Re: White House net security paper

2009-06-01 Thread Randy Bush
As hire As. Bs hire Cs. Lots of Cs. this problem needs neurons, not battalions. this problem needs round-tuits, which Good Guys are consistently short of, but which Bad Guys always have as many of as they can find use for. a few battalions of B's and C's, if wisely deployed, could bridge

Re: White House net security paper

2009-06-01 Thread Randy Bush
network security is a loss center. not just a cost center, a *loss* center. non-bankrupt ISP's whose investors will make good multiples only staff their *profit* centers. this glib statement may have been true at the isps where you worked. it is not true for the ones where i work(ed). randy

Re: DNS ed.gov translations

2009-06-01 Thread Tim Franklin
ROTFL what an honour ;-), as we are in to weekend mood anyway I share the reason for this. When I joined Colt my signature did look like this: --- ___ ___ ___ ___ Ralf Weber t: +49 (0)69 56606 2780 \C/ \O/ \L/ \T/ System Administrator V V V VCOLT Telecom GmbH

Re: White House net security paper

2009-06-01 Thread Hank Nussbacher
At 04:43 PM 01-06-09 +0900, Randy Bush wrote: network security is a loss center. not just a cost center, a *loss* center. non-bankrupt ISP's whose investors will make good multiples only staff their *profit* centers. this glib statement may have been true at the isps where you worked. it

Re: White House net security paper

2009-06-01 Thread Randy Bush
network security is a loss center. not just a cost center, a *loss* center. non-bankrupt ISP's whose investors will make good multiples only staff their *profit* centers. this glib statement may have been true at the isps where you worked. it is not true for the ones where i work(ed). It

In a bit of bind...

2009-06-01 Thread Ben Matthew
Firstly... I apologise for the atrocious pun in the subject; just can't seem to help myself. Anyway my company currently uses BIND for our DNS requirements (9.6.0). I'm always pretty keen on updating, when advised to, in order to patch vulnerabilities and so forth as we have a fairly popular

Re: In a bit of bind...

2009-06-01 Thread Scott Morris
May seem a little simplistic, but how about Webmin. :) Runs on most linux-type systems over SSL/https and allows you to administer your DNS (and other services) without issues and provide the things you listed below. Oh, and it's free. And it's already done. Scott Ben Matthew wrote:

Re: In a bit of bind...

2009-06-01 Thread Chris Meidinger
On 01.06.2009, at 12:59, Ben Matthew wrote: Finally I've managed to successfully configure BIND 9 as a slave to a myDNS server and the AXFR transfers seem to be working fine. This strikes me as being quite a nice balance of ease of use and reliability in case myDNS fails on me. Ok I

Re: In a bit of bind...

2009-06-01 Thread Colin Alston
On Mon, Jun 1, 2009 at 12:59 PM, Ben Matthew ben.matt...@timlradio.co.ukwrote: Anyway my company currently uses BIND for our DNS requirements (9.6.0). I'm always pretty keen on updating, when advised to, in order to patch vulnerabilities and so forth as we have a fairly popular website and

Re: White House net security paper

2009-06-01 Thread Sean Donelan
If people think that support for RE programs should be cut instead, I guess that is also a useful data point. It would be noteworthy that any group advocated a cut in their own funding. The Federal government, with the participation of all departments and agencies, should expand support

Re: White House net security paper

2009-06-01 Thread Jared Mauch
On Jun 1, 2009, at 8:32 AM, Sean Donelan wrote: If people think that support for RE programs should be cut instead, I guess that is also a useful data point. It would be noteworthy that any group advocated a cut in their own funding. The Federal government, with the participation of all

US Based Server host on v6

2009-06-01 Thread Skeeve Stevens
Hey guys, I mostly use Ezzi.net and a couple of others for server hosting. I am looking for the same, but with dual-stack traffic and ipv6 addresses. in theory it should be the same cost. Anyone know any companies doing this yet? .Skeeve -- Skeeve Stevens - ske...@skeeve.org

RE: In a bit of bind...

2009-06-01 Thread Ben Matthew
Thanks very much for the various responses to my question; both on and off-list. I'm very much liking the idea of only letting the outside world see bind and then AXFR'ing the data from an easier-to-manage internal database backed solution. Whether that be myDNS, Microsoft or whatever. Bit

Re: US Based Server host on v6

2009-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2009 at 9:42 AM, Skeeve Stevens ske...@skeeve.org wrote: Hey guys, I mostly use Ezzi.net and a couple of others for server hosting. I am looking for the same, but with dual-stack traffic and ipv6 addresses. in theory it should be the same cost. Anyone know any companies doing

AOL Postmaster

2009-06-01 Thread Aaron Wendel
Is anyone from AOL lurking on the list that could contact me of-list? I'm having some issues with mail being rejected because AOL believes our IPs are dynamic. Aaron

RE: AOL Postmaster

2009-06-01 Thread Mike Walter
Have you been through http://postmaster.aol.com/? Mike -Original Message- From: Aaron Wendel [mailto:aa...@wholesaleinternet.com] Sent: Monday, June 01, 2009 12:48 PM To: nanog@nanog.org Subject: AOL Postmaster Is anyone from AOL lurking on the list that could contact me of-list? I'm

RE: US Based Server host on v6

2009-06-01 Thread Ric Moseley
(not that I am self promoting but...) Softlayer (www.softlayer.com) has been offering ipv6 on dedicated servers for 6 months now on a dual stack network. Thanks. Ric. -Original Message- From: Skeeve Stevens [mailto:ske...@skeeve.org] Sent: Monday, June 01, 2009 8:42 AM To:

Re: In a bit of bind...

2009-06-01 Thread Curtis Maurand
I've been using powerdns for quite a while and I've found it to be solid and stable. It'll use quite a few different backends includeing BIND zone files, but its claim to fame is that it uses mysql. a list of different backends can be found at:

RE: AOL Postmaster

2009-06-01 Thread Aaron Wendel
Yes. For the last 2 months I've been getting the nice auto reply/ticket number but no other contact. Aaron -Original Message- From: Mike Walter [mailto:mwal...@3z.net] Sent: Monday, June 01, 2009 12:23 PM To: nanog@nanog.org Subject: RE: AOL Postmaster Have you been through

Re: In a bit of bind...

2009-06-01 Thread Daryl G. Jurbala
On Jun 1, 2009, at 2:37 PM, Curtis Maurand wrote: I've been using powerdns for quite a while and I've found it to be solid and stable. It'll use quite a few different backends includeing BIND zone files, but its claim to fame is that it uses mysql. a list of different backends can be

Fiber cut - response in seconds?

2009-06-01 Thread Charles Wyble
http://www.washingtonpost.com/wp-dyn/content/article/2009/05/30/AR2009053002114_pf.html Not sure if I fully believe the article. Responding to a fiber cut in seconds? I suppose it's possible if $TLA had people monitoring the construction from across the street, and they were in communication

RE: Fiber cut - response in seconds?

2009-06-01 Thread Warren Bailey
I sent this to all of our transport people to.. Was quite curious as to what they'd use for this. However, they are the federal government - so anything is possible. -Original Message- From: Charles Wyble [mailto:char...@thewybles.com] Sent: Monday, June 01, 2009 2:41 PM To:

Re: Fiber cut - response in seconds?

2009-06-01 Thread Joel Jaeggli
It's pretty trivial if know where all the construction projects on your path are... I've seen this happen on a university campus several times. no black helicopters were involved. joel Charles Wyble wrote: http://www.washingtonpost.com/wp-dyn/content/article/2009/05/30/AR2009053002114_pf.html

Re: Fiber cut - response in seconds?

2009-06-01 Thread Charles Wyble
Joel Jaeggli wrote: It's pretty trivial if know where all the construction projects on your path are... How so? Setup OTDR traces and watch them? I've seen this happen on a university campus several times. no black helicopters were involved. Care to expand on the methodology used? A

Re: Fiber cut - response in seconds?

2009-06-01 Thread Deepak Jain
I'm not sure why this sounds so surprising or impressive... given g$vt budgets. Monitoring software using a pair of fibers in your bundle. OTDR or similar digital diagnostics. You detect a loss, you figure out how many feet away it is. You look at your map. A simpler way to do it (if you

Re: Fiber cut - response in seconds?

2009-06-01 Thread Robert Bonomi
From nanog-bounces+bonomi=mail.r-bonomi@nanog.org Mon Jun 1 18:30:48 2009 Date: Mon, 01 Jun 2009 15:40:31 -0700 From: Charles Wyble char...@thewybles.com To: nanog@nanog.org nanog@nanog.org Subject: Fiber cut - response in seconds?

Re: Fiber cut - response in seconds?

2009-06-01 Thread Leo Bicknell
In a message written on Mon, Jun 01, 2009 at 03:40:31PM -0700, Charles Wyble wrote: http://www.washingtonpost.com/wp-dyn/content/article/2009/05/30/AR2009053002114_pf.html Not sure if I fully believe the article. Responding to a fiber cut in seconds? Folks who dig call Miss Utility (in

Re: Fiber cut - response in seconds?

2009-06-01 Thread Charles Wyble
Joel Jaeggli wrote: Charles Wyble wrote: Joel Jaeggli wrote: It's pretty trivial if know where all the construction projects on your path are... How so? Setup OTDR traces and watch them? When you lose link on every pair in a bundle, but don't lose any of the buildings you're serving via

Re: Fiber cut - response in seconds?

2009-06-01 Thread Jason Fesler
The fact that they are so closely monitoring the construction and wanting to fix it that fast seems a bit over the top for redundant systems. Even despite what we saw recently in the SF bay area? If black helicopters are involved, I suspect this is about par on the paranoia scale.

Re: Fiber cut - response in seconds?

2009-06-01 Thread Dave Pooser
Right. So why the near instant response time. If it's a diverse path, one would imagine that they could respond in a few hours or a day and not have any impact. Just a guess, but: A cut cable is one thing. A cut cable in which people wearing different suits and driving a different brand of SUV

Re: Fiber cut - response in seconds?

2009-06-01 Thread Charles Wyble
I do feel this might be the last post from Mr Pooser. :) Your on to them it seems. ;) A very interesting idea. I imagine it wouldn't be hard for foreign actors to get access to the data feed of construction, observe for signs of a cut and then splice in a tap. Though wouldn't that tap be

Re: Fiber cut - response in seconds?

2009-06-01 Thread Warren Bailey
Its all a sham. The construction was done by the cubans.. They're good at fiber taps - Original Message - From: Charles Wyble char...@thewybles.com To: nanog@nanog.org nanog@nanog.org Sent: Mon Jun 01 16:17:08 2009 Subject: Re: Fiber cut - response in seconds? I do feel this might be

Re: Fiber cut - response in seconds?

2009-06-01 Thread Peter Beckman
On Mon, 1 Jun 2009, Charles Wyble wrote: Right. So why the near instant response time. Extra budgets, job creation. Knowing ahead of time where and when work is going to be done (easily found out), have someone around the corner at a Starbucks so they can jump into action if/when

How to measure network equipment usage effectiveness?

2009-06-01 Thread Lee, Steven (NSG Malaysia)
Hi all, may I know how you guys measure the network equipment usage effectiveness? In what situation you will buy new network equipment instead of using the existing equipment? Any clue to share? Should we only upgrade/replace the equipment once the max PPS is reached? Is there any tools other

Re: How to measure network equipment usage effectiveness?

2009-06-01 Thread Valdis . Kletnieks
On Tue, 02 Jun 2009 03:29:16 -, Lee, Steven (NSG Malaysia) said: Hi all, may I know how you guys measure the network equipment usage effectiveness? (...) Is there any tools other there can measure this? Step 0: Define effectiveness. The problem is that quite often, decisions on whether to