May 2000 - NZNOG - lists.nznog.org

RE: System live
by david＠farrar.com 10 May '00

10 May '00

> > As promised, this is to let you know that the Domainz > > Registration System is > > now live. > > It's a pity that the name of the SSL certificate for the Domainz secure > site is incorrect. www.domainz.net.nz != www.domainz.glazier.co.nz. > > Some proxy servers and well configured browsers will throw this away. I've been having great problems with the site. I got the same security wrror (using IE5). Using a new password (we haven't received these automatically yet - can anyoen advise when we will) which I generated from their converter I tried to log in and it failed several times. Finally let me in but when I tried to change my registrar it came up no such webpage. Then started getting message saying the site is temporarily offline. Now the main site itself is giving me a no such page error. Can someone advise if the site is up and staying up? ta DPF --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

After-market RIPE whois service for the NZ ccTLD
by Joe Abley 10 May '00

10 May '00

As per subject; server running on maggie.automagic.org. Feedback welcome. Source attached. There are surely bugs. To those who have already seen this, apologies for the duplicates. To use, whois -h maggie.automagic.org blah.co.nz or, if you're using an OpenBSD snapshot more recent than the 2.6 release, whois blah.co.nz which is really a shortcut for whois -h nz.whois-servers.net blah.co.nz or, if you must, fwhois blah.co.nz(a)maggie.automagic.org or you could always use some Windows variant by feverishly clicking buttons and sliding scroll bars, forwarding VBS files to all your friends and relatives whilst distracted by the dancing paperclip. GEEK FAQ 1. Sometimes it looks very much as though I am returning duplicate person objects. However, the technical and holder contact details are not normalised within the glazier schema, and in fact the records where data is stored are quite different. I implemented an elaborate scheme which compared holder and tech details using a (patent-pending) fumbling hack heuristic, but abandoned it as soon as I realised that it's a fool's errand, really. 2. The whois server on whois.patho.gen.nz used "root(a)patho.gen.nz" as the e-mail address in the "changed" fields. This caused all kinds of spam complaints to be directed at that address, so in this new proxy I construct a postmaster address at the domain -- I can't use the real address of the last person to submit a change, since the Glazier system doesn't store it. 3. Check the header comments in each response to see which real server is being queried (this may well change). 4. Before you mail me and say "domain proz.ac.nz doesn't have a tech contact record!" check the authoritative glazier data, because so far that's where all the anomolies I have found actually originate. Don't shoot the messenger. 5. I run this on a BSD box out of tcpserver, using something like tcpserver -q -c 8 -u nobody -g nobody \ 0 whois /usr/local/libexec/whois-domainz.sh & but you could run it out of inetd just as easily. If you attempt to run it on certain (cough) user-friendly linux distribution, you'll have to hack the hideous fwhois syntax around the more correct and elegant "standard" berkeley whois syntax shown in the script (troll, troll). 6. Buffer bounds checking is weak in awk, so I'd advise running the script with no privileges (as above) if you want to run a local copy. 7. I had to use a nasty y2k hack when reformatting the "changed" field, since the Glazier system returns a two-digit year in the dates it returns. 8. The Glazier whois server from which we try to pull our source data has been periodically refusing connections. If we get connection refused, we fall back to using whois.patho.gen.nz (which reports on data from the Waikato system). A "%"-prefixed comment at the top will tell you when this happens. 9. Share and enjoy :) #!/bin/sh # # glazier/domainz whois proxy 0.11 # # I run this out of tcpserver, see http://cr.yp.to/ucspi-tcp/tcpserver.html # which is where TCPREMOTEIP comes from. The server at 202.46.160.18 is # running right now, but may move since I'm not aware that it's an offically- # supported service. # # This proxy is currently running on maggie.automagic.org, if you want # to test it out. Bugs, improvements and baseless legal threats should # be sent to jabley(a)automagic.org. # # This source is public domain. A courtesy tip of the hat would be # appreciated if you manage to make millions whilst using it :) # # Joe Abley, 7 May 2000 whois_glazier=whois.domainz.net.nz whois_waikato=tardis.patho.gen.nz tmp=/var/tmp/whois-glazier.$$ read key key=$(echo ${key} | tr ' ' ' ') echo "% * Proxy connection at $(date) from ${TCPREMOTEIP}" echo "% *" echo "% * Attempting whois from server ${whois_glazier}" echo "% *" if whois -h ${whois_glazier} ${key} 2>/dev/null >${tmp}; then awk -v whois_date="$(date)" -v whois_client="${TCPREMOTEIP}" \ -v whois_key="${key}" -v whois_glazier="${whois_glazier}" ' BEGIN \ { print "% * This data was harvested from a public whois interface"; printf "%% * hosted at %s. Retrieval and use of the data", whois_glazier; print "% * below are subject to the same restrictions and conditions"; print "% * imposed by the source server. No responsibility is taken"; print "% * nor warranty made for the accuracy of the information"; print "% * presented here. Administrative contact for this server"; print "% * is whois(a)automagic.org."; print "% "; printf "%% query: %s\n", whois_key; printf "%% client: %s\n", whois_client; printf "%% date: %s\n", whois_date; print "% "; } { gsub(/\r/, ""); } /^domain_name: / \ { ripe_domain = $2; next; } /^holder_contact: / \ { sub(/^holder_contact: /, ""); ripe_admin_c = $0; next; } /^technical_contact: / \ { sub(/^technical_contact: /, ""); ripe_tech_c = $0; next; } /^ns_name_[0-9][0-9]*: [a-zA-Z0-9]/ \ { ripe_nserver[ns++] = $2; next; } /^holder_name: / || \ /^domain_name_status: / || \ /^registrar: / || \ /^domain_datecreated: / \ { ripe_remarks[rk++] = $0; next; } /^domain_datelastmodified: / \ { sub(/^domain_datelastmodified: /, ""); split($0, field); split(field[1], subfield, /\//); year = (subfield[3] > 70 ? 1900+subfield[3] : 2000+subfield[3]); ripe_changed = sprintf("%4d%02d%02d", year, subfield[2], subfield[1]); next; } /^technical_contact_address_line_[0-9]: / \ { sub(/^technical_contact_address_line_[0-9]: /, ""); if ($0 !~ /^ *$/) ripe_tech_address[tad++] = $0; } /^technical_contact_phone: / \ { sub(/^technical_contact_phone: /, ""); ripe_tech_phone = $0; next; } /^technical_contact_fax: / \ { sub(/^technical_contact_fax: /, ""); ripe_tech_fax = $0; next; } /^technical_contact_email: / \ { sub(/^technical_contact_email: /, ""); ripe_tech_email = $0; next; } /^holder_address: / \ { sub(/^holder_address: /, ""); ripe_admin_address[0] = $0; next; } /^holder_addr_citycountry: / \ { sub(/^holder_addr_citycountry: /, ""); ripe_admin_address[1] = $0; next; } /^holder_phone: / \ { sub(/^holder_phone: /, ""); ripe_admin_phone = $0; next; } /^holder_fax: / \ { sub(/^holder_fax: /, ""); ripe_admin_fax = $0; next; } /^holder_email: / \ { sub(/^holder_email: /, ""); ripe_admin_email = $0; next; } {} END \ { if (ripe_admin_c == "") print "% * no registration data returned by query"; else { printf "domain: %s\n", ripe_domain; printf "admin-c: %s\n", ripe_admin_c; if (ripe_tech_c != "") printf "tech-c: %s\n", ripe_tech_c; for (s in ripe_nserver) printf "nserver: %s\n", ripe_nserver[s]; for (s in ripe_remarks) printf "remarks: %s\n", ripe_remarks[s]; printf "changed: postmaster@%s %s\n", ripe_domain, ripe_changed; printf "source: AUTOMAGIC\n\n"; printf "person: %s\n", ripe_admin_c; for (s in ripe_admin_address) printf "address: %s\n", ripe_admin_address[s]; if (ripe_admin_phone != "") printf "phone: %s\n", ripe_admin_phone; if (ripe_admin_fax != "") printf "fax-no: %s\n", ripe_admin_fax; if (ripe_admin_email != "") printf "e-mail: %s\n", ripe_admin_email; printf "changed: postmaster@%s %s\n", ripe_domain, ripe_changed; printf "source: AUTOMAGIC\n\n"; if (ripe_tech_c != "") { printf "person: %s\n", ripe_tech_c; for (s in ripe_tech_address) printf "address: %s\n", ripe_tech_address[s]; if (ripe_tech_phone != "") printf "phone: %s\n", ripe_tech_phone; if (ripe_tech_fax != "") printf "fax-no: %s\n", ripe_tech_fax; if (ripe_tech_email != "") printf "e-mail: %s\n", ripe_tech_email; printf "changed: postmaster@%s %s\n", ripe_domain, ripe_changed; printf "source: AUTOMAGIC\n"; } } }' ${tmp} rm -f ${tmp} logger -p daemon.info -t whois-glazier query key ${key} \ from ${TCPREMOTEIP} used ${whois_glazier} else echo "% * Connection refused from Domainz/Glazier whois server at" echo "% * ${whois_glazier}; reverting to Domainz/Waikato whois proxy" echo "% * at ${whois_waikato}" echo "% *" whois -h tardis.patho.gen.nz ${key} 2>/dev/null logger -p daemon.info -t whois-glazier query key ${key} \ from ${TCPREMOTEIP} used ${whois_waikato} fi --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

[Fwd: DRS request rejected]
by Andy Linton 10 May '00

10 May '00

drs-admin(a)domainz.net.nz wrote: > > Your request to the DRS mailing list: > > Posting of your message entitled: > Re: [DRS] DRS roll-out > > has been rejected by the list moderator. The moderator gave the > following reason for rejecting your request: > > Please do *not* post administrative requests to the mailing list! > If you wish to subscribe, visit > http://listserver.actrix.co.nz/mailman/listinfo/drs or send a 'help' > message to the the request address, drs-request(a)domainz.net.nz , for > instructions > > Any questions or comments should be directed to the list administrator > at: > > drs-admin(a)domainz.net.nz > > Your original message follows: > Received: from satva.actrix.co.nz (satva.actrix.co.nz [203.96.16.107]) > by mail2.actrix.gen.nz (8.10.0.Beta12/8.10.0.Beta10) with ESMTP id e4A3suq21870 > for <drs(a)mail2.actrix.gen.nz>; Wed, 10 May 2000 15:54:56 +1200 (NZST) > Received: from lemon.office.netlink.net.nz (lemon.office.netlink.net.nz [203.97.244.37]) > by satva.actrix.co.nz (8.10.0/8.10.0.Beta10) with ESMTP id e4A3stk15680 > for <DRS(a)domainz.net.nz>; Wed, 10 May 2000 15:54:56 +1200 (NZST) > Received: from netlink.net.nz (saw.cb.telstra.net.nz [203.97.244.24]) > by lemon.office.netlink.net.nz (8.10.1/8.10.1) with ESMTP id e4A3snA22918; > Wed, 10 May 2000 15:54:49 +1200 (NZST) > Sender: asjl(a)netlink.net.nz > Message-ID: <3918DD88.37507B06(a)netlink.net.nz> > Date: Wed, 10 May 2000 03:54:48 +0000 > From: Andy Linton <asjl(a)netlink.net.nz> > X-Mailer: Mozilla 4.72 [en] (X11; I; Linux 2.2.5-15 i686) > X-Accept-Language: en > MIME-Version: 1.0 > To: Andrew McEwen Mason <andrew(a)bsa.co.nz> > CC: DRS(a)domainz.net.nz > Subject: Re: [DRS] DRS roll-out > References: <LNBBIAJHHJHJEBDNLNPBMEAODCAA.andrew(a)bsa.co.nz> > Content-Type: text/plain; charset=us-ascii > Content-Transfer-Encoding: 7bit > > Andrew McEwen Mason wrote: > > > > Greetings to all > > > > This is an update on where we are with the roll-out. > > > > As Andrew Jamieson notified earlier today, we have made good progress, but > > unfortunately we have been struck with a number of problems effectively > > outside our control, especially power cuts which (while they haven't done > > any damage to the servers) have made it very difficult for staff to connect > > to the systems for testing. The situation was compounded by a major fire > > alarm which also happened this morning! > > I'd like to make it clear to all concerned that the power cuts mentioned > above were not at the Telstra Saturn telehousing facilities where the > Domainz system is housed in Auckland and Wellington. Both facilities > have UPS and generator back up and no failure occurred at the nodes. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

NZ Address Space
by Chris Wedgwood 10 May '00

10 May '00

A while back I mentioned I would make a snapshot of what NZ networks (IP addresses) are in use. A couple of people have asked for this recently so I have compiled a rough list based on various prefixes within CLEAR's BGP tables. ftp://ftp.clear.net.nz/pub/netinfo/nz-address-space/ If there is any interest, I'll look at doing a better job of this at some point and perhaps having it automagically update from time to time. --cw -- Chris Wedgwood chris.wedgwood(a)clear.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: System live
by Sam Sargeant 10 May '00

10 May '00

> As promised, this is to let you know that the Domainz > Registration System is > now live. It's a pity that the name of the SSL certificate for the Domainz secure site is incorrect. www.domainz.net.nz != www.domainz.glazier.co.nz. Some proxy servers and well configured browsers will throw this away. ##----Sam-Sargeant---------NetLink-Ltd--------Systems-Developer----## until($x>=40){print$"x$x;for('#4V%M','+(%-A<F=E86YT("T`','%($IU<W0`', '(($%N;W1H97(`','.(%!E<FP(a)2&%C:V5R(0H`'){print unpack('u*',$_)}$x+=2} ##.................................................................## --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

System live
by Andrew McGhie 10 May '00

10 May '00

As promised, this is to let you know that the Domainz Registration System is now live. We have carried out a successful zone build as part of the switch-over process. There will be a daily zone build at 16.00 from today until further notice. Best regards to all Andrew Mason (from Andrew McGhie's email and on behalf of all at Domainz and Advantage Group) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Domainz information corruption.
by Andrew McGhie 10 May '00

10 May '00

Hi Simon Thanks for pointing out this problem, which relates to the field length for phone numbers. We have added it to our list of "things to fix". Will also investigate the US example you gave. Cheers Andrew Mason (from Andrew McGhie's email). -----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Simon Lyall Sent: Wednesday, May 10, 2000 10:42 AM To: nznog(a)list.waikato.ac.nz Subject: Domainz information corruption. I just had a look at my domain of darkmere.gen.nz on the new domainz site of www.domainz.glazier.co.nz. The problem seems to be that the Holder Phone number seems to have been truncated in the change. On the old site at: http://domainz.waikato.ac.nz/cgi-bin/DNZ-REGISTER?domain_name=darkmere.gen.n z It is: Holder Phone: +64 9 358 5067 ex 9701 but on the new site ( http://www.domainz.glazier.co.nz/ , then "Domain Name Management" , then "Domain Name Search" ) It is: Phone: 64 9 358 5067 ext 97 Note, the "+64" has been changed to just 64 and the extention on 9701 has been changed to 97. I guess somebody didn't think when they programed in that field. Overseas phone numbers just look funny, check out dianetics.co.nz -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz System/Network Admin. | | Home: simon(a)darkmere.gen.nz Ihug Limited, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DRS live cut-over
by Andrew McGhie 10 May '00

10 May '00

Good afternoon. This is an update on progress with bringing in the new DRS. We have just (at midday today) carried out a final successful zone comparison, and are now confident that we can proceed to cut over the system to fully live running. This will happen over the next 1 to 2 hours as we move all elements of the system (including email and web pages) between hosts, and we expect that the process will be complete no later than 14.00 today. It will include the first live zone build. We will then carry out another zone build at 16.00 today and daily at 16.00 thereafter as before. We will post to these lists as soon as the whole process has been successfully completed. Best regards Andrew Mason (from Andrew McGhie's email today) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NETWORK SOLUTIONS SECURITY TRUTHS? (fwd)
by Joe Abley 09 May '00

09 May '00

Presumably when someone uses this vulnerability to take down the root registry, any concerns about the technical viability of the Domainz/ Glazier system will be rather academic :) ---------- Forwarded message ---------- Date: Tue, 9 May 2000 13:53:54 -0700 (PDT) From: Exiled Dave <exiled_dave(a)yahoo.com> To: nanog(a)nanog.org Subject: NETWORK SOLUTIONS SECURITY TRUTHS? http://www.networksolutions.com/cgi-bin/makechanges/easysteps/easysteps.pl?… Check out /var/named/internic.net as well. __________________________________________________ Do You Yahoo!? Send instant messages & get email alerts with Yahoo! Messenger. http://im.yahoo.com/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ns_ip_* vs. ns_name_* in new Domainz system
by Joe Abley 09 May '00

09 May '00

Has anybody else seen instances in the new register where a domain has ns_name_* records, but no corresponding ns_ip_* records? For example, patho.gen.nz has: ns_name_1: dns1.clear.net.nz ns_ip_1: 203.97.33.1 ns_name_2: soa2.qsi.net.nz ns_ip_2: ns_name_3: tardis.patho.gen.nz ns_ip_3: 203.97.2.226 ns_name_4: medusa.blackops.org ns_ip_4: This makes me slightly nervous. Has anybody else seen this kind of thing for other domains? Are the current zone files running at ns99.waikato.ac.nz built from this new data, or are the old zone files still running? If the former, when will the first authoritative zone from the new system be loaded? (it looks like it will be worth checking). The fact that the hosts soa2.qsi.net.nz and medusa.blackops.org are quite possibly unknown to Domainz makes me suspect a systematic problem of some kind, and not a random one. Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 4