Re: Widespread Outages

2013-05-24 Thread Jason Hellenthal
That's a no. Not quite sure what you would see in these statistics given the weather conditions around the US. Might be more useful looking at a direct route from a specific point to destination where it might seem like things are awry. Looking glasses would be of more help to determine that.

Re: Geoip lookup

2013-05-24 Thread David Conrad
On May 23, 2013, at 10:53 PM, Andreas Larsen andreas.lar...@ip-only.se wrote: The whole idea of Geoip is flawed. Sure, but pragmatically, it's an 80% solution. IP dosen't reside in countries, True, according to (at least some of) the RIRs they reside in regions... Regards, -drc

Re: Geoip lookup

2013-05-24 Thread Andreas Larsen
If we continue to support and build tools around this geolocation based ip-dravel, we give people a false notion that this is something we should do. Identify users with some other means that Geoip Couple of things comes to mind. * normal postage mail that they have to collect at their home and

Re: Geoip lookup

2013-05-24 Thread Owen DeLong
On May 23, 2013, at 23:17 , David Conrad d...@virtualized.org wrote: On May 23, 2013, at 10:53 PM, Andreas Larsen andreas.lar...@ip-only.se wrote: The whole idea of Geoip is flawed. Sure, but pragmatically, it's an 80% solution. IP dosen't reside in countries, True, according to (at

Re: Geoip lookup

2013-05-24 Thread bmanning
On Thu, May 23, 2013 at 11:39:12PM -0700, Owen DeLong wrote: On May 23, 2013, at 23:17 , David Conrad d...@virtualized.org wrote: On May 23, 2013, at 10:53 PM, Andreas Larsen andreas.lar...@ip-only.se wrote: The whole idea of Geoip is flawed. Sure, but pragmatically, it's an 80%

Re: Geoip lookup

2013-05-24 Thread Owen DeLong
On May 23, 2013, at 23:49 , bmann...@vacation.karoshi.com wrote: On Thu, May 23, 2013 at 11:39:12PM -0700, Owen DeLong wrote: On May 23, 2013, at 23:17 , David Conrad d...@virtualized.org wrote: On May 23, 2013, at 10:53 PM, Andreas Larsen andreas.lar...@ip-only.se wrote: The whole

RE: Geoip lookup

2013-05-24 Thread Paul Kelly :: Blacknight
Just because I have operations in one region does not preclude me from having operations in other regions. YMMV of course. /bill That was exactly my point, Bill... If you have operations in RIPE and ARIN regions, it is entirely possible for you to obtain addresses from RIPE

Re: Geoip lookup

2013-05-24 Thread Jean-Francois Mezei
On 13-05-24 02:57, Owen DeLong wrote: That was exactly my point, Bill... If you have operations in RIPE and ARIN regions, it is entirely possible for you to obtain addresses from RIPE or ARIN and use them in both locations, or, obtain addresses from both RIPE and ARIN and use them in their

Re: Geoip lookup

2013-05-24 Thread shawn wilson
I knew this would come up. Actually I'm surprised and glad it waited until I got a solution first. I'll address a few points: - this is mainly to stop stupid things from sending packets from countries we will probably never want to do business with (I'm looking mainly at that big country under

Re: Mailman reverting settings

2013-05-24 Thread Rich Kulawiec
1. The mailman-users list is here: http://mail.python.org/mailman/listinfo/mailman-users 2. Blocking one IP address is not usually sufficient. If you don't need email from India (or any other country for that matter) to reach that list, then you should block the entire country from that

Re: Geoip lookup

2013-05-24 Thread John Curran
On May 24, 2013, at 2:34 AM, Andreas Larsen andreas.lar...@ip-only.se wrote: If we continue to support and build tools around this geolocation based ip-dravel, we give people a false notion that this is something we should do. ... Or just get rid of the whole idea and realize that the

Re: Mailman reverting settings

2013-05-24 Thread Phil Fagan
What hung the box? Core dump? Filled up var? On May 23, 2013 11:57 AM, Grant Ridder shortdudey...@gmail.com wrote: Hi Everyone, Has anyone ever seen Mailman revert to an old user list? This morning we had out lists VM pounded on from India and hung the box. After blocking the ip on our

Re: Geoip lookup

2013-05-24 Thread David Conrad
I replied privately to Owen, but might as well share: On May 23, 2013, at 11:57 PM, Owen DeLong o...@delong.com wrote: True, according to (at least some of) the RIRs they reside in regions... Really? Which ones? I thought they were only issued to organizations that had operations in regions.

Re: Geoip lookup

2013-05-24 Thread Owen DeLong
On May 24, 2013, at 00:28 , Jean-Francois Mezei jfmezei_na...@vaxination.ca wrote: On 13-05-24 02:57, Owen DeLong wrote: That was exactly my point, Bill... If you have operations in RIPE and ARIN regions, it is entirely possible for you to obtain addresses from RIPE or ARIN and use them

Re: Geoip lookup

2013-05-24 Thread Owen DeLong
On May 24, 2013, at 01:13 , shawn wilson ag4ve...@gmail.com wrote: I knew this would come up. Actually I'm surprised and glad it waited until I got a solution first. I'll address a few points: - this is mainly to stop stupid things from sending packets from countries we will probably

Re: Geoip lookup

2013-05-24 Thread Barry Shein
You're thinking like an engineer. Think like a marketer. They expect less than 1% response on paper mail advertising. Now, compare and contrast your idea of a reasonable confidence level and theirs. -- -Barry Shein The World | b...@theworld.com |

Re: What hath god wrought?

2013-05-24 Thread Ryan Gard
Smells more like a honeypot than anything. Now that this guy's clearly decided to open his mouth and claim he's got the green light from the Fed, I wouldn't be surprised if they change their mind. On Tue, May 21, 2013 at 1:54 PM, Phil Fagan philfa...@gmail.com wrote: HAH! Thats pretty

Re: High throughput bgp links using gentoo + stipped kernel

2013-05-24 Thread Ryan Gard
Do you have a source on this? Reason I ask is because any recent documentation I've come across indicates that polling is recommended to reduce chances of livelock on a running system. On Mon, May 20, 2013 at 2:51 PM, Eduardo Schoedler lis...@esds.com.brwrote: 2013/5/19 Andrew Jones

Re: Geoip lookup

2013-05-24 Thread Tom Vest
On May 24, 2013, at 3:27 AM, Paul Kelly :: Blacknight wrote: Just because I have operations in one region does not preclude me from having operations in other regions. YMMV of course. /bill That was exactly my point, Bill... If you have operations in RIPE and ARIN regions,

Re: High throughput bgp links using gentoo + stipped kernel

2013-05-24 Thread Joe Greco
Do you have a source on this? Reason I ask is because any recent documentation I've come across indicates that polling is recommended to reduce chances of livelock on a running system. What recent documentation have you come across? Luigi did the polling stuff more than a decade ago. Polling

Weekly Routing Table Report

2013-05-24 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to

Re: High throughput bgp links using gentoo + stipped kernel

2013-05-24 Thread Gabriel Blanchard
On 13-05-24 03:17 PM, Ryan Gard wrote: Do you have a source on this? Reason I ask is because any recent documentation I've come across indicates that polling is recommended to reduce chances of livelock on a running system. This depends a *ton* of what NIC you are using. Polling IMO should not

Re: High throughput bgp links using gentoo + stipped kernel

2013-05-24 Thread Nick Hilliard
On 24/05/2013 20:21, Joe Greco wrote: Luigi did the polling stuff more than a decade ago. Polling fixes some issues and seems to cause others. interrupt mitigation helps more than polling these days. Make sure you're using modern hardware. Nick

Re: High throughput bgp links using gentoo + stipped kernel

2013-05-24 Thread Nick Khamis
+1 on the interrupt cpu assignment N. On 5/24/13, Nick Hilliard n...@foobar.org wrote: On 24/05/2013 20:21, Joe Greco wrote: Luigi did the polling stuff more than a decade ago. Polling fixes some issues and seems to cause others. interrupt mitigation helps more than polling these days.

Re: High throughput bgp links using gentoo + stipped kernel

2013-05-24 Thread Nick Khamis
Sorry for the top post!!! N.

ADVANCE WARNING: Google moving to 2048-bit SSL and root keys

2013-05-24 Thread Jay Ashworth
Via PRIVACY Forum: - Forwarded Message - From: PRIVACY Forum mailing list priv...@vortex.com Google moving to longer SSL keys http://j.mp/10YAWaC (Google Online Security Blog) This encryption needs to be updated at times to make it even stronger, so this year our SSL services

The Cidr Report

2013-05-24 Thread cidr-report
This report has been generated at Fri May 24 21:13:21 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

BGP Update Report

2013-05-24 Thread cidr-report
BGP Update Report Interval: 16-May-13 -to- 23-May-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS36998 176470 7.2% 208.6 -- SDN-MOBITEL 2 - AS982954002 2.2% 50.4 --

Re: Mailman reverting settings

2013-05-24 Thread Grant Ridder
Hi, I received a couple offlist replies. To answer Phil's questions, iptables appeared to have spiked the cpu to 100% and caused it to overload and become unresponsive. Var was lot filled up to my knowledge. An offlist reply suggested that if the config.pck file gets corrupted, then mailman

Re: ADVANCE WARNING: Google moving to 2048-bit SSL and root keys

2013-05-24 Thread Jimmy Hess
On 5/24/13, Jay Ashworth j...@baylink.com wrote: Hm.. this might be no big deal if not for public key pinning and CA pinning in modern browsers of certain sites, they could just get themselves 2048 bit certificates from any CA... So what could otherwise be a routine certificate change, may