Fw: new message

2015-10-26 Thread Steve Bertrand
Hey! New message, please read <http://arsios.de/given.php?6yl> Steve Bertrand

Fw: new message

2015-10-26 Thread Steve Bertrand
Hey! New message, please read <http://floridadentalanesthesia.com/steps.php?y8> Steve Bertrand

Fw: new message

2015-10-25 Thread Steve Bertrand
Hey! New message, please read <http://theartistsontheblock.com/years.php?gi4t> Steve Bertrand

RE: minimum IPv6 announcement size

2013-09-24 Thread Steve Bertrand
-Original Message- From: Owen DeLong [mailto:o...@delong.com] Sent: September-24-13 12:19 To: Randy Bush Cc: NANOG Mailing List Subject: Re: minimum IPv6 announcement size On Sep 24, 2013, at 11:00 AM, Randy Bush ra...@psg.com wrote: I am running a network that is operating

Bandwidth at Caesars Casino in NJ

2013-09-10 Thread Steve Bertrand
We're just about to light up an infrastructure within Caesars in Atlantic City, and I'm wondering who can provide possible multi-homed access in that area (kudos if you're already in the building). Although the need is imminent, we do not have our own ARIN IP space, nor are we looking to

ScopServ questions

2013-04-15 Thread Steve Bertrand
Hi all, This isn't a NANOG problem, but I'm out of my league on this and am wondering if anyone can contact me off-list or point me in a direction if they can help me resolve an expensive exploit against a branch office asterisk box. Thanks, Steve -- Steve Bertrand AMAYA | Senior Network

RE: Why do some providers require IPv6 /64 PA space to have public whois?

2012-12-09 Thread Steve Bertrand
Ok, so I'll give you that tunneling a really short bit, tunneling isn't too bad, but native is most of the time better. So sad that some companies mess up in such a way that their customers rather tunnel than use their native infra... :-( The ISPs are unfortunately behind what the tunnel

Re: Commerical Backup Solutions

2012-05-20 Thread Steve Bertrand
On 2012-05-17 16:59, Mike Lyon wrote: We used Acronis and it was a nightmare as was their off-shored support model. Never again... Wouldn't touch them with a 10 foot pole. Switched to Iron Mountain LiveVault which backs everything up over the wire. It has basic reporting functions but not

Re: Programmers with network engineering skills

2012-03-13 Thread Steve Bertrand
On 2012-03-13 16:33, Joe Greco wrote: Joe Greco wrote: The ideal world contains a mix of techniques. Yes and copying parts of relevant code of an MTA could be one. May actually be one of the few sane ones. You cannot just blindly leave it to the MTA to decide what's valid. Along that path

Canadian ops working under a U.S. TN visa

2012-02-16 Thread Steve Bertrand
I am in the last-moment phase of moving from Canada to the U.S. for a one-year contract. Tomorrow I will be crossing at the Peace Bridge at Niagara to apply for my TN visa. Could anyone here who may have gone through this process contact me off-list to answer a few simple questions? Thank

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 19:23, Steve Bertrand wrote: On 2012.02.15 15:47, John Kristoff wrote: I have a handful of common misconceptions that I'd put on a top 10 list, but I'd like to solicit from this community what it considers to be the most annoying and common operational misconceptions future

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 19:55, Nathan Eisenberg wrote: IPv6 is operational. How is this a misconception? It works fine for me... Imagine an operator who is v6 ignorant, with a home provider who implements v6 half-assed, and tries to access a v6 site that has perhaps v6-only accessible nameservers,

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 19:19, Masataka Ohta wrote: IPv6 is operational. This is an intriguing statement. Any ops/eng I know who have claimed this, actually know what they are talking about, so it is factual. I've never heard anyone claim this in a way that could be a misconception. I state further in

Re: Common operational misconceptions

2012-02-15 Thread Steve Bertrand
On 2012.02.15 22:12, Mark Andrews wrote: In message4f3c6703.4050...@gmail.com, Steve Bertrand writes: On 2012.02.15 19:55, Nathan Eisenberg wrote: IPv6 is operational. How is this a misconception? It works fine for me... Imagine an operator who is v6 ignorant, with a home provider who

Re: UDP port 80 DDoS attack

2012-02-09 Thread Steve Bertrand
On 2012.02.08 14:23, Drew Weaver wrote: Stop paying transit providers for delivering spoofed packets to the edge of your network and they will very quickly develop methods of proving that the traffic isn't spoofed, or block it altogether. =) I firmly believe in this recourse, amongst

Re: Firewalls in service provider environments

2012-02-07 Thread Steve Bertrand
On 2012.02.07 20:47, Suresh Ramasubramanian wrote: On Wed, Feb 8, 2012 at 4:04 AM, George Bonsergbon...@seven.com wrote: I typically also include traffic to/from: TCP/UDP port 0 169.254.0.0/16 192.0.2.0/24 198.51.100.0/24 203.0.113.0/24 Been wondering if I should also block 198.18.0.0/15 as

Re: UDP port 80 DDoS attack

2012-02-05 Thread Steve Bertrand
On 2012.02.05 20:37, Keegan Holley wrote: 2012/2/5 Dobbins, Rolandrdobb...@arbor.net S/RTBH - as opposed to D/RTBH - doesn't kill the patient. Again, suggest you read the preso. Source RTBH often falls victim to rapidly changing or spoofed source IPs. It also isn't as widely supported as

Re: UDP port 80 DDoS attack

2012-02-05 Thread Steve Bertrand
On 2012.02.05 22:30, Keegan Holley wrote: 2012/2/5 Steve Bertrand steve.bertr...@gmail.com On 2012.02.05 20 tel:2012.02.05%2020:37, Keegan Holley wrote: Source RTBH often falls victim to rapidly changing or spoofed source IPs. It also isn't as widely supported

Re: peering, derivatives, and big brother

2010-12-16 Thread Steve Bertrand
On 2010.12.13 16:28, Dorn Hetzel wrote: Yeah, well, sorta. sorta not so much :) LOL. Mark-to-market... facilitating the booking of revenue to make it *appear* as though a business unit has a successful product. Steve

Re: Facebook issue

2010-12-16 Thread Steve Bertrand
On 2010.12.16 16:34, andrew.wallace wrote: Anyone having issue with Facebook? Back up now from Toronto. Steve

Re: Route reflector/server appliance for access router aggregation

2010-07-13 Thread Steve Bertrand
On 2010.07.13 10:06, Jack Carrozzo wrote: On the subject of route reflection, I've run into a few people happy with Quaggo or openBGPd on intel hardware. You can throw a 1U box together with dual PSUs, a bunch of ram, and SSD/CF disks for far less than a C or J setup and won't be wasting money

Re: Mikrotik OC-3 Connection

2010-07-05 Thread Steve Bertrand
On 2010.07.05 17:26, Jonathon Exley wrote: In terms of FOSS routing platforms, I think Vyatta has a better user interface than Mikrotik. IMHO if the CLI is awkward then there a higher risk of misconfiguration. I haven't used either enough to comment about stability. ...not that I'd like to

Re: Country Level BGP Data

2010-06-28 Thread Steve Bertrand
On 2010.06.28 22:06, Bill Woodcock wrote: On Jun 28, 2010, at 5:58 PM, Paul Stewart wrote: Does anyone know of BGP statistical data based on country? If I wanted to know top 5 service providers in country XYZ based on number of BGP peers for example, is there something that can tell me this

Dividing up a small IPv4 block

2010-06-21 Thread Steve Bertrand
Hi all, I've got a local v4 peer (ie. an ISP whom I lease fibre from to feed my clients, they peer with me directly, and we're about to provide mutual transit for one another). They (hereinafter 'client') have recently received a /22 from ARIN. The client's immediate need is to re-assign a /23

Re: Todd Underwood was a little late

2010-06-18 Thread Steve Bertrand
On 2010.06.17 17:10, William Herrin wrote: On Thu, Jun 17, 2010 at 12:38 AM, Roy r.engehau...@gmail.com wrote: On 6/16/2010 7:43 PM, Jon Lewis wrote: With a larger network, multiple IP blocks, ***numerous multihomed customers***, some of which use IP's we've assigned them, it gets a little

Re: Todd Underwood was a little late

2010-06-18 Thread Steve Bertrand
On 2010.06.18 08:49, Chris Adams wrote: Once upon a time, Steve Bertrand st...@ipv6canada.com said: If all IP blocks are tied down to null, and urpf is enabled in loose mode on an interface, it will catch cases where someone is sourcing traffic to you using IPs from the unassigned space

Team Cymru BOGON feed over IPv6

2010-06-08 Thread Steve Bertrand
off and on list feedback welcome. I'd personally like to get an idea of how many people are: 1) using the new Team Cymru BOGON lists *via BGP* 2) use the new v4 list 3) use the v6 list 4) monitor the Cymru BGP session as diligently as they would a peer/provider session 5) attempted the BOGON

Re: Strange practices?

2010-06-07 Thread Steve Bertrand
On 2010.06.07 17:49, Murphy, Jay, DOH wrote: Has anyone ever heard of a multi-homed enterprise not running bgp with either of 2 providers, but instead, each provider statically routes a block to their common customer and also each originates this block in BGP?� As stated before...yes this

Re: Strange practices?

2010-06-07 Thread Steve Bertrand
On 2010.06.07 18:10, Murphy, Jay, DOH wrote: Yes, the customer has an AS number, it's just from the private AS number block, e.g. AS 65000..when the block is routed to the AS running BGP, it is tagged with that ISP's public AS number, and announced to the world in this manner. ...but the

Re: Strange practices?

2010-06-07 Thread Steve Bertrand
On 2010.06.07 17:59, Murphy, Jay, DOH wrote: So if the enterprise loses connectivity to one of these two providers, does the provider without working connectivity to the enterprise have mechanism in place to cease originating the address space? Yes, BGP updates. ...again, I'm

Re: Strange practices?

2010-06-07 Thread Steve Bertrand
On 2010.06.07 18:48, Murphy, Jay, DOH wrote: Steve, We are obviously interpreting this in different slants. Agreed ;) Definition of Transit service: for example, AS200 is said to receive transit service from, let's say AS3356, if through this connection, AS200 receives connectivity to

Re: useful bgp example

2010-05-17 Thread Steve Bertrand
On 2010.05.17 19:15, Deric Kwok wrote: Hi My company will get 2 upstream provider. We will plan 2 routers and each router to connect one provider to use bgp for redundant. Do you have any useful bgp example and website to set it up? One ``website'' I have in mind, but first, *ensure* that

Re: useful bgp example

2010-05-17 Thread Steve Bertrand
On 2010.05.17 21:24, Jared Mauch wrote: I have some examples here: http://puck.nether.net/bgp/ that may help you. Along with Jared's excellent help site, here are others that I'd *highly* recommend reading/following *anything* that these two people offer as far as BGP is concerned. I've

Re: Internap Looking Glass / Route Server

2010-05-01 Thread Steve Bertrand
On 2010.05.01 12:41, Randy Bush wrote: I'm looking for a public looking glass / route server connected to Internap - preferably in Los Angeles. Does such a thing exist? similar subject, so excuse my piggybacking i am looking for looking glass softwhere which will run against junos, ios,

Re: Surcharge for providing Internet routes?

2010-05-01 Thread Steve Bertrand
On 2010.05.01 16:43, ML wrote: Has anyone here heard of or do they themselves charge extra for providing a complete internet table to customers? ... I've never heard of it, but iow, I'd pay more if I could get my upstreams to provide the full table... Is there a market? I doubt it. Steve

Re: Surcharge for providing Internet routes?

2010-05-01 Thread Steve Bertrand
On 2010.05.01 17:42, Steve Bertrand wrote: On 2010.05.01 16:43, ML wrote: Has anyone here heard of or do they themselves charge extra for providing a complete internet table to customers? ... I've never heard of it, but iow, I'd pay more if I could get my upstreams to provide the full table

Re: Edu versus Speakeasy Speedtest

2010-04-30 Thread Steve Bertrand
On 2010.04.29 17:31, Robert Enger - NANOG wrote: 1) The capacity that a campus has into I2 or NLR is different than the BW the campus purchases from their commercial provider(s). 2) The commercial BW test sites are not optimized for speed. They do not have unlimited capacity network

Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?

2010-04-28 Thread Steve Bertrand
On 2010.04.28 00:04, Josh Hoppes wrote: I'll preface this that I'm more of an end user then a network administrator, but I do feel I have a good enough understanding of the protocols and network administration to submit my two cents. You are always welcome to do so. The issue I see with

Re: [dns-operations] Desire to migrate back to BIND

2010-04-28 Thread Steve Bertrand
On 2010.04.28 05:34, Phil Regnauld wrote: Had forgotten to answer the list... On 28/04/2010, at 07.07, Steve Bertrand st...@ipv6canada.com wrote: What I ask of the members of the community, is if you can make a recommendation on a piece of software that can bridge the gap so that my

Re: [dns-operations] Desire to migrate back to BIND

2010-04-28 Thread Steve Bertrand
On 2010.04.28 05:54, Franck Martin wrote: Webmin? Webmin has already been recommended, and I appreciate the thought. However...there's just no way that I'm going there... Steve

Re: Connectivity to an IPv6-only site

2010-04-27 Thread Steve Bertrand
On 2010.04.23 02:50, Steve Bertrand wrote: http://onlyv6.com All findings will be publicly posted. I'm currently evaluating my options to best automate some of the findings that I've got so far (I didn't ask for a common format for replies, so most will be manual). However, an interesting

Re: [Nanog] Re: IPv6 rDNS - how will it be done?

2010-04-27 Thread Steve Bertrand
On 2010.04.27 21:00, David Conrad wrote: On Apr 27, 2010, at 5:47 PM, Jason 'XenoPhage' Frisvold wrote: On Apr 27, 2010, at 8:42 PM, Mark Andrews wrote: Windows will just populate the reverse zone as needed, if you let it, using dynamic update. If you have properly deployed BCP 39 and have

Re: IPAM

2010-04-26 Thread Steve Bertrand
On 2010.04.26 12:13, Jason J. W. Williams wrote: We've been using IPplan for about 5 years pretty effectively. It could use a UI refresh but it's decent. Does not do v6. Steve

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 02:50, Steve Bertrand wrote: This is a no-brainer, because I know that everyone who reads this will visit the link. All I request is an off-list message stating if you could get there or not (it won't be possible to parse my weblogs for those who can't): http://onlyv6.com

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 03:28, Mohacsi Janos wrote: Hi, What is your method to discover who cannot connect to your webserver? No. It's not *who* but *why*. This is a personal research project. I'm trying to identify where breakage happens when trying to connect to an IPv6-only network. There are

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 03:39, Larry Sheldon wrote: On 4/23/2010 02:35, Larry Sheldon wrote: From my PC at home (Cox in Omaha) I can't even get a nameserver that knows the site. I should point out that I am really stupid about v6--I don't know if I should be able to find a nameserver or not. Has

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 03:35, Larry Sheldon wrote: From my PC at home (Cox in Omaha) I can't even get a nameserver that knows the site. Larry... let me explain why. Although you might not understand, others will, and you may remember this as something when you do use IPv6. Believe me, nobody can

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 03:28, Mohacsi Janos wrote: Hi, What is your method to discover who cannot connect to your webserver? Earlier, in haste, I mistook your What for 'why' the first time I read your question. My method to discover is very clear cut... either you can get to the site, or you

Re: Connectivity to an IPv6-only site

2010-04-23 Thread Steve Bertrand
On 2010.04.23 02:50, Steve Bertrand wrote: http://onlyv6.com ...email me with your v6 addr/AS whether you can/can't get to that site. I want to thank everyone thus far for all of the feedback. I've received at least four dozen off list replies, and expect many more after the actual North

Fwd: [c-nsp] capirca : Google Network Filtering Management

2010-04-09 Thread Steve Bertrand
Would someone from Google kindly confirm/deny this claim? I'm as patient as any other, but I'm beginning to feel for those who have yet (but are ready to) to trigger the filters... Thankfully, my 'reasonable' regex knowledge has me ready to list a heaping pile of filth into the ether, if the

Re: legacy /8

2010-04-05 Thread Steve Bertrand
On 2010.04.02 19:29, John Palmer (NANOG Acct) wrote: - Original Message - From: Majdi S. Abbas m...@latt.net To: John Palmer (NANOG Acct) nan...@adns.net Cc: NANOG list nanog@nanog.org Sent: Friday, April 02, 2010 5:52 PM Subject: Re: legacy /8 On Fri, Apr 02, 2010 at

Re: legacy /8

2010-04-05 Thread Steve Bertrand
On 2010.04.05 09:20, Steve Bertrand wrote: On 2010.04.02 19:29, John Palmer (NANOG Acct) wrote: Was looking for the allocated file on the ARIN website, but can't remember where it is. They used to have a file with one line per allocation that started like this arin|US|ipv4. Is that still

Re: Posting from freebie E-mail Accounts

2010-03-31 Thread Steve Bertrand
On Wed, 31 Mar 2010, Steve Bertrand wrote: On 2010.03.30 23:42, Andrew D Kirch wrote: I am proposing that the NANOG administration drop everything originating from commonly used webmail providers, I oppose this proposal. There are very legitimate (and legal) reasons why people may want

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:22, bmann...@vacation.karoshi.com wrote: On Tue, Mar 30, 2010 at 11:14:52PM -0400, Steve Bertrand wrote: Hi all, This is perhaps a rather silly question, but one that I'd like to have answered. I'm young in the game, and over the years I've imagined numerous job titles

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:34, Jorge Amodio wrote: Ok, let see. In several countries the use of the title engineer applies to people that achieved a certain technical degree, I'm not sure that applies uniformly but in Latin America using the engineer title without having achieved that degree is illegal.

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:47, Jorge Amodio wrote: that's right Steve, as I said before, what you do and how you do it, and in particular what do you contribute to the networking community will speak much better of yourself than any title you can imagine. Do you think that folks like Tim Berners-Lee,

Re: Finding content in your job title

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:50, Anton Kapela wrote: On Mar 30, 2010, at 11:34 PM, Jorge Amodio wrote: The title, Engineer, and its derivatives should be reserved for those individuals whose education and experience qualify them to practice in a manner that protects public safety. Strict use of the

Re: Posting from freebie E-mail Accounts

2010-03-30 Thread Steve Bertrand
On 2010.03.30 23:42, Andrew D Kirch wrote: I am proposing that the NANOG administration drop everything originating from commonly used webmail providers, I oppose this proposal. There are very legitimate (and legal) reasons why people may want to post to an operational list, using an address

Re: IPv6, multihoming, and customer allocations

2010-03-16 Thread Steve Bertrand
On 2010.03.16 17:01, Joel Jaeggli wrote: On 03/16/2010 07:38 AM, Rick Ernst wrote: Regurgitating the original e-mail for context and follow-up. General responses (some that didn't make it to the list): - There really is that much space, don't worry about it. - /48s for those that ask

Re: IPv6, multihoming, and customer allocations

2010-03-16 Thread Steve Bertrand
On 2010.03.16 21:06, Steve Bertrand wrote: On 2010.03.16 17:01, Joel Jaeggli wrote: On 03/16/2010 07:38 AM, Rick Ernst wrote: Regurgitating the original e-mail for context and follow-up. General responses (some that didn't make it to the list): - There really is that much space, don't

Re: IP4 Space

2010-03-04 Thread Steve Bertrand
On 2010.03.04 20:55, Owen DeLong wrote: Folks, I know that IPv4 is down to bread crumbs. That's why I'm ready for IPv6 and hopefully the rest of you are or will be soon. However, let's consider how much address space is saved by going from /30 to /31 on every point-to-point link in the

Re: IP4 Space

2010-03-04 Thread Steve Bertrand
On 2010.03.04 16:53, William Herrin wrote: On Thu, Mar 4, 2010 at 4:44 PM, Stan Barber s...@academ.com wrote: On Mar 4, 2010, at 1:30 PM, William Herrin wrote: Because we expect far fewer end users to multihome tomorrow than do today? I would suggest that the ratio of folks that will

Re: IP4 Space

2010-03-04 Thread Steve Bertrand
On 2010.03.04 22:26, Steve Bertrand wrote: On 2010.03.04 16:53, William Herrin wrote: On Thu, Mar 4, 2010 at 4:44 PM, Stan Barber s...@academ.com wrote: On Mar 4, 2010, at 1:30 PM, William Herrin wrote: Because we expect far fewer end users to multihome tomorrow than do today? I would

Location of upstream connections BGP templates

2010-02-17 Thread Steve Bertrand
Hey all, I've got a couple of questions that I'd like operational feedback about. . Although we're an ISP, we currently are only an access provider. We don't yet provide any transit services, but the requirement for us to do so may creep up on a very small scale shortly. Nonetheless... I'm on

Re: Location of upstream connections BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 19:38, Scott Weeks wrote: --- st...@ibctech.ca wrote: layered. My thinking is that my 'upstream' connections should be moved out of the core, and onto the edge. My reasoning for this is so that I What do other providers do? Are your transit peers connected directly to the

Re: Location of upstream connections BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 19:41, jim deleskie wrote: Border/Core/Access is great thinking when your a sales rep for a vendor that sells under power kit. No reason for it any more. Hi Jim, Unfortunately, I have a mix of EOL Cisco gear in my network, along with other random custom-built software routers,

Re: Location of upstream connections BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 20:19, Jared Mauch wrote: On Feb 17, 2010, at 7:10 PM, Steve Bertrand wrote: Hey all, I've got a couple of questions that I'd like operational feedback about. . Although we're an ISP, we currently are only an access provider. We don't yet provide any transit services

Re: Location of upstream connections BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 20:45, jim deleskie wrote: Of course all designs are limited to the budget you have to build the network :) Heh, yeah, but it's unbelievable what one can learn on an eBay diet when they put their entire heart, soul and dedication into it! Steve

Re: Location of upstream connections BGP templates

2010-02-17 Thread Steve Bertrand
On 2010.02.17 20:48, jim deleskie wrote: Absolutely. I've worked on networks where I'm was amazed on someday we held it all together, but that is truly when you learn the most. I'm very, very happy that there are people out there who can actually see that... Steve

Re: Linux Router distro's with dual stack capability

2010-02-12 Thread Steve Bertrand
Jack Carrozzo wrote: Lots of people roll FreeBSD with Quagga/pf/ipfw for dual stack. See the freebsd-isp list. Raises hand. I do, on these boxes: http://www.mikrotikrouter.net/ Steve

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Thomas Magill wrote: In efforts to further protect us against threats I am considering establishing Bogon peers to enable me to filter unallocated address space. I am just wondering if this is a worthwhile step to take and if anyone has ran into any issues or points of concern that I may want

Re: BIRD vs Quagga

2010-02-12 Thread Steve Bertrand
Fried, Jason (US - Hattiesburg) wrote: I was wondering what kind of experience the nanog userbase has had with these two packages. Quagga++. I've never tried the other. I use Quagga for OSPF, OSPFv3 and BGP (IPv4 and IPv6). With a bit of trickery, it fits in nicely with my RANCID setup, and

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Seth Mattinen wrote: On 2/12/2010 13:47, Tim Wilde wrote: On 2/12/2010 4:21 PM, Mr. James W. Laferriere wrote: I've a question for the CYMRU Team , My reasoning for posting here is to get a much wide knowledge base . Does or Is the 'Bogon Peering' Product(?) , Only at the IANA-RIR

Re: dns interceptors

2010-02-12 Thread Steve Bertrand
Jared Mauch wrote: On Feb 12, 2010, at 5:15 PM, Randy Bush wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not the first time i have been caught by this. what are other

Re: dns interceptors

2010-02-12 Thread Steve Bertrand
Jim Richardson wrote: On Fri, Feb 12, 2010 at 2:15 PM, Randy Bush ra...@psg.com wrote: i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not the first time i have been caught by this.

Re: CYMRU Bogon Peering

2010-02-12 Thread Steve Bertrand
Seth Mattinen wrote: On 2/12/2010 15:03, Steve Bertrand wrote: What time frame do you determine to be instability? The following is from a box that has ~25 neighbours. Since the box was reloaded (6w3d ago), I've had the same uptime with the Team Cymru neighbours as I do with internal gear. I

Re: Cymru Bogon Route Help

2010-02-01 Thread Steve Bertrand
Chris Gotstein wrote: I'm in the process of trying to setup bgp peering with Cymru to receive the bogon route list. I've got everything setup using the examples they have listed, but can't get the filtering to actually work on the incoming bgp. Using a Cisco 7200 router. Any off-list help

Re: Using /126 for IPv6 router links

2010-01-27 Thread Steve Bertrand
Igor Gashinsky wrote: On Wed, 27 Jan 2010, Pekka Savola wrote: :: On Tue, 26 Jan 2010, Igor Gashinsky wrote: :: Matt meant reserve/assign a /64 for each PtP link, but only configure the :: first */127* of the link, as that's the only way to fully mitigate the :: scanning-type attacks

Re: Enhancing automation with network growth

2010-01-26 Thread Steve Bertrand
Steve Bertrand wrote: Can anyone offer up ideas on how you manage any automation in this regard for their infrastructure gear traffic graphs? (Commercial options welcome, off-list, but we're as small as our budget is). By popular request, a list of the most suggested software packages. Some

Re: Using /126 for IPv6 router links

2010-01-26 Thread Steve Bertrand
Igor Gashinsky wrote: On Mon, 25 Jan 2010, Matt Addison wrote: :: You're forgetting Matthew Petach's suggestion- reserve/assign a /64 for :: each PtP link, but only configure the first /126 (or whatever /126 you :: need to get an amusing peer address) on the link. Matt meant

Re: Enhancing automation with network growth

2010-01-25 Thread Steve Bertrand
I want to thank everyone who responded on, and off-list to this thread. I've garnered valuable information that ranges within the technical, business applicability, to 'common-sense' arenas. There is a lot of information that I have to go over now, and a few select pieces of software that I'm

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Steve Bertrand
Pekka Savola wrote: On Wed, 20 Jan 2010, Stefan Fouant wrote: Completely agree on the disturbing observation of the increase in rate-limiting as a primary mitigation mechanism for dealing with DDoS. I've seen more and more people using this as a mitigation strategy, against my advice. For

Enhancing automation with network growth

2010-01-20 Thread Steve Bertrand
Hi all, I'm reaching the point where adding in a new piece of infrastructure hardware, connecting up a new cable, and/or assigning address space to a client is nearly 50% documentation and 50% technical. One thing that would take a major load off would be if my MRTG system could simply update

Re: d000::/8 from AS28716

2010-01-11 Thread Steve Bertrand
Mark Jackson wrote: I'd say that is a bogus route/AS announcement. I see nothing in the address assignment for that. But I see traffic started originating around 12/15/2009. I envision that work will be done in this regard shortly. God willing, our RIRs will be handing out prefixes to

Re: Bonded SDSL (was RE: ITU G.992.5 Annex M - ADSL2+M Questions)

2010-01-05 Thread Steve Bertrand
Michael Sokolov wrote: Frank Bulk - iName.com frnk...@iname.com wrote: We offer it, but practically speaking we haven't gotten much higher than 1.5 Mbps on the upstream. Sorry that I'm coming into this thread late (I have just subscribed), but since I see people discussing DSL with beefy

Re: D/DoS mitigation hardware/software needed.

2010-01-05 Thread Steve Bertrand
Adrian Chadd wrote: On Tue, Jan 05, 2010, Dobbins, Roland wrote: None of the large, well-known Web properties on the Internet today - at least, the ones which stay up and running, heh - have stateful firewalls in front of them. Including prominent vendors of said stateful firewall

Re: Bonded SDSL

2010-01-05 Thread Steve Bertrand
sth...@nethelp.no wrote: Sorry that I'm coming into this thread late (I have just subscribed), but since I see people discussing DSL with beefy upstream, I thought I would be brave and ask: do you esteemed high-end network op folks think that there may be anyone in the world who might be

Re: Consumer Grade - IPV6 Enabled Router Firewalls.

2009-12-02 Thread Steve Bertrand
Wade Peacock wrote: We had a discussion today about IPv6 today. During our open thinking the topic of client equipment came up. We all commented that we have not seen any consumer grade IPv6 enable internet gateways (routers/firewalls), a kin to the ever popular Linksys 54G series, DLinks ,

Re: BGP Peer Selection Considerations

2009-11-09 Thread Steve Bertrand
a...@baklawasecrets.com wrote: Hi, Thanks to everyone that replied to my post on failover configuration. This has lead me to this post. I'm at a point now where I'm looking at dual-homing with two BGP peers upstream. Now what I am looking at doing is as follows: BGP Peer with

Re: Upstream BGP community support

2009-11-01 Thread Steve Bertrand
Andy B. wrote: Hi, Quick question: Would you buy transit from someone who does not support BGP communities? Without reading any more of your post, or any of the replies: - because leadership has a better bandwidth deal - cuz even though shit in one hand is heavier than hope in the other,

Re: Upstream BGP community support

2009-11-01 Thread Steve Bertrand
Richard A Steenbergen wrote: On Sun, Nov 01, 2009 at 08:09:40PM -0500, Steve Bertrand wrote: I am AS14270. BGP with me... its been two years... you've got to have an engineer who can set up a session by now, no? Sounds like someone needs to send you a copy of They Just Don't Want To Peer

Re: Upstream BGP community support

2009-11-01 Thread Steve Bertrand
Richard A Steenbergen wrote: On Sun, Nov 01, 2009 at 08:09:40PM -0500, Steve Bertrand wrote: I am AS14270. BGP with me... its been two years... you've got to have an engineer who can set up a session by now, no? Sounds like someone needs to send you a copy of They Just Don't Want To Peer

Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Seems to me that some people have issues when a thread is taken over. capiche... However, it also seems to me that there are people here who are intelligent engineers who are afraid to speak, due to the size of the company they work for. On behalf of the 'small guys', it sucks when you big(ger)

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Steve Bertrand wrote: Seems to me that some people have issues when a thread is taken over. capiche... However, it also seems to me that there are people here who are intelligent engineers who are afraid to speak, due to the size of the company they work for. On behalf of the 'small guys

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Patrick W. Gilmore wrote: - practice good behaviour (bcp38) and don't preach it Did you mean preach but don't practice it? While I appreciate everyone who preaches it, I am not going to complain in the slightest at any big guy who practices BCP38. Just the opposite, I'm going to praise

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Richard A Steenbergen wrote: On Sun, Nov 01, 2009 at 11:54:07PM -0500, Steve Bertrand wrote: I'm not a political person. Take it for what it is worth. I personally know people who do both: - practice but not preach - preach but don't practice ... however you take my point, I don't care

Re: Upstream BGP community support

2009-11-01 Thread Steve Bertrand
jim deleskie wrote: Agree'd :) On Sat, Oct 31, 2009 at 9:34 PM, Randy Bush ra...@psg.com wrote: Here is the problem as I see it. Sure some % fo the people using BGP are bright nuff to use some upstreams communities, but sadly many are not. So this ends up breaking one or more networks,

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Richard A Steenbergen wrote: On Mon, Nov 02, 2009 at 12:42:51AM -0500, Steve Bertrand wrote: This isn't just my DSL provider, its a business class connection provider who also happens to provide my (hrm.. our) primary Internet connection. Are you going to teach me something with a clue bat

Re: Small guys with BGP issues

2009-11-01 Thread Steve Bertrand
Adrian Chadd wrote: On Mon, Nov 02, 2009, Richard A Steenbergen wrote: If you don't like the service you're getting, vote with your money and buy from someone else. This is quite simply not a NANOG issue, but in the interests of being helpful the best advice I can give you is this: Your

Re: ISP port blocking practice

2009-10-23 Thread Steve Bertrand
Jon Kibler wrote: Steve Bertrand wrote: Jon Kibler wrote: To answer that question, I would start with ingress and egress filtering by IP address, protocol, etc.: 1) Never allow traffic to egress any subnet unless its source IP address is within that subnet range. Sorry to nit

  1   2   >