- NZNOG - lists.nznog.org

NZNOG 2020 Streaming
by Dave Mill 30 Jan '20

30 Jan '20

Hi all https://youtu.be/yHEadTFFFpg Note, this URL may change but our website will always have an up to date URL. www.nznog.org Cheers Dave

2 2

Fwd: RIP: Bill Manning
by Mark Foster 28 Jan '20

28 Jan '20

Not sure how many of you read NANOG. We hosted Bill at NZNOG 2009 in Auckland, and Dunedin 2008. May he rest in peace. -------- Original Message -------- From: Brett Watson <brett(a)the-watsons.org> Sent: 28 January 2020 9:34:44 AM NZDT To: nanog(a)nanog.org Subject: RIP: Bill Manning I was saddened to see this yesterday, that Bill Manning had passed. I was surprised this morning that it hadn’t hit NANOG yet but thought I’d post something because I have a ton of respect for Bill as I’m sure many here do. I met Bill as a very young, thought-I-knew-everything network engineer around ’92 when I was starting my internet life at a small ISP in Houston. Bill was visiting Stan Barber @ Sesquinet, which was my upstream provider at the time via T1, if I remember it all correctly. I was young, fresh out of college with a CS degree, and learning this “internet thing.” I met with Bill on campus at Rice University to discuss networking/routing, and Bill taught me CIDR, which I had no f-ing idea at that time what it was. Bill was always gracious and willing to share/teach. We always chatted and stayed in touch at NANOG and IETF conferences and through his relationship with Los Nettos over the years. Most notable, to me, was 2007 when my youngest daughter was diagnosed with cancer, and I believe Bill’s wife had (or previously battled) cancer as well. I hadn’t seen Bill for a few years, but he immediately reached out, shared his positive thoughts/prayers, and kept in touch during the battle we went through. Bill cared about people, and as noted below, he was smart as hell, and always had a crazy idea for how to solve a problem. Also as noted in Rod’s note below, Bill had a wealth of music knowledge and could always recommend something new and interesting to listen to. I’ll definitely miss Bill, and his passing makes me feel the years, and the mileage, but in a good way. -b >> This morning I talked to Julie Manning, Bill's wife. Bill died early >> Saturday morning, at home in Oregon. Most of you know Bill was >> waiting for a new heart. He would perhaps have gotten one next >> month. I guess the old one just wouldn't hold out long enough. >> >> I first met Bill in about 1995, when I returned to ISI after my first >> stint in Japan. He had taken a position in the Los Nettos project at >> ISI, a regional network project in the days when Internet service and >> operations work was still heavily shared between business and >> academia. Bill brought an operator's eye to the project, often seeing >> things differently from the researchers in the group. >> >> Bill kept the most erratic hours of any non-student I've ever met. He >> might be in the office at 2am or at 2pm, either was equally likely. >> I'd ask, "Bill, what time did you come in?" He'd reply, "10am." "I >> was here before that, and you were already here, it must have been >> earlier." "Greenwich Mean Time." >> >> And in one phase of life, "Bill, where do you live?" "Seat 4A." He >> would speculate about his average altitude and speed over the previous >> month. >> >> And, like any good geek, Bill had a spectacular collection of tie-dye >> t-shirts. He came by the look honestly: growing up in the Bay Area, >> he had actually snuck into Grateful Dead rehearsals held in a barn, >> and had traveled as a deadhead for a while. >> >> At ISI, we called Bill "the bad idea fairy". He always brought a >> slightly-off-kilter view of technical problems, which triggered >> endless discussions of fascinating, if usually implausible, >> alternatives. >> >> He had the most broad-ranging musical tastes of anyone I knew, and >> would eat almost anything (though, like me, he didn't drink alcohol). >> I was often envious of his eating and musical experiences. He >> certainly lived life to its fullest. >> >> On one occasion, I recall, we were eating lunch in a Thai restaurant >> for the first time. Bill called for the food "the way you'd make it >> in Thailand". The waiter went back into the kitchen and came out with >> a few raw Thai chiles. Bill ate one whole, without even breaking a >> sweat. The owner of the restaurant immediately came out to see who >> was eating them. Pam became a friend to our group. >> >> On other occasions, when the waiter asked for his order, Bill would >> point to another person at the table, and say, "I'll have what she's >> having." "Well, what is she having?" "I don't know, I haven't heard >> her say." Once in a while, he would point to someone else in the >> restaurant and say, "I'll have what they are having." It was funny >> and sometimes disconcerting, which was very Bill, and it was also his >> way of making sure he himself was eating (and thinking and doing) as >> broadly as possible, without getting stale. >> >> Bill worked in a bakery before joining Texas Instruments and >> accidentally falling into computer networking. (When we first met, he >> was commuting between Houston and L.A.; Julie and the kids were still >> in Houston.) I believe he attended a series of colleges but never >> finished his bachelor's degree. Just a few years ago, however, Jun >> Murai convinced him to get a Ph.D.; this took clearing administrative >> hoops to demonstrate that Bill's life experience matched that of a >> bachelor's degree, which it certainly did. I was honored to be on his >> Ph.D. committee. I literally created a "trouble ticket" accounting >> scheme to track change requests for his thesis. >> >> Bill was a valued member of the WIDE Project here in Japan. He worked >> with the DNS root operations group here, and participated in as many >> WIDE meetings as he could. He also came to Keio University's Shonan >> Fujisawa Campus when he was in Japan, and one of the best things about >> Bill was how seriously he took the students and their work, treating >> them like adult colleagues. >> >> Bill had friends on all seven continents, and for all I know on the >> International Space Station, as well. He was loved by us all. >> >> Julie does not plan to have a funeral immediately, so there is no need >> for flowers or the like. The family may do a memorial service in Utah >> in the spring. >> >> He was a unique and wonderful human being. And a good friend. >> Rest in peace, Bill. >> >> —Rod > -- Sent from a mobile device.

1 0

Re: Need emergency source for Chorus ONT power supply, or equivalent.
by Paul Adshead 26 Jan '20

26 Jan '20

Good option. Offline replies have also pointed me towards CDL and PBTech which are selling the same item (which includes a tiny UPS), as well as an offer of borrowing a genuine part. Thanks, Paul. On Mon, 27 Jan 2020, 09:23 Matthew Harrison (Primo), <matthewh(a)primo.nz> wrote: > Yeah cut it off the old one and splice it to the new one, I run all my > onts off 12v batteries with a charger > > Kind regards > Matthew Harrison > The Top Dog / Managing Director > The information transmitted, including attachments, is intended only for > the person(s) or entity to which it is addressed and may contain > confidential and/or privileged material. Any review, retransmission, > dissemination or other use of, or taking of any action in reliance upon > this information by persons or entities other than the intended recipient > is prohibited. If you received this in error, please contact the sender and > destroy any copies of this information. > ------------------------------ > *From:* Paul Adshead <paul.adshead(a)gmail.com> > *Sent:* Monday, January 27, 2020 9:13:01 AM > *To:* Matthew Harrison (Primo) <matthewh(a)primo.nz> > *Cc:* nznog <nznog(a)list.waikato.ac.nz> > *Subject:* Re: [nznog] Need emergency source for Chorus ONT power supply, > or equivalent. > > It needs the weird molex(?) Connector on the end though. > > On Mon, 27 Jan 2020, 09:10 Matthew Harrison (Primo), <matthewh(a)primo.nz> > wrote: > > Any 12v psu will do... > > Kind regards > Matthew Harrison > The Top Dog / Managing Director > The information transmitted, including attachments, is intended only for > the person(s) or entity to which it is addressed and may contain > confidential and/or privileged material. Any review, retransmission, > dissemination or other use of, or taking of any action in reliance upon > this information by persons or entities other than the intended recipient > is prohibited. If you received this in error, please contact the sender and > destroy any copies of this information. > ------------------------------ > *From:* Paul Adshead <paul.adshead(a)gmail.com> > *Sent:* Monday, January 27, 2020 09:09 > *To:* nznog > *Subject:* [nznog] Need emergency source for Chorus ONT power supply, or > equivalent. > > Chorus are sending a replacement, but I need options to buy or borrow one > for a number of days. Central/West Auckland location. > > Single point of failure and all that - doh.. > > Cheers, > Paul Adshead. > >

1 0

Re: Need emergency source for Chorus ONT power supply, or equivalent.
by Paul Adshead 26 Jan '20

26 Jan '20

It needs the weird molex(?) Connector on the end though. On Mon, 27 Jan 2020, 09:10 Matthew Harrison (Primo), <matthewh(a)primo.nz> wrote: > Any 12v psu will do... > > Kind regards > Matthew Harrison > The Top Dog / Managing Director > The information transmitted, including attachments, is intended only for > the person(s) or entity to which it is addressed and may contain > confidential and/or privileged material. Any review, retransmission, > dissemination or other use of, or taking of any action in reliance upon > this information by persons or entities other than the intended recipient > is prohibited. If you received this in error, please contact the sender and > destroy any copies of this information. > ------------------------------ > *From:* Paul Adshead <paul.adshead(a)gmail.com> > *Sent:* Monday, January 27, 2020 09:09 > *To:* nznog > *Subject:* [nznog] Need emergency source for Chorus ONT power supply, or > equivalent. > > Chorus are sending a replacement, but I need options to buy or borrow one > for a number of days. Central/West Auckland location. > > Single point of failure and all that - doh.. > > Cheers, > Paul Adshead. >

1 0

Need emergency source for Chorus ONT power supply, or equivalent.
by Paul Adshead 26 Jan '20

26 Jan '20

Chorus are sending a replacement, but I need options to buy or borrow one for a number of days. Central/West Auckland location. Single point of failure and all that - doh.. Cheers, Paul Adshead.

1 0

NZNOG2020 - Programme Available.
by Richard Nelson 22 Jan '20

22 Jan '20

The complete programme is now available at http://www.nznog.org/nznog-2020/nznog-2020-programme Registrations are going well. We are on track to just beat last years record attendance. Richard

1 0

Open Network User Group - Wellington network meetup 23/1/2020
by Alex White-Robinson 20 Jan '20

20 Jan '20

Kia ora koutou, I've been running a User Group in Wellington for the last three months - it's a place to discuss network implementations in the datacentre, service-provider or enterprise arena. The stated interests of the group are network ecosystem tools including monitoring and configuration deployment, as well as network technology topics ranging from protocol options to ASIC choices. To date, the user group has covered techologies including automatic pre-change testing, EVPN implementations in the DC, infrastructure as code and IPAM software. Our next meeting is on Thursday the 23rd of January, from 16:30 in the Thistle Inn, with a short (20 minute) talk from 5:15 in the Katherine Mansfield room. This month, we have a short presentation on monitoring and a demo of setting up prometheus, grafana & alertmanager as a network monitor suite. You can track the talks, published code repositories and slide decks @ https://www.meetup.com/Open-Network-User-Group. Registration/RSVP is not required for those wishing to attend. Cheers, Alex White-Robinson.

1 0

The Times Change
by Donald Neal 20 Jan '20

20 Jan '20

Work is under way to remove Vocus New Zealand's AS9790 from Auckland Peering Exchange. This does not reflect a change in Vocus NZ's open peering policy and does not involve other Vocus AS's. In particular, there is no change to AS4826. * Donald Neal Donald Neal | Network Architect D: +64 9 929 2958E: Donald.Neal(a)vocusgroup.co.nz M: +64 27 808 1023W: vocusgroup.co.nz A: Level 5, 34 Sale St, Auckland 1010

3 2

Waikato Uni Contact for list.waikato.ac.nz?
by Simon Lyall 20 Jan '20

20 Jan '20

Anyone got a contact for the admins of list.waikato.ac.nz ? I looked at their contact page but it seems to be directed at staff/students. The problem is that https://list.waikato.ac.nz/ is not working on some browsers (Chrome, curl) and giving a cert error. It would appear the following intermediate cert: issuer=/C=BM/O=QuoVadis Limited/CN=QuoVadis Global SSL ICA G3 (which is the one that signs list.waikato.ac.nz) is the problem. It appears that it is built into firefox which is okay and possibly was included in Chrome in the past. https://www.waikato.ac.nz includes this intermediate cert in replies so it is not affected. -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

2 2

NZNOG 2020 brought to you by Cisco
by Nathan Ward 15 Jan '20

15 Jan '20

Hi all, NZNOG 2020 registrations are filling up, so if you’re a “late registerer” it’s worth getting in there ASAP so as not to miss out. http://www.nznog.org/nznog-2020 <http://www.nznog.org/nznog-2020> As you all know it’s based in Christchurch this year, so if you’re local and haven’t been to an NZNOG conference you should come along. We move the NZNOG conference around so that we can make it more accessible to people in each region, so, please take advantage of that! There’s a number of tutorials and workshops happening in the 2 days before the conference - most of these will appeal to any organisation with a router or two, not just service providers. They are really good value - thanks to the generosity of the trainers and our sponsors, what NZNOG charges for these is less than our costs, so much better value than industry training you’ll often see. Our conference keynote speaker is Dr. Paul Vixie, who’s also running one of those tutorials - Threat Hunting Using Passive DNS. This is a pretty rare chance get some training from one of the pioneers of the Internet and modern computing. This would be a great one if you’re more of an enterprise network as well as for service providers. This email will almost certainly reach you due to software Paul has written - cron, bind, dhcpd.. you get the idea. We’ve also got Red Hat providing a couple of different training sessions on Containers, and using Ansible for network config. APNIC are running a course on BGP basics, and another on ROA validation - very important if you’re doing any sort of BGP or peering these days. Sponsors this year are of course on our sponsors page - http://www.nznog.org/nznog-2020/sponsors-2020 <http://www.nznog.org/nznog-2020/sponsors-2020>, and include Cisco, InternetNZ, GoWireless, NZIX, Red Hat, Vocus, and Vodafone. Our sponsors make the NZNOG conference a reality and keep our prices low, so please check out our sponsors page for the full list, and make sure you thank them! -- Nathan Ward

1 0

citylink dns is down
by Jean-Francois Pirus 15 Jan '20

15 Jan '20

Their name servers are not responding. Anybody know how to contact them? It's a bit hard with their website and email not working :-) ns_name_01: ns1.citylink.co.nz ns_ip4_01: 202.8.44.226 ns_name_02: ns3.citylink.co.nz ns_ip4_02: 202.8.47.10 dig citylink.co.nz @202.8.44.226 dig citylink.co.nz @202.8.47.10 status: SERVFAIL -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

8 11

2talk Down
by Jesse Archer 30 Dec '19

30 Dec '19

...what a day for faults... Any Vocus / 2talk engineers on the list? 2talk website is down, sip packets are failing after this hop: 4 27-111-14-76.2talk.co.nz (27.111.14.76) 5.794 ms 7.590 ms 6.658 ms [image: facebook] <https://www.facebook.com/fullflavour.co.nz/> [image: twitter] <https://twitter.com/myfullflavour> Jesse Archer General Manager Full Flavour 07 579 9999 jesse(a)fullflavour.nz http://fullflavour.nz 148 Durham Street, Tauranga 3110

3 2

NZIX (AKL-IX) Route Servers BGP Flapping
by Jesse Archer 30 Dec '19

30 Dec '19

Started just after 6pm last night, 9 flaps since. Doesn't appear to be a problem with any of our bi-lats on AKL-IX. Can't get hold of anyone on the NZIX or IAA NOC numbers. [image: facebook] <https://www.facebook.com/fullflavour.co.nz/> [image: twitter] <https://twitter.com/myfullflavour> Jesse Archer General Manager Full Flavour 07 579 9999 jesse(a)fullflavour.nz http://fullflavour.nz 148 Durham Street, Tauranga 3110

2 1

Looking for a Microsoft operational contact
by Neil Gardner 17 Dec '19

17 Dec '19

I have a couple of questions about some regular traffic spikes we're seeing to parts of our infrastructure from various Microsoft owned prefixes around the world - if there's anyone from Microsoft on here that might be able to help me chase it up, please get in touch directly so I can understand if this is by design and has a purpose or is something one of us has to fix. Regards ________________________________ [spark] Neil Gardner Network Engineer Spark New Zealand T +64 4 802 9659 (extn 40659) M +64 27 651 9993 E Neil.Gardner(a)spark.co.nz Spark New Zealand Trading Limited ________________________________ This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Contract and Commercial Law Act 2017.

2 1

High Packet Loss using ADSL on Flip/Vocus Networks
by geoffrey.jackson＠protonmail.com 13 Dec '19

13 Dec '19

Prolonged periods of high packet loss. Started all of a sudden about a month ago. Was fine until then. Getting 14 Mbps with no jitter or packet loss. Now only getting 0.3 to 0.8 Mbps with lots of jitter and 12.5% packet loss. Can be bad for hours and then all of a sudden good for a few hours but then bad again. OK for email but too slow for browsing. Flip, my ISP, say they can't help. They advise that I go to fibre but I don't need it and I can't afford it. I might have to go through Telecommunications Dispute Resolution (TDR). Before I do I was wondering if anyone here might be able to explain what's going on. Like is Flip throttling my ADSL service to get me to go over to fibre? Or does Vocus need to upgrade its network to cope with all the new fibre users without marginalizing copper users? Any comments or advice would be much appreciated. Thanks.

2 2

NZNOG 2020 - Registrations are open!
by Dave Mill 28 Nov '19

28 Nov '19

Hi all Registrations are open to NZNOG 2020. http://www.nznog.org/nznog-2020 If you are a speaker or sponsor you should have received a discount code. If you haven't please contact us before attempting to register. Talks accepted so far have been published - http://www.nznog.org/nznog-2020/nznog-2020-talks We have some awesome training available on the Tue/Wed - http://www.nznog.org/nznog-2020/nznog-2020-tutorials We have discounted accommodation available, first in, first served - http://www.nznog.org/nznog-2020/nznog-2020-accommodation Look forward to seeing you there! Cheers Dave

1 0

Delivery Status Notification (Delay)
by Simon Lyall 22 Nov '19

22 Nov '19

Second go. On Sat, 23 Nov 2019, Simon Lyall wrote: > > This is a test message. Waikato recently moved their ouutgoing email to > google who likes to tell us every time emails are delayed by an hour. > > Since netspace.net.nz and whoever Perry uses for mail hosting are down we are > getting a few of these. > > In theory you won't see this but putting an explanation just in case you do. > > Simon. > NZNOG Moderator > > -- > Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ > "To stay awake all night adds a day to your life" - Stilgar > _______________________________________________ > NZNOG mailing list -- nznog(a)list.waikato.ac.nz > To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz > > -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

1 1

Delivery Status Notification (Delay)
by Simon Lyall 22 Nov '19

22 Nov '19

This is a test message. Waikato recently moved their ouutgoing email to google who likes to tell us every time emails are delayed by an hour. Since netspace.net.nz and whoever Perry uses for mail hosting are down we are getting a few of these. In theory you won't see this but putting an explanation just in case you do. Simon. NZNOG Moderator -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

1 0

Emergency Mobile Alert Nationwide Test 24th November
by Damian Kissick [TSY] 20 Nov '19

20 Nov '19

Kia Ora all, The Ministry of Civil Defence & Emergency Management will be testing the Emergency Mobile Alert system between 18:00hrs and 19:00hrs this Saturday (24th November). MCDEM has sent out a formal notification via their lifeline channels, but we thought it would nice to give a general heads up to NZNOG as the alert refers to www.civildefence.govt.nz. Feedback from network operators is welcome at opsteam at dpmc.govt.nz Cheers, - Damian -- Senior Network Engineer Corporate and Shared Services The Treasury / DPMC & MCDEM [UNCLASSIFIED] -- CONFIDENTIALITY NOTICE The information in this email is confidential to the Treasury, intended only for the addressee(s), and may also be legally privileged. If you are not an intended addressee: a. please immediately delete this email and notify the Treasury by return email or telephone (64 4 472 2733); b. any use, dissemination or copying of this email is strictly prohibited and may be unlawful.

2 2

BGP / Dedicated Server Option
by Matthew Matters 20 Nov '19

20 Nov '19

Hey Guys, We are an Australian hosting provider and in search of a NZ based dedicated server for a customer. We are struggling to find a reasonably priced server with BGP from a trusted company. Any replies off list would be greatly appreciated Regards, Matthew Matters Managing Director / CEO of Aus Net Servers Australia Pty Ltd Management Department | Small Business Hosting Sales & Services | Aus Net Servers Australia Pty Ltd P 03 5326 0050 | M 0402 711 135 | E mmatters(a)ausnetservers.net.au<https://www.ansamail.com.au/owa/redir.aspx?C=106998d21b72497a98b44c48875775…> | W www.ausnetservers.net.au<http://www.ausnetservers.net.au/>

3 2

FW: [AusNOG] Heads up: Super awful FreePBX RCE
by Mark Foster 19 Nov '19

19 Nov '19

NZNOG’s been a bit quiet lately! This might be of interest or relevance to NZ Operators, so FYI… Cheers Mark. From: AusNOG <ausnog-bounces(a)lists.ausnog.net> On Behalf Of Rob Thomas Sent: Wednesday, 20 November 2019 4:24 pm To: <ausnog(a)lists.ausnog.net> <ausnog(a)lists.ausnog.net> Subject: [AusNOG] Heads up: Super awful FreePBX RCE If you have any FreePBX machines floating around, now is the time to make sure they're up to date, ESPECIALLY if they're visible from the interwebs. https://www.reddit.com/r/VOIP/comments/dypp36/20191119_critical_freepbx_sec… I backdated it for those yanks who are living in the past, but it was discovered this morning. The quick summary is it's a trivial exploit, with the ability to escalate to a root shell - which means a pwned machine, all the attacker needs is unauthenticated visibility to any of the admin pages. Feel free to hit me up offlist if you need any more info. And yes, it was my code that was vulnerable, but in my defence it was 12 year old code, and the vulnerability was only just discovered now 8) --Rob

1 0

IPv6 Global Unicast Address Assignments Registry Update
by Selina Harrington 06 Nov '19

06 Nov '19

Hi, The IPv6 global unicast address assignments registry has been updated to reflect the allocation of the following block to ARIN: 2630:0000::/12 You can find the registry at: https://www.iana.org/assignments/ipv6-unicast-address-assignments/ The allocation was made in accordance with the Policy for Allocation of IPv6 Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/allocation-ipv6-rirs-2012-02-25-en Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

The Times Change
by Donald Neal 04 Nov '19

04 Nov '19

BGP sessions for Vocus New Zealand’s AS9790 with the Auckland Peering Exchange’s route servers were shut down this morning. This does not reflect a change in Vocus NZ’s open peering policy and does not involve other Vocus AS’s. In particular, there has been no change to AS4826. * Donald Neal Donald Neal | Network Architect D: +64 9 929 2958<tel:+64%209%20929%202958> E: Donald.Neal(a)vocusgroup.co.nz<mailto:Donald.Neal(a)vocusgroup.co.nz> M: +64 27 808 1023<tel:+64%2027%20808%201023> W: vocusgroup.co.nz<http://vocusgroup.co.nz> A: Level 5, 34 Sale St, Auckland 1010 [cid:image979000.jpg(a)682DCA25.913A1343]<http://www.vocusgroup.co.nz/> Donald Neal | Network Architect D: +64 9 929 2958E: Donald.Neal(a)vocusgroup.co.nz M: +64 27 808 1023W: vocusgroup.co.nz A: Level 5, 34 Sale St, Auckland 1010

1 0

The Times Change
by Donald Neal 29 Oct '19

29 Oct '19

Work is under way to remove Vocus New Zealand's AS9790 from Auckland Peering Exchange. We plan to shut down our peering with the exchange route servers in the coming fortnight. This does not reflect a change in Vocus NZ's open peering policy and does not involve other Vocus AS's. In particular, there is no change to AS4826. * Donald Neal Donald Neal | Network Architect D: +64 9 929 2958E: Donald.Neal(a)vocusgroup.co.nz M: +64 27 808 1023W: vocusgroup.co.nz A: Level 5, 34 Sale St, Auckland 1010

1 0

FW: [pacnog] APRICOT 2020 Fellowships
by Terry Sweetser 15 Oct '19

15 Oct '19

On behalf of APNOG and FYI, see below. Regards, Terry Sweetser General Manager, IX Australia Terry.Sweetser(a)ix.asn.au -----Original Message----- From: pacnog-bounces(a)pacnog.org <pacnog-bounces(a)pacnog.org> On Behalf Of Philip Smith Sent: Wednesday, 16 October 2019 9:09 AM To: PacNOG <pacnog(a)pacnog.org> Subject: [pacnog] APRICOT 2020 Fellowships Hi everyone, Fellowships for APRICOT 2020 can now be applied for! If you meet the eligibility criteria as per: https://2020.apricot.net/fellowship/overview/ please apply via that URL. Applications close on Monday, 28th October at 23:59 (UTC +8). Successful candidates will be notified from 22nd November onwards. The 2020 Programme ------------------ APRICOT provides financial support to network operators and engineers from these developing economies to build their Internet infrastructure capacity, network with Internet network professionals, and assist their professional development. The APRICOT 2020 Fellowship programme is especially interested to receive applications from qualified candidates living and working outside the major urban centres in the Asia & Pacific region. Women are especially encouraged to apply. What's included --------------- Successful fellows will receive: - 100% of the registration fees to either the workshop or conference - 100% of the accommodation costs (up to six nights for the workshop and up to five nights for the conference) - A contribution towards airfare and per diem up to a total of USD 400 for Australia/New Zealand based fellows and USD 700 for Asia & Pacific based fellows. More information ---------------- For more information about the key dates, eligibility and selection criteria, please visit: https://2020.apricot.net/fellowship/overview/ General Guidelines ------------------ To help with your application, please provide the information asked for. Personal CVs and employer mission statements are not suitable answers to any of the questions. Applicants should also seek approval from their employers before applying, as this will avoid disappointment later on. We look forward to receiving your application! Best wishes, Rupesh Shrestha, Aftab Siddiqui, Philip Smith APRICOT Fellowship Committee Chairs -- _______________________________________________ pacnog mailing list pacnog(a)pacnog.org https://mailman.apnic.net/mailman/listinfo/pacnog

1 0

Spoofer Report for NZNOG for Sep 2019
by CAIDA Spoofer Project 07 Oct '19

07 Oct '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Sep 2019: ASN Name Fixed-By 55850 TRUSTPOWERLTD 2019-09-18 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2019: ASN Name First-Spoofed Last-Spoofed 4768 VFNZ-INET 2019-09-14 2019-09-14 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Call for Papers - NZNOG 2020 conference
by Richard Nelson 11 Sep '19

11 Sep '19

Yes it is that time again - plan your talks... The NZNOG trustees invite papers for the 17th annual NZNOG conference, to be hosted at the Rydges Latimer Hotel in central Christchurch on 30 and 31 Jan 2019. With the conference there will be a three day Workshop 27-29 Jan and a day of tutorials on 29 Jan. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in talks that involve real world deployment experience, particularly in New Zealand. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 28 Oct (Labour day). Please provide your talk title, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements you need to let us know at submission time. This year conference registration for accepted presenters will be free. To submit your paper please e-mail: talks(a)nznog.org Proposals will be evaluated on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog-2020/call-for-papers-2020 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

A very interesting presentation from NLNOG
by Mark Prior 08 Sep '19

08 Sep '19

Do yourself a favour and spend some time reading this presentation. <https://nlnog.net/static/nlnogday2019/3_NLNOG_day_2019_Erik_Bais_Working_un…> Mark.

3 2

Re: A very interesting presentation from NLNOG
by Scott Weeks 06 Sep '19

06 Sep '19

--- mrp(a)mrp.net wrote: From: Mark Prior <mrp(a)mrp.net> Do yourself a favour and spend some time reading this presentation. <https://nlnog.net/static/nlnogday2019/3_NLNOG_day_2019_Erik_Bais_Working_un…> -------------------------------------------- I learned this lesson long ago. It was really important for my mental health to do what it says. Try it. scott _______________________________________________ NZNOG mailing list -- nznog(a)list.waikato.ac.nz To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz

1 0

Invitation to participate in DMARC bootcamp
by Save Vocea 02 Sep '19

02 Sep '19

Dear NZNOG list members, (Apologies for any cross-posts as I’ve shared in regional NOG lists as well) Just thought I’d share this here in case there are interested ppl/orgs from NZ that want to join. Please read below. Regards, Save Vocea (ICANN.org staff in Oceania) ---<start>--- Link for registration: https://mailchi.mp/1833debd40eb/dmarcbootcamp On September 9th, GCA will start a 6-week DMARC Bootcamp. This bootcamp will guide participants to implement a DMARC - an effective way to limit the spoofing of email from protected domains. This bootcamp will guide participants to implement policy level of “none” after becoming acquainted with DMARC within the first few weeks. By the end of the bootcamp, participants will have enough information and confidence to move to the highest DMARC policy level of “reject” immediately or within a few months. DMARC is considered the industry standard for email authentication to prevent attacks in which malicious third parties send harmful email using a counterfeit address. DMARC stops email impersonation - by implementing DMARC, domains lower the odds of their domains being spoofed and used for phishing attacks on recipients. The result of a domain not implementing any form of DMARC policy is exposing its recipients to possible phishing attacks and, unsurprisingly, 91% of all cyber-attacks begin with a phishing email. Since June 2016, the Global Cyber Alliance (GCA) has been working to accelerate adoption of DMARCthrough advocacy, by providing a set of easy-to-use tools, and campaigns to drive deployment. GCA also measured the economic impact of DMARC. In just a few short years, GCA’s DMARC initiative has resulted in more than 5,700 organizations across more than 180 countries adopting DMARC. This has led to estimated financial benefits of more than $19 Million USD in 2018 across a diverse array of industries and governments. Moreover, the $19M estimate is merely from GCA’s activity. GCA’s other partners, including nonprofit organizations, commercial vendors, governments, and enterprises are also deploying and supporting the deployment of DMARC. For these organizations, the most-affected 1% of them will save $302,000 per year solely from reducing business email compromise (BEC) through DMARC, even assuming only 1% of BEC emails lead to action. If that number grows to 5%, the loss reduction for that 1% is $1.3M per year. Adding that up across the Internet is a big number, and that is from BEC losses alone. Starting September 9, GCA will run a 6 weeks bootcamp to enable organizations to learn about DMARC and support them in its implementation. Every step of the way, GCA and partners will assist with resources and guidance, including multiple webinars and demonstrations. (Please note that the below is subject to change and additional webinars and resources may be added as needed) • Timings for Webinars: Wednesday of each week o 7am EST (12pm BST, 1pm Paris), o 12pm EST (9am PST, 5pm BST, 6pm Paris) , o 12am EST (12pm Singapore, 2pm Sydney, AU) The agenda will be as follows: Weeks 1-2: Getting Started Overview of DMARC, SPF and DKIM Weeks 3-4: Time to Implement! Demonstrations on how to implement DMARC on Windows DNS, BIND and a Cloud-based DNS Provider. Weeks 5-6: On Going Management: Analyze, Review and Adjust What to look for in DMARC reports and what needs to be adjusted before moving to an enforcement policy More details on the modules are here: Weeks One-Two: Getting Started Sept 10th - Bootcamp introduction and DMARC: An Overview (60 min) This is the first webinar of the DMARC Bootcamp series. We will provide a brief overview of the bootcamp and then an overview of DMARC. Sept 18th - What are SPF and DKIM? (60 min) In this session we will be going over SPF and DKIM. We’ll cover the basics and options of performing DKIM key generation and signing. Weeks 3-4: Time to Implement! Sept 24 and Sept 30 - DMARC Technical Details and Windows DNS (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on Windows DNS. Sept 25 and Oct 2 - DMARC Technical Details and BIND (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on BIND server (Linux). Sept 26 and Oct 3 - DMARC Technical Details and Cloud DNS (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on Google Cloud DNS and 1&1.com<http://1.com>. Weeks 5-6: On Going Management: Analyze, Review and Adjust We will have multiple webinars from DMARC partners regarding DMARC reporting and next steps. Date and times are being set for these. Additional information and links will be forthcoming as the bootcamp advances. Please register for the bootcamp in order to receive the link for all of the webinars. Sign up to join the bootcamp and get updates about our Webinars and other resources as they become available. Please join us by registering at https://mailchi.mp/1833debd40eb/dmarcbootcamp . If you have any questions, contact gca-dmarc(a)globalcyberalliance.org<mailto:gca-dmarc(a)globalcyberalliance.org> .

1 0

[Misc] Research project on blacklists
by Anushah Hossain 16 Jul '19

16 Jul '19

Hi everyone, I'm a researcher at UC Berkeley and the International Computer Science Institute. My colleagues and I are working on evaluating and improving the accuracy of blacklists. As part of this work, we'd like to hear from you about the blacklists you currently use, what you perceive as their strengths and weaknesses, and any thoughts you have on how they might be improved. We've prepared an anonymous survey where you can share your views: https://berkeley.qualtrics.com/jfe/form/SV_200mg5hnQiAOgUl If you have five to ten minutes free today to fill it out, I would greatly appreciate your help! Thank you, and please don't hesitate to respond to me with comments or questions. (Apologies if you receive this message twice - trying to minimize cross-posting while still reaching a broad audience) Best, Anushah -- Anushah Hossain, PhD Student Energy and Resources Group, UC Berkeley

1 0

Using Cloudflare after Christchurch
by Peter Lambrechtsen 09 Jul '19

09 Jul '19

I don't think this question has been asked but I think it's worth asking. After the Christchurch attacks and the fact that Cloudflare clearly support terrorist and white supremacist sites has there been any consideration on if peering or engaging with Cloudflare is something that providers no longer wish to participate in. Or there isn't a sense of morality when it comes to the internet. Cloudflare have a LONG history of not caring about any and all vile material and have absolutely no intention to do anything about it from the engagements I have had with them post Christchurch. https://arstechnica.com/tech-policy/2017/05/cloudflare-changes-abuse-policy… https://www.theregister.co.uk/2018/12/19/cloudflare_terror_groups/ https://suespammers.net/tag/cloudflare-com-doing-nothing-about-spam-abuse/ https://krebsonsecurity.com/tag/cloudflare/ https://www.propublica.org/article/how-cloudflare-helps-serve-up-hate-on-th… To me they are clearly supportive of all sorts of vile content and have zero interest in doing anything about it while they still earn money. Has the horrific events of Christchurch given anyone pause to think if they want to engage with Cloudflare? Are morals important when running a service?. Peter

9 20

Shutting down the RPKI Validator
by Sebastian Castro 03 Jul '19

03 Jul '19

Hello, community: Back in 2014 InternetNZ (NZRS at that time) set up and made publicly available an RPKI Validator (validator.rpki.net.nz). It allows network engineers to test ROA validation in their routers without the hassle of setting up and maintaining their own. During the last five years, very little use has been given to the validator, with one registered user during that time. Currently, we are using a piece of old software that’s no longer maintained. With that in mind, we’d like to announce we’ll be shutting down validator.rpki.net.nz on 15 July 2019. We might rebuild the service if there is a need from the community using modern software, so please let us know if you would like it back. In the meantime, we appreciate the involvement of the NZNOG community with the validator, including a couple of presentations making reference to the service in the last years. Kind Regards, -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

decent SOHO switches?
by Richard Hector 01 Jul '19

01 Jul '19

Hi all, I hope this isn't too far off topic. What's available in the way of managed switches (at least including 802.1q VLANs) at a suitable price for a small office? The (8-port) one I bought 4 years ago, even at the time the https ui didn't work, because browsers had stopped supporting old certs or ciphers or something. I raised it with the wholesaler, who raised it with the manufacturer - no new firmware ever came out. I couldn't load my own cert onto it either. Is there anything better around, at a reasonable price? I'm not keen on what I understand is the cisco model either, where you have to maintain a support contract to get any updates. Stretching even further - I don't suppose there's anything out there with fully Free (as in freedom) firmware? Does SDN give us that? Feel free to reply off-list if you don't want to promote (or disparage) your suppliers (or self) in public :-) Cheers, Richard

5 8

IANA AS Numbers Registry Update
by Selina Harrington 12 Jun '19

12 Jun '19

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to APNIC: 139578-140601 Assigned by APNIC 2019-06-12 140602-141625 Assigned by APNIC 2019-06-12 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

IPv6 Global Unicast Address Assignments Registry Update
by Selina Harrington 06 Jun '19

06 Jun '19

Hi, The IPv6 global unicast address assignments registry has been updated to reflect the allocation of the following block to the RIPE NCC: 2a10:0000::/12 You can find the registry at: https://www.iana.org/assignments/ipv6-unicast-address-assignments/ The allocation was made in accordance with the Policy for Allocation of IPv6 Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/allocation-ipv6-rirs-2012-02-25-en Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

AusNOG 2019 Call for Presentations.
by Terry Manderson 18 May '19

18 May '19

Colleagues, Here starts the AusNOG 2019 Call for Presentations. I'm sure you have all been waiting with bated breath! AusNOG 2019 will be held on the 5th and 6th of September at Sofitel Melbourne. As usual we are making a call for people to submit proposals for talks at AusNOG 2019 that would be of interest to the Internet operations community, ie technical presentations and not sales talks. Previous year's feedback has strongly suggested that AusNOG participants prefer to hear from operators. So, we are especially looking for operators to share what they know! (for example, sharing experiences about the NBN, deployments, or things that truely impact operations). Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Speaking slots are typically 30 minutes, including Q&A time, although we can accommodate a limited number of requests for 45/60 minute slots. We would also entertain requests for 15 minutes. There will be a call for lightning talks (5 minutes) closer to the event. By submitting a presentation for consideration in the AusNOG 2019 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Presenters receive complimentary registration while those not selected will be offered registration at the early bird rate. Deadlines =-=-=-=-= 21 June: Submission of presentation title, presentation description (300 words), and presenter biography (150 words) 19 July: Presenters notified of their acceptance status as an AusNOG 2018 presentation. 16 August: Submission of final presentation slides as PowerPoint, Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions MUST be sent by email to organisers AT ausnog DOT net. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. Cheers Terry

1 0

Anyone using vMX for BNG?
by Jesse Archer 23 Apr '19

23 Apr '19

Happy Easter All. Wondering if anyone has any experience with Juniper vMX in BNG scenario? I'm investigating how we could scale beyond 4000 subs on our existing Juniper hardware. Regards, *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

3 2

Network roll call
by Jamie Baddeley 16 Apr '19

16 Apr '19

Hi, So Don's post made me think about how many networks do we have active today at 30 years old. What have I missed or which ones shouldn't be on here? So I skimmed the Chorus service providers list and the Wispa list but I didn't bother with the ISPANZ list or the NZNOG list (sorry mods) and came up with this (the count is the number of times they appeared in the Chorus Regions or WISPA list): 15 Wireless Nation 15 PrimoWireless 14 Worldnet 14 Warner Telecommunications Ltd 14 Wanna 14 Voyager 14 Vorco 14 Vodafone 14 Vocus 14 Telnet 14 Spark Digital 14 Solarix Networks Limited 14 Slingshot 14 SecureCom 14 PlanB 14 Orcon 14 New Zealand Technology Group 14 Network Edge 14 NOW 14 Kordia 14 Kiwilink 14 Inspire Net 14 HD Net 14 Business Technology Group 14 ACS Data 14 2degrees 13 Devoli 13 DTS 12 Xtreme Networks 12 2Talk 11 MyRepublic 10 Digital Island 9 nzwireless 9 Trustpower 6 Lightwire 5 Lightwire Business 5 Compass 4 Smartlinx 3 3 Vector 3 Trust Power 3 Hi-Tech Solutions 3 Fusion Networks 3 Fastcom 3 CityLink 2 Velocitynet 2 Unifone 2 NorthCloud 2 Network Tasman 2 Gisborne.net.nz 2 Bryte Internet Solutions 1 yrless 1 Zelan 1 Wireless Dynamics 1 Wifi Connect 1 Wicked Networks 1 Wanna Internet 1 WIZwireless 1 Vibe Communications 1 VelocityNet 1 Unicom New Zealand Ltd 1 Ultimate Broadband 1 The Pacific.net 1 Taylor Communications 1 OnNetworks 1 NetSpeed 1 Megatel 1 MATnet 1 Kiwi Wifi 1 Inspire 1 Fusion 1 Ezykonect 1 Evolution Networks 1 CountryNet 1 Connecta 1 AoNet Broadband 1 Amuri Here's the same list but using the Chorus Residential (instead of business) list: 15 Vorco 15 Vodafone 15 Slingshot 15 PrimoWireless 15 Devoli 14 Worldnet 14 Warner Telecommunications Ltd 14 Wanna 14 Telnet 14 Stuff Fibre 14 Spark 14 Orcon 14 New Zealand Technology Group 14 NOW 14 MyRepublic 14 Kiwilink 14 Inspire Net 14 ICONZ 14 Econofibre 14 Compass 14 Big Pipe 14 2degrees 14 2Talk 13 Skinny Broadband 12 Trustpower 10 Voyager 9 Vocus 8 nzwireless 6 Unlimited Internet 6 Nova Energy 4 Smartlinx 3 4 Farmside 3 Wireless Nation 2 Velocitynet 2 Unifone 2 Speedster Ltd 2 NorthCloud 2 Megatel 2 Gisborne.net.nz 1 yrless 1 Zelan 1 Wireless Dynamics 1 Wifi Connect 1 Wicked Networks 1 Wanna Internet 1 WIZwireless 1 VelocityNet 1 Unicom New Zealand Ltd 1 Ultimate Broadband 1 The Pacific.net 1 Taylor Communications 1 OnNetworks 1 NetSpeed 1 MATnet 1 Lightwire 1 Kiwi Wifi 1 Inspire 1 Gisborne 1 Ezykonect 1 Evolution Networks 1 CountryNet 1 Connecta 1 Bryte 1 AoNet Broadband 1 Amuri And this is the two combined (with some edits to remove obvious overlaps). For those of you with big numbers, you win a biscuit. But as an aside 80 different brands operating in either wireless or fibre. Wow! 30 Wanna 30 PrimoWireless 30 Inspire 29 Vorco 29 Vodafone 29 Slingshot 29 Devoli 28 Worldnet 28 Warner Telecommunications Ltd 28 Telnet 28 Spark 28 Orcon 28 New Zealand Technology Group 28 NOW 28 Kiwilink 28 2degrees 26 2Talk 25 MyRepublic 24 Voyager 24 Trustpower 23 Vocus 19 Compass 18 Wireless Nation 17 nzwireless 14 Stuff Fibre 14 Solarix Networks Limited 14 SecureCom 14 PlanB 14 Network Edge 14 Kordia 14 ICONZ 14 HD Net 14 Econofibre 14 Business Technology Group 14 Big Pipe 14 ACS Data 13 Skinny Broadband 13 DTS 12 Xtreme Networks 12 Lightwire 10 Digital Island 8 Smartlinx 3 6 Unlimited Internet 6 Nova Energy 4 Velocitynet 4 Unifone 4 NorthCloud 4 Gisborne.net.nz 4 Fusion 4 Farmside 3 Vector 3 Megatel 3 Hi-Tech Solutions 3 Fastcom 3 CityLink 3 Bryte 2 yrless 2 Zelan 2 Wireless Dynamics 2 Wifi Connect 2 Wicked Networks 2 WIZwireless 2 VelocityNet 2 Unicom New Zealand Ltd 2 Ultimate Broadband 2 The Pacific.net 2 Taylor Communications 2 Speedster Ltd 2 OnNetworks 2 Network Tasman 2 NetSpeed 2 MATnet 2 Kiwi Wifi 2 Ezykonect 2 Evolution Networks 2 CountryNet 2 Connecta 2 AoNet Broadband 2 Amuri Discuss! cheers jamie

4 3

Internet in NZ: 30 years today
by Don Stokes 16 Apr '19

16 Apr '19

Since nobody else seems to have noticed ... ... today is the 30th anniversary of the Internet reaching NZ. On 16 April 1989, John Houlker plugged in the PACCOM link connecting the University of Waikato, via an analogue circuit on the ANZCAN cable,to the University of Hawaii and thence to the Internet. https://www.youtube.com/watch?v=98xdUWja_aM Also of note was that on 1 April 1989, the Telecommunications Amendment Act 1988 came into force, formally ending the century-old NZPO/Telecom regulated telecommunications monopoly. (The de-facto monopoly took a bit longer to dismantle.) -- Don Stokes, don(a)nz.net <mailto:don(a)nz.net>, 021 796 072

3 7

LocalCloud IaaS | service closure
by Peter Mott 15 Apr '19

15 Apr '19

Hello NZNOG'ers! A quick heads up that I have closed down LocalCloud’s VMware IaaS clusters in Auckland and Hamilton. For me this means semi retirement. I would like to thank the folk here who have helped us along the way from the mid 1990’s through to today. First with 2Day Internet, and then LocalCloud. It’s been a blast, but it's now time for me to find other things to occupy my time. I will for the time being continue to take care of the .AQ (Antarctica) ccTLD and a hand full of customers who migrated to Microsoft Azure. We have some useful IPv4 net blocks we would like to transfer to another APNIC member. Also available is a bunch of Dell (compute and storage) and Juniper kit (EX and MX series). None of this is free, but I am keen to move it on so we can get our living room back! Please indicate your interest by contacting me off list. So long, and take care out there. regards Peter Mott LOCALCLOUD LIMITED +64 21 279 4995 -/-

2 1

IPv6 Global Unicast Address Assignments Update
by Selina Harrington 12 Mar '19

12 Mar '19

Hi, The IPv6 Global Unicast Address Assignments registry has been updated to reflect the allocation of the following block to the RIPE NCC: 2001:3c00::/22 RIPE NCC 2019-03-12 You can find the registry at: https://www.iana.org/assignments/ipv6-unicast-address-assignments/ Best regards, -- Selina Harrington Lead IANA Services Specialist

1 0

IPv4 Recovered Address Space Update
by Selina Harrington 01 Mar '19

01 Mar '19

Hi, The IPv4 Recovered Address Space registry has been updated according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… The global policy can be found at: https://www.icann.org/resources/pages/allocation-ipv4-post-exhaustion-2012-… Kind regards, -- Selina Harrington Lead IANA Services Specialist

1 0

APNIC EC ELECTION - NOMINATIONS
by Justin Kaitapu 18 Feb '19

18 Feb '19

Dear Members, Initially, I was aware that being nominated to the Executive Council Member election for APNIC would be a challenge for anyone in the Pacific Region, mainly due to proportion and members within our Pacific Region. Having being nominated, I'm humbled to at least give it a try. I seek your support and vote for the Executive Council Member of APNIC, if voted in, quite humbly I will be your voice for Oceania within the Council. It is in my view that having a member within the Pacific Region will be advantageous to all of us. I understand the voting process is a simple matter for those of you who are members of APNIC, using your access to your myapnic and just follow the voting tab. For more details and information on APNIC EC Election Nominees, please refer to https://conference.apnic.net/47/elections/nominations/ I thank you in advance for your support. Malo, Justin Kaitapu | | | EziNET Tonga Ltd Dateline Bld, Hala Bypass, Ma'ufanga, Nuku'alofa P.O Box 2867, Kingdom of Tonga. South Pacific. P (+676) 550-0000 | M (+676) 875-1853 (+64) 2825587361 | justin.kaitapu(a)ezinet.to<mailto:justin.kaitapu(a)ezinet.to> ------------------------------------------------------------------------ Notice of Confidentiality: "This e-mail and any attachments to it (the "Communication") is, unless otherwise stated, confidential, may contain copyright material and is for the use only of the intended recipient. If you receive the Communication in error, please notify the sender immediately by return e-mail, delete the Communication and the return e-mail, and do not read, copy, retransmit or otherwise deal with it. Any views expressed in the Communication are those of the individual sender only, unless expressly stated to be those of relevant business or entity of the sender, we do not accept liability in connection with the integrity of or errors in the Communication, computer virus, data corruption, interference or delay arising from or in respect of the Communication."

1 0

Vodafone mail admin contact
by Richard Gray 13 Feb '19

13 Feb '19

Hi, Can anyone on the list put me in contact with an email administrator at Vodafone? We (SMX) have been seeing mail delivery problems to Vodafone properties (vodafone.co.nz, clear.net.nz, etc) from several locations for the past day or so. Please contact me off list. Thanks, -- *Richard Gray* | Operations Technical Lead *Mobile:* +64 21 050 8178 *DDI:* +64 9 950 2196 *Freephone:*0800 SMX SMX (769 769) *SMX Limited:* Level 10, 19 Victoria Street West, Auckland, New Zealand SMX | Cloud Email Hosting & Security <https://smxemail.com> _____________________________________________________________________________ This email has been filtered by SMX. For more info visit http://smxemail.com _____________________________________________________________________________

5 5

Spoofer Report for NZNOG for Jan 2019
by CAIDA Spoofer Project 07 Feb '19

07 Feb '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jan 2019: none inferred Source Address Validation issues inferred during Jan 2019: ASN Name First-Spoofed Last-Spoofed 55785 MAXUM 2017-02-18 2019-01-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

DNS flag day - more info somewhere?
by Richard Hector 30 Jan '19

30 Jan '19

Hi all, I hope this is more or less on topic ... I've been testing my zones with the tool at https://dnsflagday.net/ and getting results I don't entirely understand. I get errors from my secondary (ns2), which is a service from my VPS provider, and ok from my master (ns1), which I run myself. But apart from ns2 returning an aa flag for a failed query, I can't see any difference in the results, when I run the query manually from my desktop (having upgraded dnsutils to one that supports +nocookie) Additionally, the tool says an SOA record is returned (from the failed query), and I don't see that. Is there more detailed info somewhere? The tool does say my zone will continue to work but will have issues in the future, so I'm not immediately worried. Cheers, Richard

4 5

Call for Lightning talks
by Richard Nelson 30 Jan '19

30 Jan '19

We have a slot for lightning talks tomorrow afternoon in the NZNOG conference. Talks should be five minutes or less. If anyone has a talk that they would like to give, could you please email the title, and topic (one sentence) to talks(a)nznog.org Thanks, Richard

1 0

NZNOG 2019 - About to get underway, incl. streaming link
by Nathan Ward 30 Jan '19

30 Jan '19

Hi! We’re about to get underway with NZNOG 2019. Great to see everyone here. Reminder that the programme is on the website, and on the screens in the lobby. The stream will be available at http://thevideo.nz/nznog <http://thevideo.nz/nznog> during the sessions. This will 302 to Youtube, but the Youtube URI will change each session, so hit this each time and it’ll get you there. It’s on the website as well. -- Nathan Ward

1 0

Slack trial / potential use case at conference
by David Young 28 Jan '19

28 Jan '19

Hey NZNoggers, I see that there's a trial of Slack for realtime/conference discussions (http://www.nznog.org/slack) I'm keen to try this out pre-conference, and I understand (above) that I need an existing member to invite me. Can an existing NZNOG slack member please message me off-list to setup an invite? Thanks! D

2 1

Re: [nznog] Tongan Internet Outage
by Mehmet Akcin 27 Jan '19

27 Jan '19

resending without the attachment - i have uploaded here instead. https://twitter.com/mhmtkcn/status/1089759385373425670 On Sun, Jan 27, 2019 at 9:33 PM Mehmet Akcin <mehmet(a)akcin.net> wrote: > here is an interesting datapoint. I believe the cable repair ship that is > going to Tonga is TE Subcom's Reliance. > > https://www.marinetraffic.com/en/ais/home/shipid:711444/zoom:9 > > [image: Screen Shot 2019-01-27 at 9.31.16 PM.png] > > On Sun, Jan 27, 2019 at 6:25 PM Mehmet Akcin <mehmet(a)akcin.net> wrote: > >> Interesting and thank you for sharing >> >> I am running https://dev.networkatlas.org >> >> If you have any more data, i would love to update. >> >> Mehmet >> >> On Sun, Jan 27, 2019 at 16:17 Pete Mundy <pete(a)fiberphone.co.nz> wrote: >> >>> >>> There was an interview with the deputy CEO of Tonga Communications Corp >>> in Dateline Pacific on Friday which had some more information for those >>> interested: >>> >>> >>> https://www.radionz.co.nz/international/programmes/datelinepacific/audio/20… >>> >>> It mentions that the breaks in the two separate cables are 5km apart yet >>> occurred at the same time. >>> >>> The interviewee's comments suggest that the satellite provider may be >>> putting thumbscrews on for long-term commitments before approving >>> additional capacity. >>> >>> It's a shame Google don't have a spare loom balloon to send their way to >>> patch into some Facebook style satellite laser backhaul! >>> >>> >>> > On 28/01/2019, at 12:59 PM, Mark Foster <blakjak(a)blakjak.net> wrote: >>> > >>> > Surprised I hadn't seen much news on this, tripped over it whilst >>> looking >>> > into other things. >>> > >>> > >>> https://www.radionz.co.nz/international/pacific-news/381086/tongans-urged-t… >>> > >>> > Related articles indicate that there's two breaks to submarine cables >>> > offshore and they don't know what caused it yet, but it's likely to be >>> at >>> > least a week before repairs are completed. >>> > Limited capacity in the interim (Satellite only, maybe?) >>> > >>> > Cheers >>> > Mark. >>> >>> _______________________________________________ >>> NZNOG mailing list >>> NZNOG(a)list.waikato.ac.nz >>> https://list.waikato.ac.nz/mailman/listinfo/nznog >>> >> -- >> Mehmet >> +1-424-298-1903 >> >

1 0

Tongan Internet Outage
by Mark Foster 27 Jan '19

27 Jan '19

Surprised I hadn't seen much news on this, tripped over it whilst looking into other things. https://www.radionz.co.nz/international/pacific-news/381086/tongans-urged-t… Related articles indicate that there's two breaks to submarine cables offshore and they don't know what caused it yet, but it's likely to be at least a week before repairs are completed. Limited capacity in the interim (Satellite only, maybe?) Cheers Mark.

3 2

New Chorus ONT - ACS changes required.
by Brent Marquis 24 Jan '19

24 Jan '19

Hi folks, It is looking to me like some of the technical detail around this is not getting through to all of the right people In all of the right RSPs. The important headline is that if you are an RSP and use the POTS port on our ONTs for your voice service, you *MUST* make ACS updates or voice will not work on the new ONT. If you weren’t in the meeting we had on Wednesday afternoon and you look after an RSP ACS for UFB ONTs, can you please get in touch. We are running an internal staff trial for the new ONTs from 4th Feb, with production launch early March. When the production launch hits, the new ONT will be popping up on Chorus UFB connections (new installs and fault replacements). Further detail here, but please get in touch with myself and/or your SDM if you have questions or need any assistance. https://sp.chorus.co.nz/product-update/3rd-generation-ont-phase-1-rollout-s… Thanks, Brent Brent Marquis Senior Network Design Engineer T +64 4 8964169 M +64 27 2290923 E Brent.Marquis(a)chorus.co.nz PO Box 632 Wellington 6011 www.chorus.co.nz Aon Hewitt Best Employer in Australasia 2012-2017 Aon Hewitt Best of the Best Employers in Australasia 2015  Please consider the environment before printing this e-mail _______________________________________________________________________________ The content of this email (including any attachments) is intended for the addressee only, is confidential and may be legally privileged. If you’ve received this email in error, you shouldn’t read it - please contact me immediately, destroy it, and do not copy or use any of the content of this email . No confidentiality or privilege is waived or lost by any mis-transmission or error. This communication does not designate an information system for the purposes of Part 4 of the Contract and Commercial Law Act 2017. Although we have taken reasonable precautions to ensure no viruses are present in this email, we cannot accept responsibility for any loss or damage arising from the use of this email or its attachments.

1 0

Conference updates
by Richard Nelson 21 Jan '19

21 Jan '19

Conference registrations have now reached 162 people. This is the highest number I can recall for any NZNOG conference. For catering we will cap registrations at 170 so we are down to the final few places left. The programme for this year is now available: http://www.nznog.org/nznog-2019/nznog-2019-programme Richard

1 0

DNS Flag day - What you need to know
by Sebastian Castro 15 Jan '19

15 Jan '19

Hello: Starting in July 2018 InternetNZ has been monitoring and measuring how .nz domains will be affected by DNS Flag day. For those who don't know, DNS Flag Day, or 1 February 2019, has been set by a number of DNS software developers as a coordinated day to release new DNS software versions. The changes will remove DNS protocol workarounds related to EDNS. You can find more information at https://dnsflagday.net InternetNZ has been actively notifying affected DNS Operators, Registrars and Registrants in the past weeks, and the situation has greatly improved. If you haven't tested your authoritative nameservers, we strongly suggest you do. There are still a few high profile .nz domains affected. I'll be presenting about this topic during the next NZNOG meeting in Napier, with a description of what's changing, how the problem has been evolving for .nz and other interesting bits and pieces. There are a number of DNS software implementors involved, as well as a number of ccTLDs measuring and campaigning to reduce the number of domains affected. If you have any questions or comments, feel free to contact me. Cheers, -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Old Telstra Saturn Cable infrastructure in wellington.
by Jamie Baddeley 13 Jan '19

13 Jan '19

Hi, I had reason to try and contact Vodafone over the weekend due to some concerns about the mechanical integrity of their ageing overhead cable network. Basically there was a bit that was in danger of getting snagged by a bus or similar. No one on the helpdesk had a clue. The fact that they had overhead wires in a city in NZ seemed like a complete surprise to them. I'm emailing here because the standard routine did not work. This after being routed to several different desks. Does anyone here know how one would resolve an issue like this? Are VF even using this stuff anymore? If not, when are they going to start taking it down so apparent mismanagement of the "asset" doesn't pose a risk to the public? If they are still using it can someone advise the right place to call to get it quickly resolved? Or at least when someone says 'overhead cable infrastructure fault' the response is not 'you'll have to ring Chorus'. cheers jamie

4 4

NZNOG Slack
by Nathan Ward 09 Jan '19

09 Jan '19

Hi all, Some of you may have noticed that we recently added another page to the website describing the NZNOG Slack we're trialling. This particular one was created a few years back for conference organisation stuff, but we’re opening it up to others. Slack is a commercial chat product, which is used pretty widely by tech companies[1]. We’re using the free plan right now. We’ll see if we qualify for the non-profit thing to get the extra features, but, not really important at the minute. ** Why: There’s a few different Slacks in related industries in NZ that work really well, and most people I interact with professionally are in a couple of Slacks. It’s really useful to be able to drop someone a quick message, where email isn’t quite the right tool. The goal of the Slack is to facilitate real time conversations between people, and build some more direct relationships. You can have private chats with people when you’re debugging something. You can ask in the public channels for people to send you some traceroutes. You can post funny networking related things in the #random channel. You get the idea. The key really is real time. Also: If you have a clever idea for an integration that’s useful for NZ operators, please, let me know. Write a bot for your looking glass, that sort of thing. ** But what about: There is no intent to take away from the mailing list at all, and I would strongly encourage people to post important messages, requests, and all the usual stuff to this list in order to get a good audience. Of course, I’m aware of other places operators in NZ also discuss stuff that are not NZNOG - and we’ve no intent to take things away from those groups either. There is a #conference-2019 channel, for discussion of whatever’s going on at the conference, announcements, etc. In the past there’s been an IRC channel, and probably still is. ** What else should I know?: Some key notes: - The intent is that it’s for network operators in NZ, or people operating networks that touch NZ networks in some way. - Existing members can nominate new members through Slack itself, and then one of the admins will approve/reject. - The expectation is that discussions are not shared. - Don’t post secrets, passwords etc. There is a code of conduct, which you should read for more: http://www.nznog.org/slack/slack-code-of-conduct <http://www.nznog.org/slack/slack-code-of-conduct> ** How do I get on?: - We’re going to invite everyone who’s registered for the conference. I’m going to do that now, and update it with new registrations as they happen. - Ask someone who’s already on there, and they can nominate you. - Up until the conference, if you want on and the above don’t work, email me (nathan(a)nznog.org <mailto:nathan(a)nznog.org>) and tell me who you are and such, and I’ll invite you. -- Nathan Ward [1] Yes there are other “Free”, “Open”, etc. systems. Yes we could host our own system. The intent here is to get something that’s easy for the largest audience, and right now things tend to be looking towards Slack. This is a trial, so if something significantly better comes along then maybe we move to it - but let’s see if there’s value in this way of interacting first.

1 1

NZNOG 2019 Napier Update
by Dave Mill 09 Jan '19

09 Jan '19

Hi all Just an update on a few conference related things. We have so far sold 134 tickets to the conference proper. This puts us on track to be one of the biggest NZNOGs yet. This year we've specifically booked a large venue so we don't expect to sell out but who knows! Book soon if you want to be guaranteed a spot. Whilst we don't have a full programme just yet we've been updating the speaker list as we accept/confirm them - http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers TICSA workshop: After getting feedback on and off list we've arranged for a TICSA workshop at the conference. This is a practical session aimed at giving an operator the tools and knowledge to achieve TICSA compliance. A decent chunk of the session will be a tutorial on setting up OpenLI the free open source lawful intercept package ( https://openli.nz/ ) kicked off on this list, funded by our industry, and written by WAND. If you have TICSA obligations that you aren't currently achieving please come along. We also have two other workshops/tutorials available on SDN and network automation. Details here : http://www.nznog.org/nznog-2019/nznog-2019-workshop-and-tutorials Finally, for those of you who don't know, the NZNOG conference is made possible by the NZNOG Trust with support from InternetNZ. The NZNOG Trustees are currently: Dave Mill Richard Nelson Gerard Creamer Barry Murphy Nathan Ward Any questions please sing out on or off list. info(a)nznog.org Cheers Dave

1 0

Spoofer Report for NZNOG for Dec 2018
by CAIDA Spoofer Project 07 Jan '19

07 Jan '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Dec 2018: ASN Name Fixed-By 131291 LANWORXLIMITED 2018-12-09 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Dec 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-12-10 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

OpenBSD informal talk, Wellington, 23 January 2019
by Richard Procter 22 Dec '18

22 Dec '18

Hi, I'm posting this here at the suggestion of Dylan Hall and Neil Fenemor. A number of OpenBSD developers will be visiting Victoria University in January. As part of that, they will be giving an informal talk on what they have been working on recently, open to the public. A number of the OpenSSH and LibreSSL devs will be there, including Theo de Raadt, Bob Beck and Damien Miller, as well as one of the devs who spear-headed the OpenBSD response to Meltdown, among others. The venue is Lecture Theatre LBLT118, Laby Building, Victoria University, Wellington on 23 January starting at 14:00. Feel free to contact me if you've any questions. best, Richard.

2 1

CFP - INFOCOM19 ICCN Due on 30/12
by William Liu 10 Dec '18

10 Dec '18

INFOCOM19 1st International Workshop on Intelligent Cloud Computing &Networking (ICCN) - The Flyer URL (by tinyurl): https://tinyurl.com/infocom19-iccn-flyer - Info.+: https://tinyurl.com/infocom19-iccn Cheers Will(a)AUT, Auckalnd

1 0

CFP - ICC19 DDINS Due on 15 Jan
by William Liu 08 Dec '18

08 Dec '18

ICC19 1st International Workshop on Data Driven Intelligence for Networks & Systems (DDINS) URL (by tinyurl): https://tinyurl.com/icc19-ddins Cheers Will(a)AUT, Auckland

1 0

Spoofer Report for NZNOG for Nov 2018
by CAIDA Spoofer Project 07 Dec '18

07 Dec '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Nov 2018: none inferred Source Address Validation issues inferred during Nov 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-11-28 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Call For Presentations - DNS-OARC Workshop, Thailand, Bangkok, 12th/13th May 2019
by Sebastian Castro 05 Dec '18

05 Dec '18

(Apologies in advance if you see this message from multiple mailing lists) The 30th DNS-OARC Workshop will take place at the Shangri-La Hotel, Bangkok, Thailand, on May 12th and 13th 2019, hosted by ICANN. (Note that several co-located meetings are taking place immediately prior to the DNS-OARC Workshop, including the GDD Industry Summit, May 6th-9th, the Registrations Operations Workshop, May 9th, and the ICANN DNS Symposium, May 10th-11th.) The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A time slot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted until the start of the morning session on day two. There will be a Members-only session during the workshop, which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. Workshop Milestones: 05 Dec 2018 - Submissions open via Indico 22 Feb 2019 - Deadline for submission 01 Mar 2019 - Initial Contribution list published 22 Mar 2019 - Full agenda published 03 May 2019 - Deadline for slides submission 12 May 2019 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/31/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Shumon Huque, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Call for Interests to New Zealand SDN Workshop February 13th and 14th 2019 Wellington NZ
by William Liu 27 Nov '18

27 Nov '18

Call for Interests to New Zealand Software-Defined Networking (SDN) Workshop, February 13th and 14th, 2019 , Victoria University, Wellington. The workshop information can be found here (the Google Docs link is shortened by bitly): http://bit.ly/sdncon3 If with any inquire please do not hesitate to contact Associate Professor Dr Ian Welch <ian.welch(a)vuw.ac.nz<mailto:ian.welch(a)vuw.ac.nz>>. Cheers Will(a)AUT, NZ

1 0

KMZ help
by Mehmet Akcin 27 Nov '18

27 Nov '18

NZNOG friends, I am looking for help for https://dev.networkatlas.org project in NZ. I can't seem to be able to collect KZMs from people ;) if you are able to help us get KMZs (terrestrial) it would be great. thanks bunch in advance. ps; if you want to help in any other way, please reach out. mehmet

1 0

NZNOG 2019 registrations are open
by Dave Mill 26 Nov '18

26 Nov '18

Hi NZNOG 2019 registrations are open. Early bird pricing available for a limited time only! https://nznog-2019.lilregie.com/booking/attendees/new Conference details : http://www.nznog.org/nznog-2019 Current speakers (will be updated as we accept or pester more speakers) : http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers Accommodation : http://www.nznog.org/nznog-2019/nznog-2019-accommodation Hopefully see you there. Cheers Dave

1 0

Cisco routers for Beer
by Stuart Pigneguy 23 Nov '18

23 Nov '18

Hi All, Long time lurker here, just a quick note to see if anyone wants four Cisco 1720 routers before they go in the e-waste bin? There may also be other older Cisco kit on offer (Pix, switches etc). If there is interest please contact me off list with offers of postage and maybe beer, I am located in New Plymouth. Cheers, Stuart.

4 3

NZNOG 2019 update - registrations opening very soon
by Dave Mill 21 Nov '18

21 Nov '18

Hi all The NZNOG conference is being held in Napier during the week of 28 Jan to 1 Feb, 2019. The conference proper is held on the Thursday and Friday. Pricing and overview here - http://www.nznog.org/nznog-2019 We have scouted out accommodation for you - http://www.nznog.org/nznog-2019/nznog-2019-accommodation We have 3 different workshops available prior to the conference proper - http://www.nznog.org/nznog-2019/nznog-2019-workshop-and-tutorials We have accepted various talks and are starting to publish details on the following page - http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers If you haven't submitted a talk and are still keen please do so. We still have some time available. Registrations will open very soon! Feel free to book your travel and accommodation in the meantime. We have much more space for the conference proper than last year. Cheers Dave

1 0

Invitation to the free Domain Name Abuse Forum 27 November 2018 Wellington and evening stakeholder event
by Sebastian Castro 11 Nov '18

11 Nov '18

Hello NZNOG Community: InternetNZ and the Domain Name Commission are hosting a forum on domain name abuse issues in Wellington on Tuesday 27 November. There are various forms of abuse - content, infrastructure, and registration related - where the Domain Name System faces challenges, including challenges where other parties in the Internet ecosystem need to be part of the solution. This note is to let you know about the event as I thought it might be of interest to you. The programme draft is on our site along with registration at https://internetnz.nz/event/domain-name-abuse-forum Kind Regards, -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Spoofer Report for NZNOG for Oct 2018
by CAIDA Spoofer Project 07 Nov '18

07 Nov '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Oct 2018: none inferred Source Address Validation issues inferred during Oct 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-10-04 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Network atlas november 2018 update
by Mehmet Akcin 05 Nov '18

05 Nov '18

Hello everyone, We wanted to share several updates about our project Network Atlas with you. First of all we are very excited to announce now our page has many more features (and more to come) and hosted in a much more robust platform at www.networkatlas.org We've recently made a press release about our project , https://finance.yahoo.com/news/network-atlas-launches-map-global-221500875.… Now we are working on two major tracks 1) Raising funds via sponsorship and our kickstarter to be able to afford future of developments. 2) Talking to engineers , network professionals to understand what would make this tool better everyone. As you might be already aware we have a slack channel you can join and discuss/help the project. here is the slack channel link - https://join.slack.com/t/kapany/shared_invite/enQtNDUwOTIzMDEwODM4LWE5NjNmO… Overall we need network operators who have access to networks/fibre/route information and operational status as we are developing our self service portal which via GUI and API will enable you to be able to provide status of global fibre optic cables, and receive updates the same way. For more information about this project, and other ideas feel free to join our slack or email me directly at mehmet(a)networkatlas.org thank you and we will follow up with further updates in December 2018! We are very excited how far we came so far providing more visibility already ( even though we are just in demo state ) Mehmet Network Atlas https://angel.co/mhmtkcn

1 0

TICSA annual update required in November
by ticsa＠police.govt.nz 04 Nov '18

04 Nov '18

Hello NZNOG A reminder to all New Zealand Network Operators that it is November again, which means its time for your Designated Contacts to ensure the Chief Executive completes your annual TICSA update. Complete the update here -- TICSA Registration Portal: https://services.police.govt.nz/ticsa Information -- Police TICSA webpage: https://www.police.govt.nz/advice/businesses-and-organisations/ticsa Portal Issues -- Contact NZ Police TICSA Team: https://forms.police.govt.nz/forms/contact-ticsa-registrar/57 TICSA Legislation - Link to the act: http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5177923.html Excerpt from the act: ------------------------------------------------------------------------------------------------------ 69 Annual update (1) A network operator must give to the Registrar each year in November an annual update of information on the register relating to that operator. (2) The annual update must— (a) specify any changes to the information referred to in section 62 that have occurred since the network operator last gave information to the Registrar (whether in a notice under section 68, the previous annual update, or an application under section 61); and (b) confirm that, apart from the changes under paragraph (a), all other information referred to in section 62 that is currently held by the Registrar remains correct; and (c) be in the form (if any) required by the Registrar; and (d) be accompanied by a certificate signed by the chief executive of the network operator confirming that the information contained in the annual update is true and correct. (3) An annual update does not need to be provided in the year during which this section comes into force. ------------------------------------------------------------------------------------------------------ Thank you NZ Police TICSA Team. =============================================================== WARNING The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately

1 0

Papamoa UFF fibre outage
by Jesse Archer 31 Oct '18

31 Oct '18

Hey All, Did anyone get more details (or photos!) on the massive Ultrafast Fibre outage in Papamoa? https://ultrafastfibre.statuspage.io The fibre strike happened on Monday afternoon, the outage looks set to be resolved tonight (more than 48 hours since the outage began) which must be a record on the UFF network to date. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

5 5

NZNOG2019 CFP
by Richard Nelson 24 Oct '18

24 Oct '18

Yep, it is that time again... The NZNOG trustees invite papers for the 16th annual NZNOG conference, to be hosted at the Napier Conference Centre on 31 Jan and 1 Feb 2019. With the conference there will be a three day Workshop 28-30 Jan and a day of tutorials on 30 Jan. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in talks that involve real world deployment experience, particularly in New Zealand. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 29 Oct. Please provide your talk title, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements you need to let us know at submission time To submit your paper please e-mail: talks(a)nznog.org Proposals will be evaluated on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog-2019/call-for-papers-2019 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

2 1

Re: [nznog] Hurricane Electric joining APE
by Sid Jones 23 Oct '18

23 Oct '18

FYI: We will be standing up the first session tomorrow from 10am rs2.ape.nzix.net 192.203.154.2 2001:7fa:4:c0cb::9a02 From: <nznog-bounces(a)list.waikato.ac.nz> on behalf of Todd Dickason <todd.dickason(a)citylink.co.nz> Date: Thursday, 18 October 2018 at 17:31 To: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> Subject: [nznog] Hurricane Electric joining APE Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

4 5

Re: [nznog] Hurricane Electric joining APE
by Walt 19 Oct '18

19 Oct '18

We are very close When we do go live we value bilateral sessions more than over the route servers Please email peering(a)he.net to get a bilateral session Thanks Walt From: <nznog-bounces(a)list.waikato.ac.nz<mailto:nznog-bounces(a)list.waikato.ac.nz>> on behalf of Todd Dickason <todd.dickason(a)citylink.co.nz<mailto:todd.dickason(a)citylink.co.nz>> Date: Wednesday, October 17, 2018 at 9:31 PM To: "nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>" <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Hurricane Electric joining APE Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

1 0

Hurricane Electric joining APE
by Todd Dickason 17 Oct '18

17 Oct '18

Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

1 0

Internet for Kiwicon
by Mike Forbes 15 Oct '18

15 Oct '18

Could I have some contacts off list that would be willing to help out Kiwicon with a dedicated / reliable / fast internet link? Requirements are a fast (at least 100Mbit) connection and mostly international traffic (video streaming, CTF hosted in AWS Sydney) We're operating out of the Michael Fowler Centre in Wellington on the 15/16/17 November. The building is lit with Citylink fibre but Citylink are unable to help. Kiwicon is non profiting but we do have cash to make this happen, and i'd like to get it sorted! Thanks, Mike

1 0

LCA2019 Sysadmin Miniconf -- Call for Presentations
by Ewen McNeill 10 Oct '18

10 Oct '18

Linux.Conf.Au 2019 is being held in Christchurch, New Zealand near the end of January 2019 (21-25 January), the week before NZNOG 2019 (http://www.nznog.org/nznog-2019) -- thanks to NZNOG for moving from their regular slot to make it possible for those of us who like to attend both conferences. LCA2019 early bird tickets are on sale this month (https://linux.conf.au/attend/tickets/) As usual at LCA, we (Simon Lyall and I) are running a System Administration Miniconf as part of LCA2019, and I'd be quite keen to see some networking-related presentations. Perhaps someone would like to talk about GNS3 for network lab simulation? Or using Ansible / Salt for network configuration automation? Or anything around network monitoring/management. Or high performance networking on commodity hardware controlled by Linux? The LCA2019 Sysadmin Miniconf Call for Presentations is at: http://sysadmin.miniconf.org/cfp19.html and the text is included below for your convenience. Ewen PS: The Sysadmin Miniconf is part of LCA2019, so you'll need a ticket to LCA2019 to attend/speak the Sysadmin Miniconf or any other LCA2019 Miniconf. -=- cut here -=- Call for Presentations Linux.conf.au 2019 Systems Administration Miniconf There will be a one day mini conference on Linux Systems Administration held as part of linux.conf.au 2019. LCA2019 will be held in Christchurch, New Zealand on 21 - 25 January 2019. The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. This is our 13th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website: https://sysadmin.miniconf.org/. Presentation Topics =================== We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments large and small. Topics for presentations could include (but are not limited to): Virtualisation and Cloud Computing Kubernetes / Docker / Containers / Orchestration Infrastructure/Platform/Software as a Service (IAAS, PAAS, SAAS) Sysadmin Administration in a "serverless" environment (FAAS) DevOps and SysAdmin Culture Systems Administration Best Practice Monitoring and metrics. Collection, storage and presentation Networkng: IPv6, SDN (Software Defined Networking), performance DevOps, Configuration Management and provisioning Bootstrapping systems, Lifecycle Management Dealing with BYOD Backups in a virtual/distributed world Troubleshooting techniques Keeping legacy systems functioning War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in professional Unix/Linux administration (many in the audience will have decades of experience). Format of Presentations ======================= We are now seeking proposals for presentations at the mini-conference. We have openings for: 15-25 minute short presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA opening before morning tea), we expect the majority of available timeslots to be 20 minutes or less, with possibly 1-2 slightly longer talks if there is space in the schedule. We have a general policy of accepting a high proportion of proposals but handing out relatively short timeslots. Please see previous years Miniconf schedules for examples of how the programme is organised. Submitting talks ================ Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up by the time the conference happens) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor to priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. To submit a talk to the LCA2019 Sysadmin Miniconf, create an account on the LCA2019 website: https://linux.conf.au/dashboard create a speaker profile, and then select "SysAdmin Miniconf Talk" (in the "New Proposal" section of the Dashboard), or while logged into the LCA2019 site, go directly to: https://linux.conf.au/proposals/submit/sysadmin-miniconf/ Please pick a preferred length for your presentation from Short Presentation (15/20/25 minutes) or Lightning Talk (5/10 minutes) in the submission form; if you could do either (with more or less detail) use the Private Abstract field to describe the options and what you would prefer. In some cases we maybe able to add a few extra minutes to a few Short Presentations if there is any spare time left in the programme. Use the Private Abstract field to let us know a few more minutes would be useful for your presentation. Questions should be sent to: lca2019 at sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions, priority (both of inclusion and scheduling) will be given to presentations submitted by 23:59 (any time zone) on 31st of October 2018. If you have a good presentation idea, please let us know early, even if you need time to finalise the presentation abstract. Please let us know directly if you need an early confirmation to assist you in arranging time off work or travel; we will do our best to help. 2018-10-31 - Deadline for early submissions 2018-11-18 - Deadline for submissions 2018-12-04 - LCA2019 Sysadmin Miniconf programme published 2019-01-21 - LCA2019 Sysadmin Miniconf held (Christchurch, NZ) Contact and Questions ===================== Please see our website at https://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2019 at sysadmin.miniconf.org -=- cut here -=-

1 0

new subnet not accepted by smx
by Paul Willard 09 Oct '18

09 Oct '18

Anybody here from smx? I'm advertising a new subnet. Upstream (vocus) suggests that smx may have incorrect routes? Contact me off list paul(a)paulwillard.nz

1 0

KSK Roll coming 12th October
by Jay Daley 08 Oct '18

08 Oct '18

For those of you who don’t know, the KSK Roll is happening starting at 5am on 12th October (11th October 16:00 UTC). More details here https://www.icann.org/resources/pages/ksk-rollover The quick guide on how to check/prepare your DNS servers is https://www.icann.org/en/system/files/files/ksk-rollover-quick-guide-prepar… cheers Jay -- Jay Daley jay(a)daley.org.nz +64 21 678840 skype: jaydaley twitter: @jay_daley linkedin: www.linkedin.com/in/jaydaley

1 1

Spoofer Report for NZNOG for Sep 2018
by CAIDA Spoofer Project 07 Oct '18

07 Oct '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Sep 2018: ASN Name Fixed-By 4764 wideband-as-au 2018-09-01 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-09-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

IPv6 / Cisco ASA / 2degrees UFB
by Bill Walker 06 Oct '18

06 Oct '18

Hi All, I’ve been quite happily running a Cisco router at home on Snap/2degrees, but with the upgrade to UFB its not coping with the throughput. I’ve managed to locate a suitably equipped ASA, however I cant get IPv6 going. The config I have on the ASA is very similar to that of the router: nterface GigabitEthernet0/7 description 2degrees nameif EXTERNAL security-level 0 no ip address ciscoasa# sh run int gi0/7.10 ! interface GigabitEthernet0/7.10 description 2degrees vlan 10 nameif 2degrees10 security-level 0 pppoe client vpdn group 2degrees ip address pppoe setroute ipv6 address autoconfig ipv6 address dhcp ipv6 enable ipv6 dhcp client pd 2degrees-v6 However, if I remember correctly the IPv6 dhcp assignment happens inside the PPPoE connection once its established. Can anyone confirm that or provide a working config? In case someone wants versions, the ASA is on 9.9.2 (asa992-smp-k8.bin) Thanks, Bill Sent from Mail for Windows 10

6 8

Re: [nznog] Comcom/Samknows broadband testing from a different perspective
by Brian Cole 01 Oct '18

01 Oct '18

Hi all, Longtime listener; first time caller. I signed up to SamKnows (partly out of curiosity and partly so I can have hard data about my connection that I pay for) at home. Over the last week my connection has gone from slightly adequate with the occasional drop out to a slow connection with regular drop outs. Netflix and YouTube are stuttering, video games drop connection, and websites hang at random times. I can't help but think that the email shared by Dylan sheds some light on why that maybe. This programme won't be terribly successful if everyone gets sick of having a terrible connection during peak hours and shuts the white box down. Pretty frustrating. Brian -- *Brian Cole* */** Research Projects Developer* *Research & Enterprise **/** Research Office **/** University of Waikato* *Private Bag 3105* */* *Hamilton 3240* */* *New Zealand**www.waikato.ac.nz* <http://www.waikato.ac.nz/> */* *mob + 64 21 049 9183**email brian.cole(a)waikato.ac.nz <brian.cole(a)waikato.ac.nz> *

10 13

Comcom/Samknows broadband testing from a different perspective
by Dylan Hall 26 Sep '18

26 Sep '18

Hi all, I'm wearing my REANNZ hat today. I thought I'd share what we're seeing hosting the M-Lab [1] nodes in NZ that the new Comcom/Samknows [2] broadband testing are using for some of their tests. For a start, it looks like the testing has been ramping up over the last week (see attached graph), in particular during the evening (6pm-midnight). I had assumed the testing would be evenly spread out throughout the day, but it looks like they're concentrating the testing during the busy evening period. If anyone is interested in following how that traffic grows we have publicly available graphs for the two M-Lab nodes: AKL: https://weathermap.reannz.co.nz/node.php?src=and01&int=xe_0_0_9 WLG: https://weathermap.reannz.co.nz/node.php?src=and02&int=xe_0_2_7 If you want to try out the M-Lab nodes themselves, type "speedtest" into a Google search box and there is a "Run Speed Test" option that uses M-Lab (at least in my copy of Chrome, your mileage may vary). The nodes each consist of 4 x Dell servers front ended by a Juniper QFX switch. They're connected at 10Gbps. The nodes are fully run by M-Lab, we're just providing some address space and capacity. If anyone is concerned about their connectivity to REANNZ, we're on all the major NZ exchanges (APE, WIX, CHIX, AKL-IX) where we peer with the route servers. I note Comcom have posted a FAQ [3] on their website with some more details. The nodes are also IPv6 connected with addresses allocated from 2404:138::/32. It's worth noting we've been hosting M-Lab nodes for around 5 years now, but no one from Comcom or Samknows has spoken to us about the testing so it's all come as a bit of a surprise to us. If you have any interesting information to share, we'd like to know more :) [1] https://www.measurementlab.net [2] https://comcom.govt.nz/regulated-industries/telecommunications/monitoring-t… [3] https://comcom.govt.nz/__data/assets/pdf_file/0032/98276/SamKnows-technical… Thanks, Dylan

1 0

Hello Hurricane Electric, doubling the size of our domestic table?
by Michael Fincham 18 Sep '18

18 Sep '18

Hi all, So my domestic tables now have some 76,000 prefixes in them, as of ~ 6:30 last night. I guess hello HE and welcome to AKL-IX? Domestic table for NZ was more like ~ 10,000 prefixes not that long ago! -- Michael

14 30

Juniper Lab
by Jesse Archer 16 Sep '18

16 Sep '18

Hi All, I've got some config that I'd like to lab but my own kit is tied up in a transition. Wondering if anyone has a spare MX5-MX80 they would be willing to fire up to allow me to perform some tests. Unfortunately, vMX doesn't quite work in this case. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

VPS with BGP
by Mehmet Akcin 08 Sep '18

08 Sep '18

Hello NZNOG Friends, long time. I am looking for a VPS hosting firm which support BGP advertisements for DNS anycast (for my experiement) 200GB Disk, 16 GB Memory , 4core cpu and small bandwidth running 18.04 Ubuntu Please contact me offlist if you are able offer this. thank you -- Mehmet +1-424-298-1903

1 0

Spoofer Report for NZNOG for Aug 2018
by CAIDA Spoofer Project 08 Sep '18

08 Sep '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Aug 2018: none inferred Source Address Validation issues inferred during Aug 2018: ASN Name First-Spoofed Last-Spoofed 4764 wideband-as-au 2018-08-16 2018-08-17 131291 LANWORXLIMITED 2018-08-24 2018-08-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

RFC 8145 Root Trust Anchor Reports
by Matthew Luckie 06 Sep '18

06 Sep '18

>From http://root-trust-anchor-reports.research.icann.org/ : The ICANN org is publishing the IP addresses that are sending RFC 8145 telemetry ostensibly indicating that a resolver at the reported address (or another resolver that is forwarding through the resolver at the address) is validating using only KSK-2010 as a trust anchor. Publishing these addresses allows ISPs and other organizations who know who operates resolvers at those addresses to contact the resolver operator and notify them of the need to update their DNSSEC trust anchors. Without further action, these resolvers will stop working after the root KSK is rolled on 11 October 2018. http://root-trust-anchor-reports.research.icann.org/rfc8145-addresses.txt The following ASes have their country recorded as NZ in whois, and are in the ICANN list. The following resolvers may or may not be operated by the ASN identified. 4771 Spark 122.56.234.219 122-56-234-219.mobile.spark.co.nz. 122.57.192.56 122-57-192-56-adsl.sparkbb.co.nz. 122.61.118.222 122-61-118-222-adsl.sparkbb.co.nz. 219.88.186.152 rns6.xtra.co.nz. 222.153.3.78 222-153-3-78-fibre.sparkbb.co.nz. 222.154.149.63 222-154-149-63-fibre.sparkbb.co.nz. 9500 Vodafone 203.96.208.52 akrdns2.akl.vf.net.nz. 203.96.208.61 akrdns3.akl.vf.net.nz. 203.96.208.62 akrdns4.akl.vf.net.nz. 203.96.208.91 cbrdns1.chc.vf.net.nz. 203.96.208.92 cbrdns2.chc.vf.net.nz. 210.246.17.115 210-246-17-115.dsl.dyn.ihug.co.nz. 2407:7000:ff00:5382:bd9d::1 2407:7000:ff00:5382:bd9d::2 49.224.251.45 45.251.224.49.dyn.cust.vf.net.nz. 23655 SNAP 111.69.178.254 254.178.69.111.dynamic.snap.net.nz. 111.69.195.153 153.195.69.111.dynamic.snap.net.nz. 24183 DTS 202.174.180.228 38793 2degrees 118.148.149.52 52-149-148-118.nzcomms.co.nz. 118.149.151.121 121-151-149-118.nzcomms.co.nz. 45177 Vibe 45.64.48.2 cdns-02.as45177.net. 45179 SiteHost 103.250.234.202 103-250-234-202.static.webslice.co.nz. 45267 Lightwire 114.134.0.194 114-134-0-194.lightwire.co.nz. 132347 MikiPro 2404:ab00:6:1::6 132692 GlobiCom 103.18.58.198 vpn2.torguardvpnaccess.com. 133607 Web Connect 103.51.101.28 135069 Feenix 103.208.143.164 103-208-143-164.feenix.co.nz. Further information is available at the ICANN site, and it might pay for other operators on NZNOG to double check the ICANN list. http://root-trust-anchor-reports.research.icann.org Matthew

1 0

NZNOG 2019 Workshop/Tutorials
by Dave Mill 03 Sep '18

03 Sep '18

Hi all As part of NZNOG we normally offer a 3 day workshop (Mon to Wed) and a few tutorials on the Wednesday. APNIC have the following workshops/tutorials offered at the moment. https://training.apnic.net/courses/ We're seeking feedback (on or off list) on what people may want. Note, most recently we've had a 1 day Network Security tutorial (Queenstown) and a 3 day MPLS workshop (Tauranga). Ideas for next year: -3 day Network Security -3 day Routing I -3 day SDN (5 days condensed in to 3 days) -3 day DNSSEC -1 day IPv6 essentials -1 day DNSSEC -1/2 day BGP techniques Or, what else would people like to see at NZNOG (workshop and tutorial wise) that APNIC don't offer? On-list discussion encouraged :) Cheers Dave

9 14

CFP AINTEC 2018 (in coop. with SIGCOMM), November 12 - 14, 2018 Bangkok, Thailand - Abstract registration due on August 18, 2018
by William Liu 10 Aug '18

10 Aug '18

Call for Papers 14th Asian Internet Engineering Conference (AINTEC) 2018, in cooperation with ACM SIGCOMM, November 12 - 14, 2018. Pullman Bangkok King Power Hotel, Bangkok, Thailand Website: http://www.interlab.ait.ac.th/aintec2018/ Paper submission: http://www.interlab.ait.ac.th/aintec2018/paper-submission.php Important dates ------------------------------ Abstract registration: August 18, 2018 Full paper submission: September 2, 2018 Acceptance notification: October 15, 2018 Camera-ready due: October 24, 2018 Conference dates: November 12-14, 2018 (Right after IETF 103 in Bangkok) IETF 103 Information: https://www.ietf.org/how/meetings/103/ The 14th Asian Internet Engineering Conference (AINTEC), in cooperation with ACM SIGCOMM, provides an international technical forum for experts from industry and academia. AINTEC especially aims at addressing issues pertinent to the Asia and Pacific region, with vast diversities of socio-economic and networking conditions, while inviting high quality and recent research results from the Internet research community at large. AINTEC 2018 follows the previous ten successful editions held in Thailand. The conference is single-track and features a technical program with significant opportunities for individual and small-group discussions among a diverse set of participants. The technical sessions will include invited talks by leading experts, presentations of papers, demos, posters. A student author of the AINTEC Best Paper Award affiliated in an Asian institution is eligible for the ACM SIGCOMM geo-diversity grant program to attend ACM SIGCOMM 2019. AINTEC 2018 solicits high quality papers that improve digital communications in diverse situations including, but not limited to: * Future Internet architectures and technologies * Networking technologies in developing regions * Internet measurement, analysis and modelling * Disaster networking, including experience with earthquakes and tsunamis * Sensor networking and applications * Wireless, mobile and ad hoc networks * Delay and disruption tolerant networks * Location management and positioning * Content diffusion with P2P, CDN or ICN * Multimedia systems and applications * Network operations and management * Quantum networking * Social networks * Network security * Cloud Computing and Services * Internet of Things * Network Acceleration * Blockchain Technology and Applications Paper submission ------------------------ Submissions must be original, unpublished work, and not have been submitted to another conference or journal for publication. Paper length cannot exceed 8 pages in the 10pts ACM SIGCOMM format. AINTEC 2018 proceedings will be included in the ACM Digital Library. Papers must be submitted in electronic format following the instructions provided on the AINTEC Web site: http://www.interlab.ait.ac.th/aintec2018/ Submission of a paper implies that should the paper be accepted for publication in the conference proceedings, at least one of the authors will register and present the paper in the conference. Authors of accepted papers must pay for their registration on or before the camera ready version deadline. Important dates ------------------------------ Abstract registration: August 18, 2018 Full paper submission: September 2, 2018 Acceptance notification: October 15, 2018 Camera-ready due: October 24, 2018 Conference dates: November 12-14, 2018 (Right after IETF 103 in Bangkok) Scientific Advisory Committee: Randy Bush, Internet Initiative Japan Inc., USA Erol Gelenbe, Imperial College, UK Jun Murai, WIDE Project and Keio University, Japan Keith W. Ross, Polytechnic Institute of NYU, USA Dario Rossi, Telecom ParisTech, France Surasak Sanguanpong, APAN-TH, Thailand Steering Committee: Kenjiro Cho, IIJ and WIDE Project, Japan Serge Fdida, UPMC, France Philippe Jacquet, INRIA, France Kanchana Kanchanasut, Asian Institute of Technology, Thailand Giovanni Pau, UPMC, France Aruna Seneviratne, NICTA, Australia Rodney Van Meter, WIDE Project, Keio University, Japan General Chair: Sukumal Kitisin, Kasetsart University, Thailand Kunwadee Sripanidkulchai, Chulalongkorn University, Thailand Technical Program Committee Co-Chairs: Cristel Pelsser, University of Strasbourg/ICube laboratory, France Shigeya Suzuki, WIDE Project, Keio University, Japan Technical Program Committee: Ignacio Castro, Queen Mary University of London, UK Roderick Fanou, CAIDA/UC San Diego, USA Kensuke Fukuda, National Institute of Informatics Japan, Japan Kei Hiroi, Nagoya University, Japan Pan Hui, University of Helsinki, Finland & HKUST, Hong Kong Oana Iova, INSA Lyon, France Kotaro Kataoka, IIT Hyderabad, India Andra Lutu, Simula, Norway Matthew Luckie, University of Waikato, New Zealand Kanae Matsui, Tokyo Denki University, Japan Shinichiro Matsuo, Georgetown University, USA Florian Michahelles, Siemens USA, USA Ryo Nakamura, The University of Tokyo, Japan Anant Shah, Verizon Digital Media Services., USA Keiichi Shima, IIJ-II, Japan Anna Sperotto, University of Twente, NL Joe Touch, The Aerospace Corp., USA Wantanee Viriyasitavat, Google, USA Vasaka Visoottiviseth, Mahidol University, Thailand Tat-Chee Wan, Universiti Sains Malaysia, Malaysia Publicity Committee: Wantanee Viriyasitavat, Google, USA Local Organizers: Rey Padilla, AIT, Thailand Glaziel Kae Tagamolila, AIT, Thailand Wutjanun Muttitanon, Mahidol University , Thailand

1 0

Spoofer Report for NZNOG for Jul 2018
by CAIDA Spoofer Project 08 Aug '18

08 Aug '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jul 2018: ASN Name Fixed-By 45267 LIGHTWIRE 2018-07-08 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jul 2018: none inferred Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Invitation to APNIC 46
by Elly Tawhai 06 Aug '18

06 Aug '18

Hi NZNOG Community, It is our pleasure to invite your organisation to attend APNIC 46 meeting a week of workshops, tutorials, policy and operational discussions, and social events. Connectivity and network security in the Pacific will be key themes to be discussed at the upcoming APNIC 46 conference in Nouméa, New Caledonia, from 6 to 13 September 2018. Keynote presenter John Brewer shares his expertise on the explosion of new submarine and satellite infrastructure connecting the remote islands of the Pacific, joining Raja Azrina Raja Othman, who will talk about security, privacy, and safety in this age of interconnectedness. Full speakers list here: < https://conference.apnic.net/46/program/speakers/#/> There are direct flights to Noumea from Auckland. Hope to see you there! Kind regards, Elly APNIC

1 0

Spoofer Report for_NZNOG for Jun 2018
by CAIDA Spoofer Project 08 Jul '18

08 Jul '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jun 2018: none inferred Source Address Validation issues inferred during Jun 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-06-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Affordable TICSA LI Solution and Support
by brianparsons＠subpico.com 04 Jul '18

04 Jul '18

We are Telecom Forensics, an OEM of LI solutions based on the Kapiti Coast. � Being an OEM, there are no 'middle men' to inflate the price. We can provide a drop-in LI system that is fully supported, local and affordable. � We are proven LI Systems experts operating since 2005. We have deployed with national providers and on many complex projects both cellular and fixed. ASN.1 and ETSI Standards is what we do all day, everyday. Our projects and experience are detailed on out website: www.telecomforensics.com. � Our Costs and Deliverables: We supply the complete turnkey solution for your TICSA regulatory compliance. No minimum contract term, full 24/7 support is provided. � Costs One off: Upfront $5K Signup Fee - covers design, integration, pre-production testing and systems training, Monthly: Starting at fixed $5K lease cost per month. For industry fairness the monthly charge is scaled to the number of subscribers. *** SPECIAL OFFER ***: 10% discount on the monthly lease if you sign-up within the next four weeks!� Contact us via our website forms, https://www.telecomforensics.com/. �� Annual contracts are also available. Contact us to discuss your requirements. � Deliverables A working pre-production environment; Provisioning, (HI 2/3) ASN.1 correct, complete & ready to cut-over to LEA Test then eventually LIVE. Training on the LI system in parallel with LEA validation/testing HI 'usable format' pre-production delivery. Training (provisioning and alarms) to meet the 'always ready' requirement of the TICSA Act. Support: The monthly fee includes Layer 3 support.� TFE Solution License and Support Contract to meet Service Level Agreements of the TICSA solution Once you have Agency sign-off to switch to their LIVE environment, you can get back to your core business activity. Time Frame: Depending on the size of the network, this could take one to two weeks after sign-up. � Custom interface work is available including any OEM TIER 4 Code level support. POA. � TFE offers affordability for a trusted and reliable LI solution. � We welcome your enquiry through our web forms, https://www.telecomforensics.com/, kind regards Brian Parsons BE(E&EE) MIEE | CEO TFE | +64272987097 www.telecomforensics.com ___________________________________________________________________________________________________________________________________________ Some technical detail: Our systems operate an exokernel with optimised LI ASN.1 and protocol firmware on the Network (NWO) traffic inputs. The NWO interface work independent of main OS for speed and security and line rate processing (at any packet size). We support the following line interfaces: GE, 10G, 40G scaled to 100G, and typically can receive from any newtork tap/mirror port, splitter. The probe throughput (XI fwd rate) after processing is wire speed with capacity per interface of 1.1 million sessions per gig of installed Mem. Typical System interfaces: GE NWO, GE XI/OAM, GE HI. ___________________________________________________________________________________________________________________________________________ �

13 15

Satellite TV installations within MDU
by Carl Gunness 02 Jul '18

02 Jul '18

Hi NZNog, I'm looking for a contact within Sky Television or a contractor who installs Satellite TV within MDU? I'm trying to confirm if Satellite TV is installed the same way as we do in Australia. eg, a "BLUBOX" on a typical MDU build. Cheers, Carl

2 1

Re: [nznog] Registration for AusNOG 2018 is now open
by Nick MacKechnie 28 Jun '18

28 Jun '18

Hiya, Who's going? I'd be keep to catch-up for a drink or two while over in Sydney. (Feel free to ping me off the DL) Nick MacKechnie Fixed & Transmission Operations Manager 021 999 010 03 345 7875 nick.mackechnie(a)2degrees.nz Two Degrees New Zealand Limited | 2degrees House 351 Lincoln Road, Addington, Christchurch 8024 PO Box 8540, Riccarton, Christchurch 8440 | New Zealand -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Mark Prior Sent: Monday, June 11, 2018 10:44 PM To: nznog <NZNOG(a)list.waikato.ac.nz> Subject: [nznog] Registration for AusNOG 2018 is now open Get in early for the early bird rate! <https://www.eventbrite.com.au/e/ausnog-2018-tickets-46925221601> We're also still looking for interesting talks so why not submit a proposal and lock in that early bird rate (or get free rego if accepted :-) Regards, Mark. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog ________________________________ This transmission may contain information that is confidential and legally privileged. If you are not the intended recipient, please do not read, copy, or re-transmit this communication. If you have received this communication in error, please notify me and delete this message (and your reply) and any attachments.

2 1

Anyone interested in donating space / connectivity / kit for a proper NZ Debian mirror?
by Michael Fincham 28 Jun '18

28 Jun '18

Hi everyone, Citylink's official Debian mirror (ftp.nz.debian.org) is apparently again broken (not even listening on port 80 from where I'm sitting). Would anyone be seriously interested in donating rack space, national transit, or hardware to the cause of another official Debian mirror for NZ? Having reliable and cheap access to free software projects like Debian is critically important, and having a second official mirror seems like a no-brainer to me. I am very happy to donate my time to admin and monitor any equipment provided for this, and to liase with the Debian project as required. Perhaps Citylink could give us some insight in to the traffic levels their existing mirrors see? -- Michael Fincham

15 28