- NZNOG - lists.nznog.org

Call For Presentations - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Sebastian Castro 26 Jun '18

26 Jun '18

The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted on the first day of the workshop, until 4pm. The second afternoon of the workshop will start with a Members-only session which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. The Members-only session will be followed by the AGM. Workshop Milestones: 15 Jun 2018 - Submissions and Registrations open via Indico 13 Jul 2018 - Deadline for submission 17 Aug 2018 - Contribution list published 14 Sep 2018 - Full agenda published 06 Oct 2018 - Deadline for slideset submission 13 Oct 2018 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/29/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Sebastian Castro, on behalf of the Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

NZNOG 2019 Announcement
by Dave Mill 17 Jun '18

17 Jun '18

Hi all I'm happy to announce that we have locked in a venue for the NZNOG conference in 2019. Where : Napier Conference Centre, Napier When (conference proper) : 31 January to 1 February, 2019 As normal, expect there will be various workshops and tutorials in the days prior the conference proper. Note, this is a change from our usual dates due to Linux Conference Australia coming to Christchurch during NZNOG's 'normal' week. We'll be putting together our sponsorship packages this month. In the meantime, if anyone is interested in sponsoring the conference please make contact with info(a)nznog.org . Cheers Dave (on behalf of the NZNOG Trust)

1 0

Interesting links on hacking in the large
by Matt Stevens 12 Jun '18

12 Jun '18

Greetings, I am interested in looking at the progression of hacking strategies over the last ten years or so. However hackers typically don't talk and sadly my circle of friends do not extend to those leading the hacking trends, that is, well resourced criminal groups and nation states. Hackers do however read. I'm interested in what you have found that already exists in the public domain. Stuff where you have gone "ohhh, interesting..." or "that's novel" or "I can't talk about it, but I have seen this...". I am anticipating links to publicly available news articles, government reports, conference presentations, YouTube videos or what-have-you. The goal is an academic paper examining these trends that hopefully will present interesting insights. I am a researcher at Victoria in Wellington under Professor Ian Welch whom runs our Cyber Security undergraduate degree and postgraduate research. I have an ME in Software Engineering with a Network Security slant and am currently working towards a PhD in the same field with an applied science focus. I like to think I am making stuff that is actually useful. I am very happy to chat if you are interested and will respect the need to discuss clients and employers in the abstract. Coffee is on me. But, my main interest here is interesting links Please email me direct! Cheers Matt Stevens Researcher Engineering and Computer Science Victoria University

1 0

Registration for AusNOG 2018 is now open
by Mark Prior 10 Jun '18

10 Jun '18

Get in early for the early bird rate! <https://www.eventbrite.com.au/e/ausnog-2018-tickets-46925221601> We're also still looking for interesting talks so why not submit a proposal and lock in that early bird rate (or get free rego if accepted :-) Regards, Mark.

1 0

Take the APNIC Survey - Your Views Matter
by Elly Tawhai 10 Jun '18

10 Jun '18

Hi NZNOG Community, As you may know, every two years APNIC conducts a large-scale survey to help us understand the needs and wishes of its Members and those who use APNIC services. The results of the survey provide guidance for the future direction of APNIC. As a valued member of the APNIC community, I’d like to personally invite you to take the survey. Please also share the survey link with your colleagues so they can complete the survey too. https://survey.apnic.net The survey is anonymous and no identifying information will be made available to APNIC. The survey closes on 2 July 2018. There will be three prize draws during the survey period. Thank you for your continued support of APNIC. Kind regards, Elly APNIC

1 0

Spoofer Report for NZNOG for May 2018
by CAIDA Spoofer Project 08 Jun '18

08 Jun '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during May 2018: ASN Name Fixed-By 55850 TRUSTPOWERLTD 2018-05-21 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-05-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

TICSA and lawful intercept
by Cameron Beattie 05 Jun '18

05 Jun '18

Has any progress been made on a collaborative effort to address the TICSA requirements? Regards Cameron

7 7

ASB Bank NOC contact
by Tim Price 23 May '18

23 May '18

Hi All, If anyone from ASB Bank NOC is on-list or anyone knows someone who operates their firewalls can you please contact me off-list? We have a business customer who’s IP has been blacklisted by ASB. Cheers, Tim.

1 0

Bandwidth at Tauranga Exchange (Chorus/Spark Cameron Road)
by Jesse Archer 17 May '18

17 May '18

Good evening, Got a customer looking for secondary bandwidth options at Tauranga Exchange. Who has a physical presence here and a willingness to sell IP transit to a small client (below 1Gbps requirement) ? They’ve got an AS and a /22 that will be operational soon. Regards, Jesse -- *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

Bigpipe removing IPv6 from existing broadband connections
by Michael Fincham 15 May '18

15 May '18

Hi all, Looks like Bigpipe has decided to withdraw IPv6 from their broadband customers... If you have contacts at Bigpipe please get in touch with them and ask them WTF they're doing. This is absurd. I've been recommending Bigpipe to people for ages because they offered IPv6. Forcing their customers to renumber and drop back to legacy IPv4 at this point is just idiotic, let alone not continuing to offer this service. ---------- Forwarded message ---------- From: Bigpipe Broadband <support(a)bigpipe.co.nz> Date: 14 May 2018 at 09:54 Subject: Changes to your Bigpipe connection Hi [...], Thanks for taking part in our IPv6 trial that we announced on Geekzone. We’ve had a heap of really useful feedback to keep in mind for our future developments in this space. >From the 12th of June 2018 the trial will be ending and you may notice a short 5-10 minute outage while we withdraw it. We’ll be making the change overnight at a time that has as little impact as possible. There’s nothing further you need to do, however as with any outage if you find you haven’t automatically connected again, simply restart your modem or router. If you have any questions or want to chat this through, you can get in touch via https://ww.bigpipe.co.nz/contact-us Thanks again for getting involved. The Bigpipe People -- Michael

4 4

ntp kod
by Richard Hector 10 May '18

10 May '18

Hi all, I'm seeing lots of log messages like these: May 11 06:54:32 jet ntpd[2758]: receive: KoD packet from 2001:dce:2:17a::18 has inconsistent xmt/org/rec timestamps. Ignoring. ... on a home server. A quick web search suggests that KoD packets are a self-defence mechanism. Am I (accidentally) abusing s[1-3].ntp.net.nz? Cheers, Richard

3 3

Spoofer Report for NZNOG for Apr 2018
by CAIDA Spoofer Project 08 May '18

08 May '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Apr 2018: ASN Name First-Fixed 137259 M174-AS-AP 2018-04-26 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW-AS-AP 2016-09-26 2018-04-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fwd: [AusNOG] AusNOG 2018 Call for Presentations
by Mark Prior 06 May '18

06 May '18

Anyone from across the Ditch interested in speaking at AusNOG at the end of August? Mark.

1 0

Announcement - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Sebastian Castro 03 May '18

03 May '18

[with apologies to those who see this on multiple lists] The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. Workshop Milestones: - 01 May 2018 - Workshop Announcement - 01 Jun 2018 - Submissions and Registrations open via Indico - 13 Jul 2018 - Deadline for submission - 17 Aug 2018 - Contribution list published - 14 Sep 2018 - Full agenda published - 06 Oct 2018 - Deadline for slideset submission - 13 Oct 2018 - Workshop Sebastian Castro, on behalf of the joint Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Google mail Fu Help
by Don Gould 23 Apr '18

23 Apr '18

Can anyone with some clue help with sorting this out? I've tired following the link but I just don't understand what I'm not doing right. My mail server got compromised and has since been fixed but I'm still having problems sending mail to gmail. The mail system <Laurajmcintosh(a)gmail.com>: host gmail-smtp-in.l.google.com[173.194.203.27] said: 550-5.7.1 [182.54.234.40 12] Our system has detected that this message is 550-5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail, 550-5.7.1 this message has been blocked. Please visit 550-5.7.1https://support.google.com/mail/?p=UnsolicitedMessageError 550 5.7.1 for more information. c10-v6si12022767plr.398 - gsmtp (in reply to end of DATA command) -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Ph: 0800 00 15 92 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.yournet.co.nz skype: don.gould.nz

2 2

APNIC 46 - Call for paper now open
by Elly Tawhai 09 Apr '18

09 Apr '18

________________________________________________________________________ APNIC 46 Conference - Call for Paper ________________________________________________________________________ Hi NZNOG Community, The APNIC Program Committee is now seeking presentations for APNIC 46 in Nouméa, New Caledonia. We are looking for content that would suit technical conference sessions. Please note, the program committee is working to early deadlines so the APNIC conference program can be announced early. Key dates --------- The timeline for submissions is: Call for presentations opens 09 April 2018 First round acceptance 15 June 2018 Final deadline for submissions 13 July 2018 Final round acceptance 27 July 2018 Program material and submission ------------------------------- The technical sessions at APNIC 46 will include presentations relevant to Internet operations and technologies. For possible areas of topics and submission details, please visit: https://conference.apnic.net/46/program/call-for-papers If you have any other ideas or proposals for panel or BoF sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Program Committee at: conference(a)apnic.net For more information about APNIC 46, please visit: https://conference.apnic.net/46 On behalf of: APNIC 46 Program Committee

1 0

MikroTik User Meeting - Call for presentations
by Daniel Millar 05 Apr '18

05 Apr '18

Hey, Just a call for presentations to the group for the MikroTik User Meeting (MUM) being held in Auckland on the 21st of May. https://mum.mikrotik.com/2018/NZ/info/EN There is still a few slots available to fill. Presentation has to be somewhat based around the MikroTik Platform. 45 minute slots but MikroTik can make this flexible if needed. Contact me off list if you have any questions, or use the link above to ‘register’ for the event, in which you can select if you wish to do a presentation. Best Regards, Daniel Millar - Sales & Technical Engineer Phone: +64 3 741 1339 | Fax: +64 3 327 3193 | Email: dan(a)gowifi.co.nz<mailto:dan(a)gowifi.co.nz> | www.gowifi.co.nz<http://www.gowifi.co.nz/> [cid:image001.png(a)01D35979.70F92F50]<https://twitter.com/gowifinz/> [cid:image002.png(a)01D35979.70F92F50] <https://www.linkedin.com/company/go-wireless-nz-ltd-?> [cid:image003.png(a)01D35979.70F92F50] <https://www.facebook.com/gowirelessnz> [cid:image004.png(a)01D35979.70F92F50] <https://plus.google.com/+GowifiCoNz> [cid:image005.png(a)01D35979.70F92F50] <http://blog.gowifi.co.nz/> [cid:image006.png(a)01D35979.70F92F50] <https://www.youtube.com/user/streakwave> [cid:image007.png(a)01D35979.70F92F50]

1 0

Changes to NZRS and InternetNZ
by Daniel Griggs 02 Apr '18

02 Apr '18

Apologies if you have received this in other forums. Good morning, >From 1 April 2018, all the work of InternetNZ and NZRS is being streamlined under one banner; InternetNZ. The NZRS name will cease to exist, and its people and services have been merged into InternetNZ. While this change is occurring for our colleagues in InternetNZ, The Domain Name Commission has also focused in on its independent role overseeing the .nz domain name space and administering the .nz dispute resolution service. They have a smaller Board which means .nz policy development is now the responsibility of InternetNZ. It is setting up a new .nz policy committee to decide policy, fees and commercial terms (with input and advice from the community). The rationale for these changes is to simplify how Internet users work with us, and to improve the effectiveness of our part in governance and management of the Internet. The background work on these changes is detailed here [ https://internetnz.nz/blog/changing-internetnz-our-organisational-review] Our vision remains the same: a better world through a better Internet. If you have any questions or thoughts on the above, please contact me directly. -- Daniel Griggs e: daniel(a)internetnz.net.nz p: +64 27 448 8230

1 0

SKYTV and TVNZ Geo blocking
by Stuart Campbell 02 Apr '18

02 Apr '18

Hi, Is anyone from SkyTV and TVNZ able to contact me off-list please - we have a /22 IP range that appears to be being blocked. Regards, Stuart Campbell {scampbell(a)campbell.co.nz} ------------------------------------------------------------------------------- Mikrotik Trainer & Consultant, MTCNA, MTCWE, MTCRE, MTCTCE, MTCINE ------------------------------------------------------------------------------- Managing Director, Campbell Technology Ltd Phone: +64-4-802-7800 xtn 126 Fax: +64-4-802-7809 Mobile: +64-21-482-827

1 0

Network abuse
by Rudi Hefer 24 Mar '18

24 Mar '18

Gidday NZNoggers, Can someone please advise if it is appropriate to share know fraud activity in this mailing list so that fellow businesses do not get stung buy the same individual? We have now confirmed 4 victims to the same person. Understood if not the forum, but would appreciate if someone knew where this can be done. Kind regards, Rudi Hefer | Sales and Marketing Director m.+64 27 220 1881 |ddi. +64 9 951 5047 | rudi.hefer(a)solarix.co.nz<mailto:rudi.hefer(a)solarix.co.nz> [cid:99789FA2-FCD5-4D65-95D9-38F5F88F6C6F] [cid:1B69E9A3-16C0-44EF-B66D-21A93AF925D7] <https://www.linkedin.com/company/solarix-networks-limited> [cid:89D41135-A44C-423C-A7A9-515C001D90D9] <https://twitter.com/SolarixNetworks> 5 Omega Street, Rosedale, Auckland, New Zealand www.solarix.co.nz DISCLAIMER: This email message and any accompanying data contains information that is confidential and subject to legal privilege. If you are not the intended recipient you are notified that any use, dissemination, distribution or copying of the whole or any part of the information in this message or data is prohibited. If you have received this email message in error please notify us immediately and erase all copies of the message and attachments. No alterations to an email message or its attachments are to be made without the consent of Solarix Networks Limited. Solarix Networks Limited are not liable for any unauthorized alterations. Solarix Networks Limited do not represent or warrant that files attached to this email are free from computer viruses and other defects.

4 3

SkyTV geoblock
by Brad Cook 20 Mar '18

20 Mar '18

reaching out, is anyone from SkyTV able to contact me off-list, we have some ranges that are geoblocked.

2 1

IPv6 static addressing
by Richard Hector 16 Mar '18

16 Mar '18

Hi all, Apologies if this is a bit off-topic, but I know there's lots of IPv6 knowledge here :-) If I have an IPv6 ULA block (or several) using SLAAC, and I want to additionally give out some static addresses in one or more of those blocks, am I right in thinking I can pick anything I like as long as it doesn't have the magic fffe in the middle? Is there a more formal approach? Is this (SLAAC plus statics where required) the normal way of doing things? Thanks, Richard

2 3

Update from DNCL regarding WHOIS
by Daniel Griggs 15 Mar '18

15 Mar '18

Hi Everybody, DNCL attended the NZNOG conference in January, and talked about the policy consultation on Port 43 WHOIS requirements. You can read more about that consultation and the submissions here https://dnc.org.nz/port-43. Thanks to those NZNOG members who provided a submission. The DNCL Board has considered all submissions, and decided that the information returned via Port 43 will be reduced. Port 43 queries will continue to show domain name availability, Registrar contact details and name server details (including DS records). It will no longer show contact details of Registrant, Admin or Technical contacts, or the date billed until information. Though this information will still be available on the DNCL website (http://www.dnc.org.nz/) DNCL and InternetNZ/NZRS are working on a plan to implement the changes in early April 2018. If you have any questions regarding the process or decision feel free to drop a line to info(a)dnc.org.nz -- Daniel Griggs e: daniel(a)internetnz.net.nz p: +64 27 448 8230

1 0

Range Announcements ExChristchurch - Please update your GeoCoding as required.
by Don Gould 14 Mar '18

14 Mar '18

For those GeoCoding... Please be advised that we're announcing the follow exChristchurch. as=45887 router-id=202.68.88.218 network=103.68.122.0/24 network=103.68.123.0/24 network=103.68.121.0/24 network=117.121.244.0/24 network=182.54.234.0/24 TVNZ, MediaWorks... my wife would like your service back... NetFlix my wife liked her 2 days with the 'extended catalogue'... guess we can't have pie and eat it to! ;) D -- Don Gould 5 Cargill Place Richmond Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.bowenvale.co.nz skype: don.gould.nz -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Ph: 0800 00 15 92 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.yournet.co.nz skype: don.gould.nz

1 0

Looking for spare Xirrus XS-8 wireless devices
by Matt Stevens 13 Mar '18

13 Mar '18

Greetings, Victoria Uni, School of Engineering and Computer Science is heading to Samoa in April to do outreach to local Universities and High Schools. To help out we have been donated six Xirrus XS-8 wireless points to install. A big thank you to our donor :-) Having figured out how to install these, we are now thinking that it may be useful to have spare devices. Either spares for the local IT team for when the installed ones give up or to increase coverage. So... do you have any used/replaced Xirrus XS-8 wireless devices lying around, that you might be happy to donate? Brackets for these devices are also in short supply and it turns out, expensive to fabricate. Thank you for reading and please send me any responses off-list. Cheers! Matt Stevens Work Experience Coordinator Engineering and Computer Science Victoria University of Wellington

1 0

Asbestos in Remuera?
by Brian E Carpenter 01 Mar '18

01 Mar '18

Hi, Is anyone aware of access problems (asbestos issues) at the Remuera exchange? I'm being given the run-around by Chorus - just moved and no local loop for the last 10 days. (Yes, I know I should upgrade to fibre but that is stage 2.) This is a personal gripe but if the access problem is genuine it probably affects many subscribers. An off list reply would be fine. Regards Brian Carpenter

1 0

Removing the four stale TAL from the APNIC RPKI validation set.
by George Michaelson 26 Feb '18

26 Feb '18

Updating RPKI trust anchor configuration ------------------------------------------------------- APNIC has completed the process of transitioning from its previous Resource Public Key Infrastructure (RPKI) trust anchor arrangement to a new single trust anchor configuration. Each RIR will publish an 'all resources' global trust anchor, under which its own regional resources (IP addresses and ASNs) will be certified. APNICs trust anchor is one of the previous five, which has been retained as the sole trust anchor over all APNIC resource certificate products. If you are using relying-party software, such as the Dragon Research Labs RPKI Toolkit, RPSTIR or the RIPE NCC’s RPKI Validator, you are advised to update your software’s configuration to use only the current APNIC trust anchor, rather than the set of five APNIC trust anchors that were previously in use. The update is to remove four of the five: One has been retained as the current live Trust Anchor. Note: this update is not critical. However, if it is not done, the software will log or report warnings about being unable to retrieve the trust anchors that are no longer being used. All resources now validate under the single active trust anchor and no orphan products are valid under the other prior trust anchors. The current APNIC TAL is as follows: ------ rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RWSL61YAAYumEiU8z8 qH2ETVIL01ilxZlzIL9JYSORMN5Cmtf8V2JblIealSqgOTGjvSjEsiV73s67zYQI 7C/iSOb96uf3/s86NqbxDiFQGN8qG7RNcdgVuUlAidl8WxvLNI8VhqbAB5uSg/Mr LeSOvXRja041VptAxIhcGzDMvlAJRwkrYK/Mo8P4E2rSQgwqCgae0ebY1CsJ3Cjf i67C1nw7oXqJJovvXJ4apGmEv8az23OLC6Ki54Ul/E6xk227BFttqFV3YMtKx42H cCcDVZZy01n7JjzvO8ccaXmHIgR7utnqhBRNNq5Xc5ZhbkrUsNtiJmrZzVlgU6Ou 0wIDAQAB ------ Configuring Relying Party Software ----------------------------------------------- RIPE NCC RPKI Validator: If you upgrade to RIPE validator rpki-validator-app-2.24 the correct Trust Anchor is configured. No further work is required. Dragon Research Labs Rcynic Validator: If you run rcynic, you need to remove all the TAL, TA or CER entries in rcynic.conf except ones which point to apnic-rpki-root-iana-origin.cer or the related TAL. If you use the trusted-certs/ directory, simply remove the four files which are named for the non-APNIC RIR as follows: cd /etc/trust-anchors # or wherever you place the TAL files rm apnic-rpki-root-ripe-origin.tal rm apnic-rpki-root-arin-origin.tal rm apnic-rpki-root-lacnic-origin.tal rm apnic-rpki-root-afrinic-origin.tal RPSTIR To modify an installed RPSTIR system, locate the /usr/local/etc/rpstir directory and remove all but the current live APNIC TAL. More information is in the attached PDF describing how to update the trust anchor configuration in these three popular relying-partner software systems. -George

1 0

Survey
by Richard Nelson 14 Feb '18

14 Feb '18

Thankyou to everybody who responded to the NZNOG survey, the results are in and are very useful to us. Geoff Huston was considered a top three speaker most often followed by Francesco Alberti of Eolo. Hamid Maani of Hawaiki and Kraig Winters representing the Red Cross were third equal with a large group just behind them. More importantly almost all the speakers were considered interesting by someone attending the conference so we are pleased with the programme reception. Respondents liked Queenstown but didn't like the venue. They wanted desks in the conference and aircon in the rooms. The most popular destination choices for next years conference were Napier, Wellington and New Plymouth. This fairly closely corresponds with the trustees' thinking so we will check them out for venues and accommodation with air conditioned rooms. It will, however, be difficult to top jet boating as a social activity. Just over 90% of people are open to us changing the conference dates. We will investigate this. There were almost no other conferences identified to avoid clashes with but public holidays are clearly sancrosanct. There was also a suggestion that we avoid school holdiays which we currently don't do. People are happy for us to make the conference a bit bigger to make sure people don't miss out. There were also a lot of individual comments and suggestions that we will try to take on board. Richard Nelson

4 4

Re: [nznog] Survey
by Ewen McNeill 11 Feb '18

11 Feb '18

On 9/02/18 13:11, Barry Murphy wrote: > May be quite beneficial to have NZNog the week after, so those that have travelled > from AU the week before can stick around for another week and attend NZNog Could definitely work out. I can think of at least a half dozen Australia-nbased Linux.Conf.au regulars, who would probably come to LCA2019 in Christchurch too, working in networks/network operations as their day job. There's probably more who would find it relevant if it was easy to get to after Linux.Conf.au (Christchurch/Wellington is an easy regular flight; not sure about Christchurch/New Plymouth or Christchurch/Napier -- those might be two flights). (The week before might work too, but some of the people I'm thinking of usually help with LCA conference setup, which obviously is the end of the week before the conference...) Ewen

4 3

Looking for DNS resolver addresses in NZ for research project
by Sebastian Castro 01 Feb '18

01 Feb '18

Hi everyone: In case you haven't seen a message from me before, I'm Sebastian Castro, Technical Research Manager for NZRS, part of the InternetNZ team. Our Research Team has been conducting some research work on passive DNS analysis in order to identify real DNS resolvers in the wild, as authoritative DNS servers like the .nz nameservers get a lot of rubbish traffic. In order to advance the work, we are looking for some ground truth about real DNS resolvers in NZ. We have a list of known resolvers from organizatons like Spark, Vodafone, some ISPs, but we are looking to extend and refresh that list. If you operate a network that has a resolver, would you be so kind to share with us the IP addresses (both v4 and v6 if available) the resolver uses to send traffic? Depending on your architecture, it could be the address your users setup in their configuration, or a different address based on location where there is a load balancing architecture. There is no restriction: we want big and small resolvers, ISPs, Wireless ISPS, educational organizations, big and small companies, everything helps. The list won't be made public, it will be used for our research purposes. Thanks in advance and enjoy your Waitangi weekend. -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

TICSA – Security contacts
by TICSA 01 Feb '18

01 Feb '18

Hi folks, In keeping with Tarus’s comments, I too would like to thank you all for your time at the NZNOG. It was great to catch up with old friends and make some new ones. We can be reached at TICSA(a)NCSC.govt.nz for anything relating to the Network Security section (part 3) of the TICSA How to submit a notification is covered in the Guidelines document which can be found at https://www.ncsc[dot]govt.nz/ticsa Regards Steve Martin On behalf of The TICSA Team National Cyber Security Centre Government Communications Security Bureau This electronic message, together with any attachments, contains information that is provided in confidence and may be subject to legal privilege. Any classification markings must be adhered to. If you are not the intended recipient, you must not peruse, disclose, disseminate, copy or use the message in any way. If you have received this message in error, please notify us immediately by return email and then destroy the original message. The New Zealand Intelligence Community (NZIC) and the departments comprising the NZIC accepts no responsibility for changes to this e-mail, or to any attachments, after its transmission from NZIC. This communication may be accessed or retained for information assurance purposes. Thank you. ______________________________________________________________________________ This email has been filtered by SMX. For more information visit http://smxemail.com ______________________________________________________________________________

1 0

OpenNMS at NZNOG 2018
by Tarus BALOG 31 Jan '18

31 Jan '18

Gang: I just wanted to thank NZNOG for allowing me to come speak at your conference. I had a great time and I wrote about it here: https://www.adventuresinoss.com/2018/01/31/2018-new-zealand-network-operato… As loud, fat and ugly American I have a tendency to overstay my welcome, but if there is interest I'd love to come back next year. We are working on a project called OpenNMS Drift and the company sponsoring it just asked us to add OpenConfig and gRPC telemetry support. The work will be completed by NZNOG 2019, so that is a potential topic. Thanks again for having me. -T -- Tarus BALOG, Maintainer Main: +1 919 533 0160 The OpenNMS Group, Inc. Fax: +1 773 345 3645 Email: tarus(a)opennms.org URL: http://www.opennms.org PGP Key Fingerprint: AFA1 DDA2 24B0 4B61 8D76 9CC7 91F4 79A0 FBF2 DC21

1 0

Lost shirt
by Tim Price 25 Jan '18

25 Jan '18

Did anyone happen to find a spare medium size nznog shirt? I seem to have left mine somewhere by accident and I suspect there aren't any left. Not an emergency but I thought I would ask anyway. Sent from my iPhone

1 0

Conference network and Faucet Statistics
by Jamie Curtis 25 Jan '18

25 Jan '18

Hi all, Firstly I'd like to start by thanking the NZNOG community and in particular the Trustees and conference organisers for supporting REANNZ and the Faucet team to deploy a Faucet based network again for this years conference. As seen by many young development projects, it's often a challenge to find places to get good production operational experience. Running the network each year at NZNOG has provided some great experience for the team and we've learnt lots each year. Thanks for everyones patience as we've got things stabilised. So - some statistics from the network through to today: * 1799 GB total data forwarded by data-plane * 2,240,472,504 packets forwarded by data-plane * 274 dhcp leases issued * 169 unique mac addresses Some slightly less common statistics that we get thanks to the new monitoring inside Faucet: * 1,345,598 L2 learn events inside faucet * 1.50 GB flooded by data-plane * 79,785 openflow control messages sent by faucet * 27,035 openflow control messages received by faucet And, the contribution to the project thanks to running it at NZNOG: * Two versions of faucet released (1.6.17 & 1.6.18) for required features and bug fixes * 75 commits to git, 667 line additions and 238 line deletions * 284 lines of faucet configuration (YAML) built as examples for others * Three new engineers trained in running Faucet in production * One happy PhD student who now has more data for his research project! Thanks again to all for making NZNOG '18 such a great conference, looking forward to next year already! Jamie -- Jamie Curtis Head of Technology Research & Education Advanced Network New Zealand Ltd M +64 21 392 102 P +64 4 913 6363 E jamie.curtis(a)reannz.co.nz www.reannz.co.nz

1 0

Thanks - Port 43 - IntNZ group changes
by Jordan Carter 24 Jan '18

24 Jan '18

Hi all Thanks for the chance to talk at the Conference today. Just a quick couple of links and pointers. For more info about InternetNZ: https://internetnz.nz/ For more info about NZRS: https://nzrs.net.nz/ For more info about the Domain Name Commission: https://dnc.org.nz/ There's a bit of info about the changes to how we organise the InternetNZ group at this URL: https://internetnz.nz/blog/changing-internetnz-our-organisational-review Our commitment to quality in the services we provide is unchanged - .nz is important and we aim to maintain the level of service you're used to. All current products and services continue through the transition, as we merge IntNZ and NZRS. Brent Carey is the incoming Domain Name Commissioner - he outlined the consultation DNCL are running on access to WHOIS via port 43. The info on that is here: https://dnc.org.nz/port-43 Consultation closes 5 Feb - any info you can share on use cases, impact of any change to that service, etc, would be brilliant in informing any changes. Easy to do by email - policies(a)dnc.org.nz. My email is below. Brent is on dnc(a)dnc.org.nz. We're both here tonight and tomorrow and welcome any thoughts or feedback or questions while NZNOG carries on. Finally thanks to two of our team, Yvonne Shelton and Maryann Robertson, who have been working with the trustees to put this conference together. cheers Jordan -- *Jordan Carter* Group Chief Executive InternetNZ Office: +64 4 495 2118 <04-495%202118> | Mobile: +64 21 442 649 <021%20442%20649> | Skype: jordancarter Email: jordan(a)internetnz.net.nz *A better world through a better Internet *

1 0

NLNZ 2018 domain crawl
by Ben O'Brien 24 Jan '18

24 Jan '18

Hi, We at the National Library are about to begin our 2018 New Zealand domain crawl. As in previous years, the crawl is being run by Internet Archive, and some of you may have already seen the crawlers as IA go through their initial setup with some test crawls. The user agent string their crawlers will be using is: NLNZ_IAHarvester2018 While we do our best to crawl respectfully, obey robots.txt, and break out of any crawler traps before grinding too much bandwidth, if you encounter any issues from us then please get in contact. Cheers, Ben O’Brien | Digital Preservation Web Engineer | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467, Wellington 6140, New Zealand | www.natlib.govt.nz<http://www.natlib.govt.nz/>

1 0

Devoli (aka Vibe) Beverages.
by Callum Barr 23 Jan '18

23 Jan '18

Hi All, Devoli are putting on some tasty beverages in the bar on level 6 of the Rydges in the next 10minutes if anyone is keen. Would be great to see you there! Cheers, Callum -- Callum Barr me(a)callumb.com

1 0

TVNZ on Demand contact
by Stan Rivett 11 Jan '18

11 Jan '18

Afternoon Does anyone have a useful contact at TVNZ on demand? I have a /21 that they seem to think is Australian which is making some of my clients a teensy bit grumpy ;-) Cheers Stan Rivett ------------------ Netspeed PO Box 5691 Dunedin P: +64 3 481 7245 C: +64 21 323 841 ------------------

1 0

Conference registrations
by Dave Mill 07 Jan '18

07 Jan '18

Hi all Just a quick update that registrations are a lot higher when compared to the same date in previous years so its very likely that we'll be selling out this year. If you are planning on attending book soon! Also, make sure you have accommodation sorted before you book the conference - a lot of hotels are also selling out. Cheers Dave

1 1

DNS OARC March 2018: Call for Presentations
by Geoff Huston 15 Dec '17

15 Dec '17

Yes, it is on the other side of the world. On the other hand, if the DNS is your obsessive passion, this is the best venue around that will allow you to share your interest with other like minded geeks. :-) Geoff [with apologies to those who see this on multiple lists] Call For Presentations The 28th DNS-OARC Workshop will be hosted by ICANN in San Juan, Puerto Rico, and will take place on March 8th and 9th immediately before ICANN61 (March 10th - 15th) [*] The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. The first day of the workshop will start with a Members-only session which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted on the first day of the workshop, until 4pm. Workshop Milestones: 19 Jan 2018 - Deadline for submission 23 Jan 2018 - Initial contribution list published 16 Feb 2018 - Full agenda published 02 Mar 2018 - Deadline for slideset submission Details for presentation submission are published here: <https://indico.dns-oarc.net/event/28/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Ray Bellis, for the OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) [*] <https://www.icann.org/news/blog/icann61-still-slated-for-puerto-rico> <https://www.icann.org/news/blog/a-look-ahead-to-icann61-in-puerto-rico>

1 0

Looking for a network engineer/admin internship - 6 month
by Maël Kervella 13 Dec '17

13 Dec '17

Hi everyone, I'm a French student at CentraleSupélec school (http://www.centralesupelec.fr/en) I'm currently doing a gap year before starting my last student year (master's degree) in IT security and I've nearly finished the first 6 months of this gap year as a software developer on the VLC media player. I'm now looking for a 6-month internship abroad (thus out of France) during the first semester of 2018. I'm free from mid-january to end of august 2018 and willing to improve my skills as a network manager and/or network security so I'm asking here if anyone has an internship as Network Engineer or Network Admin available for that period. I've been invested in IT and new technologies for around a decade and I really got involved into networks management when I took in charge my school's campus network (200+ users). That gave me the opportunity to learn a lot about the technologies involved from Linux systems, to routing equipment, from OSI layers to various protocols while dealing with daily maintenance of the systems and users problems. I fluently speaks French and English and know basics of Spanish too. I'm open for jobs at any location. For more about my profile and my projects or any question, feel free to check out my web site at https://www.maelkervella.eu or contact me off the list at mk(a)maelkervella.eu. Thanks Maël Kervella -- web : www.maelkervella.eu email : mk(a)maelkervella.eu tel : +33634983646

1 0

APNIC Hackathon @ APRICOT 2018
by Elly Tawhai 12 Dec '17

12 Dec '17

________________________________________________________________________ APNIC Hackathon @ APRICOT 2018 ________________________________________________________________________ Hi NZNOG Community, Applications are open for APNIC's first Hackathon, to be held from 23 to 25 February 2018 in Kathmandu, Nepal. What are Hackathons? -------------------- Hackathons (hacking marathons) are events where a group of people work together on a pre-defined set of problems, intensively, for a period of a few days. At the first APNIC Hackathon, participants will identify and help resolve IPv6-related challenges of their choice. Attendance is free but will be limited to 25 participants. Who should apply ---------------- - Informatics professionals (developers, testers, designers and so forth) - Telecommunications professionals (network/telecom engineers, network administrators/operators and so forth) - Researchers working on Internet measurements, networking, or similar projects - Advanced students of technology degrees For more information, application form, and key dates, visit the APRICOT 2018 website: https://2018.apricot.net/program/hackathon Participants will also receive an APNIC Hackathon t-shirt, a certificate of participation, and a chance to win assorted prizes. For any further queries, please email the Hackathon team at: conference(a)apnic.net _______________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net _______________________________________________________________________

1 0

NZNOG 2018 Speakers
by Dave Mill 04 Dec '17

04 Dec '17

Hi all We've published a list of all speakers accepted in to the conference proper so far (Thursday and Friday). http://www.nznog.org/nznog18/nznog-2018-conference-speakers Just a reminder that our early-bird accommodation rates close on the 12/12/17. Cheers Dave

1 0

Facebook #NETENGCODE NZNOG Hackathon 2018
by Dave Mill 30 Nov '17

30 Nov '17

Hi all We're excited to announce that Facebook are running a network automation hackathon as part of NZNOG. Full details and registration are here - https://netengcodenzhack2018.splashthat.com/ This is not a type of event that often comes to NZ so I'd encourage anyone that is interested to register early. Expect an update on confirmed speakers for the conference proper soon also. Note, our Rydges' accommodation rate ends on 12/12/17. Cheers Dave (on behalf of the NZNOG Trust)

1 0

Kiwibank phishing reporting email issues
by Jean-Francois Pirus 15 Nov '17

15 Nov '17

If anybody from Kiwibank on here, your Kiwibank phishing reporting email is having issues. aka: sending to suspicious.email(a)kiwibank.co.nz you get: Subject: Undeliverable Mail: "Fwd: You've a new message" Your message: From: jfp(a)clearfield.com Subject: Fwd: You've a new message Could not be delivered because of Server refused mail at END OF DATA - 550 5.7.64 Relay Access Denied ATTR36. For more details please refer to https://support.microsoft.com/kb/3169958 [ME1PR01MB1170.ausprd01.prod.outlook.com] [ME1PR01CA0043.ausprd01.prod.outlook.com] [ME1AUS01FT003.eop-AUS01.prod.protection.outlook.com] The following recipients were affected: Kiwibank-abuse(a)feeds.phishlabs.com Additional Information ====================== Original Sender: <jfp(a)clearfield.com> Sender-MTA: <65.55.88.146> Remote-MTA: <65.55.88.138> Reporting-MTA: <smtp.kiwibank.co.nz> MessageName: <B5a0b538c0000.5a0b538c000e.000a.mml> Last-Attempt-Date: <09:50:26 Wed, 15 November 2017> -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

3 2

Re: [nznog] That FYI from Dylan at Samsung
by Damian Kissick 12 Nov '17

12 Nov '17

Hey all, Just a heads up that I got a hold of someone at Samsung and they are aware of it and apparently working on fixing it. Can a moderator please unsubscribe the e-mail address from the list in the short term? Cheers, - Damian On 13 November 2017 at 10:36, Dylan DeLoretta <dylan(a)gtlnetworks.com> wrote: > Good morning, > > > > Please refer to the enclosed document for your kind perusal > > > > Kind regards, > > > > *Dylan DeLoretta* > > Technical Support | GTL Networks Ltd | New Zealand > > DDI +64 9 415 6711 <09-415%206711> > > dylan(a)gtlnetworks.com | www.samsungnz.com > > > > [image: Description: Description: GTL-Logo] [image: > Description: Description: Samsung_Ent_IPSolutions] > > > > The information contained in this e-mail is privileged and confidential > and intended for the addressee only. If you are not the intended recipient, > you are asked to respect that confidentiality and not disclose, copy or > make use of its contents. If received in error you are asked to destroy the > e-mail and contact the sender immediately. > > > > > > > > > > > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > https://list.waikato.ac.nz/mailman/listinfo/nznog > >

1 0

FW: FYI
by Dylan DeLoretta 12 Nov '17

12 Nov '17

Good morning, Please refer to the enclosed document for your kind perusal Kind regards, Dylan DeLoretta Technical Support | GTL Networks Ltd | New Zealand DDI +64 9 415 6711 dylan(a)gtlnetworks.com<mailto:dylan(a)gtlnetworks.com> | www.samsungnz.com<http://www.samsungnz.com/> [Description: Description: GTL-Logo] [Description: Description: Samsung_Ent_IPSolutions] The information contained in this e-mail is privileged and confidential and intended for the addressee only. If you are not the intended recipient, you are asked to respect that confidentiality and not disclose, copy or make use of its contents. If received in error you are asked to destroy the e-mail and contact the sender immediately.

2 1

FW: FYI
by Dylan DeLoretta 09 Nov '17

09 Nov '17

Good day, Please refer to the enclosed document for your kind perusal Kind regards, Dylan DeLoretta Technical Support | GTL Networks Ltd | New Zealand DDI +64 9 415 6711 dylan(a)gtlnetworks.com<mailto:dylan(a)gtlnetworks.com> | www.samsungnz.com<http://www.samsungnz.com/> [Description: Description: GTL-Logo] [Description: Description: Samsung_Ent_IPSolutions] The information contained in this e-mail is privileged and confidential and intended for the addressee only. If you are not the intended recipient, you are asked to respect that confidentiality and not disclose, copy or make use of its contents. If received in error you are asked to destroy the e-mail and contact the sender immediately.

1 0

BRAS Options
by Stan Rivett 09 Nov '17

09 Nov '17

Hi all The time has come to replace my poor old Cisco 7301 and the quote I got for an ASR1002-HX made my eyes water. Still waiting for a Juniper quote but the general discussion seemed like similar numbers. Are there any other reliable options out there that don't cost more than my first house? Cheers Stan Rivett ------------------ Netspeed PO Box 5691 Dunedin P: +64 3 481 7245 C: +64 21 323 841 ------------------

7 7

Re: [nznog] BRAS Options
by Stan Rivett 09 Nov '17

09 Nov '17

Crikey, thanks for all the replies Yes we need 10 Gbit, at least 3 ports and I'd rather not be too specific about numbers but more than a few thousand. Apologies for being a bit of a cheap bugger but you know what its like as an SME, it all comes out of my pocket ;-) Cheers Stan Rivett ------------------ Netspeed PO Box 5691 Dunedin P: +64 3 481 7245 C: +64 21 323 841 ------------------ On 8 November 2017 at 11:14, Tim Price <tim(a)initech.co.nz> wrote: > Juniper MX5 + licensing shouldn’t cost you more than $30k depending on > your Juniper partner status and where you buy it from. > > > > *From: *<nznog-bounces(a)list.waikato.ac.nz> on behalf of Stan Rivett < > stan(a)netspeed.net.nz> > *Date: *Wednesday, 8 November 2017 at 11:02 AM > *To: *nznog <NZNOG(a)list.waikato.ac.nz> > *Subject: *[nznog] BRAS Options > > > > Hi all > > > > The time has come to replace my poor old Cisco 7301 and the quote I got > for an ASR1002-HX made my eyes water. Still waiting for a Juniper quote but > the general discussion seemed like similar numbers. > > > > Are there any other reliable options out there that don't cost more than > my first house? > > > > Cheers > > > > Stan Rivett > > ------------------ > > Netspeed > > PO Box 5691 > > Dunedin > > P: +64 3 481 7245 <03-481%207245> > > C: +64 21 323 841 <021%20323%20841> > > ------------------ > > _______________________________________________ NZNOG mailing list > NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog >

9 18

Open Source LI project
by Shane Alcock 09 Nov '17

09 Nov '17

Hi all, A couple of months back, there was a discussion on this list about the ETSI standard for lawful intercept and the lack of available open source implementations of the standard. After some preliminary research and consultation with a handful of operators, WAND (and myself in particular) are putting together a proposal to develop an ETSI-compliant lawful intercept software tool, provided that this is still something that will be of use to people in the NZNOG community. We propose that the resulting software will be open-source and freely available to anyone, but that anyone who wants to see this project progress quickly should consider chipping in some funding to help cover the cost of having a dedicated programmer working on this for ~10-20 hours a week. The total funding pool doesn't need to be overly large: I am confident we will need much less than some of the numbers I've been hearing as the likely cost of a single piece of ETSI-compliant vendor kit. Of course, anyone who is providing funding would be consulted during the development process to ensure that the resulting software will be compatible with their particular network configuration. For now, I'd be interested in hearing from anyone who would like to use this software, regardless of whether you are able to fund the development or not. Replies can be on or off list. If we get enough interest, we would be looking at holding a meeting with anyone interested in funding later on this month (probably in Hamilton) to discuss the requirements for the software and how the funding model is going to work. The goal is to try and have the software in a deployable state (including being signed-off by police as being compliant) by April. I'm happy to take further questions or comments, either on or off list. Thanks, Shane Alcock Research Programmer WAND University of Waikato

2 2

NZNOG conference registrations are open!
by Dave Mill 08 Nov '17

08 Nov '17

Hi all Registrations are open - https://nznog-2018.lilregie.com . Our conference is being held at the Rydges Hotel, Queenstown from 22 - 26 January, 2018 - http://www.nznog.org/nznog18/venue Conference schedule and general information : http://www.nznog.org/nznog18 Available training : http://www.nznog.org/nznog18/nznog-2018-training . Please note, Facebook are handling their own registrations for the Wednesday Facebook event. If you are taking part in the Mikrotik training please note the prerequisites on our training page. We'll be publishing details on the talks/speakers at the conference proper (Thur/Fri) when we accept the talks. Expect the first details on those in the next couple of weeks. Any questions please ask. Cheers Dave

2 2

Important announcement from Microsoft
by Peter Tobin 07 Nov '17

07 Nov '17

On behalf of Microsoft Auckland (APE), Wellington (WIX) and AKL-IX Exchange peers, Microsoft is in the process of refining our peering policies to better serve our customers and the internet community. As part of this we are reaching out to peers for direct or bilateral BGP sessions, as we will stop advertising routes via the public route servers shorty. If you wish bring up a direct BGP session with us, review our peering policy at www.microsoft.com/peering<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.microso…> and request a session using the peering request form<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.micros…>. Please also ensure your PeeringDB record is up to date and has a 24x7 NOC role email and phone number listed, and only request a session if we are not already directly peered. This change is a reflection of Microsoft’s evolving IX policy, and is in the process of being implemented across various exchanges. The drivers behind this are many, and include more predictable routing, cleaner ASN path metrics as well as internal tool changes. Thank you for peering with Microsoft. AS8075 [osoft] http://www.peeringdb.com/view.php?asn=8075<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.peering…> ……………………………….. If any peers have difficulty in achieving a bi-lat across exchange fabric please reach out to the CityLink team (peering(a)citylink.co.nz)<mailto:peering(a)citylink.co.nz)> as we may be able to assist with facilitation via our contacts within Microsoft. CityLink Peering Team

1 0

Important announcement from Microsoft
by Peter Tobin 07 Nov '17

07 Nov '17

On behalf of Microsoft Auckland (APE), Wellington (WIX) and AKL-IX Exchange peers, Microsoft is in the process of refining our peering policies to better serve our customers and the internet community. As part of this we are reaching out to peers for direct or bilateral BGP sessions, as we will stop advertising routes via the public route servers shorty. If you wish bring up a direct BGP session with us, review our peering policy at www.microsoft.com/peering<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.microso…> and request a session using the peering request form<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.micros…>. Please also ensure your PeeringDB record is up to date and has a 24x7 NOC role email and phone number listed, and only request a session if we are not already directly peered. This change is a reflection of Microsoft’s evolving IX policy, and is in the process of being implemented across various exchanges. The drivers behind this are many, and include more predictable routing, cleaner ASN path metrics as well as internal tool changes. Thank you for peering with Microsoft. AS8075 [rosoft] http://www.peeringdb.com/view.php?asn=8075<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.peering…> ……………………………….. If any peers have difficulty in achieving a bi-lat across exchange fabric please reach out to the CityLink team (peering(a)citylink.co.nz)<mailto:peering(a)citylink.co.nz)> as we may be able to assist with facilitation via our contacts within Microsoft. CityLink Peering Team

1 0

NZNOG 2018 Update
by Dave Mill 31 Oct '17

31 Oct '17

Hi all Our CFP has now officially closed. We've received a lot of good submissions and will begin accepting talks soon. If you have missed the CFP close and still want to talk definitely let us know. However, we will first be accepting the on time submissions. We've added a page about the training events we're offering to our website - http://www.nznog.org/nznog18/nznog-2018-training . The Mikrotik training has some pre-requisite details on that page. Go Wireless are offering the required pre-requisite training in the near future. Links to Go Wireless' training page is on our training page. We're just waiting to lock in the Facebook training and maybe one other training session and we'll then open registrations. Apologies for the delays - we're chasing the other parties as much as we can. Cheers Dave (on behalf of the NZNOG Trust)

1 0

Sysadmin Miniconf 2018 - Call for Presentations
by Simon Lyall 24 Oct '17

24 Oct '17

There will be a one day mini conference on Linux Systems Administration held as part of linux.conf.au 2018 (held in Sydney, Australia on 22 - 26 January 2018). The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf, https://sysadmin.miniconf.org/cfp18.html (A copy of the CFP text is included below for your convenience.) Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. This is our 12th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website: https://sysadmin.miniconf.org/ -=+ Presentation Topics +=- We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments large and small. Topics for presentations could include (but are not limited to): * Systems Administration Best Practice * Virtualisation and Cloud Computing * Containers and orchestration * Sysadmin Administration in a "serverless" environment (FAAS) * TLS everywhere * Monitoring and metrics. Collection, storage and presentation * Infrastructure/Platform/Software as a Service (IAAS, PAAS, SAAS) * Networkng: IPv6, SDN (Software Defined Networking), performance * DevOps, Configuration Management and provisioning * Bootstrapping systems, Lifecycle Management * Dealing with BYOD * Backups in a virtual/distributed world * Troubleshooting techniques * DevOps and SysAdmin Culture * Web and Email management * Keeping legacy systems functioning * War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. -=+ Format of Presentations +=- We are now seeking proposals for presentations at the mini-conference. We have openings for: 15-25 minute short presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA keynote before morning tea), we expect the majority of available timeslots to be 20 minutes or less, with possibly 1-2 slightly longer talks if there is space in the schedule. We have a general policy of accepting a high proportion of proposals but handing out relatively short timeslots. Please see previous years Miniconf schedules for examples of how the programme is organised. -=+ Submitting talks +=- Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up by the time the conference happens) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor to priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. To submit a talk to the LCA2017 Sysadmin Miniconf, create an account on the LCA2018 website: https://linux.conf.au/dashboard create a speaker profile, and then select "New Proposal" and "System Administration Miniconf Presentation", or while logged into the LCA2018 site, go directly to: https://rego.linux.conf.au/proposals/submit/sysadmin-miniconf/ If you have a preferred length of your Short Presentation (15/20/25 minutes) or Lightning Talk (5/10 minutes) please use the Private Abstract field to describe what would work best for your talk. Otherwise we will pick a length that best suits the gaps in the programme as we put the final programme together. In some cases we maybe able to add a few extra minutes to a few Short Presentations if there is any spare time left in the programme. -=+ Dates and Deadlines +=- To encourage early submissions, priority (both of inclusion and scheduling) will be given to presentations submitted by 23:59 UTC on the 5th of November 2017. I f you have a good presentation idea, please let us know early, even if you need time to finalise the presentation abstract. Please indicate if you need an early confirmation to aid you in arranging time off work or travel; we will do our best to assist. 2017-11-05 - Deadline for early submissions 2017-12-03 - Deadline for submissions 2017-12-10 - Miniconf programme published 2018-01-22 - Sysadmin Miniconf held. -=+ Contact and Questions +=- Please see our website at https://sysadmin.miniconf.org for more information on the Miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2018 @ sysadmin.miniconf.org Ewen McNeill and Simon Lyall LCA2018 Sysadmin Miniconf Conveners -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

1 0

ntp.net.nz changes and update
by Josh Simpson 16 Oct '17

16 Oct '17

Hi NZNOG, Time for a ntp.net.nz update and upcoming changes. ntp1.ntp.net.nz needs to be migrated to a new router, this will mean the IPv4 and IPv6 addresses will change, currently scheduled for 2017-10-22. 202.46.191.123 to 202.46.177.18 2001:dce:4000:2::123 to 2001:dce:3:17a::18 ntp2.ntp.net.nz is still IPv4 only, we are working on restoring IPv6 once we have upstream connectivity sorted. ntp3.ntp.net.nz has had IPv6 turned back on, this has been operating with v6 since 2017-09-25. ntp4.ntp.net.nz has been live for over 14 months, IPv4 only, this is located in Christchurch. We are working with our upstream to have IPv6 connectivity. We have also been testing a number of the servers in pool.ntp.org in the New Zealand and Oceania Pools, this has been going well and we have seen a jump in NTP packets per second on each node from a max of ~7 to a max of ~1000. We plan to add the rest of the servers in shortly. Details of the service can be found at https://ntp.net.nz As always let us know if you have any queries. Cheers Josh -- Josh Simpson Systems Administrator NZRS Ltd M: +64 21 783 399 P: +64 4 555 0124 GPG: 6516 B4EA 413B CAED 57B5 0956 124C 8AC3 A362 8080 www.nzrs.net.nz

1 0

[Owasp-New_Zealand] OWASP NZ Day 2018 - Registration, call for presentations, trainers and sponsors
by Kim Carter 03 Oct '17

03 Oct '17

Hi All, The OWASP NZ crew are pleased to announce the 9th OWASP New Zealand Day conference, to be held at the University of Auckland. As per previous years, OWASP NZ Day 2018 will be a free conference dedicated to information security with an emphasis on secure development techniques and management. The con will be held on the 5th of February, with training being run the day before (4th of February). Further information is available on the event wiki page here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018 The registration link can be found here: https://owaspnz2018.eventbrite.com/ Please note that registration cut off is the 29th of January. We have plenty of seats, and though we've come to expect the flood of last minute emails from those of you that are either forgetful or just plain lazy, it messes with our numbers. It also hurts our collective feelings. So register. Do it. We have a large number of presenter slots to fill. We're interested in topics covering everything from introductory topics, to deeply technical subjects to risk and compliance. Presentation submissions are welcome from all interested parties, and we're especially keen to hear from the developers and other technical communities, not just the professional infosec nerds. We will not consider vendor pitches, commercial content or other such attempts to pedal your filthy, filthy wares. More info is available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Pre…<https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2017#tab=Call_For_Pre…> CFP Deadline: 8th of December. This year we have a number of training slots to fill. If you have a security related training you'd like to give the day before the main con, then please sub! More info is available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Tra…<https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2017#tab=Call_For_Tra…> CFT Deadline: 8th of December. OWASP is strictly not for profit and to keep our conference free we need sponsors to support us. The sponsorship cash is used to help make OWASP NZ Day a free and valuable experience for the audience. More details on sponsorship specifics available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Spo… Event Website: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018 About OWASP: https://www.owasp.org/ About the NZ Chapter: https://www.owasp.org/index.php/New_Zealand Cheers! Denis Andzakovic, Kim Carter and Kirk Jackson OWASP NZ Chapter Leaders

1 0

TICSA and Lawful Interception
by ticsa＠police.govt.nz 01 Oct '17

01 Oct '17

Hi NZNOG The TICSA Registrar invites you to a Technical Discussion about Lawful Interception. There has been a lot of discussion about LI recently and we would like to clarify what it means to be Compliant. The aim of this meeting is to work through ‘the how’ and to answer any questions you may have. This is targeted at Network Engineers to whom PCAP, ASN.1 and ETSI 102.232-1 means something. Please register your interest by emailing off list, as space is limited (attendance by invitation only). Meeting will be held in Wellington on the 16th of October. Cheers Neil =============================================================== WARNING The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately

1 0

KSK Rollover Postponed
by Save Vocea 28 Sep '17

28 Sep '17

Dear NZNOG community, A couple of weeks ago I posted ICANNs’ KSK rollover timelines in here. It was announced today that the plan to change the cryptographic key that helps protect the Domain Name System (DNS) is being postponed. The changing or "rolling" of the KSK Key was originally scheduled to occur on 11 October, but it is being delayed because some recently obtained data shows that a significant number of resolvers used by Internet Service Providers (ISPs) and Network Operators are not yet ready for the Key Rollover. The availability of this new data is due to a very recent DNS protocol feature that adds the ability for a resolver to report back to the root servers which keys it has configured. Full announcement is here: https://www.icann.org/news/announcement-2017-09-27-en Regards, Save Vocea ICANN staff in the region From: Save Vocea <save.vocea(a)icann.org> Date: Tuesday, September 12, 2017 at 4:53 PM To: NZNOG <nznog(a)list.waikato.ac.nz> Subject: KSK rollover timeline and how to check if your systems are ready Dear NZNOG list members, I’d appreciate if this is shared through your network /organizations and to check if your systems won’t be affected by the following change. The Internet Corporation for Assigned Names and Numbers (ICANN) is planning to roll, or change, the “top” pair of cryptographic keys used in the Domain Name System Security Extensions (DNSSEC) protocol, commonly known as the Root Zone KSK. This will be the first time the KSK has been changed since it was initially generated in 2010, and is considered an important security step, in much the same way that regularly changing passwords is considered a prudent practice by any Internet user. What does that mean? Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other Domain Name System (DNS) resolver operators; DNS resolver software developers; system integrators; and hardware and software distributors who install or ship the root's "trust anchor." The KSK is used to cryptographically sign the Zone Signing Key (ZSK), which is used by the Root Zone Maintainer to DNSSEC-sign the root zone of the Internet's DNS. Why do you need to prepare? Currently, 25% of global Internet users, or 750 million people, use DNSSEC-validating resolvers that could be affected by the KSK rollover. If these validating resolvers do not have the new key when the KSK is rolled, end users relying on those resolvers will encounter errors and be unable to access the Internet. How to know if your systems are up-to-date? ICANN is offering a test bed for operators or any interested parties to confirm that their systems handle the automated update process correctly. Check to make sure your systems are ready by visiting: http://go.icann.org/KSKtest. What is the timeline for this process? October 27, 2016: KSK rollover process begins as the new KSK is generated. July 11, 2017: Publication of new KSK in DNS. September 19, 2017: Size increase for DNSKEY response from root name servers. October 11, 2017: New KSK begins to sign the root zone key set (the actual rollover event). January 11, 2018: Revocation of old KSK. March 22, 2018: Last day the old KSK appears in the root zone. August 2018: Old key is deleted from equipment in both ICANN Key Management Facilities. More information about the root zone KSK rollover is available here: https://www.icann.org/resources/pages/ksk-rollover. Thank you, Save vocea VP, Global Stakeholder Engagement, Oceania ICANN

2 1

NZNOG 2018 Updates
by Dave Mill 24 Sep '17

24 Sep '17

Hi all As promised here is the list of workshops/tutorials that we have organised so far. These aren't definite yet but are very likely to happen. *Wednesday tutorials:* -Network Security Tutorial (run by APNIC) -Facebook Network Automation Hack event (run by Facebook, will be similar to https://netengcodehack2017.splashthat.com/%29 ) *Workshop (roughly Monday 9am to Wednesday 12pm):* -Mikrotik MTCINE training - Outline here https://mikrotik.com/download/pdf/MTCINE_Outline.pdf Our CFP is still open. Details here - http://www.nznog.org/nznog18/call-for-papers-2018 . If anyone else wants to help Richard Nelson and myself put together the programme for Thur/Fri please get in contact. So far we've received details on some really interesting talks. If you want to sponsor NZNOG please reach out also. Cheers Dave

1 0

Datacom having network problems?
by Mauricio Freitas 23 Sep '17

23 Sep '17

Does anyone have a network contact at Datacom please? I can't get to datacom.co.nz (direct) from my NZ connection, and can't get to Geekzone via Cloudflare either (CF returns a timeout trying to reach origin). However if I fire a VPN to Sydney both datacom.co.nz and Geekzone work fine. Called datacentre and ops guys have no idea what's going on. Seems that traffic to NZ is being impacted but not to overseas. Cheers Mauricio Freitas https://about.me/freitasm

1 1

NZNOG 2018 updates
by Dave Mill 14 Sep '17

14 Sep '17

Hi all I wanted to give some more details on our plans for the conference next year. On Wednesday Facebook are looking at holding a Network Automation Hack event as part of NZNOG. This should be a really awesome session. It will be similar to this - https://netengcodehack2017.splashthat.com/%29 . Whilst this isn't completely locked in yet it has approval internally at Facebook and looks set to happen. I'd suggest if this interests you then plan to be at NZNOG from Wed - Fri. Be warned, seats will be limited. The other event I wanted to announce I unfortunately still can't. I've been chasing people pretty hard on it and I still don't know that it will definitely happen :( I will update when I know more. Cheers Dave

1 0

Dialup over Ethernet
by Ewen McNeill 13 Sep '17

13 Sep '17

A client had a (business) customer switch over to UFB and needed assistance reconfiguring the (Mikrotik) router being attached to the ONT -- it turned out whoever first set up the Mikrotik (sensibly) assumed it'd be seeing IP packets over VLAN 10, but actually the ISP required IP packets over PPPoE over VLAN 10 in order for it to work. Looking around it appears this client's customer's ISP isn't the only one that is requiring PPPoE over VLAN tagging over Ethernet for their UFB connections. Is there a reason other than "let's make everything look like 1990s dialup so it works with our legacy equipment" for the bit/CPE CPU overhead of PPPoE on UFB, including imposing the lowered usable MTU and PMTU discovery headaches on the end user? The only one that really comes to mind is "user/password authentication" (rather than needing to collect CPE MAC addresses which seems to happen with, eg, Vodafone cable/FibreX). But it's not clear to me why, eg, 802.1X isn't used for the user/password authentication in that case; or DHCP with some extension to pass a "secret" identifier. 20-bytes-per-packet-forever seems a large overhead to pay for user/password authentication at CPE power on.... (Maybe in the beginning there's "lack of CPE support" -- but we're a few years into the UFB rollout, and lots of ISPs seem to be supplying their own ISP-badged CPEs anyway, which could presumably implement whatever was needed.) Ewen

10 16

AirNZ SPF Issues
by Pieter De Wit 11 Sep '17

11 Sep '17

Hey NZNOG’rs, I know that this is not “nice to do” but I have tried the contact centre - the issue is logged but I doubt it will get to the right people ? AirNZ currently has 2 SPF entries and this is causing emails to fail: dig TXT airnz.co.nz | grep spf1 airnz.co.nz. 21301 IN TXT "v=spf1 a ..." airnz.co.nz. 21301 IN TXT "v=spf1 …" Please fix :) I have error logs going back to the 8th of Aug, if that helps ? I don’t know what other domains this was done on. Cheers, Pieter

2 1

KSK rollover timeline and how to check if your systems are ready
by Save Vocea 11 Sep '17

11 Sep '17

Dear NZNOG list members, I’d appreciate if this is shared through your network /organizations and to check if your systems won’t be affected by the following change. The Internet Corporation for Assigned Names and Numbers (ICANN) is planning to roll, or change, the “top” pair of cryptographic keys used in the Domain Name System Security Extensions (DNSSEC) protocol, commonly known as the Root Zone KSK. This will be the first time the KSK has been changed since it was initially generated in 2010, and is considered an important security step, in much the same way that regularly changing passwords is considered a prudent practice by any Internet user. What does that mean? Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other Domain Name System (DNS) resolver operators; DNS resolver software developers; system integrators; and hardware and software distributors who install or ship the root's "trust anchor." The KSK is used to cryptographically sign the Zone Signing Key (ZSK), which is used by the Root Zone Maintainer to DNSSEC-sign the root zone of the Internet's DNS. Why do you need to prepare? Currently, 25% of global Internet users, or 750 million people, use DNSSEC-validating resolvers that could be affected by the KSK rollover. If these validating resolvers do not have the new key when the KSK is rolled, end users relying on those resolvers will encounter errors and be unable to access the Internet. How to know if your systems are up-to-date? ICANN is offering a test bed for operators or any interested parties to confirm that their systems handle the automated update process correctly. Check to make sure your systems are ready by visiting: http://go.icann.org/KSKtest. What is the timeline for this process? October 27, 2016: KSK rollover process begins as the new KSK is generated. July 11, 2017: Publication of new KSK in DNS. September 19, 2017: Size increase for DNSKEY response from root name servers. October 11, 2017: New KSK begins to sign the root zone key set (the actual rollover event). January 11, 2018: Revocation of old KSK. March 22, 2018: Last day the old KSK appears in the root zone. August 2018: Old key is deleted from equipment in both ICANN Key Management Facilities. More information about the root zone KSK rollover is available here: https://www.icann.org/resources/pages/ksk-rollover. Thank you, Save vocea VP, Global Stakeholder Engagement, Oceania ICANN

1 0

New Zealand Internet Research Forum 2017 - Registrations open
by Nicole Skews-Poole 11 Sep '17

11 Sep '17

Kia ora, Registrations for this year's New Zealand Internet Research Forum are open. The Forum will be held on 8 November, the day before NetHui 2017 <https://2017.nethui.nz/> - as part of the NetHui umbrella. *You can register for free by selecting the first event here: https://nethui-2017.lilregie.com/step1 <https://nethui-2017.lilregie.com/step1>* you can also register there for NetHui 2017 should you want to come along! The programme for this year will be finalised soon, and in the meantime you can check out last year's programme <https://internetnz.nz/internet-research-forum-2016-programme> for an idea of what goes on at the NZIRF. Please consider sharing this with your networks. I look forward to seeing you there! *Ngā mihi nui,* *Nicole Skews-Poole* NZIRF Organiser InternetNZ Mobile: +64 27 323 8914 Email: nicole(a)internetnz.net.nz A better world through a better Internet

1 0

TICSA and lawful intercept
by Dave Mill 06 Sep '17

06 Sep '17

Hi all So, probably a bit a touchy subject this one but here goes.. If you are a network operator and you have more than 4000 customers in my understanding you need to have full interceptions capabilities. (I'm not a lawyer, etc, etc) This is more than just being 'interception ready'. http://www.police.govt.nz/advice/businesses-and-organisations/ticsa/interce… This will mean having a mediation system and being able to produce intercept data in the ETSI standard - again, as far as I know. What are companies/organisations out there doing about this? Is there a nice open source solution out there for this? (I haven't found one yet) Are people putting their heads in the sand and praying they never get served a warrant? Is everyone just shelling out hundreds of thousands of dollars on a vendor LI solutions? What network kit are people integrating with LI in NZ? And note, the last paragraph on the URL I linked above reads: "Can I share interception capability resources? Network operators may co-ordinate, share or contract for services (equipment or staff) in order to meet the interception capability requirements in the Act. However, it remains the responsibility of the network operator to ensure that any such arrangement does not affect any obligations that apply under the Act. Before entering into any such arrangement a network operator must notify the Director of the GCSB." Replies on or off list welcomed. Cheers Dave (AS17705)

9 20

Christchurch Hacker Conference 2017 (CHCon) Tickets and Training now on sale
by CHCon crew 05 Sep '17

05 Sep '17

Hi Everyone. The Christchurch Hacker Conference (CHCon) tickets are now up for grabs at (https://chcon.nz) along with merchandise as part of the ticket purchase process. The conference is running on Friday 27th and Saturday 28th of October We also have a collection of excellent trainings available on Thursday 26 October. A big thanks to Insomnia (platinum) and Quantum Security (silver) for sponsoring us and helping us get this far. We are still looking for additional sponsors to help make the conference even better. We look forward to seeing you at the con! CHCon Team.

1 0

NZNOG'18 - Call For Papers
by Richard Nelson 03 Sep '17

03 Sep '17

The NZNOG organising committee invites papers for its 15th annual conference, to be hosted at Rydges Hotel, Queenstown, New Zealand from 22 - 26th January 2017. There will the three day Workshops 22 – 24 January, a day of tutorials on 24 January with the main conference on 25 – 26 January. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 30th October. Please provide your talk title, duration, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking- related subject matter. Normally presentations are video streamed live and slide decks are posted to the NZNOG website. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. The organising committee will evaluate proposals based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog18/call-for-papers-2018 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

3 2

SPF for Spark Business Mail
by Matthew McTague 22 Aug '17

22 Aug '17

Hi Noggers, Hoping to find some help from someone knowledgeable here as I can't get any answers through normal channels. I'm trying to find the correct SPF record (include FQDN or IP address ranges) for customers sending email via Spark Business Hub Mail. Have tried through normal support channels (to be told the SPF record is commercially sensitive) and have tried normal escalation paths. Anyone with knowledge on the subject, please contact me (perhaps if the correct SPF record can be a reply on-list, so everyone has it on record. It would help the NZNOG community as a whole.) Warm Regards, [https://www.vetta.tech/sig/vetta_signature_logo.png] <http://www.vetta.tech> [https://www.vetta.tech/sig/facebook_signature_icon.png] <http://www.facebook.com/VettaTech> [https://www.vetta.tech/sig/twitter_signature_icon.png] <http://www.twitter.com/VettaTech> [https://www.vetta.tech/sig/linkedin_signature_icon.png] <http://www.linkedin.com/company/2840435> [https://www.vetta.tech/sig/partnersilver.png] [https://s3.amazonaws.com/htmlsig-assets/spacer.gif] Matthew McTague / Systems & Network Engineer matthew(a)vetta.tech<mailto:matthew(a)vetta.tech> / DDI: +64 3 222 6013 Vetta Technologies Ltd 0800 4 VETTA / +64 3 683 9090 Level 3, Cnr Stafford & George Streets, Timaru 16 Pope Street, Christchurch East Tamaki, Auckland PO Box 923, Timaru www.vetta.tech<http://www.vetta.tech> This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender.

2 1

Vodafone outage in Karori/Highbury/Aro Valley (Wellington)
by Joel Wirāmu Pauling 21 Aug '17

21 Aug '17

Just spoke with Vodafone NOC - there was is planned upgrade work going on Karori prod node. Whatever it is seems to have taken out Highbury CMNT network. The Public facing Network status meter however shows all good - when there has been an ongoing outage since around 0100. Change window is meant to close at 0300 so hopefully it resumes before then. I am a little annoyed when there is planned work but the Public reporting tool isn't updated or fed by these things. -Joel

1 0

NZNOG 2018
by Dave Mill 13 Aug '17

13 Aug '17

Hi all There is now a link to book accommodation at our venue at our group rate on our website - http://www.nznog.org/nznog18 . The link is on the Venue page. We will be adding other accommodation options as they get back to our conference organiser. We hope to announce a very good workshop and tutorial in the coming few weeks.. More details on these once they are locked in. If you want to sponsor NZNOG please get in contact - info(a)nznog.org . Cheers Dave

1 0

Multiple connections to UFB in server room
by Paul Adshead 10 Aug '17

10 Aug '17

Hi guys. A shared server room has an active UFB service for another business on the floor. We want UFB service to our office too. Is an additional ONT install needed (as I'm being told by <ISP>)? Or, can Chorus just enable another port on the existing ONT and have and then run a network cable out to both routers from one ONT? Is the ONT capable of multiple PPPOE sessions to the offsite hardware? Or is this just creating a problem that doesn't need to exist (- ie say yes to the second ONT install)? Many thanks, Paul Adshead. 021890258

9 9

Spark (telecom) paging pacnet interface broken ?
by Ian Batterbee 01 Aug '17

01 Aug '17

Hi all, Does anyone here look after, or know who looks after, the 026 400 1283 modem interface to spark paging ? It's currently answering calls, but not giving a modem handshake. (Please don't respond with messages about paging being end-of-life'd, the fire service is paying for it to kept alive on life-support.) Thanks

4 5

IPv6 deployment survey - please participate and disseminate
by JORDI PALET MARTINEZ 30 Jul '17

30 Jul '17

Hi all, I’ve been running a survey for about 15 months, regarding the way IPv6 is being deployed for residential customers. I will be presenting an updated version of the survey results in the next APNIC 44 (https://conference.apnic.net/44/) to be held in Taichung next 7-14 September. As the IPv6 deployment is still ongoing in many countries, it will be interesting to gather new responses for the survey, in order to have as much accurate as possible data. So please, take the survey, is just a couple of minutes, and forward this email to other colleagues, mail exploders for NOGs and others, so we can increase the dissemination as much as possible. We are lacking responses from many countries in AP region, specially India and South Korea. The survey is available in several languages: English: http://survey.consulintel.es/index.php/175122?lang=en Chinese: http://survey.consulintel.es/index.php/175122?lang=zh-Hans Japanese: http://survey.consulintel.es/index.php/175122?lang=ja Korean: http://survey.consulintel.es/index.php/175122?lang=ko Spanish: http://survey.consulintel.es/index.php/175122?lang=es Portuguesse: http://survey.consulintel.es/index.php/175122?lang=pt-BR Thanks ! Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Free 42U Rack
by Jay Lee 26 Jul '17

26 Jul '17

We have a 42U rack in Riccarton exchange available for free. It's in very good condition. Size is H 2m x W 0.6m x D 1.01m, black colour. Mesh doors, side panels and some shelves. Pick up only from the exchange so you need PTN accreditation. If anyone is interested please contact me off list.

1 0

GLIF 2017 programme
by GLIF Secretariat 25 Jul '17

25 Jul '17

All, Apologies for the advertising (and cross-posting), but the programme for this global research and education networking event hosted by AARNet in Sydney is now available, and may be of interest to some… https://www.glif.is/meetings/2017/programme.pdf <https://www.glif.is/meetings/2017/programme.pdf> Regards, Kevin Meynell GLIF Secretariat ---- 17th Annual Global LambdaGrid Workshop - GLIF 2017 25-27 September 2017 Camperdown Campus, University of Sydney, Australia We are pleased to announce the programme for the 17th Annual Global LambdaGrid Workshop, which is being hosted by AARNet, the Australian National Research and Education Network. This event is bringing together networking experts from around the world to collaborate and exchange knowledge on new lambda networking technologies, middleware and applications. The workshop will have a specific focus on how global network architectures are supporting research applications in the Pacific region, in particular astronomy, high-energy physics, and other data intensive science. There will also be demonstrations of high-bandwidth applications. The registration fee is AUD 450 per person (AUD 350 for registered students) up to 23 August 2017, and AUD 500 per person (AUD 400 for registered students) thereafter. Accommodation is available in the Rydges Camperdown at the special rate of AUD 165 per night including GST, the Mercure Sydney Central at the special rate of AUD 249 per night, and the Waldorf Sydney Central Serviced Apartments at the special rate of AUD 195 per night including GST. These can be reserved when registering for the workshop, and should be booked before 23 August 2017. Please note that a Software Defined Networking (SDN) Workshop will also be held on Thursday, 28 September 2017 at the University of New South Wales. You can register, book accommodation and pay online at https://www.glif.is/meetings/2017/ <https://www.glif.is/meetings/2017/> We look forward to seeing you in Sydney!

1 0

Re: [nznog] Paging might be broken again today?
by Troy Baird 23 Jul '17

23 Jul '17

Yep, correct. Michael will email you off list from work mail to follow up on this with some internal teams here. -Troy Baird On 24/07/2017 4:14 PM, "David Maclagan" <david(a)verso.org> wrote: On 2017-07-24 15:32, Michael Fincham wrote: > On Thu, 20 Jul 2017 19:01:49 +1200, Ian Batterbee <ibatterb(a)gmail.com> > wrote: > >> Does anyone here look after, or know who looks after, the 026 400 1283 >> modem interface to spark paging ? >> >> It's currently answering calls, but not giving a modem handshake. >> > > We're getting modemy sounding noises today but NO CARRIER :( > > Anyone know what's up? Spark has not been helpful so far. > Talking to a firie contact, they're under the impression that the platform's been EoLed for everyone other than the firies. So that could be the issue? Cheers David _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog

3 2

Mikrotik and VLAN stripping
by Steve Phillips 18 Jul '17

18 Jul '17

Hi Guys, I was just wondering if it’s possible to set an egress rule on a mikrotik to strip any vlan tag without specifying the VLAN, and if so, what this configuration would look like? (i.e – vlan=any) It seems that you can do this for specific VLANS but if the inbound VLAN tag is random there doesn’t seem to be any ready examples on how to do this. Is it even possible? Or am I just trying to do things incorrectly? -- Steve.

1 0

Surgeries cancelled and patients told to avoid going to Rotorua and Taupo hospitals after fire | Stuff.co.nz
by Alan Maher 16 Jul '17

16 Jul '17

https://www.stuff.co.nz/national/health/94810043/rotorua-hospital-fire-cuts… And you know that this will take more than 24 hours. No form of fire protection?

1 0

Good luck!
by Jesse Archer 16 Jul '17

16 Jul '17

[image: Inline image 1]

3 2

Christchurch Hacker Con (CHCon) 2017 - Call for Presentations Training and Sponsors
by CHCon crew 16 Jul '17

16 Jul '17

Hi Everyone We are proud to announce the second Christchurch Hacker Conference (CHCon), to be held at the UCSA Events Centre, 90 Ilam Rd, Riccarton, on Friday 27 and Saturday 28th October, 2017. That’s right, we’re aiming for a two day conference - with an additional training day before the main event. The call for presenters, trainers, and sponsors is open. We will open registration for general attendees in the coming weeks, so stay tuned as registrations will be limited. CHCon is a two-day conference this year dedicated to technology security with an emphasis on both breaking and building. We will be offering training on the day before the conference (Thursday 26th October). We have a large amount of presenter slots that we need to fill, on everything from the Suggested Topics under the Call For Papers at https://2017.chcon.nz/#cfp. Presentation submissions are welcome from all interested parties, we're not interested in vendor pitches or commercial content. The close off date is approaching fast. More information is available here: https://2017.chcon.nz/#cfp We also have a number of training slots we'd like to fill. If you have a security related training you'd like to give the day before the main conference, please make a submission. More information is available here: https://2017.chcon.nz/#cft CHCon is strictly not for profit and to keep our conference fee as low as possible, we need sponsors to support us. The sponsorship money is used to help make CHCon, an instructive and quality event for the Canterbury & NZ tech community. More information about sponsorship is available here: https://2017.chcon.nz/#cfs Event Website: https://2017.chcon.nz/ Thanks from the CHCon crew

1 0

Request for contact in TVNZ On Demand for escalation of support ticket 117175
by Alexander Neilson 05 Jul '17

05 Jul '17

Hi All Sorry for the noise. Can someone inside TVNZ On Demand please make contact off list. It looks like some of our IP's (At $DAYJOB - inside 45.118.188.0/22) are on some kind of block list being used by TVNZ On Demand for Akamai delivered videos. The video player just shows a fairly useless error message, and when looked at in fiddler a 403 is being returned from the Akamai server. We are not aware of any lists any of the affected IP's are on and I believe they may be legacy listings. I have been trying to work through with TVNZ On Demand Support under Ticket 117175. So far I haven't been able to escalate this or get any feedback or way forward. We have worked with our upstream carrier and they have raised it with Akamai who have indicated it isn't a block they have in place but that their customer has hence trying to make contact with someone who could check if the blocks are recent or prior to being held by us and if recent what caused them so we can resolve it. Thank you for your time. Regards Alexander 022 456 2326

2 1

NZNOG 2018 Announcement
by Dave Mill 02 Jul '17

02 Jul '17

Hi all We'd like to announce that we will be holding NZNOG 2018 at the Rydges Hotel in Queenstown. The conference dates are 22 - 26 January, 2018. The conference proper will be the Thursday and Friday (25 - 26 January) as normal. If anyone is interested in sponsoring the event please make contact with info(a)nznog.org . We will be putting together this year's sponsorship prospectus soon. Previous sponsors have first right of return. Have a good weekend. Cheers Dave (on behalf of the NZNOG Trust)

1 1

RFC 8195 "Use of Large Communities"
by Job Snijders 01 Jul '17

01 Jul '17

Dear NZNOG, RFC 8195 "Use of BGP Large Communities" was just now published: https://tools.ietf.org/html/rfc8195 RFC 8195 presents examples and inspiration for the operational application of Large Communities. The document suggests logical categories of Large Communities and demonstrates an orderly manner of organizing community values within those categories to achieve typical goals in routing policy. Any network or route server operator can consider using the concepts presented as the basis for their own Large Communities repertoire. RFC 8195 is meant as a companion document in the same way that RFC 1998 provided a concrete real-world application for RFC1997 BGP Communities. The RFC draws on the experience of operator communities such as NANOG and NLNOG. A ton of open source implementations [1] with Large support are already available. And with more traditional vendors like IOS XR, Junos, Arista & Nokia having releases around the corner, I hope this will be useful when planning your Large Communities deployment later this year. Kind regards, Job [1]: http://largebgpcommunities.net/implementations/

1 0

Reminder to update noc contact list/details
by Joel Wirāmu Pauling 28 Jun '17

28 Jun '17

Hi all; was looking something up for a client and noticed the Noc list here; http://www.nznog.org/noc-list - could do with some updating. Voyager is missing, other things I know to be wrong are that several of the Noc's listed have been subsumed into larger orgs. -Joel

14 16

NZIX AGM
by Dave Mill 25 Jun '17

25 Jun '17

Hi all NZIX (the peering exchange formerly known as AKL-IX) are holding their AGM in Auckland on June 27. Details are here - https://ix.nz/2017/05/30/annual-general-meeting/ NZIX is a member run, not-for-profit, peering exchange. Have your say in where the IX is heading. Non-members are also welcome. Hope to see you there! Cheers Dave

1 1

Beer
by Lesley Longhurst 22 Jun '17

22 Jun '17

Sorry for the distraction, I just think you should all see this label. Homebrew made by a friend-of-a-friend. Rather tasty, too. [cid:image001.png(a)01D2EC34.7CF018D0] Lesley Longhurst Technical Lead - Network Services Opus International Consultants Ltd, Opus IT Operations 33 The Esplanade, Petone, Lower Hutt 5012, New Zealand PO Box 30 845, Lower Hutt 5040, New Zealand +64 21 244 3718 lesley.longhurst(a)opus.co.nz<mailto:lesley.longhurst(a)opus.co.nz> www.opus.co.nz<http://www.opus.co.nz>

1 0

InternetNZ presents: Dr Marc Bruyere - The TouSIX project: SDN IXPs from design to production
by Dean Pemberton 14 Jun '17

14 Jun '17

Hi all, Just wanted to let you know about a presentation that InternetNZ is hosting in Wellington. The TouSIX project: SDN IXPs from design to production Wed 28th Jun 12:00pm – 1:00pm InternetNZ offices, level 11, 80 Boulcott Street, Wellington, New Zealand Registration: https://the-tousix-project-sdn-ixps-from-design-to-production.lilregie.com/… Come along to a presentation from Dr. Marc Bruyere. Bio here: https://www.internetsociety.org/afpif-2016/speakers/dr-marc-bruyere The Internet eXchange Points (IXP) are essential for the Internet evolution as they empower high bandwidth low latency and inexpensive local traffic peering as opposed to transit traffic. OpenFlow SDN enables more dynamic network programmability to control network behaviour via open interfaces, as opposed to the legacy closed-box solutions and proprietary-defined interfaces. This presentation is about the migration of the TouIX from a traditional to a full OpenFlow IXP. It especially describes how switches have been selected, configured and installed, and presents the TouSIX-Manager tools that have been developed for the IXP fabric robustness and members benefit. It also includes future SDX work in Japan and elsewhere, and the historical NZ based CARDIGAN SDX. TouIX is a non-profit neutral Internet eXchange Point organisation founded in 2005. It provides an interconnected network infrastructure at 4 PoPs around the city of Toulouse and the Paris FranceIX and LyonIX IXPs. Please note catering will not be provided.

1 0

plea for increase participation in v6ops/IETF
by JORDI PALET MARTINEZ 10 Jun '17

10 Jun '17

Hello all, At the last LACNIC event, I mentioned on a couple of occasions the need for ISPs in the region, especially small and medium-sized ones, to participate in the decisions taken in the IETF IPv6 Operations Working Group (v6ops). I’m sending this here as well, as I believe the situation also apply to this region. When I asked among the attendees how many participate in v6ops, only one person raised his hand. What does it mean to participate in the mailing list? Follow some emails (sometimes only 1-2 a week, sometimes they can be several in a day), and therefore learn about what is being discussed and give your opinion and, given that decisions are made by Consensus, influence them. What consequences has NOT participating? That decisions against your interests/opinions could be taken, and obviously do not consider your perspective in the standards. Generally large operators are involved, which implies that your interests are not sufficiently represented, and in general are contrary to yours. Your "vote/opinion" is not worth more than yours, but the big one is present and the small/medium NO! I give you a very concrete example. The serious problem that small and medium ISPs have, is to continue offering IPv6 and IPv4 services to their customers, when they already do not have IPv4 addresses. Only the biggest ISPs have a great purchasing power and can influence the manufacturers to do for them what they need. One possibility to solve it, extending the life of IPv4, but not necessarily deploying IPv6, is using CGN, which is also very expensive, and breaks many things. The solution is simple. Deploying IPv6-only services in the last mile, which involves using transition mechanisms, such as 464XLAT that has been deployed on millions of smartphones worldwide, so that applications continue to operate transparently as they "believe" they have IPv4. What is the problem, then? That manufacturers of CPEs are based on an old specification (RFC7084) that does not contemplate these transition mechanisms, so when a small/medium ISP asks a manufacturer for a firmware upgrade or a new CPE, they do not include that solution and perhaps they offer it with an extra cost. In my view, this should change, and that is why I am working on a number of documents, including RFC7084-bis (https://datatracker.ietf.org/doc/draft-ietf-v6ops-rfc7084-bis/) To update this situation, but there is opposition from large ISPs and virtually no small/medium "talks" about it, and in fact these large ISPs deny the situation. In addition, the document also specifies the "automated" support of those cases in which the user installs other routers (which is very common as we all know, and will be more and more in IPv6, IoT, etc.), behind the router installed by the ISP, through homenet (HNCP). I am not asking for your support for my documents, but for understanding the problem and the solution that is being proposed and/or possible new ones, and for the opinion of not only those very few “big ones”, but also of many small and medium, who are most affected. If you want to subscribe to this list, search for "subscribing" at: https://www.ietf.org/mailman/listinfo/v6ops You can see the files of the discussion in: https://mailarchive.ietf.org/arch/search/?email_list=v6ops I remind you that participating in the IETF does not require a presence in the meetings, as consensus is agreed in the list. Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Free parking network contact
by Simon 07 Jun '17

07 Jun '17

Hi there, is anyone from free parking on this list from their network operations team and can contact me please?

2 1

SkyTV NOC
by John Burns 30 May '17

30 May '17

Is anyone from SkyTV on this list? I have a /23 (allocated March 2017) that is being geoblocked on fanpass.co.nz and our customers would like us to solve it before the Lions tour starts!

1 0

cantva.canterbury.ac.nz Mail Admin at canterbury.ac.nz your server is not coming back from Greylist
by Don Gould 24 May '17

24 May '17

If there's a mail admin from canterbury.ac.nz on list, could you have a quick look at your server? We're not seeing mail coming from you because your server doesn't come back to have another go. We run a 10 minute greylist timer but you don't seem to come back for another go. # grep canterbury.ac.nz mail.log May 24 21:46:04 mx postfix/smtpd[22652]: connect from cantva.canterbury.ac.nz[132.181.2.27] May 24 21:46:05 mx tumgreyspf[22740]: Initial greylisting: REMOTEIP="132.181.2.27" HELO="cantva.canterbury.ac.nz" SENDER="stephen.hickson(a)canterbury.ac.nz" RECIPIENT="don(a)bowenvale.co.nz" QUEUEID="" May 24 21:46:05 mx postfix/smtpd[22652]: NOQUEUE: reject: RCPT from cantva.canterbury.ac.nz[132.181.2.27]: 450 4.7.1 <stephen.hickson(a)canterbury.ac.nz>: Sender address rejected: Service unavailable, greylisted (http://projects.puremagic.com/greylisting/) from=<stephen.hickson(a)canterbury.ac.nz> to=<don(a)bowenvale.co.nz> proto=ESMTP helo=<cantva.canterbury.ac.nz> TIA. D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.thinkdesignprint.co.nz skype: don.gould.nz

2 2

GLIF 2017
by GLIF Secretariat 22 May '17

22 May '17

All, Apologies for the advertising, but this global research and education networking event hosted by AARNet in Sydney may be of interest to some… Regards, Kevin Meynell ---- 17th Annual Global LambdaGrid Workshop - GLIF 2017 25-27 September 2017 Camperdown Campus, University of Sydney, Australia https://www.glif.is/meetings/2017/flyer.pdf <https://www.glif.is/meetings/2017/flyer.pdf> We are pleased to announce that registration is now open for the 17th Annual Global LambdaGrid Workshop which is being hosted by AARNet, the Australian National Research and Education Network. This will bring together leading network personnel from around the world to collaborate and exchange knowledge on new lambda networking technologies, middleware and applications. The workshop will have a specific focus on how global network architectures are supporting research applications in the Pacific region, in particular astronomy, high-energy physics, and microbiology and how big data is sent and processed around the world. There will also be discussions on the Pacific Islands Research and Education Network, long distance parallel file systems, new SDN and SDX initiatives, along with demonstrations of applications that can take advantage of these network facilities. The registration fee is AUD 450 per person (AUD 350 for registered students) up to 23 August 2017, and AUD 500 per person (AUD 400 for registered students) thereafter. Accommodation is available in the Rydges Camperdown at the special rate of AUD 165 per night including GST, the Mercure Sydney Central at the special rate of AUD 249 per night, and the Waldorf Sydney Central Serviced Apartments at the special rate of AUD 195 per night including GST. These can be reserved when registering for the workshop, and should be booked before 23 August 2017. Please note that a Software Defined Networking (SDN) Workshop will also held on Thursday, 28 September 2017 at the University of New South Wales. You can register, book accommodation and pay online at https://www.glif.is/meetings/2017/ <https://www.glif.is/meetings/2017/>

1 0

Issue with connections from CanIt-Domain-PRO anti-spam filter
by Jean-Francois Pirus 18 May '17

18 May '17

Hi all, I have an interesting issue. Just upgraded our mail server to handle srs-milter. Since the upgrade we found that the srs-milter would crash around 05:50 and 22:20 everyday. (Obviously it's got a bug) Turns out everyday around 05:50 we get a connection from canit-1.iserve.net.nz[202.191.33.141] And every night around 20:20 we get a connection from canit-scanner-2.slingshot.co.nz[60.234.4.40] They both seem to be running CanIt-Domain-PRO anti-spam filter. I cannot just block the scanner as the address is shared with MX's (ie: canit-scanner-2.slingshot.co.nz[60.234.4.40] and canit-slingshot-mx-2.t3.nz) Seems like the scanner is sending 'unusual' data once a day on a schedule. Any ideas what that single daily connection is about? or workarounds? Thanks. PS: Apart from fixing the bug myself... -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

2 5

Power issues in Skytower
by Patrick Ohearn 16 May '17

16 May '17

Hi list, Has anyone has any power issues in skytower this afternoon? We briefly lost power on level 47 around 1600.

1 0

AusNOG 2017 Call for Presentations
by Mark Prior 08 May '17

08 May '17

The next AusNOG conference is only four months away, scheduled to be held at The Langham, Melbourne, on 7 & 8 September 2017, so we are making our first call for presentations of interest to the Internet operations community. Previous feedback has suggested that attendees would like more content from the community so we'd like to encourage members of the community to submit more proposals, especially if you haven't previously presented! Internet operations is a broad topic but some areas of interest are: * Improving the redundancy/resiliency/sustainability of your network * Using automation to improve service reliability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year Naturally other topics that are of interest to the network operator community are also welcome but presentations of a purely marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Please note any timing constraints when submitting a presentation. By submitting a presentation for consideration in the AusNOG 2017 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 12 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 10 July: Presenters notified of their acceptance status as an AusNOG 2017 presentation. 30 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent by email to organisers AT ausnog DOT net. A separate call for lightning talks will be made closer to the AusNOG 2017 event. As in previous years you must be registered to attend AusNOG 2017 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation.

1 0

Alcatel IPv6 PPPoE
by Pieter De Wit 03 May '17

03 May '17

Good Morning List, I was wondering if anyone out here (there :)) has a working config for an Alcatel 7750 to give out IPv6 to subscribers. We would like to allocate /112's as a link net between the CPE and the BNG. We then want to route a /64 or /48 over this link net. All of this is configured in Radius. The link-nets are configure using the "wan-host" option under the subscriber interface. The /64 or /48 subnets is part of a /36 configured as the "pd" option. From what I was reading, it appears as if the link-nets needs to be /64...surely not ? Cheers, Pieter

11 17

Russian-controlled telecom hijacks financial services’ Internet traffic
by Michael Fincham 27 Apr '17

27 Apr '17

Morning all, For those who didn't spot this yet: <https://arstechnica.com/security/2017/04/russian-controlled-telecom-hijacks…> "On Wednesday, large chunks of network traffic belonging to MasterCard, Visa, and more than two dozen other financial services companies were briefly routed through a Russian government-controlled telecom under unexplained circumstances that renew lingering questions about the trust and reliability of some of the most sensitive Internet communications." -- Michael

1 0