- Test - lists.nanog.org

Re: job screening question
by Nick Olsen 05 Jul '12

05 Jul '12

+1 I have people waive the "I'm Cisco Certified" flag in my face all the time. Then proceed to ask me if we have a T1. To the point that it's no longer a valuable achievement in my eyes. I'm certified to perform CPR in the state of Florida... I should go apply for a surgeon position at the local hospital. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "James M Keller" <jmkeller(a)houseofzen.org> Sent: Thursday, July 05, 2012 1:19 PM To: "Oliver Garraux" <oliver(a)g.garraux.net>, nanog(a)nanog.org Subject: Re: job screening question On 7/5/2012 1:11 PM, Oliver Garraux wrote: > Seems fairly straightforward to me. It'll break path MTU discovery. > > I would hope someone applying for an "IP expert" position would know that. > > Could HR be mangling the question or something? > > Oliver > > ------------------------------------- > > Oliver Garraux > Check out my blog: www.GetSimpliciti.com/blog > Follow me on Twitter: twitter.com/olivergarraux > > > On Thu, Jul 5, 2012 at 1:02 PM, William Herrin <bill(a)herrin.us> wrote: >> Hi folks, >> >> I gave my HR folks a screening question to ask candidates for an IP >> expert position. I've gotten some "unexpected" answers, so I want to >> do a sanity check and make sure I'm not asking something unreasonable. >> And by "unexpected" I don't mean naively incorrect answers, I mean >> oh-my-God-how-did-you-get-that-cisco-certification answers. >> >> The question was: >> >> You implement a firewall on which you block all ICMP packets. What >> part of the TCP protocol (not IP in general, TCP specifically) >> malfunctions as a result? >> >> >> My questions for you are: >> >> 1. As an expert who follows NANOG, do you know the answer? Or is this >> question too hard? >> >> 2. Is the question too vague? Is there a clearer way to word it? >> >> 3. Is there a better screening question I could pass to HR to ask and >> check the candidate's response against the supplied answer? >> >> Thanks, >> Bill Herrin >> >> >> -- >> William D. Herrin ................ herrin(a)dirtside.com bill(a)herrin.us >> 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> >> Falls Church, VA 22042-3004 >> > You would be surprised by some of the people I get off the street applying for senior network engineering positions who couldn't connect up a SOHO router and a dumb switch and make them work, let alone understand how PMTU discovery works. -- --- James M Keller

1 0

ipv6forum.com/nav6.org contacts
by Wouter Prins 05 Jul '12

05 Jul '12

hi all, Is there anyone active on this list who is actively working on/at ipv6forum.com/nav6.org? I tried to contact both administrative and technical contacts listed under the domain, but no response so far. Please unicast me in case you do. :) Thanks in advance! -- Wouter Prins wp(a)null0.nl

2 1

Re: Cisco Update
by Edward Salonia 05 Jul '12

05 Jul '12

Let's remember, this is regarding Cisco's consumer grade routers (formerly linksys) which are primarily intended for connecting small networks (homes, offices) to the internet over some type of broadband connection. Can they be used. On a network with no internet connectivity? Sure. But this, as I'm sure many will agree, is not the environment in which they were intended to be deployed. Nor do I believe are they marketed as such. - Ed ------Original Message------ From: Jon Lewis To: Sean Harlow Cc: nanog(a)nanog.org Subject: Re: Cisco Update Sent: Jul 5, 2012 12:42 PM On Thu, 5 Jul 2012, Sean Harlow wrote: > On Jul 5, 2012, at 11:24, Joe Greco wrote: > >> And what happens when your *cough* "router" isn't actually on the >> Internet? How can it be managed and upgraded on a regular old network? > > If there is no internet connection, you get a very limited page that's apparently only really good to get you back online. Routers are sometimes used on networks that don't have internet connectivity [by design]. This seems amazingly short-sighted for a company that's been around selling routing gear as long as cisco. ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

1 0

IPv6 security tools released
by Fernando Gont 05 Jul '12

05 Jul '12

Folks, A bunch of IPv6 security tools I produced these last couple of years have been posted online at: <http://ipv6securitylab.org/ipv6toolbox.html>. Not sure whether this was really intended, but since a number of folks have already noted (off-list) that this "release" has been announced on a number of pages and twitter accounts, I thought it would be better to let you guys know about it (i.e., "the cat is out of the bag, already"). The tools compile & run on Linux and *BSD, and I'm planning to port them to Mac OS too (if only I had such a box... sigh :-) ). Any feedback will be welcome. P.S.: The slideware at: <http://www.si6networks.com/presentations/hip2012/fgont-hip2012-hacking-ipv6…> might give you some hints regarding how to use some of the tools. Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

2012 Global IPv6 Deployment Survey - Please take a moment to complete!
by John Curran 05 Jul '12

05 Jul '12

NANOG Folks - IPv6 - You may love it (or hate it) but either way it would be good to take just a few moments to complete the Global IPv6 Deployment Survey (see attached). The survey is being conducted in cooperation with the Regional Internet Registries in order to better understand IPv6 deployment trends. Global IPv6 Deployment Survey: <https://www.surveymonkey.com/s/GlobalIPv6survey2012> Thanks! /John John Curran President and CEO ARIN === Global IPv6 Deployment Survey Extended to 13 July 2012 Our thanks to those who have completed the 2012 IPv6 Deployment Monitoring Survey. If you have not yet participated, there is still time! The survey has been extended to Friday, 13 July. If you haven¹t yet, we would appreciate if you could take a few minutes to complete the survey at: https://www.surveymonkey.com/s/GlobalIPv6survey2012 The purpose of the survey is to better understand what can be done to increase IPv6 adoption worldwide. The findings from the 2012 survey will be compared to previous years to give a perspective on progress in various regions and globally. For those interested, the results of last year's survey are available at: http://www.nro.net/wp-content/uploads/ipv6_deployment_survey.pdf. The results will be presented and discussed widely. Please provide your name and contact information on the survey form if you wish to receive the draft survey analysis when available. Please also indicate whether you are willing to share additional data with the TNO and GNKS Consult IPv6 Deployment Monitoring team. We appreciate your time and interest in completing this survey. If you have any questions concerning the survey, please send an email to: info(a)gnksconsult.com<mailto:info@gnksconsult.com> Regards, Communications and Member Services American Registry for Internet Numbers (ARIN

1 0

ACTA rejected by EU Parliment
by Patrick W. Gilmore 05 Jul '12

05 Jul '12

<http://www.bbc.com/news/technology-18704192> This is very good news, IMHO. And operationally relevant, even to North American operators. -- TTFN, patrick

1 0

FYI Netflix is down
by Joe Blanchard 04 Jul '12

04 Jul '12

Seems that they are unreachable at the moment. Called and theres a recorded message stating they are aware of an issue, no details. -Joe

42 84

Arbor network
by Waseem 04 Jul '12

04 Jul '12

Hi, Anybody using Arbor Peakflow? Can tell us about its efficiency? Any other DDoS detection and mitigation product ? Regards, Waseem

1 0

Re: FYI Netflix is down
by Steven Bellovin 03 Jul '12

03 Jul '12

On Jul 2, 2012, at 3:43 PM, Greg D. Moore wrote: > At 03:08 PM 7/2/2012, George Herbert wrote: > > If folks have not read it, I would suggest reading Normal Accidents by Charles Perrow. Strong second to that suggestion. --Steve Bellovin, https://www.cs.columbia.edu/~smb

3 2

DNS poisoning at Google?
by Matthew Black 03 Jul '12

03 Jul '12

Google Safe Browsing and Firefox have marked our website as containing malware. They claim our home page returns no results, but redirects users to another compromised website couchtarts.com. We have thoroughly examined our root .htaccess and httpd.conf files and are not redirecting to the problem target site. No recent changes either. We ran some NSLOOKUPs against various public DNS servers and intermittently get results that are NOT our servers. We believe the DNS servers used by Google's crawler have been poisoned. Can anyone shed some light on this? matthew black information technology services california state university, long beach www.csulb.edu<http://www.csulb.edu>

15 23