Re: Bandwidth Savings

2017-01-11 Thread Geoffrey Keating
Keenan Singh writes: > Hi Guys > > We are an ISP in the Caribbean, and are faced with extremely high Bandwidth > costs, compared to the US, we currently use Peer App for Caching however > with most services now moving to HTTPS the cache is proving to be less and >

Re: Spitballing IoT Security

2016-10-27 Thread Geoffrey Keating
"Ronald F. Guilmette" writes: > My iPhone 3GS "goes on the Internet". > > Through no fauly of my own, it is also, apparently, destined in short order > to "go onto" a landfill, if not here, then in China or India, where a > pitiful plethora of shoeless and sad-eyed

Re: AW: Uptick in spam

2015-10-27 Thread Geoffrey Keating
Rich Kulawiec writes: > On Tue, Oct 27, 2015 at 08:09:00AM -0400, Ian Smith wrote: > > This is the part that's been bugging me. Doesn't the NANOG server > > implement SPF checking on inbound list mail? > > Don't know, but it doesn't matter: SPF has zero anti-spam value. > (I

Re: multipath tcp now in production use for linux based mobile devices

2015-08-04 Thread Geoffrey Keating
Darden, Patrick patrick.dar...@p66.com writes: So, obviously, MPTCP can cause problems with Stateful Firewalls (as in asymmetric routing, out of state packets, etc.). Cisco's take on how to deal with MPTCP is just as interesting as MPTCP itself is. ... It's not so much the statefulness of

Re: SEC webpages inaccessible due to Firefox blocking servers with weak DH ciphers

2015-07-17 Thread Geoffrey Keating
Robert Drake rdr...@direcpath.com writes: On 7/17/2015 4:26 AM, Alexander Maassen wrote: Well, this block also affects people who have old management hardware around using such ciphers that are for example no longer supported. In my case for example the old Dell DRAC's. And it seems there

Re: ARIN IPV4 Countdown

2015-07-14 Thread Geoffrey Keating
Tony Hain alh-i...@tndh.net writes: Owen DeLong wrote: I vote for a /24 lotto to get rid of the rest! That would take too long to get organized. Just suspend fees and policy requirements and give one to each of the first 400 requestors. Overall it would reduce costs related to evaluating

Re: United Airlines is Down (!) due to network connectivity problems

2015-07-08 Thread Geoffrey Keating
Jay Ashworth j...@baylink.com writes: UA, WSJ /and/ NYSE all in the same day? Once is an accident; twice is a coincidence... Three times is enemy action. Or common factors. In this case, I think it's probably enough to point out it's the first Tuesday of the fiscal year. For a 24x7

Re: HTTPS redirects to HTTP for monitoring

2015-01-18 Thread Geoffrey Keating
chris tknch...@gmail.com writes: I have been going through something very interesting recently that relates to this. We have a customer who google is flagging for abusive search behavior. Because google now forces all search traffic to be SSL, it has made attempting to track down the supposed

Re: Shaw routing issue 12 Aug 2014

2014-08-13 Thread Geoffrey Keating
Pete Lumbis alum...@gmail.com writes: Maybe related to the 512k route issue? http://www.bgpmon.net/what-caused-todays-internet-hiccup/ I've seen people reboot to recover from TCAM exception without adjusting TCAM size only to run into the issue all over again. It's a fun way to watch the

Re: Verizon Public Policy on Netflix

2014-07-11 Thread Geoffrey Keating
Miles Fidelman mfidel...@meetinghouse.net writes: Either way, if one is a customer of both, one will end up paying for the infrastructure - it's more about gorillas fighting, which bill it shows up on, who ends up pocketing more of the profits, and how many negative side-effects result. In

Re: Access hardware for small FTTP deployment

2014-05-16 Thread Geoffrey Keating
Chris hs.citi...@gmail.com writes: I'm interested to see what other people are doing for these types of small setups. Does anyone know of any other reasonably priced access switches, 32+ SFP ports, and able to withstand 60degC or higher operating temperature? An alternative you might consider

Re: Yahoo DMARC breakage

2014-04-10 Thread Geoffrey Keating
Andrew Sullivan asulli...@dyn.com writes: I think DMARC is mostly useful when used correctly. There is no BCP yet... There is, however, BCP167/RFC6377 covering DKIM and mailing lists. Some relevant sections are 4.1 and 5.3: 4.1: ... site administrators wishing to employ ADSP with a

Re: China ISPs DNS problems on Jan 22nd - any idea what happened?

2014-01-26 Thread Geoffrey Keating
Patrick van Staveren pvanstave...@mintel.com writes: This past Tuesday the 22nd I was witness to a widespread DNS poisoning problem in China, whereby a lot of DNS queries were all returning the same IP address, 65.49.2.178. Our websites became unavailable for most of our customers in China,

Re: iOS 7 update traffic

2013-09-26 Thread Geoffrey Keating
Cutler James R james.cut...@consultant.com writes: On Sep 26, 2013, at 5:22 PM, Mark Lancaster markl...@gmail.com wrote: I have heard a lot of questions and debate about whether the iOS updates download automatically: “Available updates download automatically if your device is

Re: On topic of domains

2013-07-11 Thread Geoffrey Keating
Mark Andrews ma...@isc.org writes: In message krmkg2$flc$1...@ger.gmane.org, Chris Hills writes: Whilst I am not a fan of dotless domains, as long as one uses the fully qualified domain name (e.g. http://ac./), there should not be any trouble using it in any sane software. It seems that

Re: What do people use public suffix for?

2013-04-15 Thread Geoffrey Keating
John Levine jo...@iecc.com writes: The public suffix list contains points in the DNS where (roughly speaking) names below that point are under different management from each other and from that name. It's here: http://publicsuffix.org/ The idea is that abc.foo.com and xyz.foo.com have the