[WISPA] PCI Compliance

2010-04-02 Thread RickG
Email from my brother: Just got a letter from our credit card processor and we need to become pci compliant. I noticed these routers I'm using from Qwest dont have a firewall. Do I go software,hardware or both? Here is the link for our routers.

Re: [WISPA] PCI Compliance

2010-04-02 Thread Josh Luthman
No experience just thoughts. http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard Would make sense to use a MT, put a nice firewall template (hence the first requirement) and then the other generic things everyone should do. I would have to guess BK doesn't store card

Re: [WISPA] Google

2010-04-02 Thread bbow...@mozarks.com
It may have been talked about 2 weeks ago, but Google can be fun. Check out the masthead on the search today. TOPEKA. Take that Topeka for stealing the name Google! --- Original Message --- From: RickG[mailto:rgunder...@gmail.com] Sent: 4/1/2010 11:06:47 PM To :

Re: [WISPA] PCI Compliance

2010-04-02 Thread Charles N Wyble
Rick (and others wanting to be PCI compliant) Ping me off list about this. It's a somewhat complex subject and varies quite a bit. I've done a fair amount of PCI related work and would be happy to provide some guidance. While you all know I'm generally very keen to post to the list and help

Re: [WISPA] PCI Compliance

2010-04-02 Thread Charles N Wyble
On 04/01/2010 11:29 PM, Josh Luthman wrote: No experience just thoughts. http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard This is a good overview. Also the spec is freely available in PDF form from the PCI website. Would make sense to use a MT, put a nice

Re: [WISPA] PCI Compliance

2010-04-02 Thread RickG
Correct, no storage. I'm thinking an RB750? On Fri, Apr 2, 2010 at 2:29 AM, Josh Luthman j...@imaginenetworksllc.com wrote: No experience just thoughts. http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard Would make sense to use a MT, put a nice firewall template (hence

Re: [WISPA] Bit Cap Thresholds, etc

2010-04-02 Thread Philip Dorr
Even at 56Kbps, if a client was using all of their bandwidth 24/7 they could do ~15GB in a 30 day month. On Thu, Apr 1, 2010 at 10:02 PM, RickG rgunder...@gmail.com wrote: Marlon, Out of curiosity, do you know your total capacity available to each of your subs? Can they ALL actually get

Re: [WISPA] Bit Cap Thresholds, etc

2010-04-02 Thread Andy Trimmell
We have 3 plans in each of our categories, Residential/Business. Also, we have a customer on 768kbps $30/mo and downloading 40-50gb in a month... Thresholds: Residential $30 20gb $40 40gb $50 60gb Business $50 40gb $70 80gb $100 120gb $5/Gb after their allotment but never exceeding $150 in

Re: [WISPA] April Fools!

2010-04-02 Thread Robert West
http://www.telegraph.co.uk/news/newstopics/howaboutthat/7541455/Ferrets-key- to-bridging-the-digital-divide-between-cities-and-rural-areas.html The ferrets are definitely the key to providing broadband. Bob- -Original Message- From: wireless-boun...@wispa.org

Re: [WISPA] Google

2010-04-02 Thread Robert West
You wouldn't want to. They will be the world's first Cyber-Government. :) Bob- -Original Message- From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of RickG Sent: Friday, April 02, 2010 12:47 AM To: WISPA General List Subject: Re: [WISPA] Google Um, April

Re: [WISPA] PCI Compliance

2010-04-02 Thread Josh Luthman
That would satisfy the firewall. Though I have to wonder what firewall config satsifies for compliance. On 4/2/10, RickG rgunder...@gmail.com wrote: Correct, no storage. I'm thinking an RB750? On Fri, Apr 2, 2010 at 2:29 AM, Josh Luthman j...@imaginenetworksllc.com wrote: No experience just

Re: [WISPA] PCI Compliance

2010-04-02 Thread Ryan Ghering
We just went through this ourselves as well helped many of our own customers get this done. PCI Compliance is pretty hardcore, all backdoor ports must be shutdown and the payment system machine must be hardened. For all our customers that are DSL we changed out the DSL modem/router for a DSL

Re: [WISPA] Bit Cap Thresholds, etc

2010-04-02 Thread Marlon K. Schafer
Yes and no. In theory they all have to share that 10 megs. In reality, people don't tend to all do big projects all at the same time. I know that when I run a speed test I usually see very close to the 10 megs, sometimes it's actually a little bit more. In the evening the tests show less

Re: [WISPA] Speaking of Tranzeo......

2010-04-02 Thread Marlon K. Schafer
I tired upgrading to that and it wouldn't go in. Even with that funky new upgrade tool they say you have to have. sigh marlon - Original Message - From: Kurt Fankhauser k...@wavelinc.com To: 'WISPA General List' wireless@wispa.org Sent: Thursday, April 01, 2010 9:21 PM Subject: Re:

Re: [WISPA] Speaking of Tranzeo......

2010-04-02 Thread Steve Barnes
If you have 3.5.2 you need to go to 4.0.3 before going to 5.0.4. I have seen some upgrades not go through until I was on 4.0.3. Has anyone figured out TRUMP for upgrades? Steve Barnes Manager PCS-WIN RC-WiFi Wireless Internet Service -Original Message- From:

Re: [WISPA] PCI Compliance

2010-04-02 Thread Eje Gustafsson
PCI compliance only applies to section of the network where YOU process and possibly store credit card information. If you have no over the net processing and don't store credit cards then it's easy. You fill out the form for terminal processing and just need to make sure the terminal itself is in

Re: [WISPA] Speaking of Tranzeo......

2010-04-02 Thread Ryan Spott
Marlon, If you ever need remote help with your Tranzeo gear, let me know. You don't need the tool (in fact, it is a PITA that I am trying to help them fix!) Note that they just bought Aperto so they are now WISPA members! Welcome to WISPA Tranzeo! ryan On Fri, Apr 2, 2010 at 10:17 AM, Marlon

Re: [WISPA] Bit Cap Thresholds, etc

2010-04-02 Thread Matt Jenkins
How do you track their usage? Andy Trimmell wrote: We have 3 plans in each of our categories, Residential/Business. Also, we have a customer on 768kbps $30/mo and downloading 40-50gb in a month... Thresholds: Residential $30 20gb $40 40gb $50 60gb Business $50 40gb $70 80gb

[WISPA] Redline RedMAX CPE

2010-04-02 Thread John Scrivner
I need to buy 2 or 3 new RedMAX 3650 WiMAX CPE but do not want to pay the higher single unit price. Has anyone out there made the bulk purchase who is willing to sell a couple or three of them to me? I will pay more than your unit price but want to get lower than the standard RedMAX single unit

Re: [WISPA] Redline RedMAX CPE

2010-04-02 Thread Gino Villarini
I have 1an100 base with sector antenna and 6 cpes cheap Sent from my Motorola Startac... On Apr 2, 2010, at 3:40 PM, John Scrivner j...@scrivner.com wrote: I need to buy 2 or 3 new RedMAX 3650 WiMAX CPE but do not want to pay the higher single unit price. Has anyone out there made the

Re: [WISPA] PCI Compliance

2010-04-02 Thread Frank Muto
All the better to have a completely hosted service with a trusted merchant. We have no CCRD information or even a card reader. We take no CCRD payments over the phone, by email, postal mail or store CCRD information for recurring invoices. All of our invoices are sent via email with an online

Re: [WISPA] PCI Compliance

2010-04-02 Thread Eje Gustafsson
True on this but still since I assume it still uses your merchant account you still fall under the PCI regulations BUT the trusted merchant would provide all PCI compliance documentation for you in this case and only thing you have to worry about is whom is provided remote login access to this

Re: [WISPA] PCI Compliance

2010-04-02 Thread Eje Gustafsson
Any firewall configuration that locks down all unnecessary ports and service especially those that is a major threat and any ports that are open has to have secure software with no remote exploits known. Web applications are extensively tested to ensure that no sql injection, cross site scripting

[WISPA] census tracts changing?

2010-04-02 Thread Randy Cosby
Just curious if the census tracts change with the new census this year? Will our data we've compiled for the Form 477 still be valid next go-around? -- Randy Cosby Vice President InfoWest, Inc 435-674-0165 x 2010 http://www.infowest.com/ Letting off steam always produces more heat than

Re: [WISPA] census tracts changing?

2010-04-02 Thread David E. Smith
On Fri, Apr 2, 2010 at 16:48, Randy Cosby dco...@infowest.com wrote: Just curious if the census tracts change with the new census this year? Will our data we've compiled for the Form 477 still be valid next go-around? The tracts will change, but not for a while. The Census Bureau has to

Re: [WISPA] Google

2010-04-02 Thread RickG
I was and am skeptical but I'm always curious of others opinions. On Fri, Apr 2, 2010 at 9:41 AM, Robert West robert.w...@just-micro.com wrote: You wouldn't want to.  They will be the world's first Cyber-Government.  :) Bob- -Original Message- From: wireless-boun...@wispa.org

[WISPA] Vyatta?

2010-04-02 Thread Tom Sharples
Time to update our ancient and overloaded main router. I'm intrigued by Vyatta and am wondering if anyone out here has any experience - good or bad - with them. Thanks, Tom S. WISPA Wants You! Join today!

Re: [WISPA] Vyatta?

2010-04-02 Thread Charles Hooper
A year or so back an employer I worked at had issues with Vyatta on Dell hardware. It was no fault of Vyatta's; Vyatta is based on Debian and either the Debian or the kernel maintainers had decided to change/remove the network driver from that particular release. Unfortunately, I don't

Re: [WISPA] Vyatta?

2010-04-02 Thread Josh Luthman
I've heard of many WISPs using MT, Imagestream and Cisco as their core routers. Never heard of Vyatta. I've always liked following what works. On 4/2/10, Tom Sharples tsharp...@qorvus.com wrote: Time to update our ancient and overloaded main router. I'm intrigued by Vyatta and am wondering

Re: [WISPA] Bit Cap Thresholds, etc

2010-04-02 Thread RickG
Too bad 56k isnt enough to satisfy customers any more. So, thats my point. What good is being able to transfer up to 10gigs if your speed is suffering because everyone else is doing the same? The number of subs on the AP and the capacity of the AP have an effect things. It all goes back to QOS.

Re: [WISPA] PCI Compliance

2010-04-02 Thread RickG
My thoughts exactly. It looks like his ISP (Qwest) is suggesting an Adtran. On Fri, Apr 2, 2010 at 10:00 AM, Josh Luthman j...@imaginenetworksllc.com wrote: That would satisfy the firewall.  Though I have to wonder what firewall config satsifies for compliance. On 4/2/10, RickG

Re: [WISPA] Vyatta?

2010-04-02 Thread Tom Sharples
We strongly prefer working with open-source / open-architecture solutions that allow us to add our own code and hardware as needed. That rules out Cisco. I see that Imagestream runs on Linux, do they give customers root access / ability to add scripts / modules in user space? How about MT in

Re: [WISPA] Vyatta?

2010-04-02 Thread Josh Luthman
ImageStream gets you to bash. You can also put gcc on it. MikroTik you get no such access. On 4/2/10, Tom Sharples tsharp...@qorvus.com wrote: We strongly prefer working with open-source / open-architecture solutions that allow us to add our own code and hardware as needed. That rules out

Re: [WISPA] PCI Compliance

2010-04-02 Thread RickG
Thanks to everyone for all the input. Just to answer a few questions: These are a bunch of Burger King restaurants. The reason this came up is because they just hit $1 million of annual transactions. The data is not stored but is processed through from the card swipe machines over the internet to

Re: [WISPA] PCI Compliance

2010-04-02 Thread RickG
That would be nice but it would be difficult for a fast food res truant to not have a card reader :) On Fri, Apr 2, 2010 at 4:27 PM, Frank Muto frank.m...@secureemailplus.com wrote: All the better to have a completely hosted service with a trusted merchant. We have no CCRD information or even

Re: [WISPA] census tracts changing?

2010-04-02 Thread Brian Webster
It will be a while before they release any new data from this census, I would guess one to two years before the mapping files are compiled and released. They need to tabulate all of the results from the census and then redraw any map files if necessary. You will be good for another cycle or two

Re: [WISPA] Vyatta?

2010-04-02 Thread Travis Johnson
Hi, I'm curious what you would need to add or access on a main router? Shouldn't you just let the router route and put everything else somewhere else? Hardware is cheap cheap cheap now... why complicate and possibly cause conflicts on a main router? We have run Imagestream in the past, and it

Re: [WISPA] Vyatta?

2010-04-02 Thread Tom DeReggi
What Vyatta does is pretty cool. And they have also been giving back to open source community some of the source they write fixes to. They are trying to make Linux look and feel like a cisco router. I have a lot of respect for their effort. But the bad is its priced wrong. They are going

Re: [WISPA] Vyatta?

2010-04-02 Thread Charles Hooper
Tom DeReggi wrote: Then there is the free community version, but. past history showed they have policies to discourage against using it commercially based on what they update. For example, it was not possible to upgrade from one version to another, not to long ago w/ community

Re: [WISPA] PCI Compliance

2010-04-02 Thread eje
You don't fit in there is nothing you need to do or provide besides maybe your consulting services. It's their merchant service provider and them that needs to ensure communication between the terminal and them is encrypted all the way. You just provide them with the road and it's their

Re: [WISPA] Vyatta?

2010-04-02 Thread Tom Sharples
Fair question. As you know, almost every product has at least one irritating limitation that can drive you nuts (for example the later discussion about having to retype the vyatta config by hand) and those kinds of limitations or oversights are usually easy to correct, but only if you can add

Re: [WISPA] Vyatta?

2010-04-02 Thread Josh Luthman
What kind of task is this router to perform? On 4/2/10, Tom Sharples tsharp...@qorvus.com wrote: Fair question. As you know, almost every product has at least one irritating limitation that can drive you nuts (for example the later discussion about having to retype the vyatta config by hand)

Re: [WISPA] Vyatta?

2010-04-02 Thread Glenn Kelley
I love Vyatta. I love PFSense... I love a bunch of other applications that can do this as well... BUT it might be worth asking what the job that you want the router to perform. While some may bash vYatta - Keep in mind - when the reload happened - they specifically did that for their

Re: [WISPA] Vyatta?

2010-04-02 Thread Glenn Kelley
vyatta overview: http://www.vyatta.com/products/index.php PFSense overview: http://www.pfsense.org On Apr 3, 2010, at 12:52 AM, Glenn Kelley wrote: I love Vyatta. I love PFSense... I love a bunch of other applications that can do this as well... BUT it might be worth asking what the

Re: [WISPA] Vyatta?

2010-04-02 Thread Josh Luthman
So who has used Vyatta and Mikrotik? Differences? On 4/3/10, Glenn Kelley gl...@hostmedic.com wrote: vyatta overview: http://www.vyatta.com/products/index.php PFSense overview: http://www.pfsense.org On Apr 3, 2010, at 12:52 AM, Glenn Kelley wrote: I love Vyatta. I love PFSense... I

Re: [WISPA] Vyatta?

2010-04-02 Thread Glenn Kelley
Josh Largest difference I have seen is in regards to load (and cost) Freeware community editions ... well cost is pretty low - especially if you have vmware already running, xen running - or a good pc or server around. that being said Mikrotik from experience can choke on DDOS attacks above

Re: [WISPA] Vyatta?

2010-04-02 Thread Tom Sharples
Pfsense appears to have a couple of limitations, e.g. only 1 pptp VPN session to the same server at a time, and only 1 sip session per server, that could cause some problems here. We run pptp VPN all the time sometimes from multiple internal desktops to the same remote customer server (usually