June 2015 - Test - lists.nanog.org

Re: PoC for shortlisted DDoS Vendors
by nanogml＠ddos-mitigator.net 07 Jun '15

07 Jun '15

hi nanog, back in april, Mohamed was reviewing the shortlist of DDoS appliances, would you mind posting a summary of your findings # partial list of DDoS appliances DDoS-Mitigator.net/Competitors ----- ? does anybody know which DDoS appliances uses IPtables to do its mitigation ?? iptables is good because it supports tarpit which can be used to counter attack the incoming TCP-based DDoS attackers ? Does any colo/datacenter ( in silicon valley or Las Vegas ) allow the customers to put a firewall at the ISP end of the pipe to prevent these ICMP/UDP floods from going down the pipe to the customer thanx alvin DDoS-Simulator.net === Simulate DDoS attacks DDoS-Mitigator.net === Defend against incoming DDoS attacks

1 0

RE: PPPoE/IPoE, any recommendations for upgrade?
by Murat Kaipov 07 Jun '15

07 Jun '15

Hello Nasser. We use IPoE in our small ISP. But in my case we use DHCP option 82 and IP address as username for authentication and accounting purposes. As BRAS we configure Cisco ISG. Отправлено с устройства Samsung -------- Исходное сообщение -------- От: Nasser Heidari <nasser(a)rasana.net> Дата: 07.06.2015 9:46 (GMT+03:00) Кому: nanog(a)nanog.org Тема: PPPoE/IPoE, any recommendations for upgrade? Hi, We are currently using PPPoE in our network. I have seen some articles regarding migration of so-called legacy PPPoE to IPoE. After reviewing some of them and implementing IPoE in lab environment using Cisco ASR I didn't fine it that much beneficial to migrate whole system as I need to change a lot of things. For example: - I need to add it's support to our radius and obviously BSS system (E.g. using NAS-PORT-ID instead of username). - For the addressing part, as I have already using distributed BNG's, I need to change some of our policies. (For example assigning address blocks is much easier in PPPoE using framed-route) - I need to change our customers CPE configuration to use Ethernet encapsulation. - I haven't used DHCP in large scale environment. - I don't have any clear Idea/understanding regarding its maintainability/troubleshooting and also security. (Please add if I'm missing any other issue which may run into if I migrate to IPoE) Although it has some benefits, I'm not sure if it's that essential to migrate. Would you please kindly? - Share your Ideas/experiences/best practices in this regard? - If you are already using IPoE, tell more why should I upgrade? - Considering a DSL network with more than 800K customers using PPPoE, do you recommend this migration? Kind Regards, Nasser

1 0

Digitalocean and recent issues
by Randy 07 Jun '15

07 Jun '15

Hello. I work with digitalocean "droplets" or virtual machines for my home business. While great for running cheap websites and server applications, I have noticed recently that I keep getting issues with my other VPN droplet I setup. Firstly, I kept getting blocked by google, it claims automated queries. I don't browse google too often.. Also had an issue with outbound mail on another droplet. Now I'm blocked by... Pizzahut.com Can't order a pizza over my VPN. One might think that there is some virus, but I assure you, there is not, Ive ran tcpdum captures and realtime captures for wireshark, I don't notice any other traffic other then the traffic I initiate by browsing, or doing a few search terms. And I've always paid for my pizza order! Is any one else experiencing issues like this? is there something I'm missing, I have no idea but the pizzahut thing has got me very irked.

3 2

Issue with cache @ 198.6.100.25 (UUNET)
by Phil Daws 07 Jun '15

07 Jun '15

Hello: Hopefully somebody may be able to help us ? Our domain appears to be having issue at 198.6.100.25 and showing the following: innovot.com. 120 IN MX 10 domain.not.configured. Yet when I dig @8.8.8.8 or @8.8.4.4 all works absolutely fine. Our secondaries are all with DNS Made Easy and we did switch from GoDaddy to FastHosts as the registrar. Would somebody be able to flush the cache on the domain please ? Thank you in advance. -- Phil Daws (null)

2 1

Re: eBay is looking for network heavies...
by Larry Sheldon 07 Jun '15

07 Jun '15

On 6/5/2015 23:35, Faisal Imtiaz wrote: > 'pathping' ..... learned something new today... Did not know such a > command existed in windows.. > > Been working with computers for over 30 years, while I don't care as > to what it says about how much I know, but it sure reminds me that > that their is always something more that one can learn ! > > > Thank You. > > :) +1 Amazing. -- sed quis custodiet ipsos custodes? (Juvenal)

2 1

Verizon FiOS outbound mail TLS problem - Superpages people here?
by Jay Ashworth 06 Jun '15

06 Jun '15

Anyone on the list who does outbound delivery for Verizon (which I think is actually Superpages)? A client has smart-hosted outbounds to *one* of his customers bouncing suddenly with Deferred: 403 4.7.0 TLS handshake failed. *My* inclination is to think that a cert expired somewhere, but his non-tech contact there tells him that the tech people think things are ok. I'm trying to get a mailer log fragment from them. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

3 3

Tunable SFP
by Frank Bulk 06 Jun '15

06 Jun '15

Anyone know if tunable SFPs exist? I've googled around on this, but only found fixed wave-length SFPs. Or of a tunable SFP+ that can operate in SFP port as 1G? Frank

2 3

Riot Games
by Alistair Mackenzie 06 Jun '15

06 Jun '15

Hi, Is there anyone on this list from Riot Games that can reach out to me? I'm having some issues with customers reaching your network. Thanks, Alistair

2 1

Re: eBay is looking for network heavies...
by Clayton Zekelman 06 Jun '15

06 Jun '15

Reminds me of: http://dilbert.com/strip/2000-08-31 At 12:27 PM 06/06/2015, Dave Taht wrote: >On Sat, Jun 6, 2015 at 6:53 AM, Brandon Ross <bross(a)pobox.com> wrote: > > I also concur. There is most certainly a > negative correlation between certs > > and clue in my experience, having met 10s of certificate holders. > >Oh good. Maybe my total lack of ever pursuing one of these things is actually >a qualification of sorts? > >I keep searching things like dice and monster out of perverse bemusement, >trying to find anyone actually looking for my actual skillset. > >-- >Dave TÃ¤ht >What will it take to vastly improve wifi for everyone? >https://plus.google.com/u/0/explore/makewififast

1 0

Looking for network administration service
by dave＠fluidhosting.com 06 Jun '15

06 Jun '15

Dear all, We are looking for a network engineer to help us maintain our network. Devices used: Brocade RX4 router and Force10 switches. Is there any company/individuals that can provide such service on a monthly retainer or project basis? Thank you in advance. Regards, -dave

1 0