- Test - lists.nanog.org

Re: Common operational misconceptions
by Bob Vaughan 21 Feb '12

21 Feb '12

"Ethernet/Token Ring/Cisco Console/whatever uses an RJ45 connector" RJ45 defines a keyed 8P8C type connector, wired in a specific manner, for a specific 2 wire telco service. Incompatible with the above on several levels. "RJxx" == specific connector/wiring pattern for specific telco applications. Non-telco uses need not apply. One of these days I'm going to start carrying around some actual RJ45 type cables to hand out to those who ask. "DB9" DB defines a D series subminiature connector with a size "B" (nominal 25 pin) shell. DE defines a size "E" (nominal 9 pin) shell. DA15, DB25, DC37, DD50, DE9, etc.. Also DB13W3 (old Sun monitors), etc. If in doubt, refer to ITT/Cannon catalogs. (my oldest is from 1971). -- -- Welcome My Son, Welcome To The Machine -- Bob Vaughan | techie(a){w6yx|tantivy}.stanford.edu | techie(a)tantivy.net AF6RR | P.O. Box 19792, Stanford, Ca 94309 | 1-650-469-3850 -- I am Me, I am only Me, And no one else is Me, What could be simpler? --

5 4

Single-port Network "KVM"
by Jay Ashworth 21 Feb '12

21 Feb '12

Here's one example; cheapest I've seen: http://www.kvm-switches-online.com/0su51068.html There are others. This one appears to be web/java based rather than VNC, though that probably isn't a killer for most people. I thought I'd seen a little dongle-y model; I'll look around a bit more. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

5 5

Bluetooth-to-Serial (was: Re: Colo Vending Machine)
by Joel M Snyder 20 Feb '12

20 Feb '12

+1 on the suggestion for a SpiderDuo as portable KVM+your own laptop. Solves the problem and leverages the hardware you already have. Works great! Anyway: Bluetooth-to-Serial has been around for years; I did a review of several of them a while ago, even connecting with a Nokia phone (this was before iPhone/iPad existed) in a little Interop video piece in Network World. The IOGear BT-to-Serial is the most common nowadays; it is inexpensive and works pretty well and it is specifically designed for this kind of console environment. It draws 9V, so you can make a 9V battery-to-device adapter for about $2 with parts you get at Digikey if you want total portability. There are also more 'industrial' versions which are designed for longer-term use. My favorite is the BluePortXP, which has an integrated rechargeable battery, a nice little antenna, and can be externally powered if needed. That's pricey, closer to $200 as I remember, but it is designed for longer-term use in a single location. There are others along this line, a quick Google search will find them, mostly in the industrial PC-type businesses. The one I actually use almost every day is called a BlueConsole. These, unfortunately, are not available anymore. A Cisco engineer in Florida (I think) made them as a "Garagatronics" project years ago. It is a lovely piece of work, available with either a DB9 OR a RJ45 male on it, a 9V battery connector on the other end, and also powered from the serial port if available. You can dangle the RJ45 one from a Cisco router literally forever without a battery and it will BT-to-serial for 20 or 30 feet. If you can find one, buy it as it's the perfect compromise between the BluePort and the IOGear. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

facebook.com DNS not found 20120218 2125 UTC
by Everett Batey 20 Feb '12

20 Feb '12

facebook.com DNS not found 20120218 2125 UTC Is there any outage information for DNS for facebook.com / www.facebook.com ? "Oops! Google Chrome could not find www.facebook.com" On Fri, Feb 17, 2012 at 11:26 PM, <nanog-request(a)nanog.org> wrote: > Send NANOG mailing list submissions to > nanog(a)nanog.org > > -- R/ Everett Batey / Skype: wa6cre-10 / efbatey(a)gmail.com or efbarc(a)cotdazr.org or wa6cre(a)rabbitradio.org or lioneverett(a)gmail.com Lions 4-A3 Calendar / CrisisLinks http://bit.ly/cw95Um Please visit So Calif Linux Expo http://www.socallinuxexpo.org (805) 616-2471 / G-Talk/Twitter: efbatey

7 6

X.509 Certs For Personal Use
by Leo Bicknell 20 Feb '12

20 Feb '12

On the heals of some of the most productive conversation I've seen on NANOG in ages, let me try another topic! I suspect most people on NANOG are in the same boat that I'm in, we operate some small number of domains for ourselves, friends, family, and projects we like. I suspect many of us are also security conscious and would like to use encryption as often as possible. Unfortunately to communicate with random folks on the Internet you need an "SSL Certificate" signed by a "Trusted Root". Ok, we can argue about that, but that's what I'm going to assume for my question. That could be a cert for a web server, a mail server, a jabber server, or even a personal e-mail certificate. What I've found is a few classes of service: - Totally free, but the Root CA is not well distributed (or other issues). - Free for "one" (perhaps one web, one e-mail) on a well distributed CA, major upcharge for more. - Services for businesses designed for maintaining multiple domains and certs starting at $high and ending at $crazy. I am _not_ looking for a free only alternative, but I am looking for a fee structure and price that makes _personal_ use economically workable. I'd love to support community based efforts, but the reality is random folks will be accessing my web site, sending me e-mail, etc, so I want certs that are signed by root certs that ship with OSX/Windows/Linux, they should "just validate". I also do not require "EV" certificates, although being able to get one for an upcharge might be nice. Are there any providers that target someone with my desires? What providers do NANOG folks use for their _personal_ needs? -- Leo Bicknell - bicknell(a)ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/

8 11

Dynadot DNS acting up?
by Chris 20 Feb '12

20 Feb '12

Anyone noticing issues with Dynadot (site is down) and Dynadot related domain names where you are using their DNS servers? -- --C "The dumber people think you are, the more surprised they're going to be when you kill them." - Sir William Clayton

2 1

public scalable vpn?
by Randy Bush 19 Feb '12

19 Feb '12

academics in ontario are gonna need a scalable vpn service until they find jobs elsewhere. http://www.cautbulletin.ca/en_article.asp?SectionID=1386&SectionName=News&V… i can only handle a dozen or so. anyone running anything at scale? randy

4 4

CLEC in NJ for Sprint/Centurytel
by chris 19 Feb '12

19 Feb '12

Hello, We use DSL as a backup for some of our client sites where there is no better alternative. I am looking for a preferably facilities based CLEC in NJ who can provide us with DSL in sprint/centurytel territories. If anyone has any recommendations for companies which can do this, experiences, etc it would be great. Thanks, chris

1 0

DNS Attacks
by toor 18 Feb '12

18 Feb '12

Hi list, I am wondering if anyone else has seen a large amount of DNS queries coming from various IP ranges in China. I have been trying to find a pattern in the attacks but so far I have come up blank. I am completly guessing these are possibly DNS amplification attacks but I am not sure. Usually what I see is this: - Attacks most commonly between the hours of 4AM-4PM UTC - DNS queries appear to be for real domains that the DNS servers in question are authoritive for (I can't really see any pattern there, there are about 150,000 zones on the servers in question) - From a range of IP's there will be an attack for approximately 5-10 minutes before stopping and then a break of 30 minutes or so before another attack from a different IP range - Every IP range has been from China I have limited the number of queries that can be done to mitigate this but its messing up my pretty netflow graphs due to the spikes in flows/packets being sent. Does anyone have any ideas what the reasoning behind this could be? I would also be interested to hear from anyone else experiencing this too. I can provide IP ranges from where I am seeing the issue but it does vary a lot between the attacks with the only pattern every time being the source address is located in China. I read a thread earlier, http://seclists.org/nanog/2011/Nov/920, which sounds like the exact thing I am seeing. Thanks

10 9

Re: NANOG Digest, Vol 49, Issue 70
by Mike Bailey 18 Feb '12

18 Feb '12

I have yet to receive one of these, but I rarely post to nanog. Could you post up the email headers for us to see? I'm curious to see if it actually originated from a telx mailserver, according to their TXT/SPF records they use messagelabs.com, mktomail.com, and intermedia.net. On 02/17/2012 08:13 AM, nanog-request(a)nanog.org wrote: > So, anyone else get spammed by Telx after posting to nanog? > > This is massively unprofessional. > > Nick > > -------- Original Message -------- > Subject: RE: telx > Date: Fri, 17 Feb 2012 13:47:25 +0000 > From: George Fitzpatrick<gfitzpatrick(a)telx.com> > To: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx > > Hi xxxxxxxxxxxx, > > We have some exciting things happening here at Telx that can help your > network connectivity. > Can we chat for 5 minutes? > > Thanks, > George > 917.371.7257

2 1