August 2000 - NZNOG - lists.nznog.org

list.waikato.ac.nz Has Moved
by Donald Neal 11 Dec '24

11 Dec '24

NZNOG-People, I have just finished migrating all of the mailing lists held at The University of Waikato from one server to another. I don't have any reason to believe that anything's gone wrong, but please bear with me for today if it turns out that something has. - Donald Neal -- Donald Neal | Q: How many Aucklanders does it take to change Systems Programmer/Analyst | a light bulb? The University of Waikato | A: Pass me that candle and I'll tell you. Hamilton, New Zealand | --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Public providers and ASN on WIX
by Simon Blake 17 Jun '01

17 Jun '01

Matthew Grant from Plain was asking who the WIX route servers pee with, I figured the results may be of interest to others peering or considering peering on WIX: neighbor 202.7.0.1 remote-as 9439 neighbor 202.7.0.1 description Citylink neighbor 202.7.0.49 remote-as 2687 neighbor 202.7.0.49 description AT-T ! neighbor 202.7.0.65 remote-as 7714 ! neighbor 202.7.0.65 description Netlink1 neighbor 202.7.0.76 remote-as 9736 neighbor 202.7.0.76 description Domainz neighbor 202.7.0.78 remote-as 9718 neighbor 202.7.0.78 description Chello neighbor 202.7.0.129 remote-as 9343 neighbor 202.7.0.129 description Actrix neighbor 202.7.0.130 remote-as 9872 neighbor 202.7.0.130 description Actrix-LH neighbor 202.7.0.177 remote-as 9495 neighbor 202.7.0.177 description Clearview neighbor 202.7.0.192 remote-as 4768 neighbor 202.7.0.192 description Clear neighbor 202.7.0.241 remote-as 7657 neighbor 202.7.0.241 description IHUG neighbor 202.7.1.1 remote-as 4770 neighbor 202.7.1.1 description ICONZ neighbor 202.7.1.49 remote-as 9436 neighbor 202.7.1.49 description Globe-Net neighbor 202.7.1.65 remote-as 9445 neighbor 202.7.1.65 description Saturn neighbor 202.7.1.110 remote-as 4740 neighbor 202.7.1.110 description Voyager neighbor 202.7.1.129 remote-as 9345 neighbor 202.7.1.129 description Paradise neighbor 202.7.1.176 remote-as 9503 neighbor 202.7.1.176 description Comnet neighbor 202.7.1.193 remote-as 9338 neighbor 202.7.1.193 description NLNZ neighbor 202.7.1.241 remote-as 9325 neighbor 202.7.1.241 description Xtra neighbor 202.7.1.244 remote-as 9559 neighbor 202.7.1.244 description Plain Cheers Si --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

The New Zealand Network Operators' Group
by Donald Neal 31 Aug '00

31 Aug '00

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. At last count the list had just under 170 subscribers, with the count growing by around five each month. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to meet over beer. Some subscribers are likely to attend the NetForum NZ 2000 conference in Hamilton in the first week of October. For further details of the conference, see http://www.uniforum.org.nz/netforum/ . Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

MEDIA: Sydney Morning Herald - Telstra Blacklist Story. (fwd)
by Alan Brown 27 Aug '00

27 Aug '00

---------- Forwarded message ---------- Date: Mon, 28 Aug 2000 14:42:56 +0900 From: Glenn Barry <gbarry(a)SYDNEY.NET> Subject: MEDIA: Sydney Morning Herald - Telstra Blacklist Story. Posted just for the record and future reference: http://www.smh.com.au/news/0008/28/bizcom/bizcom1.html ============================= Telstra on black list because of spamming Junk mail over the Net arouses strong passions. Kevin Morrison explores the issues. Telstra has long boasted that it wants to become a major player in the Internet world butmany in cyberspace accuse Telstra of harbouring the Internet community's number one enemy, spammers. "Spam" unsolicited emails have become the vehicle of 21st century snake-oil salesmen, offering various schemes and services, to millions of recipients. Spam clogs up email in-boxes, slows down Internet traffic and overloads the systems of Internet service providers, hence the unpopularity of its perpetrators. "They can really cause havoc because systems get overloaded and it is impossible to get off a spam list, so people get annoyed as the junk can take hours to clear," said one Internet user, who did not want to be named because of concerns that he would be targeted by spammers. Being the telecommunications carrier that transports the spam, Telstra has landed in hot water among the Internet community. Over the past three months Telstra has been among the most unpopular Internet organisations on "anti-spam" information Web site Spamcop (web address http://spamcop.net). "Telstra serves a country of 20 million people and yet it has been the most complained about network for several months. So Telstra has not got a good reputation in the Internet world," the Internet user said. Anti-spam groups such as ORBS and MAPS have formed to fight these rogues of the Net, with a mission to drive them off the Internet. The most effective way to do that is to cut off links to the telecommunications operator that allows spammers to connect to their network. The anti-spam groups have achieved some measure of success. In March US Internet backbone carrier AGIS (Apex Global Internet Services) was forced into bankruptcy after it became an outcast in the Internet community over its refusal to rid its network of spammers. "The anti-spam organisations should not be underestimated," the Internet user said. Last week ORBS temporarily put a black ban on Telstra, which meant that the 200 plus Internet service providers that subscribe to ORBS from around the world would not receive email coming from the Telstra network. Given that Telstra is the largest carrier of Internet traffic in Australia that means a lot of emails sent last week were bounced back to their senders, including messages sent from The Sydney Morning Herald email system to New Zealand-based ORBS administrator Mr Alan Brown. Mr Brown said Telstra had been put on the ORBS black list because of its slowness to disconnect notorious spammers. Mr Brown said Telstra's treatment of two alleged spammers, Mr Phil Basten and Mr Dean Westbury, who are directors of company named Global Web Solutions, had triggered the ORBS action. Telstra spokesman Mr Stuart Gray acknowledged the two men were spammers and that Telstra had cut their connection to its Big Pond service. Despite Telstra claims that the pair were disconnected, Messrs Basten and Westbury were still operating late last week. "They are playing the game of multiple names, multiple identities, and they keep on popping up. But it is hard to know that they are going to be spammers when they first set up," Mr Gray said. The two men are also being watched by the Australian Securities and Investment Commission. "We are monitoring some of the activities of these gentlemen," an ASIC spokeswoman said. However, Mr Basten told the Herald that he was not a spammer and that he and Mr Westbury provided Web-hosting services and programs that allowed customers to bulk mail. He said that some of his customers appeared to be spammers. "We didn't know anything about it. It looks like there are four out of about 100 customers that have been spamming and we had no way of knowing. "The first thing I knew about it was when Telstra closed down our service and that has cost us a lot of money. So I am going to get our lawyers and try and get that money back from Telstra," Mr Basten said. A Telstra spokesman said that they had enough evidence to prove that Mr Basten and Mr Westbury were spammers. Australia's Internet carriers have not been as active as their US counterparts in stamping out spamming. In the US, where spamming activities first started, ISPs have become more active in cutting spammers from their network, issuing heavy fines and strict conditions that customers must adhere to. Both Telstra and Optus claim to have stringent anti-spam policies on their networks, prohibiting users from carrying out "unacceptable Internet behaviour such as spamming." However, Mr Brown said both carriers had been very slow to react to spamming. "Optus have not responded to any complaints that I have made to them. The Cable & Wireless group worldwide has a bad reputation in the Internet community where they are known as Clueless and Witless," Mr Brown said. With the Internet increasingly moving to wireless platforms, such as WAP on mobile phones, spamming is expected to spread even further unless carriers jump on it. With several carriers expected to participate in the mobile Internet space, the choices will increase for spammers. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: WIX Route Reflectors
by James Tyson 21 Aug '00

21 Aug '00

> So, let me get this straight. He gets troubles when he receives routes > from you directly, and then again via the route server? Yeah. Turns out he's running some horrible system based on gated. > Which means that the other 40 odd peers of the route servers will no > longer have direct paths to xtra's networks (of that 40, maybe half are on > private ASN, so can't easily peer directly with xtra), and vice versa. > I'm happy to not send updates we receive from xtra on to users xtra peer > directly with, but I need you to tell me who those peers are. If you > don't want us to send Xtra updates Plain, I'll knock 'em on the head > immediately. Personally, I'd hope that was a better solution that just > dropping the route server peering completely (it's what we do for > Paradise and Netlink, for example). What we have been doing in the past (and what we are doing now, for that matter) is to add our routes into the mix, but not learn anything from the route reflectors. > Thats going to be a tad pointless, when you've dropped your peer, and > Matthew currently has his peering down! Can you cut and paste some > examples of where the route server is doing something wrong? 'praps you > could give me a call on 025 XXX XXX, or let me know your number, and I'll > call you. Yeah, I realised that just after I sent you the last mail. However, allowing routes from the WIX route reflectors to enter our network raises trust issues. The problem being, I know of you, Mr Blake, but I'm afraid I don't know you (god I love that line, thank's Chris Roberts for giving us the wing commander movie!). I would rather under-utilise our WIX connection by using only explicit domestic peering with other large peers, whom I know how to contact, than use route reflectors, both of which are under a completely different routing domain, and can potentially have conflicting policies with mine. This is not, however, a personal attack on yourself, your administrative abilities, or your network, but merely a statement of fact. I cannot allow routes from unknown and untrusted sources to be injected into my AS unless stringent measures are undertaken on your part to ensure the sanity of said advertisements. I will however allow our network to learn routes from you if you are able to give documented evidence that every route is under the strict control of the WIX. In an effort to help, I am willing to send you a prefix-list of Xtra's networks. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

ICMP broadcast amplifier list (fwd)
by Alan Brown 21 Aug '00

21 Aug '00

For those not on Bugtraq. ---------- Forwarded message ---------- Date: Mon, 21 Aug 2000 18:40:39 -0700 From: Troy Davis <troy(a)NACK.NET> To: BUGTRAQ(a)SECURITYFOCUS.COM Subject: ICMP broadcast amplifier list netscan.org has rechecked all routed /24s for ICMP directed broadcasts (smurf amplification) and made public the complete list of misconfigured networks. The probes ran from 8/18-8/21. The results are queryable and downloadable at http://netscan.org Cheers, Troy --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

None
by None 17 Aug '00

17 Aug '00

JAA25389 for <nznog(a)list.waikato.ac.nz>; Fri, 18 Aug 2000 09:55:31 +1200 Received: from localhost [127.0.0.1]=20 by uber.samizdat.co.nz with esmtp (Exim 3.12 #1 (Debian)) id 13PXd8-0007OO-00; Fri, 18 Aug 2000 09:55:18 +1200 Date: Fri, 18 Aug 2000 09:55:18 +1200 (NZST) From: James Tyson <james(a)samizdat.co.nz> Sender: eugene(a)uber.samizdat.co.nz To: David Zanetti <dave2(a)earthling.net> cc: nznog(a)list.waikato.ac.nz Subject: Re: Bizzareness and Oddity with IOS In-Reply-To: <Pine.LNX.4.10.10008180939580.13987-100000(a)wakko.wetstring.net= > Message-ID: <Pine.LNX.4.21.0008180953350.28229-100000(a)uber.samizdat.co.nz> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=3DUS-ASCII > Hmmm.. very odd, 12.0(4)T with IP/FW leaked memory like there was no > tomorrow on our 3640 :) 12.0(7)T with the same features doesn't leak > memory (that I've noticed) and doesn't drop static routes either.. >=20 > Although they are different hardware platforms, so perhaps that'll make > the difference. I will obtain said image and try that :) We have found pretty much every IOS 12 release up until 12.0([10..11])S has been either unstable, leaked memory, or had some bug with one of the interface types we are running. That's on our 7500's though. Our 7200 VXR is running 11S and is as happy as larry, and has been for some time. James Tyson --- Samizdat New Media Solutions =20 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Weird BGP community stuff
by James Tyson 17 Aug '00

17 Aug '00

We have a router in Christchurch that seems to be sending community attributes to an EBGP peer, even though the neighbor statements dont contain the send-community argument. Does anyone know whats causing it? The router is running version 12.0(7)S1 on a 7500 series chasis. Also, on a somewhat related note, all domestic routes learned over WIX are being tagged with the community 9325:100, which is all cool. Our wix router does this: IPNWN1-B1#sh ip bgp 202.10.80.0 BGP routing table entry for 202.10.80.0/20, version 457621 Paths: (1 available, best #1, table Default-IP-Routing-Table) Advertised to non peer-group peers: 202.27.158.248 202.27.176.3 202.27.176.6 202.27.176.7 202.27.176.12 203.96.111.254 9718 202.7.0.78 from 202.7.0.78 (202.10.65.24) Origin IGP, metric 0, localpref 100, valid, external, best Community: 9325:100 The christchurch router says this: IPNCH1-B6#sh ip bgp 202.10.80.0 BGP routing table entry for 202.10.80.0/20, version 82178 Paths: (1 available, best #1) Advertised to non peer-group peers: 202.36.174.82 9718 202.7.0.78 (metric 179712) from 202.27.176.4 (202.27.185.135) Origin IGP, metric 0, localpref 100, valid, internal, best Community: 611123300 ^^^^^^^^^ - what is this?!?!? shouldnt it be 9325:100?? Any ideas anyone has would be helpful. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Weird BGP community stuff
by Ben Martel 17 Aug '00

17 Aug '00

James, Your 611123300 wierdo is actually just another way of representing 9325:100. It is really two sixteen bit values added together eg. 9325*65536 = 611123200 + 100 = 611123300 ( your answer) To change this representation you need to enter the IOS command: ip bgp-community new-format Cheers Ben > -----Original Message----- > From: James Tyson [mailto:james(a)samizdat.co.nz] > Sent: Friday, 18 August 2000 4:18 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: Weird BGP community stuff > > > > We have a router in Christchurch that seems to be sending > community > attributes to an EBGP peer, even though the neighbor > statements dont > contain the send-community argument. Does anyone know whats > causing it? > > The router is running version 12.0(7)S1 on a 7500 series chasis. > > Also, on a somewhat related note, all domestic routes learned > over WIX are > being tagged with the community 9325:100, which is all cool. Our wix > router does this: > > IPNWN1-B1#sh ip bgp 202.10.80.0 > BGP routing table entry for 202.10.80.0/20, version 457621 > Paths: (1 available, best #1, table Default-IP-Routing-Table) > Advertised to non peer-group peers: > 202.27.158.248 202.27.176.3 202.27.176.6 202.27.176.7 202.27.176.12 > 203.96.111.254 > 9718 > 202.7.0.78 from 202.7.0.78 (202.10.65.24) > Origin IGP, metric 0, localpref 100, valid, external, best > Community: 9325:100 > > The christchurch router says this: > > IPNCH1-B6#sh ip bgp 202.10.80.0 > BGP routing table entry for 202.10.80.0/20, version 82178 > Paths: (1 available, best #1) > Advertised to non peer-group peers: > 202.36.174.82 > 9718 > 202.7.0.78 (metric 179712) from 202.27.176.4 (202.27.185.135) > Origin IGP, metric 0, localpref 100, valid, internal, best > Community: 611123300 > ^^^^^^^^^ - what is this?!?!? shouldnt it be > 9325:100?? > > Any ideas anyone has would be helpful. > > James Tyson --- > Samizdat New Media Solutions > > > --------- > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Bizzareness and Oddity with IOS
by Donald Neal 17 Aug '00

17 Aug '00

>>> "Sid Jones" <sjones(a)netlink.net.nz> 18/August/2000 11:39am >>> >Well I'm going to ask... why doesn't it just work? For a full explanation, see http://www.ubersoft.net/d/20000804.html . - Donald Neal :{)* --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0