December 2000 - NZNOG - lists.nznog.org

list.waikato.ac.nz Has Moved
by Donald Neal 12 Dec '24

12 Dec '24

NZNOG-People, I have just finished migrating all of the mailing lists held at The University of Waikato from one server to another. I don't have any reason to believe that anything's gone wrong, but please bear with me for today if it turns out that something has. - Donald Neal -- Donald Neal | Q: How many Aucklanders does it take to change Systems Programmer/Analyst | a light bulb? The University of Waikato | A: Pass me that candle and I'll tell you. Hamilton, New Zealand | --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Public providers and ASN on WIX
by Simon Blake 17 Jun '01

17 Jun '01

Matthew Grant from Plain was asking who the WIX route servers pee with, I figured the results may be of interest to others peering or considering peering on WIX: neighbor 202.7.0.1 remote-as 9439 neighbor 202.7.0.1 description Citylink neighbor 202.7.0.49 remote-as 2687 neighbor 202.7.0.49 description AT-T ! neighbor 202.7.0.65 remote-as 7714 ! neighbor 202.7.0.65 description Netlink1 neighbor 202.7.0.76 remote-as 9736 neighbor 202.7.0.76 description Domainz neighbor 202.7.0.78 remote-as 9718 neighbor 202.7.0.78 description Chello neighbor 202.7.0.129 remote-as 9343 neighbor 202.7.0.129 description Actrix neighbor 202.7.0.130 remote-as 9872 neighbor 202.7.0.130 description Actrix-LH neighbor 202.7.0.177 remote-as 9495 neighbor 202.7.0.177 description Clearview neighbor 202.7.0.192 remote-as 4768 neighbor 202.7.0.192 description Clear neighbor 202.7.0.241 remote-as 7657 neighbor 202.7.0.241 description IHUG neighbor 202.7.1.1 remote-as 4770 neighbor 202.7.1.1 description ICONZ neighbor 202.7.1.49 remote-as 9436 neighbor 202.7.1.49 description Globe-Net neighbor 202.7.1.65 remote-as 9445 neighbor 202.7.1.65 description Saturn neighbor 202.7.1.110 remote-as 4740 neighbor 202.7.1.110 description Voyager neighbor 202.7.1.129 remote-as 9345 neighbor 202.7.1.129 description Paradise neighbor 202.7.1.176 remote-as 9503 neighbor 202.7.1.176 description Comnet neighbor 202.7.1.193 remote-as 9338 neighbor 202.7.1.193 description NLNZ neighbor 202.7.1.241 remote-as 9325 neighbor 202.7.1.241 description Xtra neighbor 202.7.1.244 remote-as 9559 neighbor 202.7.1.244 description Plain Cheers Si --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

APE
by James Tyson 19 Dec '00

19 Dec '00

Anyone know what's up with APE? All my peering sessions are down. My connection is still up, however. Is there a problem with the switch? James Tyson james.tyson(a)attica.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

Greetings..
by Mark Foster 19 Dec '00

19 Dec '00

Hi All, just saying hello as a new subscriber :) I know some of the names on here so I wont waffle but my interest in this is: I work for CallPlus (aka Attica) and deal primarily with their abuse@ mailbox, so deal a bit with NOC related issues. Hi James :) Technically just a helpdesk pleb but looking to upskill and move into NOC operations eventually. Im here to keep my ears open and to learn, and Im quite keen to see positive moves in dealing with network abuse and hacking, etc etc. Cheers guys, Mark Foster --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

New type of DDOS
by Martin Forest 15 Dec '00

15 Dec '00

Hi All There is now a new type of DDOS. This one is hiding the source IP address and port, i.e. random IP address and port as source address. This makes it almost impossible to quickly trace back to the source. Our Cisco routers can with ease detect the attack and block it (IOS Firewall). However, this new attack makes it hard to get upstream providers to block the traffic or to find out who's servers that have been hacked. Happy to share knowledge... Martin Forest Senior Security & Infrastructure Specialist Asia Online NZ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

NZ Spammer
by Tony Wicks 15 Dec '00

15 Dec '00

Hmm, it seems like we have a wannabe spammer in close proximity. Can one of the guys from Ihug please sharply deal with this customer before they get any more bright ideas ? Thanks Dear Internet User, DO YOU CONNECT TO THE INTERNET? ... that's obvious, you would not have got this email otherwise. Each time you connect to the Internet you run the risk of two things: Downloading a virus Opening the door to your computer so a hacker can walk through. Both are well documented and there are a number of brilliant products available to minimise your exposure to viruses, worms and hackers. Intrusion by hackers is more subtle than a virus, but no less devastating, while the former can cause havoc on your computer, the latter can see your computer being accessed and your files being read, destroyed or tampered with by another person completely unknown to you. The longer you are on-line the greater the risk of hacker intrusion. There are two products ideally suited to meet your needs: Norton Personal Firewall 2001 provides security for your PC and privacy for your personal information Symantec Desktop Firewall 2.0 is optimised for broadband connections (eg. ADSL services like Jetstream) and is set up to work intelligently in the background. Norton Personal Firewall V2.5 $121.00 + shipping $9.50 Symantec Desktop Firewall 2.0 $99.00 + shipping $9.50 Shipping: AU & NZ $9.50; CA, GB & US $15.50; Rest of World $19.00 If you would like to purchase one of these please let me know and your exposure to intrusion damage will be assuaged. If you would like to know more about either of them please let me know. Yours Sincerely Meredith Software Sales Database Services Ltd meredithg(a)database.co.nz or sales(a)database.co.nz Ph: (+64) 9 6230513 Fx: (+64) 9 6230471 Database Services has been providing products and services to clients for over ten years Microsoft and Symantec (Norton) sales and support Prices are in New Zealand dollars ============================================================================ ==== Your email addressed has been passed to us as potentially interested in Microsoft & Symantec products, it has not been purchased from a mailling list provider. I you know of other who may be interested in these product ranges please let me know. ============================================================================ ==== This email is intended to inform and not irritate, please email me at remove(a)database.co.nz and I will see you no longer receive emails from us. Return-Path: <database(a)database.co.nz> Received: from etrn.iconz.co.nz (etrn.iconz.co.nz [210.48.22.36]) by gravel.road.gen.nz (8.11.0/8.11.0) with ESMTP id eBE44vD18186 for <tony(a)road.gen.nz>; Thu, 14 Dec 2000 17:04:57 +1300 Received: from c000.zsm.cp.net (c000-mx000.c000.zsm.cp.net [209.228.56.55]) by etrn.iconz.co.nz (8.9.3/8.9.3) with SMTP id RAA193050976766694 for <tonyw(a)nz.asiaonline.net>; Thu, 14 Dec 2000 17:04:54 +1300 (NZDT) Received: (cpmta 6941 invoked from network); 13 Dec 2000 20:03:19 -0800 Delivered-To: asiaonline.net.nz%tonyw(a)asiaonline.net.nz Received: (cpmta 6930 invoked from network); 13 Dec 2000 20:03:18 -0800 Received: from etrn.iconz.co.nz (210.48.22.36) by smtp.c000.zsm.cp.net (209.228.56.55) with SMTP; 13 Dec 2000 20:03:18 -0800 X-Received: 14 Dec 2000 04:03:18 GMT Received: from smtp2.ihug.co.nz (root(a)smtp2.ihug.co.nz [203.109.252.8]) by etrn.iconz.co.nz (8.9.3/8.9.3) with ESMTP id RAA186480976766595; Thu, 14 Dec 2000 17:03:15 +1300 (NZDT) Received: from danielle (p490-apx1.akl.ihug.co.nz [203.173.193.236]) by smtp2.ihug.co.nz (8.9.3/8.9.3/Debian 8.9.3-21) with SMTP id QAA04909; Thu, 14 Dec 2000 16:58:31 +1300 X-Authentication-Warning: smtp2.ihug.co.nz: Host p490-apx1.akl.ihug.co.nz [203.173.193.236] claimed to be danielle Message-Id: <3.0.5.32.20001214154435.03c08b10(a)pop.ihug.co.nz> X-Stationery: 33212 3 X-Sender: database(a)pop.ihug.co.nz X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32) Date: Thu, 14 Dec 2000 15:44:35 +1300 To: sales(a)database.co.nz From: sales(a)database.co.nz Subject: INFORMATION AND PRICING ON FIREWALL SOFTWARE Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Domain Summary This domain is currently listed in the .nz Register Status: Registered Registered: 10/10/1996 Modified: 26/10/2000 Name Holder Name Holder Representative Database Services PO Box 94 AUCKLAND N Gladden Email: database(a)database.co.nz Phone: 0 9 6230512 .nz Provider Technical Contact The Internet Group Limited PO Box 7281 Wellelsey Street Email: soa(a)ihug.co.nz Phone: +64 9 358 5067 The Internet Group Limited Email: soa(a)ihug.co.nz Phone: +64 9 358 5067 Name Servers ns1.ihug.net.nz 203.109.252.7 ns-au.ihug.net.nz 203.109.250.41 ns2.ihug.net.nz 203.109.252.8 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

as5200 authentication faillure
by Mendez Martín 14 Dec '00

14 Dec '00

Well, i prubed different IOS version to solve the busy problem that i reported in the list last week, by the way, thanks to all for your comments and help. Finally 12.0.5(T) appear to be good, but i'm not sure yet. Now i find a problem with the authentication over the radius server ( a windows 2000 advanced server running IAS), with certains modems, specially USR 56K external, the as5200 fail, if i see the logs in the radius i see something like this: User WmeTeO=erST c*YXf,4v!X+(A)[3{m^C}ear^*hLEm/a/FdP'mV?+ was denied access. Fully-Qualified-User-Name = RADIUSDOM\WmeTeO=erST c*YXf,4v!X+(A)[3{m^C}ear^*hLEm/a/FdP'mV?+ NAS-IP-Address = 172.17.101.5 NAS-Identifier = <not present> Called-Station-Identifier = 5300 Calling-Station-Identifier = <not present> Client-Friendly-Name = Cisco 5200 Client-IP-Address = 172.17.101.5 NAS-Port-Type = Async NAS-Port = 8 Policy-Name = <undetermined> Authentication-Type = <undetermined> EAP-Type = <undetermined> Reason-Code = 16 Reason = There was an authentication failure because of an unknown user name or a bad password. Look at Username !!!, it would be my human username and not that ! Thanks for any comments. Regards.

2 1

Attica prefix-list update
by James Tyson 11 Dec '00

11 Dec '00

If you are a domestic peer of attica can you please update your prefix lists to something that vaguely resembles the following: ip prefix-list attica-networks description Attica Communications Ltd, contact: james.tyson(a)attica.co.nz ip prefix-list attica-networks permit 202.180.96.0/19 ip prefix-list attica-networks permit 202.180.64.0/18 le 19 ip prefix-list attica-networks permit 210.55.254.0/24 Cheerio. James Tyson james.tyson(a)attica.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Contents of a platinum spamware CD obtained.
by Alan Brown 09 Dec '00

09 Dec '00

After larting the hell out of the hwhclub.com spammers (Hamilton, wave source, webfarm site), I managed to obtain the software they used. Platinum has a list of 23 million addresses in it, with lots of duplication. If any local admins are interested in checking what addresses of theirs are on the CD, please contact me. As a FWIW, there are a shitload of Xtra(299), Clear(131), Voyager(202), Actrix(472), Iconz(442) and Ihug(691) addresses. If they're anything like the manawatu list (182 addresses), only 1-2% actually work and the rest could easily be pressed into service as spamtraps. Many of the manawatu addresses were cancelled because of spam levels and almost all of them were scraped from usenet postings. Surprisingly, few addresses at newer NZ ISPs (less than 2 years old) seem to be listed... AB --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Best IOS for IPSEC on Cisco 4000?
by Simon Blake 07 Dec '00

07 Dec '00

Hey folks The lovely chaps at Logical have lent me a couple of 4000's for the SAGE IPSEC bakeoff this weekend. So, at the risk of being mocked for my naivete, can somebody recommend a passable IOS for 3DES IPSEC to Win2K and *nix connectivity? Unfortunately, I haven't sparked the boxes up yet to find out how much RAM they have, but I reckon I can pillage enough from both to get enough in one. And of course, anybody near Citylink in Wellington on Sunday is most welcome to haul buy and join in the fun. People with exotic hardware/software (that is other than FreeS/WAN and Win2K) especially welcome. Cheers Si --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1