October 2018 - NZNOG - lists.nznog.org

new subnet not accepted by smx
by Paul Willard 09 Oct '18

09 Oct '18

Anybody here from smx? I'm advertising a new subnet. Upstream (vocus) suggests that smx may have incorrect routes? Contact me off list paul(a)paulwillard.nz

1 0

KSK Roll coming 12th October
by Jay Daley 08 Oct '18

08 Oct '18

For those of you who don’t know, the KSK Roll is happening starting at 5am on 12th October (11th October 16:00 UTC). More details here https://www.icann.org/resources/pages/ksk-rollover The quick guide on how to check/prepare your DNS servers is https://www.icann.org/en/system/files/files/ksk-rollover-quick-guide-prepar… cheers Jay -- Jay Daley jay(a)daley.org.nz +64 21 678840 skype: jaydaley twitter: @jay_daley linkedin: www.linkedin.com/in/jaydaley

1 1

Spoofer Report for NZNOG for Sep 2018
by CAIDA Spoofer Project 07 Oct '18

07 Oct '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Sep 2018: ASN Name Fixed-By 4764 wideband-as-au 2018-09-01 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-09-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

IPv6 / Cisco ASA / 2degrees UFB
by Bill Walker 06 Oct '18

06 Oct '18

Hi All, I’ve been quite happily running a Cisco router at home on Snap/2degrees, but with the upgrade to UFB its not coping with the throughput. I’ve managed to locate a suitably equipped ASA, however I cant get IPv6 going. The config I have on the ASA is very similar to that of the router: nterface GigabitEthernet0/7 description 2degrees nameif EXTERNAL security-level 0 no ip address ciscoasa# sh run int gi0/7.10 ! interface GigabitEthernet0/7.10 description 2degrees vlan 10 nameif 2degrees10 security-level 0 pppoe client vpdn group 2degrees ip address pppoe setroute ipv6 address autoconfig ipv6 address dhcp ipv6 enable ipv6 dhcp client pd 2degrees-v6 However, if I remember correctly the IPv6 dhcp assignment happens inside the PPPoE connection once its established. Can anyone confirm that or provide a working config? In case someone wants versions, the ASA is on 9.9.2 (asa992-smp-k8.bin) Thanks, Bill Sent from Mail for Windows 10

6 8

Re: [nznog] Comcom/Samknows broadband testing from a different perspective
by Brian Cole 01 Oct '18

01 Oct '18

Hi all, Longtime listener; first time caller. I signed up to SamKnows (partly out of curiosity and partly so I can have hard data about my connection that I pay for) at home. Over the last week my connection has gone from slightly adequate with the occasional drop out to a slow connection with regular drop outs. Netflix and YouTube are stuttering, video games drop connection, and websites hang at random times. I can't help but think that the email shared by Dylan sheds some light on why that maybe. This programme won't be terribly successful if everyone gets sick of having a terrible connection during peak hours and shuts the white box down. Pretty frustrating. Brian -- *Brian Cole* */** Research Projects Developer* *Research & Enterprise **/** Research Office **/** University of Waikato* *Private Bag 3105* */* *Hamilton 3240* */* *New Zealand**www.waikato.ac.nz* <http://www.waikato.ac.nz/> */* *mob + 64 21 049 9183**email brian.cole(a)waikato.ac.nz <brian.cole(a)waikato.ac.nz> *

10 13