July 2004 - NZNOG - lists.nznog.org

Voyager national routing
by Gordon Smith 19 Jul '04

19 Jul '04

Does anyone have any contact info for whoever has taken over the management of the Voyager peering router on APE? Failing that, is it still carrying any legitimate traffic? It's leaking international traffic, which makes it a bit too convenient for handing off DoS attacks - national peering links being larger than intl.... Anything from that router has an international return path. Anyone seeing any route advertisements from there? BTW, all the domain contact info for them is invalid - the phone number listed in the Domainz record is for a sheetmetal shop on the Nth Shore!! Cheers, Gordon

1 0

Re: Domain Registry of America at it again
by Dominic O'Hare 17 Jul '04

17 Jul '04

The Internet Name Group are back too trading under "domainnames.com.au" using an eNom reseller account. ----- Original Message ----- From: <nznog-request(a)list.waikato.ac.nz> To: <nznog(a)list.waikato.ac.nz> Sent: Sunday, July 18, 2004 12:00 PM Subject: NZNOG Digest, Vol 19, Issue 14 > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Domain Registry of America at it again (Juha Saarinen) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 17 Jul 2004 15:11:06 +1200 > From: Juha Saarinen <juha(a)saarinen.org> > Subject: [nznog] Domain Registry of America at it again > To: NZ NOG <nznog(a)list.waikato.ac.nz> > Message-ID: <40F898CA.3000009(a)saarinen.org> > Content-Type: text/plain; charset=us-ascii; format=flowed > > Had a "DOMAIN NAME EXPIRATION NOTICE" in the PO box today, and I suspect > many others in NZ will receive similar letters as well, from the > infamous domain name registration slammers. > > Those of you providing registration services may want to warn your > customers about this -- again. > > Interesting diagram charting the operators behind the scam and their > outfits here: > > http://chesley-rafferty.whatsinaname.com.au/slammers/ > > -- > Juha > > > > ------------------------------ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > End of NZNOG Digest, Vol 19, Issue 14 > ************************************* > >

1 0

Domain Registry of America at it again
by Juha Saarinen 16 Jul '04

16 Jul '04

Had a "DOMAIN NAME EXPIRATION NOTICE" in the PO box today, and I suspect many others in NZ will receive similar letters as well, from the infamous domain name registration slammers. Those of you providing registration services may want to warn your customers about this -- again. Interesting diagram charting the operators behind the scam and their outfits here: http://chesley-rafferty.whatsinaname.com.au/slammers/ -- Juha

1 0

WorldxChange Peering
by Gordon Smith 15 Jul '04

15 Jul '04

Hi all, WorldxChange is now peering at APE. Would anyone wishing to peer with us directly please email peering(a)wxnz.net, and include AS number, prefix list, and router IP. Our details are: AS 17435 Prefix list: ip prefix-list wxnz-networks permit 202.182.192.0/19 le 20 Router IP: 192.203.154.108 If you're already peered with the APE route-servers, you should be seeing our route advertisements. BTW, we're seeing quite a bit of garbage originating nationally, which we're dropping. Seems to be a mixture of worms and exploits. The 2 main sources are Woosh and Voyager. Woosh - looks to be virus traffic; not a big deal, but it did show that the range 202.74.192.0 - 202.74.223.255 is missing reverse DNS Voyager - Really weird stuff. You guys need to add outbound filters. I'm seeing traffic from you claiming to be from Latin America and Level3 Networks. If you want a copy of logs, etc. give me a shout Cheers, Gordon Smith CCNA IP Services Manager WorldxChange Communications Ltd.

1 0

CallPlus prefix list update
by Steve Hawken 14 Jul '04

14 Jul '04

Hi, For networks peering with CallPlus AS 9790 please add the following to your prefix list, full prefix list attached. ip prefix-list callplus-networks permit 202.36.232.0/24 Cheers, Steve Steve Hawken Senior Network Engineer DDI ++ 64 9 919 6038 Mobile ++ 64 21 778 891 Email steveh(a)callplus.co.nz <mailto:steveh(a)callplus.co.nz>

1 0

System Admin Wanted
by Lamar - LH Web Services 11 Jul '04

11 Jul '04

My apologies if this is a slightly off-topic post. 02.Net Internet Services (Nelson based full ISP) will have an open job position for a system administrator (and also a couple of helpdesk staff) within the next 1 to 6 months. Duties would include managing Windows 2000, 2003 and Linux servers (mainly web, mail, radius, dns, etc). Cisco knowledge would be good too. Applicants must either be in Nelson or willing to relocate to Nelson. If your interested, feel free to contact me off list for more information and full duties, etc can be provided. -- Lamar Hargreaves :: Director :: 02.Net Internet Services :: LH Web Services Phone - 03 548 7474 (Ext 204) :: Fax - 03 548 4090 :: Email - lamar(a)02net.co.nz Postal Address - P.O Box 8020, Victory, Nelson, New Zealand This e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. Any opinions, advice or views contained in this e-mail may not reflect on the views of 02.Net Internet Services or LH Web Services.

1 0

Catalyst IT prefix update
by David Zanetti 08 Jul '04

08 Jul '04

For the people who peer with Catalyst IT (AS 23959) over WIX, we've got a new block behind us. Please update your filters as you feel appropriate. :) Full list follows: ip prefix-list catalyst description Catalyst IT netadmin(a)catalyst.net.nz ip prefix-list catalyst seq 10 permit 202.46.190.0/24 ip prefix-list catalyst seq 20 permit 202.49.159.0/24 ip prefix-list catalyst seq 30 permit 202.20.6.0/24 ip prefix-list catalyst seq 40 permit 202.36.119.0/24 Thanks. -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

1 0

TNZ Network Issues.
by Drew_Collins＠apn.co.nz 07 Jul '04

07 Jul '04

I just had the following emailed to me from Global Gateway (it may help). Upstream Provider Initial Outage Notification Australia Global-Gateway Internet is currently experiencing service disruption which began on 8th July 1400hrs You are likely to experience intermittent packet loss on your Australian service until this problem is resolved. The problem will be resolved by Australian provider early tomorrow morning. GGIS apologises for any inconvenience to you or your customers. Logged by Maurice Wilkinson on Thu Jul 8 17:34:13 2004 Drew Collins Group Communications Manager Group IT Services NZ APN Holdings NZ Ltd My DDI: +64 9 373 9573 My Mobile +64 21 823268 My Fax: +64 9 373 6411 Ph: +64 9 379 5050 My eMail: drew_collins(a)apn.co.nz Website: www.apn.co.nz *************************************************************************** This eMail may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of APN News & Media NZ Ltd. For more information on APN News & Media NZ Ltd please visit our web site at http://www.apn.co.nz ***************************************************************************

1 0

Slow access to NZ sites
by rod_christie＠wilsonandhorton.co.nz 06 Jul '04

06 Jul '04

Anyone else getting reports of slow access to their sites from international locations. Connected to both "T"s, but suspect "Telstra" as they were screwing with their international cache yesterday. Cheers Rod APNNZ Rod Christie Network Consultant APN Holdings NZ Limited E-Mail: rod_christie(a)apn.co.nz Mobile: (64) 21 636 909 DDI: (64) 9 373 9571 Fax: (64) 9 373 6411 *************************************************************************** This eMail may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of APN News & Media NZ Ltd. For more information on APN News & Media NZ Ltd please visit our web site at http://www.apn.co.nz ***************************************************************************

1 0

Woosh\Walker Wireless Prefix List Update
by Beatty Lane-Davis 06 Jul '04

06 Jul '04

Hullo again, we are advertising a new prefix to our valued peers at APE & WIX: 202.21.16.0/20 So we will now be advertising: ip prefix-list Woosh seq 5 permit 202.74.192.0/19 le 20 ip prefix-list Woosh seq 10 permit 202.21.16.0/20 Cheers, b Beatty Lane-Davis blanedavis(a)woosh.com Woosh Wireless +64.21.544.716

1 0