Re: most accurate geo-IP source to build country-based access lists

2015-06-08 Thread Blake Hudson
Roland Dobbins wrote on 6/8/2015 9:14 AM: On 8 Jun 2015, at 21:11, Martin T wrote: Are there any other possibilities to geolocate IPv4 addresses with higher accuracy? There is no direct relationship between logical network topology and geopolitical boundaries.

Re: Access to nanog.cluepon.net

2015-06-08 Thread Mike Hammett
Still down here (and apparently elsewhere as a request on another list was about it being down as well). - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: Josh Luthman j...@imaginenetworksllc.com To: Frank Bulk

Re: most accurate geo-IP source to build country-based access lists

2015-06-08 Thread Bacon Zombie
Tinder would be more accurate since it uses the phones GPS. You could also cross check what subreddits they are subscribed to. On 8 Jun 2015 23:12, a.l.m.bu...@lboro.ac.uk wrote: Hi, Have you thought about application layer tests - e.g. is the client's character set/language set to

Re: PPPoE/IPoE, any recommendations for upgrade?

2015-06-08 Thread Colton Conor
Suspend or shut down a user is easy, just disable their port on the DSLAM or change their port to a VLAN that only allows them to access/pay their bill. Going to PPPoE to IPoE increases the net throughput right? On Mon, Jun 8, 2015 at 1:16 AM, Nasser Heidari nas...@rasana.net wrote: On Sun, 7

Re: most accurate geo-IP source to build country-based access lists

2015-06-08 Thread A . L . M . Buxey
Hi, Have you thought about application layer tests - e.g. is the client's character set/language set to Swedish? Has the user identified himself/herself/henself as living in or being from Sweeden? ...just waiting for someone to suggest checking their web cookies to see what area they've got

T-mobile contact?

2015-06-08 Thread Anne Mitchell
Is there anyone from T-mobile here, or does anybody have a T-mobile contact with whom they can put me in touch? Anne Anne P. Mitchell, Esq. CEO/President ISIPP SuretyMail Email Reputation, Accreditation Certification http://www.SuretyMail.com/ http://www.SuretyMail.eu/ Author: Section 6 of

Re: eBay is looking for network heavies...

2015-06-08 Thread shawn wilson
On Jun 8, 2015 10:11 PM, Shane Ronan sh...@ronan-online.com wrote: Certs have ruined the industry. Certs have made the industry more interesting. After all, without certs, we'd have less stupid to point at and laugh (or scream). And HR screeners would need to know something about the position

Re: eBay is looking for network heavies...

2015-06-08 Thread Yardiel Fuentes
This discussion is always reminisced of questions such as: Why would I want to learn Algebra or Calculus in college ? or why would I want to go to college at all ? .. the student argues that calculus or college is hardly ever used, if at all, in a job … the most sensible perspective has always

Re: eBay is looking for network heavies...

2015-06-08 Thread ryanL
i don't think certs have ruined the industry. bad interviewing and recruiting, maybe... asking encyclopedia-type gotcha questions are the most inane test of someone's ability to perform well at the job. i promise you - you didn't want to work for this person anyways. got a cert? great. but let's

Re: eBay is looking for network heavies...

2015-06-08 Thread Justin M. Streiner
On Mon, 8 Jun 2015, Jeroen van Aart wrote: On 06/05/2015 06:38 PM, Mike Hale wrote: We need a pool on what percentage of readers just googled traceroute. Don't learn by heart that which you can look up. In this day and age where knowledge about every subject imaginable is a 5 second (to a

Re: eBay is looking for network heavies...

2015-06-08 Thread Valdis . Kletnieks
On Mon, 08 Jun 2015 17:10:25 -0700, Jeroen van Aart said: You sort of nailed it though. I think ready knowledge about the internals of utilities such as traceroute or ping is nice to have, however if you don't know Describe the top 3 gotchas of using traceroute to diagnose network problems.

Re: eBay is looking for network heavies...

2015-06-08 Thread Jeroen van Aart
On 06/08/2015 06:22 PM, Scott Weeks wrote: --- valdis.kletni...@vt.edu wrote: On Mon, 08 Jun 2015 17:10:25 -0700, Jeroen van Aart said: You sort of nailed it though. I think ready knowledge about the internals of utilities such as traceroute or ping is nice to have, however if you don't know

Re: eBay is looking for network heavies...

2015-06-08 Thread Scott Weeks
--- valdis.kletni...@vt.edu wrote: On Mon, 08 Jun 2015 17:10:25 -0700, Jeroen van Aart said: You sort of nailed it though. I think ready knowledge about the internals of utilities such as traceroute or ping is nice to have, however if you don't know Describe the top 3 gotchas of using

Re: eBay is looking for network heavies...

2015-06-08 Thread Shane Ronan
When I was asked the default BGP timers across three different vendor platforms as measure of my networking ability during an interview, I replied saying I'd look them up if needed them. I was told I didn't understand BGP in enough detail, despite being able to describe all the steps of BGP

Re: eBay is looking for network heavies...

2015-06-08 Thread Jeroen van Aart
On 06/05/2015 06:38 PM, Mike Hale wrote: We need a pool on what percentage of readers just googled traceroute. You sort of nailed it though. I think ready knowledge about the internals of utilities such as traceroute or ping is nice to have, however if you don't know it it is not something

Re: eBay is looking for network heavies...

2015-06-08 Thread David Bass
Yeah, I think that's more about them stroking their own ego than anything to do with you or the job. I've unfortunately seen a few of those types before as well. On Jun 8, 2015, at 5:26 PM, Justin M. Streiner strei...@cluebyfour.org wrote: On Mon, 8 Jun 2015, Jeroen van Aart wrote:

Android (lack of) support for DHCPv6

2015-06-08 Thread Paul B. Henson
We're in the beginning steps of bringing up IPv6 at the fairly large university where I work. We plan to use DHCPv6 rather than SLAAC for a variety of reasons. One of our guys recently noticed that Android has no support for DHCPv6, and a rather odd issue thread discussing it:

Re: Android (lack of) support for DHCPv6

2015-06-08 Thread Randy Bush
We're in the beginning steps of bringing up IPv6 at the fairly large university where I work. We plan to use DHCPv6 rather than SLAAC for a variety of reasons. One of our guys recently noticed that Android has no support for DHCPv6, and a rather odd issue thread discussing it:

Re: eBay is looking for network heavies...

2015-06-08 Thread Stephen Satchell
On 06/08/2015 07:34 PM, shawn wilson wrote: On Jun 8, 2015 10:11 PM, Shane Ronan sh...@ronan-online.com wrote: Certs have ruined the industry. Certs have made the industry more interesting. After all, without certs, we'd have less stupid to point at and laugh (or scream). And HR screeners

Re: eBay is looking for network heavies...

2015-06-08 Thread Sabri Berisha
Hi, Certs have ruined the industry. Certifications are great keywords for recruiters. If you're a hiring manager, why create a huge list of all routing protocols you'd like the ideal candidate to understand? Saying I need a JNCIE with 5 years experience is a lot easier than the ideal

Re: PPPoE/IPoE, any recommendations for upgrade?

2015-06-08 Thread Scott Helms
There are alternative solutions. We're looking at using one from ABN for a customer that perseveres all of the AAA functionality and supports IPoE with the same integrationhooks as PPPoE and handles both at the same time to make transition easier. The project is being staged right now but anyone

RE: PPPoE/IPoE, any recommendations for upgrade?

2015-06-08 Thread Nasser Heidari
On Sun, 7 Jun 2015, Mikael Abrahamsson wrote: - If you are already using IPoE, tell more why should I upgrade? The IPoE and IPoEoADSL I have done didn't need radius, didn't need BNG, didn't need a lot of the complications you're talking about. It could basically be realised in any decent

RE: PPPoE/IPoE, any recommendations for upgrade?

2015-06-08 Thread Mikael Abrahamsson
On Mon, 8 Jun 2015, Nasser Heidari wrote: Thanks for your reply. I'm would like this simplicity if I could keep same functionalities I have in PPPoE. By functionalities I mean: - AAA - Triple-ply services and classified accounting per service - Possibility to suspend a

Re: GRE performance over the Internet - DDoS cloud mitigation

2015-06-08 Thread Roland Dobbins
On 8 Jun 2015, at 17:57, Ramy Hashish wrote: a BGP session has to be established over a GRE tunnel over the internet between the ISP/NSP/DC and the cloud scrubbing center, This is incorrect. In most cloud overlay DDoS mitigation scenarios (e.g., end-customer obtains service from an MSSP

GRE performance over the Internet - DDoS cloud mitigation

2015-06-08 Thread Ramy Hashish
Good day All, I just want to raise the issue that has not been addressed so far by the DDoS cloud mitigation providers, either in the always-ON solution or the on-demand solution, a BGP session has to be established over a GRE tunnel over the internet between the ISP/NSP/DC and the cloud

Re: Regulators now regulating Internet History? Really?

2015-06-08 Thread Fletcher Kittredge
On Mon, Jun 8, 2015 at 6:01 AM, Larry Sheldon larryshel...@cox.net wrote: Looks to me that there are issues of interest here. http://www.aei.org/publication/tom-wheeler-tries-to-rewrite-internet-history/ This isn't a very good article. At best, it is a set of unsubstantiated claims

Regulators now regulating Internet History? Really?

2015-06-08 Thread Larry Sheldon
Looks to me that there are issues of interest here. http://www.aei.org/publication/tom-wheeler-tries-to-rewrite-internet-history/ -- sed quis custodiet ipsos custodes? (Juvenal)

Re: most accurate geo-IP source to build country-based access lists

2015-06-08 Thread Roland Dobbins
On 8 Jun 2015, at 21:11, Martin T wrote: Are there any other possibilities to geolocate IPv4 addresses with higher accuracy? There is no direct relationship between logical network topology and geopolitical boundaries. --- Roland Dobbins rdobb...@arbor.net

Re: most accurate geo-IP source to build country-based access lists

2015-06-08 Thread Måns Nilsson
Subject: most accurate geo-IP source to build country-based access lists Date: Mon, Jun 08, 2015 at 05:11:15PM +0300 Quoting Martin T (m4rtn...@gmail.com): Are there any other possibilities to geolocate IPv4 addresses with higher accuracy? There are three levels of untruth: (in increasing

RE: most accurate geo-IP source to build country-based access lists

2015-06-08 Thread David Hofstee
4. There are no Russian IPs in Crimea? David Hofstee Deliverability Management MailPlus B.V. Netherlands (ESP) -Oorspronkelijk bericht- Van: NANOG [mailto:nanog-boun...@nanog.org] Namens Måns Nilsson Verzonden: Monday, June 8, 2015 4:23 PM Aan: Martin T CC: nanog@nanog.org

most accurate geo-IP source to build country-based access lists

2015-06-08 Thread Martin T
Hi, let's say that I need to build an ACL where I block all the IPv4 traffic from Sweden. I considered following solutions: 1) RIR statistics files(ftp://ftp.ripe.net/ripe/stats/RIR-Statistics-Exchange-Format.txt) accessible for example at ftp://ftp.apnic.net/pub/stats/. However, those files

Re: Regulators now regulating Internet History? Really?

2015-06-08 Thread Livingood, Jason
On 6/8/15, 6:56 AM, Fletcher Kittredge fkitt...@gwi.netmailto:fkitt...@gwi.net wrote: Yes, after 2005 cable companies invested in broadband... Without respect to the merits of the AEI article, I did want to point out that cable companies have been investing in broadband / Internet services well

Re: Regulators now regulating Internet History? Really?

2015-06-08 Thread Jay Farrell via NANOG
The article is nothing more or less than what you'd expect to read from the American Enterprise Institute. All regulation totally sucks is their only message ever. On Mon, Jun 8, 2015 at 6:56 AM, Fletcher Kittredge fkitt...@gwi.net wrote: On Mon, Jun 8, 2015 at 6:01 AM, Larry Sheldon

Re: most accurate geo-IP source to build country-based access lists

2015-06-08 Thread A . L . M . Buxey
Hi, 2. There are no Russian soldiers in Crimea eh? we know there are as it got annexed last year. I think you meant There are no Russian soldiers in Ukraine ? alan

Re: most accurate geo-IP source to build country-based access lists

2015-06-08 Thread John McCormac
On 08/06/2015 15:11, Martin T wrote: Hi, let's say that I need to build an ACL where I block all the IPv4 traffic from Sweden. I considered following solutions: 1) RIR statistics files(ftp://ftp.ripe.net/ripe/stats/RIR-Statistics-Exchange-Format.txt) accessible for example at

Re: NANOG Digest, Vol 89, Issue 8

2015-06-08 Thread Ramy Hashish
On 8 Jun 2015, at 17:57, Ramy Hashish wrote: a BGP session has to be established over a GRE tunnel over the internet between the ISP/NSP/DC and the cloud scrubbing center, This is incorrect. In most cloud overlay DDoS mitigation scenarios (e.g., end-customer obtains service from an

Re: PoC for shortlisted DDoS Vendors

2015-06-08 Thread nanogml
hi nanog, back in april, Mohamed was reviewing the shortlist of DDoS appliances, would you mind posting a summary of your findings # partial list of DDoS appliances DDoS-Mitigator.net/Competitors - ? does anybody know which DDoS appliances uses IPtables to do its mitigation ??

Re: NANOG Digest, Vol 89, Issue 8

2015-06-08 Thread Roland Dobbins
On 8 Jun 2015, at 22:18, Ramy Hashish wrote: Even if the transit provider won't be involved in the mitigation process and the GRE tunnel is used only for injecting the traffic back to the end customer, the customer's dirty traffic will pass through some congestion points (most likely near