Re: Customer-facing ACLs

2008-03-07 Thread Dan Armstrong
I would *love* to be able to run uRPF on all of our edge devices, but we use Cisco ME3400s, 3550s, 3560s and they don't support it. :-( [EMAIL PROTECTED] wrote: On Fri, 07 Mar 2008 13:55:05 CST, Justin Shore said: I'm assuming everyone uses uRPF at all their edges already so that

Re: Does anyone multihome anymore?

2007-08-22 Thread Dan Armstrong
We're connected to Teleglobe(6453), Telus(852), TeliaSonera(1299), MCI(701), and L3(3356) We don't play any economic games with our traffic - our routing policy is (theoretically) designed to give the best possible product to our customers, and although we weren't dead in the water during

Re: Cogent latency / congestion

2007-08-20 Thread Dan Armstrong
We're going crazy up here, I'm trying to nail down where exactly the problem is - We don't use Cogent anywhere, but we're having terrible problems with Bell and many sites in Europe... Mike Tancsa wrote: Does anyone have any details about the Cogent outage that started this morning

Re: Cogent latency / congestion

2007-08-20 Thread Dan Armstrong
I see Cogent has updated their page - so we think this cut is fixed now? Eric Spaeth wrote: This appears to be affecting Telia as well. Here was their last update: Concerning the cable break near Cleveland we have been informed that the cables have been intentionally sabotaged. The

Re: CO fire St. Johns Newfoundland

2006-10-21 Thread Dan Armstrong
I bet it was set by the codfather. :-) Sean Donelan wrote: Its been a while since the last big telephone central office fire. 100,000+ lines are out of service in St. John's Newfoundland (Canada, the other part of North America).

Re: OT: Cisco.com password reset.

2005-08-03 Thread Dan Armstrong
My PW to CCO did not work this morning either. I am on hold with the TAC right now Joe Blanchard wrote: FYI I got an email that my CCO account's password was reset last night. Not sure how widespread this issue was, but I called my account contact and verified that this is a valid

Re: WiFi Hot Spot Billing Software

2005-05-04 Thread Dan Armstrong
http://www.broadhop.com/ Eric Whitehill wrote: G'Day: Over the last month, I have been working in vain with a company to get their billing software working with our radius gear (Colubris). Since this software company's support leaves something to be desired, I was wondering if anyone had any

Re: rack-mount tool drawers/chests?

2005-04-06 Thread Dan Armstrong
http://www.middleatlantic.com/ Eric A. Hall wrote: anybody recommend any 19 rackmount tool drawers or chests? like, a Snap-On red metal tool chest with locking drawers and such? I've looked around but can't find anything, although I'm probably not looking in the right places. thanks

Re: Microsoft WAN Engineer Please contact me off list

2005-02-22 Thread Dan Armstrong
I don't think Microsoft _has_ engineers, let alone WAN engineers :-) Erik Sundberg wrote: I am have a routing issues with microsoft could a WAN person from microsoft please contact me off list thanks. Thanks Erik =-=-=-=-=-=-=-=-=-=-=-=-= Erik Sundberg [EMAIL PROTECTED] Network Engineer Apps

Re: ATM SVC rerouting time

2004-11-30 Thread Dan Armstrong
That depends on if the SVC was torn down due to a broken link, or if the switch is just coming online, or if it was rerouted around congestion, and a million other tuneable factors. In our network, SVC (SPVCs) get rerouted at near sonet speeds, although that's not very scientific. Dan.

Re: fiber cut 19 May/PM - 20 May/AM in Ashburn, VA (lawnmower?!)

2004-05-21 Thread Dan Armstrong
trom wrote: Dan Armstrong [EMAIL PROTECTED] writes: Forgive me, but Isn't Sonet usually deployed in a ring? Why the heck would a fiber this important not be? sonet, obviously, does not *have* to be in a ring, but it often is. unfortunately, a fair percentage o

Re: fiber cut 19 May/PM - 20 May/AM in Ashburn, VA (lawnmower?!)

2004-05-20 Thread Dan Armstrong
Forgive me, but Isn't Sonet usually deployed in a ring? Why the heck would a fiber this important not be? Sean Donelan wrote: On Thu, 20 May 2004, Robert E. Seastrom wrote: in the immediate area. Outage was likely off the radar because despite the big concentration of connectivity in the

Re: GSR, 7600, Juniper M?, oh my!

2004-01-07 Thread Dan Armstrong
If only dCEF wasn't phuqed in so many versions of the IOS. life would be wonderful. We had to turn dCEF off and just run plain old ip cef on our 7513 under 12.2.19a The RSP4 CPU spikes up to 80% then back down then UP and down... weird. Jason Frisvold wrote: -Original

Re: GSR, 7600, Juniper M?, oh my!

2004-01-06 Thread Dan Armstrong
GSRs are useless if you are doing any kind of aggregation. Their traffic shaping abilities are embarrassing. 7500 is the classic aggregator. They do the job quite well, actually. Based on cost right now, I would take 10 7500s over 1 7600 anyday. For transit, though, I would use a Juniper -

Re: MPLS billing model

2003-11-25 Thread Dan Armstrong
We charge a flat fee per location, all traffic between locations is free within a metro area. Anything going out to the Internet, or outside a particular metro area is billable per their Internet transit pricing. Dan Lockwood wrote: For those of you who sell MPLS VPNs, what components of

Re: OC3 Router

2003-11-21 Thread Dan Armstrong
I know this is not relevant, but the humour is perfectly apropos as a reply. This was the best manager call the support line of the day story: abridged for clarity We need an OC-192. My god, why? We need to be able to support at least 192 simultaneous users to our website Uh Huh.

Re: DDOS Today?

2003-10-11 Thread Dan Armstrong
I am still trying to confirm what happened, but it looks like we got whacked today. Around 2:35 EST all our BGPpeers dropped pretty much at the same time. Our mrtg systems have all fallen over too - so I can't confirm a traffic spike. Anybody else? Dan. Greg Valente wrote: I just got on today.

Re: Another DNS blacklist is taken down

2003-09-29 Thread Dan Armstrong
Jared Mauch wrote: On Mon, Sep 29, 2003 at 09:51:08AM -0700, Mike Batchelor wrote: --On Wednesday, September 24, 2003 1:18 PM -0500 Justin Shore [EMAIL PROTECTED] wrote: On Wed, 24 Sep 2003, Joel Perez wrote: So back to my ACL's I go! This is one of the most likely things to

Re: Another DNS blacklist is taken down

2003-09-29 Thread Dan Armstrong
Jared Mauch wrote: On Mon, Sep 29, 2003 at 01:11:08PM -0400, Dan Armstrong wrote: Jared Mauch wrote: On Mon, Sep 29, 2003 at 09:51:08AM -0700, Mike Batchelor wrote: --On Wednesday, September 24, 2003 1:18 PM -0500 Justin Shore [EMAIL PROTECTED] wrote: On Wed, 24 Sep 2003

Re: Microsoft.com attack?

2003-08-01 Thread Dan Armstrong
I wouldn't put it past Microsoft to make a patch so poorly written, it would actually cause all patched machines to attack the mothership. :-) Adam Maloney wrote: Yeah, seeing the same here - it's been flaky for us for the last 30 minutes while we've been trying it. I wonder if it's

Re: NAT for an ISP

2003-06-05 Thread Dan Armstrong
90% of our customers all use private address space. We only give out real address space to customers that have servers that need to be visible. We run NAT on several customer facing routers. Cool stuff we can do is setup PPTP VPNs on the same router to give people access from home to their

Re: NAT for an ISP

2003-06-05 Thread Dan Armstrong
that goes out to the Internet quite easily. (apologies to vendors watching) but I really think this push intelligence out to the edge concept is entirely vendor invented to sell more stuff. There are more edge devices than core devices. Dan. Andy Dills wrote: On Wed, 4 Jun 2003, Dan

Re: They all suck! Re: UPS failure modes (was: fire at NAC)

2003-05-30 Thread Dan Armstrong
Or we could all take a page from the book of telecom, and run with DC systems. No inverters involved, lots of parallel rectifiers and battery power just sitting there. If only the equipment manufacturers would stop gauging on price for DC equipment/power supplies. Dan. Alex Rubenstein

Re: They all suck! Re: UPS failure modes (was: fire at NAC)

2003-05-30 Thread Dan Armstrong
I agree, of course it is ludicrous to think otherwise. It has always bothered me that we rectify AC power to store it in batteries, then re-invert it to power AC servers only for them to rectify it again Dan. Tom (UnitedLayer) wrote: Or we could all take a page from the book of

Re: Looking for advice on datacenter electrical/generator

2003-04-02 Thread Dan Armstrong
I don't know what policy is like in the USA, but before a fire crew even breathes here in Toronto, they shut off the gas. Not to mention that in the event of any political disaster, the supply of natural gas just cannot be guaranteed. Although it took a lot of begging, we were able to put a

Re: Router too busy???

2003-04-01 Thread Dan Armstrong
We had what I would say is exactly the same problem last Thursday around 3:00am. The traffic lights on the router were pegged solid as usual, so it appeard to be up and running, but not really passing any useful traffic. Telnetting to it was pretty much useless, although it did glimmer to work

DNS dDos Attack!

2003-03-28 Thread Dan Armstrong
I am sorry if this has come up before, but it seems that one of our name servers is under some sort of dDos attack. It seems to be receiving millions of queries form spoofed IPs, and it is spending all of it's time sending back icmp unreachables. It is running bind 4.31 under BSD 4.62STABLE

Re: DNS dDos Attack!

2003-03-28 Thread Dan Armstrong
, but whoever is doing this has this name server at it's knees. Dan. Eric Whitehill wrote: Dan: Can you updated your version of BIND and install some acls? -Eric On Fri, 28 Mar 2003, Dan Armstrong wrote: Date: Fri, 28 Mar 2003 09:20:20 -0500 From: Dan Armstrong [EMAIL PROTECTED] To: [EMAIL