- NANOG - lists.nanog.org

Re: Alternatives to GSLB ?
by Jeff Blaum 11 Apr '11

11 Apr '11

Just wanted to thank everyone who replied to my question on the list and off-list. Cheers, Jeff On Tue, Apr 5, 2011 at 12:31 PM, Paul W. Roach III <paul(a)isaroach.com>wrote: > The downside of anycast for TCP services require state to be replicated in > realtime across all app servers to prevent crappy user experience in the > case where I switch servers mid-transaction. > > On Tue, Apr 5, 2011 at 3:17 PM, Jack Carrozzo <jack(a)crepinc.com> wrote: > >> Anycast works. >> >> [...] we are looking for ideas on >> > how to 1) ensure clients are routed to the closest geographical server >> 2) >> > ensure the client hits the server(s) with the shortest path. >> > >> >> No need to deal with that yourself when BGP eats that problem for >> breakfast >> lunch and dinner. >> >> -Jack Carrozzo >> > >

1 0

internet probe can track you within 690 m
by Jeroen van Aart 11 Apr '11

11 Apr '11

http://www.newscientist.com/article/dn20336-internet-probe-can-track-you-do… "The new method zooms in through three stages to locate a target computer. The first stage measures the time it takes to send a data packet to the target and converts it into a distance – a common geolocation technique that narrows the target's possible location to a radius of around 200 kilometres. (..) Finally, they repeat the landmark search at this more fine-grained level: comparing delay times once more, they establish which landmark server is closest to the target. The result can never be entirely accurate, but it's much better than trying to determine a location by converting the initial delay into a distance or the next best IP-based method. On average their method gets to within 690 metres of the target and can be as close as 100 metres – good enough to identify the target computer's location to within a few streets." It seems to me to be a rather flaky way of finding out your estimated location. But I guess it could be helpful when the objective is just to create some global database of demographics for marketing and privacy invasion purposes, where specifics of an individual's exact location don't really matter. Besides the latter can always be subpoenaed. ;-) One more reason to use VPN and other such techniques to hide your location. Greetings, Jeroen -- http://goldmark.org/jeff/stupid-disclaimers/ http://linuxmafia.com/~rick/faq/plural-of-virus.html

6 5

altdb.net: password length
by Bret Palsson 11 Apr '11

11 Apr '11

Is there a limit of 8 characters for the CRYPT-PW? -Bret

1 0

Bharti Airtel Contact
by jacob miller 11 Apr '11

11 Apr '11

Anyone with a Technical Contact for Bharti Airtel kindly contact me off list. I have been having BGP flaps for much of the day on a link to London. Regards, Jacob

1 0

altdb
by Bret Palsson 11 Apr '11

11 Apr '11

I'm trying to register my maintainor object to altdb. Is there any documentation on how to do this? Here is what I sent to auto-dbm(a)altdb.net mntner: MAINT-JIVE descr: Jive Communications, Inc. admin-c: BEP7-ARIN tech-c: BEP7-ARIN upd-to: routing(a)getjive.com mnt-nfy: routing(a)getjive.com auth: MD5-PW 2a930d2ac634aa45e4224e575d2a1bdb mnt-by: MAINT-JIVE changed: routing(a)getjive.com 20110411 source: ALTDB Thanks, Bret

1 0

Re: Level 3 Agrees to Purchase Global Crossing
by Mark Kent 11 Apr '11

11 Apr '11

Well, this will be the third time that Level3 has purchased my primary upstream provider. Maybe this will be different than with Genuity and Wiltel, but Level3 needs to either stop using the word "legacy" or educate their employees so they know that "legacy" is good and not bad. -mark

1 0

Barracuda Networks is at it again: Any Suggestions as to an Alternative
by Joel M Snyder 11 Apr '11

11 Apr '11

> You get their filtering power for free and don't have to deal with the > hardware, if you don't particularly like it. > > http://www.barracudacentral.org/ That's not completely true; the Barracuda appliance uses both block-lists and content-based filtering. The block-list is free for anyone who wants it, but the content-based filtering is not. However, the block-list *is* now one of the best ones out there. They had a rocky start, but in the last year they have consistently outperformed most of the other no-charge block-lists both in terms of catch rate and false positive rate. Spamhaus has long been one of my favorites for its performance, but I am now seeing Barracuda beat them each month in catch rate, sometimes by a nice margin. (FP rate for both lists is about the same; VERY close to zero.) If you like Spamhaus, you should try Barracuda block-list and see if it helps in your mail stream. (Every stream is different, so my results may not match your results.) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

GMail contact needed
by George Bonser 11 Apr '11

11 Apr '11

I am having an ongoing operational issue with imap.gmail.com that began at 1250 PDT It appears that connectivity has been blocked from certain of our operational IPs and IMAPs returns "Service Forbidden" for all connection attempts and we have some other issues on other protocols (pop3s, imaps) that started at exactly that time . Offlist response appreciated.

2 2

[NANOG-announce] NANOG 52 CFP Reminder: Slides due 4/11
by Tom Daly 10 Apr '11

10 Apr '11

NANOG'ers, On Thursday, 4/14, the NANOG Program Committee will meet to review submissions for NANOG 52. In an effort to get a topic list our the community as early as requested (tentative for 4/15), we do need to have all abstracts and slide submissions in as soon as possible. A quick review of the PC tool indicates that we don't have enough content for the meeting yet, so please submit your work ASAP! You can submit your abstract, or upload your slides at https://pc.nanog.org. Have a good weekend, Tom Daly, for the NANOG PC _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Re: Barracuda Networks is at it again: Any Suggestions as to an Alternative?
by Joel M Snyder 10 Apr '11

10 Apr '11

> It's quite easy to build your own [out of open-source components] that > easily outperforms any appliance on the market. (Which isn't saying > much: none of them are very good, and all of them are way overpriced. > The bar is thus set quite low.) It will not have all the superfluous > bells and whistles that marketing departments are so fond of hyping, > but it will work, it will be cheap, it will be scalable, and it will be > far more secure. Is there any aspect of this screed that you can support with data, preferably data published this decade? Of course, I understand that "overpriced" and "superfluous bells and whistles" and "far more secure" are fairly subjective criteria, but numbers such as efficacy and specificity are easy to compare. I'd also be interested in hearing about any cases where someone compromised a production Barracuda, Ironport, or similar appliance--or does your definition of "far more secure" include other substantive components that matter more? > I've discussed this at some length on mailop and am in the process of > reducing it to near-cookbook form. If you're interested, contact me > offlist and I'll outline it for you. I'd be interested in seeing you put your money where your mouth is regarding catch rate and false positive rate. Contact me off-list with a place where I can FTP a VM of one of your appliances. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0