Re: IPv6 End User Fee

2012-08-03 Thread William Pitcock
Hi, On Aug 3, 2012, at 2:22 PM, Otis L. Surratt, Jr. o...@ocosa.com wrote: Anyone charging end users for IPv6 space yet? :p Just wondering, with so many IPv6 resources in a single allocation it would seem difficult to charge anything at all. 1. How are you making up loss of revenue on

Re: IPv6 End User Fee

2012-08-03 Thread William Pitcock
Hi! On Aug 3, 2012, at 6:32 PM, Otis L. Surratt, Jr. o...@ocosa.com wrote: By end user I mean hosting clients (cloud, collocation, shared, dedicated, VPS, etc.) of any sort. For example you have clients that would needsay /24 for their dedicated server. If you charge a $1.00/IP which is

Re: Question about Martians on Vyatta

2012-06-28 Thread William Pitcock
On Jun 28, 2012, at 10:42 AM, Eric Germann egerm...@limanews.com wrote: All, I'm trying to understand why a Vyatta 6.4 collection of routers is carping about the following as martian routes: 113.107.174.14 27.73.1.159 94.248.215.60 95.26.105.161 They don't look like they fall in

Re: Question about Martians on Vyatta

2012-06-28 Thread William Pitcock
Hi, On Jun 28, 2012, at 10:50 AM, Eric Germann egerm...@limanews.com wrote: Well, I did when I checked them shortly after I saw the log messages. Wondering now if the routes for those bounced and in the middle of the bounce, they're considered martian. Yes, that sounds reasonable.

Re: Request to lease IP space, or things that make you want to go hmmmmm..

2012-03-08 Thread William Pitcock
Hi, On 3/8/2012 5:40 PM, Matthew Huff wrote: Just got an email today to our account associated with our legacy ARIN address space. A firm Precision Management of Texas is interested in subleasing some of our IP space for on-demand solutions for brand marketers and website promotion chiefly

Re: report botnet CC?

2012-02-08 Thread William Pitcock
hi, On Feb 8, 2012, at 1:04 PM, Nicolai wrote: On Tue, Feb 07, 2012 at 10:20:07PM -0500, Ryan Rawdon wrote: Assuming it is not a futile/wasted effort, where is the current best place/resource to report an active botnet CC to? I don't know if there's a single best option, but there are

Re: XSServer / Taking down a spam friendly provider

2011-10-26 Thread William Pitcock
On Wed, 26 Oct 2011 13:47:03 -0400 Chris cal...@gmail.com wrote: For folks who do not understand, I'm trying to McColo XSServer so their lack of response in regards to abuse is gone rather than the suggestions of scripting (guess you didn't read the full text of the email) or you pushing a

Re: XSServer / Taking down a spam friendly provider

2011-10-26 Thread William Pitcock
On Wed, 26 Oct 2011 20:22:53 -0400 Chris cal...@gmail.com wrote: McColo and Atrivo were disconnected for much larger sins than spamming someone's wordpress blog. Many of you do not understand the scope of just spamming a Wordpress blog. I do understand the scope of shady SEO companies.

Re: NANOG List Update - Moving Forward

2011-07-12 Thread William Pitcock
On Tue, 12 Jul 2011 10:50:38 +0100 (BST) Tim Franklin t...@pelican.org wrote: Thankfully, the current test has been a success. Including stopping non-members from posting to the list, and other anti-spam? I've got a sudden influx this morning of spam addressed to nanog@nanog.org :(

Re: VPN tunnels between US and China dropping/slow

2011-05-10 Thread William Pitcock
On Tue, 10 May 2011 10:12:57 -0400 Thomas York strate...@fuhell.com wrote: At my current place of business, we have several manufacturing plants in China as well as the United States. All of the plants have an OVPN tunnel to a datacenter here in Indianapolis which connect all of the plants.

Re: 23,000 IP addresses

2011-05-10 Thread William Pitcock
On Tue, 10 May 2011 10:22:03 -0400 Christopher Morrow morrowc.li...@gmail.com wrote: On Tue, May 10, 2011 at 10:15 AM, Scott Brim scott.b...@gmail.com wrote: On Tue, May 10, 2011 at 09:42, Leigh Porter leigh.por...@ukbroadband.com wrote: So are they basing this on you downloading it or on

Re: Cent OS migration

2011-05-09 Thread William Pitcock
On Mon, 9 May 2011 17:14:06 -0400 Lamar Owen lo...@pari.edu wrote: On Monday, May 09, 2011 04:45:36 PM Kevin Oberman wrote: Depends on what he is doing. BSDs tend to be far more mature than any Linux. They are poor systems for desktops or anything like that. They are heavily used as

Re: Contact for City of Panama City Beach, FL?

2011-04-14 Thread William Pitcock
On Thu, 14 Apr 2011 15:02:36 -0700 Dan Dill d...@harsch.com wrote: http://www.pcbgov.com/city_directory.htm Seems like it wouldn't be hard to track down that information... Can you identify where on that page it lists a contact for the IT department of the Panama City government? I can't,

Re: IPv6 SEO implecations?

2011-03-28 Thread William Pitcock
On Mon, 28 Mar 2011 15:18:30 -0700 Wil Schultz wschu...@bsdboy.com wrote: I'm attempting to find out information on the SEO implications of testing ipv6 out. A couple of concerns that come to mind are: 1) www.domain.com and ipv6.domain.com are serving the exact same content. Typical SEO

Re: Why does abuse handling take so long ?

2011-03-13 Thread William Pitcock
On Sun, 13 Mar 2011 05:39:02 -0700 (PDT) goe...@anime.net wrote: On Sun, 13 Mar 2011, Alexander Maassen wrote: Why o why are isp's and hosters so ignorant in dealing with such issues and act like they do not care? they don't act like they do not care. they really *don't* care. no acting.

Re: [BEWARE] David J. Moore

2011-03-04 Thread William Pitcock
On Thu, 03 Mar 2011 09:03:18 -0500 Leon Kaiser litera...@gmail.com wrote: This is the man who poisoned DroneBL. He is a bad man. Keep your children safe. http://raged.tittybang.org/ How, exactly, has kunwon1 poisoned DroneBL when he has had no RPC key for over a year? William

Re: Ranges announced by Level3 without permitions.

2011-03-04 Thread William Pitcock
On Thu, 03 Mar 2011 15:34:11 +0100 Alfa Telecom r...@alfatelecom.cz wrote: On 03/03/2011 03:25 PM, Brandon Ross wrote: On Thu, 3 Mar 2011, Alfa Telecom wrote: Both ranges are from RIPE region and couldn't be announced from ARIN ASN at all. Your premise is incorrect. Any block from

Re: What vexes VoIP users?

2011-03-01 Thread William Pitcock
Hi, On Tue, 1 Mar 2011 09:25:23 + (GMT) Tim Franklin t...@pelican.org wrote: I do not live over there, I have never seen a Vonage or Magic jack or any other VoIP service ad on TV in the UK, ever. Vonage *are* advertising on UK TV. Hardly the carpet-bombing the OP suggests is the

Re: Contact for APEWS.org?

2011-02-21 Thread William Pitcock
Hi, On Mon, 21 Feb 2011 12:41:57 -0800 Kate Gerry k...@quadranet.com wrote: We've been advised by a client that they're incorrectly listing a /15. The listing is: (E-431420) 96.44.0.0/15 According to their FAQ they only take delistings via newsgroups and Google News isn't co-operating

Re: Leasing of space via non-connectivity providers

2011-02-05 Thread William Pitcock
Hi, On Sat, 5 Feb 2011 17:12:40 -0600 Aaron Wendel aa...@wholesaleinternet.net wrote: How can someone steal something from you that you don’t own? Legacy space. The best example I can think of was Choopa's hijacking of Erie Forge and Steel's legacy space. In this case, it was theft as it

nlayer contact

2011-02-05 Thread William Pitcock
Hi, Could an nLayer network engineer contact me offlist regarding a service or core router at I'm guessing One Wilshire that is having serious problems? Thanks. William

Re: You Tube Problems

2011-02-03 Thread William Pitcock
On Fri, 4 Feb 2011 16:37:55 +1300 (FJST) Franck Martin fra...@genius.com wrote: Any relation? http://mobile.slashdot.org/story/11/02/04/0043234/Verizon-To-Throttle-High-Bandwidth-Users No, that has to do with wireless users, not DSL. Wireless is an entirely different part of the Verizon

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 17:09:07 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: That's fine, but the listings don't even make sense. There is no evidence in the listing and i'm still trying to figure out a) why they think that these new listings have anything to do with the ones we

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 18:35:22 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: William, I'm not certain that any Black Lotus IP's are even connected to EFnet. Maybe not presently, but your company has a history in the IRC community. And it's not a history I would define as good. A

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 18:54:37 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: William, Our company is primarily focused on the filtering of DDoS traffic. A significant amount of our IP space is routed elsewhere via proxy or GRE. If a customer pollutes, they pollute and thats their

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 19:11:37 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: William, You're quite right, we don't. We presume that our customers are honorable until proven otherwise. We're a legitimate U.S. based corporation and we make ourselves available to the pertinent RBL's

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 19:13:16 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: Bill, I'm getting 72.215.225.9 for that host. The nameservers just changed to ns2/ns4.codiz.net. ns2 is a bogon, the real deal is ns4 hosted at corbina.ru, which has an abuse@ that goes to /dev/null so

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 19:21:19 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: William, It depends, we have criteria. You can't just e-mail ab...@blacklotus.net and expect any given web site to be immediately shut down. There is due process and we need to make a decision on the

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 19:42:22 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: I fat fingered the netmask, try now. $ wget -S www.vertrouwdeapotheek.nl --2011-01-17 19:07:59-- http://www.vertrouwdeapotheek.nl/ Resolving www.vertrouwdeapotheek.nl... 208.64.120.197 Connecting to

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 19:46:55 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: Raymond, I do not take you for a fool, the assignment is legitimately null routed. My traceroutes are dropping at my home ISP. I call bollocks. It's alive and kicking via BGP here. edge1.lax01# show ip

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 20:23:17 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: On Mon, Jan 17, 2011 at 8:21 PM, William Pitcock neno...@systeminplace.net wrote: Hi, On Mon, 17 Jan 2011 19:46:55 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: Raymond, I do not take you

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 20:28:55 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: Rhetorical question. Probably PCCW isn't accepting the null routes. Why not blacklist them for having messed up communities? Why not actually nullroute the IPs instead of depending on BGP tagging? Again: ip

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 20:38:54 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: It's a problem with PCCW not accepting the tags, we've had this issue with them occasionally and will need to address it with them directly. The machine itself has also been shut down so there should not be any

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
On Mon, 17 Jan 2011 21:34:49 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: We were offering a privacy protected domain registration service at one point which we have since discontinued for obvious reasons. Ah yes! That *was* you guys. Did you know that you're still being recommended

Re: Request Spamhaus contact

2011-01-17 Thread William Pitcock
Hi, On Mon, 17 Jan 2011 21:45:40 -0500 Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: All, I would like to extend a special thanks to one of the Spamhaus team members for reaching out to me and offering dialogue on this matter. He was quite polite and understanding of the situation and we

Re: IPv6 prefix lengths

2011-01-12 Thread William Pitcock
Hi, On Wed, 12 Jan 2011 22:49:15 -0500 Richard Barnes richard.bar...@gmail.com wrote: Hi all, What IPv6 prefix lengths are people accepting in BGP from peers/customers? My employer just got a /48 allocation from ARIN, and we're trying to figure out how to support multiple end sites out of

Why do ISPs still not do packet source verification in 2010?

2010-12-20 Thread William Pitcock
Hi, I am wondering why it seems that many ISPs still do not do packet source verification in 2010? Just last night I had to deal with a DoS attack that would have been impossible if more ISPs did packet source verification. I mean, it's 2010. We can do IP-level ACLs in hardware on most of the

Re: Mastercard problems

2010-12-09 Thread William Pitcock
On Thu, 2010-12-09 at 18:34 +1100, Ben McGinnes wrote: On 9/12/10 8:04 AM, Christopher Morrow wrote: On Wed, Dec 8, 2010 at 3:06 PM, Philip Dorr tagn...@gmail.com wrote: The problem is that they were also slashdotted. The logs would also have a large number of unrelated. pro-tip: the

Re: Want to move to all 208V for server racks

2010-12-02 Thread William Pitcock
Hi, On Thu, 2010-12-02 at 10:58 -0500, Jay Nakamura wrote: I really want to move all newly installed internal and customer racks over to all 208v power instead of 120v. As far as I can remember, I can't remember any server/switch/router or any other equipment that didn't run on 208v AC.

Re: Level 3 Communications Issues Statement Concerning Comcast's Actions

2010-11-29 Thread William Pitcock
On Mon, 2010-11-29 at 20:02 -0500, Bret Clark wrote: On 11/29/2010 07:55 PM, Ren Provo wrote: http://blog.comcast.com/2010/11/comcast-comments-on-level-3.html On Mon, Nov 29, 2010 at 7:51 PM, Dave CROCKERd...@dcrocker.net wrote: Okay's let's say L3 gives in to Comcast and pays

Re: wikileaks unreachable

2010-11-28 Thread William Pitcock
On Sun, 2010-11-28 at 16:43 -0500, Jeffrey Lyon wrote: I'm surprised it took this long for the DDoS train to pull into the station. Wikileaks gets DDoSed all the time. My understanding is that PRQ nullrouted the IP because the DDoS is much larger this time. William

Re: wikileaks unreachable

2010-11-28 Thread William Pitcock
On Sun, 2010-11-28 at 17:07 -0500, Jeffrey Lyon wrote: I wouldn't have thought that PRQ would have any significant protection in place. They used to host thepiratebay. I would figure that site probably got a lot of ddos attacks... William

Re: Introducing draft-denog-v6ops-addresspartnaming

2010-11-19 Thread William Pitcock
On Fri, 2010-11-19 at 17:06 +0100, Richard Hartmann wrote: On Fri, Nov 19, 2010 at 14:14, Scott Morris s...@emanon.com wrote: If 8 bits is a byte, then 16 bits should be a mouthful. When does it become a meal and, more importantly, do you want to supper (sic) size? The supersize option

Re: Extra latency at ATT exchange for UVerse

2010-11-11 Thread William Pitcock
On Thu, 2010-11-11 at 15:39 -0500, Srikanth Sundaresan wrote: Can anyone explain why ATT's UVerse adds significant delay to packets compared to their ADSL service? U-Verse is actually the name of two entirely different services - VDSL and FTTP. This is a typical symptom of stupidity on behalf

Re: What must one do to avoid Gmail's retarded non-spam filtering?

2010-09-28 Thread William Pitcock
Hi, Have you checked the IronPort reputation scores for your mailserver IPs? Google uses this data as part of it's spam detection method. William On Tue, 2010-09-28 at 16:15 -0400, Erik L wrote: I realize that this is somewhat OT, but I'm sure that others on the list encounter the same

Re: Road Runner Abuse Contact

2010-09-02 Thread William Pitcock
On Thu, 2010-09-02 at 16:29 -0700, J.D. Falk wrote: On Sep 2, 2010, at 1:43 PM, Brad Fleming wrote: Any Road Runner abuse reps on the list? http://postmaster.rr.com/ is a good place to start. Quoting that website: | The Postmaster team is part of the Road Runner Mail Operations | team,

Re: PacketShader

2010-08-23 Thread William Pitcock
Vyatta's commercial products (the bundles with OS+Hardware) come with adequate support in my experience. William (Sorry for topposting. The android email experience is depressingly lacking.) Andrew Kirch trel...@trelane.net wrote: On 8/23/2010 1:17 PM, Joel Jaeggli wrote: What it really

RE: Lightly used IP addresses

2010-08-13 Thread William Pitcock
On Fri, 2010-08-13 at 18:49 +, Nathan Eisenberg wrote: Isn't this a little bit like an SSL daemon? no. One which refuses to process a revocation list on the basis of the function of the certificate is useless. no, it's not. ssl as a form of identity assurance itself is what is

Re: net-neutrality

2010-08-11 Thread William Pitcock
On Wed, 2010-08-11 at 11:29 +, Sven Olaf Kamphuis wrote: hmm funny, it had the piratebay on it, if you think that is a good sales point... do you actually have any legitimate customers? william

Re: I slogged through it so you don't have to -- ICANN Vertical Integration WG for dummies

2010-07-26 Thread William Pitcock
On Mon, 2010-07-26 at 14:42 -0400, Eric Brunner-Williams wrote: But I do take your point about .co/.com, and in all fairness, it is a decade delayed favor returned by NeuStar to Verisign for the .bz/.biz collaborative marketing ploy of 2001. Or eNom's .cc/.com ploy from 1999-present. Don't

Re: 33-Bit Addressing via ONE bit or TWO bits ? does NANOG care?

2010-07-24 Thread William Pitcock
On Sat, 2010-07-24 at 15:50 -0400, Steven King wrote: I am very curious to see how this would play with networks that wouldn't support such a technology. How would you ensure communication between a network that supported 33-Bit addressing and one that doesn't? 33-bit is a fucking retarded

Re: Virbl: The First IPv6 enabled dnsbl?

2010-06-28 Thread William Pitcock
On Sun, 2010-01-17 at 19:16 +, Andy Davidson wrote: On 16 Jan 2010, at 05:30, Tammy A. Wisdom wrote: Mark Schouten ma...@bit.nl wrote: http://virbl.bit.nl/index.php#ipv6 Comments on the listing method are appreciated. wow bind? thats gonna get slower and slower and slower. I hope

Re: Micro-allocation needed?

2010-06-21 Thread William Pitcock
On Mon, 2010-06-21 at 23:32 +0200, Ask Bjørn Hansen wrote: Hi everyone, We're going to anycast a /24 for some DNS servers (and possibly another UDP based service)[1]. I see that ARIN are listing on https://www.arin.net/knowledge/ip_blocks.html the smallest allocations from each prefix.

Re: Micro-allocation needed?

2010-06-21 Thread William Pitcock
On Mon, 2010-06-21 at 23:42 +0200, Ask Bjørn Hansen wrote: On Jun 21, 2010, at 23:34, William Pitcock wrote: On Mon, 2010-06-21 at 23:32 +0200, Ask Bjørn Hansen wrote: Hi everyone, We're going to anycast a /24 for some DNS servers (and possibly another UDP based service)[1]. I

Re: Experience with the Dell PowerConnect 8024F - compare to the Cisco Nexus 5010

2010-06-18 Thread William Pitcock
Hi, On Fri, 2010-06-18 at 11:57 -0400, Steven Fischer wrote: Does anyone have any experience with the Dell PowerConnect 8024F 10-gig switch that they'd be willing to share? How does it perform? How reliable is it? My experiences with the Dell switches have been less than favorable to this

Re: Advice regarding Cisco/Juniper/HP

2010-06-17 Thread William Pitcock
On Thu, 2010-06-17 at 11:07 -0700, Seth Mattinen wrote: On 6/17/2010 11:01, Sandone, Nick wrote: I would also add Brocade/Foundry to the mix as well. We've been deploying these switches with great results. Since the IOS is very similar to Cisco's, the transition has been quite easy.

Re: SCO UNIX Errors

2010-06-10 Thread William Pitcock
On Wed, 2010-06-09 at 23:40 -0700, jacob miller wrote: Hi, Am getting the following error from my SCO UNIX box. They mean use an operating system not made by crackheads. There's a reason why SCO switched from UNIX sales to Intellectual Property trolling after all. William

Re: Latency between GCI Anchorage and VZB in NY

2010-05-26 Thread William Pitcock
Hi, On Wed, 2010-05-26 at 11:27 -0400, Brad Beck wrote: All, I've been working diligently to improve performance of interactive applications (Citrix, terminal) that are run by users in our office located in Anchorage, and are served by a managed Internet connection provided by GCI. Our

Re: any bring your own bandwidth IPv4 over IPv4 tunnel merchants?

2010-05-03 Thread William Pitcock
On Mon, 2010-05-03 at 14:12 -0400, Bill Bogstad wrote: Like many people, I can't justify the expense of commercial IP connectivity for my residence. As a result, I deal with dynamic IP addresses; dns issues; and limitations on the services that I can host at my residence. It just struck me

Re: Terry Childs conviction

2010-04-29 Thread William Pitcock
On Thu, 2010-04-29 at 15:11 -0500, Olsen, Jason wrote: I'm a bit surprised that after the furor here on NANOG when the story first broke (in 2008) that there's been no discussion about the recent outcome of his trial (convicted, one count of felony network tampering). Surely even at DeVry they

Re: Terry Childs conviction

2010-04-29 Thread William Pitcock
On Thu, 2010-04-29 at 21:48 -0400, David Krider wrote: On Thu, 2010-04-29 at 16:47 -0500, William Pitcock wrote: Surely even at DeVry they teach that if you refuse to hand over passwords for property that is not legally yours, that you are committing a crime. I mean, think about it, it's

Re: Terry Childs conviction

2010-04-29 Thread William Pitcock
On Thu, 2010-04-29 at 21:23 -0500, Larry Sheldon wrote: On 4/29/2010 21:05, William Pitcock wrote: On Thu, 2010-04-29 at 21:48 -0400, David Krider wrote: On Thu, 2010-04-29 at 16:47 -0500, William Pitcock wrote: Surely even at DeVry they teach that if you refuse to hand over passwords

Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?

2010-04-28 Thread William Pitcock
On Wed, 2010-04-28 at 14:54 -0700, David Conrad wrote: On Apr 28, 2010, at 2:38 PM, Carl Rosevear wrote: I don't understand why anyone thinks NAT should be a fundamental part of the v6 internet Perhaps the ability to change service providers without having to renumber? DHCPv6 solves

Re: Tracking down reverse for ip

2010-04-15 Thread William Pitcock
On Thu, 2010-04-15 at 15:07 -0500, Dennis Burgess wrote: I have a customer that has an IP of 12.43.95.126. Currently, I can not get any reverse on this IP. What is the best way to find out the responciable servers for this? Thanx in advance. neno...@petrie:~$ dig -x 12.43.95.126

Re: Carrier class email security recommendation

2010-04-12 Thread William Pitcock
On Mon, 2010-04-12 at 07:09 -0700, todd glassey wrote: On 4/12/2010 2:49 AM, Alex Kamiru wrote: I am in the process of sourcing for a carrier class email security solution that will replace our current edge spam gateways based on open source solutions. Some solutions that am currently

Re: Fwd: [c-nsp] capirca : Google Network Filtering Management

2010-04-09 Thread William Pitcock
On Fri, 2010-04-09 at 22:10 -0400, Steve Bertrand wrote: Would someone from Google kindly confirm/deny this claim? I'm as patient as any other, but I'm beginning to feel for those who have yet (but are ready to) to trigger the filters... Thankfully, my 'reasonable' regex knowledge has me

Re: ARIN IP6 policy for those with legacy IP4 Space

2010-04-07 Thread William Pitcock
On Wed, 2010-04-07 at 15:31 -0500, Joe Greco wrote: On Apr 7, 2010, at 9:22 AM, William Herrin wrote: On Wed, Apr 7, 2010 at 12:09 PM, John Palmer (NANOG Acct) nan...@adns.net wrote: Was looking at the ARIN IP6 policy and cannot find any reference to those who have IP4 legacy

Re: NSP-SEC

2010-03-20 Thread William Pitcock
On Sat, 2010-03-20 at 20:30 +0200, Hank Nussbacher wrote: On Fri, 19 Mar 2010, William Pitcock wrote: On Fri, 2010-03-19 at 08:31 -0500, John Kristoff wrote: An ongoing area of work is to build better closed, trusted communities without leaks. Have you ever considered that public

Re: NSP-SEC

2010-03-20 Thread William Pitcock
On Sat, 2010-03-20 at 22:12 +0200, Gadi Evron wrote: On 3/20/10 8:37 PM, William Pitcock wrote: That is not what I mean and you know it. What do you mean than? Hank made a good point on the type of traffic normally going through these groups. My point hasn't much to do with the NSP-SEC

Re: NSP-SEC

2010-03-19 Thread William Pitcock
On Fri, 2010-03-19 at 08:31 -0500, John Kristoff wrote: An ongoing area of work is to build better closed, trusted communities without leaks. Have you ever considered that public transparency might not be a bad thing? This seems to be the plight of many security people, that they have to be

Re: NSP-SEC

2010-03-18 Thread William Pitcock
Hello, Few people actually care about nsp-sec so what exactly are you getting at? Guillaume FORTAINE gforta...@live.com wrote: Misses, Misters, I would want to inform you that the security of the Internet, that is discussed in the NSP-SEC mailing-list [0] by a selected group of vendors

Re: NSP-SEC

2010-03-18 Thread William Pitcock
On Thu, 2010-03-18 at 23:52 -0400, Patrick W. Gilmore wrote: On Mar 18, 2010, at 11:46 PM, William Pitcock wrote: Few people actually care about nsp-sec so what exactly are you getting at? I might argue the few comment, but I think it's better not to reply to Guillaume so people who

Re: OBESEUS - A new type of DDOS protector

2010-03-16 Thread William Pitcock
On Tue, 2010-03-16 at 07:53 +, gordon b slater wrote: Hmm, the hey! it's open source! factor doesn't hold much sway in the network world, no-one will be amazed at that. Many observers are surprised at the amount of free software employed by ISPs and the like, but it's certainly no news to

Re: YouTube AS36561 began announcing 1.0.0.0/8

2010-03-12 Thread William Pitcock
On Thu, 2010-03-11 at 22:52 -0800, Nathan wrote: Hello, I'm hoping to alleviate the what's going on!? type messages here this time. :) stupid question Any IPs we can ping and get a response back from to verify everything is ok? 1.2.3.4 isn't pingable, for example. :( /stupid question

Re: Future timestamps in /var/log/secure

2010-02-26 Thread William Pitcock
On Fri, 2010-02-26 at 11:29 -0700, Brielle Bruns wrote: Isn't the timestamps inserted by syslog rather then the reporting program itself? The syslog message sent to the local unix socket (/dev/log or /dev/syslog) may contain a timestamp, in which case, that timestamp may be used instead of the

Re: Future timestamps in /var/log/secure

2010-02-26 Thread William Pitcock
On Fri, 2010-02-26 at 19:30 +, gordon b slater wrote: On Fri, 2010-02-26 at 13:17 -0600, William Pitcock wrote: The syslog message sent to the local unix socket (/dev/log or /dev/syslog) may contain a timestamp, in which case, that timestamp may be used instead of the local time

Re: Chuck Norris Botnet and Broadband Routers

2010-02-22 Thread William Pitcock
On Mon, 2010-02-22 at 16:21 +0200, Gadi Evron wrote: Last week Czech researchers released information on a new worm which exploits CPE devices (broadband routers) by means such as default passwords, constructing a large DDoS botnet. Today this story hit international news. What makes

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread William Pitcock
On Wed, 2010-02-10 at 17:12 -0700, Blake Pfankuch wrote: Anyone have some insight on a good dual stack Linux (or BSD) router distro? Currently using IPCop but it lacks ipv6 support. I've used SmoothWall Express but not in some time and not sure how well it works with IPv6. Not looking

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread William Pitcock
Hi, On Thu, 2010-02-11 at 13:05 -0500, Jack Carrozzo wrote: Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See the freebsd-isp list. FreeBSD's network stack chokes up in DDoS attacks due to interrupt flooding. We used to use FreeBSD for firewalling and basic routing, but when

RE: DDoS mitigation recommendations

2010-01-27 Thread William Pitcock
Hi, On Tue, 2010-01-26 at 09:56 -0800, Gerald Wluka wrote: I am new to this mailing list - this should be a response to an already started thread that I cannot see: Welcome to NANOG! IntelliguardIT has a new class of network appliance that installs inline (layer 2 appliance). It

Re: Anyone see a game changer here?

2010-01-22 Thread William Pitcock
On Fri, 2010-01-22 at 22:16 -0500, Steven Bellovin wrote: On Jan 22, 2010, at 12:26 AM, Bruce Williams wrote: The problem with IE is the same problem as Windows, the basic design is fundementally insecure and timely updates can't fix that. You do realize, of course, that IE is recording

Re: I don't need no stinking firewall!

2010-01-06 Thread William Pitcock
On Wed, 2010-01-06 at 01:47 -0600, James Hess wrote: On Tue, Jan 5, 2010 at 11:41 PM, Dobbins, Roland rdobb...@arbor.net wrote: On Jan 6, 2010, at 11:52 AM, Jonathan Lassoff wrote: DDoS attacks are attacks against capacity and/or state. Start reducing DDoS, by its very nature is a type

Re: I don't need no stinking firewall!

2010-01-05 Thread William Pitcock
On Tue, 2010-01-05 at 16:24 -0500, Robert Brockway wrote: On Tue, 5 Jan 2010, Dobbins, Roland wrote: In the most basic terms, a stateful firewall performs bidirectional classification of communications between nodes, and makes a pass/fail determination on each packet based on a) whether

Re: RBN and it's spin-offs

2009-12-30 Thread William Pitcock
On Wed, 2009-12-30 at 20:12 -0800, Paul Ferguson wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Dec 30, 2009 at 8:05 PM, Keith Medcalf kmedc...@dessus.com wrote: Without a warrant, there is an absolute right to privacy. It continues to exist right up until either (a) one

Re: RBN and it's spin-offs

2009-12-30 Thread William Pitcock
On Wed, 2009-12-30 at 23:25 -0500, Christopher Morrow wrote: On Wed, Dec 30, 2009 at 11:13 PM, William Pitcock neno...@systeminplace.net wrote: It worked against Indymedia UK: http://www.indymedia.org/fbi/ indymedia is in texas, no mlat required. It was an MLAT initiated by the Dutch

Re: Arrogant RBL list maintainers

2009-12-16 Thread William Pitcock
Hi, On Thu, 2009-12-10 at 16:55 +, Sven Olaf Kamphuis wrote: thing is that it's illegal to maintain a database with personal details which ip addresses according to various german courts are (don't ask.. mmk? ;) ofcourse we all know ip addresses identify nodes on a network, not persons,

Re: Is there anyone from ASPEWS on this list?

2009-12-14 Thread William Pitcock
On Mon, 2009-12-14 at 11:32 +0100, Michelle Sullivan wrote: Read the last paragraph again.. will be submitted for delisting .. not has been delisted and it will take 3-5 hours to propagate... I have to process all removals manually after the robot because the robot does get it wrong, and

IP to authoritative CIDR webservices

2009-12-14 Thread William Pitcock
Hi, Does anyone know of a webservice that converts a given IP into the public CIDR range that belongs to? I am developing a tool where IP to CIDR conversion based on RIR whois data would be useful for implementing filtersets. William

Re: IP to authoritative CIDR webservices

2009-12-14 Thread William Pitcock
Hi, On Mon, 2009-12-14 at 21:10 -0800, Mehmet Akcin wrote: Current RIR whois actually does that. ie: search for 199.4.29 it will show you 199.4.28/22 Yes, but it has to be parsed, and RIRs have varying whois formats. ARIN vs RIPE whois output, for example. William

Re: IP to authoritative CIDR webservices

2009-12-14 Thread William Pitcock
Hi, On Mon, 2009-12-14 at 21:12 -0800, Paul Ferguson wrote: On Mon, Dec 14, 2009 at 8:57 PM, William Pitcock neno...@systeminplace.net wrote: Hi, Does anyone know of a webservice that converts a given IP into the public CIDR range that belongs to? I am developing a tool where IP

Re: Is there anyone from ASPEWS on this list?

2009-12-12 Thread William Pitcock
Hi, On Sat, 2009-12-12 at 18:02 +0100, Michelle Sullivan wrote: Michelle Sullivan wrote: Seth Mattinen wrote: You should still be able to submit a ticket to SORBS, no? I was always under the impression that it was open a ticket and wait or you are moved to the back of the line with

Is there anyone from ASPEWS on this list?

2009-12-11 Thread William Pitcock
Hi, ASPEWS is listing 216.83.32.0/20 as being associated with the whole Atrivo incident of 2008. My memory does not recall 216.83.32.0/20 being involved, nor the provider that belongs to. So it'd be cool if I could you know, talk to someone who has involvement with that, because frankly, I do

RE: Is there anyone from ASPEWS on this list?

2009-12-11 Thread William Pitcock
On Fri, 2009-12-11 at 09:55 -0800, Alex Lanstein wrote: Also, the fact that Atrivo is *dead* and this stuff is still listed means that anyone who gets those blocks from ARIN next are basically screwed Why would you say Atrivo is dead? r...@localhost --- {~} nslookup

RE: Is there anyone from ASPEWS on this list?

2009-12-11 Thread William Pitcock
On Fri, 2009-12-11 at 17:25 -0800, Alex Lanstein wrote: William Pitcock wrote: Cernal and Atrivo are two different entities, Atrivo used to host Cernal, but now they have different hosting arrangements. I now understand the original point you were trying to make about Atrivo. I disagree

Re: Is there anyone from ASPEWS on this list?

2009-12-11 Thread William Pitcock
On Fri, 2009-12-11 at 23:39 +, John Levine wrote: ASPEWS is listing 216.83.32.0/20 as being associated with the whole Atrivo incident of 2008. My memory does not recall 216.83.32.0/20 being involved, nor the provider that belongs to. Since nobody but the occasional highly vocal GWL uses

Re: HE.net, Fremont-2 outage?

2009-11-03 Thread William Pitcock
information about this? I got hit by the ATS failure last month, so I guess it's possible that that equipment may have flaked again. -t -- William Pitcock SystemInPlace - Simple Hosting Solutions 1-866-519-6149

Re: DMCA takedowns of networks

2009-10-27 Thread William Pitcock
not legally be free speech). Courts determine what is free speech. ISPs just try to stay the hell out of the way. Jack -- William Pitcock SystemInPlace - Simple Hosting Solutions 1-866-519-6149

Re: DMCA takedowns of networks

2009-10-27 Thread William Pitcock
the way IP issues get handled. (again, not the opinions of my employer.) William -- William Pitcock SystemInPlace - Simple Hosting Solutions 1-866-519-6149 -Original Message- From: Brian Johnson bjohn...@drtel.com Date: Mon, 26 Oct 2009 17:03:29 To: North American Network Operators Groupna

Re: IPv6 could change things - Was: DMCA takedowns of networks

2009-10-27 Thread William Pitcock
the former for a few thousand aliases with no degredation in performance. The hacks available for freebsd-4.x for the Web Polygraph software did something similar. 2c, Adrian -- William Pitcock SystemInPlace - Simple Hosting Solutions 1-866-519-6149

Re: IPv6 internet broken, cogent/telia/hurricane not peering

2009-10-12 Thread William Pitcock
On Mon, 2009-10-12 at 10:47 -0700, Seth Mattinen wrote: Patrick W. Gilmore wrote: On Oct 12, 2009, at 12:52 PM, Randy Bush wrote: sure would be nice if there was a diagnosis before the lynching If this happened in v4, would customers care 'why' it happened? Obviously not. I

  1   2   >