.
Vyatta has a VMWare image. Have used and is pretty good.
http://www.vyatta.org community edition or
http://www.vyatta.com commercial supported.
Mike
Alan Bryant wrote:
I haven't seen much traffic on this list about Mikrotik or RouterOS,
but I thought it was worth a shot as a last ditch effort to get this
going.
Does anyone know of a solution to connect a POS OC-3 to a router
running Mikrotik's RouterOS? I have searched google extensively
Alan Bryant wrote:
I'm just trying to see what options there are and make the decision
off of that. If Cisco or Juniper is the only way, then so be it. I
just want to be sure.
The real issue is that these legacy telco interfaces are just expensive,
straight up, and being forced to use
critical, these commercial solutions are far
more likely to take you there today.
$0.02
Mike-
Leo Bicknell wrote:
Perhaps you could explain why the keys are being made available in
formats that, as far as I can tell, no nameserver software on the
planet uses? Pretty much 100% of the users will need a conversion
from one of the 6 formats you provided, when you could have provided
6
sequential numbers to my resolvers for the benefit of consultants ...
like .11, .22 and .33 for my server ips?
Mike-
while this is undoubtedly true for hobbiest researchers, there are
pretty good relationships between vendors and some research facilities
with a strong interst in ensuring there is external review of the
code base(es).
(I am personally aware of at least five such
Greetings,
I need to get a hold of Yahoo! security and the online submission
form doesn't seem to work for me. Anyone got a good contact?
Thank you.
. For
anyone who cares, the code is on sourceforge -
http://ilc-ppp.sourceforge.net
Mike-
Brielle Bruns wrote:
On 11/16/10 8:32 PM, Brielle Bruns wrote:
Hey All,
Sorry to bother the list, but I'm noticing that I've got no connectivity
to Hurricane Electric through GBLX from my Qwest DSL.
7* * * ?
IP: Errno(8) Trace Route Failed, no response from target
Tammy A. Wisdom wrote:
- Original Message -
From: Mike mike-na...@tiedyenetworks.com
Cc: nanog@nanog.org
Sent: Tuesday, November 16, 2010 9:38:57 PM
Subject: Re: Outage between GBLX and HE?
Brielle Bruns wrote:
On 11/16/10 8:32 PM, Brielle Bruns wrote:
*snip*
Did
Just on an operational front, does anyone know the nature of the DDoS
against wikileaks? eg: spoofed source garbage, http get, synfloods, or ?
Mike-
to learn the entire v6 protocol
suite, we need more help otherwise we're likely to just keep putting it off.
Mike
On 12/15/2010 at 9:17 AM Ben wrote:
|On Wed, Dec 15, 2010 at 9:00 AM, Stefan Fouant
|sfou...@shortestpathfirst.net wrote:
|
| -Original Message-
| From: mikea [mailto:mi...@mikea.ath.cx]
| Sent: Wednesday, December 15, 2010 8:28 AM
| To: nanog@nanog.org
| Subject: Re: Alleged
On 12/15/2010 at 10:25 AM Bryan Irvine wrote:
|On Wed, Dec 15, 2010 at 10:20 AM, Mike. the.li...@mgm51.com wrote:
|
| On 12/15/2010 at 9:17 AM Ben wrote:
|
| |On Wed, Dec 15, 2010 at 9:00 AM, Stefan Fouant
| |sfou...@shortestpathfirst.net wrote:
| |
| | -Original Message-
| | From
to re-read their ToS agreement
Mike-
On 12/19/2010 06:12 PM, JC Dill wrote:
And if a competing water service thought they could do better than the
incumbent, why not let them put in a competing water project? If they
think they can make money after the cost of the infrastructure, then
they may be onto something. We don't have to
to
resolving the problem. If they won't or aren't able to respond
effectively, I would say that (depdning on the who and what of your
customer), shutting down the port may be a viable next step.
Mike-
On 01/19/2011 01:28 PM, GP Wooden wrote:
Not that this is a requirement, but good practice none the less with this
setup... Turn off cdp on the port facing the LEC...
+1
also add 'nonegotiate' and turn off spanning tree on the port while
you're at it. There's a list somewhere of standard
On 1/21/2011 at 9:39 PM Tarig Ahmed wrote:
|Dear All
|Hi
|
|Default configuration for statefull firewall is to allow traffic form
|TRUST ZONE to UNTRUST ZONE.
|
|As I Know those device will use some feilds in the TCP Header.
|
|But, how the firewall will handle this policy for none TCP traffics
be considered statistically
relevant, and most importantly, how do we get this to be accepted by
non-technical legislators and regulators?
Mike-
if 'workgroup.com' or variations had or
has a similar problem
Mike-
Woah... *collapses on the floor in shock* SORBS actually did something?!
Quick, buy a lottery ticket before your luck changes!
Paul
(one of many fed up of dealing with SORBS)
Yeah +1 to that. What we need an RBL that lists any mail server that
USES sorbs for filtering decisions.
Mike-
On 03/22/2011 03:58 PM, Paul Graydon wrote:
On 03/22/2011 12:24 PM, Franck Martin wrote:
+1
They know the challenges, aware of the issues and I have seen some
progress.
I'm glad to hear that, one less extortion racket on the 'net is no bad
thing. They might do better by rebranding though.
in netsol.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
this with APC tech support. That's
a pricey piece of gear, and it shouldn't toast itself at any time.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
,
IT, and networking ecosystem don't even have access to ipv6 to play around with,
you can be guaranteed that they are going to be hesitant about lighting v6 up
in real life.
Mike
access capabilitity. This doesn't work today, Apps like Waze, Spotify and others do not
work on IPv6 only access.
Is this the app's fault? What are they doing wrong?
Mike
available protection, and when you are on line
interactive - even if it can switch - you are still taking that risk of
power issues that will jump your ups and hit your connected equipment
anyways.
Mike-
On 12/11/2012 04:20 PM, flower tailor wrote:
Delete me
poof!
You are deleted.
On Fri, Dec 14, 2012 at 11:41:48AM -0800, Randy Bush wrote:
---end quoted text---
Yep. _Gloriously_! The US walked out, followed by bunchty others.
http://www.pcworld.com/article/2020469/opponents-say-itu-treaty-threatens-internet-freedom.html
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired
. The reverse
map according to
host 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d
comes back with NXDOMAIN. I suppose the real issue here is with Vz
and why they don't have v6 reverse maps, but it did throw me thinking that
somebody in New Jersey might have hacked my account.
Mike
On 12/27/12 9:25 AM, joel jaeggli wrote:
On 12/27/12 9:04 AM, mike wrote:
I reloaded their app (yes, I know... sew me) and got this warning:
IP address: 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d
Estimated location: Livingston, NJ, US
That's a rather good estimation of where many
like airport security: a big hassle for the
legitimate users but not really much of a barrier for a real
attacker. A poor trade-off.
A Modest Proposal: Maybe we need to turn it around and fail on successful
recognition of the CAPTCHA, then?
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old
On 3/5/2013 at 9:55 PM Mukom Akong T. wrote:
|Dear experts,
|
|I've found myself thinking about what ground an engineer needs to
cover in
|order to convince the executives to approve and commit to an IPv6
|Deployment project.
|
|I think such a presentation (15 slides max in 45 minutes) should
On 4/2/2013 at 5:19 PM Jay Ashworth wrote:
|- Original Message -
| From: Owen DeLong o...@delong.com
|
| Never underestimate the bandwidth of a 747 full of DLT cartridges.
|
|Aww you remembered.
|
| http://baylink.pitas.com/20110516.html#747F
=
Staying more in the
On 4/2/2013 at 6:44 PM Steven Bellovin wrote:
|DLT? I first heard it as a station wagon full of (9-track, 1600 bpi,
|that having been the state of the art) mag tapes on the Taconic
Parkway,
|circa 1970. I suspect, though, that Herman Hollerith expressed the
idea
|about a stage coach full of
on the carpet for it.
Mike-
On 04/03/2013 02:48 PM, valdis.kletni...@vt.edu wrote:
On Wed, 03 Apr 2013 14:07:48 -0700, Mike said:
These speedtests are pure unscientific bs and I'd love to see them
called out on the carpet for it.
As far as I know, it's possible for the end-to-end reported values to be
lower than your
Roland Perry wrote:
In article
16720fe00907040747k67ca1206kb871420deb5e8...@mail.gmail.com, Jeffrey
Lyon jeffrey.l...@blacklotus.net writes
Personally, I find it difficult to take Twitter seriously. It seems
like more of a kids toy than a business tool. Something like a
blogspot account
Does anyone here have good operational experience with pseudowire (t1
and ds3) carried over ip/mpls? I'm just interested in real world
experiences and deployment scenarios that have went live.
Mike-
I think it just may be front end services that are impacted. I'm able to
send/receive mail through my BB BIS gmail account.
--Original Message--
From: Nathan Anderson
To: nanog@nanog.org
Subject: RE: Issues with Gmail
Sent: Sep 1, 2009 2:05 PM
The minute I saw your question, I tabbed
Small-site multi-homing is one of the great inequities of the
Internet and one that can, and should, be solved. I envision an Internet
of the future where anyone with any mixture of any type of network
connections can achieve, automatically, provider independence and
inbound/outbound load
Jared Mauch wrote:
How about just mandating that it's illegal to build anything but fiber/gpon for services.
I would expand on this and say we should make it illegal for any telecom
carrier to refuse to put their assets into service wherever they may be,
and going forward we should force
and on track that way, so
these photographs would be extremely helpful to light their young minds
and get them thinking about their futures.
Thank you all.
Mike-
wanted, what kinds of things keep you up at night (or let you
sleep, your choice). No sales, I'm an operator too and have my own list
of pain points and just wanna compare notes is all.
Thank you.
Mike-
am not
going to do anything with the information and am likely to ignore future
occurrences from the fbi if this is all they got.
Mike-
if any such event concerning our prefix/as was seen anywhere.
Mike-
I think the simple test for this problem is to take a non-ECC machine, boot
from a CD/USB Key/etc with memtest or memtest86+ on it, and see if you get
errors over the course of a few days.
Getting errors will certainly prove that this problem exists (or that you
have bad ram).
I have a security incident to report and need to make contact with a
senior level contact responsible for spamcop/ironport immediately.
Thank you.
On 12-07-07 10:13 PM, Jason Duerstock wrote:
As an intellectual exercise, I think this is interesting and worth the
effort. As an actual implementation, I think it's more effective to block
DNS traffic to the affected subnets. Let the breakage occur, and then let
the end users get their broken
On 12-07-09 12:57 PM, Mike Andrews wrote:
Unless you have a policy that Slot A only does Slot A work stuffed
up some orifice. I've been there, and it is both stultifying and
limiting.
Further to the above wisdom, if you truly care about your work it will
either drive you crazy as you force
On 7/22/2012 at 11:56 AM Dave Sotnick wrote:
|Dear Nanog Users,
|
|I have recently been plagued by intermittent lockups on my Motorola
|BitSurfer 6121 cable modem, which I purchased based on Comcast's lists
|of recommended devices, and having good experience with Motorola
|products in the past.
.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
On 8/17/2012 at 10:14 PM Matthew Palmer wrote:
|
|I religiously use http://squish.net/dnscheck/ the moment I suspect
*any*
|sort of DNS hinkiness. Verbose, but *damn* if it doesn't hand me the
|answer practically every time.
Looks like a nice site, but I couldn't get past the captcha. rn looks
are
silently dropped.
In the past, I've found a binary search on ping size to be very
efficient. YMMV, of course.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
definition of the word intermittent. The one
roughly synonymous with total.
Yeah. Doubleplusungood.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
Is anyone from Telus out there and willing to answer a few questions
around policy / privacy?
I'm hitting a roadblock trying to find out what hoops I need to jump
through to get the information I need.
If a super awesome Telus person can point me at the hoops, I'll start
jumping. Please
can issue ping from my router directly to the attached qwest
router and get 1000ms and then other times (out of the problem
window), I am getting 4ms.
If anyone has laughs or beers to offer me, send 'em on cuz I could
use both right about now
Mike-
Since 11/5, my spam load has dropped from about 400,000 attempts per day
to less than 40,000 ! And most of this I had noted was comming from what
looked like compromised web hosts - eg: same host/domain name
representing 10 or 20 addresses in any given range). I am shocked at the
sudden and
a manufacturer assigned addresses for the virtual
ethernets).
Mike-
For my own $0.02 worth, I would like to point out the kind of
engineering that was done during the days of Ma Bell - when it was THE
phone company, and had the world in it's pocket - was quite spectacular
and resulted in telecommunications systems that largely stood up and
continued
I have a serious problem with postini applying some rules that look like
the work of a rouge engineer in their ranks, and I need an internal
contact to discuss the problem with.
thanks.
should really have an expectation to be able to assign my prepends as
suits my needs? Are there any conditions that could make this fail that
I should be aware of?
Mike-
with commercial boxes, but how well
you do that job can be expressed more in terms of selecting the right
platform and plugging the right configuration lines into it, and both of
these can easilly be 'done well' in exchange for money (router vendor
support team, etc).
Mike-
Deric Kwok wrote:
Hi All
Steve Bertrand wrote:
Ryan Harden wrote:
While you could probably build a linux router that is just as fast as a
real hardware router, you're always going to run into the moving pieces
part of the equation.
Not if you boot directly from USB key into memory with no disk drive.
Steve
Steven M. Bellovin wrote:
On Sat, 21 Feb 2009 11:52:23 -0500
Steven King sk...@kingrst.com wrote:
I can't even get reliable home cable internet service from them. No
way I would ever consider using them for transit. I would only
consider a stub peer with them to help out the poor Comcast
user
classing mail as spam automatically means it marks all other mail from
that user to everyone else. There really outta be some transparency
here so that everyone understands the how and the why of 'spam'
classification.
Mike-
to effectively 'vote' only works when
the group in question is comprised of reasonable people, and
unfortunately, freemail users and office workers 'protected by postini'
are the least likely candidates to make reasonable choices with votes
for spam.
$0.02
Mike-
I am looking at the possibility of leasing a ~70 mile run of fiber. I
don't have access to any mid point section for regeneration purposes,
and so I am wondering what the chances that a 120km rated SFP would be
able to light the path and provide stable connectivity. There are a lot
of unknowns
or other important issues, so I am curious if other qwest
customers had the same experience and wether this is how it's going to
be from here on in? The affected platform was juniper and I'd love to
know the specfic case being addressed here.
Mike-
was a necessary upgrade and seems
justified now with that knowledge, I would simply have appreciated not
having to engage my emergency processes for something that was planned.
Mike-
Paul Wall wrote:
On Thu, Jan 7, 2010 at 5:04 AM, Mike mike-na...@tiedyenetworks.com wrote:
We just had a qwest outage of about 2 mins at 1:41am pst. When I called to
report it I was told it was a 200+ emergency software upgrade due to a
security concern, and that we will get a notice later
Hi Folks,
Northern California is getting pounded hard by storms, as we do most
every year, and have quite a few electric outages as a result. Of
particular note however is that we have experienced a number of remote
and inaccessible microwave backhaul sites where the on-site generator
has
I've been getting repeated junk emails from an XO customer and
reports to ab...@xo.net are going unanswered and the problem is
unresolved. Is there anyone who has a better contact who can take action
on this issue? Offlist replies welcome.
Thanks.
Just had a great interaction with Jim in XO's abuse department, who was
able to immediately understand the issue and appears on his way to
'address the problem' as I write this. Way to go XO, and thanks to
whomever forwarded along my original query, much appreicated
In the downtown area there is also Jo's coffee and Little City that
are traditional coffee shops like Halcyon.
Franks, royal blue grocery and Walton's fancy staple are also good
options for a morning snack and coffee drinks.
Whole foods is also another option.
On Wed, Feb 17, 2010 at 8:58
No, you are not pushing a stable '54mbps over the link without issue'.
More likely, if you cared to look, you are getting somewhere around
30-35mbps, HALF DUPLEX. The '54mbps' advertised on the shiny sales
brochure, is a signaling rate and not a measure of thruput.
Mike-
Bret Clark wrote
worried, but accuracy counts and you
won't have my business unless you can demonstrate some.
Mike-
. The data in the fig file could have been (mis)used to yahoo's
network security disadvantage and wherever you stand I think we all can
agree that cluing them in was the right thing to do. But for someone
else's startup, probably would not have bothered.
Mike-
to
see how that goes. I bet there will be more to learn along this road for
us all.
Mike-
I need to find a clueful Rogers sales rep, if anyone has suggestions,
please send them my way.
thanks!
friday all!
Mike-
Operations.
No more so than describing NSA operations as research in communications
phenomena, which used to be the (UNCLAS) party line.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
a lot of money, until you look at the fines and jail time you may
wind up with if you drop a stitch somewhere. Then it all becomes quite
reasonable.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
interesting.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
of.
Thanks.
Mike-
want to
connect with anyone who's done this and has a qualified technical
opinion on optimal deployment strategies; the business considerations
are already done.
Thanks tho.
Mike
1.5Mbps to 20Mbps service over 1 or more copper pairs
with good distances between repeaters.
Im already doing the above. Just need T1 for reach since EoC is only
good on home runs from the CO out to some distance whereas T1 can get me
into the hills beyond.
Mike-
a They're doing things upstream, and we're
down until they finish response.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
On Thu, Sep 05, 2013 at 07:12:36PM +, Warren Bailey wrote:
Anyone else see this coming?
US and UK spy agencies defeat privacy and security on the internet
http://gu.com/p/3thvv
Yes, long, long ago. I just didn't expect to see it revealed.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
iphone 5 didn't
see it until today; I looked yesterday, and it wasn't available for that
device. I'm busily contributing to the network stress now.
--
Mike Andrews, W5EGO
mi...@mikea.ath.cx
Tired old sysadmin
that queries the special resolver would get
a web page explaining they have been hijacked and how to handle it. For
now however I just want to stem the tide and make sure clients continue
to work and to catch as many of these as I can. Anyone ?
Mike-
On 13-11-23 10:47 PM, Eric C. Miller wrote:
I'm using an EdgeRouter lite in a deployment for a WISP, and it's holding up
very nice. It's only passing 40-50Mbps of basic OSPF routing, but no
complaints thus far for the performance. I've heard that once you start
adding in the services and
On 14-01-24 05:22 PM, Jay Ashworth wrote:
If you can't, RT is pretty nice, though quite a bit more complex. It used
to have an asset tracking snap-on, but I don't know what the status of that
is now that the main package has revved to 4.0.
+1 on RT being awesome, but a little daunting to set
On 14-01-28 11:08 AM, Alexander Bochmann wrote:
...on Fri, Jan 24, 2014 at 10:37:14AM +0100, Octavio Alfageme wrote:
network, but we are starting to need a better inventory of services and
network
resources and better troubleticketing procedures. We can not afford
acquiring
For the
Hello,
I was wondering if anyone could point me in the direction of a tool
capable of sniffing (or reading pcap files), and reporting on lan
station thruput in terms of bits per second. Ideally I'd like to be able
to generate a sorted report of the top users and top thruputs observed
and
...
Mike-
Problem identified. My domain is on hold... ugh, my eyes are tired,
thanks to those who were able to help me (in email).
Also my information hiding was a bit weak, I should have used
'example.org' to make it clear I was deleting the real info.
Thanks all.
Mike-
On 3/20/2014 at 4:17 PM Bryan Fields wrote:
|On 3/20/14, 12:34 PM, Blake Hudson wrote:
| The solution seems to be competition or regulation.
|I'd prefer competition to regulation.
=
If real and true competition exists, yes.
1 - 100 of 2302 matches
Mail list logo
