Re: Slashdot: Providers Ignoring DNS TTL?

2005-04-29 Thread Dean Anderson
On Tue, 26 Apr 2005, Edward B. Dreger wrote: > DA> Date: Sat, 23 Apr 2005 16:13:22 -0400 (EDT) > DA> From: Dean Anderson > > DA> And it violates RFC 1546, as previously explained. > > Who cares? You've railed against SMTP+AUTH because it's not a > "standard". Why do you give a rat's rump abou

Re: Slashdot: Providers Ignoring DNS TTL?

2005-04-29 Thread Christopher L. Morrow
On Sat, 30 Apr 2005, Dean Anderson wrote: > > On Mon, 25 Apr 2005, Stephen J. Wilcox wrote: > > > So agreeing for a second with Dean that indeed this behaviour would appear > > to be > > prohibited or at least inconsistent with the RFCs, the fact is anycast is > > widely > > deployed and is pro

Re: Slashdot: Providers Ignoring DNS TTL?

2005-04-29 Thread Dean Anderson
On Mon, 25 Apr 2005, Stephen J. Wilcox wrote: > So agreeing for a second with Dean that indeed this behaviour would appear to > be > prohibited or at least inconsistent with the RFCs, the fact is anycast is > widely > deployed and is proven to be stable. "vixie-cast" is deployed on around 60

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Steven Champeon
on Sat, Apr 30, 2005 at 07:41:34AM +0530, Suresh Ramasubramanian wrote: > > On 4/30/05, Steven Champeon <[EMAIL PROTECTED]> wrote: > > > ANantes-106-1-5-107.w193-251.abo.wanadoo.fr > > > > You'll see 'abo' for 'cable', perhaps? as well as 'cable'. But for most > > abo = short for "abonnement",

Re: Slashdot: Providers Ignoring DNS TTL?

2005-04-29 Thread Dean Anderson
On Sun, 24 Apr 2005, Steve Gibbard wrote: > > On Sun, 24 Apr 2005, Robert M. Enger wrote: > > > Steinar: > > > > There is a large body of work from competent and well known researchers > > that assert the claim. I certainly lack standing to question their > > results. > > > > Empirically, do

Re: Internet impact of Apple Tiger

2005-04-29 Thread Valdis . Kletnieks
On Fri, 29 Apr 2005 19:29:05 +0200, Florian Weimer said: > Ahem, I would expect that people *pay* Apple for inclusion in the > default RSS list. Why should they be concerned by the extra > bandwidth? A company that paid for 500K more eyeballs may get surprised if Tiger is a huge hit and 5M eyeba

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Suresh Ramasubramanian
On 4/30/05, Steven Champeon <[EMAIL PROTECTED]> wrote: > ANantes-106-1-5-107.w193-251.abo.wanadoo.fr > > You'll see 'abo' for 'cable', perhaps? as well as 'cable'. But for most abo = short for "abonnement", that is, "subscription" / "subscriber" Just means its a pool of IPs assigned to users, I

Re: OC3 to Gig-E conversion

2005-04-29 Thread Richard A Steenbergen
On Sat, Apr 30, 2005 at 01:45:24AM +, Miquel van Smoorenburg wrote: > > In article <[EMAIL PROTECTED]>, > Richard A Steenbergen <[EMAIL PROTECTED]> wrote: > > > >On Fri, Apr 29, 2005 at 05:20:21PM -0400, Peering wrote: > >> All, > >> > >> > Is there something out there (other than a router)

Re: OC3 to Gig-E conversion

2005-04-29 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>, Richard A Steenbergen <[EMAIL PROTECTED]> wrote: > >On Fri, Apr 29, 2005 at 05:20:21PM -0400, Peering wrote: >> All, >> >> > Is there something out there (other than a router) that will convert >> > from OC3c to Gig-E? Feel free to answer offline, don't want to f

Re: Internet2

2005-04-29 Thread Vicky Rode
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, comments in-line: Dan Hollis wrote: | On Wed, 27 Apr 2005, Randy Bush wrote: | |>to source is still the big gap. imiho, from the ops perspective, |>only sally's ecn has made any useful approach. sadly, we may be |>able to judge the actual demand f

RE: Schneier: ISPs should bear security burden

2005-04-29 Thread Dave Rand
[In the message entitled "RE: Schneier: ISPs should bear security burden" on Apr 29, 15:32, "Miller, Mark" writes:] > > Unfortunately, a lot of static "business" DSL IP space is still on > those lists and legitimate mail servers can get blocked. I usually use > the DUL as a "white list" to neg

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Mark Andrews
In article <[EMAIL PROTECTED]> you write: > >On Fri, 29 Apr 2005, Miller, Mark wrote: > >> Unfortunately, a lot of static "business" DSL IP space is still on >> those lists and legitimate mail servers can get blocked. I usually use >> the DUL as a "white list" to negate hits on the traditional dn

Re: OC3 to Gig-E conversion

2005-04-29 Thread Richard A Steenbergen
On Fri, Apr 29, 2005 at 05:20:21PM -0400, Peering wrote: > All, > > > Is there something out there (other than a router) that will convert > > from OC3c to Gig-E? Feel free to answer offline, don't want to fill > > everyone's inbox at once :) If you are looking for transport, there are many box

Hushmail DNS Attack Blamed on Network Solutions

2005-04-29 Thread Fergie (Paul Ferguson)
http://www.eweek.com/article2/0,1759,1791152,00.asp - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet [EMAIL PROTECTED] or [EMAIL PROTECTED] ferg's tech blog: http://fergdawg.blogspot.com/

RE: Schneier: ISPs should bear security burden

2005-04-29 Thread Miller, Mark
Well, I have no influence on addressing here, so any comments are mine alone. A lot of addressing schemes were created in the day before there was a huge issue with hostile dynamic addresses and the need to be able to identify them. Addressing assignments, of course, were (and still are to a la

RE: Schneier: ISPs should bear security burden

2005-04-29 Thread Steven J. Sobol
On Fri, 29 Apr 2005, Miller, Mark wrote: > Unfortunately, a lot of static "business" DSL IP space is still on > those lists and legitimate mail servers can get blocked. I usually use > the DUL as a "white list" to negate hits on the traditional dnsbls since > those are almost always stale. Tha

RE: Schneier: ISPs should bear security burden

2005-04-29 Thread Miller, Mark
Unfortunately, a lot of static "business" DSL IP space is still on those lists and legitimate mail servers can get blocked. I usually use the DUL as a "white list" to negate hits on the traditional dnsbls since those are almost always stale. - Mark -Original Message- From: [EMAIL PR

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Dave Rand
[In the message entitled "Re: Schneier: ISPs should bear security burden" on Apr 29, 17:23, "Steven J. Sobol" writes:] > On Fri, 29 Apr 2005, Dave Rand wrote: > > > Dunno what a ton of ISP buy-in is, but the MAPS DUL now contains about > > 190,000,000 entries. We've been working on it very har

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Steven J. Sobol
On Fri, 29 Apr 2005, Dave Rand wrote: > Dunno what a ton of ISP buy-in is, but the MAPS DUL now contains about > 190,000,000 entries. We've been working on it very hard for the last year or > two. Most ISP-level subscribers figure it stops a pretty large percentage of > the compromised-home-co

OC3 to Gig-E conversion

2005-04-29 Thread Peering
Title: OC3 to Gig-E conversion All, Is there something out there (other than a router) that will convert from OC3c to Gig-E?  Feel free to answer offline, don't want to fill everyone's inbox at once :) Thanks, Diane Turley Sr. Network Engineer Xspedius Communications Co. 636-625-7178

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Steven Champeon
on Thu, Apr 28, 2005 at 10:20:37AM -0400, Steve Sobol wrote: > > Mark Newton <[EMAIL PROTECTED]> wrote: > > > On Thu, Apr 28, 2005 at 02:16:36AM -0400, Steven J. Sobol wrote: > > > > > Any IP that a provider allows servers on should have > > > distinctive, non-dynamic-looking DNS (and prefer

Re: Level3 Blip?

2005-04-29 Thread Tom Sands
We had issues with Level3 earlier in DFW, this was the response I received from them. "We had a problem in Dallas that has been recently resolved under T#1270798." Jon Lewis wrote: On Fri, 29 Apr 2005, Chris Ranch wrote: Eric Whitehill wrote: Anyone know what, if anything happened with L

Re: PAIX Outages

2005-04-29 Thread Stephen J. Wilcox
On Fri, 29 Apr 2005, Alexander Koch wrote: > On Fri, 29 April 2005 13:04:05 +0100, Neil J. McRae wrote: > > > and we happily overloaded our peers' interfaces at the respective other > > > IX... > > > > That sounds more like a planning issue than anything else. If you have > > traffic going throu

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Barry Shein
On April 28, 2005 at 09:09 [EMAIL PROTECTED] (Adi Linden) wrote: > > Its not up to the ISP to determine outbound malicious traffic, but its up > > to the ISP to respond in a timely manner to complaints. Many (most?) do > > not. > > If they did their support costs would explode. It is block

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Steven Champeon
on Thu, Apr 28, 2005 at 04:38:00PM +0930, Mark Newton wrote: > > On Thu, Apr 28, 2005 at 02:16:36AM -0400, Steven J. Sobol wrote: > > > Any IP that a provider allows servers on should have > > distinctive, non-dynamic-looking DNS (and preferably be in a separate > > netblock from the dynami

Business Inaction Could Lead to Cybersecurity Law

2005-04-29 Thread Fergie (Paul Ferguson)
Can't say we didn't see this debate coming. Two articles poppped up this afternoon, on virtually the same topic and at virtually the same time: Business Inaction Could Lead to Cybersecurity Law http://www.reuters.com/newsArticle.jhtml?type=topNews&storyID=8348598 [and] Do We Need a Sarbane

[no subject]

2005-04-29 Thread Steve Sobol
Irwin Lazar <[EMAIL PROTECTED]> quoted an article saying "In less than 48 hours many of us will be installing Tiger OS-X and with it a brand new Safari browser that can read and display RSS feeds in a simple easy to understand manner. That upgrade while great for the consumers, could come as a bi

Weekly Routing Table Report

2005-04-29 Thread Routing Table Analysis
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to [EMAIL PROTECTED] If you have any comments please contact Philip Smith <[EMAIL PROTECTED]>. Routing Table Report 04:00 +10GMT Sat 30 Apr, 2005

RE: Level3 Blip?

2005-04-29 Thread Jon Lewis
On Fri, 29 Apr 2005, Chris Ranch wrote: > > Eric Whitehill wrote: > > Anyone know what, if anything happened with Level3 this > > morning? (8-10am, CDT) > > Level3 in LAX is/was fine... Didn't notice anything in FL either. Must be some new highly localized meaning for global. :) --

RE: Level3 Blip?

2005-04-29 Thread Jason L. Schwab
Level3 in Ft Worth and Dallas was fine. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Ranch Sent: Friday, April 29, 2005 11:41 AM To: Eric Whitehill; nanog@merit.edu Subject: RE: Level3 Blip? Eric Whitehill wrote: > Anyone know what, if anything

RE: Level3 Blip?

2005-04-29 Thread Chris Ranch
Eric Whitehill wrote: > Anyone know what, if anything happened with Level3 this > morning? (8-10am, CDT) Level3 in LAX is/was fine... Chris

Re: Level3 Blip?

2005-04-29 Thread Marshall Eubanks
On Fri, 29 Apr 2005 13:23:35 -0400 (EDT) Eric Whitehill <[EMAIL PROTECTED]> wrote: > > Anyone know what, if anything happened with Level3 this morning? (8-10am, > CDT) > I have an Ethernet connection to L3 in Tysons Corner, VA. I saw no problems at all with unicast / multicast transit or BGP

Re: Internet impact of Apple Tiger

2005-04-29 Thread Florian Weimer
* Irwin Lazar: > Some food for thought: Ahem, I would expect that people *pay* Apple for inclusion in the default RSS list. Why should they be concerned by the extra bandwidth?

Level3 Blip?

2005-04-29 Thread Eric Whitehill
Anyone know what, if anything happened with Level3 this morning? (8-10am, CDT) Nothing on their webpage, but I have some customers jumping up and down screaming at me about a 'global network outage', and I frankly don't want to believe them on a Friday. (i.e., I have them showing me a 'global

RE: FCC To Require 911 for VoIP

2005-04-29 Thread Neil J. McRae
112 works in the UK but everyone just dials 999 usually for all the wrong reasons. > Hm... little question of interest ;) > > In Holland the number used to be "06-11", but was changed to a > so-called European Emergency number ("112"). Does this number also > work in Germany ? "Back t

Re: FCC To Require 911 for VoIP

2005-04-29 Thread Peter & Karin Dambier
> > > Date: Fri, 29 Apr 2005 12:00:15 +0200 (MEST) > > From: Peter & Karin Dambier <[EMAIL PROTECTED]> > > To: nanog@merit.edu > > Subject: Re: FCC To Require 911 for VoIP > > > [ ... ] > > In Germany emergency calls are 110 not 911. > > If they connected me to Tokio police, they dont > > speak

Re: BT to offer six classes of service

2005-04-29 Thread christian . macnevin
They've been running six cos for quite some time now actually - I guess about nine months.. but the actual userbase they've sold the option to remained with a very limited (but large) customer base. Internet [EMAIL PROTECTED]@merit.edu - 28/04/2005 17:14 Sent by:[EMAIL PROTECTED] To:

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Jay R. Ashworth
On Tue, Apr 26, 2005 at 10:38:00PM -0700, Owen DeLong wrote: > I think it's absurd. I expect my water delivery company not to add > polutants in transit. I expect my water production company to provide > clean water. Water delivery is unidirectional, otherwise water utilities would infact have

Re: Sinkhole Architecture

2005-04-29 Thread Christopher L. Morrow
On Fri, 29 Apr 2005, Howard C. Berkowitz wrote: > > At 1:34 PM + 4/29/05, Christopher L. Morrow wrote: > >On Fri, 29 Apr 2005, Howard C. Berkowitz wrote: > > > >> > >> I've seen some Cisco security presentations that include sinkholes > >> composed of an ingress and egress router, interco

Re: ICANN needs you!

2005-04-29 Thread John Palmer (NANOG Acct)
How about supporting alternatives to ICANN, which are getting more and more widespread and accepted like www.public-root.com and www.inaic.com ? - Original Message - From: "Eric Brunner-Williams in Portland Maine" <[EMAIL PROTECTED]> To: "Rodney Joffe" <[EMAIL PROTECTED]> Cc: ; <[EMAIL

Re: Sinkhole Architecture

2005-04-29 Thread Howard C. Berkowitz
At 1:34 PM + 4/29/05, Christopher L. Morrow wrote: On Fri, 29 Apr 2005, Howard C. Berkowitz wrote: I've seen some Cisco security presentations that include sinkholes composed of an ingress and egress router, interconnected with a switch. The switch provides access for tools such as packet a

RE: Internet impact of Apple Tiger

2005-04-29 Thread Mark Segal
> Yes, but the difference is that Firefox doesn't come with a > pre-populated set of news feeds. Mine did. (although it is aggregated by mozilla) Mark -- Mark Segal Director, Corporate Strategy FCI Broadband Tel: 905-284-4070 Fax: 416-987-4701 http://www.fcibroadband.com

Re: Internet impact of Apple Tiger

2005-04-29 Thread Michael . Dillon
> What if more than a million Tiger Safaris were on the loose. Oh boy! While > an addition 48 gigabytes of traffic a day or 1.4 terabyte a month is not > that much for large sites, but it will add up. An we were all worried about the impact of Internet TV... ;-) > How about randomizing the who

Re: Internet impact of Apple Tiger

2005-04-29 Thread Irwin Lazar
Yes, but the difference is that Firefox doesn't come with a pre-populated set of news feeds. Irwin > From: Martin Hepworth <[EMAIL PROTECTED]> > Date: Fri, 29 Apr 2005 15:10:16 +0100 > To: Irwin Lazar <[EMAIL PROTECTED]> > Cc: > Subject: Re: Internet impact of Apple Tiger > > Irwin > > Isn't

Re: Internet impact of Apple Tiger

2005-04-29 Thread Martin Hepworth
Irwin Isn't this a similar mechanism that Firefox allows you do do?? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Irwin Lazar wrote: Some food for thought: ** This email and any files trans

Internet impact of Apple Tiger

2005-04-29 Thread Irwin Lazar
Some food for thought: -- http://www.gigaom.com/2005/04/28/rss-tiger-safari-and-the-bandwidth-bottlene ck/ RSS, Tiger Safari and the Bandwidth Bottleneck In less than 48 hours many of us will be installing Tiger OS-X and with it a brand new Safari browser that can read and display RSS feeds in

Re: Sinkhole Architecture

2005-04-29 Thread Christopher L. Morrow
On Fri, 29 Apr 2005, Howard C. Berkowitz wrote: > > I've seen some Cisco security presentations that include sinkholes > composed of an ingress and egress router, interconnected with a > switch. The switch provides access for tools such as packet > analyzers, IDS, routing analyzers, etc. The mul

Re: ICANN needs you!

2005-04-29 Thread Eric Brunner-Williams in Portland Maine
Rodney, Can you compare the past out-reach exercises and the present one? You know, process and outcomes. I'm thinking of the process and outcome of the MITF exercise of 2002/3. It is now seven years since the issue of appropriation of tribal names was brought to the attention of the ICANN BoD

RE: PAIX Outages

2005-04-29 Thread Neil J. McRae
> With public peering you simply never know how much spare > capacity your peer has free. So with your key peers you talk to them and find out, but I don't see how this is any different if you have a private interconnect. Just because you have say a STM-1 into another peer doesn't mean they ha

Re: PAIX Outages

2005-04-29 Thread Brandon Butterworth
> > > With public peering you simply never know how much spare > > > capacity your peer has free. > > > > So? That doesn't make public peering bad, you don't know that > > for PI or transit either > > For PI I know how much spare I have towards them, taking for > granted they can move the traffi

Re: PAIX Outages

2005-04-29 Thread Daniel Roesen
On Fri, Apr 29, 2005 at 02:08:13PM +0200, Alexander Koch wrote: > With public peering you simply never know how much spare > capacity your peer has free. You also never know with private peering: Backbone links. Regards, Daniel -- CLUE-RIPE -- Jabber: [EMAIL PROTECTED] -- [EMAIL PROTECTED] --

Re: PAIX Outages

2005-04-29 Thread Alexander Koch
On Fri, 29 April 2005 13:24:06 +0100, Brandon Butterworth wrote: > > With public peering you simply never know how much spare > > capacity your peer has free. > > So? That doesn't make public peering bad, you don't know that > for PI or transit either For PI I know how much spare I have towards

Re: PAIX Outages

2005-04-29 Thread Brandon Butterworth
> With public peering you simply never know how much spare > capacity your peer has free. So? That doesn't make public peering bad, you don't know that for PI or transit either > And would you expect your > peer with 400 Mbit/s total to have 400 reserved on his AMSIX > port for you when you see

Re: PAIX Outages

2005-04-29 Thread Alexander Koch
On Fri, 29 April 2005 13:04:05 +0100, Neil J. McRae wrote: > > and we > > happily overloaded our peers' interfaces at the respective > > other IX... > > That sounds more like a planning issue than anything else. If you > have traffic going through a pipe, then you need to make sure you have >

RE: PAIX Outages

2005-04-29 Thread Neil J. McRae
> and we > happily overloaded our peers' interfaces at the respective > other IX... That sounds more like a planning issue than anything else. If you have traffic going through a pipe, then you need to make sure you have somewhere else to send it. If you are managing your peers properly, priva

The Cidr Report

2005-04-29 Thread cidr-report
This report has been generated at Fri Apr 29 21:44:46 2005 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table Hist

Sinkhole Architecture

2005-04-29 Thread Howard C. Berkowitz
I've seen some Cisco security presentations that include sinkholes composed of an ingress and egress router, interconnected with a switch. The switch provides access for tools such as packet analyzers, IDS, routing analyzers, etc. The multiple routers also provide more horsepower for inspection

Re: Federal Security Bureau asks for more authority to control Internet

2005-04-29 Thread william(at)elan.net
On Fri, 29 Apr 2005 [EMAIL PROTECTED] wrote: http://en.rian.ru/russia/20050428/39757635.html This makes Russia sound like some insane place where Big Brother spies on the communications of all citizens, The changes there in last 4 years seem to be in that direction. Plus also their system of peop

Re: Federal Security Bureau asks for more authority to control Internet

2005-04-29 Thread Suresh Ramasubramanian
On 4/29/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > The Federal Security Service proposes setting new rules for Internet > > This makes Russia sound like some insane place where Big Brother > spies on the communications of all citizens, like in the United States. Here's a hint.. the FSB

Re: FCC To Require 911 for VoIP

2005-04-29 Thread Michael . Dillon
> Who exactly will I be talking to when I dial 911 from an internet cafe > in Puerto Vallarta through my Virgina VOIP account with a California > Billing address? Even more interesting, what if you have a heart attack and a helpful local picks up your phone and dials 060? Normally, in Puerto Vall

Re: Federal Security Bureau asks for more authority to control Internet

2005-04-29 Thread Michael . Dillon
> http://en.rian.ru/russia/20050428/39757635.html > > The Federal Security Service proposes setting new rules for Internet > providers so that it could prevent the spread of extremist ideas, track > down illegal online operations, and get access to databases with mobile > telephone subscribers' d

Re: FCC To Require 911 for VoIP

2005-04-29 Thread Peter & Karin Dambier
> > On 29-apr-2005, at 3:12, Owen DeLong wrote: > > >> Maybe a satellite network that continuously transmit location > >> beacon information which can be used to triangulate one's > >> location would > >> do the trick? > Skype and public domain telefones dont know about location, nor will

Re: Schneier: ISPs should bear security burden

2005-04-29 Thread Dave Rand
[In the message entitled "Re: Schneier: ISPs should bear security burden" on Apr 28, 10:20, "Steve Sobol" writes:] > There are some basic rules of thumb you can use. The problem is that they're > not guaranteed to work. The best solution was created years ago (Gordon > Fecyk's DUL, which lists IP

Re: FCC To Require 911 for VoIP

2005-04-29 Thread Iljitsch van Beijnum
On 29-apr-2005, at 3:12, Owen DeLong wrote: Maybe a satellite network that continuously transmit location beacon information which can be used to triangulate one's location would do the trick? I submit that I don't necessarily want my communications device or my location tracked at all times b

NANOG going to be available over IPv6 ?

2005-04-29 Thread Jeroen Massar
Hi, I just noticed the allocation of 2001:48a8::/32 to MERIT, does this mean NANOG is going to be available over IPv6 soon ? :) BTW: google's allocation is already visible in the routing tables, microsoft has one but it is not visible (yet) Greets, Jeroen -- OrgName:Merit Network Inc. Org

ICANN needs you!

2005-04-29 Thread Rodney Joffe
Folks, The archives of NANOG are riddled with complaints and comments about the lack of competent representation and influence for the networking community within the ICANN world. So this is your opportunity to make your voice heard through action that actually carries influence. And responsibili