October 2003 - NZNOG - lists.nznog.org

RE: [nznog] Cloaked SPAM hosting service
by Donald Neal 23 Oct '03

23 Oct '03

> From: Tikiri Wicks [mailto:tcwicks(a)maxnet.co.nz] > Sent: Friday, 24 October 2003 12:59 > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Cloaked SPAM hosting service > > > This one is more alarming > > Cloaked SPAM hosting via hijacked computers > It's being sold by a Polish Hacker group > http://www.wired.com/news/business/0,1367,60747,00.html Nothing very new there, alas. This subject was among those discussed by Barry Ravendran Greene at the conference in July. Donald Neal | "They are not mistaken about Technical Specialist | what they want. It just Operations Engineering | conflicts with what they are Integration & Services Divn. | going to get." - [quoted Alcatel NZ Ltd | by Cathy Wittbrodt] All opinions mine only. | ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

1 0

RE: [nznog] (no subject)
by mark.harris＠ssc.govt.nz 23 Oct '03

23 Oct '03

Richard Parkinson wrote: > > I agree with Donald, this thread doesn't seem entirely appropriate, > however I have seen less appropriate threads go on longer, and can't > help but notice the @telecom.co.nz after Donald's address. :). > I realise there's a smiley on the end of that, but sugar-coating an question to Donald's integrity says more about your own than I suspect you realise. Regards Mark Harris Moderator *.govt.nz State Services Commission PO Box 329, Wellington, NZ Tel: 64 4 495 2844 Email: moderator(a)ssc.govt.nz

1 0

What can I say to this
by Tikiri Wicks 23 Oct '03

23 Oct '03

Hi Folks I'm just wondering if anyone has any feedback regarding this situation. I maintain a multi homed Linux router in the Seychelles Islands for the Seychelles government and the CTO of one of the ISP's wants me to use an IP of 217.161.116.143 with a netmask of 255.255.255.255 and a default gateway of 217.161.116.8. To explain it further they are running a fibre optic link to my linux router and at the other end of it they've got a cisco 2500 with an IP of 217.161.116.8. What I get is ethernet and they want me to use the IP 217.161.116.143 with a netmask of 255.255.255.255 on my linux router. I do not want to run IP unnumbered and anyway I cannot think of how anything but a CISCO can talk IP unnumbered to another CISCO. Everything I know and everything I ever learned says this is mission impossible. I am at a loss of words on what to say to this. Am I missing something here perhaps ? Can anyone think of anything to say to this. This ISP is called Atlas and their URL is http://www.seychelles.net They also happen to be the operators of the .sc ccTLD I would greatly appreciate any feedback from anyone as to what I could possibly say to these people. Then again maybe I missed something and maybe I am wrong ? Cheers Tikiri

5 9

RE: [nznog] Current Jetstream 'Deal'...
by Donald Neal 23 Oct '03

23 Oct '03

People, As you may recall, our AUP requires that 1. Discussion will focus on Internet operational and technical issues. This thread should, in my view, either acquire some operational or technical content or go away. - Donald Neal > -----Original Message----- > From: Richard Parkinson [mailto:Richard(a)sigel.co.nz] > Sent: Friday, 24 October 2003 11:29 > Cc: nznog(a)list.waikato.ac.nz > Subject: RE: [nznog] Current Jetstream 'Deal'... [...] > Not to mention their less than THIN excuses for not allowing ISP's to > control IP address assignment on Jetstart. Do they even still have a > reason? > > Telecom are way overdue for a big slap in the face over these issues. Donald Neal | "They are not mistaken about Technical Specialist | what they want. It just Operations Engineering | conflicts with what they are Integration & Services Divn. | going to get." - [quoted Alcatel NZ Ltd | by Cathy Wittbrodt] All opinions mine only. | ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

3 2

RE: [nznog] Current Jetstream 'Deal'...
by Richard Parkinson 23 Oct '03

23 Oct '03

More than once I have had to explain to clients that Jetstream isn't just Xtra. On one recent occasion one of my customers ordered Jetstream, and wasn't even consulted regarding their choice of ISP. They were simply given their Xtra login and password when the installer came onsite to install the jack and filter. Clearly Xtra have an unfair advantage over other ISP's when it comes to signups. Speaking of unfair advantages, I don't see any other ISP's having the ability to incorporate the monthly charges onto the Telecom phone bill? What about National traffic... Is it not true that Telecom's network routes and handles Xtra's national data way more efficiently, and that such data travels much more directly between points, as opposed to how it does for other ISP's whom have all the National data piped in on one PVC, then feed back out on another? Should other ISP's not be getting the same unbiased treatment? Not to mention their less than THIN excuses for not allowing ISP's to control IP address assignment on Jetstart. Do they even still have a reason? Telecom are way overdue for a big slap in the face over these issues. -----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] Sent: Friday, 24 October 2003 9:52 a.m. To: Dan Clark; Juha Saarinen; David Mill Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Current Jetstream 'Deal'... At 09:26 24/10/2003 +1300, Dan Clark wrote: >my point exactly. >I did not expect to call Telecom when I shift house recently and get >asked if I am already an XTRA customer then get told they will set that >up in a jiffy, I had to explain to the operator that I had no intention >of shifting ISP's and the operator was puzzled that I wouldn't want to >go with XTRA and above all he wasn't entirely aware that other ISP's >were offering JetStream! > >Regards >Dan Same thing happened to me a year ago when I moved house and needed the phone connected up, (first phone line in my name) and the guy at the other end started asking lots of leading questions about if I was likely to use the line for internet access, how many hours I currently used a month on the intenet etc, and then proceeded to try and sell me Xtra + Jetstream, so this is nothing new. (Remember, I just rang up to get the phone hooked up) Even after clearly saying that I knew what Jetstream was and how it worked, and wasn't interested in it at this time *AND* that I worked for an ISP and therefore already had a free dialup connection anyway, he was still trying to sell me on Xtra, and explain to me what Jetstream was and why its so wonderful.... I think I had to repeat myself two or three times before he gave up....so obviously the telecom staff are instructed to put the hard sell on everyone that rings up, pretty much regardless of what you're ringing about... Regards, Simon _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

RE: [nznog] Cisco 2948G-L3
by Craig Spiers 23 Oct '03

23 Oct '03

So what would you deam appropriate for this list? I have a wheelbarrow im looking to sell.. $30 ono.. Networking equipment for sale, on a networking related list.. Seems appropriate to me.. Ive seen many people offer sales and wanted's on this list before! Including Michael Hallager! -----Original Message----- From: Drazen Babich [mailto:Drazen.Babich(a)gen-i.co.nz] Sent: Thursday, October 23, 2003 7:15 PM To: 'Craig Spiers' Subject: RE: [nznog] Cisco 2948G-L3 Still, not the right place for things like those Craig, you have to admit... regards, Drazen -----Original Message----- From: Craig Spiers [mailto:craig(a)concept.net.nz] Sent: Thursday, 23 October 2003 3:57 p.m. To: michael(a)networkstuff.co.nz; 'Philip D'Ath' Cc: nznog(a)list.waikato.ac.nz Subject: RE: [nznog] Cisco 2948G-L3 Michael, Ive seen you post messages similar to this, to this list many many times. I think you need to take a chill pill. -----Original Message----- From: Michael Hallager [mailto:michael(a)networkstuff.co.nz] Sent: Thursday, October 23, 2003 2:01 PM To: Philip D'Ath Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Cisco 2948G-L3 Do you think that you are special that you are excused from the list rules? This is not a trading forum. Advertise your item on Trademe or something. Michael Hallager Networkstuff Limited > I'm currently liquidating a Cisco 2948G-L3. The unit is new with > original packaging manuals and cables, and has only been used for demo > purposes. It will ship with a new warranty. > > RRP=$17,710+GST > Normal dealer buy would be=$12,928=GST > > Looking for around $10.5k+GST, or near offers. > > Offlist replies only please. > > > Philip D'Ath > CCNP, CCDA, BCMS > http://www.ifm.net.nz/ -- Michael Hallager Managing Director Networkstuff Limited URL: http://www.networkstuff.co.nz Networkstuff, NZ's leading supplier of high quality used networking equipment. E-Mail: michael @ networkstuff.co.nz Member of the NZ Open Source Society. Member of the Auckland VHF Group. Amateur radio callsign: ZL1VMH. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog ###################################################################### This e-mail message has been scanned and cleared by MailMarshal at http://www.gen-i.co.nz ######################################################################

3 3

Cisco 2948G-L3
by Philip D'Ath 22 Oct '03

22 Oct '03

I'm currently liquidating a Cisco 2948G-L3. The unit is new with original packaging manuals and cables, and has only been used for demo purposes. It will ship with a new warranty. RRP=$17,710+GST Normal dealer buy would be=$12,928=GST Looking for around $10.5k+GST, or near offers. Offlist replies only please. Philip D'Ath CCNP, CCDA, BCMS http://www.ifm.net.nz/

3 2

FW: Heads-up: AT&T apparently going to whitelist-only inbound mai l
by Bowden, Terry 22 Oct '03

22 Oct '03

AT&T STATEMENT - CURRENT SPAM ATTACK - 22/10/03 AT&T and a number of other large companies have seen a marked increase in the amount of incoming SPAM in recent days. A team of experts that includes members from AT&T Labs, Network Services, and Corporate Security has implemented a number of procedures to remediate this situation and minimize its impact on those trying to send e-mail to "att.com" addresses. As of this morning - Wednesday, October 22nd - the level of incoming e-mail messages is returning to normal and the situation appears to be well in hand. Although all AT&T e-mail servers are fully operational at this time, some incoming messages are experiencing intermittent delays as SPAM filtering continues at all network gateways. Customers who received e-mail bulletins from AT&T Monday and Tuesday requesting specific information are advised to disregard those messages. They were inadvertently sent out in error and we apologize for any confusion or inconvenience they may have caused. Network reliability is one of our top priorities at AT&T, so for obvious reasons we will not be providing more detailed information regarding the specific security procedures implemented to curb this SPAM attack. We have no intention of helping those who generate this type of computer and Internet mischief. Terry Bowden

1 0

Heads-up: AT&T apparently going to whitelist-only inbound mail
by Simon Lyall 21 Oct '03

21 Oct '03

Forwarded from nanog. Apparantly this is already in place according to one person. I called the number listed and they advised sending details in. You can ask questions to the email address listed. The Callcenter person said they had been flooded with calls. -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT. ---------- Forwarded message ---------- Return-Path: <rm-antiattspam(a)ems.att.com> Message-ID: <3F80414B002D0EC2(a)attrh0i.attrh.att.com> (added by postmaster(a)attrh1i.attrh.att.com) Content-Disposition: inline Content-Transfer-Encoding: binary Content-Type: text/plain MIME-Version: 1.0 X-Mailer: MIME::Lite 2.102 (B2.12; Q2.03) Date: Tue, 21 Oct 2003 20:21:50 UT Subject: *** ACTION: IP Address of Outbound SMTP Server Requested (Updated 10/21/03) From: rm-antiattspam(a)ems.att.com AT&T Business Partners & Customers AT&T has received many of the requested IP addresses in response to an e-mail originally broadcast yesterday to our business partners and clients. However, we have also received many concerned responses to the original request. This 2nd e-mail is to let you know that this is a legitimate AT&T request asking for your cooperation, which will let us improve the service that AT&T offers you and that our partnership requires. We have provided a toll-free number below to help you confirm the legitimacy of this request. We have assembled the distribution list for this e-mail by looking up the administrative contacts for each of the known e-mail domains we currently exchange e-mail with, referencing WHOIS and other such services available via the Internet. What AT&T is asking is for you to help AT&T to restrict incoming mail to just our known and trusted sources (e.g., business partners, clients and customers). Therefore, we need to know which IP address(es) are used by your outbound e-mail service so we can selectively permit them. Please send this information to the following e-mail address (rm-antiattspam(a)ems.att.com). If you need assistance determining what these IP addresses are, please contact your company's administrative e-mail server support / network administration personnel. We regret that AT&T is burdening you with this request, but our AT&T security team is advising that we take this step to help safeguard our e-mail systems, which ultimately will help us serve you better. Please contact us with any concerns or questions: AT&T Security Help Desk 1-800-456-4230, prompt 4 (8am - 10pm est) Thank you for your prompt attention to this matter. We appreciate your cooperation. Sincerely, Brian Williams, IP Network Services Tim Scholl - District Manager, IP Network Services Kevin O'Connell - Division Manager, Information Technology Services Engineering Bill O'Hern - Division Manager, Network Security ----- Original Message (Sent Monday, 10/20/03) ----- AT&T has an urgent situation with our anti-spam list. In order to continue to allow email to AT&T you need to provide the IP addresses of all your outbound email gateways. If you do not respond immediately, your access may not continue. The required information should be sent to rm-antiattspam(a)ems.att.com. ----- End forwarded message -----

4 4

APE Peering - JSR.COM
by J S Russell 20 Oct '03

20 Oct '03

jsr.com (AS9897) is a new ISP/hosting provider/etc, designed primarily as a testbed platform for various new and developing technologies. Dialup/ADSL/wireless/etc Internet access through jsr.com is currently limited to a small and select customer-base. However, immediately upon launch jsr.com will be hosting a variety of very content-rich servers and websites. At this time, the vast majority of traffic from AS9897 is expected to be outbound from jsr.com netblocks to other "domestic" New Zealand providers. jsr.com is greatly interested in hearing from any other APE-connected entities who would like to set up a BGP peering session over the APE. Replies to jsr(a)jsr.com please. In the interest of network efficiency, jsr.com's official peering policy is "If you have an AS#, you are welcome to peer with us." JSR -- John S Russell | Big Geek | Doing geek stuff.

1 0