smtp.comcast.net self-signed certs

2009-01-15 Thread Jeff Mitchell
I've been seeing some odd behavior today with some of the servers that respond to smtp.comcast.net on port 587. Some, but not all, of the servers are presenting self-signed certs, causing my own server to balk at making a connection. (The Organization is RTFM, Inc. -- it'd be funny if mail wasn

RE: Approach to allocating netblocks

2009-01-15 Thread Frank Bulk
I hesitate to put my customers in "the Lagrange point between clueless and lazy" because they're SMBs doing what 99% of the other SMBs out there do. I have some customers who are in the hub in a multi-site VPN network and renumbering would be very painful. While Renumbering has all the positiv

multicast meltdown?

2009-01-15 Thread Antonio Querubin
We've detected a large drop in the IPv4 multicast prefix count over the past few days. Anybody know what's going on? Antonio Querubin whois: AQ7-ARIN

What ISP's looking for in a BGP Security Solution?

2009-01-15 Thread Akmal Shahbaz
Respected AllI would like to discuss some of the questions related to BGP Security which might be quite helpful in my research.1.What are you using now for BGP Security problems like Prefix hijacking,Path Spoofing,etc?2.What you would be looking for in any BGP Security Solution?3.Are solutions l

Re: Which is more efficient?

2009-01-15 Thread Bill Stewart
On Wed, Jan 14, 2009 at 12:56 PM, Murphy, Jay, DOH wrote: > In your humble opinion, which transmission method is more efficient, packet > or cell? ... > Trying to make a decision on the transport mode for cost, delay, jitter, ROI, > etcetera. It really depends on what your applications are. I'

Re: Radius & Tacacs+ Clients

2009-01-15 Thread Hugh Irvine
Hello John - Radiator includes both RADIUS and TACACS+ clients (written in Perl). www.open.com.au/radiator regards Hugh On 16 Jan 2009, at 02:15, John Souvestre wrote: Hi all. Does anyone have any recommendations for Radius and Tacacs+ clients (not servers) to run on Linux and

Re: Approach to allocating netblocks

2009-01-15 Thread Måns Nilsson
--On torsdag, torsdag 15 jan 2009 15.11.48 -0500 William Herrin wrote: > On Thu, Jan 15, 2009 at 5:16 AM, Måns Nilsson > wrote: >> from operational standpoint renumbering is not that bad. > > Måns, > > http://www.ietf.org/internet-drafts/draft-carpenter-renum-needs-work-01.t > xt provides 24 p

Re: Approach to allocating netblocks

2009-01-15 Thread William Herrin
On Wed, Jan 14, 2009 at 11:05 AM, Frank Bulk wrote: > For the first time we have our own ARIN-assigned netblocks that we can now > split out and divide to our customers. > > What's the best approach to handing out /30's, /29's, etc. that is efficient > as possible but allows for customers to expan

Re: Which is more efficient?

2009-01-15 Thread Valdis . Kletnieks
On Wed, 14 Jan 2009 13:56:11 MST, "Murphy, Jay, DOH" said: > In your humble opinion, which transmission method is more efficient, packet > or cell? In my humble opinion, if you care about actual in-the-field efficiency as opposed to theoretical or in-the-lab results, I think you'll find that there

Re: Radius & Tacacs+ Clients

2009-01-15 Thread Randy Bush
Does anyone have any recommendations for Radius and Tacacs+ clients (not servers) to run on Linux and Windows? Steven Fischer gave you a good pointer to freeradius for tacacs, look at http://shrubbery.net/tac_plus/ randy

Re: Radius & Tacacs+ Clients

2009-01-15 Thread Steven Fischer
take a look at this for your Linux requirements: http://freeradius.org/pam_radius_auth/ On Thu, Jan 15, 2009 at 10:15 AM, John Souvestre wrote: > Hi all. > > Does anyone have any recommendations for Radius and Tacacs+ clients (not > servers) to run on Linux and Windows? > > Thanks, > > John >

Radius & Tacacs+ Clients

2009-01-15 Thread John Souvestre
Hi all. Does anyone have any recommendations for Radius and Tacacs+ clients (not servers) to run on Linux and Windows? Thanks, John John Souvestre - Integrated Data Systems - (504) 355-0609

Re: Anyone notice strange announcements for 174.128.31.0/24

2009-01-15 Thread Nathan Malynn
Here's a question that's been bugging me the whole thread, and it's a bit of a newbie one. How is this different than someone faking SMTP headers to make it seem like an email came from my domain when it didn't? I'm talking in terms of morals, obviously; I understand the technique is different. On

Re: Anyone notice strange announcements for 174.128.31.0/24

2009-01-15 Thread Patrick W. Gilmore
On Jan 15, 2009, at 3:54 AM, Andy Davidson wrote: On 14 Jan 2009, at 16:06, Jeroen Massar wrote: Simon Lockhart wrote: (Yes, I'm in the minority that thinks that Randy hasn't done anything bad) Nah, I agree with Randy's experiment too. People should protect their networks better and this is

Re: Which is more efficient?

2009-01-15 Thread Joe Abley
On 2009-01-14, at 15:56, Murphy, Jay, DOH wrote: In your humble opinion, which transmission method is more efficient, packet or cell? When you say "transmission method" are you just interested in packet/ cell forwarding, or are you also including the effort involved in segmentation and re

Re: Anyone notice strange announcements for 174.128.31.0/24

2009-01-15 Thread John Payne
On Jan 14, 2009, at 6:22 PM, kris foster wrote: On Jan 14, 2009, at 2:52 PM, Michienne Dixon wrote: Well, if you really want to pick knits you are welcome to. If I meant prepending, I would have said that. The example that I listed was setting up a router, advertising the ASNs listed and

RE: Approach to allocating netblocks

2009-01-15 Thread Måns Nilsson
--On onsdag, onsdag 14 jan 2009 10.30.18 -0600 Frank Bulk wrote: > But perhaps the BCP is to make the customer renumber, in which case I'm > making things more complicated than they need to be. Most customers with PA space (which is what you are giving them) are quite used to renumbering. If not

Re: Anyone notice strange announcements for 174.128.31.0/24

2009-01-15 Thread Andy Davidson
On 14 Jan 2009, at 16:06, Jeroen Massar wrote: Simon Lockhart wrote: (Yes, I'm in the minority that thinks that Randy hasn't done anything bad) Nah, I agree with Randy's experiment too. People should protect their networks better and this is clearly showing that there are a lot of vulnera