Re: IP-Echelon Compliance

2015-10-10 Thread Eric Kuhnke
Nothing could possibly go wrong with turning loose a poorly coded software tool to make automated legal threats in the most litigious nation on earth. On Fri, Oct 9, 2015 at 2:40 PM, Rich Kulawiec wrote: > On Fri, Oct 09, 2015 at 10:00:19PM +0200, Baldur Norddahl wrote: > > Do I

Re: /27 the new /24

2015-10-10 Thread Eric Kuhnke
As Jeremy has described in detail, the problem is at OSI layer 1. Not a lack of peering exchanges such as the VANIX. There is no dark fiber route from Alaska via the Yukon to Vancouver. I know where most of the Telus (ILEC) and Northwestel (Bell) fiber is in northern BC and none of interconnects

Re: IP-Echelon Compliance

2015-10-13 Thread Eric Kuhnke
While you are at it you might want to stop sending DMCA notices to Canadian ISPs. The DMCA does not apply in Canada. If your clients wish to litigate against individual residential customers in Canada, you will first need to obtain a court order requiring handover of data, on a case-by-case basis.

Re: Netflix banning HE tunnels

2016-06-08 Thread Eric Kuhnke
There is a website where people attempt visiting the precision intersection of latitude and longitude lines and post photos. Why, I'm not quite sure, but there's all sorts of hobbies. I would like to see the clueless federal law enforcement referenced in that article attempt to visit the default

Re: Netflix VPN detection - actual engineer needed

2016-06-06 Thread Eric Kuhnke
None of this is a problem with actual network engineering, HE's tunnels work fine. It goes in the category of political/economic/contractual , not "this is a technical problem we need to solve". The problem exists with business/contractual relationship Netflix has with its content providers,

Re: Netflix VPN detection - actual engineer needed

2016-06-06 Thread Eric Kuhnke
Geolocation by IP is even funnier as an idea for those who have worked in network engineering for commercial, geostationary two-way satellite services... Some examples: 1. C-band teleport in Singapore with SingTel IPs, remote terminals in Afghanistan. 2. Ku-band teleport in Germany with IP

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Eric Kuhnke
>From a network operational perspective we are only seeing the tip of the iceberg. There are vast hordes of lawyers and MBA types employed by the largest content creators (TV channels, movie studios) which negotiate agreements with Netflix and similar services. Unless you happen to be a sysadmin

Re: NANOG67 - Tipping point of community and sponsor bashing?

2016-06-14 Thread Eric Kuhnke
Re: Item #3 there, the Google Docs spreadsheet with the IX costs... Scroll all the way down to the bottom in $/Mbps and you will find the SIX. Everyone in the Pacific NW should appreciate the excellent work that the SIX does. It's a nonprofit with transparency in its finances, a health cash

Webmail / IMAPS software for end-user clients in 2016

2016-06-08 Thread Eric Kuhnke
If you had to put up a public facing webmail interface for people to use, and maintain it for the foreseeable future (5-6 years), what would you use? Roundcube? https://roundcube.net/ Rainloop? http://www.rainloop.net/ Something else? Requirements: Needs to be open souce and GPL, BSD or

Re: Webmail / IMAPS software for end-user clients in 2016

2016-06-08 Thread Eric Kuhnke
processed. Antivirus/antispam handled similarly on other servers for outgoing SMTP traffic. On Wed, Jun 8, 2016 at 6:37 PM, alvin nanog <nano...@mail.ddos-mitigator.net > wrote: > > hi ya > > On 06/08/16 at 06:06pm, Eric Kuhnke wrote: > > If you had to put up a public

Re: Webmail / IMAPS software for end-user clients in 2016

2016-06-08 Thread Eric Kuhnke
Yes... The mail storage running behind the https based webmail server would be IMAPS to dovecot, which has more than ample functionality for many different ways of storing mail and authenticating users. On Wed, Jun 8, 2016 at 8:55 PM, William Herrin wrote: > On Wed, Jun 8, 2016

Re: NANOG67 - Tipping point of community and sponsor bashing?

2016-06-16 Thread Eric Kuhnke
On the point raised by this index of IXP costs - has anyone put together a table of information on the opposite side of the question: What is the cost of establishing a PNI direct crossconnect in a major IX point? This varies widely by particular

Re: NANOG67 - Tipping point of community and sponsor bashing?

2016-06-16 Thread Eric Kuhnke
> However: exchange port fees are not my biggest enemy today. My cross connect fees have not gone down *at all*. On a proportion basis, cross connect fees have gone from "not mattering" to being an important part of any deployment cost calculation. Why aren't we raising hell about cross connect

Re: NANOG67 - Tipping point of community and sponsor bashing?

2016-06-17 Thread Eric Kuhnke
As I write this I'm sitting about 100 feet away (vertically) from the Westin fiber MMR, so you can definitely say that I'm biased in favor of the Westin and the SIX approach of doing things. What Randy just wrote is exactly the point I was trying to make in my last email. Some real estate

Re: Real world power consumption of a 7604-S or 7606-S

2016-06-27 Thread Eric Kuhnke
<t...@ninjabadger.net> wrote: > On 28/06/16 00:26, Eric Kuhnke wrote: > > Example: > > 7604S chassis with dual 2700W DC power - chassis and fans use how much > > power? > > 2 x RSP720-3CXL at 310W each > > WS-X6704 with DFC4 - ???W each > > Way too much

Real world power consumption of a 7604-S or 7606-S

2016-06-27 Thread Eric Kuhnke
I'm finding that the spec sheet for an RSP720-3CXL says 310W for the supervisor itself. Assuming a dual supervisor configuration in a 7604 or 7606, has anyone put one on a watt meter and measured its actual power consumption? Example: 7604S chassis with dual 2700W DC power - chassis and fans use

Barefoot "Tofino": 6.4 Tbps whitebox switch silicon?

2016-06-15 Thread Eric Kuhnke
a lot of PR fluff, but this may be of interest: http://www.wired.com/2016/06/barefoot-networks-new-chips-will-transform-tech-industry/ https://barefootnetworks.com/media/white_papers/Barefoot-Worlds-Fastest-Most-Programmable-Networks.pdf Based on their investors, could have interesting results

collectd as alternative to RTG for high-resolution polling and long term storage?

2016-03-18 Thread Eric Kuhnke
Would anyone care to share their experience using collectd as an alternative to rtg for high-resolution polling of interface traffic and long term storage? I am investigating the various options for large data set size, lossless long term traffic charting (not RRAs which lose precision over

Re: Best practices for sending network maintenance notifications

2016-04-06 Thread Eric Kuhnke
And some genius at an ISP's NOC has put rick_asley_never_gonna_give_you_up.mp3 in the their hold queue music rotation list. On Wed, Apr 6, 2016 at 1:56 PM, Ray Orsini wrote: > "The other "don't do that" is never configure Music on Hold for any NOC/SOC > lines. Few things are

Re: Mobile providers in the US for backup access

2016-04-20 Thread Eric Kuhnke
ting is owned/run by tucows, who are now also doing a 1Gb (GPON?) residential single home FTTH project... http://www.fiercetelecom.com/europe/tags/tucows On Wed, Apr 20, 2016 at 2:18 PM, Josh Reynolds wrote: > Ting's support is the BEST support I've ever had in the IT

Re: SNMP "bridging"/proxy?

2016-05-23 Thread Eric Kuhnke
This doesn't scale on a large cacti installation with hundreds of hosts and 60-second poller intervals. Cacti data input method scripts spawn a new php worker for each data acquisition target (they do NOT use the 'spine' SNMP poller). Exposing the data via SNMP on the host to be monitored

Re: SNMP "bridging"/proxy?

2016-05-23 Thread Eric Kuhnke
ed and "wc -l", feed the integer into a SNMP charting/monitoring system. On Mon, May 23, 2016 at 2:13 PM, Wes Hardaker <wjhn...@hardakers.net> wrote: > Eric Kuhnke <eric.kuh...@gmail.com> writes: > > > http://www.adventuresinoss.com/2009/09/30/the-man

Re: SNMP "bridging"/proxy?

2016-05-20 Thread Eric Kuhnke
It is fairly easy to extend the snmpd on a Linux host to retrieve data from non-SNMP sources... For example: http://www.adventuresinoss.com/2009/09/30/the-many-uses-of-net-snmp/

Re: NIST NTP servers

2016-05-10 Thread Eric Kuhnke
For quite some time, in debian the default configuration for the ntpd.conf that ships with the package for the ntpd is to poll from four different, semi-randomly assigned DNS pool based sources. I believe the same is true for redhat/centos. In the event that one out of four sources is wildly

Re: NIST NTP servers

2016-05-11 Thread Eric Kuhnke
Compared to the scale of the budget of small research projects run by national intelligence agency sized organizations, you wouldn't have to be very well funded to run a sizeable proportion of all tor exit nodes with some degree of plausible deniability... 500 credit cards 500 unique bililng

Re: NIST NTP servers

2016-05-11 Thread Eric Kuhnke
Cellular carriers also use GPS timing for many reasons that are not readily apparent at the layer 3 router/IP/BGP network level. One big need is RF related, back-to-back sector antenna frequency re-use with GPS synced timing on the remote radio heads, such as an ABAB configuration on a tower or

Re: Standards for last mile performance

2016-05-02 Thread Eric Kuhnke
It hugely depends on the physical layout of the homes/area for economics of active-E vs GPON... The scale of the outside plant aerial fiber is very different in certain scenarios. A green field modern housing development with everything underground might be very different than a semi-rural chain

Re: Software for circuit documentation

2016-04-18 Thread Eric Kuhnke
mediawiki set up for individual user accounts, https only access, in internal tool IP space/ACL/firewalled. First develop a hierarcically organized 'blank' template you can copy and paste for each POP, and then fill it out. Works great for large scale fiber patch panel assignments/crossconnect

Re: phone fun, was GeoIP database issues and the real world consequences

2016-04-18 Thread Eric Kuhnke
This makes me wonder what the 'market value' of a 212 DID is. I have seen them anywhere from $55 to $600 from providers specifically saying "buy this DID and port it out to your carrier of choice". On Mon, Apr 18, 2016 at 7:06 AM, Leo Bicknell wrote: > In a message written on

Re: Latency, TCP ACKs and upload needs

2016-04-19 Thread Eric Kuhnke
a geostationary orbit based connection will have a minimum latency of 492-495ms in a dedicated-carrier configuration between two earth stations, varying very slightly with the modem overhead time for FEC. In a TDMA network all bets are off, if you're in wyoming on exede and everyone is asleep,

Re: Latency, TCP ACKs and upload needs

2016-04-19 Thread Eric Kuhnke
One of the things to consider is that geostationary satellite operators operate based entirely on the economics of oversubscription. If you were to purchase a full duplex 1 Mbps x 1 Mbps connection via VSAT terminal in North America (whether C, Ku or Ka-band) you'd be looking at $2000/month or

Re: Mobile providers in the US for backup access

2016-04-20 Thread Eric Kuhnke
Look into Ting if all you want is a backup OOB path: https://ting.com/rates?ab=1 $6/month per active SIM card. Plus billing for actual data usage. Use it in your choice of HSPA+/LTE modem equipment. They're an MVNO using, if I remember right, a combination of T-Mobile and Sprint. On Wed, Apr

Re: LACP Frames / Level3 Transport

2016-05-24 Thread Eric Kuhnke
Or a very reckless oversubscription ratio and misjudgment of the customer, example, if a provider had 2 x 100GbE capacity between two locations and sold a customer a 100GbE EoMPLS transport circuit from A to Z, based on the mistaken idea of "Well these guys probably aren't going to peak more than

Re: cloudflare hosting a ddos service?

2016-07-26 Thread Eric Kuhnke
Looks like barrier to obtaining an EV SSL certificate is not very high these days. There's documentation requirements, but root CAs can't be seen to discriminate against companies in the developing world. I suppose all you need is a scanned business license/incorporation documents from your local

Re: NFV Solution Evaluation Methodology

2016-08-02 Thread Eric Kuhnke
But but but... cloud! THE CLOUD! Cloudy clouds fluffy white flying through the air, you should move everything to the Cloud (tm). Sometimes people forget that *somebody* needs to run the bare metal and OSI layer 1 things that physically make up the cloud. On Tue, Aug 2, 2016 at 7:08 PM, Ca

Best practices for telcoflex -48VDC cabling & other power OSI layer 1

2016-07-18 Thread Eric Kuhnke
Hey all, I'm looking for a document or set of photos/presentation on best practices for telcoflex/-48VDC power cabling installation. Labeling, routing, organization and termination, etc. Or a recommendation on a printed book that covers this topic. Not necessarily fully oldschool "we're going

Re: Best practices for telcoflex -48VDC cabling & other power OSI layer 1

2016-07-18 Thread Eric Kuhnke
ooking for. > > Steven Naslund > Chicago IL > > -----Original Message- > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Eric Kuhnke > Sent: Monday, July 18, 2016 11:12 AM > To: nanog@nanog.org > Subject: Best practices for telcoflex -48VDC cabling & other pow

Re: [AFMUG] Mimosa B11 Tx power at varying modulations

2016-07-18 Thread Eric Kuhnke
g for SNR required for each modulation > coding rate, which care listed here: > > http://backhaul.help.mimosa.co/backhaul-faq-snr-mcs > > Cheers, > > Jaime Fink • Mimosa <http://www.mimosa.co> • CPO & Co-Founder > > On July 15, 2016 at 10:56:20 AM, Eric Kuhn

Re: [AFMUG] Mimosa B11 Tx power at varying modulations

2016-07-18 Thread Eric Kuhnke
Apologies for that, it went to the wrong list. While the OSI layer 1 characteristics of new PTP microwave bridges are undoubtedly fascinating, such discussion may be a little too fine grained for network operational lists. On Mon, Jul 18, 2016 at 3:52 PM, Eric Kuhnke <eric.kuh...@gmail.

Re: NAT firewall for IPv6?

2016-07-05 Thread Eric Kuhnke
You know the cosmological model that the earth is balanced on the back of a giant turtle, which is supported by successive lower tiers of other turtles? https://en.wikipedia.org/wiki/Turtles_all_the_way_down It's like that, except it's trolls all the way down. On Tue, Jul 5, 2016 at 3:24 PM,

Re: Interesting Article on Modulation Schemes

2016-07-08 Thread Eric Kuhnke
pm=1=friend=19#pg19 > . > > > - Roderick. > > > -- > *From:* Eric Kuhnke <eric.kuh...@gmail.com> > *Sent:* Friday, July 8, 2016 10:40 PM > *To:* Rod Beck > *Cc:* nanog@nanog.org > *Subject:* Re: Interesting Article on Modulation Schemes > > Essenti

Re: Interesting Article on Modulation Schemes

2016-07-08 Thread Eric Kuhnke
Essentially the transceiver optics are applying the same modulation and coding that have been used in point-to-point microwave for a long time... Starting from OOK, up to BPSK and then on to QPSK, 16QAM and possibly 64QAM with varying levels of FEC. A singlemode fiber is just an extremely narrow

Best practices for tracking intra-facility crossconnects

2016-08-08 Thread Eric Kuhnke
Hey all, I am looking to see what the community's experience has been with different types of labeling systems and XC tracking systems for intra-facility crossconnects. In addition to the standard practice of labeling every fiber at both ends, if you're using a system that wraps a cable marker

Re: automated site to site vpn recommendations

2016-06-29 Thread Eric Kuhnke
My biggest issue with Meraki is the fundamentally flawed business model, biased in favor of vendor lock in and endlessly recurring payments to the equipment vendor rather than the ISP or enterprise end user. You should not have to pay a yearly subscription fee to keep your in-house

Comparing carrier hotels and colo: How much are you paying per 208V 30A circuit

2016-08-17 Thread Eric Kuhnke
a) How much, in $/mo b) To what degree is it protected (1+0 generator, 1+1 generator, N+1 generator, single UPS, 1+1 UPS, etc). c) What extent of diversity were you able to obtain vs. your other AC circuits (unique riser? separate transformer? separate power feed from second route into the

Re: Comparing carrier hotels and colo: How much are you paying per 208V 30A circuit

2016-08-17 Thread Eric Kuhnke
of those options. > > C) Ditto. > > Are you looking for specific cities or buildings? Or just trying to see if > it is available? > > -- > TTFN, > patrick > > > On Aug 17, 2016, at 12:37 PM, Eric Kuhnke <eric.kuh...@gmail.com> wrote: > > > > a) H

Re: Comparing carrier hotels and colo: How much are you paying per 208V 30A circuit

2016-08-17 Thread Eric Kuhnke
..@mtin.net > > > > --- > > http://www.mtin.net Owner/CEO > > xISP Solutions- Consulting – Data Centers - Bandwidth > > > > http://www.midwest-ix.com COO/Chairman > > Internet Exchange - Peering - Distributed Fabric > > > > > On Aug 17, 2016, at

Re: Arista unqualified SFP

2016-08-19 Thread Eric Kuhnke
I would like to see optics made in a shack in a rain forest, maybe we can find a new market to sell hand made artisanal fair trade organic GMO-free gluten-free lasers. On Thu, Aug 18, 2016 at 6:59 PM, Ricky Beam wrote: > On Thu, 18 Aug 2016 08:05:30 -0400, Tim Jackson

Re: Arista unqualified SFP

2016-08-18 Thread Eric Kuhnke
Though it would be really interesting to see, if a company like Cisco or Juniper ever suffered a major data leak, what number of customers really do pay full list price for some stuff. "Yeppers, twenty 1310nm LX 10Gb SFP+ for $4800 each, sounds good. Where do we send the check?" On Thu, Aug

Re: China Unicom – Does anyone still work for them ?

2016-08-18 Thread Eric Kuhnke
Is it nuts to ask if you've had fluent Mandarin or Cantonese speaking staff members contact them? On Thu, Aug 18, 2016 at 6:52 PM, James Braunegg wrote: > Dear All > > Just wondering if anyone is responsible and proactive and wants new IP > Transit sales for China

Re: cheap SMS, was Email to text -

2016-08-18 Thread Eric Kuhnke
The "Ting" MVNO is owned/run by the Tucows people (remember them!) and runs on either Sprint or T-Mobile's network depending on where you are. For very low data rate OOB access type things it can be as low as $10/mo for an active LTE SIM card. https://ting.com/rates?ab=1 On Thu, Aug 18, 2016

Re: Chinese root CA issues rogue/fake certificates

2016-08-31 Thread Eric Kuhnke
"Too big to fail" Where have we heard that before? If business risk/continuity people knew not only how much of a single point of failure a root CA is, but other basic stuff like "Maybe it shouldn't be possible to login to your domain registrar's control panel with the password known by Bob

Re: Outdoor ADSL2+/VDSL/G.Fast NIU

2016-09-06 Thread Eric Kuhnke
I think Calix has a fully outdoor version of their 844G VDSL2 modem. The problem you'll run into is the cost of bringing 12VDC through a small hole in the exterior wall (from a small indoor mounted 120VAC to 12VDC power supply) or outdoor code compliant weatherproof 120VAC for the equipment. And

Re: Optical transceiver question

2016-09-07 Thread Eric Kuhnke
What you're saying is if you purchase ten identical optics with the same SKU, and put them on a few hundred meters of coiled SC/UPC to SC/UPC simplex fiber and an optical power meter on the other end, they're showing varying real world Tx powers from between +0 to +5dBm? That's not right at all,

Re: Chinese root CA issues rogue/fake certificates

2016-09-07 Thread Eric Kuhnke
Further update on all known suspicious activity from Wosign: https://wiki.mozilla.org/CA:WoSign_Issues Seriously, what level of malice and/or incompetence does one have to rise to in order to be removed from the Mozilla (and hopefully Microsoft and Chrome) trusted root CA store? Is this not

Re: Don't press the big red buttom on the wall!

2016-08-30 Thread Eric Kuhnke
Does this mean you could drive around with a (illegal, but not difficult to build or obtainl) 20W wide band VHF/UHF jammer radio fed into a 1 meter parabolic dish, aim it at random buildings and set off peoples' halon systems? Wow. On Tue, Aug 30, 2016 at 1:46 PM, wrote: > >

Re: Chinese root CA issues rogue/fake certificates

2016-08-31 Thread Eric Kuhnke
mozilla.dev.security thread: https://groups.google.com/forum/m/#!topic/mozilla.dev.security.policy/k9PBmyLCi8I/discussion On Aug 30, 2016 10:12 PM, "Royce Williams" <ro...@techsolvency.com> wrote: > On Tue, Aug 30, 2016 at 8:38 PM, Eric Kuhnke <eric.kuh...@gmail.com&

Chinese root CA issues rogue/fake certificates

2016-08-30 Thread Eric Kuhnke
http://www.percya.com/2016/08/chinese-ca-wosign-faces-revocation.html One of the largest Chinese root certificate authority WoSign issued many fake certificates due to an vulnerability. WoSign's free certificate service allowed its users to get a certificate for the base domain if they were able

Re: Don't press the big red buttom on the wall!

2016-08-30 Thread Eric Kuhnke
If public transit operators can put a breakable plexiglass shield over the emergency door opening handle, on every bus, it's not a very high technical barrier. On Mon, Aug 29, 2016 at 2:51 PM, Sean Donelan wrote: > > See that big red button on the wall under the sign "Do Not

Re: cheap SMS, was Email to text -

2016-08-18 Thread Eric Kuhnke
; > > Anyone know of an equiv in Canada? > > Sean > > > On Thu, Aug 18, 2016 at 11:59 AM, Eric Kuhnke <eric.kuh...@gmail.com> > wrote: > >> The "Ting" MVNO is owned/run by the Tucows people (remember them!) and >> runs >> on either Sprint

Re: SNMP syslocation field for GPS coordinates, and use with automation tools

2016-12-09 Thread Eric Kuhnke
Yes, that's along the lines of what I was thinking. Pre-define a certain number of columns of data that will fit in the snmp syslocation field in most devices (some vendors have surprisingly short string length limits, grr). And use something like a pipe delimited CSV format in that field, so

Re: SNMP syslocation field for GPS coordinates, and use with automation tools

2016-12-09 Thread Eric Kuhnke
If you think that's bad, the public copy of the entire Industry Canada licensed frequency database (for every type of radio system, nationwide) comes in a giant space delimited text file with many database fields truncated when they export it from whatever ancient database system they're using.

SNMP syslocation field for GPS coordinates, and use with automation tools

2016-12-09 Thread Eric Kuhnke
Hello list, I'm wondering if anyone out there has been doing something like this, and what the results were like... Assuming a network with routed carrier-class CPEs for singlehomed last mile business customers, or carrier-ethernet L2 transport services for the same sort of customers. Each CPE

Re: SNMP syslocation field for GPS coordinates, and use with automation tools

2016-12-12 Thread Eric Kuhnke
s Ave, Springfield, OH > 45501 US", > "hardware" : "Cisco 2924", > "elevation" : "124m" > } > } > > Note that many formats now list Longitude first, Latitude second. >

Re: Bandwidth Savings

2017-01-11 Thread Eric Kuhnke
The challenges are almost certainly economics related, at the lack of competition and high costs for layer 1/2 transport from his Caribbean island to Miami. Via whatever submarine cables exist that are controlled by larger ILEC type entities/telcos. Or satellite (whether geostationary transponder

Re: DWDM on 250 Km dark fiber without re-amplification

2016-12-27 Thread Eric Kuhnke
You will want to request an OTDR characterization of the dark fiber path from its owner. If you can post OTDR "shots" with full resolution images in a lossless image format to the list, we may be able to take a guess if the distance is feasible without amplification inline. For equipment choices

Re: Temperature monitoring

2017-07-14 Thread Eric Kuhnke
If all that you require is temperature monitoring, I recommend going through the SNMP MIBs and doing an snmpwalk of your devices to identify the sensors at the air intake... Unfortunately there are some devices which do not have air intake sensors, but only a sensor somewhere generally in the

Re: Reporting/fixing broken airport/hotel/etc wifi?

2017-07-14 Thread Eric Kuhnke
I've found many times it's the other way around, with highly restrictive captive portals that only allow traffic to 80 and 443. This is exactly the reason why I have an OpenVPN server running in tcp mode (not udp) on 443. On Fri, Jul 14, 2017 at 1:33 PM, Christopher Morrow

Re: Temperature monitoring

2017-07-14 Thread Eric Kuhnke
If all that you require is temperature monitoring, I recommend going through the SNMP MIBs and doing an snmpwalk of your devices to identify the sensors at the air intake... Unfortunately there are some devices which do not have air intake sensors, but only a sensor somewhere generally in the

Re: Bell outage

2017-08-04 Thread Eric Kuhnke
Makes me wonder what the GIS department is like at $BIGCARRIER and how such a workgroup of specialists interfaces with their in house OSP fiber teams (and those responsible for acquiring IRUs, leasing and documenting third party dark, etc). On Fri, Aug 4, 2017 at 12:07 PM, Ken Chase

Re: US/Canada International border concerns for routing

2017-08-08 Thread Eric Kuhnke
It is worth noting, however, that the former AllStream ASN (formerly AT Canada) AS15290 is a completely different thing, and has distinct infrastructure and routing from the AboveNet ASN which is operated by Zayo. Although they are probably using "Free" Zayo transport by now. If I am grossly

Dotster/domain.com contact

2017-05-18 Thread Eric Kuhnke
I'm looking for a technical contact at dotster/domain.com to address an ongoing issue with their registrar service's lack of compliance with a very clear ICANN policy. Email me off-list.

Re: Russian diplomats lingering near fiber optic cables

2017-06-02 Thread Eric Kuhnke
It is no longer in the Westin, or if they've kept an office space it is not the public facing consulate. The security desk at the lobby frequently has to deal with confused Russian consular-service seeking people who don't want to take "no" for an answer when they're told that the consulate has

NANOG 70 network diagram and upstream

2017-06-02 Thread Eric Kuhnke
Just a small thing, but as one of the folks who used to work on the core network gear of AS11404, the network diagram has something in it that might confuse attendees as to who is really sponsoring the upstream: https://www.nanog.org/meetings/nanog70/diagram AS11404 was formerly known as

Re: NANOG70 tee shirt mystery

2017-06-04 Thread Eric Kuhnke
However, a Hyatt Regency hotel in Bellevue is about as far from grunge as one can get. For those not familiar with Bellevue it is roughly similar to Crystal City in Arlington, VA. On Jun 4, 2017 5:10 PM, "David Barak via NANOG" wrote: >

RE: NANOG 70 network diagram and upstream

2017-06-04 Thread Eric Kuhnke
gt; > conference.... geez > > > > -aaron > > > > -Original Message- > > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Eric Kuhnke > > Sent: Friday, June 2, 2017 1:43 PM > > To: nanog@nanog.org list <nanog@nanog.org> > > Subject: N

Re: Internet connectivity in Ghana

2017-06-04 Thread Eric Kuhnke
rtnership with Dolphin Telecom. > > On 06/01/2017 05:30 PM, Eric Kuhnke wrote: > > All of the licensed mobile phone network operators in Ghana are also ISPs > > and can reach enterprise customers. Within Accra or a few other major > > coastal cities, either by microwave roof

Re: DMCA processing software

2017-06-07 Thread Eric Kuhnke
Now new and improved for the modern era: https://devnull-as-a-service.com/home/ On Tue, Jun 6, 2017 at 10:30 PM, Tony Wicks wrote: > Speaking for Networks outside of the USA (and not being at all helpful > sorry), /dev/null works well. Sorry, couldn't help myself... > > > >

Re: Internet connectivity in Ghana

2017-06-01 Thread Eric Kuhnke
All of the licensed mobile phone network operators in Ghana are also ISPs and can reach enterprise customers. Within Accra or a few other major coastal cities, either by microwave rooftop/tower based links or their terrestrial fiber. Should definitely be much faster and more economical than

Re: Russian diplomats lingering near fiber optic cables

2017-06-01 Thread Eric Kuhnke
It's not like the locations of any of the transatlantic or transpacific cable landing stations are a big secret. They're published in the FCC's digest reports for international authorization and whenever ownership of a cable changes hands or is restructured. Additionally it is pretty hard to hide

Re: AWS us-west-2 routed through Europe from NY?

2017-05-01 Thread Eric Kuhnke
Just because a "fancy" traceroute tool does ARIN, RIPE or APNIC lookups, or uses a third party geolocation tool such as Maxmind to determine who owns a given netblock, does not mean that each hop of the traceroute is going through that country... It's just saying "this block of IPs is owned by

Geolocation of o3b satellite end user terminals

2017-05-04 Thread Eric Kuhnke
Since today seems like the day for IP geolocation related topics... Does anyone have direct experience with third-party IP geolocation services and o3b served enterprise/ISP-type high capacity customers? For those who are not familiar with them, o3b satellite terminals can be located literally

Re: Calgary <-> Toronto 100% Canadian Fibre Resiliency on failover

2017-10-13 Thread Eric Kuhnke
On a somewhat related note, if anyone has KMZs of the railway-based ROWs from Calgary-Vancouver (Fraser Valley area) and is able to share them, please contact me off list. I'm hoping to avoid re-inventing the wheel and time/labor of manually creating vector lines along the known railway corridors,

Re: Temp at Level 3 data centers

2017-10-11 Thread Eric Kuhnke
Also worth noting that temperature tolerances for large scale numbers of 1U servers, Open Compute platform type high density servers, or blade servers is a very different thing than air intake temperatures for more sensitive things like DWDM platforms... There's laser and physics related issues

Re: Wireless ISPs during disasters (hurricane harvey, irma and maria)

2017-11-27 Thread Eric Kuhnke
AeroNet is a large sized independent ISP in Puerto Rico (as compared to major US48 based national carriers, and relative to the size of the market as a whole) and makes extensive use of PTP And PtMP microwave/millimeter wave equipment, so I guess they count as a WISP. They are active on some

Incoming SMTP in the year 2017 and absence of DKIM

2017-11-29 Thread Eric Kuhnke
For those who operate public facing SMTPd that receive a large volume of incoming traffic, and accordingly, a lot of spam... How much weight do you put on an incoming message, in terms of adding additional score towards a possible value of spam, for total absence of DKIM signature?

Re: Incoming SMTP in the year 2017 and absence of DKIM

2017-11-29 Thread Eric Kuhnke
Anecdotal experience. I'm subscribed to a lot of mailing lists. Some pass through DKIM correctly. Others re-sign the message with DKIM from their own server. >98% of the spam that gets through my filters, which comes from an IP not in any of the major RBLs, has no DKIM signature for the domain.

Re: Companies using public IP space owned by others for internal routing

2017-12-17 Thread Eric Kuhnke
some fun examples of the size of ipv6: https://samsclass.info/ipv6/exhaustion-2016.htm https://www.reddit.com/r/theydidthemath/comments/2qxgxw/self_just_how_big_is_ipv6/ On Sun, Dec 17, 2017 at 7:05 PM, Large Hadron Collider < large.hadron.colli...@gmx.com> wrote: > Missent. > > Welcome to

Re: Small full BGP table capable router with low power consumption

2017-12-05 Thread Eric Kuhnke
It is worth mentioning for those who have not seen a Ubiquiti "edgrouter" in person yet, or worked with one, where their operating system came from... When Vyatta was acquired by Brocade, the core Vyatta team jumped ship and were hired directly by Ubiquiti. When you SSH into one of these whether

Re: Suggestions for a more privacy conscious email provider

2017-12-05 Thread Eric Kuhnke
In my experience with creating new mail servers that use IP addresses belonging to dedicated hosting/colocation/VPS companies. This is *after* all of the obvious setup things like having a real static IP, A records, PTR records, SPF and DKIM set up proprely, are taken care of so that a public

Re: AT mobile intercepting TCP sockets?

2018-05-21 Thread Eric Kuhnke
The short answer is, yes. This is a strong argument in favor of three things: a) Redirect all http trafifc on webservers you control to https , such as the following apache2 configuration file snippet for a virtualhost RewriteEngine on RewriteCond %{SERVER_NAME} =domainname.com [OR] RewriteCond

Re: AT mobile intercepting TCP sockets?

2018-05-21 Thread Eric Kuhnke
Oh, I'm sure that'll never be abused by any hostile nation-state-owned monopoly telecom that likes to block/ban/MITM traffic, ever! On Mon, May 21, 2018 at 1:53 PM, Ca By wrote: > On Mon, May 21, 2018 at 1:11 PM wrote: > > > IME ATT has intercepted

Re: Application or Software to detect or Block unmanaged swicthes

2018-06-08 Thread Eric Kuhnke
This is one of the reasons why large organizations, such as the ones you describe, have both portable spectrum analyzers (covering the 2400 range and 5150-5850 MHz 802.11(whatever) bands), and also ability to hunt for MAC addresses of wifi devices that don't match known centrally managed APs. Even

Re: What are people using for IPAM these days?

2018-06-13 Thread Eric Kuhnke
ay > > On Wed, Jun 13, 2018 at 3:50 PM Eric Kuhnke wrote: > >> Either phpipam or nipap. >> >> Both use fairly standard database backends and db schema (usually >> something >> as simple as mariadb listenong on localhost only, on the same VM that is &g

Re: What are people using for IPAM these days?

2018-06-13 Thread Eric Kuhnke
Either phpipam or nipap. Both use fairly standard database backends and db schema (usually something as simple as mariadb listenong on localhost only, on the same VM that is the apache2 or nginx + php stack), allowing you to scale up to external tools that do read only queries of the IP database

Re: Impacts of Encryption Everywhere (any solution?)

2018-05-29 Thread Eric Kuhnke
The one thing that you CAN generalize about a great many developing nation telecom markets, which is different than the US and Western Europe: Many urban locations have a complete absence of functioning last mile, legacy copper telecom infrastructure, which in a US city you would see used for

Re: Impacts of Encryption Everywhere (any solution?)

2018-05-29 Thread Eric Kuhnke
Ethiopia is significantly different and unique, in its own unusual way, because of the government monopoly telecom. Other people can correct me if I'm wrong, but unless the situation has changed in the past two years, all small to medium sized ISPs in Ethiopia are mandated by law to be downstream

Re: SIP fax sending software?

2018-06-01 Thread Eric Kuhnke
I would recommend simply outsourcing it to voip.ms for $2 a month. Port your fax DID to them. Incoming fax arrive as PDF in your choice of email inbox. You can send outbound fax from a predefined list of your own email addresses, destination to f...@voip.ms. Put the destination phone number in

Re: Impacts of Encryption Everywhere (any solution?)

2018-05-29 Thread Eric Kuhnke
Based on my experience a couple of years ago while in West Africa: If you look at the BGP adjacencies and bidirectional traceroutes for ISPs in Sierra Leone or Liberia; Freetown and Monrovia are both are logically suburbs of London. Just with much higher transport latencies via the submarine

Re: Wi-Fi Analyzer

2017-12-29 Thread Eric Kuhnke
In addition to the other tools already recommended by previous posters, I recommend buying one of these: https://www.ubnt.com/airmax/nanobeam-ac-gen2/ It's a directional antenna/radio integrated unit and is intended as a point to point or point-to-multipoint WISP client radio. The one feature

  1   2   3   4   >