April 2004 - NZNOG - lists.nznog.org

IANA IPv4 allocations and bogon update: 58/8, 59/8
by Rob Thomas 28 Apr '04

28 Apr '04

-----BEGIN PGP SIGNED MESSAGE----- Hi, team. **NOTE WELL: Thanks to a donation from the RIPE NCC we have a new bogon prefix data offering. See below for the details. The numerous Team Cymru bogon projects have been updated as of 01 APR 2004 to reflect the following IANA allocation made on 01 APR 2004: 58/8 Apr 04 APNIC 59/8 Apr 04 APNIC IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.qorbit.net/documents/junos-template.pdf> Secure JUNOS BGP Template (Juniper) - <http://www.qorbit.net/documents/junos-bgp-template.pdf> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-loose.pdf> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-strict.pdf> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> RIPE NCC fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#ripe> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. - -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQJApa1kX3QAo5sgJAQHypAP+NF/noJVKOCT8jfTviUyOvEUmr/UwcCwC XsomXcCp9/QAfaMElUaa34Jm4OY3eVUqIvwm/cF1Pg7EhfzjzgHzpru9EWMtMuju eHxGXZpETdVbh+YB3oZIqIP/jydO0UpwiEUHuq9behvTgM3FGjs/yMot/sIs1/dp /22VF+/QhOc= =Bmje -----END PGP SIGNATURE-----

1 0

RE: [nznog] Domainz issue
by Tim John - Domainz 28 Apr '04

28 Apr '04

> The ultimate gift from domainz and somebody complains about it. You just can't please some people :) Grant, please email me off list to discuss further. Tim -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Thursday, 29 April 2004 9:12 a.m. To: Grant Zanetti Cc: NZNOG(a)list.waikato.ac.nz Subject: Re: [nznog] Domainz issue Grant Zanetti wrote: > Currently anyone using the staff proxy here at Iconz is being refused > access to the domainz website. Any and all attempts to contact > someone so find out why this is have been ignored. Strike me dead! The ultimate gift from domainz and somebody complains about it. > Can someone from Domainz drop me an email to explain why we are being > blocked? And you want to fix this? /me recommends a stiff drink -- Peter Mott Chief Enthusiast 2DAY INTERNET LIMITED http://www.2day.com "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Domainz issue
by Grant Zanetti 28 Apr '04

28 Apr '04

Currently anyone using the staff proxy here at Iconz is being refused access to the domainz website. Any and all attempts to contact someone so find out why this is have been ignored. Can someone from Domainz drop me an email to explain why we are being blocked? Thanks. -- http://the.mani.ac.nz

2 1

Telstra Clear routing 210.54.142.0/24 incorrectly
by Peter Simmons 27 Apr '04

27 Apr '04

Hi, Perhaps there is someone from Telstra Clear on this list that can help. We (Strongnet) own the 210.54.142.0/24 range it is hosted at United Networks datacentre in Northcoat, Auckland. For some reason or other the routers that Telstra Clear 'Tempest' customers go through is routing traffic to that ip range as over its international connection. This means that those customers have to pay international rates for traffic that goes to our network. Obviously they should only have to pay national traffic rates as it is national. Traffic going from our network to the Telstra Clear 'Tempest' customers is routed nationally. Only traffic coming from the Telstra Clear 'Tempest' customers to our network is being routed internationally. It seems that only Telstra Clear customers are having this problem. So if anyone knows how to fix it or is in a position to fix it please do. Regards, Pete

2 1

"Domain Names Australia" banned from trading
by Matthew Poole 27 Apr '04

27 Apr '04

Not strictly related, but I know that a lot of people on here have had grief as a result of the little toad's actions. So, take a read of http://www.nzherald.co.nz/latestnewsstory.cfm?storyID=3563220, and gloat at the well-earned smack-down.

2 1

TestraClear WLL
by Philip D'Ath 27 Apr '04

27 Apr '04

Could someone from TelstraClear who deals with the wireless local loop box's in a technical capacity please contact me off list. http://www.ifm.net.nz/ CCNP, BCMS Philip D'Ath.

1 0

Re: NZNOG Digest, Vol 16, Issue 17
by Paul Gold 23 Apr '04

23 Apr '04

We started having problems more than a week ago, with queues of 10K and more building up over the day through to Xtra. At night, this was 2-3 times as bad. We managed to (finally) get through to CTSHelp, who advised us that Xtra had made a policy decision to only accept 2 connections per source IP/domain. This was effectively throttling our mail down to around 2-3 messages per second. Obviously an attempt to limit the impact of the recent Sober work and variants on xtra's part... Paul Date: Fri, 23 Apr 2004 16:33:12 +1200 From: jamesc(a)wave.co.nz (James Clark) Subject: Re: [nznog] Xtra To: Neil Gardner <NeilG(a)renaissance.co.nz> Cc: nznog(a)list.waikato.ac.nz Message-ID: <20040423043312.GA27729(a)phoenix.wave.co.nz> Content-Type: text/plain; charset=us-ascii On Fri, Apr 23, 2004 at 04:10:01PM +1200, Neil Gardner wrote: > Chuckle - I _KNOW_ it's just a coincidence, but less than 15 minutes after > lampooning Xtra's generally useless status page about never being updated, > they have managed to list the intermittent (!) email problem, only 26 hours > after it was first notied on this list! 26? Try more than 48 hrs, and apparently it was worse on Tuesday!

1 0

RE: [nznog] Xtra's "No known problems line"
by Robert Purdy (DSL AK) 22 Apr '04

22 Apr '04

Someone must have called Theresa - Current Status There is currently 1 known problem with the Xtra Network Unscheduled Event Products Affected: All Connections Areas Affected: Nationwide System(s) Affected: Receiving Email Sending Email System(s) Response: Intermittent Current Status: Investigating Resolution Expected: Unknown 1000+ messages queued here.... Rob -----Original Message----- From: Blair Harrison [mailto:nznog(a)jedi.school.nz] Sent: Friday, 23 April 2004 4:45 p.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Xtra's "No known problems line" On Fri, 23 Apr 2004 15:52:52 +1200 Neil Gardner <NeilG(a)renaissance.co.nz> wrote: > I'm not advocating anything illegal but... > > If anyone on here has the artistic skills, the access and the guts, > replacing that "No known problems" with a picture of an Ostrich with > it's head in the ground, and a speech bubble with "There are currently > no....".... Well, I'm not sure I could imagine anything funnier :-) > > N. > http://jedi.net.nz/~blair/xtra1.png Have a good friday laugh everyone, and stop worrying about your mail queues.. they'll sort themselves out eventually, they always do :) Cheers, Blair _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

Xtra's "No known problems line"
by Neil Gardner 22 Apr '04

22 Apr '04

I'm not advocating anything illegal but... If anyone on here has the artistic skills, the access and the guts, replacing that "No known problems" with a picture of an Ostrich with it's head in the ground, and a speech bubble with "There are currently no....".... Well, I'm not sure I could imagine anything funnier :-) N. -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

2 1

RE: [nznog] Xtra
by Neil Gardner 22 Apr '04

22 Apr '04

Chuckle - I _KNOW_ it's just a coincidence, but less than 15 minutes after lampooning Xtra's generally useless status page about never being updated, they have managed to list the intermittent (!) email problem, only 26 hours after it was first notied on this list! -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

2 1