- Test - lists.nanog.org

Cisco Router best for full BGP on a sub 5K bidget 7500 7200 or other vendor ?
by Alexander Hagen 07 Feb '04

07 Feb '04

I have been looking for a sub 5K router on the used market to support around 30-50 megs peak traffic. I have found the 7507/7513 but these things appear to have been manufactured in 1995 ! Then there is the 7206 and the 7206 VXR - I guess the 7206 itself is just as old as the 7507 and 7513 and the same price at the least - perhaps because of its form factor. The 7206 VXR makes me feel a little better - as it was manufactured in 1999? We are looking at a pure Ethernet environment - but with the desire to support a lot of value added services - such as IPSEC, VoIP, traffic accounting. Cisco's have traditionally been good at PRI and T-1 and T-3 type interfaces - which we don't really need -which leads me to think Foundry might be an option. Juniper appears to be at least 7,000.00 - and I am worried about support - based on other articles I have seen. So the question is would a layer 3 switch be a good idea with a lot of memory - for example the Cat 6509 ? Perhaps foundry BigIron with Jetware ? Please give me your thoughts - it is hard to believe that the 7507 and 7513 are my best options.... Alexander Hagen Etheric Networks Incorporated, A California Corporation 527 Sixth Street No 371261 Montara CA 94037 Main Line: (650)-728-3375 Direct Line: (650) 728-3086 Cell: (650) 740-0650 (Does not work at our office in Montara) Home: (Emgcy or weekends) 650-728-5820 fax: (650) 240-1750 http://www.etheric.net

2 1

Re: Cisco Router best for full BGP on a sub 5K bidget 7500 7200 or othervendor ?
by sthaug＠nethelp.no 07 Feb '04

07 Feb '04

> I have been looking for a sub 5K router on the used market to support > around 30-50 megs peak traffic. ... > We are looking at a pure Ethernet environment - but with the desire to > support a lot of value added services - such as IPSEC, VoIP, traffic > accounting. Cisco's have traditionally been good at PRI and T-1 and T-3 > type interfaces - which we don't really need -which leads me to think > Foundry might be an option. With a pure Ethernet environment, a 7140-2FE with 256 MB should do the job wonderfully. I see a 7140-2FE on Ebay right now for $3000 - you'd probably need some more memory, but under $5000 should be easily doable (even if you want to do it legally and get an IOS license transfer from Cisco). Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no

1 0

RE: Stopping open proxies and open relays
by Vivien M. 07 Feb '04

07 Feb '04

> -----Original Message----- > From: Randy Bush [mailto:randy@psg.com] > Sent: February 7, 2004 1:10 AM > To: Vivien M > Cc: nanog(a)merit.edu > Subject: RE: Stopping open proxies and open relays > > > > I have no objection to the electric chair for script kiddies > > an interesting position. and how do you feel about folk who > violate rfcs? I leave them in your more-than-capable hands to do as you best see fit? ;-)

1 0

RE: Stopping open proxies and open relays
by Michel Py 07 Feb '04

07 Feb '04

> Vivien M. wrote: > The day a couple of grandmothers get taken away in > handcuffs because a script kiddie took up residence > in her computer is the day a few people will wake > up to the fact that computers need regular maintenance... Indeed, but a) won't happen b) even if it could it would be faster to pass a low that allows worm and virus writers to be shot on sight, which won't happen either. Want to stop the problem? Make the bounty $250M instead of $250K. Gee, I'd probably turn myself in for that much. Michel.

1 0

RE: Stopping open proxies and open relays
by Michel Py 07 Feb '04

07 Feb '04

>>> There are valid reasons not to run antivirus software, >> And they are? > P90w/32MB running Win95 used for email only... > or insufficient finances to purchase anti > virus software... to name a couple. Anyone has a used Ford Pinto for sale? I wonder if it would be cheaper to operate than my current Toyota.

1 0

Re: Stopping open proxies and open relays
by Dr. Jeffrey Race 07 Feb '04

07 Feb '04

On Fri, 6 Feb 2004 22:43:39 -0600 (CST), Adi Linden wrote: >I am looking for ideas to stop the spam created by compromised Windows >PC's. This is not about the various worms and viruses replicating but >these boxes acting as open relays or open proxies. > >There are valid reasons not to run antivirus software, coupled with >clueless users, this results in machines that SPAM again just a few hours >after having been cleaned. First step is correctly to specify the system's properties. Yours is not a technical issue but one of user negligence. You have to build the solution around this fact. Curative measures that have worked elsewhere are: 1-Scan every client when it accesses 2-Disconnect compromised clients or route only to a warning page allowing access only to your tech support 3-First cleanup and advice to owner of compromised machine on how to be a good internet member is free; second costs $100; third results in permanent discontinuance of service and refusal to accept back as a client. These measures will fix your problem. Jeffrey Race

1 0

RE: Stopping open proxies and open relays
by Michel Py 07 Feb '04

07 Feb '04

>> Adi Linden wrote: >> There are valid reasons not to run antivirus software, > Robin Lynn Frank > And they are? Some Mac and *nix users (not me) think their platform is invulnerable, therefore there is no need to run anti-virus software as it costs money and consumes CPU and memory. Michel.

1 0

RE: greylisting
by Dmitri Krioukov 07 Feb '04

07 Feb '04

bingo! (did you also mean bgp? :) -- dima. > -----Original Message----- > From: Suresh Ramasubramanian [mailto:suresh@outblaze.com] > Sent: Friday, February 06, 2004 10:39 PM > To: Dmitri Krioukov > Cc: nanog(a)merit.edu > Subject: Re: greylisting > > > Dmitri Krioukov [2/7/2004 9:03 AM] : > > > well, it might not scale only at the global scale :) > > (while its current 'deployment' is far from being global > > as far as i can see) > > So something that is fundamentally unscalable is good when deployed > locally, and bad when it becomes a lot more popular? > > -- > srs (postmaster|suresh)(a)outblaze.com // gpg : EDEDEFB9 > manager, outblaze.com security and antispam operations

1 0

greylisting
by Dmitri Krioukov 07 Feb '04

07 Feb '04

can someone provide any comments on greylisting? how effective is it, etc? thanks, -- dima.

3 3

RE: Verizon Mail Troubles
by Curtis Maurand 06 Feb '04

06 Feb '04

Hello all, Thanks to all who responded to my request for help with verizon email issues. Someone from Verizon did contact me and clued me in as to what was happening. It turns out procmail is rewriting a header with a fqdn for the mail server which doesn't have a specific mx record set for it. Again, Thanks to all who responded. Curtis Maurand Principal Maine Line Systems

1 0