they've already claimed they'll probably switch to LTE. They said it
was just a software change to do that. Of course the standard for
actually placing a phone call on it (LTE) has yet to finalized.
On 6/16/2010 3:40 PM, Gregory Hicks wrote:
Date: Wed, 16 Jun 2010 12:35:16 -0700
From:
On 7/8/2010 9:51 AM, Brandon Ross wrote:
On Wed, 7 Jul 2010, Michael Painter wrote:
Have we all gone mad?
I find it hard to understand that a nuclear power plant, air-traffic
control network, or electrical grid would be 'linked' to the Internet
in the interest of 'efficiency'. Air gap them
On 7/13/2010 2:56 AM, Truman Boyes wrote:
On 13/07/2010, at 4:50 PM, Dobbins, Roland wrote:
On Jul 13, 2010, at 1:34 PM, Sharef Mustafa wrote:
do you recommend it?
My comment would be that a software-based BRAS - 7200, Vyatta, et. al. - is no
longer viable in today's
On 7/13/2010 4:53 AM, Dobbins, Roland wrote:
On Jul 13, 2010, at 3:00 PM,khatfi...@socllc.net wrote:
I agree software-based deployments have their flaws but I do not agree that it
cannot be managed securely with comparable or exceeding uptime -vs- a drop in
appliance. I firmly believe
On 7/13/2010 11:11 AM, Greg Whynott wrote:
They are all software based, no matter who builds them. Cisco IOS,
Juniper JunOS, etc.
controlling hardware asic's and fpga's.
In a PIX, its a Pentium 4. I've also been in other routers that use
PowerPC. It depends on the
On 8/4/2010 9:53 AM, Xavier Beaudouin wrote:
Le 4 août 2010 à 15:14, Mirko Maffioli a écrit :
2010/7/25 Laurens Vetslaur...@daemon.be:
Cisco PIX: no, Cisco ASA: yes. It even runs under VMware... It's however
very hackish... :)
Cisco ASA under VMware?? :|
CiscoASA is
On 8/19/2010 4:23 PM, Phil Regnauld wrote:
hat employer=other
While developing our own monitoring product, we've had to deal with
various constraints from the customer side, for instance pharmaceutical
companies where there was no way installing an agent on PLC
On 8/22/2010 3:57 PM, Mans Nilsson wrote:
a DNSSEC capable stub resolver not in the cards?
The best option today is to run a full-service resolver on the host;
which is a tad heavy for most desktops, not to speak about the cache
misses that would cause root server system load. The latter of
I use SSL only and even then, it requires authentication.
--Curtis
On 9/3/2010 1:00 PM, Owen DeLong wrote:
I have had it happen in some metro areas on sprint. I have experienced it in at
least a dozen hotels over the last 12 months. I have run into it in various
airports with free public
Vyatta has support contracts. If you want hardware, they've got that,
too.
On 9/27/2010 6:48 PM, Heath Jones wrote:
Oh, support contract!!?
Differences:
- Hardware forwarding
- Interface options
- Port density
- Redundancy
- Power consumption
- Service Provider stuff - MPLS TE? VPLS?
? Real hardware forwarding? Where?
Best Regards,
Nathan Eisenberg
-Original Message-
From: Curtis Maurand [mailto:cmaur...@xyonet.com]
Sent: Tuesday, September 28, 2010 5:55 AM
To: Heath Jones
Cc: nanog@nanog.org
Subject: Re: Software-based Border Router
Vyatta has support contracts
On 9/29/2010 8:59 AM, Heath Jones wrote:
What's the real-world power consumption and heat like? 455 days shows
some pretty good reliability!
Cheers for the info Curtis
That's a really good question. This is a small 260 watt supermicro
short depth (14) 1u system I purchased from tigerdirect.
I'd set up something wireless between them. Just my $0.02.
--Curtis
On 9/30/2010 4:52 PM, Brandon Galbraith wrote:
Has anyone had any luck lately getting dry pairs from ATT? I'm in the
Chicago area attempting to get a dry pair between two buildings (100ft
apart) for some equipment, but when
On 10/2/2010 7:23 PM, Franck Martin wrote:
How long do you keep a router in production?
What is your cycle for replacement of equipment?
For a PC, you usually depreciate it over 3 years, and can make it last 5 years,
but then you are stretching the functionality, especially if you upgrade
On 10/18/2010 8:16 AM, ML wrote:
And +1 on the pioneers comment too.
Paul.
IPv6 Hipsters..Doing it before it was cool.
IPV4 -easy();
IPV6-really().Really().Difficult();
I'll note that most of the behavior you describe here is deeply
rooted in the RFC's. The concepts of zone transfers for instance
are not unique to BIND, but rather in the definition of how
interoperable DNS is supposed to work.
That said, there is clearly room for improvement, and in fact
Much of Maine is not covered by broadband and companies are still using
dialup routers. Much of the US (70%) is not covered by broadband and
the only internet connection is dialup.
--Curtis
On 11/3/2010 11:13 AM, Gary Baribault wrote:
And you live in a cabin in the woods, pedal a
On 11/2/2010 3:49 PM, Sven Olaf Kamphuis wrote:
Are there still any commercial X.25 nets in operation? I had some
peripheral involvement with Tymnet in the MCI/Concert conversion, and
hear it shut down sometime in 2003-4.
On 11/22/2010 10:25 AM, Joe Abley wrote:
You don't think
(i) a service provider, as that term is defined in section 512(k)(1) of title 17,
United States Code, or other operator of a domain name system server shall take
reasonable steps that will prevent a domain name from resolving to that
The patriot act did away with due process.
On 12/3/2010 3:10 PM, Randy Fischer wrote:
On Fri, Dec 3, 2010 at 12:38 PM, George Bonsergbon...@seven.com wrote:
As for a member of Congress pressuring Amazon, what else would one expect? If a site has content that the
USG might see as damaging,
On 12/8/2010 3:04 PM, Seth Mattinen wrote:
On 12/8/2010 08:06, Jack Bates wrote:
I call BS. Windows has it's problems, but it is the most common
exploited as it holds the largest market share. Many Windows infections
I've seen occur not due to the OS, but due to lack of patching of
applications
On 12/10/2010 8:21 AM, Florian Weimer wrote:
I believe EFS is available in Windows XP and Windows 2003 Server, too.
Software-based solutions have the advantage that they are somewhat
more testable and reviewable. If it's all in the disk, you can't
really be sure that the data is encrypted with
On 12/10/2010 9:33 AM, Michael Holstein wrote:
After some research, I find that recovery of EFS (available for Win
2000/2003/XP/Vista/7) encrypted files in the case of disaster can be
problematic. It has to do with keys, file ownerships, etc., etc.,
etc. Plan for disaster and know how to
On 12/29/2010 8:19 AM, Robert E. Seastrom wrote:
The third consideration is someone notices and cares.
The Nanostation Loco (again from Ubiquiti) is easily capable of the
distances that you're talking about and is an all-in-out unit (antenna
plus radio, fed with POE) about twice the size of a
On 2/8/2011 3:00 PM, Joshua Klubi wrote:
I want to know what measure i can do on the server to get it protected which
mysql protection
I should implement. since i can see that it might be a php or mysql
injection that is been used.
Currently I run these security measures on it.
Ubuntu UFW
Touché! That could theoretically happen. I think Apple should buy HPQDEC just
so they can announce 16/7 :-)
None of the RIR blocks are going to be routed that way on purpose, though :-)
-Randy
I agree. Many of those corporations would have a hard time justifying
an entire /8, even IBM.
On 2/8/2011 7:58 PM, Owen DeLong wrote:
It doesn't have to be a public network to need globally unique addresses.
There is NO policy requirement to use NAT or RFC-1918 for private networks.
Just a suggestion that folks be considerate of the community where they can.
I'll bet most of them
Try this:
http://www.linuxfoundation.org/en/Net:Bridge
--Curtis
Patrick W. Gilmore wrote:
On May 11, 2009, at 5:40 PM, Ben Scott wrote:
On Mon, May 11, 2009 at 5:28 PM, Hector Herrera
hectorherr...@gmail.com wrote:
On Mon, May 11, 2009 at 2:22 PM, David Devereaux-Weber
Check out www.powerdns.com as an alternative to bind. Its faster, more
secure, does IPV6 and easier to maintain.
Curtis
Philip Lavine wrote:
To all,
I am sure this has been asked 10 to the 1 millionth power times, however may be
the rules have changed. I am looking to set up a really
You're correct on the blanket statement. apologies.
--C
Joe Abley wrote:
On 21-May-2009, at 11:06, Curtis Maurand wrote:
Check out www.powerdns.com as an alternative to bind. Its faster,
more secure, does IPV6 and easier to maintain.
I have heard lots of good things about PowerDNS
Google is your ... well ... anyway.
http://www.zytrax.com/books/dns/ch8/ns.html
Anton Zimm wrote:
On Fri, May 29, 2009 at 2:36 PM, Scott Howard sc...@doc.net.au wrote:
On Fri, May 29, 2009 at 12:09 AM, Anton Zimm anton.z...@gmail.com wrote:
Now, from the 'authority section' dig is
You may have to contact maxmind, the keepers of the geoip database.
correct...@maxmind.com
Curtis
Stefan Molnar wrote:
It took us over 3 months with Google to update. They never once said the info was wrong, and it was not even a new ARIN allocation.
--Original Message--
From:
I've been using powerdns for quite a while and I've found it to be solid
and stable. It'll use quite a few different backends includeing BIND
zone files, but its claim to fame is that it uses mysql.
a list of different backends can be found at:
Cisco Aironet www.cisco.com
Alvarion www.alvarion.com
Aruba www.arubanetworks.com
bluesocket www.bluesocket.com
I've used all but bluesocket and they all worked pretty well.
bluesocket gets good reviews. These are just a few. There are lots of
them. Try to use one as and access point and
andrew.wallace wrote:
On Thu, Jul 30, 2009 at 11:48 PM, Dragos Ruiud...@kyx.net wrote:
at the risk of adding to the metadiscussion. what does any of this have to
do with nanog?
(sorry I'm kinda irritable about character slander being spammed out
unnecessarily to unrelated public lists lately
Sorry to be a curmudgeon and let me play devil's advocate for a minute.
I realize that the address space is enormous; gigantic, even, but if we
treat it as cavalierly as you all are proposing, it will get used up.
If its treated like an infinite resource that will never, ever be used
up
You might look into what's being done in Sweden then, here there are
municipality networks who dig up the streets and does fiber to the
individual house in suburbia (you have to trench your own land though,
4dm deep, 1-2dm wide, they only dig in the street put down the pipe in
your trench).
Mackinnon, Ian wrote:
snip
In the UK more homes have fixed wire telephony than mains sewers or
water.
Not sure what that means to this discussion :-)
In the US as well, but if you're trying to run a new fiber network and
you want it uderground, the sewers in metro areas are a good place to
Eduardo A. Suárez wrote:
Hi,
now Google DNS, anything more?
http://googlecode.blogspot.com/2009/12/introducing-google-public-dns-new-dns.html
Eduardo.-
yawn. So not interested.
On 3/14/2012 9:00 PM, Robert E. Seastrom wrote:
Christopher Morrowmorrowc.li...@gmail.com writes:
On Wed, Mar 14, 2012 at 8:14 PM, Robert E. Seastromr...@seastrom.com wrote:
Faisal Imtiazfai...@snappydsl.net writes:
I am not familiar with VZ's FIOS network...
however I suspect that if
I don't understand why DSL providers don't just administratively down
the port the customer is hooked to rather than using PPPoE which costs
bandwidth and has huge management overhead when you have to disconnect a
customer. I made the same recommendation to the St. Maarten (Dutch)
phone
As opposed to SNMP and a script that would shut the port down via SNMP
when the customer is disabled?
Larry Smith wrote:
On Wed April 22 2009 11:01, Curtis Maurand wrote:
I don't understand why DSL providers don't just administratively down
the port the customer is hooked to rather than
for that if they don't have the
reach themselves.
From: Larry Smith lesm...@ecsis.net
Sent: Thursday, 23 April 2009 2:07:42 AM
To: nanog@nanog.org
CC:
Subject: Re: Broadband Subscriber Management
On Wed April 22 2009 11:01, Curtis Maurand wrote:
I don't understand why DSL providers don't just administratively
I'd rather send him to something more open like kernel.org; anything
but Google's DNS. Google's DNS is a little too nefarious for my taste.
On 2/1/2010 10:31 AM, Dan White wrote:
On 01/02/10 10:13 -0500, Andrey Gordon wrote:
Hi list.
I'd like to setup my default routes to the Interwebz
On 2/11/2010 1:53 PM, James Smallacombe wrote:
I have a customer that is looking at using BGP for their network; one
connection over a few bonded T1s, the other over a Comcast Enterprise
connection (which supposedly will do BGP now).
When I was dual homed a few years ago, a 7204VXR with
I haven't run BIND in a number of years.
--Curtis
On 2/15/2010 2:06 PM, Charles N Wyble wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tony Finch wrote:
On Mon, 15 Feb 2010, Charles N Wyble wrote:
How are folks verifying DNSSEC readiness of their environments? Any
existing
I do hosting rather than network provisioning, but when I was doing
network provisioning we used PowerDNS' resolver. Its small, and its
very, very fast. Its customizable and can be scripted using LUA.
http://www.powerdns.com
On 2/22/2010 9:16 AM, Claudio Lapidus wrote:
Hello all,
We
On 2/22/2010 12:02 PM, Joel Esler wrote:
I have an idea. Everyone just get a gmail (or otherwise neutral account)
like me.com or gmail.com or yahoo.com and be done with it.
J
Sure and give all that information to data mining companies with no
interest in privacy. No thank you. I
DNSSEC with powerdns is under development. Its coming soon to a server
near you.
--C
On 2/22/2010 3:16 PM, Grzegorz Janoszka wrote:
On 22-2-2010 15:39, Phil Regnauld wrote:
PowerDNS also has an open source solution (www.powerdns.com).
PowerDNS
is easily modified with custom
On 2/23/2010 5:38 PM, Nathan Ward wrote:
Using lsof, netstat, ls, ps, looking through proc with ls, cat, etc. is likely
to not work if there's a rootkit on the box. The whole point of a rootkit is to
hide processes and files from these tools.
Get some statically linked versions of these bins
pfsense or Vyatta on Intel dual core hardware with decent network cards
will save you a ton of $$$ and run thousands of tunnels.
On 3/3/2010 7:01 PM, Paul Wall wrote:
On Wed, Mar 3, 2010 at 2:52 PM, Leslieles...@craigslist.org wrote:
We're currently looking for a small lt2p/pptp
On 3/6/2010 7:28 AM, Joel Snyder wrote:
Patrick Giagnocavo patr...@zill.net wrote:
Isn't this really an issue (political) with tariffed T1 prices rather
than a technical problem?
I was told that most T1s are provisioned over a DSLAM these days
anyways, and that the key difference between T1
On 4/9/2010 10:10 AM, John Curran wrote:
A large *end-user* pays maintenance fees of $100/year. ISPs
pay an annual registration services subscription fee each year,
proportional to the size of aggregate address space held.
I stand corrected. I misunderstood the doc. I could never read.
On 4/9/2010 1:43 PM, William Herrin wrote:
No, ARIN is not a regulator. Regulators have guns or access to
people with
guns to enforce the regulations that they enact. ARIN has no such power.
The FCC is a regulator. The California PUC is a regulator. ARIN is not
a regulator.
Last I
On 5/10/2010 6:36 PM, Mark Foster wrote:
Does this not highlight a wider issue?
I realise that dialup is hardly 'cutting edge' but there are providers out
there with a significant number of dialup customers still on the books.
Surely there's still a market for (what should be by now) a
On 5/11/2010 9:36 AM, Andrey Khomyakov wrote:
Hi all,
I need to provide IP connectivity to an outdoor parking lot for security
devices like a camera, and emergency phone and a gate. Does anyone have any
suggestions on a wireless bridge and an outdoor rated switch if such exists?
How do people
30% of all people in the US (110 million) have no access to broadband.
Large areas of my state have no access to broadband because its rural
(Maine).
Aastra CVX (it used to be a Nortel product.)
--Curtis
On 5/11/2010 11:29 AM, Joe Abley wrote:
On 2010-05-11, at 11:08, Leo Bicknell wrote:
A barracuda appliance uses postfix, amavisd-new, spamassassin with
fuzzyOCR and clamav. I've built a couple of these boxes for customers.
I use their dnsbl as well as spamhaus. It works pretty well, not much
gets through.
--Curtis
On 4/10/2011 8:24 PM, William Warren wrote:
On 4/9/2011
On 6/30/2011 12:20 PM, Suresh Rajagopalan wrote:
Linux + iptables + fwbuilder
On Thu, Jun 30, 2011 at 8:50 AM, Blake T. Pfankuchbl...@pfankuch.me wrote:
Howdy,
I am looking for something a little unique in a bit of a tough situation with some
sticky requirements. First
The number of infected hosts out there is just astounding. I have bots
attacking a server from all over the world. Lots of them from a network
known as micfo. I could write abuse complaints from here until doomsday
and I'd never be done.
--Curtis
--
Best Regards
Curtis Maurand
Principal
Microsoft tells me 3.2 GB for win 10 pro 64 bit.
On July 28, 2015 6:04:04 PM EDT, Niels Bakker niels=na...@bakker.net wrote:
* n...@flhsi.com (Nick Olsen) [Tue 28 Jul 2015, 22:46 CEST]:
Being a 3-4GB download. Each device is moving more data than any Apple
update ever did.
I'm not so sure of
is
available new for $4500 online.
For those of you deploying CMTS systems what do you use and recommend?
I am not sure if there is a cable equivalent list to NANOG, but if so
please let me know.
--
Best Regards
Curtis Maurand
Principal
Xyonet Web Hosting
mailto:cmaur...@xyonet.com
http
On 7/21/2015 8:43 AM, Jared Mauch wrote:
On Tue, Jul 21, 2015 at 08:09:56AM -0400, Curtis Maurand wrote:
DNS is still largely UDP.
Water is also still wet :) - but you may not be doing 10% of your
links as UDP/53.
DNS can also use TCP as well, including sending more than one
On 7/21/2015 4:05 PM, Ricky Beam wrote:
On Tue, 21 Jul 2015 08:13:48 -0400, Curtis Maurand
cmaur...@xyonet.com wrote:
At least in Maine where I am, TWC does allow you to bring your own
modem as long as it's DOCSIS 3 compliant and there's lots of those
from motorola, netgear and others
On 7/14/2015 7:57 PM, James Downs wrote:
On Jul 14, 2015, at 16:09, Curtis Maurand cmaur...@xyonet.com wrote:
i think IPV6 adoption is going to be very slow. It's very difficult for the
layman to understand and that contributes to the slow rate of uptake.
Who is the layman in this story
with those still holding out hope.
i think that is unfair to the ipv6 fanboys (and girls). ipv6 use is
increasing slowly. i bet it hits 10% by the time we retire.
randy
--
Best Regards
Curtis Maurand
Principal
Xyonet Web Hosting
mailto:cmaur...@xyonet.com
http://www.xyonet.com
no place in the contiguous US that
isn’t within 100 ms of any other place in the contiguous US these days.
Owen
--
Best Regards
Curtis Maurand
Principal
Xyonet Web Hosting
mailto:cmaur...@xyonet.com
http://www.xyonet.com
incident
was today at 09:00 EST.
I'm assuming this is just another DDoS like all others, but I would be
interested to hear if I am not the only one seeing this.
On list or off-list is fine.
Thanks,
-Drew
--
Best Regards
Curtis Maurand
Principal
Xyonet Web Hosting
mailto:cmaur...@xyonet.com
http
allow you to bring your own modem
as long as it's DOCSIS 3 compliant and there's lots of those from
motorola, netgear and others. You're not stuck with the Ubee.
--
Best Regards
Curtis Maurand
Principal Xyonet Web Hosting
mailto:cmaur...@xyonet.com
http://www.xyonet.com
On 10/1/2015 2:29 PM, Owen DeLong wrote:
On Oct 1, 2015, at 00:39 , Baldur Norddahl wrote:
On 1 October 2015 at 03:26, Mark Andrews wrote:
Windows XP does IPv6 fine so long as there is a IPv4 recursive
server available. It's just a simple command
either. There
would be millions of people in the same boat.
Cheers,
Curtis
On October 1, 2015 5:44:46 PM ADT, Owen DeLong <o...@delong.com> wrote:
>
>> On Oct 1, 2015, at 12:06 , Curtis Maurand <cmaur...@xyonet.com>
>wrote:
>>
>>
>>
>> On 10/
-95dd-3f89919a8...@xyonet.com>, Curtis
>Maurand wr
>ites:
>> If Time Warner (my ISP) put up IPv6 tomorrow, my firewall would no
>longer wo
>> rk. I could put up a pfsnse or vyatta box pretty quickly, but my
>off the sh
>> elf Cisco/Linksys home router has no ipv6 sup
s, why not 53 as well?
This is a slippery slope of course, and judgement calls are not easy to make.
--
Mikael Abrahamssonemail: swm...@swm.pp.se
--
Best Regards
Curtis Maurand
Principal
Xyonet Web Hosting
mailto:cmaur...@xyonet.com
http://www.xyonet.com
The higher the frequency, the more it acts like light. at that frequency,
it wouldn't take much to block it. even 2.4GHz is stopped by a tree.
On Mon, Aug 14, 2017 at 12:54 PM, Dan Hollis
wrote:
> Good for a few meters at best? Terahertz is blocked by air.
>
> -Dan
>
powerdns dnsdist supports dns over https so you don't have to be held
hostage by cloudflare or google.
On 9/18/19 10:19 AM, Mike Hammett wrote:
Why on Earth would anyone want that (Firefox deciding to do it's own
DNS) as default behavior?
-
Mike Hammett
Intelligent Computing
Power DNS has a ha proxy/load balancer that does dns over https. That way
you're not limited to google's and cloudflare's dns servers which exist to
drive advertising to you and give a single shource for tracking.
dns over https: feh
On Wed, Oct 2, 2019 at 5:28 PM Jay R. Ashworth wrote:
>
Might I suggest using PowerDNS's dinsdist. it's an ha proxy that you can
put in front of your recursors and It implements dns over https if you want
it to. It's open sources and ensures that you're not limited to Google's
or Cloudflare's servers which exist to drive advertising at you (I've seen
pointing to 8.8.8.8. Google's DNS servers are slow and extra
latency makes it worse.
--
Best Regards
Curtis Maurand
mailto:cmaur...@xyonet.com
don't forget to disable SIP-ALG on the units. That will be a huge
improvement.
On 5/18/20 12:34 PM, Mark Tinka wrote:
On 18/May/20 16:45, Kevin Burke wrote:
They have an Ethernet version and GPON version.
The GPON version is the same price their Ethernet version + low end GPON ONT.
We
On 10/5/21 5:51 AM, scott wrote:
On 10/5/21 8:39 PM, Michael Thomas wrote:
This bit posted by Randy might get lost in the other thread, but it
appears that their DNS withdraws BGP routes for prefixes that they
can't reach or are flaky it seems. Apparently that goes for the
prefixes that
80 matches
Mail list logo