February 2005 - NZNOG - lists.nznog.org

RE: [nznog] Notes from NZNOG 05 history of peering session
by Craig Box 03 Feb '05

03 Feb '05

While it's fresh in everyone's minds: > Talking to Joe there was a suggestion from someone that we put > together a Wiki to collect this altogether as a NZ Internet History. > Sounds good to me and we could add whole sections on 0867, IPNet and > start writing active history on UBS etc. I've taken Ian's information, wikified it and put it up on http://www.wlug.org.nz/NewZealandInternetHistory Anyone can edit this - just use YourName as a login ID. (If you can't figure out how to log in, in Bill's words, "you're excused"). If you're linking to something like Telecom, TelstraClear etc, we probably have pages about them already. Please check before linking externally. Craig

1 0

Citylink systems admin
by Barry Murphy 03 Feb '05

03 Feb '05

Hi, Can someone from citylink that can provide me with wix and ape ip space please contact me offlist. I had a chat to Andy some time ago about this, however recently I can't get hold of him so wonder if he is away. Thanks Barry

2 1

Reminder! PGP Key Signing at NZNOG 2005
by Joe Abley 03 Feb '05

03 Feb '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reminder! If there are people who are not staying late enough tomorrow to attend, feel free to track me down directly and exchange signatures (or track down someone else who turns up at some other time). Begin forwarded message: > We're going to engage in a frenzy of PGP keysigning at the NZNOG > meeting in Hamilton. People who know what PGP stands for should read > on. People who don't know what PGP is are more than welcome to ask me > off-list, or alternatively ask Google (who at least knows people who > know). > > Here's what we will attempt to do for the meeting next week: > > 1. As soon as you can, generate an ASCII-armoured copy of your public > key and paste it into the convenient form here: > > http://www.biglumber.com/x/web?keyring=5468 > > Consult your PGP software's documentation to find out how to generate > an ASCII-armoured copy of your public key. With GnuPG you use "gpg -a > - --export <your-key-id>". You're looking for a block of ASCII text > which begins with the line "-----BEGIN PGP PUBLIC KEY BLOCK-----". > > 2. Before you set off to the NZNOG meeting, remember two things: > > 2.1. BRING PHOTO ID. Key signing is a process of representing trust, > and if you are interested in getting signatures on your key (and > you're reading, so presumably you are) you should be ready to provide > proof of your identity to other people. Drivers licences, passports, > things of that nature. BRING PHOTO ID. > > 2.2. BRING A TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. This could be > achieved by bringing a laptop with a trusted copy of your public key > on it, or alternatively you could generate the fingerprint of your > public key, write it down and bring the bit of paper with you. BRING A > TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. > > The precise procedure we use at the key signing party will depend on > how many keys are uploaded in the next week; if there's a small > handful we can read signatures aloud -- if there are more, we can try > Len Sassaman's efficient key signing method > (<http://sion.quickie.net/keysigning.txt>). I'll send more words on > this closer to the time. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCAY6O/f+PWOTbRPIRAk41AJ9pQm1q+YiNkYGrnlr+duzA8q2AlQCgvp+7 im7yw9JZLD+cNEkqW09xuHU= =62cR -----END PGP SIGNATURE-----

1 0

Zombie Spam
by Ian McDonald 03 Feb '05

03 Feb '05

Given some of the talks at NZNOG 05 you may find below interesting: Zombie trick expected to send spam sky-high By Jim Hu http://news.com.com/Zombie+trick+expected+to+send+spam+sky-high/2100-7349_3… Story last modified Wed Feb 02 11:25:00 PST 2005 Spam levels are about to skyrocket, according to experts who warned this week that spammers have developed a new way of delivering their wares. According to the SpamHaus Project--a U.K.-based antispam compiler of blacklists that block 8 billion messages a day--a new piece of malicious software has been created that takes over a PC. This "zombie" computer is then used to send spam via the mail server of that PC's Internet service provider. This means the junk mail appears to come from the ISP, making it very hard for an antispam blacklist to block it. Previously, zombie PCs have been used as mail servers themselves, sending spam e-mails directly to recipients. "The Trojan is able to order proxies to send spam upstream to the ISP," said Steve Linford, director of SpamHaus. Linford believes that this Trojan horse was created by the same people who write spamming software. ISPs in the United States may have already been hit. "We've seen a surge in spam coming from major ISPs. Now all of the ISPs are having large amounts of spam going out from their mail servers," Linford said. This will cause serious problems for the e-mail infrastructure, as it is impractical to block mail with domain names from large ISPs. Linford predicts that ISPs will see a growth in the volume of bulk mail they send and receive over the next two months, with spam levels rising from 75 percent of all e-mail to around 95 percent within a year. "The e-mail infrastructure is beginning to fail," Linford warned. "You'll see huge delays in e-mail and servers collapsing. It's the beginning of the e-mail meltdown." Linford said that ISPs need to act fast to take control of the problem. "They've got to throttle the number of e-mails coming from ADSL accounts. They are going to have to act quickly to clean incoming viruses. ISPs have so much spam--they are too understaffed to call people up and tell them they have Trojans on their machines. And no one would know what you're talking about." Antispam company MessageLabs confirmed Linford's findings. "This ups the ante in the need for filters," said Mark Sunner, chief technology officer for MessageLabs. "It makes it more difficult for people who compile blacklists, which is why spammers are doing this. It will put more pressure on ISPs to take greater interest in the traffic they carry and filter at source." The Information Commissioner's Office, the United Kingdom's point-of-call to report spam, said it had received no complaints of bulk spam from ISPs. Some U.S.-based ISPs contacted by News.com said an e-mail meltdown has yet to arrive. But technicians at some of the largest Internet providers have acknowledged the issue and similar exploits in the past. Many, but not all, U.S. ISPs have blocked open relay ports, such as port 25, to shut out spammers from disseminating messages from home-operated servers. The block has helped some broadband ISPs limit the output of zombie spam, and some have noticed the new form of malware taking shape. Time Warner Cable, the nation's second largest cable company, said it had become aware of this spam "vector," as it calls it, and has mechanisms to control it, according to company spokesman Keith Cocozza. He noted that the company's ISP, called Road Runner, has outgoing e-mail limits in place, but declined to elaborate on how the company monitors and responds to this malware issue. Earthlink, which runs a dial-up and broadband service, said it noticed a gradual increase in spam volume coming from its legitimate mail servers since the beginning of 2004. The company claims it has implemented safeguards, such as authenticated SMTP servers and re-routing of legitimate e-mail, to cut down the flow. "Overall we've been able to greatly reduce the amount of spam from our network by routing activities and applying chokepoints," said Trip Cox, Earthlink's chief technology officer. Cox added that the measure have reduced spam from 30 percent of the ISP's total e-mail volume to 2 percent. Dan Ilett of ZDNet UK reported from London.

1 0

CACert Assurance
by Joe Abley 03 Feb '05

03 Feb '05

CACert is a non-evil X.509 certificate authority based in Australia. They give out free certificates to people whose identities they can verify, and they way they verify identities involves a web of trust. I met the CACert people in a meeting in the US last year, and they verified my identity in appropriately paranoid fashion, and made me an Assurer. That means I can act as an introducer. If any of this rings bells, and there's someone at the meeting who would like to be "assured", flag me down at some point and It Will Be Done. Joe

1 0

nznog stream
by Chris Hellberg 02 Feb '05

02 Feb '05

The stream is looking good from Frankfurt. Very little rebuffering (although I think that's the DSL at this end) and clear audio. Watching Dean's interweb presentation right now.

1 0

Transport to NZNOG
by David Zanetti 02 Feb '05

02 Feb '05

Hey all. Due to someone placing an airport in a suboptimal location, I won't be any closer than Auckland to NZNOG conferencage by (hopefully!) 7.30am tomorrow morning. If anyone is planning on driving down in the morning, I would hugely appreciate a lift. Give me a call on the cell number below. Thanks :) -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

2 1

Last mile in CHCH
by Richard Patterson 02 Feb '05

02 Feb '05

What options do people in/around the Christchurch CBD have ? AFAIK TelstraClear cable is fairly predominant around there. Any other options? Local wireless/fibre carriers ? -Richard

11 12

RE: [nznog] Stats from Webcast
by Kenneth Wells 02 Feb '05

02 Feb '05

.. I loved the ..er.. post session "out-takes". Those who watched till the room went dark will know what I'm talking about - as will the few people who came back into the room to check things out for tomorrows sessions.. ..and no matter how "cute" that device on the desk is.. It would probably be missed if stolen... :-) grin grin. Seriously though, great webcasting. The audio is clear and it's easy to hear everyone in the room. Cheers, Kenneth -----Original Message----- From: Richard Naylor [mailto:richard.naylor(a)citylink.co.nz] Sent: Wednesday, 2 February 2005 5:04 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Stats from Webcast Todays webcast Duration 4 hrs 44 min 827MBytes at an average of 405kbps. File copy is 876MB Peak of 26 viewers, average 22. Will be back up at around 8:30 tomorrow - (provided we get here in time) Thanks to the presenter(s), and local camera operator - Matt ? rich _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Stats from Webcast
by Richard Naylor 02 Feb '05

02 Feb '05

Todays webcast Duration 4 hrs 44 min 827MBytes at an average of 405kbps. File copy is 876MB Peak of 26 viewers, average 22. Will be back up at around 8:30 tomorrow - (provided we get here in time) Thanks to the presenter(s), and local camera operator - Matt ? rich

1 0