Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-21 Thread -Hammer-
GSLB, etc.). I'm still hoping someone on this thread from Cisco or elsewhere will confirm my findings. I'll update the thread with what our direct AS folks come back with as well. -Hammer- "I was a normal American nerd" -Jack Herer On 8/21/2012 1:38 AM, Tassos Chatzithomaogl

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
That's good to know. Seriously. I can point that out to the Cisco guys... :) -Hammer- "I was a normal American nerd" -Jack Herer On 8/20/2012 3:10 PM, sth...@nethelp.no wrote: Yeah I see the disconnect. I'm assuming that what I see is what I get. Which means I'm goi

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
is no way I'm jumping in with both feet. I'll have to stick with HSRP and LL addressing. If anyone knows different please let me know. Thanks PS: Yes, I still have some ISL. :( On legacy environments only though. I promise. Nothing new in years... -Hammer- "I was a normal Amer

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
... Why is parity such a difficult task? -Hammer- "I was a normal American nerd" -Jack Herer On 8/20/2012 9:51 AM, Nick Hilliard wrote: On 20/08/2012 15:41, -Hammer- wrote: Correction. Still looking for something IPv6 specific. Last time I looked, the support looked like this: X

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
Correction. Still looking for something IPv6 specific. -Hammer- "I was a normal American nerd" -Jack Herer On 8/20/2012 9:39 AM, -Hammer- wrote: And two seconds after I hit send I find an updated article http://www.cisco.com/en/US/docs/ios-xml/ios/ipapp_fhrp/configuration

Re: HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
And two seconds after I hit send I find an updated article http://www.cisco.com/en/US/docs/ios-xml/ios/ipapp_fhrp/configuration/xe-3s/fhp-vrrp.html If you have more information I still welcome it. I'm going to go sit in the corner now... -Hammer- "I was a normal American n

HSRP vs VRRP for IPv6 on IOS-XE - rekindling an old flame

2012-08-20 Thread -Hammer-
ress to VRRP and I can't find a single doc on the subject now that I look. Were these folks mistaken or am I missing something? Any help would be appreciated. -- -Hammer- "I was a normal American nerd" -Jack Herer

Re: using "reserved" IPv6 space

2012-07-17 Thread -Hammer-
There's are routing and switching people and there are security people. And they look at things different. That, IMHO, is the root of the emotion on this thread. No one is actually wrong except me for stirring the pot as the OP. :) -Hammer- "I was a normal American nerd" -Jack

Re: using "reserved" IPv6 space

2012-07-17 Thread -Hammer-
-Hammer- "I was a normal American nerd" -Jack Herer On 7/16/2012 11:18 PM, Jimmy Hess wrote: On 7/16/12, -Hammer- wrote: hurdles. Example? HSRP IPv6 global addressing on Cisco ASR platform. If HSRP is a legacy proprietary protocol; try VRRP. Stateless autoconfig

Re: NAT66 was Re: using "reserved" IPv6 space

2012-07-17 Thread -Hammer-
I have almost one hundred FWs. Some physical. Some virtual. Various vendors. Your point is spot on. -Hammer- "I was a normal American nerd" -Jack Herer On 7/16/2012 8:55 PM, Lee wrote: On 7/16/12, Owen DeLong wrote: Why would you want NAT66? ICK!!! One of the best benefits of IPv

Re: using "reserved" IPv6 space

2012-07-16 Thread -Hammer-
I agree. Most are naive. Not all. -Hammer- "I was a normal American nerd" -Jack Herer On 7/16/2012 11:34 AM, valdis.kletni...@vt.edu wrote: On Mon, 16 Jul 2012 11:09:28 -0500, -Hammer- said: ---That is clearly a matter of opinion. NAT64 and NAT66 wouldn't be there if there

Re: using "reserved" IPv6 space

2012-07-16 Thread -Hammer-
Inline - -Hammer- "I was a normal American nerd" -Jack Herer 1) (This one is currently a personal issue) I am still building up a true IPv6 skillset. Yes, I understand it for the most part but now is the time to apply it. Frankly, IMHO, the best way to build up a truly useful

Re: using "reserved" IPv6 space

2012-07-16 Thread -Hammer-
me time trying to work our design schemas for our ARIN space with the WAN design team. What I'm trying to say is that Roberts comments are spot on. It is a very different way of thinking on a small scale and a large scale and you can't take your IPv4 logic and apply it. I've trie

Re: using "reserved" IPv6 space

2012-07-14 Thread -Hammer-
Thank you all. It's not the protocol that hurts. It's rethinking the culture/philosophy around it. -Hammer- On 7/14/12 3:20 PM, "Owen DeLong" wrote: >They're a bad thing in IPv6. > >The only place for security through obscurity IMHO is a small round &g

Re: using "reserved" IPv6 space

2012-07-14 Thread -Hammer-
Guys, The whole purpose of this is that they do NOT need to be global. Security thru obscurity. It actually has a place in some worlds. Does that make sense? Or are such V4-centric approaches a bad thing in v6? On 7/13/12 8:41 PM, "Brandon Ross" wrote: >On Fri, 13 Jul 2012, Owen DeLong wrote

Re: using "reserved" IPv6 space

2012-07-13 Thread -Hammer-
rategy for Internal services. I'm finally getting to the point where I'm looking past the vastness of the numbers and just focusing on subnets and masks and subnetting and whatnot. -Hammer- "I was a normal American nerd" -Jack Herer On 7/13/2012 11:11 AM, Tom Cooper wrote: On

Re: using "reserved" IPv6 space

2012-07-13 Thread -Hammer-
I think they would. I'm just a bit too new to this. Thanks. -Hammer- "I was a normal American nerd" -Jack Herer On 7/13/2012 10:05 AM, TJ wrote: On Fri, Jul 13, 2012 at 10:38 AM, -Hammer- <mailto:bhmc...@gmail.com>> wrote: OK. I'm pretty sure I'm gon

Re: using "reserved" IPv6 space

2012-07-13 Thread -Hammer-
Leo/Jeroen, Thank you both. That is the simple answer that I wasn't thinking of. I'm not as IPv6 savvy as I need to be (yet) so I haven't put all the pieces together when trying to look at the bigger picture. Thanks again. -Hammer- "I was a normal American nerd&quo

using "reserved" IPv6 space

2012-07-13 Thread -Hammer-
v6 specific reasons that I may not be forecasting that would make it worse doing this than in an IPv4 scenario. I know, not apples to apples but for this question they are close enough. Unless there is something IPv6 specific that is influencing this -- -Hammer- "I was a normal American nerd" -Jack Herer

Re: LinkedIn password database compromised

2012-06-07 Thread -Hammer-
Thank you for educating without insulting. Always professional Owen. It's appreciated. -Hammer- "I was a normal American nerd" -Jack Herer On 6/7/2012 3:18 PM, Owen DeLong wrote: A proper CA does not have your business or personal keys, they merely sign them and attest t

Re: LinkedIn password database compromised

2012-06-07 Thread -Hammer-
I gotta agree with Aaron here. What would be my motivation to "trust" an open and public infrastructure? With my business or personal keys? -Hammer- "I was a normal American nerd" -Jack Herer On 6/7/2012 2:37 PM, Aaron C. de Bruyn wrote: On Thu, Jun 7, 2012 at 12:24 PM

Re: ISPs and full packet inspection

2012-05-24 Thread -Hammer-
Very nice Patrick -Hammer- "I was a normal American nerd" -Jack Herer On 5/24/2012 8:19 AM, Patrick Darden wrote: 0. General Reference http://en.wikipedia.org/wiki/Deep_packet_inspection#DPI_at_network.2FInternet_service_providers e.g. Lawful Intercept 1. network neutrality

Re: ISPs and full packet inspection

2012-05-24 Thread -Hammer-
And if your legal can't figure it out that is exactly what "outside counsel" is for. -Hammer- "I was a normal American nerd" -Jack Herer On 5/24/2012 8:22 AM, -Hammer- wrote: The problem is that it is strictly a jurisdictional question. I'm not trying to thr

Re: ISPs and full packet inspection

2012-05-24 Thread -Hammer-
are being prodded by technology my advice would be to direct them to legal. You should be picking up a pattern here -Hammer- "I was a normal American nerd" -Jack Herer On 5/24/2012 8:13 AM, not common wrote: Thanks guys, I am looking for stuff to bring to my legal team (which i

Re: ISPs and full packet inspection

2012-05-24 Thread -Hammer-
You should be discussing this with inside counsel. Not NANOG. -Hammer- "I was a normal American nerd" -Jack Herer On 5/24/2012 7:50 AM, not common wrote: Hello, I am looking for some guidance on full packet inspection at the ISP level. Is there any regulations that prohibit

Re: Squeezing IPs out of ARIN

2012-04-25 Thread -Hammer-
Killing me softly Owen -Hammer- "I was a normal American nerd" -Jack Herer On 4/25/2012 1:15 PM, Owen DeLong wrote: Nope... You paid for and received registration services for a block of IP Addresses. Anyone can use those integers for many purposes, but, only you are regi

Re: Squeezing IPs out of ARIN

2012-04-25 Thread -Hammer-
Sorry everyone. Bad choice of words. I simply meant they have their money and we have our allocation. Stand down. Move along. Nothing to see here. -Hammer- "I was a normal American nerd" -Jack Herer On 4/25/2012 11:55 AM, Owen DeLong wrote: No, you didn't. You may hav

Re: Squeezing IPs out of ARIN

2012-04-25 Thread -Hammer-
purchase/lease/rent/titlepawn/etc. We paid for and got a block of IPs. -Hammer- "I was a normal American nerd" -Jack Herer On 4/25/2012 11:13 AM, valdis.kletni...@vt.edu wrote: On Wed, 25 Apr 2012 10:54:39 -0500, -Hammer- said: I can say that I recently completed the purchase

Re: Squeezing IPs out of ARIN

2012-04-25 Thread -Hammer-
t NDAs and whatnot so I could share more detailed information with them. -Hammer- "I was a normal American nerd" -Jack Herer On 4/25/2012 10:34 AM, Owen DeLong wrote: There is not a new policy added on to prevent hoarding. What is required is what has been required for severa

Re: Looking for some diversity in Alabama that does not involve ATT Fiber

2012-03-29 Thread -Hammer-
Joe, We have a wide variety of both Internet and MPLS (WAN) circuits in Alabama from AT&T and ITC/Deltacom (Now Earthlink Business). They both have a significant footprint in Alabama. Check with Earthlink Business. -Hammer- "I was a normal American nerd" -Jack Herer On 3

Re: root zone stats

2012-03-12 Thread -Hammer-
Shouldn't "eh" be Canada and not Western Sahara? -Hammer- "I was a normal American nerd" -Jack Herer On 3/12/2012 3:10 PM, Marco Davids (Prive) wrote: On Mon, 12 Mar 2012, Marco Davids (Prive) wrote: Some nice info here, too: http://bgp.he.net/report/dns .cw se

Re: Whitelist of update servers

2012-03-12 Thread -Hammer-
Can you be a little more specific? Otherwise I think your answer would be "The Internet" -Hammer- "I was a normal American nerd" -Jack Herer On 3/12/2012 3:05 PM, Maverick wrote: Is there a whitelist that applications have to talk to in order to update themselves?

Re: Clueful road runner contact?

2012-03-05 Thread -Hammer-
Wile E Coyote knows all about him. Sorry, couldn't resist. -Hammer- "I was a normal American nerd" -Jack Herer On 3/5/2012 3:26 PM, goe...@anime.net wrote: Anyone have a clueful road runner contact? -Dan

Re: Cisco CAT6500 IOS Simulator

2012-02-23 Thread -Hammer-
I'm sure that virtualizing the sup would be possible. But having to come up with all the line cards would be a nightmare. I'd love for someone Internal to tell me I'm wrong but until we can get a 3560 or a 3750X on Dynamips I wouldn't push for a 6500 or a Nexus. -Hamm

Re: Cisco CAT6500 IOS Simulator

2012-02-22 Thread -Hammer-
NO. There is no method. Go to Ebay and buy one. Sorry. Or if you are a big enough customer you can ask Cisco to mock up your solution in one of their labs. -Hammer- "I was a normal American nerd" -Jack Herer On 2/22/2012 9:48 AM, Hank Nussbacher wrote: On Wed, 22 Feb 20

Re: WW: Colo Vending Machine

2012-02-21 Thread -Hammer-
Can someone give me a link or part number on the Raritan site? I see LCD consoles but they are the generic slide out versions. Looking for the netbook concept referenced below -Hammer- "I was a normal American nerd" -Jack Herer On 2/21/2012 3:51 AM, Owen DeLong wrote: +1 f

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
I couldn't argue with any of that. Again, there are exceptions on either side. -Hammer- "I was a normal American nerd" -Jack Herer On 2/17/2012 2:40 PM, Ray Soucy wrote: Maybe ;-) I don't think it's an age thing, though. The number of people who have a real in

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Still buzzing over that cheap auto insurance eh? :) Wait till people stop carding you. -Hammer- "I was a normal American nerd" -Jack Herer On 2/17/2012 1:42 PM, Ray Soucy wrote: As someone who was born in 1984 I respectfully disagree. ;-) On Fri, Feb 17, 2012 at 9:52 A

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Well put and great example Owen. -Hammer- "I was a normal American nerd" -Jack Herer On 2/17/2012 12:59 PM, Owen DeLong wrote: This reminds me of what I think is the biggest root misconception of the 20th and 21st centuries: Rapid step-by-step training can replace conceptual ed

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
name they will trust you)(I run Android): telnet 1.2.3.4 1433 What? It answered? So the SQL service is running? Then it ain't the network dude So many times people don't pick up on that. But when they do, it's like a light bulb went off and they see the world differently. Li

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
If you do, please share it. Thank you. -Hammer- "I was a normal American nerd" -Jack Herer On 2/17/2012 9:36 AM, Jared Mauch wrote: On Feb 17, 2012, at 9:29 AM, -Hammer- wrote: This list is awesome. Is anyone consolidating it? I'm still catching up on the thread I

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Press book. They have a unique understanding of the layers. I had that understanding in my 20s. The technology is so complicated these days that many folks miss those fundamentals and go right into VSS on the 6500s or MPLS over Juniper. In the end, it all comes in time. -Hammer- "I was a

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Well said. An American tragedy. -Hammer- "I was a normal American nerd" -Jack Herer On 2/17/2012 9:01 AM, Brandt, Ralph wrote: Hammer, you are at least 75% right. You will get flamed and in most cases, the 35 year age is close to right. But then in Programming where I spent mos

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
Let me simplify that. If you are over 35 you know how to troubleshoot. Yes, I'm going to get flamed. Yes, there are exceptions in both directions. -Hammer- "I was a normal American nerd" -Jack Herer On 2/17/2012 8:29 AM, Leo Bicknell wrote: In a message written on Thu, Feb

Re: Common operational misconceptions

2012-02-17 Thread -Hammer-
This list is awesome. Is anyone consolidating it? I'm still catching up on the thread.... -Hammer- "I was a normal American nerd" -Jack Herer On 2/17/2012 1:05 AM, Carsten Bormann wrote: On Feb 17, 2012, at 07:50, Paul Graydon wrote: what OSI means Yet another commo

Re: Common operational misconceptions

2012-02-15 Thread -Hammer-
y people from Area 51 can operate. They don't understand "header manipulation" vs "payload". -Hammer- "I was a normal American nerd" -Jack Herer On 2/15/2012 3:52 PM, Dan White wrote: Packet loss at hop X in traceroute/mtr does not necessarily point to a problem at hop X.

Re: Common operational misconceptions

2012-02-15 Thread -Hammer-
Switching VS Bridging Collision Domain VS Broadcast Domain L2 in general is the layer that the new folks often misunderstand. I once had someone ask me what a hub was. That pretty much told me how old I was -Hammer- "I was a normal American nerd" -Jack Herer On 2/15/20

Re: Dear RIPE: Please don't encourage phishing

2012-02-10 Thread -Hammer-
e getting hijacked. -Hammer- "I was a normal American nerd" -Jack Herer On 2/10/2012 11:51 AM, valdis.kletni...@vt.edu wrote: On Fri, 10 Feb 2012 09:37:01 PST, Leo Bicknell said: We know how to sign and encrypt web sites. We know how to sign and encrypt e-mail. We even know

Re: IPv6 dual stacking and route tables

2012-02-03 Thread -Hammer-
OK. Looking forward to getting the lab up. Since I can handle the volume I'll take both tables. At least in the lab. Looking forward to doing some experiments with DNS just to see what all the fuss is about. Looks like I'll need to order a Mac for the lab. No harm there. :) -Hammer-

Re: IPv6 dual stacking and route tables

2012-02-03 Thread -Hammer-
y to myself why I'm doing it. A lot of kinks to work out this year. -Hammer- "I was a normal American nerd" -Jack Herer On 2/3/2012 2:28 PM, Jeroen Massar wrote: On 2012-02-03 21:10 , -Hammer- wrote: So, we are preparing to add IPv6 to our multi-homed (separate routers and

IPv6 dual stacking and route tables

2012-02-03 Thread -Hammer-
ould be for or against. Again, I'm an end customer. Not a carrier. So my concern is (A) my Internet facing applications and (B) my users who eventually will surf IPv6. Any guidance would be appreciated. Thanks. -Hammer- "I was a normal American nerd" -Jack Herer

Re: Console Server Recommendation

2012-01-30 Thread -Hammer-
Avocent Cyclades ACS. Enterprise class. http://www.avocent.com/Products/Category/Serial_Appliances.aspx -Hammer- "I was a normal American nerd" -Jack Herer On 1/30/2012 10:08 AM, Ray Soucy wrote: What are people using for console servers these days? We've historically used

Re: XBOX 720: possible digital download mass service.

2012-01-27 Thread -Hammer-
Now we are venturing OT but I thought the format was proprietary but you still had to get the content on the memory via the glorious Internet? Are you saying I can go to Gamestop and buy a stick with whatever game I'm looking for? Is that the plan? -Hammer- "I was a normal Ame

Re: XBOX 720: possible digital download mass service.

2012-01-27 Thread -Hammer-
Here's your baseline: Sony Vita. They already tossed the UMD out with the PSP-GO and that failed miserably. Now they are trying again to go to digital only with the Vita. It's not the scale of PS3 or XBOX360 but it may be a good way to gauge the potential success of the concept. -H

Re: US DOJ victim letter

2012-01-20 Thread -Hammer-
On a less serious note, did anyone notice the numbers on the fbi.gov link? I'm pretty sure they are implying those are IP addresses. 123.456.789 and 987.654.321. Must be the same folks that do the Nexus documentation for Cisco. -Hammer- "I was a normal American nerd" -Jack H

Re: VPC=S/MLT?

2012-01-18 Thread -Hammer-
Nice link. Thanks Joshua. -Hammer- "I was a normal American nerd" -Jack Herer On 1/18/2012 11:57 AM, joshua sahala wrote: vpc has a long list of unclear and/or seemingly contradictory caveats (spread across multiple cisco docs/webpages). when it doesn't work (as expec

Re: VPC=S/MLT?

2012-01-18 Thread -Hammer-
Found them all on the same page. Not exactly what I was looking for but it's worth sharing. http://www.cisco.com/en/US/products/ps9670/products_implementation_design_guides_list.html -Hammer- "I was a normal American nerd" -Jack Herer On 1/14/2012 7:10 PM, Charles Spurgeon

Re: VPC=S/MLT?

2012-01-17 Thread -Hammer-
Thanks Charles. It's a start. -Hammer- "I was a normal American nerd" -Jack Herer On 1/14/2012 7:10 PM, Charles Spurgeon wrote: On Fri, Jan 13, 2012 at 03:05:45PM -0600, -Hammer- wrote: The first link references "chapter 3". I found chapter 5 as well but I

Re: VPC=S/MLT?

2012-01-13 Thread -Hammer-
Charles, The first link references "chapter 3". I found chapter 5 as well but I can't find the full index. Do you have that link by any chance? -Hammer- "I was a normal American nerd" -Jack Herer On 1/13/2012 2:10 PM, Charles Spurgeon wrote: On Fri, Jan 13,

Re: VPC=S/MLT?

2012-01-13 Thread -Hammer-
Thanks Charles. Good stuff. -Hammer- "I was a normal American nerd" -Jack Herer On 1/13/2012 2:10 PM, Charles Spurgeon wrote: On Fri, Jan 13, 2012 at 01:38:26PM -0600, -Hammer- wrote: Wow. A fellow greybeard. OK. That's what I needed to know. I'm trying to understand

Re: VPC=S/MLT?

2012-01-13 Thread -Hammer-
ars) and PIM tweaks. If anyone has some really deep docs on VPC I'd appreciate the links. Thanks. -Hammer- "I was a normal American nerd" -Jack Herer On 1/13/2012 1:31 PM, Joel jaeggli wrote: On 1/13/12 11:19 , -Hammer- wrote: OK, So I'm doing a lot of reading lately on

VPC=S/MLT?

2012-01-13 Thread -Hammer-
there something fancy here that I'm missing in the docs or am I wrong in equating the two? Isn't VPC just S/MLT? It's just that Cisco has shown up 8 years late and is trying to hype it up to compensate? -- -Hammer- "I was a normal American nerd" -Jack Herer

Re: So... my colo was just bought.

2012-01-10 Thread -Hammer-
Jay, Do you know if they'll be keeping/maintaining your colo? Or is it too early for that kind of information? -Hammer- "I was a normal American nerd" -Jack Herer On 1/10/2012 9:58 AM, Jay Ashworth wrote: By Knology. Should I be scared? My experiences with Knology h

Re: Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
d by Cisco. I don't see how it can hurt Cisco to have people wanting to run their stuff for learning/training/validation purposes in a virtual environment. But that is a whole different thread. -Hammer- "I was a normal American nerd" -Jack Herer On 12/20/2011 12:31 PM, Tim S

Re: Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
Doesn't "Titanium" achieve this for you? I know. It's Internal. But it simulates the 7k. Or am I getting it backwards? My point is that if Cisco already simulates it Internally it's only a matter of time before someone ports something -Hammer- "I was a nor

Re: Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
to find a good way to emulate the [5,7]K anytime soon. Thank you all for your comments. -Hammer- "I was a normal American nerd" -Jack Herer On 12/20/2011 12:03 PM, Tim Stevenson wrote: You couldn't use Titanium to judge/discuss the nexus family as a whole either. Aside from 1

Re: Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
Bah. Look like I need more of an education on Nexus in general. Thanks for the easy pointer. -Hammer- "I was a normal American nerd" -Jack Herer On 12/20/2011 11:02 AM, Nick Hilliard wrote: On 20/12/2011 13:55, -Hammer- wrote: I know we can't throw NX code on Dynamips

Re: software wanted

2011-12-20 Thread -Hammer-
So you want a dynamic real time network discovery / topology mapping? I think Whatsup gold tried this years ago and it could even export to Visio. But not sure lately. -Hammer- "I was a normal American nerd" -Jack Herer On 12/20/2011 08:37 AM, Gregory Edigarov wrote: On Tue, 2

Nexus emulation? Anyone?

2011-12-20 Thread -Hammer-
I.O.U. but Dynamips or something similar? If the software is out there I have the hardware to support it. Based on some cheap googling I'm thinking the answer will be no. Although I did find Greg Ferros public outcry for network emulators from last year.... -- -Hammer- "I was a norma

Re: BGP and Firewalls...

2011-12-08 Thread -Hammer-
the phrase incorrectly. And our wonderful federal auditors expect it and call it the same thing. -Hammer- "I was a normal American nerd" -Jack Herer On 12/07/2011 09:43 PM, Dobbins, Roland wrote: On Dec 8, 2011, at 1:36 AM, Leo Bicknell wrote: I don't think you're

Re: Internet Edge and Defense in Depth

2011-12-06 Thread -Hammer-
I personally have not seen it done in large environments. Hardware isn't there yet. I've seen it done in small business environments. Not a fan of the idea. -Hammer- "I was a normal American nerd" -Jack Herer On 12/06/2011 03:16 PM, Holmes,David A wrote: Some

Re: Recent DNS attacks from China?

2011-11-30 Thread -Hammer-
Just offering it up. It's not a 0day or anything but it is recently published. I am not receiving the DoS so I haven't had a chance to observe the traffic. -Hammer- "I was a normal American nerd" -Jack Herer On 11/30/2011 11:40 AM, David Conrad wrote: On Nov 30, 2011,

Re: Recent DNS attacks from China?

2011-11-30 Thread -Hammer-
There was a new BIND vulnerability announced... http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4313 -Hammer- "I was a normal American nerd" -Jack Herer On 11/30/2011 10:59 AM, rob.vercoute...@kpn.com wrote: Hello Leland, Yes we do see the same behavior! regards, Rob Vercouteren

Re: First real-world SCADA attack in US

2011-11-21 Thread -Hammer-
LOL. I see what you did there. -Hammer- "I was a normal American nerd" -Jack Herer On 11/21/2011 01:17 PM, Arturo Servin wrote: I wonder if they are using private IP addresses. -as On 21 Nov 2011, at 13:32, Jay Ashworth wrote: On an Illinois water util

Re: Arguing against using public IP space

2011-11-16 Thread -Hammer-
Well argued Owen. I can see both sides. -Hammer- "I was a normal American nerd" -Jack Herer On 11/16/2011 02:44 PM, Owen DeLong wrote: On Nov 16, 2011, at 9:13 AM, -Hammer- wrote: "NAT neither provides nor contributes to security. NAT detracts from security by destroyi

Re: Arguing against using public IP space

2011-11-16 Thread -Hammer-
decade. They have stood up in court and been used against bad guys w/o question. While I agree that this is an extra layer of complexity, the focus is to make in manageable. I'm not saying you are flat out wrong Owen. I am saying that it's all a matter of your viewpoint. -Hammer-

Re: Arguing against using public IP space

2011-11-15 Thread -Hammer-
I see your side Cameron. -Hammer- "I was a normal American nerd" -Jack Herer On 11/15/2011 09:20 AM, Cameron Byrne wrote: On Nov 15, 2011 7:09 AM, "-Hammer-" <mailto:bhmc...@gmail.com>> wrote: > > Guys, >Everyone is complaining about whether a

Re: Ok; let's have the "Does DNAT contribute to Security" argument one more time...

2011-11-15 Thread -Hammer-
#x27;t think this complicates our design to much and definitely keeps us in check from human errors. -Hammer- "I was a normal American nerd" -Jack Herer On 11/15/2011 09:00 AM, Owen DeLong wrote: On the other hand, since a firewall's job is to stop packets you don't wan

Re: Arguing against using public IP space

2011-11-15 Thread -Hammer-
t purpose. They filter garbage. You focus your IDS/IPS on what the FW is allowing. It's more than a screen door. But yes, it's LESS than a true vault door. It's all about mitigating the risk. You'll never be 100% full proof. -Hammer- "I was a normal American nerd" -

Re: Ok; let's have the "Does DNAT contribute to Security" argument one more time...

2011-11-14 Thread -Hammer-
our FW vendors about various 6to6 and 4to6/6to4 options and we may consider it but given the push in the IPv6 community for native addressing I really am hesitant to add NAT functionality given that no one really knows what the IPv6 future holds. -Hammer- "I was a normal American nerd&

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
the customer in the future? When millions of dollars are at stake? You don't have to like it. But you should be a little more objective. I am not speaking of specific cases I'm involved in. I just googled a few things and found some results -Hammer- "I was a normal Ame

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
y just because it isn't widely published. Again, I'll try and leave this thread alone. -Hammer- "I was a normal American nerd" -Jack Herer On 11/10/2011 12:24 PM, valdis.kletni...@vt.edu wrote: On Thu, 10 Nov 2011 12:12:21 CST, -Hammer- said: WOW. You really are naive..

Re: Firewalls - Ease of Litigation and Subrogation

2011-11-10 Thread -Hammer-
You guys are hilarious. OK. I give up. It never happens. I'll leave this thread alone. -Hammer- "I was a normal American nerd" -Jack Herer On 11/10/2011 12:19 PM, Jay Ashworth wrote: - Original Message - From: "Richard Kulawiec" Right. I kn

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
WOW. You really are naive -Hammer- "I was a normal American nerd" -Jack Herer On 11/10/2011 12:12 PM, Richard Kulawiec wrote: On Thu, Nov 10, 2011 at 09:39:29AM -0600, -Hammer- wrote: OK. Right off the bat you know I can't and won't. Right. I know you

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
ve it. But it does happen and it is out there. I was just pointing it out. Take it for what you want but arguing it is pointless. It's out there for some of us. -Hammer- "I was a normal American nerd" -Jack Herer On 11/10/2011 10:04 AM, Peter Kristolaitis wrote: Your hypotheti

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
e way or another) us for our losses. It's a big ugly world full of lots of lawyers. -Hammer- "I was a normal American nerd" -Jack Herer On 11/10/2011 09:14 AM, Richard Kulawiec wrote: On Thu, Nov 10, 2011 at 08:52:22AM -0600, -Hammer- wrote: The other high cost of "free&

Re: Firewalls - Ease of Use and Maintenance?

2011-11-10 Thread -Hammer-
at risk. You have to consider that. Or... Some of us do. -Hammer- "I was a normal American nerd" -Jack Herer On 11/10/2011 07:36 AM, Jimmy Hess wrote: On Wed, Nov 9, 2011 at 2:44 PM, Nick Hilliard wrote: On 09/11/2011 19:07, C. Jon Larsen wrote: As I said, it's not a pf probl

Re: Firewalls - Ease of Use and Maintenance?

2011-11-09 Thread -Hammer-
#x27;s function. They all do it well. -Hammer- "I was a normal American nerd" -Jack Herer On 11/09/2011 08:52 AM, -Hammer- wrote: I think that firewall/censorship is all semantics. The real question is the scale of the environment and the culture of your shop and areas of owners

Re: Firewalls - Ease of Use and Maintenance?

2011-11-09 Thread -Hammer-
ave money? Consolidate functions? Confident of the capabilities of the product? Fortinet. And the list goes on and on and on -Hammer- "I was a normal American nerd" -Jack Herer On 11/09/2011 08:00 AM, Joe Greco wrote: On Wed, Nov 09, 2011 at 03:32:45PM +0300, Alex Nderitu wr

Re: Firewalls - Ease of Use and Maintenance?

2011-11-08 Thread -Hammer-
You've worked with all the big dogs. What are you looking for? Alternative options? -Hammer- "I was a normal American nerd" -Jack Herer On 11/08/2011 05:06 PM, Jones, Barry wrote: Hello all. I am potentially looking at firewall products and wanted suggestions as to the ea

Re: TATA problems?

2011-11-07 Thread -Hammer-
bes which release vulnerabilities are fixed as per our End of Engineering and End of Life support policies. 31. 32. Workarounds 33. No known workaround exists for this issue. -Hammer- "I was a normal American nerd" -Jack Herer On 11/07/2011 04:09 PM, Leigh Porter wrote: Any thoug

Re: real data [Re: General Internet Instability]

2011-11-07 Thread -Hammer-
Jared, This is good stuff and I'm understanding how you interpret the data. So this confirms what we are seeing. How do we take this towards a root cause? Mash it with the Juniper threads and see where it goes? -Hammer- "I was a normal American nerd" -Jack Herer On 11/0

Re: General Internet Instability

2011-11-07 Thread -Hammer-
ntire month of November reflects "instability" where I see transitions from 600k to 1M between updates. Yet we didn't experience the same negative customer experience for those. So how do you see the difference with todays events? Digging into files now. -Hammer- "I was a no

Re: General Internet Instability

2011-11-07 Thread -Hammer-
So the file size was 30% higher implies that the number of updates is larger and therefore there is instability? I see the logic but if you scroll thru that page (the whole month of November) there are tons of >1M files. Trying to see what is different about today -Hammer- "

Re: General Internet Instability

2011-11-07 Thread -Hammer-
availability of our applications but it's not clear on the underlying reason. I'm giving cautious updates to management because even though it's obvious something is going on I don't have anything official except random email threads. Looking for more insight before misinforming

Re: Outgoing SMTP Servers

2011-10-28 Thread -Hammer-
Girls, You are all pretty. End the thread. Seriously. -Hammer- "I was a normal American nerd" -Jack Herer On 10/28/2011 01:59 PM, William Herrin wrote: On Fri, Oct 28, 2011 at 1:34 AM, Joel jaeggli wrote: Email as facility is a public good whether it constitutes a comm

Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread -Hammer-
Again. I know those stories are out there. I'm blessed with a lower profile or higher karma. One of the two. -Hammer- "I was a normal American nerd" -Jack Herer On 10/12/2011 11:53 AM, Mike Gatti wrote: I have and totally get the point ... -- Michael Gatti cell.949.7

Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread -Hammer-
en though the humans could have tested better -Hammer- "I was a normal American nerd" -Jack Herer On 10/12/2011 10:58 AM, Chris Campbell wrote: I think it raises serious questions about RIM's DR strategy if a DB corruption or switch failure or whatever can cause this much o

Re: [outages] News item: Blackberry services down worldwide, Egypt affected (not N.A.)

2011-10-12 Thread -Hammer-
solution failed? I'm not buying it either. -Hammer- "I was a normal American nerd" -Jack Herer On 10/12/2011 09:47 AM, andrew.wallace wrote: Guys the outage has moved to U.S and Canada, I think we need to look at this perhaps being sabotage. http://news.cnet.com/8301-3068

Re: Telus mail server admin

2011-10-07 Thread -Hammer-
Girls. You're both pretty. Really. Move on. -Hammer- "I was a normal American nerd" -Jack Herer On 10/07/2011 10:40 AM, Paul Graydon wrote: On 10/7/2011 5:30 AM, Joel jaeggli wrote: On 10/7/11 08:26 , Paul Graydon wrote: On 10/6/2011 8:02 PM, John Levine wrote: DISCLAIMER:

  1   2   >