<?xml version="1.0"?><rss version="2.0"><channel><title>Networking</title><link>http://uncensored.citadel.org/</link><image><title>Networking</title><url>http://uncensored.citadel.org/image?name=_roompic_?go=Networking</url><link>http://uncensored.citadel.org/</link></image>
<description>Networking</description>
<item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3434084</link><pubDate>Fri, 10 May 2013 09:14:25 +0500</pubDate><title>Message #3434084</title><guid isPermaLink="false">3434084@Uncensored</guid><description><![CDATA[<html><body>

<p>Looks like a Dalek that survived Chernobyl.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3434050</link><pubDate>Fri, 10 May 2013 03:52:34 +0500</pubDate><title>Message #3434050</title><guid isPermaLink="false">3434050@Uncensored</guid><description><![CDATA[<html><body>

<p>Can you move out of my network connection? btw, your skin is getting dark spots.</p>
<p>http://arstechnica.com/information-technology/2013/05/a-wireless-network-with-frickin-laser-beams-on-the-ceiling/</p>
<p><img src="http://cdn.arstechnica.net/wp-content/uploads/2013/05/Beamcaster-ODU-640x423.jpg" alt="" /></p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3383403</link><pubDate>Mon, 14 Jan 2013 23:30:42 +0500</pubDate><title>Message #3383403</title><guid isPermaLink="false">3383403@Uncensored</guid><description><![CDATA[After a whole lot of pain with iSCSI multipath stupidness, I am swearing off
block protocols for good.  Everything I put in my data center is going to
be NFS over 10 Gbps Ethernet from now on. 
  
 It Just Works (tm). 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3377018</link><pubDate>Wed, 02 Jan 2013 16:07:47 +0500</pubDate><title>Message #3377018</title><guid isPermaLink="false">3377018@Uncensored</guid><description><![CDATA[  
 Probably SRP (SCSI RDMA Protocol) or iSER (iSCSI extensions for RDMA) but
FibreChannel-over-Infiniband or plain unaccelerated iSCSI might also be options.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3377017</link><pubDate>Wed, 02 Jan 2013 15:47:44 +0500</pubDate><title>Message #3377017</title><guid isPermaLink="false">3377017@Uncensored</guid><description><![CDATA[ I couldn't find anywhere in that article what storage access protocol is
being used, if any.  FC?  FCoE?  iSCSCI?  Or a higher-layer like NFS or CIFS?

  
 Given that it's Infiniband, I wouldn't be surprised if it's none of the above.
 :P 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3376984</link><pubDate>Wed, 02 Jan 2013 12:54:03 +0500</pubDate><title>Message #3376984</title><guid isPermaLink="false">3376984@Uncensored</guid><description><![CDATA[  
 Definitely. Infiniband can be a bit pricey, but it's the highest-performance
interconnect out there. They've had hardware-assisted virtualization since
before it was cool, and now Intel is playing catch-up (weakly) with VT-c.

  
 VT-c will certainly be much more cost effective, but it won't have the offload
performance. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3376562</link><pubDate>Tue, 01 Jan 2013 23:11:41 +0500</pubDate><title>Message #3376562</title><guid isPermaLink="false">3376562@Uncensored</guid><description><![CDATA[Nice, but does infiniband count as "network attached?"  When I see infiniband
it's a huge turn-off. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3368391</link><pubDate>Sun, 09 Dec 2012 19:03:23 +0500</pubDate><title>Message #3368391</title><guid isPermaLink="false">3368391@Uncensored</guid><description><![CDATA[    
 Best network-attached storage EVER? http://www.storagereview.com/echostreams_flachesan2_custom_flash_array_build
  
    
 Funny, it's built out of more-or-less standard PC hardware, albeit high-end
hardware. So the guys wondering how much faster their games would load if
striped on this array might be better off attaching a QLogic Raid controller
and having at...   
  
  
 For some crazy reason, I want to have one of these in my living room. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3361109</link><pubDate>Sat, 24 Nov 2012 09:58:05 +0500</pubDate><title>Message #3361109</title><guid isPermaLink="false">3361109@Uncensored</guid><description><![CDATA[It would be interesting to see how far one could go designing a document editor
whose native format is PDF.  "Legacy" documents would have big uneditable
blobs in them, of course, but well-formed documents would have every element
selectable and editable. 
  
 Even without that, having PDF available as a universal standard for pixel-perfect
WYSIWYG is a big win.  Too bad Micro$oft had to shit in the punch bowl by
introducing XPS.  Is there *any* valid reason for the existence of XPS or
is it a 100.0% NIH play? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3357596</link><pubDate>Tue, 13 Nov 2012 17:51:14 +0500</pubDate><title>Message #3357596</title><guid isPermaLink="false">3357596@Uncensored</guid><description><![CDATA[<html><body>

<p>
	Ig: It is still a mess, if you look at the source of most pdfs, it is an unholy mess. They only began with the latest release a &quot;block oriented&quot; approach in favour of their previous &quot;line oriented&quot; approach. Ever wondered why copying text from a 2 column pdf was so hard?</p>
<p>
	I still love to send people pdf files of my finished texts, but only because it is more cross-plattform compared to office files. It also looks better than .rtf or .txt and is read only for most people.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3357477</link><pubDate>Tue, 13 Nov 2012 15:07:06 +0500</pubDate><title>Message #3357477</title><guid isPermaLink="false">3357477@Uncensored</guid><description><![CDATA[ In 2008, Adobe published a Public Patent License to ISO 32000-1 granting
royalty-free rights for all patents owned by Adobe that are necessary to make,
use, sell and distribute PDF compliant implementations. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3357401</link><pubDate>Tue, 13 Nov 2012 08:29:48 +0500</pubDate><title>Message #3357401</title><guid isPermaLink="false">3357401@Uncensored</guid><description><![CDATA[It's an ISO standard now?  That's cool, but is it unencumbered by patents
that would prevent a truly open *full* implementation (like, more than just
a print driver) ?? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3357111</link><pubDate>Mon, 12 Nov 2012 18:39:19 +0500</pubDate><title>Message #3357111</title><guid isPermaLink="false">3357111@Uncensored</guid><description><![CDATA[I think too many people think of it as Adobe PDF even though it's now an ISO
standard. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3357001</link><pubDate>Mon, 12 Nov 2012 16:51:39 +0500</pubDate><title>Message #3357001</title><guid isPermaLink="false">3357001@Uncensored</guid><description><![CDATA[<html><body>

<p>people started wrapping bitmaps by a pdf container.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3356600</link><pubDate>Mon, 12 Nov 2012 08:00:56 +0500</pubDate><title>Message #3356600</title><guid isPermaLink="false">3356600@Uncensored</guid><description><![CDATA[<html><body>

<p>If PDF really is that flexible, one must wonder why it has not become the native document format for pretty much anything and everything.  What are its limitations?</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3348307</link><pubDate>Mon, 29 Oct 2012 18:59:09 +0500</pubDate><title>Message #3348307</title><guid isPermaLink="false">3348307@Uncensored</guid><description><![CDATA[<html><body>

<p>
	There are also pdfs which you can edit but then you not save the edited version. At least not with the free windows stuff. With the proper Acrobat, you can. But it is alright to use vesion 5 or 6 of it, you do not need to buy the whole new CS. Also, sometime you want to correct text in a pdf, dunno if gimp or any other tool does that yet.</p>
<p>
	But &quot;pdftotext -layout&quot; probably is the best ever tool to convert pdfs into a plaintext file while preserving the layout. You can then use perl or awk chew down the data. This might sound uncomfy, but some pdfs which look fine and ordered to humans are a pain if you want to extract the contained data mechanically.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3348303</link><pubDate>Mon, 29 Oct 2012 18:18:57 +0500</pubDate><title>Message #3348303</title><guid isPermaLink="false">3348303@Uncensored</guid><description><![CDATA[<html><body>

<p>you could probably also use open/libreoffices pdf printing for non-bitmaped pdfes</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3348207</link><pubDate>Mon, 29 Oct 2012 18:04:57 +0500</pubDate><title>Message #3348207</title><guid isPermaLink="false">3348207@Uncensored</guid><description><![CDATA[  
 That's true. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3347961</link><pubDate>Mon, 29 Oct 2012 13:50:10 +0500</pubDate><title>Message #3347961</title><guid isPermaLink="false">3347961@Uncensored</guid><description><![CDATA[ The PDF-generating printer drivers for Windows usually generate PDFs that
are just bitmaps on all the pages.  Though this is useful if all you're looking
to do is redistribute a document in a portable format, it does make it impossible
to excerpt said documents. 
   PDF Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3347943</link><pubDate>Mon, 29 Oct 2012 12:22:34 +0500</pubDate><title>Message #3347943</title><guid isPermaLink="false">3347943@Uncensored</guid><description><![CDATA[  
 On a Windows system, you can install a simple driver that lets you print
to a PDF.  As such, all applications on a Windows system can generate PDF
files without much fuss. 
  
 But, I guess some people want to make it a little bit easier by not having
people install the printer driver. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3347735</link><pubDate>Sun, 28 Oct 2012 16:28:45 +0500</pubDate><title>Message #3347735</title><guid isPermaLink="false">3347735@Uncensored</guid><description><![CDATA[<html><body>

<p>
	It is a bit like a religion, especially since there is only immaculate conception. &nbsp;Try re-selling maculate Adobe suites, at least commercially, that is very tricky. (At least in germany it is, MS and Adobe come done with armies of lawyers at you.)</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3347026</link><pubDate>Sat, 27 Oct 2012 17:35:14 +0500</pubDate><title>Message #3347026</title><guid isPermaLink="false">3347026@Uncensored</guid><description><![CDATA[ >Adobe apps do this too. They broadcast a hash of their license key over
 
 >the network periodically and if another copy hears the hash of the same
 
 >key you're using it will start bugging you.   
  
 Consider how much effort goes into license compliance, license enforcement,
license management, license purchasing, and all the tech support that goes
into figuring it all out. 
  
 We're probably talking about hundreds of millions of dollars in lost productivity
every year, just to maintain the myth that software is property that can be
bought and sold. 
  
 Adobe is a good example.  I can't believe people still pay money for software
to write PDF's.  Every Linux system comes with that, out of the box.  And
every Windoze system could be given that ability with gratis software. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3341077</link><pubDate>Wed, 17 Oct 2012 13:13:09 +0500</pubDate><title>Message #3341077</title><guid isPermaLink="false">3341077@Uncensored</guid><description><![CDATA[> NETBIOS: WINDOWS2: Glad to meet you, too WINDOWS1!

hahaha..  You've just inspired me to write a plainspeak protocol analyzer.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3340367</link><pubDate>Mon, 15 Oct 2012 20:52:47 +0500</pubDate><title>Message #3340367</title><guid isPermaLink="false">3340367@Uncensored</guid><description><![CDATA[<html><body>

<p>Not surprised. My Cit is currently on Amazon until I get my new server built.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3340208</link><pubDate>Mon, 15 Oct 2012 15:30:59 +0500</pubDate><title>Message #3340208</title><guid isPermaLink="false">3340208@Uncensored</guid><description><![CDATA[  
 In this case, the cloud server is Amazon. 
  
 I think it forces you to share on a Gigabit pipe unless you specifically
pay for something else. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3340192</link><pubDate>Mon, 15 Oct 2012 14:24:44 +0500</pubDate><title>Message #3340192</title><guid isPermaLink="false">3340192@Uncensored</guid><description><![CDATA[ > I think we're getting burned by our use of a cloud server for   
 >distributing a/v content.  I suspect that we don't have a dedicated   
 >pipe of networking, and someone else is consuming the pipe we're trying
 
 >to use, because we're not quite getting the throughput we'd been   
 >getting.   
  
 You may also be facing traffic shaping...don't know which cloud provider
you're using, but my previous employer restricts bandwidth based on the "size"
of the VM you've built. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3338266</link><pubDate>Thu, 11 Oct 2012 12:35:28 +0500</pubDate><title>Message #3338266</title><guid isPermaLink="false">3338266@Uncensored</guid><description><![CDATA[Adobe apps do this too. They broadcast a hash of their license key over the
network periodically and if another copy hears the hash of the same key you're
using it will start bugging you. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3337541</link><pubDate>Tue, 09 Oct 2012 11:11:47 +0500</pubDate><title>Message #3337541</title><guid isPermaLink="false">3337541@Uncensored</guid><description><![CDATA[<html><body>

<p>well, two wintendos with the same guid would also make magic things happen.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3337263</link><pubDate>Mon, 08 Oct 2012 22:50:12 +0500</pubDate><title>Message #3337263</title><guid isPermaLink="false">3337263@Uncensored</guid><description><![CDATA[<html><body>

<p>Hey, it's more realistic than you think.  Remember NetWare?  If two NetWare servers saw each other using the same license key, Bad Things™ would begin happening.  One or more of the servers would actively harass you.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3337210</link><pubDate>Mon, 08 Oct 2012 14:37:30 +0500</pubDate><title>Message #3337210</title><guid isPermaLink="false">3337210@Uncensored</guid><description><![CDATA[Ah, that's a bit of a relief. I took it as comedy but with Microsoft you never
can tell, heh. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3337191</link><pubDate>Mon, 08 Oct 2012 13:35:52 +0500</pubDate><title>Message #3337191</title><guid isPermaLink="false">3337191@Uncensored</guid><description><![CDATA[ Hehehehehehe.  As far as I know, there's no NETBIOS API for requesting a
peer's CD key.  Given the frequency with which Microsoft likes to check for
"Genuine Windows" when downloading updates, though, I wouldn't be surprised
if they've developed their own proprietary network protocol for doing so.
 More than likely, though, they're using XML over HTTP. 
  
 That post was attempting to convey two main points.  First, NETBIOS, even
over TCP, is a chatty protocol that causes your network to be filled with
meaningless crap.  The second was a direct jab at Microsoft's often draconian
efforts to stop piracy. 
   NETBIOS Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3336993</link><pubDate>Sun, 07 Oct 2012 23:45:06 +0500</pubDate><title>Message #3336993</title><guid isPermaLink="false">3336993@Uncensored</guid><description><![CDATA[ > NETBIOS: WINDOWS1: Windows Genuine Advantage Check: Requesting CD key.
 
  
 This isn't a thing is it? Tell me it isn't a thing. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3336678</link><pubDate>Sat, 06 Oct 2012 05:43:42 +0500</pubDate><title>Message #3336678</title><guid isPermaLink="false">3336678@Uncensored</guid><description><![CDATA[<html><body>

<p>I realy like running ntop at the gate outside.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3336455</link><pubDate>Fri, 05 Oct 2012 12:53:37 +0500</pubDate><title>Message #3336455</title><guid isPermaLink="false">3336455@Uncensored</guid><description><![CDATA[ NEYBIOS: Hello!  This is WINDOZE1! 
 NETBIOS: Hello!  This is WINDOZE2! 
 NETBIOS: WINDOWS1: Hello WINDOWS2! 
 NETBIOS: WINDOWS2: Hello WINDOWS1! 
 NETBIOS: WINDOWS1: Glad to meet you WINDOWS2! 
 NETBIOS: WINDOWS2: Glad to meet you, too WINDOWS1! 
 NETBIOS: WINDOWS1: Windows Genuine Advantage Check: Requesting CD key. 
 ... 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3336421</link><pubDate>Fri, 05 Oct 2012 10:10:13 +0500</pubDate><title>Message #3336421</title><guid isPermaLink="false">3336421@Uncensored</guid><description><![CDATA[Want a fun experience?  Drop a sniffer on a network that has no administration.....
 Oy. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3335976</link><pubDate>Thu, 04 Oct 2012 14:27:15 +0500</pubDate><title>Message #3335976</title><guid isPermaLink="false">3335976@Uncensored</guid><description><![CDATA[  
 The children have opened it up to the entire freaking company. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3335938</link><pubDate>Thu, 04 Oct 2012 10:27:19 +0500</pubDate><title>Message #3335938</title><guid isPermaLink="false">3335938@Uncensored</guid><description><![CDATA[  
 Multicast is tricky to set up.  It would be nice for something like this,
but getting it to work over large geographic regions like this is rather tricky.

  
 Besides, our processes normally expect some two-way network traffic, which
you can't really do with multicast. 
  
 No, we're going to implement a few changes on our end to address this.  I'm
going to add some code to limit the number of users with the same username
who may connect as a viewer at one time.  This will significantly address
the problem. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3335608</link><pubDate>Thu, 04 Oct 2012 01:33:25 +0500</pubDate><title>Message #3335608</title><guid isPermaLink="false">3335608@Uncensored</guid><description><![CDATA[I admit my ignorance to most of this, but is there not some sort of multicast
thing that can be done? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3335352</link><pubDate>Wed, 03 Oct 2012 17:58:33 +0500</pubDate><title>Message #3335352</title><guid isPermaLink="false">3335352@Uncensored</guid><description><![CDATA[  
 Sorry, 65 different client connections to the server, streaming audio/video.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3335351</link><pubDate>Wed, 03 Oct 2012 17:51:10 +0500</pubDate><title>Message #3335351</title><guid isPermaLink="false">3335351@Uncensored</guid><description><![CDATA[  
 Sanctified defication! 
  
 Those idiots had 65 different connections to the client, all watching the
video at the same time! 
  
 We never tested for that many connections.  Stupid network executives. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3335346</link><pubDate>Wed, 03 Oct 2012 17:37:12 +0500</pubDate><title>Message #3335346</title><guid isPermaLink="false">3335346@Uncensored</guid><description><![CDATA[  
 I think we're getting burned by our use of a cloud server for distributing
a/v content.  I suspect that we don't have a dedicated pipe of networking,
and someone else is consuming the pipe we're trying to use, because we're
not quite getting the throughput we'd been getting. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3300703</link><pubDate>Tue, 14 Aug 2012 16:00:15 +0500</pubDate><title>Message #3300703</title><guid isPermaLink="false">3300703@Uncensored</guid><description><![CDATA[I suspect that all the other registrars didn't really have a strong opinion
on SOPA one way or the other; they just wanted to take the opportunity to
dogpile on GoDaddy.  And I'm sure GoDaddy didn't "change their mind" so much
as they said "oh shit, we've gotta backpedal on this before we lose any more
customers" 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3300670</link><pubDate>Tue, 14 Aug 2012 14:12:55 +0500</pubDate><title>Message #3300670</title><guid isPermaLink="false">3300670@Uncensored</guid><description><![CDATA[ > Arguably the first and most prominent case regarded GoDaddy.com,
 > a popular internet domain registrar and web hosting company 
 > which openly supported SOPA. GoDaddy sustained significant losses,
 > losing over 72,000 domains in less than one week, as a result 
 > of a proposed boycott of their services, pending it renounce its 
 > support of SOPA. GoDaddy has since announced that it "no longer 
 > supports  SOPA legislation," then amended that 
 > statement to "GoDaddy OPPOSES SOPA.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3300624</link><pubDate>Tue, 14 Aug 2012 11:30:20 +0500</pubDate><title>Message #3300624</title><guid isPermaLink="false">3300624@Uncensored</guid><description><![CDATA[Dotster it is, then.   I'm even going to transfer now, because they will honor
the rest of the existing registration period plus add another year free for
transferring.  Can't argue with that. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3300060</link><pubDate>Mon, 13 Aug 2012 15:18:11 +0500</pubDate><title>Message #3300060</title><guid isPermaLink="false">3300060@Uncensored</guid><description><![CDATA[ I've been using Dotster, http://www.dotster.com/ for one of my domains and
haven't had any issues with them.  I can't find any information about their
stance on SOPA, though:   
  
  
 http://en.wikipedia.org/wiki/List_of_organizations_with_official_stances_on_th
e_Stop_Online_Piracy_Act 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3300048</link><pubDate>Mon, 13 Aug 2012 14:22:06 +0500</pubDate><title>domain registrars?</title><guid isPermaLink="false">3300048@Uncensored</guid><description><![CDATA[  
 So ... what's a good domain registrar to use these days?  I have two domains
expiring in November; one is with NetSol, which is too expensive, and the
other is with GoDaddy, who are scumbags, so I'd like to find a new registrar
for both of them. 
  
 Looking for a registrar that is inexpensive, reliable, and anti- 
 SOPA.  Any suggestions? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3232436</link><pubDate>Thu, 12 Apr 2012 01:09:47 +0500</pubDate><title>Message #3232436</title><guid isPermaLink="false">3232436@Uncensored</guid><description><![CDATA[As it so happens, I just turned up IPv6 on Uncensored tonight.  You're Soaking
In It (tm).   
  
  
 And I don't think Mr. "the .82 server" is going to be the kind of person
who ever bothers to know what his IPv6 address is.  He's going to let it auto-register
with a name service and refer to it by name every time.  And since IPv6 eliminates
the need for NAT, it's going to work more often than not. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3232376</link><pubDate>Wed, 11 Apr 2012 17:52:47 +0500</pubDate><title>Message #3232376</title><guid isPermaLink="false">3232376@Uncensored</guid><description><![CDATA[ > When someone submits a network support ticket referring to "the .82   
 >server" the guys in my NOC have NO FUCKING CLUE WHAT YOU'RE TALKING   
 >ABOUT.   
  
 Soooooooo... are you saying you can't fix it?  lol 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3232038</link><pubDate>Tue, 10 Apr 2012 17:13:01 +0500</pubDate><title>Message #3232038</title><guid isPermaLink="false">3232038@Uncensored</guid><description><![CDATA[ Just wait until IPv6 is finally turned up.  You'll get requests like, "the
:01fe server."  :P 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3231963</link><pubDate>Tue, 10 Apr 2012 16:47:05 +0500</pubDate><title>Message #3231963</title><guid isPermaLink="false">3231963@Uncensored</guid><description><![CDATA[  
 *complaint* 
  
 IPv4 addresses are 32 bits.  THIRTY TWO F***ING BITS. 
  
 When someone submits a network support ticket referring to "the .82 server"
the guys in my NOC have NO FUCKING CLUE WHAT YOU'RE TALKING ABOUT. 
  
  323 #@ BITS !!!!!1111 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3230545</link><pubDate>Thu, 05 Apr 2012 02:48:49 +0500</pubDate><title>Message #3230545</title><guid isPermaLink="false">3230545@Uncensored</guid><description><![CDATA[Oh, ok. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3230463</link><pubDate>Wed, 04 Apr 2012 12:31:42 +0500</pubDate><title>Message #3230463</title><guid isPermaLink="false">3230463@Uncensored</guid><description><![CDATA[ Looks like it might just have been topic drift. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3230382</link><pubDate>Wed, 04 Apr 2012 02:00:38 +0500</pubDate><title>Message #3230382</title><guid isPermaLink="false">3230382@Uncensored</guid><description><![CDATA[Which rooms do they seem to be coming from, from DPII? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3230205</link><pubDate>Tue, 03 Apr 2012 16:36:02 +0500</pubDate><title>Message #3230205</title><guid isPermaLink="false">3230205@Uncensored</guid><description><![CDATA[ Seems like some of the messages from DP II are being routed to the wrong
room. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3229561</link><pubDate>Sun, 01 Apr 2012 13:14:01 +0500</pubDate><title>Message #3229561</title><guid isPermaLink="false">3229561@Uncensored</guid><description><![CDATA[<html><body>

<p> </p>
<blockquote>
<div class="message_header"><span>Wed Mar 21 2012 10:29:54 PM EDT</span> <span>from IGnatius T Foobar @ Uncensored </span></div>
<div class="message_content">
<div class="fmout-JUSTIFY">That's no fail, that's a Real Computer (tm). Check it out at <a href="http://ripsaw.cac.psu.edu/~mloewen/Oldtech/Tandy/Model6000HD.html" target="webcit01">http://ripsaw.cac.psu.edu/~mloewen/Oldtech/Tandy/Model6000HD.html</a> <br /><br />*sigh* <br /><br />I miss computers :( </div>
</div>
</blockquote>
<p>Thanks for the link!  That was really cool.</p>
<p> </p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3229560</link><pubDate>Sun, 01 Apr 2012 13:12:36 +0500</pubDate><title>Tandy 600HD</title><guid isPermaLink="false">3229560@Uncensored</guid><description><![CDATA[<html><body>

<p>I had I Tandy 600HD back in the 90's.  It ran Xenix.  I never thought I'd see one again.  It was the coolest lookibg computer I ever owned.  I wish I would have kept it......sigh.</p>
<p> </p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3229136</link><pubDate>Fri, 30 Mar 2012 16:45:16 +0500</pubDate><title>Message #3229136</title><guid isPermaLink="false">3229136@Uncensored</guid><description><![CDATA[Did you say you want to hear the TCP version first? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3228820</link><pubDate>Fri, 30 Mar 2012 08:14:50 +0500</pubDate><title>Message #3228820</title><guid isPermaLink="false">3228820@Uncensored</guid><description><![CDATA[]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3228380</link><pubDate>Thu, 29 Mar 2012 14:13:38 +0500</pubDate><title>Message #3228380</title><guid isPermaLink="false">3228380@Uncensored</guid><description><![CDATA[I know a great UDP joke but you might not get it. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3227610</link><pubDate>Wed, 28 Mar 2012 12:33:21 +0500</pubDate><title>Message #3227610</title><guid isPermaLink="false">3227610@Uncensored</guid><description><![CDATA[]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3227543</link><pubDate>Wed, 28 Mar 2012 09:29:18 +0500</pubDate><title>Message #3227543</title><guid isPermaLink="false">3227543@Uncensored</guid><description><![CDATA[Well, they weren't floppy *disks* ... they were fish that were flopping around.
 We would have been lucky if we had floppies.  I had to get up early every
morning and catch some fish, bring them back to the computer room, and write
1's or 0's on each fish. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3226244</link><pubDate>Mon, 26 Mar 2012 03:11:17 +0500</pubDate><title>Message #3226244</title><guid isPermaLink="false">3226244@Uncensored</guid><description><![CDATA[ > <yorkshire accent>   
  
 Floppies? Aye! You were luckey to have FLOPPIES!  
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3225244</link><pubDate>Thu, 22 Mar 2012 11:06:19 +0500</pubDate><title>Message #3225244</title><guid isPermaLink="false">3225244@Uncensored</guid><description><![CDATA[<html><body>

<p> </p>
<blockquote>
<div class="message_header"><span>Wed Mar 21 2012 05:11:39 PM EDT</span> <span>from IGnatius T Foobar @ Uncensored </span></div>
<div class="message_content">
<div class="fmout-JUSTIFY"><br />&lt;yorkshire accent&gt; <br /><br />You were lucky to have wifi! When I was in high school we had to carry floppy disks around. <br /><br />&lt;/yorkshire accent&gt; </div>
</div>
</blockquote>
<p>Uphill, in the snow, both ways.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3224948</link><pubDate>Wed, 21 Mar 2012 22:29:54 +0500</pubDate><title>Message #3224948</title><guid isPermaLink="false">3224948@Uncensored</guid><description><![CDATA[That's no fail, that's a Real Computer (tm).  Check it out at http://ripsaw.cac.psu.edu/~mloewen/Oldtech/Tandy/Model6000HD.html

  
 *sigh* 
  
 I miss computers :( 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3224921</link><pubDate>Wed, 21 Mar 2012 18:31:42 +0500</pubDate><title>Message #3224921</title><guid isPermaLink="false">3224921@Uncensored</guid><description><![CDATA[]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3224911</link><pubDate>Wed, 21 Mar 2012 17:11:39 +0500</pubDate><title>Message #3224911</title><guid isPermaLink="false">3224911@Uncensored</guid><description><![CDATA[  
 <yorkshire accent> 
  
 You were lucky to have wifi!  When I was in high school we had to carry floppy
disks around. 
  
 </yorkshire accent> 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3224816</link><pubDate>Wed, 21 Mar 2012 15:36:19 +0500</pubDate><title>Message #3224816</title><guid isPermaLink="false">3224816@Uncensored</guid><description><![CDATA[My High School's WEP key incorporated the phrase "deadbadbeef". 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3224747</link><pubDate>Wed, 21 Mar 2012 10:45:50 +0500</pubDate><title>Message #3224747</title><guid isPermaLink="false">3224747@Uncensored</guid><description><![CDATA[  
 Does anyone have strongSwan interoperating with Windows 7's VPN client in
IKEv2 mode? Fought with that for half of yesterday and lost :( 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3197227</link><pubDate>Wed, 15 Feb 2012 23:30:32 +0500</pubDate><title>Message #3197227</title><guid isPermaLink="false">3197227@Uncensored</guid><description><![CDATA[<html><body>

<p>Dead beef cafe - ha.</p>
<p>Miss old "dead dad" we used to use for the IPX/SPX address on the Novell test server back in the day.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3196144</link><pubDate>Sat, 11 Feb 2012 12:41:20 +0500</pubDate><title>Message #3196144</title><guid isPermaLink="false">3196144@Uncensored</guid><description><![CDATA[  
 host -t aaaa fedoraproject.org  
  
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3071559</link><pubDate>Thu, 12 Jan 2012 15:05:29 +0500</pubDate><title>Message #3071559</title><guid isPermaLink="false">3071559@Uncensored</guid><description><![CDATA[yeah man in the middle solves lots of problems, there should be  a standard...

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3051726</link><pubDate>Thu, 01 Dec 2011 18:22:11 +0500</pubDate><title>Message #3051726</title><guid isPermaLink="false">3051726@Uncensored</guid><description><![CDATA[  
 It's even harder, if both ends negotiated an Ephemeral Diffie-Hellman cipher
suite. In this case, an temporary DH keypair is created by each end, and authenticated
with the private RSA key. You can't know the temporary private key, because
presumably it is only stored in RAM long enough for the key exchange to take
place, and then thrown away. So you need to be able to mount an active MITM
attack in this case, even just to observe traffic. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3050888</link><pubDate>Wed, 30 Nov 2011 16:19:53 +0500</pubDate><title>Message #3050888</title><guid isPermaLink="false">3050888@Uncensored</guid><description><![CDATA[I would imagine that in order to get a protocol analyzer to decrypt TLS --
which is *exactly* what TLS is intended to prevent -- you would need to know
the private keys used by *both* parties.  Each host encrypts transmissions
to the other host using the other host's public key, which is derived from
its private key ... so you need to know both private keys, and also which
is which. 
  
 It's much easier to simply turn off TLS while troubleshooting, unless that
*is* the source of the problem (which it occasionally is). 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3050844</link><pubDate>Wed, 30 Nov 2011 15:13:39 +0500</pubDate><title>Message #3050844</title><guid isPermaLink="false">3050844@Uncensored</guid><description><![CDATA[ I almost forgot to mention that the Linux host is running Fedora release
11 (Leonidas). 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3050841</link><pubDate>Wed, 30 Nov 2011 15:10:17 +0500</pubDate><title>Message #3050841</title><guid isPermaLink="false">3050841@Uncensored</guid><description><![CDATA[ Who here proclaims to be proficient with both Wireshark and sendmail? 
  
 Yesterday I was trying to debug an issue with one of our Linux hosts sending
e-mail to our corporate mail server.  My first instinct was to do grab a trace
of the SMTP session via tcpdump.  I was quickly foiled when sendmail decided
to do a "STARTTLS." 
  
 Before I go any further, I did eventually decide to just disable TLS in the
sendmail config so I could get a plain-text capture. 
  
 Before I got to that point, though, I tried to get Wireshark to decrypt the
TLS session to no avail.  I found instructions on Wireshark's website about
how to configure it to use a key file, but I think my issue was that I was
never able to figure out where exactly sendmail gets its keys from.  I was
able to find in the sendmail.mc file where all the certificate and key files
and directories are configured (/etc/pki/tls/certs), but
when I checked in that directory, the only file that exists is ca-bundle.crt,
which contains a bunch of certificates.  None of the .pem files that were
referenced exist. 
  
 From poking around, I did find a localhost.key in the /etc/pki/tls/private
directory, but when I tried that with Wireshark, it still wasn't able to decrypt
the session. 
  
 Is this a case where I would need the private key for the corporate e-mail
server?  Or did I just not grab the right key file from the host? 
   TLS Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3041374</link><pubDate>Tue, 01 Nov 2011 21:13:19 +0500</pubDate><title>Re: NLOS</title><guid isPermaLink="false">3041374@Uncensored</guid><description><![CDATA[Thanks, I will look into that as a solution. We still haven't settled on something.
It sounds like you were doing point to multipoint. We are just doing point
to point so it should be simpler still. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3040627</link><pubDate>Sun, 30 Oct 2011 05:54:28 +0500</pubDate><title>NLOS</title><guid isPermaLink="false">3040627@Uncensored</guid><description><![CDATA[<html><body>

<p> </p>
<blockquote>
<div class="message_header"><span>Wed Sep 14 2011 01:26:40 EDT</span> <span>from the8088er @ Uncensored </span></div>
<div class="message_content">
<div class="fmout-JUSTIFY">Does anyone have any experience setting up a long range ewireless ethernet bridge? I'm looking at using Motorola Canopy equipment to span around 4.1 miles. </div>
</div>
</blockquote>
<p><br /> We used Ubiquiti (2.4,g) equipment to go much further than that - assuming you have LOS or NLOS.</p>
<p>It is cheap, and it works - you only need to get a good higain grid or panel antenna to pull it off..</p>
<p>We covered 6000km2 of jungle with wifi, and hooked up to 35km at the longest link.</p>
<p>If you are trying to look through a building, a hillside or whatever then it is a different story altogether.</p>
<p>We considered the Canopy system for about a year before deciding it was simply too unreliable and expensive..</p>
<p>-- <br />TheOneLaw</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3029899</link><pubDate>Mon, 26 Sep 2011 16:04:49 +0500</pubDate><title>Message #3029899</title><guid isPermaLink="false">3029899@Uncensored</guid><description><![CDATA[ I bet somebody figured out a way (either really fast clicks that are inaudible
to the human ear or something like that, that can be picked up by the phone,
but can't be heard in the traditional sense) to get the voicemail to record
the clicks. 
  Remember when we used to set modems to dial dtmf with such short tones and
delays you could barely tell it was dialling? That was 20 years ago, I'm sure
the technology has gotten a lot better.  
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3029253</link><pubDate>Sat, 24 Sep 2011 00:25:12 +0500</pubDate><title>Message #3029253</title><guid isPermaLink="false">3029253@Uncensored</guid><description><![CDATA[That was my thought, but apparently there were no audible DTMF tones in 
the voicemail.  The call log on the phone showed two outbound calls.

In other news... i'm fed the fuck up with my ipod.  So... put up a few 
for-sale posts.  

Looking at a Droid X or X2 as its replacement, eventually it may 
replace my Treo.  I have very little experience with droids, but since 
they're not tied to itunes it's got to be an improvement.  Used my ipod 
mostly as a music player, same way my old 2nd-gen iPod got used... Nice 
to throw pics on it though, and the browser/email features on wifi was 
nice.  I really didn't use "apps" aside from iBooks with all my service 
manuals on it.  

Having previous experience with TI's OMAP processors... snappy and work 
well... the X has that going for it.  Newer hardware, dual-core 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3029047</link><pubDate>Fri, 23 Sep 2011 13:28:04 +0500</pubDate><title>Message #3029047</title><guid isPermaLink="false">3029047@Uncensored</guid><description><![CDATA[If the phone actually started dialing in response to the tones, it is *badly*
misconfigured.  VoIP systems are quite often scanned for the ability to route
outbound calls through them, similar to the way spammers hunt for open relays.
 I haven't heard of this particular trick before, but I can't see any way
that it would actually work. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3029041</link><pubDate>Fri, 23 Sep 2011 13:08:11 +0500</pubDate><title>Message #3029041</title><guid isPermaLink="false">3029041@Uncensored</guid><description><![CDATA[]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3029036</link><pubDate>Fri, 23 Sep 2011 12:58:23 +0500</pubDate><title>Message #3029036</title><guid isPermaLink="false">3029036@Uncensored</guid><description><![CDATA[Question for the phone geeks.

Coworker got a strange call from a number in oklahoma.  Call went 
unanswered, but a voicemail was left.  Coworker dialed into his VM box, 
message was silence.  

Then his phone started dialing an 866 number.  He hung up.  
Dialed back into voicemail, play the message, same thing happens.  

Googling the 866 number returns hits that it's a credit card scam.

How the hell can a voicemail prompt a phone to dial out like that?
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3028062</link><pubDate>Wed, 21 Sep 2011 10:58:18 +0500</pubDate><title>Message #3028062</title><guid isPermaLink="false">3028062@Uncensored</guid><description><![CDATA[If both ends of the line are local, you get a T1 from your local exchange
carrier (at&t, Verizon, Qwest, etc).  That is assuming that neither end is
a "lit building" which, based on your sparse Internet options, I am assuming
is not the case. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3027905</link><pubDate>Wed, 21 Sep 2011 01:04:01 +0500</pubDate><title>Message #3027905</title><guid isPermaLink="false">3027905@Uncensored</guid><description><![CDATA[Yeah. That's prohibitive. Who provides leased lines? We aren't trying to 
do it for cost savings as much as because the only internet we can get 
is 1.5 MBPS for $129 a month after $200 setup and $395 equipment costs 
(WISP).

Do you just call AT&T and say you want a T1 or something? I imagine 
that's probably around $1000+ a month plus installation anyway, and for 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3027327</link><pubDate>Mon, 19 Sep 2011 19:53:19 +0500</pubDate><title>Message #3027327</title><guid isPermaLink="false">3027327@Uncensored</guid><description><![CDATA[Depends on location, population, and who owns the tower, but $1,500 per month
is usually a good starting point.  Considering that you're probably trying
to do this to keep costs down it would seem that you could probably get a
leased line for cheaper than that. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3027293</link><pubDate>Mon, 19 Sep 2011 18:16:37 +0500</pubDate><title>Message #3027293</title><guid isPermaLink="false">3027293@Uncensored</guid><description><![CDATA[VerFry's has a good selection of component parts if there's one near you.
 
  
 We may do a little proof of concept hackup to see if we can get it to work
for just a while. We won't be able to do a permanant install until "Point
A" moves to a new building downtown which could be a month or two, but we
can't do without Internet at "Point B" until then. I astill need to find some
topographic maps to see just what we're up against. I won't be able to do
line-of-sight I don't think. I'll have to do nLOS aiming high to get over
some obstacles just odown the road from Point A, where we can't really put
a mast. Point B shouldn't be very limited regarding what can we put up.  
  
 Wonder how much it costs to colo something on a cell twower as there's one
literally right across the property line from us. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3027283</link><pubDate>Mon, 19 Sep 2011 17:45:34 +0500</pubDate><title>Message #3027283</title><guid isPermaLink="false">3027283@Uncensored</guid><description><![CDATA[ > You can still get some electronic parts at Radio Shack.  But they   
 >aren't what they used to be.   
  
 Yeah, the huge section of components we remember from the Radio Shack of
the 1970's has been replaced by a single cabinet with a bunch of tiny drawers
in it, in which you might find a few fuses and connectors and things.  RadioShack
(note the innovative switch from two words to a single CamelCase word) now
needs the floor space for crappy consumer electronics and overpriced HDMI
cables. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3026988</link><pubDate>Mon, 19 Sep 2011 08:54:04 +0500</pubDate><title>Message #3026988</title><guid isPermaLink="false">3026988@Uncensored</guid><description><![CDATA[nope; We used to to go to a federal bldg downtown. Used an outfit called microwave
bypass. We needed it because quest at the time was in complete disarray and
couldnt deliver our lines in time for a new office. I think I called Microwave
bypass, and they came out the same week and installed it; took care of all
the FCC licenses, etc. It was rock solid except for 2 ice storms; you had
to chip off the ice on the can. The ends of the can were about the size of
large dinner plates. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3026042</link><pubDate>Fri, 16 Sep 2011 10:46:40 +0500</pubDate><title>Message #3026042</title><guid isPermaLink="false">3026042@Uncensored</guid><description><![CDATA[Saltine, it wouldn't have happened to be at Little Earth, would it? It sounds
awfully familiar. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3026003</link><pubDate>Fri, 16 Sep 2011 08:32:27 +0500</pubDate><title>Message #3026003</title><guid isPermaLink="false">3026003@Uncensored</guid><description><![CDATA[  
 You can still get some electronic parts at Radio Shack.  But they aren't
what they used to be. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3025966</link><pubDate>Fri, 16 Sep 2011 06:47:35 +0500</pubDate><title>Message #3025966</title><guid isPermaLink="false">3025966@Uncensored</guid><description><![CDATA[<html><body>

<p> </p>
<blockquote>
<div class="message_header"><span>Thu Sep 15 2011 11:12:52 EDT</span> <span>from   IGnatius T Foobar @ Uncensored </span></div>
<div class="message_content">
<div class="fmout-JUSTIFY">Neat stuff, but it sounds like the8088er is dealing with at least some amount of budget to purchase "real" long haul wifi equipment.  <br /><br />I've done some of that, but the distance was only a quarter mile or so.  Line of sight is key.</div>
</div>
</blockquote>
<p>the problem is, that if, they want to sell you some uber-special equipment, which equals weight in gold, and isn't as fast either.</p>
<p>so... a little antenna workshop, and a visit at radio shack (do they still do electronic parts?) would be the best thing to do.</p>
<p>maybe ax25 is the right guy (or knows some of them ;-) to get it set up and running properly.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3025677</link><pubDate>Thu, 15 Sep 2011 13:10:23 +0500</pubDate><title>Message #3025677</title><guid isPermaLink="false">3025677@Uncensored</guid><description><![CDATA[I setup one in downtown Minneapolis. It was 30 something Ghz I think and required
a telescope to align. It cost $50K for both ends in 1998 and carried a single
T1 and one 100MB/sec ethernet link. 
 It also sucked whenever we had ice storms. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3025644</link><pubDate>Thu, 15 Sep 2011 11:12:52 +0500</pubDate><title>Message #3025644</title><guid isPermaLink="false">3025644@Uncensored</guid><description><![CDATA[Neat stuff, but it sounds like the8088er is dealing with at least some amount
of budget to purchase "real" long haul wifi equipment. 
  
 I've done some of that, but the distance was only a quarter mile or so. 
Line of sight is key. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3025122</link><pubDate>Wed, 14 Sep 2011 06:31:38 +0500</pubDate><title>Message #3025122</title><guid isPermaLink="false">3025122@Uncensored</guid><description><![CDATA[<html><body>

<p>http://www.usbwifi.orconhosting.net.nz/</p>
<p>I saw a page with them creating parabolic mirrors with spanning meshes over wooden base construction</p>
<p>generaly spoken...</p>
<p>http://www.google.com/search?q=diy+made+wlan+antenna+&amp;ie=utf-8&amp;oe=utf-8&amp;aq=t&amp;rls=org.mozilla:en-US:unofficial&amp;client=iceweasel-a</p>
<p>gives you other approaches too.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3025045</link><pubDate>Wed, 14 Sep 2011 02:08:00 +0500</pubDate><title>Message #3025045</title><guid isPermaLink="false">3025045@Uncensored</guid><description><![CDATA[<html><body>

<p>Maybe it would be better to ask what are your questions specifically?</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3025044</link><pubDate>Wed, 14 Sep 2011 02:07:13 +0500</pubDate><title>Message #3025044</title><guid isPermaLink="false">3025044@Uncensored</guid><description><![CDATA[<html><body>

<p> </p>
<blockquote>
<div class="message_header"><span>Wed Sep 14 2011 01:26:40 AM EDT</span> <span>from   the8088er @ Uncensored </span></div>
<div class="message_content">
<div class="fmout-JUSTIFY">Does anyone have any experience setting up a long range ewireless ethernet bridge? I'm looking at using Motorola Canopy equipment to span around 4.1 miles.</div>
</div>
</blockquote>
<p>Give me a day or two, I believe my ex-boss set up something.  I will see what he says.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3025036</link><pubDate>Wed, 14 Sep 2011 01:26:40 +0500</pubDate><title>Message #3025036</title><guid isPermaLink="false">3025036@Uncensored</guid><description><![CDATA[Does anyone have any experience setting up a long range ewireless ethernet
bridge? I'm looking at using Motorola Canopy equipment to span around 4.1
miles. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3023592</link><pubDate>Sat, 10 Sep 2011 21:26:02 +0500</pubDate><title>Message #3023592</title><guid isPermaLink="false">3023592@Uncensored</guid><description><![CDATA[  
 LIKE. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3023504</link><pubDate>Sat, 10 Sep 2011 15:37:54 +0500</pubDate><title>Message #3023504</title><guid isPermaLink="false">3023504@Uncensored</guid><description><![CDATA[The big ones do exactly that.  If the private key is online somewhere then
you're probably dealing with a place like "Bob's Fish Tacos And Certificate
Authority" who issues domain-validated certificates that are issued by a computer.
 That's why they're so cheap. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=3022542</link><pubDate>Thu, 08 Sep 2011 17:19:53 +0500</pubDate><title>Message #3022542</title><guid isPermaLink="false">3022542@Uncensored</guid><description><![CDATA[  
 WTF is wrong with DigiNotar? 
  
 Y'know, I don't know why all CA's aren't required to simply use sneakernet
to access their private key every time they want to sign a cert. It would
avoid all sorts of problems. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2995583</link><pubDate>Tue, 28 Jun 2011 13:05:37 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2995583@Uncensored</guid><description><![CDATA[<html><body>

<p>That's because you didn't eat the ginger ones.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2995409</link><pubDate>Mon, 27 Jun 2011 22:39:04 +0500</pubDate><title>Message #2995409</title><guid isPermaLink="false">2995409@Uncensored</guid><description><![CDATA[I don't like eating encrypted cookies; they tie my stomach up in knots. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2994007</link><pubDate>Thu, 23 Jun 2011 00:37:08 +0500</pubDate><title>Message #2994007</title><guid isPermaLink="false">2994007@Uncensored</guid><description><![CDATA[mmmmm, cookie. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2993537</link><pubDate>Tue, 21 Jun 2011 15:13:29 +0500</pubDate><title>Message #2993537</title><guid isPermaLink="false">2993537@Uncensored</guid><description><![CDATA[ ahhh, I remember. 
  Why would I want to suck in an entire ssl library when all I need to do
is encrypt one string. That's exactly the kind of thing that grinds at my
soul. If I had a soul. 
  It's to encrypt a cookie. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2993536</link><pubDate>Tue, 21 Jun 2011 15:12:41 +0500</pubDate><title>Message #2993536</title><guid isPermaLink="false">2993536@Uncensored</guid><description><![CDATA[ >Umm ... what do mean by "have and use an implementation" ??  Are you   
 >actually embedding a single-cipher crypto layer into something instead 
 
 >of using an SSL library?   
  
 Yes. 
  Although at the moment I'm having a hard time remembering what I use it
for. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2992952</link><pubDate>Mon, 20 Jun 2011 10:30:40 +0500</pubDate><title>Message #2992952</title><guid isPermaLink="false">2992952@Uncensored</guid><description><![CDATA[Umm ... what do mean by "have and use an implementation" ??  Are you actually
embedding a single-cipher crypto layer into something instead of using an
SSL library? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2992535</link><pubDate>Sat, 18 Jun 2011 19:08:21 +0500</pubDate><title>Message #2992535</title><guid isPermaLink="false">2992535@Uncensored</guid><description><![CDATA[  I have and use an implementation of blowfish. I use it because it was simple
to plug in. wikipedia or something like that says it's never been busted,
but looking at it, and not being a crypto guy, it really doesn't seem all
that bad. 
  No part of the preceeding data has any effect on any other part of the data's
encryption. How good can that possibly be. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2992211</link><pubDate>Fri, 17 Jun 2011 15:33:14 +0500</pubDate><title>Message #2992211</title><guid isPermaLink="false">2992211@Uncensored</guid><description><![CDATA[  
 But now that computers are faster, 'ordinary' people can brute force weaker
crypto methods, if my understanding of the issue is correct. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2992210</link><pubDate>Fri, 17 Jun 2011 15:29:15 +0500</pubDate><title>Message #2992210</title><guid isPermaLink="false">2992210@Uncensored</guid><description><![CDATA[I have a very dim view of strong crypto.  Any cipher that the government allows
ordinary people to use, they've already figured out how to break in real time.
 Nobody else has the time and resources to break any reasonable cipher, so
there's really no point in carefully choosing a cipher.  Even a 56-bit DES
encryption will fend off attacks of opportunity. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2991886</link><pubDate>Thu, 16 Jun 2011 18:29:52 +0500</pubDate><title>Message #2991886</title><guid isPermaLink="false">2991886@Uncensored</guid><description><![CDATA[It's SHA-2, not Double-SHA... Though that worked for Triple-DES :-) 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2991833</link><pubDate>Thu, 16 Jun 2011 17:01:53 +0500</pubDate><title>Message #2991833</title><guid isPermaLink="false">2991833@Uncensored</guid><description><![CDATA[don't you have to encrypt sha-1 the second time you install it? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2991812</link><pubDate>Thu, 16 Jun 2011 16:17:31 +0500</pubDate><title>Message #2991812</title><guid isPermaLink="false">2991812@Uncensored</guid><description><![CDATA[why don't you just install sha-1 twice? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2991518</link><pubDate>Wed, 15 Jun 2011 10:37:13 +0500</pubDate><title>Message #2991518</title><guid isPermaLink="false">2991518@Uncensored</guid><description><![CDATA[Yup. We'll have to have a sha2.irbmanager.com and login.irbmanager.com for
some time to come. Too bad. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2991407</link><pubDate>Tue, 14 Jun 2011 23:01:05 +0500</pubDate><title>Message #2991407</title><guid isPermaLink="false">2991407@Uncensored</guid><description><![CDATA[That pretty much sums it up, actually.  At some point we will get to the stage
where SHA-2 has been around long enough that anyone who doesn't have it, has
so many other problems that it's not really worth dealing with (which is how
a lot of webmasters now feel about IE 6). 
  
 We have some folks that deal with Visa and MasterCard, who are positively
tyrannical about security.  When special cryptographic requirements are dealt
out that will harm compatibility with other clients, the usual solution is
to deploy the same service on two different sites with different levels of
cryptography. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2991258</link><pubDate>Tue, 14 Jun 2011 12:52:18 +0500</pubDate><title>Message #2991258</title><guid isPermaLink="false">2991258@Uncensored</guid><description><![CDATA[Anyone have experience with SHA-2 (SHA-256) SSL certs? We've got a requirement
from the feds to have a SHA-2 cert for some stuff we're doing, but it seems
SHA-2 only works on WinXPSP3+ (and I'm sure all sorts of Linux, so don't preach
:-) And I have so far only found Digicert as an issuer of SHA-2. Other options?
Anyone deployed w/SHA-2 certs? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2990231</link><pubDate>Fri, 10 Jun 2011 12:10:54 +0500</pubDate><title>Message #2990231</title><guid isPermaLink="false">2990231@Uncensored</guid><description><![CDATA[ I think as with any concept and patents, it all depends on how you implement
it.  The RFC for EAPS, RFC-3619, is rather vague about the details of the
protocol, and the RFC is categorized as "Informational," which, if I underdstand
it correctly, means it's not meant as an official standard. 
  
 Here's a link to the RFC if you'd like to read it: 
  
 http://tools.ietf.org/html/rfc3619 
  
 I did a quick google for "eaps patent" and came up with this: 
  
 http://www.faqs.org/patents/app/20090252030 
  
 Reading the RFC and the patent, it does look like, at face value, that the
RFC mentions behavior that is protected by the patent.  As always, though,
the devil's in the details.  Since the RFC is rather vague, that leaves a
lot of implementation details open for interpretation, so it's definitely
possible to implement EAPS without requiring a patent license. 
   EAPS Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2990048</link><pubDate>Thu, 09 Jun 2011 19:10:47 +0500</pubDate><title>Message #2990048</title><guid isPermaLink="false">2990048@Uncensored</guid><description><![CDATA[I was told by a Juniper salesdroid that although EAPS is an open RFC, it requires
a patent license from Extreme Networks in order to implement.  Is that true?

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2990016</link><pubDate>Thu, 09 Jun 2011 17:37:50 +0500</pubDate><title>Message #2990016</title><guid isPermaLink="false">2990016@Uncensored</guid><description><![CDATA[ Considering that there's an ITU-T effort to come out with a stnadardized
Ethernet ring protection protocol, G.8032, a.k.a. ERPS, there's hopefully
a good chance that STP will be phased out. 
  
 However, I wouldn't be surprised if the IEEE issues another revision of STP
to accomodate higher link speeds.  They already did it back in 2004 to expand
the link cost field. 
  
 BTW, here's Wikipedia's page on ERPS: 
  
 http://en.wikipedia.org/wiki/Ethernet_Ring_Protection_Switching 
  
 And Extreme Network's EAPS has been standardized as RFC-3619 since 2003.

  
 http://en.wikipedia.org/wiki/Ethernet_Automatic_Protection_Switching 
  
 Also, there's an IETF effort to use a link-state protocol, similar to OSPF
or IS-IS, at the data-link layer: 
  
 http://en.wikipedia.org/wiki/TRILL_%28Computer_Networking%29 
  
 We shall have to see! 
   Spanning Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2989944</link><pubDate>Thu, 09 Jun 2011 13:19:34 +0500</pubDate><title>Message #2989944</title><guid isPermaLink="false">2989944@Uncensored</guid><description><![CDATA[Riddle me this, Batman. 
  
 Based on 802.1t-2001, the spanning tree cost of a 1 Gbps link is 20,000;
the cost of a 10 Gbps link is 2,000. 
  
 This means that when there is a 1 Tbps technology available, its spanning
tree cost will be 20, and the spanning tree cost of a 20 Tbps link will be
1. 
  
 Based on existing technologies, it is more likely that there will be 10 Tbps
Ethernet with a spanning tree cost of 2.  So what happens when there is 100
Tbps Ethernet?  And then 1 Pbps Ethernet? 
  
 Will we have to abandon Spanning Tree?   (pleasepleasepleaseplease...) 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2988926</link><pubDate>Mon, 06 Jun 2011 14:27:52 +0500</pubDate><title>Message #2988926</title><guid isPermaLink="false">2988926@Uncensored</guid><description><![CDATA[  I did one of the things, so now I have two SSIDs coming up and myphone[D[D[D[D[D
phone picks up the stronger one, so voila it works. Yay. 
  Finally something works. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987756</link><pubDate>Thu, 02 Jun 2011 16:17:30 +0500</pubDate><title>Message #2987756</title><guid isPermaLink="false">2987756@Uncensored</guid><description><![CDATA[  the moving to the central part of the house part is the problem. :-) 
  I haven't explored all the possibilities yet of access around the house,
but letting the wireless part work itself out is fine by me.  
 Thanks. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987650</link><pubDate>Thu, 02 Jun 2011 09:32:02 +0500</pubDate><title>Message #2987650</title><guid isPermaLink="false">2987650@Uncensored</guid><description><![CDATA[That sounds like it will work if you don't have any Ethernet plugged into
the new router, but if you're just looking to cover your elephantine house
with multiple access points, you want this: 
  
 http://www.dd-wrt.com/wiki/index.php/Wireless_Access_Point#Roaming_access

  
 Short answer: set all AP's to the same SSID, same security settings, but
different channels.  And of course you want to disable DHCP in both directions
on any device you don't want acting as a router. 
  
 Or you could buy a smaller house.   :) 
  
 Or you might consider something even more simple.  Your primary AP is the
Verizon/Actiontec and is in a less than optimal location, right?  You might
consider simply disabling its wireless entirely (or change its SSID and security
so your client devices don't hit it) and then put the DD-WRT router in a central
location in the house where everyone will pick up the signal clearly.

  
 Finally -- if you have any friends within a 10 mile radius who are highly
skilled with networking and eager to help you out, you could invite them over
to help. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987558</link><pubDate>Wed, 01 Jun 2011 23:51:09 +0500</pubDate><title>Message #2987558</title><guid isPermaLink="false">2987558@Uncensored</guid><description><![CDATA[  I think I see what I'm doing wrong: I'm an idiot, and I never grokked networking.

  I should be doing this: 
   http://www.dd-wrt.com/wiki/index.php/Universal_Wireless_Repeater  
  although I still don't see why the other way doesn't work, unless the other
network I am bridgeing has to be wired, but it doesn't sa y that. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987493</link><pubDate>Wed, 01 Jun 2011 18:53:54 +0500</pubDate><title>Message #2987493</title><guid isPermaLink="false">2987493@Uncensored</guid><description><![CDATA[ Try disabling your primary router's wireless interface and then see if anything
connects to the secondary AP.  That will at least rule out any interference.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987460</link><pubDate>Wed, 01 Jun 2011 18:01:10 +0500</pubDate><title>Message #2987460</title><guid isPermaLink="false">2987460@Uncensored</guid><description><![CDATA[ Same thing. intalled ddwrt set it up as per directions, enabled web security,
I can now ping the client bridge router from my wired network, but nothing
seems to pick up a good signal when I'm far away from my main wifi radio but
close to the client bridge one.  
 I could be doing something wrong or ddwrt is broken, but the only thing I
can rule out at the moment is that the router is fine, since I got the same
results with both. blah. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987453</link><pubDate>Wed, 01 Jun 2011 17:34:47 +0500</pubDate><title>Message #2987453</title><guid isPermaLink="false">2987453@Uncensored</guid><description><![CDATA[  I have another router I'm installing ddwrt on hopefully that will work.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987428</link><pubDate>Wed, 01 Jun 2011 16:58:19 +0500</pubDate><title>Message #2987428</title><guid isPermaLink="false">2987428@Uncensored</guid><description><![CDATA[right, well, I do and the client bridge router (ddwrt) doesn't show anything.

  I think I did follow those instructions or at least they're very similar
to the ones I read, but I did all the stuff they mention. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987405</link><pubDate>Wed, 01 Jun 2011 16:13:32 +0500</pubDate><title>Message #2987405</title><guid isPermaLink="false">2987405@Uncensored</guid><description><![CDATA[ Stupid question, but did you see that there's a link to more up-to-date instructions
at the top of the page? 
  
 http://www.dd-wrt.com/wiki/index.php/Client_Bridged 
  
 The first thing that pops into my mind is that your wireless devices might
be caching info about the last AP they were connected to.  I think Weendoze
does this to allow fast reconnection if it loses the signal.  In fact, in
Windows I think it's called fast-reconnect and can be disabled.  You might
check to see if your devices have a similar feature. 
  
 There's two ways I can think of to check which AP a wireless device connects
to.  The first is to see if the device can display the MAC address of the
AP to which it's connected.  Unfortunately, not all devices have an option
to display that. 
  
 The second way is to log into the management interface for each AP and have
it display the list of connected devices.  This
is the most sure-fire way and pretty much every AP should have the ability
to at least display this list.  Each device will be identified by its MAC
address. 
   AP Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2987394</link><pubDate>Wed, 01 Jun 2011 15:38:25 +0500</pubDate><title>Message #2987394</title><guid isPermaLink="false">2987394@Uncensored</guid><description><![CDATA[  I just want one thing to work. 
  I've got 3 stupid projects and none of them work. 
  Here's one: 
   http://www.dd-wrt.com/wiki/index.php/Wireless_Bridge  
  
  I did exactly what they said, and something is working. 
  I've got the ddwrt router plugged into nothing but the power outlet and
I can ping it from my wired network so the wireless bridge is working. 
  But nothing I've got will connect wirelessly to the ddwrt router. 
  As in I get the same crappy signal from my far away main wireless router
as I do the ddwrt router.  
  What am I doing wrong? 
  
  Specifically I'm trying to get my G1 to connect to it. The thing is, with
the same ssid, how can I tell which router my g1 is actually connecting to?

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2977028</link><pubDate>Thu, 12 May 2011 09:10:34 +0500</pubDate><title>Message #2977028</title><guid isPermaLink="false">2977028@Uncensored</guid><description><![CDATA[that's COOL. thanks. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2976865</link><pubDate>Wed, 11 May 2011 22:19:46 +0500</pubDate><title>Message #2976865</title><guid isPermaLink="false">2976865@Uncensored</guid><description><![CDATA[ > traceroute--or tracert on Windows--is a "low-level" network tool that 
 
 >will report round-trip times on a per-hop basis to a destination.  It  

  
 mtr is even better -- it operates continuously and keeps a rolling average
of the latency and dropped packet rate to each hop in the path.  mtr is probably
the closest thing to what you're looking for. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2976070</link><pubDate>Tue, 10 May 2011 11:49:00 +0500</pubDate><title>Message #2976070</title><guid isPermaLink="false">2976070@Uncensored</guid><description><![CDATA[<html><body>

<p>so, twitter and facebook ditch a bunch of ther RSS/Atoms:</p>
<p>http://www.staynalive.com/2011/05/twitter-and-facebook-both-quietly-kill.html</p>
<p>twitter still seems to support:</p>
<p>http://twitter.com/statuses/user_timeline/[ID].rss</p>
<p>and facebook rss'ing your own wall.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2975449</link><pubDate>Sun, 08 May 2011 13:21:42 +0500</pubDate><title>Message #2975449</title><guid isPermaLink="false">2975449@Uncensored</guid><description><![CDATA[I used uucp bangpaths way back when for email and I loved them(sorta) at the
time.  I also had 100+ bbs phone numbers, login/password tuples memorized.
 
  
 The old grey matter ain't what she used to be. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2974515</link><pubDate>Thu, 05 May 2011 17:18:39 +0500</pubDate><title>Message #2974515</title><guid isPermaLink="false">2974515@Uncensored</guid><description><![CDATA[ traceroute--or tracert on Windows--is a "low-level" network tool that will
report round-trip times on a per-hop basis to a destination.  It does its
thing using ICMP packets, so it's best suited for gauging network delay. 
You'd need an application-specific tool to test how long it takes the destination
to process a request. 
  
 For DNS, though, don't nslookup and dig have options to report the time it
takes to fulfill a request? 
   tracebinder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2974307</link><pubDate>Thu, 05 May 2011 09:29:10 +0500</pubDate><title>Message #2974307</title><guid isPermaLink="false">2974307@Uncensored</guid><description><![CDATA[Not related to dns lookups, but httping has been a usefull tool for me to test connection setup and time it takes to get the headers instead of a whole page, but that would be testing the web server instead of response times for dns. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2974305</link><pubDate>Thu, 05 May 2011 09:26:28 +0500</pubDate><title>Message #2974305</title><guid isPermaLink="false">2974305@Uncensored</guid><description><![CDATA[If you are using scp for transfers and it takes a bit to get connected, you could try to disable reverse dns lookups on the server end: 
 Edit /etc/ssh/sshd_config and add UseDNS no 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2973841</link><pubDate>Wed, 04 May 2011 15:01:04 +0500</pubDate><title>Message #2973841</title><guid isPermaLink="false">2973841@Uncensored</guid><description><![CDATA[ Here's a question for ya. 
 There's zillions of speed tests on the internet, but I'm trying to find a
connectivity test that's not about speed, and I can't. 
  As in, I want it to see how long it takes to look up dns, I want to see
how long it takes to connect, and the latency, things like that. 
  Once it gets going my mass data transfers are fast, but sometimes there's
a lot of lag in  starting a new connection or just hangups in the middle.

  
  Are there any popular good diagnostic tests?  I realize it would have to
be a linux program not a webpage if it were going to be reall good, but I'll
take anything at this point. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2973371</link><pubDate>Tue, 03 May 2011 16:33:35 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2973371@Uncensored</guid><description><![CDATA[ But then how do you refer to your machine from the open net? 
  Is everybody going to start being universe.galaxy.westernspiralarm.whatexactlyiswestwhenyourereferringtothegalax
y.unfashionableend.earth.us.ny.mtkisco.me 
   
  That's a hell of a url. 
  Of course that's google's problem, not ours. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2972889</link><pubDate>Mon, 02 May 2011 22:37:28 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2972889@Uncensored</guid><description><![CDATA[<html><body>

<blockquote>
<div class="message_content">
<div class="fmout-JUSTIFY"><br />The fat client / thin client circle has now gone around one and a half times, and different people will tell you one or the other is better. It also might be that the registering-yourself thing worked well in small networks but doesn't work well at the internet level for some as yet unforseen reason.</div>
</div>
</blockquote>
<p>We're not talking about registering your host with DNS at the "entire Internet" level.  What would happen (and in some cases is already happening) is that your host registers itself with your <em>local</em> nameserver.  In a well-integrated network it'll actually happen automatically.  (This was easier when there was such a thing as DHCP, but we'll get there anyway)</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2970393</link><pubDate>Tue, 26 Apr 2011 16:04:35 +0500</pubDate><title>Message #2970393</title><guid isPermaLink="false">2970393@Uncensored</guid><description><![CDATA[ Some of us are programmers who don't trust their network department so had
to learn a few of the more simple things about networking. 
  
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2970391</link><pubDate>Tue, 26 Apr 2011 15:59:35 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2970391@Uncensored</guid><description><![CDATA[ >you imagine a routine change of your provider-assigned address   
 >renumbering your entire internal network?  If they do that, I'd rather 
 
 >be assigned a single /128 for my firewall and run NAT66.   
  
  Okay, maybe my as-yet-unforseen problem has already been forseen. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2970390</link><pubDate>Tue, 26 Apr 2011 15:57:52 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2970390@Uncensored</guid><description><![CDATA[ >will become common for hosts to automatically register themselves with 
 
 >nameservers, and we will have come full circle.   
  
  Ahhh but which one is better? 
    
  The fat client / thin client circle has now gone around one and a half times,
and different people will tell you one or the other is better. It also might
be that the registering-yourself thing worked well in small networks but doesn't
work well at the internet level for some as yet unforseen reason. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2970354</link><pubDate>Tue, 26 Apr 2011 14:14:30 +0500</pubDate><title>Message #2970354</title><guid isPermaLink="false">2970354@Uncensored</guid><description><![CDATA[ And some of us work in the networking equipment industry.  :) 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2970201</link><pubDate>Mon, 25 Apr 2011 22:49:36 +0500</pubDate><title>Message #2970201</title><guid isPermaLink="false">2970201@Uncensored</guid><description><![CDATA[Some of us work in the ISP industry :) 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2968136</link><pubDate>Mon, 18 Apr 2011 00:18:17 +0500</pubDate><title>Message #2968136</title><guid isPermaLink="false">2968136@Uncensored</guid><description><![CDATA[Oh how I wish I understood this all. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2967197</link><pubDate>Thu, 14 Apr 2011 03:07:14 +0500</pubDate><title>Message #2967197</title><guid isPermaLink="false">2967197@Uncensored</guid><description><![CDATA[They do something similar here in Stockholm. The city has a fiber backbone
that all the ISPs sell subscriptions to. 
 Some allow edge-premise routing-switching while others require one arm routing
back at the internet handoff. 
 I personally think having the ability to communicate with peers unrestricted
will be a good thing and bring 
 people closer to one another in the same communities. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2967176</link><pubDate>Wed, 13 Apr 2011 23:58:09 +0500</pubDate><title>Message #2967176</title><guid isPermaLink="false">2967176@Uncensored</guid><description><![CDATA[I'm currently on a /24, and I see lots of hosts are pingable within the subnet.
 And it seems that unlike Acecape, Verizon is letting me connect to various
open ports on thos hosts.   
  
 Interestingly, all of them have the same MAC address.  Also, I'm not able
to DHCP for more than one IPv4 address at a time.  Clearly the equipment on
the FiOS network is doing more than just bridging Ethernet between the port
on my ONT and an upstream router somewhere.  Probably both the ONT and OLT
are configured to pass IPv4 through in a specific way. 
  
 Doing this effectively with IPv6 would require passing the router advertisements
downstream, and then admitting the subscriber's various IPv6 addresses upstream
in an orderly fashion while both suppressing inter-subscriber broadcasts and
handling the conflicts that are created when two or more morons start hardcoding
IPv6 addresses starting at the bottom
of the subnet instead of allowing their computers and other devices to derive
their IPv6 addresses from the MAC address of each device. 
  
 It's all doable -- just a question of how they go about it.  It should be
interesting.  It would be a shame if ISP's took the easy way out.  There are
a lot of advantages to bringing back the end-to-end nature of the Internet,
even from the ISP's point of view.  For example, I'm sure that the ones who
provide both Internet and Television would love to be able to talk to the
various DVR's and other set top boxes without having to resort to stupid router
tricks. 
  
 And there's really no reason not to let the subscribers have as many IPv6
addresses as they want.  It's not as if we're back in 1999 and ISP's are still
arguing that NAT violates their ToS because you're connecting multiple endpoints
and only paying for one.  These days, most of them even *give* you the router.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2967142</link><pubDate>Wed, 13 Apr 2011 20:59:18 +0500</pubDate><title>Message #2967142</title><guid isPermaLink="false">2967142@Uncensored</guid><description><![CDATA[  
 Right now, I'm sitting on a /23, so I don't see how the situation is fundamentally
different than what's already happening: that /23 must be bridged to other
local customers. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2967100</link><pubDate>Wed, 13 Apr 2011 18:06:33 +0500</pubDate><title>Message #2967100</title><guid isPermaLink="false">2967100@Uncensored</guid><description><![CDATA[Acecape does something similar with IPv4 on their DSL circuits.  They give
you an address on a /24 but it's restricted somehow at the DSLAM so that you
can't use an unassigned address or exchange packets with anyone on that subnet
other than the default gateway.  If you sniff it, though, you see lots of
ARP going over the wire. 
  
 Scoping a /64 across an entire "node" (~500 subscribers for cable, 32 subscribers
for PON, and for DSL it would probably be whatever the line capacity of a
single DSLAM is) seems to make sense from a capacity planning point of view,
*if* they could find a way to keep neighbors from stepping on each other too
much.  At first it seems feasible to simply restrict intra-node traffic at
layer 2, until you consider that it's perfectly reasonable that neighbors
might want to Skype or play online games with each other, etc. 
  
 Perhaps it would be sufficient to restrict
*broadcast* traffic at the demarc (in the cable/DSL modem or ONT, or even
in a consumer grade IPv6-ready firewall) so that traffic flows freely but
neighbors don't end up in one big "network neighborhood" when they bring their
computers online.  Or if we're going to return to the good old days of firewalls
that just do filtering and not NAT, then a properly configured consumer-grade
firewall would simply drop all inbound packets that are not known to be part
of an existing flow -- but it would have to do it without routing. 
  
 On the other hand, one would think that The Man would very much like to have
static IPv6 down to the device level for tracking purposes.  MPAA/RIAA types
would enjoy it.  "Law" enforcement types would have an easier time nailing
people for non-crimes.  And the folks who sell your information would be able
to tell the difference between traffic originating from different computers
in the same household. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2967057</link><pubDate>Wed, 13 Apr 2011 14:54:08 +0500</pubDate><title>Message #2967057</title><guid isPermaLink="false">2967057@Uncensored</guid><description><![CDATA[  
 Seems more likely that your home network might just get bridged onto the
provider's cable plant, so their whole network in your neighborhood looks
like one big Ethernet segment. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2967021</link><pubDate>Wed, 13 Apr 2011 12:42:25 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2967021@Uncensored</guid><description><![CDATA[Ideally you're going to get a /64 which is what the designers intended, but
even handing those out on a dynamic basis could be annoying.  Can you imagine
a routine change of your provider-assigned address renumbering your entire
internal network?  If they do that, I'd rather be assigned a single /128 for
my firewall and run NAT66. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966993</link><pubDate>Wed, 13 Apr 2011 10:57:02 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2966993@Uncensored</guid><description><![CDATA[Theydll switch it to a change request fee. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966782</link><pubDate>Tue, 12 Apr 2011 17:10:16 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2966782@Uncensored</guid><description><![CDATA[ >I think the biggest change is getting out of the NAT mindset.  IPv6   
 >restores the original end-to-end nature of the Internet.   
  
 How much you want to bet that residential access providers will continue
to charge extra $ for more than one IPv6 address, continue to assign dynamic
addresses, etc -- just to create an artificially tiered service? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966692</link><pubDate>Tue, 12 Apr 2011 13:00:15 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2966692@Uncensored</guid><description><![CDATA[I think the biggest change is getting out of the NAT mindset.  IPv6 restores
the original end-to-end nature of the Internet. 
  
 Allowing hosts to perform router discovery and generate their own IPv6 addresses,
reminds me of the old days of Netware IPX/SPX.  Hopefully it will become common
for hosts to automatically register themselves with nameservers, and we will
have come full circle. 
  
 I use static IPv6 addresses for routers, and for DNS servers.  Everything
else uses the address automatically assigned using router discovery plus the
MAC address.  At the moment, my workflow is to log in using IPv4 and then
copy-and-paste the IPv6 address into the DNS server.  This seems suboptimal
and I would like to see the process automated. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966566</link><pubDate>Tue, 12 Apr 2011 02:14:16 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2966566@Uncensored</guid><description><![CDATA[With my admittedly limited understanding of networking though, it seems like
the RSA signed packet DoS is specific to IPv6 and it prevents router spoofing
but opens a different can of worms. I've experienced many times rouge DHCP
servers on IPv4 networks, mostly accidental though. 
  
 FWIW the guy whose website I'm linking to, Sam Bowne, gave this talk at Defcon
which I found on youtube and found very informative regarding IPv6, having
known little to nothing about it before : http://www.youtube.com/watch?v=zIUgH2wVt_0

  
 So much to learn though. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966543</link><pubDate>Mon, 11 Apr 2011 23:23:02 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2966543@Uncensored</guid><description><![CDATA[<html><body>

<p>Well, yes, it <em>is</em> possible to operate a rogue IPv6 router and fool the local machines into using you as their default gateway, but it's just as possible to operate a rogue DHCP server on an IPv4 network.  It's an issue but it isn't a <em>new</em> issue, nor is it a show-stopping one.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966496</link><pubDate>Mon, 11 Apr 2011 19:28:18 +0500</pubDate><title>Message #2966496</title><guid isPermaLink="false">2966496@Uncensored</guid><description><![CDATA[Here's another less nasty one that also affects Linux http://samsclass.info/ipv6/proj/proj-124-13x-sendpees6.html:
    
    
  
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966495</link><pubDate>Mon, 11 Apr 2011 19:24:51 +0500</pubDate><title>Message #2966495</title><guid isPermaLink="false">2966495@Uncensored</guid><description><![CDATA[Not much, but that's a pretty severe wide open problem. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966469</link><pubDate>Mon, 11 Apr 2011 17:21:56 +0500</pubDate><title>Message #2966469</title><guid isPermaLink="false">2966469@Uncensored</guid><description><![CDATA[So ... Windows is inexcusably insecure out of the box.  What else is new?

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966437</link><pubDate>Mon, 11 Apr 2011 15:58:23 +0500</pubDate><title>Message #2966437</title><guid isPermaLink="false">2966437@Uncensored</guid><description><![CDATA[If you have Router Discovery turned on, you're still vunerable to this one:

 http://samsclass.info/ipv6/proj/flood-router6a.htm 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966364</link><pubDate>Mon, 11 Apr 2011 11:27:23 +0500</pubDate><title>Message #2966364</title><guid isPermaLink="false">2966364@Uncensored</guid><description><![CDATA[I've been hard at work IPv6-enabling our data center.  So far, the only "security
holes" I've seen were incompetent administrators who forget to do simple things
like putting up firewalls. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2966211</link><pubDate>Sun, 10 Apr 2011 22:30:17 +0500</pubDate><title>Message #2966211</title><guid isPermaLink="false">2966211@Uncensored</guid><description><![CDATA[Is anyone currently messing around with or using IPv6 in a production environment?
If so, what client OS(s) are you using? There seem to be a lot of Dreally
bad, unpatched, easy to run IPv6 based DoS attacks for Windows and Linux out
there right now. :-/ 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2963370</link><pubDate>Tue, 05 Apr 2011 20:57:58 +0500</pubDate><title>Message #2963370</title><guid isPermaLink="false">2963370@Uncensored</guid><description><![CDATA[ I've heard of the dns tunnel thing but I've never tried it. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2961536</link><pubDate>Tue, 05 Apr 2011 16:08:09 +0500</pubDate><title>Message #2961536</title><guid isPermaLink="false">2961536@Uncensored</guid><description><![CDATA[you could always try tunneling a vpn over dns... not sure what thruput is
possible tho. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2957609</link><pubDate>Mon, 04 Apr 2011 13:23:29 +0500</pubDate><title>Message #2957609</title><guid isPermaLink="false">2957609@Uncensored</guid><description><![CDATA[ Good to know, I just didn't get it, and it just killed me that something
that unexplainable was going on. 
  Thaks for the explanation. 
  fuckin nazis. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2957408</link><pubDate>Sun, 03 Apr 2011 23:20:49 +0500</pubDate><title>Message #2957408</title><guid isPermaLink="false">2957408@Uncensored</guid><description><![CDATA[ >  Network Administrator, Zero Internet.   
  
 Heh.  By the way Ford, I've recently had a chance to see an HTTPS proxy,
and it works exactly as we suspected it does -- they basically force you to
accept a man-in-the-middle attack from your local NAZI. 
  
 Then they perform ordinary proxy services on it.  That's why fun SSL tunneling
games don't work. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2956931</link><pubDate>Sat, 02 Apr 2011 00:35:59 +0500</pubDate><title>Message #2956931</title><guid isPermaLink="false">2956931@Uncensored</guid><description><![CDATA[  
 http://www.rfc-editor.org/rfc/rfc5984.txt 
  
 Better late than never... 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2956880</link><pubDate>Fri, 01 Apr 2011 19:28:14 +0500</pubDate><title>Message #2956880</title><guid isPermaLink="false">2956880@Uncensored</guid><description><![CDATA[I R Not a Network Admin, but am apparently playing one on this (very last,
ever, I promised myself) side gig.  I'd rather have my free time to go play
with my DSLR and do something more creative than protecting networks from
their users. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2956809</link><pubDate>Fri, 01 Apr 2011 15:38:47 +0500</pubDate><title>Message #2956809</title><guid isPermaLink="false">2956809@Uncensored</guid><description><![CDATA[  For years I have known that the NA in nazi stands for network administrator,
but it wasn't until last week when a friend of mine enlightened me as to what
the entire acronym stood for: 
  Network Administrator, Zero Internet. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2956691</link><pubDate>Fri, 01 Apr 2011 10:50:24 +0500</pubDate><title>Message #2956691</title><guid isPermaLink="false">2956691@Uncensored</guid><description><![CDATA[oh and my management tool of choice is ssh and minicom, plus simple bash or
ruby scripts to generate configs. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2956690</link><pubDate>Fri, 01 Apr 2011 10:46:48 +0500</pubDate><title>Message #2956690</title><guid isPermaLink="false">2956690@Uncensored</guid><description><![CDATA[I trust a security device farther than a mere switch, no matter how smart
the switches are.   All network management will be turned off, everything
set up via serial console only.  Each vendor gets one network jack, each jack
gets its own vlan, each vlan gets a 192.168.x.0/24 and dhcp scope and is nat
out to the internet.  Each vendor is mostly going to have one point of sale
terminal that uses its own crypto.            
          
 whatever encryption it uses.         
        
      
      
 If multiple stalls are one vendor, put them in the same vlan.  otherwise,
if someone needs more jacks, they can put their own crappy dlink in.     
    
    
 This way we can also plug the ATMs in to any jack, and there is also structured
wifi going in on a completely different firewall interface for the public
to use.   
  
  
  
 I will look into switch level ACL butI don't think we will need that. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2956373</link><pubDate>Thu, 31 Mar 2011 17:34:05 +0500</pubDate><title>Message #2956373</title><guid isPermaLink="false">2956373@Uncensored</guid><description><![CDATA[ If these are switches that can be managed via SNMP, you might be able to
push the configs out by using some form of SNMP manager software.  However,
you may still have to resort to some scripting depending on the tool you're
using. 
  
 I can understand the firewall being used to help protect the customers, but
why not implement the customer isolation via switch-based ACLs?  If you create
a private class B (192.168.0.0/16) network, you can divy up the subnet space
for each customer.  Then slap on an ACL that denies all traffic to 192.168.0.0/16,
but allows traffic to DHCP/DNS servers and the internet.  Then you could use
the firewall to NAT the private class C to the public network. 
  
 I'll warn that even though I test software for network switches and routers,
my main job is not deploying networks, so I may be speaking out of my ass.
:P 
   ACL Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2956141</link><pubDate>Thu, 31 Mar 2011 02:46:34 +0500</pubDate><title>Message #2956141</title><guid isPermaLink="false">2956141@Uncensored</guid><description><![CDATA["It should be encrypted anyways" would be the line I would use.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2956128</link><pubDate>Thu, 31 Mar 2011 00:54:11 +0500</pubDate><title>Message #2956128</title><guid isPermaLink="false">2956128@Uncensored</guid><description><![CDATA[Working on a little side project, building a network for a local farmer's
market.  Firewalling off every stall (actually, every network jack) from each
other using vlans out the wazoo.  Thankfully I have a nice Juniper SRX device
and hp switches which can have their configs created by scripts.  So far,
3K lines in the firewall.  Verbose  
 little sucker. ~30 line script for that part... 
  
 So, just what do sysadmins that can't script do when they are presented with
a problem like this? 
  
 Oh wait, they wouldn't even try.  It'd be one big flat lan and let vendor
A snoop on point of sale traffic from vendor B etc etc 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2936259</link><pubDate>Fri, 25 Feb 2011 12:27:49 +0500</pubDate><title>Message #2936259</title><guid isPermaLink="false">2936259@Uncensored</guid><description><![CDATA[Well yes, we do need a few zillion nanobots on the 'net. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2936111</link><pubDate>Fri, 25 Feb 2011 08:02:03 +0500</pubDate><title>Message #2936111</title><guid isPermaLink="false">2936111@Uncensored</guid><description><![CDATA[<html><body>

<p>heh, the XKCD is just in time for this ;-)</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2935857</link><pubDate>Thu, 24 Feb 2011 15:40:53 +0500</pubDate><title>Message #2935857</title><guid isPermaLink="false">2935857@Uncensored</guid><description><![CDATA[Here's a nice article for some people to catch up on IPv6 at: 
  
 http://tinyurl.com/misconceptions-about-ipv6 
  
 "The 6 biggest misconceptions about IPv6" 
  
  
 Is your network IPv6 enabled yet?  Is your software ready? 
  
 I happen to be the biggest advocate of IPv6 at my workplace.  It's an uphill
battle because no one wants it, no one is asking for it, but it's going to
become necessary very soon and very quickly. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2934289</link><pubDate>Mon, 21 Feb 2011 15:40:58 +0500</pubDate><title>Message #2934289</title><guid isPermaLink="false">2934289@Uncensored</guid><description><![CDATA[ > I think if you run SSL-within-SSL, however, you might be able to fake 
 
 >it out.  Not quite sure here.   
  
 ahhh, hadn't thought of that. I think I'll go have a bananna. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2933641</link><pubDate>Sun, 20 Feb 2011 05:13:53 +0500</pubDate><title>Message #2933641</title><guid isPermaLink="false">2933641@Uncensored</guid><description><![CDATA[<html><body>

<p>well, working in a big company now... everybody is bitching around with the windows xp images we have to use.</p>
<p>(thank god meanwhile everybody accepted the fact that willi can't live with a wintendo alone, so I still have my linux desktop around, and use the laptop to accept meeting invitations via outlook, and if I need a faster browser, or watch a video with my headphones so I don't have to crawl under the desk to plug them in...)</p>
<p>but there were rumors that a virualized XP under the gemalto xp runs _faster_ with less pain than the native os.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2933493</link><pubDate>Sat, 19 Feb 2011 17:53:05 +0500</pubDate><title>Message #2933493</title><guid isPermaLink="false">2933493@Uncensored</guid><description><![CDATA[They might even go as far as to fail to connect you unless your browser presents
a client certificate signed by Big Brother. 
  
 I think if you run SSL-within-SSL, however, you might be able to fake it
out.  Not quite sure here. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2933489</link><pubDate>Sat, 19 Feb 2011 17:43:43 +0500</pubDate><title>Message #2933489</title><guid isPermaLink="false">2933489@Uncensored</guid><description><![CDATA[ > Of course, if you're working in a big company, your IT department may 
 
 >have "helpfully" pre-configured your computer to trust Big Brother's   
 >certificate.   
  
 That's what I figured. I gather that these big firewall implementations come
with "windows clients" that probably do a lot more than just install a big
brother  certificate. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2933442</link><pubDate>Sat, 19 Feb 2011 15:25:56 +0500</pubDate><title>Message #2933442</title><guid isPermaLink="false">2933442@Uncensored</guid><description><![CDATA[Entirely possible, but at some point you would indeed have to accept a certificate
that wasn't quite up to snuff.  Either the CA would be untrusted or the DN
wouldn't match. 
  
 Of course, if you're working in a big company, your IT department may have
"helpfully" pre-configured your computer to trust Big Brother's certificate.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2933186</link><pubDate>Fri, 18 Feb 2011 17:43:24 +0500</pubDate><title>Message #2933186</title><guid isPermaLink="false">2933186@Uncensored</guid><description><![CDATA[ Remember a long long long time ago we were discussing openning connections
on port 443 and how you should have a direct connection out becuse there's
no way to mimick the security? 
  At AT&T I found this to be the case I had a direct connection out. But where
I am now, I don't have a direct connection out and it just occurred to me,
can't they just be doing a man in the middle with me? 
  All my connections go to the firewall, so they send me a certificate that
I accept and they look at the request before making their own connection out
to the actual site. 
  Isn't that entirely possible? And since I though of it I can't imagine why
they wouldn't do that. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2931972</link><pubDate>Wed, 16 Feb 2011 14:46:47 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2931972@Uncensored</guid><description><![CDATA[ >The point of World IPv6 Day is to accelerate the deployment of IPv6   
 >without resorting to stupid tricks./   
  
 but stupid tricks won't cause any downtime. This is business, remember...

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2931971</link><pubDate>Wed, 16 Feb 2011 14:45:46 +0500</pubDate><title>Message #2931971</title><guid isPermaLink="false">2931971@Uncensored</guid><description><![CDATA[ > The one big reason I could see why they're only doing a temporary   
 >switch is the worst-case where there's some kind of issue that can't be
 
 >resolved in that 24 hour period.  I'm not an admin of any large   
  
  I'm sorry but what company in the world would be willing to take the possibility
of a 24 hour outage or even partial outage for no reason? Just to give their
competitors a leg up? I think not. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2931970</link><pubDate>Wed, 16 Feb 2011 14:44:36 +0500</pubDate><title>Message #2931970</title><guid isPermaLink="false">2931970@Uncensored</guid><description><![CDATA[ > The idea is for everyone to get a chance to see what works and what   
 >breaks when IPv6 is deployed as a top-level protocol instead of a side 
 
 >offering.   
  
  I can tell you what's going to happen. A lot of shit it going to break and
people are going to find out it was becuase of this new ipv6 thing and then
everybody's going to rally against it because it doesn't do anything but break
shit. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2929617</link><pubDate>Fri, 11 Feb 2011 14:43:51 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2929617@Uncensored</guid><description><![CDATA[ok, that's a pretty good example of "resorting to stupid tricks"  :) 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2928675</link><pubDate>Wed, 09 Feb 2011 19:55:15 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2928675@Uncensored</guid><description><![CDATA[<html><body>

<p> </p>
<blockquote>
<div class="message_header"><span>Tue Feb 08 2011 12:36:18 AM EST</span> <span>from   Harbard @ Uncensored </span></div>
<div class="message_content">
<p>Is there any reason they can't run both systems in parallel for awhile?</p>
<br /></div>
</blockquote>
<p>Its already being done at Google, the problem is that if they turn on AAAA today for everyone, a small amount of users will break (buggy ISP DNS servers, broken 6to4 etc.), or slow down (far away 6to4 or tunnel).</p>
<p>So at the moment ISPs can apply to be whitelisted if they operate a proper v6 network: http://www.google.com/intl/en/ipv6/</p>
<pre>dig AAAA www.google.com

;; QUESTION SECTION:
;www.google.com.            IN  AAAA

;; ANSWER SECTION: 
www.google.com.     48216   IN  CNAME   www.l.google.com.
www.l.google.com.   296 IN  AAAA    2404:6800:8004::68

;; AUTHORITY SECTION:
google.com.     23060   IN  NS  ns4.google.com.
google.com.     23060   IN  NS  ns3.google.com.
google.com.     23060   IN  NS  ns2.google.com.
google.com.     23060   IN  NS  ns1.google.com.

;; ADDITIONAL SECTION:
ns1.google.com.     85456   IN  A   216.239.32.10
ns2.google.com.     12381   IN  A   216.239.34.10
ns3.google.com.     31819   IN  A   216.239.36.10
ns4.google.com.     84751   IN  A   216.239.38.10

;; Query time: 35 msec

;; SERVER: 2001:44b8:1::6#53(2001:44b8:1::6)

;; WHEN: Fri Feb 4 15:10:14 2011

;; MSG SIZE rcvd: 216<br /><br /><br />
</pre>
<p>The main .google.com services have AAAA's, but not YouTube or Groups.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2928308</link><pubDate>Wed, 09 Feb 2011 07:07:33 +0500</pubDate><title>Message #2928308</title><guid isPermaLink="false">2928308@Uncensored</guid><description><![CDATA[<html><body>

<p>It seems like a wise plan to me.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2928083</link><pubDate>Tue, 08 Feb 2011 16:57:48 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2928083@Uncensored</guid><description><![CDATA[The point of World IPv6 Day is to accelerate the deployment of IPv6 without
resorting to stupid tricks./ 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2928002</link><pubDate>Tue, 08 Feb 2011 14:09:30 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2928002@Uncensored</guid><description><![CDATA[<html><body>

<p>hm, why not simply add a 1x1 gif to the ipv6 URL and check the relation between the download of that image and the ipv4 users?</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2927804</link><pubDate>Tue, 08 Feb 2011 07:43:53 +0500</pubDate><title>Message #2927804</title><guid isPermaLink="false">2927804@Uncensored</guid><description><![CDATA[They can, and they will.  Many currently do. 
  
 A lot of major sites currently offer IPv6 but require a different name to
access the site, such as http://ipv6.google.com because they are afraid that
users with badly configured IPv6 stacks will have trouble.  World IPv6 Day
is about putting IPv6 on the *main* site for a day to see what breaks. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2927727</link><pubDate>Tue, 08 Feb 2011 00:36:18 +0500</pubDate><title>Message #2927727</title><guid isPermaLink="false">2927727@Uncensored</guid><description><![CDATA[<html><body>

<p>Is there any reason they can't run both systems in parallel for awhile?</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2927605</link><pubDate>Mon, 07 Feb 2011 17:26:58 +0500</pubDate><title>Message #2927605</title><guid isPermaLink="false">2927605@Uncensored</guid><description><![CDATA[There's no rule that says they have to switch back.  A very real possibility
is that the results are pleasing enough that many of the participants keep
the IPv6 switched on. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2927497</link><pubDate>Mon, 07 Feb 2011 12:52:02 +0500</pubDate><title>Message #2927497</title><guid isPermaLink="false">2927497@Uncensored</guid><description><![CDATA[ Bah!  I say that the switch should be permanent starting June 8th. 
  
 If there are problems, they're going to be hot-potatoes regardless of whether
those companies switch back or not.  None of them are going to have much tolerance
for downtime.  Once those problems are fixed, the costs of switching over
would essentially have been amortized, so what would they be buying by only
doing IPv6 for 24 hours? 
  
 The one big reason I could see why they're only doing a temporary switch
is the worst-case where there's some kind of issue that can't be resolved
in that 24 hour period.  I'm not an admin of any large network, but I would
think that any problem that couldn't be solved within a 24 hour period would
affect more than just IPv6 service. 
   IPv6 Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2926998</link><pubDate>Sun, 06 Feb 2011 14:20:31 +0500</pubDate><title>Message #2926998</title><guid isPermaLink="false">2926998@Uncensored</guid><description><![CDATA[Google, Fecesbook, Yahoo, Akamai, and a bunch of other major players will
be advertising IPv6 records in the DNS for their main sites for 24 hours on
that day.  In other words, if you have IPv6, you'll be able to get to Google
via IPv6 at google.com or www.google.com instead of ipv6.google.com. 
  
 The idea is for everyone to get a chance to see what works and what breaks
when IPv6 is deployed as a top-level protocol instead of a side offering.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2926420</link><pubDate>Fri, 04 Feb 2011 19:07:06 +0500</pubDate><title>Message #2926420</title><guid isPermaLink="false">2926420@Uncensored</guid><description><![CDATA[<html><body>

<p>I suspect not, as I don't know if anyone has ever heard of world IPv6 day.  I certainly haven't.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2926384</link><pubDate>Fri, 04 Feb 2011 17:49:14 +0500</pubDate><title>Message #2926384</title><guid isPermaLink="false">2926384@Uncensored</guid><description><![CDATA[ >I thought we had a backup plan: IPv6.  Wasn't that ready to be  
 >implemented?  
  
 World IPv6 Day is on June 8.  Everyone ready? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2925731</link><pubDate>Thu, 03 Feb 2011 15:02:32 +0500</pubDate><title>Message #2925731</title><guid isPermaLink="false">2925731@Uncensored</guid><description><![CDATA[ You'd still end up needing new hardware. 
  
 Sure, you could modify the software on hosts and routers to accomodate any
kind of expanded addressing scheme, but with the amount of traffic carried
by modern routers, you'd be hard pressed to make a software-only solution
capable of handling those loads.  Some kind of hardware assist would still
be necessary for performance reasons. 
   FastPath Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2925359</link><pubDate>Wed, 02 Feb 2011 21:00:21 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2925359@Uncensored</guid><description><![CDATA[ >Its here. Blame the beancounters if your ISP doesn't have it.  
  
 waste of money. Wouldn't it be cheaper to write a small layer of bigger ip
address routing on top of your favorite ip layer than to buy all this fancy
new ipv6 hardware? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2924913</link><pubDate>Wed, 02 Feb 2011 04:01:00 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2924913@Uncensored</guid><description><![CDATA[<html><body>

<p> </p>
<blockquote>
<div class="message_header"><span>Wed Feb 02 2011 12:43:09 AM EST</span> <span>from   Harbard @ Uncensored </span></div>
<div class="message_content">
<p> </p>
<p>I thought we had a backup plan: IPv6.  Wasn't that ready to be implemented?</p>
</div>
</blockquote>
<p>Its here. Blame the beancounters if your ISP doesn't have it.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2924868</link><pubDate>Wed, 02 Feb 2011 00:43:09 +0500</pubDate><title>Message #2924868</title><guid isPermaLink="false">2924868@Uncensored</guid><description><![CDATA[<html><body>

<p>Looks like the internet is full up.....</p>
<p>http://www.sciencedaily.com/releases/2011/02/110201101621.htm?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+sciencedaily+%28ScienceDaily%3A+Latest+Science+News%29</p>
<p> </p>
<p>I thought we had a backup plan: IPv6.  Wasn't that ready to be implemented?</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2914039</link><pubDate>Mon, 10 Jan 2011 10:25:12 +0500</pubDate><title>Message #2914039</title><guid isPermaLink="false">2914039@Uncensored</guid><description><![CDATA[Either the network actually is broken, or there's a race condition somewhere
in the stack that is exposed by the extra 80 ms of latency. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2912807</link><pubDate>Fri, 07 Jan 2011 07:37:44 +0500</pubDate><title>Message #2912807</title><guid isPermaLink="false">2912807@Uncensored</guid><description><![CDATA[<html><body>

<p>Yeah, in some ways, I don't understand why the west coast would have these problems.  You'd think someone could route around them.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2912669</link><pubDate>Thu, 06 Jan 2011 23:26:21 +0500</pubDate><title>Message #2912669</title><guid isPermaLink="false">2912669@Uncensored</guid><description><![CDATA[ >After examining some network packets, it seems there's something very  
 >bad that leads to occasional dropped IP packets and such when the  
 >west coast tries to communicate to this box.  But the East coast  
 >doesn't have these problems.   
  
 Clever solution, but it only goes to underscore how inferior the West Coast
is.  Now it is time to get a bunch of gangsta rappers to have extremely violent
fights over packet routing. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2912666</link><pubDate>Thu, 06 Jan 2011 23:24:57 +0500</pubDate><title>Message #2912666</title><guid isPermaLink="false">2912666@Uncensored</guid><description><![CDATA[ >When I disable (shutdown) the VM's for web and citadel, I can connect  
 >to all of my other ports. (5800, 10000, etc...)   
  
 IP address conflict? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2912558</link><pubDate>Thu, 06 Jan 2011 17:27:47 +0500</pubDate><title>Message #2912558</title><guid isPermaLink="false">2912558@Uncensored</guid><description><![CDATA[<html><body>

<p>We did something kinda cool today.</p>
<p>A caption company wants to do captioning in Israel, but obviously can't afford either the phone lines to Israel, or to hire/train writers in Israel.</p>
<p>So, they want to use our TCP/IP based solution.</p>
<p>Unfortunately, their writers kept having drop-outs and so on when they tried to connect to our machine over there.  But, we didn't have these problems.</p>
<p>After examining some network packets, it seems there's something very bad that leads to occasional dropped IP packets and such when the west coast tries to communicate to this box.  But the East coast doesn't have these problems.</p>
<p>So, we routed the a/v and steno feeds to one of our boxes in the east coast (where the writers have no problems connecting), and had the writers connect to the east coast instead of directly to Israel.  Worked like a charm!</p>
<p>This would not have worked if we hadn't designed the product in a unix-like way.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2912451</link><pubDate>Thu, 06 Jan 2011 12:30:00 +0500</pubDate><title>Message #2912451</title><guid isPermaLink="false">2912451@Uncensored</guid><description><![CDATA[<html><body>

<p>Ok.. this is odd.</p>
<p><br />From work, with my web server and citadel server running, I can't access any of my other ports except for 80.</p>
<p><br />When I disable (shutdown) the VM's for web and citadel, I can connect to all of my other ports. (5800, 10000, etc...)</p>
<p><br />Is there any explaination for that or am I going insane?</p>
<p>I havent tried running web and citadel on a different machine on network because i dont have a 2nd machine to do so...</p>
<p>-- <br />Stephen D King<br />Network Admin<br />Blurred Vizion Studios<br />outsider@blurredvizionstudios.com</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2911321</link><pubDate>Tue, 04 Jan 2011 12:33:46 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2911321@Uncensored</guid><description><![CDATA[ >If you are looking for one, make sure they use the 'AV' standard  
 >(200mbit/s physical layer), not the earlier models.  
  
 thanks for the tip. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2910709</link><pubDate>Mon, 03 Jan 2011 08:09:59 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2910709@Uncensored</guid><description><![CDATA[<html><body>

<p>I use a pair of HomePlugs, they work well, get around 80mbit/s sustained throughput without issues. Latency is around 3ms.</p>
<p>If you are looking for one, make sure they use the 'AV' standard (200mbit/s physical layer), not the earlier models.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2910686</link><pubDate>Mon, 03 Jan 2011 06:43:39 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2910686@Uncensored</guid><description><![CDATA[<html><body>

<p>hm, maybe an USB plug one would allso do the job? you can put a longer wire inbetween the thumd thing and the PC to find a place with better reception</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2910600</link><pubDate>Sun, 02 Jan 2011 21:56:02 +0500</pubDate><title>Message #2910600</title><guid isPermaLink="false">2910600@Uncensored</guid><description><![CDATA[ > Otherwise, what you're describing *can* be done, but not with an   
 >off-the-shelf router.  Is the device you want to attach an ordinary   
 >computer?  If so, you're better off just buying a PCI wifi card.  Or   
 >you could buy a pair of HomePlug bridges and send the network signal   
 >over your power lines.   
  
  Well that's the problem the machine (an ordinary PC) has a pci wifi card
in it and it loses signal all the time. 
  So I bought my parents a shiny new super range n router and then ran into
the political problem of the havoc it would cause to take out the old one
and put the new one in and reconfigure it. So I'm trying to think of ways
to make it go without having to touch the existing router. 
  My dad said he tried a range extender/reamplifier (I forget what they're
called) half way between floors 1 and 3 where the router and the PC are with
no effect. 
   Didn't know about homeplug bridges though. I'll check that out, thanks.
Do they actually work? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2910507</link><pubDate>Sun, 02 Jan 2011 14:05:52 +0500</pubDate><title>Message #2910507</title><guid isPermaLink="false">2910507@Uncensored</guid><description><![CDATA[Ford, is there any chance that you've got coax running where you need the
network?  If so, you could just buy another MI424WR on eBay and bridge it
back to the MoCA environment you've already got in place. 
  
 Otherwise, what you're describing *can* be done, but not with an off-the-shelf
router.  Is the device you want to attach an ordinary computer?  If so, you're
better off just buying a PCI wifi card.  Or you could buy a pair of HomePlug
bridges and send the network signal over your power lines. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2910386</link><pubDate>Sun, 02 Jan 2011 04:00:39 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2910386@Uncensored</guid><description><![CDATA[<html><body>

<p>they call it bridge these days.</p>
<p>yes, its possible.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2910315</link><pubDate>Sat, 01 Jan 2011 19:57:42 +0500</pubDate><title>Message #2910315</title><guid isPermaLink="false">2910315@Uncensored</guid><description><![CDATA[  I had an interesting thoguht today. 
   
  You once explained to me (and I set it up and it worked) how I could hook
up a wireless router as a range extender by plugging (I think, if I remember
right) a wire from a port on router 1 to a non-wan port on router 2 and use
a different channel and voila it worked. 
   Now I have the opposite problem. 
  I can't run a wire. But can I use another wireless router to pick up the
signal from wireless router 1 and then plug a pc into wireless router 2? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2896690</link><pubDate>Fri, 31 Dec 2010 17:25:18 +0500</pubDate><title>Message #2896690</title><guid isPermaLink="false">2896690@Uncensored</guid><description><![CDATA[One machine does not a cloud make.  :) 
  
 I really wish I could install a custom firmware on my router (which is really
just being used as an ethernet/wifi/moca bridge behind my *real* firewall)
but there aren't any drivers for the moca interface. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2895188</link><pubDate>Wed, 29 Dec 2010 13:07:30 +0500</pubDate><title>Message #2895188</title><guid isPermaLink="false">2895188@Uncensored</guid><description><![CDATA[ >substantially lower than a dedicated firewall.  "It's in the cloud."  
  
 or more specifically the machine cloud.xand.com :-) 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894921</link><pubDate>Tue, 28 Dec 2010 20:05:04 +0500</pubDate><title>Message #2894921</title><guid isPermaLink="false">2894921@Uncensored</guid><description><![CDATA[<html><body>

<p>Never mind.  There is no replacement firmware.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894911</link><pubDate>Tue, 28 Dec 2010 19:53:59 +0500</pubDate><title>Message #2894911</title><guid isPermaLink="false">2894911@Uncensored</guid><description><![CDATA[<html><body>

<p>I just spent two hours updating the firmware in my router.  It was 7 years out of date.  Why two hours?  The updater on the router's server will only work with Internet Explorer.  Not Chrome, not Firefox, not Safari.  No mention of it in any manual or on Cisco's web site.  I don't think they even realize it.  They wrote a special program for people having problems...Windows or Apple only of course.</p>
<p> </p>
<p>Now on to my question...is there any good reason not to change the firmware to some open source firmware?  if any is available....</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894465</link><pubDate>Mon, 27 Dec 2010 20:32:17 +0500</pubDate><title>Message #2894465</title><guid isPermaLink="false">2894465@Uncensored</guid><description><![CDATA[<html><body>

<p>Oh, you meant the shared firewall.  Yes, it is a single point of failure.  We actually have two of them, with the configuration replicated to the standby unit in case the primary one suffers a hardware failure.</p>
<p>Yes, if it were to experience a problem, that problem would have an effect on all of the subscribers.  However, the service is priced substantially lower than a dedicated firewall.  "It's in the cloud."</p></body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894432</link><pubDate>Mon, 27 Dec 2010 18:00:35 +0500</pubDate><title>Message #2894432</title><guid isPermaLink="false">2894432@Uncensored</guid><description><![CDATA[If you have carrier and device redundancy, then sure.  That's where BGP comes
in. 
  
 There are first-hop redundancy methods that you can use as well.  VRRP is
possible in Linux. 
  
 If any of those 80 customers is subject to even a small DDOS however, both
primary and secondary devices will go tits up in the blink of an eye.  That's
true with any CPU-based router though. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894392</link><pubDate>Mon, 27 Dec 2010 15:56:37 +0500</pubDate><title>Message #2894392</title><guid isPermaLink="false">2894392@Uncensored</guid><description><![CDATA[so each of those 70 networks will route to a different carrier if one of the
routeable links goes down?  
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894367</link><pubDate>Mon, 27 Dec 2010 15:08:08 +0500</pubDate><title>Message #2894367</title><guid isPermaLink="false">2894367@Uncensored</guid><description><![CDATA[ > Doesn't that one machine serve as a rather large single point of   
 >failure if it's responsible for so many networks?   
  
 Absolutely.  That's why you run BGP to multiple transit carriers and peers
using multiple routers.  If you build it correctly you can suffer a transit
carrier failure, a link failure, or a hardware failure without taking down
your network. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894364</link><pubDate>Mon, 27 Dec 2010 15:03:20 +0500</pubDate><title>Message #2894364</title><guid isPermaLink="false">2894364@Uncensored</guid><description><![CDATA[That's the kind of example I was looking for.  Thanks for posting it.  It
does seem to confirm what I suspected -- the Linux router will provide exceptionally
good throughput in terms of Mbps per dollar, at the expense of per-packet
latency. 
  
 I think we're going to set one up on a non-critical link and see how it runs.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894358</link><pubDate>Mon, 27 Dec 2010 15:02:05 +0500</pubDate><title>Message #2894358</title><guid isPermaLink="false">2894358@Uncensored</guid><description><![CDATA[ Doesn't that one machine serve as a rather large single point of failure
if it's responsible for so many networks? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2894333</link><pubDate>Mon, 27 Dec 2010 13:49:29 +0500</pubDate><title>Message #2894333</title><guid isPermaLink="false">2894333@Uncensored</guid><description><![CDATA[Take a look at: http://docs.rodecker.nl/10-GE_Routing_on_Linux.pdf 
  
 Throwing newer hardware may improve the numbers, but he was able to achieve
8Gbps forwarding performance at 1518B frames, which is significantly better
than what you'd see, for example, on a Cisco 7206VXR w/NPE-G2. The ultimate
bottleneck is PPS, which was dismal compared to the same platform (700,000pps
vs. 2,000,000). 
  
 If you turn on any features, such as stateful connection tracking which you're
probably using in your firewall example, and possibly even dot1q tagging as
you mentioned earlier, the numbers may take a dive. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2893739</link><pubDate>Sat, 25 Dec 2010 19:33:16 +0500</pubDate><title>Message #2893739</title><guid isPermaLink="false">2893739@Uncensored</guid><description><![CDATA[I have running in our datacenter a Linux firewall with a single Ethernet connection
that performs iptables services to about 70 different networks (using 802.1q
tagged trunk back to the switch, each subscriber on their own vlan).  Performance
is incredibly good.  I've seen it do upwards of 80 Mbps sustained throughput
without breaking a sweat.  And that's with a 100 Mbps ethernet card. 
  
 I am suspecting that with a 1 Gbps card, the Linux kernel can do throughput
in the hundreds of megabits with no problem, but if you start analyzing the
latency of each individual hop, someone's going to point to it and tell us
our network is broken. 
  
 And unfortunately, in the managed hosting business, when a customer says
that something is wrong with your network, you are guilty until proven innocent.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2892827</link><pubDate>Thu, 23 Dec 2010 00:20:52 +0500</pubDate><title>Message #2892827</title><guid isPermaLink="false">2892827@Uncensored</guid><description><![CDATA[ I think the underlying question is, what is the routing performance of 
 Linux/FreeBSD/etc., since Quagga is just shoving routes into the kernel's

 routing table.   There are some decent write-ups detailing performance 
 of various cards, etc. 
  
 If you're not shy of spending money, Vyatta may be a more polished 
 off-the-shelf option worth looking at that is still oodles cheaper than 
 something similar from brand C. 
  
 If your definition of high-traffic is more than a few Mpps, then 
 you're probably looking for something with ASICs and a TCAM. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2890357</link><pubDate>Mon, 20 Dec 2010 15:00:15 +0500</pubDate><title>Message #2890357</title><guid isPermaLink="false">2890357@Uncensored</guid><description><![CDATA[  
 Has anyone ever used Zebra or Quagga as a router in a high-traffic environment?
 I'm interested in knowing how its performance stacks up against a "real"
router. 
  
 The idea of being able to use a device on which usable amounts of memory
are affordable (enough memory to hold the full BGP table on a Cisco is quite
expensive) and on which the components are off-the-shelf replaceable is appealing.

  
 I suspect the sustained bandwidth will be good but the individual packet
latency will be somewhat lacking.  That's based on an educated guess.  Any
real-world experience would be interesting to hear about. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2849394</link><pubDate>Fri, 03 Sep 2010 10:12:55 +0500</pubDate><title>Message #2849394</title><guid isPermaLink="false">2849394@Uncensored</guid><description><![CDATA[actually I take that back, the engineers are wrong. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2849393</link><pubDate>Fri, 03 Sep 2010 10:12:40 +0500</pubDate><title>Message #2849393</title><guid isPermaLink="false">2849393@Uncensored</guid><description><![CDATA[two networks. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2849381</link><pubDate>Fri, 03 Sep 2010 09:21:23 +0500</pubDate><title>Message #2849381</title><guid isPermaLink="false">2849381@Uncensored</guid><description><![CDATA[The problem with traffic prioritization is that engineers want to prioritize
based on the nature of the service being carried (video vs. voice vs. interactive
data vs. batch data etc) but the larger service providers want to prioritize
based on money and politics (see also "net neutrality").  I doubt the 802
committee can do anything about that. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2848927</link><pubDate>Wed, 01 Sep 2010 17:34:41 +0500</pubDate><title>Message #2848927</title><guid isPermaLink="false">2848927@Uncensored</guid><description><![CDATA[ There already are mechanisms in place to deal with latency issues over IP
and Ethernet networks.  IPv4 has had a type of service (TOS) field, now renamed
to a differentiated services control point (DSCP) field, for marking latency-sensitive
packets almost since its inception.  IPv6 takes that a step further by adding
a flow label to each packet that routers and switches can use to determine
priority, bandwidth, etc.  Ethernet (actually, any technology under the IEEE
802 umbrella) has an optional tag that can be applied to packets to classify
them in any of eight priorities, and there are evolving standards on allowing
synchronous data to be transmitted over an Ethernet network for stricter timing.

  
 The big issue with all of these technologies is getting providers to use
them.  Commercial providers want to charge extra for low-latency or high-bandwidth
traffic.  Some providers simply
don't know how to deploy it in their networks.  And then there are enterprise
networks firewalled off from everything.  I can't say for sure, but I'd guess
that firewalls probably don't handle low-latency packets very well. 
   Latency Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2848896</link><pubDate>Wed, 01 Sep 2010 14:52:23 +0500</pubDate><title>Message #2848896</title><guid isPermaLink="false">2848896@Uncensored</guid><description><![CDATA[ well a simple if archaic solution is to include a protocol in your speech.

  End a sentance with "STOP" or "ACK" 
  And don't speak again until the other person ends their transmission. Of
course that's the hard part for me. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2848891</link><pubDate>Wed, 01 Sep 2010 14:42:07 +0500</pubDate><title>Message #2848891</title><guid isPermaLink="false">2848891@Uncensored</guid><description><![CDATA[I did Skype with my wife from Afghanistan.  The latency was ferocious, but
it was something you got used to.  I wasn't sorry to not have it anymore,
though. 
  
 My previous company commander always has a weird sync problem on the phone.
 His timing is always subtly off, such that there are frequent awkward pauses
during any conversation.  He recognizes it at least and we can joke about
it. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2848687</link><pubDate>Tue, 31 Aug 2010 21:26:45 +0500</pubDate><title>Message #2848687</title><guid isPermaLink="false">2848687@Uncensored</guid><description><![CDATA[ I imagine being far away you've experienced this, but in my experience it
makes the conversation 6 times longer becuase you're constantly resyncing
the conversation with a very vague protocol. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2848653</link><pubDate>Tue, 31 Aug 2010 17:35:30 +0500</pubDate><title>Message #2848653</title><guid isPermaLink="false">2848653@Uncensored</guid><description><![CDATA[ > Aug 31 2010 1:43pm from Ford II @uncnsrd   
 >except that from now on phone calls will have latency.   
  
 More people would get along if there were a little more latency between their
brain and their mouth.  Latency in a phone call may be a nice workaround.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2848586</link><pubDate>Tue, 31 Aug 2010 13:43:37 +0500</pubDate><title>Message #2848586</title><guid isPermaLink="false">2848586@Uncensored</guid><description><![CDATA[except that from now on phone calls will have latency. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2848295</link><pubDate>Mon, 30 Aug 2010 16:29:14 +0500</pubDate><title>Message #2848295</title><guid isPermaLink="false">2848295@Uncensored</guid><description><![CDATA[And that seems to be the repeating history of the last ten or more years of
networking: every time some new technology becomes available, it may look
good at first, but is inevitably superseded by the next generation of IP and/or
Ethernet. 
  
 I think I'm ok with that. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2848285</link><pubDate>Mon, 30 Aug 2010 15:53:13 +0500</pubDate><title>Message #2848285</title><guid isPermaLink="false">2848285@Uncensored</guid><description><![CDATA[ Yes, data throughput over an ATM network for large chunks of data definitely
suffers compared to variable packet size networks like Ethernet.  Increasing
the cell size in ATM certainly would've solved the throughput issue, but at
the cost of latency.  ATM was aimed at unifying the voice and data networks.
 While data networks like large packets to decrease overhead and increase
data throughput, voice prefers a constant low-latency bitrate. 
  
 IG's right that ATM was definitely designed to scale to thousands, if not
millions, of addressable end-points.  Overly complex signalling protocols
was definitely one reason ATM hasn't dominated.  Expensive networking equipment,
and slow adoption by data network providers was another.  Another reason was
the introduction of inexpensive network switches capable of forwarding variable
size packets at full line rate; at both layer-2 (data link, a.k.a.
Ethernet) and layer-3 (network, a.k.a. IP). 
  
 ATM's concept of a VPI/VCI as the sole discrimator for making forwarding
decisions was intended as a means to switch cells in hardware.  At the time,
most IP routers peformed the forwarding decision in software.  Once high-speed
ASICs capable of doing the same lookups in hardware were available, data providers
saw very little advantage to ATM.  The same has mostly been true for MultiProtocol
Label Switching (MPLS).  MPLS, like ATM, uses a "tag" near the front of the
packet to make all forwarding decisions.  The goal was intended to promote
cheap line-rate forwarding hardware. 
   ATM Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2847360</link><pubDate>Thu, 26 Aug 2010 17:40:35 +0500</pubDate><title>Message #2847360</title><guid isPermaLink="false">2847360@Uncensored</guid><description><![CDATA[Actually it was originally supposed to have scaled hugely, eventually replacing
the worldwide telephone network.  Over-complexity and a changing digital landscape
eventually kept that from happening. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2847315</link><pubDate>Thu, 26 Aug 2010 15:33:29 +0500</pubDate><title>Message #2847315</title><guid isPermaLink="false">2847315@Uncensored</guid><description><![CDATA[ UDP over TCP/IP?  
  
  
 So I gather the problem with ATM is that it doesn't scale well. 
  small fixed size packets are wonderful until you have a lot of data to move,
then you spend all your time wasted on packet overhead. 
  So you make the packets bigger, but I imagine everybody on the network has
to agree to the new packetsize at the same time which means you can't change
it in flight. 
  And if you could, well, then you have the same problems as what we have
now. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2845448</link><pubDate>Thu, 19 Aug 2010 23:41:42 +0500</pubDate><title>Message #2845448</title><guid isPermaLink="false">2845448@Uncensored</guid><description><![CDATA[<html><body>

<p>Heh.  I remember when PSInet was telling everyone that they could get you on and off of their network at any two points in the world in one hop.  Turns out that they just connected all of their POPs together with ATM, so all you saw was the IP hops, not the ATM hops.</p>
<p>Speaking of IP ... I realized this week that no one calls it TCP/IP anymore.  That's a good thing, because it was kind of stupid to call it TCP/IP even if you weren't using TCP.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2845332</link><pubDate>Thu, 19 Aug 2010 15:44:54 +0500</pubDate><title>Message #2845332</title><guid isPermaLink="false">2845332@Uncensored</guid><description><![CDATA[ It's been a while, so bear with me here. 
  
 From what I remember, ATM addressed latency, and many other networking performance
metrics in three major ways. 
  
 1. A small fixed-size cell of data instead of a (potentially) large variable
sized packet.  The idea here was that by having small fixed-length cells,
the transmission delay at any node in the network would be small and predictable.
 Reducing the tranmit delay means less time a cell has to spend sitting in
a queue at a node. 
  
 2. ATM cells use a hop-by-hop "tagging" mechanism to make forwarding decisions
in each network node.  In the header of each cell are two numbers, the virtual
path identifier, or VPI, and the virtual channel or circuit identifier, or
VCI.  When a node receives a cell, it does a simple table lookup based on
the VPI/VCI.  The table entry says what to do with the cell: drop it, send
it to the CPU, forward
it using this new VPI/VCI pair, etc.  The idea here is to make the lookup
process and forwarding decision take less time and be more predictable. 
  
 3. ATM was one of the first technologies to really flesh out and enforce
specific classes of service (CoS) in a network.  The ATM standards include
CoS profiles such as variable bit rate (VBR), constant bit rate (CBR), available
bit rate (ABR), and unspecified bit rate (UBR).  More importantly, quality
of service (QoS) in an ATM network is designed to be end-to-end, meaning an
ATM network can really truly honestly guarantee throughput, latency, and other
performance requirements. 
  
 There might be more to ATM about latency, but those are the features that
I remember being the big hitters. 
   ATM Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2845206</link><pubDate>Thu, 19 Aug 2010 10:15:47 +0500</pubDate><title>Message #2845206</title><guid isPermaLink="false">2845206@Uncensored</guid><description><![CDATA[ splain to me low latency genius of ATM. speed I find is less of an issue
than latency. at least for what I do. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2845051</link><pubDate>Wed, 18 Aug 2010 20:58:18 +0500</pubDate><title>Message #2845051</title><guid isPermaLink="false">2845051@Uncensored</guid><description><![CDATA[s/cruft/complexity 
  
 Of course, what we know now is that every new network technology is eventually
superseded by the next generation of ethernet, and eventually everything migrates
to IP (remember when it was called TCP/IP even if you weren't using TCP?).

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2845012</link><pubDate>Wed, 18 Aug 2010 18:14:36 +0500</pubDate><title>Message #2845012</title><guid isPermaLink="false">2845012@Uncensored</guid><description><![CDATA[ I wouldn't be surprised if I said that.  From a latency point of view, ATM
still has some unique advantages.  It's just all the cruft that comes with
ATM that ruins the whole thing.  :) 
   ATM Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2845008</link><pubDate>Wed, 18 Aug 2010 18:06:00 +0500</pubDate><title>Message #2845008</title><guid isPermaLink="false">2845008@Uncensored</guid><description><![CDATA[ATM is, after all, the future.  Voice, data, video ... it's all going to move
to ATM. 
  
 That's what some guy at IBM told me 15 years ago, anyway :) 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2844633</link><pubDate>Tue, 17 Aug 2010 12:39:26 +0500</pubDate><title>Message #2844633</title><guid isPermaLink="false">2844633@Uncensored</guid><description><![CDATA[ Might as well switch to ATM at that point. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2844267</link><pubDate>Mon, 16 Aug 2010 16:02:10 +0500</pubDate><title>Message #2844267</title><guid isPermaLink="false">2844267@Uncensored</guid><description><![CDATA[ I expect if everybody set their MTU to 1 a lot of mtu configuration problems
would just go away. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2844141</link><pubDate>Mon, 16 Aug 2010 11:33:48 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2844141@Uncensored</guid><description><![CDATA[<html><body>

<p>most of all boxes (linux too) default to 1500.If you have GBit ethernet, you might want to try Jumbo frames for higher transfer volumina;</p>
<p>during connection establishing the hop with the tiniest MTU is responsible for setting the MTU for that IP connection.</p>
<p>(I think thats called Path MTU-Discovery)</p>
<p>so once the tcp connection is established, the maximum MTU for the way (the least common denominator, aka the smallest possible MTU) should be found out correctly.</p>
<p>if some device on the way is configured wrong, fragmentation won't work, packages get clamped.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2844113</link><pubDate>Mon, 16 Aug 2010 09:59:59 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2844113@Uncensored</guid><description><![CDATA[For a Windows system it's 1500 for local networks and 576 for external networks.

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2843979</link><pubDate>Sun, 15 Aug 2010 18:10:36 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2843979@Uncensored</guid><description><![CDATA[Isn't the default MTU for broadband 1492? OR something like that? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2843887</link><pubDate>Sun, 15 Aug 2010 11:38:23 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2843887@Uncensored</guid><description><![CDATA[All good stuff, but in the case I looked at on Friday, these people doubled
the MTU *and* set the DF bit.  And then called in with a "network problem."

]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2843800</link><pubDate>Sun, 15 Aug 2010 04:22:42 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2843800@Uncensored</guid><description><![CDATA[<html><body>

<p>me just sees that the replies are clamped..</p>
<p>and if I lower the mtu of my workstation to 1400 everything is fine.</p>
<p>first time I saw the vpn-device had some absurd mtu, and that was it.</p>
<p>second time they just wanted to show me the webinterface of their smoothwall (or whatever it was, some fedora embedded cruft) and were offended as I told them I wouldn't believe what some webinterface prints, just ifconfig counts.</p>
<p>This time I just requested changing the mtu on the vmware instance, and easily got away without any discussion.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2843782</link><pubDate>Sun, 15 Aug 2010 03:21:02 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2843782@Uncensored</guid><description><![CDATA[Tracking down MTU issues can be hard work unless you really understand how
TCP works and how to read a sniffer trace.  Explaining the problem to people
who don't understand it is even more difficult. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2843694</link><pubDate>Sat, 14 Aug 2010 14:42:56 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2843694@Uncensored</guid><description><![CDATA[<html><body>

<p>well, at $work we run into MTU problems now and then.</p>
<p>indicators are rather clear that its misconfiguration on our side. though our admin team doesn't seem to be able to track down the issue. (I sometimes get the feeling they don't want to)</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2843440</link><pubDate>Fri, 13 Aug 2010 19:06:37 +0500</pubDate><title>Message #2843440</title><guid isPermaLink="false">2843440@Uncensored</guid><description><![CDATA[Today I attempted to explain to someone why it isn't a good idea to set the
DF bit on 3000 byte TCP packets (and then subsequently complain that the network
is broken). 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2837258</link><pubDate>Wed, 28 Jul 2010 16:01:39 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2837258@Uncensored</guid><description><![CDATA[ I don't remember what it was, probably some server that we had ... oh that's
what it was, we used to use EMC drives, then we switched to something that
got bought by IBM,I think that was it. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2837240</link><pubDate>Wed, 28 Jul 2010 14:49:06 +0500</pubDate><title>Re:</title><guid isPermaLink="false">2837240@Uncensored</guid><description><![CDATA[<html><body>

<p> </p>
<blockquote>
<div class="message_header"><span>Wed Jul 21 2010 11:11:56 AM EDT</span> <span>from   Ford II @ Uncensored </span></div>
<div class="message_content">
<div class="fmout-JUSTIFY">we had the best time when ibm bought one of our vendors. It used to be that they'd pawn problems off on each other saying the problem lied with the other guy.  <br />But now since IBM owned everything, it was  ALL their problem and they had to fix.  <br /></div>
<br /></div>
</blockquote>
<p>Filenet?</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2834919</link><pubDate>Wed, 21 Jul 2010 11:11:56 +0500</pubDate><title>Message #2834919</title><guid isPermaLink="false">2834919@Uncensored</guid><description><![CDATA[ we had the best time when ibm bought one of our vendors. It used to be that
they'd pawn problems off on each other saying the problem lied with the other
guy. 
  But now since IBM owned everything, it was  ALL their problem and they had
to fix. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2834197</link><pubDate>Mon, 19 Jul 2010 15:28:06 +0500</pubDate><title>Message #2834197</title><guid isPermaLink="false">2834197@Uncensored</guid><description><![CDATA[It's still difficult to do.  Many people have the attitude of "we're paying
you, so it's your problem, even if it's not." 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833794</link><pubDate>Sat, 17 Jul 2010 20:45:03 +0500</pubDate><title>Message #2833794</title><guid isPermaLink="false">2833794@Uncensored</guid><description><![CDATA[<html><body>

<p>Well, after weeks of this kind of nonsense, it gets harder not to point out the nature of our working relationship.  They've been abusing the hell out of our technical support contract, and we don't appreciate it.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833786</link><pubDate>Sat, 17 Jul 2010 20:20:55 +0500</pubDate><title>Message #2833786</title><guid isPermaLink="false">2833786@Uncensored</guid><description><![CDATA[  That's a very healthy attitude thing for you to say: " I don't care how
your network is set up..." Brilliant! 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833501</link><pubDate>Fri, 16 Jul 2010 16:18:57 +0500</pubDate><title>Message #2833501</title><guid isPermaLink="false">2833501@Uncensored</guid><description><![CDATA[<html><body>

<p>The plot thickens.</p>
<p>Yesterday through today, the spare box we sent them worked well.  The box that they returned to us showed absolutely no problems, so we shipped it back without changing anything on it (except to ensure nobody could modify the executables).</p>
<p>They swapped the two boxes out, and now the box they returned to us is dead on their network again.</p>
<p>One difference between the two boxes: the spare we sent didn't have an a/v capture card, so it didn't make sense to install all the bits that allow it to stream a/v content to stenographers... which is the one port that needs to be exposed to the internet.</p>
<p>I'm starting to wonder if the network engineer was forwarding the port in some bizarre way that floods the box.</p>
<p>I also wonder if he opted to use a MAC address to forward stuff... such that the other box wouldn't have been a problem anyway (because it didn't have the right MAC address).</p>
<p>In the end, I told them that the box worked flawlessly in our facility, and that the problem must therefore be with their network in some way.  When they said the other box worked fine, I told them I couldn't explain why (which, technically, I can't... I have no idea how they have their network set up).  I then told him that I didn't particularly care what their network policy was, or how they have their network environment set up... I am only responsible for ensuring our equipment works properly, and it does.</p>
<p>We'll see if they ever figure it out.  In the meantime, their customer is going berserk.  I wonder if they'll lose the account.  I wonder if someone out there will get fired for this.  I wonder who that person will be (the network engineer who screwed up their network and is protected by the CEO, or his boss, who can't fire him).</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833490</link><pubDate>Fri, 16 Jul 2010 14:58:22 +0500</pubDate><title>Message #2833490</title><guid isPermaLink="false">2833490@Uncensored</guid><description><![CDATA[ No need to open it up to the 'net.  There are tools available for testing
against DoS attacks.  Unfortunately, I'm not in the know about freely downloadable
tools for that kind of testing. 
   DoS Binder 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833420</link><pubDate>Fri, 16 Jul 2010 11:01:14 +0500</pubDate><title>Message #2833420</title><guid isPermaLink="false">2833420@Uncensored</guid><description><![CDATA[ >Heh... so we can repair it from the damage of improperly securing the  
 >network?  
  
  well I was just thinking that you could see if that was the problem that
way. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833376</link><pubDate>Fri, 16 Jul 2010 07:32:08 +0500</pubDate><title>Message #2833376</title><guid isPermaLink="false">2833376@Uncensored</guid><description><![CDATA[<html><body>

<p>Heh... so we can repair it from the damage of improperly securing the network?</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833267</link><pubDate>Thu, 15 Jul 2010 20:10:18 +0500</pubDate><title>Message #2833267</title><guid isPermaLink="false">2833267@Uncensored</guid><description><![CDATA[ you could open it up to face the world at YOUR place and see if somebody
finds it and beats it up. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833221</link><pubDate>Thu, 15 Jul 2010 17:15:56 +0500</pubDate><title>Message #2833221</title><guid isPermaLink="false">2833221@Uncensored</guid><description><![CDATA[I've seen a malfunctioning ethernet card on one PC bring an entire network
of Windows machines down - they couldn't handle the amount of garbage the
bad NIC was transmitting. In my case, the office was small, so I could turn
of everything except the servers and bring up machines one-at-a-time until
the whamo happened again. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833135</link><pubDate>Thu, 15 Jul 2010 13:26:49 +0500</pubDate><title>Message #2833135</title><guid isPermaLink="false">2833135@Uncensored</guid><description><![CDATA[<html><body>

<p>At the moment, the box is safely in our own facility.</p>
<p>But someone out there would need to investigate it, not me.</p>
<p>I think your assessment, though, is spot on.  Someone is hammering the box from outside their network, and they aren't handling it properly.  Likely, the problem will go away if they just put a firewall in place and forward the port we want.</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833114</link><pubDate>Thu, 15 Jul 2010 12:18:41 +0500</pubDate><title>Message #2833114</title><guid isPermaLink="false">2833114@Uncensored</guid><description><![CDATA[ If they turned off the internal firewall and exposed it to the internet,
it's quite possible that it's getting hammered by some kind of denial of service
(DoS) attack. 
  
 One way to try and figure out what's going on is to download and install
WireShark onto the box.  WireShark is a packet capture and analysis tool.
 Since you're accessing the box remotely, you'll have to filter out the packets
associated with your remote control session, but that would definitely show
you if the box is being attacked. 
   Spell 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2833109</link><pubDate>Thu, 15 Jul 2010 12:06:23 +0500</pubDate><title>Message #2833109</title><guid isPermaLink="false">2833109@Uncensored</guid><description><![CDATA[<html><body>

<p>I have what might be a sort of fun issue for you guys to ponder.  I'm not really asking for advice, although I'm curious as to what you might think about the situation.</p>
<p>A customer installed one of our boxes in their facility.  The box stopped working properly a couple of days ago.  They sent the box to us, and it's working without any issues at all here in our networking environment.</p>
<p>When it was out there, if I used a remote login service to connect to the desktop of the box immediately after the box booted up, I could log into it.  Otherwise, I couldn't access the box at all.</p>
<p>When I was finally able to get into the box, I noticed our services couldn't be restarted.  Upon start, they would generate an error message indicating that the box itself was out of networking resources.</p>
<p>Have you ever seen that before?  Personally, I've never observed that problem on a box.  I guess I've always been in networked environments that were properly configured and designed.</p>
<p>None of our other boxes out there have this kind of problem, but admittedly, this box is kind of special, in that we have to have a single port made available to the outside world.  Not a big deal, really... just port-forward to our box, and everything is peachy-keen.  Nobody else has a problem doing that... but I suspect these guys did something "different"... since he was concerned that port-forwarding was a security issue.  He felt more secure just exposing the entire box to the outside world and dropping our internal firewall.</p>
<p>(Note: The box doesn't appear to be infested, in case you're wondering... virus scans find nothing on it).</p>
</body></html>
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2813791</link><pubDate>Fri, 21 May 2010 00:42:48 +0500</pubDate><title>Message #2813791</title><guid isPermaLink="false">2813791@Uncensored</guid><description><![CDATA[Actually I think Animal has it right.  Crayons are the answer.  Who needs
teh interwebz? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2813671</link><pubDate>Thu, 20 May 2010 19:14:09 +0500</pubDate><title>Message #2813671</title><guid isPermaLink="false">2813671@Uncensored</guid><description><![CDATA[Dotster is way cheaper than netsol and godaddy is even cheaper.  I got dotster
to price match godaddy so I stayed with them.  There's a snowballs chance
in hell that netsol would match the price I'm getting now. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2813375</link><pubDate>Wed, 19 May 2010 23:57:30 +0500</pubDate><title>Message #2813375</title><guid isPermaLink="false">2813375@Uncensored</guid><description><![CDATA[]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2813371</link><pubDate>Wed, 19 May 2010 23:40:54 +0500</pubDate><title>Message #2813371</title><guid isPermaLink="false">2813371@Uncensored</guid><description><![CDATA[Yup.  And they make it damn near impossible to consolidate multiple accounts,
which is a pain in the ass if you're an ISP.  NetSol makes it very easy. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2813361</link><pubDate>Wed, 19 May 2010 23:20:10 +0500</pubDate><title>Message #2813361</title><guid isPermaLink="false">2813361@Uncensored</guid><description><![CDATA[ >$20 a year, might be enough to get me to stay with Network Solutions   
 >and avoid the hassle of a domain name transfer.   
  
  godaddy makes domain transfer painfully easy. 
  At least between registraars. 
  The odd thing is they make it insanely difficult to transfer a domain between
two users of godaddy. 
  It's actually easier (if not cheaper) to transfer it away and transfer it
back to godaddy than it is to transfer within godaddy. 
  Ther's a flaw there somewhere. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2812523</link><pubDate>Wed, 19 May 2010 11:02:53 +0500</pubDate><title>Message #2812523</title><guid isPermaLink="false">2812523@Uncensored</guid><description><![CDATA[ And how much lower will they make the price?  I wouldn't necessarily need
them to match GoDaddy's prices, but even cutting it down to, say, $20 a year,
might be enough to get me to stay with Network Solutions and avoid the hassle
of a domain name transfer. 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2812422</link><pubDate>Wed, 19 May 2010 10:20:40 +0500</pubDate><title>Message #2812422</title><guid isPermaLink="false">2812422@Uncensored</guid><description><![CDATA[  
 Yeah, but who wants to go through that game? 
]]></description></item><item><link>http://uncensored.citadel.org/readfwd?go=Networking?start_reading_at=2812359</link><pubDate>Wed, 19 May 2010 09:15:33 +0500</pubDate><title>Message #2812359</title><guid isPermaLink="false">2812359@Uncensored</guid><description><![CDATA[Little known fact: Network Solutions will give you a lower price if you tell
them you're going to go with a different registrar because of price alone.

]]></description></item></channel></rss>

