Re: ipv6 only DNS?

2009-06-22 Thread Durand, Alain
I would suggest to read RFC3901/BCP91: ³DNS IPv6 Transport Operational
Guidelines² on this topic.

   - Alain.


On 6/21/09 5:45 PM, joel jaeggli joe...@bogus.com wrote:

 In pratice, most clients are not their own recursive resolvers.
 
 Rui Ribeiro racribe...@gmail.com wrote:
 
 Hi Steve,
 
 An IPv6 only device can hit your server if all the DNS hierachy
 resolves through IPv6. It works the same way as in IPv4.
 
 Rui
 
 2009/6/21 Steve Pirk or...@pirk.com:
  Anyone have any experience with dns and ipv6? I did a lookup on a host
 and
  it came back with only an ipv6 record. Also shows up in ident as a valid
  name. I was curious how an ipv6 only device would be able to hit my
 server.
 
  Details and more info off list, tonight if possible.
 
  --
  steve
 
 
 
 



verizon issue?

2009-06-22 Thread sip vsp
Did anyone have trouble with Verizon over the weekend?



Re: Is your ISP blocking outgoing port 25?

2009-06-22 Thread John Levine
It's a pity that MAAWG or another group hasn't written a
specification for the automatic downloading of configuration (with
certificates, to be sure, for some kind of repudiation) and the
update thereof, for adoption by the leading consumer e-mail clients.

MAAWG decided it's not in the standards business, but it does BCPs
pointing at standards elsewhere (mostly the IETF) that it encourages
people to follow.  Write a standard that people can use, and I don't
think I'd have much trouble getting them to endorse it.

It's an interesting design topic, particularly the bootstrap question
of how the client decides where to look for its configuration.  A lot
of this stuff is already available via DHCP, but of course a key goal
here is to set config info the last across reboots on different networks.

Followup to IETF-something, I suspect.

R's,
John



RE: Is your ISP blocking outgoing port 25?

2009-06-22 Thread Matthew Huff
It already is used by Microsoft. Do a google for +Microsoft +Autodiscover.

It is used by Outlook for Windows, Entourage for Mac, the iPhone and Windows
Mobile devices. Like you suggested, it uses DNS based on the users email
address and looks for a series of resolvable addresses the easiest being
autodiscover.domain-name.tld (it has others because of SSL cert
flexibility). It uses that address to download an XML file. 

The only tricky thing to set it up is that a lot of the documentation out
there is dated. It has changed since it was first released and a lot of the
documentation on technical blogs, and even on Microsoft's web site are
incorrect. Once it's setup, however, it's great. 




Matthew Huff   | One Manhattanville Rd
OTA Management LLC | Purchase, NY 10577
http://www.ox.com  | Phone: 914-460-4039
aim: matthewbhuff  | Fax:   914-460-4139



 -Original Message-
 From: Frank Bulk [mailto:frnk...@iname.com]
 Sent: Monday, June 22, 2009 11:14 AM
 To: 'John Levine'; nanog@nanog.org
 Subject: RE: Is your ISP blocking outgoing port 25?
 
 The bootstrap question is addressed by requiring the end-user to know
 their
 e-mail address and password.  Based on the domain name, the
 implementation
 would reach out to https://something.domain-name.tld and download the
 relevant schema and data for IMAP, SMTP, POP3, etc, in ordered
 priority.
 Based on what the e-mail client could support, the desired settings
 would be
 displayed, and upon end-user approval, applied. This could be leveraged
 by
 RIM for their BIS, Microsoft/Gmail/etc for smartphones, and for third-
 party
 webmail hosts such as mail2web.com
 
 Frank
 
 -Original Message-
 From: John Levine [mailto:jo...@iecc.com]
 Sent: Monday, June 22, 2009 9:24 AM
 To: nanog@nanog.org
 Cc: frnk...@iname.com
 Subject: Re: Is your ISP blocking outgoing port 25?
 
 It's a pity that MAAWG or another group hasn't written a
 specification for the automatic downloading of configuration (with
 certificates, to be sure, for some kind of repudiation) and the
 update thereof, for adoption by the leading consumer e-mail clients.
 
 MAAWG decided it's not in the standards business, but it does BCPs
 pointing at standards elsewhere (mostly the IETF) that it encourages
 people to follow.  Write a standard that people can use, and I don't
 think I'd have much trouble getting them to endorse it.
 
 It's an interesting design topic, particularly the bootstrap question
 of how the client decides where to look for its configuration.  A lot
 of this stuff is already available via DHCP, but of course a key goal
 here is to set config info the last across reboots on different
 networks.
 
 Followup to IETF-something, I suspect.
 
 R's,
 John
 



Matthew Huff.vcf
Description: Binary data


smime.p7s
Description: S/MIME cryptographic signature


Passive DWDM in Production Service

2009-06-22 Thread Vincent J. Bono
Hey Everyone,

If anyone is using, in production, passive DWDM muxes / shelves with colored 
1GigE or 10GigE optics in standard switches or routers drop me a private note?  
I'm looking for real world examples for a white paper.

Thanks in Advance,
Vin







Re: verizon issue?

2009-06-22 Thread James Kennedy (TT)
Using there metro ethernet service we saw our circuit not recover after 
scheduled maintenance. Verizon backed out the change and our service was 
restored.

- Original Message -
From: Michael Ulitskiy mulits...@acedsl.com
To: nanog@nanog.org nanog@nanog.org
Sent: Mon Jun 22 12:32:48 2009
Subject: Re: verizon issue?

Can you be more specific about the problem saw?
We're having problems with their oc3 right now, not being able to push over 
110m since this morning and still going on.
And sure can't get anything useful from verizon.
Thanks,

Michael

On Monday 22 June 2009 10:20:11 am James Kennedy (TT) wrote:
 Yes,
 
 They did some maintenance that I think went bad.
 
 -Original Message-
 From: sip vsp [mailto:sip.vsp.5...@gmail.com] 
 Sent: Monday, June 22, 2009 9:14 AM
 To: nanog@nanog.org
 Subject: verizon issue?
 
 Did anyone have trouble with Verizon over the weekend?
 
 




Re: verizon issue?

2009-06-22 Thread Christopher Morrow
On Mon, Jun 22, 2009 at 1:38 PM, James Kennedy
(TT)james.kenn...@tradingtechnologies.com wrote:
 Using there metro ethernet service we saw our circuit not recover after 
 scheduled maintenance. Verizon backed out the change and our service was 
 restored.

also, there are many heads on the verizon hydra, giving some clue as
to what part you are attempting to slay will help others out as well,
for instance:

Did anyone have problems with verizon consumer dsl/fios customers
this weekend?
Did anyone notice problems with verizon wireless phone/sms/data this weekend?
Did anyone notice problems with verizon wholesale (as701/2/3)
internet services this weekend?
Did anyone notice issues with verizon private line services? (mple
covered in this scenario)

cause yea, my verizon landline phone had a problem... but I'm betting
no one (even me) really cares about that.

-chris

 - Original Message -
 From: Michael Ulitskiy mulits...@acedsl.com
 To: nanog@nanog.org nanog@nanog.org
 Sent: Mon Jun 22 12:32:48 2009
 Subject: Re: verizon issue?

 Can you be more specific about the problem saw?
 We're having problems with their oc3 right now, not being able to push over 
 110m since this morning and still going on.
 And sure can't get anything useful from verizon.
 Thanks,

 Michael

 On Monday 22 June 2009 10:20:11 am James Kennedy (TT) wrote:
 Yes,

 They did some maintenance that I think went bad.

 -Original Message-
 From: sip vsp [mailto:sip.vsp.5...@gmail.com]
 Sent: Monday, June 22, 2009 9:14 AM
 To: nanog@nanog.org
 Subject: verizon issue?

 Did anyone have trouble with Verizon over the weekend?








RE: Is your ISP blocking outgoing port 25?

2009-06-22 Thread Ted Hardie
At 9:38 AM -0700 6/22/09, John R. Levine wrote:
  The bootstrap question is addressed by requiring the end-user to know their
 e-mail address and password.  Based on the domain name, the implementation
 would reach out to https://something.domain-name.tld and download the
 relevant schema and data for IMAP, SMTP, POP3, etc, in ordered priority.
 Based on what the e-mail client could support, the desired settings would be
 displayed, and upon end-user approval, applied.

End-user approval?  That means support calls, ISPs wouldn't like that.

I can believe something like this could be made to work, but I would think
hard about all the way that web sessions can get screwed up or hijacked
before I persuaded myself that a scheme was likely to work where it needed
to work (e.g., when connecting to a hotspot that hijacks all web sessions
until you log in) while not being subject to hostile spoofing.

Followups definitely to IETF-something.

I would suggest following up at disc...@apps.ietf.org; the folks there
can point you to things like RFC 2244 (ACAP, the Application Configuration 
Access Protocol),
describe why that got turned in XCAP by the RAI area (RFC 4825, primarily used
in SIP contexts but designed to be multi-use), and caution you that the many
hours spent designing these things have not generally born fruit in the 
marketplace.

Is this possible for email?  Sure.  With strong support from a vendor with a 
tied house
model (e.g. RIM or Apple), it might even get to be popular.  But as a general
purpose approach, it has not hit that sweet spot.

regards,
Ted Hardie

R's,
John




Interview: Patrik Fältström on the role of go vernment in IPv6 deployment

2009-06-22 Thread Alex Band

We uploaded another interview: http://www.youtube.com/watch?v=zrE1TEan4Jo

To make sure we cover as many areas of the industry as possible, we  
asked Patrik Fältström on the role of government in IPv6 deployment.  
Patrik is Senior Consulting Engineer with Cisco, but has served as an  
advisor to the Swedish government on IT policy since 2003. In the  
interview, he makes a note about the American government as well.


I hope you enjoy it. If you have feedback on specific topics you would  
like to see covered in future interviews, please let us know. We  
appreciate your comments.


Alex Band
RIPE NCC


Re: ftc shuts down a colo and ip provider

2009-06-22 Thread Jo Rhett

On Jun 4, 2009, at 9:38 PM, Randy Bush wrote:

http://voices.washingtonpost.com/securityfix/2009/06/ftc_sues_shuts_down_n_calif_we.html

while allegedly a black hat, this is the first case i know of in which
the usg has shut down an isp.  nose of camel?  first they came for ...



It's good to see them finally taking action.   I see what you are  
saying, but this isn't the case of maybe kindof bad


--
Jo Rhett
Net Consonance : consonant endings by net philanthropy, open source  
and other randomness