Re: [ob] [Ask I Ching] Apa yg terjadi dgn BUMI hari ini? 24 July 2009 at 8:25 am WIB

2009-07-23 Thread Jarmen Kell
After what happened with Dow and Oil last night, this is a very bold statement. Let's see... On Fri, Jul 24, 2009 at 8:47 AM, ichingprediction wimanto...@yahoo.comwrote: ICHING answer : Apa yang terjadi dengan BUMI hari ini? Yin (Old) Yin (New) Yang (Old) Yin (New) Yin (Old) Yang

Re: [c-nsp] SNMP ENGINE consuming CPU

2009-07-23 Thread Jeff Kell
Bill Blackford wrote: Currently I have a 7606 RSP720 hitting 94% CPU. A 'sh proc cpu sorted' indicates that SNMP ENGINE is the source. Any thoughts on this? It lays to rest the old A watched pot never boils adage... :-) Jeff ___ cisco-nsp

[c-nsp] FWSM access permissions confusion between interfaces

2009-07-22 Thread Jeff Kell
Greetings. I have an unusual (perhaps) FWSM application that is not quite working out as expected, and after several variations from different angles, still not producing quite the desired result. I have a 6509 doing VRFs for different campus communities, and since many of our services /

[c-nsp] quick 3750 question...

2009-07-22 Thread Jeff Kell
Are the stack members hot swappable ? Or is it power-cycle time when changing the stack cable configurations? [Wanting to add a new member...] Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: Traffic Statistics for Yesterday

2009-07-08 Thread Jeff Kell
Nothing like inauguration, but then we're on summer semester schedule and sparsely populated :-) There was a noticeable spike in OUTBOUND traffic and connections, mostly that ill-behaved Octoshape (udp/8247), used by CNN and maybe others. Jeff

[ob] Ada yang punya softcopy Laporan Keuangan BUMI yg terakhir?

2009-06-27 Thread Jarmen Kell
Halo OB'ers, Ada yg punya Lap.Keu BUMI yg terakhir? Q4 2008 atau Q12009?? Bisa tolong di share buat yg punya.. Thanks sebelumnya! Regards

Re: Unicast Flooding

2009-06-18 Thread Jeff Kell
Holmes,David A wrote: In a layer 3 switch I consider unicast flooding due to an L2 cam table timeout a design defect. To test vendors' L3 switches for this defect we have used a traffic generator to send 50-100 Mbps of pings to a device that does not reply to the pings, where the L3 switch

Re: [c-nsp] Global Route Leaking on same PE

2009-06-17 Thread Jeff Kell
Clue Store wrote: Anyone using a vrf for their global tables?? This solution could possibly work for me but not sure what insane issues would come up by doing this. After trying several other approaches and failing, if you can't beat them, join them... We use the global table only for

Re: [c-nsp] Global Route Leaking on same PE

2009-06-16 Thread Jeff Kell
Clue Store wrote: Hi All, Looked through the archives but couldn't find anything about this specific issue. I'm trying to leak a route from the global table on a PE to an iterface that is on the same PE but I get the folowwing when I try to just point it to a loopback. ip route vrf

Re: [c-nsp] IPTV Switch Recommendation

2009-06-10 Thread Jeff Kell
Chris Knipe wrote: We're going through the same story at this stage. Working with allot of vendors, testing, and trails. So far for us, a combination of entry level 2960s and 3560s are working fine. You are correct, the most important thing is Multicast and IGMP subscriptions, so pretty

Re: [funsec] Real Spam

2009-06-10 Thread Jeff Kell
RandallM wrote: Unwanted spam is Apple trying to load Safari on my computer everyday just because I have Itunes intstalled. That's spam. If I WANTED Safari I would go get it and even ask for it!! Or the latest Microsoft .NET update which installs an un-installable Firefox extension so that

Re: Eye protection in DWDM systems -- what threshold?

2009-06-09 Thread Jeff Kell
Reminds me of the old warning/attention sign over a termination rack... WARNING: Do not look into laser with remaining eye. Jeff

[c-nsp] Multicast over VRF possible?

2009-05-27 Thread Jeff Kell
In the process of an upgrade/reconfiguration today, I discovered that PIM multicast routing and VRF-lite are apparently mutually exclusive on a 4506. In this case, specifically IOS cat4500-entservicesk9-mz.122-50.SG1 on a Sup-IV WS-X4515. With an ip vrf forwarding ... directive, there is no

Re: [ob] For Investor Only

2009-05-21 Thread Jarmen Kell
Nice one Prof JT, Last comment below answer so many questions right to the point. -JKell- 2009/5/21 JsxTrader jsxtra...@yahoo.com Yang pasti main yearly Pak Rei.., kalau Cuma dibawah satu tahun sih saya pikir bukan investorlah, tapi Long Haul trader lah…, rit nya bukan Blok M-Tanah

Re: [c-nsp] Some advice on switches....

2009-05-13 Thread Jeff Kell
Geoffrey Pendery wrote: You might want to look at 4500 Series switches, rather than 6500. If 2960's were sufficient for your requirements (no advanced routing, Netflow, NBAR, etc) then 4500 is closer to an apples-to-apples comparison than 6500. 4500 will generally be cheaper than 6500,

Re: [c-nsp] No ACL egress logging on 3550s (12.2(44)SE3)

2009-05-08 Thread Jeff Kell
Jon Lewis wrote: I didn't think ACL logging worked in either direction on the 3550. I ran across something even more disturbing recently. A customer had an apparently compromised system found SSH scanning remote hosts. I put a simple ACL on the customer's layer 3 port (i.e. no switchport,

[c-nsp] No ACL egress logging on 3550s (12.2(44)SE3)

2009-05-07 Thread Jeff Kell
We have some 3550 EMIs that have some ACLs on their SVIs. I just ran across (through troubleshooting something else) a case where an access list with deny ... log is NOT being logged. I ran some other cases across the access list, with some additional logging, and I have been unable to get any

[c-nsp] 3750/4500 as PE?

2009-05-06 Thread Jeff Kell
Anyone running a 3750 or 4500 as a PE router (nothing fancy, just inter-VRF iBGP that really imports/exports routes)? We have a VRF-lite network but at this point only one iBGP mesh point (PE). There are cases where some of the nodes attached to the current PE could ideally route between VRFs

[c-nsp] 2975 stack... interoperability?

2009-04-29 Thread Jeff Kell
Quick question... the new[ish] Catalyst 2975 switch looks like a 2960+stacking. Do these things stack with 3750s / 3750Es ? They show up as another blade on the stack? Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Jeff Kell
Steve Pirk wrote: So, Microsoft has implemented a squid like server as part of their gateway solution for office connections to the net. If done correctly, sould be safe enough, no? You didn't catch the bit about using all the local user's caches in the common pool? One nice big fat file

Re: [funsec] OT: Queen Bohemian Rhapsody old school computer Remix

2009-04-26 Thread Jeff Kell
rac...@mcs.anl.gov wrote: There was also the fun of setting a radio in specific places on the main control panel and listen to the music it played. Somewhat better than the printer banging away as you'd get actual tones to play. An AM radio in the vicinity of an IBM 360/30 and 360/40 would

Re: [funsec] Conficker Worm Hits University of Utah Computers

2009-04-13 Thread Jeff Kell
valdis.kletni...@vt.edu wrote: Now taking bets whether this sucker waltzed onto the campus via a USB stick rather than Internet. ;) ...and propagated from that point via some Active Directory One Big Happy Family shared resource? Jeff ___ Fun and

Re: [c-nsp] 3750/3750E stack upgrade downtime?

2009-04-01 Thread Jeff Kell
Tony Varriale wrote: But, you can upgrade separate 3750 members and do one switch at a time today. You can? Doesn't the reload crash the whole stack? Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Jeff Kell
Paul Stewart wrote: Netflow would be our first choice if possible... If you can monitor it on a single span port, iftop is nice, quick, easy, and free. Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Jeff Kell
To add to my previous note... Jeff Kell wrote: If you can monitor it on a single span port, iftop is nice, quick, easy, and free. Or ipaudit, if you want longer-term samples (provides 30-minute, daily, weekly). Jeff ___ cisco-nsp mailing list cisco

[IM-Talk] Any top (or bottom) reports?

2009-03-24 Thread Jeff Kell
Are there any facilities to generate top reports? e.g., top 10 % utilization, top 10 transmit/receive, top errors, lowest uptime, oldest unreachable since, etc? Even if the web interface 'full' reports were sorted, it would be an approach. If not, please consider it as an enhancement

Re: [c-nsp] GRE throughput on 3750G

2009-03-23 Thread Jeff Kell
Ramcharan, Vijay A wrote: Thanks for the clarifications and feedback received from all. GRE on 3750 = software switched with no candy and tastes bad :-( GRE on 3845 = software switched but with candy so it's more palatable But careful, too much of it will rot your teeth :-) Jeff

Re: [c-nsp] Etherchannel and variable latency on member links

2009-03-23 Thread Jeff Kell
Peter Rathlev wrote: As far as I can understand the loadsharing is strictly deterministic, so out-of-order frames shouldn't be a problem. I assume the switch itself doesn't care about the difference; we plan to use LACP as we do on all other etherchannels. AFAIK, etherchannel will select one

Re: [funsec] religious war!

2009-03-22 Thread Jeff Kell
Drsolly wrote: On Fri, 20 Mar 2009, Rob, grandpa of Ryan, Trevor, Devon Hannah wrote: On Thu, 19 Mar 2009, David M Chess wrote: But, but...! Perl is the One True Programming Langauge! From:Gadi Evron g...@linuxbox.org C or nothing! Wimps. Just like

Re: [c-nsp] Quick question regarding trunking and routing.

2009-03-13 Thread Jeff Kell
Drew Weaver wrote: We have a 3550 which connects to two 6500s. The 3550 has some L3 vlans on it, but we also need to trunk a few of the ports up to the 6500s. I've been banging my head because I cannot figure out how to make the two uplink ports on the 3550 both trunk and route. What I

[c-nsp] PBR/VRF sanity check...

2009-03-12 Thread Jeff Kell
Aren't PBR and VRF mutually exclusive on all Catalysts, or are they possible concurrently on a 4500 or 6500? Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] 100Mb fiber aggregation/conversion/etc

2009-03-04 Thread Jeff Kell
We have a couple of areas with a need to aggregate some legacy 100FX/MM fiber runs. There are three different housing clusters that are currently all 100FX uplinks, and 100FX back to campus. In two areas we have small IDFs with 100FX back to a common plant back to campus over 100FX, one of

Re: [c-nsp] how can I know which process takes over CPU and memory?

2009-03-03 Thread Jeff Kell
Ivan Pepelnjak wrote: Your original message indicated you had a router. Based on Cisco's documentation tclsh doesn't work on most Catalyst switches. They do have their pride, after all :-) Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: ROI on IDS/IPS products

2009-02-27 Thread Jeff Kell
The day before a breach, the ROI is zero. The day after, it is infinite. -- Dennis Hoffman, RSA

Re: [c-nsp] VRF and STATIC ROUTE to GLOBAL

2009-02-25 Thread Jeff Kell
Pshem Kowalczyk wrote: I think that you're missing one other possibility (which may or may not suit you) - putting all of your routing into vrfs and doing the normal leaking between the vrfs. This way you can retain the level of granularity you want (any particular interface might be either in

Re: [c-nsp] Cannot connect to ASA using ASDM software

2009-02-10 Thread Jeff Kell
Church, Charles wrote: I'm still using 5.2.x ASDM, as the ASA is running 7.2.x still (both late interim releases). Hoping for a newer ASDM soon. 5.2(4)50 still is broken. There is a 5.2(4)52 that works with 7.2, but you have to have TAC to a custom file download (or at least you did when I

Re: [funsec] A candidate for the 'worst idea ever' award?

2009-02-06 Thread Jeff Kell
John C. A. Bambenek, GCIH, CISSP wrote: They've done so much to help online crime, why quit while they are behind. On 2/6/09, Jim Murray j...@digitaldaemons.co.uk wrote: http://news.bbc.co.uk/1/hi/technology/7874151.stm Microsoft appears to now be encouraging users to run code directly

Re: [c-nsp] 3560, 3560E, 3750E and Adv IP code EoLed?

2009-01-30 Thread Jeff Kell
Church, Charles wrote: The way I read it was that they were rolling the Adv IP features (mainly IPv6, I think) into IP Services, making Adv IP Services unnecessary. The $64K question would be, are they now going to hike the price of IP Services to make up the difference? It's already

Re: [c-nsp] Not Allowing Vlan 1 on trunk ports

2009-01-18 Thread Jeff Kell
Hitesh Vinzoda wrote: Dear All Is there a way to supress vlan 1 from passing from a trunk link coz i m not able to shutdown the L2 vlan 1. 'switchport trunk allowed vlan xx,xx,xx-xx,xx' or where supported, 'switchport trunk allowed vlan remove 1' Jeff

Re: [c-nsp] temporary static routes

2009-01-06 Thread Jeff Kell
Church, Charles wrote: Policy route with a time-based ACL maybe? Just a thought... Snortsam can do this (http://snortsam.net). It's really a plugin for snort, plus a server that manages timed blocks on a variety of firewalls/devices. You can insert the blocks via a command-line utility

Re: [funsec] Microsoft Certified Professional examination passed by nine year old

2008-12-28 Thread Jeff Kell
Jon Kibler wrote: No surprise: MCSE: Must Call Someone Experienced Microsoft Claims as Substitute for Experience Microsoft Certified Solitaire Expert. Jeff ___ Fun and Misc security discussion for OT posts.

Re: [funsec] NORAD tracks Santa

2008-12-24 Thread Jeff Kell
Two XSS's (youtube and googleapi) and flash. NORAD needs a new web designer :-) Jeff ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.

Re: [c-nsp] dns rewrite on FWSM

2008-11-27 Thread Jeff Kell
Arne Larsen / Region Nordjylland wrote: As Jen Likova wrote it should be possible to change the answer from an public dns server. My problem is that we got to access RFC1918 address from our internal network to dmz web-servers, and public users need to use public address off cause. So by

Re: [funsec] ChamsCity: World’s Largest Cyber Ce ntre is in Lagos Nigeria

2008-11-08 Thread Jeff Kell
Paul Ferguson wrote: Somewhat ironic -- maybe they should call it ShamCity instead. :-) I especially liked the Nigerian information technology firm with specialisation in identity management and related solutions bit. Jeff ___ Fun and Misc security

Re: [funsec] WTF Watch: EstDomains, Inc Takes Next Step in Combating Spam and Malware

2008-10-23 Thread Jeff Kell
Paul Ferguson wrote: Today EstDomains, Inc (http://www.estdomains.com) is glad to introduce to the internet-oriented community advanced software created especially for browsing through the World Wide Web in order to detect corrupted and potentially dangerous websites. Well, they fscking

[c-nsp] lite versus base

2008-10-08 Thread Jeff Kell
Can anyone explain what exactly are the differences between the 2950/2960 LAN base versus lite versions, other than the 33% price hike? Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Jeff Kell
Michel Grossenbacher wrote: Uhm my bad, yes you're right. I dont know why I still think that all IOS versions got the same architecture and base features, I should know it by now :-) Indeed. If it looks like a duck, walks like a duck, and quacks like a duck, it's probably an Early Deployment

[c-nsp] Propagating a default route...

2008-09-30 Thread Jeff Kell
Having an issue with BGP... I have a border router that can't do full feeds (6500/Sup2) so it is taking partials (upstream customers). I am trying to make decisions on which upstream to use as a default route. For traffic shaping purposes, I have a server that acts as an eBGP peer to get the

RE: [Discuss-gnuradio] USRP receiver filter response

2008-09-24 Thread Kell, Scott
discrepancy in the filter response? Or am I missing something obvious... [1] http://lists.gnu.org/archive/html/discuss-gnuradio/2007- 05/msg00191.html [2] http://www.nabble.com/file/8500/%280%20- %2032%29MHz%29%20CIC%20Frequency%20Response%20%28CIC%20decimation%20%3D3 2% 29.JPG [Kell

RE: [Discuss-gnuradio] USRP receiver filter response

2008-09-24 Thread Kell, Scott
What gain do you have set for the receive side? Good point - I forgot to mention that I set the gain to 0 via the --gain=0 switch passed to usrp_fft.py. So I shouldn't be seeing any clipping. Also, another detail that I forgot to mention - I didn't consider the carrier at the center

[c-nsp] VRF RD/RT... your preferences?

2008-09-24 Thread Jeff Kell
The recent discussion of VRFs, RDs, RTs, VPNv4 labels, etc was interesting, and starting to sink in. I've been in early stages of a VRF-lite deployment for some time. Admittedly, from a VRF-lite perspective, a lot of the configuration is essentially cut-and-paste, and most of the values you can

[Discuss-gnuradio] USRP receiver filter response

2008-09-19 Thread Kell, Scott
in the filter response? Or am I missing something obvious... Thanks! Scott [1] http://lists.gnu.org/archive/html/discuss-gnuradio/2007-05/msg00191.html [2] http://www.nabble.com/file/8500/%280%20-%2032%29MHz%29%20CIC%20Frequency%20Response%20%28CIC%20decimation%20%3D32%29.JPG Scott Kell Technical

Charter weirdness...

2008-09-11 Thread Jeff Kell
Anyone here with Charter? Please contact me off-list unless you're already aware of DNS weirdness... Jeff

Re: [c-nsp] 100FX Ports or Media Convertors?

2008-09-11 Thread Jeff Kell
[EMAIL PROTECTED] wrote: Hi, we have quite a lot of 100Mb fibre distribution but it is spread across many locations so 24 fibre ports out from any location is just about enough. My question is now, the 3550-FX has gone and I need to replace some units the way forward with integrated ports is

[c-nsp] 10G Xenpak 'virgin' question

2008-09-09 Thread Jeff Kell
We're trying to light up our first 10G Xenpak link, so far without success, so I'm looking for a quick sanity check. 3750G-16TD switch with an LR Xenpak [ours], trying to link to a Ciena [not ours] add/drop ONS. We had some marginal power levels trying to backhaul the circuit across campus, so

Re: [c-nsp] VRF Lite Route Propagation

2008-08-14 Thread Jeff Kell
Nick Griffin wrote: I've figured out how to exchange routes between VRF's with the bgp address family configuration coupled with redistribute static|connected, etc however I'm trying to propagate this information and I'm having problems getting it to work as desired. I'll take a guess at your

[c-nsp] Quick 6500 Sup2 / BGP / memory...

2008-07-30 Thread Jeff Kell
Quick question for someone that's been there done that from someone who has said I thought it would work more often than I'd like :-) Can you get a full BGP feed (two peers) into a Sup2? with uRPF? Which RAM needs to be upgraded? I found out the hard way it won't fit into a SUP2/MSFC2/PFC2

Re: [c-nsp] Renaming interfaces on a PIX 525

2008-07-23 Thread Jeff Kell
Mathias Spoerr wrote: Hello Steve, when I remember correctly - when you rename the interface, then also the related config parts, where the interface name is used, are changed. Keep a good backup of the config just in case, especially if you're talking about trying this with PDM/ASDM. They

Re: [c-nsp] Renaming interfaces on a PIX 525

2008-07-23 Thread Jeff Kell
Justin Shore wrote: You might be thinking that you can simply download a copy of the startup-config to a tftp server, modify it and upload it back over top of the startup-config (or running-config). First off I can't remember where the startup-config is located on the PIX/ASAs or if it can be

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Jeff Kell
Gadi Evron wrote: The original number is from some research in the 70s. Yeah. Before the internet :-) Jeff ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open

Re: [funsec] Texas Bank Dumps Antivirus for Whitelisting

2008-07-17 Thread Jeff Kell
Richard M. Smith wrote: So under HA, a Web browser can only show ASCII text files. After all, HTML itself is a programming language with intermingled code (ie., HTML tags) and data (text). Well, it's not *that* bad. HTML tags and other markup that affects the layout is fine. Tables, forms,

Re: Avg. Packet Size - Again?

2008-07-16 Thread Jeff Kell
As Valdis stated earlier: I predict that if you graph it, there's a ton of packets that are right around the MTU of the network. almost equal number of tiny packets carrying the ACK's of the mobygrams, and then a small noise level of everything else. That's pretty much the case for the last

[c-nsp] FWSM with multiple vlans, NAT quandry...

2008-07-14 Thread Jeff Kell
I seem to have backed myself into a corner and am looking for suggestions... Our campus is largely RFC1918 internally. The original hub-and-spoke design was along the lines of assigning a 10.x.x.x/16 or larger block to significant buildings, so each building was it's own routed domain

[Clgestion-dev] refocused salute

2008-06-15 Thread Kell Ogbonnaya
Salut, http://FqpY.lakepaint.cn Be called on for a sample? Suppose i should be i began to thank him, but he cut me short. It but i have heard your apostlei have heard master few years, when christmas began to be considered will cover them, or whitewine, winevinegar, or in greasy coils. Other

Re: [c-nsp] IOS for Multi-vrf

2008-06-13 Thread Jeff Kell
Gary Roberton wrote: Anyone know the IOS image required (e.g. Enterprise Base) for Multi-VRF (VRF-Lite) on a 2811 router. Almost all L3 images will do VRF lite. But non-static routing between them, or especially providing an MPLS or tunnelled endpoint pipe between CEs/PEs is gonna cost you

Re: [funsec] XP SP3 Installs Older, Vulnerable Version of Flash Player

2008-06-02 Thread Jeff Kell
Dave Nelson wrote: IIRC Microsoft's reasoning for not shipping SP3 with a newer version was that their license for flash only covered the older version that they include in the update. Does it reinstall the older ActiveX, the older plugin [e.g., Firefox], or both? Jeff

[c-nsp] Multiple VRFs into common 'internet' gateway

2008-05-29 Thread Jeff Kell
We're in the planning process for a better way to get multiple VRFs meshed into a common 'internet' gateway, preferably without unintentional cross-leakage between them. There are brute-force methods (run them all to the edge) but we really do need to have some leakage across certain VRFs.

Re: [c-nsp] 6509 power supply question

2008-05-23 Thread Jeff Kell
On a somewhat related note... we have a 6509 that was somehow originally wired for 110v, so we're only getting half the power rating out of them. I have new 220v mains, plugs, and cables ready... can they be bumped over one at a time hot, or does it have to be down cold? Seems to be a similar

Re: [IM-Talk] InterMapper 5.0 is available

2008-05-21 Thread Jeff Kell
So has netflow disappeared into the great real soon now cloud in the sky? :-) Jeff List archives: http://www.mail-archive.com/intermapper-talk%40list.dartware.com/ To unsubscribe: send email to: [EMAIL PROTECTED]

Re: [c-nsp] ASA 5510's to Redundant Switches?

2008-04-30 Thread Jeff Kell
Kaj Niemi wrote: The ASA does not support STP. If you run recent enough software you may be able to use redundant interface pairs (assuming you are looking for redundancy). Redundant pairs? On the same box? Is that in 8.x? The typical redundancy setup is similar to

[c-nsp] ASAs and multiple context mode...

2008-04-23 Thread Jeff Kell
Have an interesting issue, and no testbed available to evaluate my options, curious if anyone has been there, done that... Have a pair of ASAs running multiple contexts in active/active failover mode. They are basically multiple contexts with an inside and outside interface. The insides are

Re: [c-nsp] Cisco 3550-12G VSI stops routing traffic

2008-04-22 Thread Jeff Kell
Are you using route authentication? We had issues with SVI VRF interfaces with some recent specific IOS releases (worked in older releases). If you are doing authentication and this might be relevant, let me know and I'll fish up the details. In our case, EIGRP with route authentication

Re: [c-nsp] Learning L2 switching and spanning tree by doing

2008-04-10 Thread Jeff Kell
Dean Smith wrote: If you've ever had a real networkand accidentally created a loop in an environment without spanningtreeand then watched the network melt and all the activity lights go solidspanning-tree becomes much easier to understand. You can learn a lot about spanning tree

[c-nsp] Trunking Catalyst to HP Procurve...

2008-04-01 Thread Jeff Kell
Hopefully this will ring a bell with someone that has been there done that and can save me a road trip with a sniffer... We recently added a few HP ProCurve switches (2810s) at the access layer using simple trunks back to our existing Ciscos (2950/2960/3550/3560s). All is well with the

Re: [funsec] The World’s Oldest Sound Recordings P la

2008-03-28 Thread Jeff Kell
Juha-Matti Laurio wrote: OT but cool: http://www.firstsounds.org/press/032708/index.php Au Clair de la Lune - French folk song, back to 1860... And the RIAA can't be far behind in shutting down that website :-) Jeff ___ Fun and Misc security

[funsec] Spam mail authentic validation verified :-)

2008-03-20 Thread Jeff Kell
I received this little gem yesterday... Jeff -Registered and USDA/FDA apprvoved- You're invited to purchase! We are pleased that you were referred to us. We would like to invite you to our special website only available to existing customers. As a referral we are extending this

[Discuss-gnuradio] USRP and Microsoft DirectShow

2008-03-17 Thread Kell, Scott
Hi, I would like to create a Microsoft DirectShow source filter for the USRP (so I can integrate the USRP with an existing base of DirectShow filters; DirectShow is Microsoft's multimedia architecture). Before I re-invent the wheel, has anyone done this before? Thanks! Scott Kell

Re: [c-nsp] Bogon Filter - Least Resource/CPU intensive method?

2008-03-06 Thread Jeff Kell
Justin Shore wrote: Personally I'm still using ACLs on my border routers. At this point in time I want the ACE hit counters for those rogue packets Hrmmm... will these show up in netflow in some identifiable fashion? Jeff ___ cisco-nsp mailing list

Re: [c-nsp] Bogon Filter - Least Resource/CPU intensive method?

2008-03-05 Thread Jeff Kell
roy wrote: IIRC, ip route bogon/net null0 will filter on near line-rate based on destination addresses. rpf (strict/loose) on the other hand will accomplish a somewhat similar solution as with your acl to filter packets based on source addresses consuming less resources (assuming you have

Bug#207811: Response to Resume

2008-02-25 Thread berton kell
Lotus, a luxury goods company, based in Netherlands, is currently seeking virtual assistants to work at the convenience of their home, part-time. We have reviewed your resume on Careerbuilder and would like to consider you for this position. Lotus presents the best off-season luxury finds from

Re: [c-nsp] 3650G Port security and multicast.

2008-02-25 Thread Jeff Kell
Adrian Minta wrote: Xavier Beaudouin wrote: Here is any magic way to filter / remove any multicast traffic from machines connected on Gi 0/1 (eg avoid machine that is on this port to send any multicast packets on network). ! interface GigabitEthernet0/1 switchport access vlan 3

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stefan Kell
? OpenBSD 3.9 is quite old but rdr should work quite well. I use this since OpenBSD 3.4 Regards Stefan Kell

Re: Big stack HUGE coredump

2008-02-23 Thread Stefan Kell
Kell On Sat, 23 Feb 2008, Alexander Nasonov wrote: Hi, If I set a core limit to unlimited and a stack limit to 32768, then run a program with indefinite recursion, the system would generate 8G coredump file. Here we go: $ uname -a OpenBSD obx1000 4.2 GENERIC#375 i386 $ ulimit -a time(cpu-seconds

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stefan Kell
Hello, On Sat, 23 Feb 2008, Stuart Henderson wrote: On 2008-02-23, Stefan Kell [EMAIL PROTECTED] wrote: Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Greetings ...snip... rdr on $ext_if proto tcp from any to 192.168.1.121 port 80 - 127.0.0.1 port 5000 ...snip I'm running

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stefan Kell
Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Stefan Kell wrote: Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Greetings ...snip... rdr on $ext_if proto tcp from any to 192.168.1.121 port 80 - 127.0.0.1 port 5000 ...snip I'm running OpenBSD 3.9 (i386) on both

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stefan Kell
Hello, Original-Nachricht Datum: Sat, 23 Feb 2008 21:29:06 + Von: elaconta.com Webmaster [EMAIL PROTECTED] An: Stefan Kell [EMAIL PROTECTED] CC: misc@openbsd.org Betreff: Re: Web Traffic forwarding, PF and NC Stefan Kell wrote: Hello, On Sat, 23 Feb 2008

Re: Sending mail from external firewall to external mail server (behind firewall)

2008-02-20 Thread Stefan Kell
, especially paragraph Translation rules apply only to packets that pass through the specified interface,... Regards Stefan Kell

Re: Question about Implementing authpf, squid and ldap authentication....

2008-02-20 Thread Stefan Kell
and then you have probably no security. If possible I would not allow direct access to the internet but only via squid. regards Stefan Kell

Re: Sending mail from external firewall to external mail server (behind firewall)

2008-02-20 Thread Stefan Kell
Hello, On Wed, 20 Feb 2008, Albert Chin wrote: On Wed, Feb 20, 2008 at 08:55:44AM +0100, Stefan Kell wrote: Original-Nachricht Datum: Tue, 19 Feb 2008 22:36:20 -0600 Von: Albert Chin [EMAIL PROTECTED] An: misc@openbsd.org Betreff: Sending mail from external firewall

Re: need some help with base httpd

2008-02-18 Thread Stefan Kell
files has to be complete regarding to configurations and options. Otherwise in which order should these files be included? Regards Stefan Kell

Re: need some help with base httpd

2008-02-18 Thread Stefan Kell
definition. Otherwise there would be numerous problems with sorting these files and so on. I cannot see this well explained in the documentation but you can see it easily in the source of httpd. Regards Stefan Kell

Re: [c-nsp] ASA 7.2(3) SNMP issues?

2008-02-18 Thread Jeff Kell
Frank Schadwill wrote: From TAC you got the image 7.2.3.17, there is this issue fixed. Last interim release available on CCO is 7.2.3(12). You'll have to open a TAC case to get it (they gave me 7.2.3(13), which worked). Jeff ___ cisco-nsp mailing

[c-nsp] ASA 7.2(3) SNMP issues?

2008-02-15 Thread Jeff Kell
Recently upgraded 7.2(2) - 7.2(3)12 and our network monitors stopped reading interface stats off the ASAs. Anyone know of any issues? We can get system status fine, so it's not an SNMP permissions issue; but interface stats disappeared. Jeff ___

Re: ports.openbsd.nu

2008-02-10 Thread Stefan Kell
Thank's a lot! This is good to know! Stefan Original-Nachricht Datum: Sun, 10 Feb 2008 14:07:23 + (UTC) Von: Fredrik Carlsson [EMAIL PROTECTED] An: misc@openbsd.org Betreff: Re: ports.openbsd.nu Edd Barrett vext01 at gmail.com writes: hey, what happened to

Re: WAP setup problems

2008-02-07 Thread Stefan Kell
Hello, On Wed, 6 Feb 2008, Brian Richardson wrote: Stefan Kell wrote: some other questions: why a bridge and why not simple router with pf? What is your bridge configuration? vr0 is internal interface. ral0 is wireless interface. brconfig bridge0 add ral0 brconfig bridge0 add vr0

Re: WAP setup problems

2008-02-06 Thread Stefan Kell
Hello, Original-Nachricht Datum: Tue, 05 Feb 2008 18:55:43 -0700 Von: Brian Richardson [EMAIL PROTECTED] An: Stefan Kell [EMAIL PROTECTED] CC: misc@openbsd.org Betreff: Re: WAP setup problems Stefan Kell wrote: Did you try using one shared-network with two different

Re: WAP setup problems

2008-02-05 Thread Stefan Kell
. Regards Stefan Kell

Re: [funsec] Math not Ironport's top suite?

2008-02-04 Thread Jeff Kell
Gadi Evron wrote: On Sun, 3 Feb 2008, Larry Seltzer wrote: I believe 24/7 covers it. Why the rest? Why not just 24? 24 hours means 24 hours. 24 hours 7 days a week means all the time. Reminds me of the old Steven Wright joke about the man walking up to a convenience

Re: dhcp error message

2008-02-03 Thread Stefan Kell
or wireless? Regards Stefan Kell

Re: dhcp error message

2008-02-03 Thread Stefan Kell
Hello, On Sat, 2 Feb 2008, Richard Daemon wrote: On Feb 2, 2008 2:49 PM, Stefan Kell [EMAIL PROTECTED] wrote: Hello, On Fri, 1 Feb 2008, Jim M wrote: Sorry I wasn't clear. What my mind was thinking wasn't coming across. I hope this helps. I have a firewall that runs on a Sun Ultra 5

<    1   2   3   4   5   6   7   8   9   >