May 2002 - NZNOG - lists.nznog.org

RE: Red Alert - sharp increase port 1433 (MS SQL) scans
by Michael Bordignon 21 May '02

21 May '02

we've been getting alot of these too - 3 connections from each host, 21 so far (all today, between 11am and 4pm) - michael -----Original Message----- From: Arjen De Landgraaf [mailto:arjen.de.landgraaf(a)cologic.co.nz] Sent: Tuesday, 21 May 2002 3:44 PM To: nznog(a)list.waikato.ac.nz Subject: Red Alert - sharp increase port 1433 (MS SQL) scans Importance: High We just issued a "Red Alert" on a rapid and sharp increase in port 1433 TCP probes. If you have MS SQL Server behind web services, you should monitor. Further information will be available shortly under newsitems at: www.e-secure-it.us www.e-secure-it.co.nz Arjen de Landgraaf E-Secure-IT - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Red Alert - sharp increase port 1433 (MS SQL) scans
by Arjen De Landgraaf 20 May '02

20 May '02

We just issued a "Red Alert" on a rapid and sharp increase in port 1433 TCP probes. If you have MS SQL Server behind web services, you should monitor. Further information will be available shortly under newsitems at: www.e-secure-it.us www.e-secure-it.co.nz Arjen de Landgraaf E-Secure-IT - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Cisco 2610
by Leon Toh 19 May '02

19 May '02

Hi Folks, I'm looking for a Cisco 2610 to purchase. If anyone out there happen to have 1 and willing to part with it please drop me a line than (off the list). Best Regards, Leon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Resources
by James Tyson 19 May '02

19 May '02

Hey folks. I thought I would do a quick whip-around and ask if anyone knows of any recruitment companies, etc that specialise in our high-level expertise? Or is it always who you know and not what you know? -- Cheers. --- James Tyson Moebius Systems Ltd http://www.moebius.co.nz/

4 4

Forcing TTL expirey in bind
by Donovan Jones 15 May '02

15 May '02

Hi I'm a new subscriber to the list. I have a few questions I believe are appropriate for this list. On a non-authoritative nameserver running BIND is it possible (when sshed onto the server): 1. to view the current TTL on a cached record? 2. to force a cached record with some time still to run to expire, i.e. to re query the record. Using the nslookup or host commands is it possible to: query a nameserver to get the time till a cached name will be looked up host -t SOA domain.net returns the initial TTL, but not the time remaining Donovan Jones - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

NZNOG 2002 Speakers - Updated Draft List
by Donald Neal 14 May '02

14 May '02

Here's the current draft list of NZNOG speakers for 11 and 12 July. Work is continuing on clarifying one or two other contributions. This looks to me like a strong two-day programme. 802.11a - Matthew G. Brown, B & R Holdings Distributed Denial of Service: The current state and counter measures - Juergen Brendel, Esphion Ltd IPv6 for Dummies (and not so Dummies) - Dean Pemberton, Juniper Networks (Aust.) Multicast Development - Greg Shephard, Juniper Networks (USA) Multicasting - an Introduction to the Technology and Applications - David Robb, Telecom NZ Multitenanted VoIP and the VoIP Market in New Zealand - Roger De Salis, Cisco Systems NLANR Active Measurement Project - Tony McGregor, The University of Waikato Providing Outsourced Network Security Solutions - Arron Scott, Cisco Systems Residential Ethernet-on-Fibre - Colin Goodwin, Ericsson NZ RPSL - Andy Linton, Lionra Strategies for Managing Denial of Service - Ian Quinn, Juniper Networks Tracking and Quantifying DDoS Attacks - David Moore, CAIDA (USA) Any substantial addition - and such an addition is possible - would mean that we'd need to go to a third day. If that were done, Thursday and Friday 11 and 12 July would remain the days for papers, with tutorial time on Saturday 13th. A registration announcement should follow shortly. - Donald Neal "MMS <telecom.co.nz>" made the following annotations on 05/13/02 10:52:50 ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

Job Opening.
by Roger De Salis 13 May '02

13 May '02

Tired of the same-old same-old meetings. Bothered by 5 minutes of creative programming, and 168 hours of mindless meetings to explain a simple concept to a weird guy in a suit.... Here is your opportunity... Recommend your favourite telecom executive to the career opportunity of a lifetime, think about how the Monday morning meetings will look when everyone at the table has a Kalashnikov...... think about project overruns when the result is likely to be impacted by the arrival of B52's.... :-) /R Subject: Short term assignment: Afghanistan Ministry of Communications Date: Tue, 14 May 2002 02:07:34 +1000 (EST) Draft Terms of Reference, Adviser to Afghan Ministry for Communications I. Introduction Internews Network, through its leadership of the USAID-funded dot-GOV program, has been asked to identify and recruit an adviser to work directly with the Ministry of Communications, Government of Afghanistan. This position will be for three to six months. Additional work may be needed, depending upon the political and economic situation. The need to place an experienced individual with the Ministry to provide technical assistance to advise the Minister and his staff is acute. The adviser would receive additional support through the dot-GOV program in terms of specialized technical information needed to help the Minister and Ministry. Current situation. The infrastructure for telecommunications in Afghanistan is virtually nonexistent on a national basis. There are currently several thousand analog and Chinese supplied digital phones in Kabul. Kandahar and Herat have only a few thousand operating phones. There is great interest in the role of VSATs for network expansion. Additionally, there are high expectations for a new mobile cellular. There are plans to develop a microwave long distance network linking six major metropolitan hubs from which the network could be gradually expanded to villages and towns. Development needs. With the need for Afghans to rebuild infrastructure and restore a knowledge base in all sectors (health, agriculture, education, industry, finance and banking, the arts, trade), it is essential that Afghan citizens be provided with telecommunications access and the physical infrastructure for development of the Internet, radio and TV. Access to telephones and the Internet for women are critical factors for stimulating local markets and alternative educational and health services, and reintegrating, at their own pace, women back into public life. Afghans living in remote villages cut off by areas heavily infested with land mines need to know what is happening in various parts of the country and have the capacity for two-way communication. A functional and effective transparent telecommunications system is fundamental to rebuilding infrastructure in each sector of the economy and to discouraging consolidation of power over ICT technologies that limit the use and access to these by the average citizen. Market forces. Leaving aside security and military concerns, international telecommunication firms are currently trying to advise the Afghan government on which set of systems or alternative technologies to invest in and which systems and equipment to purchase. Without a strategic policy framework built by the Ministry staff and a related legislative framework for telecommunications, the Afghan government could find itself frozen into inappropriate technologies and bad system and vendor initial choices. Given the dire need for reconstruction and development of alternative small and medium sized economic activities it will not be possible for the Afghan government to achieve realistic economic development goals and rebuild civil society without an active and knowledgeable Ministry of Communications. II. Illustrative Tasks This individual will advise the Minister of Communications and his designates on developing a policy and regulatory environment needed to build on and evolve an operative telecommunications system in Afghanistan. Ideally the individual will have experience working in with the legal, technical, regulatory, and financial areas of telecommunications. However, what perhaps is equally important is an adviser who has experience working with governments in transition, with very poor physical infrastructure, a diverse and geographically and socially isolated population. Key to the success of this technical assistance assignment is the development of: 1. A clear strategic plan that the policy and technical staff of the Ministry can make operative through various steps (depending upon the political environment) that will address at the minimum: Licensing policy Spectrum management Interconnection management Consumer protection The need for a regulatory agency and role of regulation Internet issues 2. Intensive follow-on mentoring and advising the Afghans that have been supported by the US government for short-term training in the U.S., Afghanistan, and elsewhere. 3. Day-to-day assistance advising on the administrative and management plans for the Ministry. 4. Supporting the Ministry through active liaison with international aid agencies and UN organizations for the purpose of implementing a telecommunications infrastructure, and developing effective mechanisms for dealing with the private sector telecommunications industry. 5. Identify additional needs for technical assistance and training in telecommunications. 6. Any other tasks that will materially assist the Ministry with progress toward its goal of achieving a critical set of competencies in telecommunications management and regulation. III. Deliverables A set of concrete, realistic deliverables will be formalized within the first week of the assignment, related to the tasks illustrative tasks listed above. These will be agreed upon with the Minister of Communications, the USAID Mission, the dot-GOV CTO, and dot-GOV technical team. Please contact any of the following if you have possible candidates: 1. Dr. Sarah J. Tisch, dot-GOV Project Director 202-833-5740, ext. 203 stisch(a)internews.org 2. Dr. George Sadowsky, dot-GOV Senior Technical Adviser 202-415-1933 george.sadowsky(a)internews.org 3. Ms. Mariana Ovtcharova, dot-GOV Program Associate 202-833-5740, ext. 206 mariana(a)internews.org -- \_ Roger De Salis rdesalis(a)cisco.com </' Cisco Systems NZ Ltd +64 25 481 452 /) L8, ASB Tower, 2 Hunter St +64 4 496 9003 (/ Wellington, New Zealand roger(a)desalis.gen.nz ` In October 2001, the 5th most important product line by value for Cisco is - the telephone. Cisco 79x0 IP telephones. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Domain name spammers
by Simon Byrnand 12 May '02

12 May '02

Hi all, Just wondering if anyone else is getting spammed to death lately by a company calling themselves "Internic Online" http://www.interniconline.com trying to peddle "cheap" domain name registration. The fact that they're sending their junk through dozens of different open relays makes them hard to block, and I fail to see how any legitimate company would send "advertising" material through open relays.... Anyone ever tried to contact them and tell them to go away ? :) Regards, Simon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Connection problems to SMTP servers
by Tracy Briscoe 11 May '02

11 May '02

Ordinary I would not post to this list, but as I could not get any useful help out of the two ISPs help desks I called, I will go to those who actually can provide some help. One of our clients is running MDaemon version 2.8.5.0, and has it set up to do a DNS lookup, and send the mail to the appropriate SMTP server as indicated by the MX record. On Thursday we were notified that mail was not getting to Ihug or Tranz Rail. Upon investigating on Friday, I found that they could connect to zuul.ihug.co.nz (I Telneted into port 25 for this diagnosis), but the welcome message "220 mx1.ihug.co.nz ESMTP Exim 3.22 #1 Sat, 11 May 2002 21:29:37 +1200" took between 1 and 1.5 minutes to come up. Connections to mxtrlwn1.tranzrail.co.nz could be made, but I gave up waiting for the welcome message. Connections to other SMTP servers work fine. I have got around the problem by forwarding all their mail to their ISP's SMTP server for distribution, but would like to know what may have caused this so that it can be fixed properly. I have included any info that I thought might be useful below. Any help gratefully received. -Tracy Briscoe -Network Engineer -Patcom Ltd ---------------------------------------------------------------------------- ---------------------------------------------------------------- Windows NT 4.00.1381 running as a proxy server, ie not as their fileserver Running: MDaemon version 2.8.5.0, netmaster 2.4.1, proxy 2 Connecting via ISDN to Xtra route print =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 90 27 f7 1b 0d ...... Intel(R) PRO PCI Adapter 0x3 ...00 90 bc 01 48 0a ...... SkyMedia-200D Ethernet Adapter. 0x4 ...00 01 f0 ab d6 80 ...... NdisWan Adapter =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 210.54.227.49 210.54.227.49 1 100.100.100.0 255.255.255.0 100.100.100.100 100.100.100.100 2 100.100.100.100 255.255.255.255 127.0.0.1 127.0.0.1 1 100.255.255.255 255.255.255.255 100.100.100.100 100.100.100.100 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.11.0 255.255.255.0 192.168.11.2 192.168.11.2 2 192.168.11.2 255.255.255.255 127.0.0.1 127.0.0.1 1 192.168.11.255 255.255.255.255 192.168.11.2 192.168.11.2 1 210.54.227.0 255.255.255.0 210.54.227.49 210.54.227.49 1 210.54.227.49 255.255.255.255 127.0.0.1 127.0.0.1 1 224.0.0.0 224.0.0.0 100.100.100.100 100.100.100.100 1 224.0.0.0 224.0.0.0 192.168.11.2 192.168.11.2 1 224.0.0.0 224.0.0.0 210.54.227.49 210.54.227.49 1 255.255.255.255 255.255.255.255 192.168.11.2 192.168.11.2 1 =========================================================================== ipconfig Windows NT IP Configuration Host Name . . . . . . . . . : jdwnt2 DNS Servers . . . . . . . . : 202.27.184.5 202.27.184.3 Node Type . . . . . . . . . : Hybrid NetBIOS Scope ID. . . . . . : IP Routing Enabled. . . . . : Yes WINS Proxy Enabled. . . . . : No NetBIOS Resolution Uses DNS : No Ethernet adapter E100B1: Description . . . . . . . . : Intel(R) PRO PCI Adapter Physical Address. . . . . . : 00-90-27-F7-1B-0D DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 192.168.11.2 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : Primary WINS Server . . . . : 192.168.11.1 Secondary WINS Server . . . : 192.168.11.2 Ethernet adapter sm200dtp4: Description . . . . . . . . : SkyMedia-200D Ethernet Adapter. Physical Address. . . . . . : 00-90-BC-01-48-0A DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 100.100.100.100 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : PPP adapter NdisWan5: Description . . . . . . . . : NdisWan Adapter Physical Address. . . . . . : 00-01-f0-ab-d6-80 DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 210.54.227.49 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : 210.54.227.49 traceroute Tracing route to zuul.ihug.co.nz [203.109.252.10] over a maximum of 30 hops: 1 63 ms 78 ms 78 ms 192.168.9.200 2 187 ms 110 ms 125 ms 192.168.9.3 3 78 ms 78 ms 78 ms 203.96.111.230 4 94 ms 94 ms 78 ms f0-0-0-1.IPNAK1-B3.xtra.co.nz [203.96.111.145] 5 78 ms 78 ms 78 ms ihug1.ape.net.nz [192.203.154.36] 6 79 ms 93 ms 94 ms mx2.ihug.co.nz [203.109.252.10] Trace complete. Tracing route to mxtrlwn1.tranzrail.co.nz [202.135.38.132] over a maximum of 30 hops: 1 78 ms 78 ms 79 ms 192.168.9.200 2 219 ms 203 ms 110 ms 192.168.9.3 3 78 ms 63 ms 78 ms 203.96.111.230 4 78 ms 78 ms 78 ms f0-0-0-1.IPNAK1-B3.xtra.co.nz [203.96.111.145] 5 78 ms 78 ms 78 ms att.ape.net.nz [192.203.154.74] 6 93 ms 79 ms 78 ms auck1br1-fe-4-0-0.nz.prserv.net [152.158.255.222] 7 78 ms 94 ms 93 ms well1br1-0-0.we.nz.prserv.net [152.158.254.85] 8 125 ms 125 ms 109 ms nz-tranz.nz.prserv.net [152.158.254.73] 9 * * * Request timed out. 10 * * * Request timed out. 11 * * * Request timed out. 12 * * * Request timed out. 13 * * * Request timed out. 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. 21 * * * Request timed out. 22 * * * Request timed out. 23 * * * Request timed out. 24 * * * Request timed out. 25 * * * Request timed out. 26 * * * Request timed out. 27 * * * Request timed out. 28 * * * Request timed out. 29 * * * Request timed out. 30 * * * Request timed out. Trace complete. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

List of ADSL providers
by Dalibor Andzakovic 10 May '02

10 May '02

Hello, I'm trying to compile a complete list of nz's ADSL providers for an onlinan sale site. Can anyone point me to the one, or post one on this list? Tia dali - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 6