July 2010 - Test - lists.nanog.org

re: Rate Limiting on Cisco Router
by Nick Olsen 08 Jul '10

08 Jul '10

That's strange, Are you paying for a CIR of 80Mb/s? Normally they only leave the limiting up to you if its more of a burstable connection, Like you pay for 80Mb/s but its a full line rate interface and its billed per Mb/s over 80 on a 95th percentile scheme. If that is the case you can safely go over 80Mb/s for a certian amount of time per month, Assuming its billed monthly. Nick Olsen Network Operations (321) 205-1100 x106 ---------------------------------------- From: "Alan Bryant" <alan(a)gtekcommunications.com> Sent: Thursday, July 08, 2010 6:07 PM To: nanog(a)nanog.org Subject: Rate Limiting on Cisco Router Thanks again for all the responses to my previous post. We have a Cisco 7206VXR router with IOS of 12.4(12) and a PA-POS-1OC3 card ofr our OC3. The problem we have now is that we are only paying for 80 MB/s of the OC-3, and the ISP is leaving the capping of it up to us. I have googled and the only things I can find is that you can not do a real cap on this type of interface. We have tried the rate-limit command with various parameters and we are unable to keep it at 80. I have read that this is not the correct way to do it, but I'm not sure what is. Any advice? Pointers appreciated. -- Alan Bryant | Systems Administrator Gtek Computers & Wireless, LLC. alan(a)gtekcommunications.com | www.gtek.biz O 361-777-1400 | F 361-777-1405

1 0

Email over v6
by Zaid Ali 08 Jul '10

08 Jul '10

Are there any folks here who would be inclined to do SMTP over IPv6? I have a test v6 network with is ready to do email but getting some real world data to verify headers would be more helpful. Please send me an email offlist if you are interested. Thanks, Zaid

7 9

NANOG50 conference info ?
by Leslie 07 Jul '10

07 Jul '10

Does anyone have the location of NANOG50 ? I am trying to coordinate my travel due to another conference in Atlanta right before NANOG. Thanks! Leslie

2 1

DNS traffic sourced from my address space to myself.
by Drew Weaver 07 Jul '10

07 Jul '10

Howdy, Recently I have been noticing a good amount of totally bogus DNS traffic coming in on my transit links via my own IP addresses (spoofed). SLOT 2:Jul 2 11:26:02 EDT: %SEC-6-IPACCESSLOGP: list 119 permitted udp x.x.145.161(0) -> x.x.145.235(0), 1 packet SLOT 2:Jul 2 11:26:02 EDT: %SEC-6-IPACCESSLOGP: list 119 permitted udp x.x.146.74(0) -> x.x.145.235(0), 1 packet SLOT 2:Jul 2 11:26:02 EDT: %SEC-6-IPACCESSLOGP: list 119 permitted udp x.x.146.70(0) -> x.x.145.235(0), 1 packet SLOT 2:Jul 2 11:26:02 EDT: %SEC-6-IPACCESSLOGP: list 119 permitted udp x.x.146.57(0) -> x.x.145.235(0), 1 packet There are multiple different instances of this traffic, the pattern seems to be: -The source is always 'my own IPs' and obviously spoofed. -It's DNS traffic -The "source addresses" all seem to be randomly chosen from the same /23 as the destination address (they cycle through randomly). Has anyone else noticed anything similar coming in on their transit links or am I just lucky? Normally my iACL catches this but I've just been noticing more of it lately. -Drew

3 2

Overseas - Latency
by Eric Williams 07 Jul '10

07 Jul '10

We have several customers that are reporting horrible latency when coming from overseas (Israel, Europe, etc...) Looking at a few global maps for latency, I don't see any issues. Does anybody know of any fiber cuts or any issues currently going on? FYI, the customer in question at my datacenter currently uses Level3 and Cogent and we reside in St. Louis.

5 5

Mikrotik & OC-3 Connection
by Alan Bryant 06 Jul '10

06 Jul '10

I haven't seen much traffic on this list about Mikrotik or RouterOS, but I thought it was worth a shot as a last ditch effort to get this going. Does anyone know of a solution to connect a POS OC-3 to a router running Mikrotik's RouterOS? I have searched google extensively with varying phrases and nothing helpful comes out of it. -- Alan Bryant | Systems Administrator Gtek Computers & Wireless, LLC. alan(a)gtekcommunications.com | www.gtek.biz O 361-777-1400 | F 361-777-1405

16 22

Re: Mikrotik & OC-3 Connection
by Jonathon Exley 06 Jul '10

06 Jul '10

In terms of FOSS routing platforms, I think Vyatta has a better user interface than Mikrotik. IMHO if the CLI is awkward then there a higher risk of misconfiguration. I haven't used either enough to comment about stability. Jonathon. This email and attachments: are confidential; may be protected by privilege and copyright; if received in error may not be used, copied, or kept; are not guaranteed to be virus-free; may not express the views of Kordia(R); do not designate an information system; and do not give rise to any liability for Kordia(R).

5 5

Penetration Test Vendors - The List
by George Bonser 06 Jul '10

06 Jul '10

Quite a varied list. As one respondent put it (possibly paraphrased) "security testing is like underwear, everyone has their own preference". In this case we are likely to go with one of the vendors suggested by our client who has done work for them before and who they feel comfortable with. Thanks for your feedback, everyone, and I hope I didn't miss any. VZB (Verizon Business) IBM ISS (multiple positive) SecureWorks MSS (multiple positive recommendations, multiple negative) Sysnet (sysnet.ie) Deloitte (reported poor result) British Telecom Managed Services Mandiant Inguardians (multiple positive) Metasploit Rapid7 BreakingPoint Counterpane MWR Infosec Corsaire KPMG (negative) Vulnerability Research Labs C2 Company Fishnet Security Neohapsis Trustwave/Ambiron (multiple positive, multiple negative) Terremark Qualys Foundstone Netcraft Patch Advisor Praetorian Global Netragard Enclave Core Security Technologies Matasano Stach & Liu Gotham Digital Science Secure Network Technologies

1 0

[NANOG-announce] NANOG 50 Call for Presentations now available
by David Meyer 06 Jul '10

06 Jul '10

Folks, Its time to start thinking about the presentation(s) you want to give at NANOG 50. NANOG 50 is our annual joint meeting with ARIN, so there will be great opportunities to present both the NANOG and ARIN communities. We had a great deal of content for NANOG 49 so if your talk wasn't accepted please consider resubmitting for NANOG 50. The Call for Presentations can be found on http://nanog.org/meetings/nanog50/callforpresent.php Looking forward to seeing all of you in Atlanta. Dave (for the NANOG PC) _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Re: XO feedback
by Net 05 Jul '10

05 Jul '10

Thanks for reaching out Brian. We'll certainly keep Saavis in mind and advise as deemed fit. Regards, On 7/1/10, Bellis, Brian <Brian.Bellis(a)savvis.net> wrote: > Dear Funky Fun, > > Have you consider Savvis for IP transit. We are a Tier 1 IP backbone > provider operating AS-3561. We announce approximately 23% of all > internet routes on our backbone and are privately peered with all other > Tier 1 providers meaning we don't buy upstream to gain access to routes. > We are very price competitive and offer fixed and burstable pricing. We > are located in virtually every telehouse across the US and have PoPs in > London, Paris, Frankfurt and Amsterdam. > > No pressure here and no need to respond if you are not interested. Just > wanted to give you another option you may have not considered. Thank > you. > > Best regards, > > Brian > > > > Brian Bellis | Sr. Sales Director Service Providers > > > > Savvis > 2355 Dulles Corner Blvd, Herndon, VA 20171 > Office: 703.667.6254 | Mobile: 202.997.1336 | Fax: 703.880.7239 > > E-mail: brian.bellis(a)savvis.net > > www.savvis.net > > > > > -----Original Message----- > From: Net [mailto:funkyfun@gmail.com] > Sent: Thursday, July 01, 2010 7:52 AM > To: nanog(a)nanog.org > Subject: XO feedback > > Hi, > > We're currently looking to buy transit from XO for one of our DCs. > Their pricing is very competative compared to some of the other > providers we've considered to date. > > I'm hoping to get some feedback on their services, support, peering > arrangements and the overall stability of their core backbone network > from folks who've had experience or currently using them. > > Any info would be greatly appreciated. > > Thanks in advance > > -- > Sent from my mobile device > > > This message contains information which may be confidential and/or > privileged. Unless you are the intended recipient (or authorized to receive > for the intended recipient), you may not read, use, copy or disclose to > anyone the message or any information contained in the message. If you have > received the message in error, please advise the sender by reply e-mail and > delete the message and any attachment(s) thereto without retaining any > copies. > -- Sent from my mobile device

6 6