RE: blogs.cisco.com not available via IPv6

2013-12-05 Thread John Stuppi (jstuppi)
Thanks folks. Blogs.cisco.com should be back up now for both IPv4 and v6. Thanks, John We can't help everyone, but everyone can help someone. John Stuppi, CISSP Technical Leader Strategic Security Research jstu...@cisco.com Phone: +1 732 516 5994 Mobile: 732 319 3886 CCIE, Security -

RE: BGP neighbor/configuration testing

2013-11-25 Thread John Stuppi (jstuppi)
Here are a couple of examples of syslog messages that could be seen depending on the configuration of the MD5 passwords on each side: Troubleshooting Examples If BGP neighbor authentication is incorrectly configured (for example, it is either configured on only one peer or the MD5 shared

RE: OSPF Vulnerability - Owning the Routing Table

2013-08-02 Thread John Stuppi (jstuppi)
Yes, these advisories (from both Cisco and Juniper), covering CVE-2013-0149, are both related to the announcement yesterday (1-Aug) at BlackHat regarding the OSPF LSA Manipulation vulnerability. Thanks, John “Optimism is the faith that leads to achievement. Nothing can be done without hope

RE: 109/8 - not a BOGON

2009-10-09 Thread John Stuppi (jstuppi)
The 109/8 range was removed from our ISP Ingress Prefix Filters in version 22 (dated 6-Feb-2009): ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Template s/T-ip-prefix-filter-ingress-loose-check-v22.txt Thanks, John -Original Message- From: Matthew Walster