Christopher Neitzert wants to stay in touch on LinkedIn

2010-02-05 Thread Christopher Neitzert
LinkedIn I'd like to add you to my professional network on LinkedIn. - Christopher Neitzert Confirm that you know Christopher Neitzert https://www.linkedin.com/e/isd/1050272306/8EzUGBSW/ -- (c) 2010, LinkedIn Corporation

Re: Christopher Neitzert wants to stay in touch on LinkedIn

2010-02-05 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Feb 5, 2010 at 12:36 AM, Christopher Neitzert ch...@neitzert.com wrote: LinkedIn I'd like to add you to my professional network on LinkedIn. - Christopher Neitzert Confirm that you know Christopher Neitzert

Re: Regular Expression for IPv6 addresses

2010-02-05 Thread isabel dias
I Just Don't Know What To Do With Myself - Original Message From: Jeroen Massar jer...@unfix.org To: Mark Andrews ma...@isc.org Cc: nanog@nanog.org; Richard E. Brown richard.e.br...@dartware.com Sent: Fri, February 5, 2010 1:16:53 AM Subject: Re: Regular Expression for IPv6 addresses

Re: lawful intercept/IOS at BlackHat DC, bypassing and recommendations

2010-02-05 Thread andrew.wallace
- Original Message From: Brian Keefer ch...@smtps.net To: NANOG list nanog@nanog.org Cc: a.harrow...@gmail.com; andrew.wallace andrew.wall...@rocketmail.com Sent: Fri, 5 February, 2010 1:55:58 Subject: Re: lawful intercept/IOS at BlackHat DC, bypassing and recommendations Andrew

Re: Christopher Neitzert wants to stay in touch on LinkedIn

2010-02-05 Thread Michael Thomas
Paul Ferguson wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Feb 5, 2010 at 12:36 AM, Christopher Neitzert ch...@neitzert.com wrote: LinkedIn I'd like to add you to my professional network on LinkedIn. - Christopher Neitzert Confirm that you know Christopher

Loop Start T1 through PBX from Dialogic card

2010-02-05 Thread LEdouard Louis
(Anyone) familiar with configuring a Loop Start T1 through a PBX from a Dialogic card? I've got it to see the T, it talks, it initiates calls, but they don't connect completely. Incoming calls just ring and ring but the software shows connection. Thoughts on troubleshooting? Thanks in

BFD over p2p transport links

2010-02-05 Thread Serge Vautour
Hello, I'm being asked to look into using BFD over our P2P transport links. Is anyone else doing this? Our transport links are all 10G Ethernet (LAN-PHY). There's no alarming inside of LAN-PHY like there is in SONET. The transport side should propagate a fiber break by stopping to send light

Re: BFD over p2p transport links

2010-02-05 Thread Tim Durack
On Fri, Feb 5, 2010 at 9:45 AM, Serge Vautour sergevaut...@yahoo.ca wrote: Hello, I'm being asked to look into using BFD over our P2P transport links. Is anyone else doing this? Our transport links are all 10G Ethernet (LAN-PHY). There's no alarming inside of LAN-PHY like there is in SONET.

Re: BFD over p2p transport links

2010-02-05 Thread sthaug
I'm being asked to look into using BFD over our P2P transport links. Is anyone else doing this? Our transport links are all 10G Ethernet (LAN-PHY). There's no alarming inside of LAN-PHY like there is in SONET. The transport side should propagate a fiber break by stopping to send light on

How common are wide open SIP gateways?

2010-02-05 Thread Drew Weaver
Heya, Has anyone done any research or have any anecdotal numbers related to how common it is to have a SIP gateway sitting out on the Internet with no ACL or authentication? Recently we have noticed a couple of instances where we get abuse complaints from companies who claim that one

Re: BFD over p2p transport links

2010-02-05 Thread sthaug
We run it on most 10G backbone (LAN-PHY) links. Hmm. Backbone L2 transport, or fiber/wave type transport? I'd be surprised to hear of people running it on dark-fiber-ish stuff. Both. For L2 transport through switches the usefulness is rather obvious. For WDM type transport because we're not

Re: How common are wide open SIP gateways?

2010-02-05 Thread Seth Mattinen
On 2/5/10 9:33 AM, Drew Weaver wrote: Heya, Has anyone done any research or have any anecdotal numbers related to how common it is to have a SIP gateway sitting out on the Internet with no ACL or authentication? Recently we have noticed a couple of instances where we get abuse

Re: How common are wide open SIP gateways?

2010-02-05 Thread David Birnbaum
If you are using Asterisk (and many derived PBXs), and your installation is old enough, and your default context will complete a call...then you may find you are giving free calling out. This was fixed at some point in the Asterisk default configuration files. We have noticed a lot of issues

Re: How common are wide open SIP gateways?

2010-02-05 Thread Jon Lewis
On Fri, 5 Feb 2010, Drew Weaver wrote: Has anyone done any research or have any anecdotal numbers related to how common it is to have a SIP gateway sitting out on the Internet with no ACL or authentication? Recently we have noticed a couple of instances where we get abuse complaints from

Re: BFD over p2p transport links

2010-02-05 Thread Tore Anderson
* Serge Vautour I'm being asked to look into using BFD over our P2P transport links. Is anyone else doing this? Our transport links are all 10G Ethernet (LAN-PHY). There's no alarming inside of LAN-PHY like there is in SONET. The transport side should propagate a fiber break by stopping

Re: How common are wide open SIP gateways?

2010-02-05 Thread Chris Hills
On 05/02/2010 17:33, Drew Weaver wrote: Has anyone done any research or have any anecdotal numbers related to how common it is to have a SIP gateway sitting out on the Internet with no ACL or authentication? Recently we have noticed a couple of instances where we get abuse complaints

Re: BFD over p2p transport links

2010-02-05 Thread Chuck Anderson
On Fri, Feb 05, 2010 at 06:50:39PM +0100, Tore Anderson wrote: * Serge Vautour I'm being asked to look into using BFD over our P2P transport links. Is anyone else doing this? Our transport links are all 10G Ethernet (LAN-PHY). There's no alarming inside of LAN-PHY like there is in

Re: How common are wide open SIP gateways?

2010-02-05 Thread Jonathan Thurman
On 05/02/2010 17:33, Drew Weaver wrote:        Has anyone done any research or have any anecdotal numbers related to how common it is to have a SIP gateway sitting out on the Internet with no ACL or authentication? Recently we have noticed a couple of instances where we get abuse complaints

Re: How common are wide open SIP gateways?

2010-02-05 Thread Brandon Ewing
On Fri, Feb 05, 2010 at 12:45:13PM -0500, David Birnbaum wrote: We have noticed a lot of issues with Asterisk 1.2 and some 1.4 rollouts. FreePBX had some truck-sized holes in it. FreePBX 2.6.0 defaults to refusing anonymous SIP calls. If you enable inbound anonymous calls, it includes only

Re: How common are wide open SIP gateways?

2010-02-05 Thread David Birnbaum
I should have prefaced that with older installations as well. As far as we can see, most of the newer packages have fixed the known truck-sized holes in their default configurations, but given the lack of any formal framework for testing this stuff, even the big switches have been found to

RE: How common are wide open SIP gateways?

2010-02-05 Thread Drew Weaver
Eventually I'll have to get around to setting up netflow so I can detect the scanners before it becomes a problem =) Just not a great deal of 'cohesiveness' with the current open source netflow implementations, and then all of the different Cisco gear has different caveats related to NF, so

Weekly Routing Table Report

2010-02-05 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-st...@lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith

Re: fiber plant management?

2010-02-05 Thread Martin Hannigan
On Fri, Feb 5, 2010 at 2:26 PM, Justin M. Streiner strei...@cluebyfour.orgwrote: On Fri, 5 Feb 2010, Martin Hannigan wrote: Honestly? A spreadsheet will do it. Our fiber plant is large enough, and enough people make changes that a spreadsheet is not a scalable option. How large? --

RE: fiber plant management?

2010-02-05 Thread Dustin Jurman
Hello fellow Nanogers, I know this is an emotional issue for some but we're looking at some upgrades to our cores and being a classic cisco shop we're wondering if anyone has had any experience with the Cisco ASR models in the service provider space. We're used to running VXR's and are trying

Re: How common are wide open SIP gateways?

2010-02-05 Thread Scott Howard
On Fri, Feb 5, 2010 at 9:45 AM, David Birnbaum dav...@pins.net wrote: We have noticed a lot of issues with Asterisk 1.2 and some 1.4 rollouts. FreePBX had some truck-sized holes in it. Most/all of the big issues that existed in previous version of Asterisk/FreePBX have been resolved in later

Re: fiber plant management?

2010-02-05 Thread Justin M. Streiner
On Fri, 5 Feb 2010, Martin Hannigan wrote: Our fiber plant is large enough, and enough people make changes that a spreadsheet is not a scalable option. How large? Around 90 buildings, lots of conduits/manholes/pullboxes, lots of owned fiber or varying vintages, lots of leased fiber.

VXR VS ASR

2010-02-05 Thread Dustin Jurman
My mistake, Dustin Dustin Jurman CEO 1211 North Westshore Blvd - Suite 711 Tampa, Fl 33607 813-232-4887 dus...@rseng.net Building Better Infrastructure -Original Message- From: Justin M. Streiner [mailto:strei...@cluebyfour.org] Sent: Friday, February 05, 2010 4:29 PM To:

BGP Update Report

2010-02-05 Thread cidr-report
BGP Update Report Interval: 28-Jan-10 -to- 04-Feb-10 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS18170 74298 6.7%3377.2 -- CHANGWON-AS-KR Changwon National University 2 - AS5800

The Cidr Report

2010-02-05 Thread cidr-report
This report has been generated at Fri Feb 5 21:11:24 2010 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

Re: VXR VS ASR

2010-02-05 Thread Doug Barton
FYI, Start a new thread does not mean reply to a message in an existing thread and then change the subject line. A new thread consists of actually creating a new message (however your mail client does that). The reason this is important is that those of us who actually use threaded mail readers

Insecure Cable networks ?

2010-02-05 Thread Jorge Amodio
Is it a common practice on cable network providers to leave access to the cable modem/router management web UI wide open ? Here is the scoop. I heard about it but didn't experienced it hands on or seen myself until recently when I was testing one of the embedded TCP/IP boards I produce which as

NorthStar IP Management System

2010-02-05 Thread Hitesh Patel
Hello all, It has been a while since I posted anything to NANOG. A long time ago (in a galaxy far far away ;) ) I wrote and maintained a software package called NorthStar (http://www.brownkid.net/NorthStar) to administrate IP space and various other things. Life got busy and the

Re: NorthStar IP Management System

2010-02-05 Thread Eric Cables
I looked at NorthStar about 5 years ago, but due to its lack of support I chose to use IPPlan instead. I do remember thinking NorthStar would have been a great solution had you been actively maintaining it, and maybe it still will -- should you decide to pick it back up. I would definitely give

Re: Insecure Cable networks ?

2010-02-05 Thread Steven Schecter
On Fri, Feb 5, 2010 at 9:43 PM, Jorge Amodio jmamo...@gmail.com wrote: Is it a common practice on cable network providers to leave access to the cable modem/router management web UI wide open ? it's very common for a CM to operate a web page, usually http://192.168.100.1/ that offer the local

Re: BFD over p2p transport links

2010-02-05 Thread Phil Bedard
We use it on all of our links which are generally over our own DWDM/dark fiber network. All links are 10G LAN PHY. Our DWDM systems propagate link failures but one of the main reasons we implemented it was our router vendors did not drop link during reboots during software upgrades. GR

Re: lawful intercept/IOS at BlackHat DC, bypassing and recommendations

2010-02-05 Thread Mark Smith
On Thu, 4 Feb 2010 16:47:47 -0600 Jorge Amodio jmamo...@gmail.com wrote: I'm totally ignorant (most of the time), is anybody actually using SNMPv3 ? I worked with an IPsec VPN product around 10 years ago that used SNMPv3 for automated provisioning of the tunnels. Regards

RE: Insecure Cable networks ?

2010-02-05 Thread Frank Bulk
There are knobs on most models to restrict access to the GUI to: - the LAN interface - certain mgmt subnets. Sounds like the MSO doesn't have things set up correctly. Frank -Original Message- From: Jorge Amodio [mailto:jmamo...@gmail.com] Sent: Friday, February 05, 2010 8:43 PM To:

Re: Insecure Cable networks ?

2010-02-05 Thread Truman Boyes
On 6/02/2010, at 1:43 PM, Jorge Amodio wrote: snip fired nmap, tried several 10/24 networks and just playing by hand found hundreds of devices and every single one I tried default password it worked, not only modems, also modem/routers and some with integrated VoIP where if I wanted I would

Re: NorthStar IP Management System

2010-02-05 Thread Seth Mattinen
On 2/5/10 8:13 PM, Eric Cables wrote: I looked at NorthStar about 5 years ago, but due to its lack of support I chose to use IPPlan instead. I do remember thinking NorthStar would have been a great solution had you been actively maintaining it, and maybe it still will -- should you decide to