Re: Comcast IPv6 Trials

2010-01-28 Thread David Freedman
John Jason Brzozowski wrote: Folks, I am emailing you today to share some news that we hope you will find interesting. Today we are announcing our 2010 IPv6 trial plans. For more information please visit the following web site: I was privileged enough to visit the Comcast DOCSIS3/IPv6

Strange Cisco 6503 problem

2010-01-28 Thread Dean Belev
Hi all, We experienced a strange problem with one of our Cisco 6503 routers - right after the terminal PC connected to the router via console is rebooted the router reboots itself. Even when there is no Eth connection to the PC the situations is the same - reboot follows. I tried to check

Re: DDoS mitigation recommendations

2010-01-28 Thread Tom Sands
-Original Message- From: David Freedman [mailto:david.freed...@uk.clara.net] Sent: Tuesday, January 26, 2010 8:17 AM To: nanog@nanog.org Subject: Re: DDoS mitigation recommendations Arbor stuff comes to mind and works very well in our experiences Arbor++ We've already done

Re: Comcast IPv6 Trials

2010-01-28 Thread Richard Barnes
What I've heard is that the driver is IPv4 exhaustion: Comcast is starting to have enough subscribers that it can't address them all out of 10/8 -- ~millions of subscribers, each with 1 IP address (e.g., for user data / control of the cable box). On Thu, Jan 28, 2010 at 12:55 AM, Kevin Oberman

Strange Cisco 6503 problem

2010-01-28 Thread Dean Belev
Hi all, I experienced a strange problem with one of our Cisco 6503 routers - right after the terminal PC connected to the router via console is rebooted the router reboots itself. Even when there is no Eth connection to the PC the situations is the same - reboot follows. I tried to check

Re: Comcast IPv6 Trials

2010-01-28 Thread tvest
On Jan 28, 2010, at 7:47 AM, Richard Barnes wrote: What I've heard is that the driver is IPv4 exhaustion: Comcast is starting to have enough subscribers that it can't address them all out of 10/8 -- ~millions of subscribers, each with 1 IP address (e.g., for user data / control of the cable

RE: Comcast IPv6 Trials

2010-01-28 Thread Paul Stewart
That really makes sense - on an incredibly smaller scale (and I mean MUCH smaller scale), we operate cable modem in two small communities - currently we use 3 IP addresses per subscriber. One for the cable modem itself, one for the subscriber (or more depending on their package), and one for

RE: Comcast IPv6 Trials

2010-01-28 Thread TJ
-Original Message- From: Richard Barnes [mailto:richard.bar...@gmail.com] Sent: Thursday, January 28, 2010 07:47 To: Kevin Oberman Cc: nanog@nanog.org Subject: Re: Comcast IPv6 Trials What I've heard is that the driver is IPv4 exhaustion: Comcast is starting to have enough

RE: Comcast IPv6 Trials

2010-01-28 Thread Scott Berkman
They'll need to be soon to keep up with others in their space (not that they generally compete directly thanks to franchise laws), although I'm not sure how the data side of things is handled for MVNO's, normally they don't have any network of their own:

Re: Comcast IPv6 Trials

2010-01-28 Thread Joakim Aronius
* Paul Stewart (pstew...@nexicomgroup.net) wrote: That really makes sense - on an incredibly smaller scale (and I mean MUCH smaller scale), we operate cable modem in two small communities - currently we use 3 IP addresses per subscriber. One for the cable modem itself, one for the

RE: Comcast IPv6 Trials

2010-01-28 Thread TJ
-Original Message- From: tv...@eyeconomics.com [mailto:tv...@eyeconomics.com] Sent: Thursday, January 28, 2010 08:12 To: Richard Barnes Cc: NANOG Subject: Re: Comcast IPv6 Trials SNIP But then that begs the question of why lots of other very large retail Internet access providers

Re: Comcast IPv6 Trials

2010-01-28 Thread tvest
On Jan 28, 2010, at 9:07 AM, TJ wrote: -Original Message- From: tv...@eyeconomics.com [mailto:tv...@eyeconomics.com] Sent: Thursday, January 28, 2010 08:12 To: Richard Barnes Cc: NANOG Subject: Re: Comcast IPv6 Trials SNIP But then that begs the question of why lots of other

Re: DDoS mitigation recommendations

2010-01-28 Thread Jeffrey Lyon
IntruGuard is highly customizable both from the GUI and CLI with the engineer's assistance. Its the highest performance, reasonably priced box that we've tried so far. Jeff On Jan 28, 2010 7:02 AM, Tom Sands tsa...@rackspace.com wrote: -Original Message- From: David Freedman

Re: Comcast IPv6 Trials

2010-01-28 Thread Tim Durack
On Thu, Jan 28, 2010 at 8:44 AM, Joakim Aronius joa...@aronius.com wrote: Excuse the newbie question: Why use public IP space for local CPE management and VoIP? Doesn't DOCSIS support traffic separation? /J Probably because rfc1918 is only 2^24+2^20+2^16 = 17,891,328 (assuming I got them

Re: Using /126 for IPv6 router links

2010-01-28 Thread David Barak
- Original Message From: Dale W. Carder dwcar...@wisc.edu On Jan 27, 2010, at 3:19 PM, Igor Gashinsky wrote: you face 2 major issues with not using /127 for PtP-type circuits: 1) ping-ponging of packets on Sonet/SDH links Following this, IPv4 /30 would have the same problem vs /31?

Rogers wireless outbound mailservers have no reverse (SORBS please help?)

2010-01-28 Thread Ken Chase
Can I get a rogers engineer who not only cares but has power to crush problems to respond to this please? Opening tickets with RNS seems to just get a null responce, we'll look at it with a hint of disbelief a customer ticket could uncover a large network-wide issue. It's an old problem that

Re: DDoS mitigation recommendations

2010-01-28 Thread Christopher Morrow
On Thu, Jan 28, 2010 at 10:00 AM, Jeffrey Lyon jeffrey.l...@blacklotus.net wrote: IntruGuard is highly customizable both from the GUI and CLI with the engineer's assistance. Its the highest performance, reasonably priced box that we've tried so far. 'highest performance' == 100mbps on a 1gbps

Re: Comcast IPv6 Trials

2010-01-28 Thread Joe Hamelin
steve pirk: Does G4 count? I have seen fliers from Comcast talking about mobile G4 Comcast is using Clearwire for 4G. Seattle 4G rolled-out about 2 weeks ago. Many more markets to be turned-up this spring. No IPv6 in the configs at this time, but most of the core seems capable. Clear is

Keeping up with New European IXP participants

2010-01-28 Thread Serge Radovcic
The Euro-IX ASN database now has more than 5.100 entries in it of which almost 3.000 are unique ASNs. In an effort to make it a little easier for those peering or looking to peer at European IXPs to keep up the latest IXP participant additions, we have created a page that lists the latest entries

Re: Comcast IPv6 Trials

2010-01-28 Thread Kevin Oberman
From: tv...@eyeconomics.com Date: Thu, 28 Jan 2010 09:34:52 -0500 On Jan 28, 2010, at 9:07 AM, TJ wrote: -Original Message- From: tv...@eyeconomics.com [mailto:tv...@eyeconomics.com] Sent: Thursday, January 28, 2010 08:12 To: Richard Barnes Cc: NANOG Subject: Re: Comcast

Re: Using /126 for IPv6 router links

2010-01-28 Thread Igor Gashinsky
On Wed, 27 Jan 2010, Dale W. Carder wrote: :: :: On Jan 27, 2010, at 3:19 PM, Igor Gashinsky wrote: :: :: you face 2 major issues with not using /127 for :: PtP-type circuits: :: :: 1) ping-ponging of packets on Sonet/SDH links :: :: Let's say you put 2001:db8::0/64 and 2001:db8::1/64 on

Re: Comcast IPv6 Trials

2010-01-28 Thread Chris Gotstein
Typically the CPE address is private, not sure why they would use a public IP. The MTA (VoIP) part of the modem would need a public IP if it was talking to a SIP server that was not on the same network. Most smaller cable system outsource their VoIP to a reseller with a softswitch.

Re: Comcast IPv6 Trials

2010-01-28 Thread Tim Durack
On Thu, Jan 28, 2010 at 4:42 PM, Chris Gotstein ch...@uplogon.com wrote: Typically the CPE address is private, not sure why they would use a public IP.  The MTA (VoIP) part of the modem would need a public IP if it was talking to a SIP server that was not on the same network.  Most smaller

IPv6 security ops panel and PGP key signing

2010-01-28 Thread John Kristoff
Hi folks, I'm helping Barry Greene out with the ISP sec BoF this year and at least one of the items planned for that session is an IPv6 security operations panel/audience discussion. If the ISP sec BoF and IPv6 operations, particularly related to security, is of interest to you, I'd be

Re: Rogers wireless outbound mailservers have no reverse (SORBS please help?)

2010-01-28 Thread Mark Andrews
In message 20100128164654.gz16...@sizone.org, Ken Chase writes: Can I get a rogers engineer who not only cares but has power to crush problem s to respond to this please? Opening tickets with RNS seems to just get a null responce, we'll look at it with a hint of disbelief a customer

Re: Strange Cisco 6503 problem

2010-01-28 Thread Peter Hicks
Dean Belev wrote: I'm curious if some of you faced such a problem - reboot of the router caused by the console connection. I once managed to send a BREAK signal to a 3640 by plugging in a console cable. At the time, it was a pretty key router in the network and sat at the rommon prompt :)

Re: Strange Cisco 6503 problem

2010-01-28 Thread David Barak
- Original Message From: Peter Hicks peter.hi...@poggs.co.uk To: Dean Belev dbe...@gmail.com I'm curious if some of you faced such a problem - reboot of the router caused by the console connection. I once managed to send a BREAK signal to a 3640 by plugging in a console cable.  At

Re: Strange Cisco 6503 problem

2010-01-28 Thread Steven Bellovin
On Jan 28, 2010, at 6:15 PM, Peter Hicks wrote: Dean Belev wrote: I'm curious if some of you faced such a problem - reboot of the router caused by the console connection. I once managed to send a BREAK signal to a 3640 by plugging in a console cable. At the time, it was a pretty key

RE: Strange Cisco 6503 problem

2010-01-28 Thread Abdulkadir Egal (aegal)
Please make sure you config register is set to x2102. You shouldn't see any issues if you the correct config register. Regards Abdul -Original Message- From: Peter Hicks [mailto:peter.hi...@poggs.co.uk] Sent: Thu 1/28/2010 3:15 PM To: Dean Belev Cc: nanog@nanog.org Subject: Re:

RE: DDoS mitigation recommendations

2010-01-28 Thread Stefan Fouant
-Original Message- From: Christopher Morrow [mailto:morrowc.li...@gmail.com] Sent: Thursday, January 28, 2010 11:56 AM To: Jeffrey Lyon Cc: nanog@nanog.org Subject: Re: DDoS mitigation recommendations On Thu, Jan 28, 2010 at 10:00 AM, Jeffrey Lyon jeffrey.l...@blacklotus.net

Re: DDoS mitigation recommendations

2010-01-28 Thread Christopher Morrow
On Thu, Jan 28, 2010 at 9:22 PM, Stefan Fouant sfou...@shortestpathfirst.net wrote: -Original Message- From: Christopher Morrow [mailto:morrowc.li...@gmail.com] Sent: Thursday, January 28, 2010 11:56 AM To: Jeffrey Lyon Cc: nanog@nanog.org Subject: Re: DDoS mitigation recommendations

Re: DDoS mitigation recommendations

2010-01-28 Thread Tony Varriale
- Original Message - From: Tom Sands tsa...@rackspace.com Cc: nanog@nanog.org Sent: Thursday, January 28, 2010 6:01 AM Subject: Re: DDoS mitigation recommendations -Original Message- From: David Freedman [mailto:david.freed...@uk.clara.net] Sent: Tuesday, January 26, 2010

Re: DDoS mitigation recommendations

2010-01-28 Thread Dobbins, Roland
On Jan 29, 2010, at 10:04 AM, Jonathan Lassoff wrote: Something utilizing sflow/netflow and flowspec to block or direct traffic into a scrubbing box gets you much better bang for your buck past a certain scale. This is absolutely key for packet-flooding types of attacks, and other attacks