January 2008 - NZNOG - lists.nznog.org

Sysadmin Miniconf programme online
by Ewen McNeill 20 Jan '08

20 Jan '08

For those that are interested, the programme for the Sysadmin Miniconf at NZNOG 2008 (in Dunedin, this Wedesday -- 23 January 2008) is now online: http://nznog.miniconf.org/programme08.html Ewen

1 0

Re: [nznog] URGENT - broadband connex in AKL
by Richard Naylor 19 Jan '08

19 Jan '08

At 09:09 a.m. 20/01/2008, David Robb wrote: >On Sat, 19 Jan 2008, Richard Naylor wrote: > >>Sadly DIA has advised our client (a broadcaster) that we're not >>allowed to place our cameras on site and so the job has been canned. >>Its really sad as it was a great application for webcasting. But the >>powers that be have decided "no cameras". <sigh> > >"No Cameras", yet they're having cameras to feed out to TV screens >in the neighbouring cathedral and in the Domain..? > >You can't just get a feed from those perhaps? No - the plan was for us to webcast a different part of the 2 days, not the "main event", so it would have been our cameras. Often we take an "international" or "clean" feed and mix that with our cameras. There is some discussion as to whether an international grade clean feed is available. RNZ are unable to make a clean feed available. There have been some space issues. The bottom line is we were turned down. DIA don't want cameras in the bit we were asked to cover. Sorry I'll explain later over beer - a bit of broadcaster competition was occuring. On the bright side - its 20hours driving less to do, and Jeremy doesn't have to fly to NZNOG in/out of AKL. He gets to fly out of DNN to WLG - then drive to AKL. Rich

2 1

Re: [nznog] URGENT - broadband connex in AKL
by Richard Naylor 19 Jan '08

19 Jan '08

Evening All, Further to my request for urgent help - I received a heap of really great offers and with some help with a Microwave link from Parnell to SKY, we had it all sorted. Sadly DIA has advised our client (a broadcaster) that we're not allowed to place our cameras on site and so the job has been canned. Its really sad as it was a great application for webcasting. But the powers that be have decided "no cameras". <sigh> So a big THANKS to everyone. There was terrific generosity - everyone really pulled in and it would have been a great project. (with lousy hours though). Next time.... Rich

2 1

URGENT - broadband connex in AKL
by Richard Naylor 16 Jan '08

16 Jan '08

Hi folks, I have an urgent need for 1-2Mbps of IP capacity from AKL to WIX for Monday-tuesday next week for the Ed Hillary funeral. I ay use satelite, but if a wireless operator can do a link to the Sky Tower for good money, I'd love to hear from them. And yes we will drive the 1-2Mbps fairly hard Cheers Richard

1 0

Spam statistics for AA
by Thomas Layzell 16 Jan '08

16 Jan '08

Here's our statistic for the last year: Total Spam Messages Dropped 9,490,810 Total Virus Messages Dropped 1,300 Total Clean Messages Processed 1,787,289 THOMAS LAYZELL | NETWORK MANAGER | INFORMATION & COMMUNICATIONS TECHNOLOGY The New Zealand Automobile Association Incorporated

1 0

ICANN: JPA midterm review - have your say
by Save Vocea 15 Jan '08

15 Jan '08

(apology for any duplicate - slightly less tech in nature but worth sharing as its about DNS admin) Dear colleagues, My first mail in 2008 - so very warm greetings all. First up I'd like to highlight this very important information from ICANN. ccTLD managers in each economy have received this as well. ICANN in the past have had its fair share of critics "for/against" the current model or it's relationship with the US Govt and transition to independence. (just have to Goggle to read this) May I request those that particularly follow ICANN work (and those new to this space) to spare some time to read through the latest announcement from ICANN website particularly the "Joint Project Agreement - ICANN response" about the Notice of Inquiry put out by the USG regarding ICANN and the USG Joint Partnership Agreement. The documents referenced will clarify why ICANN was formed and delegated the role to perform the technical coordination and management of the Internet’s domain name and addressing system (DNS). ICANN's role is now in midterm review with this Notice of Inquiry requested for by the USG. http://www.icann.org/ As you will see from ICANN's submission, among other things, it is the view of the ICANN Board that: ~ The JPA like the memorandums of understanding before it has helped ICANN to become a stable organization; ~ ICANN has executed the terms of the JPA commenced in September 2006; ~ ICANN is meeting its responsibilities under the JPA; ~ The JPA is no longer necessary. Concluding it is the next step in transition of the coordination of the Domain Name System (DNS) to the private sector; ~ This step will provide continuing confidence that the original vision laid out in the White Paper is being delivered; ~ Concluding the JPA will not affect existing accountabilities expressed in the IANA contract and the United States Government¹s participation through the Governmental Advisory Committee. I am sure that both ICANN and the US Department of Commerce would appreciate hearing the views of the Internet community on this important review. As there's a very narrow window in which to tailor and submit responses/comments I hope I can again contact some of you to discuss or please feel free to contact me at any time to clarify. It will be useful under this review term that as many responses are received from those parties interested to have a say. I encourage those interested in this list to also contribute to this process and to add to a truly global response. Now is the chance to get your voices heard. Comments close on 15 February. regards, -- Save Vocea Global Partnerships Manager, Regional Relations - Australasia/Pacific Islands http://www.icann.org ICANN is about coordination, not control

1 0

iperf/AS7108
by jamie baddeley 14 Jan '08

14 Jan '08

Hi There, Does anyone have ssh access to a well connected host that can run iperf that is either directly connected or very near AS7018 in the US? If so, can you please contact me offlist thanks? Cheers Jamie

1 0

OT - Martin Hunt
by Richard Naylor 14 Jan '08

14 Jan '08

Some of the list members who were around in the early 90's may have known Martin Hunt, a Sysadmin based in Wellington. He passed away suddenly at home last week aged 46. There was a death notice in Saturday's Dominion Post. He was a really nice guy. Martin worked at Govt Print (with Don Stokes, Larry Hall and Ian Calhaem, etc), then WCC IT Dept and latterly at Fairfax Media. While at WCC he was one of the Sysadmins who looked after WCC CityNet. He was active in DECUS in the early 90's. A service for Martin will be held in St Lukes, cnr Pitt St and Wadestown Rd, Wednesday 16 January at 1100 (sadly I have to be working elsewhere). Messages to Martin's family c/o P O Box 50-347 Porirua, or I can pass on emails via his brother. A really nice guy. He will be missed. Richard

2 1

NZRR Route Registry Update
by NZRR Database Notifications 14 Jan '08

14 Jan '08

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by Maximum Internet Ltd - AS9889 members: 123.100.64.0/18^18-29, 124.198.128.0/18^18-29, 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 202.189.160.0/21^21-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 210.54.142.0/23^23-29, 117.53.150.0/24^24-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.8.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.162.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.12.15.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20071120 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by Maximum Internet Ltd - AS9889 members: 123.100.64.0/18^18-29, 124.198.128.0/18^18-29, 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 202.55.96.0/20^20-29, 202.189.160.0/21^21-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 117.53.150.0/23^23-29, 210.54.142.0/23^23-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.8.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.162.0/24^24-29, 202.37.181.0/24^24-29, 202.150.102.0/24^24-29, 203.12.15.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20080115 source: NZRR --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS64533 descr: advertised to AS9439 by ERMA - AS64533 members: 202.68.89.96/28^28-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: Mark.Harris(a)ermanz.govt.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060727 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS64533 descr: advertised to AS9439 by ERMA - AS64533 members: 202.68.89.96/28^28-29, 202.68.89.120/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: Mark.Harris(a)ermanz.govt.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20080115 source: NZRR ------------------------------------------------------------

1 0

Re: [nznog] Using nolisting to reduce spam
by Glen Eustace 14 Jan '08

14 Jan '08

> The primary downside initially is that any legitimate server is doing > two transactions for every email. This would delay mail slightly and > increase queue lengths and CPU usage of every legitimate mail server > sending to you. If everybody implemented this it would load mail > servers up a bit. My observation would be that a TCP reject doesn't result in a requeuing of the email. With postix, it would appear that the smtp sending process immediately tries the MX in the chain upto a max of 5 ( but this is configurable ). There is a SYN packet, an RST and then a SYN to the secondary, not IMHO a significant overhead or delay. NB: The first MX must reject the connection not just drop it, otherwise the behaviour you describe does occur. > Again it is a temporary workaround but it might be worthwhile for > knowledgable system administrators. Over time the issues of spam still > need to be sorted out but that is a longer term project and is both > technical and political. It would seem that all spam solutions are just sticking plasters but a 'defense-in-depth' approach using multiple techniques does seem to be viable for the time being. Glen.

1 0