May 2003 - NZNOG - lists.nznog.org

WTS SSE Satellite SM3000modem in perfect condition
by Latchezar Dinev 28 May '03

28 May '03

1 0

WTS PM4 with 27E1 ports full loaded
by Latchezar Dinev 28 May '03

28 May '03

1 0

WTS CISCO AS5200-60DM-CH
by Latchezar Dinev 28 May '03

28 May '03

1 0

WTS 3COM Total Control 4E1 ports!
by Latchezar Dinev 28 May '03

28 May '03

1 0

IPv6 at APE
by Joe Abley 27 May '03

27 May '03

is anybody at the APE equipped to do IPv6 peering? Private replies are fine, I'll summarise if there's interest (and if there are replies).

11 18

Netforum Call for Papers
by Donald Neal 27 May '03

27 May '03

Roger De Salis sent this to the list: - - - - - The Netforum conference for 2003 is scheduled for July 10,11,12. The Theme of the conference is Next Generation Internet: Advanced Network Operations and Computer Networking in Aviation The conference will be extremely technical with >2/3 content devoted to advanced networking and related topics. Speakers are invited to submit proposals for papers to the conference committee by sending a synopsis and Title to "netforum(a)fx.net.nz". We look forward to an expanded conference in 2003, and the conference committee will be working very hard to meet or exceed the standard set by the 2002 conference, which I hope many of you enjoyed. The committee looks forward to receiving proposals. ==================================================================== In a similar manner, attendees are welcome to suggest topics or papers they are interested in seeing, and the conference organisers will then be able to help persuade likely speakersto stump up a talk. Send to "suggestions(a)fx.net.nz" Rgds Roger De Salis ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

3 2

Re: [nznog] IPv6 at APE
by Ewen McNeill 25 May '03

25 May '03

In message <5.2.0.9.1.20030526172452.055d4380(a)mail.igrin.co.nz>, Simon Byrnand writes: >The problem I can see with the introduction of ipv6 is that its such a >fundamental change, a bit like converting an entire country from imperial >to metric, except that you're trying to convert the WHOLE world :) Which sounds bad, except when you realise that the process doesn't require a "flag day", and has been very carefully designed so that it can happen over the course of several years (dual stacks, tunnels, etc). The major thing which is leading to slow progress, IMHO, is the lack of a really compelling need for it. IPv4 + NAT is a 90% solution. (OTOH there's something approaching a compelling need ofr multicasting, and that hasn't exactly happened much since last year either.) I think you're probably right that it'll take a very long time before IPv4 will be completely gone. But there've been plenty of other network protocols and many of them are nearly extinct. ("Native" windows networking is nearly gone -- haven't seen it in ages -- and even IPX is looking endangered (Novell went IP a couple of versions back), without even looking at protocols which were much less widely deployed.) FWIW, I do still keep meaning to experiment some more with IPv6 given some spare time, especially as most (all?) of the operating systems I'm using support IPv6 out of the box (OpenBSD, Linux, Solaris, etc, all support it out of the box these days). Ewen

1 0

Historical netblock allocation data?
by Juha Saarinen 22 May '03

22 May '03

Is there any publicly accessible repository that keeps information as to changes in netblock allocations? That is, noting to whom e.g. 152.152.0.0/16 or whatever was allocated originally, as opposed to whatever the current info happens to say? -- Juha Saarinen

1 0

Clear Dunedin Routing??
by Dan Clark 22 May '03

22 May '03

Hi guys, Is anyone on a local Clear/Telstra Frame anywhere in Dunedin area? Basicly we can see everything apart from another local ISP here in Dunedin on a similar Clear Frame as us. Its weird, we try connecting to port 25 on their IP and it fails, they try the same thing towards us with similar results. If we trace route to each other we get to an auckland clear router, then sent to wellington, then back to auckland in what seems like a loop. Can anyone shed some light on the situation, or if anyone else has a similar Clear POP in Dunedin area? Regards Dan Clark Network Manager Scarfies.Net Ltd

2 1

New and unacknowledged Exchange / Win2k SMTP vulnerability?
by Neil Gardner 21 May '03

21 May '03

Hi guys - for the last few weeks I've been working with Microsoft to try and track down why on Earth a correctly configured Exchange 2000 Server has been relaying. All of the standard sites report that it's closed, my own telnetting to it says it's closed, and yes, I've accounted for trojans on the LAN - but we're still going to try unplugging the rest of the LAN at some stage for a while and see what happens. But still, it's relaying. I add the IPs as I see them to a blacklist and it quietens down for a while, and MS keep promising they'll find the problem - but I send them SMTP logs, System and App logs and nothing adds up. All tests show it's closed, and all Logs (and complaining recipients) prove it's open for at least one attacker. Most of the reported sender addresses are in the format SMTPxxxx.YAHOO.COM (where xxxx is a random 4 digit number) But all resolve to chinanet or something. Recently though (today), they have been reporting as just 'exploder' or 'range' This is screaming 'vulnerability' to me, but MS refuse to acknowledge anything. I have heard in the last 20 minutes that a different organisation in Wgtn (with a different integrator) is having exactly the same problem, and that "Telecom is talking to Microsoft about it, but is getting nowhere" - I can't substantiate that yet though. No, the client isn't using an SMTP AV gateway, or firewall, Yes, they should be - and this will may in fact be the straw that broke the Financial Controllers back. But my current question is does anyone know WHAT this attack is, or if there's a configuration workaround I can do short of sticking a non win2k SMTP gateway between the net and Exchange? I can't post the SMTP logs publically because of a confidentiality agreement, but if anyone has an idea and would like to see a sample, please let me know and I'll see if the IT admin of the affected site will allow it. Cheers - Neil G.

1 0