June 2009 - Test - lists.nanog.org

.ORG is signed
by Dave Knight 05 Jun '09

05 Jun '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Colleagues, On behalf of PIR Technical Support I would like to announce that as of today, 2009-06-02, at 16:00 UTC .ORG is DNSSEC signed. The following KSK is now valid for .ORG org. IN DNSKEY 257 3 7 ( AwEAAYpYfj3aaRzzkxWQqMdl7YExY81NdYSv+qayuZDo dnZ9IMh0bwMcYaVUdzNAbVeJ8gd6jq1sR3VvP/SR36mm GssbV4Udl5ORDtqiZP2TDNDHxEnKKTX+jWfytZeT7d3A bSzBKC0v7uZrM6M2eoJnl6id66rEUmQC2p9DrrDg9F6t XC9CD/zC7/y+BNNpiOdnM5DXk7HhZm7ra9E7ltL13h2m x7kEgU8e6npJlCoXjraIBgUDthYs48W/sdTDLu7N59rj CG+bpil+c8oZ9f7NR3qmSTpTP1m86RqUQnVErifrH8Kj DqL+3wzUdF5ACkYwt1XhPVPU+wSIlzbaAQN49PU= ) ; key id = 21366 Please note that due to the use of NSEC3 this key should not be used with BIND versions less than 9.6.0. Please refer to http://www.pir.org/dnssec for more information. As always, please report operational concerns with any Afilias-hosted zone to <noc(a)afilias-nst.info> dave - -- Dave Knight Director, Resolution Services Afilias PIR Technical Support URL: http://www.pir.org E-mail: techsupport(a)pir.org Phone: +1.416.646.3308 Fax: +1.416.646.3305 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) iEYEARECAAYFAkoljz8ACgkQVFeEx/p946ad1ACfRgX0xjsA19jEgv8FC5ol7CME 8qUAoOx39+ZB/GIQj0/qHPnAA843iVqa =stCt -----END PGP SIGNATURE-----

3 2

3fn shutdown
by Charles Wyble 04 Jun '09

04 Jun '09

What do folks think? How were they shutdown? AS stopped from announcing? Physical power? http://voices.washingtonpost.com/securityfix/2009/06/ftc_sues_shuts_down_n_…

3 2

Cisco 6524 and MTU
by Warren Bailey 03 Jun '09

03 Jun '09

Has anyone encountered a 6524 dropping packets larger than 1492? IOS 12.2(33)SXH2a Warren Bailey GCI Communication Corp. RF Network Engineering 907.868.5911 office 907.903.5410 mobile

3 2

Re: VerizonWireless.com contact
by Bourbon.Odenthal＠sce.com 03 Jun '09

03 Jun '09

Interesting. I've been dealing with this exact problem for a couple of weeks now. Several of our DNS servers, but not all, can not resolve an MX for vtext.com or vtext.biz. Still don't have a resolution and I'm still wading through their support staff trying to find someone with a clue. -BB Odenthal Network Engineer Southern California Edison ----- Original Message ----- From: Mark Price [mprice(a)tqhosting.com] Sent: 06/03/2009 04:15 PM AST To: nanog(a)nanog.org Subject: VerizonWireless.com contact Does anyone know how to get in touch with someone at Verizon Wireless regarding SMTP? Part of our network seems to be blocked by their MX servers for verizonwireless.com and I can't find any contact info. Thanks, Mark

2 1

VerizonWireless.com contact
by Mark Price 03 Jun '09

03 Jun '09

Does anyone know how to get in touch with someone at Verizon Wireless regarding SMTP? Part of our network seems to be blocked by their MX servers for verizonwireless.com and I can't find any contact info. Thanks, Mark

1 0

Facility wide DR/Continuity
by Drew Weaver 03 Jun '09

03 Jun '09

Hi All, I'm attempting to devise a method which will provide continuous operation of certain resources in the event of a disaster at a single facility. The types of resources that need to be available in the event of a disaster are ecommerce applications and other business critical resources. Some of the questions I keep running into are: Should the additional sites be connected to the primary site (and/or the Internet directly)? What is the best way to handle the routing? Obviously two devices cannot occupy the same IP address at the same time, so how do you provide that instant 'cut-over'? I could see using application balancers to do this but then what if the application balancers fail, etc? Any advice from folks on list or off who have done similar work is greatly appreciated. Thanks, -Drew

7 10

Re: Facility wide DR/Continuity
by gb10hkzo-nanog＠yahoo.co.uk 03 Jun '09

03 Jun '09

Some things just don't active/active nicely on a budget. > Sure, because of inefficient legacy design choices. Roland, I'm not sure I understand your argument here. Budget is very much an issue when choosing between active/active and active/passive. Nothing to do with "inefficient legacy design". For example, consider the licensing and hardware costs involved in running something like Oracle Database in active/active mode (in a topology that is supported by Oracle Tech Support).

2 1

RE: Facility wide DR/Continuity
by gb10hkzo-nanog＠yahoo.co.uk 03 Jun '09

03 Jun '09

On the subject of DNS GSLB, there's a fairly well known article on the subject that anyone considering implementing it should read at least once.... :) http://www.tenereillo.com/GSLBPageOfShame.htm and part 2 http://www.tenereillo.com/GSLBPageOfShameII.htm Yes it was written in 2004. But all the "food for thought" that it provides is still very much applicable today.

5 9

Re: Facility wide DR/Continuity
by gb10hkzo-nanog＠yahoo.co.uk 03 Jun '09

03 Jun '09

(by the way ....before the accusations start flying of spamming , no I don't work for Zeus or have any incentive to mention their name... just happen to know their product)

1 0

Re: Facility wide DR/Continuity
by gb10hkzo-nanog＠yahoo.co.uk 03 Jun '09

03 Jun '09

to whoever said ... >F5's if you like commercial solutions F5s if you like expensive commercial solutions ..... Those with a less bulging wallet may wish to speak to the guys at Zeus Technology (http://www.zeus.com/) who have a lot of experience in the area and a more reasonable price tag. Contact me off-list and I can give you some names of senior techies there to speak to. (usual disclaimer that you should research your products .... it may be that for your particular application/environment/business model/whatever F5 may be your tool of choice)

1 0