Re: Fiber Cut in CA?

2010-02-02 Thread charles
That is one long protect path. Yikes. Sent via BlackBerry from T-Mobile

Re: Mitigating human error in the SP

2010-02-02 Thread gb10hkzo-nanog
Otherwise, as Suresh notes, the only way to eliminate human error completely is to eliminate the presence of humans in the activity. and,hence by reference. Automated config deployment / provisioning. That's the funniest thing I've read all day... ;-) A little pessimistic rant ;-)

Re: [Pauldotcom] Skiddy Interview

2010-02-02 Thread Rick Tait
This self-proclaimed hacker was no more than a script-kiddie with a spot of luck and half a brain enough to follow social-media-password chains. What an absolute buffoon. I applaud the English student interviewer for maintaining his composure while wasting his time with the black hat, who by the

Re: Mitigating human error in the SP

2010-02-02 Thread gordon b slater
On Tue, 2010-02-02 at 12:26 +, gb10hkzo-na...@yahoo.co.uk wrote: Nothing in the IT / ISP / Telco world is ever going to be perfect, far too complex with many dependencies. Yes you might play in your perfect little labs until the cows come home . but there always has been and

Re: Mitigating human error in the SP

2010-02-02 Thread Mark Smith
On Mon, 1 Feb 2010 21:21:52 -0500 Chadwick Sorrell mirot...@gmail.com wrote: Hello NANOG, Long time listener, first time caller. A recent organizational change at my company has put someone in charge who is determined to make things perfect. We are a service provider, not an enterprise

Re: Mitigating human error in the SP

2010-02-02 Thread Nick Hilliard
On 02/02/2010 02:21, Chadwick Sorrell wrote: This outage, of a high profile customer, triggered upper management to react by calling a meeting just days after. Put bluntly, we've been told Human errors are unacceptable, and they will be completely eliminated. One is too many. Leaving the

RE: [NANOG] NREN Network Design

2010-02-02 Thread Tarig Y. Adam
Hi Rashed This my first time to hear about app-tec company. I'm very happy to see this in Sudan. In fact We applied for PI address form AfriNIC and our request is approved. But the current design depends on our ISP (SUDATEL) and we using their routers. we have a router (One point to access our

Re: Mitigating human error in the SP

2010-02-02 Thread Paul Corrao
Humans make errors. For your upper management to think they can build a foundation of reliability on the theory that humans won't make errors is self deceiving. But that isn't where the story ends. That's where it begins. Your infrastructure, processes and tools should all be designed

Re: Mitigating human error in the SP

2010-02-02 Thread Paul Corrao
Humans make errors. For your upper management to think they can build a foundation of reliability on the theory that humans won't make errors is self deceiving. But that isn't where the story ends. That's where it begins. Your infrastructure, processes and tools should all be designed

Re: NREN Network Design

2010-02-02 Thread Tarig Y. Adam
Hi Stephane thanks, your scheme is very expressive.And sorry for forgetting to send this message to my own list (afnog). regarding the subject the next hop of default route of our customers are ISP routers then SUIN routers. Is this a normal situation???

Threading the senderbase reputation needle

2010-02-02 Thread Drew Weaver
Howdy, Has anyone come up with a reverse DNS 'pattern' that one can employ that will prevent Senderbase from assigning a poor reputation to an entire /24 because they saw an email they didn't like from a single IP address? We're an infrastructure provider, which means that we lease servers,

Re: Mitigating human error in the SP

2010-02-02 Thread Chadwick Sorrell
On Tue, Feb 2, 2010 at 9:09 AM, Paul Corrao pcor...@voxeo.com wrote: Humans make errors. For your upper management to think  they can build a foundation of reliability on the theory that humans won't make errors is self deceiving. But that isn't where the story ends.  That's where it

RE: Threading the senderbase reputation needle

2010-02-02 Thread Jason Gurtz
Has anyone come up with a reverse DNS 'pattern' that one can employ that will prevent Senderbase from assigning a poor reputation to an entire /24 because they saw an email they didn't like from a single IP address? We're an infrastructure provider, which means that we lease servers, etc to

RE: Threading the senderbase reputation needle

2010-02-02 Thread Drew Weaver
Since email reputation is now being based on the neighborhood theory you must do one of the following: Do one of the following (hopefully #1): 1.) Provide custom reverse DNS for the customer. BCP for SMTP server DNS is matching forward and reverse DNS. Anything else is suspect... 2.) Set up a

Re: Mitigating human error in the SP

2010-02-02 Thread Larry Sheldon
On 2/2/2010 6:26 AM, gb10hkzo-na...@yahoo.co.uk wrote: Otherwise, as Suresh notes, the only way to eliminate human error completely is to eliminate the presence of humans in the activity. and,hence by reference. Automated config deployment / provisioning. That's the funniest thing

Re: Threading the senderbase reputation needle

2010-02-02 Thread Ronald Cotoni
On Tue, Feb 2, 2010 at 10:32 AM, Drew Weaver drew.wea...@thenap.com wrote: Since email reputation is now being based on the neighborhood theory you must do one of the following: Do one of the following (hopefully #1): 1.) Provide custom reverse DNS for the customer.  BCP for SMTP server DNS

Unix Sysadmin/Net Eng in the Toronto Area?

2010-02-02 Thread Carlos Kamtha
Greetings, I am looking for an experienced Freebsd/linux/cisco/juniper person. If you live in Toronto or the GTA and are interested please drop me a line offlist. Cheers, Carlos.

RE: Threading the senderbase reputation needle

2010-02-02 Thread Drew Weaver
I think this discussion would be much better on the mailop list, but the short answer here is real mail servers have real, non-generic names with matching forward/reverse DNS. That certainly is true, but if a real mail server that has real, non-generic names with matching

Re: Mitigating human error in the SP

2010-02-02 Thread Jared Mauch
We have solved 98% of this with standard configurations and templates. To deviate from this requires management approval/exception approval after an evaluation of the business risks. Automation of config building is not too hard, and certainly things like peer-groups (cisco) and regular groups

Re: Mitigating human error in the SP

2010-02-02 Thread James Downs
On Feb 2, 2010, at 9:33 AM, Jared Mauch wrote: We have solved 98% of this with standard configurations and templates. To deviate from this requires management approval/exception approval after an evaluation of the business risks. I would also point Chad to this book: http://bit.ly/cShEIo

Re: Mitigating human error in the SP

2010-02-02 Thread JC Dill
Chadwick Sorrell wrote: This outage, of a high profile customer, triggered upper management to react by calling a meeting just days after. Put bluntly, we've been told Human errors are unacceptable, and they will be completely eliminated. One is too many. Good, Fast, Cheap - pick any two.

Re: Mitigating human error in the SP

2010-02-02 Thread Chadwick Sorrell
On Tue, Feb 2, 2010 at 12:45 PM, James Downs james.do...@egontech.com wrote: On Feb 2, 2010, at 9:33 AM, Jared Mauch wrote: We have solved 98% of this with standard configurations and templates. To deviate from this requires management approval/exception approval after an evaluation of the

Re: Mitigating human error in the SP

2010-02-02 Thread Larry Sheldon
On 2/2/2010 11:33 AM, Jared Mauch wrote: We have solved 98% of this with standard configurations and templates. To deviate from this requires management approval/exception approval after an evaluation of the business risks. Automation of config building is not too hard, and certainly things

Re: Fiber Cut in CA?

2010-02-02 Thread Bill Stewart
On Tue, Feb 2, 2010 at 12:04 AM, char...@knownelement.com wrote: That is one long protect path. Yikes. There be mountains in the way, with deserts in between, and not a lot of people to justify diversity or railroads and highways to run it along. Not many carriers have more than one fiber route

Re: Fiber Cut in CA?

2010-02-02 Thread Matt Simmons
And in an open desert, back hoes can smell fiber from miles away. On Tue, Feb 2, 2010 at 3:27 PM, Bill Stewart nonobvi...@gmail.com wrote: On Tue, Feb 2, 2010 at 12:04 AM,  char...@knownelement.com wrote: That is one long protect path. Yikes. There be mountains in the way, with deserts in

ip address management

2010-02-02 Thread Pavel Dimow
Hello, does anybody knows what happend with ipat? http://nethead.de/index.php/ipat http://nanog.cluepon.net/index.php/Tools_and_Resources Any other suggestion for a good foss ip address management app with ipv6 support?

RE: ip address management

2010-02-02 Thread Scott Berkman
I was about to suggest IPPlan, but it is lacking the V6 support. Here is one I found doing some searching, but I haven't used it myself: http://sourceforge.net/projects/haci/ -Scott -Original Message- From: Pavel Dimow [mailto:paveldi...@gmail.com] Sent: Tuesday, February 02,

Datacenter for DR in northwestern NJ/NY

2010-02-02 Thread Matt Sprague
Hello NANOG! Does anyone know of some strong datacenters in northwestern NJ, or north of Westchester NY without getting too far away from NYC? I'm looking for a DR colo solution for a site that is in NYC; this needs to be at least 50m away from NYC, but I'm trying to keep it not too much

RE: Datacenter for DR in northwestern NJ/NY

2010-02-02 Thread Ray Sanders
Datapipe has a facility in N.J... Not sure if they are 50mi from NYC Mobile email powered by the force... Original Message From: Matt Sprague mspra...@readytechs.com Date: 2/2/10 2:19 pm To: nanog@nanog.org nanog@nanog.org Subj: Datacenter for DR in northwestern NJ/NY Hello NANOG!

RE: Datacenter for DR in northwestern NJ/NY

2010-02-02 Thread Matt Sprague
Thanks! I was looking at them also (I live in that area), but you're right, they're just inside a 50mi radius. -- Matt Sprague Delivery Director  ReadyTechs llc 973.455.0606 x1204 -Original Message- From: Ray Sanders [mailto:ray.sand...@villagevoicemedia.com] Sent: Tuesday,

RE: Datacenter for DR in northwestern NJ/NY

2010-02-02 Thread Scott Berkman
Might be better off going to Philly, its only about an hour and a half away, and you'll likely have better connectivity options. Most of the big data centers in NJ are well within the 50 mile requirement (Bergen County, Hoboken, Newark, Jersey City). -Scott -Original Message-

Re: Datacenter for DR in northwestern NJ/NY

2010-02-02 Thread Matt Simmons
Sungard has some nice datacenters in Philly. I'm in one that's still being built out, and I haven't regretted it yet. --Matt On Tue, Feb 2, 2010 at 4:50 PM, Scott Berkman sc...@sberkman.net wrote: Might be better off going to Philly, its only about an hour and a half away, and you'll likely

RE: Datacenter for DR in northwestern NJ/NY

2010-02-02 Thread Greg D. Moore
At 04:41 PM 2/2/2010, Ray Sanders wrote: Datapipe has a facility in N.J... I have to admit, I've used the Datapipe facility. I'm underwhelmed. You might also want to try Albany. Smaller providers, but a few up there (Time Warner for example) that may work. Decent infrastructure, a train

RE: Datacenter for DR in northwestern NJ/NY

2010-02-02 Thread Cerniglia, Brandon
Cervalis has facilities in wappingers ny 1.5 hours from NYC -Original Message- From: Matt Sprague [mailto:mspra...@readytechs.com] Sent: Tuesday, February 02, 2010 4:16 PM To: nanog@nanog.org Subject: Datacenter for DR in northwestern NJ/NY Hello NANOG! Does anyone know of some strong

Re: Datacenter for DR in northwestern NJ/NY

2010-02-02 Thread Steven Bellovin
On Feb 2, 2010, at 5:52 PM, Cerniglia, Brandon wrote: Cervalis has facilities in wappingers ny 1.5 hours from NYC Hmm -- where to the fibers run from a facility like that? Are the all homed to NYC, or are there runs to, say, Albany or Boston? -Original Message- From: Matt

Re: Fiber Cut in CA?

2010-02-02 Thread Bret Clark
Good point...so if the cut is in the middle of nowhere without easy access...then how the hell did it get cut? Malicious? Matt Simmons wrote: And in an open desert, back hoes can smell fiber from miles away. On Tue, Feb 2, 2010 at 3:27 PM, Bill Stewart [1]nonobvi...@gmail.com wrote: On

Re: Fiber Cut in CA?

2010-02-02 Thread Steven Bellovin
On Feb 2, 2010, at 6:36 PM, Bret Clark wrote: Good point...so if the cut is in the middle of nowhere without easy access...then how the hell did it get cut? Malicious? Some hikers were lost in the desert and tossed down some fiber, waiting for a backhoe to show up and save them, but it

RE: Fiber Cut in CA?

2010-02-02 Thread Scott Berkman
Cross-country Fibers very often follow existing utility rights of way. So even in a wide open desert, the places the fibers go are the busy spots. Sometimes its train tracks, sometimes its gas pipelines, sometimes its electric, sometimes it’s a road, but very rarely is fiber like that on its

Re: Mitigating human error in the SP

2010-02-02 Thread Chadwick Sorrell
Thanks for all the comments! On Tue, Feb 2, 2010 at 1:01 PM, JC Dill jcdill.li...@gmail.com wrote: Chadwick Sorrell wrote: This outage, of a high profile customer, triggered upper management to react by calling a meeting just days after.  Put bluntly, we've been told Human errors are

Re: Fiber Cut in CA?

2010-02-02 Thread Blake Covarrubias
This is actually in my service area. There is an on-going water construction project along Interstate 8 by the Kiewit Corporation, and other entities, which are working on the All American Canal Lining Project. http://www.iid.com/Water/AllAmericanCanalLiningProject

Re: Mitigating human error in the SP

2010-02-02 Thread Michael Dillon
Automated config deployment / provisioning.   And sanity checking before deployment. Easy to say, not so easy to do. For instance, that incorrect port was identified by a number or name. Theoretically, if an automated tool pulls the number/name from a database and issues the command, then the

Re: Mitigating human error in the SP

2010-02-02 Thread Suresh Ramasubramanian
Never said it was, and never said foolproof either. Minimizing the chance of error is what I'm after - and ssh'ing in + hand typing configs isn't the way to go. Use a known good template to provision stuff - and automatically deploy it, and the chances of human error go down quite a lot. Getting

Re: Mitigating human error in the SP

2010-02-02 Thread Michael Dillon
The actual error happened when someone was troubleshooting a turn-up, where in the past the customer in question has had their ethertype set wrong.  It wasn't a provisioning problem as much as someone troubleshooting why it didn't come up with the customer.  Ironically, the NOC was on the

Re: Mitigating human error in the SP

2010-02-02 Thread David Hiers
If your manager pretends that they can manage humans without a few well-worn human factor books on their shelf, quit. David On Tue, Feb 2, 2010 at 5:36 PM, Michael Dillon wavetos...@googlemail.com wrote: The actual error happened when someone was troubleshooting a turn-up, where in

Re: Mitigating human error in the SP

2010-02-02 Thread Steven Bellovin
On Feb 2, 2010, at 8:36 PM, Suresh Ramasubramanian wrote: Never said it was, and never said foolproof either. Minimizing the chance of error is what I'm after - and ssh'ing in + hand typing configs isn't the way to go. Use a known good template to provision stuff - and automatically

Research Project: Internet capacity during pandemic events

2010-02-02 Thread haska
Hello everyone, My name is Mike Haska, and I am a graduate student at the University of Alberta. I am conducting research into Internet capacity issues during pandemic events. In order to analyze certain aspects of this topic, I need to get in touch with representatives from the major

Re: Research Project: Internet capacity during pandemic events

2010-02-02 Thread Sean Donelan
http://www.ncs.gov/library/pubs/Pandemic%20Comms%20Impact%20Study%20(December%202007).pdf Department of Homeland Security Pandemic Influenza Impact on Communications Networks Study December 2007