- NZNOG - lists.nznog.org

RE: [nznog] Peering.
by Craig Spiers 24 May '04

24 May '04

Let's call it.. CollisionNet :) -----Original Message----- From: Drew Broadley [mailto:drew(a)corrupt.co.nz] Sent: Tuesday, 25 May 2004 1:51 p.m. To: Brian Gibbons Cc: Craig Spiers; 'Juha Saarinen'; 'Jeremy Brooking'; 'nznog' Subject: Re: [nznog] Peering. Brian Gibbons wrote: >>From: "Craig Spiers" <craig(a)concept.net.nz> If telstraclear, was to >>stop peering at APE, and remove 'ports and connections to there' >>wouldn't that limit them to only having 'domestic' data inside their >>own network? >> >> > >This looks more like an attempt to change NZ from a Peering model to a >Tiered model, perhaps Telstra think they have the best backbone in NZ >and might be able to monopolise on it :) > >I am not completely familiar with the WIX/APE Topology, is there a >dedicated circuit between the two to carry domestic traffic? > >If not, is it possible that domestic traffic could traverse both APE >and WIX via TCL peering circuits to each? > We could all possibly grab every redundant 10mbit hub in NZ and connect them down SH1 through the north island and call it CountryLink ? Add up all those offcuts of Cat5 plus these redundant hubs, we could start our own national ISP with VoIP ;)

2 1

Re: [nznog] Peering.
by Jeremy Brooking 24 May '04

24 May '04

Craig Spiers wrote: > Let's call it.. CollisionNet :) > For SH1... Thats rather appropriate :)

1 0

Xtra de-peering in Wellington.
by Simon Blake 20 May '04

20 May '04

Just an FYI, For those that may be wondering why they're getting increased load on links in and out of APE, Xtra withdrew all routes and dropped their BGP session to WIX at about 11am this morning. This left a few parties delivering content to Xtra customers high and dry, and does little for the stability of the Interweb in NZ, which is a shame. Hopefully, the folks at TCNZ will see the light shortly, and turn it back on. Cheers Si

2 3

Port filtering by NZ ISPs?
by Neil Gardner 19 May '04

19 May '04

Hi guys - I'm trying to conduct some penetration testing on some networking equipment and I was finding that some ports were being filtered when someone else at the company was using an **** dialup account to try some things. A call to the **** helpdesk yielded exactly the results I expected so I was hoping someone here could give a more intelligent answer. I'd really like to find out what various ISPs are filtering from dialup or other pools - please email me directly if you have anything to offer. I am happy to sign and fax back NDAs if required and the info would be used for nothing but checking against our own test results or selecting ISPs for use during testing. Cheers - Neil G

1 0

Spam Legislation Workshop
by David Farrar 18 May '04

18 May '04

Hi all, You may have seen that the Government has released a discussion document on anti-spam legislation for New Zealand. As part of the consultation on any legislation, InternetNZ has arranged with the Government for an industry workshop on Thursday 24 June in Wellington for interested members of the Internet, business, legal and educational communities. The aim is to help make any legislation as effective and useful as possible. A formal invite has gone out snail mail to ISPs and others. I thought I'd mention it here also, so people can pass it on informally to anyone appropriate within their organisation etc. The draft programme for the workshop, a registration form, and a link to the Government's discussion document are all on InternetNZ's website at www.internetnz.net.nz. Cheers DPF -- David Farrar e-mail: david(a)farrar.com blog: http://www.kiwiblog.co.nz msn: dpf666(a)hotmail.com icq: 29964527

3 4

As expected, Swain nixed unbundling
by Juha Saarinen 18 May '04

18 May '04

http://www.nzherald.co.nz/latestnewsstory.cfm?storyID=3567355 Forgot to buy Telecom shares... arggh. -- Juha

1 0

DalNet nodes in NZ?
by Simon Blake 18 May '04

18 May '04

The folks from Dalnet are pestering Citylink to provide free hosting for a server they'll provide. I couldn't find any list of nodes on dalnet, so I have no feeling for how many there may already be in NZ. So I guess my question is, are these folks legit, is it a worthwhile thing to be associated with, would anybody use it if we did set it up? I have vague recollections of IRC nodes in NZ attracting significant DOS traffic in the past - does that sort of thing still happen? Shuold I run screaming from the room? Cheers Si

2 2

Lucent TNT Access Servers...
by Seeby Woodhouse 16 May '04

16 May '04

Apologies for the 'for sale' notice, but this really does seem like the most obvious forum that would have people interested in this sort of gear. Orcon currently has 6 x 480 Port Lucent TNT Access servers for sale, and we'll take the best offer over $12,000 + GST each (that's just $25 per port). You can still buy these new, and I have been told that current US$ list price is around US$181,000 Below is the current US$ list price of the components - each chassis has 10 x 48 port cards, 2 x E1 cards, and 1 of everything else. TNT-2DC-H 408078095 TNT Base, NCM3L20DRB $17,000.00 TNTV-SL-ADI-C 300076684 48-port MultiDSP NCD3BB0BAA $13,000.00 TNT-SL-CE1-C 300268471 Single-slot module (8) E1 interfaces IPI1GBABAA $4,000.00 TNT-SL-E100ND-C 300304193 4-Port, 10/100 Port Voice Ethernet Module IPI69D0CAA $10,000.00 TNT-OSLIC 300351004 Base TAOS RTU software license for the MAX TNT N/A $10,000.00 TNT-SO-R2 300071495 R2 tone-based support for most E1 countries. $5,000.00 TNT-SP-DRAM-32 407938745 32MB JEDEC DRAM Memory module. $1,000.00 Note: - The chassis in their current configuration won't do V.92. - The chassis also have the voice hash codes so that you can provide VOIP services on PRIs etc. Cheers Seeby Woodhouse Managing Director Orcon Internet Limited - www.orcon.net.nz Mob +64 (0) 21 366 666 / Wk +64 (9) 444 4414 ext 700

1 0

possible jeopardy for F root server in Auckland tomorrow morning
by Joe Abley 16 May '04

16 May '04

I hear there will be power testing on all levels in the Sky Tower tomorrow (Tuesday) between 0630 and 0730 local time, and "short breaks" are to be expected on all levels. The F root node in Auckland lives on Level 48. The power to the F-root node is supplied through UPSes, but I do not know the list time those UPSes were called upon to supply service. Accordingly, it is at least possible that multiple components of the F-root node will reboot, in which case peers of ISC in Auckland may see transient re-routing towards some other F-root node (Brisbane, Hong Kong, Palo Alto or San Francisco, probably). If there's any persistent issue outside that window, please feel free to send mail to noc(a)isc.org as usual. If you're at the APE and not peering with us, and you'd like to, send mail to peering(a)isc.org. Joe

1 1

NTP sources within NZ
by Russell Fulton 05 May '04

05 May '04

Hi, we have discovered that most of the off campus sources we had for our NTP service are no longer there. Anybody willing to let us connect to their servers? -- Russell Fulton /~\ The ASCII Network Security Officer \ / Ribbon Campaign The University of Auckland X Against HTML New Zealand / \ Email!

9 8

RE: [nznog] Hikoi webcast - maybe
by Richard Naylor 04 May '04

04 May '04

At 12:16 p.m. 5/05/2004 +1200, David Robb wrote: >On Wed, 5 May 2004, Jonathan Brewer wrote: > > > Hey Richard, > > > > Nice webcast, but where's the 8mbps HDTV stream!? > >Or at least something a bit higher bandwidth than 128kbit. Sorry - the HDTV stuff is about 12 months away due to a CPU capacity crisis - we need the 64bitters and appropriate software. I chose 128k as the best single stream to do that would be usable by the max people. I was using my laptop so cpu was limited. WHile I could have done a higher bit rate, the audience would have been restricted. A number of contacts reported firewall blocks in place and so some resorted to dial-up !! I use protocol roll over to try and get around firewalls, so I'm supporting mms and rtsp. So sorry bout the 128, but it did get a good audience. A link to the stream was carried by Stuff.co.nz and we had a simultaneous peak of 92 viewers. The log files shows something like 1550 connections looking at VideoNow. I didn't have individual logging turned on, so its mixed with other traffic, but VideoNow was saturating the log file, so about 1500 odd connex. The next stage is to get the gear a little more portable (like a backpack, like our other portable units) and also get multi-bit rate. And yes, we are available for the beach volley-ball championship, but would insist on full coverage of the event, including all the lead up trials etc. Do I have any volunteers for the camera crew ? rich

2 1

Re: [nznog] NTP sources within NZ
by Ewen McNeill 04 May '04

04 May '04

In message <2370.202.27.185.71.1083729519.squirrel(a)www.crypt.gen.nz>, "Kerry Tho mpson" writes: >Simon Blake said: >> Setting up a GPS NTP source has been on the list of things I've wanted >> to get done for a while now - I've got several rooftop mounted PC's that >> have stunning views of the heavens. [....] > >Dick Smiths have a usb GPS receiver ( http://www.dse.co.nz & search for >XH6831 ) which uses the standard NMEA protocol over what seems to be an >emulated serial port. IIRC that GPS receiver doesn't do PPS (pulse-per-second). Without pulse per second you can't get NTP-accurate time out of a GPS -- there's just too much jitter in the timing reports. (NMEA output is fairly slow (9600bps?) and in many GPSes they don't even treat the NMEA output as a high priority, so it's only "near the second" not on starting on the second.) >From what I remember most GPSes under about $400-$500 won't do PPS, and some of the more expensive ones don't either. I think there are some models around the $500-$600 range which will do PPS, but I don't recall which ones off hand. Ewen

1 0

Re: [nznog] NTP sources within NZ
by John Rumsey 04 May '04

04 May '04

mark.harris(a)ssc.govt.nz wrote: > Russell Fulton wrote: > >> we have discovered that most of the off campus sources we had for our >> NTP service are no longer there. Anybody willing to let us connect >> to their servers? > > > > Industrial Research's Measurement Standards Laboratory (MSL)is now > providing a publicly accessible primary Network Time Protocol (NTP) > server for the synchronisation of computer time for connections within > New Zealand. More details are available on their website: http://www.irl.cri.nz/msl/services/time/ntpServer.html cheers, John Rumsey

1 0

Hikoi webcast - maybe
by Richard Naylor 04 May '04

04 May '04

a "maybe" heads up. We have been developing a webcasting facility known as VideoNow. It is webcasting with the encoder over CafeNet, so you can roam around town. Last friday we drove the van around, which seems to have amused a few folks. I'll put some footage up later for a laugh. Tomorrow the Hokoi will parade/march thru town. There is a strong possibility that we will have a camera on Lambton Quay to catch the action. The VideoNow URL is http://www.r2.co.nz/20040414/ If the camera is live it will connect, if not you get a message. Keep trying - the stream will kick in as we get near an access point. The "maybe" part is how much sleep we get tonight. Camera batteries are already charging........ rich

9 9

RE: [nznog] NTP sources within NZ
by mark.harris＠ssc.govt.nz 04 May '04

04 May '04

Russell Fulton wrote: > we have discovered that most of the off campus sources > we had for our NTP service are no longer there. Anybody > willing to let us connect to their servers? Industrial Research's Measurement Standards Laboratory (MSL)is now providing a publicly accessible primary Network Time Protocol (NTP) server for the synchronisation of computer time for connections within New Zealand. The Measurement Standards Laboratory (MSL) is the official disseminator of the time standard, UTC(MSL), for New Zealand. (Most people will be familiar with their time service disseminated as a series of "pips" broadcast by Radio New Zealand on the National Radio station. ) MSL is now providing a Network Time Protocol (NTP) stratum 1 server for connections within New Zealand. The server is referenced to UTC(MSL) by direct connection of a pulse per second signal from the master caesium atomic clock which is part of the New Zealand time standard. The time in the server is typically stable to around 1 microsecond with respect to the time in the caesium clock. Using the server The server is a publicly available server open to all connections from within NZ. Its address is msltime.irl.cri.nz (Note: this server only services NTP and 'Simple Network Time Protocol' (SNTP) requests. It does not respond to 'datetime' requests. Government agencies however, should register their use of the server with MSL by sending the IP address of their server (a static address is required) and a contact email address to time(a)irl.cri.nz . The reason for this requirement is that some servers overseas have been flooded with requests from devices such as routers and access to the server may have to be restricted at some time in the future. Agencies should limit their requests to come from at most three servers and then any additional server should connect to what will be the agency's three stratum 2 clocks. The best and most accurate way of using this service is to install the official NTP distribution from www.ntp.org. Versions are available for most versions of Unix. Windows versions are available for Windows NT, 2000 and XP. Please note that this message has been liberally pillaged from a fact sheet on the E-government website (http://www.e.govt.nz/programme/docs/Time.pdf) and further details are contained there (sorry, pdf only at present. I'm working on getting more accessible pages up there). Regards Mark Harris Manager Moderation and Web Standards State Services Commission PO Box 329, Wellington, NZ Tel: 64 4 495 2844 Email mailto:web.guidelines(a)ssc.govt.nz -- Caution: The content of this email is the property of the State Services Commission. If you have received this message in error please notify the sender immediately and delete.

1 0

Heads Up - Webcast tomorrow - TUESDAY
by Richard Naylor 03 May '04

03 May '04

We have a webcast tomorrow - Tuesday 4 May 2004 NZ Wireless Data Forum conference at Te Papa. It appears that the organisers haven't put any URLS to the streams anywhere public, so I don't expect any traffic issues. But as usual Help Desks may get questions from users etc. Or you may have a few minutes free and want to see whats new in wireless stuff yourselves. http://www.r2.co.nz/20040504 If theres enough interest, we can use VideoNow (a camera and wireless laptop) to do a tour of the exhibition area to show what toys were on display. Need a time that suits. Theres no lunch break (S**T !!! when will we eat ? We're starting at 6:30am!) and the presentations go thru til 1630. May get someone else to drive that bit videonow is at http://www.r2.co.nz/20040414 rich

3 5

Sasser Virus Information
by Nick MacKechnie (thenet) 03 May '04

03 May '04

Hi All, Sasser seems to be alive and well, here is some information that you may find useful. -- Based on the information at the Symantec link: - Blocking destination tcp ports 5554 and 9996 at the routers will stop the payload being transferred across network segments. (5554 appears to be the content transfer channel (FTP), 9996 is the remote shell used to run commands on a host). - Deploying an IPSec policy with filter actions for Block on port 5554 and 9996 can be used to block the transfer of the payload to or from individual hosts. Blocking inbound 445 is also possible, but may cause problems depending on your specific requirements re File and Print sharing on clients. NB This is a technique to limit the spread of the virus, not to mitigate the vulnerability. -- Group Policy deployment of the removal tool has not been tested to my knowledge, but: - When assigned to a computer, the package is executed using a Local System logon, so shouldn't encounter any permissions issues. - The cleanup tool fails if the MS04-011 hotfix is not installed. - Group Policy does not guarantee an order of completion for assigned packages. - If the package runs unsuccessfully, it may not be run again by the software deployment engine; instead, consider using MSI to get the cleanup tool onto the workstations and a computer startup script to execute the tool. - Our typical suggestion is to install MS04-011, reboot, then run the cleanup tool; GP software deployment may not be able to accomplish this in a single step.

1 0

OT: Looking for 2nd hand 1U servers.
by Lin Nah 02 May '04

02 May '04

HI all I'm look for several ( more than 3 ) 1U machines for servers that I'm putting online. My budget is tight and I don't need high performance. Just realiable stuff. So if people have older boxes lying around ( that isn't broken) doing nothing that would be great. Minimum spec would be: 1U (2U might be okay but 1U prefered), 600MHz+ i386, IDE or SCSI disk (or ability to take a normal one) and 100Mb/s Ethernet. I'd prefer Auckland unless you have several to offset the cost of shipping. Anyway email me if you have any available or know where I can get hold of some. regards lin ps If you are interested in curry and beer this Thurs dinner, contact me if you are in Auckland or go to thursdaynightcurry.com for Wgtn.

1 0

The New Zealand Network Operators' Group
by Donald Neal 02 May '04

02 May '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Meetings See http://www.nznog.org/ for details of the January 2004 conference. We are now working towards a similar gathering to be held in late January or early February 2005. Also see http://auckland.thursdaynightcurry.com/ if you live in or near Auckland. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. About This Mailing List This list has over six hundred addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

go on - burn up some bandwidth
by Richard Naylor 29 Apr '04

29 Apr '04

http://www.r2.co.nz/xyzzy it will be gone shortly

3 2

RE: [nznog] go on - burn up some bandwidth
by Regan Murphy 29 Apr '04

29 Apr '04

> > http://www.r2.co.nz/xyzzy > > it will be gone shortly > 384Kbps streams nicely over telstraclear 2mpbs dsl with 100KB/sec of downloads running in the background :D -- Regan

1 0

WHOIS at ARIN.NET not responding.....
by Steve Withers 28 Apr '04

28 Apr '04

Anyone else unable to use the WHOIS at arin.net? I can't get a response when trying to check ownership of IP addresses. 15:24 2004 04 29 Steve

4 5

RE: [nznog] WHOIS at ARIN.NET not responding.....
by Gordon Smith 28 Apr '04

28 Apr '04

You should really be raising this as a fault with your ISP then. > -----Original Message----- > From: Steve Withers [mailto:swithers(a)mmp.org.nz] > Sent: Thursday, 29 April 2004 4:19 p.m. > To: nznog > Subject: RE: [nznog] WHOIS at ARIN.NET not responding..... > > > My IP is: 222.152.48.55 > > I'm on Jetstream (Orcon is the nominal ISP). > > Steve > >

1 0

Also can't reach: thememoryhole.org / 69.50.191.178
by Steve Withers 28 Apr '04

28 Apr '04

This site has also been unreachable by me at any time of the day or night since i first tried to access it several days ago: 165.229.193.230 www.thememoryhole.org I'm on Jetstream Surf via Orcon steve(a)tbird:~$ traceroute www.thememoryhole.org traceroute to www.thememoryhole.org (69.50.191.178), 30 hops max, 38 byte packets 1 * * * 2 210-55-64-32.adsl.netgate.net.nz (210.55.64.32) 52.484 ms 50.206 ms 51.823 ms 3 192.168.253.1 (192.168.253.1) 59.802 ms 58.922 ms 63.941 ms 4 p-c1.akbr1.global-gateway.net.nz (202.50.245.237) 67.791 ms 80.210 ms 75.767 ms 5 ge-0-3-0-6.akbr3.global-gateway.net.nz (202.37.246.18) 57.844 ms 58.677 ms 57.849 ms 6 p1-3.sjbr1.global-gateway.net.nz (202.50.116.178) 220.129 ms 216.446 ms 220.135 ms 7 so-1-3-0-0.pabr3.global-gateway.net.nz (202.37.245.230) 215.672 ms 216.760 ms 215.868 ms 8 sl-st20-pa-6-3.sprintlink.net (144.223.243.17) 226.198 ms 222.401 ms 227.933 ms 9 sl-bb20-sj-8-3.sprintlink.net (144.232.20.43) 237.942 ms 240.469 ms 239.977 ms 10 sl-bb21-sj-15-0.sprintlink.net (144.232.3.158) 219.841 ms 224.752 ms 219.945 ms 11 sl-st20-sj-13-0.sprintlink.net (144.232.9.58) 235.917 ms 238.727 ms 235.858 ms 12 sl-browing-21-0.sprintlink.net (144.223.242.10) 235.995 ms 234.561 ms 236.013 ms 13 g2-2-0.a1.hywr.broadwing.net (216.140.3.41) 221.734 ms 220.906 ms 219.880 ms 14 * * * 15 * * * 16 * * * 17 * * * ...etc....

1 0

RE: [nznog] WHOIS at ARIN.NET not responding.....
by Gordon Smith 28 Apr '04

28 Apr '04

Working fine from here (via Sprint) I'm assuming you're trying from port-222-152-48-55.fastadsl.net.nz (www.mmp.org.nz) I'd suggest checking your connectivity from one of the route-servers A trace to that box dies: 10 g8-0-0-6.akbr1.global-gateway.net.nz (202.37.246.17) 84.608 ms 77.022 ms 89.586 ms 11 fid-int.akbr1.global-gateway.net.nz (202.50.245.238) 90.192 ms 91.546 ms 90.002 ms 12 * * > -----Original Message----- > From: Steve Withers [mailto:swithers(a)mmp.org.nz] > Sent: Thursday, 29 April 2004 3:25 p.m. > To: nznog > Subject: [nznog] WHOIS at ARIN.NET not responding..... > > > Anyone else unable to use the WHOIS at arin.net? > > I can't get a response when trying to check ownership of IP > addresses. > > 15:24 2004 04 29 > > Steve > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

IANA IPv4 allocations and bogon update: 58/8, 59/8
by Rob Thomas 28 Apr '04

28 Apr '04

-----BEGIN PGP SIGNED MESSAGE----- Hi, team. **NOTE WELL: Thanks to a donation from the RIPE NCC we have a new bogon prefix data offering. See below for the details. The numerous Team Cymru bogon projects have been updated as of 01 APR 2004 to reflect the following IANA allocation made on 01 APR 2004: 58/8 Apr 04 APNIC 59/8 Apr 04 APNIC IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.qorbit.net/documents/junos-template.pdf> Secure JUNOS BGP Template (Juniper) - <http://www.qorbit.net/documents/junos-bgp-template.pdf> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-loose.pdf> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-strict.pdf> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> RIPE NCC fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#ripe> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. - -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQJApa1kX3QAo5sgJAQHypAP+NF/noJVKOCT8jfTviUyOvEUmr/UwcCwC XsomXcCp9/QAfaMElUaa34Jm4OY3eVUqIvwm/cF1Pg7EhfzjzgHzpru9EWMtMuju eHxGXZpETdVbh+YB3oZIqIP/jydO0UpwiEUHuq9behvTgM3FGjs/yMot/sIs1/dp /22VF+/QhOc= =Bmje -----END PGP SIGNATURE-----

1 0

RE: [nznog] Domainz issue
by Tim John - Domainz 28 Apr '04

28 Apr '04

> The ultimate gift from domainz and somebody complains about it. You just can't please some people :) Grant, please email me off list to discuss further. Tim -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Thursday, 29 April 2004 9:12 a.m. To: Grant Zanetti Cc: NZNOG(a)list.waikato.ac.nz Subject: Re: [nznog] Domainz issue Grant Zanetti wrote: > Currently anyone using the staff proxy here at Iconz is being refused > access to the domainz website. Any and all attempts to contact > someone so find out why this is have been ignored. Strike me dead! The ultimate gift from domainz and somebody complains about it. > Can someone from Domainz drop me an email to explain why we are being > blocked? And you want to fix this? /me recommends a stiff drink -- Peter Mott Chief Enthusiast 2DAY INTERNET LIMITED http://www.2day.com "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Domainz issue
by Grant Zanetti 28 Apr '04

28 Apr '04

Currently anyone using the staff proxy here at Iconz is being refused access to the domainz website. Any and all attempts to contact someone so find out why this is have been ignored. Can someone from Domainz drop me an email to explain why we are being blocked? Thanks. -- http://the.mani.ac.nz

2 1

Telstra Clear routing 210.54.142.0/24 incorrectly
by Peter Simmons 27 Apr '04

27 Apr '04

Hi, Perhaps there is someone from Telstra Clear on this list that can help. We (Strongnet) own the 210.54.142.0/24 range it is hosted at United Networks datacentre in Northcoat, Auckland. For some reason or other the routers that Telstra Clear 'Tempest' customers go through is routing traffic to that ip range as over its international connection. This means that those customers have to pay international rates for traffic that goes to our network. Obviously they should only have to pay national traffic rates as it is national. Traffic going from our network to the Telstra Clear 'Tempest' customers is routed nationally. Only traffic coming from the Telstra Clear 'Tempest' customers to our network is being routed internationally. It seems that only Telstra Clear customers are having this problem. So if anyone knows how to fix it or is in a position to fix it please do. Regards, Pete

2 1

"Domain Names Australia" banned from trading
by Matthew Poole 27 Apr '04

27 Apr '04

Not strictly related, but I know that a lot of people on here have had grief as a result of the little toad's actions. So, take a read of http://www.nzherald.co.nz/latestnewsstory.cfm?storyID=3563220, and gloat at the well-earned smack-down.

2 1

TestraClear WLL
by Philip D'Ath 27 Apr '04

27 Apr '04

Could someone from TelstraClear who deals with the wireless local loop box's in a technical capacity please contact me off list. http://www.ifm.net.nz/ CCNP, BCMS Philip D'Ath.

1 0

Re: NZNOG Digest, Vol 16, Issue 17
by Paul Gold 23 Apr '04

23 Apr '04

We started having problems more than a week ago, with queues of 10K and more building up over the day through to Xtra. At night, this was 2-3 times as bad. We managed to (finally) get through to CTSHelp, who advised us that Xtra had made a policy decision to only accept 2 connections per source IP/domain. This was effectively throttling our mail down to around 2-3 messages per second. Obviously an attempt to limit the impact of the recent Sober work and variants on xtra's part... Paul Date: Fri, 23 Apr 2004 16:33:12 +1200 From: jamesc(a)wave.co.nz (James Clark) Subject: Re: [nznog] Xtra To: Neil Gardner <NeilG(a)renaissance.co.nz> Cc: nznog(a)list.waikato.ac.nz Message-ID: <20040423043312.GA27729(a)phoenix.wave.co.nz> Content-Type: text/plain; charset=us-ascii On Fri, Apr 23, 2004 at 04:10:01PM +1200, Neil Gardner wrote: > Chuckle - I _KNOW_ it's just a coincidence, but less than 15 minutes after > lampooning Xtra's generally useless status page about never being updated, > they have managed to list the intermittent (!) email problem, only 26 hours > after it was first notied on this list! 26? Try more than 48 hrs, and apparently it was worse on Tuesday!

1 0

RE: [nznog] Xtra's "No known problems line"
by Robert Purdy (DSL AK) 22 Apr '04

22 Apr '04

Someone must have called Theresa - Current Status There is currently 1 known problem with the Xtra Network Unscheduled Event Products Affected: All Connections Areas Affected: Nationwide System(s) Affected: Receiving Email Sending Email System(s) Response: Intermittent Current Status: Investigating Resolution Expected: Unknown 1000+ messages queued here.... Rob -----Original Message----- From: Blair Harrison [mailto:nznog(a)jedi.school.nz] Sent: Friday, 23 April 2004 4:45 p.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Xtra's "No known problems line" On Fri, 23 Apr 2004 15:52:52 +1200 Neil Gardner <NeilG(a)renaissance.co.nz> wrote: > I'm not advocating anything illegal but... > > If anyone on here has the artistic skills, the access and the guts, > replacing that "No known problems" with a picture of an Ostrich with > it's head in the ground, and a speech bubble with "There are currently > no....".... Well, I'm not sure I could imagine anything funnier :-) > > N. > http://jedi.net.nz/~blair/xtra1.png Have a good friday laugh everyone, and stop worrying about your mail queues.. they'll sort themselves out eventually, they always do :) Cheers, Blair _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

Xtra's "No known problems line"
by Neil Gardner 22 Apr '04

22 Apr '04

I'm not advocating anything illegal but... If anyone on here has the artistic skills, the access and the guts, replacing that "No known problems" with a picture of an Ostrich with it's head in the ground, and a speech bubble with "There are currently no....".... Well, I'm not sure I could imagine anything funnier :-) N. -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

2 1

RE: [nznog] Xtra
by Neil Gardner 22 Apr '04

22 Apr '04

Chuckle - I _KNOW_ it's just a coincidence, but less than 15 minutes after lampooning Xtra's generally useless status page about never being updated, they have managed to list the intermittent (!) email problem, only 26 hours after it was first notied on this list! -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

2 1

Xtra
by jamesc＠wave.co.nz 22 Apr '04

22 Apr '04

Anyone else having a hard time getting email into Xtra? Cheers, James.

8 11

RE: [nznog] Xtra
by Neil Gardner 22 Apr '04

22 Apr '04

>From: Simon Byrnand [mailto:simon(a)igrin.co.nz] >Besides, on the Help page: "There are currently no known problems with the Xtra Network." :) Yes, but as I _think_ Simon Lyall once said to my intense amusement, "I have a theory that Theresa Gattung has to personally approve anything that gets posted there" Cheers - N. (apologies for wrong attribution or quote :-) -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

1 0

Update to Ihug Time Servers.
by Simon Lyall 22 Apr '04

22 Apr '04

[ This email is being sent to NZNOG and Bcc'd to about 100 people who have notified me that they are using Ihug's Time Servers. Apologies for any duplicates or errors. ] Ihug has made a small change to it's NTP servers which may affect people using them, Specifically: tk4.ihug.co.nz is going to be eliminated on 1st May 2004 tk3.ihug.co.nz had it's IP permanently moved yesterday (to 203.109.252.5) tk1.ihug.co.nz and tk2.ihug.co.nz are unchanged. If you are using tk4 then you will need to update your configuration, if you are using tk3 then you will need to ensure your NTP daemon is using it's new IP. Please use DNS of these machines in the config rather than IPs where possible. Please email me if you have any further questions. Also, If you are running a NTP server on a permanently connected machine you might want to look at joining the pool.ntp.org project , See http://www.pool.ntp.org/ for details. Currently New Zealand has around 5 servers in the project. -- Simon Lyall, | System Admin | Work: simon.lyall(a)ihug.co.nz Senior Engineer, | Network Admin | Home: simon(a)darkmere.gen.nz Ihug Ltd, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz

5 6

New Cisco Vulnerability - SNMP
by Gordon Smith 20 Apr '04

20 Apr '04

This came out today. Affected IOS's are 12.x series, including 12.3.6 http://www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml Page also lists which releases have been fixed - 12.3.x due mid May Cheers, Gordon

1 0

SANOG IV, Kathmandu, Nepal, 23-30 July 2004
by Joe Abley 18 Apr '04

18 Apr '04

[forwarded on behalf of the organisers] --- SANOG IV 23-30 July, 2004 Kathmandu, Nepal SANOG IV Program and Registration Announcement South Asian Network Operators Group (SANOG) IV program and agenda are now published on http://www.sanog.org/sanog4/. The registration has also now been opened. SANOG IV is being held at the Radisson Hotel in Kathmandu, Nepal from 23-30 July, 2004. You can refer to www.sanog.org for details. Program and Agenda: SANOG IV program incorporates the following Three hands-on workshops: 23-27 July, 2004 - Open Source IP Services for ISP, by NSRC - ISP Routing Workshop, by Cisco - DNS / DNSSec Workshop, by APNIC Eight Tutorials 28-29 July, 2004 - Anti-SPAM tutorial - Juniper Routing Workshop - VOIP technology and SIP Deployment - Internet Routing Registry Tutorial - Internet Exchange Point - Exim Mail Server - PGP mini Tutorial - APNIC Internet Resource Management Four Birds-of-a-Feather : 28-20 July, 2004 - Internet Exchange Point - ISP/NSP Security - West Asia BoF - PGP Key-Signing Party Full Day Conference Program : 30 July, 2004 - Regional Updates - Routing Practices - Application Deployment - Security Additional Programs: (28-30 July, 2004) - APCAUCE tutorials and meeting - APNIC Regional policy update - APNIC and RIPE NCC hostmaster Consultation - Regional Telecom/Internet Policy Session We expect a huge turn out from the region at this SANOG meeting owing to the popularity at previous meets. We also welcome participants from West Asia, with the newly established collaboration with the RIPE NCC. With the co-hosting of APCAUCE meeting, we also expect a larger participation from the entire Asia Pacific region. We hope you would be able to make it to this meeting. The meeting is open to everyone from the operational community, and thus anyone who needed a reason to visit Kathmandu now has one. You can register for SANOG by sending in the form available at www.sanog.org/sanog4. Online registration will open in May.

1 0

on the scrounge for a Cisco 3548 for APE.
by Simon Blake 18 Apr '04

18 Apr '04

Hi folks The active hardware at APE currently comprises a Cisco 3548 and 3508 pair. For the usual reasons, (and as part of some upcoming outages - more on this later), I'd like to replicate this. I have a spare 3508, but I'd really like a matching 3548 to go with it. So, the question, does anybody know of anybody in NZ who might have one they'd like to sell? They're no longer available from Cisco, so I thought I'd try the circle of friends first, before molesting the usual suspects (who'll doubtless try and sell me something newer and shinier). Cheers Si

1 0

CheckPoint Software
by Tim John - Domainz 16 Apr '04

16 Apr '04

Hi all, Can anyone recommend a reseller of Checkpoint software as I need a quote for upgrading. Also, does anyone have any experience between Checkpoint and PIX platforms ? I have very little experience of either so some 'pro' and 'con' arguments would be really helpful to me. Cheers, Tim

2 1

Issues with BIND
by Drew Broadley 15 Apr '04

15 Apr '04

I am having issues with a SINGLE domain "corrupt.co.nz", every other domain is fine! Here's the deal: Bind logs return nothing like they usually would saying there was an error with the domain. I can dig to ALL of my AUTH NS servers, and get the records returned no problemo. I can use XTRA, DTS (and a few others have used their own DNS servers) and get returned results without any SERVFAIL errors. I try to dig anything to the PARADISE NS servers (203.96.152{4,12}) and I get mixed results. I get www.corrupt.co.nz and corrupt.co.nz, but none of my overly important records (home.corrupt.co.nz, mail.corrupt.co.nz) It returns SERVFAIL id:2 whenever I try to request anything other then www.corrupt.co.nz / corrupt.co.nz via PARADISES NS Servers Any ideas? I have contacted soa(a)paradise.net.nz but god knows how long that will take to be processed. - Drew

5 6

Re: [nznog] Issues with BIND
by Mark Goldfinch 15 Apr '04

15 Apr '04

On Fri, 16 Apr 2004, Drew Broadley wrote: > I try to dig anything to the PARADISE NS servers (203.96.152{4,12}) and > I get mixed results. > > I get www.corrupt.co.nz and corrupt.co.nz, but none of my overly > important records (home.corrupt.co.nz, mail.corrupt.co.nz) > > It returns SERVFAIL id:2 whenever I try to request anything other then > www.corrupt.co.nz / corrupt.co.nz via PARADISES NS Servers ns1.dns.net.nz lists the nameservers for corrupt.co.nz as being: ns.iplay.net.nz. ns2.iplay.net.nz ns3.iplay.net.nz iplay nameservers list: ns1.iplay.net.nz. ns2.iplay.net.nz. ns3.iplay.net.nz. Which is okayish, however not entirely certain how badly this will affect things, ask the iplay servers about their own zone and you get a SERVFAIL for anything for within iplay.net.nz. You may want to ensure that the iplay nameservers reply for their own zone, otherwise bind may cache the SERVFAIL result for iplay records and then do the same for any zones which depend upon iplay records. Best Regards, --- Mark Goldfinch Senior Systems Administrator TelstraClear Ltd

1 0

RE: [nznog] Routing protocols
by Gordon Smith 15 Apr '04

15 Apr '04

> -----Original Message----- > From: Donald Neal [mailto:Donald.Neal(a)telecom.co.nz] > Sent: Friday, 16 April 2004 8:34 a.m. > To: nznog(a)list.waikato.ac.nz > Subject: RE: [nznog] Routing protocols > > > > In the words of Iljitsch van Beijnum's book "BGP", which I was reading > over Easter (I know, I'm a sad person): > > "If you are implementing a large-scale IP network or have unusual > requirements, you should definitely read up on all the > protocols so you > can make an informed decision. However, most small-to-medium sized > networks running just IP should go ahead and select OSPF: it does the > job, doesn't have any huge disadvantages, and is readily available." > > - Donald Neal > > Donald Neal | "I suspect most samba > Technical Specialist | developers are already > Operations Engineering | technically insane. Of course, > Integration & Services Divn. | since many of them are > Alcatel NZ Ltd | Australians you can't tell." > All opinions mine only. | - Linus Torvalds > > -------------------------------------------------------------- > ---------------- > "This communication, including any attachments, is confidential. > If you are not the intended recipient, you should not read > it - please contact me immediately, destroy it, and do not > copy or use any part of this communication or disclose > anything about it. Thank you. Please note that this > communication does not designate an information system for > the purposes of the Electronic Transactions Act 2002." > -------------------------------------------------------------- > ---------------- > What a terrible thing to be reading over easter :-) One advantage of using IS-IS is that if you're running both IPv4 and IPv6 on a network, you only need to run the one IGP for both. Doing both woth OSPF requires OSPFv2 and OSPFv3 :-( I did see a very good presentation some time ago (which may very well have been the AOL one that Joe mentioned) that detailed the transition to IS-IS where the network was live at the time. From memory, the primary reason for the change was the desire to move to an MPLS-capable network. Cheers, Gordon

1 0

RE: [nznog] Routing protocols
by Donald Neal 15 Apr '04

15 Apr '04

>> >> Yes... If you're thinking what I'm thinking, IS-IS is covered in the >> CCNP, CCDP and CCIP certification (and recertification) exams. And >> these are definites in the exam (not maybes). >> > http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_ exams/642-801.html > Hey look on the bright side - at least you don't have to learn about > SNA for CCDP anymore. Um, given that CCIP is aimed at large ISP's or telcos, including IS-IS in it would seem to make sense. The funny thing is that IS-IS is included in the CCNP recertification exam, but _not_ the CCIP recertification exam. - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

Routing protocols
by nznog 15 Apr '04

15 Apr '04

What routing protocols do people use on their networks? Particularly inside. Does anyone in the world actually use IS-IS ? I am not interested in what network runs what, just how many networks run various protocols. Rough idea of network size would be nice, and any partcular reasons you prefer one to the other. thanks for satisfying my curiosity JM -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org mQGiBD2JfrwRBACWgDlX/IoNxdk15KpELdl6Sou4cU0sbaBinYV7X12SoR3YljuM lJlhgtoahIdUkqOuvDmX1AUNY2a80sidbTA48B0QUzYrGnktPoBxz4O29LKm49t3 Ojoqj0AsnC6HB37N5pScATqMbXME8hkjACHvukSUvgjHiPRYaMz7WQ2W0wCg3t09 ErzU4f+J+8fExfcd8B1+ce0EAIsc5GlVeK6hTBf3XyTRFbLD0C2m+BZGamrpngmb ito2vhKxbxTHLR/Qy2nbvN4bT42CCnf4v5MguPepqbMT8V6hxXKxxUzJx3A67x6m 7e0Qag4TLopc7f7mY5bTk1yY2mjAg1b+uVEuxMxGVtFkm586aOpmQVfAAgtffsrl CLTlA/94q8gjqHk8A9funzsjlZKft1+Z+NpGObfw9M9cC7c8RJAdK8kusH7/oKb2 Yq9NsSSdULJiqZaKkH4aCV55yvDnF3b6BZQOGvqpYuSACSJoX+fEwASGL0Qq0Jym ykaxwyNKqvUdxuYb9TPU01O3OpTyAvI0DsyjJ+KGS9h9mZwPX7QtSmFtZXMgTWFo ZXIgKGg0eDByKSA8c2NvdXNlckBwYXJhZGlzZS5uZXQubno+iF0EExECAB0FAj2J frwFCQPCZwAFCwcKAwQDFQMCAxYCAQIXgAAKCRAlRgQ5B5O8vFi8AJsG0xt5FRG1 F10FJFblBhmtc4//vwCgnUmaClr8+F+qe4Rm9wnYqWyjF4S0JUphbWVzIE1haGVy IDxqYW1lcy5tYWhlckBpcmQuZ292dC5uej6IXQQTEQIAHQUCPYmWnwUJA8JnAAUL BwoDBAMVAwIDFgIBAheAAAoJECVGBDkHk7y8MvUAnRxhOIq1IAo239VFcBfN2IdZ XEehAJ9U0BB2ZZ8PjNWI1yvjzJ5P3B5lv7QhSmFtZXMgWCA8c2NvdXNlckBwYXJh ZGlzZS5uZXQubno+iF0EExECAB0FAj22c0sFCQPCZwAFCwcKAwQDFQMCAxYCAQIX gAAKCRAlRgQ5B5O8vNLkAKDZ4x+lDWYoBPVViuX37Tbd51golgCgiciBW3djy3wV 11Jdz3x38O5JwRW5Ag0EPYl+yhAIAL7K7wrwGjvgRRS+rh5hW8JJbrYQn0BvajTs Vm/OvtA5QdJN1zqBNBlGCM1OivxASjAZEmpUYMAnBcUjNicXaIu/WoB0AUPSmkZ7 4NHyWoU12cbHZw6pZno4OZ9DpwSIsOkaP5rDB8oaj9b9/nziuxBm3oqmKN64ohcN oSOFJ/4+66vEDM8I1p+4pvb2Jj5JYRS/5+piJEaBUFttHofRWkF34vnxR3c+MjY7 NSVWbu3EWtJV+se+MLeSdDZxzt4v7XD7wE/lt9xq9IlyOryQvRhqrduaYc0ABItd eashGzyDXeUCFhsyFszZG51cAP6FiYQiD9ztwNHUKhLzjcqDJTMAAwYIAL1D9sdU 8+BI3jH1HhPiM8VLq1zii8ksRw77iUthpfe7xMp8qhiachMdXnIMYlIskEiFP3nt BycQlPYBNOV96YEhnBngiBXbC40xgxXSkpJh24Fu6GbXAlLMnahkQeRSMjAcDJuh bNcYfwm+PE86g9XyLCDVByzSQ+bRY7Dof+Sjgtod4Ds4tYA3R3qgYE0Co1dtrf4z b58PlnaSAq9wVtMD0G8Da/n5MC8jsAcHZahfBqmwvKsGENH8zFVwsAeKDjQv075m tO+V96QxCMYuvJeVWWYvL/bIR2zya9yD6RCWds1IBljUIwLI+Ox4Dd3LfBT1Y2g3 x8DNsYXPOCPYWCyITAQYEQIADAUCPYl+ygUJA8JnAAAKCRAlRgQ5B5O8vA6DAJ4v ulRjiKp8UZ5iqCSFvboQRoM4zgCcCunR39pnorxd2ZxIi+miFuPx75U= =siNl -----END PGP PUBLIC KEY BLOCK-----

2 1

Re: [nznog] $1 a CPU hour to send SPAM
by Ewen McNeill 15 Apr '04

15 Apr '04

In message <B4F614073A647F4DAC7F5E4BE6E9EEF70328FA(a)w2kmail.bits.co.nz>, Carl Black writes: >basically they pay individuals $usd1.00 per hour they leave their PC >available as a SPAM relay - at ~$8700 a year, If you read the Slashdot discussion (and the website carefully) you'll see they are claiming they'll pay US$1.00 per hour of CPU time. Spam delivery is hardly CPU bound. A bunch of idiots will probably sign up thinking they're going to get thousands of dollars a year; even on the face of it they'll get hundreds at most. And I'd say it's better than even money they won't get anything -- rule #1: spammers lie. Given the number of zombie mail relays "administered" by people without the clue to manage a machine on the Internet I'm not sure that someone offering to pay for them is going to make a whole of difference to the volumes of spam. Ewen

4 3

RE: [nznog] Routing protocols
by Donald Neal 15 Apr '04

15 Apr '04

> What routing protocols do people use on their networks? > Particularly inside. > > Does anyone in the world actually use IS-IS ? > > I am not interested in what network runs what, just how many networks > run various protocols. > > Rough idea of network size would be nice, and any partcular > reasons you > prefer one to the other. > > thanks for satisfying my curiosity > JM In the words of Iljitsch van Beijnum's book "BGP", which I was reading over Easter (I know, I'm a sad person): "If you are implementing a large-scale IP network or have unusual requirements, you should definitely read up on all the protocols so you can make an informed decision. However, most small-to-medium sized networks running just IP should go ahead and select OSPF: it does the job, doesn't have any huge disadvantages, and is readily available." - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

RE: [nznog] Routing protocols
by Chris Hellberg 14 Apr '04

14 Apr '04

I knew that I phrased that wrong just after I clicked "send" I meant the IGP type rather than packet/PDU authentication :) I wonder if it's common that at BOFs and presentations you'd find engineers from ISPs and such talking on the subject of solvung problem xyz or why they find abc good in a particular IGP. Another interesting link sent to me is a disection between the two protocols: http://www.nanog.org/mtg-0006/katz.html > -----Original Message----- > From: Joe Abley [mailto:jabley(a)isc.org] > Sent: Thursday, 15 April 2004 22:37 > To: Chris Hellberg > Cc: nznog(a)glassmile.co.nz; nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Routing protocols > > > > On 15 Apr 2004, at 06:32, Chris Hellberg wrote: > > > I stand corrected. In this case, I wonder if it's the > exception rather > > than the norm that large carriers protect things such as their IGP > > then? > > I'm quite sure that AOL and MFN protect their IGP, but they > do so using > link-layer authentication, a link-scope, non-routed protocol (in the > case of IS-IS) and by not exposing it to customers or other external > entities. That's what we do at ISC. > > Security by obscurity is no longer in style, maybe. > > > Joe > > > ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

3 2

RE: [nznog] Routing protocols
by Chris Hellberg 14 Apr '04

14 Apr '04

> -----Original Message----- > From: Joe Abley [mailto:jabley(a)isc.org] > Sent: Thursday, 15 April 2004 22:28 > To: Chris Hellberg > Cc: nznog(a)glassmile.co.nz; nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Routing protocols > > > > > As for what networks are running what protocol, you're > unlikely to get > > too much on that sort of info. > > AOL's transport network runs IS-IS (there was a presentation about > their transition from OSPF at a semi-recent NANOG). > MFN/AboveNet did a > similar transition while I was there. We run IS-IS as our IGP in our > home network (AS 3557), although we still use OSPF in local-scope > anycast clusters since it's more straightforward to find ways of > supporting it on FreeBSD. > > > Joe I stand corrected. In this case, I wonder if it's the exception rather than the norm that large carriers protect things such as their IGP then? ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

RE: [nznog] Routing protocols
by Chris Hellberg 14 Apr '04

14 Apr '04

Large networks all over the world run IS-IS. You won't find an abundance of information on the protocol as you would with OSPF (especially such as John Moy's OSPF book), however it's still a very popular IGP. There's an interesting draft on the differences between OSPF and ISIS which probably wouldn't have been written if IS-IS wasn't used a whole heap: http://ftp.apnic.net/ietf/internet-drafts/draft-bhatia-manral-diff-isis-osp… As for what networks are running what protocol, you're unlikely to get too much on that sort of info. Chris > -----Original Message----- > From: nznog-bounces+chris.hellberg=telecom.co.nz(a)list.waikato.ac.nz > [mailto:nznog-bounces+chris.hellberg=telecom.co.nz(a)list.waikat > o.ac.nz]On > Behalf Of nznog > Sent: Thursday, 15 April 2004 22:07 > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Routing protocols > > > What routing protocols do people use on their networks? > Particularly inside. > > Does anyone in the world actually use IS-IS ? > > I am not interested in what network runs what, just how many networks > run various protocols. > > Rough idea of network size would be nice, and any partcular > reasons you > prefer one to the other. > > thanks for satisfying my curiosity > JM > -- > -----BEGIN PGP PUBLIC KEY BLOCK----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: For info see http://www.gnupg.org > > mQGiBD2JfrwRBACWgDlX/IoNxdk15KpELdl6Sou4cU0sbaBinYV7X12SoR3YljuM > lJlhgtoahIdUkqOuvDmX1AUNY2a80sidbTA48B0QUzYrGnktPoBxz4O29LKm49t3 > Ojoqj0AsnC6HB37N5pScATqMbXME8hkjACHvukSUvgjHiPRYaMz7WQ2W0wCg3t09 > ErzU4f+J+8fExfcd8B1+ce0EAIsc5GlVeK6hTBf3XyTRFbLD0C2m+BZGamrpngmb > ito2vhKxbxTHLR/Qy2nbvN4bT42CCnf4v5MguPepqbMT8V6hxXKxxUzJx3A67x6m > 7e0Qag4TLopc7f7mY5bTk1yY2mjAg1b+uVEuxMxGVtFkm586aOpmQVfAAgtffsrl > CLTlA/94q8gjqHk8A9funzsjlZKft1+Z+NpGObfw9M9cC7c8RJAdK8kusH7/oKb2 > Yq9NsSSdULJiqZaKkH4aCV55yvDnF3b6BZQOGvqpYuSACSJoX+fEwASGL0Qq0Jym > ykaxwyNKqvUdxuYb9TPU01O3OpTyAvI0DsyjJ+KGS9h9mZwPX7QtSmFtZXMgTWFo > ZXIgKGg0eDByKSA8c2NvdXNlckBwYXJhZGlzZS5uZXQubno+iF0EExECAB0FAj2J > frwFCQPCZwAFCwcKAwQDFQMCAxYCAQIXgAAKCRAlRgQ5B5O8vFi8AJsG0xt5FRG1 > F10FJFblBhmtc4//vwCgnUmaClr8+F+qe4Rm9wnYqWyjF4S0JUphbWVzIE1haGVy > IDxqYW1lcy5tYWhlckBpcmQuZ292dC5uej6IXQQTEQIAHQUCPYmWnwUJA8JnAAUL > BwoDBAMVAwIDFgIBAheAAAoJECVGBDkHk7y8MvUAnRxhOIq1IAo239VFcBfN2IdZ > XEehAJ9U0BB2ZZ8PjNWI1yvjzJ5P3B5lv7QhSmFtZXMgWCA8c2NvdXNlckBwYXJh > ZGlzZS5uZXQubno+iF0EExECAB0FAj22c0sFCQPCZwAFCwcKAwQDFQMCAxYCAQIX > gAAKCRAlRgQ5B5O8vNLkAKDZ4x+lDWYoBPVViuX37Tbd51golgCgiciBW3djy3wV > 11Jdz3x38O5JwRW5Ag0EPYl+yhAIAL7K7wrwGjvgRRS+rh5hW8JJbrYQn0BvajTs > Vm/OvtA5QdJN1zqBNBlGCM1OivxASjAZEmpUYMAnBcUjNicXaIu/WoB0AUPSmkZ7 > 4NHyWoU12cbHZw6pZno4OZ9DpwSIsOkaP5rDB8oaj9b9/nziuxBm3oqmKN64ohcN > oSOFJ/4+66vEDM8I1p+4pvb2Jj5JYRS/5+piJEaBUFttHofRWkF34vnxR3c+MjY7 > NSVWbu3EWtJV+se+MLeSdDZxzt4v7XD7wE/lt9xq9IlyOryQvRhqrduaYc0ABItd > eashGzyDXeUCFhsyFszZG51cAP6FiYQiD9ztwNHUKhLzjcqDJTMAAwYIAL1D9sdU > 8+BI3jH1HhPiM8VLq1zii8ksRw77iUthpfe7xMp8qhiachMdXnIMYlIskEiFP3nt > BycQlPYBNOV96YEhnBngiBXbC40xgxXSkpJh24Fu6GbXAlLMnahkQeRSMjAcDJuh > bNcYfwm+PE86g9XyLCDVByzSQ+bRY7Dof+Sjgtod4Ds4tYA3R3qgYE0Co1dtrf4z > b58PlnaSAq9wVtMD0G8Da/n5MC8jsAcHZahfBqmwvKsGENH8zFVwsAeKDjQv075m > tO+V96QxCMYuvJeVWWYvL/bIR2zya9yD6RCWds1IBljUIwLI+Ox4Dd3LfBT1Y2g3 > x8DNsYXPOCPYWCyITAQYEQIADAUCPYl+ygUJA8JnAAAKCRAlRgQ5B5O8vA6DAJ4v > ulRjiKp8UZ5iqCSFvboQRoM4zgCcCunR39pnorxd2ZxIi+miFuPx75U= > =siNl > -----END PGP PUBLIC KEY BLOCK----- > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

DNS TTL Problem.
by jfp 14 Apr '04

14 Apr '04

Hi guys, we currently have a problem where one of our client has have switched their dns mail and hosting over to us, but the monkeys they were with before had set the TLL at 7 days. So for example it's currently on day 5 in the Xtra dns cache. Is there anyway to speed up the process and flush those cached values? That client has of course just done send some publicity out :-) PS: The domain in question is thereef.co.nz. Thanks. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

3 3

$1 a CPU hour to send SPAM
by Carl Black 14 Apr '04

14 Apr '04

Surprised I haven't seen this crowd mentioned here before: www.virtualmda.com basically they pay individuals $usd1.00 per hour they leave their PC available as a SPAM relay - at ~$8700 a year, that's going to be VERY tempting for lots of people. Maybe time for blanket blocks on TCP25? There's some talk about it on /. http://yro.slashdot.org/yro/04/04/14/1415217.shtml?tid=111&tid=126&tid=95&ti d=98&tid=99

1 0

Broken PC
by Richard Naylor 13 Apr '04

13 Apr '04

How to show your boss that you need a new PC. Simply demo playing some streaming video that you can find here.......http://www.r2.co.nz/20040413 I suggest you don't try this on dsl.....It works on CafeNet, but you need to leave the lappy on mains power as some of them reduce cpu capacity to save power. These video clips eat CPU capacity. Its interesting what PCs and lappys can actually play this stuff, even off their own hard drive. If there enough feedback, I'll put the files up on an http server so that you can download them. The 5 clips total around 650MBytes. An excellent demo as to why "broadband" ISN'T 256kbps....... (there is another demo coming, but we can't show you that one yet) rich

1 0

HEADS UP - upcoming webcast
by Richard Naylor 12 Apr '04

12 Apr '04

Saturday 17 April 1200Hrs Public Memorial Service for Dr Michael King and his wife at Te Papa Official hours of webcast are 1200 to 1330, but as usual it will start with a title slide etc as early as we can get it going. The streaming server will be located in Wellington and is peering on WIX. Public interest is not expected to be huge, but may be high once the webcast is publicised presumably by Te Papa. Webcast details are on www.r2.co.nz The webcast will have 5 streams - video = 384kbps, 128kbps, 56kbps audio = 56kbps, 28kbps There is also an experimental video stream at 1500kbps - It looks very good, but I doubt if anyone will be watching. Feel free to use this for a broadcast feed if needed. This stream may stress a few networks. (and run up a few massive dsl bills). Many of the technical questions are still being resolved, but it is expected that the webcast will be a multi-camera event, like the NZNOG Conference, but with higher levels of production quality. (ie a full crew and better cameras, sound, lighting etc) For further details, questions etc, contact me via email or on 021 897 089 Richard

1 0

NZNOG Conference 2005 Host and Venue Offers
by Donald Neal 12 Apr '04

12 Apr '04

It seems likely that the Conference Organising Committee will be in a position shortly to select a host and venue for next year's conference, and to make an announcement some time next month. Could anyone offering to host this event who has not already done so please contact me by midday Friday, 16 April. Thanks for your attention. - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

RE: [nznog] Jetnet ISP
by Nick MacKechnie (thenet) 08 Apr '04

08 Apr '04

Hiya >From memory - jet.net.nz is for Jetstart Orcon users fastadsl.net.nz is for the new Surf DSL Orcon users.. Nick ________________________________ From: Craig Spiers [mailto:craig(a)concept.net.nz] Sent: Thu 8/04/2004 6:09 p.m. To: Stephen Sheehan; nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Jetnet ISP jet.net.nz is orcon's 'brand'. ----- Original Message ----- From: "Stephen Sheehan" <axpunix(a)yahoo.com> To: <nznog(a)list.waikato.ac.nz> Sent: Thursday, April 08, 2004 6:04 PM Subject: [nznog] Jetnet ISP > Does anybody have any contact info on this ISP. > www.jet.net.nz > www.jet.co.nz > > Domain name and Whois lookup's point to Orcon, but > they do not seem to know anything about them. > > > Thanks > > Stephen > > > __________________________________ > Do you Yahoo!? > Yahoo! Small Business $15K Web Design Giveaway > http://promotions.yahoo.com/design_giveaway/ > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Jetnet ISP
by Stephen Sheehan 07 Apr '04

07 Apr '04

Does anybody have any contact info on this ISP. www.jet.net.nz www.jet.co.nz Domain name and Whois lookup's point to Orcon, but they do not seem to know anything about them. Thanks Stephen __________________________________ Do you Yahoo!? Yahoo! Small Business $15K Web Design Giveaway http://promotions.yahoo.com/design_giveaway/

2 1

3com NBX telephones and NCPs
by criggie＠criggie.dyndns.org 07 Apr '04

07 Apr '04

Gidday all. If theres anyone on the list who has used or has access to any 3com NBX telephone systems or NCPs please email me off list. Have an uneventful easter break everyone.

1 0

Does anyone read email to abuse@xtra.co.nz
by Jeremy Brooking 06 Apr '04

06 Apr '04

If you do, and youre on this list... Take the time to bother to read my email, sort out your user, and reply to me. It really isnt that much to ask. regards, Jeremy Brooking.

2 2

Peering with Citylink
by Andy Linton 06 Apr '04

06 Apr '04

Those of you who peer at the WIX and APE route servers will see Citylink's announcements of our own networks via that path. You should see an AS path of: APE: 9560 23754 WIX: 9439 23754 It would be excellent if you'd make sure that you accept our network announcements from the route servers. If you want to construct filters based on address prefixes you can see the networks we announce by querying the NZ Routing Registry using: whois -r -h whois.wix.net.nz as9560:rs-routes:as23754 whois -r -h whois.wix.net.nz as9439:rs-routes:as23754 which gives: route-set: AS9560:RS-ROUTES:AS23754 descr: Route set for Citylink to APE members: 203.118.144.0/24, 198.48.0.0/22, 202.8.44.0/22^22-24, 202.7.4.0/24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)ape.net.nz changed: rpsl-admin(a)ape.net.nz 20031118 changed: rpsl-admin(a)ape.net.nz 20040303 changed: rpsl-admin(a)ape.net.nz 20040406 source: NZRR and route-set: AS9439:RS-ROUTES:AS23754 descr: Route set for Citylink to WIX members: 203.118.144.0/24, 198.48.0.0/22, 202.8.44.0/22^22-24, 202.7.4.0/24, 203.97.231.224/28, 210.48.103.0/28, 210.48.103.144/28, 210.48.103.136/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)wix.net.nz changed: rpsl-admin(a)wix.net.nz 20040112 changed: rpsl-admin(a)wix.net.nz 20040303 changed: rpsl-admin(a)wix.net.nz 20040322 changed: rpsl-admin(a)wix.net.nz 20040407 source: NZRR

1 0

Re: National Bank phishing
by Dominic O'Hare 05 Apr '04

05 Apr '04

ASB Bank has just sent out an alert to customers registered with FastNet Internet Banking. -- Dear Customer With the recent spate of email scams to hit some other New Zealand banks, we felt it timely to once again remind you about the importance of keeping your personal Internet banking details safe, and never disclosing your Internet access codes or passwords to anyone, even if you believe they are from the Bank. ASB Bank and ASB Securities have not been affected by these scams. To ensure you keep your personal Internet banking details safe, please remember: * Never share, write down or disclose your access codes or passwords to anyone, (other than during the normal sign in procedure), or store them in a file on your computer. * Always access the ASB Bank or ASB Securities website by starting up a new browser session and typing in the address directly into the address bar of your browser. Never follow a link in an email to the ASB Bank or ASB Securities website. * Never leave your computer signed onto Fastnet or ASB Securities when you are not there. * Never open emails, email attachments, or run software from untrusted or unknown sources. * Install anti-virus and other security software, such as a personal firewall, and keep it updated with the latest vendor updates. * Use the Sign Off button when you've finished using Fastnet Classic. * Use the Log Out button when you've finished using ASB Securities. If you have any questions please do not hesitate to contact ASB Bank or ASB Securities by visiting our websites or calling 0800 803 804. Yours sincerely, Barbara Chapman Head of Retail Banking and Marketing ASB Bank Limited --

1 0

National Bank phishing
by Simon Byrnand 04 Apr '04

04 Apr '04

Just a heads up, After the recent fake Westpac emails trying to phish for peoples internet banking passwords and logins, there are now some National Bank ones circulating that follow exactly the same technique...... looks like the target URL has already been taken down though... Funnily enough, SpamAssassin actually scored it at 16.30 and blocked it as spam :) Regards, Simon

2 1

IANA IPv4 allocations and bogon update: 85/8, 86/8, 87/8, 88/8
by Rob Thomas 02 Apr '04

02 Apr '04

Hi, team. [ Apologies to those who receive this post in multiple forums. ] The numerous Team Cymru bogon projects have been updated as of 01 APR 2004 to reflect the following IANA allocation made on 01 APR 2004: 85/8 Apr 04 RIPE NCC 86/8 Apr 04 RIPE NCC 87/8 Apr 04 RIPE NCC 88/8 Apr 04 RIPE NCC IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.qorbit.net/documents/junos-template.pdf> Secure JUNOS BGP Template (Juniper) - <http://www.qorbit.net/documents/junos-bgp-template.pdf> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-loose.pdf> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-strict.pdf> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

1 0

New APE web site
by Andy Linton 31 Mar '04

31 Mar '04

As of today, the APE web site has had a revamp. Those of you familiar with the WIX site will notice some similarities! The features that I think are useful from a day to day operational perspective are the Looking Glasses e.g. http://www.ape.net.nz/cgi-bin/mrlg-ape.cgi http://www.wix.net.nz/cgi-bin/mrlg-wix.cgi You can use these to see what routes are currently in the route servers and the state of peering seesions. For those of you who are keen to see what routes the route servers might push in your direction see: http://www.ape.net.nz/cgi-bin/ShowRoutes.cgi http://www.wix.net.nz/cgi-bin/ShowRoutes.cgi These will show you the filter lists we apply to outbound routes. This meta-table is the union of all the inbound filters applied to the BGP peering sessions of exchange participants. The list showing the export to 23754 is the same list applied to all participants.

3 5

The New Zealand Network Operators' Group
by Donald Neal 31 Mar '04

31 Mar '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Meetings See http://www.nznog.org/ for details of this year's conference. We are now working towards a similar gathering to be held early next year. Also see http://auckland.thursdaynightcurry.com/ if you live in or near Auckland. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. About This Mailing List This list has over six hundred addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

No beer, but spammer gets his comeuppance
by Juha Saarinen 29 Mar '04

29 Mar '04

http://news.bbc.co.uk/1/hi/business/3581435.stm Right, will go back to the ADSL list now. -- Juha

1 0

UBD
by jfp 29 Mar '04

29 Mar '04

Hi guys, it looks like the situation with UBD had been fixed. See Juha's article in the Herald. http://www.nzherald.co.nz/storydisplay.cfm?storyID=3557667&thesection=bu siness&thesubsection=technology Thanks to the Spamhaus guys for putting a bit of pressure on. And also thanks for the APN guys (owners of UBD) for resolving the issue quickly. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

1 0

Speed of Citilink provisioning?
by NZNOG＠neilnz.com 28 Mar '04

28 Mar '04

Hi guys - how quickly can Citilink provision a building next to their own that has had ethernet in the past (possibly currently for other tenants)? If anyone from Citilink spies this email and would like to help me out by giving me the the name of the right person to talk too, please email back. I would really like to have an active connection on the 6th of April so I can do some Firewall training at our Wellington Offices on the 7th and 8th. (After the training, the connection will stay as our Internet connection for the Wgtn office) Cheers - Neil G

1 0

Orcon Internet Prefix List Update (2004-03-29)
by Craig Whitmore 28 Mar '04

28 Mar '04

For all those peering with Orcon Internet (AS17746) nationally, please update your prefix lists with the following networks (also in attached file). Added: ip prefix-list orcon-national permit 202.53.176.0/20 Thanks Craig Whitmore Systems Administrator Orcon Internet http://www.orcon.net.nz

1 0

UBD, our local spammers's friend.
by jfp 25 Mar '04

25 Mar '04

Some of you might not be aware that UBD sells its list of e-mail addresses to local businesses who then proceed to SPAM you. UDB sells their service as a business directory for potential clients who might be interested in your company. What you get instead is people buying their mailing list to sell you stuff via SPAM. (All legally of course) We found this out last year and asked to have our email address removed from their list which they said they did. Only we are still getting SPAMmed this year. I had a discussion with them at the time and they did not see their selling a list of e-mail addresses for the wrong purpose as an issue. Has anybody had any dealings with them or can think of any way to make them change their ways? jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

2 1

[Fwd: Urgent message for all ANZ customers]
by Steve Withers 25 Mar '04

25 Mar '04

Now I'm getting phishing messages for the ANZ....

1 0

Largest MTU on your network
by Jonathan Brewer 24 Mar '04

24 Mar '04

Hi Folks, With all the talk of "Next Generation" networks and such, I wonder, what's the largest MTU allowed by your hardware? I have found some of my kit incapable of even the 9k "jumbograms" as belittled here: http://www.psc.edu/~mathis/MTU/ Who out there allows larger MTUs? Cheers, Jon Brewer

2 1

RE: [nznog] Legal log retention requirements?
by Donald Neal 23 Mar '04

23 Mar '04

> -----Original Message----- > From: > nznog-bounces+Donald.Neal=telecom.co.nz(a)list.waikato.ac.nz > [mailto:nznog-bounces+Donald.Neal=telecom.co.nz(a)list.waikato.a > c.nz] On Behalf Of Joe Abley > Sent: Wednesday, 24 March 2004 9:23 a.m. > To: James Riden > Cc: NZ Network Operators Group > Subject: Re: [nznog] Legal log retention requirements? [...] > The truly paranoid also won't use syslog :-) > > Has anybody seen an implementation of RFC3195 in the wild, by the way? > http://security.sdsc.edu/software/sdsc-syslog/ ? - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

Jamie Baddley, BCL
by Dan Clark 23 Mar '04

23 Mar '04

Hi can someone from BCL please tell me who took over Jamie Baddley's position, or someone of equivilent position? Email to him appears undeliverable. sorry about posting directly to the list. Kind Regards Dan Clark Network Manager Scarfies.Net Ltd

1 0

Legal log retention requirements?
by Cameron Kerr 23 Mar '04

23 Mar '04

Hello all, I know that in some countries there are legal requirements for how long logs are meant to be held for. Are their such laws like that in NZ, and can anyone point me to any references? -- Cameron Kerr cameron.kerr(a)paradise.net.nz : http://nzgeeks.org/cameron/ Empowered by Perl!

8 7

RE: [nznog] Legal log retention requirements?
by Neil Gardner 23 Mar '04

23 Mar '04

Taking a different view entirely - if you ARE required to maintain logs of something that perhaps you aren't too keen to be secure or reliable, like, say, P2P transfers of commercial music.... Do you think that storing the logs on a ramdisk on a machine with no UPS, running win95a - would get you in any actual trouble? "Oh, sorry sir, we don't appear to be able to locate the logs for that user, but yes, I am CERTAIN we are logging that info - it must have been a glitch" -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

1 0

Re: [nznog] Legal log retention requirements?
by Ewen McNeill 22 Mar '04

22 Mar '04

In message <20040323051819.GC21771(a)mithrak.localdomain>, Cameron Kerr writes: >Hello all, I know that in some countries there are legal requirements >for how long logs are meant to be held for. Are their such laws like >that in NZ, and can anyone point me to any references? The closest "generic" legislation that I'm aware of is the Electronic Transactions Act 2002 (you can see it at, eg, http://www.legislation.govt.nz/ -- a site which annoyingly doesn't seem to permit deep linking due to gratituous use of Javascript). While that Act was a 2002 one I believe that various portions of it are only just coming into effect this year. As others have pointed out, there are both operational and other legal reasons for retaining various types of records for longer which in some instances might extend to log files. And various overseas cases have shown that it's useful to have an established policy (and stick to it) for data retention -- being able to legitimately say "as a matter of policy we always delete those after 4 weeks" is much more useful than having to say "oh, umm, yeah we deleted those logs you want". Ewen

1 0

OT: Wanted - Token Ring NIC
by Matt Camp 21 Mar '04

21 Mar '04

Believe it or not, I have need for a token ring network card for a PC... unfortunately I can't even find any in the usual second hand crap places, or websites... and new ones are now nearly $300. So if anyone out there knows of one, please let me know. Any speed, PCI preferred but can deal with ISA... rj45 type preferable. --- Matt Camp

1 0

Has the physical infrastructure for the "advanced network" been built?
by Juha Saarinen 17 Mar '04

17 Mar '04

http://snipurl.com/55qf The launch is soon, so it seems like it. "Advanced networks typically provide internet data links at more than 1 Gigabit a second, or 200 times faster than a Telecom Jetstream connection." Wow. Imagine surfing your intarweb email at that speed! -- Juha

5 6

RE: [nznog] Has the physical infrastructure for the "advancednetwork"been built?
by Donald Neal 17 Mar '04

17 Mar '04

This thread looks like the sort of thing you get when people don't go to the NZNOG conference and ask the people who are doing things. :{)* http://www.uniforum.org.nz/newsletters/2002_December#nginz may give the flavour. - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

Registry scam from DRoA
by Gavin Palmer 17 Mar '04

17 Mar '04

Hiya All Thought I would give a heads up about that Domain Registry of America registration scam that's been going around for a while, I received a "Domain Name Expiration Notice" this morning about a .com domain we don't own asking for renewal and giving the option to register a .net and .org. I'm sure you are all already aware of the scam but I hadn't actually seen an example locally, till now. They might start doing the rounds...? Cheers Gav

3 2

RE: [nznog] Has the physical infrastructure for the "advancednetwork"been built?
by Regan Murphy 17 Mar '04

17 Mar '04

> From: Juha Saarinen [mailto:juha(a)saarinen.org] > > Dan Clark wrote: > > > Hey Guys, > > I think this is Cisco's official word on it, kinda > exciting stuff > > really... > > > http://newsroom.cisco.com/dlls/global/asiapac/news/2003/pr_12-30.html > > That's just a campus network, isn't it? The Herald article > talks about linking the various NZ unis together with a > gigabit network. I assume Internet2 is the advanced network they are talking about hooking in to on an international level. You can read all about Internet2 here http://www.internet2.edu/ Infrastructure-wise I would expect there to be fibre to a number of universities and other institutions so technically it should be achievable. I guess renting some fibres would be where the "tens of millions of dollars" comes in and it would be an ongoing cost... -- Regan

1 0

Dell PowerConnect 3324/3348 switches.
by Simon Lyall 16 Mar '04

16 Mar '04

Has anyone has had some good/bad experiences with these, especially compared to Cisco 2950 and similar? Most of the reviews seem fairly positive [1] , I'm looking at simply running a few boxes on 100Mb/s with a trunk or two, nothing fancy (though if you've played around with the cute features I'd be interested). The price seems pretty good. Email me direct and I can summarize if people want. [1] http://www.infoworld.com/article/03/10/24/42TCdell_1.html -- Simon J. Lyall. | Very Busy | Mail: simon(a)darkmere.gen.nz "To stay awake all night adds a day to your life" - Stilgar | eMT.

1 1

Non University Capture Point
by Perry Lorier 16 Mar '04

16 Mar '04

The WAND group is a network research group within the University of Waikato. Our research interests include simulation and measurement of computer networks. As part of our research we are working on building more up to date models of various traffic patterns, however we are hampered because our current capture points do not cover some of the more interesting traffic types. In particular we're interested in packet traces of peer to peer traffic and gaming traffic for creating simulation models. Unfortunately for us P2P and gaming traffic on the Waikato University campus are actively "discouraged". We are also interested in how traffic in the "Real World" compares to traffic we see within a university network. WAND are interested in partnering with a New Zealand ISP to do analysis of their network. WAND can provide the hardware and the support to perform the traces, and can provide analysis of the captured traffic. If you are interested, please reply to me off list. -- Perry Lorier Research Programmer / WAND Network Research Group / Waikato University

2 1

RE: [nznog] airnote.co.nz dead and burried ?
by Will Steele 15 Mar '04

15 Mar '04

the emails still going there are probably on spammers lists.... 97% of it will probably be spam... and who really wants spam going to their cellphones? :) >From: Simon Byrnand <simon(a)igrin.co.nz> >To: nznog(a)list.waikato.ac.nz >Subject: [nznog] airnote.co.nz dead and burried ? >Date: Tue, 16 Mar 2004 09:35:37 +1300 > >Hi All, > >Does anyone know what the story is with the email domain airnote.co.nz ? > >I seem to remember that a few years ago it was a domain run by Telecom that >you could register for an email address for your 025 mobile and it would >forward email to your mobile. > >However for at least the last year (perhaps more) the designated mail >exchanger (which seems to be overseas) has refused connections, thus >causing any message to that domain to be retried for 5 days and then time >out. Trying to go to www.airnote.co.nz now redirects you to some other >Telecom page about "Yabba". (What does THAT have to do with the old airnote >site ? :) > >Anyone else notice stuff for this domain retrying in their outgoing queue >all the time ? It was a fairly well known and used domain at one point... > >If email for that domain really is dead and burried, perhaps someone in >charge of it might think to change the records so that everyones >mailservers don't waste 5 days trying to deliver messages there all the >time....(and yes we get quite a few messages addressed @airnote.co.nz even >now, don't ask me why :) > >Regards, >Simon Byrnand >iGRIN Internet > >_______________________________________________ >NZNOG mailing list >NZNOG(a)list.waikato.ac.nz >http://list.waikato.ac.nz/mailman/listinfo/nznog _________________________________________________________________ Watch movie trailers online with the Xtra Broadband Channel http://xtra.co.nz/broadband

1 0

airnote.co.nz dead and burried ?
by Simon Byrnand 15 Mar '04

15 Mar '04

Hi All, Does anyone know what the story is with the email domain airnote.co.nz ? I seem to remember that a few years ago it was a domain run by Telecom that you could register for an email address for your 025 mobile and it would forward email to your mobile. However for at least the last year (perhaps more) the designated mail exchanger (which seems to be overseas) has refused connections, thus causing any message to that domain to be retried for 5 days and then time out. Trying to go to www.airnote.co.nz now redirects you to some other Telecom page about "Yabba". (What does THAT have to do with the old airnote site ? :) Anyone else notice stuff for this domain retrying in their outgoing queue all the time ? It was a fairly well known and used domain at one point... If email for that domain really is dead and burried, perhaps someone in charge of it might think to change the records so that everyones mailservers don't waste 5 days trying to deliver messages there all the time....(and yes we get quite a few messages addressed @airnote.co.nz even now, don't ask me why :) Regards, Simon Byrnand iGRIN Internet

1 0

Organising the Next NZNOG Conference
by Donald Neal 11 Mar '04

11 Mar '04

People, As discussed at the conference, a committee is being called into existence to ensure that the next NZNOG conference happens. Unless I hear back from anyone else RSN, that committee will consist of: Joe Abley Jamie Curtis Neil Fenemor Daniel Griggs Peter Komisarczuk Simon Lyall Tony McGregor Lin Nah Nathan Ward Donald Neal | "Fiasco - an unsuccessful Technical Specialist | wall painting." Operations Engineering | Integration & Services Divn. | - Sandi Toksvig Alcatel NZ Ltd | All opinions mine only. | ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

NZ BBS Community
by Nick MacKechnie (thenet) 11 Mar '04

11 Mar '04

At a risk of being flamed... Any of you old timers who are interested - http://www.thenet.gen.nz/bbs Appologies for the spam... Nick

6 5

Orcon Internet Prefix List Update (2004-03-10)
by Craig Whitmore 09 Mar '04

09 Mar '04

For all those peering with Orcon Internet (AS17746) nationally, please update your prefix lists with the following networks (also in attached file). Added: ip prefix-list orcon-national permit 202.127.8.0/22 le 24 ip prefix-list orcon-national permit 203.97.44.0/24 ip prefix-list orcon-national permit 203.97.66.0/24 ip prefix-list orcon-national permit 218.101.56.0/24 Thanks Craig Whitmore Systems Administrator Orcon Internet http://www.orcon.net.nz

1 0

Checkpoint Software
by Tim John - Domainz 07 Mar '04

07 Mar '04

Hi all, We currently have a number of firewalls that use CheckPoint version 4.1. I'm trying to do some stuff on them that requires version 4.12. Unfortunately, this isn't available for download anymore (from CheckPoint) and although the firewalls were under maintenance a few years ago (when version 4.12 was released), we are unable to obtain it now. The latest version 'NG' is available for plenty of $$$$ !! Has anyone got a copy archived away someplace, or can someone point me to location where it can be downloaded ? Thanks in advance ... Tim

1 0

Re: [nznog] NZ BBS Community
by Dan Clark 04 Mar '04

04 Mar '04

my appolagies for my previous comments, kind of came out the wrong way. Kind Regards Dan Clark

1 0

TelstraClear IP.Express Auckland
by Matthew G Brown 03 Mar '04

03 Mar '04

Does anyone know the availability if Telstra Clear Private IP.Express in Auckland? Have client wanting dedicated access between ChCh and Auckland offices @ between 256k and 512k Best Regards Matt Brown Managing Director Data Sanctuary Internet Backup & B & R Holdings LTD Nelson, New Zealand mailto: matt.brown(a)datasanctuary.co.nz http://www.datasanctuary.co.nz MSN: Matt(a)Brh.Co.Nz DDI: (03) 544 9116 MOB: 027 4807731 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.610 / Virus Database: 390 - Release Date: 3/3/2004

1 0

RE: [nznog] OT: Dunedin broadband
by Gavin Palmer 02 Mar '04

02 Mar '04

Potential user is in the Broad Bay area... -----Original Message----- From: Jonathan Dean [mailto:jon.dean(a)simplicity.net.nz] Sent: Wednesday, 3 March 2004 6:01 p.m. To: gavinp(a)softtech.co.nz Subject: Re: [nznog] OT: Dunedin broadband On Wed, 03 Mar 2004 16:05, Gavin Palmer wrote: > Hiya All > > Please forgive the OT post... > > If anyone can offer a broadband internet connection of some kind to a > home user out in the Dunedin wops would you please contact me off > list? Jetstream or Wireless is not available (according to Xtra), is > there anything other than satellite out there? > > Thanx in advance > Gav Hi Gavin, Could you give a little more information specifying where in the Dunedin wops the home is? Cheers, Jon Dean

1 0

OT: Dunedin broadband
by Gavin Palmer 02 Mar '04

02 Mar '04

Hiya All Please forgive the OT post... If anyone can offer a broadband internet connection of some kind to a home user out in the Dunedin wops would you please contact me off list? Jetstream or Wireless is not available (according to Xtra), is there anything other than satellite out there? Thanx in advance Gav

1 0

iconz / ezysurf / wired country
by Kyle Carter 02 Mar '04

02 Mar '04

If there is anyone on the list who works for iconz / ezysurf / wired country id like to make contact.. email me back Kyle

4 3

RE: [nznog] iconz / ezysurf / wired country
by Kyle Carter 01 Mar '04

01 Mar '04

Thanks all, i posted to the list to see if i could get hold of someone with some real idea on a solution to my problem, (and preferably not a first level helpdesk person if at all possible), trying to get from them to someone who knows something sometimes feels like a lot of effort, but it appears my plan has worked. i expected a wait for a reply, but it arrived a lot quicker than expected. thankyou nznoggers... resume surfing / irc / whatever geeks do at this time of night (except for the shift working noc staff, get back to work)

1 0

Verisign sues net oversight body
by Philip D'Ath 01 Mar '04

01 Mar '04

Looks like Verisign are about to start down a track that could forever change the view commonly held of the Internets shared decentralised structure. http://news.bbc.co.uk/2/low/technology/3492240.stm CCNP, BCMS Philip D'Ath.

3 2

"Working with them is like being nibbled to death by ducks." Forbes' take on Verisign vs. ICANN
by Juha Saarinen 01 Mar '04

01 Mar '04

http://www.forbes.com/business/2004/03/01/cx_ld_0301vrsn.html -- Juha

1 0