Re: default routes question or any way to do the rebundant

2008-03-21 Thread Peter J. Cherny
At 04:20 AM 21/3/08, ann kok wrote: ls it possible to have 2 default routes? or how can I do the rebundant when the route is still working either eth1 or eth2 down? A google search for ipfilter policy routing turns up lots of hints (mine included). There are some variations using lo0 so that

Re: broken DNS proxying at public wireless hotspots

2007-02-03 Thread Peter J. Cherny
At 04:58 PM 4/2/07, Trent Lloyd [EMAIL PROTECTED] wrote: * Set up the profile, to your house/work/etc, of your favorite SSH client to forward port 53 local to port 53 on your remote machine. The flaw here is that DNS operates over 53(UDP), last time I checked SSH doesn't do UDP port

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Peter J. Cherny
At 04:40 PM 18/9/06, Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. ... But this client, having a large number of hosts on RFC1918 space and a VPN for external people to get to it, ... What happens when the external

Re: BGP Security and PKI Hierarchies

2005-11-29 Thread Peter J. Cherny
On 29-Nov-2005, at 12:16, David Barak wrote: Maybe my imagination just isn't good enough: could you toss me an example-type of organization where that would be problematic? If we consider non-operators e.g. medium sized commercial or NGOs ... APNIC have a mechanism in-place, but most of the