- NZNOG - lists.nznog.org

crack!
by Jamie Baddeley 17 Feb '05

17 Feb '05

Ooops! what was that? did I just hear The Internet break? Oh dear. ;-) jamie clue:depeer

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 16 Feb '05

16 Feb '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: aut-num: AS24318 as-name: NZRR-AS24318 descr: MinEdu descr: WIX peering at '202.7.0.69' descr: see Citylink RT job #1647 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS24318 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: rpsl-admin(a)nzix.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050217 source: NZRR --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS24318 descr: Route set advertised to AS9439 by MinEdu - AS24318 members: 192.105.10.0/24^24-29, 202.37.32.0/21^21-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: rpsl-admin(a)nzix.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050217 source: NZRR

1 0

NZNOG '05 videos now up
by Jeremy Naylor 16 Feb '05

16 Feb '05

Hey guys, The videos from the NZNOG '05 conference are available online, at: http://www.r2.co.nz/20050203 Feedback to richard.naylor(a)r2.co.nz or jeremy.naylor(a)r2.co.nz Thanks, Jeremy Naylor p: +64 21 374 689 e: jeremy.naylor(a)r2.co.nz w: http://www.r2.co.nz/~jeremy w: http://e-living.wellington.net.nz -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: 14/02/2005

1 0

Ape looking glass for 202.7.5.32/29
by Barry Murphy 15 Feb '05

15 Feb '05

Hey guys, Looking at ape looking glass for the ip range above (which has been supplied to me by citylink) is already being advertised by another provider (see below). How will this effect me as Maxnet will be advertising this route soon; how does one get an old range removed from rs1 & rs2? BGP routing table entry for 202.7.5.0/24 Paths: (1 available, best #1, table Default-IP-Routing-Table) Advertised to non peer-group peers: 192.203.154.12 192.203.154.14 192.203.154.16 192.203.154.17 192.203.154.28 192.203.154.29 192.203.154.32 192.203.154.33 192.203.154.36 192.203.154.37 192.203.154.44 192.203.154.46 192.203.154.49 192.203.154.67 192.203.154.78 192.203.154.80 192.203.154.81 192.203.154.86 192.203.154.90 192.203.154.91 192.203.154.98 192.203.154.99 192.203.154.101 192.203.154.104 192.203.154.107 192.203.154.108 192.203.154.109 192.203.154.111 192.203.154.112 192.203.154.114 192.203.154.115 23754 192.203.154.4 from 192.203.154.4 (192.203.154.4) Origin IGP, metric 0, localpref 100, valid, external, best Last update: Fri Jan 9 02:11:17 1981 Thanks Barry

2 2

Notification of NZRR Database changes
by NZRR Database Notifications 15 Feb '05

15 Feb '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: [CityLink #1887] Routing updates for APE Route Servers (fwd) - Date: Wed, 16 Feb 2005 13:57:04 +1300 (NZDT) - Msg-Id: <Pine.LNX.4.58.0502161356370.13398(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS9503 descr: Route set advertised to AS9560 by FX Networks - AS9503 members: 131.203.0.0/16^16-27, 161.29.0.0/16^16-27, 161.65.0.0/16^16-27, 192.88.85.0/24^24-27, 192.133.31.0/24^24-27, 202.36.226.0/24^24-27, 202.37.86.0/23^23-27, 202.49.80.0/23^23-27, 202.50.52.0/22^22-27, 202.50.196.0/22^22-27, 202.50.200.0/21^21-27, 202.50.208.0/20^20-27 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050127 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS9503 descr: advertised to AS9560 by FX Networks - AS9503 members: 131.203.0.0/16^16-27, 161.29.0.0/16^16-27, 161.65.0.0/16^16-27, 192.88.85.0/24^24-27, 192.133.31.0/24^24-27, 202.36.226.0/24^24-27, 202.37.86.0/23^23-27, 202.49.80.0/23^23-27, 202.50.52.0/22^22-27, 202.50.196.0/22^22-27, 202.50.200.0/21^21-27, 202.50.208.0/20^20-27, 202.53.176.0/20^20-27 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: noc-minor(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050216 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 15 Feb '05

15 Feb '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: [CityLink #1886] Routing updates for WIX Route Servers (fwd) - Date: Wed, 16 Feb 2005 13:56:03 +1300 (NZDT) - Msg-Id: <Pine.LNX.4.58.0502161352230.13398(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS9503 descr: advertised to AS9439 by FX Networks - AS9503 members: 131.203.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 192.88.85.0/24^24-29, 202.36.226.0/24^24-29, 202.37.86.0/23^23-29, 202.49.80.0/23^23-29, 202.50.52.0/22^22-29, 202.50.196.0/22^22-29, 202.50.200.0/21^21-29, 202.50.208.0/20^20-29, 192.133.31.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: mplant(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041221 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS9503 descr: advertised to AS9439 by FX Networks - AS9503 members: 131.203.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 192.88.85.0/24^24-29, 192.133.31.0/24^24-29, 202.36.226.0/24^24-29, 202.37.86.0/23^23-29, 202.49.80.0/23^23-29, 202.50.52.0/22^22-29, 202.50.196.0/22^22-29, 202.50.200.0/21^21-29, 202.50.208.0/20^20-29, 202.53.176.0/20^20-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: noc-minor(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050216 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 15 Feb '05

15 Feb '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: - Date: Wed, 16 Feb 2005 13:51:34 +1300 (NZDT) - Msg-Id: <Pine.LNX.4.58.0502161350450.13398(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: aut-num: AS9503 as-name: NZRR-AS9503 descr: FX Networks descr: APE peering at '192.203.154.115' descr: see Citylink RT job #1789 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9560 accept ANY AND NOT fltr-bogons export: to AS9560 announce AS9503 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050127 source: NZRR REPLACED BY: aut-num: AS9503 as-name: NZRR-AS9503 descr: FX Networks descr: APE peering at '192.203.154.115' descr: see Citylink RT job #1789 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9560 accept ANY AND NOT fltr-bogons export: to AS9560 announce AS9503 import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS9503 notify: rpsl-admin(a)nzix.net notify: noc(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050216 source: NZRR

1 0

FW: [Apnic-announce] Unable to travel to Kyoto to attend APNIC 19?
by Nurani Nimpuno 15 Feb '05

15 Feb '05

While I'm at it, I thought it'd be useful to forward this information too. The APNIC meeting is on next week (Mo-Fri) and as explained below, even if you can't travel to Kyoto for the meeting, you can participate in the meeting remotely through video streams, transcripts and jabber chat. The meeting programme is here: http://www.apnic.net/meetings/19/programme/ It's worth noting that 9am in Kyoto is 1pm in NZ. Cheers, Nurani Nimpuno APNIC -----Original Message----- From: apnic-announce-bounces(a)lists.apnic.net [mailto:apnic-announce-bounces(a)lists.apnic.net] On Behalf Of Secretariat Sent: 14 February 2005 17:24 To: apnic-announce(a)apnic.net Subject: [Apnic-announce] Unable to travel to Kyoto to attend APNIC 19? --------------------------------------------- Unable to travel to Kyoto to attend APNIC 19? --------------------------------------------- Attend online instead! You can participate in the meeting from anywhere in the world by taking advantage of APNIC's online video, transcript and chat features. Live meeting features --------------------- The following APNIC 19 sessions will be video streamed and have live transcripts. You can have your input into each of these sessions via the Jabber chat room "room1". Your questions and comments will then be read out to the onsite attendees: Date Time Session ---- ----- ------- 22 Feb 16:00-17.30 Internet governance open forum 23 Feb 11.00-12.30 IPv6 technical SIG 14:00-17.30 Routing SIG 24 Feb 09:00-12.00 Policy SIG 14:00-15:30 Database SIG 16:00-17:30 DNS operations SIG 25 Feb 09:00-17:30 APNIC Members Meeting Note: all times quoted above are local times in Japan. Other APNIC SIG sessions that are not being video streamed will be available by Jabber chat room "room2". Full details on how to participate remotely are available at: http://www.apnic.net/meetings/19/programme/features.html New: webcast tutorials for participating universities ----------------------------------------------------- With assistance from School of Internet (SOI) Asia and the WIDE project, the following tutorials will be broadcast over the network to SOI partner universities: Date Time Session ---- ----- ------- 21 Feb 09:00-12:30 Dynamics of policy process 14:00-17:30 Spam prevention 22 Feb 09:00-10:30 Keynote: security protocol 11:00-12:30 Certification Authority 14:00-17:30 ISP Security Strategy Information about the broadcasts along with details of participating partners will shortly be available on the APNIC website and at: http://www.soi.wide.ad.jp ______________________________________________________________________ APNIC Secretariat <secretariat(a)apnic.net> APNIC ph +61 7 3858 3100 http://www.apnic.net fx +61 7 3858 3199 ______________________________________________________________________ See you at APNIC-19 Kyoto, Japan, 21 to 25 Feb 2005 and APRICOT 2005 http://www.apnic.net/meetings ---------------------------------------------------------------------- _______________________________________________ Apnic-announce mailing list Apnic-announce(a)lists.apnic.net http://mailman.apnic.net/mailman/listinfo/apnic-announce

1 0

Stuff.co.nz Routing & Peering @ Wix?
by Craig Spiers 15 Feb '05

15 Feb '05

Anyone noticed the ip block maintained by stuff.co.nz is not actually being advertised to the wix route servers? The route I'm receiving, is from Telstra Clear, and is a /24. BGP routing table entry for 202.135.111.0/24, version 235662 Paths: (1 available, best #1, table Default-IP-Routing-Table) Not advertised to any peer 4768 2687 203.167.219.181 from 203.167.219.181 (203.97.2.199) Origin incomplete, localpref 100, valid, external, best Are they another 'listen only' peer? Cheers, Craig - ConceptNET

18 26

Notes from NZNOG 05 history of peering session
by Ian McDonald 14 Feb '05

14 Feb '05

Notes from NZNOG 05 history of peering session Folks these are my notes taken down as clarifications/expansions to Joe's notes. Please feel free to tell me where I've got it wrong as I was writing quite quickly…. Talking to Joe there was a suggestion from someone that we put together a Wiki to collect this altogether as a NZ Internet History. Sounds good to me and we could add whole sections on 0867, IPNet and start writing active history on UBS etc. Joe mentioned David Dixon (KCBBS) had done a history page of Internet in NZ which may be a good starting point along with his presentation, these notes and everybody's thoughts... Does anybody have a spare place for a Wiki etc? In the short term do the WLUG members mind if I start a page on there as a temporary home? 1989 KCBBS started Internet link doubled at Waikato from 2.4 to 4.8 Kb/sec Original connection into Waikato was CSNET (sp ??) Connected to DSIR through DSIR routers – 4.8 K links on PC after failing to get working on X25 – Massey was also piggy backed off this as well 1989-1996 Nearly every routing protocol was used except BGP Clear was back through to MCI In effect peering at universities through Tuianet – This was pulled after DOS attack around 1995 at Cybernet conference against ICONZ. Paid for charging for capacity at this time – world leading at the time FreeNet in Wellington 1997/1998 – Home Fibre project canned by Telecom – When did it start? 1998 ADSL launch announced – this was aimed primarily at video July 1998 202.7.0.0/23 – came out of Dunedin City Council. Attempts to give parts of this out to customers through ISPs Citylink – unique as MAN and exchange building out to ISPs 1998 When National Library peered it was on a 386 notebook with two Ethernet cards running Linux 1999 Joe had idea of using Sky tower for peering after riding on a bus and seeing it looming above him ICONZ, Iprolink, KCBBS hosted an abortive exchange through ISDN. Centrex suggested by Max Gustin for this as well. Level 48 at Sky Tower was logical because Clear had fibre and could host internal aerials there also due to type of glass. Correction to a slide – Roger found switch not Richard 1999 192.203.154.0/24 – original owner was Children's Discovery Centre (not sure of this location as didn't hear clearly) Order of acquisitions: Saturn eats Paradise Telstra eats Netlink Telstra eats Saturn i4free was using Clear Network 1994 or 1996 One of International cables broken. Pacrim East built before Pacrim West. Shortly after Pacrim East failed. A couple of people suggested that this was due to a ship pulling anchor just after fixing something else. Between 1995/1996 and 2001. Waikato no longer main connectivity. Rex Croft not looking after .nz. Telecom/Netway got it because nobody else wanted it. Chello ran flat rate cable in Wellington until getting killed in 2001 by Napster. Had a GRE tunnel to Midwest America 2003 MCI were selling Voyager transport. Satellite connection to OzEmail – GRE tunnel also through terrestrial. Subsequent DS3 to Sydney – Late 2003/early 2003 Before Southern Cross Clear and Telecom were sending large packets via satellite and small via cable to help get more traffic through It was May 2004 not Nov 2004 Telstra announce intention to de-peer from APE Early 2004 Telecom withdrew route servers from Exchange Mid 2003 Xtra becomes more residential only. Global Gateway/CID for businesses. Was it at this time Xtra was folded back into Telecom company or earlier?

2 2

RE: [nznog] NZ NPA/NXX
by Donald Neal 14 Feb '05

14 Feb '05

> From: J S Russell [mailto:jsr(a)jsr.com] > Sent: Tuesday, 15 February 2005 1:29 p.m. > To: nznog > Subject: Re: [nznog] NZ NPA/NXX > > On Mon, 14 Feb 2005, Steve Phillips wrote: > > > In the spirit of helpfulness I have thrown together a small > program to > > help you in your endevor. This thread has lost any operational relevance it may have had. Time to leave it alone, people. - Donald Neal List Administrator Donald Neal |Do not look directly at laser with Technical Specialist |remaining good eye. NGN Operations | - Bill Manning Integration & Services Division +----------------------------------- Alcatel NZ Ltd - Telecom's network operations manager ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

Walker Wireless /
by Garrett Stoupe 14 Feb '05

14 Feb '05

If anyone on this list that works for walker wireless / woosh, can you please get hold a hold off me off the list. I need to get some information of our routers on our vpn. Regards Garrett Stoupe Network And Database Administrator Cabbage Tree Press garretts(a)te.co.nz www.te.co.nz www.jobzone.co.nz www.nzcarbuys.co.nz

1 0

NZ NPA/NXX
by Joshua Brady 14 Feb '05

14 Feb '05

Hello all If the phone number for a NZ Company is +64 3 548 1111 would the NPA be 3 and NXX 548? If not, can someone correct me?

6 7

RE: [nznog] NZ NPA/NXX
by Philip D'Ath 14 Feb '05

14 Feb '05

ps. Works great XP with ActiveState perl. -----Original Message----- ... In the spirit of helpfulness I have thrown together a small program to help you in your endevor. ... Hope you find it helpful. (Note, you will need perl installed in /usr/bin/perl, and it will need to be run on some *ix box, also, dont make $x anything other than 0 or weird things may happen, oh, and you can alter $number to be the number of values you require for your database thingy wotsit.)

1 0

RE: [nznog] IP address allocations and geographic areas
by Gordon Smith 14 Feb '05

14 Feb '05

Unfortunately there are some in the U.S. that do block all APNIC space, mainly due to the amount of spam originating from China and Korea. Personally, I think putting Florida into its own address range and null routing it would have a far greater impact on the global spam levels :-) I'd suggest emailing them from an address that isn't blocked and point out the error of their ways Cheers, Gordon

3 2

Re: [nznog] Stuff.co.nz Routing & Peering @ Wix?
by neil gardner 13 Feb '05

13 Feb '05

I'm really sorry for this, but it was just screaming out at me :-) > Speaking of stuff.co.nz, is anyone else having trouble reaching it in the > last half hour ? And trademe ? Seems to be stopping at the hop > nzlapwn1.nz.ip.att.net. I think you mean 'nzlaPWNED1.nz.ip.att.net' :-) Cheers - N. >>> David Zanetti <david.zanetti(a)catalyst.net.nz> 14/02/2005 11:03:22 a.m. >>> [sending to NZNOG properly this time!] On Mon, 2005-02-14 at 10:53 +1300, Simon Byrnand wrote: > Speaking of stuff.co.nz, is anyone else having trouble reaching it in the > last half hour ? And trademe ? Seems to be stopping at the hop > nzlapwn1.nz.ip.att.net. AT&T have an issue. Oddly the traffic is low, 20% of normal instead of the 60% the WIX-AT&T split we found before would indicate. I guess there's a bit of asymetric routing out there :| -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration Catalyst IT Limited +64-4-8032233 +64-21-402260 NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

1 0

WIX Traffic
by Craig Spiers 12 Feb '05

12 Feb '05

Hi all, What was that last week about someone advertising some new content on wix? Our traffic to wix has more than doubled.. What was the content? Cheers Regards, Craig - ConceptNET

6 7

More Key Signing Stuff
by Joe Abley 09 Feb '05

09 Feb '05

Begin anonymous forwarded message: > I'm going to really prove my ignorance when it comes to all things > pgp. Now that we've done the verification as to who's who, and > everyone owns their own key, what does one do, so sign someone elses > key, or get their key signed by someone else ( should they want to ). I kind of forgot to talk about what we do after we were finished with all the hexadecimal and drivers licences. So here we go: 1. Download the public key ring from buglumber and import it. 2. For each person whose identified you are satisfied with, check the fingerprint on the downloaded keyring against the sheet of verified fingerprints. 3. If you feel like it, sign the key with yours. This is a convenient way to record the fact that you have verified the accuracy of the key. 4. If you feel like it, send the signed public key back to the person who gave it to you. This provides an additional path through the web of trust for people to trust your key, and is generally a handy thing to have. 5. If you feel like it, upload the key with your signature to one or more key servers. This is good for the same reasons that 4 is good. Lather, rinse, repeat for all keys.

5 6

How many ISP's charge their customers to query DNS?
by Chris Hodgetts 09 Feb '05

09 Feb '05

I know this is a "consumer" question, but I find it very strange... Quote from the Paradise Help Desk Email system when questioned about why I was being charged to access kirsty.paradise.net.nz , their secondary DNS Server... "Kirsty is our secondary DNS server, you will get charged traffic connecting to our DNS servers." Any other people working for ISP's wanna comment on if they charge? I know, from what Xtra's support staff said, they don't.. I just find it really hard to believe.

9 9

Denial of Service Attacks
by Anaru Hartley 08 Feb '05

08 Feb '05

Has anyone noticed a surge in DDOS attacks from Asia? One of the Windoze servers I look after has been getting rather nailed these past few days. Most appear to be coming from Japan - at least 5 a day and every time within a few minutes of each other, lasting a minute or two. If I am really lucky, I'll get 20 in one day ... somebody loves me :-)

7 7

Re: [nznog] pop from xtra adsl]
by Gavin Legge 08 Feb '05

08 Feb '05

Thanks for the reply's. I imagine it is a problem with the local setup at the customer site. just wanted to get an idea from the experts before i went there.. Thanks again for the reply cheers Gavin PS - if anyone is interested in a job at DTS as 'technical guy' I'll possibly be leaving soon and I'm sure the boss here would love to hear from you. -- Kind Regards Gavin Legge Technical Manager DTS Limited phone +64 4914 5946 email gavin(a)dts.net.nz cellphone 021 441 299

1 0

RE: [Nznog-org] RE: [nznog] NZNOG 06 - Potential Hosts.
by Peters MCS Mail 08 Feb '05

08 Feb '05

Donald, I was assuming usual timescales when I made the offer - around end Jan/early Feb to make use of available student accommodation. However I'll investigate whether we can be a venue to work around ICANN on 27-31 March as indicated by Keith as that is a very attractive proposition. The issue is that it is in the middle of trimester 1 so our large lecture theatres are generally booked and student accommodation not available. It is more likely to be feasible for 3rd onwards as that is the last week before Easter. Give me a few days to investigate whether this can be arranged. Peter Dr. Peter Komisarczuk School of Mathematics, Statistics and Computer Science Victoria University of Wellington Wellington peterk(a)mcs.vuw.ac.nz Tel: +64 4 463 5661 -----Original Message----- From: nznog-org-admin(a)list.usenet.net.nz [mailto:nznog-org-admin(a)list.usenet.net.nz] On Behalf Of Donald Neal Sent: Wednesday, February 09, 2005 8:21 AM To: Peters MCS Mail Cc: nznog-org(a)list.usenet.net.nz Subject: [Nznog-org] RE: [nznog] NZNOG 06 - Potential Hosts. Peter, Thanks for the offer. When are you offering to host a conference? Or put another way, are you offering to host something aroubnd the time of ICANN (early March 2006) or at another time when cheap accommodation si available? If the later, when roughly is that? - Donald Neal Donald Neal |Do not look directly at laser with Technical Specialist |remaining good eye. NGN Operations | - Bill Manning Integration & Services Division +----------------------------------- Alcatel NZ Ltd - Telecom's network operations manager > -----Original Message----- > From: Peters MCS Mail [mailto:peterk(a)mcs.vuw.ac.nz] > Sent: Tuesday, 8 February 2005 5:03 p.m. > To: 'nznog' > Subject: RE: [nznog] NZNOG 06 - Potential Hosts. > > Simon, > > We'd be happy to host NZNOG 06 at VUW if Wellington is seen as a > reasonable venue. We know there are those who might prefer more > "neutral - driving distance from Auckland" ground, so won't > be offended > if the venue goes to someone else. > > Cheers > > Peter > > Dr. Peter Komisarczuk > School of Mathematical and Computing Sciences > Victoria University of Wellington > Wellington > peterk(a)mcs.vuw.ac.nz > > > -----Original Message----- > From: Simon Lyall [mailto:simon(a)darkmere.gen.nz] > Sent: Tuesday, February 08, 2005 2:29 PM > To: nznog > Subject: [nznog] NZNOG 06 - Potential Hosts. > > > We are looking for potential hosts for NZNOG 06 in around a > year's time. > > If you think that you ( or an organization you are associated with) > might > want to host nznog next year then you should probably start thinking > seriously about it soon. > > We will probably send out a more formal call within the next > week or two > so the decision is made some time in March. > > We already have one early expression of interest. > > If you have questions about what is involved etc then the organizing > people or the WAND group can probably answer them. > > People can probably also suggest possible themes, formats and speakers > at > this point as well. Personally I vote for an on-site Masseuse. > > Email to me (I can summarized or forward) , the list or whoever. > > -- > Simon J. Lyall. | Very Busy | Mail: simon(a)darkmere.gen.nz > "To stay awake all night adds a day to your life" - Stilgar | eMT. > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > ------------------------------------------------------------------------ ------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------ ------ _______________________________________________ nznog-org mailing list nznog-org(a)list.usenet.net.nz http://usenet.net.nz/cgi-bin/mailman/listinfo/nznog-org

1 0

NZNOG 06 - Potential Hosts.
by Simon Lyall 07 Feb '05

07 Feb '05

We are looking for potential hosts for NZNOG 06 in around a year's time. If you think that you ( or an organization you are associated with) might want to host nznog next year then you should probably start thinking seriously about it soon. We will probably send out a more formal call within the next week or two so the decision is made some time in March. We already have one early expression of interest. If you have questions about what is involved etc then the organizing people or the WAND group can probably answer them. People can probably also suggest possible themes, formats and speakers at this point as well. Personally I vote for an on-site Masseuse. Email to me (I can summarized or forward) , the list or whoever. -- Simon J. Lyall. | Very Busy | Mail: simon(a)darkmere.gen.nz "To stay awake all night adds a day to your life" - Stilgar | eMT.

3 2

Webcasting FYI - Parliament
by Richard Naylor 07 Feb '05

07 Feb '05

FYI - TVNZ today started streaming Question Time (aka playtime) live from Parliament today. The links are available hidden in the TVNZ website under news -> politics -> 3rd column -> hidden word "live". The video is also being archived in case you missed something....... And its all multi-bit rate - including a stunning 2mbps stream. (must get better cameras) Bringing this back on topic..... it needs a bit better publicity than the current web page, and Network Operators Help Desks may need to explain why a 2mbps stream looks so much better than 56kbps as well as the usual questions like - "why don't I get sound" (coz you haven't turned on the speakers) etc. Congratulations to the folks at TVNZ - a great job. Just look at that 2mbps stream. <sigh> rich

2 2

Re: [nznog] More Key Signing Stuff
by Ewen McNeill 06 Feb '05

06 Feb '05

In message <200502071721.05162.mark(a)mcs.vuw.ac.nz>, Mark Davies writes: >So from the key signing party we should be in the position that for anyone we >have verified we are happy that the pgp key we have the fingerprint for is >indeed for the person we met but the one thing that the process hasn't done >is confirm that all the email addresses listed in the key are under the >control of that person. > >To achieve this last step here is a process (lifted from the NetBSD developers >PGP guidelines): [...] I agree that the "keysigning" party approach generally bypasses actually confirming the email addresses really belong to the person in control of the key. (Which is unfortunate as the email address tends to be one of the more trusted parts.) The usual approach I've seen to confirm that the email address is correct is to send the signed key to the email address listed, encrypted with the key. And not upload the key/signature to a key server. That way only the person in control of both the email address (used) and the key is able to gain access to the signature, and it's not visible to anyone else until they've done so. The NetBSD approach seems to go further and confirm all the uids, providing one follows the elaborate process of tracking each "challenge" that is sent out against the particular uid it belongs to. But I'm not sure it's always necessary if one only signs uids one has other reasons to know are associated with the person in question. (I generally avoid signing uids for which I don't recognise the email address, for instance, unless it's the one to which the key is being sent.) As it happens I've already seen half a dozen new signatures for my key uploaded to the keyservers and not emailed to me, so those people presumably trust the email address for other reasons. Ewen

1 0

Thanks
by Lin Nah 06 Feb '05

06 Feb '05

Thanks to Richard Nelson, Jamie Curtis, Perry Lorier, Leslie and the other folk for organising NZNOG05 and being such wonderful hosts. Thanks To Donald Neal, Joe Abley and other organisers for setting up the programme Thanks to the sponsors who contributed to making it happen. InternetNZ, Citylink, WAND, U of Waikato Juniper, 2day.com, APNIC, De Winter and others I have missed out (but I am sure those at WAND will add to the list). Last but not least Thanks to all who made it there (some despite problems with transport etc). Without the attendees, there would have been no nznog meet. lin

2 1

Re: [nznog] Thanks
by Jonny Martin 06 Feb '05

06 Feb '05

...and thanks to Lin for organising large mounds of people, beer, and food at the unofficial dinners. An enjoyable time had by all I am sure. Cheers, Jonny.

1 0

Peering stuff...
by David Zanetti 05 Feb '05

05 Feb '05

A certain provider of a large amount of content (which I can't name because I haven't got permission to announce this properly) is now peering on WIX. It's ~10-15M at peak. Make sure your prefixes are being sent to the WIX route servers, and you're accepting at least 202.135.111.128/27 from them, and you'll get a nice short path to it instead of via Auckland. If you have some aversion to open peering, well, you can just pay some other provider to get it. :) Enjoy. -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

1 1

pgp key signing
by Joe Abley 03 Feb '05

03 Feb '05

If you want to sign keys this afternoon, and you're currently frantically scrabbling with gpg to try and get your keys into the web page, please continue trying until 4pm. Just after 4pm I'm going to take a snapshot of the keyring, and that's what we'll use for the signing shenanigans. If you haven't figured it out by 4pm, then you can stop trying then :-)

1 0

Streaming Sessions after lunch
by Matt Brown 03 Feb '05

03 Feb '05

Hi All, Coming up this afternoon at the NZNOG'05 Conference we have two programme streams starting at 13:30. You can view the details at www.nznog.org/programme.php. Stream A will have Liz Butterfield from Netsafe talking about NZ's Cybersafety Education Initiative. Stream B will have Joerg Micheel (NLANR) talking about 10GB Abilene Backbone Monitoring, followed by an update on WAND's current research activities. We only have one r2 box here, so only one of these streams will be streamed via r2. If you want to put in your vote as to which one, please reply to me (offlist is fine), before 13:00 today. Cheers -- Matt Brown matt(a)mattb.net.nz Mob +64 275 611 544 www.mattb.net.nz

2 1

Wellington airport has problems still
by Ian McDonald 03 Feb '05

03 Feb '05

Articles as of midday: Fog Problems Again At Airport 04/02/2005 09:29 AM NewstalkZB Fog is still causing problems at Wellington airport with flights being diverted or delayed. After a day and a half of delays due to low cloud, the airport had only just reopened yesterday morning and airlines were trying to clear the backlog of thousands of passengers. Today, weather conditions at the airport are being described as marginal and deteriorating. Some flights are getting out and one from Nelson has managed to land. Passengers are being advised to check with their airline. Find this item at: http://xtramsn.co.nz/news/0,,11964-4078710,00.html

1 0

RE: [nznog] Notes from NZNOG 05 history of peering session
by Craig Box 03 Feb '05

03 Feb '05

While it's fresh in everyone's minds: > Talking to Joe there was a suggestion from someone that we put > together a Wiki to collect this altogether as a NZ Internet History. > Sounds good to me and we could add whole sections on 0867, IPNet and > start writing active history on UBS etc. I've taken Ian's information, wikified it and put it up on http://www.wlug.org.nz/NewZealandInternetHistory Anyone can edit this - just use YourName as a login ID. (If you can't figure out how to log in, in Bill's words, "you're excused"). If you're linking to something like Telecom, TelstraClear etc, we probably have pages about them already. Please check before linking externally. Craig

1 0

Citylink systems admin
by Barry Murphy 03 Feb '05

03 Feb '05

Hi, Can someone from citylink that can provide me with wix and ape ip space please contact me offlist. I had a chat to Andy some time ago about this, however recently I can't get hold of him so wonder if he is away. Thanks Barry

2 1

Reminder! PGP Key Signing at NZNOG 2005
by Joe Abley 02 Feb '05

02 Feb '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reminder! If there are people who are not staying late enough tomorrow to attend, feel free to track me down directly and exchange signatures (or track down someone else who turns up at some other time). Begin forwarded message: > We're going to engage in a frenzy of PGP keysigning at the NZNOG > meeting in Hamilton. People who know what PGP stands for should read > on. People who don't know what PGP is are more than welcome to ask me > off-list, or alternatively ask Google (who at least knows people who > know). > > Here's what we will attempt to do for the meeting next week: > > 1. As soon as you can, generate an ASCII-armoured copy of your public > key and paste it into the convenient form here: > > http://www.biglumber.com/x/web?keyring=5468 > > Consult your PGP software's documentation to find out how to generate > an ASCII-armoured copy of your public key. With GnuPG you use "gpg -a > - --export <your-key-id>". You're looking for a block of ASCII text > which begins with the line "-----BEGIN PGP PUBLIC KEY BLOCK-----". > > 2. Before you set off to the NZNOG meeting, remember two things: > > 2.1. BRING PHOTO ID. Key signing is a process of representing trust, > and if you are interested in getting signatures on your key (and > you're reading, so presumably you are) you should be ready to provide > proof of your identity to other people. Drivers licences, passports, > things of that nature. BRING PHOTO ID. > > 2.2. BRING A TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. This could be > achieved by bringing a laptop with a trusted copy of your public key > on it, or alternatively you could generate the fingerprint of your > public key, write it down and bring the bit of paper with you. BRING A > TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. > > The precise procedure we use at the key signing party will depend on > how many keys are uploaded in the next week; if there's a small > handful we can read signatures aloud -- if there are more, we can try > Len Sassaman's efficient key signing method > (<http://sion.quickie.net/keysigning.txt>). I'll send more words on > this closer to the time. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCAY6O/f+PWOTbRPIRAk41AJ9pQm1q+YiNkYGrnlr+duzA8q2AlQCgvp+7 im7yw9JZLD+cNEkqW09xuHU= =62cR -----END PGP SIGNATURE-----

1 0

Zombie Spam
by Ian McDonald 02 Feb '05

02 Feb '05

Given some of the talks at NZNOG 05 you may find below interesting: Zombie trick expected to send spam sky-high By Jim Hu http://news.com.com/Zombie+trick+expected+to+send+spam+sky-high/2100-7349_3… Story last modified Wed Feb 02 11:25:00 PST 2005 Spam levels are about to skyrocket, according to experts who warned this week that spammers have developed a new way of delivering their wares. According to the SpamHaus Project--a U.K.-based antispam compiler of blacklists that block 8 billion messages a day--a new piece of malicious software has been created that takes over a PC. This "zombie" computer is then used to send spam via the mail server of that PC's Internet service provider. This means the junk mail appears to come from the ISP, making it very hard for an antispam blacklist to block it. Previously, zombie PCs have been used as mail servers themselves, sending spam e-mails directly to recipients. "The Trojan is able to order proxies to send spam upstream to the ISP," said Steve Linford, director of SpamHaus. Linford believes that this Trojan horse was created by the same people who write spamming software. ISPs in the United States may have already been hit. "We've seen a surge in spam coming from major ISPs. Now all of the ISPs are having large amounts of spam going out from their mail servers," Linford said. This will cause serious problems for the e-mail infrastructure, as it is impractical to block mail with domain names from large ISPs. Linford predicts that ISPs will see a growth in the volume of bulk mail they send and receive over the next two months, with spam levels rising from 75 percent of all e-mail to around 95 percent within a year. "The e-mail infrastructure is beginning to fail," Linford warned. "You'll see huge delays in e-mail and servers collapsing. It's the beginning of the e-mail meltdown." Linford said that ISPs need to act fast to take control of the problem. "They've got to throttle the number of e-mails coming from ADSL accounts. They are going to have to act quickly to clean incoming viruses. ISPs have so much spam--they are too understaffed to call people up and tell them they have Trojans on their machines. And no one would know what you're talking about." Antispam company MessageLabs confirmed Linford's findings. "This ups the ante in the need for filters," said Mark Sunner, chief technology officer for MessageLabs. "It makes it more difficult for people who compile blacklists, which is why spammers are doing this. It will put more pressure on ISPs to take greater interest in the traffic they carry and filter at source." The Information Commissioner's Office, the United Kingdom's point-of-call to report spam, said it had received no complaints of bulk spam from ISPs. Some U.S.-based ISPs contacted by News.com said an e-mail meltdown has yet to arrive. But technicians at some of the largest Internet providers have acknowledged the issue and similar exploits in the past. Many, but not all, U.S. ISPs have blocked open relay ports, such as port 25, to shut out spammers from disseminating messages from home-operated servers. The block has helped some broadband ISPs limit the output of zombie spam, and some have noticed the new form of malware taking shape. Time Warner Cable, the nation's second largest cable company, said it had become aware of this spam "vector," as it calls it, and has mechanisms to control it, according to company spokesman Keith Cocozza. He noted that the company's ISP, called Road Runner, has outgoing e-mail limits in place, but declined to elaborate on how the company monitors and responds to this malware issue. Earthlink, which runs a dial-up and broadband service, said it noticed a gradual increase in spam volume coming from its legitimate mail servers since the beginning of 2004. The company claims it has implemented safeguards, such as authenticated SMTP servers and re-routing of legitimate e-mail, to cut down the flow. "Overall we've been able to greatly reduce the amount of spam from our network by routing activities and applying chokepoints," said Trip Cox, Earthlink's chief technology officer. Cox added that the measure have reduced spam from 30 percent of the ISP's total e-mail volume to 2 percent. Dan Ilett of ZDNet UK reported from London.

1 0

CACert Assurance
by Joe Abley 02 Feb '05

02 Feb '05

CACert is a non-evil X.509 certificate authority based in Australia. They give out free certificates to people whose identities they can verify, and they way they verify identities involves a web of trust. I met the CACert people in a meeting in the US last year, and they verified my identity in appropriately paranoid fashion, and made me an Assurer. That means I can act as an introducer. If any of this rings bells, and there's someone at the meeting who would like to be "assured", flag me down at some point and It Will Be Done. Joe

1 0

nznog stream
by Chris Hellberg 02 Feb '05

02 Feb '05

The stream is looking good from Frankfurt. Very little rebuffering (although I think that's the DSL at this end) and clear audio. Watching Dean's interweb presentation right now.

1 0

Transport to NZNOG
by David Zanetti 01 Feb '05

01 Feb '05

Hey all. Due to someone placing an airport in a suboptimal location, I won't be any closer than Auckland to NZNOG conferencage by (hopefully!) 7.30am tomorrow morning. If anyone is planning on driving down in the morning, I would hugely appreciate a lift. Give me a call on the cell number below. Thanks :) -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

2 1

Last mile in CHCH
by Richard Patterson 01 Feb '05

01 Feb '05

What options do people in/around the Christchurch CBD have ? AFAIK TelstraClear cable is fairly predominant around there. Any other options? Local wireless/fibre carriers ? -Richard

11 12

RE: [nznog] Stats from Webcast
by Kenneth Wells 01 Feb '05

01 Feb '05

.. I loved the ..er.. post session "out-takes". Those who watched till the room went dark will know what I'm talking about - as will the few people who came back into the room to check things out for tomorrows sessions.. ..and no matter how "cute" that device on the desk is.. It would probably be missed if stolen... :-) grin grin. Seriously though, great webcasting. The audio is clear and it's easy to hear everyone in the room. Cheers, Kenneth -----Original Message----- From: Richard Naylor [mailto:richard.naylor(a)citylink.co.nz] Sent: Wednesday, 2 February 2005 5:04 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Stats from Webcast Todays webcast Duration 4 hrs 44 min 827MBytes at an average of 405kbps. File copy is 876MB Peak of 26 viewers, average 22. Will be back up at around 8:30 tomorrow - (provided we get here in time) Thanks to the presenter(s), and local camera operator - Matt ? rich _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Stats from Webcast
by Richard Naylor 01 Feb '05

01 Feb '05

Todays webcast Duration 4 hrs 44 min 827MBytes at an average of 405kbps. File copy is 876MB Peak of 26 viewers, average 22. Will be back up at around 8:30 tomorrow - (provided we get here in time) Thanks to the presenter(s), and local camera operator - Matt ? rich

1 0

RE: [nznog] NZNOG Conference "Relays?"
by Craig Box 01 Feb '05

01 Feb '05

>> If anyone is willing to receive emails during presentations with >> comments or questions, would advising of this "live" on the list be >> an acceptable use? > > Or perhaps creation of an alternate list for this specific purpose > would be in order? Sounds like a bloody good idea IMHO. Though > perhaps a question from Hamish would exceed my verboseness capacity > as a relay... There are a number of people here with laptops who "commentate" the conference on #nznog on the Undernet IRC network. Perhaps asking a question in that channel would be the best way to get it asked? Craig

1 0

NZNOG Conference "Relays?"
by Hamish MacEwan 01 Feb '05

01 Feb '05

If anyone is willing to receive emails during presentations with comments or questions, would advising of this "live" on the list be an acceptable use? Not certain of the coverage there, but if you are in coverage and able to check email, this would be a simple DIY solution for those of us who can see and hear, but not speak. Hamish. -- http://del.icio.us/Hamish.MacEwan

3 2

Audio Streams, Webcasts, and IT Conversations
by Mark Derricutt 01 Feb '05

01 Feb '05

Has anyone thought about recording/streaming the sessions from NZNOG this year? Could also be good for whoever's looking after that to contact Doug Kay at IT Conversations ( http://www.itconversations.com/ ) for syndication...

13 18

Re: [nznog] Asx typo...
by Richard Naylor 01 Feb '05

01 Feb '05

At 12:57 PM 2/1/2005 -0800, Mike Savory wrote: >Looks like a typo in the ASX file... its an intelligence test - I just failed.......... >(mms: is misssing a 2....) Its all fixed - sorry about that and thanks for bringing it to my attention.... rich

2 1

RE: [nznog] Last mile in Albany
by Peter Thompson 01 Feb '05

01 Feb '05

We have limited Woosh (non LOS) coverage in Albany. Check www.woosh.com and plug your address into the 'coverage' tool on the homepage. I guess Liz is referring to us as we use 'booster' antennas for our modems. We also have 5.8Ghz (LOS) coverage in parts of Albany, if you want more info contact me off-list and I'll give you the contact details of our man for 5.8 on the North Shore. Regards Pete -----Original Message----- From: Simon Garner [mailto:sgarner(a)expio.co.nz] Sent: Wednesday, 2 February 2005 1:37 p.m. To: Liz Q Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Last mile in Albany On 2/02/2005 1:30 p.m., Liz Q wrote: > On Wed, 02 Feb 2005 13:20, Simon Garner wrote: > >>While we're on the subject... anybody know what's available in the >>Albany area (North Shore)? Other than DSL. >> > > you can get wireless (sometimes requires booster for your aerial) > > Liz > From who/where? :) -Simon _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

RE: [nznog] asia netcom, sprint
by Mark Frater 01 Feb '05

01 Feb '05

It was Aug/Sep 2002 for Asia Netcom. I think Callplus was one of their first customers. That was back in the days when Quest were also offering bandwidth.. I never really did get the full story about what happened to them.. Unsure about Sprint, but I'm pretty sure it was within 6 months of that. Mark --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.775 / Virus Database: 522 - Release Date: 8/10/2004

1 0

asia netcom, sprint
by Joe Abley 01 Feb '05

01 Feb '05

Does anybody have any estimates on when Asia Netcom and Sprint set up shop selling international transit in Auckland? Handwaving and rampant inaccuracy is fine. Private replies are fine.

4 3

Re: [Nznog-org] Registrations Closed?
by Richard Nelson 31 Jan '05

31 Jan '05

We have now reached the legal limit on the number of people in the room for Thursday. This means that registrations are _really_ closed. There will be no registrations on the day unless we have cancellations or no-shows. We can still take extra people for dinner. Richard Nelson WAND Network Research Group.

3 2

Re: NZNOG Digest, Vol 26, Issue 1
by David 31 Jan '05

31 Jan '05

Re: Multicast in NZ FAQ (Lennon - Orcon) I had a really interesting guy call me up on the helpdesk about a year ago and he spent like an hour on the phone explaining the benefits of mulitcasting. He was trying to convince all the schools to do it in case there was an outbreak of SARS meaning all the schools would be shut and that it would be a good way to push out assignments to students...intersting stuff. Wouldn't viruses be spread quicker via multicast? My 2c Trakman.

1 0

Agenda for spam session on Wednesday
by David Farrar 31 Jan '05

31 Jan '05

Hi all - for those attending the spam session tomorrow as part of NZNOG Conference, the revised agenda FYI is below. You can sleep in :-) 1030 Morning Tea 1100 Welcome - Rodney Prescott 1110 Anti-Spam Technology (David Harris, Richard Jowsey, Simon Lyall) - Sender-ID/SPF (Microsoft) - DomainKeys (Yahoo) - Cisco Initiative - Cascaded statistical filtering 1200 Spam - A dose of reality Simon Lyall, Telecom NZ 1230 Lunch 1330 Spam Trends and Changes (David Harris, Richard Jowsey, Simon Lyall) - Web-bugs/Beacons - Phishing, Mafia links - Trojans - Disposable domains - Zombies - Collateral damage - Blacklists/Blocklists 1500 Afternoon Tea 1530 NZ Anti-Spam Legislation - consequences for industry - Likely shape of legislation (David Farrar) - Code of Practice (Pete Macaulay) 1630 Drinks -- David Farrar e-mail: david(a)farrar.com mob: 027 447 0216, ph: 04 471 0956, fax: 04 471 0946 blog: http://www.kiwiblog.co.nz msn: dpf666(a)hotmail.com, icq: 29964527 Director, Curia Market Research http://www.curia.co.nz Vice-President, InternetNZ http://www.internetnz.net.nz Director, .nz Registry Services, http://www.nzrs.net.nz

1 0

bandwidth in AKL
by Richard Naylor 31 Jan '05

31 Jan '05

Hi There, I have a possible major webcast in AKL at the Showgrounds in mid March. I'm going to need 2 carriers with around 2.5-3 mbps each. I just need to get back to APE, so traffic upstream isn't too great. Current plans are to use Wired Country and IP Star via ICONZ. Any one (incl Telecom and TCL) with something better and do-able before mid March, please contact me off list. Its 3 days live and allowing for set up etc, is a total of maybe 5 days. Thanks - Rich

1 0

The New Zealand Network Operators' Group
by Donald Neal 31 Jan '05

31 Jan '05

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. It consists of the subscribers to this mailing list, which anyone is free to join. Conference Our next conference starts tomorrow. See http://www.nznog.org/ for more information about the conference, including how to get there. You may be out of luck if you haven't already registered. If you are going, see http://www.nznog.org/curry_about.php for dinners on Wednesday and Friday. Other Meetings See http://auckland.thursdaynightcurry.com/ or http://wellington.thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://nzix.net/ for details of the Auckland, Palmerston North and Wellington exchanges, and some information on others under construction. About This Mailing List This list has around 750 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and Telecom. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

backscatter attack
by Spencer Stapleton 30 Jan '05

30 Jan '05

One of our user domains has just been heavily hit by *huge* quantities of Non-Delivery Receipts addressed to random_string(a)domain_name. At it's peak we were seeing around 50,000 NDR's coming in per hr. The worst has passed (<fingers crossed>), but this does raise a couple of issues with the current Internet mail infrastructure. A good discussion of the attack and surrounding issues can be found here at http://www.gossamer-threads.com/lists/spf/discuss/17041. In a nutshell we need Sender Policy Framework (http://spf.pobox.com/) - or something similar ASAP. There is nothing that could stop this happening to us again tomorrow. I don't think I've ever felt so powerless. RBL lists proved useless in the line of defense, as these messages were coming from legitimate sources. We were able to temporarily remove a few IP's here and there where the remote MTA were going overkill throwing these NDR's at us. It would seem that the original spambots that delivered the original message sent it just about everywhere. An interesting stat is that we received NDR's for atleast 352,423 unique recipients (<352,423 unique strings>@domain)!!! We only had a number of things at our disposal to do to limit the damage: Stop generating any 'unknown user' NDR responses ourselves (ignoring RFC876). Split the affected domain away from the rest of our incoming mail stream and then to start removing obvious NDR's from the isolated queues. Remove more NDR's from the queue. <repeat last step again> <and again>... <etc...> Has anyone seen something similar? Did you manage to locate a better solution? I can't say I've enjoyed the last couple of days one bit! Spencer. -- Systems Engineer Compass Communications http://www.compass.net.nz

8 14

Radius?
by Craig Spiers 30 Jan '05

30 Jan '05

What Radius Software are the majority of people out there using? Small Scale.. And large scale.. with SQL Backend? Anyone know anything about freeradius? Regards Craig - ConceptNET

6 5

Multicast in NZ FAQ
by Lennon - Orcon 30 Jan '05

30 Jan '05

Hi Folks.. I have updated a little my "Multicast in NZ" FAQ (http://www.mbone.net.nz) My Wish (Yes I'm dreaming) is get all networks multicast enabled so as people can start to broadcast the content on the net in NZ and if a customer asks, "can I do it" you say "Yes I can". With UBS and Wireless it is possible to get the content out there ,and in the future, if higher speed connections are available which are multicast enabled, Video and other content can get to the customers with people want to see. Yes I know there is no content yet (maybe the big hurdle in people wanting to set it up on their network), but maybe ISP's/Other network providers will want to start to release some content (Radio Stations/Television Stations/Other Content providers) If anyone want to give any suggestions or help, please let me know.. I need some examples of how other people (if anyone else) is setting up their equipment (Like Cisco L2TP termination for UBS etc) which can be put out to other people interested. Thanks Craig

1 0

RE: [nznog] backscatter attack
by Regan Murphy 28 Jan '05

28 Jan '05

"James Riden" writes: >It's best to do SMTP rejects for unknown users; this will >help cut the load on your servers if the forged From addresses >don't exist at your domain. This is relatively straightforward >for most MTAs - I believe postfix can do LDAP queries >against AD, or can talk to a postgresql database. Since >most of the forged addresses will be nonexistent, this should >help quite a bit. >(Bonus - it will also stop you generating this kind of traffic >for other sites in the future.) My mail domain is relatively small - about 40 real users - but I still drop about 1500 mail connections a day for email sent to invalid users. About 200 of these were typically virus initiated (and therefore had attachments) and almost all the rest were spam. My MTA is Mailmarshal and it can easily be configured to do this. You can set up LDAP or Active Directory connectors to hook into your directory servers which makes managing the lookup lists simple. And before I hear cries of "argh, not mailmarshal again..." Its configured so that is does *not* send outbound notifications for viruses etc. -- Regan

2 1

PGP Key Signing at NZNOG 2005
by Joe Abley 28 Jan '05

28 Jan '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We're going to engage in a frenzy of PGP keysigning at the NZNOG meeting in Hamilton. People who know what PGP stands for should read on. People who don't know what PGP is are more than welcome to ask me off-list, or alternatively ask Google (who at least knows people who know). Here's what we will attempt to do for the meeting next week: 1. As soon as you can, generate an ASCII-armoured copy of your public key and paste it into the convenient form here: http://www.biglumber.com/x/web?keyring=5468 Consult your PGP software's documentation to find out how to generate an ASCII-armoured copy of your public key. With GnuPG you use "gpg -a - --export <your-key-id>". You're looking for a block of ASCII text which begins with the line "-----BEGIN PGP PUBLIC KEY BLOCK-----". 2. Before you set off to the NZNOG meeting, remember two things: 2.1. BRING PHOTO ID. Key signing is a process of representing trust, and if you are interested in getting signatures on your key (and you're reading, so presumably you are) you should be ready to provide proof of your identity to other people. Drivers licences, passports, things of that nature. BRING PHOTO ID. 2.2. BRING A TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. This could be achieved by bringing a laptop with a trusted copy of your public key on it, or alternatively you could generate the fingerprint of your public key, write it down and bring the bit of paper with you. BRING A TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. The precise procedure we use at the key signing party will depend on how many keys are uploaded in the next week; if there's a small handful we can read signatures aloud -- if there are more, we can try Len Sassaman's efficient key signing method (<http://sion.quickie.net/keysigning.txt>). I'll send more words on this closer to the time. Thanks! Joe -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) iD8DBQFB+bVj/f+PWOTbRPIRAi5jAJ93/s+kA1HJnO82JxCqwhAj2mniPQCcC72i uxmFZl1QTdi4ZMk5AXa5u5k= =6Rnh -----END PGP SIGNATURE-----

2 2

Telecom
by Garrett Stoupe 27 Jan '05

27 Jan '05

Is it possible anyone from telecom to contact me off list in regards towards the proxy servers that Telecom uses Garrett Stoupe Network And Database Administrator Cabbage Tree Press garretts(a)te.co.nz www.te.co.nz www.jobzone.co.nz www.nzcarbuys.co.nz

3 2

IANA IPv4 allocations and bogon update: 124/8, 125/8 and 126/8
by Rob Thomas 27 Jan '05

27 Jan '05

-----BEGIN PGP SIGNED MESSAGE----- Hi, team. [ Apologies to those of you who receive this note in multiple forums. ] The numerous Team Cymru bogon projects have been updated as of 27 JAN 2005 to reflect the following IANA allocation made on 27 JAN 2005: 124/8 Jan 05 APNIC (whois.apnic.net) 125/8 Jan 05 APNIC (whois.apnic.net) 126/8 Jan 05 APNIC (whois.apnic.net) IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-template.htm> Secure JUNOS BGP Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-bgp-template.htm> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter- Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter- loose.htm> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter- strict.htm> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> RIPE NCC fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#ripe> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Bogus ASN monitoring - <http://www.cymru.com/BGP/asnbogusrep.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thanks, Rob. - -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999. -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQfl/WlkX3QAo5sgJAQF9bQP9Fr8ME4sMVC27ANxUfgDjbG7SLnI2vnQK FMNkdXSoLdNSulPtcwKu9x6uMxDfQtN1s7Ks2LMC2x8aA/aAMJSgY9zaawmuy6Gv iElHI0mHsRY90YbYVS1o6nXP/RtFFK4GdOgw99LjkAjgm/tEdGrbt6dzaHkCTrAa bbvDFteCeH4= =PPS8 -----END PGP SIGNATURE-----

1 0

Nznog travel
by Scott Walsh 27 Jan '05

27 Jan '05

Hi All, I've driving down to Hamilton for nznog early Wednesday morning (leaving by 6:30) and returning Friday pretty much right the conference close. If anyone would like a ride, get in touch. Thanks Scott Walsh Service Implementation Specialist Integrated Technology Services (ITS) - Passionate about Winning IBM New Zealand Limited

2 1

Nznog dinners
by Lin Nah 26 Jan '05

26 Jan '05

Hi All I am organising the dinners on Wednesday 2 February and Friday 4 February. It won't be anything as organised as the Thursday dinner! It is definitely NOT part of the conference and so a. You have to pay for your own meal, and, b. attendance isn't limited to ppl attending the meet Please read the page about the dinners and if you wish to attend, give me an indicative reply Page on dinners: http://www.nznog.org/curry_about.php Look forward to seeing you there. regards lin Auckland Thursday Night Curry http://auckland.thursdaynightcurry.com

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 26 Jan '05

26 Jan '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: route-set: AS9560:RS-ROUTES:AS9503 descr: Route set advertised to AS9560 by FX Networks - AS9503 members: 131.203.0.0/16^16-27, 161.29.0.0/16^16-27, 161.65.0.0/16^16-27, 192.88.85.0/24^24-27, 192.133.31.0/24^24-27, 202.36.226.0/24^24-27, 202.37.86.0/23^23-27, 202.49.80.0/23^23-27, 202.50.52.0/22^22-27, 202.50.196.0/22^22-27, 202.50.200.0/21^21-27, 202.50.208.0/20^20-27 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050127 source: NZRR

1 0

Slightly OT: Petition to ban someone from the 'net
by Matthew Poole 25 Jan '05

25 Jan '05

Now, I'll preface this by saying that I'm almost certain it's bovine excrement. But once you involve politicians, anything's possible. A friend of a friend (yeah, one of those stories) has raised with him the suggestion that NZ has some system to petition to have someone permanently banned from the Internet. This notional petition only requires 50 signatures. Can anyone confirm such a beast? I imagine there will be peals of laughter accompanying the reading of this e-mail, and I'll be stunned if someone says it does actually exist, but there's no harm in asking the group of people most likely to know. -- Matthew Poole "Don't use force. Get a bigger hammer."

7 7

Two low-severity BIND security advisories (BIND 8, BIND 9)
by Joe Abley 25 Jan '05

25 Jan '05

Advisories for BIND 9 and BIND 8 follow. Note that BIND 9 is only vulnerable if the DNSSEC validator is turned on (it's off by default). Begin forwarded message: > From: Mark Andrews <Mark_Andrews(a)isc.org> > Date: 26 January 2005 17:55:48 GMT+13:00 > To: bind-announce(a)isc.org > Subject: Internet Systems Consortium Security Advisory: BIND: Self > Check Failing > > > Internet Systems Consortium Security Advisory. > BIND: Self Check Failing > 18 November 2004 > > Versions affected: > BIND 9.3.0 > Severity: LOW > Exploitable: Remotely > Type: denial of service > Description: > > An incorrect assumption in the validator (authvalidated) > can result in a REQUIRE (internal consistancy) test failing > and named exiting. > > Workaround: > > Turn off dnssec validation (off by default) at > the options/view level. > > dnssec-enable no; > > Fix: > > Upgrade to BIND 9.3.1 > http://www.isc.org/sw/bind/ > > See also: > http://www.kb.cert.org/vuls/id/938617 Begin forwarded message: > From: Mark Andrews <Mark_Andrews(a)isc.org> > Date: 26 January 2005 17:54:31 GMT+13:00 > To: bind-announce(a)isc.org > Subject: Internet Systems Consortium Security Advisory: BIND: Buffer > Overrun (q_usedns). > > > Internet Systems Consortium Security Advisory. > BIND: Buffer Overrun (q_usedns). > 17 November 2004 > > Versions affected: > BIND 8.4.4 and 8.4.5 > Severity: LOW > Exploitable: Remotely > Type: denial of service > Description: > > It is possible to overrun the q_usedns array which > is used to track nameservers / addresses that have > been queried. > > Workaround: > > Disable recursion and glue fetching. > > Fix: > > Upgrade to BIND 8.4.6 > http://www.isc.org/sw/bind/ > > See also: > http://www.kb.cert.org/vuls/id/327633

2 1

RE: [nznog] Slightly OT: Petition to ban someone from the 'net
by Donald Neal 25 Jan '05

25 Jan '05

> -----Original Message----- > From: Antonio Broughton [mailto:anacarda(a)flerwin.net] > Sent: Wednesday, 26 January 2005 10:58 a.m. > To: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Slightly OT: Petition to ban someone > from the 'net > > Matthew Poole wrote: > > That's exactly what I thought. Not to mention that you could get 50 > > signatures simply by standing on the corner of Queen St and > Wellesly St at > > lunchtime. > > This person is apparently adamant (aren't they all?) that > such a thing > > exists. To the point that she's out seeking further details. > > > > ahhh there we go then... a female... 'nuff said... :) I think we can leave that thread there. - Donald Neal NZNOG Liat Administrator/Muggins Donald Neal |A prophecy is a guess that comes Technical Specialist |true. If it doesn't come true, it's NGN Operations |a metaphor. - G'Kar, Babylon 5 Integration & Services Division +----------------------------------- Alcatel NZ Ltd - Telecom's network operations manager ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

How to stop spam
by Juha Saarinen 25 Jan '05

25 Jan '05

http://www.circleid.com/article/917_0_1_0_C/ Some interesting discussion there. -- Juha

2 1

HEADS UP - Upcomming Webcasting Activity
by Richard Naylor 24 Jan '05

24 Jan '05

Next week is the 2005 Premiere Yearling Sale and the event will be webcast live. The dates are Monday 31 Jan through to Friday 4 Feb inclusive. 1000Hrs to 1700Hrs There will be test streams running on Sunday 30 Jan at various times (ie when we get it going). The event web site is www.nzb.co.nz, with the streams originating from R2.co.nz - There will be 5 bit rates (streams) so that users get a choice of stream quality, affordability, etc. The webcast will include the Select Yearling Sale (ie cheaper horses), which is the thursday and friday. At this stage, the Festival Yearling Sale (ie even cheaper horses), on Sunday and Monday 6, 7 February, is *NOT* being webcast. These events are not huge in terms of viewer numbers, but with large sums of money involved ISP Help Desks may receive a few calls from "excited" clients, needing to watch in a hurry etc. (About $60M changes hands during the event - must put my hand out....) The event web page at R2 is http://www.r2.co.nz/20050131 details of the streams etc will be available on that page. The Premiere Sale (first 3 days) is also broadcast on Trackside TV, and SkyTV. Thanks you for your assistance; I hope there aren't too many calls for you. Richard

1 0

Philip Hazel public presentation
by Craig Box 24 Jan '05

24 Jan '05

Hi everyone, As Philip Hazel is in town for the NZNOG conference, the Waikato Linux Users Group have arranged for him to present a public meeting the night before his tutorial (1st February). The talk is entitled "Exim and PCRE: How free software hijacked my life" [1]. Philip will present a non-technical talk on the history of the Exim and PCRE software projects, how they got started, where they are now, and where they are currently going. We thank the NZNOG conference for sponsoring Philip to NZ, but attendance at NZNOG isn't required for attending this talk, so I figured some people here might be interested or know people who are (especially if they were going to a different tutorial). The meeting will start at 7:30pm, in the LitB[2] building at Waikato University. All are welcome, although non members are encouraged to make a gold coin donation. Tea/coffee/biscuits/juice will be provided after the meeting. Hamilton is only a short amble from Auckland and is lovely this time of year. For those unfamiliar with the WLUG, especially people involved in Linux support or administration, you might like to check our wiki out at http://www.wlug.org.nz/. Regards, Craig Box Waikato Linux Users Group Secretary [1] For more information on Philip and the meeting, see http://www.wlug.org.nz/MeetingTopics.2005-02-01 [2] For a map, see http://www.wlug.org.nz/LitB

1 0

Virus Filtering by ISPs vs the need to receive security/abuse traffic
by Mark Foster 21 Jan '05

21 Jan '05

This is one that i've come across from time to time and often pondered myself - Obviously virus traffic can fluctuate up and down and become an annoyingly high percentage of an ISPs total mail load. Thus AV filtering which drops these messages is beneficial and can be provided as a benefit to customers, etc... So what happens to role accounts like, heaven forbid, abuse@ ? And for that matter, if the messages are dropped, is there any logged trace of the fact the message was sent in the first place? The reason I ask is that i've seen at least one ISP to whom i've reported viral infections to recently actually reject the report, because of the 'illegal file attatchment' (where the criteria used was the file extension... not even viral code within the attatchment)... So I had to manually copy/paste headers only to get my point across. The argument can be made that headers are all thats required, and that the actual payload isnt needed - but what if theres occaision where you want said payload? (To provide actual evidence of the infection, to identify what variant of the virus is infected, to help build filters ...?) Do ISPs out there regularly exclude their security team or at least build in means for one-off exceptions on an as-required basis? Do ISPs that drop viral (or suspected viral) traffic do anything to report said infection, or do they just drop the virus and pretend it never happened? (Doesn't actually fix the problem, does it...) Appreciate your thoughts. Mark.

4 5

I guess somebody needs a Beer.
by Simon Lyall 20 Jan '05

20 Jan '05

Sounds like a few people out there had a rough few days. I found this linked at the top of the paradise homepage. http://www2.paradise.net.nz/security_update/news.html Security Update Security issue - email and web hosting A small number of Paradise.net customers may have have experienced email delays and web-hosting problems on Thursday January 20th and Friday January 21st. Early Thursday morning some Paradise email was delayed. Our security people detected a security threat and disconnected a server to preserve the integrity of Paradise.net. This server will be reconnected shortly and backlogged email should be delivered this afternoon (Friday January 21). As part of our security precautions we also disconnected hardware which hosts Paradise web pages. We have been working round the clock to ensure the hardware can be reconnected with no risk to Paradise.net or Paradise users. We expect to restore web pages this evening. We know that an external party has attempted to interfere with Paradise.net. This attempt was picked up and immediate steps were taken to avoid any further impact on Paradise.net customers. Please accept our apologies for any inconvenience these very necessary steps have caused. Our approach, as always, is to take firm steps to preserve the security of Paradise.net and protect our customers. the team at Paradise.net -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

2 1

Mystery compound in beer fights cancer
by Andy Linton 20 Jan '05

20 Jan '05

Seems that research into this topic is warranted at NZNOG. http://www.newscientist.com/article.ns?id=dn6895

6 7

Notification of NZRR Database changes
by NZRR Database Notifications 20 Jan '05

20 Jan '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: - Date: Fri, 21 Jan 2005 13:15:27 +1300 (NZDT) - Msg-Id: <Pine.LNX.4.58.0501211313160.7621(a)jennings.citylink.co.nz> NZRR Database Notification Department --- OBJECT BELOW DELETED: route-set: AS9439:RS-ROUTES:AS23959 descr: Route set advertised to WIX by Catalyst-IT - AS23959 members: 202.49.159.0/24^24-29, 202.46.190.0/24^24-29, 202.20.6.0/24^24-29, 203.167.212.32/29, 203.167.247.160/29, 202.7.4.64/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: andrew(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20040120 changed: rpsl-admin(a)nzix.net 20040628 source: NZRR

1 0

RE: [nznog] National BGP routing
by Gordon Smith 19 Jan '05

19 Jan '05

> Why are inconsistent AS-paths bad? Operationally, I mean. (I > hadn't had any operational mishaps in all my years at UUNET > because of inconsistent AS-paths, so I'm wondering if > something else causes an issue now?) > > Technically there is nothing wrong with them. As you > observed, it's simply an organisation multihoming using a > private ASN - hopefully their upstreams are stripping out the > private ASN before they propogate the originated prefixes > further. (Mind you, I find it rare for two ISPs to agree > which private ASN to use for a mutual customer to multihome - > often so much easier to obtain a real one.) > > And yes, people can quite easily use public ASNs. It's simply > a case of an APNIC member obtaining an ASN so their customer > can multihome. And that can't be too hard, right? > > philip > -- > Hi Philip, You're quite right. Technically, you can still be pass traffic to the client's endpoint, although the path selected may not be optimal. What can cause issues is if you then start creating routing policies on your route reflectors based on AS-path, especially if you don't have a direct peer with both of the providers that are carrying that customer's traffic. With multiple peering points, you can end up backhauling the traffic over your own links because the routing decisions passed via your IGP are no longer necessarily optimal e.g. I may wish to pass a 10Mbit stream from a Wellington customer to somewhere else in Wellington, via another provider, but the route reflectors see that destination as having a shorter AS path via Auckland. We don't have a destination AS that a metric can be applied to. We can of course apply different costs to the WAN links (and should have done), but the fine-grained control of traffic isn't achievable because the router can't be given much to go on. Policy routing and tagging is an option, but relies on the destination site, who is not necessarily a customer of ours, informing us of changes in their topology so our rules can be updated. APNIC have always been very good when it comes to getting ASN's; I've always found the justification of additional address space to be an ordeal though :-) In my opinion, it would be far more preferable if APNIC allocated an ASN when a customer was given an independent address assignment. After all, the reason that most want independantly allocated space is to multihome... Cheers, Gordon

3 2

National BGP routing
by Gordon Smith 18 Jan '05

18 Jan '05

I'm sure I can't be the only one that notices the BGP inconsistancies in their route tables.... Seeing the latest NZRR update prompted me to check the BGP tables again... We do not and will not accept route advertisements containing private AS numbers from our peers. The reason we don't is the same reason we don't route RFC1918 space externally... If a customer has their own address space and wants to multi-home, they should also have their own AS. Advertising up private AS numbers that should really remain within the network isn't a solution. Inconsistant AS-paths are bad enough, without creating additional problems... At least we're only seeing 5 class C's being advertised at the APE with inconsistant AS-paths at the moment. Perhaps BGP routing could be a topic for discussion at NZNOG 2005? Cheers, Gordon

3 2

Notification of NZRR Database changes
by NZRR Database Notifications 18 Jan '05

18 Jan '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: - Date: Wed, 19 Jan 2005 13:40:23 +1300 (NZDT) - Msg-Id: <Pine.LNX.4.58.0501191339480.4620(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24226 descr: Route set advertised to AS9439 by Catalyst IT - AS24226 members: 202.46.190.0/24^24-29, 202.49.159.0/24^24-29, 202.20.6.0/24^24-29, 202.36.119.0/24^24-29, 210.48.47.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.zanetti(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041027 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24226 descr: advertised to AS9439 by Catalyst IT - AS24226 members: 202.20.6.0/24^24-29, 202.36.119.0/24^24-29, 202.46.190.0/24^24-29, 202.49.159.0/24^24-29, 202.78.240.0/21^21-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: netadmin(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050119 source: NZRR --- PREVIOUS OBJECT: route: 202.20.6.0/24 descr: Route for Catalyst IT - AS24226 origin: AS24226 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.zanetti(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041027 source: NZRR REPLACED BY: route: 202.20.6.0/24 descr: Route for Catalyst IT - AS24226 origin: AS24226 notify: rpsl-admin(a)nzix.net notify: netadmin(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050119 source: NZRR --- PREVIOUS OBJECT: route: 202.36.119.0/24 descr: Route for Catalyst IT - AS24226 origin: AS24226 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.zanetti(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041027 source: NZRR REPLACED BY: route: 202.36.119.0/24 descr: Route for Catalyst IT - AS24226 origin: AS24226 notify: rpsl-admin(a)nzix.net notify: netadmin(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050119 source: NZRR --- PREVIOUS OBJECT: route: 202.46.190.0/24 descr: Route for Catalyst IT - AS24226 origin: AS24226 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.zanetti(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041027 source: NZRR REPLACED BY: route: 202.46.190.0/24 descr: Route for Catalyst IT - AS24226 origin: AS24226 notify: rpsl-admin(a)nzix.net notify: netadmin(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050119 source: NZRR --- PREVIOUS OBJECT: route: 202.49.159.0/24 descr: Route for Catalyst IT - AS24226 origin: AS24226 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.zanetti(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041027 source: NZRR REPLACED BY: route: 202.49.159.0/24 descr: Route for Catalyst IT - AS24226 origin: AS24226 notify: rpsl-admin(a)nzix.net notify: netadmin(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050119 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 18 Jan '05

18 Jan '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: rt(a)citylink.co.nz - Subject: [CityLink #1656] New Object for inclusion into the NZRR Route Registry (fwd) - Date: Wed, 19 Jan 2005 12:25:41 +1300 (NZDT) - Msg-Id: <Pine.LNX.4.58.0501191224520.4620(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS64597 descr: advertised to AS9439 by Araneo - AS64597 members: 202.53.189.128/29, 210.48.101.64/27^27-29, 210.48.101.112/29, 210.48.109.224/27^27-29, 202.174.161.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: jon.brewer(a)araneo.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041209 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS64597 descr: advertised to AS9439 by Araneo - AS64597 members: 202.53.189.128/29, 210.48.101.64/27^27-29, 210.48.101.112/28^28-29, 210.48.109.224/27^27-29, 202.174.161.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: jon.brewer(a)araneo.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041209 source: NZRR

1 0

Xtra in the SpamHaus SBL
by Peter Macaulay 17 Jan '05

17 Jan '05

I don't know if anyone from Xtra reads this list - trying to get through to anyone who has even an iota of understanding about this type of thing by phone appears to be almost impossible. Xtra has managed to get itself into the SBL realtime blocklist - http://www.spamhaus.org/sbl/sbl.lasso?query=SBL22816 It appears that someone objected to some promotional material sent out by the "House of Travel" travel agent group and has ended up blocking them; this means that one of Xtra's MX (mail exchanger) servers is now blocked by anyone who uses the SBL as a spam filter. If anyone knows anyone at Xtra who can do something about this, could you pass this message on? It's probably inconveniencing a reasonably large number of people. The NZNOG list would be a good place to post this too, I suppose, but I'm not a subscriber. Cheers! -- David -- ------------------ David Harris -+- Pegasus Mail ---------------------- Box 5451, Dunedin, New Zealand | e-mail: David.Harris(a)pmail.gen.nz Phone: +64 3 453-6880 | Fax: +64 3 453-6612 Phrase found in a Soviet Russian-English language guide: "Flying in the TU-114 I felt myself excellently." _______________________________________________ members-discuss mailing list members-discuss(a)internetnz.net.nz http://listserver.internetnz.net.nz/mailman/listinfo/members-discuss -- *Peter Macaulay* /Executive Director/ *InternetNZ */Direct +64 4 495 2113 Skype petermacaulay Mobile +64 21 488 485 /

6 5

(OT) Getting to NZNOG '05
by Jeremy Naylor 16 Jan '05

16 Jan '05

Hey guys, For people who want to know about how to get to the NZNOG '05 conference, you might want to catch the Overlander train that Tranz Scenic run. There's 2 every day (1 from Wellington - Auckland & 1 from Auckland - Wellington). You can get more info about these trains if you want to on Tranz Scenic's web site, at: http://www.tranzscenic.co.nz/services/overlander.aspx Hope this helps. Thanks, -- Jeremy Naylor p: +64 21 374 689 e: jeremy.naylor(a)r2.co.nz w: http://www.r2.co.nz/~jeremy w: http://e-living.wellington.net.nz -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.298 / Virus Database: 265.6.7 - Release Date: 30/12/2004

3 2

RE: [nznog] Alternative DSL?
by Philip D'Ath 16 Jan '05

16 Jan '05

VDSL switches are a good middle ground between Ethernet switches and DSLAMs ... _____ From: Richards, David [mailto:David.Richards(a)ccc.govt.nz] Sent: Monday, 17 January 2005 5:34 p.m. To: jon.brewer(a)araneo.net.nz Cc: nznog Subject: RE: [nznog] Alternative DSL? Any reason why you aren't thinking Ethernet? - Provided the distances are shot. An Ethernet switch is a lot cheaper than a DSLAM. -- David Richards, Senior Network Engineer IT Services Unit - 'Enabling people through technology' Christchurch City Council, New Zealand Phone: +64 3 941 8689 | Fax: +64 3 941 8989 | Mobile: +64 27 242 7689 email: David.Richards(a)ccc.govt.nz

1 0

OT - Linux Systems Administrator
by Edward Yardley 16 Jan '05

16 Jan '05

**OFF TOPIC** Hi All, Any Linux Systems Administrators looking for work in Wellington please contact me off list or call me on (04) 499-1276. This is a new role, will involve establishing security (intrusion detection), Red Hat environment. Kind Regards Edward. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

6 7

Re: [nznog] 02.net
by Lamar - 02.Net Internet Services 16 Jan '05

16 Jan '05

As Neil pointed out, 02.Net has not gone bust and is still trading. Due to the recent IPNET issue with Telecom, we decided for the money actually made on dialup services and the level of support required that we would no longer continue providing this service. As for Craig's statement about "unable to sell any services.." this is incorrect our Dialup (and all other services) are still working until customers swap over to Orcon (who are contacting customers with our permission). In short, we're getting out of dialup internet because there is no money in continuing these types of services. We are focusing more on corporate and higher speed products, with a lesser level of support required. So, you will still see us around. Any questions or queries can be sent directly through to myself. -- Regards, Lamar (02.Net's Director). >>From the 02.net.nz website... > >>If you are an Internet customer of 02.Net, due to circumstances > outside of our >>control, 02.Net is unable to continue supply of Dialup services at > this time. We >>are working to get this resolved. However, in the meantime Auckland > based ISP >>Orcon Internet Limited have taken over our Dialup customer database. >> >>Orcon will be in contact with Internet customers to advise a change in > dialup >>numbers. However, the statements that Orcon's helpdesk are giving out > of 02.Net >>Internet Services Limited going bust are incorrect. We are trying to > contact the >>Orcon helpdesk manager to get this resolved. >> >>If you have any questions relating to this or any other matters, > please feel free >>to call us on 0800 4 02NET (0800 4 02638) > > Craig - Sure it may be the case, but they have stated specifically on > their web-page that they haven't gone bust. Surely it's not worth making > such statements unless you actually know what's happening? > > Cheers - Neil Gardner. > > > >>>> "Craig Spiers" <craig(a)concept.net.nz> 17/01/2005 1:49:46 p.m. >>> > Maybe of interest to some people on the list.. > > > > 02.net.nz appears to have gone bust - well not gone bust as such, but > is > unable to sell any services.. > > > > > > > NOTICE: This message contains privileged and confidential > information intended only for the use of the addressee > named above. If you are not the intended recipient of > this message you are hereby notified that you must not > disseminate, copy or take any action in reliance on it. > If you have received this message in error please > notify Allied Telesyn Research Ltd immediately. > Any views expressed in this message are those of the > individual sender, except where the sender has the > authority to issue and specifically states them to > be the views of Allied Telesyn Research. > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

Alternative DSL?
by Jonathan Brewer 16 Jan '05

16 Jan '05

Questions for NZNOG: In a new apartment building with CAT5 run from each unit to a central closet, installed by the developers, who owns the CAT5? If the CAT5 is the property of the building body corporate, is it permissable for an alternative network operator to install their own mini-DSLAM, and provide alternative DSL to building occupants? If this unit is not using Telecom lines, does it need to be Telepermit approved? If competitive DSL is run over spare pairs (not in use by TelecomNZ), will there be any implications for residents who subscribe to JetStream? Am I going to end up in pain for asking these questions? Cheers, Jon

3 2

RE: [nznog] Alternative DSL?
by Regan Murphy 16 Jan '05

16 Jan '05

I read a contract for a development in Auckland recently. There was a clause regarding services that stated that the purchaser must purchase electricity/gas/water from the company that the developers specify. There was also a clause that made it compulsory for future buyers to agree to this too. It may or may not have extended this to other services - I'm not sure - this development also had cat-5 cabled throughout and mentioned broadband internet access as an available service. This clause, among others, put me off investing in the development. I'm pretty sure that to answer your question you would need to check the contracts signed by the owners and check the body corporate rules - I doubt you will get a single situation that covers all developments. You will probably need to negotiate with the manager/body corporates at each location. -- Regan ________________________________ From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] Sent: Monday, 17 January 2005 3:28 p.m. To: 'nznog' Subject: [nznog] Alternative DSL? Questions for NZNOG: In a new apartment building with CAT5 run from each unit to a central closet, installed by the developers, who owns the CAT5? If the CAT5 is the property of the building body corporate, is it permissable for an alternative network operator to install their own mini-DSLAM, and provide alternative DSL to building occupants? If this unit is not using Telecom lines, does it need to be Telepermit approved? If competitive DSL is run over spare pairs (not in use by TelecomNZ), will there be any implications for residents who subscribe to JetStream? Am I going to end up in pain for asking these questions? Cheers, Jon ##################################################################################### This e-mail message has been scanned for Viruses and Content and cleared by MailMarshal #####################################################################################

1 0

RE: [nznog] Alternative DSL?
by Kristy Edwards 16 Jan '05

16 Jan '05

-----Original Message----- From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] Sent: Monday, 17 January 2005 15:28 To: 'nznog' Subject: [nznog] Alternative DSL? Questions for NZNOG: In a new apartment building with CAT5 run from each unit to a central closet, installed by the developers, who owns the CAT5? I believe this would be the owner of the building, or the body corporate (which consists of the tenants of the apartments of the building). If the CAT5 is the property of the building body corporate, is it permissable for an alternative network operator to install their own mini-DSLAM, and provide alternative DSL to building occupants? Yes this is permissable. Obviously the building owner / manager would need to approve this. But if the building owner is doing an 'under-the-table' deal with Telecom and stops other providers providing their alternative DSL to building occupants, this can be considered anti-competitive behaviour and Telecom could be taken to the commerce commission for this. If this unit is not using Telecom lines, does it need to be Telepermit approved? No, as it is not using telecom lines! They would need to have their own lines into the building, however. If competitive DSL is run over spare pairs (not in use by TelecomNZ), will there be any implications for residents who subscribe to JetStream? Apart from interference, I would not believe so. Am I going to end up in pain for asking these questions? Cheers, Jon

1 0

Re: [nznog] 02.net
by neil gardner 16 Jan '05

16 Jan '05

>From the 02.net.nz website... >If you are an Internet customer of 02.Net, due to circumstances outside of our >control, 02.Net is unable to continue supply of Dialup services at this time. We >are working to get this resolved. However, in the meantime Auckland based ISP >Orcon Internet Limited have taken over our Dialup customer database. > >Orcon will be in contact with Internet customers to advise a change in dialup >numbers. However, the statements that Orcon's helpdesk are giving out of 02.Net >Internet Services Limited going bust are incorrect. We are trying to contact the >Orcon helpdesk manager to get this resolved. > >If you have any questions relating to this or any other matters, please feel free >to call us on 0800 4 02NET (0800 4 02638) Craig - Sure it may be the case, but they have stated specifically on their web-page that they haven't gone bust. Surely it's not worth making such statements unless you actually know what's happening? Cheers - Neil Gardner. >>> "Craig Spiers" <craig(a)concept.net.nz> 17/01/2005 1:49:46 p.m. >>> Maybe of interest to some people on the list.. 02.net.nz appears to have gone bust - well not gone bust as such, but is unable to sell any services.. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

1 0

02.net
by Craig Spiers 16 Jan '05

16 Jan '05

Maybe of interest to some people on the list.. 02.net.nz appears to have gone bust - well not gone bust as such, but is unable to sell any services..

1 0

RE: [nznog] Alternative DSL?
by Richards, David 15 Jan '05

15 Jan '05

Any reason why you aren't thinking Ethernet? - Provided the distances are shot. An Ethernet switch is a lot cheaper than a DSLAM. -- David Richards, Senior Network Engineer IT Services Unit - 'Enabling people through technology' Christchurch City Council, New Zealand Phone: +64 3 941 8689 | Fax: +64 3 941 8989 | Mobile: +64 27 242 7689 email: David.Richards(a)ccc.govt.nz ________________________________ From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] Sent: Monday, 17 January 2005 15:28 To: 'nznog' Subject: [nznog] Alternative DSL? Questions for NZNOG: In a new apartment building with CAT5 run from each unit to a central closet, installed by the developers, who owns the CAT5? If the CAT5 is the property of the building body corporate, is it permissable for an alternative network operator to install their own mini-DSLAM, and provide alternative DSL to building occupants? If this unit is not using Telecom lines, does it need to be Telepermit approved? If competitive DSL is run over spare pairs (not in use by TelecomNZ), will there be any implications for residents who subscribe to JetStream? Am I going to end up in pain for asking these questions? Cheers, Jon ********************************************************************** This electronic email and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. The views expressed in this message are those of the individual sender and may not necessarily reflect the views of the Christchurch City Council. If you are not the correct recipient of this email please advise the sender and delete. Christchurch City Council http://www.ccc.govt.nz **********************************************************************

3 2

Re: [nznog] RE: Telecom Outage
by blair.robson＠ihug.co.nz 14 Jan '05

14 Jan '05

Actually other ISPs look like they were effected, Ihug's MOTD suggests this, SNAP had issues too. IPNET or lower level outage.... > > I am interested to know how many other ISPs are effected > by this. > > None. All ISP's using IPNET would be effected (so prolly most of em) > > > Must be a major at Telecoms end. > > What makes you say that ? actually, dont bother answering > this question. You are incorrect in your assumption. > > > Seems to have started at around 10am yesterday! > > Then no doubt they will be working on it, maybe you could > ring them and ask for updates instead of posting this > stuff to the list. I think he probably posted to the list due to a lack of notification. Looks like it has been resolved now anyway. -b. :)

1 0

RE: Telecom Outage
by James Butler 14 Jan '05

14 Jan '05

We run at T.Com DIA link here - from my end it appears that the primary DNS server (202.27.184.3) is down - I can get service only using their secondary James Butler IT Admin NewJobZ _________________________________________________________________ Check out news, entertainment and more @ http://xtra.co.nz/broadband

5 4

Re: [nznog] IPNET down?.........
by blair.robson＠ihug.co.nz 14 Jan '05

14 Jan '05

I would say that IPNET is down or something along those lines.. b. :) > > > > Hi Everyone, > Does anyone know of a fault with Telecoms IP network at > the moment if so any idea of a time it will be solved. > > If anyone has any info please reply. > > Regards > Adam > Dream Net > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

2 1

Telecom outage?
by Dream Net Sales 14 Jan '05

14 Jan '05

Hi Everyone, Does anyone know of a fault with Telecoms IP network at the moment if so any idea of a time it will be solved. If anyone has any info please reply. Regards Adam Dream Net

4 4

[ISC-Ops #6939] routine maintenance for F-Root in Auckland
by Joe Abley 13 Jan '05

13 Jan '05

I am doing some router upgrades in Auckland which will likely cause some BGP sessions to reset. There is no expected impact on local F-root service. If anybody doesn't currently peer directly with the F-root node across the APE, please feel free to send your details to peering(a)isc.org and we'll get you set up.

2 2

NZNOG 2005 Draft Programme / Registration
by Donald Neal 12 Jan '05

12 Jan '05

A programme for next month's conference can now be read at the conference web site http://www.nznog.org/ . Changes to the programme remain possible. If you're coming, you need to register. This includes speakers, though speakers receive concessional pricing. Any speaker seeking a change to the time slot they have been allocated - whether a different length or a move to a different time - should contact me off list, preferably very soon. - Donald Neal Donald Neal |A prophecy is a guess that comes Technical Specialist |true. If it doesn't come true, it's NGN Operations |a metaphor. - G'Kar, Babylon 5 Integration & Services Division +----------------------------------- Alcatel NZ Ltd - Telecom's network operations manager ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

NZNOG - Payments - Late Fees
by Richard Nelson 12 Jan '05

12 Jan '05

Late fees will be charged for NZNOG registrants who have not paid, or arranged payments by Monday. This is an extension by one working day on the announced time. This means that if you have registered and chose the "Defer payment option" you must have arranged your method of payment by Monday afternoon and received confirmation from us. Cheque payments must reach us before the conference. Late fees will be 25% of the conference registration, i.e. the new fees will be: Conference $175 Student Rate $112.50 Tutorial Day $37.50 There are no late fees on accomodation or dinner tickets. Richard Nelson WAND Network Research

1 0

NZNOG - Programme
by Richard Nelson 12 Jan '05

12 Jan '05

The Draft Programme for this years NZNOG Conference is now available at http://www.nznog.org/programme.php Please note that Vijay Gill who was previously announced as a speaker is now not going to be there. Registrations are filling fast. There are no rooms with network ports left on either Wednesday or Thursday nights and there are only a few places left for some of the tutorials. Richard Nelson WAND Network Research

1 0

HEADS UP - Webcast activity - Tsunami Memorial Service
by Richard Naylor 12 Jan '05

12 Jan '05

On Sunday 16 January RadioNZ will be broadcasting an inter-faith memorial service live from Auckland. They will also be streaming it on the Internet via R2.co.nz. The stream will be on internationally routed numbers and not restricted. ISPs may notice some traffic changes and Help Desks may receive more calls relating to web based media. The event will be time limited to 1:15pm to 2:45pm and include one minutes silence at 1:59pm (the webcast will continue altho it will be silent) The RadioNZ web page with details of the event is at http://www.radionz.co.nz/tsunami/ Thanks for your co-operation Rich

1 0

calling wellington internet historians
by Dean Pemberton 12 Jan '05

12 Jan '05

Joe Wrote: [Oh, I think I still owe Dean Pemberton a beer for loaning us a power cable during that install that we never gave back.] Heh - yeah I remember that. I'll collect next month. Those stinky cisco boxes with their special power cables. From memory I might have stolen it from a jug or something we had lying around. More on topic though. I can remember a BOF session at Uniforum 1998 in which all the ISP's sat down and discussed peering. I seem to remember that it was some time after that that things started. That would put the timeframe for the idea at 21-23May 1998. The question of who was first is a hard one. WIX (the route servers) didn't start until later. But National Library peering with Clear would have been one of the first, and that was around July 1998 IIRC. The date on the AS number I applied for supports this kind of time changed: hostmaster(a)apnic.net 19980724 I think Actrix was doing something about that time too. And maybe one of the isp's starting with "I". Maybe it will become clearer over beer. See you all next month. Dean

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 12 Jan '05

12 Jan '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: aut-num: AS9483 as-name: NZRR-AS9483 descr: Flatnet descr: WIX peering at '202.7.0.119' descr: see Citylink RT job #1715 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS9483 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: routing(a)flatnet.gen.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050113 source: NZRR --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS9483 descr: Route set advertised to AS9439 by Flatnet - AS9483 members: 203.97.150.0/24^24-29, 202.0.32.48/29, 202.0.32.88/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: routing(a)flatnet.gen.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050113 source: NZRR

1 0

APNIC's Training in conjunction with NZNOG'05 Conference
by APNIC Training 11 Jan '05

11 Jan '05

Dear NZNOG Members, APNIC is pleased to invite you to attend APNIC's Training in conjunction with the New Zealand Network Operators Group Conference 2005 as follows: "APNIC Internet Resource Management Essentials" Date: 02 February 2005 Time: Please refer to http://www.nznog.org/index.php. Venue: University of Waikato, Knighton Road, Hamilton, New Zealand Tel: +64 7 838 4466 Who should attend? ------------------ The target audience is technical personnel who are responsible for allocating and/or assigning IP addresses. For example, hostmaster employees of network information centers or ISPs, network planners, designers, and network engineers. Good understanding of networking fundamentals is assumed and upon completion a certificate of participation will be provided. Course Fee: ----------- For registration and other details at http://www.nznog.org/registration.php. A full abstract of the training course is also available at http://www.nznog.org/abstract/irme.pdf . For more information, please visit to http://www.nznog.org/index.php. Best regards, The APNIC Training Team ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ APNIC Training <training(a)apnic.net> Asia Pacific Network Information Centre Tel: +61-7-38583100 http://www.apnic.net Fax: +61-7-38583199 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ See you at APNIC 19 18 - 25 February 2005 Kyoto International Conference Hall (KICH) Kyoto, Japan http://www.apnic.net/meetings/19/index.html ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0