RE: best way to create entropy?

2012-10-11 Thread Naslund, Steve
I know that a popular method for generating random bit streams is to take radio (stellar) noise and convert it into a digital bit stream. Very popular among crypto geeks. Steven Naslund -Original Message- From: Dan White [mailto:dwh...@olp.net] Sent: Thursday, October 11, 2012 10:55

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread Naslund, Steve
How would this be legally different than receiving the illegal content in an envelope and anonymously forwarding the envelope via the post office? I am pretty sure you are still liable since you were the sender. I realize that there are special postal regulations but I think that agreeing to

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread Naslund, Steve
I think the best analogy I would use in defense is something like the pre-paid cellular phones that are sold. That is about the only anonymous communications service I can think of off the top of my head. Problem is that most people are not licensed carriers and may not be able to hide behind

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread Naslund, Steve
I think service providers are afforded special protections because the law recognizes their utility and the inability of the service provider to be responsible for the actions of all of their customers. The major problem is that not every individual has the same protections. A lot of ISPs are

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread Naslund, Steve
] Sent: Thursday, November 29, 2012 2:14 PM To: Naslund, Steve Cc: NANOG Subject: Re: William was raided for running a Tor exit node. Please help if you can. On Thu, Nov 29, 2012 at 12:00 PM, Naslund, Steve snasl...@medline.com wrote: ISPs also do not allow strangers to do whatever they want ISPs

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread Naslund, Steve
1. Running open access wireless does not make you legally an ISP and if your open wireless is used to commit a crime you could be criminally negligent if you did not take reasonable care in the eyes of the court. 2. If I provide access to four or five friends, I am not an ISP and in fact I am

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-29 Thread Naslund, Steve
a source of pain for them. Done with this subject, sorry for the long windedness Steven Naslund -Original Message- From: George Herbert [mailto:george.herb...@gmail.com] Sent: Thursday, November 29, 2012 2:53 PM To: Naslund, Steve Cc: NANOG Subject: Re: William was raided for running

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
-Original Message- From: Rich Kulawiec [mailto:r...@gsp.org] Sent: Friday, November 30, 2012 6:59 AM To: nanog@nanog.org Subject: Re: William was raided for running a Tor exit node. Please help if you can. On Thu, Nov 29, 2012 at 08:04:02AM -0500, Chris quoted (William): Yes, it

RE: [tor-talk] William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
WAIT A SECOND HERE!?!? I just read below that this guy runs a large ISP in Austria. I thought his Tor node was hosted with an external provider. If he runs the ISP, why would he not host his own server in house? I suppose there are reasons but I can't think of one, especially if you feel so

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
or legal sharing and distribution and some not so nice media. Steven Naslund -Original Message- From: Michael Froomkin - U.Miami School of Law [mailto:froom...@law.miami.edu] Sent: Thursday, November 29, 2012 6:30 PM To: Naslund, Steve Cc: NANOG Subject: RE: William was raided for running

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
-Original Message- From: Peter Kristolaitis [mailto:alte...@alter3d.ca] Sent: Friday, November 30, 2012 3:53 PM To: nanog@nanog.org Subject: Re: William was raided for running a Tor exit node. Please help if you can. On 11/30/2012 04:01 PM, Naslund, Steve wrote: I am a little concerned

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
From: Jimmy Hess [mailto:mysi...@gmail.com] Sent: Friday, November 30, 2012 3:47 PM To: William Herrin Cc: NANOG list Subject: Re: William was raided for running a Tor exit node. Please help if you can. On 11/29/12, William Herrin b...@herrin.us wrote: If the computer at IP:port:timestamp

RE: [tor-talk] William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
- From: Warren Bailey [mailto:wbai...@satelliteintelligencegroup.com] Sent: Friday, November 30, 2012 4:12 PM To: Naslund, Steve; NANOG list Subject: Re: [tor-talk] William was raided for running a Tor exit node. Please help if you can. When is the last time you were arrested, or even

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
Guess who has power over the networks and Internet. We do and power corrupts us too. There are some bad guy ISPs and engineers out there too. Just because you are running a Tor server to allow for privacy protection does not mean you were never doing anything illegal through it. I know this

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
Kickstarter -- you hope to get something good out of it, but if it bombs, well... you pay your money and you take your chances. - Pete On 11/30/2012 05:02 PM, Naslund, Steve wrote: OK, there must be a lot more paranoid people out there than I thought there were. I personally don't have a runaway

RE: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Naslund, Steve
I might be reading this the wrong way but it looked to me like the cops raided his home and the Tor server is hosted off site with an ISP. That is what is bugging me so much. The cops raided his house, not the location of the server. If they had tracked the server by its IP it would have led to

RE: William was raided for running a Tor exit node. Please help if

2012-11-30 Thread Naslund, Steve
- in this case, the cops have not even said this guy is guilty of anything yet. Steven Naslund -Original Message- From: Joe Greco [mailto:jgr...@ns.sol.net] Sent: Friday, November 30, 2012 4:49 PM To: Naslund, Steve Cc: nanog@nanog.org Subject: Re: William was raided for running a Tor exit

RE: Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications....

2012-11-30 Thread Naslund, Steve
I would guess that a lot of the access growth going forward is going to be a lot of what I would term incidental access. More and more devices and technology requires or supports Internet access. So while a lot of people may not ask for internet service that don't already have it, it will be

RE: [tor-talk] William was raided for running a Tor exit node. Please help if you can.

2012-12-04 Thread Naslund, Steve
[mailto:william.allen.simp...@gmail.com] Sent: Friday, November 30, 2012 9:20 PM To: nanog@nanog.org Subject: Re: [tor-talk] William was raided for running a Tor exit node. Please help if you can. On 11/30/12 5:15 PM, Naslund, Steve wrote: Well, in that case I am really worried that the cops might

RE: China Telecom VPN problems (again)

2012-12-06 Thread Naslund, Steve
Make sure you check this out in detail. My export / import people found out that if the device is going to be in control of and used by a US company doing business in China, there are a lot less encryption restrictions. The ruling was that it was not an export if the device remains the property

RE: China Telecom VPN problems (again)

2012-12-06 Thread Naslund, Steve
Agreed. I have run IPsec over MPLS with no problem in China on several carriers. Internet connectivity also worked but performance was spotty due to overloaded firewall or circuits in and out of the country. Steven Naslund -Original Message- From: Tom Paseka

RE: China Telecom VPN problems (again)

2012-12-06 Thread Naslund, Steve
There are lots of carriers but unfortunately they all seem to use China Telecom infrastructure for transport so there is not really a way to get better Internet service there. In our experience MPLS performs better because China Telecom seems to hand off service to the international MPLS carriers

RE: How to get DID local numbers (IP Telephony)

2012-12-06 Thread Naslund, Steve
You can get DID numbers from a carrier when you buy a service from them. There is usually a ratio of how many DIDs you can get for a certain service. I know you will need state utilities commission licenses at least if you want to become a telephone carrier. IP only voice service I am not

RE: Six Strike Rule (Was: William was raided...)

2012-12-06 Thread Naslund, Steve
If you are a facilities based broadband provider in the US you have to comply with CALEA. There is no coming to some agreement, you have a legal obligation to comply. No more, and no less. You don't have to comply with requests from agencies other than law enforcement under CALEA but you may

RE: why haven't ethernet connectors changed?

2012-12-21 Thread Naslund, Steve
Please, no connectors that do not lock into place. Is plugging in the RJ-45 that much of a task? Most portable devices are going wireless in any case so they are not an issue. The RJ-45 has worked OK for me. The AUI connectors have a special place in networking hell. What an incredibly

RE: Fiber only in DataCenters?

2012-12-21 Thread Naslund, Steve
It takes a lot of voltage to cause an arcing spark. I would suspect static buildup along the way and bad grounding. Even a big facility with a good ground should not have enough voltage differential between grounding points to cause sparks. Having the right size rack grounding should give you a

RE: why haven't ethernet connectors changed?

2012-12-21 Thread Naslund, Steve
HDMI is also extremely distance limited. At those kinds of distances you probably would have no problem running 8 gbps over a Cat 6 with RJ-45s as well. I don't know how many people remember it but 1G used to be real expensive as well. In a few years you will see the 10 gbps D-Link switches at

RE: why haven't ethernet connectors changed?

2012-12-21 Thread Naslund, Steve
Distance, data rate required, bandwidth (like RF signals), analog signals and timing that Ethernet does not provide. I suppose that you cable box could encode everything as Ethernet/IP to send it to your TV but it would take lots of processing horsepower to encode/decode. Your stereo could take

RE: why haven't ethernet connectors changed?

2012-12-21 Thread Naslund, Steve
Naslund -Original Message- From: Eric Wieling [mailto:ewiel...@nyigc.com] Sent: Friday, December 21, 2012 11:30 AM To: Naslund, Steve; nanog@nanog.org Subject: RE: why haven't ethernet connectors changed? The only thing I would change about RJ-45 is a longer tab (but make it optional

RE: Quantifying the value of customer support

2013-02-14 Thread Naslund, Steve
I would think your $ value would be calculated by a few factors. 1. How much would it cost to train and hire NOC guys that do what you do today vs. using outsourced support for those issues or going to a higher level team. 2. How much longer would SLA affecting problems take to solve without

RE: Endpoint Security and Smartphones

2013-02-19 Thread Naslund, Steve
Kind of seems to me that if I am deep enough in your mobile device to get your accelerometer data, I probably can get access to your stored data in the device. The only reason I think I would want your passcode would be to physically steal your device and then try to use it. This is one of

RE: Endpoint Security and Smartphones

2013-02-19 Thread Naslund, Steve
Ashworth [mailto:j...@baylink.com] Sent: Tuesday, February 19, 2013 10:22 AM To: Naslund, Steve Subject: Re: Endpoint Security and Smartphones - Original Message - From: Steve Naslund snasl...@medline.com Kind of seems to me that if I am deep enough in your mobile device to get your

RE: Endpoint Security and Smartphones

2013-02-19 Thread Naslund, Steve
with your phone. Problem with that is that the accuracy would have to be much better for that purpose. Steven Naslund -Original Message- From: George Herbert [mailto:george.herb...@gmail.com] Sent: Tuesday, February 19, 2013 10:47 AM To: Naslund, Steve Cc: NANOG; George Herbert Subject: Re

RE: Endpoint Security and Smartphones

2013-02-19 Thread Naslund, Steve
of these sensors on your person is a security threat. Steve -Original Message- From: Jay Ashworth [mailto:j...@baylink.com] Sent: Tuesday, February 19, 2013 10:41 AM To: Naslund, Steve Subject: Re: Endpoint Security and Smartphones - Original Message - From: Steve Naslund snasl

RE: NYT covers China cyberthreat

2013-02-21 Thread Naslund, Steve
I can't help but wonder what would happen if US Corporations simply blocked all inbound Chinese traffic. Sure it would hurt their business, but imagine what the Chinese people would do in response First thing is the Chinese government would rejoice since they don't want their citizens on our

RE: POTS Ending (Re: Operation Ghost Click)

2012-05-09 Thread Naslund, Steve
Does not matter much when few people are using home landlines and even fewer own sat phones. Steven Naslund -Original Message- From: Henry Linneweh [mailto:hrlinne...@sbcglobal.net] Sent: Wednesday, May 09, 2012 10:45 AM To: Stephen Sprunk; nanog@nanog.org Subject: Re: POTS Ending (Re:

RE: raging bulls

2012-08-08 Thread Naslund, Steve
It seems to me that all the markets have been doing this the wrong way. Would it now be more fair to use some kind of signed timestamp and process all transactions in the order that they originated? Perhaps each trade could have a signed GPS tag with the absolute time on it. It would keep

RE: raging bulls

2012-08-08 Thread Naslund, Steve
-Original Message- From: Chu, Yi [NTK] [mailto:yi@sprint.com] Sent: Wednesday, August 08, 2012 9:01 AM To: Naslund, Steve; nanog@nanog.org Subject: RE: raging bulls What prevents someone to fake an earlier timestamp? Money can bend light, sure can a few msec. yi -Original

RE: raging bulls

2012-08-08 Thread Naslund, Steve
to actually gain time on the system. Possibly but it would be a very tall order. Steve -Original Message- From: Chu, Yi [NTK] [mailto:yi@sprint.com] Sent: Wednesday, August 08, 2012 9:01 AM To: Naslund, Steve; nanog@nanog.org Subject: RE: raging bulls What prevents someone to fake

RE: raging bulls

2012-08-08 Thread Naslund, Steve
although I supposed real estate on Mt Everest could get very valuable (closer to the satellites) :) Steve -Original Message- From: Brett Frankenberger [mailto:rbf+na...@panix.com] Sent: Wednesday, August 08, 2012 9:08 AM To: Naslund, Steve Cc: nanog@nanog.org Subject: Re: raging bulls

RE: raging bulls

2012-08-08 Thread Naslund, Steve
transmission and processing of transactions to make the entire debate pointless and ensure that no one has any consistent advantage at all. Steve -Original Message- From: Naslund, Steve [mailto:snasl...@medline.com] Sent: Wednesday, August 08, 2012 9:08 AM To: nanog@nanog.org Subject: RE

RE: raging bulls

2012-08-08 Thread Naslund, Steve
[mailto:s...@snar.spb.ru] Sent: Wednesday, August 08, 2012 9:46 AM To: Naslund, Steve Cc: Alexandre Snarskii Subject: Re: raging bulls On Wed, Aug 08, 2012 at 09:08:18AM -0500, Naslund, Steve wrote: Also, we are only talking about a delay long enough to satisfy the longest circuit so you could

RE: raging bulls

2012-08-08 Thread Naslund, Steve
is not in the cards or you would not see the high cost specialized networks from Chicago to NYC. Steve -Original Message- From: joel jaeggli [mailto:joe...@bogus.com] Sent: Wednesday, August 08, 2012 9:23 AM To: Naslund, Steve Cc: nanog@nanog.org Subject: Re: raging bulls On 8/8/12 6:52 AM

RE: raging bulls

2012-08-08 Thread Naslund, Steve
It might be complicated. I am just saying it is probably not as complicated as a permanent transatlantic aerial drone network or owning your own particle accelerator. I think all the anti-replay, anti-backdating concerns have probably been solved in the various public/private key networks, if

RE: raging bulls

2012-08-08 Thread Naslund, Steve
be the network implications of this so I will curtail the general discussing of HFT. Steve -Original Message- From: John Levine [mailto:jo...@iecc.com] Sent: Wednesday, August 08, 2012 10:54 AM To: nanog@nanog.org Cc: Naslund, Steve Subject: Re: raging bulls Here is another thought. Many

RE: the topic (was: raging bulls)

2012-08-08 Thread Naslund, Steve
, Naslund, Steve wrote: We are getting a bit off the NANOG subject You think? A

RE: Comcast vs. Verizon for repair methodologies

2012-08-21 Thread Naslund, Steve
I think the issue is that the field techs wanted to get the customer up and running. Most of the outside plant stuff is done by contractors and it takes time to get them on the job. Sometimes a work around is the best they can do. How long was it like that? Steven Naslund -Original

RE: Comcast vs. Verizon for repair methodologies

2012-08-21 Thread Naslund, Steve
I can tell you that I certainly would not eat a penalty for their failure to identify a 3 month build-out delay. Steven Naslund -Original Message- From: Daniel Seagraves [mailto:dseag...@humancapitaldev.com] Sent: Tuesday, August 21, 2012 10:23 AM To: nanog@nanog.org Subject: Re:

RE: Comcast vs. Verizon for repair methodologies

2012-08-21 Thread Naslund, Steve
a network upgrade that will replace this that is not on schedule. Either way, they should be able to get an explanation together. Steven Naslund -Original Message- From: Patrick W. Gilmore [mailto:patr...@ianai.net] Sent: Tuesday, August 21, 2012 10:04 AM To: Naslund, Steve Cc: Patrick W

RE: NANOG poll: favorite cable labeler?

2012-08-22 Thread Naslund, Steve
We have had good luck with the Rhino series of labelers by Dymo. There are a lot of different label types and the cost of the labels is pretty reasonable. We bought ours through Grainger supply. There are a lot of Grainger stores around here and we can usually pick them up out of stock or we

RE: NANOG poll: favorite cable labeler?

2012-08-22 Thread Naslund, Steve
The Dymo Rhino prints small enough so that when the label wraps around the jumper the text still shows. It lets you set cable diameter so it knows how small the text needs to be to support the overlap. Steve -Original Message- From: Jensen Tyler [mailto:jty...@fiberutilities.com] Sent:

RE: Verizon's New Repair Method: Plastic Garbage Bags

2012-08-22 Thread Naslund, Steve
Most often it's about who you talk to. We had a problem with a low cable over a driveway that ATT trouble desk did nothing about for a long time. Next time we called the phone number that appears on some of their pedestals and turns out to be some kind of outside plant oriented help desk and

RE: Copyright infringement notice

2012-08-22 Thread Naslund, Steve
Now you did it Anne, prepare for the deluge of advice requests :) Seriously though, thanks for chiming in on this. Steven Naslund -Original Message- From: Owen DeLong [mailto:o...@delong.com] Sent: Wednesday, August 22, 2012 1:43 PM To: Anne P. Mitchell, Esq. Cc: nanog@nanog.org

RE: Traffic Burstiness Survey

2012-09-11 Thread Naslund, Steve
Bursty is a very relative thing. It depends on the time frame you are considering. For example, at any given instant of time a circuit is either carrying data or it isn't. The network is always either 100% in use or 100% idle if you look at it in an instantaneous fashion. There is also a

RE: Big Temporary Networks

2012-09-18 Thread Naslund, Steve
The trick is that there is no right to work if you are a guest at the hotel. You have no right to work on their property without their consent. In reality, the hotels do not want union headaches so that is the way it goes. Right to work only is in effect if an employer hires me and I do not

RE: RIRs give out unique addresses (Was: something has a /8! ...)

2012-09-20 Thread Naslund, Steve
I suppose that ARIN would say that they do not guarantee routability because they do not have operational control of Internet routers. However, Wouldn't you say that there is a very real expectation that when you request address space through ARIN or RIPE that it would be routable? I would think

RE: RIRs give out unique addresses (Was: something has a /8! ...)

2012-09-20 Thread Naslund, Steve
(Was: something has a /8! ...) On Sep 20, 2012, at 10:56 AM, Naslund, Steve snasl...@medline.com wrote: Wouldn't you say that there is a very real expectation that when you request address space through ARIN or RIPE that it would be routable? I certainly would not say that. I would say

RE: IPv4 address length technical design

2012-10-03 Thread Naslund, Steve
Remember that at the time, IP was designed to be classful so having four 8 bit bytes was real convenient to look only at the bytes in the host portion of the address. Class A meant three significant bytes, Class B had two significant bytes, and Class C had three significant bytes as far as the

RE: [j-nsp] Krt queue issues

2012-10-03 Thread Naslund, Steve
I think route retention might help in the event the table was cleared or routing process restarted but I don't that it will help with a boot because the table structures are being built as part of the system initialization. In reality, I would expect the static routes to get installed very early

RE: Service provider T1/PPP question

2013-06-28 Thread Naslund, Steve
-Original Message- From: Ricky Beam [mailto:jfb...@gmail.com] Sent: Friday, June 28, 2013 2:45 PM To: NANOG list; Mike Subject: Re: Service provider T1/PPP question On Fri, 28 Jun 2013 00:07:45 -0400, Mike mike-na...@tiedyenetworks.com wrote: I am wanting to offer a broadband over T1

RE: The US government has betrayed the Internet. We need to take it back

2013-09-06 Thread Naslund, Steve
The error in this whole conversation is that you cannot take it back as an engineer. You do not own it. You are like an architect or carpenter and are no more responsible for how it is used than the architect is responsible that the building he designed is being used as a crack house. Do

RE: The US government has betrayed the Internet. We need to take it back

2013-09-06 Thread Naslund, Steve
I am unclear on what you mean by technical choice. Are you talking about a technical solution to keep the government from seeing your traffic? That will not work for two main reasons. 1. The government has a lot more resources and motivation than the average company when it comes to

RE: Level 3 blames Internet slowdowns on Technica

2014-03-21 Thread Naslund, Steve
How do you get around the problem of natural monopolies, then? Or should we be moving to a world where, say, a dozen or more separate companies are all running fiber or coax on the poles on my street in an effort to get to my house? We already did it. The Telecommunications Act allows

RE: Level 3 blames Internet slowdowns on Technica

2014-03-21 Thread Naslund, Steve
-Original Message- From: Jim Popovitch [mailto:jim...@gmail.com] Sent: Friday, March 21, 2014 10:15 AM To: Naslund, Steve Cc: Sholes, Joshua; Larry Sheldon; nanog@nanog.org Subject: Re: Level 3 blames Internet slowdowns on Technica On Fri, Mar 21, 2014 at 10:25 AM, Naslund, Steve snasl

RE: Level 3 blames Internet slowdowns on Technica

2014-03-21 Thread Naslund, Steve
that right). Steven Naslund -Original Message- From: Mark Tinka [mailto:mark.ti...@seacom.mu] Sent: Friday, March 21, 2014 10:01 AM To: Naslund, Steve Subject: Re: Level 3 blames Internet slowdowns on Technica On Friday, March 21, 2014 04:46:13 PM Naslund, Steve wrote: First question to ask

RE: Level 3 blames Internet slowdowns on Technica

2014-03-21 Thread Naslund, Steve
for that price. Steven Naslund -Original Message- From: Jim Popovitch [mailto:jim...@gmail.com] Sent: Friday, March 21, 2014 11:07 AM To: Naslund, Steve Cc: Sholes, Joshua; Larry Sheldon; nanog@nanog.org Subject: Re: Level 3 blames Internet slowdowns on Technica On Fri, Mar 21, 2014 at 11:48 AM

RE: Level 3 blames Internet slowdowns on Technica

2014-03-23 Thread Naslund, Steve
We don't know because the service provider rolls that cost up along with th= e services they sell. That is my point. They are able to spread the costs= out based on the profitable services they sell. Okay. If they were not able to = sell us services I am not sure they could afford to

RE: Level 3 blames Internet slowdowns on Technica

2014-03-23 Thread Naslund, Steve
... In fact, having been a service provider I can tell you that I paid the LEC about $4 a month for a copper pair to your house to sell DSL service at around ten times that cost. I am sure the LEC was not making money at the $4 a month and I know I could not fund a build out for that

RE: Level 3 blames Internet slowdowns on Technica

2014-03-23 Thread Naslund, Steve
There may not need to be competition in the capitalist sense of the word but there needs to be some feedback loop for the consumer of a service to provide feedback on their satisfaction with it. In the case of a government provided service people vote at the polls. With a commercially

RE: misunderstanding scale

2014-03-23 Thread Naslund, Steve
I am not sure I agree with the basic premise here. NAT or Private addressing does not equal security. A globally routable address does not necessarily mean globally accessible. Any enterprise that cares a wit about network security is going to have a firewall. If you are relying on NAT to

RE: Level 3 blames Internet slowdowns on Technica

2014-03-23 Thread Naslund, Steve
[mailto:frnk...@iname.com] Sent: Sunday, March 23, 2014 10:08 PM To: Naslund, Steve Cc: nanog@nanog.org Subject: RE: Level 3 blames Internet slowdowns on Technica Not sure which rural LECs are exempt from competition. Some areas are effectively exempt from facilities-based (i.e. wireline

RE: Level 3 blames Internet slowdowns on Technica

2014-03-23 Thread Naslund, Steve
Here is the legal definition of an RLEC. http://definitions.uslegal.com/r/rural-telephone-company/ Steven Naslund Chicago IL -Original Message- From: Naslund, Steve [mailto:snasl...@medline.com] Sent: Sunday, March 23, 2014 10:16 PM To: Frank Bulk Cc: nanog@nanog.org Subject: RE

RE: Level 3 blames Internet slowdowns on Technica

2014-03-23 Thread Naslund, Steve
infrastructure without services, it might work in a major metro area but not in these areas. Steven Naslund -Original Message- From: Frank Bulk [mailto:frnk...@iname.com] Sent: Sunday, March 23, 2014 10:21 PM To: Naslund, Steve Cc: nanog@nanog.org Subject: RE: Level 3 blames Internet slowdowns

RE: arin representation

2014-03-23 Thread Naslund, Steve
Exactly right John. I think the term owned is a problem here. It seems to me that the terms would correctly be holder or who the address space was issued to or user being the end user using that space. Wouldn't all of the holders be ARIN members unless grandfathered in? Steven Naslund Chicago

RE: arin representation

2014-03-23 Thread Naslund, Steve
to make a political statement. I apologize if I gave you the impression that I disapproved of your question. Steve -Original Message- From: Randy Bush [mailto:ra...@psg.com] Sent: Sunday, March 23, 2014 10:52 PM To: Naslund, Steve Cc: John Curran; North American Network Operators' Group

RE: arin representation

2014-03-23 Thread Naslund, Steve
-Original Message- From: Randy Bush [mailto:ra...@psg.com] Sent: Sunday, March 23, 2014 11:10 PM To: Naslund, Steve Cc: North American Network Operators' Group Subject: Re: arin representation sorry steve. was not chasing down the tree. not clear what a useful measurement would be. randy

RE: arin representation

2014-03-23 Thread Naslund, Steve
He is definitely in the authoritative hands :) Steve -Original Message- From: John Curran [mailto:jcur...@arin.net] Sent: Sunday, March 23, 2014 11:16 PM To: Naslund, Steve Cc: Randy Bush; North American Network Operators' Group Subject: Re: arin representation Steve - Thanks

RE: misunderstanding scale

2014-03-24 Thread Naslund, Steve
I think it would be just as easy to claim that breaking the end-to-end model is more of a security concern that lack of NAT. Having the NAT is essentially condoning a permanent man-in-the-middle. A lot of customers do believe that NAT adds to their security. I would advise them however that

RE: misunderstanding scale

2014-03-24 Thread Naslund, Steve
If they have a stateful IPv6 firewall (which they should and which most firewall vendors support), they already have what they need to prevent their internal systems from being accessible from the outside. If you are an enterprise and you don't have a stateful firewall, you are in trouble from

RE: misunderstanding scale

2014-03-24 Thread Naslund, Steve
, March 24, 2014 12:34 PM To: Naslund, Steve Subject: Re: misunderstanding scale On 3/24/2014 12:53 PM, Naslund, Steve wrote: If they have a stateful IPv6 firewall (which they should and which most firewall vendors support), they already have what they need to prevent their internal systems from

RE: Level 3 blames Internet slowdowns on Technica

2014-03-24 Thread Naslund, Steve
That number will change depending on distance, terrain, and a lot of other factors. I have personally installed a lot of outside plant fiber and $700 can turn into $2400 the first time you find a rock or need to add a manhole somewhere. It also depends on distance between customers and their

RE: misunderstanding scale

2014-03-24 Thread Naslund, Steve
I doubt that many residential customers will be readdressing their networks except for us geeks. Most of them are going to be using CPE that grabs an address via DHCP for the WAN interface and then does an IPv6 DHCP PD with the /64 it gets from the service provider. The customer sees nothing

RE: Level 3 blames Internet slowdowns on Technica

2014-03-24 Thread Naslund, Steve
Thinking about this again, let's take Jay at his word that he can make a passing for $700-800. Unfortunately, the ISP or service provider does not pay for a passing, they pay for an entry. After all we can't let them make their own entry or we will have everyone and their brother in our

RE: IPv6 Security [Was: Re: misunderstanding scale]

2014-03-24 Thread Naslund, Steve
I can easily answer that one as a holder of v4 space at a commercial entity. The end user does not feel any compelling reason to move to ipv6 if they have enough v4 space. I can't give my employer a solid business case of why they need to make the IPv6 transition. They already hold enough v4

RE: arin representation

2014-03-24 Thread Naslund, Steve
That is correct as long as that direct allocation came from ARIN. A really large chunk of address space was allocated (especially to the government entities) way before ARIN was controlling the space. I think the large percentage of space held by non-ARIN members come from those really large

RE: misunderstanding scale

2014-03-24 Thread Naslund, Steve
Exactly right. In fact that is generous because the v6 host having a stateful firewall has a real protocol aware firewall (and often bundled IDS/IPS capability) not just a NAT to protect him. The NAT provides almost no security once a single host behind the NAT is compromised and makes an

RE: arin representation

2014-03-24 Thread Naslund, Steve
Randy, I am not sure I understand the argument here. If you think that ARIN is not representing the address space holders in proper fashion, how would we suggest correcting that? If an address holder does not become a member (which is fairly easy to do if you care enough) how would we even

How robust is the V6 to V4 infrastructure?

2014-03-24 Thread Naslund, Steve
A question came to mind with all the discussion of ipv6 vulnerabilities. I am wondering for those with a lot of real world pure IPv6 connectivity, how robust have been the V6 to V4 gateways necessary for intercommunication between native IPv6 hosts and the IPv4 world? I was thinking that

RE: Level 3 blames Internet slowdowns on Technica

2014-03-24 Thread Naslund, Steve
You are right but that is usually how it works with fiber because that last drop to the home is a pretty expensive piece that you don't usually want installed until it is needed. The LECS usually don't even light a building unless there is a service that requires it. I was trying to make the

RE: misunderstanding scale

2014-03-25 Thread Naslund, Steve
Look at it this way. If I see an attack coming from behind your NAT, I'm gonna deny all traffic coming from your NAT block until you assure me you have it fixed because I have no way of knowing which host it is coming from. Now your whole network is unreachable. If you have a

RE: misunderstanding scale

2014-03-26 Thread Naslund, Steve
If you can figure out how to store an address and a mask you can have any size entry you want. Just like a routing table. This is not insurmountable. Steven Naslund Chicago IL OTOH, a spammer with a single /64, pretty much the absolute minimum IPv6 block, has more than 18 quintillion

RE: why IPv6 isn't ready for prime time, SMTP edition

2014-03-26 Thread Naslund, Steve
Would it make it more unique; if I suggested creation of a new distributed Cryptocurrency something like 'MAILCoin' to track the memberships in the club and handle voting out of abusive mail servers: in a distributed manner, to ensure that no court could ever mandate that a certain IP

RE: Verizon Public Policy on Netflix

2014-07-11 Thread Naslund, Steve
Here we go down the rabbit hole again. This is not difficult. An Internet Service Provider is an entity that provides Internet connectivity to its customers for some consideration. If you are looking for a legal definition of an ISP you are not going to find (a satisfactory) one. The FCC

RE: Net Neutrality...

2014-07-14 Thread Naslund, Steve
Net Neutrality is really something that has me worried. I know there have to be some ground rules, but I believe that government regulation of internet interconnection and peering is a sure way to stagnate things. I have been in the business a long time and remember how peering kind of

RE: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-15 Thread Naslund, Steve
In common ISP language, peering is a connection between equals that is mutually beneficial so no money usually changes hands, peering connections are usually AS to AS without the ability to transit through to other AS (or at least some kind of policy that prevents you from using your peer for

RE: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-15 Thread Naslund, Steve
If you are a multi-homed end user and you feel that a BGP configuration for that is a big management nightmare then you probably should not be running BGP. It would take me somewhere less than 15 minutes to set this up with two carriers and unless the carrier's are at drastically different

RE: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-15 Thread Naslund, Steve
I am just guessing but you probably have not been in the service provider space. Peering in my experience has always required an ASN and BGP as a pre-requisite. That is because all service providers use BGP communities and various other mechanisms to control these connections. Sure you could

RE: Net Neutrality...

2014-07-15 Thread Naslund, Steve
Sorry to be cold about this but as high speed connectivity becomes more necessity than luxury, the market will still react. For example, I could move to the top of a mountain with no electric however most of us would not. If I was buying a home and I could not get decent high speed Internet,

RE: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-15 Thread Naslund, Steve
I can't believe that you actually believe that Brett. The reason the cost goes down as the number of IPs goes up is because these blocks are not managed address by address, they are managed as a single entity. ARIN has almost the same amount of labor and management involved whether it is a

RE: Net Neutrality...

2014-07-15 Thread Naslund, Steve
Chevy, sure they would like for you to have bought from them but they will take what they can get. Steven Naslund Steve, the key piece you're missing here is that the major broadband providers are both - near-monopolies in their access areas - content providers Not a situation where market

  1   2   3   4   >