May 1999 - NZNOG - lists.nznog.org

[Fwd: Delivery failure (registry-discuss@2day.com)]
by Andy Linton 27 May '99

27 May '99

> Subject: Re: [registry-discuss] Zone transfers from .nz name servers > Date: Thu, 27 May 1999 04:13:40 +0000 > From: Andy Linton <asjl(a)netlink.net.nz> > Organization: Netlink, Wellington > To: registry-discuss(a)2day.com > > 2Day Chief Enthusiast wrote: > > > > > I'd say that ISOCNZ did consult industry and are in the process of doing > > > so. Some weeks ago the ISOCNZ technical committee, John Vorstermans, > > > Mark Davies and Roger De Salis talked to Joe Abley and myself. If they > > > didn't talk with Peter that doesn't mean they didn't talk with industry. > > > > We have a different view on what consultation is. > > Just because you aren't included in a discussion, it doesn't mean there > hasn't been one. > > > > > > I have since been seconded onto ISOCNZ council to fill the vacancy left > > > by Peter Mott's resignation and am now on that committee. The tech > > > committee have the task of looking at closing of the zone transfer > > > holes. This is not cast in stone and could be changed if valid reasons > > > can be produced. > > > > David Farrer said a decision had already been made to disallow XFRS. Can > > we get the story straight please? > > > > Read my posting - I'm asking for reasons why this should be changed and > all I'm hearing is whinging about how unreponsive ISCONZ are. > > > p.s. If you took up my vacancy, you would be on the education and research > > subcommittee. > > Nope! I'm on the commitee that's most appropriate for my background and > experience. -- Mailto:asjl(a)netlink.net.nz Post: Netlink, PO Box 5358, Lambton Quay, Wellington, New Zealand -- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Re: Zone transfers from .nz name servers
by Robert Gray 27 May '99

27 May '99

>I'm still waiting for a reasoned argument from Peter about this issue. I've spoken to Peter about the zone transfers and he has told me why he wants the ability to do them. I would like to say that: a) the use he makes of it (IMHO) breaches no privacy nor has any other concern and b) it _is_ commercially sensitive - I certainly would not tell too many people unless I wanted competition. There's a conundrum then. Robert Gray Clearview Communications, Auckland New Zealand bobg(a)clearview.co.nz http://www.clearview.co.nz/ Phone DDI +64 9 529 5704, Fax +64 9 529 5702, Mob +64 25 971 860 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Restricting axfr's from ns99.waikato.ac.nz
by Chris Wedgwood 27 May '99

27 May '99

Without wishing to step into the flames, has anyone considered it may already be too _late_ to stop people form generating a list of all .nz domains? Right now, I'm sure plenty of people have copies on the .nz zone files (for various reasons), and they probably update these fairly often. Even if this information is made unavailable to the public at large, people can just check (daily) the Domainz Pending Activity page and produce deltas from that... I just verified that this is indeed possible with a little script that took no more than 5 minutes or so to get going... -cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Fw: Welcome
by Andy Linton 27 May '99

27 May '99

2Day Operations wrote: > > Date: Thursday, 27 May 1999 11:29 > Subject: Welcome > > >Welcome to the registry-discuss list provided by 2Day Internet Ltd > > > >PURPOSE > > > >This list is provided for discussion of commercial and > >technical issues associated with changes to the .nz > >domain name registration service advised by DOMAINZ on > >Tuesday 18 May 1999. > > > >INVITATION > > > >Any person or organisation with a commercial interest > >in this topic is invited to participate. > > > >ACCEPTABLE USE POLICY > > > >Without wishing to restrict the free flow of ideas and > >information, the list owner (2Day Internet Limited) > >requires that:- > > > > > >a) Messages posted to this list are NOT posted to any > > other list or news group at the same time. > > Looks like I'm breach of Peter's acceptable use policy so I'd better be unsubscribed from 'registry-discuss' I'll be talking about this on the NZNOG list from now on. Join me there if you want a list where who you post to is not dictated to by the list owner. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[Fwd: [registry-discuss] Zone transfers from .nz name servers]
by Roger De Salis 27 May '99

27 May '99

2Day Chief Enthusiast wrote: |> |> >I haven't yet got the draft minutes but my recollection of the |> >ISOCNZ Council meeting on Friday is that the consensus was to |> > do exactly that |> >- for reasons of both privacy act considerations and anti-spamming. |> |> Yet another example of ISOCNZ making decisions without consulting |> industry. Extremely bad form. | | I'd say that ISOCNZ did consult industry and are in the process of doing | so. Some weeks ago the ISOCNZ technical committee, John Vorstermans, | Mark Davies and Roger De Salis talked to Joe Abley and myself. If they | didn't talk with Peter that doesn't mean they didn't talk with industry. ===================================================================== Exactly 10 days ago, I did send out an email to the ISOCNZ council, plus Andy and Joe, with proposal to possibly restrict zone transfers. The sequence was:- 1/ Put an inital proposal to the council plus others to ensure that the technical proposal was sound, and find out if there were i) raving objections, ii) muted dissent iii) muted assent iv) other. 2/ Post the corrected proposal to the NOG for comment. 3/ Assemble and Post feedback to the NOG, and come to a acceptable consensus. Unfortunately real work interfered with this timetable. This email represents step 2. The proposal was informally discussed at the last council meeting, which I was not able to fully attend. Here is the proposal in full, as it was sent out earlier. I remind interested parties that this is a PROPOSAL. Thoughtful comment, dissent and wisely worded counter propoosals will all be thoroughly considered. Here is the proposal as originally sent out. ======================================================================== PROPOSAL:- The caretaker of the registry has been concerned for sometime about the ability to do a complete download of the zone files, and then trawl them for useful information. Typically why people do this is to keep score, and we have no evidence that people have used this information for malicious purposes thus far. But the information does contain personal information, which it must do to permit network operators to rightfully go about their business, and brilliant efforts to keep the internet running. It also potentially offers plenty of SPAM potential. If whole downloads were restricted, but reasonable queries of a moderate length we allowed, and a working who-is was on line, and there was an ability to run reasonable global queries (eg no of domains by provider etc etc), is a restriction on possible global downloads reasonable. A positive suggestion here is that global downloads continue to be permitted, but the receiver must authenticate themselves, so reasonable use can be estimated. A parallel example is Cisco's shipping database. You have query access (via login) to any information, but you need a valid number to be able to extract the single event. There is no way to get the whole of shipping details at that second. But in theory it is all there. The proposal is therefore to propose some minor technical changes with an eye on the Privacy requirements, but ensure that sufficiently useful access and information exists to permit the nog to do their job. I would be most interested to collect opinions about positive technical suggestions, leave it the way it is, or make these suggested changes. Rgds Roger De Salis ====================================================== Joe's comments came back as:- (and appear to me to be eminently reasonable. I hope he will not mind me re-publishing.) For the record, it's only ns99 and rata that currently permit zone transfers; none of the others do. A good compromise might be to restrict zone transfers from ns99 to "all authoritative servers plus authorised hosts" to allow people like Peter to continue to pull the data, without having to mess about with ftp. Domainz could authorise hosts as they saw fit (I would expect the authorisation policy to be fairly non-restrictive). The driver for doing this, remember, is to prevent the unscrupulous walking the DNS, enumerating domain names for the purposes of evil spam; it's not to stop record harvesting for the purposes of generating statistics. This is just for ns99 -- I would expect other authoritative servers to deny transfers from _anybody_. Maintaining a current transfer access list on every secondary is unnecessary. Being overly restrictive on this issue could be problematic anyway; for example CLEAR and Xtra have access to the zone files since they operate authoritative nameservers for the benefit of the community. It would be bizarre if other providers were denied access to the same information simply because they're small (or focused on niche services). Joe ================================================================ -- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L3, 117 Customhouse Qy /) +64 4 473 4912 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` Never underestimate the data transmission capacity (Mb/s) of a station wagon full of the backup tapes.

4 6

.nz Secondary -- Victoria University upgrading Bind to 8.2
by Patrick O'Brien 26 May '99

26 May '99

NZNOG'ers, FYI, Victoria University are in the process of upgrading the .nz Secondary from Bind 4.9(ish) to 8.2. In doing so, they will be restricting zone transfers to the Primary and Secondary .nz zone machines. Richard Stevenson is the contact, at Victoria My regards, PATRICK J O'BRIEN Fax: (04) 473-4569 Voice: (04) 473-4567 Mail: P.O.BRIEN(a)DOMAINZ.NET.NZ Web: http://www.DOMAINZ.NET.NZ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 7

Roger Hicks' email address
by Frank March 25 May '99

25 May '99

Folks: Off topic; unless the intention is to offer Roger a beer, I suppose, but does anyone know what his address is these days? Apparently his old Clear address is no longer operational. I would appreciate any assistance. Frank March Specialist Advisor, IT Policy Group Ministry of Commerce, PO Box 1473, Wellington Telephone (+64 4) 474 2908; Fax (+64 4) 471 2658 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

nz.org.isocnz newsfeed to tardis.patho.gen.nz
by Joe Abley 22 May '99

22 May '99

Hello people, Is anybody able to set up a tiny newsfeed to tardis.patho.gen.nz (203.97.2.226), feeding only nz.org.isocnz? Tardis won't be originating any messages. Path entry tardis.patho.gen.nz. Many thanks in giddy anticipation :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[Fwd: (Fwd) Class C]
by Roger De Salis 20 May '99

20 May '99

-- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L3, 117 Customhouse Qy /) +64 4 473 4912 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` Never underestimate the data transmission capacity (Mb/s) of a station wagon full of the backup tapes.

2 1

[Fwd: (Fwd) Class C] -Reply
by Brett Telfer 20 May '99

20 May '99

Hi, This address is part of the 210.55.x.x blocks being advertised by NetGate. I have passed on the message to Don (contactable at nic(a)netgate.net.nz), and he will be contacting Wayne directly to help sort this out. Regards BT >>> Roger De Salis <rdesalis(a)cisco.com> 20/May/1999 01:15pm >>> -- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L3, 117 Customhouse Qy /) +64 4 473 4912 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` Never underestimate the data transmission capacity (Mb/s) of a station wagon full of the backup tapes. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0