- NANOG - lists.nanog.org

Should I Reboot, and Why? (was Re: [RDD] No Play out on Cart Wall)
by Jay Ashworth 07 Jun '15

07 Jun '15

----- Original Message ----- > From: "Cowboy" <curt(a)cwf1.com> > On Sunday 31 May 2015 03:49:10 pm Graham Wilman wrote: > > after getting the play out working on clienta terminal for the past > > 6 days > > the decision was taken today to get clientb terminal working which > > it now partially is > > unfortunately once all 3 terminals the server.clienta and clientb > > were rebooted I could > > not get play out to work on clienta again > > Re-booted why ? > I've often said that rebooting a *nix machine is usually a bad idea. And, again, a good to recap some of Good Sysadmin Practice: In the Windows world, it's often recommended that you reboot a machine that is acting -- as we say in support -- hincky. That's because Windows is sufficiently complicated and fragile that things can get corrupt at runtime, and the simple fact you rebooted it can fix a problem. That's traditionally not been true in the *nix world; particularly on purpose-built single function servers, there simply isn't enough code running at once to allow for the sort of complicated, multiplicative complexity failures that you see in many Windows machines. But does that mean you should never reboot a Linux box, just because you usually don't *have* to, to fix your problem? No, it doesn't, and here's why: Some of the things you might change in your configuration can affect how things start *when* you boot up, and if you've adjusted one of them, the time to boot it and find out *is right now, when you've just made the change and it's fresh in your mind*, not 6 months from now at 3 in the morning, when you don't remember what you did. Well, I suppose you could look in your logbook. Or check your ticketing system. :-) Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

3 2

Re: PoC for shortlisted DDoS Vendors
by nanogml＠ddos-mitigator.net 07 Jun '15

07 Jun '15

hi nanog, back in april, Mohamed was reviewing the shortlist of DDoS appliances, would you mind posting a summary of your findings # partial list of DDoS appliances DDoS-Mitigator.net/Competitors ----- ? does anybody know which DDoS appliances uses IPtables to do its mitigation ?? iptables is good because it supports tarpit which can be used to counter attack the incoming TCP-based DDoS attackers ? Does any colo/datacenter ( in silicon valley or Las Vegas ) allow the customers to put a firewall at the ISP end of the pipe to prevent these ICMP/UDP floods from going down the pipe to the customer thanx alvin DDoS-Simulator.net === Simulate DDoS attacks DDoS-Mitigator.net === Defend against incoming DDoS attacks

1 0

RE: PPPoE/IPoE, any recommendations for upgrade?
by Murat Kaipov 07 Jun '15

07 Jun '15

Hello Nasser. We use IPoE in our small ISP. But in my case we use DHCP option 82 and IP address as username for authentication and accounting purposes. As BRAS we configure Cisco ISG. Отправлено с устройства Samsung -------- Исходное сообщение -------- От: Nasser Heidari <nasser(a)rasana.net> Дата: 07.06.2015 9:46 (GMT+03:00) Кому: nanog(a)nanog.org Тема: PPPoE/IPoE, any recommendations for upgrade? Hi, We are currently using PPPoE in our network. I have seen some articles regarding migration of so-called legacy PPPoE to IPoE. After reviewing some of them and implementing IPoE in lab environment using Cisco ASR I didn't fine it that much beneficial to migrate whole system as I need to change a lot of things. For example: - I need to add it's support to our radius and obviously BSS system (E.g. using NAS-PORT-ID instead of username). - For the addressing part, as I have already using distributed BNG's, I need to change some of our policies. (For example assigning address blocks is much easier in PPPoE using framed-route) - I need to change our customers CPE configuration to use Ethernet encapsulation. - I haven't used DHCP in large scale environment. - I don't have any clear Idea/understanding regarding its maintainability/troubleshooting and also security. (Please add if I'm missing any other issue which may run into if I migrate to IPoE) Although it has some benefits, I'm not sure if it's that essential to migrate. Would you please kindly? - Share your Ideas/experiences/best practices in this regard? - If you are already using IPoE, tell more why should I upgrade? - Considering a DSL network with more than 800K customers using PPPoE, do you recommend this migration? Kind Regards, Nasser

1 0

Digitalocean and recent issues
by Randy 07 Jun '15

07 Jun '15

Hello. I work with digitalocean "droplets" or virtual machines for my home business. While great for running cheap websites and server applications, I have noticed recently that I keep getting issues with my other VPN droplet I setup. Firstly, I kept getting blocked by google, it claims automated queries. I don't browse google too often.. Also had an issue with outbound mail on another droplet. Now I'm blocked by... Pizzahut.com Can't order a pizza over my VPN. One might think that there is some virus, but I assure you, there is not, Ive ran tcpdum captures and realtime captures for wireshark, I don't notice any other traffic other then the traffic I initiate by browsing, or doing a few search terms. And I've always paid for my pizza order! Is any one else experiencing issues like this? is there something I'm missing, I have no idea but the pizzahut thing has got me very irked.

3 2

Issue with cache @ 198.6.100.25 (UUNET)
by Phil Daws 07 Jun '15

07 Jun '15

Hello: Hopefully somebody may be able to help us ? Our domain appears to be having issue at 198.6.100.25 and showing the following: innovot.com. 120 IN MX 10 domain.not.configured. Yet when I dig @8.8.8.8 or @8.8.4.4 all works absolutely fine. Our secondaries are all with DNS Made Easy and we did switch from GoDaddy to FastHosts as the registrar. Would somebody be able to flush the cache on the domain please ? Thank you in advance. -- Phil Daws (null)

2 1

Re: eBay is looking for network heavies...
by Larry Sheldon 07 Jun '15

07 Jun '15

On 6/5/2015 23:35, Faisal Imtiaz wrote: > 'pathping' ..... learned something new today... Did not know such a > command existed in windows.. > > Been working with computers for over 30 years, while I don't care as > to what it says about how much I know, but it sure reminds me that > that their is always something more that one can learn ! > > > Thank You. > > :) +1 Amazing. -- sed quis custodiet ipsos custodes? (Juvenal)

2 1

Verizon FiOS outbound mail TLS problem - Superpages people here?
by Jay Ashworth 06 Jun '15

06 Jun '15

Anyone on the list who does outbound delivery for Verizon (which I think is actually Superpages)? A client has smart-hosted outbounds to *one* of his customers bouncing suddenly with Deferred: 403 4.7.0 TLS handshake failed. *My* inclination is to think that a cert expired somewhere, but his non-tech contact there tells him that the tech people think things are ok. I'm trying to get a mailer log fragment from them. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

3 3

Tunable SFP
by Frank Bulk 06 Jun '15

06 Jun '15

Anyone know if tunable SFPs exist? I've googled around on this, but only found fixed wave-length SFPs. Or of a tunable SFP+ that can operate in SFP port as 1G? Frank

2 3

Riot Games
by Alistair Mackenzie 06 Jun '15

06 Jun '15

Hi, Is there anyone on this list from Riot Games that can reach out to me? I'm having some issues with customers reaching your network. Thanks, Alistair

2 1

Re: eBay is looking for network heavies...
by Clayton Zekelman 06 Jun '15

06 Jun '15

Reminds me of: http://dilbert.com/strip/2000-08-31 At 12:27 PM 06/06/2015, Dave Taht wrote: >On Sat, Jun 6, 2015 at 6:53 AM, Brandon Ross <bross(a)pobox.com> wrote: > > I also concur. There is most certainly a > negative correlation between certs > > and clue in my experience, having met 10s of certificate holders. > >Oh good. Maybe my total lack of ever pursuing one of these things is actually >a qualification of sorts? > >I keep searching things like dice and monster out of perverse bemusement, >trying to find anyone actually looking for my actual skillset. > >-- >Dave TÃ¤ht >What will it take to vastly improve wifi for everyone? >https://plus.google.com/u/0/explore/makewififast

1 0