , -Hammer- wrote: So, we are preparing to add IPv6 to our multi-homed (separate routers and carriers with IBGP) multi-site

Re: IPv6 dual stacking and route tables

2012-02-03 Thread -Hammer-
OK. Looking forward to getting the lab up. Since I can handle the volume I'll take both tables. At least in the lab. Looking forward to doing some experiments with DNS just to see what all the fuss is about. Looks like I'll need to order a Mac for the lab. No harm there. :) -Hammer- I

Re: Console Server Recommendation

2012-01-30 Thread -Hammer-
Avocent Cyclades ACS. Enterprise class. http://www.avocent.com/Products/Category/Serial_Appliances.aspx -Hammer- I was a normal American nerd -Jack Herer On 1/30/2012 10:08 AM, Ray Soucy wrote: What are people using for console servers these days? We've historically used retired routers

Re: XBOX 720: possible digital download mass service.

2012-01-27 Thread -Hammer-
Here's your baseline: Sony Vita. They already tossed the UMD out with the PSP-GO and that failed miserably. Now they are trying again to go to digital only with the Vita. It's not the scale of PS3 or XBOX360 but it may be a good way to gauge the potential success of the concept. -Hammer- I

Re: XBOX 720: possible digital download mass service.

2012-01-27 Thread -Hammer-
Now we are venturing OT but I thought the format was proprietary but you still had to get the content on the memory via the glorious Internet? Are you saying I can go to Gamestop and buy a stick with whatever game I'm looking for? Is that the plan? -Hammer- I was a normal American nerd -Jack

Re: US DOJ victim letter

2012-01-20 Thread -Hammer-
On a less serious note, did anyone notice the numbers on the fbi.gov link? I'm pretty sure they are implying those are IP addresses. 123.456.789 and 987.654.321. Must be the same folks that do the Nexus documentation for Cisco. -Hammer- I was a normal American nerd -Jack Herer On 1/19

Re: VPC=S/MLT?

2012-01-18 Thread -Hammer-
Found them all on the same page. Not exactly what I was looking for but it's worth sharing. http://www.cisco.com/en/US/products/ps9670/products_implementation_design_guides_list.html -Hammer- I was a normal American nerd -Jack Herer On 1/14/2012 7:10 PM, Charles Spurgeon wrote: On Fri

Re: VPC=S/MLT?

2012-01-18 Thread -Hammer-
Nice link. Thanks Joshua. -Hammer- I was a normal American nerd -Jack Herer On 1/18/2012 11:57 AM, joshua sahala wrote: vpc has a long list of unclear and/or seemingly contradictory caveats (spread across multiple cisco docs/webpages). when it doesn't work (as expected), it can

Re: VPC=S/MLT?

2012-01-17 Thread -Hammer-
Thanks Charles. It's a start. -Hammer- I was a normal American nerd -Jack Herer On 1/14/2012 7:10 PM, Charles Spurgeon wrote: On Fri, Jan 13, 2012 at 03:05:45PM -0600, -Hammer- wrote: The first link references chapter 3. I found chapter 5 as well but I can't find the full index. Do

VPC=S/MLT?

2012-01-13 Thread -Hammer-
). Is there something fancy here that I'm missing in the docs or am I wrong in equating the two? Isn't VPC just S/MLT? It's just that Cisco has shown up 8 years late and is trying to hype it up to compensate? -- -Hammer- I was a normal American nerd -Jack Herer

Re: VPC=S/MLT?

2012-01-13 Thread -Hammer-
. If anyone has some really deep docs on VPC I'd appreciate the links. Thanks. -Hammer- I was a normal American nerd -Jack Herer On 1/13/2012 1:31 PM, Joel jaeggli wrote: On 1/13/12 11:19 , -Hammer- wrote: OK, So I'm doing a lot of reading lately on Nexus as we are about to get into the 7k

Re: VPC=S/MLT?

2012-01-13 Thread -Hammer-
Thanks Charles. Good stuff. -Hammer- I was a normal American nerd -Jack Herer On 1/13/2012 2:10 PM, Charles Spurgeon wrote: On Fri, Jan 13, 2012 at 01:38:26PM -0600, -Hammer- wrote: Wow. A fellow greybeard. OK. That's what I needed to know. I'm trying to understand if VPC has any more

Re: VPC=S/MLT?

2012-01-13 Thread -Hammer-
Charles, The first link references chapter 3. I found chapter 5 as well but I can't find the full index. Do you have that link by any chance? -Hammer- I was a normal American nerd -Jack Herer On 1/13/2012 2:10 PM, Charles Spurgeon wrote: On Fri, Jan 13, 2012 at 01:38:26PM -0600

Re: So... my colo was just bought.

2012-01-10 Thread -Hammer-
Jay, Do you know if they'll be keeping/maintaining your colo? Or is it too early for that kind of information? -Hammer- I was a normal American nerd -Jack Herer On 1/10/2012 9:58 AM, Jay Ashworth wrote: By Knology. Should I be scared? My experiences with Knology have been fairly

Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
. but Dynamips or something similar? If the software is out there I have the hardware to support it. Based on some cheap googling I'm thinking the answer will be no. Although I did find Greg Ferros public outcry for network emulators from last year -- -Hammer- I was a normal American nerd

Re: software wanted

2011-12-20 Thread -Hammer-
So you want a dynamic real time network discovery / topology mapping? I think Whatsup gold tried this years ago and it could even export to Visio. But not sure lately. -Hammer- I was a normal American nerd -Jack Herer On 12/20/2011 08:37 AM, Gregory Edigarov wrote: On Tue, 20 Dec 2011

Re: Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
Bah. Look like I need more of an education on Nexus in general. Thanks for the easy pointer. -Hammer- I was a normal American nerd -Jack Herer On 12/20/2011 11:02 AM, Nick Hilliard wrote: On 20/12/2011 13:55, -Hammer- wrote: I know we can't throw NX code on Dynamips but I figured I

Re: Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
way to emulate the [5,7]K anytime soon. Thank you all for your comments. -Hammer- I was a normal American nerd -Jack Herer On 12/20/2011 12:03 PM, Tim Stevenson wrote: You couldn't use Titanium to judge/discuss the nexus family as a whole either. Aside from 1KV, all the nexus products use

Re: Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
Doesn't Titanium achieve this for you? I know. It's Internal. But it simulates the 7k. Or am I getting it backwards? My point is that if Cisco already simulates it Internally it's only a matter of time before someone ports something -Hammer- I was a normal American nerd -Jack Herer

Re: Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
. I don't see how it can hurt Cisco to have people wanting to run their stuff for learning/training/validation purposes in a virtual environment. But that is a whole different thread. -Hammer- I was a normal American nerd -Jack Herer On 12/20/2011 12:31 PM, Tim Stevenson wrote: At 10:18

Re: BGP and Firewalls...

2011-12-08 Thread -Hammer-
incorrectly. And our wonderful federal auditors expect it and call it the same thing. -Hammer- I was a normal American nerd -Jack Herer On 12/07/2011 09:43 PM, Dobbins, Roland wrote: On Dec 8, 2011, at 1:36 AM, Leo Bicknell wrote: I don't think you're looking at defense in depth

Re: Internet Edge and Defense in Depth

2011-12-06 Thread -Hammer-
I personally have not seen it done in large environments. Hardware isn't there yet. I've seen it done in small business environments. Not a fan of the idea. -Hammer- I was a normal American nerd -Jack Herer On 12/06/2011 03:16 PM, Holmes,David A wrote: Some firewall vendors are proposing

Re: Recent DNS attacks from China?

2011-11-30 Thread -Hammer-
There was a new BIND vulnerability announced... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4313 -Hammer- I was a normal American nerd -Jack Herer On 11/30/2011 10:59 AM, rob.vercoute...@kpn.com wrote: Hello Leland, Yes we do see the same behavior! regards, Rob Vercouteren

Re: Recent DNS attacks from China?

2011-11-30 Thread -Hammer-
Just offering it up. It's not a 0day or anything but it is recently published. I am not receiving the DoS so I haven't had a chance to observe the traffic. -Hammer- I was a normal American nerd -Jack Herer On 11/30/2011 11:40 AM, David Conrad wrote: On Nov 30, 2011, at 9:13 AM, -Hammer

Re: First real-world SCADA attack in US

2011-11-21 Thread -Hammer-
LOL. I see what you did there. -Hammer- I was a normal American nerd -Jack Herer On 11/21/2011 01:17 PM, Arturo Servin wrote: I wonder if they are using private IP addresses. -as On 21 Nov 2011, at 13:32, Jay Ashworth wrote: On an Illinois water utility: http

Re: Arguing against using public IP space

2011-11-16 Thread -Hammer-
used against bad guys w/o question. While I agree that this is an extra layer of complexity, the focus is to make in manageable. I'm not saying you are flat out wrong Owen. I am saying that it's all a matter of your viewpoint. -Hammer- I was a normal American nerd -Jack Herer On 11/16/2011

Re: Arguing against using public IP space

2011-11-16 Thread -Hammer-
Well argued Owen. I can see both sides. -Hammer- I was a normal American nerd -Jack Herer On 11/16/2011 02:44 PM, Owen DeLong wrote: On Nov 16, 2011, at 9:13 AM, -Hammer- wrote: NAT neither provides nor contributes to security. NAT detracts from security by destroying audit trails

Re: Arguing against using public IP space

2011-11-15 Thread -Hammer-
. They filter garbage. You focus your IDS/IPS on what the FW is allowing. It's more than a screen door. But yes, it's LESS than a true vault door. It's all about mitigating the risk. You'll never be 100% full proof. -Hammer- I was a normal American nerd -Jack Herer On 11/15/2011 08:56 AM, William

Re: Ok; let's have the Does DNAT contribute to Security argument one more time...

2011-11-15 Thread -Hammer-
to much and definitely keeps us in check from human errors. -Hammer- I was a normal American nerd -Jack Herer On 11/15/2011 09:00 AM, Owen DeLong wrote: On the other hand, since a firewall's job is to stop packets you don't want, if it stops doing it's just as a firewall, it's likely to keep

Re: Arguing against using public IP space

2011-11-15 Thread -Hammer-
I see your side Cameron. -Hammer- I was a normal American nerd -Jack Herer On 11/15/2011 09:20 AM, Cameron Byrne wrote: On Nov 15, 2011 7:09 AM, -Hammer- bhmc...@gmail.com mailto:bhmc...@gmail.com wrote: Guys, Everyone is complaining about whether a FW serves its purpose

Re: Ok; let's have the Does DNAT contribute to Security argument one more time...

2011-11-14 Thread -Hammer-
6to6 and 4to6/6to4 options and we may consider it but given the push in the IPv6 community for native addressing I really am hesitant to add NAT functionality given that no one really knows what the IPv6 future holds. -Hammer- I was a normal American nerd -Jack Herer On 11/14/2011 02:55 PM

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
not saying it's fair. It's just how the world works. For that reason there are some areas where open source is smart while there are other areas (a firewall you depend on to protect you) where open source may put you and your employer at risk. You have to consider that. Or... Some of us do. -Hammer- I

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
. -Hammer- I was a normal American nerd -Jack Herer On 11/10/2011 09:14 AM, Richard Kulawiec wrote: On Thu, Nov 10, 2011 at 08:52:22AM -0600, -Hammer- wrote: The other high cost of free that people sometimes overlook is liability. Please point to an instance (case citation, please

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
it. But it does happen and it is out there. I was just pointing it out. Take it for what you want but arguing it is pointless. It's out there for some of us. -Hammer- I was a normal American nerd -Jack Herer On 11/10/2011 10:04 AM, Peter Kristolaitis wrote: Your hypothetical scenario assumes

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
WOW. You really are naive -Hammer- I was a normal American nerd -Jack Herer On 11/10/2011 12:12 PM, Richard Kulawiec wrote: On Thu, Nov 10, 2011 at 09:39:29AM -0600, -Hammer- wrote: OK. Right off the bat you know I can't and won't. Right. I know you can't and won't. I

Re: Firewalls - Ease of Litigation and Subrogation

2011-11-10 Thread -Hammer-
You guys are hilarious. OK. I give up. It never happens. I'll leave this thread alone. -Hammer- I was a normal American nerd -Jack Herer On 11/10/2011 12:19 PM, Jay Ashworth wrote: - Original Message - From: Richard Kulawiecr...@gsp.org Right. I know you can't

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
published. Again, I'll try and leave this thread alone. -Hammer- I was a normal American nerd -Jack Herer On 11/10/2011 12:24 PM, valdis.kletni...@vt.edu wrote: On Thu, 10 Nov 2011 12:12:21 CST, -Hammer- said: WOW. You really are naive I think Rich has been around long enough

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
in the future? When millions of dollars are at stake? You don't have to like it. But you should be a little more objective. I am not speaking of specific cases I'm involved in. I just googled a few things and found some results -Hammer- I was a normal American nerd -Jack Herer On 11/10/2011

Re: Firewalls - Ease of Use and Maintenance?

2011-11-09 Thread -Hammer-
of the capabilities of the product? Fortinet. And the list goes on and on and on -Hammer- I was a normal American nerd -Jack Herer On 11/09/2011 08:00 AM, Joe Greco wrote: On Wed, Nov 09, 2011 at 03:32:45PM +0300, Alex Nderitu wrote: An important feature lacking for now as far as I know

Re: Firewalls - Ease of Use and Maintenance?

2011-11-09 Thread -Hammer-
do it well. -Hammer- I was a normal American nerd -Jack Herer On 11/09/2011 08:52 AM, -Hammer- wrote: I think that firewall/censorship is all semantics. The real question is the scale of the environment and the culture of your shop and areas of ownership. I work in a large enterprise

Re: Firewalls - Ease of Use and Maintenance?

2011-11-08 Thread -Hammer-
You've worked with all the big dogs. What are you looking for? Alternative options? -Hammer- I was a normal American nerd -Jack Herer On 11/08/2011 05:06 PM, Jones, Barry wrote: Hello all. I am potentially looking at firewall products and wanted suggestions as to the easiest firewalls

Re: General Internet Instability

2011-11-07 Thread -Hammer-
applications but it's not clear on the underlying reason. I'm giving cautious updates to management because even though it's obvious something is going on I don't have anything official except random email threads. Looking for more insight before misinforming management. -Hammer- I was a normal

Re: General Internet Instability

2011-11-07 Thread -Hammer-
So the file size was 30% higher implies that the number of updates is larger and therefore there is instability? I see the logic but if you scroll thru that page (the whole month of November) there are tons of 1M files. Trying to see what is different about today -Hammer- I was a normal

Re: General Internet Instability

2011-11-07 Thread -Hammer-
month of November reflects instability where I see transitions from 600k to 1M between updates. Yet we didn't experience the same negative customer experience for those. So how do you see the difference with todays events? Digging into files now. -Hammer- I was a normal American nerd -Jack Herer

Re: real data [Re: General Internet Instability]

2011-11-07 Thread -Hammer-
Jared, This is good stuff and I'm understanding how you interpret the data. So this confirms what we are seeing. How do we take this towards a root cause? Mash it with the Juniper threads and see where it goes? -Hammer- I was a normal American nerd -Jack Herer On 11/07/2011 11:01 AM

Re: TATA problems?

2011-11-07 Thread -Hammer-
release vulnerabilities are fixed as per our End of Engineering and End of Life support policies. 31. 32. Workarounds 33. No known workaround exists for this issue. -Hammer- I was a normal American nerd -Jack Herer On 11/07/2011 04:09 PM, Leigh Porter wrote: Any thoughts on just how wide read

Re: Outgoing SMTP Servers

2011-10-28 Thread -Hammer-
Girls, You are all pretty. End the thread. Seriously. -Hammer- I was a normal American nerd -Jack Herer On 10/28/2011 01:59 PM, William Herrin wrote: On Fri, Oct 28, 2011 at 1:34 AM, Joel jaegglijoe...@bogus.com wrote: Email as facility is a public good whether it constitutes

Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread -Hammer-
not buying it either. -Hammer- I was a normal American nerd -Jack Herer On 10/12/2011 09:47 AM, andrew.wallace wrote: Guys the outage has moved to U.S and Canada, I think we need to look at this perhaps being sabotage. http://news.cnet.com/8301-30686_3-20119163-266/blackberry-service-issues

Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread -Hammer-
could have tested better -Hammer- I was a normal American nerd -Jack Herer On 10/12/2011 10:58 AM, Chris Campbell wrote: I think it raises serious questions about RIM's DR strategy if a DB corruption or switch failure or whatever can cause this much outage. 'Surely' RIM have an second

Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread -Hammer-
Again. I know those stories are out there. I'm blessed with a lower profile or higher karma. One of the two. digging thru cube to fine wood to knock on -Hammer- I was a normal American nerd -Jack Herer On 10/12/2011 11:53 AM, Mike Gatti wrote: I have and totally get the point

Re: Telus mail server admin

2011-10-07 Thread -Hammer-
Girls. You're both pretty. Really. Move on. -Hammer- I was a normal American nerd -Jack Herer On 10/07/2011 10:40 AM, Paul Graydon wrote: On 10/7/2011 5:30 AM, Joel jaeggli wrote: On 10/7/11 08:26 , Paul Graydon wrote: On 10/6/2011 8:02 PM, John Levine wrote: DISCLAIMER:... Wow. I

Re: Point to MultiPoint VPN w/qos

2011-09-06 Thread -Hammer-
CheckPoint Series 80 has 10 ports. I think there is a Juniper option as well. -Hammer- I was a normal American nerd -Jack Herer On 09/06/2011 09:36 AM, Seth Mos wrote: On 6-9-2011 15:49, Positively Optimistic wrote: Greetings Does anyone have a suggestion for a single piece of hardware

  1   2   >