- NZNOG - lists.nznog.org

SCCN Issue
by Tristram Cheer 11 Mar '16

11 Mar '16

Hi All, Anyone else being impacted by the SCCN fault? Being told it’s impacting multiple clients. Cheers

5 5

L-Root IPv6 address renumbering
by Terry Manderson 10 Mar '16

10 Mar '16

Hi All, (wearing a different hat, and using this email address for convenience as it is subscribed here) This is advance notice that there is a scheduled change to the IPv6 addresses in the Root Zone for the L root-server, also known as L.ROOT-SERVERS.NET, which is administered by ICANN. The current IP addresses for the L.ROOT-SERVERS.NET service are: 199.7.83.42 2001:500:3::42 As of March 23, 2016, the new IP addresses for the L.ROOT-SERVERS.NET service will be: 199.7.83.42 2001:500:9f::42 The change will be implemented on the root zone on March 23 2016, however the new address is already operational. We encourage DNS infrastructure operators to update their DNS resolvers root "hints” file. New hints files will be available at the following URLs once the change has been formally executed on March 23, 2016: • http://www.internic.net/domain/named.root • http://www.internic.net/domain/named.cache Cheers Terry

1 0

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 02 Mar '16

02 Mar '16

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… Kind regards, Selina Harrington IANA Senior Specialist ICANN

2 1

New survey report published: The regulatory conditions of internet interconnection
by Uta Meier-Hahn 01 Mar '16

01 Mar '16

Hi, A couple of months ago, I asked you to share your experiences with regards to public regulation of internet interconnection in a survey. Many networkers from around the globe participated. Thank you! The report has now been published. I’m including the executive summary below. The full paper can be downloaded at <http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2740312>. Feel free to share this link wherever you see fit. Thanks again for providing your highly valuable input. I will be happy to hear what you think about the results. Best wishes, Uta # Exploring the regulatory conditions of internet interconnection ## Executive summary Network interconnection is a central feature of the internet that has been subject to only little formal regulation. However, local public regulation is starting to emerge – be it through disclosure regulations, mandatory peering or licensing terms. Due to the networked nature of the internet, local rules may acquire a global scope. This report explores internet interconnection professionals’ encounters with public regulation and it provides an initial overview about how this regulation affects internet connectivity. On the basis of a convenience sample of 163 survey submissions, the following has been found: * Nine out of ten kinds of regulation presented to the participants have been encountered by more than half of them. This result gives reason to revisit the widespread notion that internet interconnection is an unregulated space. 66% of the participants have encountered a regulatory authority that imposes its own technical or operational standards. Moreover, imposition of regulatory standards was regarded to be the most influential on internet interconnection practices, together with competition laws (both 67%). * Local regulation of internet interconnection creates a tension between the regulated and the unregulated space in the internet. In order to overcome the normative difference, network operators need to make an extra effort. The degree to which network operators are affected by local regulation depends on a networks’ structure rather than on its size. Local regulation raises more difficulties for the kinds of infrastructural innovations that depend on having many points of presence. * For networkers, public regulation of internet interconnection is relevant in three thematic domains: 1) in the economies of internet interconnection, 2) in engineering and operations, and 3) in the modes of governance. * Overarching observations note that public regulation of internet interconnection contributes to a formalisation of the otherwise very informal sector. It also shines a spotlight on how networks are categorised and are thereby “prepared” for the application of regulation. Further, various examples highlight how regulatory authorities co-opt internet infrastructure for new policy purposes that were previously not understood as central to internet operations, e.g., data retention. * Local networkers value the presence of international network operators not only as potential peering partners but also as mediators for know-how about best practices and advanced modes of internet interconnection. * Networkers are very critical about regulations that contradict engineering principles. The most accepted forms of regulation also apply in other societal spheres: basic rights for citizens, e.g., for broadband, and competition regulation. — Uta Meier-Hahn | Doctoral Researcher Alexander von Humboldt Institute for Internet and Society Französische Straße 9 | 10117 Berlin Phone +49 30 200 760-82 | http://www.hiig.de/en

1 0

nad.org.nz website content = default pages
by Pete Mundy 28 Feb '16

28 Feb '16

Hello NOGers, Does anyone happen to know contact information we could use to get in touch with the people who run the Number Administration Deed website, nad.org.nz? Is it the TCF themselves, or a subbie? The site content has all gone missing with the various pages now reporting default-install messages along the lines of 'Welcome to SilverStripe! This is the default homepage'. Even the 'contact us' page has a similar message. Hence the request here for contact details :) Would appreciate a pointer from anyone who can point me in the right direction for a maintainer contact. Pete Mundy

2 3

WXC / VNGS Down - Anyone out there????!
by Liam Farr 26 Feb '16

26 Feb '16

Hey, Anyone out there from WXC / VNGS? All my SIP trunks have been up and down over the last hour.... Their website is down... No one is answering the NOC phone, (when it rings... now it seems to be going straight to 404 / disconnected). No one is answering the NOC email address, their main 0800123456 seems up and down as well, and waiting in the support queue just ends up in a disconnect. -- Kind Regards Liam Farr Maxum Data +64-9-950-5302

2 1

FYI Auckland Thursday Night Curry at 7pm tonight 25 Feb
by Lin Nah 24 Feb '16

24 Feb '16

HI all Just a note to those of you in town for Apricot 2016. Hope APRICOT is going well for you. Auckland Thursdaynight curry is on at 7pm 25 February 2016 in. Mt Eden (not in CBD). All are welcome though there may be space constraints. We should be able to accommodate about 30 people. Location: Nite Spice Mt Eden. Address: 407 Mt Eden Rd, Mt Eden Village If you haven't been there before, we are usually put in the back room. So walk in to look for us. Menu: http://www.zomato.com/auckland/nite-spice-1-mount-eden/menu Location: City end of Mt Eden Village. A few doors away from RAD (what used to be Sitar). Google Map: http://maps.google.com/maps/place?cid=1836108314118101884 Bus Route No: 274 No doubt there'll be post-curry coffee at one of the cafes nearby. Would appreciate knowing if you'd be there or not FB event https://www.facebook.com/events/183741448664126/ Thanks regards lin

1 0

NZWIP contact? [UNCLASSIFIED]
by Peter Gent 10 Feb '16

10 Feb '16

Hi, Could someone on the NZWIP committee please contact me off list if possible? Thanks Peter Peter Gent PLANNING ANALYST Radio Spectrum Management Commerce, Consumers and Communications Branch, Building, Resources and Markets Group Ministry of Business, Innovation & Employment peter.gent(a)mbie.govt.nz | DDI: +64 4 462 4279 | Ext 44279 Free Phone: 0508 RSM INFO (776 463) | Website: www.rsm.govt.nz 15 Stout Street, PO Box 2847, Wellington, New Zealand www.govt.nz - your guide to finding and using New Zealand government services Any opinions expressed in this message are not necessarily those of the Ministry of Business, Innovation and Employment. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer.

1 0

Address book leak - from where? (was Re: Fw: new important message)
by Nicholas Lee 08 Feb '16

08 Feb '16

Anyone figure out the source/method of these address book leaks? See: http://wardinewrock.blogspot.co.nz/2015/09/email-sent-under-my-name-not-fro… Nicholas

2 1

Fw: new important message
by neil＠underground.geek.nz 08 Feb '16

08 Feb '16

Hello! New message, please read <http://123adreszoeken.nl/waiting.php?1> neil(a)underground.geek.nz

1 0

Spark....please enable ripe.net
by Brad Hooper 26 Jan '16

26 Jan '16

Morning, Could someone from Spark please ping me off list. Your DNS servers haven't been resolving ripe.net domains for the last 3 months. Your helpdesk is telling me that RIPE has been shutdown because they cannot ping them. Thanks, Brad

3 3

Freelance support for Cisco PBX
by Jesse Archer 21 Jan '16

21 Jan '16

Morning, We've got a client in Auckland with a Cisco UC560 PBX. This isn't a unit we're familiar with. They'd like to change SIP providers which will involve changes to their current public WAN address on the unit and other settings. Is there someone who would be willing to assist with this? Send replies off-list please. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

Fw: new important message
by neil＠underground.geek.nz 20 Jan '16

20 Jan '16

Hello! New message, please read <http://esportskart.com/age.php?1qqky> neil(a)underground.geek.nz

1 0

Sneak Peak at some of the 2016 APRICOT programme.
by Dean Pemberton 19 Jan '16

19 Jan '16

Hey everyone. There must be some perk to having two Kiwis as the co-chairs of the APRICOT programme committee. All I could think of was that I can give you guys a look at the titles of some of the talks we've accepted before they make it up on the website. So here you go. There's more coming in as well as more already submitted that we're working to put the final touches to. So no more excuses, If you needed a reason for your boss, choose some of those and register here: https://2016.apricot.net/register If you know anyone who works for one of our telcos.... I can't recommend the "IPv6 in Mobile Networks" tutorial by Sunny Yeung(a)Telstra enough. He's a great speaker and he's got all the experiences from an organisation who has actually gone down the track of doing something here. If anyone got an issue with not being able to register for any reason, then email me personally and lets have a chat. Don't forget, there's no NZNOG this year, so this is basically it =) Dean CONFERENCE TALKS 'OpenFlow: What is it Good For?' - Pete Moyer(a)Brocade 'Virtualisation For Network Testing & Staff Training' - Philip Smith(a)Network Startup Resource Center 'EDNS (in)Compatibility: Adventures in Protocol Extension' - Eddy Winstead(a)ISC 'Building a Small DC' - Karl Brumund(a)Dyn 'Recent Network Trends in Asia and Oceania' - Cody Williams(a)TeleGeography 'Next Generation Network Architectures' - Sunny Yeung(a)Telstra Corporation Limited 'BGP in 2015' - Geoffrey Huston(a)APNIC 'IPv6 Performance' - Geoffrey Huston(a)APNIC 'New Zealand Broadband Map' - Jay Daley(a)NZRS 'prefix hijacked' - Yoshinobu Matsuzaki(a)IIJ 'SoftBank Global AS migration practice' - Hirokazu Taira(a)SoftBank 'Why I should Model my Network' - Jeff Young(a)Juniper Networks 'Making the best of satellite links to Pacific Islands' - Ulrich Speidel(a)University of Auckland 'DDoD Mitigation using BGP Flowspec' - Justin Ryburn(a)Juniper Networks 'Bit Indexed Explicit Replication (BIER)' - Greg Shepherd(a)Cisco 'Top Misused ASNs' - Anurag Bhatia(a)Hurricane Electric TUTORIALS 'IPv6 in Mobile Networks' - Sunny Yeung(a)Telstra Corporation Limited 'NETCONF/YANG' - Shishio Tsuchiya(a)Cisco Systems G.K. 'BGP Multihoming Techniques' - Philip Smith(a)APIA 'BGP Techniques for Network Operators' - Philip Smith(a)APIA 'Segment Routing: A Tutorial' - Paresh Khatri(a)Alcatel-Lucent

1 0

Thanks for the suggestions
by Lloyd Parkes 19 Jan '16

19 Jan '16

Hi all, Thanks for your suggestions. About half of you said Juniper and the other half of you recommended a wide variety of good solid choices. Particularly valuable was the reminder to use eBay, which is actually reliably useful these days. I’ve bought a Juniper and I’m keeping your other suggestions in mind for the future. Cheers, Lloyd

1 0

Suggestions for a lab switch?
by Lloyd Parkes 13 Jan '16

13 Jan '16

Hi all, I’ve run out of port capacity in my lab, so I need another switch. Since it’s a lab, I want a brand of switch that I don’t already have so that I can do more testing. Since it’s a brand I don’t already have, I don’t really know what to get. What I want/need is: managed (somehow, SNMP at least) gigabit (I have lots of 100Mb thanks) rack mount around $600 (so, an SMB class switch I guess) ~24 ports What I don’t want/need (I have these already): obsolete Cisco IOS devices Mikrotik Netgear D-Link a lemon PoE Please reply off list with suggestions of devices to either buy or avoid. Thanks, Lloyd

1 0

a routing loop??
by Victor Zhong 07 Jan '16

07 Jan '16

Afternoon there, feels like there is an ongoing rooting loop somewhere between Auckland and Hamilton?ideas? [image: Inline images 2] -- Cheers, Victor Xin ZHONG 021 026 35239

3 3

Vocus Transit Outage
by Jesse Archer 02 Jan '16

02 Jan '16

Morning, Did anyone else experience an outage with Vocus IP Transit services last night? *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

2 1

Whole of Domain (.nz) 2016 Web Harvest
by Jay Gattuso 22 Dec '15

22 Dec '15

Hi Noggers, Further to previous emails (6th Nov 2015), we are all set to kick off the web harvest in the new year. We’ll be starting the crawl on the 11th Jan 2016, and expect to be crawling for approximately 3 to 4 weeks. The crawlers will be using the user agent string ““NLNZ_IAHarvester2016” so if you do need to set any specific rules for our crawlers this would be the identifier to use. The robots.txt and Robots META tag exclusions on crawled sites will be obeyed with some minor exceptions:- We’ll strictly obey all rules that relate to the user agent (apart from slash pages, which will be harvested regardless). Facebook and some other curated social media sites will be harvested regardless of their Robots.txt. The Crawl Notification (Notice to Webmasters) page is located at on the Library’s web site at: http://natlib.govt.nz/publishers-and-authors/web-harvesting/domain-harvest. If you have any questions or concerns about the harvest, please drop me a line. I’ll watch for email at various points over the Christmas break, and back in the office on the 4th Jan to address any questions/concerns. Best, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

Who's breaking the APE?
by Michael Fincham 20 Dec '15

20 Dec '15

Can you knock it off please? -- Michael

5 4

Orcon DNS Akl
by Stuart Campbell 16 Dec '15

16 Dec '15

5 5

Free racks in Auckland
by Jason Keating 16 Dec '15

16 Dec '15

Hi all, Apologies if this is deemed crappy use of the email group, but I have free stuff to give away. I have 5 HP series 1000 racks (42u and 600 wide) sitting in Albany, Auckland which are free to anyone that may wish to pick them up. Feel free to email me direct if you are interested. Jason Keating Trade Me Limited www.trademe.co.nz<http://www.trademe.co.nz> Telephone: +64 4 897 7952 Mobile: +64 21 191 5339

1 1

NZNog/Apricot
by Patrick Jordan-Smith 16 Dec '15

16 Dec '15

Hi guys and mostly the NZNOG trustees (whoever they are at the moment.) I remember seeing a while back that some funds were going to be made available for helping people fund the cost of attending Apricot (since it's taking the place of the 2016 conference.) Did anything ever eventuate out of this? The cost for Apricot is significantly higher than the usual nznog cost plus hotels etc if you're not from Auckland. Would be good to see some clarity on this given that early bird tickets are now closed and not everyone has a corporate to fund their attendance. Even if its a "its not happening" comment that would be still helpful. Alternately have the trustees talked to the Apricot organisers at all about possibilities? Thanks, Pat

8 10

NZIRF invite
by Nicole Skews-Poole 14 Dec '15

14 Dec '15

Kia ora NZNOG-ers, The following event may be of interest to you: *Following the success of the inaugural New Zealand Internet Research Forum in 2015 <https://internetnz.nz/internet-research-forum-2015-programme>, InternetNZ in conjunction with AUT's Institute of Culture, Discourse & Communication is pleased to announce a second forum to be held early in 2016. This event, which brings together Internet researchers and interested parties to discuss their proposed, current and finished research with the New Zealand Internet community.* *The Forum will be held at AUT on 4-5 February 2016, with discussion groups for postgraduate students and early-career researchers and Birds of a Feather session spaces available on the afternoon of Thursday 4 February and a welcome function on evening of Thursday 4 February.* *The NZIRF will have a technical and a non-technical stream and supports the continued establishment of a network of researchers working in a wide range of fields such as social media, virtual worlds, cyber security, online activism, crowd-sourcing, computer engineering, copyright, gaming, digital politics, online communities, the virtual public sphere, online journalism, and digital literacy.* *The NZIRF is free to attend for those participating in the programme (i.e. presenting, organising). Space for those not participating in the programme will be confirmed in early 2016 based on availability. Please complete an Expression of Interest (EoI) <https://internetnz.nz/new-zealand-internet-research-forum-0> in attending and we’ll keep you posted with Forum developments including the finalised programme. * Please consider distributing this notice to others who may be interested in attending. Kind regards, Nicole Skews-Poole Community Programme Liaison InternetNZ Mobile: +64 27 323 8914 Office:+64 4 495 2336 Skype: nicoleskews For a better world through a better Internet

1 0

Re: [nznog] "updating" stats.labs.apnic.net
by George Michaelson 07 Dec '15

07 Dec '15

the stats overwhelmingly come from HTML5 advert placements in google, which predominantly but not solely are placed over youtube videos. Approximately 5-6m placements per day. -george On 8 December 2015 at 04:42, Pieter De Wit <pieter(a)insync.za.net> wrote: > Hi Guys, > > > > Does anyone know where stats.labs.apnic.net get's it's stats from ? I > would ask APNIC, but they are still closed :) > > > > Cheers, > > > > Pieter > >

1 0

Clueful contact for Sky TV about?
by Neil Gardner 07 Dec '15

07 Dec '15

Hi gents (and gentesses?) If there's someone on here that has a properly network clueful contact at SkyTV I'd love them to get in touch with me please regarding some DNS behaviour we're observing related to them. Regards ________________________________ [Spark] Neil Gardner Solution Design Engineer - Fixed T +64 4 802 9659 (extn 40659) M 027 651 9993 E Neil.Gardner(a)spark.co.nz Ground Floor, 16 Walker Street P O Box 1473, Christchurch 8140 www.sparknz.co.nz<http://www.sparknz.co.nz> ________________________________ This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 1

"updating" stats.labs.apnic.net
by Pieter De Wit 07 Dec '15

07 Dec '15

Hi Guys, Does anyone know where stats.labs.apnic.net get's it's stats from ? I would ask APNIC, but they are still closed :) Cheers, Pieter

2 1

Orcon IPv6 Rollout
by Simon Allard 06 Dec '15

06 Dec '15

Hi NZNog Riding on the coat tails of the Stuff IPv6 post (which is really cool btw!). Over the last few weeks we have been rolling out Ipv6 dual stack on the Orcon customer base. We targeted this brand as the CPE's we give to customers has support for IPv6. (Some modems require firmware upgrades which we are pushing out). If this goes well for us, we will review Ipv6 for the other brands in the new year. Currently just supporting ipv6 on the xDSL product range, with UFB coming in the new year. Seeing some really good stats coming through on the APNIC Ipv6 Stats page (http://stats.labs.apnic.net/ipv6/AS17746) - The 1 month view shows the best trend. Still very early days and I expect to see that number grow as CPE firmware gets pushed out and customers reconnect to get their IPV6 PD. Feedback from customers has been positive :D Any questions please drop me a line Cheers, Si Simon Allard | Senior Network Architect D: 09 550 2790M: 020 100 0790 www.orcon.net.nz | www.slingshot.co.nz | www.flip.co.nz | www.callplus.co.nz | www.2talk.co.nz Shared Services Banner This message and any attachments contain privileged and confidential information. If you are not the intended recipient of this message, you are hereby notified that any use, dissemination, distribution or reproduction of this message is prohibited. If you have received this message in error please notify the sender immediately via email and then destroy this message and any attachments.

6 7

Re: [nznog] NZNOG Digest, Vol 156, Issue 4
by Murray King 04 Dec '15

04 Dec '15

1 0

www.stuff.co.nz on ipv6
by Jethro Carr 03 Dec '15

03 Dec '15

Good Morning Noggers, As of this morning, www.stuff.co.nz is serving our production content on IPv6. $ host www.stuff.co.nz www.stuff.co.nz is an alias for kona6.fairfaxmedia.com.au.edgekey.net. kona6.fairfaxmedia.com.au.edgekey.net is an alias for e1365.dsce2.akamaiedge.net. e1365.dsce2.akamaiedge.net has address 23.222.106.112 e1365.dsce2.akamaiedge.net has IPv6 address 2600:1415:5:181::555 e1365.dsce2.akamaiedge.net has IPv6 address 2600:1415:5:183::555 e1365.dsce2.akamaiedge.net has IPv6 address 2600:1415:5:184::555 Giving NZNOG a heads up incase your customers encounter any issues, particularly given our size/popularity. Naturally things on our end are perfect, but uh, if you happen to see any “unexpected routing features” please feel free to reach out to myself. Note that our IPv6 connectivity is provided by the Akamai CDN network. regards, Jethro

4 6

UFB DFAS Lawful Interception
by Tristram Cheer 03 Dec '15

03 Dec '15

Hi All. Does anyone here know what the LFC's are doing for LI on dark fibre? I think most will be some kind of splitter but one LFC is talking about using a 50/50 split introducing 3db of loss into each leg and I'd like to get an idea of what the others are doing. Normally I'd look at the CFH tech specs but LI on DFAS came after them and there's no reference in the agreements Cheers :) TRISTRAM CHEER UBER GROUP LIMITED NETWORK ARCHITECT - MOST PROBLEMS ARE THE RESULT OF PREVIOUS SOLUTIONS... [Facebook]<https://www.facebook.com/UberGroup?_rdr=p> [Twitter] <https://twitter.com/ubergroupltd> E: t(a)uber.co.nz<mailto:t(a)uber.co.nz> P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz<http://www.uber.co.nz> 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND

3 2

Anyone else having Chorus issues in Auckland with EUBA/WVS this morning?
by Jesse Archer 01 Dec '15

01 Dec '15

We are seeing issues yet nothing reported on the Chorus status pages.

4 3

ETSI 102 232 1-7 complaint LI solutions
by Tristram Cheer 30 Nov '15

30 Nov '15

Hi All, I was wondering what solutions exist for small to medium sized ISP's to have "ETSI standard Lawful Interception" as part of the Interception Capable upgrade from Interception Ready. I was hoping there may be a solution that has a presence in NZ or AU that is cost effective enough for the small guys :) Cheers TRISTRAM CHEER UBER GROUP LIMITED NETWORK ARCHITECT - MOST PROBLEMS ARE THE RESULT OF PREVIOUS SOLUTIONS... [Facebook]<https://www.facebook.com/UberGroup?_rdr=p> [Twitter] <https://twitter.com/ubergroupltd> E: t(a)uber.co.nz<mailto:t(a)uber.co.nz> P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz<http://www.uber.co.nz> 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND

1 0

Call for Presentations - DNS-OARC 24th Workshop, Mar 2016
by Sebastian Castro 30 Nov '15

30 Nov '15

The DNS-OARC 24th Workshop will take place in Buenos Aires, Argentina between March 31st and April 1st 2016, Thursday and Friday before IETF95. This will be the first time DNS-OARC is held in the Southern Hemisphere. To attract the best DNS minds and local audience, DNS-OARC is requesting proposals for presentations, with a preference for Operational Practices Reports, and "How we solved this problem" presentations. This workshop intends to build from previous strong DNS-OARC workshops, where both operational content and research are welcome. Presentations from DNS operators are particularly desired, as well as from DNS researchers. All DNS-related subjects are accepted. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. A timeslot will be available for lightning talks (5-10 minutes) on April 1st, for which submissions will be accepted during March 31st on a first-come first-served basis. Workshop Milestones 30th November 2015, Call for Presentations posted and open for submissions 29th January 2016, Deadline for submission 16th February 2016, Final Program published 28th March 2016, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net/event/22/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To ensure the quality of the workshop, submissions including draft slides will get extra points during evaluation. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Whose residential UFB in Whanganui has diverse backhaul?
by Donald Gordon 26 Nov '15

26 Nov '15

Hi I've had UFB at home for two years now. I'm on to my second ISP. ISP #1 had an 8 hour outage for all their Whanganui UFB customers due to fault in their backhaul. ISP #2 had a 20 hour outage last month for all their Whanganui UFB customers due to a fault in their backhaul (they say Chorus) between here and Palmerston North. Who provides residential UFB in Whanganui that won't be brought down by a single backhaul fibre fault? I realise I'm getting a residential service with essentially no SLA, and that the fibre between me and the interconnect point is a single point of failure. I'm happy to take off list answers and won't post your answers publicly unless you particularly want me to. Regards Donald Gordon

5 4

Re: [nznog] AKL-IX MDR Pop
by Tim Hoffman 26 Nov '15

26 Nov '15

This is true, I did miss the WIX! And Wellington coffee is 100x better then that in the states! Apologies! Still - it is nice to see relatively even amounts of traffic on both Auckland platforms from a resiliency point of view. Perhaps CityLink will now considering lowering prices to the $450/month/10g IX Australia publicly disclose that they charge? Sent from my iPhone > On Nov 26, 2015, at 11:47 AM, Sid Jones <sid.jones(a)citylink.co.nz> wrote: > > FYI: We’ve had some traffic from 1 or 2 providers move from across the APE to the WIX instead. http://nzix.net/wix.html > > There’s a pretty consistent 2 to 2.5 Gbps on the WIX most days – and lets not discount Wellington Tim - as you well know we have by far the best coffee ;) > > From: <nznog-bounces(a)list.waikato.ac.nz> on behalf of Tim Hoffman <tim(a)hoffman.net.nz> > Date: Friday, 27 November 2015 at 8:31 AM > To: Scott Lawson <scott.lawson.nz(a)gmail.com> > Cc: NZNOG Mailing-List <NZNOG(a)list.waikato.ac.nz> > Subject: Re: [nznog] AKL-IX MDR Pop > > Thanks Joe! Great to see that we have another strong option in NZ. > > Interesting also to see now that we have very equal traffic volumes between AKL-IX and APE (even outside the last time this was discussed where we had a major software release coming out of a CDN connected to AKL-IX if I recall correctly). In fact, it looks like AKL-IX is doing just a slight bit more! > > Having two solid IXs in Auckland is the best result for the resiliency of the New Zealand internet - it's great to see that we finally go there! > > Cheers, > Tim > > > >> On Thu, Nov 26, 2015 at 12:11 AM, Scott Lawson <scott.lawson.nz(a)gmail.com> wrote: >> Hi Joe, >> >> Thanks for the update re MDR AKL-IX POP. Keep up the good work! >> >> Do you have any timeline for when the society will be incorporated and you will be moving to paid ports? >> >> Cheers, >> >> Scott. >> >> >>> On 26/11/15 8:44 PM, Joe Wooller wrote: >>> Hey all, >>> >>> Firstly sorry not sorry if this email is off topic. :) >>> >>> I will keep this brief. >>> AKL-IX MDR pop is now live. As we are still waiting for the Society to be Incorporated we will be offering trials for peers interconnecting at MDR. >>> If you would like to hook up please drop me an email and we can get the ball rolling! >>> >>> Cheers >>> Joe >>> >>> _______________________________________________ >>> NZNOG mailing list >>> NZNOG(a)list.waikato.ac.nz >>> http://list.waikato.ac.nz/mailman/listinfo/nznog >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog > > <ape7.png> > <graph_image.php.png>

1 0

AKL-IX MDR Pop
by Joe Wooller 26 Nov '15

26 Nov '15

Hey all, Firstly sorry not sorry if this email is off topic. :) I will keep this brief. AKL-IX MDR pop is now live. As we are still waiting for the Society to be Incorporated we will be offering trials for peers interconnecting at MDR. If you would like to hook up please drop me an email and we can get the ball rolling! Cheers Joe

5 4

UPC lite - does anyone have any info on what kind of service this actually is?
by Mike Taylor 23 Nov '15

23 Nov '15

I'm trying to get some sensible info on exactly what a 'UPC lite' circuit from Chorus is. The info I've managed to glean so far is: - It's an ATM based service (PVC 0/101 from the info I can get from googling.) - I'm told it can only be delivered over a BUBA handover - which means it looks like it might be an aDSL service, restricted to 256k up/down So, putting all this together, it sounds like I'll need an aDSL modem, and treat it just like a 'normal' residential aDSL service, but on PVC 0/101, with PPP <?> and PAP/CHAP? Does anyone have the low down on what this actually is? Thanks in advance, Mike Just so you know, the only two links I could find that say anything useful about UPC lite were: http://www.sparkwholesale.co.nz/n36,3,letter=u.html and http://www.gpforums.co.nz/threads/420210-UPC-lite-connection-%28need-help%29 --

1 1

nzwrt redux?
by Dave Taht 22 Nov '15

22 Nov '15

this is looking quite good: https://www.indiegogo.com/projects/turris-omnia-hi-performance-open-source-… Dave Täht Let's go make home routers and wifi faster! With better software! https://www.gofundme.com/savewifi

10 14

about NZNOG Conference 2016
by Hiroki Kashiwazaki 21 Nov '15

21 Nov '15

Hi, Although I want to attend NZNOG conference 2016, I cannot find any information on NZNOG web site and ML archives. Are there any information?

2 1

UFB 2M upload issues - DEI markings - Juniper
by Dave Mill 19 Nov '15

19 Nov '15

Hi all We have finally fixed our 2M upload issues on Chorus UFB accelerate plans. Skip to the end of this email if you just want an example fix. Along the way we established a couple of incorrect "facts". Some of which I shared with this list. These were: 1) DEI marked packets were being silently dropped on ingress from the Chorus handover 2) Junos 12.3 fixed this issue Recently I deemed that "fact" 1) was wrong and hence "fact" 2) was a bit irrelevant. Here's a crude diagram of our typical set-up: <Chorus handover> <-> [1] <MX80> [2] <-> MPLS/VPLS over Backhaul fibre <-> [3] <PMR MPLS MX> [4] <-> [5] <PMR BNG> Where the numbers in the square brackets are interfaces where I performed some traffic stats. I deemed that DEI=1 marked packets were still showing up at [1] and [3]. They were not showing up at interfaces [4] and [5]. This deemed my above "facts" incorrect. With Juniper CoS you classify on ingress and rewrite on egress. Once we deemed that DEI marked packets were not being dropped at [1] and instead were being dropped between [3] and [4] we can now rewrite these before interface [4]. As we need to rewrite on egress we'll do this at point [2]. In our test case interface [2] is actually xe-1/2/0.388 . And a simple fix for the issue is under the class-of-service section implement: interfaces { xe-1/2/0 { unit 388 { rewrite-rules { ieee-802.1ad { ieee-802.1ad-dei-rewrite; vlan-tag outer; } } } } } rewrite-rules { ieee-802.1ad ieee-802.1ad-dei-rewrite { forwarding-class best-effort { loss-priority low code-point 0000; loss-priority high code-point 0000; } } } The key is to use a ieee-802.1ad rewrite rule rather than a ieee-802.1 rule. The leftmost bit of the 4 bit code-point is the DEI bit. This is all assuming that all traffic is classified as best-effort at interface [1] - if that is not the case then re-write the DEI bit for your other queues as well. You only need to rewrite the outer vlan DEI bit. This is tested on Junos 12.3R8.7 on a MX80. Thanks to all involved in helping fix this - Steve K, Vance and Ivan especially. Cheers Dave

3 4

Cisco Config for Chorus HSNS SHDSL Service?
by Alan Howard 19 Nov '15

19 Nov '15

Hi I have to configure a Cisco 888EA router for a 10Mb HSNS SHDSL service from Chorus, which is not something I have tackled before. Does anyone have a config example suitable for the Chorus service that they can share? I've been Googling for a config but can't find anything specific to Chorus. Any assistance appreciated. Alan.

2 3

1000BaseT SFP modules
by Gareth Fletcher 19 Nov '15

19 Nov '15

Hi team Sooo would anyone happen to be in Auckland and have a couple of spare GLC-T 1G SFP modules that they'd be willing to part with for a month or so? The $nobrand ones we got coded for our Nexus 9Ks don't work in our 3k :( And now in a bit of a pinch... If you do please reply off-list, and please include your beer of preference. Cheers Gareth

1 0

Re: [nznog] nzwrt redux?
by Ray Taylor 18 Nov '15

18 Nov '15

I imagine once we see ufb unbundling then that could slightly change. The big issue is incompatibilities between pon systems and making an ont in a small sfp form factor. Sent from my Samsung Galaxy smartphone.<div> </div><div> </div><div>-------- Original message --------</div><div>From: Tristram Cheer <t(a)uber.co.nz> </div><div>Date: 19/11/2015 13:04 (GMT+12:00) </div><div>To: Daniel Christie <daniel.christie(a)enlighten.co.nz>, Dave Taht <dave.taht(a)gmail.com>, NZNOG(a)list.waikato.ac.nz </div><div>Subject: Re: [nznog] nzwrt redux? </div><div> </div>Under the current UFB structure there is no scope for RSP supplied or end user supplied pluggable optics TRISTRAM CHEER Network Architect - Most problems are the result of previous solutions... E: t(a)uber.co.nz P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Daniel Christie Sent: Thursday, 19 November 2015 1:02 p.m. To: Dave Taht <dave.taht(a)gmail.com>; NZNOG(a)list.waikato.ac.nz Subject: Re: [nznog] nzwrt redux? That actually seems really cool, Would the SFP port work in NZ for removing the need of an ONT? Is it something that the fibre companies would allow consumers to do? ---------------------------------------------------------------------- Daniel Christie SYSTEMS ENGINEER/APPLICATION SPECIALIST PHONE +64 7 8536060 | www.enlighten.co.nz -----Original Message----- From: Dave Taht [mailto:dave.taht(a)gmail.com] Sent: Tuesday, 17 November 2015 1:20 AM To: NZNOG(a)list.waikato.ac.nz Subject: [nznog] nzwrt redux? this is looking quite good: https://www.indiegogo.com/projects/turris-omnia-hi-performance-open-source-… Dave Täht Let's go make home routers and wifi faster! With better software! https://www.gofundme.com/savewifi _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

Dell R610 P/Supply
by Shaun McGuane 16 Nov '15

16 Nov '15

Hi NZNog, Apologies for being off topic - Trying to tap into the local knowledge :) I am over here at our office and shipped over some servers that had a power supply go bang! Wondered if you guys knew of any local places where I could pick up server spares. In particular Dell R610 717W – Model D717P-S0 Thanks in advance Regards Shaun

2 1

Re: [nznog] Dell R610 P/Supply
by Shaun McGuane 16 Nov '15

16 Nov '15

Thanks for the replies everyone. All sorted. Cheers Shaun From: <nznog-bounces(a)list.waikato.ac.nz<mailto:nznog-bounces(a)list.waikato.ac.nz>> on behalf of Shaun McGuane <shaun(a)rackcentral.com<mailto:shaun(a)rackcentral.com>> Date: Tuesday, 17 November 2015 at 10:22 AM To: NZNOG <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Dell R610 P/Supply Hi NZNog, Apologies for being off topic - Trying to tap into the local knowledge :) I am over here at our office and shipped over some servers that had a power supply go bang! Wondered if you guys knew of any local places where I could pick up server spares. In particular Dell R610 717W – Model D717P-S0 Thanks in advance Regards Shaun

1 0

Does Spark host any actual IPv6-connected resources behind AS4648?
by Mark Foster 15 Nov '15

15 Nov '15

Hiya folks, An honest question... Having been told by a commercial solutions type person at Spark that IPv6 peering is only available for International Transit services - not Domestic - i'm left wondering how much IPv6 actually exists within AS4648? I am not aware of any specific examples of IPv6 connections (either 'content' or 'eyes') in the AS to use as a starting point, but it's quite disappointing to consider that any traffic between my AS and Spark's is being forced to use international transit. (The wording of the correspondence I received on the subject used the word 'currently' suggesting a possible future change on this position, but it also said 'no date for when this will be available' which suggests no great hurry either). Obviously the disappointment would be metered a little if I knew for sure there was essentially no chance of requiring such a peering link, for example if there's no other IPv6 within-or-behind AS4648 that I can't get to via other means. I assume that other NOG'rs who have 'domestic transit' or 'paid peering' with Spark have got similar ipv6 peering problems - I find it incredible that this many years beyond IPv6's initial 'push' [1], that backbone environments - those that don't necessarily have heavy ties to software or systems that may still have compatibility issues[2] - cannot be rigged for IPv6 in relatively short order. Interested in the experiences of others, on-or-offlist as preferred, in terms of Spark and IPv6, or if there's any insight as to Spark's intentions to deploy IPv6 and support it for their wholesale domestic links. Cheers Mark. [1] The oldest post on the NZ IPv6 Task Force website is dated August 2009. We've certainly had a complete technology-refresh-cycle since then, surely?! [2] Notwithstanding [1] I know there are still limitations to IPv6 offerings to customers within my organisation[3], but we are at least committed to working through these and for a large subset of product types, dual-stack is fully available. As such we are seeking to establish IPv6 peering arrangements, initially with all those that we peer with over IPv4 but obviously as openly as possible for the benefit of all parties. [3] When I say 'We' i'm talking about ICONZ, AS4770. If you peer with ICONZ (directly or via a peering exchange[4]) and would like to peer over IPv6, please do drop a note to noc(a)iconz.net and we'll happily set it up. We're already peered with the APE and WIX RR's and with a few domestic peers in addition to our transit provider(s). I should also note that i'm leaving ICONZ in the next week or so, so personal enquiries about ICONZ's position may have finite value. :-) [4] ICONZ is presently on APE and WIX and is hoping to establish a link to AKL-IX in the new year. If they share physical footprint or switch domain they're also happy to bilat or direct-ethernet if it makes sense to do so. Cheers Mark.

2 1

GPON/VDSL/ADSL vendor advice
by Mark Tees 04 Nov '15

04 Nov '15

Hi all, Looking for some advice/recommendations. We’re looking to select a GPON/VDSL/ADSL vendor for a number of new greenfield and brownfield deployments and have been considering the big 3 - ALU, Huawei and Calix. In PON land we would be delivering an “RSP” style service where each port, or a VLAN on a port can be sold to a different RSP to deliver services on. We are also delivering RF and POTS services via these units. So far we’ve found most them to be largely feature comparable and stable in terms of implementation and support. Each vendor has been keen to engage with us and work to make us as comfortable as possible with their product set. The only major differentiator on a hardware level is we’ve noted that the newer ALU chassis do not support xDSL cards, and so we would be stuck on the previous generation of chassis if we wanted to retain xDSL support, where Huawei and Calix don’t have this limitation. We do like Calix’s general view towards software programability and what they are talking about in terms of the future of SDN based networking. That said, there seems to be a number of pro’s/con’s with respect to each vendor in their own ways. Does any one have any strong opinions or recommendations why one vendor is better than another? Equally, does anyone have any brilliant success stories with any of the vendors or horror stay-away stories that we should know? -- Regards, Mark L. Tees

3 2

Whole of Domain (.nz) Web Harvest 2016
by Jay Gattuso 04 Nov '15

04 Nov '15

Hi All, It’s that time of year again. The National Library of New Zealand is in the final planning stages for the 2016 Whole of Domain web harvest. Per previous years we’ll be walking through the .nz domain pulling back a ~20Tbs snapshot of the live web. The work will be contacted out to the Internet Archive, and I’ll contact this list with the final details once we’ve finished the various planning parts. At the moment it looks like we’ll undertake the crawl around the middle of Jan, and from past experience it usually takes 3 to 4 weeks to complete. We expect to try and grab embedded large binaries (video, audio etc), but otherwise we will generally be respectful of robots.txt. We will have crawl agent string that I will inform you of, so if you have any concerns with our crawling activity we can be blocked. :( I wanted to give you early sight of the crawl, and invite any questions or thoughts from the mailing list. We would also like to acknowledge the assistance and support of dnc.org.nz and nzrs.net.nz – without their efforts we would not be able to make heritage snapshots of the live web for research use today and into the future. Best, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

Chorus issues
by Steve Hawken 02 Nov '15

02 Nov '15

Anyone else seeing issues with adsl and vdsl via Chorus this afternoon ? Seeing lots of subscribers disappear for a few minutes and come back. Cheers, Steve

2 2

More KFC scams
by Cody Cooper 31 Oct '15

31 Oct '15

We have just detected some more of the KFC delivery scam websites on our network. They’re starting to register a lot of domains! I’m getting in touch with the registrars now to get them taken down but may take some time as it’s outside business hours. getkfcnow.co.nz getkfcnow.com.au ilovekfc.co.nz kfcnow.co.nz kfcnow.com.au kfctime.co.nz kfctohome.co.nz timeforkfc.co.nz Regards, Cody Cooper | Head of Broadband DDI: +64 (3) 928-2645, ext 9892 Mob: +64 (21) 666-505 Why not Go MAD today? Visit gomad.co.nz <http://gomad.co.nz/>

4 3

APRICOT2016 Call For Papers
by Dean Pemberton 31 Oct '15

31 Oct '15

Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) 15th February - 26th March 2016, Auckland, New Zealand https://2016.apricot.net CALL FOR PAPERS =============== The APRICOT 2016 Programme Committee is now seeking contributions for Presentations and Tutorials for APRICOT 2016. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics. Please submit on-line at: http://papers.apricot.net/user/login.php?event=34 CONFERENCE MILESTONES --------------------- Call for Papers Opens: 2 November 2015 Draft Program Published: As Papers Confirmed Final Deadline for Submissions: 25 January 2016 Final Program Published: 1 February 2016 Final Slides Received: 8 February 2016 **NOTE THAT REGARDLESS OF DEADLINESSLOTS ARE FILLED ON A FIRST COME, FIRST SERVED BASIS*** PROGRAMME MATERIAL ------------------ The APRICOT Programme is organised in three parts, including workshops, tutorials and the conference. Topics for tutorials and the conference must be relevant to Internet Operations and Technologies: - IPv4 / IPv6 Routing and operations - IPv6 deployment and transition technologies - Internet backbone operations - ISP and Carrier services - IXPs and Peering - Research on Internet Operations and Deployment - Pacific/Oceania Internet - Software Defined Networking / Network Function Virtualisaton - Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) - DNS / DNSSEC - Internet policy (Security, Regulation, Content Management, Addressing, etc) - Access and Transport Technologies, including Cable/DSL, 3G/LTE, wireless, metro ethernet, fibre, MPLS - Content & Service Delivery (Multicast, Voice, Video, "telepresence", Gaming) and Cloud Computing CfP SUBMISSION -------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the Programme Committee will be unable to review the submission. For avoidance of doubt this means that submissions which do not include slides will be rejected immediately. For work in progress, the most current information available at time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC may, at their discretion, retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Every year we turn away submissions, due to filling up all available program slots before the deadline. Presenters should endeavour to get material into the PC sooner rather than later Please submit on-line at: http://papers.apricot.net/user/login.php?event=34 Any questions or concerns should be addressed to the Programme Committee by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Mike Jager & Dean Pemberton Co-Chairs, APRICOT 2016 Programme Committee

1 0

2talk NOC
by Jesse Archer 27 Oct '15

27 Oct '15

Evening, Anyone from 2talk on the list? I can't get hold of anyone via the wholesale support number or the NOC number I have on-hand. Having some issues with inbound calls affecting a number of customers. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

3 3

tvnz/tv3, on demand, etc
by Matthew ＠ PrimoWireless 26 Oct '15

26 Oct '15

Can someone from the above please contact me off list as some of our IP ranges are not working for NZ customers. Kind regards, Matthew Harrison The Top Dog / Managing Director [http://www.primowireless.co.nz/primo_office_move.jpg]<http://www.primowireless.co.nz/help/contact-us> The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.

1 0

Short (!) survey about internet interconnection
by Uta Meier-Hahn 21 Oct '15

21 Oct '15

Dear networkers from around the world, Internet interconnection is largely unregulated. However, in some countries, public regulation has emerged – be it through transparency rules, mandatory peering or licensing terms. Currently, we lack an overview about where regulation exists and we know little about how it affects internet connectivity on a global scale. To start filling this information gap, I have set up a short survey for network engineers, peering coordinators and network-savvy legal staffers. The goal is to crowdsource an initial overview about formal regulation of internet interconnection around the world. Please participate! It takes no more than 10 minutes and will serve the community: http://limesurvey.hiig.de/index.php/675663?lang=en <http://limesurvey.hiig.de/index.php/675663?lang=en> I will publish the results under a Creative Commons license. Also, please consider helping by forwarding the link to fellow interconnection professionals - think of your Facebook, VKontakte or LinkedIn groups, of chat channels and mailing lists. The more regional diversity, the better. Thank you! Thank you! Kind regards, Uta Meier-Hahn PhD Candidate Alexander von Humboldt Institute for Internet and Society Oberwallstr. 9 | 10117 Berlin meier-hahn(a)hiig.de <mailto:meier-hahn(a)hiig.de> | T +49 30 200 760-82 | www.hiig.de/en

7 8

KFC shows that once again New Zealand needs a CSIRT. Well here's a start.
by Dean Pemberton 20 Oct '15

20 Oct '15

Hi All, The recent KFC incident has highlighted a lack of awareness of where to effectively report online security issues. A point made worse by New Zealand not having a CSIRT. At the NZITF we're working to create New Zealand’s first public facing Computer Security Incident Response Team (or CSIRT). Essentially, we have decided it's time to stop talking about creating a CSIRT and instead partner with like-minded companies to fund and incubate a small, agile team to prove the value that a public-facing CSIRT can bring to New Zealand. We have produced a short 1-pager about why the NZITF are setting up CSIRTnz and what we hope to achieve. http://nzitf.org.nz/pdf/NZITF-CSIRT-ValProp.pdf Feel free to get in touch (info(a)nzitf.org.nz) if you, or your organisation wants to know more about the initiative. In the mean time, while we get this all setup, any incidents sent to info(a)nzitf.org.nz will receive attention, and we'll look to provide co-ordination, albeit on a best efforts basis. Regards, Dean

1 0

Spark / GG & ICMP
by Jonathan Brewer 19 Oct '15

19 Oct '15

Hi Folks, Anyone know of NZ-based Global Gateway or Spark infrastructure that responds to ICMP ping requests globally? On or off-list reply fine. I've found hosts in AS4648 that respond to ping selectively - from some, but not all of the servers I'm using to collect data for my project on peering in the Pacific http://pacpeer.org/ Bizarre & frustrating things going on with this network. Same for AS4771. Failing that happy to take suggestions for Auckland based single-homed customers on AS4648 or AS4771 that are fibre connected with 1-2ms latency from provider core - and don't mind the occasional ping. I've got Atlas probes I can ping, but they're on the end of consumer tails & that mucks up the stats. Thanks, Jon

2 2

kfcdelivery.co.nz ongoing scam
by Nathan Ward 19 Oct '15

19 Oct '15

All, You might’ve seen ‘kfcdelivery.co <http://kfcdelivery.co/>.nz’ pop up on social media today. It’s a scam. If you have the ability to block this website so your users cannot reach it, please do so. If you have stuck your CC details in there, cancel your card. It is hosted through CloudFlare, don’t block the IPs, but perhaps you can filter on your DNS or something. I have reached out to the registrar for the domain to get it blocked (discount domains). If anyone has a contact there other than support@ to get it pulled ASAP, please use it - I don’t know anyone there. The logic of the site is roughly: <snip> # Validate input and set error if validation fails if(error){ "You must fill in the red fields" }else{ "Our servers are down due to heavy traffic, please try again later" } # send data to servers anyway </snip> -- Nathan Ward

8 13

Stats NZ ISP survey
by Jay Daley 15 Oct '15

15 Oct '15

Those of you that use the ISP survey from Stats NZ might like to know that the’ve reissued it, silently, following discovery of discrepancies between this release and previous releases for historical data. Basically they re-ran the random rounding for historical data and got different random values from before. This is now fixed and the latest spreadsheet is consistent with previous ones. http://www.stats.govt.nz/~/media/Statistics/Browse%20for%20stats/ISPSurvey/… Jay -- Jay Daley Chief Executive NZRS Ltd desk: +64 4 931 6977 mobile: +64 21 678840 linkedin: www.linkedin.com/in/jaydaley

6 9

Fixing home router firmware
by Dave Taht 14 Oct '15

14 Oct '15

I think those here that would like to have better home gateway firmware might like the proposals vint cerf, I, and 260 other notables (incl linus torvalds, dave reed, jim gettys, etc, etc)... have just circulated throughout Washington, DC. http://www.businesswire.com/news/home/20151014005564/en/Global-Internet-Exp… reshare and enjoy. -- Dave Täht Do you want faster, better, wifi? https://www.patreon.com/dtaht

1 0

Re: [nznog] Large increase of Data on AKL-IX
by Pete Mundy 13 Oct '15

13 Oct '15

On 14/10/2015, at 10:47 AM, Craig Whitmore <lennon(a)orcon.net.nz> wrote: > Does anyone know what got added/what changed at AKL-IX which suddenly doubled the amount of traffic from AKL-IX this morning? > > http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=1… If you look at the graphs for individual peers you can see pretty easily the ASes (AS'?) most of it is coming from. Not sure where it's all going though! http://monitor.akl-ix.nz/cacti/graph.php?action=view&local_graph_id=93&rra_… Pete

12 14

Large increase of Data on AKL-IX
by Craig Whitmore 13 Oct '15

13 Oct '15

Does anyone know what got added/what changed at AKL-IX which suddenly doubled the amount of traffic from AKL-IX this morning? http://monitor.akl-ix.nz/cacti/graph_image.php?action=view <http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=1 4&rra_id=2> &local_graph_id=14&rra_id=2 Thanks Craig

4 3

CFP - Sysadmin Miniconf - Linux.conf.au 2016
by Simon Lyall 12 Oct '15

12 Oct '15

Call for Presentations Linux.conf.au 2016 Systems Administration Miniconf There will be a one day mini conference on Linux Systems Administration at linux.conf.au 2016 . LCA2016 will be held in Geelong, Australia on 1 - 5 February 2016 The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear from at this Miniconf This is our 10th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website http://sysadmin.miniconf.org/. Presentation Topics =================== We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments. Topics for presentations could include (but are not limited to): * Systems Administration Best Practice * Containers and orchestration * TLS everywhere * Monitoring and metrics. Collection, storage and presentation * Infrastructure/Platform/Software as a Service (IAAS) * Virtualisation and Cloud Computing * IPv6 * Software Defined Networking (SDN) * DevOps * Configuration Management * Bootstrapping systems, Lifecycle Management * Dealing with BYOD * Backups in a virtual/distributed world * Troubleshooting techniques * Buying Decisions * Web and Email management * Keeping legacy systems functioning * War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. Format of Presentations ======================= We are now seeking proposals for presentations at the mini-conference. We have openings for: 45 minute double-length presentations 15-20 minute full presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA keynote before morning tea), we expect the majority of available timeslots to be 20 minutes or less. We have a general policy of accepting a high proportion of proposals but handing out relativly short timeslots. Please see previous years Miniconf schedules for examples. Submitting talks ================ Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. Submissions should be made via: http://sysadmin.miniconf.org/proposal16.html Questions should be sent to: lca2016 @ sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions priority (both of inclusion and scheduling) will be given to presentations submitted before the 8th of November 2015. Please indicate if you need an early confirmation to aid you in arranging time off work or travel. 2015-10-31 - Deadline for early submissions 2015-11-08 - Early submissions confirmation 2015-12-12 - Deadline for submissions 2015-12-19 - Confirmation of all presentations 2016-02-02 - Sysadmin Miniconf held. Contact and Questions ===================== Please see our website at http://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2016 @ sysadmin.miniconf.org

1 0

your private ASs are showing
by Geoff Huston 09 Oct '15

09 Oct '15

Maybe this is not what they wanted to propagate:…. can anyone help SNAP? thanks Geoff www.cidr-report.org AS4200000005 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000052 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000055 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000290 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ (see the cidr report at the verybottom)

1 0

Call for APRICOT 2016 PC volunteers
by Dean Pemberton 06 Oct '15

06 Oct '15

Hi everyone, The APRICOT 2016 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the APRICOT 2016 conference (http://2016.apricot.net/) The APIA Board selects a new Programme Committee each year and is now seeking nominations from the community. Eligible PC candidates are those who have attended APRICOT conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of APRICOT conferences. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to each event. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "apiasec at apia.org". The note should include affiliation (if any) and contact details (including e-mail address), and a brief description of why you would make a good addition to the PC. PC members who are active and contribute to regular meetings and submit reviews receive complimentary registration for APRICOT 2016. The APIA Board will accept nominations received by the end of Friday 23 October, 2015, and will announce the new PC shortly thereafter. Many thanks! Mike Jager & Dean Pemberton (APRICOT 2016 PC Chairs)

1 0

Cable cut/damaged?
by Juha Saarinen 01 Oct '15

01 Oct '15

Hi NZNOG, Not sure if this qualifies as operational, but Telstra tweeted there’s a cable cut somewhere: https://twitter.com/Telstra/status/649565187687628800 Would anyone happen to know which cable it is and where it’s been cut - if that’s the case? Am told it’s causing slowdowns with Akamai, making Apple users unhappy. Thanks — Juha

4 5

Anyone else seeing Akamai issues this morning
by Jesse Archer 30 Sep '15

30 Sep '15

Coinciding with this? http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=7… *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

7 8

Re: [nznog] NZNOG Digest, Vol 153, Issue 20
by Murray King 25 Sep '15

25 Sep '15

Hi Nathan, Happy to talk you through your application and help you out on this. I'm the Spirent distributor for NZ. Murray King Sales Engineer Nichecom Delivery Address: 1 Lincoln Avenue, Tawa,Wellington Postal Address: P.O. Box 56-045, Wellington New Zealand Phone: 64 4 2323233 Facsimile: 64 4 2323230 Mobile: 64 (0)21 379 192 murray(a)nichecom.co.nz www.nichecom.co.nz -----Original Message----- From: nznog-request(a)list.waikato.ac.nz To: nznog(a)list.waikato.ac.nz Date: Sat, 26 Sep 2015 12:00:03 +1200 Subject: NZNOG Digest, Vol 153, Issue 20 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. Router testers (Nathan Ward) ---------------------------------------------------------------------- Message: 1 Date: Fri, 25 Sep 2015 14:37:09 +1200 From: Nathan Ward <nznog(a)daork.net> To: nznog <NZNOG(a)list.waikato.ac.nz> Subject: [nznog] Router testers Message-ID: <8E1B60F1-712F-40E1-8BCE-E088051ACEFB(a)daork.net> Content-Type: text/plain; charset=utf-8 Hi, Does anyone have a line on router testers that are available for lease in NZ (or Aus, I guess)? Either from a proper leasing company, or if you?ve got one kicking around you don?t need for a few weeks.. Something that does PPPoE, IPoE, maybe MPLS and BGP would be nice. Ixia or Spirent or something. -- Nathan Ward ------------------------------ _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog End of NZNOG Digest, Vol 153, Issue 20 **************************************

1 0

Router testers
by Nathan Ward 24 Sep '15

24 Sep '15

Hi, Does anyone have a line on router testers that are available for lease in NZ (or Aus, I guess)? Either from a proper leasing company, or if you’ve got one kicking around you don’t need for a few weeks.. Something that does PPPoE, IPoE, maybe MPLS and BGP would be nice. Ixia or Spirent or something. -- Nathan Ward

1 0

Ideas pls for keynote speaker - APRICOT 2016
by Jordan Carter 21 Sep '15

21 Sep '15

Hi all We're hosting APRICOT 2016 - an Internet technical community conference - in Auckland in February. (Details at https://2016.apricot.net) NZNOG is a key supporter of the event so thank you for that, I am hoping this request is (beer) sufficiently on topic for the list.... One of the things a local host gets to do is to propose a local/national Keynote speaker for the event. Do you have suggested speakers we could put into the mix? One name that popped into my head is Steve Cotter who is shortly off to head the European research network, after running REANNZ for a few years. But this is an event aimed squarely at people like you, and so your ideas would be incredibly helpful. Grateful for your suggestions, ideally by the end of the week... thanks! Jordan -- Jordan Carter Chief Executive *InternetNZ* +64-495-2118 (office) | +64-21-442-649 (mob) Email: jordan(a)internetnz.net.nz Skype: jordancarter Web: www.internetnz.nz *A better world through a better Internet *

1 0

Re: [nznog] nz ip range
by Kerry Milestone 21 Sep '15

21 Sep '15

{from those archives} 10 years...??? blimey. http://list.waikato.ac.nz/pipermail/nznog/2005-June/010239.html Perhaps the way to go about it will end up being to legislate, that you'll end up having to register your "NZ" IP address allocation with the Intellectual Property Office - because they like the acronym IP too. But, this of course will still ensure there is much humour to be had. https://www.fyi.org.nz/request/1830-ip-address-range On 20/09/15 01:00, nznog-request(a)list.waikato.ac.nz wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. nz ip range (bigalownz) > 2. Re: nz ip range (Jethro Carr) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 19 Sep 2015 23:35:28 +1200 > From: "bigalownz" <bigalownz(a)gmail.com> > To: <nznog(a)list.waikato.ac.nz> > Subject: [nznog] nz ip range > Message-ID: <D7FB71253CD54F99B15C3EAE3FE397AD(a)SEANPC> > Content-Type: text/plain; format=flowed; charset="iso-8859-1"; > reply-type=original > > im doing a little project and im looking for a script to get nz ip ranges > > i did a Google search and found this, but as you can see it was from 2005 > and out dated, the url doesn't work etc > i need some help to update it > thanks > > #!/usr/local/bin/php > <?php > > $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; > // $in_file = "country-ipv4.lst"; > $out_file = "nzipranges.txt"; > > $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); > > $handle_output = fopen($out_file, "w"); > > $now = date ("r"); > > fwrite ($handle_output,"# Generated: $now\n\n"); > > while (!feof($handle_input)) { > $buffer = fgets($handle_input); > if ( ereg ( "nz", $buffer) ) { > // echo $buffer; > $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : > [\d\.]+(\/\d+) .+#","$1$2", $buffer )); > fwrite ($handle_output,"\n" . $this_range); > } > } > fclose($handle_input); > > fwrite ($handle_output,"\n"); > fclose($handle_output); > > > ?> > > > > ------------------------------ > > Message: 2 > Date: Sat, 19 Sep 2015 23:49:35 +1200 > From: Jethro Carr <jethro.carr(a)jethrocarr.com> > To: bigalownz <bigalownz(a)gmail.com>, nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] nz ip range > Message-ID: <etPan.55fd4bcf.3d8a9f57.27d(a)kobol.local> > Content-Type: text/plain; charset="utf-8" > > Hi bigalownz, > > I wrote a Puppet module that you can use to pull IP address lists from various registries. If you?re using Puppet, it means you can get an array of all the IPs for a specific region (such as NZ) for use in configuration files or resources. > > https://github.com/jethrocarr/puppet-rirs > > If you?re not using Puppet, the good news is that it?s almost entirely Ruby, so you could take a look at the function and adapt it very quickly to be a standalone script. > > https://github.com/jethrocarr/puppet-rirs/blob/master/lib/puppet/parser/fun… > > regards, > Jethro > > > -- > Jethro Carr > www.jethrocarr.com > > On 19 September 2015 at 23:34:33, bigalownz (bigalownz(a)gmail.com) wrote: >> im doing a little project and im looking for a script to get nz ip ranges >> >> i did a Google search and found this, but as you can see it was from 2005 >> and out dated, the url doesn't work etc >> i need some help to update it >> thanks >> >> #!/usr/local/bin/php >>> >> $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; >> // $in_file = "country-ipv4.lst"; >> $out_file = "nzipranges.txt"; >> >> $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); >> >> $handle_output = fopen($out_file, "w"); >> >> $now = date ("r"); >> >> fwrite ($handle_output,"# Generated: $now\n\n"); >> >> while (!feof($handle_input)) { >> $buffer = fgets($handle_input); >> if ( ereg ( "nz", $buffer) ) { >> // echo $buffer; >> $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : >> [\d\.]+(\/\d+) .+#","$1$2", $buffer )); >> fwrite ($handle_output,"\n" . $this_range); >> } >> } >> fclose($handle_input); >> >> fwrite ($handle_output,"\n"); >> fclose($handle_output); >> >> >> ?> >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> > > > ------------------------------ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > End of NZNOG Digest, Vol 153, Issue 16 > **************************************

2 1

nz ip range
by bigalownz 20 Sep '15

20 Sep '15

im doing a little project and im looking for a script to get nz ip ranges i did a Google search and found this, but as you can see it was from 2005 and out dated, the url doesn't work etc i need some help to update it thanks #!/usr/local/bin/php <?php $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; // $in_file = "country-ipv4.lst"; $out_file = "nzipranges.txt"; $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); $handle_output = fopen($out_file, "w"); $now = date ("r"); fwrite ($handle_output,"# Generated: $now\n\n"); while (!feof($handle_input)) { $buffer = fgets($handle_input); if ( ereg ( "nz", $buffer) ) { // echo $buffer; $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : [\d\.]+(\/\d+) .+#","$1$2", $buffer )); fwrite ($handle_output,"\n" . $this_range); } } fclose($handle_input); fwrite ($handle_output,"\n"); fclose($handle_output); ?>

8 7

TICSA Amendment Bill - Long commentary is long
by Beau Murrah 17 Sep '15

17 Sep '15

Hello- A long post follows that is adapted from some questions I received yesterday. These are some of my legal academic thoughts and not legal advice. My overall assessment of this very short one page TICSA Amendment Bill is that community must put energy into this process even if the Bill itself is insufficient and likely to be voted down. If it makes it past the first step there is a chance for proposing additions and changes in the form of Supplementary Order Papers and this is something to be optimistic about and contact your MP’s about. Even if the Bill fails at the first stage, there is the risk though that unless there is obvious energy put into it the whole issue reaches a state of entropy until some unforeseeable reactive event occurs where the law will finally get replaced or repealed. The Government will likely claim a lack of energy put into the Bill as evidence the status quo is acceptable, and who knows how many years it might be till the issue comes again on the Parliamentary floor for any kind of substantive change. Is this toothless? Yes, the Bill has no legal teeth in its own right in terms of statutory offences. On a personal level I must say I also think it is weak. There is no legal duty for the Minister/Director to follow the recommendations. For this could be dismissed as ineffectual. However, the Bill would creates added statutory powers and responsibilities that creative avenues legal challenge such as a judicial review of an Agency decision. Even if such a judicial review is never actualised it can start to carry weight “in the shadow of the law”. It means the Agency can be pressed to its statutory responsibilities by some entity pointing to a legal basis for their claims. I also think there is potential for the Bill to widen existing judicial review avenues elsewhere in the legislation that were very limited, given the interaction of the TAB and the Minister/Director’s duties. Consider Clause 2 of the Bill “Any matter to be referred to the Minister requesting the Minister to exercise his or her discretion or recommend the prescribing of an additional area of specified security interest must first be referred to the Technical Advisory Board for analysis and recommendations. “ If a Minister fails to refer the matter to the TAB first with enough time and detail so the TAB can give actual considered analysis and recommendations, on its face there would be breach of the Minister’s statutory responsibilities. This would tap into well established legal common law norms about the duty of consult and what that means in practice by Ministers, and open the case to judicial review in a Court. If the issue was intrusive enough on network operators this could potentially receive remedy’s in the form of injunctions on the matter at hand and form precedent for the future. I am trying to think of an example where this would be worth it economically, or in defence of rights of a NetOp or their subscribers, its not unforeseeable. A judicial review action could potentially be taken to seek an injunction on a area of security being decided while the TAB fully considers the issue. This could enforce a lag-time for compliance to allow network operators to react and plan ahead for impending decisions by the Minister. Take for example s50 of the Act: http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5626115.html <http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5626115.html> This section is closely related to the process of the Director in identifying network security risks which is relevant to the Bill. s50 also gives a list of things the Director must consider. Failing to give consideration to a mandatory consideration is a well recognised ground of judicial review of exercises of statutory power. As you can gather from the list above in the Section, its typically aimed at an enumerated list of more or less specific items. On its own an action by an individual against a public figure for merely failing to consider mandatory considerations has only a formal/technical remedy and it would be an expensive and lengthy procedure for all involved. The Agency would then, usually, only have to correct the error in some token way - such as issuing a report saying “we have consider all the relevant matters, our opinion is unchanged” - and move forward. However, the existence of this action combined with a technical advisory board gives potential for a legal entity that can bring to light a bigger picture of systemic and formal breaches that would make great copy in the newspaper or an Ombudsman-like governmental complaint if not a court judgment. Whichever of you may decide to sit on the Board (to be honest, not an entirely desirable role) would have the ability to oversee that mandatory consideration has been given on all of the ground under S50s. The Board could start issuing recommendations that align with the statutory duties and language, and force more compliance by the Agency, if it starts pointing out where this consideration hasn’t been given. This is at least one way a TAB could be applied to put the Agency on their toes like a real watchdog is supposed to. Isn’t all this going to play out in secret anyways because NatSec? If the Agency doesn’t follow any recommendations this would be secret? One issue I am interested in is use of the term “Security Interest” in the Bill and considering how much it maps onto the definition of “Security Risk” currently in the TICSA legislation, and whether this should change. The definition of security risk in the TICSA legislation is inclusive of the concept of national security but the term national security itself is not defined. This question about whether all of the risks and all of the Agencies TICSA decisions/activities are to be legally treated as national security concerns is ultimately going to decide whether TICSA plays out before and in an open civil court as the norm or whether it will go into classified operations only where sufficient evidence is provided to the Courts to justify otherwise. I am strongly of the view this is a piece of regulation which only narrowly intersects with national security. Cloaking the daily and annual grind of bureaucracy and notification schemes and compliance in national security is a wrong approach and arguably just a very easy lawyerly way of keeping the Agency out of Court. I will be writing more on this topic and releasing it in a proper text form, and am definitely planning on submitting something TICSA-related to Kiwicon. Kind regards ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Changes to the NZRS zone and web scan policy
by Sebastian Castro 17 Sep '15

17 Sep '15

Hello everyone: Following some useful feedback from an operator, we have made changes to the zone and web scan practice statement. Modifications are around three main areas - Provide a web page associated to the server where the scan comes from. Now http://zonescan.nzrs.net.nz will lead you to an information page that explains what is the scan about - Kind of data collected. - Reference to where aggregated data from the zone scan is published, using our new Internet Data Portal We are always open to receive feedback and improve our communication and processes. With the aggregated data available, your can find out the state of the .nz name space. The URL of the improved practice statement is https://nzrs.net.nz/dns/zone-and-web-scanning Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

TICSA Amendment Bill drawn from ballot
by Beau Murrah 16 Sep '15

16 Sep '15

Hello NZNOG, http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC… <http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC…> Clare Curran’s TICSA Amendment Bill has been drawn from the ballot. Ill be giving it a close read myself in the next day or two, would be interested in any comments/discussion off-list or on-list. A link to the Bill itself is here: http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a… <http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a…> My research & writing on TICSA is still ticking along- I am considering trying to submit a talk for Kiwicon but thats quite a high bar to aim for, but I plan to release the text regardless around the same time as the conference. As a brief repeat summary, the text focuses in-depth on the deeply untested/unprecedented legal concept of Good Faith which has been imported into this area. It is imperative to avoiding any liability under the Act and also crucial to any sort of pro-active action against the Agency. Kind regards, ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Can whois registrar info be wrong?
by Richard Hector 16 Sep '15

16 Sep '15

Hey all, Is it technically possible for the registrar details in whois (for a .com domain) be out of date, or is the whois the canonical source of the info? If it is possible, how would I go about finding out who's really in control? Does a registrar have an interface for that? Unfortunately I'm not sure how reliable my client's own records are on this ... Cheers, Richard

4 5

Phish? Re: .NZ would like 5 minutes of your time
by Richard Hector 16 Sep '15

16 Sep '15

It's an email apparently from one party (NZRS), apparently sent by a second party (my registrar), via a third party (mscv.net) with a link to a fourth party (surveymonkey.com) which seems classic phishing. On the other hand it "looks quite legit". If it is legit, am I right in thinking it's a bad way to go about it? Any comments from participants? Richard

2 2

Victoria University breakfast seminar for IT managers in Auckland 1st October 7am
by Ian Welch 14 Sep '15

14 Sep '15

Hi, My colleague at the School of Information Management has organised a seminar at the VUW campus in Auckland aimed at managers. They said that they are particularly interested in people working in networking so I thought I’d pass it on via the list. The main speakers are Ian Clarke (CEO of Fronde) and Prof Benoit Aubert (Information Systems at Victoria Business School). RSVP by 18th of September. Full details are here: http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ… <http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ…> Cheers, Ian — Ian Welch School of Engineering and Computer Science Victoria University of Wellington

1 0

KIWICON 9 CALL FOR (cyber) PAPERS
by Mike Forbes 14 Sep '15

14 Sep '15

---{ A WHIRRING TELETYPE CHIRPS, SPEWING FORMFEED INTO THE PILE }--- UNCLAS MSGID/SITREP/9TH CYB DIV// UNIT/KIWICON RESERVE REAR INTEL GRP// PERID/120915:0000Z/TO:111215:0000Z// HEADING/TITLE// AMPN/INTEL SITREP SUMMARY NEW ZEALAND CYBERWAR DAY 137// HEADING/GENERAL// AMPN/FORWARD EMPLACEMENTS REPORT CONTINUING ENGAGEMENT WITH ENEMY. 3 X SORTIES OF 8 X SU-25 FROGFOOT CONDUCTED GND ATTACKS WITH TCP SYN/FIN ON PORT 7199. JMX CONSOLE TOOK HEAVY CASUALTIES, ACTING CO RPTS OPERATIONAL READINESS AT 40%, LOAD AVG 18.7. WOUNDED EVACED TO DEV SHM, AWAITING ONWARD TRANSPORT. RECCE REPORTS ENEMY RESUPPLY CONVOY MAPREF PAPA-ZULU WITH BMP-24BIT MECH INF DIVISION STRENGTH, B-HAWK MANPAD UNITS, PDF MINELAYERS.// HEADING/COMMANDER EVALUATION// AMPN/ FURTHER ATTACKS ON DUG IN POSITIONS AT MAPREF XRAY-PAPA. SIGNIFICANT ESCALATION OF CYBERING EXPECTED. RECOMMEND IMMEDIATE REINFORCEMENT FROM CYBER RESERVE// ---------------------{ SOME TIME LATER ... }--------------------- KIWICON 2015 (HTTPS://WWW.KIWICON.ORG/CFP.HTML) SELECTIVE CYBER SERVICE | CALL FOR CYBER PAPERS We hereby notify you that by this notice published on the Internet pursuant to the some fictitious regulations, you have been called up for service with the Kiwicon Cyber Expeditionary Force, as a Reservist of the Ninth Division of the General Hacker Reserve, Kiwicon Cyber Corps. You are hereby and forthwith directed to present your response to the Kiwicon 9 CFP by filing your report on this page. Each talk and/or training submission should be made on a separate form. They must be filed individually, and upsetting the file clerks is never a good idea this early in campaign season. The first round of talks, correction: CYBER WARFIGHTER EDUCATIONAL MATERIALS will be announced on the 26th of October, NZDT, and will be complete by the 9th of November, NZDT. If the evaluation board passes you as fit for service, you will be required to present yourself to the St James Theatre of Cyberwar for the dissemination of the aforementioned material. You will be notified in due course by an authorized officer of the Crue regarding your particular time and place for reporting. Practical training will be held on the 9th of December, 2015, while presentations will be given on the 10th and 11th of December. Note: it is the responsibility of the instructor to ensure all material has been appropriately declassified. You are also hereby further notified that if you fail to obey this order you are liable to be considered sensible without further notice. God save the Mince Queen, Col. St. John Beauchamp-Beauclerk (Adjutant Crue) IMPORTANT NOTICES (read each paragraph carefully) If you report pursuant to this order please fill out our google form (triplicate copies not required at this time) at https://goo.gl/JnoCb3. Answer the questions to the best of your ability, and let us know if you have any special requirements (motorcycles, pyrotechnics, therapy animals, exorcisms). Should floods, illness, fires, and poorly scheduled wedding ceremonies unavoidably prevent you from reporting as ordered above, you must write immediately to the Adjutant Crue stating the circumstances which prevent you from reporting. As per special order, written notes from Lord Tuskington will also be accepted. If you are employed, you should inform your employer of this order and that the examination is merely to determine if you may be fit for service. If found suitable for induction, documentation will be provided by an authorized officer of the Crue for your employer as early as possible. Troop movements to the marshaling point are the fiduciary responsibility of the cyber warfighter and will not be reimbursed regardless of evaluation board determination. To re-familiarise yourself with your duties as Cyber Reserve, please review the Standard Operating Procedure with particular observation to the sections relevant to the ongoing conflict, viz; Cybering Computering Minced meats Cyber hacking Computer cyber hacking Hacking (cyber) Cyber hoodies, correct wear and maintenance of, Cyber warring Any further communications arising from this notice must be sent by to kiwicon(a)kiwicon.org. IRC communications cannot be accepted due to our ongoing lack of ability to remember to tell everyone else that they happened.

1 0

Vodafone / ihug DNS Servers - Reset of Zone File
by Justin Lewis - ResponseMedia 14 Sep '15

14 Sep '15

Hi All, Is anyone else seen ns1.ihug.net.nz and ns2.ihug.net.nz Reverting to older zone files since around lunch time today? Looking like the zone serial is back to "2015082705" should be at least "20150905XX" Have a customer who's entire zone file has been reverted to an old record that's is over 3 weeks old. Customer portal is showing the new zone file though. Regards, Justin Lewis ResponseMedia [https://newoldstamp.com/editor/profilePictures/profile-3c8f7090e76fa0afb6a3…] Mobile: 027 300 6242 Email: justin.lewis(a)responsemedia.co.nz<mailto:justin.lewis(a)responsemedia.co.nz> Address: Christchurch, NZ [https://editor.newoldstamp.com/images/f.jpg]<http://www.facebook.com/ResponseMedia.NZ> [https://editor.newoldstamp.com/images/tw.jpg] <http://www.twitter.com/ResponseMediaNZ> [https://editor.newoldstamp.com/images/instagram.jpg] <https://instagram.com/ResponseMediaNZ/> Dropbox Partner SMX Mail Partner

2 1

Any NOCs seeing alarms in the Tauranga Chorus exchange?
by Jesse Archer 12 Sep '15

12 Sep '15

We've lost power in the colo room, to both A + B feeds.

3 4

Can't see 117.121.247.0/24. Do we have a local looking glass
by Don Gould 10 Sep '15

10 Sep '15

Hi Sorry for an operation issue on list on a Friday ;) We just moved an IP range in us this morning and I can't see it via DTS currently. I've been asked to find a local looking glass. Can anyone assist? D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before.

2 2

APNIC 40 - Webcast Sessions taking place today
by Elly Tawhai 09 Sep '15

09 Sep '15

Hi NZNOG Community, You may be aware that APNIC 40 has started. You can participate remotely in discussions, ask the presenter questions, and voice your opinion. To watch live webcast go to: https://conference.apnic.net/40/program#webcasts Some topics under discussion include: * The Status of APNIC’s IPv4 Resources: Exhaustion & Transfers * IPv4: Mining Strategic Reserves * prop-114: Modification in the ASN eligibility criteria * prop-113: Modification in the IPv4 eligibility criteria * prop-115: Registration of detailed assignment information in Whois DB * APNIC Member Meeting See you online! Kind regards, Elly APNIC

1 0

ISIF Asia Internet Operations Research Grants
by Elly Tawhai 08 Sep '15

08 Sep '15

Hi NZNOG Community, APNIC has established the ISIF Asia Internet Operations Research Grants: a 60,000 AUD fund to support independent research on Internet operations, infrastructure and related protocols. Members of Network Operators Groups (NOGs), members/partners of IXPs, operators of rootservers, and academics and postgraduate students are encouraged to apply. The fund is open to all relevant topics of interest, however applicants may wish to prepare research proposals in the following areas: * Network measurement and analysis * IPv6 deployment * BGP routing * Network security * Peering and interconnection Applicants can apply for an amount between AUD 5,000 and AUD 60,000 based on the research needs, a realistic timeframe and a detailed budget. Successful applicants will also receive mentoring and support from the selection committee members to encourage knowledge generation and collaboration. Grants applications open 9 September 2015 and close 15 October 2015. Visit http://isif.asia/researchgrant for full terms and conditions, and the online application form. Kind regards, Elly APNIC

1 0

Internet Data Portal
by Jay Daley 08 Sep '15

08 Sep '15

Hi We’ve recently gone live with an open data site to publish whatever .nz related data that we can publish and any other useful Internet data - https://idp.nz For some years we’ve published IPv6 and DNSSEC stats but we decided it was time to publish that in a more useful way and include as much other data as we could. Initially we only have four datasets on the site: = .nz registrations data - a daily count of domains in each state and each transaction going back a few years (182,511 rows) = .nz Zonescan data - metrics from the monthly scan of all nameservers delegated to by the .nz zone (7,723 rows) This is where the IPv6 and DNSSEC stats come from. = ISPs - the Statistics NZ annual survey of ISPs sizes etc in a more usable format = Internet Connections - the Statistics NZ annual survey of ISP connections, datacaps etc in a more usable format If there’s any other data that we have that you think we could publish then please let us know and if you have any useful Internet related datasets that you’d like published then please get in touch as we’d be keen to help. cheers Jay -- Jay Daley Chief Executive NZRS Ltd desk: +64 4 931 6977 mobile: +64 21 678840 linkedin: www.linkedin.com/in/jaydaley

1 0

Re: [nznog] Appeal to bigger brains
by Andrew McBeath 08 Sep '15

08 Sep '15

Thanks to everyone who offered advice - turns out the IBM server connect module in bay 2 of the chassis was the issue. Removing it from the chassis resolved all problems. It had nothing connected to it and all ports were disabled so I can only guess that its faulty. Thanks again, Andrew From: Andrew McBeath Sent: Tuesday, 8 September 2015 9:53 p.m. To: 'nznog(a)list.waikato.ac.nz' <nznog(a)list.waikato.ac.nz> Subject: Appeal to bigger brains I'm throwing this out there because I'm at a loss to figure out whats happening in our lab. I realise it's a bit outside the scope of this forum but as the subject line says I'm looking for some bigger brains - Beers are involved. We have an IBM blade chassis - only 4 blades at present - with a management VLAN 50 (192.168.10.0/24) and a data vlan 100 (10.10.10.10.0/24) hooked up to our prod network (10.10.1.0 and 11.11.1.0 -Yes I know this is BAD but I inherited the network and haven't been able to change it as yet) via a juniper SRX. Blades are running VMware 5.5 - no nic teaming as yet. All blades and AMM module (all on 192.168.10 addresses) can get to all parts of the network VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 Everything I've found online points to NIC teams in certain situations but none apply as the blades only have a single NIC enabled and the VM only has one NIC assigned. Appreciate any feedback Cheers, Andrew McBeath

1 0

Appeal to bigger brains
by Andrew McBeath 08 Sep '15

08 Sep '15

I'm throwing this out there because I'm at a loss to figure out whats happening in our lab. I realise it's a bit outside the scope of this forum but as the subject line says I'm looking for some bigger brains - Beers are involved. We have an IBM blade chassis - only 4 blades at present - with a management VLAN 50 (192.168.10.0/24) and a data vlan 100 (10.10.10.10.0/24) hooked up to our prod network (10.10.1.0 and 11.11.1.0 -Yes I know this is BAD but I inherited the network and haven't been able to change it as yet) via a juniper SRX. Blades are running VMware 5.5 - no nic teaming as yet. All blades and AMM module (all on 192.168.10 addresses) can get to all parts of the network VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 Everything I've found online points to NIC teams in certain situations but none apply as the blades only have a single NIC enabled and the VM only has one NIC assigned. Appreciate any feedback Cheers, Andrew McBeath

4 5

Re: [nznog] Appeal to bigger brains
by Scott Weeks 08 Sep '15

08 Sep '15

--- andrew(a)base-2.co.nz wrote: From: Andrew McBeath <andrew(a)base-2.co.nz> VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 ---------------------------------------- It's a longshot, but is there VRRP/HSRP on the router where the default gateways point to? They could have two VRRP sessions and forcing odd IPs to one and even IPs to another. scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

FW: Appeal to bigger brains
by Andrew McBeath 07 Sep '15

07 Sep '15

Didn’t hit reply all. From: Andrew McBeath Sent: Tuesday, 8 September 2015 10:19 p.m. To: 'Alexander Neilson' <alexander(a)neilson.net.nz> Subject: RE: [nznog] Appeal to bigger brains Thanks Alexander, Its an E1000e with vmware tools installed – I have seen quirky behaviour from them before but it seems to have been much better of late. I will try ripping it out and assigning a VMXNET3 adapter. In response to earlier replies. Kyle -No LACP – single uplink from the blade IO module to a single EX2200 Dylan/Liam – Exactly my first thoughts but 2 of us have been through every bit of kit between the VM and the rest of the network trying to spot what the other missed and are both at a loss. It’s not a complicated network. Will update tomorrow after I change the NIC. Appreciate the feedback – Glad to know it strikes others as odd too Andrew From: Alexander Neilson [mailto:alexander(a)neilson.net.nz] Sent: Tuesday, 8 September 2015 10:05 p.m. To: Andrew McBeath <andrew(a)base-2.co.nz<mailto:andrew(a)base-2.co.nz>> Subject: Re: [nznog] Appeal to bigger brains Which network interface type is on each VM Guest? (or is your issue with the host?) VMXNET3 is recommended however you probably need VMWare tools installed to use it. The E1000 and E1000e interfaces have some weird issues in network operation but not that I have seen as even and odd interfaces. On your network configuration in VMWare how many underlying interfaces are assigned to each V Switch? can you screenshot the V switches and the individual network config screens under properties. Sounds like their might be some odd check box or interface involvement that causes this issue. Regards Alexander On 8/09/2015, at 9:53 PM, Andrew McBeath <andrew(a)base-2.co.nz<mailto:andrew(a)base-2.co.nz>> wrote: I’m throwing this out there because I’m at a loss to figure out whats happening in our lab. I realise it’s a bit outside the scope of this forum but as the subject line says I’m looking for some bigger brains – Beers are involved. We have an IBM blade chassis – only 4 blades at present – with a management VLAN 50 (192.168.10.0/24) and a data vlan 100 (10.10.10.10.0/24) hooked up to our prod network (10.10.1.0 and 11.11.1.0 –Yes I know this is BAD but I inherited the network and haven’t been able to change it as yet) via a juniper SRX. Blades are running VMware 5.5 - no nic teaming as yet. All blades and AMM module (all on 192.168.10 addresses) can get to all parts of the network VMWare machine (Only one so far – on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP’s DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 Everything I’ve found online points to NIC teams in certain situations but none apply as the blades only have a single NIC enabled and the VM only has one NIC assigned. Appreciate any feedback Cheers, Andrew McBeath _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz<mailto:NZNOG(a)list.waikato.ac.nz> http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Software defined networking seminar in Auckland (28th September - 10:30am-12:30pm)
by Ian Welch 07 Sep '15

07 Sep '15

Hi all, Victoria University is running a free seminar on software defined networking in Auckland on the 28th September from 10:30-12:30 at the Victoria University Auckland Office, Level 4, the Chancery, 50 Kitchener Street, Auckland. Bryan Ng will be doing a gentle introduction to SDN and leading a hands-on session. More information is available here: http://sdn-vuw.blogspot.co.nz/2015/09/come-to-our-auckland-event-at-end-of.… RSVP by Wednesday 23 September to suzan.hall(a)vuw.ac.nz with ‘SDN seminar’ in the subject line. We also have some scholarship opportunities for Masters projects on software defined networking topics, more information here: http://sdn-vuw.blogspot.co.nz/2015/08/scholarships-available-to-work-on.html Thanks, Ian

1 0

Contribution for the IANA Stewardship Transition proposal
by Elly Tawhai 07 Sep '15

07 Sep '15

Hi NZNOG Community, The Numbers community is one of the key operational communities called on to develop its own proposal for the IANA stewardship transition. The below video relates to IANA Stewardship Transition: https://www.youtube.com/watch?v=t-x2nQxyDrU How you can contribute: ----------------------- 1. The CRISP team is seeking community response to its statement on the ICG plan, as announced at: https://www.nro.net/pipermail/ianaxfer/2015-August/000642.html The CRISP statement provides an excellent summary of the ICG proposal and how it satisfies the expectations expressed by the Numbers community. 2. The NRO has also recently called for community support of the ICG proposals, at: https://www.nro.net/news/iana-stewardship-transition-coordination-group-icg… 3. We encourage you to send an email to the ICG (public-comments(a)ianacg.org) to express your support for the ICG’s transition proposal. Kind regards, Elly APNIC

2 1

SDN APE, and IX stats from Citylink
by Tim Hoffman 03 Sep '15

03 Sep '15

Greetings, There was some discussion over the last couple of years with the NZNOG community at conferences and on the mailing list about Citylink doing a SDN based IX. This was to include with it Citylink releasing statistics of the aggregated traffic over their IX - a measure (published by most IXs) that many use to decide if it's worth connecting to an IX. Given the public nature of this discussion so far, and the fact that it's died off, can a representative of Citylink please confirm to the list; 1/ Is there an intention to move to some sort of SDN driven IX still, and if so what the timeframe for this will be? If this project has been abandoned, how will the IXs be developed in place of this project? 2/ Do they have any intention to publish an aggregated traffic on their IXs, and if so what the timeframe for this will be? I am sure many of us in the peering community will be eager to hear the answers to these questions.... Cheers, Hoff

12 21

APNIC Policy Proposal 114
by Jamie Baddeley 03 Sep '15

03 Sep '15

Folks, Saw this: https://www.apnic.net/policy/proposals/prop-114 Whilst the proposal does its best to outline pros and cons, I feel that from a policy perspective it removes the direct incentive to establish interconnectivity with IXP's (or some other mechanism for Multihoming). You gain an ASN but you are not compelled to increase the resilience of the Internet. To me that is a disadvantage that has not been stated. To me, having a network with an ASN means fundamentally you are participating in the mesh. On the solution: An organisation is eligible for an ASN assignment if: - they are currently multi-homed, OR - have previous allocated provider independent address space by APNIC, AND intend to multi-home in the future It seems to suggest a policy tilted towards incumbents or those who've been around long enough to have some PI space? The problem statement: The policy seems to imply that both requirements i.e. multi-homing and clearly defined single routing policy must be met simultaneously, this has created much confusion in interpreting the policy. Suggests that removing the confusing or conflicting elements of the current policy is wise, but I'm not convinced the proposed solution does that without undermining what I think is a important characteristic of the Internet which is a highly interconnected mesh. As an alternate, is it not better to strengthen the process to determine whether the applicant did indeed multi-home? There are downsides in that of course. It does place overhead on an entity to test that but what matters more? Ease of access into the ASN club or ensuring high levels of interconnectivity? What do others think? jamie

3 2

Routing changes for AS17746 (Orcon)
by Simon Allard 02 Sep '15

02 Sep '15

Hi NZNog Thursday 3rd Sept 00:00 -> 0600 we will be making some changes to the way AS17746 Peers. Currently AS17746 has APE/WIX Peering. We decommissioning AS17746 APE peering and advertising AS17746 via Callplus AS9790. Orcons WIX peering will eventually become AS9790 but that’s a few weeks off yet but for the mean time we will prepend AS paths to make the AS paths equal. AS9790 Peers at APE/AKL-IX and Megaport, so there will be increased peering traffic and prefixes due to the extra routes in AKL-IX and Megaport. Any questions please drop me an email Cheers, Si [cid:imagea22279.PNG(a)4001d0ff.41a0d19e] Simon Allard // Senior Network Architect D: 09 550 2790 M: 020 100 0790 F: www.callplus.co.nz<http://www.callplus.co.nz> | www.slingshot.co.nz<http://www.slingshot.co.nz> | www.flip.co.nz<http://www.flip.co.nz> | www.orcon.net.nz<http://www.orcon.net.nz> This message and any attachments contain privileged and confidential information. If you are not the intended recipient of this message, you are hereby notified that any use, dissemination, distribution or reproduction of this message is prohibited. If you have received this message in error please notify the sender immediately via email and then destroy this message and any attachments.

1 1

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 01 Sep '15

01 Sep '15

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ Kind regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Rural Fibre Deployment
by Jesse Archer 31 Aug '15

31 Aug '15

Hi, Does anyone from recent (last 1-2 years) experience have a ballpark figure of what it costs to run fibre privately in a rural setting these days? Indicative price per meter for planning, consents, trenching, installing the duct and then blowing the fibre through? *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

5 4

AS45177 Peering on APE
by Callum Barr 31 Aug '15

31 Aug '15

Hi All, Hope you are well, etc... We (Vibe Communications / Layer2Co / Intellipath / AS45177) are going to be dropping our peering at APE sometime this week or early next. We have found that the traffic levels have dropped to the point where it is no longer economic to peer at the current port pricing, aswell as having AS9560 in the AS-PATH making some 'interesting' traffic paths happen. If you currently have a bilateral peer with us over the APE fabric, this will disappear. You can re-establish this peer with a direct cable run at a datacenter that we are both at, or via the fabric at AKL-IX or Megaport AKL. Our PeeringDB entry is located here ( http://www.peeringdb.com/view.php?asn=45177) Kind regards, *Callum Barr* / *Network Architect / Vibe Communications* +64 27 567 2746 / callum(a)vibecommunications.co.nz Office: +64 9 222 0000 / Fax: 0800 842 326 Level 2, 155 K Rd, Auckland, New Zealand Web: www.vibecommunications.co.nz / Peering: AS45177 <http://www.peeringdb.com/view.php?asn=45177>

1 0

issue with xtra mail
by Daniel Christie 31 Aug '15

31 Aug '15

Hey all, Is there anyone here who is an admin of the xtra mail servers for custom domains? I simply want to know why an email being sent from an email server to xtras would get this showing up in SMTP logs of the sending server 210.54.141.1 [1224] 12:52:37 Client session <<< 553 Authentication is required to send mail as user(a)domain.com<mailto:user(a)domain.com> I'm trying to go through normal spark support channels but they are trying to ask me questions about the email server I administer which are ridiculous and very frustrating. I'm fairly sure (with my knowledge of SMTP) the issue is that our server is saying its sending an email from an email account that is hosted on xtra servers and trying to send to the same email/account without first specifying auth I have given them more than enough information about the issue already and just not getting anywhere. Daniel Christie Systems Engineer/Application Specialist PHONE +64 7 853 6060<tel:+64-7-853-6060> | FAX +64 7 854 9052<tel:+64-7-854-9052> | www.enlighten.co.nz<http://www.enlighten.co.nz>

10 10

UFB - DHCP Relay and Packet Fragmentation
by Brent Marquis 26 Aug '15

26 Aug '15

Hi All, This is a little bit late for getting the info into this community sorry, I was tied down with ensuring we had the fix out there. I thought it was important to ensure that anyone who is affected, but may not have seen the informer(s), knows that as of tomorrow you can commence migrations, remove workarounds and re-instate config, etc I've attached our informer for the Fragmented Packet issue, as it has all the info - but the main details are below. We are currently upgrading all of our 'new' (introduced earlier this year) ONTs, due to 2 issues. 1) DHCP Relay packets being discarded - where DHCP requests have src and dst port of 67. 2) Fragmented packets being discarded - any fragmented packets passing through the ONT in either direction (including NGA Voice) The upgrade has been progressing over the last few nights, OLT by OLT and will be completed overnight tonight - this was done under BAU Service Event notifications, which you probably all saw. In short, neither of these issues will exist from tomorrow onwards. Where normal service for any users affected by these issues can resume. Thanks to all the RSPs who helped us identify, troubleshoot and test over the past few weeks. As always - give me a shout if you have any questions/concerns. Thanks, Brent This communication, including any attachments, is confidential and may be legally privileged. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. No confidentiality or privilege is waived or lost by any mis-transmission or error. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

2 1

alibi routing
by Jodi Thomson 25 Aug '15

25 Aug '15

Came across this while reading soylent news - thought it interesting http://spectrum.ieee.org/tech-talk/telecom/internet/system-routes-internet-… https://alibi.cs.umd.edu/ Cheers JT -- Jodi Thomson Systems & Networks Web Connect Ltd 501 Heretaunga Street West Hastings, 4122 Ph: (06) 281 2324 (ext 802) http://www.webconnect.nz

1 0