- NANOG - lists.nanog.org

Cisco CAT6500 IOS Simulator
by Carlos Asensio 22 Feb '12

22 Feb '12

Hi there, Anyone know a way of simulate a Cisco CAT6500 IOS? We're trying to deploy a lab of our production environment. Thanks in advance, Carlos.

1 0

Re: DNS Attacks
by Joel M Snyder 22 Feb '12

22 Feb '12

> http://thehackernews.com/2012/02/fbi-will-shutdown-internet-on-march-8.html Quoting the FBI: 85.255.112.0 through 85.255.127.255 67.210.0.0 through 67.210.15.255 93.188.160.0 through 93.188.167.255 77.67.83.0 through 77.67.83.255 213.109.64.0 through 213.109.79.255 64.28.176.0 through 64.28.191.255 Solve said problem easily by destination NATing those IPs on 53/UDP/TCP to your own recursive servers, or dump them on Google at 8.8.8.8 if you're so inclined. Extra bonus result: NAT logs will show who needs a pleasant email from customer service. Or you could just let 'em[1] suffer, BoFH-style. jms [1] "'em" in this case is "your customer service reps" who will see a 'higher than normal call volume' should the FBI's warning mean anything. -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

11 16

Re: Customer Notification System.
by Tom Pipes 21 Feb '12

21 Feb '12

Not sure if you have a customer database/spreadsheet and what OS platform you use, but this product has served us well in the past: http://www.massmailsoftware.com/bulkmail/ Tom Pipes tom.pipes(a)t6mail.com On Tue, Feb 21, 2012 at 4:58 PM, James Wininger <jwininger(a)ifncom.net>wrote: > We are a smaller ISP in Indiana. We are growing quite rapidly (yeah for > us). We have a need for a customer notification system. We have simply > out grown the ability to send emails to our customers manually. We need > to have a better way of notifying our customers of maintenance etc. > > > > We would need to send notifications out to say about 400 customers. > Ideally the system would send an attached PDF. It would be great if this > system were SQL based etc. > > > > Does anyone know of a system that is out there that does this? We have > looked at a few applications (windows based) but integration with > billing etc seems to be a caveat. I have thought of possibly using a > mailing list type approach, but that gets us back to (almost) where we > are today. Any pointers would be greatly appreciated. > > > > -- > > Jim Wininger > > jwininger(a)ifncom.net > > > >

1 0

Re: Common operational misconceptions
by Bob Vaughan 21 Feb '12

21 Feb '12

"Ethernet/Token Ring/Cisco Console/whatever uses an RJ45 connector" RJ45 defines a keyed 8P8C type connector, wired in a specific manner, for a specific 2 wire telco service. Incompatible with the above on several levels. "RJxx" == specific connector/wiring pattern for specific telco applications. Non-telco uses need not apply. One of these days I'm going to start carrying around some actual RJ45 type cables to hand out to those who ask. "DB9" DB defines a D series subminiature connector with a size "B" (nominal 25 pin) shell. DE defines a size "E" (nominal 9 pin) shell. DA15, DB25, DC37, DD50, DE9, etc.. Also DB13W3 (old Sun monitors), etc. If in doubt, refer to ITT/Cannon catalogs. (my oldest is from 1971). -- -- Welcome My Son, Welcome To The Machine -- Bob Vaughan | techie(a){w6yx|tantivy}.stanford.edu | techie(a)tantivy.net AF6RR | P.O. Box 19792, Stanford, Ca 94309 | 1-650-469-3850 -- I am Me, I am only Me, And no one else is Me, What could be simpler? --

5 4

Single-port Network "KVM"
by Jay Ashworth 21 Feb '12

21 Feb '12

Here's one example; cheapest I've seen: http://www.kvm-switches-online.com/0su51068.html There are others. This one appears to be web/java based rather than VNC, though that probably isn't a killer for most people. I thought I'd seen a little dongle-y model; I'll look around a bit more. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

5 5

Bluetooth-to-Serial (was: Re: Colo Vending Machine)
by Joel M Snyder 20 Feb '12

20 Feb '12

+1 on the suggestion for a SpiderDuo as portable KVM+your own laptop. Solves the problem and leverages the hardware you already have. Works great! Anyway: Bluetooth-to-Serial has been around for years; I did a review of several of them a while ago, even connecting with a Nokia phone (this was before iPhone/iPad existed) in a little Interop video piece in Network World. The IOGear BT-to-Serial is the most common nowadays; it is inexpensive and works pretty well and it is specifically designed for this kind of console environment. It draws 9V, so you can make a 9V battery-to-device adapter for about $2 with parts you get at Digikey if you want total portability. There are also more 'industrial' versions which are designed for longer-term use. My favorite is the BluePortXP, which has an integrated rechargeable battery, a nice little antenna, and can be externally powered if needed. That's pricey, closer to $200 as I remember, but it is designed for longer-term use in a single location. There are others along this line, a quick Google search will find them, mostly in the industrial PC-type businesses. The one I actually use almost every day is called a BlueConsole. These, unfortunately, are not available anymore. A Cisco engineer in Florida (I think) made them as a "Garagatronics" project years ago. It is a lovely piece of work, available with either a DB9 OR a RJ45 male on it, a 9V battery connector on the other end, and also powered from the serial port if available. You can dangle the RJ45 one from a Cisco router literally forever without a battery and it will BT-to-serial for 20 or 30 feet. If you can find one, buy it as it's the perfect compromise between the BluePort and the IOGear. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

facebook.com DNS not found 20120218 2125 UTC
by Everett Batey 20 Feb '12

20 Feb '12

facebook.com DNS not found 20120218 2125 UTC Is there any outage information for DNS for facebook.com / www.facebook.com ? "Oops! Google Chrome could not find www.facebook.com" On Fri, Feb 17, 2012 at 11:26 PM, <nanog-request(a)nanog.org> wrote: > Send NANOG mailing list submissions to > nanog(a)nanog.org > > -- R/ Everett Batey / Skype: wa6cre-10 / efbatey(a)gmail.com or efbarc(a)cotdazr.org or wa6cre(a)rabbitradio.org or lioneverett(a)gmail.com Lions 4-A3 Calendar / CrisisLinks http://bit.ly/cw95Um Please visit So Calif Linux Expo http://www.socallinuxexpo.org (805) 616-2471 / G-Talk/Twitter: efbatey

7 6

X.509 Certs For Personal Use
by Leo Bicknell 20 Feb '12

20 Feb '12

On the heals of some of the most productive conversation I've seen on NANOG in ages, let me try another topic! I suspect most people on NANOG are in the same boat that I'm in, we operate some small number of domains for ourselves, friends, family, and projects we like. I suspect many of us are also security conscious and would like to use encryption as often as possible. Unfortunately to communicate with random folks on the Internet you need an "SSL Certificate" signed by a "Trusted Root". Ok, we can argue about that, but that's what I'm going to assume for my question. That could be a cert for a web server, a mail server, a jabber server, or even a personal e-mail certificate. What I've found is a few classes of service: - Totally free, but the Root CA is not well distributed (or other issues). - Free for "one" (perhaps one web, one e-mail) on a well distributed CA, major upcharge for more. - Services for businesses designed for maintaining multiple domains and certs starting at $high and ending at $crazy. I am _not_ looking for a free only alternative, but I am looking for a fee structure and price that makes _personal_ use economically workable. I'd love to support community based efforts, but the reality is random folks will be accessing my web site, sending me e-mail, etc, so I want certs that are signed by root certs that ship with OSX/Windows/Linux, they should "just validate". I also do not require "EV" certificates, although being able to get one for an upcharge might be nice. Are there any providers that target someone with my desires? What providers do NANOG folks use for their _personal_ needs? -- Leo Bicknell - bicknell(a)ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/

8 11

Dynadot DNS acting up?
by Chris 20 Feb '12

20 Feb '12

Anyone noticing issues with Dynadot (site is down) and Dynadot related domain names where you are using their DNS servers? -- --C "The dumber people think you are, the more surprised they're going to be when you kill them." - Sir William Clayton

2 1

public scalable vpn?
by Randy Bush 19 Feb '12

19 Feb '12

academics in ontario are gonna need a scalable vpn service until they find jobs elsewhere. http://www.cautbulletin.ca/en_article.asp?SectionID=1386&SectionName=News&V… i can only handle a dozen or so. anyone running anything at scale? randy

4 4