August 2002 - NZNOG - lists.nznog.org

Change in Unsubscription Practice - Full Mailboxes
by Donald Neal 07 Aug '02

07 Aug '02

NZNOG People, I have in the past only unsubscribed addresses from the NZNOG list which produced permanent errors - unknown addresses rather than bounces due to relaying filters, for example. I have now been receiving bounces due to a full mailbox from two addresses for several days. Starting tomorrow, any address which produces bounces of that kind for long enough will be unsubscribed. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

RE: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> I don't think anyone thought this. I never claimed this, nor was it > the point I was making. Sorry - I didn't mean it as a retaliation. But it still worth mentioning. -----Original Message----- From: Chris Wedgwood [mailto:cw(a)f00f.org] Sent: Thursday, 8 August 2002 4:33 p.m. To: Tim John Cc: 'nznog(a)list.waikato.ac.nz' Subject: Re: DNS problems On Thu, Aug 08, 2002 at 04:13:09PM +1200, Tim John wrote: I don't want anyone thinking that the 'real' name servers are effected by this. I don't think anyone thought this. I never claimed this, nor was it the point I was making. --cw DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DNS problems
by Tim John 07 Aug '02

07 Aug '02

Hi all, I'm looking into some strange occurrences with the automatic emails generated by the Domainz DRS. There seems to be a few .nz Providers who have not received these emails recently and depend on them for registration notifications. The mail queue on the server is unable to resolve the names for the relevant name servers when sending the notification mail. I have restarted the DNS service, which will hopefully flush any cashed information and renew with current records. Are any other .nz Providers (or their customers) experiencing a lack of emails from Domainz ? Perhaps the lack of these emails could be seen as a good thing ... :> Cheers, Tim DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

FW: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> I for one was not impressed that it managed to cache 3 week old DNS > records for our MX servers. Not to mention the lack or > logging, bounces or traceability in your software. Me neither, but the software was developed before my time and I'm just carrying the baby ! The cached information did seem to be the cause of the problem though. -----Original Message----- From: Simon Lyall [mailto:simon.lyall(a)ihug.co.nz] Sent: Thursday, 8 August 2002 3:04 p.m. To: 'nznog(a)list.waikato.ac.nz' Subject: Re: DNS problems > On Thu, 8 Aug 2002, Tim John wrote: > > I have restarted the DNS service, which will hopefully > flush any cashed > > information and renew with current records. > > I for one was not impressed that it managed to cache 3 week old DNS > records for our MX servers. Not to mention the lack or > logging, bounces or > traceability in your software. > > When we moved our main MX servers we droppped the TTLs to 15 minutes > *and* kept the old servers running for a week to be sure, > nobody else had > a problem. > > Still things like DNS and email are hard, have you considered > contracting > them out to a company with more expertise in those areas? > > > -- > Simon Lyall. | Newsmaster | Work: > simon.lyall(a)ihug.co.nz > Senior Network/System Admin | Postmaster | Home: > simon(a)darkmere.gen.nz > ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> We are, but we have your domain in our spam filters. It seems to be working > rather well OK. I walked into that one :) -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Thursday, 8 August 2002 3:24 p.m. To: Tim John; nznog(a)list.waikato.ac.nz Subject: RE: DNS problems > Are any other .nz Providers (or their customers) experiencing a lack of > emails from Domainz ? We are, but we have your domain in our spam filters. It seems to be working rather well -PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: DNS problems
by Simon Byrnand 07 Aug '02

07 Aug '02

At 14:42 8/08/02 +1200, Tim John wrote: >I'm looking into some strange occurrences with the automatic emails >generated by the Domainz DRS. There seems to be a few .nz Providers who have >not received these emails recently and depend on them for registration >notifications. > >The mail queue on the server is unable to resolve the names for the relevant >name servers when sending the notification mail. "unable to resolve" - can you be more specific than that ? A temporary failure to reach the authorative nameservers for the domain should just put the message back on the queue to be tried later. Unless the domain in question had failure of nameservers for a week straight, no messages should go missing....(people wouldn't want a .nz provider that had problems like that anyway :) >I have restarted the DNS service, which will hopefully flush any cashed >information and renew with current records. Which shouldn't be necessary unless your DNS is broken... >Are any other .nz Providers (or their customers) experiencing a lack of >emails from Domainz ? I wonder exactly how we're supposed to notice email which doesn't arrive ? :) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Netgate outage causes chaos!
by Chris Wedgwood 07 Aug '02

07 Aug '02

Still flogging a dead horse... On Sun, Aug 04, 2002 at 11:33:32PM +1200, Peter Mott wrote: But the telecom delegated /23 had no name resolution. Empty/broken zone, lame delegation or name-servers not responding? For your original email is sounds very much like the latter, in which case *most* things will keep working albeit a little more slowly at times perhaps. Email won't be lost, it will remain in the queues, web-traffic should be blisfully ignorant of this. As much of 25% of the 'NZ in-addr.arpa' space is bogus last time I checked. Thousands of web applications on our virtual web servers were unable to send mail because the in-addr zone ttl expired on our caching name servers Your expired in under 30 minutes? and lookups to auth name servers failed due to loss of parent name servers I'm not sure i follow here. Since our mailers require even our own host ip addresses to resolve to a useful name things were very sucky for a time. Eh? Your MTAs fail to stop working when they can't resolve their own names from address? Sounds pretty nasty to me.... We are making quite a few network changes at this time, so had ttl lower than usual. Needless to say I've wound it back up again. Lucky for us, none of our outbound mailers are on the /23 concerned, or other isp mailers would no doubt been refusing mail from our customers. I doubt it... so much DNS is busted out there almost body requires in-addr.apra to be working when receiving email. Sorry, I just don't understand why this was such a problem... reverse is broken for so many people and they never notice it. --cw - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

69/8 allocated to ARIN
by Rob Thomas 06 Aug '02

06 Aug '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this elsewhere. ] IANA has allocated 69/8 to ARIN. I have updated my Bogon List and my sundry templates to reflect this change. You should modify your filters accordingly. IANA IPv4 Allocation List - http://www.iana.org/assignments/ipv4-address-space Bogon List - http://www.cymru.com/Documents/bogon-list.html Secure IOS Template - http://www.cymru.com/Documents/secure-ios-template.html Secure BGP Template - http://www.cymru.com/Documents/secure-bgp-template.html Secure BIND Template - http://www.cymru.com/Documents/secure-bind-template.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Radius server for Telecoms IP.something
by Malcolm Lockyer 06 Aug '02

06 Aug '02

>From what I can deduce from your comments - it doesn't sound like you'll need to buy a $1000AU radius software package just yet (although it is good software). For you scale (I'm guessing - if you have thousands of dial-up customers or somthing, then I'm wrong :) some "freeware" radius package would do fine. I can recomend IC-Radius, although it isn't perfect and isn't exactly mature - but the major advantage to it is that by default it keeps almost all of its configuration, accounting and users in a mysql database. Which for small operations is really handy. I know that that isn't the best reliablility wise - because if the mysql server dies it will refuse to authenticate at all. If you need somthing more - then use free radius, using a flatfile database - with a perl script and a crontab job to re-generate the flatfile "text file" from the mysql database every 10 or so minutes. Installation and configuration of ic-radius isn't that hard - and they have a semi-active mailing list. Bassically for the install you just need to install the libries required (such as the Perl DBI - so the scipts can talk to your database), install and compile the radiusd binaries - then load the radius "Dictionaries" (a file which contains alot of variable atributes so that your radius can talk to the telecom radius - ask telecom for it). Then you have a working radius server. It even includes a cgi based basic management program to get you started quickly - which has been ported to php. <puts on flame proof jacket> Correct my if I'm wrong - I'm no expert... Malcolm >From: Andy Linton <asjl(a)lionra.net.nz> >To: Bjorn Nilsen <bnilsen(a)manux.co.nz> >CC: nznog(a)list.waikato.ac.nz >Subject: Re: Radius server for Telecoms IP.something >Date: Wed, 7 Aug 2002 18:23:36 +1200 (NZST) > >On Wed, 7 Aug 2002, Bjorn Nilsen wrote: > > > Hello, > > > > I want to set up a radius server as we are looking at using Telecoms > > IP.office/IP.remote (or whatever it is called) here. I have never set up >a > > radius server and only know what I have read about it. I have set up >Bind, > > Apache, QMail and various other Linux based systems so hopefully this is >not > > out of my capabilities. As with all Linux software there is many options >to > > choose from eg: Cistron Radius, Livingston Radius, GNU Radius, ICRadius, > > FreeRadius. I understand that radius is a standard but from experience >(eg: > > IPSec) different implementations are not always completely compatible. >What > > radius server would people recommend? It is to be used with Telecoms > > IP.whatever, and needs to run on Linux (or BSD). > > > >Not clear if you want a free server or are prepared to pay for one. If the >latter see http://www.open.com.au/radiator/index.html > >I've just been setting this up and I like it. > >Widely used - see http://www.open.com.au/customerlist.html > --snip-- _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spam from 200/8
by Mark Foster 06 Aug '02

06 Aug '02

Hi Guys, We've had to block 200.0.0.0/8 from our MTAs temporarily, our mail queue jumped to around 30,000 messages at around 6:40 this morning and we're still taking more than one message per second from MTAs which are predominantly in that netblock. There are exceptions now but blocking 200/8 certainly reduced the load something chronic. Looks like a sweep (random(a)ourdomain) looking for valid targets, and the source addresses are random(a)a-valid-but-forged-domain. As a result our MTAs are now bombarding the source domain MTA trying to bounce all the invalid addresses, and now we're getting complaints from them... Wonder whether any other NZ ISPs have seen this happen recently or whether this is the first of many? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5