Re: Verizon FiOS IPv6
I already have IPv6 on my router at home. They rolled out an update a few months back that added the capability for the latest 802.1N model. I'm not at home to look at it but I'll update with the model this evening. Sincerely, Anthony R Junk Network and Security Engineer (410) 929-1838 anthonyrj...@gmail.com On Wed, Oct 1, 2014 at 1:44 AM, Bryan Seitz se...@bsd-unix.net wrote: On Wed, Oct 01, 2014 at 01:35:15AM -0400, Christopher Morrow wrote: On Wed, Oct 1, 2014 at 1:28 AM, Romeo Czumbil rczum...@xand.com wrote: Does anybody have any idea on when Verizon FiOS is turning up IPv6? (dual-stack) looking at the archives is helpful in this question/answer process.. but to save you the digging: When there's ice in the devil's house (essentially) Yeah... although they seem to be releasing a new residential gateway that does IPV6 as well as 802.11AC. Maybe this is a good sign ? :) http://www.dslreports.com/shownews/Verizon-Preps-Launch-of-New-FiOS-Gateway-130273 -- Bryan G. Seitz
.sj/.bv == privacy?
Here's an interesting, and fairly thoughtful and well written, piece about talks going on in Norway to utilize two ccTLDs which are assigned to the country for outlying territories for the purpose of a specialty domain registry where registrants (such as hosting companies) would be contractually required to guarantee privacy to their end customers. I think the idea has some merit, myself; I have always preferred to see municipalities, frex, registered in domains where it's clear they had to /be the municipality/ to get the registration... to avoid things like the Largo.com Joe job of earlier years. (Yay, RFC1480!) But I'm not sure if a ccTLD is the place to put that. I'm sure the argument is well this puts the weight of the country of Norway behind it. But that's a sword that cuts both ways. http://www.zdnet.com/how-two-remote-arctic-territories-became-the-front-line-in-the-battle-for-internet-privacy-734245/ -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.
Re: Verizon FiOS IPv6
On Wed, 1 Oct 2014, Anthony Junk wrote: I already have IPv6 on my router at home. They rolled out an update a few months back that added the capability for the latest 802.1N model. I'm not at home to look at it but I'll update with the model this evening. Like many others, I would be interested to hear more about this. Verizon pushed a firmware update to my Fios router some time ago that supports IPv6, but I was not receiving native v6 connectivity from Verizon at home. I think they did some small-scale deployments as a test, and maybe you're in one of the areas they rolled out, but I don't think there are any larger deployments on the immediate radar. My calls to the front-line call center (I make a point of doing this every few months) generally get no information. Offering to put a note in my account stating that I asked about IPv6 is only useful if someone from Verizon actually goes back and reads those notes. Shaking other trees at Verizon through $dayjob has not produced any better results so far. Until Verizon offers native IPv6, I will continue using my tunnel through HE, which has been rock-solid. jms On Wed, Oct 1, 2014 at 1:44 AM, Bryan Seitz se...@bsd-unix.net wrote: On Wed, Oct 01, 2014 at 01:35:15AM -0400, Christopher Morrow wrote: On Wed, Oct 1, 2014 at 1:28 AM, Romeo Czumbil rczum...@xand.com wrote: Does anybody have any idea on when Verizon FiOS is turning up IPv6? (dual-stack) looking at the archives is helpful in this question/answer process.. but to save you the digging: When there's ice in the devil's house (essentially) Yeah... although they seem to be releasing a new residential gateway that does IPV6 as well as 802.11AC. Maybe this is a good sign ? :) http://www.dslreports.com/shownews/Verizon-Preps-Launch-of-New-FiOS-Gateway-130273 -- Bryan G. Seitz
RE: Verizon FiOS IPv6
The actiontec I have from them, for years now, supports IPv6, they just don't support it at the ONT or further upstream; no idea where the limitation is. I don't use their router though, just get ethernet from the ONT. We have Fios in a few remote offices; hitting them up from the business side didn't make a difference either. They just suck and I don't anticipate that changing. You'd think they could hire some of the folks from the cellular side to come fix the Fios network. IPv6 works great on the LTE net. David -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Justin M. Streiner Sent: Wednesday, October 01, 2014 10:58 AM To: NANOG Subject: Re: Verizon FiOS IPv6 On Wed, 1 Oct 2014, Anthony Junk wrote: I already have IPv6 on my router at home. They rolled out an update a few months back that added the capability for the latest 802.1N model. I'm not at home to look at it but I'll update with the model this evening. Like many others, I would be interested to hear more about this. Verizon pushed a firmware update to my Fios router some time ago that supports IPv6, but I was not receiving native v6 connectivity from Verizon at home. I think they did some small-scale deployments as a test, and maybe you're in one of the areas they rolled out, but I don't think there are any larger deployments on the immediate radar. My calls to the front-line call center (I make a point of doing this every few months) generally get no information. Offering to put a note in my account stating that I asked about IPv6 is only useful if someone from Verizon actually goes back and reads those notes. Shaking other trees at Verizon through $dayjob has not produced any better results so far. Until Verizon offers native IPv6, I will continue using my tunnel through HE, which has been rock-solid. jms On Wed, Oct 1, 2014 at 1:44 AM, Bryan Seitz se...@bsd-unix.net wrote: On Wed, Oct 01, 2014 at 01:35:15AM -0400, Christopher Morrow wrote: On Wed, Oct 1, 2014 at 1:28 AM, Romeo Czumbil rczum...@xand.com wrote: Does anybody have any idea on when Verizon FiOS is turning up IPv6? (dual-stack) looking at the archives is helpful in this question/answer process.. but to save you the digging: When there's ice in the devil's house (essentially) Yeah... although they seem to be releasing a new residential gateway that does IPV6 as well as 802.11AC. Maybe this is a good sign ? :) http://www.dslreports.com/shownews/Verizon-Preps-Launch-of-New-FiOS-G ateway-130273 -- Bryan G. Seitz
Re: .sj/.bv == privacy?
I am not opposed to the proposed use but that doesn't seem to be a great fit for what I believe a practice for a ccTLD should be. mehmet On Wed, Oct 1, 2014 at 7:39 AM, Jay Ashworth j...@baylink.com wrote: Here's an interesting, and fairly thoughtful and well written, piece about talks going on in Norway to utilize two ccTLDs which are assigned to the country for outlying territories for the purpose of a specialty domain registry where registrants (such as hosting companies) would be contractually required to guarantee privacy to their end customers. I think the idea has some merit, myself; I have always preferred to see municipalities, frex, registered in domains where it's clear they had to /be the municipality/ to get the registration... to avoid things like the Largo.com Joe job of earlier years. (Yay, RFC1480!) But I'm not sure if a ccTLD is the place to put that. I'm sure the argument is well this puts the weight of the country of Norway behind it. But that's a sword that cuts both ways. http://www.zdnet.com/how-two-remote-arctic-territories-became-the-front-line-in-the-battle-for-internet-privacy-734245/ -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.
RE: MetroE Providers
Brent, It's been awhile since I used it seriously, but dslreports.com comes to mind. Cheers, Brian -Original Message- Date: Tue, 30 Sep 2014 21:42:53 + From: Meshier, Brent bmesh...@amherst.com To: nanog@nanog.org nanog@nanog.org Subject: MetroE Providers Message-ID: 68c2cbc977f3e04799df9c76e938e7090859f...@dfexch1.asglp.com Content-Type: text/plain; charset=us-ascii Are there any sites or services that can list local network providers by zip code or address? We're constantly opening up regional offices across the US and need to streamline the process of obtaining connectivity. --Brent --- Please refer to http://www.amherst.com/amherst-email-disclaimer/ for important disclosures regarding this electronic communication.
Re: .sj/.bv == privacy?
for the purpose of a specialty domain registry where registrants (such as hosting companies) would be contractually required to guarantee privacy to their end customers. Hmmm... Until privacy is a feature across many/most hosting services, anyone specializing it is, in effect, identifying traffic that is likely to be /more/ interesting for those wishing to inspect the data. In other words, anything that explicitly identifies traffic as attempting greater privacy is likely to be a greater target for attack. d/ -- Dave Crocker Brandenburg InternetWorking bbiw.net
Re: MetroE Providers
I am on DSLreports quite often and do not believe their database is updated much anymore. Was great back in the DSL days though. Although this one forum might be ok for asking: http://www.dslreports.com/forum/isp2isp On Wed, 1 Oct 2014 16:07:12 + Brian Free brf...@adobe.com wrote: Brent, It's been awhile since I used it seriously, but dslreports.com comes to mind. Cheers, Brian -Original Message- Date: Tue, 30 Sep 2014 21:42:53 + From: Meshier, Brent bmesh...@amherst.com To: nanog@nanog.org nanog@nanog.org Subject: MetroE Providers Message-ID: 68c2cbc977f3e04799df9c76e938e7090859f...@dfexch1.asglp.com Content-Type: text/plain; charset=us-ascii Are there any sites or services that can list local network providers by zip code or address? We're constantly opening up regional offices across the US and need to streamline the process of obtaining connectivity. --Brent --- Please refer to http://www.amherst.com/amherst-email-disclaimer/ for important disclosures regarding this electronic communication.
Re: .sj/.bv == privacy?
On Wed, 01 Oct 2014 09:08:19 -0700, Dave Crocker said: In other words, anything that explicitly identifies traffic as attempting greater privacy is likely to be a greater target for attack. Which is a good reason to encrypt all network traffic by default, even if it's just videos of kittens. You can still figure out a lot by doing endpoint analysis, but it's a start (especially if one endpoint is an 800 pound gorilla that can serve up almost anything). pgpi3RXmxzSip.pgp Description: PGP signature
Re: AWS EC2 us-west-2 reboot
For those interested, this is the Xen bug they were fixing with the reboots http://xenbits.xen.org/xsa/advisory-108.html -Grant On Wed, Sep 24, 2014 at 8:41 PM, Reed Loden r...@reedloden.com wrote: On Wed, 24 Sep 2014 21:39:39 -0400 Peter Beckman beck...@angryox.com wrote: Likely some sort of potentially serious bug or flaw in EC2 or Xen. AWS Security is really on the ball on such things and do everything they can to make invisible fixes with no customer impact, but sometimes a reboot is required in order to apply the changes necessary to keep customer instances safe from attacks and vulnerabilities. Rumor mill is that it's XSA-108, embargoed until 2014-10-01 12:00 (http://xenbits.xen.org/xsa/). Just somebody's guess, though, afaik. ~reed
Re: AWS EC2 us-west-2 reboot
On Wed, Oct 01, 2014 at 11:01:37AM -0700, Grant Ridder wrote: For those interested, this is the Xen bug they were fixing with the reboots http://xenbits.xen.org/xsa/advisory-108.html Ouch. Good thing Bashpocalypse is still capturing everyone's attention... Interestingly, Amazon *didn't* discover this bug, which makes one wonder why they, out of all the big Xen-based providers out there, got a heads-up in advance of the embargo end. If I was a big provider who didn't get advance notice, I'd be somewhat miffed. - Matt -- If you are a trauma surgeon and someone dies on your table, [...] everyone would know you did your best. When someone does something truly stupid with their system and it dies and you can't resuscitate it, you must be incompetent or an idiot. -- Julian Macassey, in the Monastery
Re: AWS EC2 us-west-2 reboot
On 01/10/2014 4:29 PM, Matt Palmer wrote: On Wed, Oct 01, 2014 at 11:01:37AM -0700, Grant Ridder wrote: For those interested, this is the Xen bug they were fixing with the reboots http://xenbits.xen.org/xsa/advisory-108.html Ouch. Good thing Bashpocalypse is still capturing everyone's attention... Interestingly, Amazon *didn't* discover this bug, which makes one wonder why they, out of all the big Xen-based providers out there, got a heads-up in advance of the embargo end. If I was a big provider who didn't get advance notice, I'd be somewhat miffed. Rackspace did reboots over the weekend for this as well - http://www.rackspace.com/blog/an-apology/ Bryan --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
Re: AWS EC2 us-west-2 reboot
read: http://www.xenproject.org/security-policy.html they have a sensible, commonly used security policy that involves private notification to large customers in advance where it is practical and there is not evidence of ongoing exploits in the wild. this is kind of incident handling 101 and shouldn't be surprising to anyone. t On Wed, Oct 1, 2014 at 4:38 PM, Bryan Fullerton fehwal...@gmail.com wrote: On 01/10/2014 4:29 PM, Matt Palmer wrote: On Wed, Oct 01, 2014 at 11:01:37AM -0700, Grant Ridder wrote: For those interested, this is the Xen bug they were fixing with the reboots http://xenbits.xen.org/xsa/advisory-108.html Ouch. Good thing Bashpocalypse is still capturing everyone's attention... Interestingly, Amazon *didn't* discover this bug, which makes one wonder why they, out of all the big Xen-based providers out there, got a heads-up in advance of the embargo end. If I was a big provider who didn't get advance notice, I'd be somewhat miffed. Rackspace did reboots over the weekend for this as well - http://www.rackspace.com/blog/an-apology/ Bryan --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
Re: AWS EC2 us-west-2 reboot
On 10/01/2014 02:59 PM, Todd Underwood wrote: read: http://www.xenproject.org/security-policy.html they have a sensible, commonly used security policy that involves private notification to large customers in advance where it is practical and there is not evidence of ongoing exploits in the wild. this is kind of incident handling 101 and shouldn't be surprising to anyone. You don't have to be that large to get on the list.
Re: AWS EC2 us-west-2 reboot
On Oct 1, 2014, at 4:59 PM, Todd Underwood toddun...@gmail.com wrote: this is kind of incident handling 101 and shouldn't be surprising to anyone. There’s always people who feel “left out of the loop” when these things occur. I’ve found there’s no one location for centralized data after many years of doing this from the ASN.1/ILMI days to present. It requires being professional and engaging when most people just want to consume the derived data. Having found a few of these issues myself over the years, the best bugs are the ones where the advisory comes out after the fixed software is broadly available and deployed. Nothing will be perfect as people always like their legacy system that requires no work, but in reality, there is no such thing. - Jared
mediastream/vyve noc information/number?
Anyone have contact information for Mediastream/Vyve Broadband NOC? Luke Parrish | Network Operations Engineer I | Suddenlink Communications | 866.232.5455 The information transmitted is intended only for the person or entity to which it is addressed and may contain proprietary, confidential and/or legally privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from all computers.
