May 2016 - Test - lists.nanog.org

AT&T postmaster
by 🔓Dan Wing 12 May '16

12 May '16

I help run a community machine (not for my employer) and we've been trying unsuccessfully for a month to get off AT&T's email blacklist; their automated systems claim we're off, but mail is still being blocked. Can an AT&T postmaster drop me an email to help work through this? Thanks. -d

1 0

Re: NIST NTP servers
by Scott Weeks 11 May '16

11 May '16

--- mel(a)beckman.org wrote: From: Mel Beckman <mel(a)beckman.org> Accurate time to the millisecond is pretty much essential for any network troubleshooting. Say you want to diagnose a SIP problem. You collect transaction logs from both phones, the VoIP gateway, and the PBX. Now you try to merge them to derive the sequence of events. You NEED millisecond accuracy. ---------------------------------------- If all logs are sent to a unix server that does syslogd the log entries would go into the file in order no matter what timestamp is on them. scott

3 2

Re: NIST NTP servers
by Scott Weeks 11 May '16

11 May '16

--- gem(a)rellim.com wrote: From: "Gary E. Miller" <gem(a)rellim.com> Yo Scott! On Wed, 11 May 2016 17:20:28 -0700 "Scott Weeks" <surfer(a)mauigateway.com> wrote: > If all logs are sent to a unix server that does > syslogd the log entries would go into the file > in order no matter what timestamp is on them. syslogd can have quite large buffers. --------------------------------------- Wouldn't the buffers empty in a FIFO manner? scott

3 2

TeamNANOG youtube video seeding
by james machado 11 May '16

11 May '16

First I am thrilled to see older Nanog meetings making it to youtube. Having said that can the people putting up the files put the Nanog meeting number in the title of the videos to make it easier to search and determine relevance? Thanks, james

2 1

third party single pole administrator regimes
by Fletcher Kittredge 10 May '16

10 May '16

This is outside plant related. Ignore if all you do is configure routers (not that there is anything wrong with that.) I would be interested in any network provider's experiences with third party single pole administrator regulatory regimes, such as Connecticut's. Please respond privately and I will summarize if there is any interest. thanks -- Fletcher Kittredge GWI www.gwi.net

1 0

Re: NIST NTP servers
by Valdis.Kletnieks＠vt.edu 10 May '16

10 May '16

On Tue, 10 May 2016 08:07:15 -0700, Brandon Vincent said: > On May 10, 2016 7:59 AM, "Stephane Bortzmeyer" <bortzmeyer(a)nic.fr> wrote: > > Yes, but they may switch it off for civilian use (by going encrypted, > > for instance) at any time, if it is better for *their* operations. > > I think you are referring to selective availability which degraded the > positional accuracy for civilians. I seem to recall that the positional accuracy is degraded to "on the order of 200 meters" when selective availability is enabled (and yes, they *can* do it by geographic area by careful turning on/off on each orbit of each satellite - devices are told the signal is degraded and can downvote that signal. So unless you're in the war zone, you'll just notice your device reporting a lock on 2-3 fewer signals). The upshot is that Grace Hopper told us about electricity moving a foot per nanosecond - which means that the time-domain jitter introduced is all of 600 nanoseconds or so. In other words, anybody using it to feed an NTP server will hardly notice on the millisecond level. If you're trying to use NTP to get microsecond stability, you'll notice - but you have enough *other* things to do correctly to do this that it shouldn't be an actual issue...

1 0

VirginMedia AS5089
by Goodwin, Simon T 10 May '16

10 May '16

Can somebody contact me offline from VirginMedia UK regarding a BGP advertisement for 192.34.50.0/24 originating from AS1849 please Thanks Simon

1 0

CALEA
by Justin Wilson 09 May '16

09 May '16

Does anyone have some up-to-date information on CALEA? https://askcalea.fbi.gov/ <https://askcalea.fbi.gov/> has a fair amount of broken links. The servicer provider registration is broken. The web-site has not been updated. Searches on FBI.gov and the FCC site just point back to askcalea. Are any of you still seeing CALEA requests on the voice or the data sides? What is the community hearing about CALEA? Justin Wilson j2sw(a)mtin.net --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting – Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric

3 2

Patch panel solutions for 4x10GE breakout
by Phil Bedard 09 May '16

09 May '16

So the newer equipment we are looking at uses QSFP+/MTP with 4x10GE breakouts to deliver 10G. We are not wiring these up to things in the same rack, they will be going to patch panels and then elsewhere in a facility. It could potentially get messy with the panels we have today so we are looking at other solutions. These are all SM LR connections using LC. There are a lot of SM MTP to LC options since that’s the way most panels are wired, but they typically have 6 duplex LC connectors per MTP and not 4 which isn’t very efficient in this use case. I’ve seen others just use an intermediate LC to LC panel and just wire the breakouts to those and then jumper the other side elsewhere. Anything else others have used? The point of the solution is to keep the wiring mess in front of or near the device to a minimum. Thanks, Phil

6 5

sub $500-750 CPE firewall for voip-centric application
by Ken Chase 09 May '16

09 May '16

Looking around at different SMB firewalls to standardize on so we can start training up our level 2/3 techs instead of dealing with a mess of different vendors at cust premises. I've run into a few firewalls that were not sip or 323 friendly however, wondering what your experiences are. Need something cheap enough (certainly <$1k, <$500-750 better) that we are comfortable telling endpoints to toss current gear/buy additional gear. Basic firewalling of course is covered, but also need port range forwarding (not available until later ASA versions for eg was an issue), QoS (port/flow based as well as possibly actually talking some real QoS protocols) and VPN capabilities (not sure if many do without #seats licensing schemes which get irritating to clients). We'd like a bit of diagnostic capability (say tcpdump or the like, via shell preferred) - I realize a PFsense unit would be great, but might not have enough brand name recognition to make the master client happy plopping down as a CPE at end client sites. (I know, "there's only one brand, Cisco." ASA5506x is a bit $$ and licensing acrobatics get irritating for end customers.) /kc -- Ken Chase - Guelph Canada

21 36