Re: Google's Public DNS does DNSSEC validation

2013-01-30 Thread Mick O'Rourke
In the potentially interestingly and perhaps not so positive - one of the common EDNS tests via Google pub DNS fails. https://www.dns-oarc.net/oarc/services/replysizetest ;; ANSWER SECTION: rs.dns-oarc.net. 58 IN CNAME rst.x479.rs.dns-oarc.net. rst.x479.rs.dns-oarc.net. 57 IN CNAME

Re: H3C Technical List

2012-11-22 Thread Mick O'Rourke
HP-NSP. I've been subscribed for a couple of years, it's suffice to say volume is dead low. Guessing you've checked this and are after something with volume. https://puck.nether.net/mailman/listinfo/ Did you try the HP H3C web forums? That said last I checked they seemed almost as dead as the

Re: Automatic IPv6 due to broadcast

2012-04-17 Thread Mick O'Rourke
RA guard is useful if your tcam capacity and or switching platform allows - http://tools.ietf.org/html/draft-ietf-v6ops-ra-guard-implementation-01 An older yet still a good read from Cisco on some IPv6 first hop security: