Re: Thinking Methodically about building a PoC

2016-06-12 Thread Matthew Petach
On Sun, Jun 12, 2016 at 9:49 PM, Roland Dobbins wrote: > > On 13 Jun 2016, at 8:52, Kasper Adel wrote: > >> 2) Do some planning and research first. > > This. > > --- > Roland Dobbins > We never design in a vacuum. There's always some target we're designing towa

Re: Netflix banning HE tunnels

2016-06-12 Thread Seth Mattinen
On 6/12/16 10:34 PM, chris wrote: So rather than just blocking these people why not just offer them another price tier with zero or lesser geo restrictions which gives them what they want? That's not up to Netflix. ~Seth

Re: Netflix banning HE tunnels

2016-06-12 Thread chris
Sure they are free to do this but it doesn't mean people can't voice their opinions. This is almost identical logic that was used in the days of DVD. Users wanted their content in a different medium, companies failed to invest in developing a way the new method could be profitable and chose to inv

Re: Thinking Methodically about building a PoC

2016-06-12 Thread Roland Dobbins
On 13 Jun 2016, at 8:52, Kasper Adel wrote: > 2) Do some planning and research first. This. --- Roland Dobbins

Thinking Methodically about building a PoC

2016-06-12 Thread Kasper Adel
hi, I am asked to build a large lab/test it. I'm provided crazy scale numbers for lots of technologies (L*VPN, IPv*, IGP*, All Tunnels flavors...etc). It took me a lot of time to build this lab, because when I got the request/test plan handed over to me, I did not verify that these scaled numbers

Re: Netflix banning HE tunnels

2016-06-12 Thread Valdis . Kletnieks
On Mon, 13 Jun 2016 03:27:41 +0200, Baldur Norddahl said: > On 13 June 2016 at 02:05, Owen DeLong wrote: > > 1) lower case > 2) as short as possible, except do not shorten just one :0: into ::. > 3) if there is more than one possible :: block that results in the same > shortest length, choose the

Re: Netflix banning HE tunnels

2016-06-12 Thread Seth Mattinen
On 6/7/16 4:23 AM, Davide Davini wrote: Today I discovered Netflix flagged my IPv6 IP block as "proxy/VPN" and I can't use it if I don't disable the HE tunnel, which is the only way for me to have IPv6 at the moment. This is a rights management issue not a technical one. Netflix is not to bla

Re: Netflix banning HE tunnels

2016-06-12 Thread Mark Andrews
In message , Baldur Norddahl writes: > On 13 June 2016 at 02:05, Owen DeLong wrote: > > > 2. Consistent and easier comparisons for equality or ranges > > In iPv4, this was useful. In IPv6, it=E2=80=99s essential= > . > > > > > You could also normalize your IPv6 text repr

Re: Netflix banning HE tunnels

2016-06-12 Thread Baldur Norddahl
On 13 June 2016 at 02:05, Owen DeLong wrote: > 2. Consistent and easier comparisons for equality or ranges > In iPv4, this was useful. In IPv6, it’s essential. > You could also normalize your IPv6 text representation. There is even RFC 5952 for that. Abbreviated the rule is

Re: Netflix banning HE tunnels

2016-06-12 Thread Owen DeLong
> On Jun 10, 2016, at 11:58 , Cryptographrix wrote: > > Just to clarify - there's no transition involved - IPv4 to IPv6 is like > going from the VINES protocol to IPv6: IPv6 may as well have been called > "PROTOCOL 493" - it bares very little relation to the original protocol > that brought us t

Re: Netflix banning HE tunnels

2016-06-12 Thread Owen DeLong
> On Jun 10, 2016, at 01:32 , valdis.kletni...@vt.edu wrote: > > On Fri, 10 Jun 2016 07:19:22 +0100, "t...@pelican.org" said: > >> All the business systems that sit around it? Not so much. $DAYJOB has >> plenty of code, database structures etc that are built around "an IP address >> is >> no

Re: Netflix banning HE tunnels

2016-06-12 Thread Owen DeLong
> On Jun 9, 2016, at 19:57 , Ricky Beam wrote: > > On Thu, 09 Jun 2016 21:41:05 -0400, Baldur Norddahl > wrote: > >> Then he reads on NANOG that since he has IPv6 >> he can just connect to the camera with that. > ... > > Only to find the built-in stateful firewall blocks unsolicited inbound

Re: Sunday night social?

2016-06-12 Thread Todd Underwood
huh. today we learn that social is subject to particular people's view of social. please author an RFC to explain the scope that counts as social. thanks! t On Sun, Jun 12, 2016 at 6:18 PM, Randy Bush wrote: > This may surprise some, but social != frat boys. > > randy, on a phone > >> On Jun

Re: Sunday night social?

2016-06-12 Thread Randy Bush
This may surprise some, but social != frat boys. randy, on a phone > On Jun 12, 2016, at 15:08, Todd Underwood wrote: > > surely this is not the same randy bush that loves to point out that > humans are social animals! > > t > > On Sun, Jun 12, 2016 at 2:31 PM, Randy Bush wrote: Is Wed

Re: Sunday night social?

2016-06-12 Thread Todd Underwood
surely this is not the same randy bush that loves to point out that humans are social animals! t On Sun, Jun 12, 2016 at 2:31 PM, Randy Bush wrote: >>> Is Wednesday night the only social? >> Yes. > > damn! if i had known there was a chance of folk acting more like sober > adults than the usual

phish platform ?

2016-06-12 Thread Julien T
Hello, I'm reviewing the process how to manage phish report at a customer and am looking for tools ideally opensource. Recently, OVH released https://github.com/ovh/cerberus-ux and maybe AbuseHelper can do http://abusehelper.be/ I also checked APWG but didn't find reference to such a tool. Quick

Re: Webmail / IMAPS software for end-user clients in 2016

2016-06-12 Thread Jim Lucas
June 8 2016 6:08 PM, "Eric Kuhnke" wrote: > If you had to put up a public facing webmail interface for people to use, > and maintain it for the foreseeable future (5-6 years), what would you use? > > Roundcube? > https://roundcube.net > > Rainloop? > http://www.rainloop.net > > Something else?

Re: Turning Off IPv6 for Good (was Re: Netflix VPN detection - actual engineer needed)

2016-06-12 Thread Jay Hennigan
On 6/1/16 9:23 PM, Roland Dobbins wrote: On 2 Jun 2016, at 10:47, Paul Ferguson wrote: There is an epic lesson here. I'm just not sure what it is. :-) That Netflix offering free streaming to everyone over IPv6 (after fixing their VPN detection) would be the most effective way to convince end-

Re: Sunday night social?

2016-06-12 Thread Dave Temkin
Just to clarify based on offline messages: There are still the usual after-Plenary programs such as Peering Personals, Beer & Gear, etc.. There are just no off-site socials aside from Wednesday evening. The agenda is up to date. -Dave On Sun, Jun 12, 2016 at 1:47 PM -0400, "Dave Temkin" wr

Re: Detecting Attacks

2016-06-12 Thread Pavel Odintsov
Hello! You could try my open source project: https://github.com/pavel-odintsov/fastnetmon It's pretty popular and used by a very big number of really big networks. We have option for capturing "pcap" dump for each attack for detailed investigation. On Sat, Jun 11, 2016 at 8:22 AM, subashini ha

Re: Sunday night social?

2016-06-12 Thread Randy Bush
>> Is Wednesday night the only social? > Yes. damn! if i had known there was a chance of folk acting more like sober adults than the usual frat boys i might have scheduled chicago. randy

Re: Detecting Attacks

2016-06-12 Thread joel jaeggli
On 6/10/16 10:39 PM, subashini hariharan wrote: > Hello, > > I am Subashini, a graduate student. I am interested in doing my project in > Network Security. I have a doubt related to it. > > The aim is to detect DoS/DDoS attacks using the application. I am going to > use ELK (ElasticSearch, Logsta

Re: Sunday night social?

2016-06-12 Thread Dave Temkin
Yes. Best Regards, -Dave On Sun, Jun 12, 2016 at 1:24 PM -0400, "Weir, Colin" wrote: Is Wednesday night the only social? -- Colin Weir Engineer, Quality of Experience, Comcast Cable Desk: 215-286-5406 Cell: 215-279-1733 From: NANOG on be

Re: Sunday night social?

2016-06-12 Thread Weir, Colin
Is Wednesday night the only social? -- Colin Weir Engineer, Quality of Experience, Comcast Cable Desk: 215-286-5406 Cell: 215-279-1733 From: NANOG on behalf of Valerie Wittkop Sent: Friday, June 10, 2016 6:14:16 PM To: Matthew Petach Cc: nanog@nanog.org

Re: Detecting Attacks

2016-06-12 Thread Valdis . Kletnieks
On Fri, 10 Jun 2016 22:22:31 -0700, subashini hariharan said: > The aim is to detect DoS/DDoS attacks using the application. I am going to > use ELK (ElasticSearch, Logstash, Kibanna) for processing the logs (Log > Analytics). Bad approach. At that point, not only is the application being DDoS'e