[j-nsp] CVE-2023-4481

do we have a recommended `bgp-error-tolerance {}` config to deal with CVE-2023-4481? and what does one do on antique hardwhere with. e.g., junos 14? randy ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/

Re: [j-nsp] 15->14 or 14 install media

> You should be able to downgrade, you may need no-validate to get > there. thanks. did not need no-validate. randy ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] 15->14 or 14 install media

lost the ssd on a m7i. after replacing ssd, went to install. juniper download only had 15.1 install media, `install-media-15.1R7`. no problem installing, but it is a memory hog compared to 14.2. the download page even warned of this. but i can not see how to get a 14.x install media off the web

Re: [j-nsp] polishing an antique m7i

>> - old m7i with RE-B-1800X1-4G-S >> - currently running 14.2R7.5 >> - hard disk dying >> - have nice new 1tb sata ssd for it >> - juniper support download is pushing 15.1R7.9 at me >> - should i worry about increased memory use or license changes in 15? >> - if so, where the heck is 14? > > If 1

[j-nsp] polishing an antique m7i

- old m7i with RE-B-1800X1-4G-S - currently running 14.2R7.5 - hard disk dying - have nice new 1tb sata ssd for it - juniper support download is pushing 15.1R7.9 at me - should i worry about increased memory use or license changes in 15? - if so, where the heck is 14? - and with the support portal

Re: [j-nsp] upgrading an antique 240

made it from 14.2 to 15.1 so far. a silly question. to where are folk uploading the to-be-installed images? my old fingers want /var/tmp, but it gets blown away. and there ain't a lot of space root@r1:/packages # df -h Filesystem SizeUsed Avail Capacity Mounted

Re: [j-nsp] upgrading an antique 240

> Limited/Unlimited depends on your geographic region and if your > encryption access is limited. ahhh; still that silliness. it is in amerika. > As for 64/32 bit, check what it’s running now and go from there: > > ‘show version | match kernel’ > https://kb.juniper.net/InfoCenter/index?page=con

Re: [j-nsp] upgrading an antique 240

> Sounds like you’ll need to go to 15.1, then 16.1, then 16.2. looking at the first step, 15.1, https://support.juniper.net/support/downloads/?f=mx do i want the 32-bit or 64-bit, Limited or Unlimited? considering where i want to go, wazza diff? randy

Re: [j-nsp] upgrading an antique 240

> Good point! TSB16735 says last version of Junos to support SCB-MX960 is 16.2 > >> Junos 17.3R3-S10 >> Junos 18.4R2-S5 >> Junos 19.3R3-S2 >> Junos 19.4R3-S3 so which steps to get from 14 to 16.2? 15.x 16.2? randy ___ juniper-nsp mailing list juniper-

[j-nsp] upgrading an antique 240

given Item Version Part number Serial number Description ChassisJN11ADDA1AFC MX240 Midplane REV 07 760-021404 ABAB0443 MX240 Backplane FPM BoardREV 03 760-021392 ABBD9880 Front Panel Di

Re: [j-nsp] Connection attempt from unconfigured session

> Works fine for me with "port 179 AND host :::222.77.14.229". doh. > Since the tcpdump on juniper platform usually catches only packets > routed to the RE, tcpdump shouldn't catch many packets and you should > be good with the "port 179" only. not on this one, an exchange point router. mul

[j-nsp] Connection attempt from unconfigured session

i am getting a lot of these on my seattle internet exchange interface May 4 00:18:39 rpd[1485]: rv_listen_accept: Connection attempt from unconfigured session: ::Ffff:222.77.14.229+40604 May 4 00:23:36 rpd[1485]: rv_listen_accept: Connection attempt from unconfigured session: :::222.77.14

[j-nsp] nagios ssh check seems to whomp ssh daemon

junos 8.5R1.14 on an m5 May 14 16:35:11 psg1 inetd[4215]: /usr/sbin/sshd[4815]: exited, status 255 May 14 16:40:10 psg1 inetd[4215]: /usr/sbin/sshd[4817]: exited, status 255 May 14 16:45:10 psg1 inetd[4215]: /usr/sbin/sshd[4819]: exited, status 255 May 14 16:50:10 psg1 inetd[4215]: /usr/sbin/sshd[