recommendation on vendor for 8 Cisco 7201 routers?

2011-04-04 Thread Rogelio
Anyone have any recommendations for a US Cisco shop that can sell me 8 new Cisco 7201 routers? If so, please email me the best person to contact. Thanks -- Also on LinkedIn?  Feel free to connect if you too are an open networker: scubac...@gmail.com

0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread andrew.wallace
Someone has recently post to a mailing list: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080096.html Andrew

Re: 0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread Andrew Kirch
On 4/4/11 11:46 AM, andrew.wallace wrote: Someone has recently post to a mailing list: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080096.html Andrew And users of that list certainly have it. Why is it being reposted here? request for admin action

Re: 0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread Valdis . Kletnieks
On Mon, 04 Apr 2011 08:46:22 PDT, andrew.wallace said: Someone has recently post to a mailing list: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080096.html *yawn* No news, move along, nothing to see. RFC4862, section 6: The use of stateless address autoconfiguration and

Time Warner DNS

2011-04-04 Thread Iain Morris
Apologies in advance if this is directed to the wrong folks, but is there someone at TWC I could talk to about a DNS issue on their servers? Users in NY, HI, and CA are not able to access a chunk of websites because of it. If anything, just a way for me to contact Time Warner ISP services that

Re: IPv4 Address Exhaustion Effects on the Earth

2011-04-04 Thread Bryan Irvine
On Fri, Apr 1, 2011 at 8:30 PM, Robert Bonomi bon...@mail.r-bonomi.com wrote: Date: Sat, 02 Apr 2011 04:18:00 +0200 From: Alexander Maassen outsi...@scarynet.org Subject: Re: IPv4 Address Exhaustion Effects on the Earth wil, maybe after all this time you got the router, it gained 7lbs of

Re: 0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread Dan White
On 04/04/11 12:14 -0400, valdis.kletni...@vt.edu wrote: On Mon, 04 Apr 2011 08:46:22 PDT, andrew.wallace said: Someone has recently post to a mailing list: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080096.html *yawn* No news, move along, nothing to see. RFC4862, section

Re: 0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread Jeroen van Ingen
On Mon, 2011-04-04 at 12:14 -0400, valdis.kletni...@vt.edu wrote: On Mon, 04 Apr 2011 08:46:22 PDT, andrew.wallace said: Someone has recently post to a mailing list: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080096.html *yawn* No news, move along, nothing to see.

Re: recommendation on vendor for 8 Cisco 7201 routers?

2011-04-04 Thread Theo Sison
what city will you be deploying your routers? - Reply message - From: Rogelio scubac...@gmail.com Date: Mon, Apr 4, 2011 9:07 am Subject: recommendation on vendor for 8 Cisco 7201 routers? To: nanog@nanog.org Anyone have any recommendations for a US Cisco shop that can sell me 8 new

Re: 0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread Mikael Abrahamsson
On Mon, 4 Apr 2011, Jeroen van Ingen wrote: a network yet. I believe this attack will work on most networks out there, simply because IPv6 is enabled on hosts and rogue RA filtering hasn't been implemented on most switches yet. Any responsible ISP will block this kind of L2 unknown traffic

Re: 0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread Nick Hilliard
On 04/04/2011 16:46, andrew.wallace wrote: Someone has recently post to a mailing list: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080096.html There's a serious vulnerability in the default ipv4 configuration too: Windows will accept a reply from any DHCP server which

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-04-04 Thread Rich Kulawiec
On Sat, Apr 02, 2011 at 06:09:22PM -0500, Jason Baugher wrote: We would NEVER out the customer to the public, even if we felt the abuse was intentional. My CEO and our lawyers would blow a gasket if we were to potentially libel a customer. And this why we (the community) find ourselves where

Re: 0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread Johnny Eriksson
Nick Hilliard n...@foobar.org wrote: The fix right now is for Microsoft to disable IPv4 by default. Yes, please. That would put a serious dent in most botnets... Nick --Johnny

Re: 0day Windows Network Interception Configuration Vulnerability

2011-04-04 Thread Jeroen van Ingen
On Mon, 2011-04-04 at 19:46 +0200, Mikael Abrahamsson wrote: I believe this attack will work on most networks out there, simply because IPv6 is enabled on hosts and rogue RA filtering hasn't been implemented on most switches yet. Any responsible ISP will block this kind of L2 unknown

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-04-04 Thread Jason Baugher
On 4/4/2011 1:04 PM, Rich Kulawiec wrote: On Sat, Apr 02, 2011 at 06:09:22PM -0500, Jason Baugher wrote: We would NEVER out the customer to the public, even if we felt the abuse was intentional. My CEO and our lawyers would blow a gasket if we were to potentially libel a customer. And this why

recommendation on vendor for 8 Cisco 7201 routers?

2011-04-04 Thread Michael Ruiz
Anyone have any recommendations for a US Cisco shop that can sell me 8 new Cisco 7201 routers? If so, please email me the best person to contact. Thanks I recommend PICS Telecom. I have dealt with them for the last 5 years. They sell Telecom and Cisco equipment. It is grey

IPV6 Training Books

2011-04-04 Thread Michael Ruiz
Hello All, I am looking for some good reading material to get a better understanding of IPV6. I know how to convert HEX into decimal format. What I am looking for is how to under the CIDR notation and break them out into subnets. Thank you in advance. MAR.

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-04-04 Thread Valdis . Kletnieks
On Mon, 04 Apr 2011 14:30:41 CDT, Jason Baugher said: I suppose theoretically that a ToS could be crafted that would allow the vendor to release customer information in the case of ANY suspected abuse, but do you really think that would make a difference to The Bad Guys? A better question

IPv4 Address Exhaustion Effects on the Earth

2011-04-04 Thread Michael Ruiz
On Fri, Apr 1, 2011 at 8:30 PM, Robert Bonomi bonomi at mail.r-bonomi.comhttps://mailman.nanog.org/mailman/listinfo/nanog wrote: Date: Sat, 02 Apr 2011 04:18:00 +0200 From: Alexander Maassen outsider at scarynet.orghttps://mailman.nanog.org/mailman/listinfo/nanog Subject: Re: IPv4

RE: recommendation on vendor for 8 Cisco 7201 routers?

2011-04-04 Thread David DiGiacomo
Michael, I have had excellent service from OSI Hardware, they sell new used at a pretty good price. They have 18 month warranties and I've had stuff ship same day and on my doorstep first thing in the morning. The guy I deal with is Stephen Craig, scr...@osihardware.com , (214) 267-8519

RE: recommendation on vendor for 8 Cisco 7201 routers?

2011-04-04 Thread Michael Ruiz
Cool How is their service? Do they Telecom equipment. For example, Adtran and Fujitsu equipment? -Original Message- From: David DiGiacomo [mailto:dav...@corp.nac.net] Sent: Monday, April 04, 2011 2:49 PM To: Michael Ruiz; nanog@nanog.org Subject: RE: recommendation on vendor for 8

RE: recommendation on vendor for 8 Cisco 7201 routers?

2011-04-04 Thread David DiGiacomo
We have been dealing with them for close to a year now and the service has been pretty astonishing thus far. I can usually get a price quote within an hour, their prices are usually lower than my other vendors and I can get orders shipped the same day. They back everything with an 18 month

RE: recommendation on vendor for 8 Cisco 7201 routers?

2011-04-04 Thread Michael Ruiz
Ok cool. I will keep them mind for Cisco equipment. Thank you sir for your reply. -Original Message- From: David DiGiacomo [mailto:dav...@corp.nac.net] Sent: Monday, April 04, 2011 3:06 PM To: Michael Ruiz; nanog@nanog.org Subject: RE: recommendation on vendor for 8 Cisco 7201

Re: IPV6 Training Books

2011-04-04 Thread Niclas Zeising
On 2011-04-04 21:43, Michael Ruiz wrote: Hello All, I am looking for some good reading material to get a better understanding of IPV6. I know how to convert HEX into decimal format. What I am looking for is how to under the CIDR notation and break them out into subnets.

RE: IPV6 Training Books

2011-04-04 Thread Stefan Fouant
-Original Message- From: Michael Ruiz [mailto:mr...@lstfinancial.com] Sent: Monday, April 04, 2011 3:43 PM To: nanog@nanog.org Subject: IPV6 Training Books Hello All, I am looking for some good reading material to get a better understanding of IPV6. I know how

Re: IPv4 Address Exhaustion Effects on the Earth

2011-04-04 Thread Jim Gettys
On 04/03/2011 10:04 PM, George Bonser wrote: Sigh... A major opportunity missed. Unfortunately the bufferbloat problem isn't a laughing matter, though I do wish I had thought of this idea in time for my talk. I will include this joke as some levity about the mess we're in as I repeat the

RE: IPV6 Training Books

2011-04-04 Thread Michael Ruiz
Thank you all for replying. -Original Message- From: Stefan Fouant [mailto:sfou...@shortestpathfirst.net] Sent: Monday, April 04, 2011 3:23 PM To: Michael Ruiz; nanog@nanog.org Subject: RE: IPV6 Training Books -Original Message- From: Michael Ruiz

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-04-04 Thread Jason Baugher
On 4/4/2011 2:43 PM, valdis.kletni...@vt.edu wrote: On Mon, 04 Apr 2011 14:30:41 CDT, Jason Baugher said: I suppose theoretically that a ToS could be crafted that would allow the vendor to release customer information in the case of ANY suspected abuse, but do you really think that would make

Re: State of QoS peering in Nanog

2011-04-04 Thread Jim Gettys
On 04/03/2011 12:50 PM, Stefan Fouant wrote: -Original Message- From: Leo Bicknell [mailto:bickn...@ufp.org] Sent: Saturday, April 02, 2011 10:24 PM But it also only affects priority queue traffic. I realize I'm making a value judgment, but many customers under DDoS would find things

LAGing backbone links

2011-04-04 Thread Payam Chychi
Hello All, I was wondering if anyone had any thoughts as to the best practices of running multiple backbone links between 2 routers. In the past we've added additional links as needed, then simply enabled IS-IS when they were good to go. I'd then let IS-IS handle load balancing the traffic over

Re: IPV6 Training Books

2011-04-04 Thread Mark Andrews
In message 690d7d20d2507c44ba8066926b200989086...@es1002.ic-sa.com, Michael R uiz writes: Hello All, I am looking for some good reading material to get a better= understanding of IPV6. I know how to convert HEX into decimal format. Wh= at I am looking for is how to under

Re: IPV6 Training Books

2011-04-04 Thread Roman
Best book on IPv6 (My personal opinion) http://www.amazon.com/Migrating-IPv6-Practical-Implementing-Networks/dp/0471498920/ref=sr_1_16?ie=UTF8qid=1301965365sr=8-16 Roman On 5/04/11 10:59 AM, Mark Andrews wrote: In message690d7d20d2507c44ba8066926b200989086...@es1002.ic-sa.com, Michael R uiz

Re: IPV6 Training Books

2011-04-04 Thread Owen DeLong
More ideally, you give every end site a /48 if they want more than one network. Owen On Apr 4, 2011, at 5:59 PM, Mark Andrews wrote: In message 690d7d20d2507c44ba8066926b200989086...@es1002.ic-sa.com, Michael R uiz writes: Hello All, I am looking for some good reading

RE: IPv4 Address Exhaustion Effects on the Earth

2011-04-04 Thread George Bonser
In the mean while, we've started work on various AQM and buffer management systems, at www.bufferbloat.net. SFB (Stochastic Fair Blue) went upstream into Linux to aid testing last month, and we have an implementation of eBDP as well with which we are experimenting. Wireless is much more of a

Re: IPv4 Address Exhaustion Effects on the Earth

2011-04-04 Thread Jay Ashworth
Note that the paper Characterizing Residential Broadband Networks by Dischinger, et. al. indicates that a large fraction (in their 2 year old sample, 30% or so) of broadband head ends are running without RED, and should be doing so if at all possible; alternatives are years out by the time