Re: Bandwidth issues in the Sprint network

2008-04-17 Thread Chris Adams
art dropping syns). Having them enabled at other times has no impact, so there's rarely (if ever) a reason to disable them. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: rack power question

2008-03-25 Thread Chris Adams
d (more or less) for the Cray Triton. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Blackholing traffic by ASN

2008-01-31 Thread Chris Adams
traffic destined to > > those locations. > > ...do uRPF-loose-mode and you kill FROM these locations as well... On Cisco, but not Juniper. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Assigning IPv6 /48's to CPE's?

2008-01-03 Thread Chris Adams
le on /56 than push for /56 > and have people settle on /64. Again, why the hang-up on 8 bit boundaries? Why not /52 or /60? /60 is not much bigger than /64, but /52 gives an end-site 16 times as many subnets as /56 while giving the ISP 16 times as many blocks as /48. -- Chris Adams &l

Re: v6 subnet size for DSL & leased line customers

2007-12-23 Thread Chris Adams
d to manage this? Having a subnet for the kitchen appliances and a subnet for the home theater, both of which can talk to the subnet for the home computer(s), but not to each other, will be far beyond the abilities of the average home user. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: v6 subnet size for DSL & leased line customers

2007-12-21 Thread Chris Adams
boundary to simplify reverse lookup delegation. So, the guidelines are on 8 bit boundaries, but then right below they also suggest making assignments on 4 bit boundaries (and it is all "only guidelines"). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - Hi

Re: v6 subnet size for DSL & leased line customers

2007-12-21 Thread Chris Adams
hy the 8 bit boundary? That makes sense for IPv4, where reverse DNS delegation is cumbersome on non-octet boundaries, but IPv6 reverse DNS can be delegated at the nibble boundary. Why not assign /60, /52, etc.? A /60 would probably satisfy virtually all home users (up to 16 subnets) for example. --

Re: Internet access in Japan (was Re: BitTorrent swarms have a deadly bite on broadband nets)

2007-10-22 Thread Chris Adams
e ILECs that were based on incorrect assumptions (that most calls would be from the CLEC to the ILEC); rates based on that were bound to increase as those contracts expired. Back when dialup was king, CLECs selling cheap PRIs to ISPs seemed like a sure-fire way to print money. -- Chris Adams

Re: Good Stuff [was] Re: shameful-cabling gallery of infamy - does anybody know

2007-09-12 Thread Chris Adams
x27;ll get sliced next time. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Using Mobile Phone email addys for monitoring

2007-09-06 Thread Chris Adams
h T-Mobile. T-Mobile dropped their TAP access several years ago. The only way to send messages to T-Mobile phones is SMTP or SMS. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Gwd: crypted document

2007-08-02 Thread Chris Adams
Once upon a time, Jon Lewis <[EMAIL PROTECTED]> said: > If you could read the header, the question you would have asked is, "What > is Chris Adams doing in Korea sending virus mail to nanog?" :) Especially as this particular Chris Adams is not well traveled and has

Re: Gwd: crypted document

2007-08-02 Thread Chris Adams
nk all those with auto-responders that respond to list email for letting me know about this message to NANOG. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: DNS Hijacking by Cox

2007-07-23 Thread Chris Adams
less terse. Okay, so instead of changing the DNS record, they snoop it and redirect the IPs. What have you gained? How many IRC servers (especially those used by the botnets) use SSL, and how many clients validate the cert? -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Adminis

Re: broken DNS proxying at public wireless hotspots

2007-02-04 Thread Chris Adams
Once upon a time, Chris Adams <[EMAIL PROTECTED]> said: > Once upon a time, Trent Lloyd <[EMAIL PROTECTED]> said: > > The flaw here is that DNS operates over 53(UDP), last time I checked SSH > > doesn't do UDP port forwarding? > > It doesn't forward UDP

Re: broken DNS proxying at public wireless hotspots

2007-02-04 Thread Chris Adams
Once upon a time, Trent Lloyd <[EMAIL PROTECTED]> said: > The flaw here is that DNS operates over 53(UDP), last time I checked SSH > doesn't do UDP port forwarding? It doesn't forward UDP ports, but you can set up a full IP tunnel with it now. -- Chris Adams <[EMAI

Re: register.com down sev0?

2006-10-28 Thread Chris Adams
-cl4.sl9mo.ip.att.net (12.122.10.30) 29.708 ms 29.593 ms 33.498 > ms > 9 12.122.85.178 (12.122.85.178) 36.300 ms 28.558 ms 28.521 ms Also, it looks like anyone filtering on ARIN boundaries won't even see that. Register.com has 216.21.224.0/20 assigned, but announces 7 /24s and 2 /22s out

Re: register.com down sev0? - More information

2006-10-26 Thread Chris Adams
think they have a lot of their stuff on AT&T's network. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Boeing's Connexion announcement

2006-10-15 Thread Chris Adams
laptop. Horribly inefficient, but that's the way Joe Sixpack does it. > He probably doesn't have much of a choice. My Thinkpad power brick has both AC and DC (car/airline) power cables. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet S

Re: [Fwd: Important ICANN Notice Regarding Your Domain Name(s)]

2006-10-06 Thread Chris Adams
for that IP. They couldn't tell us why it was blocked or how to get the block removed. When we asked to speak with a supervisor, they told us that their supervisors didn't have phones. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I

Re: icmp rpf

2006-09-25 Thread Chris Adams
if they wish statically route that IP space, and any such security would be gone. Unless it is otherwise filtered, any customer with a default route can reach their routers. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: comast email issues, who else has them?

2006-09-06 Thread Chris Adams
Once upon a time, Sean Donelan <[EMAIL PROTECTED]> said: > You don't have to exchange E-mail with either Google, Comcast or any other > Mail Service Provider if you don't want to. Just wait until "Net Neutrality" laws require you to. -- Chris Adams <[EM

Re: Silicon-germanium routers?

2006-06-20 Thread Chris Adams
resting than 500GHz a few degrees above absolute zero). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: WSJ: Big tech firms seeking power

2006-06-16 Thread Chris Adams
bility error 1 kg m^2 / s^3 1055.0559 kg m^2 / s^2 You have: watt hour You want: btu * 3.4121416 / 0.29307107 -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Interesting new spam technique - getting a lot more popular.

2006-06-15 Thread Chris Adams
Once upon a time, chuck goolsbee <[EMAIL PROTECTED]> said: > * They lacked sufficient clue to grok name-based virtual hosting. Name-based virtual hosting is not a cure-all. Think about SSL and anonymous FTP uploads for starters. -- Chris Adams <[EMAIL PROTECTED]> Syst

Re: OT: Xen

2006-04-03 Thread Chris Adams
ans you can run Windows on the same box as Linux on the same box as *BSD, all at the same time. Later this year, AMD's CPUs will add a similar (but different) extension. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak

Re: OT: Xen

2006-04-03 Thread Chris Adams
Once upon a time, Stephane Bortzmeyer <[EMAIL PROTECTED]> said: > On Sat, Apr 01, 2006 at 04:51:09PM -0600, > Chris Adams <[EMAIL PROTECTED]> wrote > a message of 17 lines which said: > > unixshell.com claims more service (RAM, disk, monthly transfer) for less &

Re: OT: Xen

2006-04-01 Thread Chris Adams
ww.panix.com/corp/virtuals/ unixshell.com claims more service (RAM, disk, monthly transfer) for less per month: http://www.unixshell.com/ -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Fire in bakery fries fiber optic cable

2006-03-25 Thread Chris Adams
e companies, it went down overnight one night. The cable company tracked it down to the cable being shot off the pole in two places. We didn't get any pictures though. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for any

Re: DNS deluge for x.p.ctrc.cc

2006-02-24 Thread Chris Adams
utside DNS recursion. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: a radical proposal (Re: protocols that don't meet the need...)

2006-02-15 Thread Chris Adams
multihoming customers has a connection to someone we already have a connection with, so there's no path between our network and the rest. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: PI space and colocation

2006-01-18 Thread Chris Adams
ther AS (the customer) announcing it through the first AS (the colo provider)? If the space is ARIN assigned PI, it isn't going to aggregate with the colo provider's space, so the prefix will still be a separate announcement. The only difference is the AS path is one entry longer. -

Re: Leap second reminder - Check your NTP

2005-12-31 Thread Chris Adams
ter /kernel: microuptime() went backwards (8144133.847075 -> 8144132.881330) Tru64 and Cisco didn't log anything. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: IPv6 news

2005-10-14 Thread Chris Adams
Once upon a time, Daniel Roesen <[EMAIL PROTECTED]> said: > On Fri, Oct 14, 2005 at 10:21:58PM -0500, Chris Adams wrote: > > For some equipment, it still works out to "forklift your network". > > For example, our current dialup gear doesn't support IPv6 (and AF

Re: IPv6 news

2005-10-14 Thread Chris Adams
e's no reason for us to replace our dialup gear; the only thing that fails on it is fans (and we can replace those easily enough with an hour's work of chassis dis/re-assembly). Dialup isn't going to go away in the near future either. -- Chris Adams <[EMAIL PROTECTED]> System

Re: OT: Cisco.com password reset.

2005-08-03 Thread Chris Adams
gy? Odd that lots of people are trying to download new IOS images and then CCO locks them out. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Cisco IOS Exploit Cover Up

2005-07-29 Thread Chris Adams
nd target large server farms. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Cisco cover up

2005-07-28 Thread Chris Adams
while introducing additional unknown bugs). When I've got an apparently stable version for my setup, I leave it alone. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Battery Maint in LEC equipment

2005-06-04 Thread Chris Adams
y of the remote cabinets (installed in the last 5-7 years or so anyway) have a gas meter next to them and a line running into a second cabinet (generator/power supply I suppose). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don'

Re: Slashdot: Providers Ignoring DNS TTL?

2005-04-20 Thread Chris Adams
f you send a request to the same IP address you will get a response from the same server. There may be additional load balancing being done where at a particular location that IP maps to multiple servers (we've done that with TruCluster for example), but that has nothing to do with anycasting.

Re: Jonathan Yarden @ TechRepublic: Disable DNS caching on workstations

2005-04-18 Thread Chris Adams
Once upon a time, Patrick W. Gilmore <[EMAIL PROTECTED]> said: > Most desktop OSes do not re-query for the name again. Don't confuse apps and OSes. If I run "lynx", it does a DNS lookup for each connect (even when it is the same hostname). -- Chris Adams <[EM

Re: Jonathan Yarden @ TechRepublic: Disable DNS caching on workstations

2005-04-18 Thread Chris Adams
hostname they sent out a DNS query? That's what most Unix/Linux/*BSD boxes do unless they are running a local caching name service of some time (BIND, nscd, etc.). I wasn't actually aware that Windows had a DNS cache service. -- Chris Adams <[EMAIL PROTECTED]> Systems and Networ

Re: Vonage Hits ISP Resistance

2005-03-31 Thread Chris Adams
Once upon a time, Jamie Norwood <[EMAIL PROTECTED]> said: > On Wed, 30 Mar 2005 21:36:19 -0600, Chris Adams <[EMAIL PROTECTED]> wrote: > > Once upon a time, Eric A. Hall <[EMAIL PROTECTED]> said: > > > Do you also block NNTP so that customers have to use your s

Re: Vonage Hits ISP Resistance

2005-03-30 Thread Chris Adams
Once upon a time, Eric A. Hall <[EMAIL PROTECTED]> said: > Do you also block NNTP so that customers have to use your servers? Change that to SMTP and you'll get a bunch of "yes" answers. Why is one right and the other wrong? -- Chris Adams <[EMAIL PROTECTED]> Sys

Re: AOL scomp

2005-03-01 Thread Chris Adams
"Delete" button, leading to mis-clicks. Even if that isn't so, there are definately a significant number of users that use the buttons interchangeably. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Symantec AV may execute viruses

2005-02-10 Thread Chris Adams
ris versions of Brightmail are affected. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Time to check the rate limits on your mail servers

2005-02-03 Thread Chris Adams
s getting tens of thousands of legacy ISP customers to switch > to SMTP auth without drowning the support center in calls. What does that have to do with SMTP rate limiting? -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Association of Trustworthy Roots?

2005-01-16 Thread Chris Adams
ss of pot painting? If the proper procedure was circumvented in the first place (which appears to be the case with panix.com), then it should be circumvented to repair the damage as fast as possible. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Se

Re: The entire mechanism is Wrong!

2005-01-16 Thread Chris Adams
with the "streamlined" transfer procedure now in place, this would be a very good idea. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: panix.com hijacked

2005-01-15 Thread Chris Adams
Once upon a time, Robert Kryger <[EMAIL PROTECTED]> said: > On Sat, 15 Jan 2005, Chris Adams wrote: > >Good luck dealing with melbourneit.com; that's the place where domains > >go to die. > > Can you be a little more specific? > You imply that you have experi

Re: panix.com hijacked

2005-01-15 Thread Chris Adams
o > try to get this straightened out? Good luck dealing with melbourneit.com; that's the place where domains go to die. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: fixing insecure email infrastructure (was: Re: [eweek article] Window of "anonymity" when domain exists, whois not updated yet)

2005-01-12 Thread Chris Adams
or spoofed). If you _always_ take someone off-line on a single complaint, you make it easy for someone to get someone else kicked off. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: "Make love, not spam"....

2004-11-29 Thread Chris Adams
gt; paid for. For sites set up with a monthly bandwidth quota, that _is_ a denial of service. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: ad.doubleclick.net missing from DNS?

2004-07-27 Thread Chris Adams
_udp(216.73.86.10:53) ;; send_udp(216.73.87.10:53) ;; send_udp(216.73.85.10:53) ;; send_udp(216.73.81.10:53) ;; send_udp(216.73.86.10:53) ;; send_udp(216.73.87.10:53) ;; send_udp(216.73.85.10:53) ;; send_udp(216.73.81.10:53) ad.doubleclick.net: query timed out -- Chris Adams <[EMAIL PROTECTE

Re: ultradns reachability

2004-07-01 Thread Chris Adams
UERY SECTION: ;; whoareyou.ultradns.net, type = A, class = IN ;; ANSWER SECTION: whoareyou.ultradns.net. 0S IN A 204.74.105.6 ;; Total query time: 403 msec ;; FROM: ant.hiwaay.net to SERVER: 204.74.113.1 ;; WHEN: Thu Jul 1 20:10:28 2004 ;; MSG SIZE sent: 40 rcvd: 56 $ -- Chris Adams <

Re: FW: Worms versus Bots

2004-05-07 Thread Chris Adams
single public IP because there are multiple computers scanning. NAT does help if you just put necessary port mappings in place (and only for "secure" protocols). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak

Re: Spam with no purpose?

2004-04-05 Thread Chris Adams
as civil Why bother with copyright sources; I don't expect I'm giving anyone any ideas, but how much (grammatically correct) text is in Project Gutenberg? -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: UPS and generator interaction?

2004-03-30 Thread Chris Adams
t we switched to a different 20A strip and it is working fine on a 20A breaker) and that while they would replace it, if the replacement failed they would NOT replace it. I prefer APC for small UPSes, but I'm not impressed by support on a simple power strip. -- Chris Adams <[EMAIL PROTECTE

Re: T1 Customer CPE Replacement?

2004-02-23 Thread Chris Adams
town; I think UPS thought we were crazy. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Interesting BIND error

2004-02-12 Thread Chris Adams
Just > wondering if this is local, or if others have suddenly seen the same. I'm seeing them too (also BIND 9.2.1). They seem to come in bunches. It looks like they started at a little after 5am (CST) today. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiW

Re: question on ptr rr

2004-02-08 Thread Chris Adams
a complaint with sending IP, we don't have to look through the logs for the whole cluster to find the offender. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: CIsco 7206VXR w/NPE-G1 Question

2004-01-30 Thread Chris Adams
theoretically would > double the GEIP's throughput? I don't know how much more capable it is, but the GEIP+ is based on the VIP4. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Verizon mail troubles

2004-01-29 Thread Chris Adams
had to move something after testing it and missed re-testing it). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: AT&T carrying rfc1918 on the as7018 backbone?

2004-01-22 Thread Chris Adams
ing a static route pointing at our AT&T link does show that they will route 10.0.0.0/8 traffic (at least a few random IPs I tried). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Bandwidth Control Question

2003-12-19 Thread Chris Adams
lized (the default) to unchannelized causes a cbus complex restart, which interrupts traffic through the router for a period of time (the time varies based on the number of interfaces in the router). Of course, since OIR sometimes can cause a router reload anyway, maybe that's not suc

Re: ARIN, where art thou?

2003-11-12 Thread Chris Adams
Once upon a time, Haesu <[EMAIL PROTECTED]> said: > I am trying from different locations and its not connecting.. traceroute > dies after arin-gw.customer.alter.net whois.arin.net and www.arin.net are working from here. It appears they block traceroute. -- Chris Adams <[

Re: Worst design decisions?

2003-09-18 Thread Chris Adams
maybe ending up having to use a non-standard screw for just that hole). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: ICANN - Formal Complaint re Verisign

2003-09-18 Thread Chris Adams
> http://www.google.com/search?sourceid=mozclient&ie=utf-8&oe=utf-8&q=Thawte+was+b > ought+by+Verisign Bzzt, Thawte != Geotrust. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: ISC Patches

2003-09-17 Thread Chris Adams
about that move over to the BIND list or the USENET gateway comp.protocols.dns.bind. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: What *are* they smoking?

2003-09-16 Thread Chris Adams
Once upon a time, John Palmer <[EMAIL PROTECTED]> said: > Here is one solution - replace all of your root.cache files with: > > (root) nameserver = C.ROOT-SERVERS.ORSC Since the ORSC servers still refer com and net to the GTLD servers, this will have no impact on the issue at h

Re: What *are* they smoking?

2003-09-15 Thread Chris Adams
sponse for 'somedomain.tld' is to query for '*.tld'; if the results match, then 'somedomain.tld' doesn't really exist. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: What *are* they smoking?

2003-09-15 Thread Chris Adams
ecords for bogusdomain.net None of these help MTAs today. For sendmail, you could do something with the dns map to look for NS records for something.net when you get @blah.something.net. However, it means one more DNS lookup for everything ending in .com or .net. -- Chris Adams <[EM

Re: What *are* they smoking?

2003-09-15 Thread Chris Adams
it back to NXDOMAIN. Blackholing the IP means that your customers will get an error that the site is unreachable, not that it does not exist. BTW: I got a "content filter" message bounce in response to my other post on this topic - anyone else get that? I didn't see anything in my me

Re: What *are* they smoking?

2003-09-15 Thread Chris Adams
er-idn.verisign.com > > It even responds on port 25 (says 550 on every RCPT TO). Gah. Yep, and it'll be coming soon to .com. All your typo domain are belong to Verisign. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don&#x

Re: 92 Byte ICMP Blocking Problem

2003-09-12 Thread Chris Adams
I didn't turn the route cache completely off, but I did limit the size, and that solved it for us. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: 92 Byte ICMP Blocking Problem

2003-09-12 Thread Chris Adams
Once upon a time, Steven M. Bellovin <[EMAIL PROTECTED]> said: > In message <[EMAIL PROTECTED]>, Chris Adams writes: > >Yes. As soon as we put the policy route map in place, we had some > >people unable to talk via SSH, SMTP, or POP3. It was random: one person > &g

Re: 92 Byte ICMP Blocking Problem

2003-09-12 Thread Chris Adams
n a 7513 doing dCEF. We put the policy route map on the FE interface linking this router to the POP core router; this router has MC-T3 interfaces and ethernets to Ascend TNTs and such. The intent was to stop the 92 byte ICMP echos from reaching the Ascend TNTs, since several of them were reboot

Re: GLBX ICMP rate limiting (was RE: Tier-1 without their own bac kbone?)

2003-08-29 Thread Chris Adams
Cisco advisory to drop just 92 byte ICMP traffic, we had other random types of traffic dropped as well (possibly an IOS bug, but who knows). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Max TNT ping thing

2003-08-26 Thread Chris Adams
ip-glob set iproute-cache-size = 50 wr -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: East Coast outage?

2003-08-16 Thread Chris Adams
Once upon a time, Chris Lewis <[EMAIL PROTECTED]> said: > Chris Adams wrote: > >Basic physics. To run DC at the power levels required, the "wire" would > >have to be over 100 feet in diameter IIRC. Look up the Edison vs. Tesla > >power arguments for

Re: East Coast outage?

2003-08-16 Thread Chris Adams
nductor a "holy grail" research area. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Battery lifetimes RE: East Coast outage?

2003-08-15 Thread Chris Adams
r sure, but it looks like BellSouth has their network prepared for long term power outages (as long as the NG supply keeps going). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Looking for advice on datacenter electrical/generator

2003-04-03 Thread Chris Adams
.), we "pull the handle" (shut off utility power) once a month and make sure that everything works as it is supposed to. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Chris Adams
eriodically send an "are you there" type email to contacts (like some mailing lists do). If that fails, mail a letter with instructions on how to update your contact info, and if that fails, delete the invalid contact info - I'd rather see no contact info than bogus info. -- Chris Ad

Re: att.net email issues?

2003-01-24 Thread Chris Adams
o. This is the > standard premise for any form of migration. Can anyone get aol to enforce > it, please? It is funny that AT&T is doing this - we recently had a connection to AT&T installed and repeatedly asked for reverse DNS on the interface IPs (so traceroute would "look nice&quo

Re: FW: Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-18 Thread Chris Adams
y How is this different than "ip verify unicast reverse-path" (modulo CEF problems and bugs, which of course NEVER happen :-) )? Multihomed customers are more interesting, but if all the single homed customers had uRPF (or $VENDOR's equivalent) enabled it would cut down on a sign

Re: PM3's crashing

2002-11-15 Thread Chris Adams
OS of some sort. Do you have SNMP enabled? We have a couple of TNTs stop talking to the ethernet periodically, apparently due to the SNMP bugs (and someone probing). Software upgrades are now scheduled (of course, not an option for the PM3 ). -- Chris Adams <[EMAIL PROTECTED]> Systems

Re: Blocking specific sites within certain countries.

2002-11-14 Thread Chris Adams
n. Then if your customer types "http://www.terrorist.com/"; in their web browser, it resolves to nothing. They never get sent to an Akamai server. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Important Informational Message - root.zone change

2002-11-05 Thread Chris Adams
change being made? My guess would be because of the proximity of a.root-servers.net (198.41.0.4) and j.root-servers.net (198.41.0.10), which are in the same /24 announced in BGP. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: More federal management of key components of the Internet needed

2002-10-24 Thread Chris Adams
attack the gTLD's were attacked as well, taking > out .biz, .info, and .gov ... can anyone verify if anything happened? Well, since the gTLD servers don't serve .biz, .info, or .gov (and those three zones are served by three different sets of servers), it sounds bogus. -- Chris A

Re: Sprint VS. Qwest

2002-10-16 Thread Chris Adams
friendly New Edge Networks salesperson telling us our circuit was being moved). -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: UUNET Routing issues

2002-10-03 Thread Chris Adams
!) 6.83 ms (ttl=251!) 5 0.so-5-3-0.TL2.CHI2.ALTER.NET (152.63.13.42) 22.4 ms (ttl=250!) 22.4 ms (ttl=250!) 21.4 ms (ttl=250!) 6 0.so-5-0-0.XL2.CHI13.ALTER.NET (152.63.73.21) 25.3 ms 27.3 ms 24.4 ms -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY I

Re: Wireless insecurity at NANOG meetings

2002-09-23 Thread Chris Adams
On Sunday, Sep 22, 2002, at 15:41 US/Pacific, William Allen Simpson wrote: > I will agree that the security in WEP is almost useless, and have > personally campaigned to change it for years. But, it is still the > only > Access Control widely available. So, it should be used, in addition to >

Re: mail delivery time on nanog-l (was Re: Die thread, DIE!)

2002-08-21 Thread Chris Adams
being slightly off from mine. Well, on the thread in question, my response took 15 minutes to get back to me (well, 15:06 to be precise). That is by far the largest RTT for a list that I've posted to lately (not counting lists with servers down, etc.). -- Chris Adams <[EMAIL PROTE

Re: .mil domain root only hosted by one server??

2002-08-21 Thread Chris Adams
have any A records, and since it isn't a recursive server, it just gave you the SOA for mil. If you ask for NS records (like "dig @a.root-servers.net mil. ns"), you'll see a different picture. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: your mail

2002-08-09 Thread Chris Adams
x27;t know one way or the other what might have happened or not happened or which sender is correct). Any other references to this kind of thing happening? -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: Effective ways to deal with DDoS attacks?

2002-05-06 Thread Chris Adams
MicroSoft Denial Of Service? I think it is more commonly spelled O-U-T-L-O-O-K. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: root zone file

2002-04-26 Thread Chris Adams
ROOT-SERVERS.NET. 5w6d16h IN A192.33.4.12 G.ROOT-SERVERS.NET. 5w6d16h IN A192.112.36.4 ;; Total query time: 27 msec ;; FROM: fly.hiwaay.net to SERVER: a.root-servers.net 198.41.0.4 ;; WHEN: Fri Apr 26 16:10:33 2002 ;; MSG SIZE sent: 17 rcvd: 436 $ -- Chris Adams <[E

Re: CIA Warns of Chinese Plans for Cyber-Attacks on U.S.

2002-04-25 Thread Chris Adams
Once upon a time, Deepak Jain <[EMAIL PROTECTED]> said: > Is it really hard to believe that the Chinese government would actively fund > cyberterrorism? Why not? Our government does, although they don't call it that: they call it Microsoft. :-) -- Chris Adams <[EMAIL PRO

Re: Cisco blunders with insecure web page

2002-04-25 Thread Chris Adams
that is not as common in the "real world" as different forms of password based authentication. Or is the article an over-simplification of the issue? -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

Re: netsol whois down

2002-04-22 Thread Chris Adams
heir link to C&W and the rest of their notwork. -- Chris Adams <[EMAIL PROTECTED]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

  1   2   >