if only some us-gov folks read this mailing list...
maybe someone form NIST could aim the right question to the right
eftps.gov people?
you'd think helping the taxman would be appreciated.
On Tue, Dec 18, 2012 at 10:26 AM, Dennis Burgess
dmburg...@linktechs.net wrote:
I tried to this a month
On Tue, Dec 18, 2012 at 10:33 AM, Christopher Morrow
morrowc.li...@gmail.com wrote:
if only some us-gov folks read this mailing list...
maybe someone form NIST could aim the right question to the right
eftps.gov people?
you'd think helping the taxman would be appreciated.
it's probably also
On Tue, Dec 18, 2012 at 10:35 AM, Christopher Morrow
morrowc.li...@gmail.com wrote:
On Tue, Dec 18, 2012 at 10:33 AM, Christopher Morrow
morrowc.li...@gmail.com wrote:
if only some us-gov folks read this mailing list...
maybe someone form NIST could aim the right question to the right
On Tue, Dec 18, 2012 at 10:49 AM, Darren Pilgrim na...@bitfreak.org wrote:
On 2012-12-18 07:36, Christopher Morrow wrote:
On Tue, Dec 18, 2012 at 10:35 AM, Christopher Morrow
it's probably also fair to point out that ... it seems to be working.
( and A)
so, what's broken?
The end
On Tue, Dec 18, 2012 at 11:02 AM, Darren Pilgrim na...@bitfreak.org wrote:
On 2012-12-18 07:52, Christopher Morrow wrote:
see, now we're getting information that FDC/IRS could actually use!
:) This looks like an MTU issue then?
I believe so.
so, a suggestion to eftps.gov/irs/fdc
On Tue, Dec 18, 2012 at 11:15 AM, Darren Pilgrim na...@bitfreak.org wrote:
4890
it might not be their (eftps.gov's) fault though... but sure.
On Tue, Dec 18, 2012 at 3:19 PM, Mark Andrews ma...@isc.org wrote:
In message
cal9jlabwe_e+vfzwybtbrp50eicbvq7z3xuq3qwf3fhmidl...@mail.gmail.com,
Christopher Morrow
writes:
On Tue, Dec 18, 2012 at 11:15 AM, Darren Pilgrim na...@bitfreak.org wrote:
4890
it might
On Tue, Dec 18, 2012 at 3:35 PM, Owen DeLong o...@delong.com wrote:
On Dec 18, 2012, at 12:22 , Christopher Morrow morrowc.li...@gmail.com
wrote:
On Tue, Dec 18, 2012 at 3:19 PM, Mark Andrews ma...@isc.org wrote:
In message
cal9jlabwe_e+vfzwybtbrp50eicbvq7z3xuq3qwf3fhmidl
Most ddos games
On Dec 26, 2012 4:53 PM, Scott Howard sc...@doc.net.au wrote:
But only over HTTP. Working fine over HTTPS for me.
Scott
On Wed, Dec 26, 2012 at 1:46 PM, Joshua Goldbard j...@2600hz.com wrote:
Http://www.downforeveryoneorjustme.com/regions.com
Down.
Sent from
On Thu, Dec 27, 2012 at 3:37 PM, Blake Pfankuch bl...@pfankuch.me wrote:
Our stuff is currently through Verisign because of the reliability of the
name and the nature of the industry.
verisign sold this business (like 2+ years ago?), maybe it's time to
find someone else with a reliable name?
On Sun, Dec 30, 2012 at 3:30 PM, Keith Medcalf kmedc...@dessus.com wrote:
Your assertion that using bought certificates provides any security benefit
whatsoever assumes facts not in evidence.
Given recent failures in this space I would posit that the requirement to use
certificates
On Mon, Dec 31, 2012 at 9:07 AM, John R. Levine jo...@iecc.com wrote:
Also keep in mind that this particular argument is about the certs used to
submit mail to Gmail, which requires a separate SMTP AUTH within the SSL
session before you can send any mail. This isn't belt and suspenders, this
On Tue, Jan 1, 2013 at 2:04 PM, Keith Medcalf kmedc...@dessus.com wrote:
Perhaps Googles other harvesters and the government agents they sell or
give user credentials to, don't work against privately (not under the
goverment thumb) encryption keys without the surveillance state expending
On Wed, Jan 2, 2013 at 1:08 PM, William Herrin b...@herrin.us wrote:
As for Google (and anyone else) it escapes me why you would require a
signed certificate for any connection that you're willing to also
permit completely unencrypted. Encryption stops nearly every purely
raising the bar for
On Wed, Jan 2, 2013 at 2:36 PM, William Herrin b...@herrin.us wrote:
On Wed, Jan 2, 2013 at 1:39 PM, Christopher Morrow
morrowc.li...@gmail.com wrote:
goodness-scale (goodness to the left)
signed self-signed unsigned
Hi Chris,
Self-signed and unsigned are identical. The goodness scale
On Jan 2, 2013 7:36 PM, William Herrin b...@herrin.us wrote:
Me, no, although I have read credible reports that otherwise reputable
SSL
signers have issued MITM certs to governments for their filtering
firewalls.
That's not the case join is referring to.
The governments in question are
On Wed, Jan 2, 2013 at 8:03 PM, Christopher Morrow
christopher.mor...@gmail.com wrote:
On Jan 2, 2013 7:36 PM, William Herrin b...@herrin.us wrote:
Me, no, although I have read credible reports that otherwise reputable
SSL
signers have issued MITM certs to governments
On Wed, Jan 2, 2013 at 8:51 PM, William Herrin b...@herrin.us wrote:
secure cryptosystems. Has the EFF's SSL Observatory project detected
even one case of a fake certificate under Etilisat's trust chain since
then?
it's possible that the observatory won't see these in the wild, if the
On Wed, Jan 9, 2013 at 11:18 AM, William Herrin b...@herrin.us wrote:
About the only time you'd strictly *need* dynamic configuration in an
OOB is when directly connecting it to a commodity Internet link. If
you're willing to give your poorly secured and rarely updated OOB a
public IP address,
On Thu, Jan 10, 2013 at 9:10 AM, Nick Hilliard n...@foobar.org wrote:
- netflow: seriously, this is not an appropriate sort of port of
exporting
netflow. this is a your RP is toast recovery mechanism, at which point
netflow is probably long gone.
it's possible that roland was
On Thu, Jan 10, 2013 at 9:44 AM, sth...@nethelp.no wrote:
I don't think you can get ethernet and transport out-of-the-area in
some places at a reasonable cost, so having serial-console I think is
still a requirement.
TDM is disappearing quickly in at least some parts of the world. We
may
On Thu, Jan 10, 2013 at 9:51 AM, Mikael Abrahamsson swm...@swm.pp.se wrote:
On Thu, 10 Jan 2013, Christopher Morrow wrote:
- rs232: please no. it's 2013. I don't want or need a protocol
which
was designed for access speeds appropriate to the 1980s.
I don't think you can get
On Thu, Jan 10, 2013 at 12:16 PM, Warren Bailey
wbai...@satelliteintelligencegroup.com wrote:
Why is Satellite not a good OOB option?
inside iron boxes satellite signal is 'hard'.
getting a roof mounted antenna is extra cost/complexity.
or so some thinking goes.
On Sat, Jan 12, 2013 at 3:26 PM, Nick Hilliard n...@foobar.org wrote:
I want OOB with ethernet, MDIX, 100base-TX or 1000base-TX, with DHCP client
support. With a cherry.
and auto configuration that works? :) reliably? with your
switch/router upstream? :)
On Tue, Jan 15, 2013 at 12:52 PM, joel jaeggli joe...@bogus.com wrote:
On 1/15/13 9:31 AM, Bruce H McIntosh wrote:
On Tue, 2013-01-15 at 17:23 +, Warren Bailey wrote:
I still call a /24 a class c too.. :/ lol
More efficient that way - class c uses fewer syllables than slash
twenty four
On Wed, Jan 16, 2013 at 5:00 PM, Erik Levinson
erik.levin...@uberflip.com wrote:
Any ideas? Can folks try resolving eriktest.uberflip.com and post
here with details only if it resolves to an IP starting with 76.9 (old IPs)?
for d in $(seq 1 1000); do dig @pdns01.domaincontrol.com.
On Wed, Jan 16, 2013 at 5:24 PM, Erik Levinson
erik.levin...@uberflip.com wrote:
Yes, though I tried way less than 1000 in the loop.
:)
given a large list of recursives you could even test resolution
through a bunch of recursive servers...
On Wed, Jan 16, 2013 at 7:13 PM, Jay Ashworth j...@baylink.com wrote:
I've noticed, for quite some time, that there seems to be a specific category
of slow that I see in using apps on my HTC Supersonic/Sprint EVO, on both
their 3G and 4G networks, and I wonder if it isn't because the defined
On Thu, Jan 17, 2013 at 9:05 AM, Joe Loiacono jloia...@csc.com wrote:
Tim Calvin tcal...@tlsn.net wrote on 01/16/2013 05:51:11 PM:
PowerEdge R610 -
2x Intel E5540, 2.53GHz Quad Core Processor
32GB RAM
2x 300gb 10k 2.5 SAS HDD
Since netflow processing is generally I/O bound,
On Thu, Jan 17, 2013 at 11:16 AM, Joe Loiacono jloia...@csc.com wrote:
christopher.mor...@gmail.com wrote on 01/17/2013 11:01:06 AM:
From: Christopher Morrow morrowc.li...@gmail.com
To: Joe Loiacono/USA/CSC@CSC
Cc: Tim Calvin tcal...@tlsn.net, nanog@nanog.org nanog@nanog.org
Date: 01/17/2013
On Fri, Jan 18, 2013 at 12:51 PM, A. Pishdadi apishd...@gmail.com wrote:
Hello,
Can anyone recommend a device that will allow for multiple gigabit gre
tunnels with ability to handle up to a million pps?
I know it can be done on a bsd or nix box , or something running junos but
Im looking for
On Fri, Jan 18, 2013 at 4:52 PM, Byron Hooper bhoo...@staff.gwi.net wrote:
Hello All,
My company is looking at updating our CALEA set up. Our network has
changed appreciably since our initial rollout and I am looking at utilizing
Cisco's Lawful Intercept. I'm wondering what people are using
On Fri, Feb 8, 2013 at 3:58 PM, Laurent GUERBY laur...@guerby.net wrote:
The problem with increasing capacity is that it opens up captive
eyeballs to innovative services from outside: monopoly operators will
prefer to deal with CDN providers the like and keep control.
there are ways to offer
On Mon, Feb 11, 2013 at 3:01 PM, Scott Helms khe...@zcorum.com wrote:
If you're a large MSO (say top 15)
then I can see it with today's technology, but even those guys seem to be
moving in other directions to get out of the provider controlled set top
box model.
really? verizon still wants to
wait, email outages! wait! :)
apparently jared's working on it.
On Wed, Feb 13, 2013 at 2:54 PM, Jay Ashworth j...@baylink.com wrote:
Checking; thanks.
- jra
Brian Dickson brian.peter.dick...@gmail.com wrote:
Anyone know about puck.nether.net?
I read the outages list via web archive there,
On Wed, Feb 13, 2013 at 3:08 PM, Christopher Morrow
morrowc.li...@gmail.com wrote:
wait, email outages! wait! :)
apparently jared's working on it.
oh sorry,. 'whats going on' == zombie attack...
http://www.krtv.com/news/bogus-emergency-alert-message-transmitted/
On Wed, Feb 13, 2013 at 2
On Wed, Feb 13, 2013 at 3:09 PM, Christopher Morrow
morrowc.li...@gmail.com wrote:
apparently jared's working on it.
sorry, also: should be better later today
is the update...
If you have a dns server already, you can get some diversity for free with:
http://puck.nether.net/dns/
of course, this week's outage not withstanding, puck has been pretty
stable for me for this...
On Fri, Feb 15, 2013 at 10:56 AM, Raj Jalan r...@rajlog.com wrote:
http://www.dnsmadeeasy.com
On Thu, Feb 21, 2013 at 11:23 AM, Jack Bates jba...@brightok.net wrote:
On 2/21/2013 12:03 AM, Scott Weeks wrote:
I would sure be interested in hearing about hands-on operational
experiences with encryptors. Recent experiences have left me
with a sour taste in my mouth. blech!
scott
On Thu, Feb 21, 2013 at 3:58 PM, Jack Bates jba...@brightok.net wrote:
The A-team doesn't get caught and detailed
no, the A-team has BA Baraccus... he pities the fool who gets caught
and detailed... the last thing BA detailed was his black van.
On Mon, Mar 4, 2013 at 2:31 AM, Saku Ytti s...@ytti.fi wrote:
I know lot of vendors are fuzzing with 'codenomicon' and they appear not to
have flowspec fuzzer.
i suspect they fuzz where the money is ...
number of users of bgp?
number of users of flowspec?
On Mon, Mar 4, 2013 at 11:24 AM, Nick Hilliard n...@foobar.org wrote:
whois -h whois.radb.net 198.41.0.0
fgets: Connection reset by peer
:( larry blunk has helped in the past to fix this...
come back from the dead:
$ whois -h 198.108.0.18 216.239.32.0 | wc -l
7
huzzah!
Kind regards,
Job
On Mar 4, 2013, at 5:36 PM, Christopher Morrow morrowc.li...@gmail.com
wrote:
On Mon, Mar 4, 2013 at 11:24 AM, Nick Hilliard n...@foobar.org wrote:
whois -h whois.radb.net 198.41.0.0
On Wed, Mar 6, 2013 at 3:11 PM, Randy Carpenter rcar...@network1.net wrote:
We have recently been having some serious speed issues with YouTube on our
home connections, which are all Time Warner Cable.
Some searching on forums and such revealed a work around:
Block 206.111.0.0/16 at the
On Wed, Mar 6, 2013 at 3:34 PM, Randy Carpenter rcar...@network1.net wrote:
- Original Message -
On Wed, Mar 6, 2013 at 3:11 PM, Randy Carpenter
rcar...@network1.net wrote:
We have recently been having some serious speed issues with YouTube
on our home connections, which are all
On Tue, Mar 19, 2013 at 2:44 PM, David Conrad d...@virtualized.org wrote:
anyway, we seem to mostly agree, which again makes me realize I'm not
crazy...
The more likely alternative is that we both are.
doh! the unexpected third option!
but I stil have wine and sandwiches, come along with
On Mon, Mar 25, 2013 at 11:44 AM, valdis.kletni...@vt.edu wrote:
On Mon, 25 Mar 2013 15:38:01 -, Nick Hilliard said:
On 25/03/2013 14:33, Mikael Abrahamsson wrote:
I would like to be able to request an IP list of open resolvers in my ASN,
perhaps sent to the contact details in RIPE
On Thu, Mar 28, 2013 at 2:46 AM, Randy Bush ra...@psg.com wrote:
nyt reports capture of scuba divers attempting to cut telecom egypt
undersea fiber.
http://www.nytimes.com/aponline/2013/03/27/world/middleeast/ap-ml-egypt-internet.html
how likely is it that a diver can cut an armored
On Thu, Mar 28, 2013 at 4:50 PM, Andrew Latham lath...@gmail.com wrote:
On Thu, Mar 28, 2013 at 4:44 PM, Christopher Morrow
morrowc.li...@gmail.com wrote:
On Thu, Mar 28, 2013 at 2:46 AM, Randy Bush ra...@psg.com wrote:
nyt reports capture of scuba divers attempting to cut telecom egypt
On Mon, Apr 1, 2013 at 1:08 PM, Andrew Latham lath...@gmail.com wrote:
Thermal Lances can be started with various heat sources. Some are self
contained for emergency use.
either way, there's no mention of such a device in the reporting... or
picts.
right?
On Mon, Apr 1, 2013 at 1:04 PM,
On Fri, Apr 5, 2013 at 2:33 AM, Ryan Finnesey r...@finnesey.com wrote:
I have been having issues with their iPad App all day
the boneheads doing the attacking keep calling their shots on pastebin...
On Sun, Apr 7, 2013 at 1:22 AM, Julien Goodwin na...@studio442.com.auwrote:
...CGN will not impact the access,
reliability, speed, or security of Verizon’s broadband services. ...
...
/blockquote
Good luck with that, pretty much by definition it has to do all four
(albeit at levels that
On Mon, Apr 8, 2013 at 2:19 PM, Rajiv Asati (rajiva) raj...@cisco.comwrote:
Yes, MAP (T-Translation or E-Encap mode) is implemented on two regular
routers that I know of - ASR9K and ASR1K. Without that, you are right that
MAP wouldn't have been as beneficial as claimed.
glad it's cross
: Chuck Anderson c...@wpi.edu
Date: Monday, April 8, 2013 3:18 PM
To: Rajiv Asati raj...@cisco.com
Cc: Christopher Morrow morrowc.li...@gmail.com, nanog list
nanog@nanog.org
Subject: Re: Verizon DSL moving to CGN
I think he means patent encumbered.
On Mon, Apr 08, 2013 at 07:13:11PM +
' is .. disingenuous at best.
-Original Message-
From: Christopher Morrow morrowc.li...@gmail.com
Date: Monday, April 8, 2013 3:41 PM
To: Rajiv Asati raj...@cisco.com
Cc: Chuck Anderson c...@wpi.edu, nanog list nanog@nanog.org
Subject: Re: Verizon DSL moving to CGN
On Mon, Apr 8, 2013
On Mon, Apr 8, 2013 at 11:23 PM, Rajiv Asati (rajiva) raj...@cisco.comwrote:
For ex, there are numerous android apps that are not supported
on many android devices. :=(
I think this is actually up to the developer of the APP not the hardware
nor OS manufacturer.
On Fri, Apr 12, 2013 at 11:06 AM, cb.list6 cb.li...@gmail.com wrote:
Heather,
I see the same thing from my arpnetworks vps
no you don't... the dreamhost example used the google ARIN allocation
2607:: this example uses the 2404 APNIC allocation.
note that this may still be 'wrong', but
On Fri, Apr 12, 2013 at 9:48 PM, Scott Howard sc...@doc.net.au wrote:
On Fri, Apr 12, 2013 at 5:58 PM, Christopher Morrow
morrowc.li...@gmail.com wrote:
no you don't... the dreamhost example used the google ARIN allocation
2607:: this example uses the 2404 APNIC allocation.
note
On Fri, Apr 12, 2013 at 11:37 PM, Yang Yu yang.yu.l...@gmail.com wrote:
DNS is actually working correctly I think.
1) The outputs are from Dreamhost Ashburn, but I saw the same result
over IPv6 at Dreamhost LAX. Different DNS servers.
over ipv6 there might not be enough distinction between
On Tue, Apr 16, 2013 at 1:48 PM, Ryan Bonnell na...@dm0.org wrote:
MegaPath reports no service disruptions for DSL services. My latency graph
says otherwise...
that's not a service 'disruption'... that's just longer latency.
http://i.imgur.com/pwC2oX2.png
looks like your packets took
On Thu, Apr 18, 2013 at 12:05 PM, bmann...@vacation.karoshi.com wrote:
paging Softbank/Sony.
don't you mean ericsson? :)
/bill
On Thu, Apr 18, 2013 at 11:50:57AM -0400, Jay Ashworth wrote:
- Original Message -
From: bmann...@vacation.karoshi.com
your not alone...
On Wed, Apr 24, 2013 at 1:42 PM, Andrew Latham lath...@gmail.com wrote:
FYI, What can ARIN, RIPE et al do to reclaim
http://www.spamhaus.org/drop/drop.txt networks?
nothing since they don't control routability of the prefixes in question?
what platform and what requirements for the network bits? is multiple lag
hops good? bad? other?
On Fri, Apr 26, 2013 at 5:16 AM, Randy Bush ra...@psg.com wrote:
a small gaggle of researchers are looking at some measurements over
a setup like this
.--.
On Mon, Apr 29, 2013 at 6:38 PM, Brzozowski, John
john_brzozow...@cable.comcast.com wrote:
FYI for folks that are interested:
http://corporate.comcast.com/comcast-voices/comcast-launches-ipv6-for-business-customers
hurray! how long until VZ puts out a PR note for Fios Business customers?
On Tue, Apr 30, 2013 at 12:05 AM, Darren Pilgrim na...@bitfreak.org wrote:
On 2013-04-29 15:38, Brzozowski, John wrote:
FYI for folks that are interested:
http://corporate.comcast.com/**comcast-voices/comcast-**
On Wed, May 1, 2013 at 4:14 PM, Yang Yu yang.yu.l...@gmail.com wrote:
It is very courteous to reply a SERVFAIL for requests being rate limited.
I believe the 'rate-limit' response is actually 'no response' ... though I
haven't tested this myself :)
On Wed, May 1, 2013 at 1:17 PM, Andrew
On Thu, May 2, 2013 at 10:32 AM, Jay Ashworth j...@baylink.com wrote:
- Original Message -
From: Perry Lorier iso...@gmail.com
On 5/1/13 12:38 PM, Blair Trosper wrote:
That's all well and good, but I certainly wouldn't expect nslookup
gmail.com http://gmail.com or for
On Thu, May 2, 2013 at 11:51 AM, Jay Ashworth j...@baylink.com wrote:
- Original Message -
From: Christopher Morrow morrowc.li...@gmail.com
On Thu, May 2, 2013 at 10:32 AM, Jay Ashworth j...@baylink.com wrote:
- Original Message -
From: Perry Lorier iso...@gmail.com
On Thu, May 2, 2013 at 2:12 PM, Patrick W. Gilmore patr...@ianai.netwrote:
On May 02, 2013, at 12:12 , Joe Abley jab...@hopcount.ca wrote:
On 2013-05-02, at 12:10, Joe Abley jab...@hopcount.ca wrote:
On 2013-05-02, at 11:59, Charles Gucker cguc...@onesc.net wrote:
That's not entirely
On Fri, May 3, 2013 at 1:49 PM, Xavier Beaudouin k...@oav.net wrote:
Hello there,
I'm not sure I'd have lead with 'illegal', certainly 'not friendly' fits
though :(
also, I'm so glad we're doing well with:
1) provider filters
2) verification of address/number-holder validity
3) route
On Fri, May 3, 2013 at 2:01 PM, Nick Hilliard n...@foobar.org wrote:
It will be a brave person who drops both unknown and invalid prefixes.
hopefully it won't involve people being brave :) hopefully good measurement
and metrics lead us to a position where things 'just work' and we can do it
On Fri, May 3, 2013 at 2:21 PM, Nick Hilliard n...@foobar.org wrote:
On 03/05/2013 19:08, Christopher Morrow wrote:
hopefully it won't involve people being brave :) hopefully good
measurement
and metrics lead us to a position where things 'just work' and we can do
it
with confidence
On Fri, May 3, 2013 at 6:00 PM, cidr-rep...@potaroo.net wrote:
BGP Update Report
Interval: 25-Apr-13 -to- 02-May-13 (7 days)
Observation Point: BGP Peering with AS131072
TOP 20 Unstable Origin AS
Rank ASNUpds % Upds/PfxAS-Name
1 - AS58113 64482 2.7%
On Mon, May 6, 2013 at 12:23 PM, valdis.kletni...@vt.edu wrote:
On Mon, 06 May 2013 15:27:35 -, Warren Bailey said:
Illegal or undesired?
This sort of stuff comes in two flavors: typo and intentionally done
in furtherance of criminal activities.
The fact that an AS number and matching
)
To: Warren Bailey wbai...@satelliteintelligencegroup.com
Cc: Christopher Morrow morrowc.li...@gmail.com,Valdis Kletnieks
valdis.kletni...@vt.edu,NANOG nanog@nanog.org
Subject: Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989
and AS57954 (in ukraine)
if anyone wondered why abuse
On Mon, May 11, 2009 at 2:29 PM, Andree Toonk andree+na...@toonk.nl wrote:
.-- My secret spy satellite informs me that at Mon, 11 May 2009, Jay Hennigan
wrote:
We're getting cyclops[1] alerts that AS13214 is advertising itself as
origin for all of our prefixes. Their anomaly report shows
On Wed, May 13, 2009 at 3:22 AM, Randy Bush ra...@psg.com wrote:
we need a gsr and a few more reasonably sized devices racked and cabled
in dallas and would appreciate private email recommending a local
contractor.
This is a little late, but...wkumari had setup (or started to) a while ago:
On Fri, May 22, 2009 at 1:04 PM, Glen Kent glen.k...@gmail.com wrote:
Hi,
It is well known in the community that AH is NAT unfriendly while ESP cannot
be filtered, and most firewalls would not let such packets pass. I am NOT
'the content of the esp packet can't be filtered in transit' I think
On Mon, Jun 1, 2009 at 9:42 AM, Skeeve Stevens ske...@skeeve.org wrote:
Hey guys,
I mostly use Ezzi.net and a couple of others for server hosting.
I am looking for the same, but with dual-stack traffic and ipv6 addresses.
in theory it should be the same cost.
Anyone know any companies doing
On Tue, Jun 2, 2009 at 11:19 AM, Peter Beckman beck...@angryox.com wrote:
On Tue, 2 Jun 2009, JC Dill wrote:
Why do they watch and monitor rather than proactively go out and say
watch out, there's an unmarked cable here and keep them from cutting the
cable in the first place?
Because if
On Fri, Jun 5, 2009 at 12:45 AM, Andrew D Kirchtrel...@trelane.net wrote:
Randy Bush wrote:
http://voices.washingtonpost.com/securityfix/2009/06/ftc_sues_shuts_down_n_calif_we.html
while allegedly a black hat, this is the first case i know of in which
the usg has shut down an isp. nose of
On Fri, Jun 5, 2009 at 1:44 AM, Deepak Jaindee...@ai.net wrote:
What does it say about these providers AUP that the FTC needed to go to court
to turn them off?
I hate to re-start the atrivo/intercage/mccolo thread(s) but, often
what happens is there just arent any real/usable complaints sent
On Fri, Jun 5, 2009 at 8:04 AM, Gadi Evron g...@linuxbox.org wrote:
Christopher Morrow wrote:
On Fri, Jun 5, 2009 at 1:44 AM, Deepak Jaindee...@ai.net wrote:
What does it say about these providers AUP that the FTC needed to go to
court to turn them off?
I hate to re-start the atrivo
On Wed, Jun 10, 2009 at 10:26 PM, Nathan Wardna...@daork.net wrote:
On 11/06/2009, at 2:16 PM, v...@ee.lbl.gov wrote:
didn't want to spring for a cert for that eh? www.startssl.com ... hey
lookie! free certs!
? We bought a cert from Thawte specifically so people wouldn't find that
it's
On Thu, Jun 18, 2009 at 4:27 PM, Lyndon Nerenberglyn...@orthanc.ca wrote:
On Thu, 2009-06-18 at 16:14 -0400, Joe Provo wrote:
then you should be shifting your userbase to authenticated on the
SUBMIT
port [587] anyway...
Except for those ISPs who choose to intercept port 587 as well. This is
On Mon, Jun 22, 2009 at 1:38 PM, James Kennedy
(TT)james.kenn...@tradingtechnologies.com wrote:
Using there metro ethernet service we saw our circuit not recover after
scheduled maintenance. Verizon backed out the change and our service was
restored.
also, there are many heads on the verizon
On Thu, Jul 2, 2009 at 11:06 AM, Mark Kostersma...@arin.net wrote:
Hi
ARIN is now signing the /8 zones that it is authoritative for (eg
192.in-addr.arpa, etc).
Thanks! (in case no one else mentioned it)
-Chris
This the phase two of a three-phase process. Given that in-addr.arpa is
not yet
On Fri, Jul 10, 2009 at 2:11 AM, Jeffrey
Lyonjeffrey.l...@blacklotus.net wrote:
All,
There are few if any ISP that will help you with something like this.
coughuunet/vzb would/will/cough
(for free most times even)
On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey
Lyonjeffrey.l...@blacklotus.net wrote:
Would what? Null route the IP? I'm talking about actually filtering the
attack.
as was I. (talking about filtering the attack)
On Jul 10, 2009 5:10 PM, Christopher Morrow morrowc.li...@gmail.com
wrote:
On Fri
Message-
From: Christopher Morrow [mailto:morrowc.li...@gmail.com]
Sent: Friday, July 10, 2009 5:40 PM
To: Jeffrey Lyon
Cc: nanog@nanog.org; Charles Wyble
Subject: Re: Request for contact and procedure information
On Fri, Jul 10, 2009 at 5:12 PM, Jeffrey
Lyonjeffrey.l...@blacklotus.net wrote
will want you to pay, since that
part isn't 'free' to the company.
point being, dropping tcp/80 syn traffic isn't hard, and it's
routinely done at customer request. (or was when I was doing it there)
-chris
--
-Original Message-
From: Christopher Morrow
On Sat, Jul 11, 2009 at 10:20 AM, Ronald Cotoniseti...@gmail.com wrote:
I need to resolve some issues that we are having with you guys but there is
a lack of timelyness with your contact forms, 28 days is simply unacceptable
:(
From www.sorbs.net:
It comes with great sadness that I have to
On Wed, Aug 5, 2009 at 11:39 AM, Robert D. Scottrob...@ufl.edu wrote:
They will almost always prefer their IBGP to any learned routes. Why send
traffic to a transit network and skew their I/O peering numbers when you can
handle it yourself. I doubt you will change their mind.
On Wed, Aug 5, 2009 at 5:24 PM, Douglas Otisdo...@mail-abuse.org wrote:
On 8/5/09 11:31 AM, Roland Dobbins wrote:
On Aug 6, 2009, at 1:12 AM, Douglas Otis wrote:
Having major providers support the SCTP option will mitigate disruptions
caused by DNS DDoS attacks using less resources.
Can
On Wed, Aug 5, 2009 at 6:53 PM, Douglas Otisdo...@mail-abuse.org wrote:
On 8/5/09 2:49 PM, Christopher Morrow wrote:
and state-management seems like it won't be too much of a problem on
that dns server... wait, yes it will.
DNSSEC UDP will likely become problematic. This might be due
On Thu, Aug 6, 2009 at 2:51 AM, Paul Vixievi...@isc.org wrote:
Christopher Morrow morrowc.li...@gmail.com writes:
how does SCTP ensure against spoofed or reflected attacks?
there is no server side protocol control block required in SCTP. someone
sends you a create association request, you
On Thu, Aug 6, 2009 at 11:16 AM, Paul Vixievi...@isc.org wrote:
note, i went off-topic in my previous note, and i'll be answering florian
on namedroppers@ since it's not operational. chris's note was operational:
Date: Thu, 6 Aug 2009 10:18:11 -0400
From: Christopher Morrow morrowc.li
Going to be a long weekend:
http://www.datacenterknowledge.com/archives/2009/08/07/water-main-break-at-key-nyc-telecom-hub/
break out the scuba gear...
On Wed, Aug 12, 2009 at 9:57 AM, Drew Weaverdrew.wea...@thenap.com wrote:
Anyone know why SAAVIS would be allowing PEER1 (AS 13768) to advertise routes
for whatever IP addresses they want?
sadly savvis didn't learn the pccw lesson, which is also the
turk-telecom lesson which is also the as7007
On Wed, Aug 12, 2009 at 2:20 PM, goe...@anime.net wrote:
On Wed, 12 Aug 2009, Christopher Morrow wrote:
On Wed, Aug 12, 2009 at 9:57 AM, Drew Weaverdrew.wea...@thenap.com
wrote:
Anyone know why SAAVIS would be allowing PEER1 (AS 13768) to advertise
routes for whatever IP addresses they want
201 - 300 of 1911 matches
Mail list logo
