Re: md5 for bgp tcp sessions

2005-06-22 Thread Patrick W. Gilmore
On Jun 23, 2005, at 12:14 AM, Richard A Steenbergen wrote: Just please realize that this is a trivial layer of security, an extra little bit of insurance to make it harder to alter the packets in flight or screw with the delivery protocol, and as such the key is not a state secret. I am goi

Re: md5 for bgp tcp sessions

2005-06-22 Thread Richard A Steenbergen
On Wed, Jun 22, 2005 at 10:04:09PM -0400, Todd Underwood wrote: > > the md5 password hack to protect tcp sessions is rapidly falling out > of favor for a number of reasons. among them: > > 1) it protects against a very limited "vulnerability". for operating > systems that stay up for reasonabl

RE: OSPF -vs- ISIS

2005-06-22 Thread Manav Bhatia
Hi Daniel, We wrote a draft some time back comparing the two protocols ISIS and OSPF. It should address some of your doubts and concerns. Here's a pointer to my local copy: http://geocities.com/mnvbhatia/draft-bhatia-manral-diff-isis-ospf-00.txt Thanks, Manav !> -Original Message- !>

md5 for bgp tcp sessions

2005-06-22 Thread Todd Underwood
eric, all, not to pick on eric at all, but since he raised the issue... On Wed, Jun 22, 2005 at 11:42:46AM -0400, Eric Gauthier wrote: > likely need to make modifications to our IGP/EGP setup. Though we filter > OSPF multicast traffic, we wanted to add in MD5 passwords to our > neighbors. ju

Re: E-Mail authentication fight looming: Microsoft pushing Sender ID

2005-06-22 Thread william(at)elan.net
http://abcnews.go.com/Technology/wireStory?id=872527 Microsoft had this working even one year ago (i.e. they showed presentations in private with those yellow warning tags), but going public with this and corresponding press announcements right now likely have to do with that IESG is reviewin

E-Mail authentication fight looming: Microsoft pushing Sender ID

2005-06-22 Thread Fergie (Paul Ferguson)
Not wanting to throw gasoline on an already raging e-mail authentication fire, but it _does_ look like a fight is gearing up between Domainkeys Identified Mail (DKIM), a joint effort between Cisco, Yahoo and a number of other vendors, and Microsoft's Sender ID scheme. http://abcnews.go.com/Techn

Looking for feedback on Huawei Ethernet over Sonet gear

2005-06-22 Thread fkittred
I am looking for feedback on Huawei's Ethernet over Sonet gear, specifically its ability to do multi-point to multi-point between locations, 802.1Q and RSTP. regards, fletcher -- Fletcher Kittredge Great Works Internet 8 Pomerleau St. Biddeford, ME 04005-9457

Re: Localized mail servers, global scope

2005-06-22 Thread Tony Finch
On Wed, 22 Jun 2005, Brad Knowles wrote: > > The last version of the Lachman-LASER draft (the one that was issued > just before the draft was withdrawn) works well with sendmail and postfix > pretty much out-of-the-box for handling LDAP routing. Unfortunately, you're > going to have a proble

Re: Localized mail servers, global scope

2005-06-22 Thread Brad Knowles
At 6:36 PM +0100 2005-06-22, Tony Finch wrote: I don't think you can do that because you need to consolidate the branches into a single namespace with some means of dealing with clashes. Most of the complexity of the SLB Exim/LDAP system is for handling fuzzy matching and name clashes - tho

Re: Localized mail servers, global scope

2005-06-22 Thread Dave Crocker
Andrew Staples wrote: 3. Change company policy to reflect names like [EMAIL PROTECTED], [EMAIL PROTECTED], etc, where DNS would resolve to the correct server. Doesn't give corporate the "email image" they are after. 4. Change robustness level at group HQ for relay to individual mail servers...

Re: Localized mail servers, global scope

2005-06-22 Thread Tony Finch
On Wed, 22 Jun 2005 [EMAIL PROTECTED] wrote: > > He *might* be able to sell the various branch offices on a solution that > uses LDAP or similar, where each branch manages its section of the LDAP > tree, I don't think you can do that because you need to consolidate the branches into a single name

RE: Localized mail servers, global scope

2005-06-22 Thread Andrew Staples
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of [EMAIL PROTECTED] > The problem he's going to hit is that he wants *my* mail > server to send mail to > '[EMAIL PROTECTED]' to get routed to the MX in San Fran where > Fred is, and *my* > mail se

Re: Localized mail servers, global scope

2005-06-22 Thread Valdis . Kletnieks
On Wed, 22 Jun 2005 17:57:52 BST, Tony Finch said: > You don't need a central MX if each site MTA knows which users are at > which sites. Incoming email may have to take an extra hop if it comes in > to the wrong site, but that's a consequence of the specification that no > implementation can fix.

Shared bandwidth and QoS

2005-06-22 Thread Eric Gauthier
Heya, We have a situation where multiple organizations are all going to be sharing a gigabit ethernet based Internet feed. We've each agreed to "purchase" a percentage of the cost of the feed. The topology is roughly: (Inbound GigE 802.1q Trunk) --->Collec

Re: Localized mail servers, global scope

2005-06-22 Thread Tony Finch
On Wed, 22 Jun 2005 [EMAIL PROTECTED] wrote: > > The problem he's going to hit is that he wants *my* mail server to send mail > to > '[EMAIL PROTECTED]' to get routed to the MX in San Fran where Fred is, and > *my* > mail server to send mail '[EMAIL PROTECTED]' to get routed to the MX in Geneva

Re: Localized mail servers, global scope

2005-06-22 Thread Andre Oppermann
[EMAIL PROTECTED] wrote: On Wed, 22 Jun 2005 17:23:22 BST, Tony Finch said: You need a table of name -> location mappings which each mail server can use to route email. You could distribute the table using whatever technology you like, e.g. LDAP. Google for Schlumberger Exim LDAP for a complic

Re: Localized mail servers, global scope

2005-06-22 Thread Valdis . Kletnieks
On Wed, 22 Jun 2005 17:23:22 BST, Tony Finch said: > You need a table of name -> location mappings which each mail server can > use to route email. You could distribute the table using whatever > technology you like, e.g. LDAP. Google for Schlumberger Exim LDAP for a > complicated example, though

Re: Localized mail servers, global scope

2005-06-22 Thread Tony Finch
On Wed, 22 Jun 2005, Andrew Staples wrote: > > A global company (the group) is headquartered in Scandinavia. 25+ companies > comprise the group around the world, each company with its own mailserver > and mailserver software. The group encourages the companies to act in a > decentralized manner,

Localized mail servers, global scope

2005-06-22 Thread Andrew Staples
Question: How to create an smtp connection to any given localized MTA, without relaying through a central MTA. Details: A global company (the group) is headquartered in Scandinavia. 25+ companies comprise the group around the world, each company with its own mailserver and mailserver software.

Re: OSPF -vs- ISIS

2005-06-22 Thread Eric Gauthier
On Tue, Jun 21, 2005 at 03:16:06PM +0100, Richard Dumoulin wrote: > Hi Eric, what's the reason for migrating to ISIS? There are currently a few projects that we're doing which prompted us to take a look at how we're doing routing, both IGP and EGP. We're altering our border connectivity by spr

RE: OSPF -vs- ISIS

2005-06-22 Thread Barry Greene (bgreene)
> For more information, see the talk by Dave Katz at > http://www.nanog.org/mtg-0006/katz.html > > Also, AOL's experience in switching from OSPF to ISIS is > covered at http://www.nanog.org/mtg-0310/gill.html > the PDF on that page is actually an older version. The full > version I used at

Re: More long AS-sets announced

2005-06-22 Thread Michael . Dillon
> Many of us in the operational community are required to conduct testing > in lab environments, followed by well-announced maintenance windows. Thanks for this funny post. I needed a good laugh. It has been years since people have needed a reminder that as the biggest and most complex telecom