December 2005 - NZNOG - lists.nznog.org

NZ Security Notifications
by Brendan Murray 15 Dec '05

15 Dec '05

(apologies to members of members-discuss(a)internetnz.net.nz for duplication) Yesterday the topic of AusCERT came up on nznog. Many of you probably know that InternetNZ has formed a small group to look at the need/feasibility of a NZ based CERT. It is all in early days yet, but it might be a good time to start looking at some ways of improving security awareness here. We hope to raise some ideas for discussion at the nznog conference next year, but the recent email suggests we could start on some practical matters now. We would like to suggest creating a NZ security community with a nz-sec mailing list, for example. This would have the same sort of intent as the nsp-security mailing list, bringing in people with a genuine interest in security practice and incident handling. We feel that the CCIP list, while valuable, is informative rather than collaborative. The nznog list has been used for security issues where relevant, but network operations is the reason for nznog, not security management. Ultimately the list and list membership, or some variant, would become associated with a NZ CERT if one were to happen, but in the meantime InternetNZ would be happy to host and advertise a moderated list. If you think there would be some value in this, please email me. You can find information about the nsp-security mailing list at https://puck.nether.net/mailman/listinfo/nsp-security) Brendan Murray Chairing the InternetNZ NZCERT Task Force.

7 7

Re: [nznog] NZ Security Notifications
by Barry Greene (bgreene) 14 Dec '05

14 Dec '05

For those who are interested, I've got a draft of some guidelines that can be used to create a group like nsp-sec-nz. Pop me a note and I'll send it. > -----Original Message----- > From: Rob Thomas [mailto:robt(a)cymru.com] > Sent: Wednesday, December 14, 2005 8:16 AM > To: Joe Abley > Cc: NZNOG List > Subject: Re: [nznog] NZ Security Notifications > > ] While an nsp-sec-nz list sounds like it could be lots of > fun, maybe ] it's also worth mentioning that it's perfectly > possible (and ] reasonable) for operators in nz who fit the > target demographic to ] become subscribers to the existing > nsp-sec list. > > Agreed! The mix of both nsp-sec and nsp-sec-nz would be > quite complimentary and useful. > > -- > Rob Thomas > Team Cymru > http://www.cymru.com/ > ASSERT(coffee != empty); > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

Re: [nznog] Hotmail
by Jeremy Strachan 14 Dec '05

14 Dec '05

Probably B52 bombers and cruise missiles. -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Thursday, 15 December 2005 12:47 p.m. To: Simon Lyall Cc: nznog Subject: Re: [nznog] Hotmail Simon Lyall wrote: > Violations will result in use of equipment located in California and > other states. Ouuchhhh... that'll stop spammers for sure! Wonder what equipment located in California and other states it is that MSN/Hotmail will use though? -- Juha _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

6 7

Hotmail
by Simon Lyall 14 Dec '05

14 Dec '05

$ telnet mx2.hotmail.com smtp Trying 65.54.244.168... Connected to mx2.hotmail.com. Escape character is '^]'. 220 bay0-mc6-f18.bay0.hotmail.com Sending unsolicited commercial or bulk e-mail to Microsoft's computer network is prohibited. Other restrictions are found at http://privacy.msn.com/Anti-spam/. Violations will result in use of equipment located in California and other states. Wed, 14 Dec 2005 15:39:37 -0800 helo 250 bay0-mc6-f18.bay0.hotmail.com (3.1.0.17) Hello [202.27.185.139] Mail from:<simon(a)darkmere.gen.nz> 452 Out of memory Connection closed by foreign host. $ -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

2 1

Re: [nznog] NZ Security Notifications
by Dean Pemberton 13 Dec '05

13 Dec '05

>Would this list have the same sort of policy for membership as nsp-sec? >i.e. an invite only list for people who actually have to do the work >with a policy of kicking out people who don't meet the membership >criteria on an ongoing basis. > >If that's the case then I can see value in such a list but if it's >going to be similar to NZNOG with an "anybody can join" policy then I'm >less interested. > >andy I agree with Andy here. The only list I would be interested in is one which subscribes to the nsp-sec policy. No lurking. You have to be the person who is able to make the changes. Change jobs and you unsub. And some others. It's the only way. An "anyone can join" list will degrade into.... well my opinions here should remain to myself =) I would suggest that people look at joining nsp-sec rather than re-inventing the wheel. Or at the very least getting Rob to host an nsp-sec-nz list with the same policy around it. If you are a large provider, then there is probably already content on nsp-sec that you should know about. Dean.

1 0

Fwd: King Kong streaming tomorrow
by Paul Adshead 13 Dec '05

13 Dec '05

It may be good for someone in Telecom to let their front line staff know about (de-)peering at some point. After spending 15 minutes on the phone, it was quite amusing when they came back from putting me on hold: "I have talked to our tech guys and no-one in Xtra can get to the page either. They think it is a problem with the routing of data for the site at the far end. You could try power-cycling your router though"... Then when I asked for confirmation by email: "We suspect that there has been some stringent ip filtering and this is what could be causing the problem. We can not confirm this the best source of action would be to contact the host of the website for further information." Obviously either highly qualified in providing BS responses or just stupid. It's still annoying that I can't get to see it though... Paul -----Original Message----- From: Mike [mailto:mike(a)nzbox.com] Sent: Wednesday, 14 December 2005 17:20 To: NZNOG Subject: Re: [nznog] King Kong streaming tomorrow Hi Rich and Si Can I suggest you mention which streams will be available internationally in your announcements. Cant see either of these from Seattle ;-) good message for TCL and TNZ though.... Kia ora! You've reached the Citylink anycast node located in San Francisco, California. If you are in NZ, you should ring your ISP and ask them why your traffic is coming to the USA, rather than staying in New Zealand. Useful phone numbers are at TelstraClear (try the wholesale number if you get no joy from residential/business) and the best number for Telecom would appear to be 0800 CALL XTRA [22 55 98]. If you're feeling particularly cussed, ask them what's changed in the two years between the RoTK (when you could reach these streams nationally) and now. International users, we're sorry, sadly, our non-existent budget means that we can't make the Courtenay Place webcam available internationally. Such is life. Mike On Dec 12, 2005, at 8:10 PM, Simon Blake wrote: > Hi all > > A belated notice that the red carpet TV coverage and Courtenay Place > webcam will be streaming tomorrow as part of the King Kong premiere. > The mms stream will be on ac1-all.r2.co.nz (202.7.7.90), the webcam > from > embassy.citylink.co.nz (202.7.6.10), both anycast at the major > exchanges. The webcam is running now, informal MMS streams will start > about midday, TV coverage about 3pm. > > We're not expecting the same sorts of loads as RoTK, but who can tell. > > Cheers > Si > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

King Kong streaming tomorrow
by Simon Blake 13 Dec '05

13 Dec '05

Hi all A belated notice that the red carpet TV coverage and Courtenay Place webcam will be streaming tomorrow as part of the King Kong premiere. The mms stream will be on ac1-all.r2.co.nz (202.7.7.90), the webcam from embassy.citylink.co.nz (202.7.6.10), both anycast at the major exchanges. The webcam is running now, informal MMS streams will start about midday, TV coverage about 3pm. We're not expecting the same sorts of loads as RoTK, but who can tell. Cheers Si

5 4

NZ use of AusCERT
by Jonathan Brewer 11 Dec '05

11 Dec '05

Hi folks, Are there many among us who are members of AusCERT? Any in the practice of reporting incidents on NZ based hosts to AusCERT? Do AusCERT care to hear about incidents from non-members? Cheers, Jon

2 1

woosh
by Garrrett Stoupe 11 Dec '05

11 Dec '05

Can someone from woosh please contact me off list

1 0

National Bank Phising Scam
by Ashley Petherick 11 Dec '05

11 Dec '05

Morning all, awoke today to a National bank Phishing scam - a pretty ugly one, they didnt put much effort into the email, but the 'verification web page' looks pretty authentic (save the URL http://202.93.254.35:443/cxk/) They ask for your First and Last name, and credit card number, your ATM PIN, and expiration date. Sent from security(a)nationalbank.co.nz / Subject - Verification Required I have advised the site. Account Confirmation Required! Valued National Bank Client, Recently there have been a large number of identity theft attempts targeting National Bank customers. In order to safeguard your account we require that you verify your banking details. This process is mandatory. You may do so by clicking Here <http://202.93.254.35:443/cxk/> <a href="http://202.93.254.35:443/cxk/"> and submitting the required information. Failure to do so may result in a temporary cessation of your account services pending submission. Thank you for your prompt attention to this matter and your co-operation in helping us maintain the integrity of our customers accounts. Please do not reply to this e-mail, as this is an unmonitored alias. If you require further assistance refer to our support centre <http://nationalbank.co.nz/personal/contacts/> <A HREF="http://nationalbank.co.nz/personal/contacts/" TARGET="_blank">. National Bank respects your privacy. Click here <http://nationalbank.co.nz/terms/default.htm> <A HREF="http://nationalbank.co.nz/terms/default.htm" TARGET="_blank"> to read the National Bank Group Privacy Policy Statement. Electronic Banking services are issued by the National Bank of New Zealand (Electronic Banking services include telephone banking, Netbank and Bpay). A Product Disclosure Statement (PDS) <http://nationalbank.co.nz/terms/default.htm> <A HREF="http://nationalbank.co.nz/terms/default.htm" TARGET="_blank"> is available for these products on this website or from any branch of the National Bank. © 2005 The National Bank of New Zealand, part of ANZ National Bank Limited

1 0