Are used for reading motherboard stats - like temperature and fan speed and similar. Can be useful on a server - set up snmp to read them and graph it with mrtg - and bam, a pretty graph for the marketing-droids to sell to the customers as a value added service...
Surely a default kernel for a distribution should be optimized for compatibility rather than features though?
We use Debian on our servers - and have given up on finding a supplier for software support - we do all of that in house, but we always buy branded kit with an SLA on the hardware support... In a production environment a 24x7x4hr SLA is a lot more use than a return to base warranty... IMHO anyways...
Rolling out itrace would be a lot easier than setting up egress filtering for many medium sized ISPs - as when you provide transit for other providers the access lists required can quickly grow very large - and can fluctuate regularly, so just keeping them maintained can be a tough job. Itrace would probably just mean typing "service itrace" on a cisco and then keeping half an eye on the logs.
I work in the industry and it scares me when I talk to the techs at other companies and they have no idea how their network works - they've just cobbled it together from other people's suggestions without any real understanding of why they're doing things...
I wholeheartedly agree that egress filtering is needed to stamp out spoofing though - itrace only gives a method of tracing an attack back once it is underway - egress filtering would mean it would never start in the first place.
If only cisco would enable an optimised easy to configure egress filtering service:)
Most of the Free ISPs over here in the UK actually have it as part of the terms and conditions that you have to reveal the number you are dialling from to their dial equipment. If you withhold the number they can refuse your connection.
Slashdot Mirror
Are used for reading motherboard stats - like temperature and fan speed and similar. Can be useful on a server - set up snmp to read them and graph it with mrtg - and bam, a pretty graph for the marketing-droids to sell to the customers as a value added service...
Surely a default kernel for a distribution should be optimized for compatibility rather than features though?
We use Debian on our servers - and have given up on finding a supplier for software support - we do all of that in house, but we always buy branded kit with an SLA on the hardware support... In a production environment a 24x7x4hr SLA is a lot more use than a return to base warranty... IMHO anyways...
Rolling out itrace would be a lot easier than setting up egress filtering for many medium sized ISPs - as when you provide transit for other providers the access lists required can quickly grow very large - and can fluctuate regularly, so just keeping them maintained can be a tough job. Itrace would probably just mean typing "service itrace" on a cisco and then keeping half an eye on the logs.
:)
I work in the industry and it scares me when I talk to the techs at other companies and they have no idea how their network works - they've just cobbled it together from other people's suggestions without any real understanding of why they're doing things...
I wholeheartedly agree that egress filtering is needed to stamp out spoofing though - itrace only gives a method of tracing an attack back once it is underway - egress filtering would mean it would never start in the first place.
If only cisco would enable an optimised easy to configure egress filtering service
Most of the Free ISPs over here in the UK actually have it as part of the terms and conditions that you have to reveal the number you are dialling from to their dial equipment. If you withhold the number they can refuse your connection.