Re: The Making of a Router

2013-12-26 Thread Thomas York
and SNMP modules). I had to do a lot of tweaking to the conn track tables to make them large enough to handle lots of traffic, but obviously YMMV. Have you tried labbing BSD vs Linux to see which you like better? I'd probably do that before throwing it in to production. -- Thomas York ExactTarget

86th Street TWTC outage

2013-06-25 Thread Thomas York
Just in case anyone has equipment in the 86th Street TWTC Colo, both of their AC units are dead and the fire department is here. I'll try to update as soon as I know something.

MikroTik + EAP-TLS + Non-Channel 1 / Apple iOS issues

2013-04-03 Thread Thomas York
have an older iPod touch that is on iOS4 that can authenticate on channel 1. Have any of you guys seen issues like this? Thanks. -- Thomas York smime.p7s Description: S/MIME cryptographic signature

MessageLabs/MXLogic issues

2013-01-29 Thread Thomas York
domain, just to Symantec/MessageLabs IPs. I've also seen this issue once or twice with domains hosted with Gmail, but those have cleared themselves up. -- Thomas York smime.p7s Description: S/MIME cryptographic signature

China Telecom VPN problems (again)

2012-12-05 Thread Thomas York
could also use the same carrier in Shenzhen. Thanks! -- Thomas York smime.p7s Description: S/MIME cryptographic signature

RE: IPv6 Toolkit v1.2: Latest snapshot, and git repo

2012-07-16 Thread Thomas York
Also compiles and works fine for me on 10.7. -- Thomas York -Original Message- From: Randy Carpenter [mailto:rcar...@network1.net] Sent: Monday, July 16, 2012 11:21 AM To: Fernando Gont Cc: NANOG Subject: Re: IPv6 Toolkit v1.2: Latest snapshot, and git repo Appears to compile file

RE: job screening question

2012-07-05 Thread Thomas York
My answer to that questionwould be No..why would I ever blanket block ICMP? If I'm that stupid, I shouldn't be deploying firewalls at all. I also assume I wouldn't get the job after answering that... Thomas York -Original Message- From: William Herrin [mailto:b...@herrin.us] Sent

Re: Commerical Backup Solutions

2012-05-17 Thread Thomas York
not bad. Also, the site wide license is a steal! Get a demo, it might fit the bill. --Thomas York On May 17, 2012 6:59 PM, Mike Lyon mike.l...@gmail.com wrote: We used Acronis and it was a nightmare as was their off-shored support model. Never again... Wouldn't touch them with a 10 foot pole

RE: OWA blocked by China

2012-03-27 Thread Thomas York
. For some reason, they don't seem to be doing DPI on it and mostly leave it alone now. I'm sure it'll change at some point soon, though. -- Thomas York -Original Message- From: TR Shaw [mailto:ts...@oitc.com] Sent: Tuesday, March 27, 2012 10:45 AM To: Jim Gonzalez Cc: nanog@nanog.org Subject

RE: Any recommended router. They are reliable and have good support.

2011-11-22 Thread Thomas York
to make me switch to another brand yet, but I know every time I have to deploy a new device I'm likely to wrestle this issue. --Thomas York -Original Message- From: Eduardo Schoedler [mailto:lis...@esds.com.br] Sent: Tuesday, November 22, 2011 1:00 PM To: 'Meftah Tayeb'; 'Leigh Porter'; fai

RE: Time Warner Telecom problems

2011-11-07 Thread Thomas York
FWIW, We saw issues here in Indianapolis between TWTC and L3 up until a few minutes ago. --Thomas York -Original Message- From: Blake Hudson [mailto:bl...@ispn.net] Sent: Monday, November 07, 2011 11:02 AM To: nanog@nanog.org Subject: Re: Time Warner Telecom problems Joe Greco wrote

Re: DNS DoS ???

2011-07-29 Thread Thomas York
I see this all the time on my personal servers. I finally just told bind to stop logging it. On 07/29/2011 02:51 PM, Elliot Finley wrote: my DNS servers were getting slow so I blocked recursive queries for all but my own network. Then I was getting so many of these: ns2 named[5056]: client

Re: IMPORTANT ADMINISTRIVIA - NANOG list and website changes over the next week

2011-07-08 Thread Thomas York
, mail.amsl.com will be the only MX for NANOG list services. No more IPv6? I don't see an record for it... ~Seth There goes 90% of my IPv6 traffic! --Thomas York smime.p7s Description: S/MIME Cryptographic Signature

VPN tunnels between US and China dropping/slow

2011-05-10 Thread Thomas York
some of you have to fixing this issue? Thanks Thomas York smime.p7s Description: S/MIME cryptographic signature

Re: VPN tunnels between US and China dropping/slow

2011-05-10 Thread Thomas York
I tried to tell my bosses that and I got a blank stare. -- Thomas York Adam Rothschild a...@latency.net wrote: Realize also that China Telecom is congested both internally and on certain peering interfaces. While DPI is a likely culprit, be sure to not overlook a good old-fashioned inability

Re: VPN tunnels between US and China dropping/slow

2011-05-10 Thread Thomas York
Yes. Every day at roughly 2AM EDT the latency climbs to 700ms+ with about 25% packet loss and fluctuates until about 6-7AM. -- Thomas York Joel Jaeggli joe...@bogus.com wrote: On 5/10/11 10:10 AM, Adam Rothschild wrote: Realize also that China Telecom is congested both internally

Bright House residential IPv6

2011-05-02 Thread Thomas York
it activated for your line? Thomas York smime.p7s Description: S/MIME cryptographic signature

RE: Bright House residential IPv6

2011-05-02 Thread Thomas York
As per an off list topic, I'm in downtown Indianapolis. If anyone has a residential contact for this region, I'd much appreciate it. Thanks! Thomas York -Original Message- From: Thomas York [mailto:strate...@fuhell.com] Sent: Monday, May 02, 2011 10:13 AM To: nanog@nanog.org Subject

Off list contact for Quadranet

2011-02-20 Thread Thomas York
If the network contact at Quadranet could contact me off list, I'd appreciate it. This is concerning the continual spamming of a proxy server I run from multiple hosts at Quadranet. Thomas York smime.p7s Description: S/MIME cryptographic signature

RE: ipfix/netflow/sflow generator for Linux

2010-12-07 Thread Thomas York
the interface numbering issue. http://tinyurl.com/32pjyfa From: packetmon...@gmail.com [mailto:packetmon...@gmail.com] On Behalf Of Darren Bolding Sent: Monday, December 06, 2010 8:57 PM To: Thomas York Subject: Re: ipfix/netflow/sflow generator for Linux We've used nprobe with good success

ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Thomas York
At my current place of work, we use all Linux routers. I need to do some IP accounting/reporting and am currently trying to use Scrutinizer. Scrutinizer can use netstream, jstream, ipfix, netflow, and sflow data without qualms. My only issue is that I can't seem to find any good software for Linux

RE: ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Thomas York
to be the issue with most of the flow software I've tried. -Original Message- From: Samuel Petreski [mailto:sp...@georgetown.edu] Sent: Monday, December 06, 2010 3:38 PM To: 'Thomas York'; nanog@nanog.org Subject: RE: ipfix/netflow/sflow generator for Linux I've used fprobe with great

RE: ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Thomas York
develop audits using a mixture of Argus and Netflow records. Ken On 12/6/2010 2:44 PM, Thomas York wrote: fprobe doesn't work properly because it has the input and output interface IDs as both 0. In Scrutinizer, this makes the flow look like all the data came in the interface

RE: ipfix/netflow/sflow generator for Linux

2010-12-06 Thread Thomas York
Message- From: Dobbins, Roland [mailto:rdobb...@arbor.net] Sent: Monday, December 06, 2010 4:20 PM To: North American Network Operators Group Subject: Re: ipfix/netflow/sflow generator for Linux On Dec 7, 2010, at 3:44 AM, Thomas York wrote: fprobe doesn't work properly because it has