Re: 2511 line break

2004-07-27 Thread Joe Abley
On 27 Jul 2004, at 10:13, Joe Abley wrote: On 27 Jul 2004, at 08:10, Ingo Flaschberger wrote: if there is an ssh enabled ios (i presume thats an cisco 2511), then you could do an flash and mem upgrade before login. There are ssh loads for the 2511, because I've downloaded them and loaded them on

Re: 2511 line break

2004-07-27 Thread Steven M. Bellovin
In message <[EMAIL PROTECTED]>, Ingo Flasch berger writes: > >also telnet is sometimes the last chance over "full" lines (encryption >likes packetloss) > This doesn't make much sense. ssh and telnet both run over TCP; TCP handles any lost packets. If you're talking about IPsec, it was engine

Re: 2511 line break

2004-07-27 Thread Petri Helenius
Steven M. Bellovin wrote: random bit errors. But the latter is very unlikely -- you were talking about congestion -- and the effect of the former is minimal compared to the speed of any likely line. Some people run queuing algorithms based on packet size on narrow links. Pete

What ever happened to... MARP (Multi-Access Reachability Protocol)

2004-07-27 Thread Sam Stickland
Last draft appeared to be http://www.watersprings.org/pub/id/draft-retana-marp-02.txt which expired Sept 2003 (Abstract: defines a protocol to quickly determine the existence or aliveness of devices attached to a shared media (broadcast) subnet.) First read about it in this presentation, where

RE: 2511 line break

2004-07-27 Thread Joel Jaeggli
On Mon, 26 Jul 2004, Michel Py wrote: Joe Abley wrote: There are no ssh loads for the 2511 that allow you to actually use ssh with a non-null cypher without triggering watchdog timers on the router though, last time I checked. Same here. There is more CPU power in a dishwasher than in a 2611 these

RE: 2511 line break

2004-07-27 Thread Michel Py
MP> Michel Py typed: MP> Same here. There is more CPU power in a dishwasher than in MP> a 2611 these days. > Rafi Sadowsky > Did you mean a 2511? Doh, yes! Thanks for correcting. The 2600 is quite more capable, that would be a DVR not a dishwasher (no joke: the TiVo DVR is a low-end PowerPC with

Re: What ever happened to... MARP (Multi-Access Reachability Protocol)

2004-07-27 Thread Niels Bakker
Carlson Per <[EMAIL PROTECTED]> wrote on cisco-nsp about this subject that BFD probably won over MARP: http://www.ietf.org/internet-drafts/draft-katz-ward-bfd-02.txt ... noting that a few other I-Ds built forward on BFD rather than MARP. -- Niels. -- Today's subliminal thought is:

RE: 2511 line break

2004-07-27 Thread Michel Py
>> Michel Py wrote: >> Dumb Cisco/SSH question: how do you get a banner to >> display _before_ the ssh user/pass prompts? > Christopher McCrory wrote: > On older IOS images with SSH protocol 1 , you can't > because the protocol does not support it. You need > SSH protocol 2. IIRC, only found in

ad.doubleclick.net missing from DNS?

2004-07-27 Thread Sean Donelan
The A record for ad.doubleclick.net is missing from DNS. This is causing apparent web page slowdowns when viewing web sites containing ads linked to ad.doubleclick.net

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Robert Bonomi
>From [EMAIL PROTECTED] Tue Jul 27 11:37:36 2004 Date: Tue, 27 Jul 2004 12:34:04 -0400 (EDT) From: Sean Donelan <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: ad.doubleclick.net missing from DNS? The A record for ad.doubleclick.net is missing from DNS. This is causing apparent web page sl

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Ricardo \"Rick\" Gonzalez
> The A record for ad.doubleclick.net is missing from DNS. This is > causing apparent web page slowdowns when viewing web sites containing ads > linked to ad.doubleclick.net Adding an entry in LMHOSTS or /etc/hosts pointing ad.doubleclick.net to 127.0.0.1 is generally a good idea, especially if

YNT: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Mehmet Akcin
Sounds neat idea, worth giving a try. Mehmet Akcin www.akcin.net -Özgün İleti- Kimden: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Yerine Ricardo "Rick" Gonzalez Tarih: Tuesday, July 27, 2004 7:59 PM Kime: Sean Donelan Bilgi: [EMAIL PROTECTED] Konu: Re: ad.doubleclick.net missing from DN

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Marcus Reid
Hi, On Tue, Jul 27, 2004 at 12:34:04PM -0400, Sean Donelan wrote: > > > The A record for ad.doubleclick.net is missing from DNS. This is > causing apparent web page slowdowns when viewing web sites containing ads > linked to ad.doubleclick.net Actually, it appears to me that all of dclk's nam

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Stephen Stuart
> Adding an entry in LMHOSTS or /etc/hosts pointing ad.doubleclick.net > to 127.0.0.1 is generally a good idea, especially if you value your > privacy. Better still, run an http listener on (for example) 127.0.0.2 port 80, using the appropriate /etc/hosts glue to map whatever hostnames you like t

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Chris Adams
Once upon a time, Sean Donelan <[EMAIL PROTECTED]> said: > The A record for ad.doubleclick.net is missing from DNS. This is > causing apparent web page slowdowns when viewing web sites containing ads > linked to ad.doubleclick.net It looks like the problem isn't that the A record is missing, it

Re: 2511 line break

2004-07-27 Thread Valdis . Kletnieks
On Tue, 27 Jul 2004 14:00:44 +0300, Petri Helenius said: > Some people run queuing algorithms based on packet size on narrow links. Well... if you're queueing biggest-packet-first, yes, the ssh can get starved indefinitely if there's enough web browsers downloading pages or P2P traffic. If you'r

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Peter Corlett
Stephen Stuart <[EMAIL PROTECTED]> wrote: [...] > Better still, run an http listener on (for example) 127.0.0.2 port > 80, using the appropriate /etc/hosts glue to map whatever hostnames > you like to that address, and answer requests with null content; the > remainder of the page will complete fa

Re: 2511 line break

2004-07-27 Thread Petri Helenius
[EMAIL PROTECTED] wrote: Yes, it *could* make connecting to shoot that port that's spewing ICMP at line rates a bit challenging, but you knew that when you chose the queueing algorithm, right? There is also an infinite supply of idiots and mediocre network engineers. Breaking up stuff is easier

CWDM or DWDM passive add/drop muxes

2004-07-27 Thread Greg Schwimer
Does anyone have any experience with GBIC-based CWDM and/or DWDM optical add/drop muxes (OADM)? I'm presently looking at the Cisco product lines which combines GBICs with passive multiplexors and am curious as to alternative manufacturers and the experiences other might have in these types of

RE: CWDM or DWDM passive add/drop muxes

2004-07-27 Thread Jim Devane
I have been pretty happy with the MRV box. It is passive and it not manageable like an ONS etc. It has been rock solid for some time. www.mrv.com Specifically, we are using the CWDM EM316PAMULC. The only bad thing I would say is there is often a several week delay on delivery of ordered parts.

Re: 2511 line break

2004-07-27 Thread Randy Bush
> So, it *is* possible to use ssh to connect to a 2511, at least a 2511 > with absolutely nothing else to do. Whether or not this will be useful > will depend on how busy your router is. as i said in my original post, i am using the 2511 as the terminal server for a bunch of out-of-band console

Re: 2511 line break

2004-07-27 Thread Randy Bush
> There is also an infinite supply of idiots and mediocre network > engineers. Breaking up stuff is easier than making it robust Ettore Bugatti, maker of the finest cars of his day, was once asked why his cars had less than perfect brakes. He replied something like, "Any fool can make a car sto

Re: 2511 line break

2004-07-27 Thread Niels Bakker
* [EMAIL PROTECTED] (Randy Bush) [Tue 27 Jul 2004, 21:22 CEST]: > Ettore Bugatti, maker of the finest cars of his day, was once asked > why his cars had less than perfect brakes. He replied something > like, "Any fool can make a car stop. It takes a genius to make a > car go." Luckily, these da

Re: Barracuda Networks Spam Firewall

2004-07-27 Thread Joe Hamelin
Is anyone else on NANOG having problems with Barracuda today? I'm getting massive latency (3000+ seconds) and it seems as if their tech support has gone into meltdown. While on hold I was even connected to another customer with the same problem. -- Joe Hamelin Edmonds, WA, US

Re: SPF deployment by Oct. 1 ?

2004-07-27 Thread James Couzens
On Sat, 2004-07-24 at 18:49, John Bittenbender wrote: > http://www.infoworld.com/article/04/07/22/HNmicrosoftid_1.html > > As a side note, I notice that the article mentions a submission to the > IETF but I haven't seen any RFC's related, if there is one out there > can someone please point it out

Re: CWDM or DWDM passive add/drop muxes

2004-07-27 Thread Ingo Flaschberger
Does anyone have any experience with GBIC-based CWDM and/or DWDM optical add/drop muxes (OADM)? I'm presently looking at the Cisco product lines which combines GBICs with passive multiplexors and am curious as to alternative manufacturers and the experiences other might have in these types of

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Karsten W. Rohrbach
Sean Donelan([EMAIL PROTECTED])@2004.07.27 12:34:04 +: > The A record for ad.doubleclick.net is missing from DNS. This is > causing apparent web page slowdowns when viewing web sites containing ads > linked to ad.doubleclick.net Short remedy recipee: - Download Firefox -> http://www.mozilla.

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Sean Donelan
http://www.washingtonpost.com/wp-dyn/articles/A18735-2004Jul27.html DoubleClick spokeswoman Jennifer Blum said the attack targeted the company's domain name servers (DNS) -- machines that help direct Internet traffic -- causing "severe service disruptions" for all 900 of its customers. Bl

Re: SPF deployment by Oct. 1 ?

2004-07-27 Thread Douglas Otis
On Tue, 2004-07-27 at 13:38, James Couzens wrote: > On Sat, 2004-07-24 at 18:49, John Bittenbender wrote: > > http://www.infoworld.com/article/04/07/22/HNmicrosoftid_1.html > > > > As a side note, I notice that the article mentions a submission to the > > IETF but I haven't seen any RFC's related

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Henry Linneweh
While I disagree with the method of the attacker, I can understand the reasoning behind an attack on a company that is considered a spyware company, doubleclick certainly has turned up more than once on my version of spybot as a site to block. -Henry --- Sean Donelan <[EMAIL PROTECTED]> wro

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread John Palmer
Now the question is, can one easily block all of doubleclick.net by 127.0.0.1 in the hosts file on a wincrash box? They appear to have ad, ad2, ad3, m2, m3.doubleclick.net. Anyone know what hosts to list??? (ie: ad2, ad3 ... to ad???) - Original Message - From: "Henry Linneweh" <[EMAI

Re: CWDM or DWDM passive add/drop muxes

2004-07-27 Thread Eric Kuhnke
You may be interested in: http://www.cubeoptics.com/ Passive CWDM devices available with SC or LC connector cable pigtails on them... I believe you can get models to split orr or add just a single wavelength to a 4 or 8 wavelength mux. Greg Schwimer wrote: Does anyone have any experience with G

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread John Hall
I got my list from somewhere else, but lost the link. Try: http://www.google.com/search?hl=en&ie=UTF-8&q=hosts+ad+blocking+servers&btnG=Google+Search Lot's there. JMH John Palmer wrote: Now the question is, can one easily block all of doubleclick.net by 127.0.0.1 in the hosts file on a wincrash b

Re: Barracuda Networks Spam Firewall

2004-07-27 Thread Joe Hamelin
I just talked to Heather (sales) at Barracuda and was told that there would be a FIRMWARE release in the morning to fix a problem with virus detection. It seems that the support ppl can't really do anything right now and their phone system is melting. The word is to hold tight for a fix. -- Jo

Re: 2511 line break

2004-07-27 Thread Richard Welty
On Tue, 27 Jul 2004 09:22:25 -1000 Randy Bush <[EMAIL PROTECTED]> wrote: > > There is also an infinite supply of idiots and mediocre network > > engineers. Breaking up stuff is easier than making it robust > Ettore Bugatti, maker of the finest cars of his day, was once asked > why his cars had

Re: 2511 line break

2004-07-27 Thread Stephen J. Wilcox
On Tue, 27 Jul 2004, Richard Welty wrote: > you can tell someone has become an intermediate driver because > they start regularly trashing their brakes. > > you can tell someone has become an advanced driver when they > learn how to go even faster while not trashing their brakes. brakes?? o

Re: 2511 line break

2004-07-27 Thread Jeff Shultz
** Reply to message from "Stephen J. Wilcox" <[EMAIL PROTECTED]> on Wed, 28 Jul 2004 00:50:19 +0100 (BST) > On Tue, 27 Jul 2004, Richard Welty wrote: > > > you can tell someone has become an intermediate driver because > > they start regularly trashing their brakes. > > > > you can tell someone

Re: Barracuda Networks Spam Firewall

2004-07-27 Thread Matthew Crocker
My Series 400 seems to be doing fine today. Average queue latency 4 seconds which is about normal. Do you have any special config settings? -Matt On Jul 27, 2004, at 7:21 PM, Joe Hamelin wrote: I just talked to Heather (sales) at Barracuda and was told that there would be a FIRMWARE release in

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Chris Brenton
On Tue, 2004-07-27 at 18:21, John Palmer wrote: > > Now the question is, can one easily block all of doubleclick.net by 127.0.0.1 in the > hosts file > on a wincrash box? They appear to have ad, ad2, ad3, m2, m3.doubleclick.net. Anyone > know > what hosts to list??? (ie: ad2, ad3 ... to ad???)

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Paul Vixie
> > ... what hosts to list??? (ie: ad2, ad3 ... to ad???) > > Been fixing that for a good 6 years now. Just setup your local name > servers to be authoritative for doubleclick.net and don't put any A > records in the file. Works like a charm. ;-) on the one hand, you'd need a wildcard A RR at *.

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Laurence F. Sheldon, Jr.
Paul Vixie wrote: on the other hand, if you do this for a nameserver that your customers depend on, then there is probably some liability for either trademark infringement, tortious interference with prospective economic advantage, and the gods alone know what else. if you do this, keep it to a s

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Chris Brenton
On Tue, 2004-07-27 at 21:44, Paul Vixie wrote: > > on the one hand, you'd need a wildcard A RR at *.doubleclick.net to > achieve this result. the above text does not mention this, and leads > one to believe that an apex A RR at doubleclick.net would have an effect. Depends what you are trying to

Re: Barracuda Networks Spam Firewall

2004-07-27 Thread Joe Hamelin
It only seems to be a problem when I hit above about 16k messages an hour. I do wish they had better numerical historical logging. Maybe in V3.0. On Tue, 27 Jul 2004 20:03:08 -0400, Matthew Crocker <[EMAIL PROTECTED]> wrote: > > My Series 400 seems to be doing fine today. Average queue laten

COnfiguration Suggestion - Etherchannel

2004-07-27 Thread Richard J. Sears
Hey Everyone, I am building out a customer that needs more than 1000Mbps of sustained bandwidth. Because of the customer equipment, etherchannel was suggested as the means to do this (it is compatible with this customers equipment). I am running a 6509 with Dual SUP720's in IOS mode only (no ca

Re: SPF deployment by Oct. 1 ?

2004-07-27 Thread Mike Leber
On Mon, 26 Jul 2004 [EMAIL PROTECTED] wrote: > On Mon, 26 Jul 2004 11:51:26 EDT, Gerald said: > > > I think this will be the next best thing in E-mail. I'd love for that date > > to be August 1 though. > > OK... Aug 1 is a weekish away. Check your inbound mail for today, and ask > yourself ho

RE: COnfiguration Suggestion - Etherchannel

2004-07-27 Thread Robert Crowe
Do you need VLAN support or just a routed interface ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard J. Sears Sent: Tuesday, July 27, 2004 10:23 PM To: Nanog Subject: COnfiguration Suggestion - Etherchannel Hey Everyone, I am building out a c

Re: COnfiguration Suggestion - Etherchannel

2004-07-27 Thread Richard J. Sears
Robert, Just a routed interface. On Tue, 27 Jul 2004 22:40:16 -0400 "Robert Crowe" <[EMAIL PROTECTED]> wrote: > > Do you need VLAN support or just a routed interface ? > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Richard J. Sears > Sent: Tu

Re: COnfiguration Suggestion - Etherchannel

2004-07-27 Thread Mike Sawicki
On Tue, Jul 27, 2004 at 07:23:29PM -0700, Richard J. Sears wrote: > > Hey Everyone, > > I am building out a customer that needs more than 1000Mbps of sustained > bandwidth. Because of the customer equipment, etherchannel was suggested > as the means to do this (it is compatible with this custom

Re: COnfiguration Suggestion - Etherchannel

2004-07-27 Thread Robert Blayzor
Richard J. Sears wrote: I am building out a customer that needs more than 1000Mbps of sustained bandwidth. Because of the customer equipment, etherchannel was suggested as the means to do this (it is compatible with this customers equipment). I am running a 6509 with Dual SUP720's in IOS mode only

RE: COnfiguration Suggestion - Etherchannel

2004-07-27 Thread Michel Py
> Richard J. Sears wrote: > I am running a 6509 with Dual SUP720's in IOS mode only >(no cat software). It was pointed out that there are really > two different ways to configure the switch - I guess my > question is which is the best (lowest overhead, etc)? The two you posted are equivalent; th

Re: COnfiguration Suggestion - Etherchannel

2004-07-27 Thread Robert Blayzor
Mike Sawicki wrote: I would use method #2 above.. L3 FEC produces better balancing results as it is flow based, rather than mac-based. I'm not 100% certain that using the SVI interface would not produce a proper balance, but I doubt it. Using method one I would expect only one of the links to be

Re: SPF deployment by Oct. 1 ?

2004-07-27 Thread Douglas Otis
On Tue, 2004-07-27 at 19:38, Mike Leber wrote: > On Mon, 26 Jul 2004 [EMAIL PROTECTED] wrote: > > On Mon, 26 Jul 2004 11:51:26 EDT, Gerald said: > > > > > I think this will be the next best thing in E-mail. I'd love for that date > > > to be August 1 though. > > > > OK... Aug 1 is a weekish away