August 2001 - NZNOG - lists.nznog.org

Dean's Wireless Walkabout
by Dean Pemberton 01 Aug '01

01 Aug '01

Hi all; Yes this might be a first, I'm going to drag the topic BACK to something network related. I happen to be in Auckland today. Flew in for customer chit chat which will happen tommorow. Had a spare afternoon and no one to see so I thought I might do the geek thing and see how little old Auckland was getting along with it's wireless networking. SO, I slapped the 802.1Q card into the laptop and strapped the GPS onto the outside of my backpack and went for a walk. I walked down Queen Street from the top to the water, and then back up to Albert St to Wellesley then back up Symonds to my hotel. Well. Auckland sure is brimming with wireless. But the concern (and I spose the reason that I posted this at all) was that most of it is insecure. Now I'm a good guy. I don't want to get access to anything, god knows I see enough internet as it is. I just wanted to see how many places had embraced the 802.1Q fad. So all in all 29 networks jumped out and grabbed me as I was walking past. only 4 of them were using WEP. Now because I didn't actually try to gain access to any of them, I have no idea what the internal security of them is like. But I'm not expecting much. I don't think I sniffed anything off the sky tower, I was only using the small antenna on the card. So if you run a wireless network in the center of Auckland and you were using the strategy of "Oh it will never make it down to the street" Then you are wrong and you might like to put some more security on. I thought about mailing my networklist out as well. But I decided against it. Mainly because it has exact GPS locations and network names. It would make easy pickings for anyone who wanted to gain access. If you want to mail me privatly with your network name and/or card MAC address then I will give you a yes or no answer. Dont feel alone though. I've done the same in North Sydney and come up with similar numbers. Next week wellington. Have fun Dean --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

RE: Code Red (Take Two)
by Thomas Salmen 01 Aug '01

01 Aug '01

A little less of an impact this time then, huh? We've had two customers infected, both installs of which were less than a few days old. Seems that most admins (in NZ at least) have been rather better prepared this time round. Don't know if I can say the same for our friends overseas - many of the IPs that I have logged originate in Asia. Some in the States and Europe, but not as many. A few illegal, unpatched IIS installs, maybe... Must say, though, it was rather funny reading about the 'Code Red no-show' in the news this morning... Regards, Thomas Salmen System Administrator Radionet Ltd. 1/72 Paul Matthews Road Albany, Auckland, New Zealand Ph: +64 9 414 0300 ext 718 -----Original Message----- From: Thomas Salmen [mailto:thomas(a)radionet.co.nz] Sent: Thursday, 2 August 2001 2:12 p.m. To: nznog(a)list.waikato.ac.nz Subject: Code Red (Take Two) Just curious... have many people been affected by the second round of Code Red infections? We have seen plenty of inbound traffic here (well, the odd bit, anyway) but very few of our customers web servers have been hit - not like last time... Regards, Thomas Salmen System Administrator Radionet Ltd. 1/72 Paul Matthews Road Albany, Auckland, New Zealand Ph: +64 9 414 0300 ext 718 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Code Red (Take Two)
by Thomas Salmen 01 Aug '01

01 Aug '01

Just curious... have many people been affected by the second round of Code Red infections? We have seen plenty of inbound traffic here (well, the odd bit, anyway) but very few of our customers web servers have been hit - not like last time... Regards, Thomas Salmen System Administrator Radionet Ltd. 1/72 Paul Matthews Road Albany, Auckland, New Zealand Ph: +64 9 414 0300 ext 718 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 9

Hmm.
by David Robb 01 Aug '01

01 Aug '01

Is this true? http://www.bogusjourney.com/08018.html David Robb --- Senior Network Engineer DDI +64-9-359-2710 ihug (AS7657) NOC +64-9-359-2708 "The Earth is a single point of failure" --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

13 25

(off topic) Stop with all the garbage please.
by stephen sheehan 01 Aug '01

01 Aug '01

Jeff, Dr Joe and all, I see myself as being fortunate to be a member of this mailing list, to here the wisdom of the local net Gods. It appears some of you do not share this view. I see this list as a valuable resource for the local net industry, and of late it seems to have deteriated into basicly a type of email chatroom for all sorts of off-topic bitching. So I am asking that you please have some respect for the intended purpose of this list and other list members. If you want to bitch to each other or discuss stuff that is not relavent, please do so by private email, as I am sure most of you have better things to do than sort through all the shit that has been posted to the list lately. Sorry for posting this off topic e-mail and sounding like a hypocrite and also adding to the large amount of crap alread on this list. Your sincerely Stephen Sheehan __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Alternative List
by Matt Camp 01 Aug '01

01 Aug '01

A while back an alternative list was proposed... most people seemed quite receptive to the idea... so it now exists. To subscribe, send a mail to majordomo(a)noise.net.nz with 'subscribe nznet' in the body. The alternative list is more informal, and more generally aimed at the NZ Networking industry. It may contain things such as details of used equipment for sale, and discussions which would be regarded as off topic here. Hopefully this will give us a place to discuss such things, and will keep the noise level down here somewhat. --- Matt Camp --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Crap
by Michael Bordignon 01 Aug '01

01 Aug '01

maybe uh, ending discussion of this completely off-topic discussion and refraining from replying to any further attempts to revive it may be productive? (including replying to this rhetorical post) Michael > i know this well and so does jeff. example - you filter me > out - or jeff > - or whomever it may be you choose to filter - then some third party > begins the drivel about jeff williams. well - you end up on > the receiving > end of the drivil from the third parties. in most cases > filtering ends up > causing confusion. you would essentially have to filter out > everyone who > is speaking about jeff williams - and that in my opinion is counter > productive. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Validation of INEGROUP.GOD Domain
by The dot.GOD Registry, Limited 01 Aug '01

01 Aug '01

Hello: This email will confirm that we have processed your domain registration request for: INEGROUP.GOD. Someone, hopefully you, has registered this domain with us. If not please let us know. You must now visit our web site to validate your domain and enter your validation ticket number. TICKET: 52396544d99665168490 Please click on the following URL to activate your new domain name now. https://secure.dot-god.com/god.nic/validate.cgi?inegroup=52396544d996651684… Or if the above URL does not work (some email systems may crop the URL) then please visit: https://secure.dot-god.com/cgi-bin/validate.cgi and enter the following information manually at the prompt: DOMAIN: inegroup TICKET: 52396544d99665168490 Regards hostmaster(a)dot-god.com http://www.dot-god.com/ The dot.GOD Registry, Limited Executive Plaza, Suite 908 150 West 51st Sreet New York, New York, 10019 US --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

RED WORM Virus
by Mike Conner 01 Aug '01

01 Aug '01

Has any one seen the worm yet? Mike Conner. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Code Red growth stats (fwd)
by !Dr. Joe Baptista 31 Jul '01

31 Jul '01

my contribution to keeping this conference topical today. ---------- Forwarded message ---------- Date: Wed, 1 Aug 2001 09:44:05 -0700 From: k claffy <kc(a)ipn.caida.org> To: nanog(a)nanog.org Subject: Code Red growth stats (david moore with help from a bunch of elves) http://www.caida.org/analysis/security/code-red/aug1-live-hosts.gif was exponential till about an hour ago, we're not sure if leveling off is due to our monitor load or an actual peak in the data. log-scale version http://www.caida.org/analysis/security/code-red/aug1-live-hosts-log.gif will put on main caida home page later today and update every minute (you'll have to hit reload, and you won't actually notice changes at a minute granularity so please no per-minute cron jobs to reload :) ) note the corresponding graph for 19-20 july: http://www.caida.org/analysis/security/code-red/gifs/cumulative-ts.log.gif no per AS stats for this outbreak yet, also under construction. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0