- NZNOG - lists.nznog.org

The New Zealand Network Operators' Group
by Donald Neal 31 Jan '06

31 Jan '06

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. It consists of the subscribers to this mailing list, which anyone is free to join. Conference Our next conference is to be held in Wellington on 22-24 March, 2006. That's the week before the scheduled ICANN meeting. See http://www.nznog.org/ for more information. The most recent speakers to be confirmed are Mike Hughes, CTO of London Internet Exchange and Arron Scott of Cisco New Zealand. Other Meetings See http://auckland.thursdaynightcurry.com/ or http://wellington.thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://nzix.net/ for details of exchanges in operation, and some information on others under construction. About This Mailing List This list has around 900 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and Telecom. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search With site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 0

Information on Global Web Productions
by Craig Whitmore 30 Jan '06

30 Jan '06

Hi there Has anyone got any information on Global Web Productions and the NZ Commerce Comissions Involvement with them in getting them shut down in 1994 with the US CAN-SPAM? Seaching on the web and on the comcom website I cannot find any information at all what involvement they (the comcom) had or what they did or who the people in New Zealand where. Thanks Craig

4 5

Notification of NZRR Database changes
by NZRR Database Notifications 29 Jan '06

29 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: aut-num: AS24385 as-name: NZRR-AS24385 descr: 3CIX admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS64646 accept ANY AND NOT {0.0.0.0/0} AND NOT fltr-bogons export: to AS64646 announce AS24385:RS-ROUTES AND NOT {0.0.0.0/0} AND NOT fltr-bogons notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: asjl(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050701 source: NZRR REPLACED BY: aut-num: AS24385 as-name: NZRR-AS24385 descr: 3CIX admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS64646 accept ANY AND NOT {0.0.0.0/0} AND NOT fltr-bogons import: from AS24385:AS-PRIVATE accept AS24385:RS-ROUTES:PeerAS import: from AS24385:AS-PUBLIC accept AS24385:RS-ROUTES:PeerAS export: to AS64646 announce AS24385:RS-ROUTES AND NOT {0.0.0.0/0} AND NOT fltr-bogons export: to AS24385:AS-PRIVATE announce AS24385:RS-ROUTES AND NOT {0.0.0.0/0} AND NOT fltr-bogons export: to AS24385:AS-PUBLIC announce AS24385:RS-ROUTES AND NOT {0.0.0.0/0} AND NOT fltr-bogons notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: asjl(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060130 source: NZRR

1 0

NZNOG06
by Andrew Thompson 29 Jan '06

29 Jan '06

Hi, I am trying to find the registration details for the conference this year but only the schedule seems to be up. I'm just after the cost so I can hit up my boss to shout me. cheers, Andrew

2 1

WIX Issues Saturday Afternoon
by Jonathan Brewer 27 Jan '06

27 Jan '06

Hi Folks, There were some issues with the WIX this afternoon, from approx 11:50 until around 15:00, affecting several connected ISPs. Could someone with an in-depth knowledge of what happened fill us in? Cheers, Jon

2 1

Strange NZ Domain Names and Contents
by Craig Whitmore 26 Jan '06

26 Jan '06

I was looking on Google this morning and came across these strange groups of .NZ domain names as below. Most of them are just recently been registered. (Maybe they are domains which have just become available from others who didn't want them and they where picked up to hopefully to get hits. The name of the sites have nothing to do with anything which is on the sites and all they do is link to lots of places and banners. I can't see anything really illegal on them (apart from linking to know spam/buy viagra etc online sites). Just a heads up for people. Does the NZ Internet Community want people registering 100's of generic .nz domain names in the future to just to get hits and advertise others? Thanks Craig http://www.globalchessenterprises.co.nz http://www.aa-auckland.org.nz www.haynesfilm.co.nz http://gt40.co.nz http://www.fastfinish.co.nz http://www.dissidentvoice.org.nz www.promocodirect.co.nz/ www.heavyloungesuite.co.nz www.farmbarn.co.nz http://www.fastaccess.co.nz/ http://www.ecmtoa.co.nz/ http://www.shaktimigrant.org.nz http://www.infobrok.co.nz

5 5

Re: [nznog] Strange NZ Domain Names and Contents
by Craig Whitmore 26 Jan '06

26 Jan '06

> > > Purchasing what are normally perscription drugs, from a website... > > If the clue phone doesnt ring for that one, no policy change will protect > these people. > > But people ARE legally selling drugs on the Net in NZ, but they are doing it legally.. You send the script to them (or get the doctor to), and they will send you the drugs in the mail. Some Legal Pharmacies: http://www.netpharmacy.co.nz/ http://www.pharmacyweb.co.nz http://www.quinspharmacy.co.nz/ Thanks Craig

5 4

Re: [nznog] Strange NZ Domain Names and Contents
by Craig Whitmore 25 Jan '06

25 Jan '06

Replying to myself but... There is even illegal porn advertised on .co.nz domain names with its registered details in the Russian Federation.(I shant say more) I guess registrars can't vet what people are using the domain names for all the time, but a few of the registrar's I've looked at T&C saying the domain names they are charging the customer for must be used for legal purposes. Thanks Craig > > Also good examples are www.pharmacycare.co.nz and > http://www.discountmeds.co.nz/. Talking for myself.

3 2

NZNOG conference
by David Robb 24 Jan '06

24 Jan '06

Is there any further information available for this? ie costs, who else is speaking? I'm going to need to make a decision very soon as to whether or not I can justify my attendance. Thanks, --David

1 0

WorldxChange Peering WIX / APE
by Term 23 Jan '06

23 Jan '06

1 0

LinuxNet / ACS peering at APE
by Lincoln Reid 23 Jan '06

23 Jan '06

Hi, LinuxNet / ACS is now peering at APE. Ideally we would like to peer with pretty much everyone. If we have an existing bilateral peering relationship with you at WIX and you have an APE presence, feel free to get in touch. I am also interested in hearing from people who want to bilaterally IPv6 peer at WIX or APE. Our details are as follows: ASN: 18119 WIX: 202.7.0.245 : 2001:7fa:3:ca07::f5 APE: 192.203.154.117 : 2001:7fa:4:c0cb::9a75 The IPv4 prefix list is at: http://www.linuxnet.co.nz/linuxnet-prefixlist.txt The IPv6 prefix list is at: http://www.linuxnet.co.nz/linuxnet-prefixlist-v6.txt Cheers, -- Lincoln Reid Systems Engineer ACS - AS18119 lincoln(a)linuxnet.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201

1 0

Peering Policies
by Webmaster 20 Jan '06

20 Jan '06

I am currently working on a paper about peering in New Zealand. If you are involved with peering policy in your organisation, could you please send me offlist a copy of your company's policy (or a link to it). Many thanks, Richard >>> "Craig Humphrey" <Craig.Humphrey.Work(a)paradise.net.nz> 01/20/06 2:02 PM >>> _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

CISCO 805 Serial/Ethernet to go to a good home...
by Craig Humphrey 19 Jan '06

19 Jan '06

Hi People, I've come across an old CISCO 805 with serial and ethernet ports on the back. No power, no idea if it works. If you want/need one and are in the Auckland area, give me a yell off list, I'll only charge you a beer if it works... Later'ish Craig

2 1

Notification of NZRR Database changes
by NZRR Database Notifications 19 Jan '06

19 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS17435 descr: advertised to AS9560 by WorldxChange Communications LTD - AS17435 members: 58.28.0.0/16^16-29, 202.182.192.0/19^19-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)wxnz.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051202 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS17435 descr: advertised to AS9560 by WorldxChange Communications LTD - AS17435 members: 58.28.0.0/16^16-29, 202.49.240.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: lsmith(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060120 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 19 Jan '06

19 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS17435 descr: Route set advertised to AS9439 by WorldxChange Communications - AS17435 members: 58.28.0.0/16^16-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)wxnz.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051010 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS17435 descr: advertised to AS9439 by WorldxChange Communications LTD - AS17435 members: 58.28.0.0/16^16-29, 202.49.240.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: lsmith(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060120 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 18 Jan '06

18 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS24025 descr: Route set for Helix - AS24025 members: 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: noc(a)helix.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20040304 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS24025 descr: advertised to AS9560 by Helix - AS24025 members: 202.49.240.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)helix.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060119 source: NZRR --- OBJECT BELOW CREATED: route: 202.49.240.0/22 descr: Route for Helix - AS24025 origin: AS24025 notify: rpsl-admin(a)nzix.net notify: noc(a)helix.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060119 source: NZRR --- OBJECT BELOW CREATED: route: 202.14.217.0/24 descr: Route for Helix - AS24025 origin: AS24025 notify: rpsl-admin(a)nzix.net notify: noc(a)helix.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060119 source: NZRR --- OBJECT BELOW CREATED: route: 202.49.59.0/24 descr: Route for Helix - AS24025 origin: AS24025 notify: rpsl-admin(a)nzix.net notify: noc(a)helix.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060119 source: NZRR --- PREVIOUS OBJECT: route: 202.50.176.0/24 descr: Route for Helix - AS24025 origin: AS24025 notify: rpsl-admin(a)nzix.net notify: noc(a)helix.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20040304 source: NZRR REPLACED BY: route: 202.50.176.0/24 descr: Route for Helix - AS24025 origin: AS24025 notify: rpsl-admin(a)nzix.net notify: noc(a)helix.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060119 source: NZRR

1 0

Re: [nznog] Mail issues in/out of China
by Scott Weeks 18 Jan '06

18 Jan '06

> Thanks for many replies. Guess we can add 'China' to the > keywords such as 'beer' to get everyone's attention!! Nah, Chinese beer isn't all that: http://en.wikipedia.org/wiki/Chinese_beer Further... http://www.foodconsumer.org/777/8/Formaldehyde_illegally_used_in_Chinese_be… scott :-) ----- Original Message Follows ----- From: "Gary T. Benner" <gary(a)123.co.nz> To: jabley(a)isc.org Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Mail issues in/out of China Date: Thu, 19 Jan 2006 12:02:40 +1300 > [Reply] > > HI all, > > Thanks for many replies. Guess we can add 'China' to the > keywords such as 'beer' to get everyone's attention!! > > cheers > > Gary > > At 07:21 on 19/01/2006 you wrote > >To : truman(a)suspicious.org,nznog(a)list.waikato.ac.nz > >CC : nznog(a)list.waikato.ac.nz, > >From: Joe Abley, jabley(a)isc.org > >Content Type: text/plain > >Attached: > > > > >On 17-Jan-2006, at 23:57, Truman Boyes wrote: > > > >> I have used SIP phones in China and I can tell you that > some of the >> firewalls are a lot more advanced than just > blocking applications. I >> was able to place some types > of calls via my USA DDI, while others >> were redirected > to a local chinese gateway. Essentially that means >> that > ALGs were inspecting the SIP invite messages ... quite >> > interesting ... > > >Presumably this is the difference between living in a > region where >the authorities are open about intercepting > communications, in >contrast to other places where > communications are routinely >intercepted in secret? > > > > >Joe > > > >_______________________________________________ > >NZNOG mailing list > >NZNOG(a)list.waikato.ac.nz > >http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > Ref#: 41006 > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

Re: [nznog] Mail issues in/out of China
by Gary T. Benner 18 Jan '06

18 Jan '06

[Reply] HI all, Thanks for many replies. Guess we can add 'China' to the keywords such as 'beer' to get everyone's attention!! cheers Gary At 07:21 on 19/01/2006 you wrote >To : truman(a)suspicious.org,nznog(a)list.waikato.ac.nz >CC : nznog(a)list.waikato.ac.nz, >From: Joe Abley, jabley(a)isc.org >Content Type: text/plain >Attached: > > >On 17-Jan-2006, at 23:57, Truman Boyes wrote: > >> I have used SIP phones in China and I can tell you that some of the >> firewalls are a lot more advanced than just blocking applications. I >> was able to place some types of calls via my USA DDI, while others >> were redirected to a local chinese gateway. Essentially that means >> that ALGs were inspecting the SIP invite messages ... quite >> interesting ... > >Presumably this is the difference between living in a region where >the authorities are open about intercepting communications, in >contrast to other places where communications are routinely >intercepted in secret? > > >Joe > >_______________________________________________ >NZNOG mailing list >NZNOG(a)list.waikato.ac.nz >http://list.waikato.ac.nz/mailman/listinfo/nznog > Ref#: 41006

1 0

Apricot2006 Registrations
by Andy Linton 18 Jan '06

18 Jan '06

I know may of you will be at NZNOG in March but if you need more conference time then the annual Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) event is happening in Perth, Western Australia from 22nd February to 3rd March 2006. Registrations for the event are open and early bird is closing on the 14th Jan (tomorrow!). This is the first time that APRICOT will be held in Australia and I've been told they'd really love to see lots of us coming over for it! APRICOT consists of workshops, tutorials, conference, as well as the 6 monthly APNIC meeting. The APRICOT 2006 programme includes: Workshops 22 - 26 February Tutorials 27 - 28 February Conference 1 - 2 March APNIC Member Meeting 3 March Full information about APRICOT 2006 can be seen at http://www.2006.apricot.net Program information is at: http://www.apricot2006.net/index.php/fuseaction/home.program Registration information is at: http://www.2006.apricot.net/index.php/fuseaction/home.registration You are encouraged to register as soon as possible as the early bird registration discount expires on the 14th of January. If you aren't an AU or NZ citizen, visa information is at: http://www.apricot2006.net/index.php/fuseaction/home.visas You must register on-line before submitting a visa application - note that application times for visas for non-ETA countries can be quite lengthy, so please start the registration and application process as soon as you can. You can select a checkbox to request an invitation letter from us to be used for your visa application during registration if you require one, this is an automated process. Accommodation information is at: http://www.2006.apricot.net/index.php/fuseaction/home.accommodation You are encouraged to make arrangements for accommodation as soon as possible as the APRICOT discounted room block expires on the 18th of January. After this date we must release remaining rooms, you then need to compete with the general tourist public for room availability. Sponsorship opportunities still exist for interested companies. Information on Sponsorship is available online at: http://www.apricot2006.net/index.php/fuseaction/home.sponsorship

5 4

Mail issues in/out of China
by Gary T. Benner 17 Jan '06

17 Jan '06

HI all, I have a client with staff member in China who has had consistent difficulty accessing our mail server, both using pop *and* the webmail client. Yet access from within NZ has been faultless. If anyone has had experience in this area, are there issues relating to the Chinese Authorities intercepting such communications, or would it be just to do with the connection? regards Gary Benner 123 Internet Ltd

7 6

Re: [nznog] Studio Cam Update
by Webmaster 16 Jan '06

16 Jan '06

Just so that operators are kept informed, we have been running radio interviews with a strong visual component on the Matinee Idle studio cam. Yesterday was Pets, today is Tattoos. Interest in both the live audio and studio cams has been very high. cheers, Richard Hulse Radio NZ

2 1

IPv6 Connect NZ Domain Servers
by Philip D'Ath 15 Jan '06

15 Jan '06

Does anyone offer commercial hosting of NZ zone files on DNS servers that are IPv6 connected?

2 1

Studio Cam Update
by Webmaster 13 Jan '06

13 Jan '06

Operators should be aware that we are planning an on-air promotion using our studio cams next week. This is not yet confirmed, but I thought I'd give everyone plenty of warning just in case we go ahead. The studio cams operate during the Matinee Idle radio show, 12.30 pm - 5pm on weekdays. (www.radionz.co.nz/phil) The promotion is likely to cause a huge increase in the number of simultaneous viewers. To date we've have seen data rates of between 10 and 40 Mb/s during the show. More than half this data is NZ bound from the US server. The 384 kbs stream is the most popular. There was such a high demand from listeners for the higher data rates, that after the first day of the show we opened these up to customers of non-peering ISPs. regards, Richard Hulse regards, Richard

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 13 Jan '06

13 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: filter-set: fltr-unallocated descr: Unallocated (by IANA) IPv4 prefixes. filter: {1.0.0.0/8^+, 2.0.0.0/8^+, 5.0.0.0/8^+, 7.0.0.0/8^+, 23.0.0.0/8^+, 27.0.0.0/8^+, 31.0.0.0/8^+, 36.0.0.0/8^+, 37.0.0.0/8^+, 39.0.0.0/8^+, 42.0.0.0/8^+, 49.0.0.0/8^+, 50.0.0.0/8^+, 74.0.0.0/8^+, 75.0.0.0/8^+, 76.0.0.0/8^+, 77.0.0.0/8^+, 78.0.0.0/8^+, 79.0.0.0/8^+, 89.0.0.0/8^+, 90.0.0.0/8^+, 91.0.0.0/8^+, 92.0.0.0/8^+, 93.0.0.0/8^+, 94.0.0.0/8^+, 95.0.0.0/8^+, 96.0.0.0/8^+, 97.0.0.0/8^+, 98.0.0.0/8^+, 99.0.0.0/8^+, 100.0.0.0/8^+, 101.0.0.0/8^+, 102.0.0.0/8^+, 103.0.0.0/8^+, 104.0.0.0/8^+, 105.0.0.0/8^+, 106.0.0.0/8^+, 107.0.0.0/8^+, 108.0.0.0/8^+, 109.0.0.0/8^+, 110.0.0.0/8^+, 111.0.0.0/8^+, 112.0.0.0/8^+, 113.0.0.0/8^+, 114.0.0.0/8^+, 115.0.0.0/8^+, 116.0.0.0/8^+, 117.0.0.0/8^+, 118.0.0.0/8^+, 119.0.0.0/8^+, 120.0.0.0/8^+, 121.0.0.0/8^+, 122.0.0.0/8^+, 123.0.0.0/8^+, 173.0.0.0/8^+, 174.0.0.0/8^+, 175.0.0.0/8^+, 176.0.0.0/8^+, 177.0.0.0/8^+, 178.0.0.0/8^+, 179.0.0.0/8^+, 180.0.0.0/8^+, 181.0.0.0/8^+, 182.0.0.0/8^+, 183.0.0.0/8^+, 184.0.0.0/8^+, 185.0.0.0/8^+, 186.0.0.0/8^+, 187.0.0.0/8^+, 189.0.0.0/8^+, 190.0.0.0/8^+, 197.0.0.0/8^+, 223.0.0.0/8^+} remarks: For the complete set of bogons, please see: fltr-martians - special use and reserved prefixes. fltr-bogons - fltr-unallocated + fltr-martian. http://www.cymru.com/Documents/bogon-list.html admin-c: RTH32-ARIN tech-c: RTH32-ARIN notify: radb(a)cymru.com notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz mnt-by: MAINT-BOGON-FILTERS changed: rpsl-admin(a)nzix.net 20040819 source: NZRR REPLACED BY: filter-set: fltr-unallocated descr: Unallocated (by IANA) IPv4 prefixes. filter: {1.0.0.0/8^+, 2.0.0.0/8^+, 5.0.0.0/8^+, 7.0.0.0/8^+, 23.0.0.0/8^+, 27.0.0.0/8^+, 31.0.0.0/8^+, 36.0.0.0/8^+, 37.0.0.0/8^+, 39.0.0.0/8^+, 42.0.0.0/8^+, 49.0.0.0/8^+, 50.0.0.0/8^+, 77.0.0.0/8^+, 78.0.0.0/8^+, 79.0.0.0/8^+, 92.0.0.0/8^+, 93.0.0.0/8^+, 94.0.0.0/8^+, 95.0.0.0/8^+, 96.0.0.0/8^+, 97.0.0.0/8^+, 98.0.0.0/8^+, 99.0.0.0/8^+, 100.0.0.0/8^+, 101.0.0.0/8^+, 102.0.0.0/8^+, 103.0.0.0/8^+, 104.0.0.0/8^+, 105.0.0.0/8^+, 106.0.0.0/8^+, 107.0.0.0/8^+, 108.0.0.0/8^+, 109.0.0.0/8^+, 110.0.0.0/8^+, 111.0.0.0/8^+, 112.0.0.0/8^+, 113.0.0.0/8^+, 114.0.0.0/8^+, 115.0.0.0/8^+, 116.0.0.0/8^+, 117.0.0.0/8^+, 118.0.0.0/8^+, 119.0.0.0/8^+, 120.0.0.0/8^+, 173.0.0.0/8^+, 174.0.0.0/8^+, 175.0.0.0/8^+, 176.0.0.0/8^+, 177.0.0.0/8^+, 178.0.0.0/8^+, 179.0.0.0/8^+, 180.0.0.0/8^+, 181.0.0.0/8^+, 182.0.0.0/8^+, 183.0.0.0/8^+, 184.0.0.0/8^+, 185.0.0.0/8^+, 186.0.0.0/8^+, 187.0.0.0/8^+, 197.0.0.0/8^+, 223.0.0.0/8^+} remarks: For the complete set of bogons, please see: fltr-martians - special use and reserved prefixes. fltr-bogons - fltr-unallocated + fltr-martian. http://www.cymru.com/Documents/bogon-list.html admin-c: RTH32-ARIN tech-c: RTH32-ARIN notify: radb(a)cymru.com notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz mnt-by: MAINT-BOGON-FILTERS changed: rpsl-admin(a)nzix.net 20040819 changed: rpsl-admin(a)nzix.net 20060113 source: NZRR

6 5

Notification of NZRR Database changes
by NZRR Database Notifications 11 Jan '06

11 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS64524 descr: advertised to AS9439 by Institute of Chartered Accountants of NZ - AS64524 members: 202.27.78.0/24^24-29, 202.27.79.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: nathan.cottle(a)icanz.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050221 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS64524 descr: advertised to AS9439 by Institute of Chartered Accountants of New Zealand - AS64524 members: 203.97.94.0/28^28-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: paul.ross(a)nzica.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060112 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 11 Jan '06

11 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24226 descr: advertised to AS9439 by Catalyst IT - AS24226 members: 202.20.6.0/24^24-29, 202.36.119.0/24^24-29, 202.46.190.0/24^24-29, 202.49.159.0/24^24-29, 202.78.240.0/21^21-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: netadmin(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050119 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24226 descr: advertised to AS9439 by Catalyst IT - AS24226 members: 202.78.240.0/21^21-29, 202.36.119.0/24^24-29, 202.46.190.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: routing(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060112 source: NZRR

1 0

IANA IPv4 allocations and bogon updates: 121/8, 122/8, and 123/8
by Rob Thomas 09 Jan '06

09 Jan '06

-----BEGIN PGP SIGNED MESSAGE----- [ Apologies to those of you who receive this note in multiple forums. ] Hi, team. The numerous Team Cymru bogon projects have been updated as of 05 JAN 2006 to reflect the following IANA allocation made on 05 JAN 2006: 121/8 Jan 06 APNIC (whois.apnic.net) 122/8 Jan 06 APNIC (whois.apnic.net) 123/8 Jan 06 APNIC (whois.apnic.net) IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-template.htm> Secure JUNOS BGP Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-bgp-template.htm> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix- Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix- filter-loose.htm> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix- filter-strict.htm> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> RIPE NCC fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#ripe> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Bogus ASN monitoring - <http://www.cymru.com/BGP/asnbogusrep.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thank you for your continued support. Thanks, Rob. - -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty); -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQ8MiDlkX3QAo5sgJAQEHwwP/X6Jh/sZ+j46KosfJ6H3+Wzb7sE3xXjl9 ktuNLb7Xfvo0A4PwUSv5NF5aS4Yp1C5NWZcrBDKkwIMA4WcC7DZK+qvFHeOX7EVS vzXzpw2FGCyImU1m49qNR+437vM0CNVaeFeMc+zjHnnXlsAEVVIhwQ7lz0KE+rlM G2ZKbvaQRyw= =qtQ6 -----END PGP SIGNATURE-----

1 0

ANZ website broken?
by Blair Harrison 31 Dec '05

31 Dec '05

Hmm, Maybe someone pushed a wrong button? domain_name: anz.co.nz query_status: 210 PendingRelease domain_dateregistered: 1997-03-10T00:00:00+13:00 domain_datebilleduntil: 2006-01-01T00:00:00+13:00 domain_datelastmodified: 2005-12-31T22:01:03+13:00 domain_datecancelled: 2005-12-31T22:01:03+13:00 Oops. Internet banking still available via www.anz.com/nz at least. -Blair

1 0

Re: [nznog] Studio Cam Update
by Webmaster 26 Dec '05

26 Dec '05

After receiving a number of requests from people viewing the Matinee Idle studio cams, I have opened up access to the 384k and 2M streams to all comers. This means that all NZ consumers can watch the high rate streams if they want to, regardless of whether their ISP peers or not. Non-peering ISPs may see a big increase in international bandwidth usage between 12:30 pm and 5 pm daily on weekdays until 20 Jan 2006. regards, Richard _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Streaming Event
by Ian Cogill 22 Dec '05

22 Dec '05

Hi There We will be providing live streams of the ASB Classic and Heineken Open tennis from Jan 2 - Jan 14 To ensure all New Zealanders get the best possible service we strongly recommend peering with the R2/Citylink anycast cluster at 202.7.7.90 via WIX, APE and/or PNIX. As it is the holidays we're not exctly sure how many people will be watching coverage online, so this is just a heads up. Regards Ian Cogill Systems Engineer TVNZ Interactive ===================================================================== CAUTION: This e-mail and any attachment(s) contains information that is intended to be read only by the named recipient(s). It may contain information that is confidential, proprietary or the subject of legal privilege. This information is not to be used by any other person and/or organisation. If you are not the intended recipient, please advise us immediately and delete this e-mail from your system. Do not use any information contained in it. ================================================================ For more information on the Television New Zealand Group, visit us online at http://www.tvnz.co.nz ================================================================

1 0

Studio Cam Update
by Webmaster 22 Dec '05

22 Dec '05

The studio cams for the Matinee Idle radio show are now in operation with a jpg slide: http://www.radionz.co.nz/nr/programmes/matineeidle I have noted on the web cam page that some customers may not be able to get the high bandwidth streams due to their ISP not peering. These consumers will get a message suggesting that they use one of the lower rate streams or contact their ISP. Time for a beer now, my work is done.... regards, Richard

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 22 Dec '05

22 Dec '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS2687 descr: advertised to AS9439 by AT&T Global Network Services - AS2687 members: 202.46.160.0/20^20-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 202.36.192.0/22^22-29, 152.158.254.0/23^23-29, 202.36.68.0/23^23-29, 202.135.48.0/23^23-29, 203.163.70.0/23^23-29, 202.12.105.0/24^24-29, 202.21.128.0/24^24-29, 202.27.160.0/24^24-29, 202.36.29.0/24^24-29, 202.36.80.0/24^24-29, 202.37.254.0/24^24-29, 202.49.144.0/24^24-29, 202.50.137.0/24^24-29, 202.135.20.0/24^24-29, 202.135.34.0/24^24-29, 202.135.38.0/24^24-29, 202.135.62.0/24^24-29, 202.135.64.0/24^24-29, 202.135.85.0/24^24-29, 202.135.107.0/24^24-29, 202.135.111.0/24^24-29, 202.135.112.0/24^24-29, 202.135.116.0/24^24-29, 202.135.142.0/24^24-29, 202.135.182.0/24^24-29, 202.135.185.0/24^24-29, 202.135.190.0/24^24-29, 202.135.192.0/24^24-29, 202.135.231.0/24^24-29, 202.135.234.0/24^24-29, 203.163.68.0/24^24-29, 203.163.86.0/24^24-29, 203.163.94.0/24^24-29, 203.163.98.0/24^24-29, 203.196.101.0/24^24-29, 203.196.119.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.lister(a)ap.att.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051219 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS2687 descr: advertised to AS9439 by AT&T Global Network Services - AS2687 members: 202.46.160.0/20^20-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 202.36.192.0/22^22-29, 152.158.254.0/23^23-29, 202.36.68.0/23^23-29, 202.135.48.0/23^23-29, 203.163.70.0/23^23-29, 202.12.105.0/24^24-29, 202.21.128.0/24^24-29, 202.27.160.0/24^24-29, 202.36.29.0/24^24-29, 202.36.80.0/24^24-29, 202.37.254.0/24^24-29, 202.49.144.0/24^24-29, 202.50.137.0/24^24-29, 202.135.20.0/24^24-29, 202.135.34.0/24^24-29, 202.135.38.0/24^24-29, 202.135.62.0/24^24-29, 202.135.64.0/24^24-29, 202.135.85.0/24^24-29, 202.135.107.0/24^24-29, 202.135.111.0/24^24-29, 202.135.112.0/24^24-29, 202.135.116.0/24^24-29, 202.135.142.0/24^24-29, 202.135.182.0/24^24-29, 202.135.185.0/24^24-29, 202.135.190.0/24^24-29, 202.135.192.0/24^24-29, 202.135.231.0/24^24-29, 202.135.234.0/24^24-29, 203.57.145.0/24^24-29, 203.163.68.0/24^24-29, 203.163.86.0/24^24-29, 203.163.94.0/24^24-29, 203.163.98.0/24^24-29, 203.196.101.0/24^24-29, 203.196.119.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.lister(a)ap.att.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051223 source: NZRR --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS2687 descr: advertised to AS9560 by AT&T Global Network Services - AS2687 members: 202.46.160.0/20^20-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 202.36.192.0/22^22-29, 152.158.254.0/23^23-29, 202.36.68.0/23^23-29, 202.135.48.0/23^23-29, 203.163.70.0/23^23-29, 202.12.105.0/24^24-29, 202.21.128.0/24^24-29, 202.27.160.0/24^24-29, 202.36.29.0/24^24-29, 202.36.80.0/24^24-29, 202.37.254.0/24^24-29, 202.49.144.0/24^24-29, 202.50.137.0/24^24-29, 202.135.20.0/24^24-29, 202.135.34.0/24^24-29, 202.135.38.0/24^24-29, 202.135.62.0/24^24-29, 202.135.64.0/24^24-29, 202.135.85.0/24^24-29, 202.135.107.0/24^24-29, 202.135.111.0/24^24-29, 202.135.112.0/24^24-29, 202.135.116.0/24^24-29, 202.135.142.0/24^24-29, 202.135.182.0/24^24-29, 202.135.185.0/24^24-29, 202.135.190.0/24^24-29, 202.135.192.0/24^24-29, 202.135.231.0/24^24-29, 202.135.234.0/24^24-29, 203.163.68.0/24^24-29, 203.163.86.0/24^24-29, 203.163.94.0/24^24-29, 203.163.98.0/24^24-29, 203.196.101.0/24^24-29, 203.196.119.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.lister(a)ap.att.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051219 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS2687 descr: advertised to AS9560 by AT&T Global Network Services - AS2687 members: 202.46.160.0/20^20-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 202.36.192.0/22^22-29, 152.158.254.0/23^23-29, 202.36.68.0/23^23-29, 202.135.48.0/23^23-29, 203.163.70.0/23^23-29, 202.12.105.0/24^24-29, 202.21.128.0/24^24-29, 202.27.160.0/24^24-29, 202.36.29.0/24^24-29, 202.36.80.0/24^24-29, 202.37.254.0/24^24-29, 202.49.144.0/24^24-29, 202.50.137.0/24^24-29, 202.135.20.0/24^24-29, 202.135.34.0/24^24-29, 202.135.38.0/24^24-29, 202.135.62.0/24^24-29, 202.135.64.0/24^24-29, 202.135.85.0/24^24-29, 202.135.107.0/24^24-29, 202.135.111.0/24^24-29, 202.135.112.0/24^24-29, 202.135.116.0/24^24-29, 202.135.142.0/24^24-29, 202.135.182.0/24^24-29, 202.135.185.0/24^24-29, 202.135.190.0/24^24-29, 202.135.192.0/24^24-29, 202.135.231.0/24^24-29, 202.135.234.0/24^24-29, 203.57.145.0/24^24-29, 203.163.68.0/24^24-29, 203.163.86.0/24^24-29, 203.163.94.0/24^24-29, 203.163.98.0/24^24-29, 203.196.101.0/24^24-29, 203.196.119.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.lister(a)ap.att.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051223 source: NZRR

1 0

Re: [nznog] ipv6
by Philip D'Ath 22 Dec '05

22 Dec '05

Pretty much every Cisco DSL router supports IPv6. We just need an ISP to start selling the IPv6 transit ... -----Original Message----- From: Richard Hector [mailto:richard(a)walnut.gen.nz] Sent: Thursday, 22 December 2005 2:46 p.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] ipv6 On Thu, 2005-12-22 at 14:35 +1300, Matt Brown wrote: > With the introduction of UBS I'm hoping that it's going to become a > lot more common for ISPs to be able to offer IPv4/IPv6 circuits, even > if it is only on ad Ad-Hoc basis to the 'geeks' to start with. To offer it on UBS, wouldn't your DSL router have to support IPv6? Do any of them? I suppose you could use either a plain modem, or one of those ones that bridges PPPoA to PPPoE, but I've never tried setting one up. Richard _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

9 11

SANOG VII - Mumbai, India, 16-24 January 2006
by Andy Linton 22 Dec '05

22 Dec '05

South Asian Network Operators Group (SANOG) VII 16-24 January 2006, Mumbai, India Hosted by ISPAI. SANOG VII Program Announcement SANOG VII program and agenda are now published on http://www.sanog.org/sanog7/. SANOG VII is being held by ISP Association of India (ISPAI) in Mumbai, India from 16-24 January 2006. Daniel Karrenberg, Chief Scientist, RIPE NCC and Paul Wilson, DG,APNIC will address the plenary session of SANOG VII. There will be 3 workshops, 10 tutorials, 3 BoFs and over 16 presentations during the event. APNIC will hold a special Open Policy Meeting Showcase at SANOG VII, and for the first time at SANOG, we'll have a Peering Panel and Debate. Registration Discounts available for ISPAI, APNIC, APIA members. Detailed information is available at http:/www.sanog.org/sanog7/ Program and Agenda: Three hands-on workshops: 16-20 January 2006 * ISP Routing and BGP Multihoming Workshop * IPv6 Essentials, Applications and Routing Workshop * Multicast Routing and Applications Workshop Ten Tutorials: 21-22 January 2006 * BGP and High Availability Routing Tutorial, Prasad Babu * DNS / DNSSec Deployment Tutorial, Champika Wijayatunga * IXP Construction and BGP Multihoming, Philip Smith, Gaurab Raj Upadhaya * L2VPN - Changing and Consolidating Networks - Paresh Shah, Md.Waris * Layer2 Attacks and Mitigation techniques, Yusuf Bhaiji * DDoS prevention in Service Provider Networks, Wireless Security,Pravin Mahajan * The Basics of Multicast - Marshall Eubanks, * QoS and Multicast on MPLS Networks , Rajesh Shinde * QoS on Low Bandwidth & High Delay Links, Prakash Shende Birds-of-a-Feather (Special Evening Sessions) : 21-23 January 2006 * Managed Services * Anti-SPAM Tools and Techniques * Internet Society (ISOC) BoF APNIC Special Sessions * APNIC Helpdesk sessions throughout SANOG VII * APNIC Open Policy Meeting Showcase on 24th January 2006 Two Days Conference Program : 23-24 January 2006 * Alternative architectures for Broadcast Video Distribution - Srinath Beldona, Cisco * RA-MPLS services - Kapil Kumar, Reliance * Network Infrastructure for IPTV - Saisree Subramanian, Wipro * Efficient Resource Broker Architecture to Provide Guaranteed QoS - Praveen Kumar, Anna University * Graceful Restart of Routing Protocols - Prasad Babu, Juniper * Backbone Architectures for NLD/ILD: Design; Optmization & Services - Chandan Mendiratta (Cisco) * Network Infrastructure Security in Cellular Data Networks: An Initial Investigation - Vishal Sharma (IIT-Bombay) * Traffic Engineering and Network Planning Tools for MPLS Networks - Dr. Girish P. Saraph (IIT-Bombay) * pmacct; a new player in the network management arena - Paolo Lucente (CNR-Italy) * Flow measurements from the packet-switched NREN PIONIER: technology and experience - Wiktor Procyk (Poznan S&N Center) * Interest Based Group Management Mechanisms for E-learning Design using the Peer to Peer Technologies - Surya (AIT) * Internet Routing Table Update - Philip Smith (Cisco) * INOC - DBA Update - Gaurab Raj Upadhaya ( PCH) * Data Network Management for Telecom Operators in ASIA - Sufi Faruq (AKTEL) Peering Penel and Debate * Nigel Titley, Peering Manager, FLAG Telecom * Sylvie Laperriere, Director- Peering, Teleglobe * Sharad Shangi, Net4India * Gaurab Raj Upadhaya, PCH, (moderator) Local Fellowships are still available. We expect a huge turn out from the region at this SANOG meeting owing to the popularity at previous meets. We also welcome participants from West Asia, with our established collaboration with the RIPE NCC. With more involvement of APNIC in the content of overall program, We hope you would be able to make it to this meeting. The meeting is open to everyone from the operational community, and thus anyone who wants to find out more about Internet operations in South Asia is welcome. You can register for SANOG by sending in the form available at www.sanog.org/sanog7 or using the online registration system. Registrations from inside India can be paid by DD Looking forward to seeing you there. Thanks - SANOG

1 0

Re: [nznog] ipv6
by Philip D'Ath 21 Dec '05

21 Dec '05

Not being from a service provider my view is somewhat simplistic. Telecom offers a layer 2 service called UBS, which uses L2TP between their RAN and the ISP. Over this PPP runs. So I don't see any reason why an ISP couldn't offer IPv6 over UBS. -----Original Message----- > Pretty much every Cisco DSL router supports IPv6. We just need an ISP > to start selling the IPv6 transit ... The last I knew (which was admittedly many years ago) Telecom's wholesale DSL was a layer-3 service, with frames being routed through a twisty maze of RFC1918-numbered routers before they arrived at the user's ISP. If that was still the case, then surely Telecom would need to route v6 frames between the customer and the ISP for the customer to receive native v6 service? If there has been a subsequent layer-2 wholesale DSL service offered, along the lines that is done elsewhere, is there not still a requirement for Telecom to switch v6 frames from PPPoA into L2TP, or whatever framing is used to present a user's traffic to an ISP?

1 0

Re: [nznog] ipv6
by Philip D'Ath 21 Dec '05

21 Dec '05

I've tried: Orcon Maxnet WorldXchange Telecom told me that are playing with it, at best, and had no plans to offer it commercially. Didn't bother trying Xtra. I tried to speak to TelstraClear about it, but couldn't really find the right people to understand what I was asking. -----Original Message----- From: Matt Brown [mailto:matt(a)mattb.net.nz] Sent: Thursday, 22 December 2005 2:35 p.m. To: Philip D'Ath Cc: Simon Lyall; nznog Subject: Re: [nznog] ipv6 On Thu, 2005-12-22 at 14:26 +1300, Philip D'Ath wrote: > I've tried to buy a dual stack IPv4/IPv6 circuit, but no one I've > contacted is prepared to sell me one. Are you able to share who you tried to purchase one off? There seem to be three NZ providers advertising v6 prefixes at the present time: http://www.sixxs.net/tools/grh/dfp/all/?country=nz With the introduction of UBS I'm hoping that it's going to become a lot more common for ISPs to be able to offer IPv4/IPv6 circuits, even if it is only on ad Ad-Hoc basis to the 'geeks' to start with. Cheers -- Matt Brown matt(a)mattb.net.nz Mob +64 275 611 544 www.mattb.net.nz

1 0

Re: [nznog] ipv6
by Philip D'Ath 21 Dec '05

21 Dec '05

I've tried to buy a dual stack IPv4/IPv6 circuit, but no one I've contacted is prepared to sell me one. I'm having to use 6to4 tunnelling at the moment. -----Original Message----- Is anyone in NZ actually using IPV6 for "real world" / "People paying for IPv6 service" stuff as against "just playing with IPv6" ?

3 2

Streaming Event
by Webmaster 21 Dec '05

21 Dec '05

Over the summer break we will be providing a Studio Cam for the top rating Matinee Idle radio show, hosted by Phil O'Brien. HTTP://www.radionz.co.nz/nr/programmes/matineeidle This is a first for Radio NZ and as far as I am aware a first for New Zealand Radio in general. We'll be providing video streams at 56k, 128k, 384k and 2 Mbs. Operators should be aware that the Studio Cam will be promoted extensively on air. To ensure all New Zealanders get the best possible service we strongly recommend peering with the R2/Citylink anycast cluster at 202.7.7.90 via WIX, APE and/or PNIX. The US node is intended to serve consumers outside New Zealand. Limited NZ bound bandwidth has been allocated for this event, and operators may experience an increase in help desk calls when this allowance is exceeded. regards, Richard Hulse Radio New Zealand

2 1

ipv6
by Simon Lyall 21 Dec '05

21 Dec '05

Interesting wee discussion about real world IPv6 usage on NANOG that some here might be interested in, some have said things have improved a little in the last 18 months though: http://www.merit.edu/mail.archives/nanog/msg14543.html Is anyone in NZ actually using IPV6 for "real world" / "People paying for IPv6 service" stuff as against "just playing with IPv6" ? Ob Friday Afternoon link (many will have seen before): http://www.livejournal.com/users/pjammer/153928.html -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

1 0

New IPv6 Address Block Allocated to the RIPE NCC
by filiz＠ripe.net 20 Dec '05

20 Dec '05

[Apologies for Duplicates] Dear Colleagues The RIPE NCC received the IPv6 address range 2A01:0000::/16 from the IANA in December 2005. 2A01:0000::/23 was allocated to the RIPE NCC in July 2005. This latest range includes that previous allocation. You may wish to adjust any filters you have in place accordingly. You can find more information about the IP space administered by the RIPE NCC on our web site at: https://www.ripe.net/ripe/docs/ripe-ncc-managed-address-space.html Regards, Filiz Yilmaz RIPE NCC

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 18 Dec '05

18 Dec '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS2687 descr: Route set advertised to AS9439 by AT&T Global - AS2687 members: 152.158.254.0/24^24-29, 152.158.255.0/24^24-29, 202.14.142.0/24^24-29, 202.27.160.0/24^24-29, 202.36.68.0/24^24-29, 202.36.69.0/24^24-29, 202.36.80.0/24^24-29, 202.36.195.0/24^24-29, 202.37.93.0/24^24-29, 202.37.254.0/24^24-29, 202.46.160.0/20^20-29, 202.49.144.0/24^24-29, 202.50.137.0/24^24-29, 202.135.20.0/24^24-29, 202.135.34.0/24^24-29, 202.135.38.0/24^24-29, 202.135.48.0/24^24-29, 202.135.49.0/24^24-29, 202.135.62.0/24^24-29, 202.135.85.0/24^24-29, 202.135.107.0/24^24-29, 202.135.111.0/24^24-29, 202.135.112.0/24^24-29, 202.135.116.0/24^24-29, 202.135.142.0/24^24-29, 202.135.182.0/24^24-29, 202.135.185.0/24^24-29, 202.135.190.0/24^24-29, 202.135.192.0/24^24-29, 202.135.231.0/24^24-29, 203.163.68.0/24^24-29, 203.163.70.0/24^24-29, 203.163.71.0/24^24-29, 203.163.86.0/24^24-29, 203.163.94.0/24^24-29, 203.163.98.0/24^24-29, 203.196.119.0/24^24-29, 219.88.103.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: attnzdns(a)ap.att.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050303 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS2687 descr: advertised to AS9439 by AT&T Global Network Services - AS2687 members: 202.46.160.0/20^20-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 202.36.192.0/22^22-29, 152.158.254.0/23^23-29, 202.36.68.0/23^23-29, 202.135.48.0/23^23-29, 203.163.70.0/23^23-29, 202.12.105.0/24^24-29, 202.21.128.0/24^24-29, 202.27.160.0/24^24-29, 202.36.29.0/24^24-29, 202.36.80.0/24^24-29, 202.37.254.0/24^24-29, 202.49.144.0/24^24-29, 202.50.137.0/24^24-29, 202.135.20.0/24^24-29, 202.135.34.0/24^24-29, 202.135.38.0/24^24-29, 202.135.62.0/24^24-29, 202.135.64.0/24^24-29, 202.135.85.0/24^24-29, 202.135.107.0/24^24-29, 202.135.111.0/24^24-29, 202.135.112.0/24^24-29, 202.135.116.0/24^24-29, 202.135.142.0/24^24-29, 202.135.182.0/24^24-29, 202.135.185.0/24^24-29, 202.135.190.0/24^24-29, 202.135.192.0/24^24-29, 202.135.231.0/24^24-29, 202.135.234.0/24^24-29, 203.163.68.0/24^24-29, 203.163.86.0/24^24-29, 203.163.94.0/24^24-29, 203.163.98.0/24^24-29, 203.196.101.0/24^24-29, 203.196.119.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.lister(a)ap.att.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051219 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 18 Dec '05

18 Dec '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS2687 descr: Route set advertised to AS9560 by AT&T - AS2687 members: 152.158.254.0/23^23-29, 203.163.70.0/23^23-29, 152.158.213.0/24^24-29, 202.14.141.0/24^24-29, 202.14.142.0/24^24-29, 202.36.80.0/24^24-29, 202.36.195.0/24^24-29, 202.37.28.0/24^24-29, 202.37.93.0/24^24-29, 202.37.254.0/24^24-29, 202.50.137.0/24^24-29, 202.135.20.0/24^24-29, 202.135.38.0/24^24-29, 202.135.48.0/24^24-29, 202.135.62.0/24^24-29, 202.135.64.0/24^24-29, 202.135.85.0/24^24-29, 202.135.86.0/24^24-29, 202.135.112.0/24^24-29, 202.135.115.0/24^24-29, 202.135.116.0/24^24-29, 202.135.142.0/24^24-29, 202.135.182.0/24^24-29, 202.135.190.0/24^24-29, 202.135.192.0/24^24-29, 202.135.231.0/24^24-29, 203.163.68.0/24^24-29, 203.163.86.0/24^24-29, 203.163.98.0/24^24-29, 219.88.103.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: Mark.Crawford(a)ap.att.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050503 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS2687 descr: advertised to AS9560 by AT&T Global Network Services - AS2687 members: 202.46.160.0/20^20-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 202.36.192.0/22^22-29, 152.158.254.0/23^23-29, 202.36.68.0/23^23-29, 202.135.48.0/23^23-29, 203.163.70.0/23^23-29, 202.12.105.0/24^24-29, 202.21.128.0/24^24-29, 202.27.160.0/24^24-29, 202.36.29.0/24^24-29, 202.36.80.0/24^24-29, 202.37.254.0/24^24-29, 202.49.144.0/24^24-29, 202.50.137.0/24^24-29, 202.135.20.0/24^24-29, 202.135.34.0/24^24-29, 202.135.38.0/24^24-29, 202.135.62.0/24^24-29, 202.135.64.0/24^24-29, 202.135.85.0/24^24-29, 202.135.107.0/24^24-29, 202.135.111.0/24^24-29, 202.135.112.0/24^24-29, 202.135.116.0/24^24-29, 202.135.142.0/24^24-29, 202.135.182.0/24^24-29, 202.135.185.0/24^24-29, 202.135.190.0/24^24-29, 202.135.192.0/24^24-29, 202.135.231.0/24^24-29, 202.135.234.0/24^24-29, 203.163.68.0/24^24-29, 203.163.86.0/24^24-29, 203.163.94.0/24^24-29, 203.163.98.0/24^24-29, 203.196.101.0/24^24-29, 203.196.119.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.lister(a)ap.att.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051219 source: NZRR

1 0

Update: Systems Administration Miniconf, linux.conf.au 2006.
by Simon Lyall 17 Dec '05

17 Dec '05

The Systems Administration Miniconf which will be part of the linux.conf.au conference to be held in Dunedin, New Zealand in January 2006 We are pleased to announce that our programme is 95% finalised and is available online at: http://sysadmin.miniconf.org/program.html and more details of each presentation are on this page: http://sysadmin.miniconf.org/presentations.html Please note that for now the actual times of each presentation have not been finalized while we work with other miniconfs to avoid clashes. While we are no longer accepting full length talks we still have space for Lightning talks, please contact us if you are interested: http://sysadmin.miniconf.org/lightning.html Contact and Questions --------------------- Please see our website at http://sysadmin.miniconf.org/ for more information on the miniconf. If you have any questions please feel free to email the organisers at: contact @ sysadmin.miniconf.org

1 0

Re: [nznog] NZ Security Notifications
by John Martin 16 Dec '05

16 Dec '05

Brendan Murray wrote: > > > If you think there would be some value in this, please email me. > > You can find information about the nsp-security mailing list at > https://puck.nether.net/mailman/listinfo/nsp-security) > > I believe such a closed security mailing list would have a great deal of value, not only to Universities and ISP's within New Zealand (re: aka Russell Fulton) but also to Critical Infrastructure Providers, financial services too. With a great number of sources from Phishing, Pharming attacks being reported with USA and EMEA from APAC, this could also provide an early warning system and possibly assist in shutting down such activity via the participating ISP's. However, in terms of running a script through various snort databases, the issue of privacy looms and authorisation, a better answer might be to use the New Zealand nominated CERT for such operations i.e. Centre for Critical Infrastructure Protection (CCIP) locally as a central collection point etc.. To ensure anonymity etc. It would also be good to add ISC (sans.org) logs to the collective.. With compliance issues only around the corner, New Zealand is relatively unscathed by regulatory/legislation within USA, EMEA, Australia, which statistically looks like it will take a hold within the next 1-2 years. Such a group may provide guidance to organisations, not prepared for the ongoing associated issues of compliance. John Martin Security Practice Leader IBM NZ

1 0

NZ Security Notifications
by Brendan Murray 15 Dec '05

15 Dec '05

(apologies to members of members-discuss(a)internetnz.net.nz for duplication) Yesterday the topic of AusCERT came up on nznog. Many of you probably know that InternetNZ has formed a small group to look at the need/feasibility of a NZ based CERT. It is all in early days yet, but it might be a good time to start looking at some ways of improving security awareness here. We hope to raise some ideas for discussion at the nznog conference next year, but the recent email suggests we could start on some practical matters now. We would like to suggest creating a NZ security community with a nz-sec mailing list, for example. This would have the same sort of intent as the nsp-security mailing list, bringing in people with a genuine interest in security practice and incident handling. We feel that the CCIP list, while valuable, is informative rather than collaborative. The nznog list has been used for security issues where relevant, but network operations is the reason for nznog, not security management. Ultimately the list and list membership, or some variant, would become associated with a NZ CERT if one were to happen, but in the meantime InternetNZ would be happy to host and advertise a moderated list. If you think there would be some value in this, please email me. You can find information about the nsp-security mailing list at https://puck.nether.net/mailman/listinfo/nsp-security) Brendan Murray Chairing the InternetNZ NZCERT Task Force.

7 7

Re: [nznog] NZ Security Notifications
by Barry Greene (bgreene) 14 Dec '05

14 Dec '05

For those who are interested, I've got a draft of some guidelines that can be used to create a group like nsp-sec-nz. Pop me a note and I'll send it. > -----Original Message----- > From: Rob Thomas [mailto:robt(a)cymru.com] > Sent: Wednesday, December 14, 2005 8:16 AM > To: Joe Abley > Cc: NZNOG List > Subject: Re: [nznog] NZ Security Notifications > > ] While an nsp-sec-nz list sounds like it could be lots of > fun, maybe ] it's also worth mentioning that it's perfectly > possible (and ] reasonable) for operators in nz who fit the > target demographic to ] become subscribers to the existing > nsp-sec list. > > Agreed! The mix of both nsp-sec and nsp-sec-nz would be > quite complimentary and useful. > > -- > Rob Thomas > Team Cymru > http://www.cymru.com/ > ASSERT(coffee != empty); > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

Re: [nznog] Hotmail
by Jeremy Strachan 14 Dec '05

14 Dec '05

Probably B52 bombers and cruise missiles. -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Thursday, 15 December 2005 12:47 p.m. To: Simon Lyall Cc: nznog Subject: Re: [nznog] Hotmail Simon Lyall wrote: > Violations will result in use of equipment located in California and > other states. Ouuchhhh... that'll stop spammers for sure! Wonder what equipment located in California and other states it is that MSN/Hotmail will use though? -- Juha _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

6 7

Hotmail
by Simon Lyall 14 Dec '05

14 Dec '05

$ telnet mx2.hotmail.com smtp Trying 65.54.244.168... Connected to mx2.hotmail.com. Escape character is '^]'. 220 bay0-mc6-f18.bay0.hotmail.com Sending unsolicited commercial or bulk e-mail to Microsoft's computer network is prohibited. Other restrictions are found at http://privacy.msn.com/Anti-spam/. Violations will result in use of equipment located in California and other states. Wed, 14 Dec 2005 15:39:37 -0800 helo 250 bay0-mc6-f18.bay0.hotmail.com (3.1.0.17) Hello [202.27.185.139] Mail from:<simon(a)darkmere.gen.nz> 452 Out of memory Connection closed by foreign host. $ -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

2 1

Re: [nznog] NZ Security Notifications
by Dean Pemberton 13 Dec '05

13 Dec '05

>Would this list have the same sort of policy for membership as nsp-sec? >i.e. an invite only list for people who actually have to do the work >with a policy of kicking out people who don't meet the membership >criteria on an ongoing basis. > >If that's the case then I can see value in such a list but if it's >going to be similar to NZNOG with an "anybody can join" policy then I'm >less interested. > >andy I agree with Andy here. The only list I would be interested in is one which subscribes to the nsp-sec policy. No lurking. You have to be the person who is able to make the changes. Change jobs and you unsub. And some others. It's the only way. An "anyone can join" list will degrade into.... well my opinions here should remain to myself =) I would suggest that people look at joining nsp-sec rather than re-inventing the wheel. Or at the very least getting Rob to host an nsp-sec-nz list with the same policy around it. If you are a large provider, then there is probably already content on nsp-sec that you should know about. Dean.

1 0

Fwd: King Kong streaming tomorrow
by Paul Adshead 13 Dec '05

13 Dec '05

It may be good for someone in Telecom to let their front line staff know about (de-)peering at some point. After spending 15 minutes on the phone, it was quite amusing when they came back from putting me on hold: "I have talked to our tech guys and no-one in Xtra can get to the page either. They think it is a problem with the routing of data for the site at the far end. You could try power-cycling your router though"... Then when I asked for confirmation by email: "We suspect that there has been some stringent ip filtering and this is what could be causing the problem. We can not confirm this the best source of action would be to contact the host of the website for further information." Obviously either highly qualified in providing BS responses or just stupid. It's still annoying that I can't get to see it though... Paul -----Original Message----- From: Mike [mailto:mike(a)nzbox.com] Sent: Wednesday, 14 December 2005 17:20 To: NZNOG Subject: Re: [nznog] King Kong streaming tomorrow Hi Rich and Si Can I suggest you mention which streams will be available internationally in your announcements. Cant see either of these from Seattle ;-) good message for TCL and TNZ though.... Kia ora! You've reached the Citylink anycast node located in San Francisco, California. If you are in NZ, you should ring your ISP and ask them why your traffic is coming to the USA, rather than staying in New Zealand. Useful phone numbers are at TelstraClear (try the wholesale number if you get no joy from residential/business) and the best number for Telecom would appear to be 0800 CALL XTRA [22 55 98]. If you're feeling particularly cussed, ask them what's changed in the two years between the RoTK (when you could reach these streams nationally) and now. International users, we're sorry, sadly, our non-existent budget means that we can't make the Courtenay Place webcam available internationally. Such is life. Mike On Dec 12, 2005, at 8:10 PM, Simon Blake wrote: > Hi all > > A belated notice that the red carpet TV coverage and Courtenay Place > webcam will be streaming tomorrow as part of the King Kong premiere. > The mms stream will be on ac1-all.r2.co.nz (202.7.7.90), the webcam > from > embassy.citylink.co.nz (202.7.6.10), both anycast at the major > exchanges. The webcam is running now, informal MMS streams will start > about midday, TV coverage about 3pm. > > We're not expecting the same sorts of loads as RoTK, but who can tell. > > Cheers > Si > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

King Kong streaming tomorrow
by Simon Blake 13 Dec '05

13 Dec '05

Hi all A belated notice that the red carpet TV coverage and Courtenay Place webcam will be streaming tomorrow as part of the King Kong premiere. The mms stream will be on ac1-all.r2.co.nz (202.7.7.90), the webcam from embassy.citylink.co.nz (202.7.6.10), both anycast at the major exchanges. The webcam is running now, informal MMS streams will start about midday, TV coverage about 3pm. We're not expecting the same sorts of loads as RoTK, but who can tell. Cheers Si

5 4

NZ use of AusCERT
by Jonathan Brewer 11 Dec '05

11 Dec '05

Hi folks, Are there many among us who are members of AusCERT? Any in the practice of reporting incidents on NZ based hosts to AusCERT? Do AusCERT care to hear about incidents from non-members? Cheers, Jon

2 1

woosh
by Garrrett Stoupe 11 Dec '05

11 Dec '05

Can someone from woosh please contact me off list

1 0

National Bank Phising Scam
by Ashley Petherick 11 Dec '05

11 Dec '05

Morning all, awoke today to a National bank Phishing scam - a pretty ugly one, they didnt put much effort into the email, but the 'verification web page' looks pretty authentic (save the URL http://202.93.254.35:443/cxk/) They ask for your First and Last name, and credit card number, your ATM PIN, and expiration date. Sent from security(a)nationalbank.co.nz / Subject - Verification Required I have advised the site. Account Confirmation Required! Valued National Bank Client, Recently there have been a large number of identity theft attempts targeting National Bank customers. In order to safeguard your account we require that you verify your banking details. This process is mandatory. You may do so by clicking Here <http://202.93.254.35:443/cxk/> <a href="http://202.93.254.35:443/cxk/"> and submitting the required information. Failure to do so may result in a temporary cessation of your account services pending submission. Thank you for your prompt attention to this matter and your co-operation in helping us maintain the integrity of our customers accounts. Please do not reply to this e-mail, as this is an unmonitored alias. If you require further assistance refer to our support centre <http://nationalbank.co.nz/personal/contacts/> <A HREF="http://nationalbank.co.nz/personal/contacts/" TARGET="_blank">. National Bank respects your privacy. Click here <http://nationalbank.co.nz/terms/default.htm> <A HREF="http://nationalbank.co.nz/terms/default.htm" TARGET="_blank"> to read the National Bank Group Privacy Policy Statement. Electronic Banking services are issued by the National Bank of New Zealand (Electronic Banking services include telephone banking, Netbank and Bpay). A Product Disclosure Statement (PDS) <http://nationalbank.co.nz/terms/default.htm> <A HREF="http://nationalbank.co.nz/terms/default.htm" TARGET="_blank"> is available for these products on this website or from any branch of the National Bank. © 2005 The National Bank of New Zealand, part of ANZ National Bank Limited

1 0

Re: [nznog] (OT?) Phishers targetting Kiwibank
by Donald Neal 08 Dec '05

08 Dec '05

Andy Linton wrote: > > It would be good if these phishing discussions focussed on > technical aspects > of what can be done by people on this list once the list > knows about the > latest scam. The banks I suspect will make their own > decisions without seeking > advice here. > This thread should now turn to a technical topic or go away. - Donald Neal NZNOG List Administrator Donald Neal |"You know what young, carnivorous, Support Engineer |alien mammal-like monsters are like. NGN Operations |Always getting into scrapes." Integration & Services Division +----------------------------------- Alcatel NZ Ltd - Telecom's network operations manager This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

4 3

(OT?) Phishers targetting Kiwibank
by Lesley Walker 08 Dec '05

08 Dec '05

I've received a reasonably plausible-looking phish for Kiwibank, appears to have originated in Washington DC. The domain it uses is "kiwibahk.com", registered through bookmyname.com, and I have sent a complaint to the registrar. Does anyone want a copy for reference? Lesley W

11 10

Re: [nznog] (OT?) Phishers targetting Kiwibank
by Regan Murphy 07 Dec '05

07 Dec '05

> They shut down their whole Internet banking site because of a > phishing email ! I would have thought that was somewhat of an > over reaction. That would sure annoy me if I happened to be > one of their customers. Well they wouldn't be the first bank to take this sort of action.... -- Regan

2 1

TelstraClear Down?
by jfp 04 Dec '05

04 Dec '05

Does anybody know what's up with TelstraClear. I can't get to their nameservers from NZ or the US. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Senior Software Engineer Phone (+64-9) 358 2081 Clearfield Software Ltd Fax (+64-9) 358 2083 4th Floor 8-10 Whitaker Place Mob (+64-21) 640 779 P O Box 3901 Auckland, New Zealand ------------------------------------------------------------------------

3 3

Re: [nznog] TelstraClear down
by Stewart Fleming 04 Dec '05

04 Dec '05

DNS certainly gone bang. IP routing still working, but very slow. Denial of service attack? Had a call from my Telstra rep earlier, but that was for a billing error outstanding since February. Maybe they keep the DNS records in the same file...? -- Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request GET http://networkstatus.telstraclear.co.nz/home/clearnet.html. Reason: DNS lookup failure for: networkstatus.telstraclear.co.nz Apache/2.0.52 (Unix) Server at networkstatus.telstraclear.co.nz Port 80 Traceroute from TC frame relay hosted in ChCh to www.xtra.co.nz 3 218.101.61.74 (218.101.61.74) 28.325 ms 21.328 ms 27.119 ms 4 218.101.61.69 (218.101.61.69) 25.932 ms 18.852 ms 40.947 ms 5 218.101.61.33 (218.101.61.33) 17.685 ms 28.273 ms 124.740 ms 6 ggis-gige-v906.telstraclear.net (203.98.18.67) 43.038 ms 42.818 ms 15.735 ms 7 g0-1-0-4.akcr8.global-gateway.net.nz (210.55.202.49) 18.469 ms 36.399 ms 28.106 ms 8 v4.aksw7.global-gateway.net.nz (210.55.202.51) 46.682 ms 36.813 ms 43.531 ms 9 xtra-dom-2.aksw7.global-gateway.net.nz (203.96.120.150) 32.408 ms 18.452 ms 39.837 ms

3 2

Re: [nznog] TelstraClear Down?
by Simon Allard 04 Dec '05

04 Dec '05

Just the nameservers? They have probably been ACL'ed to stop DNS DDoS attacks, like what xtra etc have done. Simon Allard ihug Limited P +64 9 962 9827 M +64 21 456 412 E simon.allard(a)staff.ihug.co.nz > -----Original Message----- > From: jfp [mailto:jfp(a)clearfield.com] > Sent: Monday, 5 December 2005 10:20 a.m. > To: NZNOG(a)list.waikato.ac.nz > Subject: [nznog] TelstraClear Down? > > > Does anybody know what's up with TelstraClear. I can't get to their > nameservers from NZ or the US. > > > jfp. > > ------------------------------------------------------------------------ > Jean-Francois Pirus <jfp(a)clearfield.com> Senior Software Engineer > Phone (+64-9) 358 2081 Clearfield Software Ltd > Fax (+64-9) 358 2083 4th Floor 8-10 Whitaker Place > Mob (+64-21) 640 779 P O Box 3901 Auckland, New Zealand > ------------------------------------------------------------------------ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog

10 13

Re: [nznog] TelstraClear Down?
by Peter Mott 04 Dec '05

04 Dec '05

Maybe there was an imperical decision taken by AU head office to close it down due to lack of profits. :-) regards Peter Mott MOTT & ASSOCIATES Tel: +64 9 488 9352 Fax: +64 9 486 7017 -/-

2 1

Xen for network services (aka web/mail/dns etc) - OT?
by Simon 02 Dec '05

02 Dec '05

Hi There, I have been discussing the utilisation of Xen in a production environment on a couple of other lists (nzlug, debian-isp etc), but wondering if anyone from this list is using it in new zealand for serving of network services? Please let me know if this is OT. Would like to hear your experiences if so. Simon

6 6

Re: [nznog] [Fwd: Re: Bizarre spam]
by Nic Wise 01 Dec '05

01 Dec '05

I'd go with zombie's :) the . Then new line new line thing means that the rest of whatever your script does is ignored by the SMTP server, and the big long number might be either a "key" to get the target of an attack (eg, HTTP to this server, present this key, get details back) or something, or the IP / DNS name / something else of it, maybe base64'ed or encrypted somehow. I could see a virus/trojan/etc sitting there, polling a pop3 account, looking for emails with those words in the subject, and some form of payload, then it pings up and goes and does something. Maybe the attacked script was used as a "trigger"?? Damn it's time for a beer. N > -----Original Message----- > From: Justin Cook [mailto:justin(a)skull.co.nz] > Sent: Friday, 2 December 2005 3:01 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] [Fwd: Re: Bizarre spam] > > It was, and it's already dealt with. Just looking for the > reason behind it. Adrian is probably on the mark when he > calls it a DoS. > > James Clark wrote: > > > > > Sounds like PHP injection, assume it's PHP. If not ignore me. > > > > These articles explain the cause and fixes in more depth: > > > > http://securephp.damonkohler.com/index.php/Email_Injection > > http://www.nyphp.org/phundamentals/email_header_injection.php > > > > > > Justin Cook wrote: > > > >> I've got a question for the appropriate higher minds. > >> > >> I fixed one of my clients self-built contact forms after I had an > >> inkling that someone was injecting headers into it to use it as a > >> relay. Turns out I was right, but it's beyond me what > they're trying > >> to accomplish: > >> > >> Content-Type: text/plain; charset="us-ascii" > >> MIME-Version: 1.0 > >> Content-Transfer-Encoding: 7bit > >> Subject: which a rising moon now threw from the scattered clouds > >> bcc: charleslegbe(a)aol.com > >> > >> 648a4d46b041327ac30fe4f27a9b72ee > >> . > >> > >> > >> Tons and tons of that just that. What possible use could > this garbage > >> be? Is someone trying to blackhole their domain? > >> > >> Cheers > >> Justin > >> > >> _______________________________________________ > >> NZNOG mailing list > >> NZNOG(a)list.waikato.ac.nz > >> http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > > > > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 01 Dec '05

01 Dec '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS17435 descr: advertised to AS9560 by WorldxChange Communications - AS17435 members: 202.182.192.0/19^19-29, 58.28.0.0/16^16-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: gsmith(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050308 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS17435 descr: advertised to AS9560 by WorldxChange Communications LTD - AS17435 members: 58.28.0.0/16^16-29, 202.182.192.0/19^19-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)wxnz.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051202 source: NZRR

1 0

Bizarre spam
by Justin Cook 01 Dec '05

01 Dec '05

I've got a question for the appropriate higher minds. I fixed one of my clients self-built contact forms after I had an inkling that someone was injecting headers into it to use it as a relay. Turns out I was right, but it's beyond me what they're trying to accomplish: Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: which a rising moon now threw from the scattered clouds bcc: charleslegbe(a)aol.com 648a4d46b041327ac30fe4f27a9b72ee . Tons and tons of that just that. What possible use could this garbage be? Is someone trying to blackhole their domain? Cheers Justin

2 1

[Fwd: Re: Bizarre spam]
by Justin Cook 01 Dec '05

01 Dec '05

It was, and it's already dealt with. Just looking for the reason behind it. Adrian is probably on the mark when he calls it a DoS. James Clark wrote: > > Sounds like PHP injection, assume it's PHP. If not ignore me. > > These articles explain the cause and fixes in more depth: > > http://securephp.damonkohler.com/index.php/Email_Injection > http://www.nyphp.org/phundamentals/email_header_injection.php > > > Justin Cook wrote: > >> I've got a question for the appropriate higher minds. >> >> I fixed one of my clients self-built contact forms after I had an >> inkling that someone was injecting headers into it to use it as a >> relay. Turns out I was right, but it's beyond me what they're trying >> to accomplish: >> >> Content-Type: text/plain; charset="us-ascii" >> MIME-Version: 1.0 >> Content-Transfer-Encoding: 7bit >> Subject: which a rising moon now threw from the scattered clouds >> bcc: charleslegbe(a)aol.com >> >> 648a4d46b041327ac30fe4f27a9b72ee >> . >> >> >> Tons and tons of that just that. What possible use could this garbage >> be? Is someone trying to blackhole their domain? >> >> Cheers >> Justin >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog > > >

2 1

Notification of NZRR Database changes
by NZRR Database Notifications 01 Dec '05

01 Dec '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: route-set: AS9560:RS-ROUTES:AS18119 descr: Route set advertised to AS9560 by Linux Net - AS18119 members: 202.46.160.0/20^20-29, 202.126.80.0/21^21-29, 202.21.136.0/23^23-29, 202.61.2.0/23^23-29, 192.107.113.0/24^24-29, 202.36.44.0/24^24-29, 202.37.136.0/24^24-29, 202.49.144.0/24^24-29, 202.49.249.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: lincoln(a)linuxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051202 source: NZRR

1 0

Re: [nznog] Bizarre spam]
by Justin Cook 01 Dec '05

01 Dec '05

I think they're going to 30 or 40 different AOL addresses. Just trashed about 800 of them so I can't really go back and check for sure. They're being sent from a lot of different IP addresses, some of them in the same range but not always. Probably zombies. Seems like a lot of work to go to for fuck all. Kitto, Adrian - Axon AKL wrote: >Does it all BCC the same mailbox? > >Could be an old fashion dos on the mailbox... (seen it before) > >Cheers > >Adrian > > >-----Original Message----- >From: Justin Cook [mailto:justin(a)skull.co.nz] > >Sent: Friday, 2 December 2005 2:54 p.m. >To: nznog(a)list.waikato.ac.nz >Subject: [nznog] Bizarre spam > >I've got a question for the appropriate higher minds. > >I fixed one of my clients self-built contact forms after I had an > >inkling that someone was injecting headers into it to use it as a relay. > >Turns out I was right, but it's beyond me what they're trying to >accomplish: > >Content-Type: text/plain; charset="us-ascii" >MIME-Version: 1.0 >Content-Transfer-Encoding: 7bit >Subject: which a rising moon now threw from the scattered clouds >bcc: charleslegbe(a)aol.com > >648a4d46b041327ac30fe4f27a9b72ee >. > > >Tons and tons of that just that. What possible use could this garbage > >be? Is someone trying to blackhole their domain? > >Cheers >Justin > >_______________________________________________ >NZNOG mailing list >NZNOG(a)list.waikato.ac.nz >http://list.waikato.ac.nz/mailman/listinfo/nznog > >-- >The information contained in this e-mail message is intended only for the >use of the person or entity to whom it is addressed and may contain >information that is CONFIDENTIAL and may be exempt from disclosure under >applicable laws. > >If you read this message and are not the addressee you are notified that >use, dissemination, distribution, or reproduction of this message is >prohibited. If you have received this message in error, please notify us >immediately and delete the original message. You should scan this message >and any attached files for viruses. > >Axon accepts no liability for any loss caused either directly or >indirectly by a virus arising from the use of this message or any >attached file. > > >

1 0

JSR.COM Prefix List Update (and peering request)
by John S Russell 01 Dec '05

01 Dec '05

Hiya all (and sundry), For those of you who peer with jsr.com, here's a prefix update. It's a massive update, since I am DOUBLING the amount of advertised prefixes[1], like woah. New list can be found here: http://jsr.com/prefix For those of you who are not currently peering with jsr.com, please consider doing so. jsr.com is a very very tiny boutique and exclusive as hell co-location service. It's run by geeks, for geeks, generally to service geek whims and projects. There's a fair wack of content on there, including: - The personal mail and web servers for various notable NZ geeks! - [Unable to state due to NDA compliance!] - Up-To-Date Debian Mirrors! - [Unable to state due to a personal promise!] - [Unable to state for fear of reprisal!] If you'd like to set up a direct peering session via APE, please contact jsr(a)jsr.com to arrange it (TelstraClear staff, I'm looking forward to hearing from you!). Sadly we do not yet have a WIX presence, but this is in our roadmap for future growth.[2] If you'd like to discuss co-location in our Sky Tower facility, please also contact jsr(a)jsr.com and have a list of reasons why you're geeky enough or your project is cool enough to merit the allocation of our sweet, precious, incandescent with awesomeness[3], rack units on L48. Cheers, JSR [1] To two. [2] Mind you, so is "Evolve into energy beings, rule universe from on high." [3] Incandescence may actually be caused by thermal dissipation from servers. YMMV.

1 0

Remote server booting
by Simon 01 Dec '05

01 Dec '05

Hi There, Im wondering if anyone has used or is using a good solution to remote boot (from complete power down) servers and equiptment? This i have done in the past by having the bios on the server set to reboot after power fail and that takes care of the rest along with good load UPS's and backup power. But what if you acually had to shut down a server for some reason out-there (backup power fails)? Regards, Simon

19 23

Re: [nznog] Remote server booting
by murphy 01 Dec '05

01 Dec '05

If you are using HP machines (other mobs may have a similar setup) you can take advantage of iLO - Integrated Lights Out. It is a 2nd or 3rd network card in the machine that acts as a management interface. It can be accessed by telnet, ssh, or web (hopefully your core network is still up) and provides access to virtual power buttons, mounting ISO's remotely for full system rebuilds, etc. I spec it in standard with all my server purchases. In scenarios where you are co-locating then this is a must. Providing the network is up and the power cable is plugged into the server (whether the server be physically on or off) then you have full control over its behaviour. Worth a look into. On 12/1/05, nznog-request(a)list.waikato.ac.nz <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Re: Remote server booting (Regan Murphy) > 2. Re: Remote server booting (Erin Salmon - Unleash Computers Ltd) > 3. NZ Online Security Day (Matthew Poole) > 4. Re: NZ Online Security Day (Juha Saarinen) > 5. Re: Remote server booting (Drew Broadley) > 6. Re: Remote server booting (Joe Abley) > 7. Re: Remote server booting (Gordon Smith) > 8. Re: Remote server booting (Simon Lyall) > 9. Re: Remote server booting (Daniel Lawson) > 10. Re: Remote server booting (Barry Murphy) > 11. Re: Remote server booting (Jeremy Strachan) > 12. Re: Remote server booting (Simon) > 13. Re: Remote server booting (Tony Wicks) > 14. Re: NZ Online Security Day (Steven Heath) > 15. Re: Remote server booting (Nathan Ward) > 16. Re: NZ Online Security Day (Erin Salmon - Unleash Computers Ltd) > 17. Re: NZ Online Security Day (neil gardner) > 18. Re: NZ Online Security Day (Mark Foster) > 19. Xen for network services (aka web/mail/dns etc) - OT? (Simon) > 20. Re: Xen for network services (aka web/mail/dns etc) - OT? > (Erin Salmon - Unleash Computers Ltd) > 21. Re: Xen for network services (aka web/mail/dns etc) - OT? > (Richard Patterson) > 22. Re: Xen for network services (aka web/mail/dns etc) - OT? > (Andrew Thompson) > 23. Re: Xen for network services (aka web/mail/dns etc) - OT? > (Richard Patterson) > 24. Re: Xen for network services (aka web/mail/dns etc) - OT? (Martin) > > > > ---------- Forwarded message ---------- > From: "Regan Murphy" <regan.murphy(a)oasystems.co.nz> > To: "James Clark" <jamesc(a)bofh.co.nz>, <criggie(a)criggie.dyndns.org> > Date: Wed, 30 Nov 2005 12:08:02 +1300 > Subject: Re: [nznog] Remote server booting > > We no longer carry this range of product, and I beleive that the > > manufacturers have discontinued some of the range There website has > > gone but you can try to call them on 0800smitch > > Black Box used to have a local website and produce a Catalog, not sure > if they still do in NZ. They carry a range of remote power units, have > a browse - I'm sure there is something suitable there: > > http://www.blackbox.com/Catalog/Category.aspx?cid=183,1324,1327 > > > -- > Regan > > > > > > ---------- Forwarded message ---------- > From: "Erin Salmon - Unleash Computers Ltd" <erin(a)unleash.co.nz> > To: "Regan Murphy" <regan.murphy(a)oasystems.co.nz>, "James Clark" <jamesc(a)bofh.co.nz>, <criggie(a)criggie.dyndns.org> > Date: Wed, 30 Nov 2005 12:21:09 +1300 > Subject: Re: [nznog] Remote server booting > Black Box does still sell in NZ, but I'm not sure if they have a local > office here or just bring stuff over as required. sales(a)blackbox.com.au. > > Their stuff is good, but on the whole very expensive. > > VMWare, Xen, UML etc all offer remote "power cycling" of hosted domains, but > of course, if the root domain goes down you're still stuck. Needless to say > the other advantages of virtualisation make it pretty attractive. > > Cheers, > > Erin Salmon > Managing Director > Unleash Computers Ltd > Unleash Networks Ltd > Mobile: 021 877 913 > Landline: 03 365 1273 > > -----Original Message----- > From: Regan Murphy [mailto:regan.murphy(a)oasystems.co.nz] > Sent: 30 November 2005 12:08 p.m. > To: James Clark; criggie(a)criggie.dyndns.org > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Remote server booting > > > We no longer carry this range of product, and I beleive that the > > manufacturers have discontinued some of the range There website has > > gone but you can try to call them on 0800smitch > > Black Box used to have a local website and produce a Catalog, not sure > if they still do in NZ. They carry a range of remote power units, have > a browse - I'm sure there is something suitable there: > > http://www.blackbox.com/Catalog/Category.aspx?cid=183,1324,1327 > > > -- > Regan > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > > > ---------- Forwarded message ---------- > From: Matthew Poole <matt(a)p00le.net> > To: nznog(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 12:38:20 +1300 (NZDT) > Subject: [nznog] NZ Online Security Day > > Is apparently today. One of my co-workers discovered this when he logged > into the WestpacTrust online banking site. > Anyone else heard of this? It was obviously very well publicised, seeing > as a whole company of geeks hadn't heard of it. > > -- > Matthew Poole > "Don't use force. Get a bigger hammer." > > > > > > ---------- Forwarded message ---------- > From: Juha Saarinen <juha(a)saarinen.org> > To: Matthew Poole <matt(a)p00le.net> > Date: Wed, 30 Nov 2005 12:52:12 +1300 > Subject: Re: [nznog] NZ Online Security Day > Matthew Poole wrote: > > Is apparently today. One of my co-workers discovered this when he logged > > into the WestpacTrust online banking site. > > Anyone else heard of this? It was obviously very well publicised, seeing > > as a whole company of geeks hadn't heard of it. > > It's a silly stunt that is best ignored. I don't think geeks are > interested in downloading Hector the Virus Vect... err, Protector, in > order to celebrate Online Security Day. > > -- > Juha > > > > > > ---------- Forwarded message ---------- > From: Drew Broadley <drew(a)corrupt.co.nz> > To: criggie(a)criggie.dyndns.org > Date: Wed, 30 Nov 2005 13:57:56 +1300 > Subject: Re: [nznog] Remote server booting > criggie(a)criggie.dyndns.org wrote: > >>>Im wondering if anyone has used or is using a good solution to remote > >>>boot (from complete power down) servers and equiptment? > > > > > > > > Theres a box called a smitch, which you can remotely turn on or off using > > a SMS message. They're quite pricy at around $300 NZ, but you could put > > one in a place thats otherwise hard to get to... someone's roof-space for > > example. > > > > http://www.cellpower.co.nz/Smitch%20switch.htm <-- out of stock > > http://www.smitch.co.nz/ <-- goes to domainz > > > > They do need a basic lesson in "how to market a product" though :/ > > For a cheaper option, http://ito.client.topshelfmedia.co.nz/Home > > - Drew > > > > > > ---------- Forwarded message ---------- > From: Joe Abley <jabley(a)isc.org> > To: Simon <greminn(a)gmail.com> > Date: Tue, 29 Nov 2005 20:02:06 -0500 > Subject: Re: [nznog] Remote server booting > > On 28-Nov-2005, at 22:44, Simon wrote: > > > Im wondering if anyone has used or is using a good solution to remote > > boot (from complete power down) servers and equiptment? > > If you'd also like a proper serial console (and your server's bios > doesn't already provide you with one) you could do worse than <http:// > www.realweasel.com/>. It's probably hugely expensive if all you want > is a remote power cycle capability though. > > > Joe > > > > > > ---------- Forwarded message ---------- > From: "Gordon Smith" <gsmith(a)wxc.co.nz> > To: <NZNOG(a)list.waikato.ac.nz> > Date: Wed, 30 Nov 2005 14:04:31 +1300 > Subject: Re: [nznog] Remote server booting > These guys also do good solutions: > > http://www.cyclades.com/ > > > > > > ---------- Forwarded message ---------- > From: Simon Lyall <simon(a)darkmere.gen.nz> > To: nznog <NZNOG(a)list.waikato.ac.nz> > Date: Wed, 30 Nov 2005 14:18:49 +1300 (NZDT) > Subject: Re: [nznog] Remote server booting > On Wed, 30 Nov 2005, Gordon Smith wrote: > > These guys also do good solutions: > > > > http://www.cyclades.com/ > > <plug> > > If anyone is going to Linux Conf in Dunedin in January then we are having > a talk by John Bordin from Cyclades on this area at the Sysadmin Miniconf, > See http://sysadmin.miniconf.org/presentations.html (3rd one down) > > The rest of the programme is being finalized and should be published in a > couple of days. > </plug> > > -- > Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ > "To stay awake all night adds a day to your life" - Stilgar | eMT. > > > > > > ---------- Forwarded message ---------- > From: Daniel Lawson <daniel(a)wand.net.nz> > To: Joe Abley <jabley(a)isc.org>, NZNOG(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 14:33:39 +1300 > Subject: Re: [nznog] Remote server booting > > > > > >>Im wondering if anyone has used or is using a good solution to remote > >>boot (from complete power down) servers and equiptment? > >> > >> > > > >If you'd also like a proper serial console (and your server's bios > >doesn't already provide you with one) you could do worse than <http:// > >www.realweasel.com/>. It's probably hugely expensive if all you want > >is a remote power cycle capability though. > > > > > > I recently picked up a second hand Compaq RILOE card on trademe for > about $70 (there's still a few there). Provides local console > redirection via http, keyboard/mouse intercept, remote power control > (with a custom powercable that fits in between the physical power button > and the psu), etc. These models are a bit old now, but the modern > equivalents (such as the realweasel) look good, and I'd consider them > well worth the money. > > -- > Daniel Lawson > WAND Group, Computer Science Department > University of Waikato > email: daniel(a)wand.net.nz phone: +64 7 838 4136 > > > > > > ---------- Forwarded message ---------- > From: Barry Murphy <barry(a)unix.co.nz> > To: Daniel Lawson <daniel(a)wand.net.nz>, Joe Abley <jabley(a)isc.org>, NZNOG(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 15:18:29 +1300 > Subject: Re: [nznog] Remote server booting > Hmmm, so basically an IP-KVM ? Does it have a network port or does it share > the systems; do you assign an IP to it and it gives a web based console? > > I'm wondering if i can put this into a system, attach it to a KVM on site > and control up to 8 pc's; though it doesnt appear to have a video output. > > Seems pretty interesting, I may get one to play with. > > Regards > Barry > > > ----- Original Message ----- > From: "Daniel Lawson" <daniel(a)wand.net.nz> > To: "Joe Abley" <jabley(a)isc.org>; <NZNOG(a)list.waikato.ac.nz> > Sent: Wednesday, November 30, 2005 2:33 PM > Subject: Re: [nznog] Remote server booting > > > > > > > > > > >>Im wondering if anyone has used or is using a good solution to remote > > >>boot (from complete power down) servers and equiptment? > > >> > > >> > > > > > >If you'd also like a proper serial console (and your server's bios > > >doesn't already provide you with one) you could do worse than <http:// > > >www.realweasel.com/>. It's probably hugely expensive if all you want > > >is a remote power cycle capability though. > > > > > > > > > > I recently picked up a second hand Compaq RILOE card on trademe for > > about $70 (there's still a few there). Provides local console > > redirection via http, keyboard/mouse intercept, remote power control > > (with a custom powercable that fits in between the physical power button > > and the psu), etc. These models are a bit old now, but the modern > > equivalents (such as the realweasel) look good, and I'd consider them > > well worth the money. > > > > -- > > Daniel Lawson > > WAND Group, Computer Science Department > > University of Waikato > > email: daniel(a)wand.net.nz phone: +64 7 838 4136 > > > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > > > > > ---------- Forwarded message ---------- > From: "Jeremy Strachan" <JeremyS(a)cclnz.co.nz> > To: "Barry Murphy" <barry(a)unix.co.nz>, "Daniel Lawson" <daniel(a)wand.net.nz>, "Joe Abley" <jabley(a)isc.org>, <NZNOG(a)list.waikato.ac.nz> > Date: Wed, 30 Nov 2005 15:26:03 +1300 > Subject: Re: [nznog] Remote server booting > > Adderlink. > > We use two (Ak/Wn) attached to our 16 port KVM's to provide IP access to > the consoles. > > The box has one network port and runs a commercial version of VNC, which > behaves better than free VNC. > > Attach it to a UPS, and you can have access to your consoles with power > on or off. > > > Jeremy > > > -----Original Message----- > From: Barry Murphy [mailto:barry(a)unix.co.nz] > Sent: Wednesday, 30 November 2005 3:18 p.m. > To: Daniel Lawson; Joe Abley; NZNOG(a)list.waikato.ac.nz > Subject: Re: [nznog] Remote server booting > > Hmmm, so basically an IP-KVM ? Does it have a network port or does it > share the systems; do you assign an IP to it and it gives a web based > console? > > I'm wondering if i can put this into a system, attach it to a KVM on > site and control up to 8 pc's; though it doesnt appear to have a video > output. > > Seems pretty interesting, I may get one to play with. > > Regards > Barry > > > > > > ---------- Forwarded message ---------- > From: Simon <greminn(a)gmail.com> > To: NZNOG(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 15:31:34 +1300 > Subject: Re: [nznog] Remote server booting > Same here: > > http://www.rextron.com/products/kips01.htm > > Works great, connects to a 8 port KVM switch. It even runs linux, so > you can ssh to it. > > On 11/30/05, Jeremy Strachan <JeremyS(a)cclnz.co.nz> wrote: > > > > Adderlink. > > > > We use two (Ak/Wn) attached to our 16 port KVM's to provide IP access to > > the consoles. > > > > The box has one network port and runs a commercial version of VNC, which > > behaves better than free VNC. > > > > Attach it to a UPS, and you can have access to your consoles with power > > on or off. > > > > > > Jeremy > > > > > > -----Original Message----- > > From: Barry Murphy [mailto:barry(a)unix.co.nz] > > Sent: Wednesday, 30 November 2005 3:18 p.m. > > To: Daniel Lawson; Joe Abley; NZNOG(a)list.waikato.ac.nz > > Subject: Re: [nznog] Remote server booting > > > > Hmmm, so basically an IP-KVM ? Does it have a network port or does it > > share the systems; do you assign an IP to it and it gives a web based > > console? > > > > I'm wondering if i can put this into a system, attach it to a KVM on > > site and control up to 8 pc's; though it doesnt appear to have a video > > output. > > > > Seems pretty interesting, I may get one to play with. > > > > Regards > > Barry > > > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > > > > > ---------- Forwarded message ---------- > From: Tony Wicks <tony(a)prophecy.net.nz> > To: Barry Murphy <barry(a)unix.co.nz> > Date: Wed, 30 Nov 2005 15:37:04 +1300 > Subject: Re: [nznog] Remote server booting > Yes, Cyclades does KVM over IP (for example, you can RDP to the KVM) and > also a power strip that lets you power cycle each outlet on demand (as > well as serial console of course). If you need any info drop me a line > (can source them if you like.) > > > > Barry Murphy wrote: > > Hmmm, so basically an IP-KVM ? Does it have a network port or does it share > > the systems; do you assign an IP to it and it gives a web based console? > > > > I'm wondering if i can put this into a system, attach it to a KVM on site > > and control up to 8 pc's; though it doesnt appear to have a video output. > > > > Seems pretty interesting, I may get one to play with. > > > > Regards > > Barry > > > > > > ---------- Forwarded message ---------- > From: Steven Heath <sheath(a)paradise.net.nz> > To: Juha Saarinen <juha(a)saarinen.org> > Date: Wed, 30 Nov 2005 15:39:16 +1300 (NZDT) > Subject: Re: [nznog] NZ Online Security Day > Quoting Juha Saarinen <juha(a)saarinen.org>: > > > Matthew Poole wrote: > > > Is apparently today. One of my co-workers discovered this when he > > logged > > > into the WestpacTrust online banking site. > > > Anyone else heard of this? It was obviously very well publicised, > > seeing > > > as a whole company of geeks hadn't heard of it. > > > > It's a silly stunt that is best ignored. I don't think geeks are > > interested in downloading Hector the Virus Vect... err, Protector, in > > order to celebrate Online Security Day. > > The Net Nanny, err, Net Safe people did a press release about it 2 days ago. > Lots of lead time and all that. Seems they proposed the idea about six months > ago but no one cared... > > http://www.netsafe.org.nz/isgnews/text_generation_release.aspx > > I think I will just stick to Bonzi Buddy. > > > Steven Heath > .nz news & views > +64 21 706 067 > www.nznews.org.nz > > "America is the only nation in history which has gone directly from barbarism > to degeneration without the usual interval of civilization." > > Georges Clemenceau > > > > > > ---------- Forwarded message ---------- > From: "Nathan Ward" <nznog(a)daork.net> > To: nznog(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 15:57:23 +1300 (NZDT) > Subject: Re: [nznog] Remote server booting > > Im wondering if anyone has used or is using a good solution to remote > > boot (from complete power down) servers and equiptment? > > > > This i have done in the past by having the bios on the server set to > > reboot after power fail and that takes care of the rest along with > > good load UPS's and backup power. But what if you acually had to shut > > down a server for some reason out-there (backup power fails)? > > Most of the replies to this ignored his last sentence. > Many (most?) of the BIOSes/motherboards I have seen can either be in > "Power off" or "Last state" when power is reconnected. Few have a "Power > on" option. > > If he shuts down a server, the hardware will power down, and when he power > cycles with his remote power strip, the box stays in "Power off" or the > "Last state" which is.. off. > > If one looses power at a site, the servers reliant on the failed power > rail should shut themselves down before the UPS runs out, in order to > prevent filesystem corruption, which can prolong an outage. > > I see the only real solutions to this being some flavour of lights out > card, or of course, monkeys with cellphones. > > -- > Nathan Ward > > > > > > ---------- Forwarded message ---------- > From: "Erin Salmon - Unleash Computers Ltd" <erin(a)unleash.co.nz> > To: "Steven Heath" <sheath(a)paradise.net.nz>, "Juha Saarinen" <juha(a)saarinen.org> > Date: Wed, 30 Nov 2005 16:34:13 +1300 > Subject: Re: [nznog] NZ Online Security Day > It is incredibly easy to underestimate the volumes of stupid people out > there. You'll notice that most govt department website have things like: > > Name: > Eg. John Smith > > On their contact forms... They don't do that for no reason. > > A bit of education (even if it is pathetically light-weight) can't be a bad > thing. > > Just my $0.02. > > Erin Salmon > Managing Director > Unleash Computers Ltd > Unleash Networks Ltd > Mobile: 021 877 913 > Landline: 03 365 1273 > > -----Original Message----- > From: Steven Heath [mailto:sheath(a)paradise.net.nz] > Sent: 30 November 2005 3:39 p.m. > To: Juha Saarinen > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] NZ Online Security Day > > Quoting Juha Saarinen <juha(a)saarinen.org>: > > > Matthew Poole wrote: > > > Is apparently today. One of my co-workers discovered this when he > > logged > > > into the WestpacTrust online banking site. > > > Anyone else heard of this? It was obviously very well publicised, > > seeing > > > as a whole company of geeks hadn't heard of it. > > > > It's a silly stunt that is best ignored. I don't think geeks are > > interested in downloading Hector the Virus Vect... err, Protector, in > > order to celebrate Online Security Day. > > The Net Nanny, err, Net Safe people did a press release about it 2 days ago. > Lots of lead time and all that. Seems they proposed the idea about six > months > ago but no one cared... > > http://www.netsafe.org.nz/isgnews/text_generation_release.aspx > > I think I will just stick to Bonzi Buddy. > > > Steven Heath > .nz news & views > +64 21 706 067 > www.nznews.org.nz > > "America is the only nation in history which has gone directly from > barbarism > to degeneration without the usual interval of civilization." > > Georges Clemenceau > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > > > ---------- Forwarded message ---------- > From: "neil gardner" <neil.gardner(a)alliedtelesyn.co.nz> > To: <sheath(a)paradise.net.nz>,<juha(a)saarinen.org>, <erin(a)unleash.co.nz> > Date: Wed, 30 Nov 2005 16:40:02 +1300 > Subject: Re: [nznog] NZ Online Security Day > Hmmmm. That reminds me of some sort of saying... Something about a little knowledge being a dangerous thing... > > Aha - Here we go: > > "A little learning is a dangerous thing; drink deep, or taste not the Pierian spring: there shallow draughts intoxicate the brain, and drinking largely sobers us again. Alexander Pope (1688-1744) - An Essay on Criticism." > > http://en.wikipedia.org/wiki/Alexander_Pope > > And on balance I'd agree - letting someone think they're safer if they take the most lightweight precautions probably isn't a good idea. > > Cheers - N > > > > Neil Gardner > Product Manager > Allied Telesyn Research Ltd > New Zealand > +64 3 339-9509 (ph) > +64 3 339-3001 (fax) > > >>> "Erin Salmon - Unleash Computers Ltd" <erin(a)unleash.co.nz> 30/11/2005 4:34 p.m. >>> > It is incredibly easy to underestimate the volumes of stupid people out > there. You'll notice that most govt department website have things like: > > Name: > Eg. John Smith > > On their contact forms... They don't do that for no reason. > > A bit of education (even if it is pathetically light-weight) can't be a bad > thing. > > Just my $0.02. > > Erin Salmon > Managing Director > Unleash Computers Ltd > Unleash Networks Ltd > Mobile: 021 877 913 > Landline: 03 365 1273 > > -----Original Message----- > From: Steven Heath [mailto:sheath(a)paradise.net.nz] > Sent: 30 November 2005 3:39 p.m. > To: Juha Saarinen > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] NZ Online Security Day > > Quoting Juha Saarinen <juha(a)saarinen.org>: > > > Matthew Poole wrote: > > > Is apparently today. One of my co-workers discovered this when he > > logged > > > into the WestpacTrust online banking site. > > > Anyone else heard of this? It was obviously very well publicised, > > seeing > > > as a whole company of geeks hadn't heard of it. > > > > It's a silly stunt that is best ignored. I don't think geeks are > > interested in downloading Hector the Virus Vect... err, Protector, in > > order to celebrate Online Security Day. > > The Net Nanny, err, Net Safe people did a press release about it 2 days ago. > Lots of lead time and all that. Seems they proposed the idea about six > months > ago but no one cared... > > http://www.netsafe.org.nz/isgnews/text_generation_release.aspx > > I think I will just stick to Bonzi Buddy. > > > Steven Heath > .nz news & views > +64 21 706 067 > www.nznews.org.nz > > "America is the only nation in history which has gone directly from > barbarism > to degeneration without the usual interval of civilization." > > Georges Clemenceau > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > NOTICE: This message contains privileged and confidential > information intended only for the use of the addressee > named above. If you are not the intended recipient of > this message you are hereby notified that you must not > disseminate, copy or take any action in reliance on it. > If you have received this message in error please > notify Allied Telesyn Research Ltd immediately. > Any views expressed in this message are those of the > individual sender, except where the sender has the > authority to issue and specifically states them to > be the views of Allied Telesyn Research. > > > > > > ---------- Forwarded message ---------- > From: "Mark Foster" <blakjak(a)blakjak.net> > To: nznog(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 16:55:44 +1300 (NZDT) > Subject: Re: [nznog] NZ Online Security Day > (large CC list removed...) > > > Hmmmm. That reminds me of some sort of saying... Something about a little > > knowledge being a dangerous thing... > > > > Aha - Here we go: > > > > "A little learning is a dangerous thing; drink deep, or taste not the > > Pierian spring: there shallow draughts intoxicate the brain, and drinking > > largely sobers us again. Alexander Pope (1688-1744) - An Essay on > > Criticism." > > > > http://en.wikipedia.org/wiki/Alexander_Pope > > > > And on balance I'd agree - letting someone think they're safer if they > > take the most lightweight precautions probably isn't a good idea. > > > > Cheers - N > > > > > > *snip* > > You beat me to the punch Neil. > The problem with 'a little knowledge' is you end up with a rash of 'Help! > I'm being DoS'd by (insert IP of your ISP's DNS Servers here)!!! BAN > THEM!' > > Aka the little bit of knowledge is 'knowing you need a firewall to be > safe' and the better bit of knowledge is 'knowing the difference betweem > an attack, and innocent / important internet traffic'. Or at least how to > find out the difference! > > But yeah, given the lack of PR that "Online Security Day" received in the > IT Community it can hardly be given any sort of credibility... you think > buy in from a few major IT outfits and ISPs would be kinda useful? > > Almost as press-worthy as Microsofts announcement re Maori language > support in Windows XP? (When its been available to varying degrees within > alternative OS's for quite some time..)[1] > > Mark. > > [1] I give credit to the fact they've finished it and packaged it. As I > understand it most of the Maori Language work for Linux is in an > incomplete state.... then again when you're throwing thousands of dollars > at a project you can expect to have an edge on small open-source efforts I > guess! > > > > > > > > ---------- Forwarded message ---------- > From: Simon <greminn(a)gmail.com> > To: NZNOG(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 16:56:58 +1300 > Subject: [nznog] Xen for network services (aka web/mail/dns etc) - OT? > Hi There, > > I have been discussing the utilisation of Xen in a production > environment on a couple of other lists (nzlug, debian-isp etc), but > wondering if anyone from this list is using it in new zealand for > serving of network services? Please let me know if this is OT. > > Would like to hear your experiences if so. > > Simon > > > > > > ---------- Forwarded message ---------- > From: "Erin Salmon - Unleash Computers Ltd" <erin(a)unleash.co.nz> > To: <nznog(a)list.waikato.ac.nz> > Date: Wed, 30 Nov 2005 17:04:17 +1300 > Subject: Re: [nznog] Xen for network services (aka web/mail/dns etc) - OT? > Hi, > > We're using it extensively. We're offering it as a product to customers, > running DNS, qmail, apache, and a number of custom apps on it. The stable > releases are rock solidly reliable, and the development efforts behind it > are giving it new features all the time. At the moment with stable releases > you're limited to running a domain on a single CPU, which is a bit of a > pain, but the next release is going to include virtual processors, so > multiple "real" processors can be sent instructions from one master virtual > processor to which domains are assigned. > > Cheers, > > Erin Salmon > Managing Director > Unleash Computers Ltd > Unleash Networks Ltd > Mobile: 021 877 913 > Landline: 03 365 1273 > > -----Original Message----- > From: Simon [mailto:greminn(a)gmail.com] > Sent: 30 November 2005 4:57 p.m. > To: NZNOG(a)list.waikato.ac.nz > Subject: [nznog] Xen for network services (aka web/mail/dns etc) - OT? > > Hi There, > > I have been discussing the utilisation of Xen in a production > environment on a couple of other lists (nzlug, debian-isp etc), but > wondering if anyone from this list is using it in new zealand for > serving of network services? Please let me know if this is OT. > > Would like to hear your experiences if so. > > Simon > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > > > ---------- Forwarded message ---------- > From: Richard Patterson <richard(a)helix.net.nz> > To: Simon <greminn(a)gmail.com> > Date: Wed, 30 Nov 2005 16:55:23 +1300 > Subject: Re: [nznog] Xen for network services (aka web/mail/dns etc) - OT? > Simon wrote: > > >Hi There, > > > >I have been discussing the utilisation of Xen in a production > >environment on a couple of other lists (nzlug, debian-isp etc), but > >wondering if anyone from this list is using it in new zealand for > >serving of network services? Please let me know if this is OT. > > > >Would like to hear your experiences if so. > > > >Simon > > > > > > I've deployed a Xen machine together with linux vservers inside the > virtual Xen domains (don't ask) > > Running exim4/apache/samba/ldap and maybe some other things. > Has been in production for several months now without any issues. > > > -Richard > > > > > > ---------- Forwarded message ---------- > From: Andrew Thompson <andy(a)fud.org.nz> > To: Richard Patterson <richard(a)helix.net.nz> > Date: Wed, 30 Nov 2005 17:48:03 +1300 > Subject: Re: [nznog] Xen for network services (aka web/mail/dns etc) - OT? > On Wed, Nov 30, 2005 at 04:55:23PM +1300, Richard Patterson wrote: > > Simon wrote: > > > > >Hi There, > > > > > >I have been discussing the utilisation of Xen in a production > > >environment on a couple of other lists (nzlug, debian-isp etc), but > > >wondering if anyone from this list is using it in new zealand for > > >serving of network services? Please let me know if this is OT. > > > > > >Would like to hear your experiences if so. > > > > > >Simon > > > > > > > > > > I've deployed a Xen machine together with linux vservers inside the > > virtual Xen domains (don't ask) > > > > Running exim4/apache/samba/ldap and maybe some other things. > > Has been in production for several months now without any issues. > > Can I ask why you would choose this over using something like FreeBSD > jails which provide seperation with no overhead? > > > Andrew > > > > > > ---------- Forwarded message ---------- > From: Richard Patterson <richard(a)helix.net.nz> > To: Andrew Thompson <andy(a)fud.org.nz>, NZNOG(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 17:54:55 +1300 > Subject: Re: [nznog] Xen for network services (aka web/mail/dns etc) - OT? > Andrew Thompson wrote: > > >On Wed, Nov 30, 2005 at 04:55:23PM +1300, Richard Patterson wrote: > > > > > >>I've deployed a Xen machine together with linux vservers inside the > >>virtual Xen domains (don't ask) > >> > >>Running exim4/apache/samba/ldap and maybe some other things. > >>Has been in production for several months now without any issues. > >> > >> > > > >Can I ask why you would choose this over using something like FreeBSD > >jails which provide seperation with no overhead? > > > > > >Andrew > > > > > > > Customer wanted Xen > > > -Richard > > > > > > ---------- Forwarded message ---------- > From: marty(a)supine.com (Martin) > To: NZNOG(a)list.waikato.ac.nz > Date: Wed, 30 Nov 2005 16:23:24 +1100 > Subject: Re: [nznog] Xen for network services (aka web/mail/dns etc) - OT? > $quoted_author = "Andrew Thompson" ; > > > > Can I ask why you would choose this over using something like FreeBSD > > jails which provide seperation with no overhead? > > raw IP sockets for one... > > cheers > marty > > -- > <shortigo> I can't find my enlightenment configuration files > <BedMan> look in ~/.enlightenment > <shortigo> I don't seem to have one > <hazard> 'the path to enlightment is hard to find' > > http://www.bash.org/?238734 > > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > >

1 0

Re: [nznog] NZ Online Security Day
by neil gardner 29 Nov '05

29 Nov '05

Hmmmm. That reminds me of some sort of saying... Something about a little knowledge being a dangerous thing... Aha - Here we go: "A little learning is a dangerous thing; drink deep, or taste not the Pierian spring: there shallow draughts intoxicate the brain, and drinking largely sobers us again. Alexander Pope (1688-1744) - An Essay on Criticism." http://en.wikipedia.org/wiki/Alexander_Pope And on balance I'd agree - letting someone think they're safer if they take the most lightweight precautions probably isn't a good idea. Cheers - N Neil Gardner Product Manager Allied Telesyn Research Ltd New Zealand +64 3 339-9509 (ph) +64 3 339-3001 (fax) >>> "Erin Salmon - Unleash Computers Ltd" <erin(a)unleash.co.nz> 30/11/2005 4:34 p.m. >>> It is incredibly easy to underestimate the volumes of stupid people out there. You'll notice that most govt department website have things like: Name: Eg. John Smith On their contact forms... They don't do that for no reason. A bit of education (even if it is pathetically light-weight) can't be a bad thing. Just my $0.02. Erin Salmon Managing Director Unleash Computers Ltd Unleash Networks Ltd Mobile: 021 877 913 Landline: 03 365 1273 -----Original Message----- From: Steven Heath [mailto:sheath(a)paradise.net.nz] Sent: 30 November 2005 3:39 p.m. To: Juha Saarinen Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] NZ Online Security Day Quoting Juha Saarinen <juha(a)saarinen.org>: > Matthew Poole wrote: > > Is apparently today. One of my co-workers discovered this when he > logged > > into the WestpacTrust online banking site. > > Anyone else heard of this? It was obviously very well publicised, > seeing > > as a whole company of geeks hadn't heard of it. > > It's a silly stunt that is best ignored. I don't think geeks are > interested in downloading Hector the Virus Vect... err, Protector, in > order to celebrate Online Security Day. The Net Nanny, err, Net Safe people did a press release about it 2 days ago. Lots of lead time and all that. Seems they proposed the idea about six months ago but no one cared... http://www.netsafe.org.nz/isgnews/text_generation_release.aspx I think I will just stick to Bonzi Buddy. Steven Heath .nz news & views +64 21 706 067 www.nznews.org.nz "America is the only nation in history which has gone directly from barbarism to degeneration without the usual interval of civilization." Georges Clemenceau _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

2 1

NZ Online Security Day
by Matthew Poole 29 Nov '05

29 Nov '05

Is apparently today. One of my co-workers discovered this when he logged into the WestpacTrust online banking site. Anyone else heard of this? It was obviously very well publicised, seeing as a whole company of geeks hadn't heard of it. -- Matthew Poole "Don't use force. Get a bigger hammer."

4 3

Re: [nznog] Remote server booting
by Jeremy Strachan 29 Nov '05

29 Nov '05

Adderlink. We use two (Ak/Wn) attached to our 16 port KVM's to provide IP access to the consoles. The box has one network port and runs a commercial version of VNC, which behaves better than free VNC. Attach it to a UPS, and you can have access to your consoles with power on or off. Jeremy -----Original Message----- From: Barry Murphy [mailto:barry(a)unix.co.nz] Sent: Wednesday, 30 November 2005 3:18 p.m. To: Daniel Lawson; Joe Abley; NZNOG(a)list.waikato.ac.nz Subject: Re: [nznog] Remote server booting Hmmm, so basically an IP-KVM ? Does it have a network port or does it share the systems; do you assign an IP to it and it gives a web based console? I'm wondering if i can put this into a system, attach it to a KVM on site and control up to 8 pc's; though it doesnt appear to have a video output. Seems pretty interesting, I may get one to play with. Regards Barry

2 1

Re: [nznog] Remote server booting
by Gordon Smith 29 Nov '05

29 Nov '05

These guys also do good solutions: http://www.cyclades.com/

2 1

Re: [nznog] Remote server booting
by Regan Murphy 29 Nov '05

29 Nov '05

> We no longer carry this range of product, and I beleive that the > manufacturers have discontinued some of the range There website has > gone but you can try to call them on 0800smitch Black Box used to have a local website and produce a Catalog, not sure if they still do in NZ. They carry a range of remote power units, have a browse - I'm sure there is something suitable there: http://www.blackbox.com/Catalog/Category.aspx?cid=183,1324,1327 -- Regan

2 1

Re: [nznog] Remote server booting
by Geraint Jones 29 Nov '05

29 Nov '05

There are boards called Eric from Peppercon : http://www.peppercon.com/remoteboards.html I use a few of them and they are just as good as Lights Out cards from HP/Compaq Geraint Jones Systems Administrator French Maid Foods Limited www.french-maid.net DDI: +64 (0)4 570 7633 Tel: +64 (0)4 568 2687 Fax: +64 (0)4 568 2345 Mob: +64 (0)21 739 240 -----Original Message----- From: Nathan Ward [mailto:nznog(a)daork.net] Sent: Tuesday, 29 November 2005 11:58 p.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Remote server booting > Im wondering if anyone has used or is using a good solution to remote > boot (from complete power down) servers and equiptment? > > This i have done in the past by having the bios on the server set to > reboot after power fail and that takes care of the rest along with > good load UPS's and backup power. But what if you acually had to shut > down a server for some reason out-there (backup power fails)? Most vendors have some kind of module available as standard, or as an option. IBM: "Remote Supervisor Adapter" HP: "Lights-Out" Dell: "DRAC" (Dell Remote Access Controller) Obviously, blade chassis, etc. have these built in.. There are also cards that go home made PCs, I believe. APC and others also make remote power switches, which are a power distribution board that let you switch ports on and off individually. This may solve part of your problem for cheaper than lightsout cards in all your servers. I believe the interface is some kind of network thing (ie. web, SNMP or telnet), or maybe RS-232. -- Nathan Ward _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

NZNOG 2006 Presenters
by Donald Neal 29 Nov '05

29 Nov '05

All New Zealanders who offered to be presenters at March's conference should by now have received a response. Well, all except one whose corporate email system is rejecting my emails. Could anyone living in New Zealand who has offered to present and not received a reply please contact me directly. - Donald Neal Donald Neal |"You know what young, carnivorous, Support Engineer |alien mammal-like monsters are like. NGN Operations |Always getting into scrapes." Integration & Services Division +----------------------------------- Alcatel NZ Ltd - Telecom's network operations manager This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 0

Re: [nznog] Remote server booting
by Simon 28 Nov '05

28 Nov '05

On 11/29/05, Simon <greminn(a)gmail.com> wrote: > > Hire a monkey with a mobile phone and chain him to the side of the > > server. Train him press power when you call... > > Ha - tried that!, but the monkey scoffed down all the bananas we used > with Mr. Fusion to power the servers - so we fired is asre. > And with the cost of monkeys these days - its cheaper to hire a tech admin!

1 0

2day Peering
by Peter Mott 27 Nov '05

27 Nov '05

>>I wonder if Peter Mott has now moved on to something new now... >>Being one of NZ's Internet pioneers... >"ICONZ will keep the 2day.com brand, and founder and chief >engineer Peter Mott remains in the interim with the merged >company." >So for now he's still at 2day/ICONZ... The interim was in fact a fairly short period of time. A young sales chap arrived on day one and took over my office. I have had no participation at a management or operational level since that time. That was back in May. There was a contract in place for my services, but that has since been terminated. I will however be keeping an eye on the industry from my motor yacht :-) regards Peter Mott MV Toccata COASTLINE YACHTS LIMITED Tel: +64 9 488 9352 Fax: +64 9 486 7017 -/-

1 0

2day Peering
by John Johnston 27 Nov '05

27 Nov '05

Guys, The 2day and ICONZ networks have been combined as of last Friday and as such you will be receiving the 2day prefix announcements via ICONZ currently. Anyone that had a peer with 2day and not ICONZ, and wish to peer direct with ICONZ please drop me an email with your details. Peering with 192.203.154.80 and 81 with be reestablished using AS4770 at a later date. Regards John Johnston ICONZ New Zealand Limited DDI: +64 9 977 3500 FAX: +64 9 977 3535 Mobile: 021 277 5692 Email: john.johnston(a)iconz.net 0800 THE NET www.iconz.net

3 3

UberNetworks
by Tristram J. Cheer 24 Nov '05

24 Nov '05

To the NZNOG list UberNetworks is a new WISP operating in Whangarei, our wireless network has just entered its live trails with a small client base. Currently we are operating in the 202.49.132.0/27 range and wish to post details of our operation on the list, contact details are as follows P.O Box 5083 Phone: 09-438-5472 Fax: 09-438-5473 NOC E-mail: noc(a)ubernet.co.nz NOC 24 Hour phone: 021715823 Since we don't currently have an AS(We are in trails after all) so our details have not been sent to http://usenet.net.nz/noc/ at this point We have the ability to peer at APE and invite interested parties to contact peering(a)ubernet.co.nz if you are interested in peering. Above internet services we have some clients with hosted dedicated servers so I invite all companies peering at APE to get in touch Now that the formal stuff is out of the way I have a favor to ask from the list: Does anybody have a server sitting on a APE connection that they would be willing to allow us to download and upload a 10mbit file to for throughput testing on Monday the 28th? FTP access suits us best, would only need it for the day and the file is random data from /dev/null, if anyone does can they contact me via tristram(a)ubernet.co.nz or via my mobile listed below And just to make sure its on topic there is some beer for anyone able to grant us the above request Cheers ------------------------------------- Tristram Cheer UberNetworks T:(09)438-5472 F:(09)438-5473 M:(021)715-823

4 3

Notification of NZRR Database changes
by NZRR Database Notifications 24 Nov '05

24 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS24005 descr: Route set advertised to AS9560 by SafeNZ - AS24005 members: 202.137.240.0/21^21-29, 203.98.6.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: tonyw(a)tonyw.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050909 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS24005 descr: advertised to AS9560 by SafeNZ Networks Limited - AS24005 members: 202.137.240.0/21^21-29, 202.170.160.0/21^21-29, 203.98.6.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: tonyw(a)tonyw.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051125 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 24 Nov '05

24 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24005 descr: advertised to AS9439 by safenz networks limited - AS24005 members: 203.98.6.0/24^24-29, 203.97.68.0/28^28-29, 219.88.140.0/24^24-29, 60.234.32.0/23^23-29, 202.137.240.0/21^21-29, 202.50.252.0/24^24-29, 203.167.254.0/24^24-29, 203.167.255.0/24^24-29, 203.97.6.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: tonyw(a)tonyw.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050420 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24005 descr: advertised to AS9439 by SafeNZ Networks Limited - AS24005 members: 202.137.240.0/21^21-29, 202.170.160.0/21^21-29, 203.98.6.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: tonyw(a)tonyw.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051125 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 24 Nov '05

24 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by Maxnet - AS9889 members: 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.54.142.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.fox(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051117 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by Maxnet - AS9889 members: 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.54.142.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.fox(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051125 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 24 Nov '05

24 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS9889 descr: advertised to AS9439 by Maxnet - AS9889 members: 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.54.142.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.fox(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051117 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS9889 descr: advertised to AS9439 by Maxnet - AS9889 members: 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.54.142.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.fox(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051125 source: NZRR

1 0

Re: [nznog] DNS serving IPs outside controlled range
by Brendan Murray 22 Nov '05

22 Nov '05

Stu Fleming <stewart(a)wic.co.nz> wrote: > I have a...friend, let's say...who operates a DNS server at a small > ISP. In a few of the zone files, there are A records that resolve to IP > addresses outside of the Class C that my..friend...controls. My friend > has been told that this is "against the rules" and that it is "causing > problems". I suspect I know what's happening here. It was a particular vexation for me some time ago when I was responsible for a network, and I'm going to guess it's the same one as your ...friend.... is dealing with, and found that 3rd parties were registering IP addresses with 'my' Class B as some other domain name. i.e I 'control' 172.17.0.0/24 as example.com and someone with a host in my range has registered a domain with an external supplier as someotherexample.com using 172.17.224.0/24 ip numbers, say. I looked into it, and asked around, and found that there were no rules stopping it, and no technology. I eventually realised that the external provider was outside my range of control and had to control my clients by telling them that it was against the AUP (as it was) for them to do it this way. If you have a relationship with this other network provider then you're probably better off doing your best to help them and their clients conform to their AUP, on a strictly "getting along with people" thing. But you're doing nothing anyone can stop. > > Questions: > - is resolving an A record outwith the delegated IP range "against the > rules"? discourteous is about it once they've asked you to stop. But you've got paying customers. > - if so, is there any documentation of the rules? should be against their internal AUP and so its someone elses problem > - what potential problems could this cause to the network that contains > the IP address to which the A records point? reverse lookups for what you're hosting resolve to their network address range. Some mail services might choke More likely, (assuming its who I think it is) they're shortly going to change a lot of internal IP numbers and what you're doing might cause them headaches in that process. Not the best way to maintain a relationship. -- Brendan Murray brendan(a)wolfhoundsecurity.com The Observation Post www.wolfhoundsecurity.com 14 Centre Road Phone: +64-3-4543282 RD 2 Ocean Grove Fax: +64-3-4543285 Dunedin, New Zealand Mobile: +64-21-1153290 PGP Key = http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE89566 Key fingerprint = 6F3C 3197 8C30 47EF 4E1A 5781 5DCA D13C E895 6106

3 2

DNS serving IPs outside controlled range
by Stu Fleming 22 Nov '05

22 Nov '05

I have a...friend, let's say...who operates a DNS server at a small ISP. In a few of the zone files, there are A records that resolve to IP addresses outside of the Class C that my..friend...controls. My friend has been told that this is "against the rules" and that it is "causing problems". Questions: - is resolving an A record outwith the delegated IP range "against the rules"? - if so, is there any documentation of the rules? - what potential problems could this cause to the network that contains the IP address to which the A records point? Thanks for any advice. Regards, Stu

6 5

International problems
by robbie.gernandt＠apn.co.nz 21 Nov '05

21 Nov '05

Hi all Anybody experiencing International connection problems at the moment? I can't get to sites like google or cisco through Telecom or TelstraClear cheers Robbie Gernandt Network Consultant APN Holdings NZ Limited E-Mail: robbie.gernandt(a)apn.co.nz Mobile: (64) 21 736 086 DDI: (64) 9 373 9577 Fax: (64) 9 373 6411 ******************************************************************************** NOTICE This email and any attachments are confidential. They may contain privileged information or copyright material. If you are not an intended recipient, you should not read, copy, use or disclose the contents without authorisation and we request you contact us at once by return email. Please then delete the email and any attachments from your system. We do not accept liability in connection with computer viruses, data corruption, delay, interruption, unauthorised access or unauthorised amendment. Any views expressed in this email and any attachments do not necessarily reflect the views of the company. ********************************************************************************

5 6

FYI: GGIS Service Message : Major
by Craig Humphrey 21 Nov '05

21 Nov '05

Nice of them to let us know about it, an hour after it had been resolved... > -----Original Message----- > From: noc(a)GG [mailto:noc(a)GG] > Sent: Tuesday, November 22, 2005 1:45 PM > To: global-gateway outage contacts > Subject: GGIS Service Message : Major > > Upstream Provider Outage Notification > > Global-Gateway Internet did experience service disruption > which began at 1225. > > You would have experienced service disruption of your > international service until this problem was resolved at 1250. > > GGIS apologises for any inconvenience to you or your customers. > Logged by XXXXXXXX on Tue Nov 22 13:44:12 2005 >

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 21 Nov '05

21 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24078 descr: Route set advertised to AS9439 by trademe - AS24078 members: 202.21.128.240/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: allister(a)trademe.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051117 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24078 descr: advertised to AS9439 by Trade Me Limited - AS24078 members: 202.21.128.0/24^24-29, 203.57.145.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: allister(a)trademe.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051122 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 21 Nov '05

21 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: aut-num: AS24189 as-name: NZRR-AS24189 descr: IBM NZ Ltd descr: WIX peering at '202.7.0.154' descr: see Citylink RT job #3730 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS24189 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: scott.walsh(a)nz1.ibm.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051122 source: NZRR --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24189 descr: Route set advertised to AS9439 by IBM - AS24189 members: 202.36.192.0/22^22-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: scott.walsh(a)nz1.ibm.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051122 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24189 descr: Route set advertised to AS9439 by IBM NZ Ltd - AS24189 members: 202.36.192.0/22^22-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: scott.walsh(a)nz1.ibm.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051122 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 21 Nov '05

21 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS24189 descr: Route set advertised to AS9439 by IBM - AS24189 members: 202.36.192.0/22^22-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: scott.walsh(a)nz1.ibm.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051122 source: NZRR

1 0

Requirements for a Fast Uplink Internet Access
by Theodore＠ur1.com 18 Nov '05

18 Nov '05

We have an office in MT Wellington Auckland and we require a 256 or preferably a 512Mb Uplink Internet Line. Can anyone suggest, or does anyone know who might be able to provide such a service ? Any assistance is much appreciated. Thanks Theodore

6 7

Re: [nznog] Spammers Again (pricecutter.co.nz/brands4less.co.nz)
by Tim John 17 Nov '05

17 Nov '05

Thanks for the heads-up Craig. We will attempt to contact the Registrant of these names and verify the contact details at the least. Tim -----Original Message----- From: Craig Whitmore [mailto:lennon(a)orcon.net.nz] Sent: Tuesday, 8 November 2005 8:52 p.m. To: Cc: 4service(a)domainz.net.nz Subject: [nznog] Spammers Again (pricecutter.co.nz/brands4less.co.nz) People have been talking about this company lately... pricecutter.co.nz/brands4less.co.nz strike again and sends out their new batch of blatent spams today Recieved a load of spam this afternoon to email addresses which have not been used for over 7 years old. (The info on their website says they've only been running since 2005) pricecutter/brands4less registered to John Kyle (Cannot find any company owned by him) Calypso Records (cannot find any company called that) Address: 68 Lincoln Road, Henderson (This is The Lincoln Road Bible Chapel ) (I live 2 mins away and I checked !) Phone Number: 09 828 7890 (invalid number) (invalid exchange) Email: zxd(a)xtra.co.nz (when you email it you get back saying "Your email gas been removed. This is an automated message please do not reply." (same with Looks like same people as fitnessgear.co.nz with very similar style ads and invalid domain contacts and same hosting/ip address!! Be aware of this company.. (Search for brands4less.co.nz on google) I've also emailed their kliksend.com about this spam (or are they the same people and ignore me) Also.. can Domainz contact this customer of theirs and get some valid details for their domain as they are breaking Domainz's T&C and also I believe the DNC's for having false details. Thanks Craig Talking for Myself _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

2 2

Notification of NZRR Database changes
by NZRR Database Notifications 16 Nov '05

16 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by Maxnet - AS9889 members: 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.54.142.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.fox(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051114 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by Maxnet - AS9889 members: 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.54.142.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.fox(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051117 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 16 Nov '05

16 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS9889 descr: advertised to AS9439 by Maxnet - AS9889 members: 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.54.142.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.fox(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051031 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS9889 descr: advertised to AS9439 by Maxnet - AS9889 members: 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.49.141.0/24^24-29, 203.97.42.0/24^24-29, 210.54.13.0/24^24-29, 210.54.142.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.fox(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051117 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 16 Nov '05

16 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: aut-num: AS24078 as-name: NZRR-AS24078 descr: TradeMe descr: APE peering at '192.203.154.18' descr: see Citylink RT job #2209 descr: WIX peering at '202.7.1.67' descr: see Citylink RT job #359 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS24078 import: from AS9560 accept ANY AND NOT fltr-bogons export: to AS9560 announce AS24078 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: asjl(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050408 source: NZRR REPLACED BY: aut-num: AS24078 as-name: NZRR-AS24078 descr: TradeMe descr: APE peering at '192.203.154.18' descr: see Citylink RT job #2209 descr: WIX peering at '202.7.1.67' descr: see Citylink RT job #359 descr: WIX peering at '202.7.0.153' descr: see Citylink RT job #3725 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS24078 import: from AS9560 accept ANY AND NOT fltr-bogons export: to AS9560 announce AS24078 import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS24078 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: asjl(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051117 source: NZRR

1 0

100Mbps Internet for $150 per month
by Regan Murphy 15 Nov '05

15 Nov '05

"It's just a no-brainer these days," says InternetNZ president Colin Jackson of Wellington CBD businesses' attitude to using the CityLink service. "It costs you a few grand for a router and about $150 a month. For that you get [a connection speed of] 100 megabits per second. There's none of this metered bandwidth or anything." http://www.nzherald.co.nz/section/story.cfm?c_id=5&objectid=10355213 I always knew Citylink had a great product, but i never realised it was so cheap... -- Regan

6 6

Notification of NZRR Database changes
by NZRR Database Notifications 13 Nov '05

13 Nov '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS9727 descr: advertised to AS9439 by Quicksilver Internet - AS9727 members: 202.89.128.0/19^19-29, 202.37.90.0/23^23-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: pjs(a)quicksilver.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051104 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS9727 descr: advertised to AS9439 by Quicksilver Internet - AS9727 members: 202.89.128.0/19^19-29, 202.49.240.0/22^22-29, 202.37.90.0/23^23-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)quicksilver.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051114 source: NZRR

1 0