- Test - lists.nanog.org

web site counter-phishing services
by Tim Sanderson 23 Aug '10

23 Aug '10

My company has used Perimeter E-Security's CounterPhish service for a while but we are not completely happy with it. Is anyone familiar with any other vendors that provide such service and are you happy with it?

1 0

DNSSEC and SSL
by ML 23 Aug '10

23 Aug '10

Would a future with a ubiquitous DNSSEC deployment eliminate the market for commercial CAs? Would functioning DNSSEC + self signed certs be more secure/trustworthy than our current system of trusted CAs chosen by OS/browser developers?

12 15

Looking for suggestions for an internet content filtering appliance
by Frank Bulk - iName.com 23 Aug '10

23 Aug '10

We offer an optional internet content filtering service to our residential and business customers using M86's appliance (http://www.m86security.com/products/web_security/m86-web-filtering-reportin g-suite.asp). I've been in conversation with them since Q1 regards IPv6 support, but the update I received today was that IPv6 support won't be available until middle to late next year. That's not ideal, because the local college is a significant user and they started with IPv6 this summer. College students can easily bypass content filtering by using the IPv6 version of the site (i.e. http://www.playboy.com.sixxs.org) Wondering if anyone can point me to a similar appliance. I know that Barracuda has such an appliance but it has one limitation I don't like, and that Fortinet and Ironport have more expensive products. It must be able to operate in pass-by/SPAN mode, not inline, and handle traffic rates up to 1 Gbps. We currently move 400+ Mbps "by" it and internet usage only goes up. Thanks in advance for any suggestions you have. Kind regards, Frank

5 5

Re: PacketShader
by William Pitcock 23 Aug '10

23 Aug '10

Vyatta's commercial products (the bundles with OS+Hardware) come with adequate support in my experience. William (Sorry for topposting. The android email experience is depressingly lacking.) Andrew Kirch <trelane(a)trelane.net> wrote: > On 8/23/2010 1:17 PM, Joel Jaeggli wrote: >> What it really comes down to is packets per watt or packets per dollar, >> if it's cheaper to do it this way then people will, if not BFD. > >I disagree here. Core routing isn't purchased based on cost, it's >purchased based on support. People have not adopted Vayetta, or >Mikrotik or many of the other small routing platforms which are in fact >MUCH cheaper than the bridge or the tree (cisco or juniper), and the >reason is simply support. > >If my router breaks beyond my ability to fix it I have a certified >engineer (of some value or other) at my site with parts to fix it within >4 hours. This is why people go with Cisco and Juniper. It's also a >mechanism of CYA. Would we rather tell our boss that the company has >responded and dropped the replacement part in the mail, or that a >technician from the router supplier is on their way and will be here >very shortly, and ooh, by the way, you did recommend redundant hardware >when the piece that broke was purchased, and it was available at a discount. > >Andrew >

1 0

BCP38 exceptions for RFC1918 space
by Florian Weimer 23 Aug '10

23 Aug '10

What's the current consensus on exempting private network space from source address validation? Is it recommended? Discouraged? (One argument in favor of exceptions is that it makes PMTUD work if transfer networks use private address space.)

12 18

Re: Other NOGs around the world?
by MARLON BORBA 23 Aug '10

23 Aug '10

Brazil's GTER (portuguese acronym for Network Operation and Engineering Workgroup). Exclusively in Brazilian Portuguese. http://gter.nic.br Next national meeting scheduled for November 25-27. Abraços, Marlon Borba, CISSP, APC DataCenter Associate Técnico Judiciário · Segurança da Informação IPv6 Evangelist · Moreq-Jus Evangelist Comissão Local de Resposta a Incidentes - CLRI TRF 3 Região (11) 3012-2030 (VoIP) -- Você já elaborou seu PLANO DE CONTINUIDADE DE NEGÓCIOS? -- >>> Pierre-Yves Maunier 22/08/10 20:15 >>> 2010/8/22 Rogelio > What other "network operator groups" are there around the world (besides > NANOG)? [...]

2 1

Other NOGs around the world?
by Rogelio 23 Aug '10

23 Aug '10

What other "network operator groups" are there around the world (besides NANOG)? (I'd like to follow them to see what types of issues they see in their countries)

18 17

diffrence between two bgp router router:
by piotr.1234＠interia.pl 22 Aug '10

22 Aug '10

Hi I try to compare two routers to new DC: Juniper mx240/480 with card "R" and Foundry NetIron XMR 8/16000. There is big diffrence in price. I don't know Foundry router's so it's hard to me to compare this two routers. Someone has expierence with both ? configuration Foundry: NI-XMR-16-AC NI-XMR-10Gx4 NI-XMR-1Gx20-SFP and Juniper: MX240BASE-AC-HIGH DPCE-R-4XGE-XFP DPCE-R-40GE-SFP thx for help Piotr ---------------------------------------------------------------------- Teraz w PZU, kupując AC, otrzymujesz 10% zniżki na OC http://linkint.pl/f27de

1 0

Calculating Cost
by Kasper Adel 22 Aug '10

22 Aug '10

Hello everyone, How would you calculate the cost of a network outage, specifically if its related to a software bug or a misconfiguration. Suppose that this could have been avoided by testing in a lab before deployment, how can i calculate that too? Unicast replies are welcomed. Cheerio, Kim

2 1

iPad apps tested at cable companies
by Rogelio 22 Aug '10

22 Aug '10

A lot of cable operators I'm working seem to be doing a lot with the iPad (particularly apps that control TV programming). Is anyone else seeing a lot of this? (Wish I could find a URL of what I was looking at, but can't find anything)

2 1