Re: DNS Issue with proofpoint.com

2014-04-16 Thread bmanning
On Wed, Apr 16, 2014 at 10:49:24AM -0400, William Herrin wrote: > On Wed, Apr 16, 2014 at 10:45 AM, TGLASSEY wrote: > > Wouldn't it make sense if we created a specific mail alias for requesting > > DNS flushes? This seems to happen statistically often enough it might be a > > valuable service to b

Re: [[Infowarrior] - NSA blah blah blah blah....

2014-04-14 Thread bmanning
On Mon, Apr 14, 2014 at 07:47:46PM -0700, Doug Barton wrote: > >It must be quite a while. Unix systems have routinely cleared the RAM > >and disk allocated to programs since the earliest days. > > When you say "clear the disk allocated to programs" what do you mean > exactly? > "On a cl

Re: [[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]

2014-04-14 Thread bmanning
On Mon, Apr 14, 2014 at 03:59:21PM -0400, Patrick W. Gilmore wrote: > On Apr 14, 2014, at 15:47 , Scott Howard wrote: > > On Sun, Apr 13, 2014 at 9:52 AM, Niels Bakker > > wrote: > > >> At least one vendor, Akamai is helping out now: > >> http://marc.info/?l=openssl-users&m=139723710923076&w=2

Re: Yahoo DMARC breakage

2014-04-09 Thread bmanning
On Wed, Apr 09, 2014 at 05:49:27PM -0400, Jeff Kell wrote: > > The most "sane" out-of-mind response should only be sent *if* the > out-of-mind person is named explicitly as a recipient in the RFC822 > header. Anything To: somelist@somehost does not qualify :) > > Jeff and just how is an

Re: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-08 Thread bmanning
On Tue, Apr 08, 2014 at 11:46:31PM -0400, Rob Seastrom wrote: > > Me writes: > > > Thanks for the expanded list, I had some of these already. I'm not > > comfortable in letting some online code that I can't see test my site > > though. > > If that's true, you might want to consider immediately

Re: Serious bug in ubiquitous OpenSSL library: "Heartbleed"

2014-04-08 Thread bmanning
On Tue, Apr 08, 2014 at 05:56:45PM -0600, Me wrote: > > On 04/08/2014 10:16 AM, Patrick W. Gilmore wrote: > >Lots of tools available. I'm with ferg, surprised more haven't been > >mentioned here. > > > >Tools to check for the bug: > > • on your own box: > > https://github.com/musalbas/heartb

Re: Recommendation on NTP appliances/devices

2014-04-03 Thread bmanning
Loves my old Heathkit WWVB unit. Keeps drift in check most days. Pairs nicely with the Spectracom 9383. Looking at the Microsemi TP-5000 w/ rubidium oscillator. /bill On Thu, Apr 03, 2014 at 10:25:07PM -0400, Rob Seastrom wrote: > > On a tangential note, it's all very nice to say "We h

Re: real-world data about fragmentation

2014-04-02 Thread bmanning
I can send you a copy of an invited presentation at AINTEC from 2009. /bill On Wed, Apr 02, 2014 at 02:14:22PM -0400, Joe Abley wrote: > Hi all, > > It's common wisdom that a datagram that needs to be fragmented between > endpoints (because it is bigger than the path MTU) will demonstrate les

Re: misunderstanding scale

2014-03-23 Thread bmanning
On Sun, Mar 23, 2014 at 10:31:57PM +, Nick Hilliard wrote: > On 23/03/2014 21:02, Mark Andrews wrote: > > Actually all you have stated in that printer vendors need to clean > > up their act and not that one shouldn't expect to be able to expose > > a printer to the world. It isn't hard to do t

Re: misunderstanding scale

2014-03-23 Thread bmanning
On Sun, Mar 23, 2014 at 04:27:16PM -0500, Timothy Morizot wrote: > On Mar 23, 2014 11:27 AM, "Paul Ferguson" wrote: > > Also, IPv6 introduces some serious security concerns, and until they > > are properly addressed, they will be a serious barrier to even > > considering it. > > And that is pure

Re: [dns-wg] Global Vs local node data in www.root-servers.org

2014-03-17 Thread bmanning
On Mon, Mar 17, 2014 at 11:11:40AM -0400, Joe Abley wrote: > > On 17 Mar 2014, at 10:27, manning bill wrote: > > > alas, our service predates Joe’s marvelous text. > > > > “B” provides its services locally to its upstream ISPs. > > We don’t play routing tricks, impose routing policy, or attempt

Re: DNS Resolving issues. So for related just to Cox. But could be larger.

2014-03-10 Thread bmanning
RFC 2182 On Mon, Mar 10, 2014 at 02:57:06PM -0400, Rob Seastrom wrote: > > Larry Sheldon writes: > > > On 3/7/2014 5:03 AM, Rob Seastrom wrote: > > > >> for decades. i have a vague recollection of an rfc that said > >> secondary nameservers ought not be connected to the same psn (rememb

Re: DNS Resolving issues. So for related just to Cox. But could be larger.

2014-03-07 Thread bmanning
On Thu, Mar 06, 2014 at 08:07:55AM -0500, Rob Seastrom wrote: > > Nick Hilliard writes: > > >>haven't you heard about "anycast"?? > > > > rs probably has. The owner of 199.73.57.122, probably not. > > indeed. there are many pieces of evidence that this is not an anycast > prefix. proof i

Re: DNS Resolving issues. So for related just to Cox. But could be larger.

2014-03-06 Thread bmanning
On Wed, Mar 05, 2014 at 07:52:10AM -0500, Rob Seastrom wrote: > > "Paul S." writes: > > > For all it's worth, it might be Cox ignoring TTLs and enforcing their > > own update times instead. > > > > Wait 24-48 hours, and it should probably fix it all up. > > Possibly. > > > I'm not seeing anyth

[5350-5470 MHz]

2014-02-23 Thread bmanning
if you have comments or feedback - Forwarded message from "Julie N" - Date: Wed, 19 Feb 2014 21:34:51 + Subject: 5350-5470 MHz Dear Members, As you know, we have been actively engaged in the International Telecommunication Union's (ITU) Joint Task Group (JTG) studies to consi

Re: Email Server and DNS

2013-11-08 Thread bmanning
On Fri, Nov 08, 2013 at 08:37:32AM -0500, William Herrin wrote: > On Sun, Nov 3, 2013 at 11:39 AM, wrote: > > I am looking for some info on current practice for an email server and SMTP > > delivery. It has been a while since I have had to setup an email server and > > I have been tasked with set

[pfsi...@gmail.com: [APRICOT-INFO] APRICOT 2014 call for papers]

2013-11-05 Thread bmanning
of possible interest. /bill - Forwarded message from Philip Smith - X-Mailman-Approved-At: Tue, 05 Nov 2013 19:37:41 +1000 Subject: [APRICOT-INFO] APRICOT 2014 call for papers Hi everyone, We have just released the call for presentations for APRICOT 2014. Please consider presenting a

Re: Email Server and DNS

2013-11-03 Thread bmanning
On Sun, Nov 03, 2013 at 08:49:32AM -0800, Private Sender wrote: > On 11/3/2013 8:39 AM, rw...@ropeguru.com wrote: > > > > I am looking for some info on current practice for an email server > > and SMTP delivery. It has been a while since I have had to setup an > > email server and I have been tas

Re: Repost: links to DDoS-related press & reports.

2013-10-28 Thread bmanning
On Mon, Oct 28, 2013 at 03:29:07PM +, Dobbins, Roland wrote: > > A couple of folks have asked me privately for links to some presos on DDoS, > BCPs, et. al., so I'm re-posting the links here, for future citation: > > DDoS & BCP presos: > > > > 2

Re: comcast ipv6 PTR - DNSSEC

2013-10-14 Thread bmanning
On Mon, Oct 14, 2013 at 10:18:15PM -0500, Jimmy Hess wrote: > On Mon, Oct 14, 2013 at 10:01 PM, Barry Shein wrote: > > > > >This would be a lot of work, so nobody does it. > > >If someone asks for the rdns for: > > > 2001:0db8:85a3:0042:1000:8a2e:0370:7334 > > >it's a lot of work for example.

Re: minimum IPv6 announcement size

2013-10-01 Thread bmanning
back in the good o'l days when we would hand out 24 bits for the number of hosts in a network. It was too many bits then and is too many bits now a /64 is just overkill. /bill On Tue, Oct 01, 2013 at 03:11:39PM -0400, Ryan McIntosh wrote: > I'd love to be able to turn the microwave an

Re: minimum IPv6 announcement size

2013-09-30 Thread bmanning
On Mon, Sep 30, 2013 at 11:27:26AM -0400, William Herrin wrote: > On Mon, Sep 30, 2013 at 10:46 AM, TJ wrote: > > On Mon, Sep 30, 2013 at 9:32 AM, William Herrin wrote: > >> IPv4 jumped from 8 bits to > >> 32 bits. Which when you think about it is the same ratio as jumping > >> from 32 bits to

Re: minimum IPv6 announcement size

2013-09-26 Thread bmanning
Yup. Seen/Heard all that. Even tooted that horn for a while. /64 is an artifical boundary - many/most IANA/RIR delegations are in the top /32 which is functionally the same as handing out traditional /16s. Some RIR client are "bigger" and demand more, so they get the v6 equvalent of /14s o

Re: minimum IPv6 announcement size

2013-09-26 Thread bmanning
On Thu, Sep 26, 2013 at 12:29:17PM -0700, Darren Pilgrim wrote: > On 9/26/2013 1:52 AM, bmann...@vacation.karoshi.com wrote: > > sounds just like folks in 1985, talking about IPv4... > > The foundation of that, though, was ignorance of address space > exhaustion. IPv4's address space was too sm

Re: minimum IPv6 announcement size

2013-09-26 Thread bmanning
sounds just like folks in 1985, talking about IPv4... /bill On Wed, Sep 25, 2013 at 06:45:02AM -0700, Owen DeLong wrote: > Each site should get at least a /48. > > Stop worrying about dense-packing the IP space in IPv6. This is IPv4-think. > IPv6 is intended to be sparsely allocated. > > Ow

Re: DNS Reliability

2013-09-23 Thread bmanning
On Mon, Sep 16, 2013 at 06:36:22PM +0200, Niels Bakker wrote: > * bmann...@vacation.karoshi.com (bmann...@vacation.karoshi.com) [Fri 13 Sep > 2013, 22:16 CEST]: > > from where? to where? what % of the Internet is _not_ > > reachable from my DNS service at any given time? why is > >

Re: anybody from Amsterdam Internet Exchange (ams-ix) to help?

2013-09-19 Thread bmanning
there is a huge amount of information on the net. have you done any homework? brief summary, an exchange is a shared fate transport where an ISP can exchange traffic with two or more other participants on the exchange. most of the traffic exchange is done via "peering" with the BGP protocol.

Re: DNS Reliability

2013-09-13 Thread bmanning
On Fri, Sep 13, 2013 at 04:01:51PM -0400, Jean-Francois Mezei wrote: > On 13-09-12 21:53, Larry Sheldon wrote: > > > I expect 100.000% > > > > I'll accept 99.999% or better. > > At these numbers, one has to start to count failover time. A "system" > can be disaster tolerant but take 2 hours to r

Re: Internet Surveillance and Boomerang Routing: A Call for Canadian Network Sovereignty

2013-09-08 Thread bmanning
On Sun, Sep 08, 2013 at 04:58:52PM +0900, Randy Bush wrote: > > Quite frankly, all this chatter about technical 'calls to arms' and > > whatnot is pointless and distracting (thereby calling into question > > the motivations behind continued agitation for technical remedies, > > which clearly won't

Re: Vancouver IXP - VanTX - BCNet

2013-08-21 Thread bmanning
On Wed, Aug 21, 2013 at 12:10:32PM -0400, William F. Maton Sotomayor wrote: > On Wed, 21 Aug 2013, Clayton Zekelman wrote: > > >Just wondering aloud if an ISP that did have commercial interest could run > >a non-member driven exchange point successfully as long as they had > >pricing and policie

Re: How big is the Internet?

2013-08-16 Thread bmanning
On Fri, Aug 16, 2013 at 12:37:20AM -0400, Sean Donelan wrote: > Even the researchers at the Library of Congress, if you give them > enough beer and beg them enough, will eventually give you an estimate > about the Library collection size as of the end of the last year. > > What so special about t

Re: How big is the Internet?

2013-08-14 Thread bmanning
On Thu, Aug 15, 2013 at 12:19:38AM -0400, Sean Donelan wrote: > > Either there is a lot of traffic missing, or market concentration is much > greater than assumed. > I'd argue that its both. /bill

Re: How big is the Internet?

2013-08-14 Thread bmanning
On Wed, Aug 14, 2013 at 03:00:51PM -0400, Sean Donelan wrote: > > I should have remembered, NANOG prefers to correct things. So here are > several estimates about how much IP/Internet traffic is downloaded > in a month. Does anyone have better numbers, or better souces of > numbers that can be s

Re: How big is the Internet? - about the size of a strawberry

2013-08-14 Thread bmanning
On Wed, Aug 14, 2013 at 10:32:13AM -0400, Sean Donelan wrote: > > Researchers have complained for years about the lack of good > statistics about the internet for a couple fo decades, since the > end of NSFNET statistics. > > What are the current estimates about the size of the Internet, all IP >

Re: On topic of domains

2013-07-11 Thread bmanning
On Fri, Jul 12, 2013 at 08:45:50AM +1000, Mark Andrews wrote: > > In message , Chris Hills writes: > > On 11/07/2013 15:27, Jon Mitchell wrote: > > > > > > After .nyc thread, thought this IAB announcement may be of interest. > > > > > > http://www.iab.org/documents/correspondence-reports-documen

Re: Paetec PI space?

2013-06-26 Thread bmanning
f the assignment predated ARIN, then its not clear if current ARIN policy is applicable. On Wed, Jun 26, 2013 at 02:18:54PM -0400, Joe Abley wrote: > > On 2013-06-26, at 13:52, "Adam Greene" wrote: > > > We have a customer who was assigned some PI IPv4 space by Paetec back in > > mid-90's >

Re: Geoip lookup

2013-05-23 Thread bmanning
On Thu, May 23, 2013 at 11:39:12PM -0700, Owen DeLong wrote: > > On May 23, 2013, at 23:17 , David Conrad wrote: > > > On May 23, 2013, at 10:53 PM, Andreas Larsen > > wrote: > >> The whole idea of Geoip is flawed. > > > > Sure, but pragmatically, it's an 80% solution. > > > >> IP dosen't re

ISOC item of interest

2013-05-21 Thread bmanning
ISOC - the folks who bring you IETF standards, is seeking public input. This from Emma: Hi all, In case it is of interest there is currently a public consultation on the Internet Society's mission now and in the future, you can voice your opinions by filling in the form at: https://www.int

Re: someone from Sprint

2013-04-18 Thread bmanning
paging Softbank/Sony. /bill On Thu, Apr 18, 2013 at 11:50:57AM -0400, Jay Ashworth wrote: > - Original Message - > > From: bmann...@vacation.karoshi.com > > > your not alone... (Sprint is the upstream for this email) > > > > The original message was received at Wed, 17 Apr 2013 1

Re: someone from Sprint

2013-04-17 Thread bmanning
your not alone... (Sprint is the upstream for this email) The original message was received at Wed, 17 Apr 2013 14:21:10 GMT from localhost.localdomain [127.0.0.1] - The following addresses had permanent fatal errors - (reason: 501 5.5.4 Invalid domain name) /bill On Wed, A

Re: Quad-A records in Network Solutions ?

2013-04-10 Thread bmanning
On Tue, Apr 09, 2013 at 08:13:49PM -0700, Eric Brunner-Williams wrote: > On 4/9/13 5:47 PM, Jared Mauch wrote: > > Can you point is at the right address or form to submit regarding this? > > Seems like its time for both on and DS. > > Jared, > > Joe is an employee of the corporation, a rat

Re: Tier 2 ingress filtering

2013-03-28 Thread bmanning
On Thu, Mar 28, 2013 at 01:47:45PM -0400, valdis.kletni...@vt.edu wrote: > On Thu, 28 Mar 2013 17:16:48 -, bmann...@vacation.karoshi.com said: > > > > is there a clear understanding of "the edge" in the network operations > > community? in a simpler world, it was not that difficult, but inter

Re: Tier 2 ingress filtering

2013-03-28 Thread bmanning
is there a clear understanding of "the edge" in the network operations community? in a simpler world, it was not that difficult, but interconnect has blossomed and grown all sorts of noodly appendages/extentions. I fear that edge does not mean what you think it means anymore. /bill On Thu,

Re: BCP38 - Internet Death Penalty

2013-03-26 Thread bmanning
but they are paying attention /bill On Tue, Mar 26, 2013 at 09:25:09AM -0700, Jared Mauch wrote: > I'm not sure you want this regulated. > > Jared Mauch > > On Mar 26, 2013, at 9:20 AM, Mikael Abrahamsson wrote: > > > Can't we get homeland security into this? Threat to US national secu

Re: ORP

2013-03-26 Thread bmanning
On Tue, Mar 26, 2013 at 08:07:22AM -0400, Patrick W. Gilmore wrote: > On Mar 26, 2013, at 08:01 , "Dobbins, Roland" wrote: > > On Mar 26, 2013, at 6:50 PM, Jamie Bowden wrote: > > > >> let's suppose I just happen to have, or have access to, a botnet comprised > >> of (tens of) millions of random

Re: Why are there no GeoDNS solutions anywhere in sight?

2013-03-21 Thread bmanning
On Thu, Mar 21, 2013 at 12:23:02AM -0700, Constantine A. Murenin wrote: > On 20 March 2013 21:29, Masataka Ohta > wrote: > > Constantine A. Murenin wrote: > > > >> Why even stop there: all modern browsers usually know the exact > >> location of the user, often with street-level accuracy. > > > >

Re: Why are there no GeoDNS solutions anywhere in sight?

2013-03-21 Thread bmanning
On Wed, Mar 20, 2013 at 11:55:41PM -0700, Constantine A. Murenin wrote: > On 20 March 2013 20:43, Andrew Sullivan wrote: > > On Wed, Mar 20, 2013 at 08:28:23PM -0700, Constantine A. Murenin wrote: > >> Any plans to make DNS itself GeoDNS-friendly? > > > > No. And I say this as someone working for

Re: can you share ipv6 addressallo cation

2013-02-25 Thread bmanning
don't think of this in terms of waste (v6 has an unthinkable number of numbers) and think of security. by announceing more space than you are actually using, you create "dark-space" that attackers can hide in-plain-sight. so, for example, in your P2P links, you can use tools that lazy develope

Re: Level3 worldwide emergency upgrade?

2013-02-06 Thread bmanning
ah - those were the days of glory... :) On Wed, Feb 06, 2013 at 06:06:39PM -0700, Brett Watson wrote: > Hell, we used to not have to bother notifying customers of anything, we just > fixed the problem. Reminds me a of a story I've probably shared on the past. > > 1995, IETF in Dallas. The "

Re: De-funding the ITU

2013-01-13 Thread bmanning
On Sat, Jan 12, 2013 at 10:49:59PM -0800, Bill Woodcock wrote: > > On Jan 12, 2013, at 9:04 PM, "Fred Baker (fred)" wrote: > > ITU-D and ITU-R do a lot of good work. > > Care to try to cite an example? R we can't pull out of because NRO needs its > slots. I'm not sure that constitutes "good w

Re: De-funding the ITU

2013-01-12 Thread bmanning
its not that black/white. The ITU-R is actually -very- useful and does a really good job of coordinating spectrum use and has for many years. The ITU-T, however is questionable. It is possible to fund by sector, so a blanket defunding for the entire ITU, as outlined in this petition, is a hu

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-15 Thread bmanning
On Sun, Dec 16, 2012 at 12:45:32AM +, Nick Hilliard wrote: > On 15/12/2012 23:07, David Conrad wrote: > > The handwringing over this issue is a bit over the top. > > It's a question of what's procedurally sensible. Sensible things would > include longer notice of the impending change to the

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-14 Thread bmanning
On Fri, Dec 14, 2012 at 08:48:07PM -0800, David Conrad wrote: > On Dec 14, 2012, at 11:02 AM, Joe Abley wrote: > > Other root servers have renumbered out of institutional, general-purpose > > networks into dedicated networks in the past. I think the last one was > > B-Root in 2004, > > Actually

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-14 Thread bmanning
On Fri, Dec 14, 2012 at 03:10:44PM -0600, Joe Antkowiak wrote: > On Fri, Dec 14, 2012 at 2:13 PM, Jason Castonguay wrote: > > > The old address, which is in the middle of UMD's network, is going to be > > black-holed once the change is over. Nothing will be on that IP once we > > move the root of

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-14 Thread bmanning
On Fri, Dec 14, 2012 at 02:46:49PM -0500, Jay Ashworth wrote: > - Original Message - > > From: bmann...@vacation.karoshi.com > > > > So, in short, UMD will still own the losing allocation, and be able > > > to make > > > relatively sure nothing else is placed at that IP (though of course >

Re: btw, the itu imploded - NOT

2012-12-14 Thread bmanning
not at all... the WCIT 2012 concluded without agreement. Hardly the same thing. /bill

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-14 Thread bmanning
On Fri, Dec 14, 2012 at 02:25:43PM -0500, Jay Ashworth wrote: > - Original Message - > > From: "Joe Abley" > > > >> Quite so: UMD: Where will the old IP route after the 6 month period > > >> is complete? Somewhere safe? > > > As I understand it (but ask UMD!) > > > > - D-Root is current

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-14 Thread bmanning
On Fri, Dec 14, 2012 at 12:45:00PM -0500, Joe Abley wrote: > > These changes have happened before (other root servers have renumbered). I > have never heard of an operational problem caused by such an exercise, and I > guarantee there are resolvers running happily today with hints files that are

Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-14 Thread bmanning
On Fri, Dec 14, 2012 at 08:59:19AM -0800, Michael Thomas wrote: > Matthew Newton wrote: > >On Fri, Dec 14, 2012 at 04:42:46PM +, Nick Hilliard wrote: > >>On 13/12/2012 22:54, Jason Castonguay wrote: > >>>Advisory > >>You've just given 3 weeks notice for a component change in one of the few > >

Re:

2012-12-12 Thread bmanning
On Wed, Dec 12, 2012 at 07:57:11AM -0800, Randy Bush wrote: > flower tailor wrote: > > Delete me > > though possibly merciful, it is illegal in most cultures Montenegrins would be sad with the unilateral removal of thier TLD. /bill

Re: Big day for IPv6 - 1% native penetration

2012-11-26 Thread bmanning
2013 - the year of the NAT. (the only way a single stacked address family is going to be able to talk to a single stacked member of a different address family... and unless we start agressive reuse of v4, this will happen sooner than later (dual-stack is rate limited to the smaller of the a

Re: Big day for IPv6 - 1% native penetration

2012-11-20 Thread bmanning
Dr. Frederick Frankenstein: LIFE! DO YOU HEAR ME? GIVE MY CREATION... LIFE! > >> > >>> On Tue, Nov 20, 2012 at 10:14:18AM +0100, Tomas Podermanski wrote: > > It seems that today is a "big day" for IPv6. It is the very first > time when native IPv6 on google statistics > (h

Re: dhcpy6d - a MAC address aware DHCPv6 server

2012-11-06 Thread bmanning
On Tue, Nov 06, 2012 at 05:38:32AM -0800, Owen DeLong wrote: > If you're on local subnet, why not pull the MAC address out of the > received packet? > > Further, what happens to this when IPv4 goes away? > > Owen "the cat came back" ... IPv4 is going away like RIP is a dead routing pro

Re: dhcpy6d - a MAC address aware DHCPv6 server

2012-11-05 Thread bmanning
cool. this is the fifth version of a DHCP server modified to work with IPv4 and IPv6 in accord with the DHCP specs. a feature request... some sites run IVI, and so the have a MAC and and v6 address and need to be dynamically assigned a v4 address. My crude attempt uses the last 48bits of

Re: IP tunnel MTU

2012-10-29 Thread bmanning
On Mon, Oct 29, 2012 at 04:44:40PM -0400, Joe Maimon wrote: > > > bmann...@vacation.karoshi.com wrote: > >On Mon, Oct 29, 2012 at 03:46:57PM -0400, Joe Maimon wrote: > >> > >> > >>Templin, Fred L wrote: > >> > >>>Yes; I was aware of this. But, what I want to get to is > >>>setting the tunnel MTU

Re: IP tunnel MTU

2012-10-29 Thread bmanning
On Mon, Oct 29, 2012 at 03:46:57PM -0400, Joe Maimon wrote: > > > Templin, Fred L wrote: > > >Yes; I was aware of this. But, what I want to get to is > >setting the tunnel MTU to infinity. > > > Essentially, its time the network matured to the point where > inter-networking actually works (ag

the little ssh that (sometimes) couldn't

2012-10-29 Thread bmanning
corruption! http://mina.naguib.ca/blog/2012/10/22/the-little-ssh-that-sometimes-couldnt.html /bill

Re: Issues encountered with assigning .0 and .255 as usable addresses?

2012-10-24 Thread bmanning
ok... so lets look at some space here. 98.32.0.0/22 98.32.0.0/32 is clearly on the unusable boundary. what about 98.32.0.255/32 & 98.32.1.0/32 ??? 98.32.4.255/32 is also clearly on the unusable boundary... UNTIL the delegation moves from a /22 to a /21. Then its usable. clear? though

Re: Is a /48 still the smallest thing you can route independently?

2012-10-11 Thread bmanning
one of the downsides to v6 is the huge amnt of space the folks expect you to announce. lots of space to do nefarious things. that said. if you select your peers carefully and don't mind a bit of hand crafting, you can /96 and even /112 that said, get a /32 and assign/announce /48s... /bill

Re: Another LTE network turns up as IPv4-only

2012-10-10 Thread bmanning
https://intelligence.businessinsider.com/facebook-is-adding-over-25000-mobile-users-an-hour-2012-10 dream big /bill On Thu, Oct 11, 2012 at 08:31:44AM +0200, Tore Anderson wrote: > * Cameron Byrne > > > FYI http://www.dslreports.com/forum/r27324698-LTE-access-early- > > > > So much for ne

Re: ESR muses on, among other things, the early IETF

2012-10-06 Thread bmanning
On Sat, Oct 06, 2012 at 06:12:08PM -0400, Frank Kastenholz wrote: > > On Oct 6, 2012, at 6:39 AM, bmann...@vacation.karoshi.com wrote: > > > On Sat, Oct 06, 2012 at 10:14:41AM +0100, Nick Hilliard wrote: > >> On 06/10/2012 03:20, Jay Ashworth wrote: > >>> Those who know Fred and knew Jon personal

Re: ESR muses on, among other things, the early IETF

2012-10-06 Thread bmanning
On Sat, Oct 06, 2012 at 10:14:41AM +0100, Nick Hilliard wrote: > On 06/10/2012 03:20, Jay Ashworth wrote: > > Those who know Fred and knew Jon personally might want to throw an oar in > > the > > water on this blog posting from last month... > > > > http://esr.ibiblio.org/?p=4591 > > not sure

Re: RIRs give out unique addresses (Was: something has a /8! ...)

2012-09-28 Thread bmanning
ah... again the distinction between routed and routable. RFC 1918 space is clearly routeable and routed. one does not need ARIN to assign such space. what i -think- the NRPM section you refered to actually touches on (but does not state outright) the concept of uniqueness. In the dim mi

Re: RIRs give out unique addresses (Was: something has a /8! ...)

2012-09-28 Thread bmanning
not how i read that section Owen... "...networks require interconnectivity and the private IP address numbers are ineffective, globally unique addresses may be requested and used to provide this interconnectivity." One does not have to request RFC 1918 space from ARIN (or other RIR) and th

Re: guys & dolls (a film motif)

2012-09-27 Thread bmanning
thank you for your kind words and attempts to educate. clearly these items are critical for North American Network Operations (NANOG) and should be widely promoted and discussed ... But NOT, I think, here. may i humbly suggest that there exist other, better fora for discussion of these spe

Re: guys & dolls (a film motif)

2012-09-27 Thread bmanning
http://en.wikipedia.org/wiki/Guys_and_Dolls_(film) i -think- the term we are looking for is: Troglodyte 1: A person considered to be reclusive, reactionary, out of date, or brutish. /bill (top posting like a civilized human...) On Thu, Sep 27, 2012 at 01:28:04PM -0700, Ray Van Dols

Are NAT'ed networks part of the Internet?

2012-09-27 Thread bmanning
On Thu, Sep 27, 2012 at 11:23:34AM +0200, Eugen Leitl wrote: > > I'm trying to figure out whether CERNET http://en.wikipedia.org/wiki/CERNET > is part of the official Internet, or is behind the Great Firewall where > access to invididual networks on the public Internet must be explicitly > granted

Re: Optical network simulator

2012-08-28 Thread bmanning
On Tue, Aug 28, 2012 at 12:35:57PM -0700, Robert Hajime Lanning wrote: > On 08/28/12 12:12, Walter Keen wrote: > >Free is preferred > > > > Free is always preferred... ;) Free is too costly. Unless you have zero-cost labor... /bill

Re: US House to ITU: Hands off the Internet

2012-08-03 Thread bmanning
On Fri, Aug 03, 2012 at 08:47:30PM +, John Curran wrote: > On Aug 3, 2012, at 2:06 PM, "Patrick W. Gilmore" wrote: > > > [Feels operational to me.] > > > > > > > > The U.S. House of Representa

Re: Another LTE network turns up as IPv4-only squat space + NAT

2012-07-19 Thread bmanning
On Wed, Jul 18, 2012 at 10:36:31PM -0400, Chuck Church wrote: > I disagree. I see it as an extra layer of security. If DOD had a network > with address space 'X', obviously it's not advertised to the outside. It > never interacts with public network. Having it duplicated on the outside --

Re: using "reserved" IPv6 space

2012-07-15 Thread bmanning
On Sun, Jul 15, 2012 at 09:50:39AM +0200, Laurent GUERBY wrote: > Sorry if I wasn't clear in my first message. > > Is there an agreed upon definition of "end site"? > > Sincerely, > > Laurent this might help. seems like these folks have general agreement on terms. NANOG-critters might have dif

Re: strat-1 gps

2012-06-27 Thread bmanning
i've been using a earlier version of this: http://www.spectracomcorp.com/ProductsServices/TimingSynchronization/NetworkTimeServers/9483NetClockTimeServer/tabid/1439/Default.aspx On Tue, Jun 26, 2012 at 09:35:29PM -1000, Randy Bush wrote: > my experience with cdma was kinda funky > > and there

Re: ZOMG: IPv6 a plot to stymie FBI !!!11!ONE!

2012-06-17 Thread bmanning
Internet Regulator? /bill On Sun, Jun 17, 2012 at 10:43:26AM +0100, Roland Perry wrote: > In article <20120616160738.eee09...@resin05.mta.everyone.net>, Scott > Weeks writes > > >What is going to make folks change their behavior? > > If all else fails, perhaps a regulator fining the ISP

Re: IPv6 day and tunnels

2012-06-03 Thread bmanning
On Sun, Jun 03, 2012 at 10:05:40PM -0400, Joe Maimon wrote: > > > Joe Maimon wrote: > > >Looks like a tunnel mtu issue. I have not as of yet traced the > >definitive culprit, who is (not) sending ICMP too big, who is (not) > >receiving them, etc. > > > > The culprit is the v6 tunnel, which wand

Re: NXDomain remapping, DNSSEC, Layer 9, and you.

2012-05-28 Thread bmanning
On Tue, May 29, 2012 at 12:38:23PM +1000, Mark Andrews wrote: > > Putting it another way, the ISP doesn't want to be fooled even if > it is fooling its customers. don't lie to us, but we lie to our customers. and you don't see a problem with this? /bill

Re: Vixie warns: DNS Changer ‘blackouts’ inevitable

2012-05-23 Thread bmanning
On Wed, May 23, 2012 at 04:33:28PM -0400, Christopher Morrow wrote: > On Wed, May 23, 2012 at 1:40 AM, wrote: > > Paul will be there to turn things off when > >they no longer make money for his company. > > is the dns changer thingy making money for isc? pretty sure. a contract

Re: Vixie warns: DNS Changer ‘blackouts’ inevitable

2012-05-22 Thread bmanning
On Tue, May 22, 2012 at 10:07:52PM -0700, Michael J Wise wrote: > > On May 22, 2012, at 9:10 PM, bmann...@vacation.karoshi.com wrote: > > > On Tue, May 22, 2012 at 08:52:52PM -0700, Michael J Wise wrote: > >> > >> On May 22, 2012, at 8:35 PM, Randy Bush wrote: > >> > >>> father of bind? that's

Re: Vixie warns: DNS Changer ‘blackouts’ inevitable

2012-05-22 Thread bmanning
On Tue, May 22, 2012 at 08:52:52PM -0700, Michael J Wise wrote: > > On May 22, 2012, at 8:35 PM, Randy Bush wrote: > > > father of bind? that's news. > > > > He was there, and Put The Fix In, to down the network.

Re: Vixie warns: DNS Changer ‘blackouts’ inevitable

2012-05-22 Thread bmanning
On Tue, May 22, 2012 at 07:14:16PM -0700, Henry Linneweh wrote: > http://www.theregister.co.uk/2012/05/17/dns_changer_blackouts/ > > -Henry Paul certainly knows how to manipulate the press. /bill

Re: International Transit Provider - Delivered locally to Melbourne Australia

2012-04-13 Thread bmanning
unless you cross connect in the landing shack, there will -always- be a domestic local loop. (you don't like Telstra?) /bill On Fri, Apr 13, 2012 at 12:40:42PM +, James Braunegg wrote: > Dear All > > Just wondering if I can get some recommendations for international transit > providers w

Re: Quad-A records in Network Solutions ?

2012-04-05 Thread bmanning
On Thu, Apr 05, 2012 at 10:26:11AM -0700, George B. wrote: > On Thu, Mar 29, 2012 at 4:32 AM, Matt Ryanczak wrote: > > > I too had with nesol years ago. It required special phone calls to > > special people to update. Customer support never knew what was going on > > regarding or IPvWha

Re: Quad-A records in Network Solutions ?

2012-03-28 Thread bmanning
On Wed, Mar 28, 2012 at 11:55:35AM -0700, David Conrad wrote: > On Mar 28, 2012, at 11:47 AM, Carlos Martinez-Cagnazzo wrote: > > I'm not a fan of conspiracy theories, but, c'mon. For a provisioning > > system, an record is just a fragging string, just like any other > > DNS record. How diffic

Re: BBC reports Kenya fiber break

2012-02-29 Thread bmanning
we had an instance of "B" root there for a season. connectivity was a problem and we pulled the node in 2001. /bill On Wed, Feb 29, 2012 at 09:45:16PM -0800, Bill Woodcock wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > >> On Wed, Feb 29, 2012 at 10:08 AM, Justin M. Streiner

Re: SSL Certificates

2012-02-15 Thread bmanning
On Thu, Feb 16, 2012 at 12:17:00AM -, John Levine wrote: > >Almost everyone are basically just selling an "activation" with one of the > >SSL certificate authorities. > > > >I usually buy a "RapidSSL" (Verisign) certificate from > >https://www.sslmatrix.com/ -- they seem to have some of the b

and now for something completely different

2012-02-15 Thread bmanning
Control of ground-state pluripotency by allelic regulation of Nanog Nature advance online publication 12 February 2012. doi:10.1038/nature10807 Authors: Yusuke Miyanari & Maria-Elena Torres-Padilla Pluripotency is established through genome-wide reprogramming during mammalian pre-implantation

Re: Dear RIPE: Please don't encourage phishing

2012-02-12 Thread bmanning
On Sun, Feb 12, 2012 at 09:36:54PM -0800, Randy Bush wrote: > > DNS is case-insensitive when you are talking about 7-bit ASCII > > < pedantry > > > dns itself is purely eight bit transparent. one can even have a dot as > a non-separator. p.r.c could be a tld. it's strictly length/value. > > o

[POLITICS] ICANN elections

2012-02-03 Thread bmanning
There are four really good candidates. Please consider sending in a statement of support for one of them. /bill - Forwarded message - Date: Fri, 03 Feb 2012 09:38:06 +1000 To: Bill Manning Subject: Comment Period for ICANN Board Seat 9 Election Consistent with the ASO Memorandum of

Re: US DOJ victim letter

2012-02-02 Thread bmanning
On Thu, Feb 02, 2012 at 05:57:23AM -0500, Robert E. Seastrom wrote: > > bmann...@vacation.karoshi.com writes: > > > I missed the part where ARIN turned over its address database > > w/ associatedd registration information to the Fed ... I mean > > I've always advocated for LEO access, but ther ha

Re: US DOJ victim letter

2012-01-28 Thread bmanning
On Fri, Jan 27, 2012 at 10:20:08PM -0500, Martin Hannigan wrote: > On Fri, Jan 27, 2012 at 1:32 PM, Randy Epstein wrote: > > > > > > On 1/27/12 1:23 PM, "valdis.kletni...@vt.edu" > > wrote: > > > >>On Fri, 27 Jan 2012 13:16:27 EST, Bryan Horstmann-Allen said: > >> > >>> Bit odd, if it's a phish.

is it -really- global?

2012-01-23 Thread bmanning
anyone keeping track of their RTTs? i'm finishing up some work on latency and all i have are my numbers. its going to be highly variable based on where you are and where you go, but it would be nice to have other sets of numbers. roughly my targets are :: 43% are "cloud" oriented - CBN stuff t

  1   2   3   4   5   >