Re: telia selling carrier ops to polhem infra

2020-10-07 Thread Måns Nilsson
e a spinoff than > acquisition. I is, Polhem is wholly owned by a few of the large public pension funds in Sweden. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 I want to dress you up as TALLULAH BANKHEAD and cover you wit

Re: Telecommunications network drafting software

2021-09-01 Thread Måns Nilsson
n't hate its users. Only drawback -- to some -- is that it's OS X only. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 ... I think I'd better go back to my DESK and toy with a few common MISAPPREHENSIONS ... signatu

Re: Redploying most of 127/8 as unicast public

2021-11-18 Thread Måns Nilsson
r to realise the driving force behind all these schemes. Delaying the inevitable is just going to make some people richer, to the detriment of others. I see no reason to support that. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 9

Re: Redploying most of 127/8 as unicast public

2021-11-19 Thread Måns Nilsson
re's a lot left to turn on and configure, is a slightly better proposition. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 MY income is ALL disposable! signature.asc Description: PGP signature

Re: Redploying most of 127/8 as unicast public

2021-11-19 Thread Måns Nilsson
ISP / access provider networks that won't change. We don't cope because NAT is good. Hardly a workday goes past without me thinking "If I could address this computer uniquely I'd go home earlier and with less grey hair". We must do better. -- Måns Nilsson primary/se

Re: Redploying most of 127/8 as unicast public

2021-11-20 Thread Måns Nilsson
s IPv6 is worse than IPv4 with NAT, feel free to propose a new > network protocol. In your application, that assertion on worseness might be true. In my, where I value the E2E principle higher, no, I think it is not. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: Redploying most of 127/8 as unicast public

2021-11-20 Thread Måns Nilsson
port forwarding futile anyway. (the let's have a TXT record bunch at it again, purposefully ignoring SRV since its inception.) I guess juggling our pains differently is what we are doing here. What is unthinkable to one is quite OK to someone else. (But I am right) -- Måns Nilsson prim

Re: Redploying most of 127/8 as unicast public

2021-11-20 Thread Måns Nilsson
es. > After finding that, I, as a theorist, totally abandoned IPv6. You gave up, based on false conclusions. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 ... I want a COLOR T.V. and a VIBRATING BED!!! signature.asc Description: PGP signature

Re: Redploying most of 127/8 as unicast public

2021-11-20 Thread Måns Nilsson
that letting people handle their IT security makes for less secure systems, and from that standpoint argue that they don't deserve the choice. To me, that is elitist and condescending (And I oughta know condescending, I'm quite good at it.) and I think we could do better. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 I want another RE-WRITE on my CEASAR SALAD!! signature.asc Description: PGP signature

Re: Class D addresses? was: Redploying most of 127/8 as unicast public

2021-11-20 Thread Måns Nilsson
dcast domain but in that scope > it's quite widely used. All the heavy lifting in video production via IP is done over multicast. Mostly, it is internal to one organisation, and the 239/8 (RFC2365) block is being used, but routing multi-gbit RTP flows over multicast is a thing where I

Re: Redploying most of 127/8 as unicast public

2021-11-21 Thread Måns Nilsson
t deliver packets to you. Also, I much prefer writing firewall rules where the IP addresses don't change in-flight. Less to screw up. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 Of course, you UNDERSTAND about

Re: is ipv6 fast, was silly Redeploying

2021-11-21 Thread Måns Nilsson
In contrast, the v6 allocations are mostly sufficient. Even for sprawling businesses. In the end, if they merge with another company, each merger brings one (1) more net, not a flock of v4 /24's. Your reasoning is correct, but the size of the math matters more. -- Måns Nilsson primary/s

Re: FreeBSD users of 127/8

2021-11-22 Thread Måns Nilsson
127.255 treize:~ mansaxel$ sipcalc 127.0.0.1/15 | grep "Network range" Network range - 127.0.0.0 - 127.1.255.255 -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 DON'T go!! I'm not HOWARD COSELL!! I

Re: SFP supplier in Europe?

2019-04-08 Thread Måns Nilsson
are -- for stocked items -- hard to beat on price and shipping time. Both being inside EU means zero hassle with customs which is important. (Poor Brits, what have they done to themselves?) -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 70

Re: Time and Timing Servers

2019-07-11 Thread Måns Nilsson
ransmission solutions (mostly broadcast related) that easily can transfer your central central cæsium clock frequency to another site using reasonable-quality IP transport, but those are neither cheap nor fire-and-forget. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: Time and Timing Servers

2019-07-11 Thread Måns Nilsson
his is not a new problem. http://www.leapsecond.com/hpj/v15n11/ Fascinating reading. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 YOW!! Now I understand advanced MICROBIOLOGY and th' new TAX REFORM laws!! si

Re: Protecting 1Gb Ethernet From Lightning Strikes

2019-08-14 Thread Måns Nilsson
f immediately upon first strike survived. /Måns, has 6 pairs 9/125 between garage and house at home. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 I feel partially hydrogenated! signature.asc Description: PGP signature

Re: Protecting 1Gb Ethernet From Lightning Strikes

2019-08-14 Thread Måns Nilsson
Subject: Re: Protecting 1Gb Ethernet From Lightning Strikes Date: Wed, Aug 14, 2019 at 02:01:01PM +0200 Quoting Bjørn Mork (bj...@mork.no): > Måns Nilsson writes: > > > /Måns, has 6 pairs 9/125 between garage and house at home. > > Now you made me worry that my single OM4

Re: OT: Tech bag

2019-08-15 Thread Måns Nilsson
s/16-389_TOOLMARK-TOOL-CASE-No.6-Brown-with-handles -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 Do you guys know we just passed thru a BLACK HOLE in space? signature.asc Description: PGP signature

Re: IPAM recommendations

2019-09-05 Thread Måns Nilsson
ing AD herding and got too much cash. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 I had pancake makeup for brunch! signature.asc Description: PGP signature

Re: Request comment: list of IPs to block outbound

2019-10-22 Thread Måns Nilsson
are an ISP using this space, you > should not block destinations in this space. I have a hard time finding text that prohibits me from running machines on 100.64/10 addresses inside my network. It is just more RFC1918 space, a /10 unwisely spent on stalling IPv6 deployment. /Måns, gu

Re: Request comment: list of IPs to block outbound

2019-10-22 Thread Måns Nilsson
Subject: Re: Request comment: list of IPs to block outbound Date: Tue, Oct 22, 2019 at 11:11:27PM -0600 Quoting Grant Taylor via NANOG (nanog@nanog.org): > On 10/22/19 10:54 PM, Måns Nilsson wrote: > > It is just more RFC1918 space, a /10 unwisely spent on stalling IPv6 > > depl

Re: Cost-effectivenesss of highly-accurate clocks for NTP

2016-05-15 Thread Måns Nilsson
ustomers with a prayer and instructions to build an overengineered network to make certain that PTP always is delivered with zero IPDV. A lot of strange things are getting network connectors these days. Not all of them are content with a http connection to some cloud provi

Re: Dyn DDoS this AM?

2016-10-21 Thread Måns Nilsson
oom for insanely large NS RRSETs. Also, do not fall in the "short TTL for service agility" trap. Besides, what Randy wrote. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 Hold the MAYO & pass the COSMIC AWARENESS ... signature.asc Description: Digital signature

Re: Dyn DDoS this AM?

2016-10-21 Thread Måns Nilsson
> source of the question, even monitoring your infrastructure (or it reporting > load into the DNS management system). > > That is very hard to replicate with two DNS providers. Surely, it must be better to use a singular service that is provably easy to take out. The advantages are ove

Re: Dyn DDoS this AM?

2016-10-21 Thread Måns Nilsson
Subject: Re: Dyn DDoS this AM? Date: Sat, Oct 22, 2016 at 01:37:09AM +0200 Quoting Niels Bakker (ni...@bakker.net): > * mansa...@besserwisser.org (Måns Nilsson) [Sat 22 Oct 2016, 01:27 CEST]: > >Also, do not fall in the "short TTL for service agility" trap. > > Severa

Re: A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-25 Thread Måns Nilsson
molish the Internet as thought out and envisioned. We can conclude in two different directions here; * We need to work on making the Internet more transparent to applications, and thus increasing security. * We're all doomed anyway. DNSSEC is useless. Pick whichever you like. Our ch

Re: DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-27 Thread Måns Nilsson
ry much like their business. So, what we must constantly strive for is maximum transparency, carrying as much of the Internet experienc, good or bad, to the end user. Or, more terse: "Middleboxes are bad for you." -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIP

Re: a detour DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-27 Thread Måns Nilsson
the olde annals of Compuserve, but since the golden standard of resiliency and load balancing is a chain of them pointing into a bookstore's spare servers, we really can't do without them. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR

Re: a detour DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-28 Thread Måns Nilsson
5 21 DNSKEY 3 SPF 1 A 28 NSEC62 AFSDB 3 RP 1 MX 2 CNAME 9 SOA 2 RRSIG 147 TXT 6 SSHFP 14 SRV 20 DS 4 Total: 16 rrtypes in zone (Yes, there's a bug there, but the end figure is correct.) -- Måns Nilsson primary/secondar

Re: a detour DANE, was A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-28 Thread Måns Nilsson
bad for the Internet, and should be discouraged. And, Carthago should be destroyed. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 Yow! Now I get to think about all the BAD THINGS I did to a BOWLING BALL when I was in JUNIOR HIGH SCHOOL! signature.asc Description: PGP signature

Re: Virtual or Remote Peering

2017-08-16 Thread Måns Nilsson
tors over an unreliable path that you have no control over, and the opportunities to keep traffic local are limited. Adding to that, it is all your fault since your provider does not do L3 and can claim a very passive rôle in the process. Like transit, but worse. -- Måns Nilsson primar

Re: IPv6 migration steps for mid-scale isp

2017-09-20 Thread Måns Nilsson
Oh, by the way; I concur with Owen: EIGRP is not done. I've stumbled on it once the last decade, and it was a PABX network engineer who insisted. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 Am I in GRADUATE SCHOOL yet? signature.asc Description: PGP signature

Re: listserv hosed? [Was: Fwd: nanog.org mailing list memberships reminder]

2018-02-02 Thread Måns Nilsson
ve? /Måns, former sysop at SEGATE.SUNET.SE -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 What's the MATTER Sid? ... Is your BEVERAGE unsatisfactory? [0] Eric Thomas, mr LISTSERV himself, told me this when we were migrating that

Re: listserv hosed? [Was: Fwd: nanog.org mailing list memberships reminder]

2018-02-02 Thread Måns Nilsson
do not know, but I'd suspect so. More of a hunch than anything else, though. It *was* very fast back then, though. Today, not so much of a competitive edge. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR+46 705 989668 Hold the MAYO

Re: How are you configuring BFD timers?

2018-03-22 Thread Måns Nilsson
Subject: Re: How are you configuring BFD timers? Date: Wed, Mar 21, 2018 at 04:24:47PM + Quoting Job Snijders (j...@instituut.net): > Silly question perhaps, but why would you do BFD on dark fiber? Because Ethernet lacks the PRDI that real WAN protocols have. -- Måns Nilsson prim

Re: How are you configuring BFD timers?

2018-03-22 Thread Måns Nilsson
--On 22 mars 2018 23:45:16 +0200 Saku Ytti wrote: > On 22 March 2018 at 22:41, Måns Nilsson > wrote: > >> Subject: Re: How are you configuring BFD timers? Date: Wed, Mar 21, 2018 >> at 04:24:47PM + Quoting Job Snijders (j...@instituut.net): >>> Silly quest

Re: SIP on FTTH systems

2014-02-05 Thread Måns Nilsson
machen, wenn man es so schön komplizieren kann? (Why make things simple when you can build them so beautifully complicated?) -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 We are now enjoyin

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-26 Thread Måns Nilsson
o, the accept/reject policies of email recipients are subject to individual evaluation and implementation at each MX host. Attempts at describing the state of email as other than that are false and should be discarded[0]. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-27 Thread Måns Nilsson
P RFC reach, that is -- the necessity to stick to protocol is not under debate) > I must say it's pretty amusing that someone who works for the > organization that published the original DNSBL seems to be ranting > against them. The ability to change ones mind when circumstances chan

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-29 Thread Måns Nilsson
to see > you. I will not debate with people who resort to humiliation techniques when questioned. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I feel like a wet parking meter on Darvon! signature.asc Description: Digital signature

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-30 Thread Måns Nilsson
Subject: Re: why IPv6 isn't ready for prime time, SMTP edition Date: Sat, Mar 29, 2014 at 11:06:11AM -0400 Quoting Patrick W. Gilmore (patr...@ianai.net): > Composed on a virtual keyboard, please forgive typos. > > > On Mar 29, 2014, at 3:15, Måns Nilsson wrote: > > Quo

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-31 Thread Måns Nilsson
Subject: Re: why IPv6 isn't ready for prime time, SMTP edition Date: Mon, Mar 31, 2014 at 12:17:19AM -0400 Quoting Patrick W. Gilmore (patr...@ianai.net): > On Mar 30, 2014, at 16:40 , Måns Nilsson wrote: > > Subject: Re: why IPv6 isn't ready for prime time, SMTP edition Dat

Re: Best practices IPv4/IPv6 BGP (dual stack)

2014-05-02 Thread Måns Nilsson
rk. In that context, allocating 100.64.0.0/10 to CGN was especially un-clever... -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 Xerox your lunch and file it under "sex offenders"! signature.asc Description: Digital signature

Re: Shared Transition Space VS. BGP Next Hop [was: Re: Best practices IPv4/IPv6 BGP (dual stack)]

2014-05-03 Thread Måns Nilsson
RF, but the MPLS standards wg seems content with status quo. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I wish I was a sex-starved manicurist found dead in the Bronx!! signature.asc Description: Digital signature

Re: OOB

2011-07-26 Thread Måns Nilsson
y keeps the VPN up and reestablishes it if needed. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I'm wearing PAMPERS!! signature.asc Description: Digital signature

Re: OOB

2011-07-26 Thread Måns Nilsson
EMP shielded sites I've had predictable trouble getting copper lines in, even after pointing out the availability of milspec filtering devices. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I'm not available for comment.. signature.asc Description: Digital signature

Re: v4/v6 dns thoughts?

2011-08-10 Thread Måns Nilsson
tack. I did so with $INCLUDE directives[0] at a former employer. For routers, where it matters much more than for end-user stuff like web servers. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 DIDI ... is that a MARTIAN name, or,

Re: NANOGers home data centers - What's in your closet?

2011-08-13 Thread Måns Nilsson
reezing storage area. I guess I'll keep the room above freezing with servers running. Equipment there is a bit uncertain, but probably will be host for thin clients, backup server, tape library, GE switch, and UPS, possibly some museum equipment too. This takes ages to build. I've got a lif

Re: Verizon Business - LTE?

2011-08-16 Thread Måns Nilsson
tleneck is backhaul. Many towers started out with a couple bundled E1 circuits. Upgrading them to Ethernet over something (because Ethernet is the new black) costs a lot, apparently. OTOH, never underestimate "Because we can". -- Måns Nilsson primary/secondary/besserwisser/machina

Re: Verizon Business - LTE?

2011-08-17 Thread Måns Nilsson
beyond belief "because-we-can" roaming charges on data in Europe, data in ones own country is fairly cheap. Written from bus and subway (yes, 3G coverage in tunnels) in Stockholm, with small breaks when switching vehicles. -- Måns Nilsson primary/secondary/besserwisser/machina

Re: iCloud - Is it going to hurt access providers?

2011-09-03 Thread Måns Nilsson
d, and build > networks the way John Roebling built bridges? Well put. I find it hard to blame the users for using the network. That is what they pay the provider for. Any implicit assumptions about _how_ users should use the network are simply corners cut to make things cheaper. Gambling.

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases

2011-09-12 Thread Måns Nilsson
ble OOB quite easily for you) you can start validating the entire chain of trust. Quite trivial, in fact. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 Am I in GRADUATE SCHOOL yet? signature.asc Description: Digital signature

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases

2011-09-12 Thread Måns Nilsson
, verified certificates are the norm, for real, which makes it all the more possible to flag the exceptions much more annoyingly. Perhaps even refuse to open them. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 ... this must be

Re: Water Utility SCADA 'Attack': The, um, washout

2011-11-26 Thread Måns Nilsson
ame goes for any file that is not a work-in-progress. (Official notes from a meeting for instance.) It works. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 Th' MIND is the Pizza Palace of th' SOUL signature.asc Description: Digital signature

Re: Big day for IPv6 - 1% native penetration

2012-11-26 Thread Måns Nilsson
ewing headers something of a challenge. V6 will, given a few careful pushes, deploy itself. Slightly exaggerated, but that's how it is. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I love ROCK 'N ROLL! I memoriz

Re: "Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications"....

2012-11-28 Thread Måns Nilsson
Pv6-only, or IPv4-only, depending on context and application. RFC 6540 / BCP 177 > I believe the person signing the checks never asked for IPv4 support. Probably not. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 ..

Re: "Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications"....

2012-11-29 Thread Måns Nilsson
host.) The 32-bit integer trick might, just might make do for IPv4, but a proper data type is so much simpler to use. Also, stepping away from MySQL or Oracle makes Larry less powerful. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: Any enterprise operators very happy with their MPLS providers?

2012-12-06 Thread Måns Nilsson
inflated price for relatively small SDH links by a lot. If, OTOH, you are not a very distributed radio company trying to do RTP in 48kHz 24-bit linear stereo over internal WAN, using multicast, you might be fine with a MPLS offering... -- Måns Nilsson primary/secondary/besserwisser/machina

Re: [SHAME] Spam Rats

2013-01-09 Thread Måns Nilsson
..will work just fine, for instance. I did it for a 200+ segment LAN party, couple years ago. And as is usual with wildcards, if you do need to insert a real record, it will take over just as expected. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: IPV6 in enterprise best practices/white papaers

2013-01-27 Thread Måns Nilsson
is the usual chaos, yeah, then there is a problem. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I'm encased in the lining of a pure pork sausage!! signature.asc Description: Digital signature

Re: IPV6 in enterprise best practices/white papaers

2013-01-27 Thread Måns Nilsson
hers, they can tell how it feels to cling to v4 and go LALALALALALALACANTHEARYOU when customers ask for v6) The happy eyeballs fix is of course convenient, but only necessary when the network is so broken for v6 that you should not have turned RA on.. -- Måns Nilsson primary/se

Re: IPV6 in enterprise best practices/white papaers

2013-01-29 Thread Måns Nilsson
s too > > much of a headache, > Does an L2 switch really care about IPv6? (except for stuff like DHCPv6 > snooping, etc?) For management it does care. NO ipv4 is NO ipv4. As in not even management addresses. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: 10 Mbit/s problem in your network

2013-02-10 Thread Måns Nilsson
so this is a very bad idea. Might improve some things, but not the really important ones. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 Thousands of days of civilians ... have produced a ... feeling for the aesthetic modules --

Re: Visio-fu

2013-02-26 Thread Måns Nilsson
the rotting carcass of Visio into producing anything not appalling and go with OmniGraffle instead. http://www.omnigroup.com/products/omnigraffle/ -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 DON'T go!! I'm not HO

Re: Open Resolver Problems

2013-03-25 Thread Måns Nilsson
defending unrestricted query rates on auth servers if they serve DNSSEC. I've successfully applied the Redbarn patches to my BIND, and I expect the NSD rate-control to be of similar quality, or better. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: Open Resolver Problems

2013-04-01 Thread Måns Nilsson
t pushing queries on toward the DHCP'd full service resolvers of the ISP. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 Everywhere I look I see NEGATIVITY and ASPHALT ... signature.asc Description: Digital signature

Re: Open Resolver Problems

2013-04-02 Thread Måns Nilsson
Subject: Re: Open Resolver Problems Date: Tue, Apr 02, 2013 at 05:25:53AM +0200 Quoting Mikael Abrahamsson (swm...@swm.pp.se): > On Tue, 2 Apr 2013, Måns Nilsson wrote: > > >What percentage of the SOHO NAT boxes actually are full-service > >resolvers? I was under the impress

Re: RFC 1149

2013-04-04 Thread Måns Nilsson
k"? The 245 still rolls, and probably will, for another 30 years. /Måns, drove 245 in youth. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 The SAME WAVE keeps coming in and COLLAPSING like a rayon MUU-MUU ... signature.asc Description: Digital signature

Re: ISIS and OSPF together

2013-05-12 Thread Måns Nilsson
s clear, though, that the path forward is ISIS; most people I've spoken to roll it out (in greenfield/forklift situations) or migrate to it. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I always have fun becaus

Re: Dear NANOG Gods

2013-05-22 Thread Måns Nilsson
p?prodrangeid=15&typeid=3 More expensive than SKB, but they bounce when dropped. And preserve the stuff inside. One probably should opt for removing PSU and drives if shipping is expected to be very rough. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: IP Management Software

2011-12-16 Thread Måns Nilsson
IP address management, there probably are other solutions. Also, I've seen no integration with RIR registries. Pricey, as well. We moved from IPPlan, and are a lot happier. In spite of above. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 7

Re: AD and enforced password policies

2012-01-03 Thread Måns Nilsson
s happy. If your password crypto is NSA KW-26 or similar, OTOH, just don the Navy blues and start swapping punchcards at ZULU. (http://en.wikipedia.org/wiki/File:Kw-26.jpg) -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46

Re: AD and enforced password policies

2012-01-03 Thread Måns Nilsson
ord/pin code. Most banks have a hardware token, either challenge-response or HOTP/TOTP; some use the chip in chip-and-pin cards as certificate carrier, and combine it with a reader device to manage pin code entry. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE

Re: AD and enforced password policies

2012-01-04 Thread Måns Nilsson
use it as a standalone authenticator I can even use elinks, but to use it as national ID card I need to run a bunch of apps, and must stay on Firefox3. This is for OSX. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 UH-OH!

Re: AD and enforced password policies

2012-01-04 Thread Måns Nilsson
t; potentially remotely suspicious activity on a system that user had been > logged into recently. Indeed. If doubt arises, just change. Have been on the fringe of a kdc compromise. 1 students and faculty were required to show up in person and change on approved terminals. -- Måns Ni

anycast load balancing issue

2012-01-04 Thread Måns Nilsson
lculation takes place and another node steps in, but I'd like true path lengths (IGP hop count) to influence more than iBGP (route-reflector-style) selection. Any clues? Oh, all-cisco, all ASR1000 series. All links GE. ~90 routers in IGP. -- Måns Nilsson primary/secondary/besserwisser/

Re: anycast load balancing issue

2012-01-04 Thread Måns Nilsson
Subject: anycast load balancing issue Date: Wed, Jan 04, 2012 at 01:02:55PM +0100 Quoting Måns Nilsson (mansa...@besserwisser.org): > Trouble is, we find that (untweaked) cost and metric are such that all > nodes are equal. s/all nodes/all nodes in my pathetically small test case/

Re: anycast load balancing issue

2012-01-05 Thread Måns Nilsson
d round and solve this. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 Hold the MAYO & pass the COSMIC AWARENESS ... signature.asc Description: Digital signature

Re: Dear RIPE: Please don't encourage phishing

2012-02-10 Thread Måns Nilsson
On Fri, Feb 10, 2012 at 09:29:30AM -0800, Randy Bush wrote: > > So because of phishing, nobody should send messages with URLs in them? > > more and more these days, i have taken to not clicking the update messages, > but going to the web site manyually to get it. Web site? With the RIPE db one c

Re: time sink 42

2012-02-16 Thread Måns Nilsson
83 For more permanent marking, without going to label printing (for which I think Brady is the best) I like tesa brand cloth tape from Beiersdorf. 4541 is my favourite model. http://www.tesatape.com/industry/products/tesa_4541.html -- Måns Nilsson primary/secondary/besserwisse

Re: Which P-Touch should I have?

2012-02-17 Thread Måns Nilsson
got numbered in both ends and the number, being unique at the site, could be used for documentation as well as finding both ends in looms etc. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 LBJ, LBJ, how many JOKES did you tell t

Re: Which P-Touch should I have?

2012-02-17 Thread Måns Nilsson
, or two 300mm deep cabinets as well as being one european floor tile.) and then every cable documentation refered grid number and HE. (German for RU) So a cable could be referenced with AA92:12 - AB36:14, but the only label on the cable was a serial number. -- Måns Nilsson primary/secondar

Re: cable markers for marine environments

2012-03-08 Thread Måns Nilsson
On Thu, Mar 08, 2012 at 01:41:58PM -0800, Lyndon Nerenberg wrote: > I have a couple of wiring projects coming up on salt water-going vessels and > I'm curious as to people's experiences with different types of cable marking > products in a high-humidity / salt air / bilge environment > > None of

Re: shared address space... a reality!

2012-03-14 Thread Måns Nilsson
On Wed, Mar 14, 2012 at 02:22:04AM -0400, Christopher Morrow wrote: > NetRange: 100.64.0.0 - 100.127.255.255 > CIDR: 100.64.0.0/10 > OriginAS: > NetName:SHARED-ADDRESS-SPACE-RFCTBD-IANA-RESERVED GOOD. Now I can BOTH keep sticking my head in the sand AND get NEW RFC 1918 s

Re: Outdoor Wireless Access Point

2012-04-02 Thread Måns Nilsson
On Sun, Apr 01, 2012 at 03:58:31AM -0400, valdis.kletni...@vt.edu wrote: > But there's a 22 acre field (about twice the size of the garden you are trying > to support) in the middle of campus... literally in the middle, as in "the > campus > is built around that field". ;) (No doubt Valdis kno

Re: Automatic IPv6 due to broadcast

2012-04-16 Thread Måns Nilsson
--On 16 april 2012 17.38.07 -0400 Brandon Penglase wrote: direction of our security analyst) turn up a DA test server. Needless to say, everything was horribly slow, and some things even flat out broke. To be expected when DNS is given the rôle of routing packets munged by tunneling

Re: DDI (DNS+DHCP+IPAM) Solutions

2012-06-26 Thread Måns Nilsson
bubble of Arthur C Clarke -compliant magic for many of them. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 If Robert Di Niro assassinates Walter Slezak, will Jodie Foster marry Bonzo?? signature.asc Description: Digital signature

Re: Another LTE network turns up as IPv4-only squat space + NAT

2012-07-19 Thread Måns Nilsson
tly so. No, reusing somebody's prefix is A Very Bad Idea. I'm having a very hard time believing the alleged "ok" is anything but cheap talk. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 The Osmonds! You

Re: US House to ITU: Hands off the Internet

2012-08-03 Thread Måns Nilsson
possibly in need of thwarted cashflow (from gov't-supported monopolies with fantasy pricing schemes) or feel that they need to alter the information picture for their subjects. Either that or the entire ITU-T still believes that SS7 scales better than BGP. -- Måns Nilsson primary/secon

Re: BGPttH. Neustar can do it, why can't we?

2012-08-06 Thread Måns Nilsson
over FIOS there are fewer than 40,000 > > I'm curious as to your number... where is that from? AS numbers used to be 16-bit. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I don't believe there really IS a GAS SH

Re: The End-To-End Internet (was Re: Blocking MX query)

2012-09-05 Thread Måns Nilsson
es computers. There was this guy called Aesop who wrote a story about blocking traffic on the Internet, but since the Internet wasn't known at the time (too secret) he had to rephrase it so it became a story about a goose that lays golden eggs. -- Måns Nilsson primary/secondary/besser

Re: Are people still building SONET networks from scratch?

2012-09-08 Thread Måns Nilsson
ot; factor is essentially gone. Operationally it is quite worthwhile to say "I have SLOS in my far end, which means somebody pulled a patch worngly in your just terminated maintenance window." instead of "The line is dead, can you please check something?" to your circuit provider.

Re: Are people still building SONET networks from scratch?

2012-09-08 Thread Måns Nilsson
Subject: Re: Are people still building SONET networks from scratch? Date: Sun, Sep 09, 2012 at 01:15:35AM -0500 Quoting Jimmy Hess (mysi...@gmail.com): > On 9/8/12, Måns Nilsson wrote: > > Subject: Re: Are people still building SONET networks from scratch? Date: > > Just the fact

Re: Big Temporary Networks

2012-09-13 Thread Måns Nilsson
directive; just something like wireless-node-47-11.world.con will do. Make sure that the whois contacts for the address block are proper. Try setting some monitoring up; it is good to be able to keep an eye on client count per AP etc. This is also much easier if the wireless solution is enterprisey.

Re: Big Temporary Networks

2012-09-14 Thread Måns Nilsson
ection survived two taxi trips, one night, some NATed wlan at the hotel and when i got back to the right network I just plugged the cable in and continued in the same session. But I cheated and had fixed addresses.) > Very nice, Måns; thanks. My pleasure. -- Måns Nilsson primary/second

Re: Big Temporary Networks

2012-09-14 Thread Måns Nilsson
> net. As long as there is no multicast entering the wlan this is best solved by getting more bandwidth. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 ... the HIGHWAY is made out of LIME JELLO and my HONDA is a barbe

Re: Big Temporary Networks

2012-09-14 Thread Måns Nilsson
Subject: Re: Big Temporary Networks Date: Fri, Sep 14, 2012 at 09:22:01PM +0900 Quoting Masataka Ohta (mo...@necom830.hpcl.titech.ac.jp): > Måns Nilsson wrote: > > >And get v6. > > > >Do not NAT. When all those people want to do social networking to the same > >fu

Re: Big Temporary Networks

2012-09-15 Thread Måns Nilsson
Subject: Re: Big Temporary Networks Date: Fri, Sep 14, 2012 at 09:40:02AM -0400 Quoting Jay Ashworth (j...@baylink.com): > - Original Message - > > From: "Måns Nilsson" > > > 12:20:33AM -0700 Quoting Octavio Alvarez (alvar...@alvarezp.ods.org): > >

Re: Big Temporary Networks

2012-09-16 Thread Måns Nilsson
are NATed through the same box, > >> resource starvation will occur. > > Assumptions that are already broken in Enterprise networks where 100+ > users may share an IP Warum einfach, wenn es auch kompliziert geht? -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-

  1   2   >