- Test - lists.nanog.org

Re: 2 Wire T1 - HDLC
by Jared Mauch 15 May '01

15 May '01

I should have mentioned that i'm in MI/Ameritech - Jared On Tue, May 15, 2001 at 02:27:47PM -0400, Joe Barnhart wrote: > > I actually have one to my home delivered as a single pair. > > JB > > On Tue, 15 May 2001, Jared Mauch wrote: > > > > > I have 2 T1's that are delivered as a single pair per T1. > > > > - Jared > > > > On Mon, May 14, 2001 at 05:41:01PM -0400, mike harrison wrote: > > > > > > John Tamplin: > > > > the smartjack extracts the T1 -- I have two of these in my house, using > > > > Pairgain (now ADC)'s HiGain Solitaire H2TU.R402 for T1 transport. The URL > > > > of the frame describing the product line is at (minus any line breaks or > > > > spaces added along the way): > > > > http://www6.adc.com/ecom/wps?lineid=OND2737&group=T1%2bTransport%252FHiGain… > > > > This specific card is under HDSL2 RT Modules. > > > > > > Thats the units we have on the wall for some recent T1 installs as well. > > > So far working very well.. Yes, it is HDSL, It's not 2 x 786K sDSL or > > > whatever as stated in the original posted email that I responded to. > > > > > > Whats funny is I got 2 private emails from BellSouth engineering types > > > that did not know they were being installed in this region. > > > > > > > > > > > > > > > > > > > > > > > > > -- > > Jared Mauch | pgp key available via finger from jared(a)puck.nether.net > > clue++; | http://puck.nether.net/~jared/ My statements are only mine. > > > > > ------------------------- > Joseph Barnhart > Florida Digital Turnpike > Network Administrator > http://www.fdt.net > ------------------------- -- Jared Mauch | pgp key available via finger from jared(a)puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

1 0

Re: looking for some bits in SE wisconsin
by Casey Ransom 15 May '01

15 May '01

area code/phone number is 262 728 6464. ----- Original Message ----- From: "Philip Walenta" <pwalenta(a)emasterlink.com> To: "'Casey Ransom'" <ccransom(a)students.wisc.edu> Sent: Tuesday, May 15, 2001 12:38 PM Subject: RE: looking for some bits in SE wisconsin > What area code/office code will the pipe you're looking for be terminated? > > -----Original Message----- > From: Casey Ransom [mailto:ccransom@students.wisc.edu] > Sent: Tuesday, May 15, 2001 12:07 PM > To: nanog(a)nanog.org > Subject: looking for some bits in SE wisconsin > > > > Hi, I'm from Delavan, WI and was looking around for places to hook up with > bandwidth. I'm slightly inexperienced with large scale pipes, so I came > here for a hand. We don't have a very large operation, but need more than > dual channel isdn. The guy that referred me here just told me to say "HEY > IM FROM BUMFUCK WI AND IM LOOKING FOR BITS" (yeah, thanks ben). Anyway, any > help is appreciated.-- > > Casey Ransom > ccransom(a)students.wisc.edu > > > ps- don't say DSL >

1 0

looking for some bits in SE wisconsin
by Casey Ransom 15 May '01

15 May '01

Hi, I'm from Delavan, WI and was looking around for places to hook up with bandwidth. I'm slightly inexperienced with large scale pipes, so I came here for a hand. We don't have a very large operation, but need more than dual channel isdn. The guy that referred me here just told me to say "HEY IM FROM BUMFUCK WI AND IM LOOKING FOR BITS" (yeah, thanks ben). Anyway, any help is appreciated.-- Casey Ransom ccransom(a)students.wisc.edu ps- don't say DSL

1 0

Security practices
by Roeland Meyer 15 May '01

15 May '01

> From: Adam McKenna [mailto:adam@flounder.net] > Sent: Monday, May 14, 2001 11:18 PM > > On Mon, May 14, 2001 at 05:27:09PM -0400, Christopher A. > Woodfield wrote: > > > > I didn't intend to imply that matching forward/reverse DNS > was a security > > measure I'd trust by itself, but it certainly doesn't hurt > to implement as > > a "outer perimeter" measure in conjunction with IP-based rules and > > secure authentication... > > It does hurt. It causes non-obvious problems. Forcing > hostnames and PTR's > to match (commonly referred to as PARANOID checking) does not > provide extra > security, it just prevents people with badly configured DNS > from accessing > your servers. IOW, it lets lazy/incompetent ISPs and SysAdms get away with not being thourough. Actually, basic security isn't that bad, if you tighten up the ship such that, you are doing what you are supposed to be doing ...exactly... and no more. Cut out the slop and most things work better, with fewer holes. This is on the principle that memcpy, strcmp, and strcpy are the biggest (only?) security holes on the net (and why open-source is the only acceptable source of security related code). Reverse checks work if you run your own zone servers and control your own in-addr.arpa entries and they are all on the same LAN/net-block. Clone a [RFC 2870] root zone server into this and you are almost spoof proof. When accessing your own hosts, you shouldn't be going outside your LAN for any authentication or host reference data (the single reason spoofs work at all) nor should your packets leave your LAN.

1 0

re: in-addr survey
by ggm＠apnic.net 15 May '01

15 May '01

Hi. I'm new here, I hope I'm not in breach of AUP diving in. Some time ago (2-3 years?) I discussed how a large mirror site could use BGP information to modify common log format logging in apache to dump BGP source-AS information. The idea was to tag the logline with the AS of the neighbour of the ISP the mirror was hosted on, so the inbound path could be determined. Actually, the idea was to do the (much smaller than exhaustive IP) work to tag things in one of 3 or 4 classes which could be named: on-net # this ISP, or zero-cost equivalents domestic# at least I know its onshore offshore# came on a slow/long link Glenn (its aarnet) worked out a simple hack on Zebra to make this fly. I didn't deploy it, because first approximation the simple dumps of IP for on-net and domestic were enough to let me sinbin all the rest to offshore. Well, I thought so, but history proved me wrong. Anyway. My point is that BGP is your friend. It should be both cheap (as cheap as a routing lookup, which for an application writing a log to disk like apache is cheap, at least compared to DNS lookup) and very cacheable. Why don't more applications do this? Why is this not viable for implementing things like on/offshore applications policy, egregiously wrong though it may be from a libertarian aspect? cheers -George

2 1

2 Wire T1 - HDLC
by wb8foz＠nrk.com 15 May '01

15 May '01

Of course, this whole flame-fest is pointless. T-1 can't be 2-wire. T-1 is a facility. Circa 1962, it *carries* DS-1 format bits, over 2 pairs, with repeaters every 6Kft (except the first is 3Kft from the CO..). {Gee, the exact spacing of 88mH load coils....must be coincidence..} You can get those DS-1 bits (that's what really you want...) delivered over: T-1, HDSL, as part of something bigger, <RFC-1149>, whatever. And 95% of the time, you likely don't care....as long as the bits arrive. Just like the guy downstream does not care if you have a cisco 9000 or a HAL 9000, as long as his service stays up. Can we go back to worrying about things that SHOULD scare all of us, such as MPAA, COPA, RIAA, and CALEA; rather than worrying about the ghostly remains of RabbitNet? -- A host is a host from coast to coast.................wb8foz(a)nrk.com & no one will talk to a host that's close........[v].(301) 56-LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead....................................20915-1433

1 0

RE: To CAIS Engineers - WAKE UP AND TAKE CARE OF YOUR CUSTOMERS
by Roeland Meyer 15 May '01

15 May '01

> From: Vivien M. [mailto:vivienm@dyndns.org] > Sent: Monday, May 14, 2001 2:44 PM > As someone posted before (but you probably didn't read): Actually, I read it just fine. Yes, that is the block that is in use here. I just don't know who the hell Alex Black is. I also asked SpeakEasy. Weeks later, I'm still waiting for an answer. > vivienm@amethyst:~$ host www.mhsc.com > www.mhsc.com is a nickname for vweb1.mhsc.com > vweb1.mhsc.com has address 216.27.184.250 > vivienm@amethyst:~$ whois -a 216.27.184.250 When did '-a' become a whois option? > Speakeasy Network (NETBLK-SPEAKEASY-4) SPEAKEASY-4 > 216.27.128.0 - > 216.27.191.255 > Black, Alex (NETBLK-SPEK-RMEYER-0) SPEK-RMEYER-0 > 216.27.184.224 - > 216.27.184.255 > vivienm@amethyst:~$ whois -a \!NETBLK-SPEK-RMEYER-0 > Black, Alex (NETBLK-SPEK-RMEYER-0) > 440 Mission Court > Fremont, CA 94539 > US > > Netname: SPEK-RMEYER-0 > Netblock: 216.27.184.224 - 216.27.184.255 > > Coordinator: > Stollar, Andreas (AS3414-ARIN) abuse(a)speakeasy.net > +1-206-728-9770 (FAX) (206)728-1500 > Now, I realize your name isn't Alex Black (unless you have multiple > personalities), but it sure looks to me like SpeakEasy knows > how to SWIP > (and the SPEK-RMEYER-0 name suggests they were trying to SWIP > it to you). Among other things, I'm also a SysAdmin. Of course, I have multiple personalities! But, Alex Black isn't one of them. Also note, Andreas Stoller's email addr. Do you actually think I would get any sort of response if I sent an email there? I might as well send it to abuse(a)mhsc.net. He probably uses the same bit-bucket that mhsc.net does (the /dev/null brand).

1 0

How many routed hops would be considered too many to leave an AS
by Thomas Gainer 15 May '01

15 May '01

Kind of a newbie questions, but I would like to know what the consensus is. Thanks, Thomas Gainer

4 3

Re: People who purchase unproven technologies to support their Business, and whine about it. RE: To CAIS Engineers - WAKE UP AND
by Gerry 15 May '01

15 May '01

At 16:44 5/14/2001, bmanning(a)vacation.karoshi.com wrote: > Two of the most novel and low-cost colo sites that have been > announced to this list are: > > ) the un-heated, no existing electrical, mind the hay, cows, > and various other flora & fauna - Barn in northern Utah. > > ) the trunk of a Buick RoadMaster (supports wireless mobil > access and its own power generator!) > >and then there was the call to revamp MIR, before its untimly demise. >as with your bandwidth selections, your colo milage will vary. > >--bill Lets not forget the parking lot outside the Apple conference room that has unencrypted access to 802.11b for free... Towing and long-term power may be a problem, but for short term access..... Gerry

1 0

RE: To CAIS Engineers - WAKE UP AND TAKE CARE OF YOUR CUSTOMERS
by Roeland Meyer 15 May '01

15 May '01

Look in the O'Reilly "DNS and BIND" book, 3rd ed., page 217. Also, RFC2317. However, I have not yet found a single upstream that even knows how to do it, let alone offers this as a service. They are also not happy that I won't sign control of my domains over to them and that I run my own zone servers. Gee, why don't I hand over my bank accounts while I'm at it? BTW, if you know an ISP that does, I want their contact number. I'm not trying to win any arguments here. If I lose then I win, because I will have found a decent vendor. Also, with my monthly recurring cash on the line, don't you think I've been looking? Also, SpeakEasy seems to not have heard about SWiP. > -----Original Message----- > From: Curtis Maurand [mailto:curtis@lamere.net] > Sent: Monday, May 14, 2001 8:48 AM > > I don't remember being able to delegate anything less than a /24 for > reverse purposes. Correct me if I'm wrong. You can't swip > less than a > /24, but you can assign it. > On Mon, 14 May 2001, John Murphy wrote: > > > <quote> > > Roeland Meyer, "None of the DSL ISPs can do larger than /27 > anymore, even > > when they're ILECs. Anything less than a /24 can't be SWIP'd..." > > </quote> > > > > I really couldn't care less about SpeakEasy. I just didn't > feel like > > watching yet another of your blatantly inaccurate blanket > statements slide > > by. Case in point, *both* of those statements above are inaccurate. > > > > -----------------------Original Message----------------------- > > >From: Roeland Meyer > > >To: John Murphy;nanog(a)nanog.org > > >Date: 5/14/01 5:06 AM > > >Subject: RE: To CAIS Engineers - WAKE UP AND TAKE CARE OF > YOUR CUSTOMERS > > > > > >> From: John Murphy [mailto:nanog@mail.murfnet.com] > > >> Sent: Sunday, May 13, 2001 8:07 PM > > >> > > >> I'm sorry Roeland, but your statement about SWIP'ing anything > > >> less than a > > >> /24 is just inaccurate. We SWIP /29s and /30s daily, for > > >> both our Frame > > >> and our DSL customers. > > > > > >Tell it to SpeakEasy. > > > > > > > > > -- > ------------------------------------------------------------ > Curtis Maurand System Administrator > lamere.net Powered by Prexar http://www.lamere.net > mailto:curtis@lamere.net Linux, OS/2, Windows (any flavor) > http://www.prexar.com Cisco, OpenRoute, Lucent > MySQL, SQL Server, PHP, Perl > ------------------------------------------------------------ >

5 4