Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread William Herrin
oes not involve itself in routing disputes. Your upstream (and their upstream, et cetera) will act to preserve their reputations. If that includes manually blocking some of your announcements, you'll have a devil of a time undoing it later. Regards, Bill Herrin -- William Herrin ..

Re: IPv4 smaller than /24 leasing?

2018-03-13 Thread William Herrin
anged but the bottom line hasn't: it's ridiculously consumptive. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Websurfing trouble to .gov and .il.us

2018-03-13 Thread William Herrin
ou get a TCP connect to the site or not? e.g. "telnet tierii.iema.state.il.us 80" Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread William Herrin
less and you don't have to like it, but there it is. If you contacted the POC and the POC replied stop, you stop. If the POC was hijacked at the RIR, that's between your customer and the RIR. The RIR has a standard process and an expert team for dealing with these situations. It's their job. Regards, B

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread William Herrin
each out to the published POC by email, by phone and if necessary by postal mail. Until you get a response to the query YOU initiated to the POC, stick with the status quo. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Sys

Re: Dark Fiber Providers - Domestic

2018-02-06 Thread William Herrin
ommission or public utilities commission of each state in which they operate. When they use only private rights of way (e.g. railroad tracks) they are generally unregulated. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . W

Re: Blockchain and Networking

2018-01-23 Thread William Herrin
. If someone steals my bitcoin wallet, I'm f**. Given the cost of renumbering, we'd have to be insane to depend on blockchain for address management. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Blockchain and Networking

2018-01-23 Thread William Herrin
On Tue, Jan 23, 2018 at 8:17 AM, Jimmy Hess <mysi...@gmail.com> wrote: > On Tue, Jan 9, 2018 at 10:22 AM, William Herrin <b...@herrin.us> wrote: > >> On Tue, Jan 9, 2018 at 1:07 AM, John R. Levine <jo...@iecc.com> wrote: >> >> > The promise of blockcha

Re: MTU to CDN's

2018-01-19 Thread William Herrin
support line with the complaint that they can't get to your web site from home, but can from work (or vice versa). Your web site is "obviously" working and the calls are infrequent, so support advises there's a problem with the customer's ISP. Regards, Bill Herrin -- William Herri

Re: MTU to CDN's

2018-01-19 Thread William Herrin
On Fri, Jan 19, 2018 at 8:58 AM, Jared Mauch <ja...@puck.nether.net> wrote: >> On Jan 18, 2018, at 8:44 PM, William Herrin <b...@herrin.us> wrote: >>> Which packet? Is there a specific CDN that does this? I’d be curious to >>> see >>> data vs spec

Re: MTU to CDN's

2018-01-19 Thread William Herrin
Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: MTU to CDN's

2018-01-18 Thread William Herrin
On Thu, Jan 18, 2018 at 7:41 PM, Jared Mauch <ja...@puck.nether.net> wrote: >> On Jan 18, 2018, at 7:32 PM, William Herrin <b...@herrin.us> wrote: >> >> On Thu, Jan 18, 2018 at 7:14 PM, Jared Mauch <ja...@puck.nether.net> wrote: >>> lets say i

Re: MTU to CDN's

2018-01-18 Thread William Herrin
ight not. After all, I am not the host you were looking for. Good luck. Regards, Bill Herrin P.S. This makes Linux servers happy: iptables -t mangle --insert POSTROUTING --proto tcp \ --tcp-flags SYN,RST,FIN SYN --match tcpmss --mss 1241:65535 \ --jump TCPMSS --set-mss 1

Re: Blockchain and Networking

2018-01-11 Thread William Herrin
uter? Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Blockchain and Networking

2018-01-09 Thread William Herrin
olved by ordinary PKI. Now, if we wanted to replace the RIRs and allow people to self-assign IPv6 addresses out of ULA space which we'd then honor in the global BGP table, blockchain could have a role. -Bill -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems

Re: Site-Local/Unique-Local Addressing (IPv6)

2018-01-08 Thread William Herrin
of collision, a property lacking in RFC1918. Other than that, it's exactly the same as RFC 1918. Site local is deprecated. As explained in the RFC, the concept of a "site" could not be usefully defined for the purpose of private addressing. You can safely ignore it. Regards, Bill Herr

Re: Blockchain and Networking

2018-01-07 Thread William Herrin
s great at proving chain of custody, but when do you need to do that in computer networking? Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Spectre/Meltdown impact on network devices

2018-01-07 Thread William Herrin
On Sun, Jan 7, 2018 at 8:57 PM, Masataka Ohta < mo...@necom830.hpcl.titech.ac.jp> wrote: > William Herrin wrote: > >> Meltdown and Spectre are privilege escalation flaws. If you can induce the >> physical hardware to run arbitrary code you provide at an unprivileged &g

Re: Spectre/Meltdown impact on network devices

2018-01-07 Thread William Herrin
es generally do not run untrusted code so the preconditions for Meltdown and Spectre generally aren't there. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: IPv4 smaller than /24 leasing?

2018-01-05 Thread William Herrin
statement than "I can't afford $5k." The former is a legitimate business decision that businesses make every day. -Bill -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: IPv4 smaller than /24 leasing?

2018-01-04 Thread William Herrin
their activity is not in the Internet business or any other kind of business and should probably stop lying to themselves about that. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Attacks from poneytelecom.eu

2018-01-04 Thread William Herrin
On Thu, Jan 4, 2018 at 4:02 PM, Dan Hollis <goe...@sasami.anime.net> wrote: > On Thu, 4 Jan 2018, William Herrin wrote: > >> On Thu, Jan 4, 2018 at 11:48 AM, Michael Crapse <mich...@wi-fiber.io> >> wrote: >> >>> I've never dealt with a supp

Re: IPv4 smaller than /24 leasing?

2018-01-04 Thread William Herrin
-time market purchase under $5000 and the ARIN justification for that small a block almost writes itself. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: IPv4 smaller than /24 leasing?

2018-01-04 Thread William Herrin
/24, they need a plan other than "advertise to your peers with BGP" because even if your peer accepts a /27, most of their peers will not. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: IPv4 smaller than /24 leasing?

2018-01-04 Thread William Herrin
le nodes around the world allowing near-optimal routing from most origins. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Attacks from poneytelecom.eu

2018-01-04 Thread William Herrin
ith. Navigating the support queue to the guy competent to deal with my problem is one of the more infuriating things about big company support. -Bill -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Attacks from poneytelecom.eu

2018-01-04 Thread William Herrin
pport queue is more of a quandary. The form submission should provide a case number, the individual to whom it is assigned, direct contact information for that individual and a promise that your report will receive a response. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: AS Numbers unused/sitting for long periods of time

2018-01-03 Thread William Herrin
uch action would have to exceed the risk. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Threads that never end (was: Waste will kill ipv6 too)

2018-01-02 Thread William Herrin
old the line there, there is no line. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: AS Numbers unused/sitting for long periods of time

2018-01-02 Thread William Herrin
d to be in the GRT" - that's why we have Private AS numbers. > Private AS numbers suffer from the same interconnection collision issues as private IP addresses and if you have a private AS it's *because* you're interconnecting networks. Regards, Bill Herrin -- William Herrin .

Re: Waste will kill ipv6 too

2017-12-29 Thread William Herrin
myriad other 'things' we can't > even imagine right now. > Think in terms of system architectures where the address space is fully consumed when empty to more than 20 decimal places. Because we're idiots and actually designed it that way. -- William Herrin her...@d

Re: 48vDC Output UPS

2017-12-29 Thread William Herrin
. What you need is a Rectifier that feeds a -48 battery system. You connect your equipment the battery and make sure the rectifier system puts out enough wattage to both power the equipment and keep the battery topped off. Try searching ebay for "rack rectifier" Regards, Bill He

Re: Waste will kill ipv6 too

2017-12-29 Thread William Herrin
process the header. The originating and destination nodes have to pay attention to all extension headers, but then they always did have to process packets with information of variable lengths. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems ..

Re: Waste will kill ipv6 too

2017-12-28 Thread William Herrin
IPv6. The short of it is, we got here > first, so we don't have to give a shit about being efficient or frugal. > Yep. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Geolocation: IPv4 Subnet blocked by HULU, and others

2017-12-27 Thread William Herrin
IP space > allocated from AfriNIC. > > One might consider Hulu et al not so at-fault with that fact in > consideration. Hi Jima, Net 196/8 is part of the swamp. Just speculating, but perhaps the original registration of 196.53.96.0/22 pre-dated the reassignment of 196/8 to AfriNIC? Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Geolocation: IPv4 Subnet blocked by HULU, and others

2017-12-27 Thread William Herrin
imate customers, so all you really need is for the right person at Hulu to receive a swift kick in the tail from someone they can't ignore. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: AS PATH limits

2017-12-22 Thread William Herrin
twork out of your tables until it's fixed? :) Good luck with that since the BGP session collapses in the process of receiving that corrupted data. That's the bug. The other guy's router could filter the prefix but if he doesn't he fouls the BGP session to everybody he tries to peer it to. Regards.

Re: AS PATH limits

2017-12-22 Thread William Herrin
On Fri, Dec 22, 2017 at 5:45 PM, Nick Hilliard <n...@foobar.org> wrote: > William Herrin wrote: > > The AS path lengths we're talking about are unreasonable. > > "unreasonable" is a peculiar word to use here :-) > > It's the internet and you can't expect other

Re: AS PATH limits

2017-12-22 Thread William Herrin
egards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Companies using public IP space owned by others for internal routing

2017-12-21 Thread William Herrin
lf, the layer 3 protocol, works as well as anything new that could be designed. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Waste will kill ipv6 too

2017-12-20 Thread William Herrin
let's just not worry about how many bits are consumed at this step." With a cumulative effect on the consumption of IPv6 space. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Waste will kill ipv6 too

2017-12-20 Thread William Herrin
blocks for another order of magnitude. It slips away faster than you might think. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Companies using public IP space owned by others for internal routing

2017-12-19 Thread William Herrin
Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Companies using public IP space owned by others for internal routing

2017-12-18 Thread William Herrin
right now. After we burn through that in the next 20 years, we can if we so desire change the rules for how (and how quickly) we use 4000::/3. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Static Routing 172.16.0.0/32

2017-12-08 Thread William Herrin
y semi-clever because the .0 address is a corner case in the code and corner cases are where bugs are most likely to happen. And if you're sending clients from that address to another host with a regular 172.16 address anyway... Regards, Bill Herrin > > > Original message ----

Re: Static Routing 172.16.0.0/32

2017-12-08 Thread William Herrin
extended version because that's about as clear as mud. First you asked about routing. Now you imply HTTP. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Static Routing 172.16.0.0/32

2017-12-08 Thread William Herrin
do you mean by that? A static-routed anycast address? 2. In what reachability context? Is this a private network? An ISP network where the reachability should be the ISP and its customers? Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us

Re: Novice sysadmins

2017-12-06 Thread William Herrin
ing a fork lift > incompetently, or building an unsafe raised floor.). > I want pictures of the unsafe raised floor. -Bill -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Novice sysadmins (was: Suggestions for a more privacy conscious email provider)

2017-12-05 Thread William Herrin
pped: they almost immediately spread throughout the office. That's bad, so we use different cable than what we put under the desk where the fumes will tend to stay near where they started. Trap gases? No! Plenum is for where the gases would quickly spread! Regards, Bill Herrin -- Wil

Re: Novice sysadmins (was: Suggestions for a more privacy conscious email provider)

2017-12-05 Thread William Herrin
e arrival in 1991, but I don't recall much in the way of oversight... or banishment. I do recall that the '88 Morris worm resulted in 400 hours of community service and a tenured professorship at MIT. I suppose the latter could be considered a severe consequence. Regards, Bill Herrin -- Willi

Re: Suggestions for a more privacy conscious email provider

2017-12-02 Thread William Herrin
u aren't paying for it and it's not a demo meant to get you to pay for it then you're not the customer, you're the product. If you're the product, guess what the customer is paying for. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems .

Re: WiFi - login page redirection not working

2017-11-30 Thread William Herrin
own SSL certificate that if it appears during negotiation means the application should "check for captive portal." -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Incoming SMTP in the year 2017 and absence of DKIM

2017-11-29 Thread William Herrin
specially exist and would be much more complex. Systemic and computational complexity is a very practical difference between the two situations. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Incoming SMTP in the year 2017 and absence of DKIM

2017-11-29 Thread William Herrin
On Wed, Nov 29, 2017 at 12:17 PM, Stephen Frost <sfr...@snowman.net> wrote: > * William Herrin (b...@herrin.us) wrote: > > On Wed, Nov 29, 2017 at 12:03 PM, Eric Kuhnke <eric.kuh...@gmail.com> > wrote: > > > How much weight do you put on an incoming message, in

Re: Incoming SMTP in the year 2017 and absence of DKIM

2017-11-29 Thread William Herrin
dding > additional score towards a possible value of spam, for total absence of > DKIM signature? > Zero. DKIM for mailing lists is a horribly broken design and legitimate mailing lists are second only to spam in quantity of SMTP transactions. Regards, Bill Herrin -- William

Re: tracking TCP session hop by hop

2017-11-29 Thread William Herrin
see the path taken at the IP level. Underlying transits at the Ethernet or MPLS level are intentionally invisible to the endpoints. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Definition of ISP vs Transit provider

2017-11-22 Thread William Herrin
which isn't about the FCC action per say. > > This is about how does one define Transit provider vs ISP ? Corn on the cob vs. corn in a can. > Just curious to see if there are agreed upon definitions from the > network operators's point of view. No. Regards, Bill Herrin --

Re: Broadcast television in an IP world

2017-11-20 Thread William Herrin
dentified in such a way that multiple consumers for the same data request the same chunk ID. And small enough chunks that real-time feeds are delayed by few enough seconds to make them practical. Unicast with a little bit of anycast. No multicast on that road map. Regards, Bill Herrin -- Willi

Re: GCSC critical infrastructure protection questions: your input needed.

2017-11-14 Thread William Herrin
vilian infrastructure as well as laying out the combatants' duties to mitigate collateral damage from strikes on government personnel and facilities? Is there some reason these laws should not continue to apply when the attacks are carried out with bits instead of bombs? Regards, Bill Herrin -- W

Re: What's the point of prepend communities?

2017-10-26 Thread William Herrin
On Thu, Oct 26, 2017 at 3:05 PM, William Herrin <b...@herrin.us> wrote: > On Thu, Oct 26, 2017 at 2:47 PM, Jason Lixfeld <jason+na...@lixfeld.ca> > wrote: > You'd only use communities like that if you want to signal the ISP to > deprioritize your advertisement on a particu

Re: What's the point of prepend communities?

2017-10-26 Thread William Herrin
On Thu, Oct 26, 2017 at 2:47 PM, Jason Lixfeld <jason+na...@lixfeld.ca> wrote: > Hi Bill, > > > On Oct 26, 2017, at 2:37 PM, William Herrin <b...@herrin.us> wrote: > > > > BGP routing is based on "distance". Distance in BGP is primarily > calculat

Re: What's the point of prepend communities?

2017-10-26 Thread William Herrin
y knob used for controlling which path gets taken. Is this a relic from before ISPs allowed for local preference adjustment, > or is there actually a use case for this? It's the exact opposite of a relic. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@h

Re: Temp at Level 3 data centers

2017-10-12 Thread William Herrin
ers. You can't necessarily fill a cabinet with equipment. When you reach the allowable heat density, you have to start filling the next cabinet. I've seen DC cabinets left half empty for exactly this reason. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin

Re: Temp at Level 3 data centers

2017-10-11 Thread William Herrin
a compromise. If one of your DCs' palm vein databases is lost, what's your plan for replacing that hand? Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: RFC 1918 network range choices

2017-10-05 Thread William Herrin
math here, beyond what was later generalized with CIDR, it's not obvious. 10.0: 1010 172.16: 1010 1100 0001 172.31: 1010 1100 0001 192.168: 1100 1010 1000 AFAIK, it was simply one range each from classes A, B and C. Regards, Bill Herrin

Re: Long BGP AS paths

2017-10-01 Thread William Herrin
On Sun, Oct 1, 2017 at 1:06 PM, Kelly Dowd <kd...@transelement.net> wrote: > On Sun, Oct 1, 2017 at 12:29 AM, William Herrin <b...@herrin.us> wrote: > >> To the chucklehead who started announcing a 2200+ byte AS path yesterday >> around 18:27 EDT, I beg of you

Re: AS PATH limits

2017-09-30 Thread William Herrin
ts what it sends to the neighbor who then chokes. Bug and patch here: https://lists.quagga.net/pipermail/quagga-dev/2017-September/033284.html Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Long BGP AS paths

2017-09-30 Thread William Herrin
If it was configured with --enable-pcreposix I believe it supports the regex. Most installs that come straight from a Linux distro used this flag. Regards, Bill -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Long BGP AS paths

2017-09-30 Thread William Herrin
-limit 50 Juniper: https://kb.juniper.net/InfoCenter/index?page=content=KB29321 Quagga: ip as-path access-list maxas-limit50 deny ^([{},0-9]+ ){50} ip as-path access-list maxas-limit50 permit .* Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us

Re: Creating a Circuit ID Format

2017-08-24 Thread William Herrin
h other organizations' identifiers. When you build your central database, make sure it can accept the arbitrary circuit ID formats applied to your new property. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Creating a Circuit ID Format

2017-08-21 Thread William Herrin
r. Put the customer's configuration (such as speed) in your database and leave it out of the circuit id. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Cogent BCP-38

2017-08-17 Thread William Herrin
the routing table which is NOT BCP38. Strict mode URPF down paths guaranteed to be single-homed. Manually configure allowed sources and announcements for BGP-talking customers. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems

Re: BGP peering question

2017-07-11 Thread William Herrin
t's one of the cases that forms a valley where the participating organization is not paid for or directly donating the transiting packets. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: BGP peering question

2017-07-11 Thread William Herrin
ring link could jam traffic between your customers and theirs. If you're not able to notice and respond, you'd be better off sending the traffic up to your ISPs and letting them worry about it. If the three of those add up to "yes" instead of "no" then peering m

Re: Some advice on IPv6 planning and ARIN request, please

2017-07-11 Thread William Herrin
for each of the 32 departments. Delegation on nibble boundaries > is for convience and nothing else. > For comprehensibility which nets convenience. Consistently delegate on nibble boundaries and your power users don't have to understand Boolean algebra to make sense of the network. Regards,

Re: Some advice on IPv6 planning and ARIN request, please

2017-07-08 Thread William Herrin
ts? ARIN will generally accept either explanation. You'll get the larger number of IPv6 addresses you want if you tell them you're an ISP. The cost difference is likely to remain minimal. The major issue is that as an ISP you'll be expected to enter SWIP records so read up on that. Regards, Bill -

Re: Some advice on IPv6 planning and ARIN request, please

2017-07-07 Thread William Herrin
60 per guest, not /64. IPv6 can do nifty IoT things like collecting all of a guest's devices behind his personal firewall but it doesn't work if you've only assigned a /64. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems

Re: Bonus support for Action for Children

2017-06-30 Thread William Herrin
sagree and would ask you to stop. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Point 2 point IPs between ASes

2017-06-29 Thread William Herrin
. Conveniently, IPv6 reverse DNS also delegates on the nibble boundary. Heck, I’m gonna do whatever it takes to NOT subnet on bits with my v6 > deployment. Hopefully with v6, gone are the days of binary subnetting math. > Good plan. -Bill -- William Herrin her...@dirtsid

Re: Point 2 point IPs between ASes

2017-06-28 Thread William Herrin
/124 over /126. And /124 doesn't suffer from ND exhaustion attacks like /112 might. The only thing /112 buys you (that I can see) is a single colon in front of the final digit. I don't see how /112 would be a good choice. Regards, Bill Herrin -- William Herrin her...@dirtside.com

Re: Point 2 point IPs between ASes

2017-06-28 Thread William Herrin
> 112... Could be worse I suppose. They could have picked 113. -Bill -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Point 2 point IPs between ASes

2017-06-28 Thread William Herrin
On Wed, Jun 28, 2017 at 5:09 PM, Thomas Bellman <bell...@nsc.liu.se> wrote: > On 2017-06-28 17:03, William Herrin wrote: > > > The common recommendations for IPv6 point to point interface numbering > are: > > /64 > > /124 > > /126 > > /127 > &g

Re: Point 2 point IPs between ASes

2017-06-28 Thread William Herrin
IMUS bears no responsibility for any loss > or damage arising in any way from the use thereof.The term "PRIMUS" > includes its affiliates. > > > Pour la version en français de ce message, veuillez voir > http://www.primustel.ca/fr/legal/cs.htm > -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: IPv4 Hijacking For Idiots

2017-06-05 Thread William Herrin
e it's often impractical to determine whether a block of IP addresses can legitimately be announced from a given peer. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Lit buildings in Tysons Corner, VA?

2017-04-19 Thread William Herrin
get any general-interest information. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Microsoft O365 labels nanog potential fraud?

2017-03-29 Thread William Herrin
On Wed, Mar 29, 2017 at 12:24 PM, Alan Hodgson <ahodg...@lists.simkin.ca> wrote: > On Wednesday 29 March 2017 11:12:33 William Herrin wrote: > > Both SPF and DKIM are meant to be checked against the domain in the > > envelope sender (SMTP protocol-level return address)

Re: Microsoft O365 labels nanog potential fraud?

2017-03-29 Thread William Herrin
o which I reply was scored by spam assassin as "SPF_PASS" even though you do not include NANOG's servers in the SPF record for tnetconsulting.net. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Microsoft O365 labels nanog potential fraud?

2017-03-29 Thread William Herrin
l also cause > that check to fail. > Hello, Both SPF and DKIM are meant to be checked against the domain in the envelope sender (SMTP protocol-level return address) which the NANOG list sets to nanog-boun...@nanog.org. Checking against the message header "from" address

Re: [NOC] ARIN contact needed: something bad happens with legacy IPv4 block's reverse delegations

2017-03-20 Thread William Herrin
; Hi Brett, The last I tried it, the servers which the glue claims are authoritative for a zone could assert that they themselves are not authoritative and offer new glue for completely different servers asserted to be authoritative. I had to fake a parent zone in Bind. This was before DNSSEC. Regard

Re: [NOC] ARIN contact needed: something bad happens with legacy IPv4 block's reverse delegations

2017-03-17 Thread William Herrin
reciated. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: [NOC] ARIN contact needed: something bad happens with legacy IPv4 block's reverse delegations

2017-03-17 Thread William Herrin
nfirmed no data. Thanks for the clarification! Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: [NOC] ARIN contact needed: something bad happens with legacy IPv4 block's reverse delegations

2017-03-17 Thread William Herrin
On Fri, Mar 17, 2017 at 1:42 PM, Mark Kosters <ma...@arin.net> wrote: > On 3/17/17, 12:26 PM, "NANOG on behalf of William Herrin" < nanog-boun...@nanog.org on behalf of b...@herrin.us> wrote: >> Hmm. That sounds like an ARIN-side bug too. ARIN's code res

Re: [NOC] ARIN contact needed: something bad happens with legacy IPv4 block's reverse delegations

2017-03-17 Thread William Herrin
an ARIN-side bug too. ARIN's code responded to corrupted data by zeroing out the data instead of using the last known good data. That's awfully brittle for such a critical service. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems

Re: any issue with Centurylink yesterday

2017-03-17 Thread William Herrin
the host would be fine, > and manual telnet to TCP/443 would work). Hi Ken, When I hear those symptoms my brain jumps to path MTU discovery. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Government agency renting or selling IP space

2017-03-16 Thread William Herrin
Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Government agency renting or selling IP space

2017-03-16 Thread William Herrin
money each year. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Government agency renting or selling IP space

2017-03-16 Thread William Herrin
party who may turn out to be a criminal use IP addresses authentically registered to your government agency to commit crimes. As an end-user, you won't be able to SWIP information about the rental, leading angry law enforcement offers to knock upon your door. Regards, Bill Herrin -- Willi

Re: Government agency renting or selling IP space

2017-03-16 Thread William Herrin
around a government entity renting IP addresses. If the entity is registered as an end user (instead of as an ISP) then such rentals might also be considered fraudulent. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside Systems . Web: <http://www.dirtside.com/>

Re: Purchased IPv4 Woes

2017-03-12 Thread William Herrin
friend who is visited by police every few months because the prior owner of his house is a petty criminal still committing crimes and their database shows the house as his last known residence. Regards, Bill Herrin -- William Herrin her...@dirtside.com b...@herrin.us Dirtside

Re: WEBINAR TUESDAY: Can We Make IPv4 Great Again?

2017-03-06 Thread William Herrin
ate their heads from > backside and handle basic functionality of IPv4 without throwing the packets > on the floor. PMTUD is broken as designed, the one thing about TCP which directly violates the end-to-end principle. -Bill -- William Herrin her...@dirtside.com b...@herri

<    3   4   5   6   7   8   9   10   11   12   >