October 2002 - NZNOG - lists.nznog.org

list.waikato.ac.nz Has Moved
by Donald Neal 12 Dec '24

12 Dec '24

NZNOG-People, I have just finished migrating all of the mailing lists held at The University of Waikato from one server to another. I don't have any reason to believe that anything's gone wrong, but please bear with me for today if it turns out that something has. - Donald Neal -- Donald Neal | Q: How many Aucklanders does it take to change Systems Programmer/Analyst | a light bulb? The University of Waikato | A: Pass me that candle and I'll tell you. Hamilton, New Zealand | --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

RE: Sort of OT: are there any "Internet enabled" temperature sens ors/servers for Auckland?
by Greg Clare 18 Aug '21

18 Aug '21

May not be exactly what you are after? However DSE have an Internet weather station at the Albany HQ. http://www.dse.gen.nz/public/webdata/weather.htm Regards Greg > -----Original Message----- > From: Juha Saarinen [mailto:juha(a)saarinen.org] > Sent: Wednesday, 2 January 2002 2:47 pm > To: NZNOG > Subject: Sort of OT: are there any "Internet enabled" temperature > sensors/servers for Auckland? > > > Measuring the outside temperature, with geographic location given. > > -- > Juha > Take off every sig! > > - > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

problems with NTP on bigben?
by Simon Blake 03 Mar '05

03 Mar '05

Anybody else observed that bigben gained about 19 years at about 1:25pm this arvo? $ date Tue Jan 1 14:54:33 NZDT 2002 $ /usr/sbin/ntpdate -q truechimer.waikato.ac.nz server 130.217.76.32, stratum 2, offset -0.001089, delay 0.04276 1 Jan 14:49:38 ntpdate[17537]: adjust time server 130.217.76.32 offset -0.001089 sec $ /usr/sbin/ntpdate -q bigben.clix.net.nz server 203.167.224.60, stratum 1, offset 619315199.998172, delay 0.03613 1 Jan 14:49:55 ntpdate[17540]: step time server 203.167.224.60 offset 619315199.998172 sec - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

13 20

Filtering of WIX prefixes
by Sam Sargeant 31 Oct '02

31 Oct '02

I've run up against a frustrating problem and some advice would be appreciated. We have a /29 via AT&T here in Wellington. We advertise this /29 to the WIX route servers. Via WIX, we receive a prefix from a national ISP[1]. Any attempts to send traffic to this ISP fall silently into the bit-bucket. >From what I understand, the ISP does not accept any prefix from WIX that is larger than a /24. Given our traffic is being sent directly to their WIX router (layer-2 headers confirm this), I believe their ingress filtering is dropping this traffic since the return-path doesn't match. If I filter the ISP's prefix, the transit is handled by AT&T and everything works just fine. Effectively, the only way I can talk to them is to go "the long way". Now, I have no major problem with any AS saying "our policy states we only accept prefixes smaller than /24". What frustrates me is that the ISP is seemingly saying : ISP> Hello Wellington! If you have any packets for this prefix, send them to me! US > Excellent! Here, have some traffic for one of your hosts. ISP> What? Who are you? I think I'll drop this. [ ... ] ISP> Send me your traffic Wellington! >From what I can tell, there are 30 prefixes advertised on WIX that are >/24, and these amount to ~672 hosts. If I'm correct (and I'll admit I'm making an educated guess here), then all of those hosts are unable to talk to this ISP. So, my options are: 1. Stop playing with pissant /29's on WIX. 2. Get the ISP to change their ways. 3. Filter the ISP's prefixes that I receive from WIX. I think the most likely option is #3. However how am I to know what other networks do the same thing? Shall I troll every single WIX network to check I can talk to them, then build a filter-list based on that? Ugly. Sam. ----- [1] Since I have disagreed with the ISP in question, and they haven't been forthcoming in getting it resolved, I've elected not to name them. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

Lame reports - thanks!
by Rob Thomas 30 Oct '02

30 Oct '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this post in other fora. ] [ Apologies as well for all of the spam today. :) ] My thanks to the increasing number of you who submit lame delegation logs to me. This helps to increase the reach and usefulness of the Weekly Lame Name Server Report page: http://www.cymru.com/DNS/lame.html You will find a (much better bandwidth) mirror of the site here: http://bgp.lcs.mit.edu/dnsmirror/lame.html If you have logs you can share, anonymously or with full credit, feel free to send them to lamer(a)cymru.com. Be the first in your ASN to fill my lamer file system. :) Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

IANA IPv4 allocation list format change
by Rob Thomas 30 Oct '02

30 Oct '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this post in other fora. ] For those of you who don't know, the format of the IANA IPv4 allocation list has changed. It now lists each prefix as a distinct /8, instead of hyphenated ranges of prefixes. This change took place on 25 October. If you are parsing this file automagically, you may wish to modify your scripts. My own script claimed that several new allocations had been made. It's fixed now. :) http://www.iana.org/assignments/ipv4-address-space My thanks to the IANA folks for this change! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Any isps support ODMR - RFC2645?
by Steve Lang 23 Oct '02

23 Oct '02

Hiya. Thanx for the detailed reply, what you say makes much more sense. Interesting that Telecom don't send framed-ip, that'd be annoying. Are they still using the merit Radius code? But it's probably their NAS that is sending the Start prior to the ipcp negotiating IP Addr. Bugger. Then there is the issue of running servers etc, as you point out, I don't want to start that flame war again, and I don't want to run internet reachable SMTP servers @ home either. The previous discussions on this make several points, some of which are: 1) POP3, and in particular multi-drop POP mailboxes are problematic, and 2) running SMTP servers (even if legal) is problematic over intermittant/dialup/dynamic connections. Unfortunately there's nothing in-between, and something in-between is entirely valid for 'power' home users. And to make it worse, Paradise don't have a consistent, unique mail header to really make multi-drop pop mailboxes work. This is well within what paradise can do, and despite asking this particular question several times, they just don't seem to provide that facility. Oh to find a better solution, ODMR isn't. As someone pointed out, maybe UUCP? Cheers- > -----Original Message----- > From: Mark Goldfinch [mailto:mark.goldfinch(a)team.telstraclear.co.nz] > Sent: Thursday, 24 October 2002 11:52 p.m. > To: Steve Lang > Cc: nznog(a)list.waikato.ac.nz > Subject: RE: Any isps support ODMR - RFC2645? > > > > On Thu, 24 Oct 2002, Steve Lang wrote: > > > Yes, I Emailed postmaster(a)paradise.net.nz. To quote: > > > > "It's basically due to our DSMTP authentication being based around our > > dial-in RADIUS, and not our ADSL RADIUS. Given the choice between the > > two options, we decided to provision DSMTP for dial-in as it is > > recognised as more of a stop-gap method of mail delivery somewhere in > > between POP and a dedicated mail server." etc. And a statement to the > > fact that you're not meant to run servers behind Jetstart connections > > etc. > > While this isn't quite correct the end result is the same. > > The technical reason why this cannot happen is because our dsmtp radius > processing is only interested in Start and Stop accounting records. > > An example Jet* radius accounting record: > > Mon Oct 14 19:49:11 2002 > User-Name = "someusername" > NAS-Identifier = "GLF_RAN_01" > Service-Type = Framed-User > Framed-Protocol = PPP > NAS-Port = 540475748 > Acct-Session-Id = "20370164-3DAA68E6" > Acct-Authentic = RADIUS > Acct-Status-Type = Start > User-Id = "someusername" > User-Realm = "paradise.net.nz" > Proxy-State = 0 > Proxy-State = 0 > Timestamp = 1034578151 > > you may note that there is a distinctive lack of Framed-IP-Address field > present in this record. This is well known for Telecom's Jet* > infrastructure and has been noted in this forum beforehand. > Framed-IP-Address fields are present in the (approximately) 30 second post > connection and then hourly Alive records as well as Stop records. > > Now it is true that it would be somewhat simple to make Alive records be > treated in (almost) an identical fashion as Start records in this case, > but I really must question whether it is in our best interests to do so. > TelstraClear (or one of its legacy companies) will have signed an > agreement with Telecom surrounding the conditions and services which we > will offer JetStart to our customers. If we should be penalised the > implications for us would be somewhat larger than most other ISPs (other > than perhaps Xtra). > > Unfortunately if Telecom does not want business customers (or services > deemed to be of business grade) present on JetStart they probably have the > means to make us (and in turn our customers) very unhappy. > > Now of course I could be very wrong and Telecom could have had a recent > change of heart and are these days more than happy for us to hookup > businesses via JetStart. Please I would be more than happy to be proved > wrong. > > > Short of ringing them up, and demanding to speak to someone else, which > > I don't have time to do, what options are there? I know, move my > > business somewhere else? > > Good luck in finding a solution, yes it somewhat sucks that broadband > options are somewhat limited in this country, but it isn't just the > customer's who have few options. > > And on that note this thread is now probably heading quite off-topic. > > > Best Regards, > > --- > Mark Goldfinch > Senior Systems Administrator > TelstraClear Ltd > > > > > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Any isps support ODMR - RFC2645?
by steve＠spl.co.nz 23 Oct '02

23 Oct '02

Hiya. I've been investigating multi-drop mailboxes etc., for home use. The concept of On Demand Mail Routing (ODMR - RFC2645) came up. Do any ISP's in NZ support this? There is RFC2645 which seems to cover what I'm after in such a way as to easily support smtp queueing over dynamic internet connections etc. (jetstart to be precise) I've asked Paradise, and they aren't/can't oferring such a thing. Is anyone here offering this? Paradise also don't seem to have a useable header for calculating the original recipient in all cases. Do any other ISP's have a reliable consistent header that is accurate, not duplicated and contains the correct values even when bcc'd from Mail Lists? I'd seriousely consider changing providers if I can confirm one of the above. Cheers - - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 16

Non email popup spam
by Orcon Support - Jay Best 23 Oct '02

23 Oct '02

Have had a few of our dialup customers complaining about this one.. SNIP from geek tools--------- New "Messenger spam" invades desktops Just when you thought e-mail spam was bad enough, along comes Direct Advertiser software, which can send pop-up messages directly to users' desktops. These pop-up messages appear even if the user is not in e-mail or an Internet browser. The software utilizes Microsoft's Messenger Windows service, which is turned on by default (on WinNT, 2000, and XP systems) and used by administrators to send messages to users on the network. This is different from the MSN Messenger instant message software. http://www.geek.com/news/geeknews/2002Oct/gee20021017016848.htm Kindest Regards Jay Best Orcon Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 6

Hosting a file
by Mark Davies 22 Oct '02

22 Oct '02

Hi, Somewhat off topic but is there someone out there that can host a couple of 1.8MB files that have just been mentioned on slashdot. Our server is not coping very well :-( cheers mark - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

VoIP Tolls
by Matthew G Brown 21 Oct '02

21 Oct '02

Anyone offering VoIP tolls for National calling ? . Curious as I just got my last phone bill and OUCH! Sorry for the OT Matthew G Brown B & R Holdings LTD DDI: 027 4807731 Email: Matt(a)Brh.Co.Nz " Offsite Internet Backup & Wireless Network Dev " http://www.backupserver.co.nz http://www.brh.co.nz IMPORTANT NOTICE: This e-mail is confidential, and is for the intended recipient only. Access, disclosure, copying, distribution or reliance on any of it, or by anyone else is prohibited. Please delete this email if obtained in error and e-mail confirmation to the sender. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Orcon Internet Prefix List Update (#2)
by Craig Whitmore 20 Oct '02

20 Oct '02

Sorry about not including this one as well from this morning.. For all those peering with Orcon Internet (AS17746) at APE, please update your Filter Lists to: Add: 202.175.128.0/21 A Full prefix list is included as attachment. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

Orcon Internet Prefix List Update
by Craig Whitmore 20 Oct '02

20 Oct '02

For all those peering with Orcon Internet (AS17746) at APE, please update your Filter Lists to: Add: 202.49.250.0/24 A Full prefix list is included as attachment. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

Re: Contacting ISP re: CC fraud
by Saby Singh 16 Oct '02

16 Oct '02

1 0

APNIC Training/IX tutorial in New Zealand - Dec 2002
by Champika Wijayatunga 16 Oct '02

16 Oct '02

Dear all, APNIC is pleased to announce that we are planning to have an APNIC member training course on IP Address Management: Asia Pacific Policies and Procedures (Conducted by APNIC) and a tutorial on IX (conducted by Bill Woodcock, Packet Clearing House,USA) in Wellington, New Zealand on 09 December 2002. The APNIC training courses are currently offered on a sponsored basis to APNIC members and it is subsidised for them. But non-members are also welcome and however, they are usually charged a slightly higher fee. Basically these charges are to recover our costs on a non-profit basis. Previously this training course fee has ranged from 'No charge' to USD75.00 (charged in local currency) depending on the location & the sponsorships. Training materials, Lunch and refreshments will be provided. We would like to get your input regarding this training. We greatly appreciate if you could answer the following few questions and send it to us. Please note that this is NOT a registration form. This information is considered for our evaluation purposes only. * Your name & e-mail id: * Your company / APNIC Account name: * Are you interested in attending this training? Yes/No * How many participants will attend from your organisation? * Would you like to assist us in sponsoring this training? Yes/No If so in which way? (ex: providing a training venue, lunch & refreshments for the participants etc.) If you are interested in sponsorships please let us know, so that we can update you about the sponsorship benefits. * Any suggestion for a hotel/training centre? * Are you aware of any Internet related conference happening in New Zealand during December 2002 ? * Other comments Thank you for your cooperation ! We look forward to hearing from you soon. Warmest Regards, Champika. _____________________________________________________________________ Champika Wijayatunga, Training Manager <champika(a)apnic.net> Asia Pacific Network Information Centre phone: +61 7 3858 3100 http://www.apnic.net fax: +61 7 3858 3199 _____________________________________________________________________ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Contacting ISP re: CC fraud
by Donald Neal 16 Oct '02

16 Oct '02

I suspect that this thread has now exhausted its operational relevance. - Donald Neal NZNOG List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Contacting ISP re: CC fraud
by Mark Foster 16 Oct '02

16 Oct '02

And FWIW I agree, and thanks to those who emailed me offlist with similar echoed comments. :P My thinking was. 1) I dont like the use of Fraudulent Credit Cards regardless of who theyre being used with... 2) If The ISP is deemed to be the appropriate contact for a genuine crime then.. well.. *shrug* Of course the logical cause of action is obvious, but then again, when the NZCC have already pretty much told you what they think of you, its not suprising that the appropriate authorities havnt yet been invoked... ? At 01:21 p.m. 17/10/2002 +1300, Glen Wilson wrote: >The stick approach always has postive results. > >Glen Wilson >Senior Engineer and Administrator >Network Operations Shift Supervisor >Ihug, Auckland, New Zealand > >On Thu, 17 Oct 2002, Steve Phillips wrote: > > > At 13:03 17/10/2002 +1300, Mark Foster wrote: > > >This stuff strikes me as obvious enough - as a sysadmin I would expect a > > >lot of this is fairly logical proceedure for dealing with network abuse. > > > > He runs one of the biggest SPAM/MLM schemes in New Zealand, so its not > > surprising he doesn't know how "whois" works and doesn't trust that a > > remote ISP will actually respond to "abuse@" complaints (hell, we know HIS > > one didn't eh seeby ?) > > > > Maybe he just needs to be beaten about the head a few times with a very > > large clue stick. > > > > -- > > Steve. > > > > - > > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > > where the body of your message reads: > > unsubscribe nznog > > > >- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 7

Contacting ISP re: CC fraud
by Barry ＠ CASHevolution Support 16 Oct '02

16 Oct '02

Hi there guys, Hope you can possibly help. I have a situation where a member using a yahoo email account has located a credit card list and is utilizing it on our website. The person has used over 200 credit card numbers and many have been successful. I have log's of IP addresses and traced it to the following IP block owner. Instituto Tecnologico y de Estudios Superiores de Monterrey REDMEX-BNETS (NET-148-203-0-0-1) 148.203.0.0 - 148.250.255.255 Universidad Autonoma De Ciudad Juarez UACJ (NET-148-210-0-0-1) 148.210.0.0 - 148.210.255.255 Some of the IP addresses are as follows: 148.210.126.238 148.210.126.228 146.210.116.193 Doing a traceroute only gave me their ISP's uplink reverse, AT&T. How can I get in touch with this ISP to ensure this person is caught. Kindest Regards Barry Murphy Systems Administrator http://www.cashevolution.com <http://www.cashevolution.com/>

4 3

Domestic Prefix list update again AS7657
by Leon Chang 10 Oct '02

10 Oct '02

Hi people, Sorry we have to update this again as yesterday's list missed out a network: ip prefix-list ihug-networks seq 37 permit 202.49.144.0/24 FYI, the complete list is attached below. ip prefix-list ihug-networks description ihug peering prefix-list contact: noc(a)ihug.co.nz ip prefix-list ihug-networks seq 5 permit 202.36.94.0/23 le 24 ip prefix-list ihug-networks seq 10 permit 202.37.136.0/24 ip prefix-list ihug-networks seq 15 permit 202.37.182.0/24 ip prefix-list ihug-networks seq 20 permit 202.37.187.0/24 ip prefix-list ihug-networks seq 25 permit 202.37.194.0/24 ip prefix-list ihug-networks seq 30 permit 202.49.59.0/24 ip prefix-list ihug-networks seq 35 permit 202.49.88.0/23 le 24 ip prefix-list ihug-networks seq 37 permit 202.49.144.0/24 ip prefix-list ihug-networks seq 40 permit 202.49.148.0/23 le 24 ip prefix-list ihug-networks seq 45 permit 202.49.176.0/23 le 24 ip prefix-list ihug-networks seq 50 permit 202.49.180.0/23 le 24 ip prefix-list ihug-networks seq 55 permit 202.49.186.0/24 ip prefix-list ihug-networks seq 60 permit 202.49.240.0/22 le 24 ip prefix-list ihug-networks seq 65 permit 202.49.249.0/24 ip prefix-list ihug-networks seq 70 permit 202.50.84.0/24 ip prefix-list ihug-networks seq 75 permit 202.50.103.0/24 ip prefix-list ihug-networks seq 80 permit 202.50.255.0/24 ip prefix-list ihug-networks seq 85 permit 203.109.128.0/17 le 24 ip prefix-list ihug-networks seq 90 permit 203.118.128.0/18 le 24 ip prefix-list ihug-networks seq 95 permit 203.173.128.0/17 le 24 ip prefix-list ihug-networks seq 100 permit 210.55.184.0/24 ip prefix-list ihug-networks seq 105 permit 210.55.202.0/23 le 24 ip prefix-list ihug-networks seq 110 permit 210.55.248.0/21 le 24 -- Leon Chang, CCNP, CCDP Senior Network Engineer The Internet Group Ltd. (IHUG), Auckland, New Zealand AS7657 PH: +64 9 359 2710 --------------------------------------------------------------------- - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Prefix list update for Ihug AS7657
by Leon Chang 09 Oct '02

09 Oct '02

We have tidied up our peering prefix list a bit and added a new network 203.118.128.0/18. Can our domestic peers please update their current prefix-list. Regards, Leon Chang ip prefix-list ihug-networks description ihug peering prefix-list contact: noc(a)ihug.co.nz ip prefix-list ihug-networks seq 5 permit 202.36.94.0/23 le 24 ip prefix-list ihug-networks seq 10 permit 202.37.136.0/24 ip prefix-list ihug-networks seq 15 permit 202.37.182.0/24 ip prefix-list ihug-networks seq 20 permit 202.37.187.0/24 ip prefix-list ihug-networks seq 25 permit 202.37.194.0/24 ip prefix-list ihug-networks seq 30 permit 202.49.59.0/24 ip prefix-list ihug-networks seq 35 permit 202.49.88.0/23 le 24 ip prefix-list ihug-networks seq 40 permit 202.49.148.0/23 le 24 ip prefix-list ihug-networks seq 45 permit 202.49.176.0/23 le 24 ip prefix-list ihug-networks seq 50 permit 202.49.180.0/23 le 24 ip prefix-list ihug-networks seq 55 permit 202.49.186.0/24 ip prefix-list ihug-networks seq 60 permit 202.49.240.0/22 le 24 ip prefix-list ihug-networks seq 65 permit 202.49.249.0/24 ip prefix-list ihug-networks seq 70 permit 202.50.84.0/24 ip prefix-list ihug-networks seq 75 permit 202.50.103.0/24 ip prefix-list ihug-networks seq 80 permit 202.50.255.0/24 ip prefix-list ihug-networks seq 85 permit 203.109.128.0/17 le 24 ip prefix-list ihug-networks seq 90 permit 203.118.128.0/18 le 24 ip prefix-list ihug-networks seq 95 permit 203.173.128.0/17 le 24 ip prefix-list ihug-networks seq 100 permit 210.55.184.0/24 ip prefix-list ihug-networks seq 105 permit 210.55.202.0/23 le 24 ip prefix-list ihug-networks seq 110 permit 210.55.248.0/21 le 24 -- Leon Chang, CCNP, CCDP Senior Network Engineer The Internet Group Ltd. (IHUG), Auckland, New Zealand AS7657 PH: +64 9 359 2710 --------------------------------------------------------------------- - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

nameserver redundancy (of debatable on-topicness)
by Joe Abley 09 Oct '02

09 Oct '02

Morning, I'm looking for an ISP with a presence in Wellington who would like to swap 5U of colo somewhere close to the WIX for something similar in Auckland, close to the APE. Gear to be colo'd is a rack-mount nameserver plus UPS plus router; traffic to the nameserver will be overwhelmingly domestic, mainly DNS, plus a tiny dribble of management traffic. Reason for looking is to increase nameserver diversity. If anybody is interested, please drop me some private mail. Thanks! Joe - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

KCBBS / APE routing loop
by James Spooner 08 Oct '02

08 Oct '02

On behalf of a KCBBS customer... traceroute to 202.27.195.82 (202.27.195.82), 30 hops max, 38 byte packets 1 mid-e1-int (210.55.255.62) 8.859 ms 0.394 ms 0.363 ms 2 a3-0-29.tkcr1.global-gateway.net.nz (202.37.247.153) 12.388 ms 48.227 ms 90.343 ms 3 A5-0-0-19.akcr5.global-gateway.net.nz (202.50.245.105) 58.507 ms 118.496 ms 100.527 ms 4 telstraclear1.ape.net.nz (192.203.154.32) 115.903 ms 82.286 ms 62.978 ms 5 netgate.ape.net.nz (192.203.154.48) 28.580 ms 17.625 ms 19.105 ms 6 telstraclear1.ape.net.nz (192.203.154.32) 23.076 ms 22.687 ms * BGP Path: 202.27.192.0/21 202.37.247.153 IGP 0 100 SEQ 4648 4768 9303 9303; No global-gateway traffic seems to be getting to KCBBS, other APE peers (ICONZ) seem fine. International also working (according to route-server.cerf.net) Is somebody leaking routes at APE ? Cheers James - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Intel HAM modem strings ?
by Simon Byrnand 07 Oct '02

07 Oct '02

Not sure if this is ontopic, but I'll give it a go anyway ;-) Does anyone know of an init string for Intel HAM based modems that will force them to connect using only V34 ? (That works ?) People on rural lines often can't get reliable connections using V90 or 56Flex, but forcing the modem to use V34 usually makes a huge improvement. For the common Rockwell and Lucent based modems its easy, for example -V90=0S38=0 for LT winmodems and +MS=V34 for most Rockwell based modems. So far I've been totally unable to find a string that actually works for the Intel HAM based modems, and they seem to be worse than other modems when it comes to not falling back automatically on poor lines. (Read: they wont even connect at all on typical rural lines where Lucent/Rockwell modems will at least get some kind of connection, albeit dodgy) Any pointers ? (Sorry if this is offtopic, but I thought it was an issue that most ISP's will have had to deal with at some time or another) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

DRS Outage
by Tim John 07 Oct '02

07 Oct '02

Hi all, Many of you may already know that the Shared Registry System is to be implemented this weekend, 12th - 14th October 2002. As a result, the DRS will be taken down at 10:00 hrs on Saturday and will not be available until 01:00 hrs on the following Monday. A manual zone build will be pushed at 10:00 on Saturday and there will not be another zone push until 11:00 on Monday 14th. No domain registrations or modifications will be allowed during the outage period. There is currently a note from the Domain Name Commissioner (DNC) and this can be found at the Domainz website under 'Info/Media Center' or on the DNC's site - http://www.dnc.net.nz. We apologies for this inconvenience but look forward to using the new Registry system early next week. Regards, Tim Tim John IT Manager Managing New Zealand's National domain name Registry E-mail: tim.john(a)domainz.net.nz Web: www.domainz.net.nz Fax: (04) 473 - 4569 Phone: (04) 473 - 4567 DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Mailwasher (again)
by Simon Lyall 07 Oct '02

07 Oct '02

Sorry to divert people from the Microsoft bashing but I'd thought I'd bring this up again. I mentioned a few months ago about Mailwasher forging bounces, anyway I was hoping they would go away or their latest version would fix the problem but it doesn't appear that way. Checking our outgoing queues around 50% of emails waiting to go out appear to be mailwasher forgeries ( bounces from our mail servers are elsewhere) and I'm getting a little worried. I really try hard to get customer email delivered and I don't what "normal" email to get delayed when it gets stuck behind mailwasher junk. Just wondering what others are doing? Private email is okay. I'm trying to avoid blocking or deleting them if I can. One suggestion was to forward them all to feedback(a)mailwasher.net :) . The other problem is that it is fairly hard to actually pick these messages out from others in the queue safely. Maybe I can sic the fraud squad on Mr Bolton for forging my email address. FDrom their FAQ: Q. How does MailWasher bounce messages? A. MailWasher uses an algorithm to determine the best route to send the bounced message back (from, reply to, return path) and actually sends the bounce back via your isp's postmaster, so it looks exactly like it has come from your isp and not from you at your address. If the spammer has used a fake address, then your bounce message will itself be bounced back to the postmaster and you won't receive the bounced bounce email. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

11 22

Re: Mailwasher (again)
by Simon Byrnand 02 Oct '02

02 Oct '02

At 11:11 3/10/02 +1200, Simon Lyall wrote: >On Thu, 3 Oct 2002, Simon Byrnand wrote: >> I have to agree here. By definition email should have a return address if >> it is "genuine". If the domain name of the "from" address doesn't even >> exist, then its almost a sure bet that the email is bogus, and I see no >> reason it should be accepted. Most MTA's seem to default to this action as >> well. > >I guess you don't get email from people who post to newsgroups, most of >them use bogus addresses so if they reply via email to a post the address >will not be legit ( john(a)notihug.co.nz.nospam sort of thing ). Most newsreaders I've seen that have email integrated allow you to set a different email address for posting to the news group than for sending email. Even Outlook Express does this. People writing newsreaders know that fake address are almost mandatory to avoid being spammed....Newsreaders that don't have integrated email will be launching the normal email program with normal email address. You definately have a point, but I've honestly never come across this actually happening before. >Checking around I also came across: > >From: Promos(a)Glengarry Wines > >Which appears to be a legit little mailout sent last week from >e-wine(a)Glengarry.co.nz . I didn't see any others in the search. Are you talking about the envelope-sender address or the "From:" header ? It looks like you're talking about the From: header here. I'm (and presumably Chris was) talking about the envelope from address, as exchanged at the beginning of the SMTP transaction... >Our spam filtering also has a "No MX for From address" rules that helps >block those. Still if you feel comfortable blocking customer's email on >that basis I guess it's your choice. It's not part of a spam filter, its just a standard sendmail setting, which defaults to on. (I could turn it off if I wanted to) You made me curious though, so I did a quick survey of the ISP's listed in iMAG to see if they'd accept a message with a bogus domain as an envelope from address: (not a very scientific survey, but..) Actrix: Yes Baycity: No Clear Net: No Ezysurf: No E3: No HyperNet: Yes Iconz: No Igrin: No Ihug: Yes Inspire: No Iprolink: Yes Jafa Net: No Kc Computer: No Maxnet: Yes Net4U: Yes Orcon: Yes paradise.net: No Planet: No Quik: No Quicksilver: No Slingshot: Yes Valuenet: Yes Watchdog: Yes Wave: No Worldnet: Yes Xtra: Yes Zip Internet: Yes Thats 13 Yes's, and 14 No's. A couple of remarks - a few are actually virutal ISP's sharing the same mailserver so that would skew the results a bit, also I only checked the primary MX. I also suspect that it really comes down to the defaults of the mailserver in question rather than a thought-out policy, as most (but not all) the servers that rejected the bogus message were sendmail, or looked like sendmail, and that is the default of sendmail. (As an aside, I noticed more than one who were running ancient versions of sendmail that have, umm, known bugs.... ahem :) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: [NZNET] RE: Virus alert
by Saby Singh 02 Oct '02

02 Oct '02

1 0

Re: [NZNET] RE: Virus alert
by Mark Foster 01 Oct '02

01 Oct '02

On Wed, 2 Oct 2002 01:52:46 +1200 (NZST), Lin Nah <lin(a)darkmere.gen.nz> wrote : > Having said all that, I will admit that I work for an ISP that sets up > its customers on Outlook or OE. I think most of us know why that > happens. If you don't you can email me for a longer spiel 8) > Should we be doing more to educate our users? The answer would be yes. > I would like to find out what other NZ ISPs are doing in this area > with the hope of learning what works and what won't. A small clarification, I nearly posted this yesterday but it didnt seem appropriate or required at the time... Im one of the helpdesk team at the ISP Lin also works for. Our helpdesk is familiar with Outlook Express but that doesnt mean we're close minded about it. We regularly support clients who use other mailing software and as long as the software is reasonably generic we manage. We dont force our clients to use OE, but we do suggest it to our clients *because its there*. The differentiation is important, and stereotyping against helpdesk types isnt going to help. We all start somewhere. :-) I run Eudora in Sponsored mode and find it more than adequate - never caught anything through that, and I have never run resident antivirus either. (I manually scan my system from time to time using F-Prot for DOS.) Prior to using Eudora I used Netscape Messenger (4.x) and found this was also pretty good, although the limitation to only one mailbox is what forced me to migrate. Now that Netscape 7 is out I may consider switching back soon.... I think most ISP helpdesks crewed by reasonable people will accept that their clients dont *have* to use Outlook Express, and the only reason they may encourage their clients to use it is that especially for the less-than- technically-savvy sort, OE is easy to setup, and provided with all versions of Windows from 98 upward. If you work for an ISP and you dont have support staff familiar with a broader range of email clients than Outlook and Outlook Express, I would seriously suggest some more training is in order: Eudora, Netscape Messenger and Pegasus come to mind as alternatives, but theres obviously a lot more. </end rant> Mark. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: [NZNET] RE: Virus alert
by Donald Neal 01 Oct '02

01 Oct '02

I'm not really happy that this sort of posting meets the AUP, which talks about discussion between operators. There are cetainly announcements which may be of value to the list, but these seem to me to be characterised by not being present on a routine basis in other forums. I think that to allow announcements of this kind would have an unacceptable effect on the signal to noise ratio of the list. Unless people particularly want to see these here, I intend in future to treat them as outside the AUP. - Donald Neal NZNOG List Administrator > E-Secure-IT has just received this field report: > > While it does all the normal mass mailing stuff, own smtp engine, > harvests address lists etc this one did something really weird that > I've never seen before- it sent a postscript print job to > every printer > it could find. > > The scary thing was it even picked up printers attached to parallel > ports and which were not shared and sent the print job to them too. > I know it tries to access network shares, but looks like it tries to > access print q's also, be interested to see if anyone else has > seen this? > > FYI can confirm that NAV sigs of 30/9 do detect and clean. > > Arjen > www.e-secure-db.us ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 01 Oct '02

01 Oct '02

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This posting, or one like it, is sent to all subscribers each month. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Auckland Peering Exchange See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. About This Mailing List This list has around 370 subscribers, increasing by a few each month. You may only post to the list from an address subscribed to one of the lists described below. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations, nor the administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrator remains happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: [NZNET] RE: Virus alert
by Arjen De Landgraaf 01 Oct '02

01 Oct '02

E-Secure-IT has just received this field report: While it does all the normal mass mailing stuff, own smtp engine, harvests address lists etc this one did something really weird that I've never seen before- it sent a postscript print job to every printer it could find. The scary thing was it even picked up printers attached to parallel ports and which were not shared and sent the print job to them too. I know it tries to access network shares, but looks like it tries to access print q's also, be interested to see if anyone else has seen this? FYI can confirm that NAV sigs of 30/9 do detect and clean. Arjen www.e-secure-db.us - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Updated ASN allocation to ARIN
by Rob Thomas 01 Oct '02

01 Oct '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this post in other fora. ] A range of ASNs have been allocated to ARIN as of September 2002. The range is 26624 - 27647. You may wish to adjust your filters. The definitive list can be found here: http://www.iana.org/assignments/as-numbers I have updated my bogus ASN monitoring to reflect these changes. You can see the list of networks that leak bogus ASNs here: http://www.cymru.com/BGP/asnbogusrep.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [NZNET] RE: Virus alert
by Joe Abley 01 Oct '02

01 Oct '02

[I keep trying to redirect this noise somewhere else. Seems like some peoples' mail clients don't respect standard headers, or something] On Tue, Oct 01, 2002 at 04:47:16PM +1200, James Spooner wrote: > Are you in fact an expert on car safety, or do you buy/travel in a car based > on what you know about car safety? I'm no expert. > If in fact you do, does this not make you a parallel to someone using > windows and outlook express, who 'should know better'. > > Why do you think you travel in a particular car, is it perhaps because it's > available and it gets you from A to B? Sure. I don't make a habit of travelling in cars which are not licenced to drive on the road, though, and that affords me some safety without needing first-hand, expert knowledge of the dangers involved. > I think that the Car vs Computer parallel in fact works in favour of windows > in this case Joe. I don't follow you. There are safeguards set up to ensure people don't drive in unsafe cars, regardless of how little they personally know about car safety. There are no safeguards set up to encourage people not to use unsafe mail clients. The regular virus bulletins could say "as with this other large list of security problems, this one can be avoided simply by using a different mail client", but they don't. ISPs could stop shipping OE, or could find ways to encourage users to install different mail clients, but they don't. > Check my headers if you wonder which client I use :) So why do you use it? Joe - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 6