VIDEO: Mitigating DDoS Attacks: Best Practices for an Evolving Threat Landscape – NYC 12/5 #DDoS

2012-12-15 Thread Joly MacFie
As promised this is the full video of PIR's recent DDoS event in NYC. I've waited to post it until we got the closed captioning done. If anyone should be willing to volunteer to help translate the captions into other languages they can do so via AMARA -

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Sander Steffann
Hi, Additionally, we will be actively monitoring usage after the 6 month period to determine when best to terminate the service on the old IP. Good to hear that. The old address, which is in the middle of UMD's network, is going to be black-holed once the change is over. Nothing will be on

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Julien Goodwin
On 15/12/12 06:03, Jean-Francois Mezei wrote: There are also a number of much older systems which no longer get software updates (such as VAX-VMS) so it is good practice to manually maintain the root.hints files so that over time, you don't accumulate more than a couple of disused root server

Re: OpenFlow, please don't start a flame war...

2012-12-15 Thread John Kinsella
I'm biased, but I'd say give cloudstack a try. Supports openflow, and fairly easy to spin up. http://www.slideshare.net/xen_com_mgr/under-the-hood-open-vswitch-openflow-in-xcp-xenserver John On Dec 14, 2012, at 8:13 PM, eric-l...@truenet.com eric-l...@truenet.com wrote: It's been about 2 years

Re: OpenFlow, please don't start a flame war...

2012-12-15 Thread Dave Israel
On 12/14/2012 11:11 PM, eric-l...@truenet.com wrote: It's been about 2 years in since I've heard about the concept, and honestly I'm about ready to jump into test environments at my house. My questions are pretty basic, what distro would you recommend for a controller, and should I start by

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Mark Andrews
In message 50cb882a.30...@vaxination.ca, Jean-Francois Mezei writes: On 12-12-14 15:13, Jason Castonguay wrote: I've given 3 weeks + 6 months (at least) notice on a service change that will not be noticed by most anyone. Upon hearing your announcement, I went and dig myself a new

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Jared Mauch
On Dec 15, 2012, at 4:58 PM, Mark Andrews ma...@isc.org wrote: I realise that keeping the old IP functional for some time is important for all the static configurations. But does it matter if a dynamic list is updated real time without much advance warning ? 3 weeks is not a lot of advance

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread David Conrad
On Dec 15, 2012, at 2:13 PM, Jared Mauch ja...@puck.nether.net wrote: Oh, and you can just download the root zone from ftp://ftp.internic.net/domain/root.zone ... Or, perhaps more conveniently, zone transfer the root zone from xfr.lax.dns.icann.org or xfr.cjr.dns.icann.org (see

Re: Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Mark Andrews
In message 42515678-f2ce-48ce-a0e6-4211c5f0f...@puck.nether.net, Jared Mauch writes: On Dec 15, 2012, at 4:58 PM, Mark Andrews ma...@isc.org wrote: I realise that keeping the old IP functional for some time is = important for all the static configurations. But does it matter if a

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Jean-Francois Mezei
On 12-12-15 17:32, Mark Andrews wrote: 3 weeks is not a lot of time to inform every recursive service operator in the world that there is a change coming. Remember nameservers will start logging warning messages as of January 3rd. Nameservers will NOT log messages starting Jan 3rd. The old

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread David Conrad
On Dec 15, 2012, at 2:32 PM, Mark Andrews ma...@isc.org wrote: 3 weeks is not a lot of time to inform every recursive service operator in the world that there is a change coming. Given the impact of the change, I figure 3 weeks is plenty. Remember nameservers will start logging warning

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Bryan Fields
On 12/15/12 6:07 PM, David Conrad wrote: Are BIND's warning messages so opaque that someone who is looking at name server log messages can't figure out that the warning is talking about a root server IP address being changed? What about the people that are running BIND 4 on an old Solaris 2.6

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Brian Henson
Let us all have a moment of silence to remember all those poor unmanaged servers out there..Thank you now nuke them all and start over :) On Sat, Dec 15, 2012 at 6:21 PM, Bryan Fields br...@bryanfields.net wrote: On 12/15/12 6:07 PM, David Conrad wrote: Are BIND's warning messages so

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Nick Hilliard
On 15/12/2012 23:07, David Conrad wrote: The handwringing over this issue is a bit over the top. It's a question of what's procedurally sensible. Sensible things would include longer notice of the impending change to the root zone, more widespread notice of what's happening and generally not

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Jean-Francois Mezei
On 12-12-15 19:45, Nick Hilliard wrote: widespread notice of what's happening and generally not poking around with really important bits of the Internet at times which are well known for having configuration freezes and/or when many people are going to be on holidays. You have 6.75 months to

Re: Solutions for DoS DDoS

2012-12-15 Thread Damian Menscher
On Fri, Dec 7, 2012 at 1:30 AM, Yuri Slobodyanyuk y...@yurisk.info wrote: - If speaking of web/email services - hosted solution is viable to some degree (e..g Amazon AWS Cloudfront, Google Apps, CDNs etc) . IT is not a DEDICATED hosted solution against DDOS, so be prepared for the provider to

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread David Conrad
Nick, On Dec 15, 2012, at 4:45 PM, Nick Hilliard n...@foobar.org wrote: On 15/12/2012 23:07, David Conrad wrote: The handwringing over this issue is a bit over the top. It's a question of what's procedurally sensible. Sensible things would include longer notice of the impending change to the

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread bmanning
On Sun, Dec 16, 2012 at 12:45:32AM +, Nick Hilliard wrote: On 15/12/2012 23:07, David Conrad wrote: The handwringing over this issue is a bit over the top. It's a question of what's procedurally sensible. Sensible things would include longer notice of the impending change to the root

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread Keith Medcalf
If your grandmother were running her own recursive DNS resolver, I expect she would have no difficulty understanding the message. It is the young-uns that have difficulty comprehending (and using) the English language. Sent from Samsung Mobile Original message From: