Re: Checkpoint IPS

2015-02-08 Thread Roland Dobbins
On 8 Feb 2015, at 23:00, BPNoC Group wrote: Mr Dobbins' slides/presentation gives an idea that a proxy (waf, whatever) fits sitting unprotected among routers and application servers, while its also stateful and fragile enough to deserve previous protection. from p.16 of the presentation in

Re: Checkpoint IPS

2015-02-08 Thread BPNoC Group
On Sun, Feb 8, 2015 at 2:05 AM, Ca By cb.li...@gmail.com wrote: On Friday, February 6, 2015, Roland Dobbins rdobb...@arbor.net wrote: On 6 Feb 2015, at 23:23, Darden, Patrick wrote: And when your opinion is an acknowledged universal constant, I will tip my hat to you. It's

Re: Dynamic routing on firewalls.

2015-02-08 Thread BPNoC Group
Of course you can find firewalls that are crappy routers and you can find routers that are crappy firewalls, but generally, the two are not mutually exclusive. I completely disagree w/ such or similar statements. On the vendor datasheet it says different. On books it says different. And on

Re: Dynamic routing on firewalls.

2015-02-08 Thread Jeff McAdams
You're missing the point. I would never advocate for trying to deploy a Juniper MX in the role of a firewall to provide a security boundary. I would never try to deploy a Juniper SRX to provide a huge number of GRE tunnel terminations or other sorts of aggregations of large numbers of

suny.edu / ASN54226 anyone? please contact me off-list

2015-02-08 Thread BPNoC Group
Someone from Sunynet? Please contact-me off list to clarify if you are BGP transit to to a certain ASN spoofing my CIDR or if bgp as-path is artificially messed. Tried contact on su...@suny.edu w/o success.

Re: Dynamic routing on firewalls.

2015-02-08 Thread Patrick Tracanelli
Hello, Some Juniper models actually do a very good job of being both. In reality, a Firewall _IS_ a router, even if it's a bad one. Anything that moves packets from one interface to another is a router. Technically it’s quite not a precise assumption. While routing is much likely an IP

Re: Dynamic routing on firewalls.

2015-02-08 Thread BPNoC Group
On Sun, Feb 8, 2015 at 12:48 PM, Jeff McAdams je...@iglou.com wrote: You're missing the point. I'm not missing, I'm just diverting the point. As I mentioned from a Linux box example, the fact that it can both act as a router and a firewall does not mean it should. I disagree with the

Re: IPv6 allocation plan, security, and 6-to-4 conversion

2015-02-08 Thread David Barak
On Jan 30, 2015, at 9:49 PM, Owen DeLong o...@delong.com wrote: On Jan 30, 2015, at 18:07 , William Herrin b...@herrin.us wrote: How about this: when Verizon starts decommissioning its IPv4 infrastructure on the basis that IPv6 is widespread enough to no longer require the expense of

UVerse question

2015-02-08 Thread TR Shaw
Any suggestions on what to tell ATT to get IPv6 added to a current account and upgrade a 2wire router to 4wire with halfway decent performance and capability? Any and all help would be appreciated. Tom

Re: Provider to Blend with Level3

2015-02-08 Thread Max Tulyev
Hi! If you have he.net there - it will be the best choise. On 06.02.15 19:26, Colton Conor wrote: We have a network that is single homed with Level3 at this time in Dallas. They already have BGP and their own ASN and IP setup. Who would you recommend for a second provider in Dallas to blend

Re: Dynamic routing on firewalls.

2015-02-08 Thread Owen DeLong
On Feb 8, 2015, at 05:40 , BPNoC Group bpnoc.li...@gmail.com wrote: Of course you can find firewalls that are crappy routers and you can find routers that are crappy firewalls, but generally, the two are not mutually exclusive. I completely disagree w/ such or similar statements.

RE: Dynamic routing on firewalls.

2015-02-08 Thread Tony Wicks
I have some use cases where I have Fortinet firewalls running full ospf/ospfv3/bgp and it all pretty much just works without any issues. The CLI is a bit cumbersome, but apart from that its fine. -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Craig Sent:

Re: UVerse question

2015-02-08 Thread Dan Lowe
On Sun, Feb 8, 2015, at 05:48 PM, TR Shaw wrote: Any suggestions on what to tell ATT to get IPv6 added to a current account and upgrade a 2wire router to 4wire with halfway decent performance and capability? I have no advice on the equipment upgrade, but I was able to add IPv6 to my account by

Re: UVerse question

2015-02-08 Thread Lyle Giese
The second half is easy. Do it your self. Turn the 2wire router into a transparent device and put your own router in doing the PPPoE for you. pfSense and M0n0wall support IPv6. I am in ATT territory, but don't use them for Internet.(I use the local cable company). But I know that several

Re: Dynamic routing on firewalls.

2015-02-08 Thread Owen DeLong
On Feb 8, 2015, at 06:02 , Patrick Tracanelli eks...@freebsdbrasil.com.br wrote: Hello, Some Juniper models actually do a very good job of being both. In reality, a Firewall _IS_ a router, even if it's a bad one. Anything that moves packets from one interface to another is a

Has anyone imagined what could be the future HCI

2015-02-08 Thread lobna gouda
Has anyone imagined this? away on increasing processing power or visual clearance of what we already have, what could be the next HCI?

Re: Dynamic routing on firewalls.

2015-02-08 Thread Craig
Setup a multi tenant setup between Nexus 7K and Juniper Net screen 5400 FW using OSPF. It went OK and worked. However when under traffic load/ less than. Desirable results... OSPF peer failure / bounces etc. However using BGP with Juniper SRX FW has been working great. No issues thus far. On Feb