Re: Third Party VoIP Over Xfinity

2024-09-11 Thread Jim Shankland via NANOG
Of course, Comcast sells its own VoIP services, which I'll bet work just fine; so they don't have a huge incentive to go out of their way to make their competitors' product work on their network. Jim Shankland On 9/11/24 2:19 PM, Tom Beecher wrote: How can such a lar

Re: Third Party VoIP Over Xfinity

2024-09-10 Thread Jim Shankland via NANOG
from (and to) that office over an encrypted tunnel to our nearby datacenter. Go figure. This was Comcast business service, with a publicly routed (i.e., not RFC 1918) /27 allocated to it. Jim Shankland On 9/10/24 2:22 PM, Mike Hammett wrote: We've just moved to tunneling anything VoIP

Re: SMTP-friendly VPS provider where I can also get a BGP feed

2023-09-26 Thread Jim Shankland via NANOG
That is extremely good and important advice! It seemed much less pertinent back when I was in my 30's, but planning for the unexpected is, or should be, a key part of all our jobs. Jim Shankland On 9/26/23 10:01 AM, Mel Beckman wrote: One thing you should consider about running a &q

Re: SMTP-friendly VPS provider where I can also get a BGP feed

2023-09-26 Thread Jim Shankland via NANOG
matter of principle there: it should be possible to have an email account without having all the emails stored by a third party. If the answer ends up being, "Oh, just use gmail, everybody else does!" ... well, so be it, I guess, but we should be clear that something got lost in that tran

Re: BKA Wiesbaden - Abteilung Cybercrime (Not sure if this is a phishing E-mail or real...)

2023-04-24 Thread Jim Shankland
For me, that's easiest to do with Linux or MacOS (terminal). But sure, if "open on a Linux machine" still means "point and click", then you're absolutely correct. Jim Shankland

Re: DoD IP Space

2021-02-11 Thread Jim Shankland
obsolete protocol" is using a normative, rather than empirical, definition of "obsolete". In the empirical sense, things are obsolete when people stop using them. Tine will tell when that happens. Jim Shankland

Re: all major US carriers received text messages overnight that appear to have been sent around Valentine's Day 2019

2019-11-08 Thread Jim Shankland
On 11/8/19 10:34 AM, Kain, Becki (.) wrote: Esp on Valentine’s day.  Of all the days that clear communication is important.  I’d be very interested in their reasoning for why these messages were not sent and held. Roses are red, Violets are blue, Hope we're still together When this reaches

Re: syn flood attacks from NL-based netblocks

2019-08-17 Thread Jim Shankland
On 8/17/19 3:16 PM, Damian Menscher wrote: On Fri, Aug 16, 2019 at 3:05 PM Jim Shankland <mailto:na...@shankland.org>> wrote: I'm seeing slow-motion (a few per second, per IP/port pair) syn flood attacks ostensibly originating from 3 NL-based IP blocks: 88.20

Re: syn flood attacks from NL-based netblocks

2019-08-16 Thread Jim Shankland
On 8/16/19 3:50 PM, Emille Blanc wrote: Have been seeing these at $DAYJOB off and on for the past week. First logged events began for on 2019-08-04, at approx 1500hrs PST. Impact for us has been negligible, but some older ASA's were having trouble with the scan volume and their configured log l

syn flood attacks from NL-based netblocks

2019-08-16 Thread Jim Shankland
Greetings, I'm seeing slow-motion (a few per second, per IP/port pair) syn flood attacks ostensibly originating from 3 NL-based IP blocks: 88.208.0.0/18 , 5.11.80.0/21, and 78.140.128.0/18 ("ostensibly" because ... syn flood, and BCP 38 not yet fully adopted). Why is this syn flood different

Re: Email security: PGP/GPG & S/MIME vulnerability drop imminent

2018-05-15 Thread Jim Shankland
On 5/15/18 2:34 AM, Rich Kulawiec wrote: On Mon, May 14, 2018 at 01:47:50PM +0530, Suresh Ramasubramanian wrote: TL;DR = Don't use HTML email [snip] That's enough right there. HTML markup in email is used exclusively by three kinds of people: (1) ignorant newbies who don't know any better (2)

Re: Are any of you starting to get AI robocalls?

2018-04-04 Thread Jim Shankland
On 4/4/18 7:44 AM, Sean Pedersen wrote: Yep. Add it to the list of IRS scams, fake arrest warrants, credit repair, free vacations, etc. The rate of calls has increased dramatically in the past year, especially with the "neighborhood scam" where they spoof their CLID to a local area code and pr

Re: Zayo zColo Xcon Pricing

2018-03-09 Thread Jim Shankland
On 3/7/18 9:00 AM, Ian Mock wrote: Everything is negotiable. NRC on a cross-connect is ridiculous. The cost to run should be made up with the amount they're charging monthly. I wouldn't pay more than $200/mo for copper. Actually, as a reflection of the provider's cost, NRC for a cross-connect m

Re: PCIe adapters supporting long distance 10GB fiber?

2017-06-20 Thread Jim Shankland
On 6/20/17 8:15 AM, Baldur Norddahl wrote: The real question here is: will my NIC support other SFP+ modules than the few options carried by the NIC vendor? For example Intel claims the Intel NICs can only accept SFP+ modules by Intel. They probably do not make optics themselves and only have fe

Re: IoT security, was Krebs on Security booted off Akamai network

2016-10-09 Thread Jim Shankland
On 10/9/16 11:30 AM, valdis.kletni...@vt.edu wrote: On Sun, 09 Oct 2016 18:05:20 -, Mel Beckman said: I don't know why it's "sub optimal" to use the cloud from an isolated network. Can you elaborate? Why should something out in the cloud have any part of the communication, other than perha

Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app

2015-12-12 Thread Jim Shankland
Also, this jumped out at me: "The problem with the recent attack is that the originating IP addresses were evenly distributed within the IPV4 universe," McAfee says. "This is virtually impossible using spoofing." Am I missing something, or is an even distribution of originating IP addresses

Re: Galaxy S6 is IPv6 on all US National Mobile carriers

2015-04-13 Thread Jim Shankland
On 4/13/15 8:17 PM, Joe Klein wrote: Was in a meeting over 4 years ago, where the people from Verizon were claiming they would be rolling out IPv6 for FIOS in the following years. Still waiting. C For those of us of a certain age, I'm wondering: what was the year when you first heard that the e

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Jim Shankland
On 1/26/15 11:33 PM, Pavel Odintsov wrote: Hello! Looks like somebody want to build Linux soft router!) Nice idea for routing 10-30 GBps. I route about 5+ Gbps in Xeon E5-2620v2 with 4 10GE cards Intel 82599 and Debian Wheezy 3.2 (but it's really terrible kernel, everyone should use modern kerne

Re: Major California Faults Ready To Rupture | IFLScience

2014-10-19 Thread Jim Shankland
On 10/19/14 2:03 AM, Eliot Lear wrote: This was my recollection as well. Many corporate PBXes failed, and as it happened, for some reason, the mobile towers functioned with excess capacity, to the point where I had a line coming out of my car. Best form of communication into and out of the regi

Re: best practice for advertising peering fabric routes

2014-01-15 Thread Jim Shankland
kidding, but still ) Jim Shankland

Re: Mikrotik Cloud Core Router and BGP real life experiences?

2013-12-27 Thread Jim Shankland
row and eat their own food surely eat better, and more cheaply, than those who buy at the supermarket; but it's not for everybody. Jim Shankland

Re: If you're on LinkedIn, and you use a smart phone...

2013-10-25 Thread Jim Shankland
l may contain very personal or sensitive information, and we will do everything we can to make sure that it is safe. I find this completely reassuring. I'd expand on that, but I have to go buy a used car now. Jim Shankland

Re: PacketShader

2010-08-23 Thread Jim Shankland
kets is the low-hanging fruit. (9K packets? That's the fruit that falls off the tree and into your basket while you're napping :-).) The more interesting limit: how many 40-byte packets per second can you shovel into this system and still have all of them come out the other end? Jim Shankland

Re: black listing of web traffic

2010-02-09 Thread Jim Shankland
t there that send out their content with the DF bit set, then drop the "fragmentation required" ICMP packets they get back on the floor.) Jim Shankland

Re: Revisiting the Aviation Safety vs. Networking discussion

2009-12-24 Thread Jim Shankland
he thought of *any* culture in which attempts to deviate "just do not occur" a little unnerving. Jim Shankland http://blog.oliver-gassner.de/archives/225-Guenter-Eich,-Traeume.html

Re: Cogent Considerations [was: Re: Cogent Haiku v2.0]

2009-01-12 Thread Jim Shankland
aside from that, they've been fine. (This is transit in San Francisco at the gigabit-plus level.) Jim Shankland

Re: Gigabit Linux Routers

2008-12-17 Thread Jim Shankland
Chris wrote: Hi All, Sorry if this is a repeat topic. I've done a fair bit of trawling but can't find anything concrete to base decisions on. I'm hoping someone can offer some advice on suitable hardware and kernel tweaks for using Linux as a router running bgpd via Quagga. We do this at the mom

Re: [Fwd:] Nvidia NICs with duplicate mac addresses

2008-09-05 Thread Jim Shankland
pontaneous, permanent change. Nvidia NICs ... as my mother said, if you can't say anything nice, don't say anything at all. So the rest is silence. Jim Shankland

Re: IP Fragmentation

2008-08-20 Thread Jim Shankland
his concludes today's presentation from the history channel. Jim Shankland

Re: ICANN opens up Pandora's Box of new TLDs

2008-06-28 Thread Jim Shankland
come as news to anyone on this list that the world of SMTP is hardly well-defined or well-regulated in practice. Like Rowlf the dog, we can't live with it, we can't live without it, but we're stuck until something better comes along: http://www.youtube.com/watch?v=1vvV9LjBsNw Jim Shankland

Re: ICANN opens up Pandora's Box of new TLDs

2008-06-27 Thread Jim Shankland
acy blocks. For what it's worth Jim Shankland

Security gain from NAT (was: Re: Cool IPv6 Stuff)

2007-06-04 Thread Jim Shankland
[EMAIL PROTECTED] writes: > On Mon, 04 Jun 2007 11:32:39 PDT, Jim Shankland said: > > *No* security gain? No protection against port scans from Bucharest? > > No protection for a machine that is used in practice only on the > > local, office LAN? Or to access a singl

Security gain from NAT (was: Re: Cool IPv6 Stuff)

2007-06-04 Thread Jim Shankland
on of ignorant, stupid, and reckless; the Linux box for some reason remained unmolested. Jim Shankland