June 2012 - NZNOG - lists.nznog.org

APE Peering
by Craig Spiers 12 Jun '12

12 Jun '12

Hi All, If anyone should wish to establish a direct peering session via APE with us (for either redundancy reasons, or because you don't use the route servers) please contact me directly off list. Kind regards, Craig Spiers | Network Engineer Maxnet Ltd

1 0

ZeuS- and SpyEye Tracker goes Spamhaus
by Dean Pemberton 12 Jun '12

12 Jun '12

http://www.abuse.ch/?p=3810 This might be of interest to people. Today The Spamhaus Project <http://www.spamhaus.org/>, a well known non-profit organisation fighting cybercrime in the internet, released a new list called “Spamhaus Botnet C&C List” (BGPCC <http://www.spamhaus.org/bgpf>) which is implemented at the router level using the Border Gateway Protocol (BGP). I’m proud to announce that the newly launched list also contains data provided by ZeuS Tracker <https://zeustracker.abuse.ch/> and SpyEye Tracker <https://spyeyetracker.abuse.ch/>.

1 0

Congratulations to Craig Whitmore
by Sebastian Castro 12 Jun '12

12 Jun '12

Because dnssec.geek.nz is the first .nz domain that can be DNSSEC validated According to the Open DNSSEC Validating Resolver (https://www.dns-oarc.net/oarc/services/odvr) dig a www.dnssec.geek.nz @149.20.64.20 +dnssec +multiline ; <<>> DiG 9.8.0 <<>> a www.dnssec.geek.nz @149.20.64.20 +dnssec +multiline ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24148 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 5 ^^^^ NOTE THIS ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.dnssec.geek.nz. IN A ;; ANSWER SECTION: www.dnssec.geek.nz. 86161 IN A 114.23.33.130 www.dnssec.geek.nz. 86161 IN RRSIG A 5 4 86400 20120705085021 ( 20120605083506 57516 dnssec.geek.nz. UCUGqNqTi020wY++lGqJWjZZrLYvPYyS7tEHLA1ASW3O AXEkBtojFfHxy0Zne0Z1INoChmlONAovXBWmCa6Y8RPO iAFsxoUcAt+njxwpXIrqWfSw4bKVex4DVtbIJiQcgUjf y4+CpkSEHKVZG0jQcquwnOCRqcf90OCPYW93Uqs= ) ;; AUTHORITY SECTION: dnssec.geek.nz. 86160 IN NS dns2.dnssec.geek.nz. dnssec.geek.nz. 86160 IN NS dns1.dnssec.geek.nz. dnssec.geek.nz. 86160 IN RRSIG NS 5 3 86400 20120705085021 ( 20120605083506 57516 dnssec.geek.nz. d+7MLB24EUROEmvsfDFRpy52qY1bNF6KJFBnhaszvyak 9tbsY1TpDY8dv6y2OUN4SoA9Ydfj3QD3IwEkGAOKIzvG OrorBNUDBb7nUyjXMi0te5X7AfRhSkQDNDL3zYb30WO/ 8KeCzydAGXQtmAiu2yxTV9RJFrnzbQ4OOe/i3QY= ) ;; ADDITIONAL SECTION: dns1.dnssec.geek.nz. 86160 IN A 114.23.33.130 dns2.dnssec.geek.nz. 86160 IN A 114.23.33.131 dns1.dnssec.geek.nz. 86160 IN RRSIG A 5 4 86400 20120705085021 ( 20120605083506 57516 dnssec.geek.nz. ODk/boWCMVYj6RWMkp2PqZoxvnCavFZyucZgvTxTIlYz R47IGWjlLeb1DHIQJzEDUPvKj6VhNiA+sbLwG/Oh4nHD WVb5xJt07gPlSPiihzWGlY2g90KN3PXqdujKgc/8FIhi GUSdE+umR+kBG2XlZpvyzc0L3C6niICPImMq3JY= ) dns2.dnssec.geek.nz. 86160 IN RRSIG A 5 4 86400 20120705085021 ( 20120605083506 57516 dnssec.geek.nz. Tl5vbS+GfMiWhft32InQHdUqWY0lHmzZdIzwyrVGJdoO yhRGrWej0RshhnypA0lO77cBRQuYoIzZt7/cUpGe1MyO FnYKQeQpt8bLak4HZ5W+Fkc5GQctD4Q2cGSJqvIJOuDd GqT1KuILudTDERmUwLCsA8n/q3W19mUnbYO4dqM= ) ;; Query time: 160 msec ;; SERVER: 149.20.64.20#53(149.20.64.20) ;; WHEN: Tue Jun 12 12:17:01 2012 ;; MSG SIZE rcvd: 829 Our internal validating nameservers report similar situation. BTW, the above is possible because geek.nz is fully DNSSEC enabled. Kind Regards, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

5 4

3G Link from Pohoi to Rotorua
by Andrew Hooper 09 Jun '12

09 Jun '12

Are there any engineers here working for one of the cell phone companies who may be able to help me contact the right person and build a portable 3G link to connect a fundraising event supporting Hospice and running from two locations Pohoi and Rotorua. I had thought of using a sat link but it needs to be a simple setup procedure and I only have 2 weeks to do it. Regards Andrew

1 0

NZRR Route Registry Update
by NZRR Database Notifications 08 Jun '12

08 Jun '12

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS23977 descr: Route set advertised to AS9439 by Katipo - AS23977 members: 192.54.130.0/24^24-29, 202.50.109.0/24^24-29, 203.97.152.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: simon(a)katipo.co.nz changed: rpsl-admin(a)nzix.net 20031217 changed: rpsl-admin(a)nzix.net 20040812 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS23977 descr: advertised to AS9439 by Katipo - AS23977 members: 192.54.130.0/24^24-29, 202.50.109.0/24^24-29, 202.70.130.0/24^24-29, 203.97.152.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: simon(a)katipo.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20120608 source: NZRR ------------------------------------------------------------

1 0

Hotmail.com live.com blocking NZ
by Steve Brorens 07 Jun '12

07 Jun '12

For all of this month we're seeing a wide IP ranges - from several local ISPs - being blocked by the hotmail.com and live.com mail servers. We understand that the ISPs concerned are working directly with Microsoft - anyone on this list able to give some feedback on progress? - steve ------------------------------ Steve Brorens Systems Architect CommArc Consulting Ltd Mail: sjb(a)commarc.co.nz Phone: 021 332289 ------------------------------ ========================================================= This e-mail has been scanned for Viruses and Content and cleared by Mail Marshal

5 4

Juniper console ports
by Ian Batterbee 07 Jun '12

07 Jun '12

Just a quick question to those using juniper MX series routers.. or perhaps any series - is there a known issue with the console port dying ? We've seen this happen on two different boxes - completely unresponsive after running for a few weeks, reboot doesn't fix it, and no output at all on it, even during the freebsd boot sequence. So before I start second and third-guessing what I've been doing to it, is this a known issue that people have seen elsewhere ?

8 8

APNIC Survey 2012 Ends Soon
by Elly Tawhai 07 Jun '12

07 Jun '12

________________________________________________________________________ APNIC Survey 2012 Ends Soon ________________________________________________________________________ Hi NZNOG Community, The APNIC Survey 2012 will close on Friday, 8 June at 17:00 (UTC +10). http://www.apnic.net/survey Contribute now to the operational planning and future direction of APNIC and be in the draw to win some great prizes! - Toshiba Z830 Ultrabook laptop - Samsung Galaxy Tab 10.1 - HTC One V mobile phone Please note, the Survey will only take a few minutes of your time and your responses are anonymous. ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

1 0

World IPv6 Day
by Pieter De Wit 07 Jun '12

07 Jun '12

Hi All, Not sure how many has seen this: http://www.worldipv6launch.org/participants/?q=2 Not a single NZ company ? Surely not... Cheers, Pieter

5 4

Fwd: DNCL Second Level Consultation and Submissions
by Andy Linton 06 Jun '12

06 Jun '12

Your views on this would be appreciated. -------- Original Message -------- Subject: DNCL Second Level Consultation and Submissions From: newsmail(a)dnc.org.nz To: asjl(a)lpnz.org CC: DNCL Second Level Consultation and Submissions The Domain Name Commission is proposing to extend the .nz domain name space by allowing anybody to register domain names at the ‘second level’. This has the potential to significantly alter New Zealand’s domain name space so it’s important we get your views. Key features of the .nz proposals include: Registration of .nz domain names could be at the second or third levels on an ongoing basis. Existing second level domains (such as .co.nz) will remain and continue to be supported. There will be no impact on any currently registered .nz domain names. Registrations at the second level will be on a “first come, first served” basis, except during the Sunrise Period and where there are currently multiple registrations of the same name in different second level domains. The Sunrise Period will be a designated window, where existing .nz domain name holders (registrants) can register their domain name/s at the second level if they are the only one that has that name at the third level. If two or more domain name holders have the same name at the third level, no-one will be able to register that name at the second level unless they obtain the consent of the other third level name holders. Alternatively, if all agree, it could become a second level domain instead. A temporary amendment to the Dispute Resolution Service Policy to cover sub-domains of generic domain names registered at the second level. The above list is a very brief overview of the proposals. The Consultation Paper at http://dnc.org.nz/content/Second_Level_Consultation_Paper.pdf and http://dnc.org.nz/content/Second_Level_Consultation_Paper.html provides more detail about what is proposed. It also includes marked up versions of the main policies affected so that people can get an indication of how it may be implemented. Each section of the Consultation Paper raises specific questions. Please respond to these questions or, more generally, to any of the issues raised through the online response from at https://www.research.net/s/dnc_consultation1. Submissions can also be made by email to policies(a)dnc.org.nz, by fax to (04) 495 2115, or by mail to P O Box 11881, Wellington. The closing date for submissions is midday on Thursday 27 September 2012. As submissions are received they will be published on this page. Related documents: Consultation notice and published submissions http://dnc.org.nz/second_level_proposal_c1 Consultation paper, with appendices http://dnc.org.nz/content/Second_Level_Consultation_Paper.pdf http://dnc.org.nz/content/Second_Level_Consultation_Paper.html Online submission form https://www.research.net/s/dnc_consultation1 FAQs http://dnc.org.nz/content/second_level_proposal_faq.pdf http://dnc.org.nz/content/second_level_proposal_faq.html Originally published 9am, Wednesday 30 May 2012 You have received this communication because you have subscribed to the DNC website at http://www.dnc.org.nz/ If you no longer wish to receive these emails, please send an email with 'Unsubscribe' in the subject line to unsubscribe(a)dnc.org.nz Or log into your account and turn off mail subscriptions

24 41