Re: Gmail and SSL

2013-01-02 Thread Matthew Palmer
On Wed, Jan 02, 2013 at 07:35:49PM -0500, William Herrin wrote: A reputable SSL signer would have to get outed just once issuing a government a resigning cert and they'd be kicked out of all the browsers. They'd be awfully easy to catch. I believe Honest Achmed said it best: In any case by

Re: Gmail and SSL

2013-01-01 Thread Matthew Palmer
On Tue, Jan 01, 2013 at 12:04:16PM -0700, Keith Medcalf wrote: Perhaps the cheapest way to solve this is to apply thumbscrews and have google require the use of co-option freindly keying material by their victims errr customers errr users. ITYM product. - Matt

Re: TCP time_wait and port exhaustion for servers

2012-12-07 Thread Matthew Palmer
On Thu, Dec 06, 2012 at 08:58:10AM -0500, Ray Soucy wrote: net.ipv4.tcp_keepalive_intvl = 15 net.ipv4.tcp_keepalive_probes = 3 net.ipv4.tcp_keepalive_time = 90 net.ipv4.tcp_fin_timeout = 30 As discussed, those do not affect TCP_TIMEWAIT_LEN. There is a lot of misinformation out there

Re: Finding Name Servers (not NS records) of domain name

2012-08-17 Thread Matthew Palmer
On Wed, Aug 15, 2012 at 06:10:25PM -0400, Anurag Bhatia wrote: Now as you would be knowing if I do regular dig with ns, it provides NS records. However I was able to find nameservers by digging gTLD root for gTLD based domains. This works for .com/net/org etc but again fails for say .us, .in

Re: job screening question

2012-07-07 Thread Matthew Palmer
On Sat, Jul 07, 2012 at 11:01:29AM -0700, JC Dill wrote: On 06/07/12 9:06 PM, Matthew Palmer wrote: Maybe it's more significant to ask what the difference between TCP and UDP is. Yes, the difference between TCP and UDP is a much better question to ask, but having HR assess and act

Re: job screening question

2012-07-06 Thread Matthew Palmer
On Thu, Jul 05, 2012 at 05:01:39PM -0700, Scott Weeks wrote: --- ja...@thebaughers.com wrote: From: Jason Baugher ja...@thebaughers.com Geez, I'd be happy to find someone with a good attitude, a solid work ethic, and the desire and aptitude to learn. :)

Re: job screening question

2012-07-06 Thread Matthew Palmer
On Sat, Jul 07, 2012 at 12:51:55PM +1200, Ben Aitchison wrote: On Fri, Jul 06, 2012 at 04:18:21PM +1000, Matthew Palmer wrote: On Thu, Jul 05, 2012 at 05:01:39PM -0700, Scott Weeks wrote: --- ja...@thebaughers.com wrote: From: Jason Baugher ja...@thebaughers.com Geez, I'd be happy

Re: F-ckin Leap Seconds, how do they work?

2012-07-03 Thread Matthew Palmer
On Mon, Jul 02, 2012 at 09:13:42AM -0700, Michael Thomas wrote: My centos 6/64 running 3.0 seemed to weather it too. I'm not quite clear on what I should be looking for to classify it as being broken though. The problems I saw were related to programs that use futex(2) (Java, MySQL, Chromium,

Re: CVV numbers

2012-06-09 Thread Matthew Palmer
On Sat, Jun 09, 2012 at 02:34:03PM -0700, Scott Howard wrote: On Sat, Jun 9, 2012 at 12:12 PM, Wayne E Bouchard w...@typo.org wrote: The main weakness of CVV2 these days is form history in browsers. (auto complete). Any website requesting a CVV2 in a form field without the form

Re: Bogon list update for prefix for 5.1.0.0/19

2012-05-28 Thread Matthew Palmer
On Mon, May 28, 2012 at 04:31:34PM +0300, Evgeniy Aikashev wrote: We are AS21219 - PJSC Datagroup and owner of 5.1.0.0/19 block. Our customers have no access to some part of Internet if they use these IPs. Could you please update your bogon filters to permit this range. You're probably going

Re: Industry practice for BGP costs - one time or fixed/monthly?

2012-05-26 Thread Matthew Palmer
On Sat, May 26, 2012 at 09:39:16PM -0400, Luke S. Crawford wrote: On Sat, May 26, 2012 at 10:06:03AM +1000, Matthew Palmer wrote: We pay what our providers think they can get away with. Like most pricing decisions, they're not based on any technical logic, they're based on what the market

Re: Equinix Direct

2012-05-25 Thread Matthew Palmer
On Fri, May 25, 2012 at 08:19:10AM -0400, Tim Durack wrote: It does concern me that the only connectivity options are FE/GE, no 10GE at this time. Makes me wonder about how serious the service is, and whether I will end up with a more congested service than simply getting a mix of transit

Re: Industry practice for BGP costs - one time or fixed/monthly?

2012-05-25 Thread Matthew Palmer
On Fri, May 25, 2012 at 09:31:11PM +0530, Anurag Bhatia wrote: I have been aggressively looking for deals in servers in Europe for anycasting. One thing which surprises me is the setup costs for BGP. Few providers quoted additional $50-100 which looks OK but a few of them quoted as high as

Re: Cogent for ISP bandwidth

2012-05-14 Thread Matthew Palmer
On Mon, May 14, 2012 at 09:27:57PM -0500, Jason Baugher wrote: On 5/14/2012 7:30 PM, Jay Ashworth wrote: - Original Message - From: Jason Baugherja...@thebaughers.com I've done some searching and haven't been able to find much in the last 3 years as to their reliability and

Re: Squeezing IPs out of ARIN

2012-04-26 Thread Matthew Palmer
On Wed, Apr 25, 2012 at 08:31:44AM -0700, Owen DeLong wrote: On Apr 24, 2012, at 9:57 PM, Jack Bates wrote: I sometimes wonder what happens to that information; if it sits around in an archive somewhere in the vast digital repositories of ARIN awaiting someone to steal it. That's a very

Re: The day SORBS goes away ...

2012-04-07 Thread Matthew Palmer
On Sat, Apr 07, 2012 at 08:33:10PM +0300, Hank Nussbacher wrote: On Sat, 7 Apr 2012, Rich Kulawiec wrote: Clearly, this is idiotic reasoning and only when others start blocking their IP ranges and DNS servers will they ever wake up. But how idiotic is it? Do you have all Yahoo IP space and

Re: last mile, regulatory incentives, etc (was: att fiber, et al)

2012-03-23 Thread Matthew Palmer
On Fri, Mar 23, 2012 at 02:18:26PM -1000, Michael Painter wrote: Really. This is from the Governor's Hawaii Broadband Initiative speedtest website: The indication of above average or below average is based on a comparison of the actual test result to the current NTIA definition of

Re: WW: Colo Vending Machine

2012-02-17 Thread Matthew Palmer
On Fri, Feb 17, 2012 at 05:39:34PM -0800, Owen DeLong wrote: In such cases, I will occasionally stop by the colo without going home to retrieve the laptop. 90% of the time it works out OK. 10% of the time I end up leaving the colo, going home, retrieving the laptop and returning to the colo.

Re: UDP port 80 DDoS attack

2012-02-05 Thread Matthew Palmer
On Sun, Feb 05, 2012 at 06:36:13PM -0500, Ray Gasnick III wrote: We just saw a huge flux of traffic occur this morning that spiked one of our upstream ISPs gear and killed the layer 2 link on another becuase of a DDoS attack on UDP port 80. Yep, we've got a customer who's been hit with it a

Re: Linux Centralized Administration

2012-01-12 Thread Matthew Palmer
On Thu, Jan 12, 2012 at 04:02:49PM -0500, Paul Stewart wrote: Hey folks. just curious what people are using for automating updates to Linux boxes? Today, we manually do YUM updates to all the CentOS servers . just an example but a good one. I have heard there are some open source solutions

Re: Looking for a Tier 1 ISP Mentor for career advice.

2011-12-02 Thread Matthew Palmer
On Fri, Dec 02, 2011 at 05:55:23PM -0600, Robert Bonomi wrote: Scott Weeks sur...@mauigateway.com wrote: Apologies for the rapid-shot email. It's Friday... :-) bmann...@vacation.karoshi.com wrote: On Thu, Dec 01, 2011 at 04:35:27PM -0500, David Radcliffe wrote: The reason it

Re: Performance Issues - PTR Records

2011-11-02 Thread Matthew Palmer
On Wed, Nov 02, 2011 at 06:12:21PM -0400, David Hubbard wrote: From: Matt Chung [mailto:itsmemattch...@gmail.com] Historically, there was no compelling reason to create PTR records for our CPE however more and more applications seem to be dependent on it. Although we will be assigning a

Re: Synology Disk DS211J

2011-09-30 Thread Matthew Palmer
On Thu, Sep 29, 2011 at 07:10:10PM -0700, Joel jaeggli wrote: On 9/29/11 17:46 , Robert Bonomi wrote: From: Nathan Eisenberg nat...@atlasnetworks.us Subject: RE: Synology Disk DS211J Date: Thu, 29 Sep 2011 21:58:23 + And this is why the prudent home admin runs a firewall device he

Re: Synology Disk DS211J

2011-09-29 Thread Matthew Palmer
On Thu, Sep 29, 2011 at 12:11:48PM -0700, Jones, Barry wrote: A little off topic, but wanted to share... I purchased a home storage Synology DS1511+. After configuring it on the home net, I did some captures to look at the protocols, and noticed that the DS1511+ is making outgoing connections

Re: Nxdomain redirect revenue

2011-09-27 Thread Matthew Palmer
On Tue, Sep 27, 2011 at 05:08:42PM -0500, Jimmy Hess wrote: On Tue, Sep 27, 2011 at 8:27 AM, Christopher Morrow morrowc.li...@gmail.com wrote: how does tls/https help here? if you get sent to the 'wrong host' whether or not it does https/tls is irrelevant, no? (save the case of chrome

Re: Question on 95th percentile and Over-usage transit pricing

2011-09-22 Thread Matthew Palmer
On Thu, Sep 22, 2011 at 10:31:34AM -0700, Ryan Malayter wrote: On Sep 22, 12:54 am, PC paul4...@gmail.com wrote: An optimal solution would be a tiered system where the adjusted price only applies to traffic units over the price tier threshold and not retroactively to all traffic units. I

Re: How long is your rack?

2011-08-15 Thread Matthew Palmer
On Mon, Aug 15, 2011 at 11:37:37AM -0400, Randy Bush wrote: more likely a 'shortened' url. how anyone can click those is beyond me. I'm curious what your objection is. i have no assurance that a shortened url does not lead to a malicious site. also your privacy issue, but that is

Re: network issue help

2011-08-10 Thread Matthew Palmer
On Wed, Aug 10, 2011 at 07:33:53PM -0400, Stefan Fouant wrote: Is there an acronym for RTFM when there are a volume of manuals that need to be read? FOAD, perhaps? - Matt -- When you have a Leatherman, everything looks Leathermanipulable. -- Nathan McCoy, in the Monastery

Re: US internet providers hijacking users' search queries

2011-08-05 Thread Matthew Palmer
On Fri, Aug 05, 2011 at 05:04:51PM -0700, Bino Gopal wrote: http://www.newscientist.com/article/dn20768-us-internet-providers-hijacking-users-search-queries.html I hope more ISPs start doing this; it'll increase the take up of HTTPS. - Matt -- Part[s] of .us are the global benchmark for

Re: US internet providers hijacking users' search queries

2011-08-05 Thread Matthew Palmer
On Fri, Aug 05, 2011 at 06:53:50PM -0600, Brielle wrote: Until they start MitM the ssl traffic, fake certs and all. Didn't a certain repressive regime already do this tactic with facebook or some other major site? Yes, there's plenty of rogue CAs. That's an easier problem to solve (though

Re: dynamic or static IPv6 prefixes to residential customers

2011-08-03 Thread Matthew Palmer
On Wed, Aug 03, 2011 at 10:00:37AM -0700, Bill Woodcock wrote: Also good for customer privacy. LE can still subpoena ISP logs, but e-commerce sites can't track users quite as easily. So... you're in that alternate universe populated by people who *aren't* constantly logged onto facebook. Good

Re: Comcast Bussiness Class and GRE Tunnels

2011-07-27 Thread Matthew Palmer
On Wed, Jul 27, 2011 at 12:17:16PM +0300, Denys Fedoryshchenko wrote: I can recommend you to try to use openvpn, if you are Mikrotik only. At least it doesn't have fragmentation issues, as IPIP/GRE/PPTP has, and also it will run smoothly over NAT/SPI. Cons, that it is a bit more laggy, because

Re: Comcast Bussiness Class and GRE Tunnels

2011-07-27 Thread Matthew Palmer
On Wed, Jul 27, 2011 at 12:30:36PM +0300, Denys Fedoryshchenko wrote: On Wed, 27 Jul 2011 19:23:33 +1000, Matthew Palmer wrote: On Wed, Jul 27, 2011 at 12:17:16PM +0300, Denys Fedoryshchenko wrote: I can recommend you to try to use openvpn, if you are Mikrotik only. At least it doesn't have

Re: Address Assignment Question

2011-06-20 Thread Matthew Palmer
On Mon, Jun 20, 2011 at 09:26:30AM -0400, Steve Richardson wrote: Hi Jason, On Mon, Jun 20, 2011 at 9:06 AM, Jason Baugher ja...@thebaughers.com wrote: Did everyone miss that the customer didn't request a /24, they requested a /24s worth in even more dis-contiguous blocks. I can only think

Re: ICANN to allow commercial gTLDs

2011-06-19 Thread Matthew Palmer
On Sun, Jun 19, 2011 at 08:22:17PM -0400, Jay Ashworth wrote: - Original Message - From: Paul Vixie vi...@isc.org inevitably there will be folks who register .FOOBAR and advertise it as http://foobar/; on a billboard and then get burned by all of the local foobar.this.tld and

Re: unqualified domains, was ICANN to allow commercial gTLDs

2011-06-19 Thread Matthew Palmer
On Mon, Jun 20, 2011 at 02:08:18AM +, Paul Vixie wrote: From: David Conrad d...@virtualized.org Date: Sun, 19 Jun 2011 16:04:09 -1000 On Jun 19, 2011, at 3:24 PM, Paul Vixie wrote: i think we have to just discourage lookups of single-token names, universally. How?

Re: The stupidity of trying to fix DHCPv6

2011-06-12 Thread Matthew Palmer
On Sun, Jun 12, 2011 at 01:04:41PM +0200, Iljitsch van Beijnum wrote: On 12 jun 2011, at 12:35, Daniel Roesen wrote: Could you point to any RFC which implies or explicitly states that DHCPv6 MUST NOT be used in absence of RA with M and/or O=1? But what's the alternative? Always run

Re: IPv6 and DNS

2011-06-12 Thread Matthew Palmer
On Sun, Jun 12, 2011 at 09:38:32AM -0300, Fabio Mendes wrote: 2011/6/11 Matthew Palmer mpal...@hezmatt.org The router isn't assigning an address, it's merely telling everyone on the segment what the local prefix and default route is. As such, there's no reason why the router should try

Re: IPv6 and DNS

2011-06-12 Thread Matthew Palmer
On Sun, Jun 12, 2011 at 08:59:50AM -0500, Jimmy Hess wrote: On Sat, Jun 11, 2011 at 9:04 PM, Matthew Palmer mpal...@hezmatt.org wrote: The router isn't assigning an address, it's merely telling everyone on the segment what the local prefix and default route is.  As such, there's no reason

Re: Yup; the Internet is screwed up.

2011-06-12 Thread Matthew Palmer
On Sun, Jun 12, 2011 at 11:04:46AM -0600, Christopher J. Pilkington wrote: On Jun 11, 2011, at 7:07 PM, Roy wrote: On 6/11/2011 4:29 PM, Christopher Pilkington wrote: Options seem to be limited to HughesNet and dial for the moment, but things may change if I put a tower on the property.

Re: The stupidity of trying to fix DHCPv6

2011-06-12 Thread Matthew Palmer
On Sun, Jun 12, 2011 at 08:12:02PM +0200, Iljitsch van Beijnum wrote: On 12 jun 2011, at 15:45, Leo Bicknell wrote: Like I said before, that would pollute the network with many multicasts which can seriously degrade wifi performance. Huh? This is no worse than IPv4 where a host comes

Re: IPv6 and DNS

2011-06-12 Thread Matthew Palmer
On Sun, Jun 12, 2011 at 01:46:20PM -0400, Jeff Kell wrote: On 6/12/2011 11:44 AM, Matthew Palmer wrote: I don't believe we were talking about DHCPv6, we were talking about SLAAC. And I *still* think it's a better idea for the client to be registering itself in DNS; the host knows what

Re: IPv6 and DNS

2011-06-12 Thread Matthew Palmer
On Mon, Jun 13, 2011 at 09:56:59AM +1000, Karl Auer wrote: On Mon, 2011-06-13 at 01:44 +1000, Matthew Palmer wrote: And I *still* think it's a better idea for the client to be registering itself in DNS; the host knows what domain(s) it should be part of, and hence which names refer

Re: Yup; the Internet is screwed up.

2011-06-11 Thread Matthew Palmer
On Sat, Jun 11, 2011 at 02:34:10AM -0700, Jeroen van Aart wrote: Ricardo Ferreira wrote: Funny, how in the title refers to the Internet globally when the article is specific about the USA. I live in europe and we have at home 100Mbps . Mid sized city of 500k people. Some ISPs even spread

Re: IPv6 and DNS

2011-06-11 Thread Matthew Palmer
On Sat, Jun 11, 2011 at 10:30:26PM -0300, Fabio Mendes wrote: Firstly, sorry if this may sound too newbie for the list. Reading the discussion about dhcpv6 vs RAs, this question just popped in my mind. It seems that most of IPv6 addressing for hosts will be choosed using EUI-64 method.

Re: Strongest Solar Tsunami in Years to Hit Earth Today

2011-06-10 Thread Matthew Palmer
On Fri, Jun 10, 2011 at 03:22:59PM +0300, Hank Nussbacher wrote: http://www.ibtimes.com/articles/159964/20110609/nasa-solar-flare-tsunami-earth-sun-radio-satellite-interference-aurora-displays-coronal-mass-ejectio.htm Someone should tell the IB Times that Tsunami doesn't mean anything big and

Re: The stupidity of trying to fix DHCPv6

2011-06-10 Thread Matthew Palmer
On Fri, Jun 10, 2011 at 07:53:36AM -0700, Owen DeLong wrote: On Jun 10, 2011, at 7:47 AM, Leo Bicknell wrote: In a message written on Fri, Jun 10, 2011 at 10:34:57AM -0400, Ray Soucy wrote: Also agree that I want flexibility to use RA or DHCPv6; the disagreement is that RA needs to be

Re: Why don't ISPs peer with everyone?

2011-06-07 Thread Matthew Palmer
On Tue, Jun 07, 2011 at 10:15:48AM -0400, Drew Weaver wrote: -Original Message- From: Jon Lewis [mailto:jle...@lewis.org] Sent: Tuesday, June 07, 2011 10:00 AM -snip- I manage a network that's primarily a hosting network. There's a similar hosting network at the other end of

Re: blocking unwanted traffic from hitting gateway

2011-05-18 Thread Matthew Palmer
On Wed, May 18, 2011 at 09:42:03AM -0300, Rogelio wrote: I've got about 1000 people hammering a Linux gateway with http requests, but only about 150 of them are authenticated users for the ISP. Are you the ISP, or someone else? Why is the gateway caring that the requests are HTTP? Is it also

Re: Yahoo and IPv6

2011-05-10 Thread Matthew Palmer
On Tue, May 10, 2011 at 11:22:54AM -0700, Owen DeLong wrote: On May 10, 2011, at 9:32 AM, Igor Gashinsky wrote: On Tue, 10 May 2011, valdis.kletni...@vt.edu wrote: :: On Tue, 10 May 2011 02:17:46 EDT, Igor Gashinsky said: :: The time for finger-pointing is over, period, all we are all

Re: Ping - APAC Region

2011-03-29 Thread Matthew Palmer
On Tue, Mar 29, 2011 at 06:33:07PM +0100, Robert Lusby wrote: Looking at hosting some servers in Hong Kong, to serve the APAC region. Our client is worried that this may slow things down in their Australia region, and are wondering whether hosting the servers in an Australian data-centre would

Re: Mac OS X 10.7, still no DHCPv6

2011-02-27 Thread Matthew Palmer
On Sun, Feb 27, 2011 at 08:56:33AM -0500, Ray Soucy wrote: Mac OS X 10.7 does support RDNSS (RFC 5001) so it is able to get DNS server information in an IPv6-only environment. Of course nobody else has implemented that yet, making Apple a special case host once again (I don't even think Cisco

Re: quietly....

2011-02-03 Thread Matthew Palmer
On Thu, Feb 03, 2011 at 10:47:50AM -0600, Jack Bates wrote: On 2/3/2011 10:30 AM, Iljitsch van Beijnum wrote: I'm perfectly happy with an IPv6 network that only has rational people on it while those who insist on NAT stay behind on IPv4. I'm perfectly happy with watching the Internet go to

Re: quietly....

2011-02-03 Thread Matthew Palmer
On Thu, Feb 03, 2011 at 12:35:46PM -0600, Jack Bates wrote: On 2/3/2011 12:17 PM, Owen DeLong wrote: Cost of application development Applications do not have to be written to support NAT (NAT66 shouldn't find itself in the areas where it's traditionally been a problem). The

Re: quietly....

2011-02-03 Thread Matthew Palmer
On Thu, Feb 03, 2011 at 03:20:25PM -0500, Lamar Owen wrote: On Thursday, February 03, 2011 02:28:32 pm valdis.kletni...@vt.edu wrote: The only reason FTP works through a NAT is because the NAT has already been hacked up to further mangle the data stream to make up for the mangling it does.

Re: quietly....

2011-02-02 Thread Matthew Palmer
On Wed, Feb 02, 2011 at 11:45:49PM -0500, Jay Ashworth wrote: - Original Message - From: Blake Dunlap iki...@gmail.com On Wed, Feb 2, 2011 at 22:34, Jay Ashworth j...@baylink.com wrote: I won't run an edge-network that *isn't* NATted; my internal machines have no business

Re: quietly....

2011-02-02 Thread Matthew Palmer
On Thu, Feb 03, 2011 at 12:23:54AM -0500, Jay Ashworth wrote: - Original Message - From: Matthew Palmer mpal...@hezmatt.org Now, if you decide that none of those applications are important to you, sure, you can firewall them off as appropriate. But the pervasive deployment

Re: Bogons

2011-01-28 Thread Matthew Palmer
On Fri, Jan 28, 2011 at 12:35:43PM -0800, Jacob Broussard wrote: Static bogons are the bane of my existence... The pain of trying to explain to someone for MONTHS that they haven't updated their reference, with traceroutes to back it up, and they continue to say that it has something to do

Re: Is NAT can provide some kind of protection?

2011-01-15 Thread Matthew Palmer
On Sat, Jan 15, 2011 at 06:24:01PM -0500, Brandon Ross wrote: On Sat, 15 Jan 2011, Owen DeLong wrote: I really doubt this will be the case in IPv6. I really hope you are right, because I don't want to see that either, however... Why do you suppose they did that before with IPv4? Sure

Re: AS Numbers from a common 32-bit pool.

2010-12-20 Thread Matthew Palmer
On Mon, Dec 20, 2010 at 02:49:49PM +0200, Heinrich Strauss wrote: I'm kinda fearing this in South Africa, as we have a few large incumbents who aren't really driving -NG versions of protocols. They also have a prove to us it's broken, and we may look at it in a few months' time-attitude

Re: ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Matthew Palmer
On Mon, Dec 06, 2010 at 02:15:10PM -0500, Thomas York wrote: I've had the best luck with ipcad. The only thing that seems to not work with it is that it doesn't correctly give the interface number in the flow information. It refers to all interfaces as interface 65535. I've tried the config

Re: IPv6 Routing table will be bloated?

2010-10-26 Thread Matthew Palmer
On Tue, Oct 26, 2010 at 05:48:13PM -0400, Randy Carpenter wrote: Someone who Randy didn't attribute wrote: I think APNIC has a policy that defines the minimum IPv6 allocation based on your current IPv4 allocation/usage. This would fix the problem? It would be nice as a start, but does not

Re: DHS and NSA getting married?

2010-10-22 Thread Matthew Palmer
On Fri, Oct 22, 2010 at 11:32:38AM -0400, Christopher Morrow wrote: On Fri, Oct 22, 2010 at 11:08 AM, Steven Bellovin s...@cs.columbia.edu wrote:        In the words of a former Justice Department official involved with critical infrastructure protection, ?I have seen too many situations

Re: network name 101100010100110.net

2010-10-17 Thread Matthew Palmer
On Sun, Oct 17, 2010 at 08:07:41AM +0200, Per Carlson wrote: On 17 Oct 2010 06:47, Day Domes daydo...@gmail.com wrote: I have been tasked with coming up with a new name for are transit data network. I am thinking of using 101100010100110.net does anyone see any issues with this?

Re: Did Internet Founders Actually Anticipate Paid,

2010-09-21 Thread Matthew Palmer
On Tue, Sep 21, 2010 at 09:31:07AM -0700, George Bonser wrote: Yes they are -- content providers aren't getting their connections to the Internet for free (and if they are, how can I get me some of that?). Maybe I wasn't clear. Traffic is moving away from transit to direct peering at

Re: Other NOGs around the world?

2010-08-22 Thread Matthew Palmer
On Mon, Aug 23, 2010 at 12:42:03AM +1000, Karl Auer wrote: On Sun, 2010-08-22 at 10:17 -0400, Marshall Eubanks wrote: On Aug 22, 2010, at 9:52 AM, Rogelio wrote: What other network operator groups are there around the world (besides NANOG)? AusNOG. At a bit of a low S:N right now.

Re: Numbering nameservers and resolvers

2010-08-17 Thread Matthew Palmer
On Mon, Aug 16, 2010 at 06:08:02AM -0700, Owen DeLong wrote: On Aug 16, 2010, at 6:03 AM, Chris Adams wrote: Once upon a time, Patrick W. Gilmore patr...@ianai.net said: 1) Use different prefixes. A single prefix going down should not kill your entire network. (Nameservers and resolvers

Re: Cost of transit and options in APAC

2010-08-11 Thread Matthew Palmer
On Wed, Aug 11, 2010 at 12:53:18PM -0700, Joel Jaeggli wrote: On 8/11/10 12:29 PM, Franck Martin wrote: Nice to see this change APAC has been obliged to pay the cost to peer with the US (long distance links are expensive). Now that US wants to peer with Asia, pricing may become

Re: Google wants your Internet to be faster

2010-08-09 Thread Matthew Palmer
On Mon, Aug 09, 2010 at 12:18:12PM -0700, Zaid Ali wrote: The devil is always in the details. The Network management piece is quite glossed over and gives a different perception in the summary. You can't perform the proposed network management piece without deep packet inspection which

Re: 33-Bit Addressing via ONE bit or TWO bits ? does NANOG care?

2010-07-30 Thread Matthew Palmer
On Thu, Jul 29, 2010 at 11:38:56PM -0400, Atticus wrote: What world do live in? Yes, we extend the life of IPv4 by increasing the numeric range. As for only needing port 80, I'm not really sure where you've been for the last decade or so. There's are hundreds of services using different ports,

Re: Addressing plan exercise for our IPv6 course

2010-07-25 Thread Matthew Palmer
On Mon, Jul 26, 2010 at 06:24:04AM +0200, Jens Link wrote: Owen DeLong o...@delong.com writes: The correct answer is No, you don't have to configure rules, you just need one rule supplied by default which denies anything that doesn't have a corresponding outbound entry in the state table

Re: Mikrotik OC-3 Connection

2010-07-03 Thread Matthew Palmer
On Sat, Jul 03, 2010 at 05:12:14PM -0700, Majdi S. Abbas wrote: On Sat, Jul 03, 2010 at 07:32:48PM -0400, Scott Berkman wrote: I really wouldn't use the word legacy to describe SONET and OC-3's. It's around 25 years old (work started in 1985, first standards published in 1988) and we

Re: Inquiries to Acquire IPs

2010-07-02 Thread Matthew Palmer
On Fri, Jul 02, 2010 at 04:40:07PM -0500, Aaron Wendel wrote: I sent an inquiry in to ARIN yesterday for a certain ASN that was available and was told that management won't allow them to issue requested numbers. :( That's easy, then... Can I have any of ASN 0 to $DESIRED-1 or $DESIRED+1 to

Re: Finland makes broadband access a legal right

2010-07-01 Thread Matthew Palmer
On Fri, Jul 02, 2010 at 12:14:42AM +0100, Matthew Walster wrote: On 1 July 2010 23:17, William Herrin b...@herrin.us wrote: In 1996 a certain inventor of the Internet decided that the universal service fund needed to pay for PCs in rural schools (the E-Rate program) instead of improving

Re: eur.army.mil net ops contact?

2010-05-19 Thread Matthew Palmer
On Wed, May 19, 2010 at 06:11:34PM +0530, Suresh Ramasubramanian wrote: There's this old joke - spread across multiple countries around the world - about there being three ways to do something .. 1. The right way 2. The wrong way 3. The army way I know it as 3. The railway, and boy ain't

Re: [Re: http://tools.ietf.org/search/draft-hain-ipv6-ulac-01]

2010-04-25 Thread Matthew Palmer
On Mon, Apr 26, 2010 at 08:20:33AM +0930, Mark Smith wrote: On Sun, 25 Apr 2010 13:21:16 -0400 Richard Barnes richard.bar...@gmail.com wrote: Moreover, the general point stands that Mark's problem is one of bad ISP decisions, not anything different between IPv4/RFC1918 and IPv6. My

Re: ARIN IP6 policy for those with legacy IP4 Space

2010-04-08 Thread Matthew Palmer
On Thu, Apr 08, 2010 at 02:56:15PM -0400, Dorn Hetzel wrote: Well, yeah, but that is a separate problem. Anyone for an announced-prefix-tax ? :) Just add announced prefixes to the settlement charges, alongside bits transferred... - Matt -- A friend is someone you can call to help you move.

Re: log parsing tool?

2010-02-23 Thread Matthew Palmer
On Mon, Feb 22, 2010 at 04:15:22PM -0600, fedora fedora wrote: Anyone has good recommendations for an open-sourced log parsing and analyzing application? It will be used to work with syslog-ng and other general syslog and application logs. I have been looking at swatch and logwatch, but

Re: BIRD vs Quagga

2010-02-16 Thread Matthew Palmer
On Tue, Feb 16, 2010 at 07:47:13PM +, Thomas Mangin wrote: (with a domino's effect as well). Your routes processed in 30 minutes or it's free? - Matt (Yeah, I know, back in my hole...)

Re: 192.255.103.x

2010-02-11 Thread Matthew Palmer
On Thu, Feb 11, 2010 at 07:27:38PM -0800, Hector Herrera wrote: On Thu, Feb 11, 2010 at 6:08 PM, Matthew Palmer mpal...@hezmatt.org wrote: On Thu, Feb 11, 2010 at 05:30:11PM -0800, Hector Herrera wrote: I'm trying to diagnose an issue with 192.255.103.x As far as I can tell from IANA

Re: Connectivity problems to google via openDNS

2010-02-09 Thread Matthew Palmer
On Tue, Feb 09, 2010 at 09:56:23AM -0800, Jay Hennigan wrote: Mark wrote: Hello nanog, Just wondering if anyone is experiencing the same problem with google and openDNS on their end or knows what's going on there with openDNS. The problem just occurred about 20 minutes ago. Don't do

Re: Enhancing automation with network growth

2010-01-21 Thread Matthew Palmer
On Wed, Jan 20, 2010 at 10:52:39PM -0500, Erik L wrote: One thing that would take a major load off would be if my MRTG system could simply update its config/index files for itself, instead of me having to do it on each and every port change. Can anyone offer up ideas on how you manage

Re: 1/8 and 27/8 allocated to APNIC

2010-01-21 Thread Matthew Palmer
On Thu, Jan 21, 2010 at 08:22:57PM -0500, Jon Lewis wrote: On Thu, 21 Jan 2010, George Bonser wrote: Some of that water is dirtier than the rest. I wouldn't want to be the person who gets 1.2.3.0/24 The whole /8 should be fun. http://en.wikipedia.org/wiki/AnoNet To avoid addressing

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-13 Thread Matthew Palmer
On Wed, Jan 13, 2010 at 12:55:00PM -0500, Matt Simmons wrote: That would be excellent for both the administrator, and anyone walking down the row with a wand in their pocket. So... someone has a list of the barcodes on all my equipment. ONOES! Without access to the asset database that backs

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-06 Thread Matthew Palmer
On Wed, Jan 06, 2010 at 08:41:14PM -0500, Joel Esler wrote: On Wed, Jan 6, 2010 at 8:26 PM, Steven Bellovin s...@cs.columbia.edu wrote: On Jan 6, 2010, at 6:24 PM, Jeffrey I. Schiller wrote: An option I saw years ago (I forgot on whose equipment) was a default password which was a

Re: Default Passwords for World Wide Packets/Lightning Edge Equipment

2010-01-06 Thread Matthew Palmer
On Wed, Jan 06, 2010 at 10:45:32PM -0600, Joe Greco wrote: On Wed, Jan 6, 2010 at 7:19 PM, Dobbins, Roland rdobb...@arbor.net wrote: Which goes to show that they just really don't get it when it comes to security. ?Maybe they should look here at all the entries for 'default

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Matthew Palmer
On Sat, Nov 21, 2009 at 04:06:48PM -0500, Jeffrey Lyon wrote: I was pretty excited about this post until I found out that myvidoop only works on older version of FF. I can only find something about the plugin not working on FF 3.5, but I don't use the plugin since I only use it as an OpenID

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Matthew Palmer
On Sat, Nov 21, 2009 at 04:58:27PM -0500, Jeffrey Lyon wrote: So it works as a standalone password vault also? I don't know. My only experience with it has been as an OpenID endpoint/provider/whatever, and it was on that basis that I replied originally. - Matt

Re: What DNS Is Not

2009-11-20 Thread Matthew Palmer
On Fri, Nov 20, 2009 at 09:49:14AM +1030, Andrew Cox wrote: As a follow up to this, one of the large Australian ISP's has just introduced a DNS redirection service for all home customers. /The BigPond-branded landing page provides BigPond customers with organic search results, sponsored

Re: DreamHost admin contacts

2009-10-13 Thread Matthew Palmer
On Tue, Oct 13, 2009 at 01:34:47PM -0700, Brandon Galbraith wrote: Have had great luck (no outages) with Rackspace Mail (formerly Mailtrust). Quite affordable as well. It's definitely luck that's kept you outage free -- my former employer outsourced all their customer e-mail services to

Re: 32-bit AS numbers

2009-10-10 Thread Matthew Palmer
On Fri, Oct 09, 2009 at 12:05:57PM -0400, Kevin Loch wrote: Greg Hankins wrote: We also started a Wiki with content based on the presentation that has more updated information, including a current list of vendor support. If you see a vendor missing, let us know and we can update the list. Or

Re: Data Center testing

2009-08-27 Thread Matthew Palmer
On Wed, Aug 26, 2009 at 03:32:42PM +, Dylan Ebner wrote: I always love it when I get an outage report from my ISP's or datacenter and they say an unexpected issue or unforseen issue caused the problem. Well, at least it's better than yeah, we knew about it, but didn't think it was worth

Re: Using twitter as an outage notification

2009-07-05 Thread Matthew Palmer
On Sun, Jul 05, 2009 at 11:01:43AM +0100, Roland Perry wrote: [snow day notifications] Unfortunately, the number of students polling the website for news means it can't cope with the traffic. I don't believe they can justify paying more for better web hosting, just to manage this

Re: Where to buy Internet IP addresses

2009-05-01 Thread Matthew Palmer
On Sat, May 02, 2009 at 09:40:23AM +1000, Mark Andrews wrote: In message 49fb4661.8090...@west.net, Jay Hennigan writes: LEdouard Louis wrote: Optimum Online business only offer 5 static IP address. Where can I buy a block of Internet IP address for Business? How much does it

Re: Important New Requirement for IPv4 Requests

2009-04-21 Thread Matthew Palmer
On Tue, Apr 21, 2009 at 02:51:11PM -0700, Jo Rhett wrote: On Apr 21, 2009, at 1:58 PM, David Hubbard wrote: Raising the price won't help; there's already a huge amount of wasted address space by web hosts selling IP addresses to customers who need them solely for 'seo purposes' rather It's a

Re: Important New Requirement for IPv4 Requests

2009-04-21 Thread Matthew Palmer
On Tue, Apr 21, 2009 at 04:41:46PM -0700, Jo Rhett wrote: On Apr 21, 2009, at 4:22 PM, Ken A wrote: Chris Adams wrote: Once upon a time, Jo Rhett jrh...@netconsonance.com said: Since virtual web hosting has no technical justification for IP space, I refuse it. SSL and FTP are techincal

Re: Important New Requirement for IPv4 Requests

2009-04-21 Thread Matthew Palmer
On Tue, Apr 21, 2009 at 08:24:38PM -0400, Ricky Beam wrote: On Tue, 21 Apr 2009 18:40:30 -0400, Chris Adams cmad...@hiwaay.net wrote: SSL and FTP are techincal justifications for an IP per site. No they aren't. SSL will work just fine as a name-based virtual host with any modern webserver /

Re: Is whois.apnic.net down?

2009-02-10 Thread Matthew Palmer
On Tue, Feb 10, 2009 at 09:48:21AM -0700, Dale Carstensen wrote: I get Connection timed out on whois commands to it. Sorry to attempt to answer my own question, but maybe it's the fires in Australia, as the last traceroute hop is a Brisbane.telstra.net domain name. Brisbane's about 2000km

Re: v6 DSL / Cable modems [was: Private use of non-RFC1918 IP space

2009-02-09 Thread Matthew Palmer
On Mon, Feb 09, 2009 at 09:27:59PM -0500, TJ wrote: The SOX auditor ought to know better. Any auditor that requires NAT is incompenent. Sadly, there are many audit REQUIREMENTS explicitly naming NAT and RFC1918 addressing ... SOX auditors are incompetent. I've been asked about

Re: Private use of non-RFC1918 IP space

2009-02-03 Thread Matthew Palmer
On Wed, Feb 04, 2009 at 11:57:36AM +1100, Skeeve Stevens wrote: OK. Following myself up, and referencing a link someone else gave me in regards to IPv6 http://en.wikipedia.org/wiki/Private_network Has the entry: Private use of other reserved addresses Several other address ranges,

  1   2   >