February 2010 - Test - lists.nanog.org

Re: Spamhaus and Barracuda Networks BRBL
by Joel M Snyder 18 Feb '10

18 Feb '10

Dean Drako wrote: >We make no claims about it being better >or worse than any other RBL. I have some objective data based on our testing here. Over the past 18 months, Barracuda's block rate is 81.9%, while Spamhaus' is 83.3%. For whatever measurement error you want to include, that says that they are roughly equivalent. Over the past 6 months, BRBL is actually getting better: their block rate is 87%, while Spamhaus is 82%. There is, of course, a catch. BRBL gets a higher rate, but at a substantially higher false positive (FP) rate. We normalize FPs per 10,000 messages our measurements. Over the last 18 months, BRBL was 4.1 FP/10K messages; Spamhaus 0.2 FP/10K messages. Again, BRBL is getting better: over the past 6 months, BRBL went down to 1.6 FP/10K messages, while Spamhaus is about the same at 0.3 FP/10K messages. So, depending on your definition of "better," you could either say "BRBL is better" or "BRBL is worse." It would generally depend on your sensitivity to FPs. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

2 1

dns interceptors
by Randy Bush 18 Feb '10

18 Feb '10

i just lost ten minutes debugging what i thought was a server problem which turned out to be a dns trapper on the wireless in the changi sats lounge. this is not the first time i have been caught by this. what are other roaming folk doing about this? randy

21 27

Please Ignore Re: Tahiti's OPT ASN?
by Scott Weeks 18 Feb '10

18 Feb '10

--- surfer(a)mauigateway.com wrote: ------ Anyone got the ASN of Office des Postes et Télécommunications in French Polynesia? I'm having a heck of a time looking for it in APNIC. ------------------------------------------- Apologies for the noise. I found it at http://multicasttech.com/status/asn_expand.txt just after sending this: 9471 scott

1 0

Latest Cisco for small dual homed ASN
by James Smallacombe 18 Feb '10

18 Feb '10

I have a customer that is looking at using BGP for their network; one connection over a few bonded T1s, the other over a Comcast Enterprise connection (which supposedly will do BGP now). When I was dual homed a few years ago, a 7204VXR with 256MB was more than adequate. With routing tables growing the way they are, what's a good Cisco based solution on the lower end of the price spectrum that should handle this fine for a few years? Somebody else is suggesting a Vyatta (Linux based) solution, which makes me a little nervous. Then again, Linux has improved dramatically from a security and stability P.O.V, so maybe it's worth a look if there's no hard drive involved. TIA, James Smallacombe PlantageNet, Inc. CEO and Janitor up(a)3.am http://3.am =========================================================================

6 5

Austin
by Larry Sheldon 18 Feb '10

18 Feb '10

Any of the Austin contingent near the IRS office? Everybody OK? -- "Government big enough to supply everything you need is big enough to take everything you have." Remember: The Ark was built by amateurs, the Titanic by professionals. Requiescas in pace o email Ex turpi causa non oritur actio Eppure si rinfresca ICBM Targeting Information: http://tinyurl.com/4sqczs http://tinyurl.com/7tp8ml

1 0

Caribbean High Speed network..request for interested parties
by Rudolph Daniel 18 Feb '10

18 Feb '10

Ref: Caribbean High speed network...Rudi.daniel(a)gmail.com SPECIFIC PROCUREMENT NOTICE* *Request for Expressions of Interest* *Caribbean Knowledge and Learning Network (CKLN) Foundation* Regional Strategy for C@ribNET: Caribbean High Speed Network (/Provision of a Blueprint for the Development and Implementation of National Research and Education Networks)/** *Grant Number:* ATN/OC-10755-RG *Project Number:* RG-T1270 This request for Expressions of Interest follows the general procurement notice for this project that appeared in UNDB on-line Issue/ /No. 768 of February 1, 2010. The Caribbean Knowledge and Learning Network (CKLN) Foundation has received a Grant from the Inter-American Development Bank towards the cost of the Regional Strategy for C@ribNET: Caribbean High Speed Network, and it intends to apply part of the proceeds of this Grant to payments under the contract for /the Provision of a blueprint for the development and implementation of National Research and Education Networks (NRENs). /CKLN is now seeking Expressions of Interest from eligible consultants to provide services under the foregoing mentioned contract. Services under the consultancy will include but shall not be limited to, identification of networks or segments of networks with planned or actual national footprint, their technical configuration, topography and operational status; identifying operational issues that might undermine their service capabilities and reliability; developing gap profiles between what exists today in each country and a “best practice” network blueprint; develop mitigation strategies and plans for remediation by consensual and collaborative methods. Short listing will be conducted through short listing procedures specified in the Inter-American Development Bank’s /Policies for the Selection and Contracting of Consultants financed by the Inter-American Development Bank, August /2006, and are open to all bidders from eligible source countries, as defined in the Policies. Interested eligible Applicants may obtain further information from the Caribbean Knowledge and Learning Network (CKLN) Foundation located at the Mutual Trans Nemwil Office Complex, the Villa, St. George’s, Grenada, Monday to Friday 8:30 hours to 16:30 hours/. /A set of documents requisite for completing Expressions of Interest may be requested by interested Applicants on the submission of a written Application to email address shion.thomas(a)ckln.org <mailto:shion.thomas@ckln.org> . These documents will be sent via email. Expressions of Interest should be submitted in two (2) hard copies and one electronic copy in CD format in sealed envelopes, delivered to the address below by */March 10, 2010/*/, /and be clearly marked “Expression of Interest for P/rovision of a Blueprint for the Development and Implementation of National Research and Education Networks/”. The Procurement Officer Caribbean Knowledge and Learning Network (CKLN) Foundation Mutual Trans Nemwil Office Complex The Villa, St. George’s, Grenada, West Indies Tel: 473-439-6396 Fax: 473- 439-6419 shion.thomas(a)ckln.org <mailto:shion.thomas@ckln.org> -- Rudi Daniel e Business Consultant ( Caribbean Region ) http://www.svgpso.org http://oecstimes.wordpress.com “The whole problem with the world is that fools and fanatics are always so certain of themselves, but wiser people so full of doubts.” - Bertrand Russell

1 0

austin eats
by Randy Bush 18 Feb '10

18 Feb '10

is there a nanog austin eats page somewhere? i lost my old link to some wiki we used to use. and, a completely unverified recco from an austin friend (who thinks chicken fried steak is the meat nearest heaven). > I spoke to my colleague who has lived in Austin more recently than I > have. > > He recommends North By Northwest highly, in the Arboretum area. > > http://www.nxnwbrew.com/ > > When I was a Texan in exile, I would always, on returning, worship at > the shrine of Chicken Fried Steak. Threadgill's is a timeless classic > that specializes in it. Ken Threadgill was an Austin legend, who gave > Janis Joplin one of her first paying gigs. Bonus: Manager Eddie Wilson > was the Ranch Boss at the Armadillo World Headquarters, and has a shrine > of posters and pictures from the font of Austin weirdness. > > http://www.threadgills.com/ > > He also recommends Urbanspoon as an online info source. > > http://www.urbanspoon.com/c/11/Austin-restaurants.html > > Welcome, y'all.

15 19

RE: austin eats
by Daniel Fox 18 Feb '10

18 Feb '10

Just ate at iron cactus on 6th and both the talapia and spicy shrimp tacos are phenomonal! Margaritas are really good too... 90 plus tequillas to choose from...great staff Daniel Fox Smarsh Inc ----- Original Message ----- From: Chris Boyd <cboyd(a)gizmopartners.com> Sent: 17 February 2010 14:42 To: North American Network Operators Group <nanog(a)merit.edu> Subject: Re: austin eats On Feb 17, 2010, at 2:04 PM, Will Clayton wrote: > Maudi's on Lake Austin and Taco Deli are always on my menu. We just got some Buffalo Wild Wings in town if you are in to that. If you make it to NXNW get the Calimari. If you wind up ordering pizza, shop local and get the best pizza for the best price in town at Austin's Pizza. Austin's is good, but HomeSlice on South Congress is better, and you can walk on down to Trophy's, Continental Club, or the garden at Guero's and take in a band. http://www.homeslicepizza.com/ http://austin.citysearch.com/profile/10210801/austin_tx/trophy_s_bar_grill.… http://www.continentalclub.com/ http://www.guerostacobar.com/

3 2

RE: Spamhaus ...
by Joel M Snyder 18 Feb '10

18 Feb '10

Matthew Black wrote: >When we licensed Spamhaus a few years back, they required us to set-up a DNS >slave server instead of querying against their public server. They had a >special DNS client that allowed partial zone updates. Turns out we >downloaded huge hourly updates. This is no longer necessary. You can either run your own server (zone transfer-ish) or you can query their servers. When you pay your fee, you get a magic code which you insert in the DNS query, and this lets them know who you are. I second the assertion that others have already made that this is worth the money. We do spam testing, and I can more-or-less guarantee that Spamhaus beats all of the free reputation services (and a number of the for-pay ones) hands-down in its ability to block spam and the incredibly low number of false positives. In case you are interested in more on the topic, I did write a white paper (ob.disc.:Cisco gave me money to write up the white paper based on data I have been collecting for years) on reputation services. John Levine wrote: > > We no longer use Spamhaus, relying instead upon Sender Base Reputation > >Scores (IronPort). >How does the price compare? Well, depending on how you look at it, either horribly or beautifully. You can't buy SenderBase by itself; you get it with an Ironport anti-spam appliance. So if you were going to buy Ironport anyway, the price is "free" which makes it cheaper than Spamhaus. On the other hand, if you just want SenderBase, it'd be a very expensive way to get only the reputation filtering. In general, like many of the big-name anti-spam products, the reputation service is part-and-parcel of the product and can't really be separated out. In fact, with Ironport, they use the reputation service in two ways: one is to block connections in the first place, and the second way is to bias results of their content filter for connections which are accepted. Since their scores are -10 to +10, there's considerable leeway to use the information as part of their anti-spam cocktail beyond simple "go/no-go" of a typical reputation service. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

3 2

Re: Spamhaus ...
by Joel Snyder 18 Feb '10

18 Feb '10

Sharef Mustafa wrote: > What is the title of the white paper you mentioned? > Is it available for free? If not how can I get it? Sorry, I should have put the link to the Best Practices in Reputation Services white paper in. I meant to, but I got distracted writing the disclaimer and forgot to paste the URL. http://www.opus1.com/www/whitepapers/reputationserviceswp.pdf jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0