Re: This may be stupid but..

2003-11-09 Thread Andy Walden
obs. Their creditabilty is on the line with every placement. Again, as with most things, there tends to be two ends to the spectrum. Best Regards, Andy Walden -- PGP Key Available at http://www.tigerteam.net/andy/pgp On Sun, 9 Nov 2003, Eric Brunner-Williams in Portland Maine wrote: > > recruiter

Re: China Telecom filtering nameservers

2003-10-23 Thread Andy Walden
hey both spoke english, and helped me out in finding out what was going > on. > > China telecom has some US POPs, so they do have people in the US even. If I'm not mistaken, I think I even saw an office the other day on Herndon Parkway... Best Regards, Andy Walden -- PGP Key Available at http://www.tigerteam.net/andy/pgp

Re: Extreme BlackDiamond

2003-10-13 Thread Andy Walden
On Mon, 13 Oct 2003, Mikael Abrahamsson wrote: > On Sun, 12 Oct 2003, Andy Walden wrote: > > > Actually, as far as I know, all switches and routers use the CPU to > > process ICMP. It is a control protocol and the safest option is to ensure > > the vendor has implement

Re: Extreme BlackDiamond

2003-10-12 Thread Andy Walden
On Mon, 13 Oct 2003, Mikael Abrahamsson wrote: > > On Mon, 13 Oct 2003, Shazad - eServers wrote: > > > How are these for CORE SWITCHES (distribution) compared to BigIron and the > > CISCO 6509? > > >From what I have heard and reports they are very solid switches. > > Some things to know about the

Re: williams spamhaus blacklist

2003-09-24 Thread Andy Walden
On Wed, 24 Sep 2003, Leo Bicknell wrote: > Osama and his followers told us for years they didn't like what we > were doing, and then escalated by flying a plane into a building > to "get our attention". That must have been ok by the same logic. Godwin's Law should probably be extended to Septe

Re: Verisign Responds

2003-09-23 Thread Andy Walden
On Tue, 23 Sep 2003 [EMAIL PROTECTED] wrote: > > > > On Tue, 23 Sep 2003 [EMAIL PROTECTED] wrote: > > > > On Tue, 23 Sep 2003 [EMAIL PROTECTED] wrote: > > > > > > On Mon, 22 Sep 2003, Dave Stewart wrote: > > > > > > > Courts are likely to support the position that Verisign has control of > > >

Re: Cheap temperature sensors

2003-09-23 Thread Andy Walden
> > At 06:29 AM 9/23/2003, you wrote: > >I hate to point this out but this sounds spammy as hell, and while I've > >been on this list a very short time, very very big alarm bells went off > >when I read it. Well, if you had been on the list a little longer you would have realized that this is so

Re: When is Verisign's registry contract up for renewal

2003-09-21 Thread Andy Walden
On Sun, 21 Sep 2003, Paul Vixie wrote: > > > This sort of not-for-profit is exactly what I proposed when the VeriSign > > discussion started. A non-technical response to a non-technical problem. > > Since my inital email, I've recruited a few other NANOG folks and put up a > > website: www.alt-s

Re: Providers removing blocks on port 135?

2003-09-20 Thread Andy Walden
On Sat, 20 Sep 2003, Margie wrote: > My guess is that you haven't heard of the current issue with various > servers running SMTP AUTH. These MTAs are secure by normal > mechanisms, but are being made to relay spam anyway. Would this be a reference to the qmail-smtp-auth patch that recently was

Re: IP issues with .com/.net change?

2003-09-18 Thread Andy Walden
On Wed, 17 Sep 2003, Alex Kamantauskas wrote: > Not really operational content, but I was wondering if there was an > intellectual property issue with the Verisign .com/.net redirect? > > For instance, brings you to a > Verisign search engine. > > Or, ev

Re: Max TNT ping thing

2003-09-10 Thread Andy Walden
Drew, I believe this was the last message about it. Basically, put on all of your filters on all interfaces for both worms, play with the cache as indicated below and make sure you are running later code. At least 9.0.0.9 if I recall if not TAOS 10+. andy -- PGP Key Available at http://www.tige

Re: OT: converting 100MB to OC-3 POS

2003-09-09 Thread Andy Walden
On Tue, 9 Sep 2003, Gil Levi wrote: > Can anyone help me convert a 100MB Ethernet interface to an OC-3 POS > interface in a small cheap box ? Depends on what you mean by cheap? Ethernet<->POS isn't a conversion per say, but it could be switched or routed. The more expensive part will probably be

Re: Cross-country shipping of large network/computer gear?

2003-08-28 Thread Andy Walden
On Wed, 27 Aug 2003, Ray Wong wrote: > On Wed, Aug 27, 2003 at 08:31:58PM -0500, Andy Walden wrote: > > On 27 Aug 2003, Robert E. Seastrom wrote: > > > Yes, but my point is that you can stack the deck in your favor by > > > using a company that uses appropriate m

Re: Cross-country shipping of large network/computer gear?

2003-08-28 Thread Andy Walden
On Wed, 27 Aug 2003, Leo Bicknell wrote: > > I'm not sure if any of them are here, or if they would make their > info known...but I'm sure vendors have some good data. I know > Cisco's online ordering tool has about a bazillion (and yes, that's > the right term) shippers, and I'm sure they trac

Re: Cross-country shipping of large network/computer gear?

2003-08-28 Thread Andy Walden
On 27 Aug 2003, Robert E. Seastrom wrote: > Andy Walden <[EMAIL PROTECTED]> writes: > > Yes, but my point is that you can stack the deck in your favor by > using a company that uses appropriate material handling devices to > move every package if you are shipping packages

Re: Cross-country shipping of large network/computer gear?

2003-08-27 Thread Andy Walden
On 27 Aug 2003, Robert E. Seastrom wrote: > FedEx Heavy = "pay a surcharge for heavy boxes, get it moved by a 120 > pound delivery person with a handtruck rather than a pallet jack or > other appropriate freight handling equipment... and dropped off the > truck". My experience is a 40% damage ra

Re: Max TNT ping thing

2003-08-27 Thread Andy Walden
On Tue, 26 Aug 2003, Geo. wrote: > > Someone on this list had mentioned a network card for the Max TNT that made > it immune to the nachia worm ping issue. > > Is that the 4 port (3 ethernet, 1 fast ether) card or the single port card > with the dongle thing or something else? It turns out this

Re: Microsoft distributes free CDs in Japan to patch Windows

2003-08-25 Thread Andy Walden
On Mon, 25 Aug 2003, Henry Linneweh wrote: > Microsoft has a task scheduler that people should learn to use to remind > them to check update to make sure their patches are current, it is > located in the control panel and labled Scheduled Tasks and has an > Add Scheduled Tasks icon to add update

RE: TNT issues "workaround"

2003-08-25 Thread Andy Walden
On Mon, 25 Aug 2003, Ejay Hire wrote: > In response to this, I'd like to comment on Lucent's excellent response > to this issue. Never before have I seen such an effective application > of hear-no-evil, see-no-evil, and speak-no-evil. While other vendors > were wasting our time sending out not

Re: TNTs Rebooting, was RE: Weird network problems

2003-08-20 Thread Andy Walden
On Wed, 20 Aug 2003, Ejay Hire wrote: > In a word, Yes. We've got two TNT's that have been rock-solid for over > a year that have rebooted 6 times in two days. Any help at all would be > most appreciated. > Has anyone opened a ticket with Lucent about this? My initial feeling is some traffic

Re: Weird network problems

2003-08-20 Thread Andy Walden
> Is anyone out there tracking down some weird network behavior yesterday > and today? I'm not talking about ping traffic from the worm or anything > like that, I'm seeing TNT MAX boxes go unpingable, arp broadcast storms, > one way traffic blocks on T1's between cisco routers, stuff that I have

Re: High Speed IP-Sec

2003-06-09 Thread Andy Walden
On Mon, 9 Jun 2003, Leo Bicknell wrote: > > I'm looking for a high speed (300-1000Mbps) IPSec solution. I need http://www.cipheroptics.com/ Gig-in/Gig-out - Wirespeed - reasonably priced last I asked. I can give you my contact if your interested. andy -- PGP Key Available at http://www.tig

Re: Question concerning authoritative bodies.

2003-03-11 Thread Andy Walden
On Tue, 11 Mar 2003 [EMAIL PROTECTED] wrote: > On Tue, 11 Mar 2003, Ron da Silva wrote: > > > Hmm...I would argue that every operator needs to run their own DNSBL. > > If you only DNSBL IPs after you receive spam from them, you have to get > spammed by every IP before it's blocked. Why not reje

Re: Remote email access

2003-02-04 Thread Andy Walden
On 4 Feb 2003, John R. Levine wrote: > It would be nice if we could use SMTP-AUTH on port 25, but the > spammers ruined that for us around the same time they ruined courtesy > relay. How did they ruin SMTP Auth? Thanks. andy -- PGP Key Available at http://www.tigerteam.net/andy/pgp

Re: Worm / UDP1434

2003-01-25 Thread Andy Walden
On Sat, 25 Jan 2003, Neil J. McRae wrote: > > > > > Anybody here on list using Extreme products (Summit/Alpine/Blackdiamond)? > > They sure don't like this traffic one bit. It causes them to not only drop > > traffic, but spew out every available error message under the sun... > > > > Extreme ar

Re: Looking for a piece of gear to do...

2002-11-22 Thread Andy Walden
Riverstone 1000 could do this at a reasonable cost. andy -- PGP Key Available at http://www.tigerteam.net/andy/pgp On Thu, 21 Nov 2002, Alex Rubenstein wrote: > > > Hi. > > I am looking for a very simple piece of gear that will do the following: > > Fast-E |thing|---ATM OC3-

RE: IP renumbering timeframe

2002-05-31 Thread Andy Walden
On Fri, 31 May 2002, Tony Hain wrote: > What is the point of an ASN if all you are multi-homing is a single > subnet? Tony, I'm missing the correlation between the amount of address space announced and multihoming. (Beyond the prefix being too long and potentially filtered). Care to elaborate

Re: China's cable firms fight deadly turf war

2002-05-29 Thread Andy Walden
On Thu, 30 May 2002, Sean Donelan wrote: > > > http://www.timesonline.co.uk/article/0,,3-311460,00.html > > China's cable firms fight deadly turf war eh, thats nothing. Try doing work in some of the buildings in NY without a Union card ;) andy -- PGP Key Available at http://www.tigerteam.net/

Re: BGP and aggregation

2002-05-12 Thread Andy Walden
On Sun, 12 May 2002, Ralph Doncaster wrote: > I was thinking of doing iBGP over my transit connections (with a couple > of static routes so the iBGP works) AND over my inter-city circuit. Any > reason why this won't work? I don't think doing iBGP over your transit connections, i.e., outside o

Re: BGP and aggregation

2002-05-12 Thread Andy Walden
On Sun, 12 May 2002, Stephen Griffin wrote: > BGP will discard any prefix with its own AS in the path, for loop > prevention. Hence, one half of the AS would still be unable to > reach the other half. This is why a partitioned AS is a failure > condition. A tunnel is a means to keep the AS nonp

Re: BGP and aggregation

2002-05-12 Thread Andy Walden
On Sun, 12 May 2002, Stephen Griffin wrote: > > In the referenced message, Andy Walden said: > > > > > > Conditional Router Advertisement: > > > > http://www.american.com/warp/public/459/cond_adv.pdf > > > > As it sounds like he's usi

Re: BGP and aggregation

2002-05-11 Thread Andy Walden
Conditional Router Advertisement: http://www.american.com/warp/public/459/cond_adv.pdf andy -- PGP Key Available at http://www.tigerteam.net/andy/pgp On Sat, 11 May 2002, Ralph Doncaster wrote: > > I have transit in 2 cities. I have a circuit connecting the 2 cities as > well. So far I've

Re: Help with bad announcement from UUnet

2002-03-29 Thread Andy Walden
On Fri, 29 Mar 2002, Leo Bicknell wrote: > Note that in both cases, b0rken-noc takes a single call, so their > load is unchanged. The second case adds a call to both my-upstream-noc, > and b0rken-noc-upstream-noc. > > It would seem going direct would put a lower load on NOC's in general, > whi

Re: Help with bad announcement from UUnet

2002-03-29 Thread Andy Walden
On Fri, 29 Mar 2002, Sabri Berisha wrote: > > On Fri, 29 Mar 2002, Anne Marcel Roorda wrote: > > > Having a support model in which anyone can call any NOC about a > > problem they're having does not scale very well. > > What would work better/faster? > > my-noc -> b0rken-noc > > or > > my-noc