Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread Stephane Bortzmeyer
On Thu, Jan 31, 2013 at 11:23:11AM +0330, Shahab Vahabzadeh sh.vahabza...@gmail.com wrote a message of 55 lines which said: Those ip addresses I send were only sample, its 5 page :D and not only those addresses. Because the attacker attacks when they have a new opponent. They DoS it long

Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread Fredrik Holmqvist / I2B
Hi. The IPs you see is the exploited gameservers, so just contact them, and send them the link below. There is a workaround for it: http://rankgamehosting.ru/index.php?showtopic=1320 We have had problem with this in the past. Usually we get abuse complaints from the admin of the game

Re: Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications....

2013-01-31 Thread David Barak
Looking at http://mydeviceinfo.comcast.net you get a choice of wireless or IPv6 in Arris. I Wish they would ask which you want before install: I already have better wireless, and the Arris ones don't let you disable theirs :/ Thank you for the pointer - perhaps a swap is in order. David

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Leo Bicknell
In a message written on Wed, Jan 30, 2013 at 09:30:31PM -0800, Owen DeLong wrote: I would like to build an infrastrucutre that could last 50-100 years, like the telephone twisted pair of the last century. The only tech I can see that can do that is home run single mode fiber to the home.

box against dos/ddos

2013-01-31 Thread Piotr
Hi, I looking some box (vendor, model), which i can put out of the main/product network, which can analyze packets netflow,sflow,syslog from bgp router(s) and after discover some anomaly it can do some action, for example: - Box have bgp session with bgp router and advertise attacked ip

Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread John Kristoff
On Thu, 31 Jan 2013 10:34:29 +0330 Shahab Vahabzadeh sh.vahabza...@gmail.com wrote: Attacks takes only 20 or 30 minutes and it happens only 4 times in two days. I could'nt capture any packet but this is out put of my show ip accounting that time: Attacks on gaming systems or at the gamers

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Scott Helms
TR-069 (part of which is CWMP) has been around a long long time and Telcodria is well aware of it. The real problem is getting it actually implemented well on CPE gear since the TM Forum didn't even have a certification process until this year. On Wed, Jan 30, 2013 at 11:24 PM, Jay Ashworth

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Scott Helms
Except for the fact that the people waiting for their gold shipment expect it to be treated as gold and not kaolin or chickens. At the end of the day the ISP is who gets called first and sometime they're the only person an end user can reach. Try this one day if you're ready for some frustration

Re: Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications....

2013-01-31 Thread Robert Drake
On 1/30/2013 9:10 PM, David Barak wrote: IPv6 has been launched on all Arris DOCSIS 3.0 C4 CMTSes, covering over 50% our network. The update you sent is lovely, except I can tell you that the one (also an Arris, running DOCSIS 3.0) which was installed in late October in my house in

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Ray Soucy
Late to the conversation, but I'll chime in that we established a model in Maine that is working pretty well, at least for middle-mile fiber. When we started building out MaineREN (our RON) we decided that having the University own the fiber would tie it up in political red tape. So much so that

Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread Jeroen Massar
On 2013-01-31 08:04 , Shahab Vahabzadeh wrote: Hi everybody, Last two days I was under an interesting attack which comes from multiple sources to three of my ADSL users destination. You say that it comes from multiple sources to 3 of your DSL users. The below source/dest though shows that the

Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread Jeroen Massar
On 2013-01-31 08:53 , Shahab Vahabzadeh wrote: Those ip addresses I send were only sample, its 5 page :D and not only those addresses. And you are looking to target 128.141.X.Y its mine 128.141.0.0/16 is CERN in Switzerland. Thus not yours, but owned(*) by n...@cern.ch. (unless you work

Re: box against dos/ddos

2013-01-31 Thread Suresh Ramasubramanian
arbor peakflow to start with? On Thursday, January 31, 2013, Piotr wrote: Hi, I looking some box (vendor, model), which i can put out of the main/product network, which can analyze packets netflow,sflow,syslog from bgp router(s) and after discover some anomaly it can do some action, for

Re: box against dos/ddos

2013-01-31 Thread Kenneth McRae
2nd the Peakflow recommendation. On Thu, Jan 31, 2013 at 7:23 AM, Suresh Ramasubramanian ops.li...@gmail.com wrote: arbor peakflow to start with? On Thursday, January 31, 2013, Piotr wrote: Hi, I looking some box (vendor, model), which i can put out of the main/product network,

TOR fiber patch panels

2013-01-31 Thread Chuck Anderson
I'm looking for better Top-Of-Rack fiber patch panels than the ones I've been using up to this point. I'm looking for something that is 1U, holds 12 to 24 strands of SC, ST, or LC, has fiber jumper management rings, and has a door that doesn't interfere with the U below (a server might be mounted

Re: TOR fiber patch panels

2013-01-31 Thread Josh Hoppes
Have you looked at anything from Clear Field, just as an example something like this. http://www.clearfieldconnection.com/products/panels/fieldsmart-small-count-delivery-scd-1ru-rack-mount-cabinet-mount-panel.html On Thu, Jan 31, 2013 at 11:44 AM, Chuck Anderson c...@wpi.edu wrote: I'm looking

Re: Ddos mitigation service

2013-01-31 Thread Kenneth McRae
Arbor Networks.. On Thu, Jan 31, 2013 at 10:13 AM, matt kelly mjke...@gmail.com wrote: Can anyone recommended ddos mitigation companies with US east coast presence that provide the services via bgp? We are not interested in an appliance but rather offloading the traffic. Thanks. --

Re: Ddos mitigation service

2013-01-31 Thread Seth Mattinen
On 1/31/13 10:13 AM, matt kelly wrote: Can anyone recommended ddos mitigation companies with US east coast presence that provide the services via bgp? We are not interested in an appliance but rather offloading the traffic. Prolexic.

RE: TOR fiber patch panels

2013-01-31 Thread Scott Berkman
Might also want to take a look at stuff from Cablesys: http://www.cablesys.com/p/2277/fiber-patch-panel-lc-quad-ceramic http://www.cablesys.com/p/2300/enclosure-1-rms-slide-3-panel Only requirement from below missing is they don't usually have doors. I'm not sure much in a 1U panel does these

Re: box against dos/ddos

2013-01-31 Thread dennis
Agreed, my shortlist for evaluation would include Arbor, Radware and Genie NRM. New players to the market include just about every IPS and application load balancing solution out there. -- From: Suresh Ramasubramanian ops.li...@gmail.com

Re: Ddos mitigation service

2013-01-31 Thread Allan Liska
On Thu, Jan 31, 2013 at 1:13 PM, matt kelly mjke...@gmail.com wrote: Can anyone recommended ddos mitigation companies with US east coast presence that provide the services via bgp? We are not interested in an appliance but rather offloading the traffic. I would look at Verisign's VIDN

Re: box against dos/ddos

2013-01-31 Thread Jay Coley
+1 for Radware On 31/01/2013 18:36, dennis wrote: Agreed, my shortlist for evaluation would include Arbor, Radware and Genie NRM. New players to the market include just about every IPS and application load balancing solution out there. --

Re: box against dos/ddos

2013-01-31 Thread Kenneth McRae
I think Radware has to sit inline. I do not believe they offer BGP offramp, so keep that in mind. On Thu, Jan 31, 2013 at 10:39 AM, Jay Coley j...@jcoley.net wrote: +1 for Radware On 31/01/2013 18:36, dennis wrote: Agreed, my shortlist for evaluation would include Arbor, Radware and

Re: box against dos/ddos

2013-01-31 Thread Carlos Kamtha
Arbour Peakflow is probably the way to go. However if you don't want to spend a ton of money, you might want to consider using a stub router +bgp coupled with a server running the appropriate SNMP tools (perhaps cacti) to publish your desired data. It's not the most convenient solution but it

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2013-01-31 Thread Nick Hilliard
On 20/08/2012 15:51, Nick Hilliard wrote: Last time I looked, the support looked like this: XR: v4: HSRPv1, VRRP v6: VRRP IOS: v4: HSRPv1, HSRPv2, VRRP, GLBP v6: HSRPv2, GLBP You'll notice a certain lack of joined-up thinking here. Looks like IOS 15.2(4)M finally

RE: box against dos/ddos

2013-01-31 Thread Dixon, Justin
-Original Message- From: Carlos Kamtha [mailto:kam...@ak-labs.net] Sent: Thursday, January 31, 2013 13:53 To: Piotr Cc: nanog@nanog.org Subject: Re: box against dos/ddos Arbour Peakflow is probably the way to go. However if you don't want to spend a ton of money, you might

Re: OOB core router connectivity wish list

2013-01-31 Thread Steven Bellovin
On Jan 9, 2013, at 1:18 PM, Leo Bicknell bickn...@ufp.org wrote: In a message written on Wed, Jan 09, 2013 at 06:39:28PM +0100, Mikael Abrahamsson wrote: IPMI is exactly what we're going for. For Vendors that use a PC motherboard, IPMI would probably not be difficult at all! :) I

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Owen DeLong
On Jan 31, 2013, at 07:07 , Ray Soucy r...@maine.edu wrote: Late to the conversation, but I'll chime in that we established a model in Maine that is working pretty well, at least for middle-mile fiber. When we started building out MaineREN (our RON) we decided that having the University

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Scott Helms
Owen, The short answer is that you don't today and it will be a long time (if ever) before its feasible. Europe is commonly held up as an example of an area where open access works and if you stick to DSL networks that's true. The problem is that the DSL networks (by and large) in Europe aren't

Re: TOR fiber patch panels

2013-01-31 Thread Owen DeLong
FWIW, you can get 1U 48-pair LC patch panels, or, you can get Keystone panels and LC duplex snapins. I believe Panduit, among others make these products. I've used them in the past. The snapins and the panels both expect an LC termination of the back side fiber as well. They don't provide

Re: Ddos mitigation service

2013-01-31 Thread Alain Hebert
Look up DOSArrest. (dosarrest.com) 3 permanent cases easily solved with them. And no, I'm not one of their sales rep =D - Alain Hebertaheb...@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W

Re: NANOG Digest, Vol 60, Issue 107

2013-01-31 Thread Brzozowski, John
See below. John -Original Message- From: nanog-requ...@nanog.org nanog-requ...@nanog.org Reply-To: NANOG nanog@nanog.org Date: Wednesday, January 30, 2013 11:18 AM To: NANOG nanog@nanog.org Subject: NANOG Digest, Vol 60, Issue 107 Date: Wed, 30 Jan 2013 09:43:10 -0800 From: joel

Re: NANOG Digest, Vol 60, Issue 110

2013-01-31 Thread Brzozowski, John
-Original Message- From: nanog-requ...@nanog.org nanog-requ...@nanog.org Reply-To: NANOG nanog@nanog.org Date: Wednesday, January 30, 2013 5:13 PM To: NANOG nanog@nanog.org Subject: NANOG Digest, Vol 60, Issue 110 Message: 7 Date: Thu, 31 Jan 2013 10:00:22 +1100 From: Mark Andrews

Re: NANOG Digest, Vol 60, Issue 110

2013-01-31 Thread Brzozowski, John
-Original Message- From: nanog-requ...@nanog.org nanog-requ...@nanog.org Reply-To: NANOG nanog@nanog.org Date: Wednesday, January 30, 2013 5:13 PM To: NANOG nanog@nanog.org Subject: NANOG Digest, Vol 60, Issue 110 Message: 9 Date: Wed, 30 Jan 2013 16:13:43 -0800 (PST) From: David Barak

Re: NANOG Digest, Vol 60, Issue 111

2013-01-31 Thread Brzozowski, John
There is a lot more to come this year, so stay tuned. ;) John -Original Message- From: nanog-requ...@nanog.org nanog-requ...@nanog.org Reply-To: NANOG nanog@nanog.org Date: Wednesday, January 30, 2013 7:01 PM To: NANOG nanog@nanog.org Subject: NANOG Digest, Vol 60, Issue 111 Message: 1

Re: NANOG Digest, Vol 60, Issue 113

2013-01-31 Thread Brzozowski, John
This is news, it would be great if more details were available. Anyone? = John Jason Brzozowski Comcast Cable m) +1-609-377-6594 e) mailto:john_brzozow...@cable.comcast.com o) +1-484-962-0060 w) http://www.comcast6.net

Re: NANOG Digest, Vol 60, Issue 113

2013-01-31 Thread Brzozowski, John
Original Message- From: nanog-requ...@nanog.org nanog-requ...@nanog.org Reply-To: NANOG nanog@nanog.org Date: Wednesday, January 30, 2013 9:20 PM To: NANOG nanog@nanog.org Subject: NANOG Digest, Vol 60, Issue 113 On Jan 30, 2013, at 7:52 PM, Mark Andrews ma...@isc.org wrote: The update

Re: NANOG Digest, Vol 60, Issue 113

2013-01-31 Thread Brzozowski, John
http://mydeviceinfo.comcast.net is up to date and will have more devices this year. If the device is a standalone modem and has IPv6 checked you need to make sure your customer owned CPE supports IPv6 *AND* is enabled. Otherwise if it is an integrated device provided by Comcast or via retails,

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Owen DeLong
That's why I'm not advocating for open access, I'm advocating for L1/L2 provider separation and a requirement that the L1 access itself be open. I have yet to get a firm answer, but as I understand PON, it doesn't actually matter so much whether you put the splitter/combiner in an MMR or near

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Scott Helms
Owen, You can't share access from one splitter to multiple OLTs so the location of the splitter isn't important. AFAIK there is simply no concept for that idea in any of the PON specs and its certainly not something that Calix/Adtran/Zhone/Alcatel/$gear_maker are building right now. For that

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Owen DeLong
On Jan 31, 2013, at 13:27 , Scott Helms khe...@zcorum.com wrote: Owen, You can't share access from one splitter to multiple OLTs so the location of the splitter isn't important. AFAIK there is simply no concept for that idea in any of the PON specs and its certainly not something that

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Fletcher Kittredge
On Thu, Jan 31, 2013 at 4:36 PM, Owen DeLong o...@delong.com wrote: If you have an MMR where all of the customers come together, then you can cross-connect all of $PROVIDER_1's customers to a splitter provided by $PROVIDER_1 and cross connect all of $PROVIDER_2's customers to a splitter

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Scott Helms
Owen, Respectfully, it doesn't work that way. You have to understand that the splitter is a specific part of the PON architecture and they don't have multiple outputs to connect to several OLTs like a patch panel or even a switch you can VLAN. One fiber goes to the splitter on the provider side

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Owen DeLong
Scott, Respectfully, you appear to be misinterpreting what I am saying. I'm saying you put the splitter next to the OLT and then run multiple fibers from there to the subscribers IN THE MMR. Each provider has their own splitters and OLTs, but all the splitters are in the MMR and the customers

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Owen DeLong
On Jan 31, 2013, at 13:57 , Fletcher Kittredge fkitt...@gwi.net wrote: On Thu, Jan 31, 2013 at 4:36 PM, Owen DeLong o...@delong.com wrote: If you have an MMR where all of the customers come together, then you can cross-connect all of $PROVIDER_1's customers to a splitter provided by

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Jean-Francois Mezei
On 13-01-31 17:04, Scott Helms wrote: switch you can VLAN. One fiber goes to the splitter on the provider side and then from there it splits into 8/16/32/64 connections that go to customers. You can't exchange one of the customer side ports to make another provider interface. Actually

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Brandon Butterworth
I'm saying you put the splitter next to the OLT and then run multiple fibers from there to the subscribers IN THE MMR That's the way I'd expect it to be done if planning ahead, GPON is today technology and new things always come I can see why they don't do this though 1. reduced build cost

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Ray Soucy
1. Must sell dark fiber to any purchaser. 2. Must sell dark fiber to all purchasers on equal terms. (There must be a published price list and there cannot be deviations from that price list. If the price list is modified, existing customers receive the new

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Owen DeLong
On Jan 31, 2013, at 4:36 PM, Brandon Butterworth bran...@rd.bbc.co.uk wrote: I'm saying you put the splitter next to the OLT and then run multiple fibers from there to the subscribers IN THE MMR That's the way I'd expect it to be done if planning ahead, GPON is today technology and new

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Owen DeLong
On Jan 31, 2013, at 5:08 PM, Ray Soucy r...@maine.edu wrote: 1. Must sell dark fiber to any purchaser. 2. Must sell dark fiber to all purchasers on equal terms. (There must be a published price list and there cannot be deviations from that price list. If the price

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Dan Armstrong
Sorry for jumping into this discussion so late…. and I apologize if this has already been talked about (this has been a long thread) But the most successful municipal undertaking to support telecom I have ever seen is a municipally owned conduit system…. Any infrastructure L1, L2, or anything

Re: Ddos mitigation service

2013-01-31 Thread Ameen Pishdadi
Hi Matt , Are you still looking for ddos protection? Thanks, Ameen Pishdadi On Jan 31, 2013, at 12:13 PM, matt kelly mjke...@gmail.com wrote: Can anyone recommended ddos mitigation companies with US east coast presence that provide the services via bgp? We are not interested in an

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Eric Brunner-Williams
On 1/31/13 6:28 PM, Dan Armstrong wrote: But the most successful municipal undertaking to support telecom I have ever seen is a municipally owned conduit system…. Could you be a bit more specific? What is the muni, and where can the business model data be found? Also, what was the muni's ROW

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Scott Helms
Fletcher nailed it, if you want the architecture you're describing then you simply don't want PON. Its built around lower cost and a big part of that lower cost is minimizing the fiber costs by serving splitters (and thus many homes) from a single fiber that back hauls to the CO. The other

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Dan Armstrong
I don't have specific data to point you to. I am speaking from my experience, in large cities. Totally different story in rural or suburban areas. In general, if a municipality builds an L1 or L2 network it removes so many barriers of competition that many idiots get into the business.

Re: Muni fiber: L1 or L2?

2013-01-31 Thread Owen DeLong
On Jan 31, 2013, at 19:21 , Scott Helms khe...@zcorum.com wrote: Fletcher nailed it, if you want the architecture you're describing then you simply don't want PON. Its built around lower cost and a big part of that lower cost is minimizing the fiber costs by serving splitters (and thus