April 2011 - NZNOG - lists.nznog.org

Re: [nznog] Is there anything else I can do to help??
by Steve Holdoway 06 Apr '11

06 Apr '11

To answer a few privately asked questions... sendmail ( which has greylisting, spamhaus RBL, greet pause running ) sees the traffic as coming from a 192.168.x.x address, which negates all the access controls in place. However, wireshark sees the SMTP traffic as coming from the external IP addresses... (I'm saying what I see as I don't want to use the wrong terminology... I'm only a sysadmin!) We're talking to telstra, and it looks like the simplest solution will be to move addresses. Which will work - until next time! Would be nice to be better prepared though. Cheers, Steve -- Steve Holdoway BSc(Hons) MNZCS <steve(a)greengecko.co.nz> http://www.greengecko.co.nz MSN: steve(a)greengecko.co.nz Skype: sholdowa

3 4

Is there anything else I can do to help??
by Steve Holdoway 06 Apr '11

06 Apr '11

I look after the infrastructure for a local charity, who run their own mail server over a VDSL line here in Christchurch. For the last 3 hours or so, the mail server is being ddosed... the incoming mail is being spoofed to have come from a local ip address ( not the firewall! ) afaict. All I've got is a dd-wrt based firewall into which I've blocked about 1,000 IP addresses via iptables - but doing that in a hurry, you don't know which ones are valid. And it's not helping. Any suggestions apart from forward 25 to /dev/null and hope they go away?? Cheers, Steve -- Steve Holdoway BSc(Hons) MNZCS <steve(a)greengecko.co.nz> http://www.greengecko.co.nz MSN: steve(a)greengecko.co.nz Skype: sholdowa

2 1

Paradise Net Dialup/Email retirement
by Dave Green 06 Apr '11

06 Apr '11

This is partly a personal request but my frustration level is approaching the red zone .. I received an email from Telstraclear on 19 Feb advising that the paradise.net.nz email and dial up service was to be retired on 30th March. The message offered to forward existing paradise email addresses to TC mailboxes and an email address was provided to request this, which I did. I've had no response to the email and three follow up calls to the TC helpdesk have resulted in a "callback" request being logged but no response so far. So, I'm looking at all of my paradise email addresses being retired (supposedly as of yesterday). The latest call to the TC helpdesk suggested I email the postmaster at paradise to try and resolve the issue, which I will do, but I though I would try here to see if there any real people I can talk with to try and make sure my paradise addresses remain active. I can't be the only paradise user left, surely. Thanks, Dave

8 9

Xtra's strange MTA behaviour.
by Cameron Bradley 06 Apr '11

06 Apr '11

Hey guys, Wondering if any of you had ever encountered this lovely little bit of 'filtering' on Xtra's behalf. When my mail gateway (non-blacklisted, mail accepted by everyone) attempts to contact Xtra's MTA, the following is the response: wiretap(a)mx-e1:~$ telnet mta.xtra.co.nz 25 Trying 210.54.141.1... Connected to mta.xtra.co.nz. Escape character is '^]'. 421 Service not available Connection closed by foreign host. Now that is an instant disconnection, with no opportunity to submit recipient or sender details, which is making it very hard to send email to xtra customers. Perhaps someone from Xtra would like to help out, or someone on here has an idea of 'resolving' this issue? Regards, Cameron Bradley

4 3

New crypto accelerator/HSM development
by Robert Cotter 06 Apr '11

06 Apr '11

Infoblox make some bold claims on their public website into the levels of support they provide for managing and delivering DNSSEC services. So if you have a need/interest contact me off line and we can talk about it over a beer Regards Robert Cotter Sales Engineer rcotter(a)distributioncentral.co.nz<UrlBlockedError.aspx> ________________________________ This email is for the intended recipient(s) only. Be advised that if you have received this email in error that any use, dissemination, forwarding, printing or copying of this email is strictly prohibited. The sender cannot guarantee that this email or any attachment to it is free of computer viruses or other conditions which may damage or interfere with data, hardware or software with which it might be used. If you have received this email in error, please notify Distribution Central on +61 2 8986 5000 or notify sender.

1 0

New crypto accelerator/HSM development
by Jay Daley 06 Apr '11

06 Apr '11

Hi Is there anyone out there, academics perhaps, developing new crypto accelerator/HSM hardware with a focus on high performance (e.g. 10k+ RSA sigs per second)? The current market is pretty poor with largely over-priced and under-performing kit and I'm hoping that someone is plotting to revolutionise it with something new and looking for a partner. cheers Jay -- Jay Daley Chief Executive .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 931 6977 mobile: +64 21 678840

9 17

NZRR Route Registry Update
by NZRR Database Notifications 05 Apr '11

05 Apr '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus Communications - NO VERIFICATION NEEDED - AS4826 members: 49.224.0.0/14^14-29, 118.92.0.0/15^15-29, 118.148.0.0/15^15-29, 27.252.0.0/16^16-29, 58.7.0.0/16^16-29, 58.28.0.0/16^16-29, 101.100.0.0/16^16-29, 114.23.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 124.148.0.0/16^16-29, 124.169.0.0/16^16-29, 124.170.0.0/16^16-29, 130.217.0.0/16^16-29, 131.203.0.0/16^16-29, 139.80.0.0/16^16-29, 157.128.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 182.154.0.0/16^16-29, 203.59.0.0/16^16-29, 220.235.0.0/16^16-29, 220.253.0.0/16^16-29, 14.137.0.0/17^17-29, 113.203.0.0/17^17-29, 124.149.0.0/17^17-29, 124.150.0.0/17^17-29, 124.168.0.0/17^17-29, 180.181.0.0/17^17-29, 203.109.128.0/17^17-29, 203.173.128.0/17^17-29, 210.48.0.0/17^17-29, 14.137.128.0/18^18-29, 58.6.192.0/18^18-29, 114.129.128.0/18^18-29, 114.198.0.0/18^18-29, 116.251.128.0/18^18-29, 120.88.64.0/18^18-29, 123.100.64.0/18^18-29, 124.149.192.0/18^18-29, 124.157.64.0/18^18-29, 124.168.128.0/18^18-29, 124.171.0.0/18^18-29, 124.198.128.0/18^18-29, 125.209.128.0/18^18-29, 125.253.0.0/18^18-29, 180.181.128.0/18^18-29, 180.200.128.0/18^18-29, 182.160.128.0/18^18-29, 202.72.128.0/18^18-29, 202.173.128.0/18^18-29, 203.113.192.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.206.0.0/18^18-29, 203.208.64.0/18^18-29, 203.211.64.0/18^18-29, 210.15.192.0/18^18-29, 210.185.0.0/18^18-29, 14.1.32.0/19^19-29, 14.137.192.0/19^19-29, 27.50.64.0/19^19-29, 58.6.64.0/19^19-29, 58.6.160.0/19^19-29, 61.245.128.0/19^19-29, 111.67.0.0/19^19-29, 112.141.0.0/19^19-29, 112.141.64.0/19^19-29, 112.141.128.0/19^19-29, 112.141.192.0/19^19-29, 113.192.0.0/19^19-29, 118.127.64.0/19^19-29, 119.15.0.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 124.149.160.0/19^19-29, 124.168.192.0/19^19-29, 124.171.192.0/19^19-29, 180.148.96.0/19^19-29, 180.189.192.0/19^19-29, 180.200.192.0/19^19-29, 180.214.64.0/19^19-29, 180.222.0.0/19^19-29, 182.48.128.0/19^19-29, 202.45.96.0/19^19-29, 202.59.32.0/19^19-29, 202.62.128.0/19^19-29, 202.74.192.0/19^19-29, 202.89.32.0/19^19-29, 202.89.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.89.64.0/19^19-29, 203.96.192.0/19^19-29, 203.124.96.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.158.32.0/19^19-29, 203.206.128.0/19^19-29, 203.206.224.0/19^19-29, 203.214.96.0/19^19-29, 203.217.64.0/19^19-29, 210.54.160.0/19^19-29, 221.121.128.0/19^19-29, 223.27.0.0/19^19-29, 223.165.96.0/19^19-29, 49.213.16.0/20^20-29, 49.236.240.0/20^20-29, 58.6.0.0/20^20-29, 58.6.32.0/20^20-29, 58.6.112.0/20^20-29, 58.6.144.0/20^20-29, 58.84.224.0/20^20-29, 110.173.144.0/20^20-29, 111.118.160.0/20^20-29, 111.125.160.0/20^20-29, 112.109.64.0/20^20-29, 113.20.0.0/20^20-29, 113.192.32.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.134.0.0/20^20-29, 114.142.160.0/20^20-29, 114.198.64.0/20^20-29, 114.198.112.0/20^20-29, 116.66.160.0/20^20-29, 116.93.128.0/20^20-29, 116.199.224.0/20^20-29, 117.55.224.0/20^20-29, 118.127.16.0/20^20-29, 119.10.128.0/20^20-29, 119.15.96.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.64.0/20^20-29, 120.138.16.0/20^20-29, 121.79.224.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.252.0.0/20^20-29, 124.149.144.0/20^20-29, 124.155.224.0/20^20-29, 124.168.240.0/20^20-29, 124.171.176.0/20^20-29, 124.171.240.0/20^20-29, 124.248.128.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 175.107.144.0/20^20-29, 175.107.160.0/20^20-29, 180.235.192.0/20^20-29, 202.3.192.0/20^20-29, 202.4.224.0/20^20-29, 202.21.16.0/20^20-29, 202.37.0.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.60.64.0/20^20-29, 202.68.80.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.86.96.0/20^20-29, 202.87.16.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.174.160.0/20^20-29, 203.2.80.0/20^20-29, 203.17.96.0/20^20-29, 203.82.96.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.173.0.0/20^20-29, 203.206.160.0/20^20-29, 203.206.192.0/20^20-29, 203.214.32.0/20^20-29, 203.214.80.0/20^20-29, 203.217.32.0/20^20-29, 210.56.32.0/20^20-29, 223.165.64.0/20^20-29, 27.121.64.0/21^21-29, 27.121.112.0/21^21-29, 49.50.224.0/21^21-29, 49.156.24.0/21^21-29, 58.6.16.0/21^21-29, 58.6.56.0/21^21-29, 110.44.24.0/21^21-29, 112.109.80.0/21^21-29, 113.192.56.0/21^21-29, 113.212.168.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.111.144.0/21^21-29, 114.198.80.0/21^21-29, 114.198.96.0/21^21-29, 115.124.32.0/21^21-29, 115.126.128.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.90.72.0/21^21-29, 116.212.64.0/21^21-29, 116.251.192.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 118.67.192.0/21^21-29, 118.88.24.0/21^21-29, 118.127.8.0/21^21-29, 119.15.72.0/21^21-29, 119.63.200.0/21^21-29, 119.63.208.0/21^21-29, 119.82.144.0/21^21-29, 119.252.184.0/21^21-29, 120.89.80.0/21^21-29, 120.136.0.0/21^21-29, 121.0.0.0/21^21-29, 121.79.240.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.102.96.0/21^21-29, 123.176.112.0/21^21-29, 124.150.160.0/21^21-29, 124.168.232.0/21^21-29, 124.171.232.0/21^21-29, 125.214.88.0/21^21-29, 175.45.128.0/21^21-29, 175.107.176.0/21^21-29, 175.176.200.0/21^21-29, 175.176.208.0/21^21-29, 180.92.192.0/21^21-29, 180.94.232.0/21^21-29, 180.189.152.0/21^21-29, 180.214.168.0/21^21-29, 180.235.208.0/21^21-29, 182.23.192.0/21^21-29, 202.7.144.0/21^21-29, 202.12.248.0/21^21-29, 202.20.0.0/21^21-29, 202.36.16.0/21^21-29, 202.36.96.0/21^21-29, 202.37.32.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.136.0/21^21-29, 202.49.0.0/21^21-29, 202.49.128.0/21^21-29, 202.50.208.0/21^21-29, 202.55.144.0/21^21-29, 202.60.80.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.83.112.0/21^21-29, 202.86.48.0/21^21-29, 202.86.208.0/21^21-29, 202.90.240.0/21^21-29, 202.92.240.0/21^21-29, 202.126.80.0/21^21-29, 202.129.80.0/21^21-29, 202.129.96.0/21^21-29, 202.160.112.0/21^21-29, 202.162.176.0/21^21-29, 202.168.16.0/21^21-29, 202.169.200.0/21^21-29, 202.189.160.0/21^21-29, 203.14.40.0/21^21-29, 203.14.168.0/21^21-29, 203.33.160.0/21^21-29, 203.98.88.0/21^21-29, 203.149.80.0/21^21-29, 203.173.40.0/21^21-29, 203.174.16.0/21^21-29, 203.188.216.0/21^21-29, 203.190.208.0/21^21-29, 203.206.64.0/21^21-29, 203.206.176.0/21^21-29, 203.212.16.0/21^21-29, 203.214.64.0/21^21-29, 203.215.0.0/21^21-29, 203.217.0.0/21^21-29, 203.217.16.0/21^21-29, 203.217.48.0/21^21-29, 210.9.136.0/21^21-29, 14.1.64.0/22^22-29, 27.34.224.0/22^22-29, 27.96.64.0/22^22-29, 27.100.24.0/22^22-29, 27.106.200.0/22^22-29, 27.112.96.0/22^22-29, 49.128.12.0/22^22-29, 49.143.228.0/22^22-29, 58.6.28.0/22^22-29, 58.6.108.0/22^22-29, 59.86.160.0/22^22-29, 59.86.172.0/22^22-29, 59.86.176.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 101.234.72.0/22^22-29, 109.200.212.0/22^22-29, 110.76.132.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.232.144.0/22^22-29, 111.235.140.0/22^22-29, 112.140.176.0/22^22-29, 112.141.112.0/22^22-29, 112.141.240.0/22^22-29, 113.29.240.0/22^22-29, 113.130.120.0/22^22-29, 113.197.96.0/22^22-29, 114.31.212.0/22^22-29, 114.198.104.0/22^22-29, 115.31.92.0/22^22-29, 115.69.28.0/22^22-29, 115.69.60.0/22^22-29, 115.178.28.0/22^22-29, 116.90.132.0/22^22-29, 116.90.140.0/22^22-29, 116.251.200.0/22^22-29, 118.127.4.0/22^22-29, 118.127.32.0/22^22-29, 118.127.52.0/22^22-29, 118.127.56.0/22^22-29, 119.63.216.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.102.104.0/22^22-29, 124.108.96.0/22^22-29, 124.171.224.0/22^22-29, 125.254.48.0/22^22-29, 125.254.60.0/22^22-29, 175.41.40.0/22^22-29, 175.107.184.0/22^22-29, 175.111.100.0/22^22-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20110401 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus Communications - NO VERIFICATION NEEDED - AS4826 members: 49.224.0.0/14^14-29, 118.92.0.0/15^15-29, 118.148.0.0/15^15-29, 27.252.0.0/16^16-29, 58.7.0.0/16^16-29, 58.28.0.0/16^16-29, 101.100.0.0/16^16-29, 114.23.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 124.148.0.0/16^16-29, 124.169.0.0/16^16-29, 124.170.0.0/16^16-29, 130.217.0.0/16^16-29, 131.203.0.0/16^16-29, 139.80.0.0/16^16-29, 157.128.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 182.154.0.0/16^16-29, 203.59.0.0/16^16-29, 220.235.0.0/16^16-29, 220.253.0.0/16^16-29, 14.137.0.0/17^17-29, 113.203.0.0/17^17-29, 124.149.0.0/17^17-29, 124.150.0.0/17^17-29, 124.168.0.0/17^17-29, 180.181.0.0/17^17-29, 203.109.128.0/17^17-29, 203.173.128.0/17^17-29, 210.48.0.0/17^17-29, 14.137.128.0/18^18-29, 58.6.192.0/18^18-29, 114.129.128.0/18^18-29, 114.198.0.0/18^18-29, 116.251.128.0/18^18-29, 120.88.64.0/18^18-29, 123.100.64.0/18^18-29, 124.149.192.0/18^18-29, 124.157.64.0/18^18-29, 124.168.128.0/18^18-29, 124.171.0.0/18^18-29, 124.198.128.0/18^18-29, 125.209.128.0/18^18-29, 125.253.0.0/18^18-29, 180.181.128.0/18^18-29, 180.200.128.0/18^18-29, 182.160.128.0/18^18-29, 202.72.128.0/18^18-29, 202.173.128.0/18^18-29, 203.113.192.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.206.0.0/18^18-29, 203.208.64.0/18^18-29, 203.211.64.0/18^18-29, 210.15.192.0/18^18-29, 210.185.0.0/18^18-29, 14.1.32.0/19^19-29, 14.137.192.0/19^19-29, 27.50.64.0/19^19-29, 58.6.64.0/19^19-29, 58.6.160.0/19^19-29, 61.245.128.0/19^19-29, 111.67.0.0/19^19-29, 112.141.0.0/19^19-29, 112.141.64.0/19^19-29, 112.141.128.0/19^19-29, 112.141.192.0/19^19-29, 113.192.0.0/19^19-29, 118.127.64.0/19^19-29, 119.15.0.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 124.149.160.0/19^19-29, 124.168.192.0/19^19-29, 124.171.192.0/19^19-29, 180.148.96.0/19^19-29, 180.189.192.0/19^19-29, 180.200.192.0/19^19-29, 180.214.64.0/19^19-29, 180.222.0.0/19^19-29, 182.48.128.0/19^19-29, 202.45.96.0/19^19-29, 202.59.32.0/19^19-29, 202.62.128.0/19^19-29, 202.74.192.0/19^19-29, 202.89.32.0/19^19-29, 202.89.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.89.64.0/19^19-29, 203.96.192.0/19^19-29, 203.124.96.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.158.32.0/19^19-29, 203.206.128.0/19^19-29, 203.206.224.0/19^19-29, 203.214.96.0/19^19-29, 203.217.64.0/19^19-29, 210.54.160.0/19^19-29, 221.121.128.0/19^19-29, 223.27.0.0/19^19-29, 223.165.96.0/19^19-29, 23.2.112.0/20^20-29, 49.213.16.0/20^20-29, 49.236.240.0/20^20-29, 58.6.0.0/20^20-29, 58.6.32.0/20^20-29, 58.6.112.0/20^20-29, 58.6.144.0/20^20-29, 58.84.224.0/20^20-29, 110.173.144.0/20^20-29, 111.118.160.0/20^20-29, 111.125.160.0/20^20-29, 112.109.64.0/20^20-29, 113.20.0.0/20^20-29, 113.192.32.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.134.0.0/20^20-29, 114.142.160.0/20^20-29, 114.198.64.0/20^20-29, 114.198.112.0/20^20-29, 116.66.160.0/20^20-29, 116.93.128.0/20^20-29, 116.199.224.0/20^20-29, 117.55.224.0/20^20-29, 118.127.16.0/20^20-29, 119.10.128.0/20^20-29, 119.15.96.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.64.0/20^20-29, 120.138.16.0/20^20-29, 121.79.224.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.252.0.0/20^20-29, 124.149.144.0/20^20-29, 124.155.224.0/20^20-29, 124.168.240.0/20^20-29, 124.171.176.0/20^20-29, 124.171.240.0/20^20-29, 124.248.128.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 175.107.144.0/20^20-29, 175.107.160.0/20^20-29, 180.235.192.0/20^20-29, 202.3.192.0/20^20-29, 202.4.224.0/20^20-29, 202.21.16.0/20^20-29, 202.37.0.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.60.64.0/20^20-29, 202.68.80.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.86.96.0/20^20-29, 202.87.16.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.174.160.0/20^20-29, 203.2.80.0/20^20-29, 203.17.96.0/20^20-29, 203.82.96.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.173.0.0/20^20-29, 203.206.160.0/20^20-29, 203.206.192.0/20^20-29, 203.214.32.0/20^20-29, 203.214.80.0/20^20-29, 203.217.32.0/20^20-29, 210.56.32.0/20^20-29, 223.165.64.0/20^20-29, 27.121.64.0/21^21-29, 27.121.112.0/21^21-29, 49.156.24.0/21^21-29, 58.6.16.0/21^21-29, 58.6.56.0/21^21-29, 110.44.24.0/21^21-29, 112.109.80.0/21^21-29, 113.192.56.0/21^21-29, 113.212.168.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.111.144.0/21^21-29, 114.198.80.0/21^21-29, 114.198.96.0/21^21-29, 115.124.32.0/21^21-29, 115.126.128.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.90.72.0/21^21-29, 116.212.64.0/21^21-29, 116.251.192.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 118.67.192.0/21^21-29, 118.88.24.0/21^21-29, 118.127.8.0/21^21-29, 119.15.72.0/21^21-29, 119.63.200.0/21^21-29, 119.63.208.0/21^21-29, 119.82.144.0/21^21-29, 119.252.184.0/21^21-29, 120.89.80.0/21^21-29, 120.136.0.0/21^21-29, 121.0.0.0/21^21-29, 121.79.240.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.102.96.0/21^21-29, 123.176.112.0/21^21-29, 124.150.160.0/21^21-29, 124.168.232.0/21^21-29, 124.171.232.0/21^21-29, 125.214.88.0/21^21-29, 175.45.128.0/21^21-29, 175.107.176.0/21^21-29, 175.176.200.0/21^21-29, 175.176.208.0/21^21-29, 180.92.192.0/21^21-29, 180.94.232.0/21^21-29, 180.189.152.0/21^21-29, 180.214.168.0/21^21-29, 180.235.208.0/21^21-29, 182.23.192.0/21^21-29, 202.7.144.0/21^21-29, 202.12.248.0/21^21-29, 202.20.0.0/21^21-29, 202.36.16.0/21^21-29, 202.36.96.0/21^21-29, 202.37.32.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.136.0/21^21-29, 202.49.0.0/21^21-29, 202.49.128.0/21^21-29, 202.50.208.0/21^21-29, 202.55.144.0/21^21-29, 202.60.80.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.83.112.0/21^21-29, 202.86.48.0/21^21-29, 202.86.208.0/21^21-29, 202.90.240.0/21^21-29, 202.92.240.0/21^21-29, 202.126.80.0/21^21-29, 202.129.80.0/21^21-29, 202.129.96.0/21^21-29, 202.160.112.0/21^21-29, 202.162.176.0/21^21-29, 202.168.16.0/21^21-29, 202.169.200.0/21^21-29, 202.189.160.0/21^21-29, 203.14.40.0/21^21-29, 203.14.168.0/21^21-29, 203.33.160.0/21^21-29, 203.98.88.0/21^21-29, 203.149.80.0/21^21-29, 203.173.40.0/21^21-29, 203.174.16.0/21^21-29, 203.188.216.0/21^21-29, 203.190.208.0/21^21-29, 203.206.64.0/21^21-29, 203.206.176.0/21^21-29, 203.212.16.0/21^21-29, 203.214.64.0/21^21-29, 203.215.0.0/21^21-29, 203.217.0.0/21^21-29, 203.217.16.0/21^21-29, 203.217.48.0/21^21-29, 210.9.136.0/21^21-29, 14.1.64.0/22^22-29, 23.2.32.0/22^22-29, 27.34.224.0/22^22-29, 27.96.64.0/22^22-29, 27.100.24.0/22^22-29, 27.106.200.0/22^22-29, 27.112.96.0/22^22-29, 49.128.12.0/22^22-29, 49.143.228.0/22^22-29, 58.6.28.0/22^22-29, 58.6.108.0/22^22-29, 59.86.160.0/22^22-29, 59.86.172.0/22^22-29, 59.86.176.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 101.234.72.0/22^22-29, 109.200.212.0/22^22-29, 110.76.132.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.232.144.0/22^22-29, 111.235.140.0/22^22-29, 112.140.176.0/22^22-29, 112.141.112.0/22^22-29, 112.141.240.0/22^22-29, 113.29.240.0/22^22-29, 113.130.120.0/22^22-29, 113.197.64.0/22^22-29, 113.197.96.0/22^22-29, 114.31.212.0/22^22-29, 114.198.104.0/22^22-29, 115.31.92.0/22^22-29, 115.69.28.0/22^22-29, 115.69.60.0/22^22-29, 115.178.28.0/22^22-29, 116.90.132.0/22^22-29, 116.90.140.0/22^22-29, 116.251.200.0/22^22-29, 118.127.4.0/22^22-29, 118.127.32.0/22^22-29, 118.127.52.0/22^22-29, 118.127.56.0/22^22-29, 119.63.216.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.102.104.0/22^22-29, 124.108.96.0/22^22-29, 124.171.224.0/22^22-29, 125.254.48.0/22^22-29, 125.254.60.0/22^22-29, 175.41.40.0/22^22-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20110406 source: NZRR ------------------------------------------------------------

1 0

Re: [nznog] New crypto accelerator/HSM development
by Nick Jenkin 04 Apr '11

04 Apr '11

Yubico are developing an HSM at the moment, I have no idea what the performance is like but you could probably ask: http://www.yubico.com/YubiHSM-Application -Nick On Tue, Apr 5, 2011 at 10:15 AM, Nick Jenkin <njenkin(a)gmail.com> wrote: > Yubico are developing an HSM at the moment, I have no idea what the > performance is like but you could probably ask: > > http://www.yubico.com/YubiHSM-Application > > -Nick > > On Tue, Apr 5, 2011 at 9:24 AM, Jay Daley <jay(a)nzrs.net.nz> wrote: >> A software HSM can normally only do around 5k - 6k 1024 RSA sigs per second: >> >> http://trac.opendnssec.org/wiki/SoftHSM/Performance >> >> I want multiple cards in a machine to do 40k+ >> >> Jay >> >> On 5/04/2011, at 10:37 AM, Gerard Creamer wrote: >> >>> >>> Or if you don't actually need a hardware solution, you could run up an HSM simulator (like http://thalessim.codeplex.com/) on faster gear than the real HSM has and get performance that way. >>> >>> >>> On 5/04/2011 10:22 a.m., Gerard Creamer wrote: >>>> >>>> The HSM space seems to be very tightly controlled. We've been looking for affordable solutions for PIN block decryption for our payments work and the options seem to be very limited (and expensive and slow). We've asked around in the payments space here and in Australia and the answer is always 'buy an HSM from one of these two places' and for attaining more throughput it is invariably 'buy more HSMs'. I think they like it being a black box solution, that way they can claim it's secure. >>>> >>>> If you do find anything I would be very interested in getting the details from you. >>>> >>>> Cheers, >>>> Gerard >>>> >>>> >>>> On 5/04/2011 10:13 a.m., Richard Nelson wrote: >>>>> There has been some work on doing crypto acceleration on GPUs recently, mainly SSL which is not quite what you are looking for I guess. >>>>> >>>>> http://shader.kaist.edu/sslshader/ >>>>> >>>>> Richard. >>>>> >>>>> On 05/04/11 09:50, Jay Daley wrote: >>>>>> Hi >>>>>> >>>>>> Is there anyone out there, academics perhaps, developing new crypto accelerator/HSM hardware with a focus on high performance (e.g. 10k+ RSA sigs per second)? The current market is pretty poor with largely over-priced and under-performing kit and I'm hoping that someone is plotting to revolutionise it with something new and looking for a partner. >>>>>> >>>>>> cheers >>>>>> Jay >>>>>> >>>>> >>>> _______________________________________________ >>> >>> _______________________________________________ >>> NZNOG mailing list >>> NZNOG(a)list.waikato.ac.nz >>> http://list.waikato.ac.nz/mailman/listinfo/nznog >> >> >> -- >> Jay Daley >> Chief Executive >> .nz Registry Services (New Zealand Domain Name Registry Limited) >> desk: +64 4 931 6977 >> mobile: +64 21 678840 >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> >

1 0

New Zealand Network Operators' Group
by Donald Neal 04 Apr '11

04 Apr '11

The New Zealand Network Operators' Group The NZNOG mailing list exists to facilitate discussion among operators of networks in New Zealand on matters relevant to network operators as described in the list's Acceptable Use Policy. That policy appears later in this posting. The NZNOG Trust is registered as a charitable entity under the Charities Act. The trust exists to provide the legal framework needed to do jobs like operating the bank account which holds the money which allows our annual conferences to happen. Other than the four trustees, the NZNOG does not have a formal membership. The trustees are currently looking to replace some of their number. If you've been active in NZNOG's activities, you may want to think about whether that's for you. Conference NZNOG holds New Zealand's only annual technical networking conference. See http://2011.nznog.org/ to see what you missed. Other Meetings See http://thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.nznog.org/?page_id=6 for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://www.nzix.net/ for details of exchanges in operation. About This Mailing List This list has just over 1100 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of APN Online and The University of Waikato and an Unemployed Oaf. Neither of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ . Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins -- Donald Neal | I don't approve of gambling. I'll just | spend my time in the bar. High Performance Computing | - NZNOG 2010 attendee The University of Waikato |

1 0

APNIC 2011 Member and Stakeholder Survey Report: Last Call for Comments
by Elly Tawhai 03 Apr '11

03 Apr '11

________________________________________________________________________ APNIC 2011 Member and Stakeholder Survey Report: Last Call for Comments ________________________________________________________________________ Hi NZNOG Community, The APNIC 2011 Member and Stakeholder Survey Report was presented during APNIC 31 Hong Kong, and the complete report has been made available for public comment at: http://www.apnic.net/survey After the public comment period, which ends Monday, 18 April, the APNIC Executive Council will fully review the findings and present a formal response to the membership. Please send your comments to: sirc(a)ntu.edu.sg The APNIC Director General and Executive Council express their sincere thanks to all who submitted responses to the survey. ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

1 0