- NZNOG - lists.nznog.org

"A secure, zoned Internet within five years"
by Juha Saarinen 15 Aug '02

15 Aug '02

http://www.theregister.co.uk/content/6/26695.html Interesting read. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Peering
by Matt Camp 15 Aug '02

15 Aug '02

Beloved Peers, Update to the TelstraClear Domestic Peering Prefix-List Please remove: 202.0.32.0/20 le 24 202.0.50.0/24 Please add: 202.0.32.0/19 le 24 202.37.137.0/24 Full list attached.

4 8

FW: Another anti-spam tool
by Gordon Smith 14 Aug '02

14 Aug '02

Just a heads-up for everyone - just found a customer using a nasty little tool called spamstalker. Not only does it forge headers when the user bounces messages, it also attempts a sendmail HELO buffer overflow exploit. It's distributed out of the U.S. Needless to say, we'll be contacting the author... Cheers, Gordon Smith CCNA Network Operations Manager MoreNet Ltd - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Fwd: Outage in Wellington
by Richard Naylor 14 Aug '02

14 Aug '02

At 04:41 p.m. 05/08/2002 +1200, Peter Mott wrote: >Are you saying that CityLink does not have UPS and autostart generator >on-site to run the whole works for at least 8 hours? I wondered when this would come up. CityLink has a different architecture and there is no "central office". Switching centers have ups and generators and smaller buildings just have UPS. But that doesn't guarantee anything. Y2k showed up a lot of "interesting effects" and I'm sure they haven't all been rectified. Having a geny in the building doesn't mean its tested and feeds everywhere you think it does. BTW - the building people mentioned this was their first outage in 7 years. In the case of this morning, we (and the other telcos in the room) run off the local power and took a short hit of around 15 minutes, despite a local outage measured in hours. We also elected to go to geny due to the switching issues the power boys were facing. We also supplied power to other tennants who had a need. If you have ever closed an 11kV switch on a fault in a metro ring main sub, you will understand why we made that decision. "did the earth move for you ?" is being polite. "Sudden suntans", stuck HT gloves, etc sometimes result. (aside: HT gloves come up to your elbow, when they are "stuck" it means they've melted to something, normally the switch handle or the wall on the other side of the room from where you were not so long ago.) Now whats really interesting is that after my earlier post, an ISP contacted me to see if the outage in Courtenay Place was the cause of two dropped pings in Thorndon. He mentioned that some of todays NZNOG discussion was already posted in a security list (?) being sent around, probably misquoted. My concern is that as a list we share fairly openly about incidents mixed with a degree of good humour and frequent light relief. If an unknowing party is quoting the list, then we need a closed list or reduce the chatter or even the info conveyed. Summary - this mornings outage wasn't a simple - NO POWER. It was complex, with enough other indicators to fool experienced (power) operators. They actually did a good job. rich richard.naylor(a)citylink.co.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: Domainz falling prey to spambots?
by Saby Singh 13 Aug '02

13 Aug '02

1 0

RE: DNS problems
by Tim John 11 Aug '02

11 Aug '02

Chris, I appreciate your concern, but I should have mentioned - and state for the record - that this name server issue is solely with the machine hosting the DRS and nothing to do with the .nz DNS. I don't want anyone thinking that the 'real' name servers are effected by this. Tim -----Original Message----- From: Chris Wedgwood [mailto:cw(a)f00f.org] Sent: Thursday, 8 August 2002 4:02 p.m. To: Tim John Cc: 'nznog(a)list.waikato.ac.nz' Subject: Re: DNS problems On Thu, Aug 08, 2002 at 02:42:38PM +1200, Tim John wrote: The mail queue on the server is unable to resolve the names for the relevant name servers when sending the notification mail. Why is this? It's troubling Domainz of all people are having DNS issues. --cw DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

latency
by Michael Newbery 11 Aug '02

11 Aug '02

It's Friday... I have been considering a suitable measure for IP latency. Inspired by the knowledge that at least one network protocol uses micro-fortnights as a unit (RFC 995), I respectfully offer the following modest proposal for consideration. We typically measure latency in msec, which is just so mundane and last millennium. Given that the speed of light is a constant, we can easily map between time and distance with the simple formula d=ct. Since our proposed new unit is purely nominal, we will use the speed of light in vacuo. In this post-modern world, why not use a tried and true, human centered measure. I like the cubit. It has stood the test of time, plus it has the word 'bit' in it. Now, typical values of latency produce a number of cubits that is rather large, so for most networks we will need to scale up the the mega-cubit (Mcubit). Those of us firmly wedded to powers of two may prefer the IEC standard nomenclature for powers of two prefixes of MiCubit (pronounced mebicubit). Which leads to the observation that the current distance from my workstation to Xtra is 3.47Mcubits, Cisco is 23Mcubits away, www.theregister.com is 34Mcubits away, and I am only 0.45 mebicubits from Paradise. Draw what comfort you may from this. -- Michael Newbery IP Architect TelstraClear Limited - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 16

Appreciation !
by Tim John 11 Aug '02

11 Aug '02

Hi Lin, Thank you for those words of reason; they are like a ray of light through the shadows. The DRS and all that went on at it's launch was before my time. I inherited the system when I started about 15 months ago and I believe we've made some good changes since then to make the system more reliable and hopefully a little better to work with. As we will be the 'stabilising registrar' under the SRS, Domainz have had to do some significant work to meet the needs of a shared environment. We will be introducing a new finance application in the next few weeks that will enable a large chunk of the existing system to be removed, thus giving an improvement in performance to what's left of the DRS. In my personal view, Domainz are in a 'strange' place at the moment. We are paying for the registry part of the existing system to be rebuilt and separated from us. We will be the guinea-pigs for the new environment and we are under the constant threat from our shareholders who are considering closing Domainz down. Quite frankly, it seems a lose/lose situation for us and which-ever way you look, we are bound to get a slamming once again. It's not a favourable spot for a Domainz (or any other) employee to be in ! Aside from the past, present and future politics of Domainz <groan>, I have made it my responsibility to try and provide the best system we can to our customers. I don't - to quote - 'hate the DRS', but I can assure you that I get as frustrated as everybody else from time to time. The DRS is all we've got at the moment, so we've got to try and make the most of it. If I hear of issues that could effect a wide audience of users, I want to get them fixed as soon as possible - as any IT Professional would. I appreciate that a lot of people have been burned in the past with the DRS and there is a lot of resentment out there (cue Peter M. :>) for both the system and some of the people involved in setting it up. My colleague Chris and I (IT Dept.) are simply trying to provide a level of service that is as good as possible given the tools we've got. Again, in my personal opinion, I am looking forward to the SRS and hope that Domainz can take on a commercial role in the future; I'd love to be involved in the next saga of the Company. There are some good people here who are passionate about their jobs, even under the continuing negativity of the DRS. Thanks again, Lin. My final point is that I enjoy working 'with' people and certainly not 'against' them. It's just not my style. Cheers, Tim -----Original Message----- From: Lin Nah [mailto:lin(a)darkmere.gen.nz] Sent: Sunday, 11 August 2002 11:49 p.m. To: nznog(a)list.waikato.ac.nz Subject: RE: DNS problems HI all While at the SRS information meeting the day before the nznog conference, I noticed the something that I am observing now. I am myself guilty of it. The negative opinion and suspicion we have of Domainz and their intentions is still there. I am not surprised by it. I myself (at the meeting) were asking questions to ensure the same thing didn't occur again. However I think we have to realise that many of the technical and even management of Domainz were not around or had nothing to do with the specification and implementation of the system forced on us on 1 May 2000. The current CEO is definitely different from POB. They have to live with it as we do until such time the new SRS is up and going. We all know the system is fubar'd. From what I gather they will decide at that point what to do with the DRS but until such time, they have to keep it going. Some of you met Tim John at the nznog conference. It was a pity though Derek Locke, the CEO, was registered for the conference and I did see him around one day, didn't introduce himself to those of you there so you could ask him questions about the transition from monopoly to SRS. In fact I was a bit annoyed when I found out about the SRS briefing that it wasn't held at the conference, to give some of you (network operators) an idea of what they were planning to accomplish with it. Why am I writing this? I think we should perhaps try to be helpful to people like Tim and other technical staff at domainz. I am sure they secretly hate it (the DRS) as much as we do. We know there are holes to that system. For example this week we hear not all emails went out and there's been no bounces etc. shrug - nothing new to me since I know of quite a few domain holders who never received their notification for renewal or initial invoice. I am not saying I will stop asking questions but I think I will try my best to do in a nicer tone. No we can't tell him about emails we didn't receive since we don't know about them. However if some of you have made changes to your domain, you should usually get an email about it. Similarly if you know your domain is due for renewal, they usually send renewal email reminders. So if you have received an invoice without a reminder email, that could be an indication why. regards Lin Footnote for those interested in the SRS: >From what I gather the SRS goes ahead on 1 Sept. At that point in time Domainz will be the sole registrar to the new registry. Once it is deemed stable etc, other registrars will be added on. I believe the deadline for that is 1 December 2002. They want a buffer period so they have an option to go back if things go horribly wrong. I believe once they start having other registrars it is a point of no return. Domainz has promissed to help in the transition process. Yes they have to help their competitors by helping with the transfer of domains to those registrars. Also the software for the SRS is open source. All interested registrars can either develop their own system or use the code developed. For the former, the technical specs have been placed online as well. There were lots more discussed at the meeting which went overtime ( I did think they were too optimistic that 2 hours was enough) Anyway if you want to know more, I suggest going to www.dnc.org.nz There's info there. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Very cool Internet appliance
by Juha Saarinen 08 Aug '02

08 Aug '02

http://reviews.zdnet.co.uk/review/2/2/1600.html Definitely something NZ ISPs should consider reselling! Wonder if you could use MRTG to graph the beer temperature/flow etc? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Newsfeed Services
by Arjen De Landgraaf 08 Aug '02

08 Aug '02

E-Secure-IT has a very complete and up-to-date newsfeed in the area of IT security. This is available free on their website (www.e-secure-uit.us) and can be made available to individual ISPs. Arjen de Landgraaf -----Original Message----- From: Tony Wicks [mailto:nzog(a)road.gen.nz] Sent: Friday, 9 August 2002 1:19 p.m. To: nznog(a)list.waikato.ac.nz Subject: RE: Newsfeed Services TelstraClear will supply newsfeed services to International Internet Wholesale customers, generally at no additional charge. ( delivered over domestic connectivity ). That service is not available to non-wholesale customers. > -----Original Message----- > From: owner-nznog(a)list.waikato.ac.nz > [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Donovan Jones > Sent: Thursday, 8 August 2002 1:45 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: Newsfeed Services > > > Given that Telecom will be terminating their Newsfeed service at > the end of > August, we are looking for a new source of usenet news for our customers. > Does anyone else in New Zealand provide Newsfeed services suitable for > an ISP (for a fee of course), or better yet is there anyone in New > Zealand that will provide (for a fee) direct access to a news server by > another ISPs customers. > > Supernews has been suggested as an option but we would obviously prefer > a local feed due to international bandwidth costs. > > Donovan Jones > > - > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Newsfeed Services
by Donovan Jones 08 Aug '02

08 Aug '02

Given that Telecom will be terminating their Newsfeed service at the end of August, we are looking for a new source of usenet news for our customers. Does anyone else in New Zealand provide Newsfeed services suitable for an ISP (for a fee of course), or better yet is there anyone in New Zealand that will provide (for a fee) direct access to a news server by another ISPs customers. Supernews has been suggested as an option but we would obviously prefer a local feed due to international bandwidth costs. Donovan Jones - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Change in Unsubscription Practice - Full Mailboxes
by Donald Neal 07 Aug '02

07 Aug '02

NZNOG People, I have in the past only unsubscribed addresses from the NZNOG list which produced permanent errors - unknown addresses rather than bounces due to relaying filters, for example. I have now been receiving bounces due to a full mailbox from two addresses for several days. Starting tomorrow, any address which produces bounces of that kind for long enough will be unsubscribed. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

RE: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> I don't think anyone thought this. I never claimed this, nor was it > the point I was making. Sorry - I didn't mean it as a retaliation. But it still worth mentioning. -----Original Message----- From: Chris Wedgwood [mailto:cw(a)f00f.org] Sent: Thursday, 8 August 2002 4:33 p.m. To: Tim John Cc: 'nznog(a)list.waikato.ac.nz' Subject: Re: DNS problems On Thu, Aug 08, 2002 at 04:13:09PM +1200, Tim John wrote: I don't want anyone thinking that the 'real' name servers are effected by this. I don't think anyone thought this. I never claimed this, nor was it the point I was making. --cw DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DNS problems
by Tim John 07 Aug '02

07 Aug '02

Hi all, I'm looking into some strange occurrences with the automatic emails generated by the Domainz DRS. There seems to be a few .nz Providers who have not received these emails recently and depend on them for registration notifications. The mail queue on the server is unable to resolve the names for the relevant name servers when sending the notification mail. I have restarted the DNS service, which will hopefully flush any cashed information and renew with current records. Are any other .nz Providers (or their customers) experiencing a lack of emails from Domainz ? Perhaps the lack of these emails could be seen as a good thing ... :> Cheers, Tim DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

FW: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> I for one was not impressed that it managed to cache 3 week old DNS > records for our MX servers. Not to mention the lack or > logging, bounces or traceability in your software. Me neither, but the software was developed before my time and I'm just carrying the baby ! The cached information did seem to be the cause of the problem though. -----Original Message----- From: Simon Lyall [mailto:simon.lyall(a)ihug.co.nz] Sent: Thursday, 8 August 2002 3:04 p.m. To: 'nznog(a)list.waikato.ac.nz' Subject: Re: DNS problems > On Thu, 8 Aug 2002, Tim John wrote: > > I have restarted the DNS service, which will hopefully > flush any cashed > > information and renew with current records. > > I for one was not impressed that it managed to cache 3 week old DNS > records for our MX servers. Not to mention the lack or > logging, bounces or > traceability in your software. > > When we moved our main MX servers we droppped the TTLs to 15 minutes > *and* kept the old servers running for a week to be sure, > nobody else had > a problem. > > Still things like DNS and email are hard, have you considered > contracting > them out to a company with more expertise in those areas? > > > -- > Simon Lyall. | Newsmaster | Work: > simon.lyall(a)ihug.co.nz > Senior Network/System Admin | Postmaster | Home: > simon(a)darkmere.gen.nz > ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> We are, but we have your domain in our spam filters. It seems to be working > rather well OK. I walked into that one :) -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Thursday, 8 August 2002 3:24 p.m. To: Tim John; nznog(a)list.waikato.ac.nz Subject: RE: DNS problems > Are any other .nz Providers (or their customers) experiencing a lack of > emails from Domainz ? We are, but we have your domain in our spam filters. It seems to be working rather well -PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: DNS problems
by Simon Byrnand 07 Aug '02

07 Aug '02

At 14:42 8/08/02 +1200, Tim John wrote: >I'm looking into some strange occurrences with the automatic emails >generated by the Domainz DRS. There seems to be a few .nz Providers who have >not received these emails recently and depend on them for registration >notifications. > >The mail queue on the server is unable to resolve the names for the relevant >name servers when sending the notification mail. "unable to resolve" - can you be more specific than that ? A temporary failure to reach the authorative nameservers for the domain should just put the message back on the queue to be tried later. Unless the domain in question had failure of nameservers for a week straight, no messages should go missing....(people wouldn't want a .nz provider that had problems like that anyway :) >I have restarted the DNS service, which will hopefully flush any cashed >information and renew with current records. Which shouldn't be necessary unless your DNS is broken... >Are any other .nz Providers (or their customers) experiencing a lack of >emails from Domainz ? I wonder exactly how we're supposed to notice email which doesn't arrive ? :) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Netgate outage causes chaos!
by Chris Wedgwood 07 Aug '02

07 Aug '02

Still flogging a dead horse... On Sun, Aug 04, 2002 at 11:33:32PM +1200, Peter Mott wrote: But the telecom delegated /23 had no name resolution. Empty/broken zone, lame delegation or name-servers not responding? For your original email is sounds very much like the latter, in which case *most* things will keep working albeit a little more slowly at times perhaps. Email won't be lost, it will remain in the queues, web-traffic should be blisfully ignorant of this. As much of 25% of the 'NZ in-addr.arpa' space is bogus last time I checked. Thousands of web applications on our virtual web servers were unable to send mail because the in-addr zone ttl expired on our caching name servers Your expired in under 30 minutes? and lookups to auth name servers failed due to loss of parent name servers I'm not sure i follow here. Since our mailers require even our own host ip addresses to resolve to a useful name things were very sucky for a time. Eh? Your MTAs fail to stop working when they can't resolve their own names from address? Sounds pretty nasty to me.... We are making quite a few network changes at this time, so had ttl lower than usual. Needless to say I've wound it back up again. Lucky for us, none of our outbound mailers are on the /23 concerned, or other isp mailers would no doubt been refusing mail from our customers. I doubt it... so much DNS is busted out there almost body requires in-addr.apra to be working when receiving email. Sorry, I just don't understand why this was such a problem... reverse is broken for so many people and they never notice it. --cw - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

69/8 allocated to ARIN
by Rob Thomas 07 Aug '02

07 Aug '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this elsewhere. ] IANA has allocated 69/8 to ARIN. I have updated my Bogon List and my sundry templates to reflect this change. You should modify your filters accordingly. IANA IPv4 Allocation List - http://www.iana.org/assignments/ipv4-address-space Bogon List - http://www.cymru.com/Documents/bogon-list.html Secure IOS Template - http://www.cymru.com/Documents/secure-ios-template.html Secure BGP Template - http://www.cymru.com/Documents/secure-bgp-template.html Secure BIND Template - http://www.cymru.com/Documents/secure-bind-template.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Radius server for Telecoms IP.something
by Malcolm Lockyer 06 Aug '02

06 Aug '02

>From what I can deduce from your comments - it doesn't sound like you'll need to buy a $1000AU radius software package just yet (although it is good software). For you scale (I'm guessing - if you have thousands of dial-up customers or somthing, then I'm wrong :) some "freeware" radius package would do fine. I can recomend IC-Radius, although it isn't perfect and isn't exactly mature - but the major advantage to it is that by default it keeps almost all of its configuration, accounting and users in a mysql database. Which for small operations is really handy. I know that that isn't the best reliablility wise - because if the mysql server dies it will refuse to authenticate at all. If you need somthing more - then use free radius, using a flatfile database - with a perl script and a crontab job to re-generate the flatfile "text file" from the mysql database every 10 or so minutes. Installation and configuration of ic-radius isn't that hard - and they have a semi-active mailing list. Bassically for the install you just need to install the libries required (such as the Perl DBI - so the scipts can talk to your database), install and compile the radiusd binaries - then load the radius "Dictionaries" (a file which contains alot of variable atributes so that your radius can talk to the telecom radius - ask telecom for it). Then you have a working radius server. It even includes a cgi based basic management program to get you started quickly - which has been ported to php. <puts on flame proof jacket> Correct my if I'm wrong - I'm no expert... Malcolm >From: Andy Linton <asjl(a)lionra.net.nz> >To: Bjorn Nilsen <bnilsen(a)manux.co.nz> >CC: nznog(a)list.waikato.ac.nz >Subject: Re: Radius server for Telecoms IP.something >Date: Wed, 7 Aug 2002 18:23:36 +1200 (NZST) > >On Wed, 7 Aug 2002, Bjorn Nilsen wrote: > > > Hello, > > > > I want to set up a radius server as we are looking at using Telecoms > > IP.office/IP.remote (or whatever it is called) here. I have never set up >a > > radius server and only know what I have read about it. I have set up >Bind, > > Apache, QMail and various other Linux based systems so hopefully this is >not > > out of my capabilities. As with all Linux software there is many options >to > > choose from eg: Cistron Radius, Livingston Radius, GNU Radius, ICRadius, > > FreeRadius. I understand that radius is a standard but from experience >(eg: > > IPSec) different implementations are not always completely compatible. >What > > radius server would people recommend? It is to be used with Telecoms > > IP.whatever, and needs to run on Linux (or BSD). > > > >Not clear if you want a free server or are prepared to pay for one. If the >latter see http://www.open.com.au/radiator/index.html > >I've just been setting this up and I like it. > >Widely used - see http://www.open.com.au/customerlist.html > --snip-- _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spam from 200/8
by Mark Foster 06 Aug '02

06 Aug '02

Hi Guys, We've had to block 200.0.0.0/8 from our MTAs temporarily, our mail queue jumped to around 30,000 messages at around 6:40 this morning and we're still taking more than one message per second from MTAs which are predominantly in that netblock. There are exceptions now but blocking 200/8 certainly reduced the load something chronic. Looks like a sweep (random(a)ourdomain) looking for valid targets, and the source addresses are random(a)a-valid-but-forged-domain. As a result our MTAs are now bombarding the source domain MTA trying to bounce all the invalid addresses, and now we're getting complaints from them... Wonder whether any other NZ ISPs have seen this happen recently or whether this is the first of many? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

Speaking of spam...
by Dylan Reeve 06 Aug '02

06 Aug '02

I have seen spam 'from' brandebank(a)brandebank.com arrive at a number of addresses today, at least one of them is fairly new, and I have never posted it anywhere public that is likely to have been trawled. Anyone else seen these? Are they a symptom of the mass spam that had QSI blocking the majority of Latin American and the Caribbian? -- Dylan Reeve - dylan(a)wibble.net It's just not cricket. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Fwd: Outage in Wellington - OT
by Tim John 06 Aug '02

06 Aug '02

> "Hell, there are no rules here - we're trying to accomplish something!" > Thomas A Edison Peter, I notice your signature has changed ... Isn't it 'fun to do the impossible' any more :) Tim -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Tuesday, 6 August 2002 7:25 p.m. To: Richard Naylor; Peter Mott; Mark Foster; nznog(a)list.waikato.ac.nz Subject: RE: Fwd: Outage in Wellington > I wondered when this would come up. CityLink has a different architecture > and there is no "central office". Switching centers have ups and > generators > and smaller buildings just have UPS. So your switching centres stayed up and other locations with just UPS went down due to available runtime being exceeded by outage length? -PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Fwd: Outage in Wellington
by Wayne Kampjes 06 Aug '02

06 Aug '02

wot - no power backup for this stuff? -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Monday, 5 August 2002 12:05 To: Mark Foster Cc: nznog(a)list.waikato.ac.nz Subject: Re: Fwd: Outage in Wellington On Mon, 5 Aug 2002, Mark Foster wrote: > Ok try it from the right address now. :) > > > >Date: Mon, 05 Aug 2002 11:54:56 +1200 > >To: nznog(a)list.waikato.ac.nz > >From: Mark Foster <mfoster(a)quicksilver.co.nz> > >Subject: Outage in Wellington > > > >Just heard from one of our NOC team here that there seems to be a power > >outage in Wellington which has certainly affected Citilink (one of our > >links is down) and by the looks also Actrix (who dissapeared off the face > >of the map earlier this morning.) > > > >Just in case anyone else is wondering why things are being a bit strange. > > > >Mark. > >(Quicksilver Internet) Ohhh... is that why www.stuff.co.nz is dead too? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

RE: Magnetic field strength in NZ?
by Dan Langille 05 Aug '02

05 Aug '02

On 6 Aug 2002 at 8:42, Lindsay Druett wrote: > Now you're telling everyone how ancient you are.... I was only born > towards the end of the '60s And I in the early 60's. > Just out of curiosity, what did they/you use for the return path when > they/you measured the EMF induced by the earth's magnetic field onto > the disused telegraph cable ? I don't know. I should clarify. I was helping someone research what the cable had been used for after it was no longer used for telegraph (its original purpose). > -----Original Message----- > From: Dan Langille [mailto:dan(a)langille.org] > Sent: Monday, 5 August 2002 17:08 > To: Juha Saarinen > Cc: NZNOG > Subject: Re: Magnetic field strength in NZ? > > > Strange that you should mention it... I was involved in some > research on the Pacific Cable (a telegraph cable from Vancouver to > NZ). One of the things we found was that after decomissioning (in the > 60's I believe), it was used to measure earth current. -- > -- Dan Langille I'm looking for a computer job: http://www.freebsddiary.org/dan_langille.php - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Magnetic field strength in NZ?
by Juha Saarinen 04 Aug '02

04 Aug '02

Does anyone know roughly how many mG it is? Of course this is on topic for NZNOG. I need to ahhh... uhhh... measure electron deviation in network gear made for Northern Hemisphere magnetic conditions. ;-) -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: Fwd: Outage in Wellington
by Richard Naylor 04 Aug '02

04 Aug '02

At 11:59 a.m. 05/08/2002 +1200, Mark Foster wrote: Just heard from one of our NOC team here that there seems to be a power outage in Wellington which has certainly affected Citilink (one of our links is down) and by the looks also Actrix (who dissapeared off the face of the map earlier this morning.) >>Just in case anyone else is wondering why things are being a bit strange. The Power co had a cable fault they eventually found. Initially another substation fault was feared as a transformer tripped at the same time and at the same place as the ring opened - which happened to NOT be the faulty cable segment. After a few recloses (think "no shutdown" with lotsa power behind you) the fault became apparent. (ie someone felt the ground shake) and it was isolated. Most customers closed things down due to false restarts with the recloses. We waited and installed a geny as the UPS was horribly confused and pretty well dead. The outage affected New World, Actrix (where CityLink have a switch) and most of Courtenay Place. There were genies and extension cords everywhere.........even down the footpath. The New World Sub needs some new paint on the switchgear. Things are now restored and the power boys are off to do a location and dig. rich richard.naylor(a)citylink.co.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Still seeing Code Red/NIMDA activity?
by Juha Saarinen 04 Aug '02

04 Aug '02

Hi, Just a quick check if NZ network operators are still seeing Windows worm activity, so to speak. Has anyone kept statistics on this? If so, I'd be interested to hear about it -- contact me off-list, please. (Or keep it on-list, if it's deemed on topic.) Cheers, -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Fwd: Outage in Wellington
by Gavin Bartle 04 Aug '02

04 Aug '02

>From the looks of their site they might have been updating it -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Monday, 5 August 2002 12:05 p.m. To: Mark Foster Cc: nznog(a)list.waikato.ac.nz Subject: Re: Fwd: Outage in Wellington On Mon, 5 Aug 2002, Mark Foster wrote: > Ok try it from the right address now. :) > > > >Date: Mon, 05 Aug 2002 11:54:56 +1200 > >To: nznog(a)list.waikato.ac.nz > >From: Mark Foster <mfoster(a)quicksilver.co.nz> > >Subject: Outage in Wellington > > > >Just heard from one of our NOC team here that there seems to be a power > >outage in Wellington which has certainly affected Citilink (one of our > >links is down) and by the looks also Actrix (who dissapeared off the face > >of the map earlier this morning.) > > > >Just in case anyone else is wondering why things are being a bit strange. > > > >Mark. > >(Quicksilver Internet) Ohhh... is that why www.stuff.co.nz is dead too? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Fwd: Outage in Wellington
by Mark Foster 04 Aug '02

04 Aug '02

Ok try it from the right address now. :) >Date: Mon, 05 Aug 2002 11:54:56 +1200 >To: nznog(a)list.waikato.ac.nz >From: Mark Foster <mfoster(a)quicksilver.co.nz> >Subject: Outage in Wellington > >Just heard from one of our NOC team here that there seems to be a power >outage in Wellington which has certainly affected Citilink (one of our >links is down) and by the looks also Actrix (who dissapeared off the face >of the map earlier this morning.) > >Just in case anyone else is wondering why things are being a bit strange. > >Mark. >(Quicksilver Internet) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: latency
by Michael Bordignon 01 Aug '02

01 Aug '02

> -----Original Message----- > From: Michael Newbery [mailto:Michael.Newbery(a)team.telstraclear.co.nz] > Sent: Friday, 2 August 2002 4:48 PM > To: nznog(a)list.waikato.ac.nz > Subject: latency > > > It's Friday... yay! - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Cable seeking backhoes
by Michael Newbery 01 Aug '02

01 Aug '02

Does anyone have a suitable rule of thumb to predict the incidence of cable seeking backhoes/trawlers per km? I've tracked down one reference of 'one hit per 7 months per 1000km', without any qualification as to location. One would for instance imagine that armor-plated cable sitting on the bottom of the ocean would have a different failure rate to that of RG9 strung across the local street. Google has thus far been rather unhelpful. -- Michael Newbery IP Architect TelstraClear Limited - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

The New Zealand Network Operators' Group
by Donald Neal 01 Aug '02

01 Aug '02

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This posting, or one like it, is sent to all subscribers each month. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Auckland Peering Exchange See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. About This Mailing List This list has around 340 subscribers, a number currently more or less static. You may only post to the list from an address subscribed to one of the lists described below. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations, nor the administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrator remains happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ipv6 peering
by Chris Hellberg 30 Jul '02

30 Jul '02

Morning all, Thanks to Dean's great ipv6 presentation at Uniforum, everyone's got a ::/28 allocation from APNIC now, right? I'm interested in hearing from people who've got v6 allocations, either from tunnel brokers, or otherwise who'd like to peer at an NZ ipv6 peering point. APE and WIX are possibilities, however I have my doubts on the number of providers on WIX and APE who would be willing to add v6 addresses on their interfaces from citylink to any servers in their network; it'd be easier to put a 6to4 tunnel for testing purposes on a router in the middle of the network, especially if the router question already has a tunnel to a tunnelbroker overseas. One of the benefits of this is that any NZ<->NZ v6 traffic doesn't have to traverse international tunnels. The big driver of this will be the amount of local content available via v6. Admittedly there's not much around at the moment, however I do have mysql, apache, xfree86, cygwin, cpan and sunfreeware mirrors that are on the 6bone which could serve as good starters. I'm sure that there would be some webservers out there who are v6 aware which people would be willing to route ipv6 to. The more people we can get on the ix, the more content would become available. Sorta like the multicast chicken and egg thing. Could I get a showing of interest on who'd like to be on such an ix (just a box I have running zebra which a whole bunch of 6in4 tunnels), even if you've got a ::/64 tunnel allocation from a tunnel broker? There won't be any international v6 transit provided, just a BGP4+ feed of all the NZ prefixes of people peering. Cheers, Chris - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Banks to review ICMP filtering?
by Juha Saarinen 30 Jul '02

30 Jul '02

http://www.idg.co.nz/webhome.nsf/UNID/E8C8975FB28122B1CC256C0500167A15!open… -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Banking/Hospital Problems and MTU
by rob.edkins＠axon.co.nz 28 Jul '02

28 Jul '02

> > Probably the reason its not on by default, is because it is > not a "fix", > its just a workaround, to work around braindead firewalls > that block all ICMP. > Agreed, it's a hack...but it's not only firewalls that drop ICMP...I came across this a few years ago with a WAN router that was misbehaving between Token Ring and Ethernet segments. > As such there would probably be considerable sacrifice in > performance when > it has to operate - first of all there will have to be a few lost > retransmitions of large MTU packets before it realises > something is wrong, > and then (from Juha's post) it just drops the MTU to 536 for further > communication, which is definately sub optimal, depending on > what the real > maximum MTU of the path is... > Yes, although it will only kick in on these sites that have this problem. It's dynamic on a per connection basis. Overall performance on the majority of connections won't be affected, as the 'ol TCP stack will behave as intended. > If it was on by default, it would hide the real problem, and > nothing would > ever get done about it. > Fixing is always better than working around, but given that ICMP access policy at the far end of the pipe is not something that Joe User usually has a lot of control over, then something that will work is probably better than something that doesn't. (From a user perspective) Unless it has some other negative impact.... Rob -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DNS monitoring update
by Rob Thomas 28 Jul '02

28 Jul '02

Hi, NZNOGers. [ Apologies to those of you who have already seen this on NANOG. ] I have added two additional data collection points to my DNS root name server monitoring. I have also scaled the graphs and added a text only version. You will find it all here: http://www.cymru.com/DNS Comments and feedback are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Pictures from Uniforum 2002 Online
by Mark Foster 28 Jul '02

28 Jul '02

Thanks to Eaden and Robert from Opentec - http://opentec.co.nz/uniforum Cheers, Mark. (Please forgive the CrossPosting.) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Banking/Hospital Problems and MTU
by Simon Byrnand 28 Jul '02

28 Jul '02

At 10:46 29/07/02 +1200, rob.edkins(a)axon.co.nz wrote: >http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q159211& >http://support.microsoft.com/default.aspx?scid=KB;EN-US;q314825& > >Are useful too. > >This fix has been around for at least 4-5 years to my knowledge. >I don't know why it isn't on by default by now, but I guess it wasn't all >that big an issue in the old dial-up world. Probably the reason its not on by default, is because it is not a "fix", its just a workaround, to work around braindead firewalls that block all ICMP. As such there would probably be considerable sacrifice in performance when it has to operate - first of all there will have to be a few lost retransmitions of large MTU packets before it realises something is wrong, and then (from Juha's post) it just drops the MTU to 536 for further communication, which is definately sub optimal, depending on what the real maximum MTU of the path is... If it was on by default, it would hide the real problem, and nothing would ever get done about it. (I can see it now - "our Bank site works fine for MS operating systems, its only those weirdo's that run Linux that have problems because they don't have PMTUBHDetect" :) For once MS got something right by not making it on by default... Regards, Simon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Banking/Hospital Problems and MTU
by rob.edkins＠axon.co.nz 28 Jul '02

28 Jul '02

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q159211& http://support.microsoft.com/default.aspx?scid=KB;EN-US;q314825& Are useful too. This fix has been around for at least 4-5 years to my knowledge. I don't know why it isn't on by default by now, but I guess it wasn't all that big an issue in the old dial-up world. > > http://www.microsoft.com/windows2000/techinfo/reskit/en/cnet/c > nbc_imp_yvjd.htm > > has more details. > > -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Banking/Hospital Problems and MTU
by rob.edkins＠axon.co.nz 28 Jul '02

28 Jul '02

There's a somewhat simpler reg hack on Windoze. Set HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnablePMTUBHDetect to 1 This enables automatic 'Black Hole' router detection and triggers automatic MTU scaling. BTW, the 'Don't Fragment' Bit is on by default with Windows. Rob > > How incredibly serendipitous. I just ran into this problem > at work the > yesterday. The service techs. for our digital radiology > system came in > and applied the latest service update. All of a sudden users weren't > able to log in via their browser loaded Java client. Funny thing is, > these guys spent 2 days trying to figure out the problem before > resorting to asking "the network guy"... one of those pride things I > guess. > > Some quality time (15 minutes) with tcpdump (well, windump) showed the > DF bit being set and repeated acknowledgment requests during the > "hang". After a modest amount of investigation and a few phone calls > the following was found: > > 1. a remote firewall blocking all ICMP (the admin won't change it) > 2. a router somewhere in the path with a lower MTU requirement > 3. a software upgrade forcing the DF bit to be set (developer won't > change it) > > Lowering the MTU on the client end fixed the problem; > however, I need to > get the registry hack distributed across ~500 desktop and all > potentially have different interface descriptions in the > HKLM/system/current control set/service/ ...what a PITA. > > > -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Domainz falling prey to spambots?
by Simon Byrnand 28 Jul '02

28 Jul '02

Hi Everyone, I've just noticed a disturbing trend in the last few days. I've started receiving considerable spam to an address (which is actually just an alias) which we *only* use as the technical contact address when registering new domains with domainz. (I won't say what it is in this forum, least I make life easy for any spambots that havn't found it yet :) Email is *never* sent from this address, it is *not* on any of our web pages or used in way except to be listed as technical contact. (In case anyone just looked up our own domain, that is not the contact address in question, we've only been using it for registrations in the last couple of months) This poses the question - just how have the spambots got hold of it ? Maybe they got lucky, and guessed it, but I don't think so. That leaves the domainz website, and whois servers. For a spambot to be able to find contact details of a domain, it would have to know the domain existed in the first place, as to my knowledge domainz don't provide a "list" of domains they have in their registry for exactly this sort of reason. And yet only a few months ago there was the case of the disreputable Australian registry that somehow managed to get a list of a large number of .co.nz's and their contact details, presumably through some kind of automated queries. I'm curious if anyone else has received spam to an address they know for certain is only used as contact details on domains registered at domainz... Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Banking Problems and MTU
by Craig Whitmore 28 Jul '02

28 Jul '02

I was wondering what people think about this latest story.. http://www.idg.net.nz/webhome.nsf/UNID/4AA2988B4A1835C5CC256BFF0014A6A8!ope… (a more technical expanation from Cisco of the problem http://www.cisco.com/warp/public/105/56.html) I've noticed this problem for ages (for example the ASB's site) when viewing their pages via a GRE tunnel (or the inability to). Is blocking _all_ ICMP types the wrong thing to do? (in paticular type 3 (unreacable), subtype 4(needs fragmentation) for PMTU Discovery) and basiclly breaking their website for people who have paths who get fragmented TCP/IP Packets) Thanks Craig Whitmore

11 15

Are you lame? :)
by Rob Thomas 26 Jul '02

26 Jul '02

Hello, NZNOGers. [ Apologies to those of you who have already seen this post on NANOG. ] I recently came across a web site belonging to Justin McNutt that lists all of the lame delegations his name servers have detected. This is a great way to share some clue and keep track of errant domains. I have received his kind permission to mimic his efforts using data collected from three of my name servers. I will update this page weekly, and you will find it here: http://www.cymru.com/DNS/lame.html Justin's page is available here: https://dnps-linux2.telecom.missouri.edu/~mcnuttj/lame.html The DNS root name server statistics are still available, and have moved here: http://www.cymru.com/DNS/dns.html My thanks to the authors of the lamers.sh script, which I modified to suit my purposes. Comments and feedback are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

OT but desperate!
by PhoneNet 24 Jul '02

24 Jul '02

I'vspent several hours today tryingt o find info on how to get past an old Compaq deskpro's setup password so I can alter the system setup for a friend - any one know if it can be done? I've tried disconnecting the CMOS jumper but despite it losing the config the sytem password stuff still comes up and I figure its a ssociated with the compaq's diagnostics partition some how .... Can't find anyhting on the internet and I'm so frustrated I'm going home! - something fo rthe night owls to ponder? Ian PhoneNet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ICMP message types
by Rob Thomas 24 Jul '02

24 Jul '02

Hi, all. I am opposed to blocking all ICMP, for many good reasons. I do limit the ICMP types and codes I allow, however, and have put together a list that might help others as well: http://www.cymru.com/Documents/icmp-messages.html Feedback is welcome and encouraged. Be the first in your ASN to make it to the Credits section. :) I hope this helps! Simon, thanks for the suggestion to post this link to the list. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Banking Problems and MTU
by Donald Neal 24 Jul '02

24 Jul '02

>From: Juha Saarinen [mailto:juha(a)saarinen.org] >Sent: Thursday, 25 July 2002 08:55 >To: Joe Abley >Subject: Re: Banking Problems and MTU [...] >> The worst thing you'd expect in a path throughput constriction from 8M >> to 128k is surely the loss of a window's worth of data. You'd expect to >> TCP to wind back to slow start, and you'd expect the in-flight pipeline >> to drain very rapidly. Performance would certainly be hit, but I don't >> think I would expect consistently stalled connections. >Dunno if it's relevant, but Jetstart is rate-limited at the RAN, which can >be anywhere in NZ (my one is in Glenfield, some 25-30km away, but used to >be in Wellington). >To and from the DSLAM, Jetstart users have a full RADSL connection (which >incidentally is also rate-limited, to 4Mbps down). >Would this sort of rate-limiting affect the problem? You should simply see a return to TCP slow start. TCP congestion control is not very sophisticated, but it does sort of work. And it works end to end. The cause of any packet loss in the middle isn't known to it. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZNOG 2002 and Beyond
by Donald Neal 23 Jul '02

23 Jul '02

Counting heads during NZNOG papers last week showed a steady attendance of somewhere between 45 and 50. (Tony McGregor's paper first thing on Friday morning had an audience of only 36 when it began, but 48 by the time it finished. I suspect that to reflect time of day rather than content or presentation.) That level of attendance, and feedback to various organisers, suggests to me that holding a face to face gathering was a worthwhile exercise. My thanks to all those who contributed, and particularly to Dean Pemberton. Now, if that one was worthwhile, how about doing it again? We have already two offers for future NZNOG gatherings. 1/ UniForum NZ Roger De Salis has volunteered to act as convenor for next year's UniForum NZ conference. In general terms, his intention is to stage a conference similar in structure to this year's, though with Linux content much more focussed toward a business audience, and in general a stronger programme. NZNOG would be welcome to participate on more or less the same basis as this year, though presumably making up a smaller proportion of a larger conference. This would probably be at around the same time of year and probably in Auckland. 2/ The University of Waikato The University of Waikato have offered to host a NZNOG gathering, to be held at their main campus in Hamilton. This would be a stand-alone event, with the university providing administrative staff time for registrations and the like. No decision has been made as to when this would be. If held outside university terms, e.g. in February, accommodation on campus would be available at a cost of approximately $35 per night. There would be a cost for the venue, but this would be well below the rate a hotel would charge. The Hamilton option is likely to have a significantly lower cost. It is possible that a university setting would discourage sponsors, who provided a good number of overseas speakers this year. On the other hand, the likely venue photographs well and we haven't asked them yet. I'd be interested in feedback, quite possibly including issues not considered in this posting. If anyone else has an alternative venue/organisation suggestion, or believes we can support more than one organised gathering a year, let's hear it. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 10

WTS: Cisco Routers
by Sahil Gupta 18 Jul '02

18 Jul '02

Hello there, I currently have 2 pieces of equipment that are up for sale: 1) Cisco 4700M+ Router, NE2E, NP4T 2) Cisco 2501, 8MB DRAM, 8MB FLASH Please email offers off-list. Cheers, Sahil

1 0

Bag Recovered :)
by Mark Foster 16 Jul '02

16 Jul '02

Thank you Lin for picking up my bag and saving it from a trip to Wellyhole.. er.. Wellington. :) Shes been nagging me about the 'reward' all day so I figured she must know where it went. :P :) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Bag Recovered :)
by Mark Foster 16 Jul '02

16 Jul '02

Thank you Lin for picking up my bag and saving it from a trip to Wellyhole.. er.. Wellington. :) Shes been nagging me about the 'reward' all day so I figured she must know where it went. :P :) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Bag Recovered :)
by Mark Foster 16 Jul '02

16 Jul '02

Thank you Lin for picking up my bag and saving it from a trip to Wellyhole.. er.. Wellington. :) Shes been nagging me about the 'reward' all day so I figured she must know where it went. :P :) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Orcon Internet Prefix List Update
by Craig Whitmore 15 Jul '02

15 Jul '02

For all those peering with Orcon Internet (AS17746) at APE, please update your Filter Lists to: Add: 202.49.233.0/24 Add: 210.55.1.0/24 A Full prefix list is included as attachment. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

Lost at Uniforum :/
by Mark Foster 15 Jul '02

15 Jul '02

Ive misplaced my Targus carryback (designed to carry a notebook computer) during the Uniforum conference. If anyone who was at the conference has picked up or remembers seeing a Black bag around the size of a briefcase - probably in or around the Amy Johnson room (where registrations were run from) id appreciate it if they would let me know. Reward Offered :) Mark. (Feeling somewhat sheepish) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Election night results site peering
by Ewen McNeill 15 Jul '02

15 Jul '02

A client of mine (Catalyst IT) will be hosting the website with the "on the night" election results. The website is a set of static pages (which are updated regularly in a push from the central computer collating the results as they come in; Catalyst IT are also operating this computer at another facility). The website will be hosted at one (or possibly two) addresses out of the Catalyst IT 203.96.153.224/27 CIDR address range (allocated out of a Paradise block). This address range is advertised into WIX (WIX router is 202.7.0.72). They have a 100Mbps connection into Citylink so local bandwidth should be adequate. However for both efficiency and redundancy they are keen to take as much advantage of the peering on WIX as possible. Can I have an indication from the ISPs as to: - how many are accepting /27 routes from WIX? (I've heard some are not accepting routes smaller than /24, or even larger) - for those that do not routinely accept a /27 advertisement on WIX, whether they'd be prepared to accept that /27 advertisement around the election night period (or put in a temporary static route) - how many are advertising their dialup, adsl, cable, etc blocks into WIX (so that the return path is also peered) Comments from anyone that peers at APE (and would accept a /27 route), but doesn't have any peering/connection to Citylink/WIX would also be appreciated. At present the cheapest price for transit to APE (from Wellington) is probably outside the budget remaining, but the issue is still being considered. (Of course if someone wants to offer cheap transit to APE.... :-) ) Messages here (nznog) or directly to me (ewen(a)naos.co.nz or ewen(a)catalyst.net.nz) would be appreciated. Thanks, Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Thanks to all who attended the Conference
by Dean Pemberton 14 Jul '02

14 Jul '02

The story I heard was thata Vixie wanted wireless to his room. Now we all know how likely that is to happen in NZ. Geek Conference or no Geek conference =) The other 100 people there had no problem getting email over the wireless that was around. Dean On Mon, 2002-07-15 at 08:23, Joe Abley wrote: > > On Saturday, July 13, 2002, at 10:48 , Joe Abley wrote: > > > ... and the mysterious absense of 802.11b wireless access in the > > important areas of the hotel (lobby, bar, conference rooms). > > Having heard the subsequent thanks to you for providing 802.11b gear, > perhaps I misunderstood the criticism (maybe it was "transit through > telecom sucks", or "jetstream is wildly unsuitable for use in a > conference full of geeks attached at 11M"). > > Vixie apparently found it more efficient to travel back to Peter's house > on the north shore and get his mail there, for example, than to do so in > the hotel. > > Anyway, congratulations on getting something off the ground. I wish I > had been there :) > > > Joe > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Re: Thanks to all who attended the Conference
by Ewen McNeill 14 Jul '02

14 Jul '02

In message <Pine.WNT.4.44.0207151423220.2740-100000(a)den2>, Juha Saarinen writes: >On 15 Jul 2002, Dean Pemberton wrote: >> The story I heard was thata Vixie wanted wireless to his room. > >I gather it was his modem that didn't like the hotel switchboard (or the >other way round, really). I'm not sure which hotel he was staying in when having trouble (for complicated reasons conference attendees ended up in two different hotels) -- I was able to dial out of the Hotel Grand Chancellor, but only with a very long timeout (over 60 seconds) to allow the modem negotiation to work. Got about 28K8 connections IIRC. The Centra hotel appeared to have analogue POTS lines into the rooms, but I didn't try dialing out there. The wireless OTOH was very handy -- thanks to those who arranged it. (Even if the ADSL did occassionally have problems it all mostly worked, and was very handy.) The wireless definitely worked as far as the chairs outside the bar, as I saw someone using it there; inside the bar I don't know, but it was close enough it probably should have worked. >But, seeing that most hotels (outside NZ at least) offer a bedside >Ethernet port, something should've been arranged IMO. You must have a very different definition of "most" to the one I use. I've never actually seen this, even in hotels that advertise it. (Comment from reception at one hotel when I'd booked into a room advertising this "oh, we don't do that". No, I wasn't pleased.) Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

Re: Thanks to all who attended the Conference
by Mike Savory 14 Jul '02

14 Jul '02

Yeah Thanks to everyone that was involved in organising it Rodger volunteered to run one next year (probably in Auckland) as well as being elected as vice president on Saturday night. Start thinking of topics now... Mike Savory On Sunday, July 14, 2002, at 12:22 PM, Andy Linton wrote: > > On Sun, 14 Jul 2002, Dean Pemberton wrote: > > > Just wanted to say a quick thanks to everyone who attended the > conference. > I'm sure much more will be posted about specific subjects later. > > I hope you all enjoyed the sessions that you attended. > I'm sorry I couldn't stay around longer > > I'd also like to thank Dean, Donald and all the others who made the > conference possible. I too am sorry I couldn't stay around longer but > I'd > guess from what I saw on Thursday that another of these would be a good > idea. > > andy - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 6

More thanks ...
by Tim John 14 Jul '02

14 Jul '02

I had a great few days and would also like to thank everyone involved in the organisation AND everyone who attended. It was good to put a face to some of the names that appear on the list. The speakers were excellent and if the same caliber can be attracted next and subsequent years, I think it could be a start of something successful. Unfortunately, I missed the evening entertainment so didn't have a chance to drink with folk or dent 2Day.com's bar tab ! However, Thursday Night Curry in Wellington could be on the cards for that ... Thanks again all. Tim Domainz. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Uniforum 2002 Conference
by Mark Foster 13 Jul '02

13 Jul '02

Just a quick note to say thanks to all those NZNOG'rs whos efforts helped make the Uniforum/NZNOG Conference a success. Nice to put faces to some of the names which crop up here from time to time. Off the top of my head and by no means officially, but thanks are owed to some NZNOG-Specific folks who helped us out: Citilink (802.11 gear, which was well used) Dean - for helping arrange the above. Nathan Mercer, Microsoft NZ - The use of a Data Projector. Steve Philips, ICONZ - The use of a Data Projector, and also the Packeteer (For the record, we did 1.1GB for the 4 day period, so that wasnt so bad on a JS1200 connection was it. :) The packeteer most certainly helped keep utilisation reasonable. Roger De Salis / Cisco, for getting Paul Vixie out. He certainly kept everyones attention and is a fairly easy speaker to listen to. Martin Kealey - for organising the whole thing. Probably also need to thank Peace Software for letting him do so much during work hours :) Lin Nah - for much needed motivation and assistance in the logistics side. + Any others who I havnt mentioned. See you all at the next one. :) Mark Foster - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Thanks to all who attended the Conference
by Dean Pemberton 13 Jul '02

13 Jul '02

Just wanted to say a quick thanks to everyone who attended the conference. I'm sure much more will be posted about specific subjects later. I hope you all enjoyed the sessions that you attended. I'm sorry I couldn't stay around longer Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Heads up to Xtra and people receiving mail from Xtra
by Simon Byrnand 10 Jul '02

10 Jul '02

Hi All, Just noticed this morning, that Xtra seem to be sending mail from some "new" mailserver ip addresses recently, which include: 210.86.15.144 210.86.15.145 210.86.15.147 (and probably others) Unfortunately that whole /24 seems to be blacklisted by several different spamlists as either a "dialup range" or as a source of spam. See http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=210.86.15.144 for one example. (Note: slow link) So if you use any ip address based spam blocking you may not be receiving mail from xtra anymore until you allow that range..... :) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

video at uniforum
by Joe Abley 10 Jul '02

10 Jul '02

Is anybody recording any of the nznog track sessions at uniforum, in some digital fashion? If so, and anybody needs/wants a US mirror for the resulting data, let me know. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 9

(Fwd) The operator of the largest IX in NZ
by Sue Leader 09 Jul '02

09 Jul '02

Greetings If anyone is interested would they get in touch direct with Kyoko. chrs Sue ------- Forwarded message follows ------- From: "Kyoko Day" <kyoko(a)apia.org> To: <exe.dir(a)internetnz.net.nz> Subject: The operator of the largest IX in NZ Date sent: Tue, 9 Jul 2002 19:37:33 +1000 Dear Sue Leader, As continuation from the last APRICOT, Philip Smith of Cisco, Akira Kato of NSPIXP2/6 of WIDE Project, and I are organizing a meeting of IX operators during the next IETF in Yokohama and would like to know if one of the IX operators in NZ can attend our meeting. The below is a proposed list of agenda for the upcoming IX Operators Meeting in Yokohama on 16 July, 2002. Paul Vixie of former PAIX in place of Stephen Stuart, Bill Manning, Bill Woodcock, and other operators and the major vendors will be attending the meeting. This will be a gathering of the major IX *operators.* In this meeting, we are also expecting the other major IXs in AP regions such as JPIX, TWIX, TWNAP, KT, KIX, and Dacom, etc. Date/Time: July 16, 2002 -7:30am - 9:00am Place: Room 513, Pacifico Conference Center, Yokohama, Japan Purpose: 1) to form a close relations among the operators of the critical IX infrastructure, 2) to find an efficient and effective way to coordinate and collaborate among the operators, especially in the area of security, 3) to exchange information, share experiences, and try to find a solution to the common problem, and 4) to receive your input about our future activities. Participants: IX operators of the major IXs that are critical to the Internet infrastructure and individuals whose expertise and IX related activities go across the continents. Proposed Agenda: 1. Open the meeting - Background and the purpose of the meeting 2. Introduction of the participants 3. Agenda Bashing 4. Presentation and Discussion Items (a) A list of known IX operators and newly established IXs (b) IX Status Report by the participants (c) Discussion of future activities 5. Any Other Business 6. Close the meeting We welcome your ideas and suggestions for the upcoming meeting. In the event you will not be able to attend the meeting, please feel free to let us know by email to kato(a)wide.ad.jp or kyoko(a)apia.org. The information is also available at http://www.apia.org. Thank you in advance, and please let me know if someone from the largest IX in NZ can participate. We look forward to hearing from you soon. Regards, Akira Kato - WIDE Project/University of Tokyo Kyoko Day - APIA ______________________________________ Kyoko Day - Secretary General Asia & Pacific Internet Association (APIA) http://www.apia.org ------- End of forwarded message ------- -- Sue Leader - Executive Director InternetNZ Voice: +64-4-472-1600 Fax: +64-4-472-1207 Level 4, Economous Building, 4 Bond Street (P.O.Box 11-881) Wellington http://www.internetnz.net.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

CUG
by Philip D'Ath 06 Jul '02

06 Jul '02

I'm thinking about forming a Cisco Users Group (CUG) in Auckland, and modelling it after other CUGs such as http://www.cisco-users.org/. I know I will have the support of Cisco Systems, and Cisco's distributors. What I'm not sure about is how much interest there is out there for such an idea among the Cisco populous. I'm not aware of anything like this currently in NZ. Is anyone else aware of such a usergroup? I would like the CUG to be for engineering people, not sales people. Based on other CUGs, common things that the CUG would do are: * Technology presentations (e,g. Understanding IPSec, Queueing Options, etc) * Study groups, for people seeking Cisco Qualifications * Solutions that people have found to problems that take more than 30s to describe * Discussion groups (perhaps IP in NZ, peering, APE, etc). * Demos of new products (the kind where your allowed to touch the boxs). I would like the meetings to be once a month, and I'll probably ask a different distributor/Cisco/vendor/reseller to sponsor coke/beer/pizza each time. I can probably manage to do a lot of presentations myself to get things going, but I don't profess to being an expert in every field, and I'd hate to think I was preaching to people who knew more than myself (which I would be if no one offered me any support). So what do you think. Would I be wasting my time? Philip D'Ath, BCMS, MCP, CCNA, CCDA. http://www.ifm.net.nz/

11 18

Conference Schedule clash
by Mike Savory 06 Jul '02

06 Jul '02

Hi all I noticed that the Citylink presentation has been scheduled at the same time as the DDoS one. (Wacking the Moles) vs (Distributed Denial of Service: The current state and counter measures) Any chance of changing this (the conference looks pretty full though...) Mike - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Advance notice: Invitation to join NZ delegation to APEC TEL26 & associated Security Workshop and Training events
by Frank March 04 Jul '02

04 Jul '02

This message is being distributed to the following mailing lists: GOVIS, Internetnz-members, Ecommerce-contacts, NZNOG. [Apologies for any duplications] I will send follow-up messages on this topic only to anyone who registers interest by replying directly to frank.march(a)med.govt.nz As someone interested in the development of ecommerce, the Internet and related technologies, you are invited to join the New Zealand official delegation to the 26th meeting of the APEC Telecommunications and Information Working Group (TEL26) which will be held in Moscow, Russia from 19 to 23 August 2002. Information about the meeting will be available later on a dedicated website but in the meantime there is some information available on the main APEC TEL website at http://www.apectelwg.org/apec/main.html. The meeting programme will be held in conjunction with a number of associated seminars and workshops (on 19 an 20 August) which increase opportunities for making contacts and bilateral discussions. Of possible wide interest, there are at two security events timed to coincide with TEL26. A two-day workshop on training to combat cyber terrorism and crime, to be hosted and funded by USA, will take place following TEL26 and a two-day meeting between representatives of the European Electronic Signatures Standards Initiative (EESSI) and the TEL e-Security Task Group is proposed to take place prior to TEL26 (this meeting will be funded by EESSI). APEC TEL is one of the most productive APEC working groups and has a very strong private sector presence. It is very active in promoting electronic commerce as well as fostering projects in online security and PKI, telecommunications policy and regulation, broadband dissemination and take-up, research and educational projects and many other relevant areas. The New Zealand delegations to previous meetings of the TEL have included a number of private sector members as well as officials from government agencies. Please note that there is no registration fee for APEC TEL meetings, and the cost of at least some meals are met by sponsors, however delegates are expected to meet their own travel and accommodation costs. The delegation reports from TEL23, TEL24 and TEL25 may be found at along with other information about APEC activities at http://www.ecommerce.govt.nz/international/index.html Please contact me if you are interested in joining the delegation or if you would like any further information. And please pass this information on to anyone else you think might be interested. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 Any opinions expressed in this message are not necessarily those of the Ministry of Economic Development. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Anybody heard of these guys ?
by Simon Byrnand 03 Jul '02

03 Jul '02

Just to change the topic momentarily away from conference registrations etc to more technical matters.... :-) A while back I remember a bit of discussion about a "personal firewall" program that automatically sent out abuse(a)domain emails whenever it detected "intrusion attempts" that was really starting to get up the nose of system admins everywhere.... Yesterday I got a strong sense of Deja Vu when I received the following email to abuse@ (details xxx'ed to protect the innocent :) -------------------8<--------------------- Complaint ID: [securepipe.com #xxxxxx] The following is a complaint against an IP or domain which appeared in our logs, indicating possible network abuse. If you have received this report in error, please forward it to the appropriate party or let us know. A user, apparently from your network, probed port 139 (NETBIOS) on the IP appearing in the log except below. The port in question is commonly used for Windows networking, and thus the probe may represent a misconfigured client or an active attempt to gain unauthorized access to the target. All timestamps below are in UTC -0000 (Greenwich Mean Time) Jul 3 03:14:56 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=64034 F=0x4000 T=103 SYN (#25) Jul 3 03:14:59 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=547 F=0x4000 T=103 SYN (#25) Jul 3 03:15:05 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=4643 F=0x4000 T=103 SYN (#25) Jul 3 03:15:17 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=11811 F=0x4000 T=103 SYN (#25) We appreciate your assistance in resolving this matter. -- SecurePipe Incident Response Team Tel: +1 608 294 6940 Fax: +1 608 294 6950 (attn: IRT) incident.response(a)securepipe.com -------------------8<--------------------- Now I don't know about anyone else, but this email looks like an automatically generated report if I ever saw one...although this time comming from a linux firewall log. The question is should I be taking this seriously, or ignoring it. The fact that the "complaint" had an ID number suggested they may have a system like spamcop where you can quickly log in and address the issue on their website. Unless I'm blind, they don't have anything like that on their site, only lots of promotional material for their companys products/services. (Does that make this email effectively unsolicited advertising ? :) Then there is the question of severity - I'd be interested to know where most sysadmins draw the line between accidental and harmless connections and outright mallicious activity. IMHO a single connection attempt to port 139 doesn't fall into the category of mallicious, and could indeed be totally accidental. I can think of a number of actions in windows that will inadvertently cause it to try to make a netbios connection to a remote host - sometimes you have to go out of your way to STOP the stupid thing from doing that...(netbios hostname resolution anyone?) I'm definately not trying to downplay the importance of security, but I can see a lot of nuisance value if we get to the point where any connection to a non-desired port is automatically considered mallicious, and every man and his dog has their firewall automatically firing off emails every time somebody tries to connect to them on a port they weren't expecting connections on... Anyway, I'd be interested in hearing from anyone else who has dealt with "securepipe.com", or just peoples opinions on the matter of automated firewall abuse emailing in general... Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Beer!!!!!!
by Dean Pemberton 03 Jul '02

03 Jul '02

In the spirit of Networking and Beer (Yep it's in the AUP), I'd just like to invite anyone who is in Wellington on Thursday along to Curry. A few of the networking people around town have been doing Thursday night curries for a few weeks now (ever since I flew in, maybe a bit before) and it's become a bit of a thing. If anyone wants to join us for Curry/Chat/Beer on Thursday, then get yourself to ThursdayNightCurry.com, check out the rules etc and we'll see you there. Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 18

RE: Uniforum registration
by Tim John 03 Jul '02

03 Jul '02

I actually went ahead and enrolled my colleague yesterday anyway, but was happily surprised that for the three days, the total was only $628. Much appreciated ! C U there ... Tim -----Original Message----- From: martin(a)kurahaupo.gen.nz [mailto:martin(a)kurahaupo.gen.nz] Sent: Thursday, 4 July 2002 5:32 a.m. To: tim.john(a)domainz.net.nz Cc: nznog(a)list.waikato.ac.nz Subject: Re: Uniforum registration I've fixed the problem with the descriptive text (some days ago now, but I thought I'd better let people know). We've also had a re-think about the pricing, and have decided to continue a discounted rate for a while: Until midnight Monday the rate is $399 for two days and $157 for each addition day, including lunch but not dinner or accommodation. A few people booked at the "full" rates earlier this week; you're welcome to re-book at the reduced rate -- but use the same booking reference number or we'll wind up charging you for both! -Martin On Mon, 1 Jul 2002, Donald Neal wrote: > The rates now being advertised on the web site are not early bird > rates. Those ceased to be available once the first fifty registrations > were in. I believe work to be under way at present to fix the text on > the web site. Tim John" <tim.john(a)domainz.net.nz, on 07/01/02 11:20 wrote: > I'm trying to register a friend for the Uniforum next week and, > according to the website, there are still 'earlybird' places left, but > to register for three days cost's nearly $1,000. > > I registered a few weeks back and it came to a third of that. Was that > at a 'really, really, really earlybird discount' ? -- "War against Terror" is an oxymoron - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Uniforum registration
by Donald Neal 03 Jul '02

03 Jul '02

Tim, The rates now being advertised on the web site are not early bird rates. Those ceased to be available once the first fifty registrations were in. I believe work to be under way at present to fix the text on the web site. - Donald Neal -- Donald Neal Special Operations Network Delivery Telecom New Zealand Ltd >>> "Tim John" <tim.john(a)domainz.net.nz> 07/01/02 11:20 >>> I'm trying to register a friend for the Uniforum next week and, according to the website, there are still 'earlybird' places left, but to register for three days cost's nearly $1,000. I registered a few weeks back and it came to a third of that. Was that at a 'really, really, really earlybird discount' ? Tim - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Maxnet
by Juha Saarinen 02 Jul '02

02 Jul '02

On Wed, 3 Jul 2002, Geoff wrote: > Hi Juha, > > Abuse and postmaster(a)maxnet should work.. I see... they do work, at maxnet.co.nz, but not maxnet.net.nz. Oh well. :-) > however if you gimme the details I'll suss it out for you. Cheers, will do. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Maxnet
by Juha Saarinen 02 Jul '02

02 Jul '02

Could someone from there contact me with an admin address that I could use? One of Maxnet's customers has come down with W32/Yaha.E. Furthermore, it'd be cool if Maxnet could add a couple of aliases, such as: hostmaster postmaster abuse -- Regards, Juha C program run. C program crash. C programmer quit. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 01 Jul '02

01 Jul '02

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This posting, or one like it, is sent to all subscribers each month. NZNOG 2002 HURRY! HURRY! MAKE REGISTRATION FAST! Sorry, got a bit carried away there. A strong NZNOG programme makes up much of the content of the UniForum NZ conference to be held next week at the Auckland Airport Centre hotel. You can read the full programme and register at http://www.uniforum.org.nz/ . Yes, you could read the programme there and not register, but surely you wouldn't. Overseas speakers appear thanks to Cisco, Ericsson, Juniper and The University of Waikato. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Auckland Peering Exchange See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. About This Mailing List This list has around 340 subscribers, a number currently more or less static. You may only post to the list from an address subscribed to one of the lists described below. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations, nor the administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrator remains happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

OT: Wanted: Data Projectors for Uniforum
by Mark Foster 01 Jul '02

01 Jul '02

Hi folks, apologies for the offtopic nature of this post. We're in need of a couple of Datashow units for the Uniforum conference this year. The rates ive obtained for rental units so far arent particularly brilliant - ive managed to get one, we ideally would like to have three for the entire period Thursday-Sunday.. If anyone on this list is in a position to assist, im authorised to use a free conference registration as a bargaining chip :) Thats around $400 value for the four days worth. Note that two days are a weekend also. :) If anyone has a unit they could possibly loan us for the duration of the conference, please contact me directly either via email (offlist) or call me directly on 021 499 368. Auckland area preferred, and im happy make any other delivery arrangements. Thanks, Mark Foster Uniforum 2002 Conference Committee - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Uniforum registration
by Tim John 30 Jun '02

30 Jun '02

I'm trying to register a friend for the Uniforum next week and, according to the website, there are still 'earlybird' places left, but to register for three days cost's nearly $1,000. I registered a few weeks back and it came to a third of that. Was that at a 'really, really, really earlybird discount' ? Tim - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: CUG
by robbie_gernandt＠wilsonandhorton.co.nz 30 Jun '02

30 Jun '02

Yip, I'm in We would definitely qualify as a "multi-vendor" customer, but I would be keen to join in any case. regards Robbie Gernandt Network Consultant Wilson & Horton Ltd CCNA, NNCSS *************************************************************************** This may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of Wilson & Horton Limited. For more information on Wilson & Horton please visit our web site at http://www.wilsonandhorton.co.nz ***************************************************************************

1 0

RE: CUG
by Allister Clarke 30 Jun '02

30 Jun '02

I suppose I should mention publically that I am interested. CCNP here I come ... :-) Allister BSc CCNA -----Original Message----- From: Philip D'Ath [mailto:pid(a)ifm.net.nz] Sent: Sunday, 30 June 2002 1:24 p.m. To: nznog(a)list.waikato.ac.nz Cc: blakjak(a)blakjak.net Subject: RE: CUG The problem I face is that I would need to invest a lot of time initially to make it a success. Once it is running, other people would probably step forward to assist. Ideally SIGs (special interest groups) would form off the main club. I have a lot of experience with Cisco equipment, so I can provide the skills required to make it work. I can't make it happen if people bring along questions about 5 different vendors equipment. -----Original Message----- > > Because I'm passionate about Cisco networking equipment, and I > > think I can get a good sized crowd coming along. > > If I made it a NUG (Network Users Group), then it could swell it > > be something huge. ... Im definately interested in upskilling in this area so Id be in - but id be somewhat cautious if the people coordinating an event were so pro-one-manufacturer that they wound up being anti-the-others, you end up with a rather narrow field of expertise... (Shadows of MCSE? Or is that inappropriate? :P) Im all for it, but id prefer a vendor-neutral concept. Of course theres no reason why Cisco cant feature in a big way - but lets not close the idea off to other vendors. Otherwise anyone who wishes to retain a broader view, needs to find multiple training/user group sources instead of just one. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Klez Virus
by Philip D'Ath 29 Jun '02

29 Jun '02

I made a posting to this group within the last 24 hours, which I don't commonly do. I am now constantly getting copies of the Klez virus emailed to me. I think it is likely that someone on this list has the virus. Could be a coincidence. Philip D'Ath, BCMS, MCP, CCNA, CCDA. http://www.ifm.net.nz/

3 2

RE: CUG
by Malcolm Lockyer 29 Jun '02

29 Jun '02

Personally I think we should model it on what the "CHUG" website has to say... "Group meetings are held on the last Wednesday of every other month. They often consist of a one-hour technical presentation and a brief product update, after which the group splits into several informal discussion groups, allowing members to interact with their industry peers." http://www.chug-info.com/ Malcolm >From: "Philip D'Ath" <pid(a)ifm.net.nz> >To: <jabley(a)automagic.org> >CC: <nznog(a)list.waikato.ac.nz> >Subject: RE: CUG >Date: Sun, 30 Jun 2002 10:55:46 +1200 > > Because I'm passionate about Cisco networking equipment, and I >think I can get a good sized crowd coming along. > If I made it a NUG (Network Users Group), then it could swell it >be something huge. > > I have good contacts at Cisco, and the Cisco distributors. I >can arrange to get demo equipment for a night to show people, and to let >people touch. > > I have Cisco qualifications, and can help to get study groups >going. > >-----Original Message----- >On Sun, Jun 30, 2002 at 01:20:11AM +1200, Philip D'Ath wrote: > > I'm thinking about forming a Cisco Users Group (CUG) in > > Auckland, and modelling it after other CUGs such as > > http://www.cisco-users.org/. > >Just out of interest, if you were going to the effort of organising >something like this, why would you make it vendor-specific? > > _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: CUG
by Malcolm Lockyer 29 Jun '02

29 Jun '02

I'm definatly interested! Even though I'm in Hamilton - it definatly sounds worth the trip every month/whatever frequency you/we decide. Personally - I think it is best to keep it as a club - with very minimal/no cost - although I realise that refreshments/venues can cost somewhat. Also - I reakon it'd be nice to see some other vendors equipment - just for some variety. I'm also all for semi practical/workshop type situations - for doing stuff like ipsec or multicast (just to expand one's knowlege). Just the value of having a meet - where cisco people can talk cisco is just huuge. Malcolm >From: "Philip D'Ath" <pid(a)ifm.net.nz> >To: <jabley(a)automagic.org> >CC: <nznog(a)list.waikato.ac.nz> >Subject: RE: CUG >Date: Sun, 30 Jun 2002 10:55:46 +1200 > > Because I'm passionate about Cisco networking equipment, and I >think I can get a good sized crowd coming along. > If I made it a NUG (Network Users Group), then it could swell it >be something huge. > > I have good contacts at Cisco, and the Cisco distributors. I >can arrange to get demo equipment for a night to show people, and to let >people touch. > > I have Cisco qualifications, and can help to get study groups >going. > >-----Original Message----- >On Sun, Jun 30, 2002 at 01:20:11AM +1200, Philip D'Ath wrote: > > I'm thinking about forming a Cisco Users Group (CUG) in > > Auckland, and modelling it after other CUGs such as > > http://www.cisco-users.org/. > >Just out of interest, if you were going to the effort of organising >something like this, why would you make it vendor-specific? > > _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: CUG
by Saby Singh 29 Jun '02

29 Jun '02

1 0

Callplus Prefix List Update
by James Tyson 27 Jun '02

27 Jun '02

Hey folks. We've started advertising 202.49.34.0/24 & 202.49.35.0/24 Full prefix list as follows: ip prefix-list tranzpeer-networks seq 5 permit 192.100.53.0/24 ip prefix-list tranzpeer-networks seq 10 permit 202.14.252.0/24 ip prefix-list tranzpeer-networks seq 15 permit 202.27.48.0/21 ip prefix-list tranzpeer-networks seq 20 permit 202.36.204.0/23 ip prefix-list tranzpeer-networks seq 25 permit 202.36.244.0/24 ip prefix-list tranzpeer-networks seq 30 permit 202.36.245.0/24 ip prefix-list tranzpeer-networks seq 35 permit 202.37.129.0/24 ip prefix-list tranzpeer-networks seq 40 permit 202.49.62.0/24 ip prefix-list tranzpeer-networks seq 45 permit 202.49.82.0/24 ip prefix-list tranzpeer-networks seq 50 permit 202.49.83.0/24 ip prefix-list tranzpeer-networks seq 55 permit 202.49.152.0/21 ip prefix-list tranzpeer-networks seq 60 permit 202.49.250.0/24 ip prefix-list tranzpeer-networks seq 65 permit 202.50.60.0/22 ip prefix-list tranzpeer-networks seq 70 permit 202.50.170.0/24 ip prefix-list tranzpeer-networks seq 75 permit 202.154.128.0/19 ip prefix-list tranzpeer-networks seq 80 permit 202.180.64.0/18 ip prefix-list tranzpeer-networks seq 85 permit 202.180.116.0/24 ip prefix-list tranzpeer-networks seq 90 permit 203.96.16.0/20 ip prefix-list tranzpeer-networks seq 95 permit 203.96.48.0/20 ip prefix-list tranzpeer-networks seq 100 permit 210.55.111.0/24 ip prefix-list tranzpeer-networks seq 105 permit 210.55.158.0/24 ip prefix-list tranzpeer-networks seq 110 permit 210.55.254.0/24 ip prefix-list tranzpeer-networks seq 115 permit 202.36.204.0/24 ip prefix-list tranzpeer-networks seq 120 permit 202.36.205.0/24 ip prefix-list tranzpeer-networks seq 125 permit 202.50.109.0/24 ip prefix-list tranzpeer-networks seq 130 permit 202.49.34.0/24 ip prefix-list tranzpeer-networks seq 135 permit 202.49.35.0/24 -- Cheers. --- James Tyson Moebius Systems Ltd http://www.moebius.co.nz/

1 0

Christchurch Thursaday night curry.
by stephen.sheehan.2＠uni.massey.ac.nz 27 Jun '02

27 Jun '02

Would there be anybody interested in a christchurch version. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Beer!!!!!!
by Saby Singh 26 Jun '02

26 Jun '02

1 0

Confused on Uniforum
by Simon Lyall 26 Jun '02

26 Jun '02

I've not been to one of these before so sorry if these are questions about the obvious, anyway I was supposed to write something out so maybe we could ask management to give us the time off work to attend and maybe pay for us. 1. What is Standard vs Economy vs Budget? I see different prices but no explanation of what the difference is other than mention of Lunch. 2. What do the workshops usually cover, what is their format etc? 3. Everyone has to pay $85 to become a member? 3. I see things like "discount around 20%" before the 30th if we miss out on the Early Bird prices, what is the actual price then if we miss out on the first 50 discount? 4. Actually how much does it cost if I only book for one day? I really need prices if we request money from management. Sorry but I couldn't find this stuff on the webpage, if I missed the URL please let me know. -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 8

ECN
by Juha Saarinen 26 Jun '02

26 Jun '02

Having once again fallen into the ECN-enabled-on-new-kernel-breaks-everything-trap, I was wondering if: a) ECN is actually useful; b) Eventually, everyone will upgrade their routers; c) There's a way to automagically fall back to non-ECN TCP, if you see what I mean, instead of having to manually disable/enable it each time. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 4

Openssh vulnerability
by Jeremy Brooking 25 Jun '02

25 Jun '02

Im sure most of you are all aware, but for those who aint... "A yet undisclosed vulnerability exists in OpenSSH. You are strongly encouraged to upgrade immediately to OpenSSH 3.3 with the UsePrivilegeSeparation option enabled." This should block the vulnerability, but will not fix it, upgrading to 3.4 as soon as its released is recommended. Jeremy - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

IPnet problems?
by Simon Lyall 23 Jun '02

23 Jun '02

Anybody else having problems with ipnet dialup in 07 and 06 area (mainly 07) since mid last week? -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

Apache vulnerability
by Steve Phillips 21 Jun '02

21 Jun '02

Just a note to all that don't know about this one - there are a LOT of still vulnerable servers out there, there have also been exploits published and in the wild for FreeBSD, OpenBSD, NetBSD and rumors of win32 exploits, linux exploits and solaris exploits, if you haven't upgraded your web server for the past 2 years, now is your chance :-) Also of note, some apps that come bundled with precompiled versions of apache's web server will need vendor supplied patches, you should all check with your vendors to find out what they are doing and what their upgrade paths will be. There is a scanner available from http://www.eeye.com that you can use :-) how accurate it is I'm not sure, but if its reporting is true then my alteon, a number of Apple based servers and a few M$ IIS/4.0 servers are also vulnerable to this bug :-) tho I think they may simply be bogus reports due to the way it checks for the vulnerability.. -- Steve. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Orcon Internet Prefix List Update
by Craig Whitmore 20 Jun '02

20 Jun '02

For all those peering with Orcon Internet (AS17746) at APE, please update your Filter Lists to: Add: 202.36.199.0/24 A Full prefix list is included as attachment. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

More Conference Speakers!!!!!
by Dean Pemberton 20 Jun '02

20 Jun '02

Last minute addition. Presentation by Simon Blake and Jonathan Martin of Citylink. Looks like a good bit of humour with a good bit of technology. Don't forget to register. Martin, Can you add this to the page and schedule. Thanks Dean -----Forwarded Message----- > From: Simon Blake <simon(a)citylink.co.nz> > To: dean(a)flatnet.gen.nz > Subject: NZNOG talk > Date: 21 Jun 2002 14:18:59 +1200 > > Topic: > > "Wacking the Moles" > > aka "is Citylink a crap network? Discuss..." > aka "How we built a 5 nines network from stuff we bought from Dick > Smith" > > Simon Blake and Jonathan Martin of Citylink will speak about the past, > present and future of Citylink. Discussion points could/will include > hardware (physical construction, power issues), topology, > administration, peering/APE/WIX, best practices for operators on > Citylink, building routers from Linux PC's, and anything else that > people ask us. Will probably contain some horror stories, there may be a > little finger pointing and telco mocking, but we'll try to keep it > seemly. > > Bio: > > Simon has been involved with Citylink more or less since it's inception > in 1996, as network administrator and lead mole wacker. Jonny has been with > Citylink for about a year doing network admin, hardware integration, and > VoIP development. Prior to joining Citylink he was with the broadband > development group at Telecom NZ. > > -- > > > That do? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Conference Registrations
by Dean Pemberton 20 Jun '02

20 Jun '02

Ok people. It's time to fess up. If you are planning to go to the NZNOG Conference then please go to the following page and register. http://www.uniforum.org.nz/registration.cgi Incase you are still unsure of why you should go - here is a list reasons/highlights. 1) Paul Vixie. Yep we managed to get Paul Vixie to agree to come out. For those of you who have managed to get on this list without knowing who Paul Vixie is, then just think words like: DNS cron dhcp Book on Sendmail etc etc etc Paul is worth the asking price for the conference. And we have him doing an hour lecture and then a whole day workshop on Saturday. 2) Greg Shepherd. Greg is a Consulting Engineer for Juniper Networks, focusing primarily on multicast protocols, performance, customer solutions, and market drivers. Before joining Juniper, Greg worked in multicast development at Cisco Systems, and also presented the Advanced Multicast Routing tutorial for Cisco Networkers. Until recently he held a faculty position at the University of Oregon's Advanced Networking Technology Center, where he provided multicast direction to the Internet2 community. Greg also sits on the Board of Advisors for Digital Fountain. 3) David Moore David's research interests are high speed network monitoring, denial-of-service attacks and infrastructure security, and Internet traffic characterization. His current research includes tracking and quantifying global DoS attacks using the backscatter analysis technique, developed with Geoff Voelker and Stefan Savage of UCSD. Most recently, David has been applying some of the same measurement techniques using large address spaces to monitor several of this summer's large worms: CodeRed v1 and v2, CodeRed-II, and Nimda. 4) lots of other people. We've really pulled out the cast of thousands for this conference. It's going to be a great opportunity to listen to that people are doing. Topics include IPv6, VoIP, Wireless, DOS etc 5) Here is the guilt trip... If you support NZNOG and this conference then there is a good chance that it will keep going in years to come. If no one turns up then there will never be one again. So even if this conference is not you IDEAL nznog conference - then please consider attending the parts that do interest you. That way there will be one in the future for you to have input into. So SIGN UP. If there is a reason why you are not signing up then please email me and let me know. There may be something that I can do about it. And do not try and just ignore it. I'll be mailing people individually to hassle them into it as well =) Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 6

Re: Final Request for Submissions for '.maori.nz' Proposal
by Roger De Salis 19 Jun '02

19 Jun '02

Sue Leader wrote: > > Final Request for Submissions for '.maori.nz' Proposal > > At its June meeting the Council of InternetNZ unanimously approved > in principle the creation of a new second level domain (2LD) - > '.maori.nz'. > // Since the same request was posted to nznog, here is the technical proposal in all it's glory, as sent to the NOG // It is perhaps opportune for the members to consider whether they wish Internet NZ to sink into the political morass that the Telco's find themselves, and why excrutiatingly simple things take forever. And ultimately stuff costs a fortune to do because you are dealing with such an amazingly political machine. Or you can do the right thing, simply, quickly, without drama. Pick one. I'll even get the DNC's permission - howzzat.... I prefer, the simple, quick low cost procedure to expensive, time consuming one, but I am clearly out of step........ but may I'm wrong, or deluded.... Rgds Roger NOG proposal follows. =============================================================== Bizzarro...... /* formal on Formal implementation proposal: add .maori to existing DNS. (About 45secs) make minor change to to existing DNS thingy (it may be ugly, but at least it works reliably) perform push check .test.maori.nz points to x.x.x.x/y open for accepting .maori domain names (it is unmoderated...) $0 Time about 45 mins. /* formal off I can of course write this in Microsoft word, about 200 pages, get two different legal opinions from a variety of smartly dressed punters around town, consume staggering amounts of dosh/time and the end result will not look a whole lot different from the one above..... So vote for which one you prefer.... Roger De Salis > InternetNZ is now calling for formal submissions regarding the > implementation of '.maori.nz'. Submissions received by the Domain > Name Commissioner of InternetNZ will one of the aspects that > InternetNZ will use to determine if this application will receive final > approval. > > Anyone who is interested in sending a submission is encouraged to > read the application, which can be found at: > http://www.internetnz.net.nz/dns/2nd-level-domains/maorinz.html > > Submissions from the previous stage of the approval process can be > found at: > http://www.internetnz.net.nz/dns/2nd-level-domains/maorinz- > submissions/index.html > > Submission requirements > > Anyone can present a submission on this stage of the application. > Submissions documenting the author(s) opinions are encouraged > regarding any implementation issues in relation to this proposal. > Anyone who is interested in making submission is invited to review > the variety of solutions ICANN utilised when creating seven new > TLDs in late 2000 at http://www.icann.org/tlds/ > > Submissions are not restricted to individuals but can be from > companies, groups, notfor profits, etc. > > For a submission to be acceptable it must include the name of > theauthor and any person or group which they are representing. > Contactdetails also need to be provided which will need to include a > day-time contact number and postal address. > > Anonymous submissions will be disregarded.All submissions > received will be placed on the InternetNZ website.Contact details and > address will be removed but they will list theauthor(s) name (i.e. > similar to 'Letters to the Editor'). > > Where to send submissions > > Submissions can be sent to the Domain Name Commissioner, > Debbie Monahan, on 2ld(a)dnc.org.nz or can be posted to: > The Domain Name Commissioner > InternetNZ > Attention: maori.nz submission > PO Box 11881 > Wellington > > Please provide your submission in either ASCII (plain) text or HTML > format. > > Deadline > > The deadline for submissions is 5 pm on July 5th 2002. All > submissions can be accessed from the "What's Hot" area of the > website as they are placed online. > > Next steps > > The final decision will be made at the InternetNZ council meeting of > July 19th 2002 after a review of any submissions received by the > Domain Name Commissioner. > > 2LD application process > > For information on the policy and history of 2LD's please refer > to:http://www.internetnz.net.nz/dns/2nd-level-domains/ > --- > > -- > Sue Leader - Executive Director > InternetNZ > Voice: +64-4-472-1600 Fax: +64-4-472-1207 > Level 4, Economous Building, 4 Bond Street (P.O.Box 11-881) Wellington > http://www.internetnz.net.nz > _______________________________________________ > members-announce mailing list > members-announce(a)internetnz.net.nz > http://listserver.internetnz.net.nz/mailman/listinfo/members-announce -- \_ Roger De Salis rdesalis(a)cisco.com </' Cisco Systems NZ Ltd +64 25 481 452 /) L8, ASB Tower, 2 Hunter St +64 4 496 9003 (/ Wellington, New Zealand roger(a)desalis.gen.nz ` In October 2001, the 5th most important product line by value for Cisco is - the telephone. Cisco 79x0 IP telephones. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Final Request for Submissions for '.maori.nz' Proposal
by Sue Leader 19 Jun '02

19 Jun '02

Final Request for Submissions for '.maori.nz' Proposal At its June meeting the Council of InternetNZ unanimously approved in principle the creation of a new second level domain (2LD) - '.maori.nz'. InternetNZ is now calling for formal submissions regarding the implementation of '.maori.nz'. Submissions received by the Domain Name Commissioner of InternetNZ will one of the aspects that InternetNZ will use to determine if this application will receive final approval. Anyone who is interested in sending a submission is encouraged to read the application, which can be found at: http://www.internetnz.net.nz/dns/2nd-level-domains/maorinz.html Submissions from the previous stage of the approval process can be found at: http://www.internetnz.net.nz/dns/2nd-level-domains/maorinz- submissions/index.html Submission requirements Anyone can present a submission on this stage of the application. Submissions documenting the author(s) opinions are encouraged regarding any implementation issues in relation to this proposal. Anyone who is interested in making submission is invited to review the variety of solutions ICANN utilised when creating seven new TLDs in late 2000 at http://www.icann.org/tlds/ Submissions are not restricted to individuals but can be from companies, groups, notfor profits, etc. For a submission to be acceptable it must include the name of theauthor and any person or group which they are representing. Contactdetails also need to be provided which will need to include a day-time contact number and postal address. Anonymous submissions will be disregarded.All submissions received will be placed on the InternetNZ website.Contact details and address will be removed but they will list theauthor(s) name (i.e. similar to 'Letters to the Editor'). Where to send submissions Submissions can be sent to the Domain Name Commissioner, Debbie Monahan, on 2ld(a)dnc.org.nz or can be posted to: The Domain Name Commissioner InternetNZ Attention: maori.nz submission PO Box 11881 Wellington Please provide your submission in either ASCII (plain) text or HTML format. Deadline The deadline for submissions is 5 pm on July 5th 2002. All submissions can be accessed from the "What's Hot" area of the website as they are placed online. Next steps The final decision will be made at the InternetNZ council meeting of July 19th 2002 after a review of any submissions received by the Domain Name Commissioner. 2LD application process For information on the policy and history of 2LD's please refer to:http://www.internetnz.net.nz/dns/2nd-level-domains/ --- -- Sue Leader - Executive Director InternetNZ Voice: +64-4-472-1600 Fax: +64-4-472-1207 Level 4, Economous Building, 4 Bond Street (P.O.Box 11-881) Wellington http://www.internetnz.net.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

New network...
by James Tyson 19 Jun '02

19 Jun '02

Hi. We have added 202.50.109.0/24 to our advertisements today. Full prefix list attached. ip prefix-list tranzpeer-networks seq 5 permit 192.100.53.0/24 ip prefix-list tranzpeer-networks seq 10 permit 202.14.252.0/24 ip prefix-list tranzpeer-networks seq 15 permit 202.27.48.0/21 ip prefix-list tranzpeer-networks seq 20 permit 202.36.204.0/23 ip prefix-list tranzpeer-networks seq 25 permit 202.36.244.0/24 ip prefix-list tranzpeer-networks seq 30 permit 202.36.245.0/24 ip prefix-list tranzpeer-networks seq 35 permit 202.37.129.0/24 ip prefix-list tranzpeer-networks seq 40 permit 202.49.62.0/24 ip prefix-list tranzpeer-networks seq 45 permit 202.49.82.0/24 ip prefix-list tranzpeer-networks seq 50 permit 202.49.83.0/24 ip prefix-list tranzpeer-networks seq 55 permit 202.49.152.0/21 ip prefix-list tranzpeer-networks seq 60 permit 202.49.250.0/24 ip prefix-list tranzpeer-networks seq 65 permit 202.50.60.0/22 ip prefix-list tranzpeer-networks seq 70 permit 202.50.170.0/24 ip prefix-list tranzpeer-networks seq 75 permit 202.154.128.0/19 ip prefix-list tranzpeer-networks seq 80 permit 202.180.64.0/18 ip prefix-list tranzpeer-networks seq 85 permit 202.180.116.0/24 ip prefix-list tranzpeer-networks seq 90 permit 203.96.16.0/20 ip prefix-list tranzpeer-networks seq 95 permit 203.96.48.0/20 ip prefix-list tranzpeer-networks seq 100 permit 210.55.111.0/24 ip prefix-list tranzpeer-networks seq 105 permit 210.55.158.0/24 ip prefix-list tranzpeer-networks seq 110 permit 210.55.254.0/24 ip prefix-list tranzpeer-networks seq 115 permit 202.36.204.0/24 ip prefix-list tranzpeer-networks seq 120 permit 202.36.205.0/24 ip prefix-list tranzpeer-networks seq 125 permit 202.50.109.0/24 -- Cheers. --- James Tyson Moebius Systems Ltd http://www.moebius.co.nz/

1 0

XTRA smtp server and relaying.
by Steve Phillips 18 Jun '02

18 Jun '02

seeing as the xtra contact addresses seem unable to fix this issue, i decided to post here, may be OT, in that case, apologies :-) Xtra, why are you allowing relaying for our backbone IP ranges.. ? and while you are at it, why is it that you don't seem to respond to your abuse@ and security@ e-mail addresses ? if you have allowed relaying for our 202.14.100 netblock, then what other netblocks have you allowed relaying for that you don't own ? Anyone else wanna test this and see if Xtra relay for them as well ? :-) -- Steve. X-Persona: <Steve Corp> Return-Path: <steve(a)focb.iconz.co.nz> Delivered-To: steve(a)iconz.net Received: (qmail 14827 invoked by uid 505); 19 Jun 2002 00:14:51 +1200 Received: from steve(a)focb.iconz.co.nz by mail.internet.co.nz with qmail-scanner-1.03 (. Clean. Processed in 0.023202 secs); 18 Jun 2002 12:14:51 -0000 Received: from mta2-rme.xtra.co.nz (210.86.15.130) by 0 with SMTP; 19 Jun 2002 00:14:51 +1200 Received: from fred ([202.14.100.208]) by mta2-rme.xtra.co.nz with SMTP id <20020618121441.NWLW25388.mta2-rme.xtra.co.nz(a)fred> for <steve(a)iconz.net>; Wed, 19 Jun 2002 00:14:41 +1200 Subject: test for relaying Message-Id: <20020618121441.NWLW25388.mta2-rme.xtra.co.nz(a)fred> Date: Wed, 19 Jun 2002 00:14:51 +1200 testy test - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Conference Registrations
by Dean Pemberton 17 Jun '02

17 Jun '02

That is a very good point. If people are concerned about this then please let Martin Kealey know. If this is a reason that you have not registered then please contact him He is in charge of the Uniforum registration process. I've CC'ed him on this email. Thanks On Tue, 2002-06-18 at 11:24, Mark McSweeny wrote: > Hi Dean, > > Should not the payment section of the registration be secured i.e. https/ssl > ? > Mummie told me not to buy online without the little padlock closed ? > > > Thanks > Mark - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

NZNOG/UniForum NZ Conference Confirmed
by Donald Neal 17 Jun '02

17 Jun '02

The conference convenor has confirmed that we now have enough registrations for the conference to proceed. Or as my two-year-old son would say Tunderbirds are Doh! Registrations are now open at http://www.uniforum.org.nz/registration.cgi . Reduced rates apply to the first fifty registrations. A strong NZNOG paper programme is offered on the Thursday and Friday, with on Saturday a tutorial by Paul Vixie, original author of BIND. You can read a full programme - including papers and tutorials which aren't from NZNOG - on the web site. A "voucher" code has already been sent to all NZNOG subscribers entitling you to free drinks on Thursday night, courtesy of 2Day Internet Ltd. Remember to use that code when registering. Please contact me if you haven't received it. Overseas speakers appear in association with Cisco, Juniper and The University of Waikato. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Conference Registrations
by Donald Neal 16 Jun '02

16 Jun '02

-- Donald Neal Special Operations Network Delivery Telecom New Zealand Ltd >>> "Dean Pemberton" <dean(a)flatnet.gen.nz> 06/17/02 10:19 >>> >Ok people. It's time to fess up. >If you are planning to go to the NZNOG Conference then please go to the >following page and register. http://www.uniforum.org.nz/registration.cgi >Incase you are still unsure of why you should go - here is a list >reasons/highlights. Plus Dean Pemberton on IPv6!! - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0