- NANOG - lists.nanog.org

Austin
by Larry Sheldon 18 Feb '10

18 Feb '10

Any of the Austin contingent near the IRS office? Everybody OK? -- "Government big enough to supply everything you need is big enough to take everything you have." Remember: The Ark was built by amateurs, the Titanic by professionals. Requiescas in pace o email Ex turpi causa non oritur actio Eppure si rinfresca ICBM Targeting Information: http://tinyurl.com/4sqczs http://tinyurl.com/7tp8ml

1 0

Caribbean High Speed network..request for interested parties
by Rudolph Daniel 18 Feb '10

18 Feb '10

Ref: Caribbean High speed network...Rudi.daniel(a)gmail.com SPECIFIC PROCUREMENT NOTICE* *Request for Expressions of Interest* *Caribbean Knowledge and Learning Network (CKLN) Foundation* Regional Strategy for C@ribNET: Caribbean High Speed Network (/Provision of a Blueprint for the Development and Implementation of National Research and Education Networks)/** *Grant Number:* ATN/OC-10755-RG *Project Number:* RG-T1270 This request for Expressions of Interest follows the general procurement notice for this project that appeared in UNDB on-line Issue/ /No. 768 of February 1, 2010. The Caribbean Knowledge and Learning Network (CKLN) Foundation has received a Grant from the Inter-American Development Bank towards the cost of the Regional Strategy for C@ribNET: Caribbean High Speed Network, and it intends to apply part of the proceeds of this Grant to payments under the contract for /the Provision of a blueprint for the development and implementation of National Research and Education Networks (NRENs). /CKLN is now seeking Expressions of Interest from eligible consultants to provide services under the foregoing mentioned contract. Services under the consultancy will include but shall not be limited to, identification of networks or segments of networks with planned or actual national footprint, their technical configuration, topography and operational status; identifying operational issues that might undermine their service capabilities and reliability; developing gap profiles between what exists today in each country and a “best practice” network blueprint; develop mitigation strategies and plans for remediation by consensual and collaborative methods. Short listing will be conducted through short listing procedures specified in the Inter-American Development Bank’s /Policies for the Selection and Contracting of Consultants financed by the Inter-American Development Bank, August /2006, and are open to all bidders from eligible source countries, as defined in the Policies. Interested eligible Applicants may obtain further information from the Caribbean Knowledge and Learning Network (CKLN) Foundation located at the Mutual Trans Nemwil Office Complex, the Villa, St. George’s, Grenada, Monday to Friday 8:30 hours to 16:30 hours/. /A set of documents requisite for completing Expressions of Interest may be requested by interested Applicants on the submission of a written Application to email address shion.thomas(a)ckln.org <mailto:shion.thomas@ckln.org> . These documents will be sent via email. Expressions of Interest should be submitted in two (2) hard copies and one electronic copy in CD format in sealed envelopes, delivered to the address below by */March 10, 2010/*/, /and be clearly marked “Expression of Interest for P/rovision of a Blueprint for the Development and Implementation of National Research and Education Networks/”. The Procurement Officer Caribbean Knowledge and Learning Network (CKLN) Foundation Mutual Trans Nemwil Office Complex The Villa, St. George’s, Grenada, West Indies Tel: 473-439-6396 Fax: 473- 439-6419 shion.thomas(a)ckln.org <mailto:shion.thomas@ckln.org> -- Rudi Daniel e Business Consultant ( Caribbean Region ) http://www.svgpso.org http://oecstimes.wordpress.com “The whole problem with the world is that fools and fanatics are always so certain of themselves, but wiser people so full of doubts.” - Bertrand Russell

1 0

austin eats
by Randy Bush 18 Feb '10

18 Feb '10

is there a nanog austin eats page somewhere? i lost my old link to some wiki we used to use. and, a completely unverified recco from an austin friend (who thinks chicken fried steak is the meat nearest heaven). > I spoke to my colleague who has lived in Austin more recently than I > have. > > He recommends North By Northwest highly, in the Arboretum area. > > http://www.nxnwbrew.com/ > > When I was a Texan in exile, I would always, on returning, worship at > the shrine of Chicken Fried Steak. Threadgill's is a timeless classic > that specializes in it. Ken Threadgill was an Austin legend, who gave > Janis Joplin one of her first paying gigs. Bonus: Manager Eddie Wilson > was the Ranch Boss at the Armadillo World Headquarters, and has a shrine > of posters and pictures from the font of Austin weirdness. > > http://www.threadgills.com/ > > He also recommends Urbanspoon as an online info source. > > http://www.urbanspoon.com/c/11/Austin-restaurants.html > > Welcome, y'all.

15 19

RE: austin eats
by Daniel Fox 18 Feb '10

18 Feb '10

Just ate at iron cactus on 6th and both the talapia and spicy shrimp tacos are phenomonal! Margaritas are really good too... 90 plus tequillas to choose from...great staff Daniel Fox Smarsh Inc ----- Original Message ----- From: Chris Boyd <cboyd(a)gizmopartners.com> Sent: 17 February 2010 14:42 To: North American Network Operators Group <nanog(a)merit.edu> Subject: Re: austin eats On Feb 17, 2010, at 2:04 PM, Will Clayton wrote: > Maudi's on Lake Austin and Taco Deli are always on my menu. We just got some Buffalo Wild Wings in town if you are in to that. If you make it to NXNW get the Calimari. If you wind up ordering pizza, shop local and get the best pizza for the best price in town at Austin's Pizza. Austin's is good, but HomeSlice on South Congress is better, and you can walk on down to Trophy's, Continental Club, or the garden at Guero's and take in a band. http://www.homeslicepizza.com/ http://austin.citysearch.com/profile/10210801/austin_tx/trophy_s_bar_grill.… http://www.continentalclub.com/ http://www.guerostacobar.com/

3 2

RE: Spamhaus ...
by Joel M Snyder 18 Feb '10

18 Feb '10

Matthew Black wrote: >When we licensed Spamhaus a few years back, they required us to set-up a DNS >slave server instead of querying against their public server. They had a >special DNS client that allowed partial zone updates. Turns out we >downloaded huge hourly updates. This is no longer necessary. You can either run your own server (zone transfer-ish) or you can query their servers. When you pay your fee, you get a magic code which you insert in the DNS query, and this lets them know who you are. I second the assertion that others have already made that this is worth the money. We do spam testing, and I can more-or-less guarantee that Spamhaus beats all of the free reputation services (and a number of the for-pay ones) hands-down in its ability to block spam and the incredibly low number of false positives. In case you are interested in more on the topic, I did write a white paper (ob.disc.:Cisco gave me money to write up the white paper based on data I have been collecting for years) on reputation services. John Levine wrote: > > We no longer use Spamhaus, relying instead upon Sender Base Reputation > >Scores (IronPort). >How does the price compare? Well, depending on how you look at it, either horribly or beautifully. You can't buy SenderBase by itself; you get it with an Ironport anti-spam appliance. So if you were going to buy Ironport anyway, the price is "free" which makes it cheaper than Spamhaus. On the other hand, if you just want SenderBase, it'd be a very expensive way to get only the reputation filtering. In general, like many of the big-name anti-spam products, the reputation service is part-and-parcel of the product and can't really be separated out. In fact, with Ironport, they use the reputation service in two ways: one is to block connections in the first place, and the second way is to bias results of their content filter for connections which are accepted. Since their scores are -10 to +10, there's considerable leeway to use the information as part of their anti-spam cocktail beyond simple "go/no-go" of a typical reputation service. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

3 2

Re: Spamhaus ...
by Joel Snyder 18 Feb '10

18 Feb '10

Sharef Mustafa wrote: > What is the title of the white paper you mentioned? > Is it available for free? If not how can I get it? Sorry, I should have put the link to the Best Practices in Reputation Services white paper in. I meant to, but I got distracted writing the disclaimer and forgot to paste the URL. http://www.opus1.com/www/whitepapers/reputationserviceswp.pdf jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

Re: Location of upstream connections & BGP templates
by Scott Weeks 18 Feb '10

18 Feb '10

--- steve(a)ibctech.ca wrote: From: Steve Bertrand <steve(a)ibctech.ca> layered. My thinking is that my 'upstream' connections should be moved out of the core, and onto the edge. My reasoning for this is so that I What do other providers do? Are your transit peers connected directly to the core? I can understand such a setup for transit-only providers, but -------------------------------------------- Border, core, access. Border routers only connect the core to the upstreams. They do nothing else. No acls, just prefix filters. For example, block 1918 space from leaving your network. Block other bad stuff from leaving your network too. Allow in only what you're expecting from the upstream; again 1918 space, etc. They can fat finger like anyone else. Core is for moving bits as efficiently as possible: no acls; no filters. Connect downstream BGP customers to access routers that participate in the iBGP mesh. Filter them only allowing what they're supposed to advertise. They'll mess it up a lot if they're like my customers by announcing everything under the sun. Filter what you're announcing to them. You can fat finger just as well as anyone else. ;-) scott

4 8

Location of upstream connections & BGP templates
by Steve Bertrand 18 Feb '10

18 Feb '10

Hey all, I've got a couple of questions that I'd like operational feedback about. . Although we're an ISP, we currently are only an access provider. We don't yet provide any transit services, but the requirement for us to do so may creep up on a very small scale shortly. Nonetheless... I'm on the latter stages of transforming our network from flat to layered. My thinking is that my 'upstream' connections should be moved out of the core, and onto the edge. My reasoning for this is so that I can eliminate ACL/filtering etc from the core, and push it ALL out toward the edge, keeping the core as fast, sleek and maintenance-free as possible. I visualize my transit providers as essentially 'access', not part of my core backbone. What do other providers do? Are your transit peers connected directly to the core? I can understand such a setup for transit-only providers, but I can't see how that makes sense for any provider that provides (mostly) access services. I'm looking for feedback from both large and small providers, just to gain some perspective. Another question, along the same lines, due to recent discussions, I've done a great deal of research on BGP templates, and now want to migrate to them from peer-group. Before I waste lab time configuring things, I just want to ask for feedback based on experience on whether the following makes sense/will work for transition: - configure template structure - 'no' a single neighbour - apply templates to neighbour - the neighbour comes back up - wash, rinse, repeat Steve

2 2

Re: Location of upstream connections & BGP templates
by Scott Weeks 18 Feb '10

18 Feb '10

--- deleskie(a)gmail.com wrote: From: jim deleskie <deleskie(a)gmail.com> Border/Core/Access is great thinking when your a sales rep for a vendor that sells under power kit. No reason for it any more. ----------------------------------------------- I'd imagine it depends on the network size. Collapsing functionality is doable for smaller sizes. Please elaborate. scott

2 1

History of 4.2.2.2. What's the story?
by Sean Reifschneider 17 Feb '10

17 Feb '10

I've wondered about this for years, but only this evening did I start searching for details. And I really couldn't find any. Can anyone point me at distant history about how 4.2.2.2 came to be, in my estimation, the most famous DNS server on the planet? I know that it was originally at BBN, what I'm looking for is things like: How the IP was picked. (I'd guess it was one of the early DNS servers, and the people behind it realized that if there was one IP address that really needed to be easy to remember, it was the DNS server, for obvious reasons). Was it always meant to be a public resolver? How it continued to remain an open resolver, even in the face of amplifier attacks using DNS resolvers. Perhaps it has had rate-limiting on it for a long time. There's a lot of conjecture about it using anycast, anyone know anything about it's current configuration? So, if anyone has any stories about 4.2.2.2, I'd love to hear them. Thanks, Sean -- Microsoft treats objects like women, man... -- Kevin Fenzi, paraphrasing the Dude, 1998 Sean Reifschneider, Member of Technical Staff <jafo(a)tummy.com> tummy.com, ltd. - Linux Consulting since 1995: Ask me about High Availability

19 37