October 2008 - NZNOG - lists.nznog.org

NZNOG 09 - Call for Participation and Papers
by Neil Fenemor 27 Oct '08

27 Oct '08

NZNOG 09 - Call for Participation and Papers The next conference of the New Zealand Network Operators' Group is to be held in Auckland, New Zealand between 26 January and 30 January 2009. Our host is FX Networks. NZNOG meetings provide opportunities for the exchange of technical information and discussion of issues relating to the operation and support of network services, with particular emphasis on New Zealand. The conference is low priced and has a strong technical focus with the aim and history of getting a strong turnout of technical personal from New Zealand Internet orientated companies. Conference Overview ------------------- NZNOG 2009 will consist of up to three days of workshops and tutorials followed by two days of conference presentations. There will also be opportunity for more informal and small lightening talks. These are typically around five minutes long and are organised closer to the actual conference. Important Dates --------------- Call for Papers opens: 1 September 2008 Deadline for speaker submissions: 30 September 2008 Responses to speaker submissions: 7 November 2008 Draft program published: 7 November 2008 Final program published: 1 December 2008 NZNOG 2009 Conference: 26 - 30 January 2009 SIG / Miniconf / Tutorials / Workshops -------------------------------------- In previous years we have had a single day of workshops and tutorials, this year however we are looking at having up to three days of workshops and tutorials, if we can get the submissions. Examples of past activities workshops include 'MPLS and fixed access networks for beginners', 'Mikrotik RouterOS Training', 'APNIC Internet Resource Management Essentials', and a System Administrators mini-conference which included talks on 'Using Debian packages for system administration' and '42 hosts in 1U: Using virtual machines'. Conference Presentations ------------------------ The main conference program for 2009 will be made up of two days with a single stream where possible. Presentations don't need to fit any particular fixed length and can be from 30 minutes to 3 hours in length. NZNOG conferences have traditionally spanned the entire operational spectrum, and then some. Proposals for conference presentations are invited for virtually any topic with a degree of relevance to the NZNOG community. Past years' talks have included the following: - Internet exchange operations - Global anycast networks and the building thereof - Peering, peering, and peering - Network security - 10GB ethernet operations - Advanced networks in NZ - Current Internet research in NZ - Wireless networking - QOS over carrier networks - Content distribution networks and media streaming - How we paid the construction guys 18 pints of beer and they gave us a free metro fibre network in Palmy North - Open Source VoIP Platform in Carrier Environments - Lawful Interception Some ideas for this year also include the following: - IPv6, been there done that. - DNS Security - Routing Security - LLU? Does anyone care? - P2P content delivery - Review of 2008 - IPSec If you are interested in submitting a talk please fill out the questions at then end of this document and submit them to http://submission.nznog.org Alternatively, you can and email them to talks(a)nznog.org Submission Guidelines --------------------- When considering a presentation or SIG, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in the SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but each will help us determine the quality of your proposal and increase the likelihood it will be accepted. Final slides are to be provided by 16 January 2009. Note: While the majority of speaking slots will be submitted by 30 September 2008, a limited number of slots may be available for presentations that are exceptionally timely, important, or of critical operational importance. The NZNOG conference is a TECHNICAL conference so marketing and commercial content is NOT allowed within the program. The program committee is charged with maintaining the technical standard of NZNOG conferences, and will therefore not accept inappropriate materials. It is expected that the presenter be a technical person and not a sales or marketing person. The audience is extremely technical and unforgiving, and expects that the speakers are themselves very knowledgeable. All sessions provide time for questions, so presenters should expect technical questions and be prepared to deliver insightful and technically deep responses. Funding and Support ------------------- NZNOG conferences are community run and funded events that try to keep the cost to attendees as low as possible so generally we are unable to pay the travel costs of speakers. There is a limited amount of funding available to international speakers. Conference presenters will not have to pay any registration fee for the day they are presenting. Discounts for SIG and lightning talk presenters may be available but are not automatic. Lightning talks --------------- Lightning talks are short talks/presentations that last no more than 10 minutes. This is a good opportunity to get your pet topic out there or perhaps to get some experience with presenting without having to go to a full talk. At NZNOG 2009 it is planned that there will be at least one hour long lightning talk session. Sponsors -------- There are opportunities remaining for organisations to sponsor various aspects of the NZNOG meeting. Please contact sponsorship(a)n<http://list.waikato.ac.nz/mailman/listinfo/nznog> znog.org for more information Contact ------- General Enquiries * info(a)n <http://list.waikato.ac.nz/mailman/listinfo/nznog>znog.org Talks and Papers * http://submission.nznog.org * talks(a)nznog.org Talk Proposals -------------- Please submit all talk proposals (including lightning talks) via http://submission.nznog.org or email talks(a)nznog.org along with the requested information. Questions regarding talks can be sent to the same address. Sponsorship may be available for a limited number of overseas speakers to attend the conference, please indicate if you require assistance with travel and/or accommodation. Author's Full Name: Author's Email Address: Author's affiliation: Author's short biography: Title of Talk: Abstract: Length of talk: Please provide details if a version of this talk has previously been given: Will travel and accommodation assistance be required:

1 1

Re: [nznog] That Copyright Act again
by Steve Bluck 27 Oct '08

27 Oct '08

The focus on ISP's by the list may be a bit short sighted, to quote from the governments New Zealand Legislation website[1]: "Internet service provider means a person who does either or both of the following things: * "(a) offers the transmission, routing, or providing of connections for digital online communications, between or among points specified by a user, of material of the user's choosing: * "(b) hosts material on websites or other electronic retrieval systems that can be accessed by a user Which by my reading is anyone who provides a connection to the Internet -be it schools, businesses, or ISP's etc so the impact of this poorly conceived legislation is far more reaching than what is currently being discussed on the list & will operationally affect the majority of people subscribed to the list. [1] http://www.legislation.govt.nz/act/public/2008/0027/latest/DLM1122509.ht ml#DLM1122509 This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the originator of the message. Any views expressed in this message are those of the individual sender. This message has been scanned for viruses and spam by SurfControl RiskFilter - E-mail.

1 0

ADSL & Annex M
by Michael 27 Oct '08

27 Oct '08

Does anyone have any information about Annex M support (or potential) within New Zealand? FYI - Annex M is a version of ADSL2+ that allows increased upload speed at the expense of decreased download speed. It is backwards compatible with existing Annex A equipment. Michael

5 7

Re: [nznog] That Copyright Act again
by Stu Fleming 27 Oct '08

27 Oct '08

> > How many of you will follow TelstraClear and Xnet (which is already > terminating customers if they receive complaints from copyright > > holders) and take down sites without checking or verifying complaints? My policy on s92 is currently that any customer who is _convicted_ of copyright infringement (using their Internet service via us) in a New Zealand court will have their account terminated, or if we are legally instructed to do so by means of a court injunction or order. The Minister can't have it both ways - if Internet access is a "human right", then the standard for termination would have to be quite high and the quality of evidence necessary to secure that conviction also high. If e-Government is a guaranteed way of doing business with citizens, and some citizens are disenfranchised by having access terminated on a low-quality evidence takedown notice, then there's an obvious conflict. We don't take away driving licences on allegations of illegality; we do so on the basis of convictions (and even then, not always). We don't take away mail delivery on allegations of illegality; we do so on the basis of convictions or on _evidence_ that conditions of use have been breached. The argument that ISPs are in a unique position to proactively filter and control customer traffic in the case of alleged infringement is bogus. Copyright holders have mechanisms to protect their rights and they have the duty to do so. Get a search warrant, add a lawful intercept, archive the offending Web site (get Natlib to help here). Don't attempt to take a technical shortcut to solve a social problem that ends up diluting the evidence base.

1 0

That Copyright Act again
by Juha Saarinen 27 Oct '08

27 Oct '08

This is, I believe, an operational issue... I was reading this Computerworld story over the weekend: http://computerworld.co.nz/news.nsf/news/117D6C93C541D21ACC2574EF00185387 in which Mathew Bolland of TelstraClear says: 'TelstraClear’s head of corporate services, Mathew Bolland, says from November 1, if TelstraClear hosts a website and someone phones up complaining that site has breached their copyright, TelstraClear will have to take the site down. “We don’t check or verify,” he says. “We take it down.”' When Section 92A popped up, this is what everyone thought would happen, but assumed wouldn't because in Bolland's words, "this is a ridiculous situation." Presumably, the take-downs will only happen for individual sites and those of small businesses unable to stump up the big legal fees to contest such actions - or is everyone affected, no matter what size? How many of you will follow TelstraClear and Xnet (which is already terminating customers if they receive complaints from copyright holders) and take down sites without checking or verifying complaints? -- Juha Saarinen juha(a)saarinen.org www.techsploder.com

6 5

Re: [nznog] NLNZHarvester2008
by Gordon Paynter 27 Oct '08

27 Oct '08

Hi all: Thanks to those of you who have contacted me after reading this thread. If you have not read our FAQ, we have addressed several of the issues that were raised here in that document: http://www.natlib.govt.nz/about-us/news/20-october-2008-web-harvest-faqs There are also a few new issues raised here that I’ll be adding to the FAQ shortly, particularly around notifying webmasters in advance and harvesting from an international service, both of which we could have handled better: 1. Several people have asked about notification, and some you have made practical and workable suggestions about how we can handle this better next time. In the current crawl, we could not see a good way to do so without effectively becoming spammers. In hindsight we could have communicated better with webmasters. When we decide to run the harvest again, we will make more of an effort to publicise the harvest in mailing lists and groups frequented by webmasters (such as this one). 2. Others ask why we are harvesting from the USA and not New Zealand? We have contracted the Internet Archive to conduct the harvest because they are the single most experienced provider of large-scale crawling services in the world. An unfortunate offshoot of this is that their servers are based in the USA. We hope that after observing the experts at work we'll be able to manage future harvests from within New Zealand. At the very least we have learned that we should locate some of the harvest servers in New Zealand. 3. Bmannign asks whether this is a recurring or once-off harvest? While we have not planned any further harvests at this time, it is likely that domain harvests will become a feature of the Library’s overall web harvesting programme. Analysis of the current harvest and research into various access issues will help determine frequency. Finally, As we have seen in other forums, a lot of you object to our robots.txt policy. Again, I can only say we understand your point of view, but in the context of this crawl we believe it is important that we harvest as much of the domain as possible, in order to preserve the web as it is today for the New Zealanders and researchers of the future. Simon Lyall illustrates our dilemma exactly above: people use robots.txt for different reasons, and in a perfect world (or possibly even an imperfect one where robots.txt developed into a standard) we would know why each robots.txt rule was written, and crawl more appropriately. Thanks, Gordon -- Gordon Paynter Technical Analyst National Digital Library National Library of New Zealand

21 25

UPDATE - CCIP ALERT: Exploitation of MS08-067
by Paul McKitrick 24 Oct '08

24 Oct '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Good Afternoon, CCIP wanted to update you on a worm that is installing the Gimmiv.A trojan by actively exploiting the MS08-067 Vulnerability. The emerging threats site (http://www.emergingthreats.net/index.php/component/content/article/1-latest…) has posted a snort rule which can alert to an infected machine due to Gimmiv.A making outbound pings to google IP's addresses with a specific payload: alert icmp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Gimiv Infection Ping Outbound"; icode:0; itype:8; dsize:20; content:"abcde12345fghij6789"; classtype:trojan-activity; sid:2008726; rev:1;) The emerging threats site is also hosting a set of 32 snort rules, developed by Secureworks, that will detect attempts to exploit this vulnerability: http://www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MS08… Regards, Paul. - -- Paul McKitrick Business Manager Centre for Critical Infrastructure Protection D: (+64) 4 498 7645 P: (+64) 4 498 7654 F: (+64) 4 498 7655 E: paul.mckitrick(a)ccip.govt.nz W: www.ccip.govt.nz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQEVAwUBSQJjKDpQQM+EFUs7AQKWCAf/d2AJeLxul5ufdJddLivV1alJjFPpuVqX FPCQYUh4eEyNmhHjTBoqS60ikJzr//57uUVzaHbnCa/jBLRL2FRUQGb+W+pzHxlJ 6b9Cezti4Il8Qytr2p3OF32FVMOunC16f5p3OaWgfbr9zxOYIH/gbg0B8Q9kbU4d cc8ZlZ6nIPD8DTzflXcX/Q3VTHVg+o/Rio8BviaugCE6i0E9VLFlwqIc45IH7RNv c5QMlUTwjsZRiMEhH1LmleBXrjcA4mNPgqbSUWPFy7W/mb1VQwisMeF8uIdL6bRi SNg9zE93e/0YgGt1fsrjjwt44P2a2gMvkXZPSIqfNSDcxsN9PdmayA== =X3gF -----END PGP SIGNATURE----- --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

1 0

ARIN - CAIDA IPv6 Penetration Survey result
by Elly Tawhai 23 Oct '08

23 Oct '08

Hi All, Thank you for your participation to the recent "ARIN-CAIDA IPv6 Penetration Survey." The survey result is now available from the following link: http://wiki.icons.apnic.net/display/IPv6/Home => IPv6 penetration statistics => Worldwide IPv6 penetration survey result - ARIN and CAIDA- October 2008 Thank you! Kind regards, Elly ________________________________________________________________________ Elly Tawhai email: elly(a)apnic.net Internet Resource Analyst/ Liaison (Pacific), APNIC sip: elly(a)voip.apnic.net http://www.apnic.net/helpdesk phone: +61 7 3858 3188 fax: +61 7 3858 3199 ________________________________________________________________________

1 0

CCIP ALERT: Exploitation of MS08-067
by Paul McKitrick 23 Oct '08

23 Oct '08

Good Afternoon, For those of you who are not already aware, CCIP would like to bring your attention the the Critical Microsoft Security Bulletin MS08-067 that was released today: http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx Microsoft have announced a vulnerability in the Server Service that could allow remote code execution. Administrators are advised to patch immediately. Microsoft have reported limited, targeted attacks attempting to exploit the vulnerability. CCIP has been made aware of two exploits that have been developed so far for this vulnerability since its release this morning. CCIP is concerned that a worm may be developed that would utilise these exploits. AusCERT have a writeup on their website: http://www.auscert.org.au/render.html?it=10008 There is also a detailed writeup on Microsoft's Security Vulnerability Research & Defense Blog: http://blogs.technet.com/swi/archive/2008/10/23/more-detail-about-ms08-067.… Regards, The CCIP Team -- Centre for Critical Infrastructure Protection Government Communications Security Bureau P: +64 4 498 7654 F: +64 4 498 7655 E: info(a)ccip.govt.nz I: www.ccip.govt.nz ===================================================================== If you would like to unsubscribe from CCIP Vulnerability Alerts, Advisories, e-Bulletins, Monthly Reports and Information Notes, Please send an email with 'Unsubscribe' in the subject line to publications(a)ccip.govt.nz ===================================================================== --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

1 0

NZRR Route Registry Update
by NZRR Database Notifications 21 Oct '08

21 Oct '08

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS24324 descr: advertised to AS9560 by Kordia - AS24324 members: 118.148.0.0/15^15-29, 124.157.64.0/18^18-29, 58.84.224.0/20^20-29, 114.134.0.0/20^20-29, 116.89.224.0/20^20-29, 202.56.32.0/20^20-29, 202.68.80.0/20^20-29, 203.144.32.0/20^20-29, 116.90.128.0/21^21-29, 117.104.176.0/21^21-29, 123.108.144.0/21^21-29, 202.20.0.0/21^21-29, 202.49.16.0/21^21-29, 202.49.128.0/21^21-29, 202.56.48.0/21^21-29, 202.137.240.0/21^21-29, 218.185.224.0/21^21-29, 202.6.116.0/23^23-29, 202.27.88.0/23^23-29, 202.49.164.0/23^23-29, 202.65.160.0/23^23-29, 202.174.190.0/23^23-29, 203.110.28.0/23^23-29, 192.173.17.0/24^24-29, 202.21.130.0/24^24-29, 202.27.34.0/24^24-29, 202.27.83.0/24^24-29, 202.27.90.0/24^24-29, 202.36.75.0/24^24-29, 202.36.137.0/24^24-29, 202.36.154.0/24^24-29, 202.36.173.0/24^24-29, 202.37.168.0/24^24-29, 202.37.197.0/24^24-29, 202.49.158.0/24^24-29, 202.49.168.0/24^24-29, 202.49.183.0/24^24-29, 202.129.253.0/24^24-29, 203.30.174.0/24^24-29, 203.92.25.0/24^24-29, 203.171.4.0/24^24-29, 203.174.26.0/24^24-29, 203.97.62.200/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: smc(a)kordia.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20081010 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS24324 descr: advertised to AS9560 by Kordia - AS24324 members: 118.148.0.0/15^15-29, 124.157.64.0/18^18-29, 58.84.224.0/20^20-29, 114.134.0.0/20^20-29, 116.89.224.0/20^20-29, 202.56.32.0/20^20-29, 202.68.80.0/20^20-29, 203.144.32.0/20^20-29, 116.90.128.0/21^21-29, 117.104.176.0/21^21-29, 123.108.144.0/21^21-29, 202.20.0.0/21^21-29, 202.49.16.0/21^21-29, 202.49.128.0/21^21-29, 202.56.48.0/21^21-29, 202.137.240.0/21^21-29, 218.185.224.0/21^21-29, 202.6.116.0/23^23-29, 202.27.88.0/23^23-29, 202.49.164.0/23^23-29, 202.65.160.0/23^23-29, 202.174.190.0/23^23-29, 203.110.28.0/23^23-29, 192.173.17.0/24^24-29, 202.21.130.0/24^24-29, 202.27.34.0/24^24-29, 202.27.83.0/24^24-29, 202.27.90.0/24^24-29, 202.36.75.0/24^24-29, 202.36.137.0/24^24-29, 202.36.154.0/24^24-29, 202.36.173.0/24^24-29, 202.37.168.0/24^24-29, 202.37.197.0/24^24-29, 202.49.158.0/24^24-29, 202.49.168.0/24^24-29, 202.49.183.0/24^24-29, 202.129.253.0/24^24-29, 203.30.174.0/24^24-29, 203.92.25.0/24^24-29, 203.171.4.0/24^24-29, 203.174.26.0/24^24-29, 203.191.7.0/24^24-29, 203.97.62.200/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: smc(a)kordia.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20081022 source: NZRR ------------------------------------------------------------

1 0