Re: Common operational misconceptions

2012-02-20 Thread Owen DeLong
On Feb 19, 2012, at 5:21 PM, Mark Andrews wrote: In message 201202200107.q1k17w5l000...@aurora.sol.net, Joe Greco writes: I have running code to make the reverse translations, with which protocols such as ftp with PORT commands are working. No, I think you do not understand... I have

Re: Common operational misconceptions

2012-02-20 Thread Valdis . Kletnieks
On Sun, 19 Feb 2012 16:24:49 PST, Owen DeLong said: No, I think you do not understand... I have a NAT gateway with a single public address. I have 15 FTP servers and 22 web servers behind it. I want people to be able to go to ftp://hostname and/or = http://hostname for each of them.

Re: Dynadot DNS acting up?

2012-02-20 Thread Vivek Thomas
Chris caldcv at gmail.com writes: Anyone noticing issues with Dynadot (site is down) and Dynadot related domain names where you are using their DNS servers? Yep, I was using Dynadot DNS for one of my domains. It seems their DNS servers weren't functioning properly. Anyway I switched to

Re: Common operational misconceptions

2012-02-20 Thread Valdis . Kletnieks
On Mon, 20 Feb 2012 15:42:56 +0900, Masataka Ohta said: George Bonser wrote: It is seemingly working well means there is not much PMTU changes, which means we had better assumes some PMTU (1280B, for example) and use it without PMTUD. It depends on the OS and the method being used. If

Re: X.509 Certs For Personal Use - Follow Up

2012-02-20 Thread Leo Bicknell
I received a number of interesting replies, most off-list, so I thought I would summarize and perhaps restart the discussion. Many folks pushed the run your own CA idea. While I get that works, and even secures the communication, if you run a web site accessed by random folks it will confuse

Re: WW: Colo Vending Machine

2012-02-20 Thread Jon Lewis
On Sat, 18 Feb 2012, John Osmon wrote: At my $JOB[-1] they laughed at me when I pulled a Wyse out of the trash bin and stuck it on a spare crash cart. Then I fixed something while they were still looking for USB-Serial, etc. Speaking of that sort of thing, I'd really LOVE if there were a

Re: facebook.com DNS not found 20120218 2125 UTC

2012-02-20 Thread Jay Ashworth
- Original Message - From: Christopher Morrow morrowc.li...@gmail.com This sort of thing happens 'often' ('XXX is not available, wtf?') should there be some set of troubleshooting steps followed, like a list of thing you'd do in order to show you'd troubleshot the problem and it

Re: DNS Attacks

2012-02-20 Thread Tei
I am a mere user, so I all this stuff sounds to me like giberish. The right solution is to capture the request to these DNS servers, and send to a custom server with a static message warning.html. Nothing fancy. With a phone number to get out of jail, so people can call to op-out of this

RE: WW: Colo Vending Machine

2012-02-20 Thread Blake Pfankuch
I too would be VERY interested in something like this. There are many times when I am out on site with customers who don't have anything connected to it and you need to figure out what is up. Even a VGA input USB keyboard/mouse and application to match it for an Android/iFail tablet would be

RE: Common operational misconceptions

2012-02-20 Thread George Bonser
George Bonser wrote: It is seemingly working well means there is not much PMTU changes, which means we had better assumes some PMTU (1280B, for example) and use it without PMTUD. It depends on the OS and the method being used. If you set the option to 2 on Linux, it will do MTU

Re: WW: Colo Vending Machine

2012-02-20 Thread Matthew Petach
On Mon, Feb 20, 2012 at 7:34 AM, Jon Lewis jle...@lewis.org wrote: Speaking of that sort of thing, I'd really LOVE if there were a device about the size of a netbook that could be hooked up to otherwise headless machines in colos that would give you keyboard, video mouse.  i.e. a folding

Re: DNS Attacks

2012-02-20 Thread Valdis . Kletnieks
On Mon, 20 Feb 2012 16:38:00 +0100, Tei said: The right solution is to capture the request to these DNS servers, and send to a custom server with a static message warning.html. Not all DNS lookups are for websites. The lookup could be for NTP, or SMTP, or ssh, or a World of Warcraft server,

Re: WW: Colo Vending Machine

2012-02-20 Thread Jussi Peltola
On Mon, Feb 20, 2012 at 10:34:58AM -0500, Jon Lewis wrote: Speaking of that sort of thing, I'd really LOVE if there were a device about the size of a netbook that could be hooked up to otherwise headless machines in colos that would give you keyboard, video mouse. i.e. a folding netbook

Re: WW: Colo Vending Machine

2012-02-20 Thread Joel jaeggli
On 2/20/12 08:54 , Matthew Petach wrote: On Mon, Feb 20, 2012 at 7:34 AM, Jon Lewis jle...@lewis.org wrote: Speaking of that sort of thing, I'd really LOVE if there were a device about the size of a netbook that could be hooked up to otherwise headless machines in colos that would give you

Re: WW: Colo Vending Machine

2012-02-20 Thread Leo Bicknell
In a message written on Mon, Feb 20, 2012 at 09:51:59AM -0800, Joel jaeggli wrote: Things with legacy ports on them are on the way out. given an ipmi manager that doesn't suck there should be no reason to connect to the machine at all, to console in. the rats nest is a lot more tractable when

Re: DNS Attacks

2012-02-20 Thread Christopher Morrow
On Mon, Feb 20, 2012 at 12:00 PM, valdis.kletni...@vt.edu wrote: On Mon, 20 Feb 2012 16:38:00 +0100, Tei said: The right solution is to capture the request to these DNS servers, and send to a custom server with a static message  warning.html. Not all DNS lookups are for websites.  The lookup

Re: DNS Attacks

2012-02-20 Thread Christopher Morrow
On Mon, Feb 20, 2012 at 10:38 AM, Tei oscar.vi...@gmail.com wrote: I am a mere user, so I all this stuff sounds to me like giberish. The right solution is to capture the request to these DNS servers, and send to a custom server with a static message  warning.html. Nothing fancy.   With a

Re: WW: Colo Vending Machine

2012-02-20 Thread Joel jaeggli
On 2/20/12 09:55 , Leo Bicknell wrote: In a message written on Mon, Feb 20, 2012 at 09:51:59AM -0800, Joel jaeggli wrote: Things with legacy ports on them are on the way out. given an ipmi manager that doesn't suck there should be no reason to connect to the machine at all, to console in.

Bluetooth-to-Serial (was: Re: Colo Vending Machine)

2012-02-20 Thread Joel M Snyder
+1 on the suggestion for a SpiderDuo as portable KVM+your own laptop. Solves the problem and leverages the hardware you already have. Works great! Anyway: Bluetooth-to-Serial has been around for years; I did a review of several of them a while ago, even connecting with a Nokia phone (this

Re: WW: Colo Vending Machine

2012-02-20 Thread Jon Lewis
On Mon, 20 Feb 2012, Joe Greco wrote: I must admit that our planning and preparedness is designed around a multi-level strategy to avoid having to go on-site to a site nearly a thousand miles away, so we've probably instrumented things a bit more heavily than many networks, but when the cost

Re: WW: Colo Vending Machine

2012-02-20 Thread Lamar Owen
On Friday, February 17, 2012 01:44:57 PM Jay Ashworth wrote: 2) Power cords: C19 to L6-15, C19 to C20, C13 to C20 (latter 2 for 208V PDUs) (If you don't have your own C13 to L6-15 cords, you're in the wrong biz) An interesting thread. I'd say if you had, instead of a C13 on one end, a

Re: WW: Colo Vending Machine

2012-02-20 Thread Jay Ashworth
- Original Message - From: Jon Lewis jle...@lewis.org Speaking of that sort of thing, I'd really LOVE if there were a device about the size of a netbook that could be hooked up to otherwise headless machines in colos that would give you keyboard, video mouse. i.e. a folding netbook

Single-port Network KVM

2012-02-20 Thread Jay Ashworth
Here's one example; cheapest I've seen: http://www.kvm-switches-online.com/0su51068.html There are others. This one appears to be web/java based rather than VNC, though that probably isn't a killer for most people. I thought I'd seen a little dongle-y model; I'll look around a bit more.

Re: Single-port Network KVM

2012-02-20 Thread Jay Ashworth
- Original Message - From: Jay Ashworth j...@baylink.com There are others. This one appears to be web/java based rather than VNC, though that probably isn't a killer for most people. I thought I'd seen a little dongle-y model; I'll look around a bit more. Didn't read far enough;

Re: Single-port Network KVM

2012-02-20 Thread Jussi Peltola
On Mon, Feb 20, 2012 at 03:05:16PM -0500, Jay Ashworth wrote: Here's one example; cheapest I've seen: http://www.kvm-switches-online.com/0su51068.html There are others. This one appears to be web/java based rather than VNC, though that probably isn't a killer for most people. I thought

Re: DNS Attacks

2012-02-20 Thread Joel jaeggli
On 2/20/12 09:57 , Christopher Morrow wrote: On Mon, Feb 20, 2012 at 10:38 AM, Tei oscar.vi...@gmail.com wrote: I am a mere user, so I all this stuff sounds to me like giberish. The right solution is to capture the request to these DNS servers, and send to a custom server with a static

Re: Single-port Network KVM

2012-02-20 Thread Seth Mattinen
On 2/20/12 12:05 PM, Jay Ashworth wrote: Here's one example; cheapest I've seen: http://www.kvm-switches-online.com/0su51068.html There are others. This one appears to be web/java based rather than VNC, though that probably isn't a killer for most people. I thought I'd seen a little

Re: WW: Colo Vending Machine

2012-02-20 Thread Mario Eirea
Ive wished this for years. Seems like it could be easy to achieve in theory. -Mario Eirea On Feb 20, 2012, at 11:55 AM, Matthew Petach mpet...@netflight.com wrote: On Mon, Feb 20, 2012 at 7:34 AM, Jon Lewis jle...@lewis.org wrote: Speaking of that sort of thing, I'd really LOVE if there were

Laptop with reverse VGA

2012-02-20 Thread Jussi Peltola
It practically requires more hardware than a separate IP KVM. Finding RS-232 in a laptop is already nearly impossible, so I doubt this will happen. The keyboard/mouse part *might* be possible in some cases where these devices have a usb interface somewhere in the middle. Still, you'd need cables

Re: WW: Colo Vending Machine

2012-02-20 Thread Jay Ashworth
- Original Message - From: Leo Bicknell bickn...@ufp.org This reminded me of another gizmo I'd like to have... How about a Bluetooth to Serial adapter? Routers don't (yet) have iLO, but I have this fantasy about being able to walk into a colo with a handfull of small adapters that

Re: Laptop with reverse VGA

2012-02-20 Thread Faisal Imtiaz
Interesting thought. You know you can easily put together something like such... Some ideas for you:-- Screens: (these are mostly designed to be 2nd Screens on laptops). http://www.amazon.com/s/?ie=UTF8keywords=lt1421tag=googhydr-20index=apshvadid=13474581570ref=pd_sl_8j9d6nstmk_b

Re: Laptop with reverse VGA

2012-02-20 Thread Jon Lewis
On Mon, 20 Feb 2012, Faisal Imtiaz wrote: Or if you can order one of these. Exactly what you are looking for !!! http://store.earthlcd.com/LCD-Products/Portable-Monitors That does look like pretty much exactly what I wanted...but a palm sized IP KVM for less than half the price seems

[NANOG-announce] NANOG 55 - Vancouver: Call For Presentations

2012-02-20 Thread Dave Temkin
NANOG Community, After an awesome meeting in San Diego, we're already starting to get ready for NANOG 55 in Vancouver. If you have a topic you'd like to speak about, we'd love to consider it. Please watch http://www.nanog.org/meetings/nanog55/callforpresentations.html for more

Re: Common operational misconceptions

2012-02-20 Thread Masataka Ohta
George Bonser wrote: Must be magic then, because it works for me. Yes, but magicians always use tricks. I've got a few dozen servers with MTU 7500 that aren't having a bit of trouble talking to anyone. Your trick is that your routers at the border between MTUs 7500 and 1500 (or maybe, 1400

RE: Laptop with reverse VGA

2012-02-20 Thread Scott Berkman
There are also these, work with anything with a USB port: http://www.blackbox.com/Store/Detail.aspx/USB-Laptop-Console-Crash-Cart-Adap ter/KVT100A You could mate this with a cheap used Netbook too. -Original Message- From: Jon Lewis [mailto:jle...@lewis.org] Sent: Monday, February 20,

RE: Common operational misconceptions

2012-02-20 Thread George Bonser
Your trick is that your routers at the border between MTUs 7500 and 1500 (or maybe, 1400 or so) generate ICMP packet too big packets to your servers and no intermediate entities filter them, isn't it? Masataka Ohta I am saying that MTU

Re: Laptop with reverse VGA

2012-02-20 Thread Jake Khuon
On Mon, 2012-02-20 at 23:23 +0200, Jussi Peltola wrote: The display would require a scaler/processor/ADC/TMDS receiver, which are found in every standalone LCD. This stuff consumes multiple watts (it becomes hot enough to cook itself in a few years after all) so it will not appear in a laptop

Re: Common operational misconceptions

2012-02-20 Thread Masataka Ohta
George Bonser wrote: I am saying that MTU probing works just fine, even with a link in between that has a shorter MTU and doesn't pass ICMP. And I have been saying your statement is unfounded. I actually have one of those. I can't see any. It actively probes with packets of varying sizes

RE: Laptop with reverse VGA

2012-02-20 Thread Mario Eirea
This is perfect! In my situation, I have to deal with many single server at multiple locations instead of the opposite. This sure beats walking around with an LCD panel and keyboard... -Mario Eirea From: Scott Berkman [sc...@sberkman.net] Sent: Monday,

Re: WW: Colo Vending Machine

2012-02-20 Thread Robert Bonomi
From nanog-bounces+bonomi=mail.r-bonomi@nanog.org Mon Feb 20 09:40:44 2012 Date: Mon, 20 Feb 2012 10:34:58 -0500 (EST) From: Jon Lewis jle...@lewis.org To: nanog@nanog.org Subject: Re: WW: Colo Vending Machine On Sat, 18 Feb 2012, John Osmon wrote: At my $JOB[-1] they laughed at

Re: Common operational misconceptions

2012-02-20 Thread Steven Bellovin
The timer for Linux is 5 minute by default but you can change it. Timer timeouts do not affect TCP MSS. RFC 2923: TCP should notice that the connection is timing out. After several timeouts, TCP should attempt to send smaller packets, perhaps turning off the DF flag

Re: Common operational misconceptions

2012-02-20 Thread Jimmy Hess
On Sat, Feb 18, 2012 at 1:19 AM, Bob Vaughan tec...@w6yx.stanford.edu wrote: Ethernet/Token Ring/Cisco Console/whatever uses an RJ45 connector  RJ45 defines a keyed 8P8C type connector, wired in a specific  manner, for a specific 2 wire telco service. Incompatible with the  above on several

RE: Common operational misconceptions

2012-02-20 Thread George Bonser
-Original Message- From: Masataka Ohta First, it sets eff_pmtu to 1400B. OK? Where did you get 1400 from? Are you talking specifically with the linux implementation? As eff_pmtu of 1400B is close enough to search_high, you are done. I suppose that depends on a specific

Re: Common operational misconceptions

2012-02-20 Thread Masataka Ohta
George Bonser wrote: First, it sets eff_pmtu to 1400B. OK? Where did you get 1400 from? Read the RFC. PERIOD. Masataka Ohta

RE: Common operational misconceptions

2012-02-20 Thread George Bonser
I, in fact, HAVE read the RFC. The initial value for search_high SHOULD be the largest possible packet that might be supported by the flow. This may be limited by the local interface MTU, by an explicit protocol mechanism such as the TCP MSS option, or by an intrinsic limit such as

Re: Common operational misconceptions

2012-02-20 Thread Masataka Ohta
George Bonser wrote: I, in fact, HAVE read the RFC. You don't, at all. The initial value for search_high SHOULD be the largest possible packet that might be supported by the flow. This may be limited by the local interface MTU, by an explicit protocol mechanism such as the

Re: Common operational misconceptions

2012-02-20 Thread Steven Bellovin
On Feb 20, 2012, at 10:27 PM, Masataka Ohta wrote: Steven Bellovin wrote: Timer timeouts do not affect TCP MSS. RFC 2923: TCP should notice that the connection is timing out. After several timeouts, TCP should attempt to send smaller packets, perhaps turning off the

Re: Common operational misconceptions

2012-02-20 Thread Masataka Ohta
Steven Bellovin wrote: I'm not sure what, do you think, is the problem, because the paragraph of RFC2923 you quote has nothing to do with TCP MSS. Sure it does. That's in 2.1; the start of it discusses PMTUD failing for various reasons including firewalls. Firewalls? Though I have never

Re: WW: Colo Vending Machine

2012-02-20 Thread Randy McAnally
Cage nuts. Sent from my IPhone (pardon the typo's) On Feb 17, 2012, at 1:35 PM, Jay Ashworth j...@baylink.com wrote: Please post your top 3 favorite components/parts you'd like to see in a vending machine at your colo; please be as specific as possible; don't let vendor specificity scare

Re: WW: Colo Vending Machine

2012-02-20 Thread Chaim Rieger
Apple stickers -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. Randy McAnally r...@fast-serv.com wrote: Cage nuts. Sent from my IPhone (pardon the typo's) On Feb 17, 2012, at 1:35 PM, Jay Ashworth j...@baylink.com wrote: Please post your top 3 favorite

Re: WW: Colo Vending Machine

2012-02-20 Thread Tim Connolly (FC)
1. A blow-up mattress and pillow set. 2. A magic wand 3. A highly caffeinated Noc-Tech On Feb 17, 2012, at 1:35 PM, Jay Ashworth j...@baylink.com wrote: Please post your top 3 favorite components/parts you'd like to see in a vending machine at your colo; please be as specific as possible;

Re: Single-port Network KVM

2012-02-20 Thread David
Spider kvms come well recommended and it's what I see being used around the datacenter often. Prefer them vs. the bulkier ones I've used in the past. web/java is supported, as is VNC -- the latter of which makes them very usable. On 02/20/2012 01:05 PM, Seth Mattinen wrote: On 2/20/12 12:05 PM,