[j-nsp] 'Juniper BGP issues causing locallized Internet Problems, (Mon, Nov 7th)?

[Joel jaeggli]

On 11/7/11 17:58 , Jared Mauch wrote:
> Juniper doesn't believe security bugs should be public. You must be a
> customer with support to access their portal.
> 
> Cisco has a good policy. You can view any security bugs and get fixes
> regardless of your contract status.

In either case there are a rather complex set of dependencies and
caveats associated with available releases, and the risk and timing of
an upgrade has to be balanced against operational needs, customer
scedures, feature requests and platforms involved.

If we rolled a new release everytime juniper sent us a notification or
found a pr for a bug we tripped over we'd be rolling probably twice a
month which is probably not sustainable. same applies to other vendors
we have in the mix.

> Jared Mauch
> 
> On Nov 7, 2011, at 6:53 PM, Jack Bates <jbates at brightok.net> wrote:
> 
>> More importantly, if it was the issue dated in August, how in the
>> heck do I get on a list which tells me such a critical bug exists?
>> 
>> 
>> Jack
>> 
>> On 11/7/2011 2:03 PM, Krembs, Jesse wrote:
>>> Has anyone else seen this issue?
>>> 
>>> 
>>> 
>>> 
>>> 
>>> """"""""""""""""
>>> 
>>> 
>>> 'Juniper BGP issues causing locallized Internet Problems, (Mon,
>>> Nov 7th) <http://isc.sans.edu/diary.html?storyid=11965&rss>
>>> 
>>> 
>>> via SANS Internet Storm Center, InfoCON:
>>> green<http://isc.sans.edu>   on 11/7/11
>>> 
>>> 
>>> We're starting to get reports (thanks to both Branson and Darryl)
>>> that a Juniper OS bug with BGP, combined with some specific BGP
>>> updates today, are resulting in some key internet routers being
>>> DOS'd due to high CPU loads. We'll post more data as it comes
>>> in.
>>> 
>>> =============== Rob VandenBrink Metafore (c) SANS Internet Storm
>>> Center. http://isc.sans.edu <http://isc.sans.edu>   Creative
>>> Commons Attribution-Noncommercial 3.0 United States License.
>>> 
>>> """"""""""""""""
>>> 
>>> 
>>> 
>>> Jesse Krembs - Data Network Architecture&  Planning
>>> 
>>> FairPoint Communications | 800 Hinesburg Rd, South Burlington, VT
>>> 05403 | jkrembs at fairpoint.com<mailto:jkrembs at fairpoint.com>
>>> 
>>> www.FairPoint.com<http://www.fairpoint.com/>  | 802.951.1519
>>> office | 802.735.4886 cell
>>> 
>>> 
>>> 
>>> 
>>> _______________________________________________________________________
>>>
>>>
>>>
>>> 
This e-mail message and its attachments are for the sole use of the
intended recipients.  They may contain confidential information, legally
privileged information or other information subject to legal
restrictions.  If you are not the intended recipient of this message,
please do not read, copy, use or disclose this message or its
attachments, notify the sender by replying to this message and delete or
destroy all copies of this message and attachments in all media.
>>> _______________________________________________ juniper-nsp
>>> mailing list juniper-nsp at puck.nether.net 
>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>> 
>> _______________________________________________ juniper-nsp mailing
>> list juniper-nsp at puck.nether.net 
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> _______________________________________________ juniper-nsp mailing
> list juniper-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>