Re: Security team successfully cracks SSL using 200 PS3's and MD5 flaw.

2009-01-04 Thread Rubens Kuhl Jr.
Yeap: http://www.ietf.org/internet-drafts/draft-ietf-tcpm-tcp-auth-opt-02.txt TCPM WGJ. Touch Internet Draft USC/ISI Obsoletes: 2385 A. Mankin

Re: Internet Traffic Begins to Bypass the U.S.

2008-09-14 Thread Rubens Kuhl Jr.
For instance, out of Australia we have a single, old cable going West out of Perth to Singapore (SEA-ME-WE3) which allows only low speed circuits, but we've got almost 4 (as of next year) cables going North and East out of Sydney. So most Europe traffic to/from Australia is via the USA.

Re: Force10 Gear - Opinions

2008-09-04 Thread Rubens Kuhl Jr.
And 60 points off Cisco is possible, even for small shops with some negotiating ability. That's not our experience; it seems that BUs protecting margins talk louder than the sales guys, so when it reaches discounts like that, even because of lack of adequate product from Cisco (lower gear

Re: Force10 Gear - Opinions

2008-09-03 Thread Rubens Kuhl Jr.
This statement is patently false. The uRPF failures I dealt with were based entirely on the recommended settings, and were confirmed by Cisco. Last I heard (2 months ago) the problems remain. Cisco just isn't being honest with you about them. Would you mind telling us what is the scenario

Re: Force10 Gear - Opinions

2008-08-25 Thread Rubens Kuhl Jr.
2) Performance [Note: we have no 10g interfaces, so I can only speak to a many-singleg-port environment] Much higher than Cisco. So good at dealing with traffic problems that we have had multi-gig DoS attacks that we wouldn't have known about without having an IDS running on a

Re: Paul Vixie: Re: [dns-operations] DNS issue accidentally leaked?

2008-07-24 Thread Rubens Kuhl Jr.
Some broadband providers here in .br seems to be blocking access to the dns-oarc.net test zone (but not to the portal site); most thought it was intended behavior by those providers (hiding instead of patching), but you are right, someone might have corrupted the test zone itself, which aleviates

Re: Single IP routing problems through Level3

2008-06-15 Thread Rubens Kuhl Jr.
1) I've seen this behavior before; you are not alone in the universe. 2) Most likely there is a balanced channel on the path, either L3 or L2, and one of the links in the bundle is dead but has not been detected as such. Rubens On Sun, Jun 15, 2008 at 11:01 AM, Matt Palmer [EMAIL PROTECTED]