Re: Linux Router distro's with dual stack capability

2010-02-11 Thread Peter van Arkel
On Wed, 10 Feb 2010, Bryan Irvine wrote: would pfsense work for you? pfSense has ipv6, since it's essentially just a freebsd kernel with a layer on top. However, ipv6 support in the GUI is fairly minimal to non-existant, and I wouldn't recommend it if you really want to use ipv6. Mind you, I'm

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread William Pitcock
On Wed, 2010-02-10 at 17:12 -0700, Blake Pfankuch wrote: Anyone have some insight on a good dual stack Linux (or BSD) router distro? Currently using IPCop but it lacks ipv6 support. I've used SmoothWall Express but not in some time and not sure how well it works with IPv6. Not looking

Denic (.de) blocking 6to4 nameservers (since begin feb 2010)

2010-02-11 Thread Igor Ybema
Hi, We are using 6to4 on our fallback site because the provider there is not able to provide us native IPv6 yet. We have also installed a fallback nameserver over there using a 6to4 address. This works good and no complains what so ever in the past. However, last week Denic (registry for .de)

Policy feedback - was Re: Denic (.de) blocking 6to4

2010-02-11 Thread Edward Lewis
At 13:26 +0100 2/11/10, Igor Ybema wrote: Ok, policy is policy and we should not complain. No, really, policies should be examined and questioned. Having been in policy meetings, unless the operations crowd openly questions and gives feed back, the meetings are just wastes of time.

Re: dark fiber

2010-02-11 Thread Deric Kwok
Can I have question? What is dark fiber? Thank you On Wed, Feb 10, 2010 at 5:08 PM, James Jones ja...@freedomnet.co.nz wrote: I am doing some researchis there a way to find out where there is dark fiber and who own's it?

Re: Denic (.de) blocking 6to4 nameservers (since begin feb 2010)

2010-02-11 Thread Nick Hilliard
On 11/02/2010 12:26, Igor Ybema wrote: Ok, policy is policy and we should not complain. However, I'm asking your opinions about this policy. I find this really stupid because this completely brakes use for 6to4 in Germany and their is no good reason to block it. Someone once asked Angela

Re: dark fiber

2010-02-11 Thread Craig Vuljanic
http://en.wikipedia.org/wiki/Dark_fibre On Thu, Feb 11, 2010 at 11:13 AM, Deric Kwok deric.kwok2...@gmail.comwrote: Can I have question? What is dark fiber? Thank you On Wed, Feb 10, 2010 at 5:08 PM, James Jones ja...@freedomnet.co.nz wrote: I am doing some researchis there a

RE: dark fiber

2010-02-11 Thread Jess Cohen
GOOGLE: Dark fiber is optical fiber infrastructure (cabling and repeaters) that is currently in place but is not being used. Optical fiber conveys information in the form of light pulses so the dark means no light pulses are being sent. For example, some electric utilities have installed

Re: dark fiber

2010-02-11 Thread steve pirk [egrep]
On Thu, Feb 11, 2010 at 08:21, Jess Cohen j...@corenap.com wrote: GOOGLE: Dark fiber is optical fiber infrastructure (cabling and repeaters) that is currently in place but is not being used. Optical fiber conveys information in the form of light pulses so the dark means no light pulses are

Re: Denic (.de) blocking 6to4 nameservers (since begin feb 2010)

2010-02-11 Thread Marc A. Runkel
On Feb 11, 2010, at 8:15 AM, Nick Hilliard wrote: On 11/02/2010 12:26, Igor Ybema wrote: Ok, policy is policy and we should not complain. However, I'm asking your opinions about this policy. I find this really stupid because this completely brakes use for 6to4 in Germany and their is no good

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread Jack Carrozzo
Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See the freebsd-isp list. -Jack Carrozzo On Thu, Feb 11, 2010 at 3:23 AM, William Pitcock neno...@systeminplace.net wrote: On Wed, 2010-02-10 at 17:12 -0700, Blake Pfankuch wrote: Anyone have some insight on a good dual stack

ATT Mind Boggles...

2010-02-11 Thread Mark Tinka
not usually my style to whine, but... So I send an online request for Wholesale IP Transit to ATT via their web site, and several days later, I get an e-mail from one of their staff directing me to another link where I should fill up my information (again). Suffice it to say her e-mail to me

Re: ATT Mind Boggles...

2010-02-11 Thread Jay Hennigan
Mark Tinka wrote: not usually my style to whine, but... ATT, what gives? /not usually my style to whine, but... You need the proper perspective on these things. Rent and watch this classic movie from 1967, then you'll understand. http://www.imdb.com/title/tt0062153/ -- Jay Hennigan -

Latest Cisco for small dual homed ASN

2010-02-11 Thread James Smallacombe
I have a customer that is looking at using BGP for their network; one connection over a few bonded T1s, the other over a Comcast Enterprise connection (which supposedly will do BGP now). When I was dual homed a few years ago, a 7204VXR with 256MB was more than adequate. With routing tables

Re: Latest Cisco for small dual homed ASN

2010-02-11 Thread Seth Mattinen
On 2/11/2010 10:53, James Smallacombe wrote: I have a customer that is looking at using BGP for their network; one connection over a few bonded T1s, the other over a Comcast Enterprise connection (which supposedly will do BGP now). When I was dual homed a few years ago, a 7204VXR with

RE: Latest Cisco for small dual homed ASN

2010-02-11 Thread Matthew Huff
You can squeeze by with 512MB, but 1GB of ram would be better. A 7204VXR with 1GB of ram will work fine. You can also squeeze by with a 2951 Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff  | Fax:  

Re: Yahoo abuse

2010-02-11 Thread J.D. Falk
On Feb 9, 2010, at 10:21 PM, Mikael Abrahamsson wrote: On Wed, 10 Feb 2010, Suresh Ramasubramanian wrote: That's IODEF, if and when it picks up enough steam to get widely deployed. That looks over-engineered, but at least someone can create a web service where the user can fill in fields

Re: Latest Cisco for small dual homed ASN

2010-02-11 Thread Curtis Maurand
On 2/11/2010 1:53 PM, James Smallacombe wrote: I have a customer that is looking at using BGP for their network; one connection over a few bonded T1s, the other over a Comcast Enterprise connection (which supposedly will do BGP now). When I was dual homed a few years ago, a 7204VXR with

Re: Denic (.de) blocking 6to4 nameservers (since begin feb 2010)

2010-02-11 Thread Mark Andrews
In message a05493651002110426u7d9688c9i273ff64c456ec...@mail.gmail.com, Igor Ybema writes: Hi, We are using 6to4 on our fallback site because the provider there is not able to provide us native IPv6 yet. We have also installed a fallback nameserver over there using a 6to4 address. This

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread William Pitcock
Hi, On Thu, 2010-02-11 at 13:05 -0500, Jack Carrozzo wrote: Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See the freebsd-isp list. FreeBSD's network stack chokes up in DDoS attacks due to interrupt flooding. We used to use FreeBSD for firewalling and basic routing, but when

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread Chuck Anderson
On Thu, Feb 11, 2010 at 04:12:03PM -0600, William Pitcock wrote: On Thu, 2010-02-11 at 13:05 -0500, Jack Carrozzo wrote: Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See the freebsd-isp list. FreeBSD's network stack chokes up in DDoS attacks due to interrupt flooding.

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread Marty Anstey
William Pitcock wrote: FreeBSD's network stack chokes up in DDoS attacks due to interrupt flooding. We used to use FreeBSD for firewalling and basic routing, but when noticing that we had horizontal scalability (e.g. a Celeron 667mhz performed nearly as well as a dual dual-core Xeon system

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread Kevin Oberman
Date: Thu, 11 Feb 2010 18:20:13 -0500 From: Chuck Anderson c...@wpi.edu On Thu, Feb 11, 2010 at 04:12:03PM -0600, William Pitcock wrote: On Thu, 2010-02-11 at 13:05 -0500, Jack Carrozzo wrote: Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See the freebsd-isp list.

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread Richard A Steenbergen
On Thu, Feb 11, 2010 at 03:46:13PM -0800, Kevin Oberman wrote: Polling is excellent for low speed lines, but for Gig and faster, most newer interfaces support interrupt coalescing. This easily resolves the issue in hardware as interrupts are only issued when needed but limited to a reasonable

192.255.103.x

2010-02-11 Thread Hector Herrera
I'm trying to diagnose an issue with 192.255.103.x As far as I can tell from IANA, the block 192/8 is allocated to ARIN. ARIN does not have a record of 192.255.103 being allocated to anybody. Here is the issue ... the customer insists that is the correct IP and for a few hours yesterday, it was

Re: Yahoo abuse

2010-02-11 Thread James Hess
On Thu, Feb 11, 2010 at 1:41 PM, J.D. Falk jdfalk-li...@cybernothing.org wrote: Some types of conversations simply don't take well to automation. However, automatically indexing/archiving such conversations for future reference can be useful (and can assist participants to the conversation in

Re: 192.255.103.x

2010-02-11 Thread James Hess
On Thu, Feb 11, 2010 at 7:30 PM, Hector Herrera hectorherr...@gmail.com wrote: As far as I can tell from IANA, the block 192/8 is allocated to ARIN. ARIN does not have a record of 192.255.103 being allocated to anybody. I can infer very strongly that the block has probably not been allocated,

Re: 192.255.103.x

2010-02-11 Thread Christopher Morrow
On Thu, Feb 11, 2010 at 9:12 PM, James Hess mysi...@gmail.com wrote: On Thu, Feb 11, 2010 at 7:30 PM, Hector Herrera hectorherr...@gmail.com wrote: As far as I can tell from IANA, the block 192/8 is allocated to ARIN. ARIN does not have a record of 192.255.103 being allocated to anybody. I

Re: 192.255.103.x

2010-02-11 Thread Hector Herrera
On Thu, Feb 11, 2010 at 6:08 PM, Matthew Palmer mpal...@hezmatt.org wrote: On Thu, Feb 11, 2010 at 05:30:11PM -0800, Hector Herrera wrote: I'm trying to diagnose an issue with 192.255.103.x As far as I can tell from IANA, the block 192/8 is allocated to ARIN. ARIN does not have a record of

Re: Linux Router distro's with dual stack capability

2010-02-11 Thread Jack Carrozzo
Also IIRC you can tune the hash cache / tree algorithm - ie if your traffic is mostly a few addresses then the default prefix search is fine (with the caching) but for more sparse traffic as you'd see at an edge, disabling the cache and using the other algo proved a lot faster. There's a paper on

Re: 192.255.103.x

2010-02-11 Thread Stephen John Smoogen
On Thu, Feb 11, 2010 at 8:27 PM, Hector Herrera hectorherr...@gmail.com wrote: On Thu, Feb 11, 2010 at 6:08 PM, Matthew Palmer mpal...@hezmatt.org wrote: On Thu, Feb 11, 2010 at 05:30:11PM -0800, Hector Herrera wrote: I'm trying to diagnose an issue with 192.255.103.x As far as I can tell

Re: 192.255.103.x

2010-02-11 Thread Matthew Palmer
On Thu, Feb 11, 2010 at 07:27:38PM -0800, Hector Herrera wrote: On Thu, Feb 11, 2010 at 6:08 PM, Matthew Palmer mpal...@hezmatt.org wrote: On Thu, Feb 11, 2010 at 05:30:11PM -0800, Hector Herrera wrote: I'm trying to diagnose an issue with 192.255.103.x As far as I can tell from IANA, the