Re: Todd Underwood was a little late

2010-06-16 Thread Mark Andrews
, and they're leaking some traffic non-NAT'd. Why was this traffic hitting your DNS server in the first place? It should have been rejected by the ingress filters preventing spoofing of the local network. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: Todd Underwood was a little late

2010-06-16 Thread Mark Andrews
In message pine.lnx.4.61.1006162237180.5...@soloth.lewis.org, Jon Lewis write s: On Thu, 17 Jun 2010, Mark Andrews wrote: Why was this traffic hitting your DNS server in the first place? It should have been rejected by the ingress filters preventing spoofing of the local network

Re: DNSsec from domailcontrol.com

2010-06-18 Thread Mark Andrews
brilliant suggestions? Please contact me on or off list Regards MKS The server isn't even EDNS aware. I suspect your firewall doesn't like a plain DNS response to a EDNS query. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Lightly used IP addresses

2010-08-16 Thread Mark Andrews
bother with irrdb filters are going to latch on en-masse to rpki thereby preventing a repeat of the 7007/youtube incidents. More people will be willing to trust the databases if they know that they can be verified as (mostly) correct rather than hoping that they are correct. Nick -- Mark

Re: Comcast enables 6to4 relays

2010-08-31 Thread Mark Andrews
to the full 2002::/16. Cheers. Mitchell Which would end up with the entire set of IPv4 routes in IPv6. This is not a good idea. Just do you part and encapuslate/decapsulate as soon as possible and let the other end do the same. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW

Re: network name 101100010100110.net

2010-10-17 Thread Mark Andrews
domain name with domain style host name. Or confuse domain name with a host name stored in the DNS. Mark That said, the world was much simpler last century. --bill -- -Jh -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Definitive Guide to IPv6 adoption

2010-10-18 Thread Mark Andrews
are not talking about a lot of prefixes and they don't change very often. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Only 5x IPv4 /8 remaining at IANA

2010-10-19 Thread Mark Andrews
: -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Only 5x IPv4 /8 remaining at IANA

2010-10-19 Thread Mark Andrews
In message c8e36161.636f0%z...@zaidali.com, Zaid Ali writes: On 10/19/10 2:37 PM, Mark Andrews ma...@isc.org wrote: So stick a router in parallel and just route IPv6 over it. So stick in a IPv6-IPv4 proxy and send that traffic through the load balancer. Nah considering v6 traffic

Re: Re: IPv6 fc00::/7 — Unique local addresses

2010-10-20 Thread Mark Andrews
is available with V4. -- -Jh -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 fc00::/7 — Unique local addres ses

2010-10-20 Thread Mark Andrews
selection and that is driven by reachability. You also need to worry about egress points due to source address filtering. etc. Matthew Kaufman -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 fc00::/7 — Unique local addres ses

2010-10-20 Thread Mark Andrews
one. Use a VPN between the organisations so you fate share. If you have a private interconnect then the VPN becomes the backup. Matthew Kaufman -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 fc00::/7 — Unique local addres ses

2010-10-20 Thread Mark Andrews
isn't tough - rather just do it. If your big enough to get your own GUA and have the dollars to get it routed then do that. If you are forced to use PA (think home networks) then having a ULA prefix as well is a good thing. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: Re: IPv6 fc00::/7 — Unique local addresses

2010-10-21 Thread Mark Andrews
can't share your belief that it won't happen with ULA which doesn't have the reliability problems that RFC-1918 had. Owen -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Re: IPv6 fc00::/7 — Unique local addresses

2010-10-21 Thread Mark Andrews
In message 859028c2-9ed9-43ff-aaf9-6e2574048...@delong.com, Owen DeLong write s: On Oct 20, 2010, at 10:28 PM, Mark Andrews wrote: =20 In message 4cbfc1d0.60...@apolix.co.za, Graham Beneke writes: On 21/10/2010 02:41, Owen DeLong wrote: On Oct 20, 2010, at 5:21 PM, Jeroen van Aart

Re: IPv6 fc00::/7 - Unique local addresses

2010-10-21 Thread Mark Andrews
the defaults. If your OS doesn't yet support it complain. The ability to set this site wide is also coming. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Failover IPv6 with multiple PA prefixes (Was: IPv6 fc00::/7 — Unique local addresses)

2010-10-21 Thread Mark Andrews
OSs which will do this for you. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 fc00::/7 - Unique local addresses

2010-10-21 Thread Mark Andrews
will route and requires someone to setup the address selection rules compared to a ULA at $0 that the OS vendors will make work well by default. Owen -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Re: IPv6 fc00::/7 — Unique local addresses

2010-10-21 Thread Mark Andrews
In message 4bc01459-b53a-4b2c-b75b-47d89550d...@delong.com, Owen DeLong write s: On Oct 21, 2010, at 3:15 PM, Mark Andrews wrote: =20 In message e22a56b3-68f1-4a75-a091-e416800c4...@delong.com, Owen = DeLong write s: =20 Which is part one of the three things that have to happen

Re: IPv6 rDNS

2010-10-29 Thread Mark Andrews
they will add the PTR records for themselves. I just wish all the other OS's did that so I don't have to do them by hand. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Failover IPv6 with multiple PA prefixes (Was: IPv6 fc00::/7 -Unique local addresses)

2010-10-31 Thread Mark Andrews
://www.livescience.com/environment/050106_odds_of_dying.html -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 rDNS

2010-11-01 Thread Mark Andrews
, automatically (internally) interpret it as c.b.1.d.5.3.e.f.f.f.8.4.1.0.0.0.3.f.8.0.3.1.4.8.8.7.d.f.ip6.arpa. inside memory. Regards, -- Michel~ -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 rDNS

2010-11-01 Thread Mark Andrews
In message 7e9af5e9-7b3a-4767-a1d3-8eab64031...@delong.com, Owen DeLong write s: On Nov 1, 2010, at 4:40 PM, Mark Andrews wrote: =20 In message = aanlktinumzyp9qe0i5phyz72al3xyctvaqhjzhutk...@mail.gmail.com, Mich el de Nostredame writes: On Fri, Oct 29, 2010 at 6:06 PM, Jeroen van

Re: Failover IPv6 with multiple PA prefixes (Was: IPv6 fc00::/7 - Unique local addresses)

2010-11-02 Thread Mark Andrews
to align my statements with the users being discussed in the earlier parts of the thread. Qualifying every statement with the covered userbase would be an impractical additional overhead for most people. Owen -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: Failover IPv6 with multiple PA prefixes (Was: IPv6 fc00::/7 - Unique local addresses)

2010-11-03 Thread Mark Andrews
then slowly deprecate the other or tweak the rules above and distribute them via DHCP. Or you use PI and don't worry about it at all. You're making a very good case fro why ULA is vastly inferior to PI. Owen -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE

Re: IPv6 6to4 and dns

2010-11-18 Thread Mark Andrews
address for many years now. Google on the other had decided to white-list sites that it knows have IPv6 connectivity and a responsive noc. 6to4 sites don't meet these requirments. Tunneled sites can. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: IPv6 6to4 and dns

2010-11-19 Thread Mark Andrews
In message 4ce6d919.2000...@mompl.net, Jeroen van Aart writes: Mark Andrews wrote: Firstly I would use a tunnel broker instead of 6to4. Easier to debug failures. Thanks all for the helpful response. Using the same names for IPv6 and IPv4 doesn't appear to be much of a problem

Re: non operational question related to IP

2010-11-22 Thread Mark Andrews
have received this message in error, pleas= e contact the sender and delete all copies. Opinions, conclusions or other = information contained in this message may not be that of the organization. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Blocking International DNS

2010-12-01 Thread Mark Andrews
a hint.) And there would have been total confusion if there had been multiple uunet's and a few other well known nodes. UUCP had anchor points. Just different ones to the DNS. --lyndon -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: blackhole-1.iana.org and blackhole-1.iana.org servers are down?

2010-12-19 Thread Mark Andrews
to traceroute to them and contact the last operator. See as112.net. -- wbr, Oleg. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: .gov registrar problem

2010-12-23 Thread Mark Andrews
IN NS B.USADOTGOV.NET. gov.259200 IN NS C.USADOTGOV.NET. ;; Query time: 231 msec ;; SERVER: 76.73.18.236#53(76.73.18.236) ;; WHEN: Fri Dec 24 10:38:24 2010 ;; MSG SIZE rcvd: 201 Mark -- Andy Harrison Lead Systems Engineer Metrocast Cablevision -- Mark

Re: medicare.gov / cms.gov DNSSEC Validation Failures

2010-12-30 Thread Mark Andrews
#53(127.0.0.1) ;; WHEN: Fri Dec 31 00:12:47 2010 ;; MSG SIZE rcvd: 449 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Problems with removing NAT from a network

2011-01-05 Thread Mark Andrews
-- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Problems with removing NAT from a network

2011-01-05 Thread Mark Andrews
In message aanlktinxp-c96rdb2+06v1kqwfdiehy6_2=ohoom8...@mail.gmail.com, Came ron Byrne writes: On Wed, Jan 5, 2011 at 8:31 PM, Mark Andrews ma...@isc.org wrote: In message aanlktimkgpyky_aka5px4-ca-3=oufhgbnenrkpmp...@mail.gmail.co= m, Came ron Byrne writes: On Wed, Jan 5, 2011 at 6:42

Re: Problems with removing NAT from a network

2011-01-05 Thread Mark Andrews
implemented by the cellular carriers. Cameron Matthew Kaufman -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Problems with removing NAT from a network

2011-01-06 Thread Mark Andrews
In message aanlktik47d9ur2xtjtzhg3_izeq3ork90ecvzkoth...@mail.gmail.com, Came ron Byrne writes: On Wed, Jan 5, 2011 at 9:55 PM, Mark Andrews ma...@isc.org wrote: In message aanlktiks_enacm2bfyx=3db=3dm=3dkhejaqjkvdbwx2hwm...@mail.gmai= l.com, Came ron Byrne writes: As long as dual-stack

Re: Spamming and ssh attack from a customers

2011-01-06 Thread Mark Andrews
forward the message to my customer contact persons? I suspect that your customer is compromised and you should put them in a walled garden until they fix the problem. Look at traffic flows first however. Thanks in advance.. Tarig Yassin Ahmed -- Mark Andrews, ISC 1 Seymour St., Dundas Valley

Re: Problems with removing NAT from a network

2011-01-10 Thread Mark Andrews
One can still do DS-lite when the provider only offers NAT64. A B4 can connect to a AFTR which can be anywhere that is reachable via IPv6. I can see small ISPs and those that can't get IPv4 addresses for themselves out sourcing the DS-lite service. -- Mark Andrews, ISC 1 Seymour St., Dundas

Re: IPv6 prefix lengths

2011-01-12 Thread Mark Andrews
is for a SITE not a ENTERPRISE. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-01-24 Thread Mark Andrews
adresses. For port to point links to general purpose machines you should expect multiple address at least one end. Even routers can use CGAs. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-01-25 Thread Mark Andrews
(fpga's); it is not hoised to a general purpose CPU. For consumer devices, (almost) everything is done by the CPU to make it cheap. (some actually have tiny single chip switches in there.) --Ricky -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871

Re: Ipv6 for the content provider

2011-01-26 Thread Mark Andrews
on IPv6. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: What's the current state of major access networks in North America ipv6 delivery status?

2011-01-26 Thread Mark Andrews
, or even prevent innovations in the end-user networking/consumer electronics markets. Owen -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: What's the current state of major access networks in North America ipv6 delivery status?

2011-01-27 Thread Mark Andrews
widespread trends, it may significantly impact, delay, or even prevent innovations in the end-user networking/consumer electronics markets. Owen -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: test-ipv6.com

2011-01-27 Thread Mark Andrews
-server-over-tcp Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: test-ipv6.com

2011-01-27 Thread Mark Andrews
-- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: test-ipv6.com

2011-01-28 Thread Mark Andrews
In message 4d4280da.8090...@steadfast.net, Kevin Stange writes: On 01/27/2011 06:16 PM, Mark Andrews wrote: In message alpine.bsf.2.00.1101271448000.15...@goat.gigo.com, Jason F= esler wr ites: Several people have suggested I (re)post information about test-ipv6.c= om=20 here. http

Re: [arin-announce] ARIN Resource Certification Update

2011-01-30 Thread Mark Andrews
not found a good alternative yet. Fully support StartSSL and RIPE for trying to lower the bar for more security. Have a nice weekend, Leen. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

looping email

2011-01-30 Thread Mark Andrews
-- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: NANOG lIst replay?

2011-01-30 Thread Mark Andrews
rather than specifying their own address on the command line. Owen -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-01 Thread Mark Andrews
6rd. IPv4 + IPv6 [AFTR/6RD] E space [B4/6RD] RFC 1918 + IPv6 (double encap) IPv4 + IPv6 [NAT64/6RD] E space [6RD] IPv6 (single encap) Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-01 Thread Mark Andrews
(SERVFAIL, TIMEOUT to the client when NOERROR or NXDOMAIN is returned for A). Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-02 Thread Mark Andrews
. Somewhere along the way this was forgotten. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-02 Thread Mark Andrews
. They were designed to complement each other. It just that somewhere along the way people forgot that. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-02 Thread Mark Andrews
they are. Or you just filter them out in the laptop. With the proper tools you just ignore and RA's containing 2002:. Done that for years now. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-02 Thread Mark Andrews
. IPv6 is different to IPv4. It has different capabilities. It offers different solutions to old problems. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-02 Thread Mark Andrews
. And it makes applications they do use (current and future) more complicated as they have to deal with all the issues that arise from using a NAT'd address. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-02 Thread Mark Andrews
- no way around that. We have vendor struggles. The current pain is the lack of good support = for VRRPv3. RA guard is another.=20 However, IPv6 on the enterprise network will continue to be seen as an = after thought until and unless we get parity.= -- Mark Andrews, ISC 1 Seymour St

Re: quietly....

2011-02-02 Thread Mark Andrews
server. No date has been set for this yet. subnet6 2001:960:7bf:d::/64 { option dhcp6.name-servers 2001:1af8:2:5::2; option dhcp6.domain-search bonjour.muada.nl; range6 2001:960:7bf:d::1000 2001:960:7bf:d::1fff; } Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: quietly....

2011-02-02 Thread Mark Andrews
In message op.vqassatytfh...@rbeam.xactional.com, Ricky Beam writes: On Wed, 02 Feb 2011 17:18:25 -0500, Mark Andrews ma...@isc.org wrote: Or you just filter them out in the laptop. With the proper tools you just ignore and RA's containing 2002:. Done that for years now. Get back

Re: quietly....

2011-02-02 Thread Mark Andrews
monetory cost and/or extra complexity in the product. The later also increases the cost in maintaining the product. It also stops the vendor developing other products as it takes additional resources to do this work. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE

Re: quietly....

2011-02-03 Thread Mark Andrews
In message 32825.1296757039@localhost, valdis.kletni...@vt.edu writes: --==_Exmh_1296757039_6170P Content-Type: text/plain; charset=us-ascii On Thu, 03 Feb 2011 09:18:25 +1100, Mark Andrews said: Or you just filter them out in the laptop. With the proper tools you just ignore

Re: quietly....

2011-02-03 Thread Mark Andrews
business what I do inside. Only what comes out. That's Why I Have A Router. Routers don't mangle packets. They route packet and decrement hop counts. Cheers, -- jra -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: quietly....

2011-02-03 Thread Mark Andrews
it until they need the new protocols we develop. Then they'll have to adapt, but they'll at least already have some of the IPv6 work done. Jack -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-03 Thread Mark Andrews
In message whkmjz3puzsnf...@perry.co.uk, Roland Perry writes: In article 20110203220604.a8bae9a5...@drugs.dv.isc.org, Mark Andrews ma...@isc.org writes In any event, two of my applications are not IPv6 compatible, and would require significant upgrading. And will my ADSL provider and my

Re: quietly....

2011-02-03 Thread Mark Andrews
In message 4680378.4717.1296777587916.javamail.r...@benjamin.baylink.com, Jay Ashworth writes: - Original Message - From: Mark Andrews ma...@isc.org [ me, to Valdis: ] C'mon; this isn't *your* first rodeo, either. From the viewpoint of The Internet, *my edge router

Re: quietly....

2011-02-03 Thread Mark Andrews
In message 4d4b51ea.2030...@brightok.net, Jack Bates writes: On 2/3/2011 6:03 PM, Mark Andrews wrote: The protocol was done in December 2003. Any CPE vendor could have added support anytime in the last 7 years. Did we really need to specify how to daisy chain PD requests when

Re: quietly....

2011-02-03 Thread Mark Andrews
In message 4d4b5dcb.3090...@brightok.net, Jack Bates writes: On 2/3/2011 7:50 PM, Mark Andrews wrote: This was blindling obvious to me years ago and should have been to any CPE developer. It doesn't appear to be blindingly simple for the cpe-router-bis draft, which leaves it as TBD

Re: quietly....

2011-02-04 Thread Mark Andrews
In message WQE8G0a2F$snf...@perry.co.uk, Roland Perry writes: In article 20110204000954.a64c79a9...@drugs.dv.isc.org, Mark Andrews ma...@isc.org writes These are just my straw poll of what may be difficult for small enterprises in a change to IPv6. It isn't change to, its add IPv6. I

Re: quietly....

2011-02-04 Thread Mark Andrews
are at NANOG or IETF. Everyone doesn't suddenly get owned because there isn't a external firewall. Modern OS's default to secure. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-04 Thread Mark Andrews
In message fe7943df-6a3a-478f-af40-de4d3592f...@puck.nether.net, Jared Mauch writes: On Feb 4, 2011, at 4:32 PM, Mark Andrews wrote: =20 In message 201102041140.42719.lo...@pari.edu, Lamar Owen writes: On Friday, February 04, 2011 09:05:09 am Derek J. Balling wrote: I think they'll

Re: quietly....

2011-02-04 Thread Mark Andrews
be asking the other vendors for similar support. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-04 Thread Mark Andrews
an IPv6 /16 from ARIN. Heck, the most I'll ever hope for is the current proposal's nibble boundary which might get me to a /24. I'll never talk to ARIN again after that. Jack -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-04 Thread Mark Andrews
In message 4d4c8af8.1030...@brightok.net, Jack Bates writes: On 2/4/2011 5:11 PM, Mark Andrews wrote: No, a /48 is equivalent to a single IP. You loose a little bit with small ISPs as their minimum is a /32 and supports up to 64000 customers. The bigger ISPs don't get to waste

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-05 Thread Mark Andrews
In message 4d4ca1b1.5060...@brightok.net, Jack Bates writes: On 2/4/2011 6:45 PM, Mark Andrews wrote: I used to work for CSIRO. Their /16's which were got back in the late 80's will now be /48's. That's why I didn't try doing any adjustments of X is the new /32. The whole paradigm

Re: quietly....

2011-02-05 Thread Mark Andrews
In message xq1vy4e3bstnf...@perry.co.uk, Roland Perry writes: In article 20110204225150.6fac49b2...@drugs.dv.isc.org, Mark Andrews ma...@isc.org writes But NAT does have the useful (I think) side effect that I don't have to renumber my network when I change upstream providers - whether

Re: quietly....

2011-02-05 Thread Mark Andrews
work. Next you add records for all the services you offer after testing them. [Maybe I should write a book about it] -- Roland Perry -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-05 Thread Mark Andrews
In message 4d4d5ffc.6020...@brightok.net, Jack Bates writes: On 2/5/2011 6:47 AM, Mark Andrews wrote: So why the ~!#! are you insisting on comparing IPv4 allocations with IPv6 alocations. Because that is where the comparison must be made, at the RIR allocation size/rate level

Re: Random Port Blocking at Hotels (was: Re: quietly....)

2011-02-05 Thread Mark Andrews
offered IPv4. Hotels ask for feedback on their services. If you see a fault report it in writing. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-05 Thread Mark Andrews
In message 4d4df75e.1040...@brightok.net, Jack Bates writes: On 2/5/2011 7:01 PM, Mark Andrews wrote: And did you change the amount of growth space you allowed for each pop? Were you already constrained in your IPv4 growth space and just restored your desired growth margins? Growth rate

Re: Random Port Blocking at Hotels (was: Re: quietly....)

2011-02-05 Thread Mark Andrews
enabled at some point. Mark Regards, John Levine, jo...@iecc.com, Primary Perpetrator of The Internet for Dummies , Please consider the environment before reading this e-mail. http://jl.ly -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Random Port Blocking at Hotels (was: Re: quietly....)

2011-02-05 Thread Mark Andrews
In message bc81acea-8dea-4380-8a57-a4f570e3c...@megacity.org, Derek J. Balli ng writes: On Feb 5, 2011, at 8:14 PM, Mark Andrews wrote: I have told a hotel they need to install equipment that supports RA guard as I've checked out. This was a hotel that only offered IPv4. Wow... Could

Re: Using IPv6 with prefixes shorter than a /64 on a LAN

2011-02-05 Thread Mark Andrews
In message 4d4e1c5d.20...@brightok.net, Jack Bates writes: On 2/5/2011 8:40 PM, Mark Andrews wrote: A IPv4 /16 supports 64000 potential customers. A IPv6 /32 supports 64000 potential customers. Either you have changed the customer estimates or changed the growth space allowances or were

Re: Top webhosters offering v6 too?

2011-02-06 Thread Mark Andrews
their products are broken or their documentation is so poor that people can't configure their boxes properly. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: quietly....

2011-02-06 Thread Mark Andrews
. Homes will be dual stacked for the next 10 years or so even if the upstream is IPv6 only. DS-Lite or similar will provide a IPv4 path. The DS-Lite service can be supplied by anyone anywhere on the IPv6 Internet that has public IPv4 addresses. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley

Re: quietly....

2011-02-06 Thread Mark Andrews
In message 4d4f27e4.6080...@brightok.net, Jack Bates writes: On 2/6/2011 4:44 PM, Mark Andrews wrote: PS3 will only be a problem if it doesn't work through double NAT or there is no IPv4 path available. Homes will be dual stacked for the next 10 years or so even if the upstream is IPv6

Re: It's the end of IPv4 as we know it... and I feel fine..

2011-02-07 Thread Mark Andrews
wireless Mark -- Scott Helms Vice President of Technology ISP Alliance, Inc. DBA ZCorum (678) 507-5000 http://twitter.com/kscotthelms -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: It's the end of IPv4 as we know it... and I feel fine..

2011-02-07 Thread Mark Andrews
In message 20110207233627.ga64...@pit.databus.com, Barney Wolff writes: On Tue, Feb 08, 2011 at 10:26:16AM +1100, Mark Andrews wrote: ... But please have them daisy chain CPE devices so that they are in the X% that have more than one CPE devices connected today. I agree it should

Re: Post-Exhaustion-phase punishment for early adopters

2011-02-08 Thread Mark Andrews
in the last category require IP addresses that are globally unambiguous. RFC 1918 addresses for machines that fall in Categories 1 and 2. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: Looking for an IPv6 naysayer...

2011-02-09 Thread Mark Andrews
their IPv6 products. We have been saying for years make sure you are ready. That means buying and testing equipment. Lots of those that tested went on to production years ago. As a vendor we like feedback on our products, good or bad. It's hard to work in a vacuum. -- Mark Andrews, ISC 1

Re: Looking for an IPv6 naysayer...

2011-02-09 Thread Mark Andrews
this breakage. =20 But for the most part they can work around breakages with a single NAT. Double NAT prevents most of the work arounds working. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Looking for an IPv6 naysayer...

2011-02-09 Thread Mark Andrews
they supplied. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Looking for an IPv6 naysayer...

2011-02-09 Thread Mark Andrews
from various tests, and is native v6. Jack DS-Lite over 6rd using RFC 1918 / multi-use ISP assigned block (I'd love to be able to say class E here) provides a single NAT translation for IPv4 and public IPv6. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61

Re: IPv6 - a noobs prespective

2011-02-09 Thread Mark Andrews
/community/blog/201101/how-to-connect-to-a-multi-homed-server-over-tcp If you just make sure your IPv6 path works that's 99.999% of the problem solved even with buggy apps. Also most broken apps will just be slow not fail completely. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: IPv6 mistakes, was: Re: Looking for an IPv6 naysayer...

2011-02-09 Thread Mark Andrews
it is a waste of time and money. How long would that be tied up in legal issues before they were freed? -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: BCP38 considerations in IPv6

2011-02-10 Thread Mark Andrews
admin all from any to fc00::/7 via gif0 add unreach admin all from fc00::/7 to any via gif0 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Looking for an IPv6 naysayer...

2011-02-10 Thread Mark Andrews
In message 4d53fd00.40...@ispalliance.net, Scott Helms writes: On 2/9/2011 7:22 PM, Mark Andrews wrote: And some of their customers have been asking for IPv6 all along. I started asking my ISP at home in 2003. I suspect if all the ISPs here were honest they would say that they have

Re: Looking for an IPv6 naysayer...

2011-02-10 Thread Mark Andrews
one is perfectly reasonable. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Leasing of space via non-connectivity providers

2011-02-10 Thread Mark Andrews
clash with address ranges already in use by customers. It can be used with 6rd so that IPv6 can be deployed over it for ISP's that have boxes that can't be upgraded to IPv6. It gives them a little more breathing room. FYI, /John John Curran President and CEO ARIN -- Mark Andrews, ISC 1

Re: IPv6 is on the marketers radar

2011-02-11 Thread Mark Andrews
that they get certain things right, as future improvements of the Internet DO depend on IPv6 being functional. They have had a #@!@ decade to add IPv6 support. They shouldn't need anymore time. Part of the reason we are in this mess is their delay in delivering products. Mark -- Mark Andrews

  1   2   3   4   5   6   7   8   9   10   >