- NZNOG - lists.nznog.org

RE: Domainz information corruption.
by Dylan Reeve 11 May '00

11 May '00

On Thu, 11 May 2000, James Bell wrote: > >Right well, I registered those domain names, and as far as I understand, > >that is the fuction of registrar. However I realise that doesn't > >immediatly make me a registrar (as exciting a title as that is). So what > >does? > Paying Domainz $300 (or $3000). So I can still register them? I just can't make any changes once I have done so? I see this as sub-optimal, but I guess I don't really have a choice. > and signing a Registrar agreement. Is that the one that I hear no-one has signed? Dylan Reeve - dylan(a)wibble.net "Um, yeah." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Domainz system (authoritative checking)
by Ted Grenfell 11 May '00

11 May '00

At 12:40 12/05/00, Simon Green wrote: >To Domainz: Where was the notification of the change in the number of >nameservers you were going to check. This not only has caught 2day off >guard, but also caught off the isp that I work with[1] as well. If you are >going to make changes like this, you need to tell us IN ADVANCE. I assume >that is why you set up the drs(a)domainz readonly mailing list. > > Having said that, I know Domainz aren't going to reply, so sorrt for >wasting your bandwidth. Oversight on their part apparently and will be remedied tomorrow when they go back to just checking 2 name servers as before. -- Ted Grenfell Xtra ISP Performance Manager Mob 025 435 455; DDI 09 359 5854; Fax 09 355 5283 Level 12, Telecom Tower, 16 Kingston St, Private Bag 92028, Auckland --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Domainz system (authoritative checking)
by Ted Grenfell 11 May '00

11 May '00

At 10:29 12/05/00, Ben Martel wrote: > > Does anybody know if new system tests for a domain being > > authoratative on > > the specified name servers prior to registration? >This is supposed to be an option in the new system. What I mean by that, is >that each registrar should be able to set this on or off for their own >registrations. Currently for us the DRS does *not* appear to be checking our >name servers for 'authoritativeness' before accepting a new registration. >There is a rumor that DRS will check for authority after a day - but I don't >know what happens if it fails :( > >BTW: I cannot find anywhere in the new system that allows a registrar to >change this option. This means that either only Domainz can change this >value or that I have been mislead! I queried Domainz about them allowing us to register domains prior to being authoritative and was told that this feature is part of the Registrar agreement and is a privilege that may be given to some Registrars. This functionality has been provisioned for in the changes Domainz have made but will not be activated on Day 1. Are you sure they're not checking first Ben or have you managed to specifically arrange for this service to be activated? I'm under the impression that Domainz are the only ones who can modify the feature. -- Ted Grenfell Xtra ISP Performance Manager Mob 025 435 455; DDI 09 359 5854; Fax 09 355 5283 Level 12, Telecom Tower, 16 Kingston St, Private Bag 92028, Auckland --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Domainz system
by Peter Mott 11 May '00

11 May '00

Does anybody know if new system tests for a domain being authoratative on the specified name servers prior to registration? The UoW system used to check the first two name servers only. I am getting problem reports suggesting the new system may be checking all specified name servers (one of our 4 name servers only reloads once every 24 hours whereas the others reload every 30 mins if changes have been made) p.s. I received an e-mail from Rex Croft yesterday. He is working in Adelaide CBD being a "fixit" person for solaris systems. He seems rather happy with the move to AU. Regards Peter Mott Chief Enthusiast 2day.com -/- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

RE: Domainz system (authoritative checking)
by Ben Martel 11 May '00

11 May '00

> Does anybody know if new system tests for a domain being > authoratative on > the specified name servers prior to registration? This is supposed to be an option in the new system. What I mean by that, is that each registrar should be able to set this on or off for their own registrations. Currently for us the DRS does *not* appear to be checking our name servers for 'authoritativeness' before accepting a new registration. There is a rumor that DRS will check for authority after a day - but I don't know what happens if it fails :( BTW: I cannot find anywhere in the new system that allows a registrar to change this option. This means that either only Domainz can change this value or that I have been mislead! Ben CLEAR Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Domainz information corruption.
by James Bell 11 May '00

11 May '00

At 12:24 PM 5/11/00 +1200, you wrote: >Right well, I registered those domain names, and as far as I understand, >that is the fuction of registrar. However I realise that doesn't >immediatly make me a registrar (as exciting a title as that is). So what >does? Paying Domainz $300 (or $3000). and signing a Registrar agreement. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

DRS availability
by Andrew McGhie 11 May '00

11 May '00

This is to inform you that the Domainz Registration System is again available as from 08.00 today. Regards Andrew Mason --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DRS update
by Andrew McEwen Mason 10 May '00

10 May '00

This is to let you know that, although the DRS web-based system is still off-line, the automated email template interface continues to be available as before. The zone build has just been completed. We will continue to keep you posted re the web-based system. Regards --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DRS availability
by Andrew McEwen Mason 10 May '00

10 May '00

We are currently experiencing some technical issues with the Domainz Registration System, as a result of which the system has been taken off-line while these issues are resolved. Despite the above, the zone build is happening and the process is due to start shortly. We are making every effort to get the system back up as quickly as possible, and will keep you posted as to progress. Our sincere apologies for this disruption. Andrew Mason --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Domainz information corruption.
by Dylan Reeve 10 May '00

10 May '00

> My understanding is that the domain name holder is the only person who > will be sent a login and password for their domain. > However Registrars will have their own Registrar Login & Password which > will allow them to do much of what the name holder can do, if not all. > I am not a Registrat so am not sure what limitations there are. > Certainly it makes sense that for example Xtra can change the Name > Server IP Address for all the domains who are hosted on Xtra but as some > have pointed out being their "host" doesn't mean you are their > Registrar. Okay, so my box, wibble, is master for 19 .nz domains (including one *legitimate* school, neat eh?) and slave for 9. Obviously, I would like to be able to make the same sort of changes I could before, with the domain key. Specifically my Technical Contact details and the like. All the domains I host are "Unallocated", and I am not about to go and convert all the keys of the domains I don't actually own, so how do I get in? You will have to excuse me, I know little about the new system, as I don't really do a whole lot of domain stuff these days... Is there anywhere that explains exactly what the changes are, how they affect me, and what I can do? I have looked around the site, but well, it's doesn't seem to explain well what the new system does/is. Dylan Reeve - dylan(a)wibble.net "Um, yeah." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Re: Domainz information corruption.
by david＠farrar.com 10 May '00

10 May '00

> What concerns me is the fact that with all these domains with incorrect > registrar's, where are these logins and passwords going to go? > > Does the domain owner get them? > Does the registrar get them? > Does a person chosen purely at random get them? > > Dean My understanding is that the domain name holder is the only person who will be sent a login and password for their domain. However Registrars will have their own Registrar Login & Password which will allow them to do much of what the name holder can do, if not all. I am not a Registrat so am not sure what limitations there are. Certainly it makes sense that for example Xtra can change the Name Server IP Address for all the domains who are hosted on Xtra but as some have pointed out being their "host" doesn't mean you are their Registrar. DPF --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Domainz information corruption.
by Simon Lyall 10 May '00

10 May '00

I just had a look at my domain of darkmere.gen.nz on the new domainz site of www.domainz.glazier.co.nz. The problem seems to be that the Holder Phone number seems to have been truncated in the change. On the old site at: http://domainz.waikato.ac.nz/cgi-bin/DNZ-REGISTER?domain_name=darkmere.gen.… It is: Holder Phone: +64 9 358 5067 ex 9701 but on the new site ( http://www.domainz.glazier.co.nz/ , then "Domain Name Management" , then "Domain Name Search" ) It is: Phone: 64 9 358 5067 ext 97 Note, the "+64" has been changed to just 64 and the extention on 9701 has been changed to 97. I guess somebody didn't think when they programed in that field. Overseas phone numbers just look funny, check out dianetics.co.nz -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz System/Network Admin. | | Home: simon(a)darkmere.gen.nz Ihug Limited, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 9

RE: System live
by david＠farrar.com 09 May '00

09 May '00

> > As promised, this is to let you know that the Domainz > > Registration System is > > now live. > > It's a pity that the name of the SSL certificate for the Domainz secure > site is incorrect. www.domainz.net.nz != www.domainz.glazier.co.nz. > > Some proxy servers and well configured browsers will throw this away. I've been having great problems with the site. I got the same security wrror (using IE5). Using a new password (we haven't received these automatically yet - can anyoen advise when we will) which I generated from their converter I tried to log in and it failed several times. Finally let me in but when I tried to change my registrar it came up no such webpage. Then started getting message saying the site is temporarily offline. Now the main site itself is giving me a no such page error. Can someone advise if the site is up and staying up? ta DPF --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

After-market RIPE whois service for the NZ ccTLD
by Joe Abley 09 May '00

09 May '00

As per subject; server running on maggie.automagic.org. Feedback welcome. Source attached. There are surely bugs. To those who have already seen this, apologies for the duplicates. To use, whois -h maggie.automagic.org blah.co.nz or, if you're using an OpenBSD snapshot more recent than the 2.6 release, whois blah.co.nz which is really a shortcut for whois -h nz.whois-servers.net blah.co.nz or, if you must, fwhois blah.co.nz(a)maggie.automagic.org or you could always use some Windows variant by feverishly clicking buttons and sliding scroll bars, forwarding VBS files to all your friends and relatives whilst distracted by the dancing paperclip. GEEK FAQ 1. Sometimes it looks very much as though I am returning duplicate person objects. However, the technical and holder contact details are not normalised within the glazier schema, and in fact the records where data is stored are quite different. I implemented an elaborate scheme which compared holder and tech details using a (patent-pending) fumbling hack heuristic, but abandoned it as soon as I realised that it's a fool's errand, really. 2. The whois server on whois.patho.gen.nz used "root(a)patho.gen.nz" as the e-mail address in the "changed" fields. This caused all kinds of spam complaints to be directed at that address, so in this new proxy I construct a postmaster address at the domain -- I can't use the real address of the last person to submit a change, since the Glazier system doesn't store it. 3. Check the header comments in each response to see which real server is being queried (this may well change). 4. Before you mail me and say "domain proz.ac.nz doesn't have a tech contact record!" check the authoritative glazier data, because so far that's where all the anomolies I have found actually originate. Don't shoot the messenger. 5. I run this on a BSD box out of tcpserver, using something like tcpserver -q -c 8 -u nobody -g nobody \ 0 whois /usr/local/libexec/whois-domainz.sh & but you could run it out of inetd just as easily. If you attempt to run it on certain (cough) user-friendly linux distribution, you'll have to hack the hideous fwhois syntax around the more correct and elegant "standard" berkeley whois syntax shown in the script (troll, troll). 6. Buffer bounds checking is weak in awk, so I'd advise running the script with no privileges (as above) if you want to run a local copy. 7. I had to use a nasty y2k hack when reformatting the "changed" field, since the Glazier system returns a two-digit year in the dates it returns. 8. The Glazier whois server from which we try to pull our source data has been periodically refusing connections. If we get connection refused, we fall back to using whois.patho.gen.nz (which reports on data from the Waikato system). A "%"-prefixed comment at the top will tell you when this happens. 9. Share and enjoy :) #!/bin/sh # # glazier/domainz whois proxy 0.11 # # I run this out of tcpserver, see http://cr.yp.to/ucspi-tcp/tcpserver.html # which is where TCPREMOTEIP comes from. The server at 202.46.160.18 is # running right now, but may move since I'm not aware that it's an offically- # supported service. # # This proxy is currently running on maggie.automagic.org, if you want # to test it out. Bugs, improvements and baseless legal threats should # be sent to jabley(a)automagic.org. # # This source is public domain. A courtesy tip of the hat would be # appreciated if you manage to make millions whilst using it :) # # Joe Abley, 7 May 2000 whois_glazier=whois.domainz.net.nz whois_waikato=tardis.patho.gen.nz tmp=/var/tmp/whois-glazier.$$ read key key=$(echo ${key} | tr ' ' ' ') echo "% * Proxy connection at $(date) from ${TCPREMOTEIP}" echo "% *" echo "% * Attempting whois from server ${whois_glazier}" echo "% *" if whois -h ${whois_glazier} ${key} 2>/dev/null >${tmp}; then awk -v whois_date="$(date)" -v whois_client="${TCPREMOTEIP}" \ -v whois_key="${key}" -v whois_glazier="${whois_glazier}" ' BEGIN \ { print "% * This data was harvested from a public whois interface"; printf "%% * hosted at %s. Retrieval and use of the data", whois_glazier; print "% * below are subject to the same restrictions and conditions"; print "% * imposed by the source server. No responsibility is taken"; print "% * nor warranty made for the accuracy of the information"; print "% * presented here. Administrative contact for this server"; print "% * is whois(a)automagic.org."; print "% "; printf "%% query: %s\n", whois_key; printf "%% client: %s\n", whois_client; printf "%% date: %s\n", whois_date; print "% "; } { gsub(/\r/, ""); } /^domain_name: / \ { ripe_domain = $2; next; } /^holder_contact: / \ { sub(/^holder_contact: /, ""); ripe_admin_c = $0; next; } /^technical_contact: / \ { sub(/^technical_contact: /, ""); ripe_tech_c = $0; next; } /^ns_name_[0-9][0-9]*: [a-zA-Z0-9]/ \ { ripe_nserver[ns++] = $2; next; } /^holder_name: / || \ /^domain_name_status: / || \ /^registrar: / || \ /^domain_datecreated: / \ { ripe_remarks[rk++] = $0; next; } /^domain_datelastmodified: / \ { sub(/^domain_datelastmodified: /, ""); split($0, field); split(field[1], subfield, /\//); year = (subfield[3] > 70 ? 1900+subfield[3] : 2000+subfield[3]); ripe_changed = sprintf("%4d%02d%02d", year, subfield[2], subfield[1]); next; } /^technical_contact_address_line_[0-9]: / \ { sub(/^technical_contact_address_line_[0-9]: /, ""); if ($0 !~ /^ *$/) ripe_tech_address[tad++] = $0; } /^technical_contact_phone: / \ { sub(/^technical_contact_phone: /, ""); ripe_tech_phone = $0; next; } /^technical_contact_fax: / \ { sub(/^technical_contact_fax: /, ""); ripe_tech_fax = $0; next; } /^technical_contact_email: / \ { sub(/^technical_contact_email: /, ""); ripe_tech_email = $0; next; } /^holder_address: / \ { sub(/^holder_address: /, ""); ripe_admin_address[0] = $0; next; } /^holder_addr_citycountry: / \ { sub(/^holder_addr_citycountry: /, ""); ripe_admin_address[1] = $0; next; } /^holder_phone: / \ { sub(/^holder_phone: /, ""); ripe_admin_phone = $0; next; } /^holder_fax: / \ { sub(/^holder_fax: /, ""); ripe_admin_fax = $0; next; } /^holder_email: / \ { sub(/^holder_email: /, ""); ripe_admin_email = $0; next; } {} END \ { if (ripe_admin_c == "") print "% * no registration data returned by query"; else { printf "domain: %s\n", ripe_domain; printf "admin-c: %s\n", ripe_admin_c; if (ripe_tech_c != "") printf "tech-c: %s\n", ripe_tech_c; for (s in ripe_nserver) printf "nserver: %s\n", ripe_nserver[s]; for (s in ripe_remarks) printf "remarks: %s\n", ripe_remarks[s]; printf "changed: postmaster@%s %s\n", ripe_domain, ripe_changed; printf "source: AUTOMAGIC\n\n"; printf "person: %s\n", ripe_admin_c; for (s in ripe_admin_address) printf "address: %s\n", ripe_admin_address[s]; if (ripe_admin_phone != "") printf "phone: %s\n", ripe_admin_phone; if (ripe_admin_fax != "") printf "fax-no: %s\n", ripe_admin_fax; if (ripe_admin_email != "") printf "e-mail: %s\n", ripe_admin_email; printf "changed: postmaster@%s %s\n", ripe_domain, ripe_changed; printf "source: AUTOMAGIC\n\n"; if (ripe_tech_c != "") { printf "person: %s\n", ripe_tech_c; for (s in ripe_tech_address) printf "address: %s\n", ripe_tech_address[s]; if (ripe_tech_phone != "") printf "phone: %s\n", ripe_tech_phone; if (ripe_tech_fax != "") printf "fax-no: %s\n", ripe_tech_fax; if (ripe_tech_email != "") printf "e-mail: %s\n", ripe_tech_email; printf "changed: postmaster@%s %s\n", ripe_domain, ripe_changed; printf "source: AUTOMAGIC\n"; } } }' ${tmp} rm -f ${tmp} logger -p daemon.info -t whois-glazier query key ${key} \ from ${TCPREMOTEIP} used ${whois_glazier} else echo "% * Connection refused from Domainz/Glazier whois server at" echo "% * ${whois_glazier}; reverting to Domainz/Waikato whois proxy" echo "% * at ${whois_waikato}" echo "% *" whois -h tardis.patho.gen.nz ${key} 2>/dev/null logger -p daemon.info -t whois-glazier query key ${key} \ from ${TCPREMOTEIP} used ${whois_waikato} fi --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

[Fwd: DRS request rejected]
by Andy Linton 09 May '00

09 May '00

drs-admin(a)domainz.net.nz wrote: > > Your request to the DRS mailing list: > > Posting of your message entitled: > Re: [DRS] DRS roll-out > > has been rejected by the list moderator. The moderator gave the > following reason for rejecting your request: > > Please do *not* post administrative requests to the mailing list! > If you wish to subscribe, visit > http://listserver.actrix.co.nz/mailman/listinfo/drs or send a 'help' > message to the the request address, drs-request(a)domainz.net.nz , for > instructions > > Any questions or comments should be directed to the list administrator > at: > > drs-admin(a)domainz.net.nz > > Your original message follows: > Received: from satva.actrix.co.nz (satva.actrix.co.nz [203.96.16.107]) > by mail2.actrix.gen.nz (8.10.0.Beta12/8.10.0.Beta10) with ESMTP id e4A3suq21870 > for <drs(a)mail2.actrix.gen.nz>; Wed, 10 May 2000 15:54:56 +1200 (NZST) > Received: from lemon.office.netlink.net.nz (lemon.office.netlink.net.nz [203.97.244.37]) > by satva.actrix.co.nz (8.10.0/8.10.0.Beta10) with ESMTP id e4A3stk15680 > for <DRS(a)domainz.net.nz>; Wed, 10 May 2000 15:54:56 +1200 (NZST) > Received: from netlink.net.nz (saw.cb.telstra.net.nz [203.97.244.24]) > by lemon.office.netlink.net.nz (8.10.1/8.10.1) with ESMTP id e4A3snA22918; > Wed, 10 May 2000 15:54:49 +1200 (NZST) > Sender: asjl(a)netlink.net.nz > Message-ID: <3918DD88.37507B06(a)netlink.net.nz> > Date: Wed, 10 May 2000 03:54:48 +0000 > From: Andy Linton <asjl(a)netlink.net.nz> > X-Mailer: Mozilla 4.72 [en] (X11; I; Linux 2.2.5-15 i686) > X-Accept-Language: en > MIME-Version: 1.0 > To: Andrew McEwen Mason <andrew(a)bsa.co.nz> > CC: DRS(a)domainz.net.nz > Subject: Re: [DRS] DRS roll-out > References: <LNBBIAJHHJHJEBDNLNPBMEAODCAA.andrew(a)bsa.co.nz> > Content-Type: text/plain; charset=us-ascii > Content-Transfer-Encoding: 7bit > > Andrew McEwen Mason wrote: > > > > Greetings to all > > > > This is an update on where we are with the roll-out. > > > > As Andrew Jamieson notified earlier today, we have made good progress, but > > unfortunately we have been struck with a number of problems effectively > > outside our control, especially power cuts which (while they haven't done > > any damage to the servers) have made it very difficult for staff to connect > > to the systems for testing. The situation was compounded by a major fire > > alarm which also happened this morning! > > I'd like to make it clear to all concerned that the power cuts mentioned > above were not at the Telstra Saturn telehousing facilities where the > Domainz system is housed in Auckland and Wellington. Both facilities > have UPS and generator back up and no failure occurred at the nodes. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

NZ Address Space
by Chris Wedgwood 09 May '00

09 May '00

A while back I mentioned I would make a snapshot of what NZ networks (IP addresses) are in use. A couple of people have asked for this recently so I have compiled a rough list based on various prefixes within CLEAR's BGP tables. ftp://ftp.clear.net.nz/pub/netinfo/nz-address-space/ If there is any interest, I'll look at doing a better job of this at some point and perhaps having it automagically update from time to time. --cw -- Chris Wedgwood chris.wedgwood(a)clear.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: System live
by Sam Sargeant 09 May '00

09 May '00

> As promised, this is to let you know that the Domainz > Registration System is > now live. It's a pity that the name of the SSL certificate for the Domainz secure site is incorrect. www.domainz.net.nz != www.domainz.glazier.co.nz. Some proxy servers and well configured browsers will throw this away. ##----Sam-Sargeant---------NetLink-Ltd--------Systems-Developer----## until($x>=40){print$"x$x;for('#4V%M','+(%-A<F=E86YT("T`','%($IU<W0`', '(($%N;W1H97(`','.(%!E<FP(a)2&%C:V5R(0H`'){print unpack('u*',$_)}$x+=2} ##.................................................................## --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

System live
by Andrew McGhie 09 May '00

09 May '00

As promised, this is to let you know that the Domainz Registration System is now live. We have carried out a successful zone build as part of the switch-over process. There will be a daily zone build at 16.00 from today until further notice. Best regards to all Andrew Mason (from Andrew McGhie's email and on behalf of all at Domainz and Advantage Group) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Domainz information corruption.
by Andrew McGhie 09 May '00

09 May '00

Hi Simon Thanks for pointing out this problem, which relates to the field length for phone numbers. We have added it to our list of "things to fix". Will also investigate the US example you gave. Cheers Andrew Mason (from Andrew McGhie's email). -----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Simon Lyall Sent: Wednesday, May 10, 2000 10:42 AM To: nznog(a)list.waikato.ac.nz Subject: Domainz information corruption. I just had a look at my domain of darkmere.gen.nz on the new domainz site of www.domainz.glazier.co.nz. The problem seems to be that the Holder Phone number seems to have been truncated in the change. On the old site at: http://domainz.waikato.ac.nz/cgi-bin/DNZ-REGISTER?domain_name=darkmere.gen.n z It is: Holder Phone: +64 9 358 5067 ex 9701 but on the new site ( http://www.domainz.glazier.co.nz/ , then "Domain Name Management" , then "Domain Name Search" ) It is: Phone: 64 9 358 5067 ext 97 Note, the "+64" has been changed to just 64 and the extention on 9701 has been changed to 97. I guess somebody didn't think when they programed in that field. Overseas phone numbers just look funny, check out dianetics.co.nz -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz System/Network Admin. | | Home: simon(a)darkmere.gen.nz Ihug Limited, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DRS live cut-over
by Andrew McGhie 09 May '00

09 May '00

Good afternoon. This is an update on progress with bringing in the new DRS. We have just (at midday today) carried out a final successful zone comparison, and are now confident that we can proceed to cut over the system to fully live running. This will happen over the next 1 to 2 hours as we move all elements of the system (including email and web pages) between hosts, and we expect that the process will be complete no later than 14.00 today. It will include the first live zone build. We will then carry out another zone build at 16.00 today and daily at 16.00 thereafter as before. We will post to these lists as soon as the whole process has been successfully completed. Best regards Andrew Mason (from Andrew McGhie's email today) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NETWORK SOLUTIONS SECURITY TRUTHS? (fwd)
by Joe Abley 09 May '00

09 May '00

Presumably when someone uses this vulnerability to take down the root registry, any concerns about the technical viability of the Domainz/ Glazier system will be rather academic :) ---------- Forwarded message ---------- Date: Tue, 9 May 2000 13:53:54 -0700 (PDT) From: Exiled Dave <exiled_dave(a)yahoo.com> To: nanog(a)nanog.org Subject: NETWORK SOLUTIONS SECURITY TRUTHS? http://www.networksolutions.com/cgi-bin/makechanges/easysteps/easysteps.pl?… Check out /var/named/internic.net as well. __________________________________________________ Do You Yahoo!? Send instant messages & get email alerts with Yahoo! Messenger. http://im.yahoo.com/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ns_ip_* vs. ns_name_* in new Domainz system
by Joe Abley 08 May '00

08 May '00

Has anybody else seen instances in the new register where a domain has ns_name_* records, but no corresponding ns_ip_* records? For example, patho.gen.nz has: ns_name_1: dns1.clear.net.nz ns_ip_1: 203.97.33.1 ns_name_2: soa2.qsi.net.nz ns_ip_2: ns_name_3: tardis.patho.gen.nz ns_ip_3: 203.97.2.226 ns_name_4: medusa.blackops.org ns_ip_4: This makes me slightly nervous. Has anybody else seen this kind of thing for other domains? Are the current zone files running at ns99.waikato.ac.nz built from this new data, or are the old zone files still running? If the former, when will the first authoritative zone from the new system be loaded? (it looks like it will be worth checking). The fact that the hosts soa2.qsi.net.nz and medusa.blackops.org are quite possibly unknown to Domainz makes me suspect a systematic problem of some kind, and not a random one. Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 4

[DRS] DRS roll-out (fwd)
by Simon Green 08 May '00

08 May '00

From the 'super-secret' domainz registrars mailing list. I feel that this information should be made available to those that need it and not just registrars, hence me reposting it. -- ---------- Forwarded message ---------- Date: Tue, 9 May 2000 12:18:20 +1200 From: Andrew Jamieson <AndrewJ(a)advantagegroup.co.nz> To: "'drs(a)domainz.net.nz'" <drs(a)domainz.net.nz> Cc: "'p.o.brien(a)domainz.net.nz'" <p.o.brien(a)domainz.net.nz>, "'a.mcghie(a)domainz.net.nz'" <a.mcghie(a)domainz.net.nz>, "'andrew(a)bsa.co.nz'" <andrew(a)bsa.co.nz> Subject: [DRS] DRS roll-out Hi to all The system went live for Registrars about an hour ago. By now I hope everyone has received an email with their logon ID and password, together with requisite information for accessing and using the system at www.domainz.glazier.co.nz. If you have any problems with this, please contact registrars(a)domainz.net.nz. We are planning to go fully live before midday tomorrow, at which time the URL for the system will change to www.domainz.net.nz. We will let you know when this happens. Cheers Andrew Mason _______________________________________________ DRS mailing list DRS(a)domainz.net.nz http://listserver.actrix.co.nz/mailman/listinfo/drs --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[Fwd: Domainz Registration System]
by Geoff Thompson 08 May '00

08 May '00

2Day Tech Support wrote: > > > This is to notify you that the new Domainz system (DRS) has gone live for > > Registrars as of 11.00 today. > > I still see the old site at www.domainz.net.nz > > How about switching that on so we can stop getting all the phone calls from > people!! > I think Domainz has only opened the system for registrars, and not to the general public. They'll probably change the 'www.domainz.net.nz' stuff once they've gone fully live. Geoff. ---------------------------------- Geoff Thompson <geofft(a)waikato.ac.nz> University of Waikato, Hamilton, New Zealand Ph: (07) 838 4748 Random Quote of the Minute : And now for something completely the same. ---------------------------------- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Domainz Registration System
by Andrew Jamieson 08 May '00

08 May '00

Greetings to all This is to notify you that the new Domainz system (DRS) has gone live for Registrars as of 11.00 today. We plan to go fully live to "the world" before midday tomorrow. Cheers Andrew Mason (from Andrew Jamieson's system) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Updating tech contact info at Domainz
by Joe Abley 08 May '00

08 May '00

Hey, Perhaps someone who has stuck with the Domainz/Glazier testing for longer than me could tell me how to do this: I want to update my contact details in all the domain records for which I am listed as technical contact. I don't have an accurate list of domains that fit that criteria; I just want to change _all_ of them. In the old system, accomplishing this would be a case of performing a zone transfer, enumerating every possible domain I could be associated with, pulling the registry data for each domain in turn and discarding those that don't match a proscribed regular expression on the tech_contact field (or whatever it was called). Does the new system provide anything better than this? I have an inkling that holder_contact fields are normalised, but I don't think the tech contact fields are. If anybody can tell me an easy way to do this, I'd be keen to hear it. [Interesting to note that this is a trivial exercise in the original InterNIC and RIPE database schemas, which featured published database keys for person/contact objects (NIC handles) and were designed more or less by accident twenty years ago :)] --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

FW: [DRS] DRS roll-out
by Peter Mott 07 May '00

07 May '00

Looks like the monopoly .nz registrar DOMAINZ is going to be yet another day off line. I wonder what the next delay will be, an earthquake in wellington? p.s. Looks like somebody needs to donate them a UPS or two, apparently they haven't thought of the need for them yet. Regards Peter Mott Chief Enthusiast 2day.com -/- > -----Original Message----- > From: drs-admin(a)domainz.net.nz [mailto:drs-admin(a)domainz.net.nz]On > Behalf Of Andrew McEwen Mason > Sent: Monday, 8 May 2000 8:24 p.m. > To: DRS(a)domainz.net.nz > Subject: [DRS] DRS roll-out > > > Greetings to all > > > This is an update on where we are with the roll-out. > > As Andrew Jamieson notified earlier today, we have made good progress, but > unfortunately we have been struck with a number of problems effectively > outside our control, especially power cuts which (while they haven't done > any damage to the servers) have made it very difficult for staff > to connect > to the systems for testing. The situation was compounded by a major fire > alarm which also happened this morning! > > Be that as it may, we are confident that the name-nameholder data > on the new > system is as it should be, and that the zone file creation process is > working as we expected. There are a few issues to clear up with some > accounting data on a small number of domains, and we still need > to generate > randomised IDs and passwords, but apart from that we are looking pretty > good. > > We obviously want to be entirely sure that the system, the data > and the zone > files are absolutely as they should be before releasing them. We are > therefore planning to work through the night on them with a view to > releasing the system with everything working to Registrars at 09.00am > tomorrow (9th May 2000). We then plan to have the system fully > live to the > world on Wednesday 10th May 2000. > > Our apologies that the system roll-out has been delayed by a day > or so. We > hope it has not been too much of an inconvenience for you. We will notify > you as soon as the system is ready for use, with your Registrar > logon ID and > password for testing. > > _________________________________ > Andrew McEwen Mason > BSA Consulting Group > 7 Mariri Road, Kelburn > Wellington, NZ > > Phone +64 4 934-3178 Mobile +64 21 466-181 > > > _______________________________________________ > DRS mailing list > DRS(a)domainz.net.nz > http://listserver.actrix.co.nz/mailman/listinfo/drs --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ORBS.
by Roger De Salis 07 May '00

07 May '00

By chance... since you lot have been particularly noisy this weekend on the subject of ORBS, I wanted to obtain a more rounded opinion of the value of ORBS with respect to SPAM Prevention. ISOCNZ has charged myself and three others with coming up with a policy concerning ORBS and potentially other SPAM prevention methods. :-( My understanding of the situation is as follows:- Paul Vixie contributes to/manages???? an RBL repository of Open Mail Relays on the side of www.vix.com. ie MAPS and RBL. How many carriers (even carriers with only 6 staff...) in NZ piggyback off this effort? And contribute? ORBS is a similar idea, run by AB of Manawatu Internet Services. An area of concern is that ORBS uses a method of publicity to shame Open-Relay holders into changing their status. However the publicity mechanism can also be used by Spammers to work out best SPAM procreation locations. How useful is this, and are their better ways of doing it? ========================================================= Should NZ ISP's all support RBL/MAPS? (realising that there is no requirement today, other than best customer service and best endeavours.) Is ORBS complementary? Is it appropriate? What do others think? Should ISOCNZ but out of this matter, and stick to mindlessly boring meetings with 10,000 points of order? Flames to myself at Cisco. Fabulously written, illuminating, insightful pieces will certainly receive a direct response of thanks and comments. All others >/dev/null. Rgds Roger De Salis -- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L3, 117 Customhouse Qy /) +64 4 473 4912 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

[off-topic] Re: 2.7 ordering (fwd)
by Joe Abley 06 May '00

06 May '00

Ah. Looks like I jumped the gun :) ---------- Forwarded message ---------- Date: Sat, 06 May 2000 20:00:07 -0600 From: Theo de Raadt <deraadt(a)cvs.openbsd.org> To: Joe Abley <jabley(a)automagic.org> Cc: misc(a)openbsd.org Subject: Re: 2.7 ordering > Am I correct in thinking that the aim is a 2.7 release on May 19? No. June 15 this time around. > Anybody know when the on-line ordering page will be taking orders on 2.7 > media? When we have artwork :-) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ORBS blocking
by Andy Linton 06 May '00

06 May '00

I haven't seen all of the messages posted in nznog on this subject so forgive me if I go over some ground that has been covered already. I'd like to make it quite clear to all NZ operators reading this that neither Telstra Saturn or any of its operating companies have any rules in place on their routers which are blocking traffic from the ORBS tester, relaytest.orbs.vuurwerk.nl We have not had any such rules and I am more than happy to make arrangements for an independant party to inspect the relevant router configurations and the audit trail of those configurations which is kept under RCS. Alan Brown has published a traceroute which he says demonstrates that Telstra Australia is blocking traffic. I have inspected the configuration of the pad19 router and no such filter exists on that host. Let me remind you of his posting: [RelayTst(a)amersfoort alan]$ /usr/sbin/traceroute 203.97.144.41 traceroute to 203.97.144.41 (203.97.144.41), 30 hops max, 40 byte packets 1 router (194.178.232.1) 0.871 ms 0.928 ms 1.077 ms 2 border (194.178.232.125) 0.834 ms 0.726 ms 0.688 ms 3 Vuurwerk.cust.ip.versatel.net (212.189.159.237) 1.132 ms 1.047 ms 1.152 m ... 16 199.37.127.190 (199.37.127.190) 284.622 ms 277.222 ms 288.499 ms 17 205.174.74.34 (205.174.74.34) 414.984 ms 406.353 ms 396.054 ms 18 FastEthernet0-0-0.pad19.Sydney.telstra.net (203.50.13.68) 399.113 ms 381.658 ms 405.766 ms 19 * * * 20 * * * 21 * * * 22 * * * He says this demonstrates that Telstra is blocking his tester. It does no such thing. The explanation is straightforward but not obvious. Traffic to 203.97.144.41 under the above traceroute was taking a path to New Zealand via Sydney at the time of the traceroute. The return path from Sydney is: pad19.Sydney>traceroute 194.178.232.55 Type escape sequence to abort. Tracing the route to relaytest.orbs.vuurwerk.nl (194.178.232.55) 1 FastEthernet1-0-0.pad16.Sydney.telstra.net (203.50.13.67) 0 msec 0 msec 0 msec 2 205.174.74.33 220 msec 220 msec 224 msec 3 199.37.127.193 [AS 5727] 220 msec 220 msec 224 msec 4 POS2-0-0.GW5.SFO4.ALTER.NET (157.130.197.77) [AS 701] 224 msec 220 msec 224 msec 5 145.ATM3-0.XR2.SFO4.ALTER.NET (146.188.149.38) [AS 701] 224 msec 220 msec 224 msec 6 190.at-1-0-0.TR2.SAC1.ALTER.NET (152.63.51.10) [AS 701] 224 msec 228 msec 228 msec 7 127.at-6-1-0.TR2.NYC9.ALTER.NET (152.63.6.81) [AS 701] 304 msec 308 msec 308 msec 8 186.ATM6-0.XR2.NYC1.ALTER.NET (152.63.21.73) [AS 701] 304 msec 308 msec 304 msec .... The next hop that a packet takes on route to 203.97.144.41 is to Telstra Australia's router in Auckland. This is Telstra Saturn's interconnect point with Telstra Australia. The nzsx-core1 router has two paths out of New Zealand, one to pad19 and the other to above.net at the PAIX. The preferred path for return packets to relaytest.orbs.vuurwerk.nl on that router in Auckland is via the direct route to Palo Alto. So we have an assymetric path from the site in the Netherlands to 203.97.144.41 on that trans Pacific part of the packet flow. Why is this important? Because above.net appear to have something on one of their routers which drops packets to/from relaytest.orbs.vuurwerk.nl Compare this trace: $ traceroute relaytest.orbs.vuurwerk.nl traceroute: Warning: ckecksums disabled traceroute to relaytest.orbs.vuurwerk.nl (194.178.232.55), 30 hops max, 40 byte packets 1 router.wlg.office.netlink.net.nz (203.97.244.1) 1.458 ms 1.202 ms 3.674 ms 2 b1.wlg.netlink.net.nz (203.97.132.129) 2.402 ms 2.696 ms 1.383 ms 3 Fe0-0.nzlq1.Wellington.telstra.net.nz (203.98.56.177) 1.584 ms 1.324 ms 1.474 ms 4 FastEthernet0-0-0.nzsx-core1.Auckland.telstra.net.nz (203.98.21.26) 31.880 ms 24.598 ms 21.631 ms 5 Serial0-1-0.paix1.PaloAlto.telstra.net (203.50.126.18) 155.577 ms 155.112 ms 290.211 ms 6 core1-gige.pao.above.net (209.249.0.244) 155.199 ms 155.356 ms 155.082 ms 7 sjc-pao-oc12.sjc.above.net (209.133.31.149) 159.880 ms !H 155.972 ms !H 156.138 ms !H with: $ traceroute 194.178.232.1 traceroute: Warning: ckecksums disabled traceroute to 194.178.232.1 (194.178.232.1), 30 hops max, 40 byte packets 1 router.wlg.office.netlink.net.nz (203.97.244.1) 1.687 ms 1.436 ms 1.317 ms 2 b1.wlg.netlink.net.nz (203.97.132.129) 1.806 ms 1.753 ms 1.545 ms 3 Fe0-0.nzlq1.Wellington.telstra.net.nz (203.98.56.177) 1.834 ms 1.755 ms 1.652 ms 4 FastEthernet0-0-0.nzsx-core1.Auckland.telstra.net.nz (203.98.21.26) 22.730 ms 21.084 ms 23.203 ms 5 Serial0-1-0.paix1.PaloAlto.telstra.net (203.50.126.18) 156.800 ms 159.412 ms 382.058 ms 6 core1-gige.pao.above.net (209.249.0.244) 195.495 ms 154.912 ms 155.196 ms 7 core3.sjc2-core1.pao-oc12.sjc2.above.net (216.200.254.185) 157.541 ms 156.235 ms 159.225 ms 8 core5.sjc2-core3.sjc2.above.net (208.185.156.66) 156.049 ms 155.687 ms 157.684 ms 9 nyc-sjc-oc12.nyc.above.net (208.185.156.162) 232.711 ms 233.514 ms 232.355 ms 10 core2-core1-oc12.nyc.above.net (209.133.31.202) 232.135 ms 231.995 ms 232.695 ms 11 POS3-0-0.GW4.NYC4.ALTER.NET (157.130.31.45) 237.016 ms 242.895 ms 241.483 ms 12 146.ATM2-0.XR2.NYC4.ALTER.NET (146.188.179.174) 237.683 ms 238.036 ms 237.969 ms .... So let me summarise this for you all. 1) We are not blocking nor have we been blocking traffic from this particular ORBS tester or any other ORBS tester. Until this incident occurred we had no knowledge that this address hosted such a tester. 2) My technical staff have reiterated this on a number of occasions on this list and directly to Alan Brown. He has consistently refused to accept their explanations and assurances. 3) We have a customer who had a misconfigured host. They have taken steps to rectify that. Our published Terms & Conditions make it clear that we do not tolerate spam and we acted promptly on notification of the problem. 4) We are guilty of having an assymetric routing path. I am not aware that this is an "ORBSable" offence. 5) Any discussion on 'filters' needs to be with above.net who provide connectivity for Telstra and a number of other NZ providers. Now can I please get back to my weekend? Regards, andy --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[off-topic] OpenBSD 2.7
by Joe Abley 06 May '00

06 May '00

Hey, OpenBSD 2.7 will be released on CD some time in the next few weeks. OpenBSD is a free unix-like operating system derived from NetBSD, and actively developed with a focus on security, stability and anal- retentive correctness-of-approach. For details see http://www.openbsd.org/ Since there's no local distributor (and, last time I checked, the Australian distributors wouldn't ship to NZ since the CDs contain strong crypto) the recommended method of obtaining CDs is to order them direct from the Computer Store of Calgary at US$30 + postage each. However, there is a 40% discount available for orders of more than 20 CDs. If anybody is interested in getting hold of a discounted copy, please drop me a line privately -- if there is enough interest, I'll do a bulk order and redistribute at cost. [there are bulk discounts on T-shirts too, so be sure to mention if you want some of those] Details at http://www.openbsd.org/orders.html -- the mid-year release is usually frozen on May 19, which is Theo's birthday. 2.7 beta releases suitable for a network install are available for download from the following local mirror: ftp://ftp.nz.openbsd.org/pub/OpenBSD/snapshots/ Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

APOLOGIES was Re: Spammers in our midst.
by PhoneNet 06 May '00

06 May '00

My apologies to all concerned... I am the owner of 203.97.144.41 - our consultants assured me this site had been secured when it was originally set up and they have again told me it is secure following the spamming attack of the third and fourth of May. I will be contacting them again today to get it remedied URGENTLY. At 21:13 6/05/00 +1200, you wrote: > >Hey Phil, > >Why is it that ORBS can't verify this host when every other site in the >world can? > >Nice bit of RBL fodder, really.... > >---------- Forwarded message ---------- >Date: Sat, 6 May 2000 18:58:04 +1000 >From: tom minchin <tom(a)interact.net.au> >To: blocked-tests(a)orbs.org >Subject: SMTP relaying, previously not >Resent-Date: Sat, 6 May 2000 21:09:05 +1200 (NZST) >Resent-From: ORBS blocked relay catcher <obs-blok(a)manawatu.co.nz> >Resent-To: alan(a)manawatu.gen.nz >Resent-Subject: SMTP relaying, previously not > >Hi, > 203.97.144.41 is vulnerable to the rcpt to: <"blah"> trick. Sample >spam below. > >tom(a)asiaonline.net > >Return-Path: <stupidgrl(a)loveable.com> >Received: from C12.local.domain (cousins-cl41.netlink.net.nz [203.97.144.41]) > by orange.interact.net.au (8.10.1/8.10.1) with SMTP id e468hjG08743 > for <puckdefender(a)interact.net.au>; Sat, 6 May 2000 18:43:46 +1000 (EST) >Message-Id: <200005060843.e468hjG08743(a)orange.interact.net.au> >From: <stupidgrl(a)lovable.com> >To: <puckdefender(a)interact.net.au> >Subject: Mark, Heres the software site you need!! >Mime-Version: 1.0 >Content-Type: text/plain; charset="iso-8859-1" >Date: Sat, 6 May 2000 20:38:26 > >Hi Mark > >This site has over 1200 programs with all major titles and the latest versions. >Prices are, in most cases, over 90% off 'normal' retail prices. >There is NO other site like this on the net!! > >http://www.liftware.am > >If you have any queries, feel free to email me > >enjoy >Susie >stupidgrl(a)lovable.com > > > > > > > > > > > > > > > > > > > > >. > >-------------------------------------------------------------- >This message was sent by an individual using an unregistered >copy of a shareware mailer. >Registering will remove this message and entitle the user to >a fully functional program with Stealth Capabilities, and a >FREE Resellers Web Site! > >--e468hmG08747.957602628/orange.interact.net.au-- > > >--e468hmH08747.957602635/orange.interact.net.au-- > >----- End forwarded message ----- > >--------- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spammers in our midst.
by Alan Brown 06 May '00

06 May '00

Hey Phil, Why is it that ORBS can't verify this host when every other site in the world can? Nice bit of RBL fodder, really.... ---------- Forwarded message ---------- Date: Sat, 6 May 2000 18:58:04 +1000 From: tom minchin <tom(a)interact.net.au> To: blocked-tests(a)orbs.org Subject: SMTP relaying, previously not Resent-Date: Sat, 6 May 2000 21:09:05 +1200 (NZST) Resent-From: ORBS blocked relay catcher <obs-blok(a)manawatu.co.nz> Resent-To: alan(a)manawatu.gen.nz Resent-Subject: SMTP relaying, previously not Hi, 203.97.144.41 is vulnerable to the rcpt to: <"blah"> trick. Sample spam below. tom(a)asiaonline.net Return-Path: <stupidgrl(a)loveable.com> Received: from C12.local.domain (cousins-cl41.netlink.net.nz [203.97.144.41]) by orange.interact.net.au (8.10.1/8.10.1) with SMTP id e468hjG08743 for <puckdefender(a)interact.net.au>; Sat, 6 May 2000 18:43:46 +1000 (EST) Message-Id: <200005060843.e468hjG08743(a)orange.interact.net.au> From: <stupidgrl(a)lovable.com> To: <puckdefender(a)interact.net.au> Subject: Mark, Heres the software site you need!! Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Date: Sat, 6 May 2000 20:38:26 Hi Mark This site has over 1200 programs with all major titles and the latest versions. Prices are, in most cases, over 90% off 'normal' retail prices. There is NO other site like this on the net!! http://www.liftware.am If you have any queries, feel free to email me enjoy Susie stupidgrl(a)lovable.com . -------------------------------------------------------------- This message was sent by an individual using an unregistered copy of a shareware mailer. Registering will remove this message and entitle the user to a fully functional program with Stealth Capabilities, and a FREE Resellers Web Site! --e468hmG08747.957602628/orange.interact.net.au-- --e468hmH08747.957602635/orange.interact.net.au-- ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 10

None
by None 05 May '00

05 May '00

by kithrup.com (8.8.8/8.8.8) with ESMTP id CAA19931 for <user(a)kithrup.com>; Sat, 6 May 2000 02:30:14 -0700 (PDT) (envelope-from spamtest(a)cousins.in-newzealand.com) Received: from dante.mail-abuse.org (dante.mail-abuse.org [204.152.184.35]) by cousins.in-newzealand.com (8.9.3/8.8.7) with SMTP id WAA06164 for <"user(a)kithrup.com">; Sat, 6 May 2000 22:36:03 +1200 Date: Sat, 6 May 2000 22:36:03 +1200 To: user(a)kithrup.com From: nobody(a)cousins.in-newzealand.com Subject: test for susceptibility to third-party mail relay Message-Id: <rlytest-957605401-16129(a)dante.mail-abuse.org> Sender: iverson(a)dante.mail-abuse.org X-Envelope: <spamtest(a)[203.97.144.41]> -> <"user(a)kithrup.com"> This is a test of third-party mail relay, generated by the MAPS LLC RSS relay protection system. Target host = 203.97.144.41 Test performed by <iverson(a)dante.mail-abuse.org> ==== That's the MAPS RSS tester, less than an hour ago. And the host _is_ reachable from hosts other than the ORBS testers. The manual ORBS netblock entries kick in around midnight. I suggest you run host -t ns(and soa) relays.orbs.org to see where the zone SOA is and who secondary it. AB --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Telstra heading for MAPS RBL
by Alan Brown 04 May '00

04 May '00

http://maps.vix.com/rbl/ev/203.44.57-24.txt for details of one /24 already there. It's likely that Telstra will end up fully RBLed before much longer due to their spam-tolerant policy statements. AB --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Another networking position....
by Steve Lang 04 May '00

04 May '00

Yes, we too are looking for an networking guru/internet god(ess). Senior Network Engineer/Manager An enthusiastic and self-motivated Senior Network Engineer/Manager required to work in a very busy, friendly and focused telecommunications environment from our central Auckland headoffice. Responsibilities; - overall management of internel Cisco systems - ensure excellent levels of client support - good interpersonal and communication skills - commitment to effective project management - contractual reporting ability - highly organised with sound judgement Qualifications; - Need to be an expert with Cisco router management, maintenance and configuration; Cisco soho router configuration; Cisco PIX Firewall configuration; Cisco AS5300; BGP4, OSPF; LAN (Ethernet, FastEthernet, Switches); WAN (G.703, X.21, V.35, DDS, MDDS, DEDW, Stacked E1) and Linux - Need to have experience with Newbridge 46020 Network management station, and 3600 TDM's. - Preferable knowledge of DNS, Sendmail/SMTP, FTP, Apache, Radius, Perl, Shell, Pop3 - tertiary qualifications well acknowledged - An acknowledged expert in their field If there's any interest out there, drop me a line. Cheers - --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[apops] Filtering: APNIC Policy changes (fwd)
by Joe Abley 03 May '00

03 May '00

For those who prefer to protect their networks against remote outages by route filtering, this may be of interest. ---------- Forwarded message ---------- Date: Thu, 4 May 2000 11:14:28 +1000 (EST) From: APNIC Secretariat <secretariat(a)apnic.net> To: apnic-announce(a)lists.apnic.net, nanog(a)merit.edu, ripe-list(a)ripe.net, eof-list(a)ripe.net, apops(a)lists.apnic.net Subject: [apops] Filtering: APNIC Policy changes ** Apologies for duplicate messages ** Important Public Announcement CHANGES IN APNIC ADDRESS POLICY If you ingress filter on any of the following APNIC address ranges - 61/8, 202/7, or 210/7 - then please note the following important changes to APNIC address policy which were approved at the recent APNIC Member Meeting in March, in Seoul, Korea. * APNIC will lower its initial minimum allocation from a /19 to a /20 (this will apply across all address ranges held by APNIC). * APNIC will begin making allocations from network 61/8 as routine allocations from its total address pool. These policy changes will take effect three months from this announcement, on 4 August 2000. This email is intended to allow the ISP community sufficient advance notice to make any necessary filtering changes. For more detailed information on these proposals and decisions, or other discussion items, copies of presentations and discussion papers are available on the APNIC web site at http://www.apnic.net/amm2000/ . With best wishes, Anne Lord Manager Member Services -- + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + APNIC Secretariat <secretariat(a)apnic.net> Tel: +61-7-3367-0490 Asia Pacific Network Information Centre (APNIC) Ltd Fax: +61-7-3367-0482 Level 1, 33 Park Road, PO Box 2131, Milton, QLD 4064, Australia + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + * APOPS: Asia Pacific Operations Forum * * To unsubscribe: send "unsubscribe" to apops-request(a)apnic.net * --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

cisco AS5200 with V.90 modems...
by Russell Street 03 May '00

03 May '00

We are considering upgrading the modem firmware in our cisco AS5200 to support V.90 connections. Anyone had any bad experiences with the combination? Russell --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 14

Major router outages
by James Bell 02 May '00

02 May '00

I understand that just before 12 oclock, various ISPs and network providers suffered problems with core routers - specifically, huge memory ulitisation. Is anyone able to confirm/deny if this happened to their network, and provide any further information as to a suspected cause? --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Consultation on International Charging for Internet Connectivity (Long)
by Frank March 02 May '00

02 May '00

Folks: Once again, I ask for your indulgence. As a result of excellent feedback from my previous posting to these two groups, we have developed the following consultation document which is intended for a non-technical (managerial) audience. Some of the wording may apprear hauntingly familar to some of you. It has been sent by snail mail to Vodafone, Telecom, Clear, Telstra-Saturn and Clear already. We are keen to canvass other feedback, espacially from the ISPs. Please refer to senior management, or alternatively, I will snail mail or fax a formatted copy on letterhead etc in response to email suggestions. I have attached an rtf format document which can just be printed out and passed on if necessary (apologies to those objecting to the MS pseudo standard). I have asked for feedback by 15 May (contact details at the end). <<Internet charging.rtf>> Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 Consultation on International Charging for Internet Connectivity Purpose of this Document In preparation for a meeting of APEC Telecommunications/IT Ministers to be held 22-26 May, the Ministry of Economic Development wishes to consult with interested parties in order to help establish a New Zealand Government position on charging for Internet connectivity across the Pacific. This question has arisen because the way that Internet charges are settled between service providers internationally is quite different from the settlement regime used traditionally for international telephony. The topic has been under study within the APEC Telecommunications Working Group since late 1998, with a number of APEC member economies taking the view that the present charging arrangements are unfair. New Zealand has not yet taken a formal position on the topic. We have twice circulated information on the study to the New Zealand Network Operators group. The Issue International telephone traffic charges are settled between national telecommunications providers on the basis of interconnection agreements where the carrier terminating a call within its network charges the other. The costs are met by the subscriber originating the call. This is readily achieved because the telephone system uses circuit switching where the originator of the call and its duration are readily determined. Since the subscriber placing the call chooses to do so, it is assumed that the value of the transaction is captured by that person. Internet traffic is quite different in nature. Because it uses packet switching, neither the source and destination (the end users) of the traffic flow, nor the duration (or quantity) of traffic within the 'transaction', can be measured readily. It is also much more difficult to make assumptions about who obtains the value from the traffic flow. Charging for Internet traffic is conducted quite differently from traditional telephone calls. New Zealand ISPs typically rent bandwidth capacity (a 'pipe') from an international carrier so that a New Zealand client ends up paying indirectly for the full costs of the international traffic in both directions. This can be perceived as being a net subsidy by the New Zealand client to a peer in North America as any benefit to either party is paid for only by the New Zealand user. It has been inferred as a result that Internet development is being held back unfairly in New Zealand (and other non-North American countries) because users subsidise the US and Canadian costs of connectivity. (Note, however, that there is no evidence of slow take up of the Internet in New Zealand which, along with Australia and similarly 'disadvantaged' nations such as Finland and Sweden, is in the top 10 countries in terms of Internet use. Most of the other OECD countries are well behind in terms of Internet take up but, of course, these are well ahead of the 2nd and 3rd world. Slow take up in these countries may be attributed to other factors, especially local connection costs and heavily regulated markets, as well as the availability of content in non-English languages.) The Question Does the New Zealand Internet industry perceive there to be a problem over the present international Internet charging regime, in terms of the current and future impact on ISPs or their end users? The arguments outlined below and the tentative conclusions drawn have been consolidated from feedback received from members of the New Zealand Network Operators Group and members of the Internet Society of New Zealand. These groups are taken to include many, if not most, of the technically aware people in New Zealand who are concerned with Internet issues. This paper is intended to test the opinions of a wider group in order to better inform New Zealand Government policy on the matter. The Arguments A number of APEC member economies favour a requirement for international Internet traffic costs to be shared on a negotiated or mandated basis, on the grounds of 'fairness'. The arguments against and in favour of this could be summarised as follows. Against: Government mandated allocation of costs based on traffic flows would be potentially detrimental to the growth and functioning of the Internet. There is no basis for government intervention at this time because: * International charging arrangements are only one element in the total costs and value exchange of international Internet interconnection. A recent APEC study has shown that for the APEC economies costs to Internet end users are attributed roughly as 90% to the local loop, 7% to national trunk and only 3% to international trunks. The international trunk costs for New Zealand end users are not known but are expected to be a much higher percentage than this because the relative cost of the local loop is less in New Zealand than in many other APEC economies. The costs to a New Zealand ISP may be in the region of 30% and those to an end user some fraction of this. * There are many factors which impact on growth and take-up of Internet services, other than the costs of the international element of carriage. Important among these are: the level of the economy's domestic telecommunications market liberalisation and competition, foreign investment restrictions, the effect of local as well as international cost/price structures on the actual cost to end users, the impact of compliance/regulatory requirements on the development and availability of the Internet, roll-out of domestic infrastructures and the availability of bandwidth, the amount of local Internet content, consumer confidence in the case of e-commerce, and open market access for ISPs * The Internet is a new, dynamic industry where business models are developing rapidly in response to market conditions. Present charging arrangements have resulted in rapidly falling prices for international bandwidth. * The Internet is fundamentally different from traditional telephony networks. Although gross measurement of Internet traffic is possible, in general it is much more difficult to attribute use of capacity (and the value arising from it) to individual users than is the case with voice telephony. The Internet allows much more varied styles of remote interaction, which greatly enhances the ability for groups of people to work together despite being located in different economies. * Much traffic between non-US countries crosses the US networks. In the case of Pacific rim countries, this averages 71% of non-US traffic. It could be argued therefore that non-US countries are benefiting from this traffic for which the US carriers are not recovering costs. * There is a high level of competition in the provision of trans-Pacific telecommunications regardless of present interconnection arrangements as exemplified by the current Southern Cross project. The current international Internet market is highly competitive. In nations where there are high prices for Internet consumers, these appear to be associated with the comparative lack of competition and the level of pricing for connection in domestic markets. * Any intervention by governments to regulate or impose an international settlements regime will be costly and will introduce rigidities and restrict service development. The outcome, far from benefiting the economies affected by the present imbalance of costs, is likely to increase the costs of Internet access and limit innovation and opportunities for exploitation of the benefits of electronic commerce. In Favour: There is concern that, although the costs to Internet end users may be relatively small, and the present regime is competitively neutral as far as ISPs are concerned, overall effects on the economy may be very significant, especially in the long term. * The impact of voice over Internet Protocol (VoIP) needs to be taken into account. Within five years it is expected that international trunks will be carrying most voice traffic over IP networks. This development will lead to a much closer balance in net traffic flows than is the case at present. * Some Web hosting business is already lost to overseas hosting companies because of the international traffic costs and some New Zealand-based ISPs are reluctant to host internationally popular websites for the same reason. * The overall concern, from a national perspective, is that we are subsidising consumers and businesses in North America, not just service providers and telecommunications carriers, but across the entire economy. Our Conclusions * Although we do not know what the optimum growth of the Internet might be, there seems little if any evidence of market failure to date. * Even if that were the case, there are many factors which impact on growth and take-up of Internet services, other than the costs of the international element of carriage. * Nevertheless, as international Internet use grows and new services such as voice over IP become important, we would want to ensure that the New Zealand economy was not placed at a disadvantage relative to those in North America because of historical developments in Internet services producing long term market distortions. * At the same time, we would not want to see any arrangements that imposed unjustified compliance costs or that endeavoured to mandate negotiations that would subject Internet traffic to similar costing regimes as traditional voice telephony. In particular we would want to avoid outcomes where the cost of measurement or monitoring exceeds the cost/value involved. APEC Recommendations The present text of the recommendations to be submitted to APEC Ministers is: Recommended International Charging Arrangements for Internet Services 1. Where measurement tools are available and acceptable, charging arrangements should be based on traffic flow patterns for each type of service, taking into account which side has generated the traffic. 2. In the absence of efficient measurement tools, charging arrangements for international links should be based on the ratio of inbound to outbound traffic flow. 3. Where agreeable to both parties, the cost of international transport link capacity should be shared on a 50/50 basis. APEC Principles on Internet Interconnection 1. Internet connectivity is an integrated element of the public telecommunications infrastructure, including private sector initiatives that should be encouraged to strengthen the Asia-Pacific Information Infrastructure. 2. Governments need not intervene in private business agreements achieved in a competitive environment, but where there are dominant players or de facto monopolies governments have a role in promoting the principle of fairness until effective competition can be demonstrated. 3. Internet charging arrangements between providers of network services should reflect: a) The contribution of each network to the communication; and b) The use by each party of the interconnected network resources. 4. Sustainable and equitable financing arrangements for the development of high-bandwidth connectivity will be supported by: a) Internet charging arrangements that distribute returns on investment according to fair market principles; and b) Application of the APEC Principles on Interconnection to packet-switched data services. Comment Sought Your comments on this issue would be welcomed as a contribution towards establishing a New Zealand position, not only for the APEC Telecommunications Ministerial meeting, but also for the International Telecommunications Union's study group which is proposing similarly prescriptive recommendations on international traffic costs. Please send your comments to Frank March, Specialist Advisor, IT Policy, by Monday, 15 May 2000. Contact details as follows: telephone (04) 474 2908; fax (04) 473 8949 or (preferred) email: frank.march(a)med.govt.nz. Mike Lear Deputy Secretary, Resources and Networks

1 0

Places to buy routers
by Rob Isaac 02 May '00

02 May '00

Hi folks. Might seem like a silly question (they usually are), but does anyone have some positive (or negative) experiences to share on the subject of purchasing cisco boxes and support contracts for the same? I'm doing some work for a company that has an over-abundance of routers, but an under-abundance of clue. What I'm looking for is an organisation either with national service or based in Auckland who can do 'full service', almost retail router sales and support, and who offer service contracts, hot swap spares, and stuff like that. I have this vague mental picture that Anite in Auckland used to offer this sort of service, but I'm open to any other suggestions. The objective, in case it isn't obvious, is to connect my current employer to someone who can compensate for their lack of clue in exchange for large bundles of cash. Any thoughts on who to talk to (and perhaps who to avoid) would be welcome. If there's sufficient interest, I'm happy to post the consensus back to the list, in case any of you find yourselves in a similar situation. Regards, Rob. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Notorious hacker "Venomous" now working at a NZ ISP.
by Alan Brown 01 May '00

01 May '00

This is a heads-up for those who care about such things. "Venomous" - real name Jodi Jones - is now working at Netbyte in Auckland. People tracking him will recall that the last ISP he worked for (Dayrom in Australia) was used as a base for hacking and DoS attacks. You may wish to firewall accordingly. Yes Netbyte are aware of his history - they claim they believe in giving second chances. Funnily enough that's the exact same claim Dayrom made... AB --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 12

The New Zealand Network Operators' Group
by Donald Neal 01 May '00

01 May '00

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has neither a king, a president nor a formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. At last count the list had around 140 subscribers, with the count growing slightly each month. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to meet over beer. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: NZ MBONE Nominations
by Richard Naylor 30 Apr '00

30 Apr '00

At 03:29 PM 4/24/00 -0700, Josh Bailey wrote: >On Mon, 24 Apr 2000, Josh Bailey wrote: > >> I thank James Tyson, Roger de Salis, Rich Taylor, Andy Linton, > >Of course, I meant to type, Naylor. My apologies, Rich, especially in >light of your assistance. > no probs. I;ve been meaning to follow the MBONE up. Our offer is for rack space in BOTH APE and WIX. We will also provide tech support and are looking at bandwidth (with a probable yes). We plan on Roger's router at one point and a Linux box at the other. Zebra suports DVMRP and I'm looking for something for PIM on Linux boxes. rich richard.naylor(a)citylink.co.nz This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 7

Cisco router value
by David Zanetti 30 Apr '00

30 Apr '00

I have someone who's looking to sell their now-surplus Cisco 1603, but has no idea what it's worth. (And neither do I..) So what's one worth these days 2nd hand? -- David Zanetti <dave2(a)earthling.net> | "It doesn't matter a damn what the Moderator, nz.politics.announce | [ISOCNZ] members think or say" #include <geek/unix.h> | Jim Higgins, (then) ISOCNZ chairman --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

MX for domainz.net.nz points to a CNAME (illegal)
by Joe Abley 29 Apr '00

29 Apr '00

Hello, Just out of interest -- has anybody noticed any problems sending mail to Domainz, due to the fact that the MX for domainz.net.nz points to mail2.actrix.gen.nz, which is itself a CNAME for mercury.actrix.gen.nz? It's not the best MX for the zone, and hence might never get used anyway. [MX to a CNAME is illegal, in case I'm not making myself obvious] Just interested in whether this has had any operational impact. Whilst simultaneously poking fun at Domainz and Actrix for their trivial DNS misconfiguration, obviously :) jabley(a)tardis[129]$ dig mx domainz.net.nz ; <<>> DiG 2.2 <<>> mx domainz.net.nz ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56161 ;; flags: qr rd ra; Ques: 1, Ans: 2, Auth: 3, Addit: 3 ;; QUESTIONS: ;; domainz.net.nz, type = MX, class = IN ;; ANSWERS: domainz.net.nz. 4835 MX 20 mail2.actrix.gen.nz. domainz.net.nz. 4835 MX 10 mail.actrix.gen.nz. ;; AUTHORITY RECORDS: domainz.net.nz. 86400 NS ns1.actrix.gen.nz. domainz.net.nz. 86400 NS ns2.actrix.gen.nz. domainz.net.nz. 86400 NS ns1.waikato.ac.nz. ;; ADDITIONAL RECORDS: ns1.actrix.gen.nz. 86400 A 203.96.16.35 ns2.actrix.gen.nz. 86400 A 203.96.16.36 ns1.waikato.ac.nz. 86400 A 140.200.128.13 ;; Total query time: 47 msec ;; FROM: tardis to SERVER: default -- 203.97.2.226 ;; WHEN: Sun Apr 30 15:55:37 2000 ;; MSG SIZE sent: 32 rcvd: 201 jabley(a)tardis[130]$ dig a mail.actrix.gen.nz ; <<>> DiG 2.2 <<>> a mail.actrix.gen.nz ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58816 ;; flags: qr aa rd ra; Ques: 1, Ans: 2, Auth: 2, Addit: 2 ;; QUESTIONS: ;; mail.actrix.gen.nz, type = A, class = IN ;; ANSWERS: mail.actrix.gen.nz. 60 A 203.96.16.107 mail.actrix.gen.nz. 60 A 203.96.16.108 ;; AUTHORITY RECORDS: actrix.gen.nz. 43200 NS ns1.actrix.gen.nz. actrix.gen.nz. 43200 NS ns2.actrix.gen.nz. ;; ADDITIONAL RECORDS: ns1.actrix.gen.nz. 43200 A 203.96.16.35 ns2.actrix.gen.nz. 43200 A 203.96.16.36 ;; Total query time: 77 msec ;; FROM: tardis to SERVER: default -- 203.97.2.226 ;; WHEN: Sun Apr 30 15:55:57 2000 ;; MSG SIZE sent: 36 rcvd: 149 jabley(a)tardis[131]$ dig a mail2.actrix.gen.nz ; <<>> DiG 2.2 <<>> a mail2.actrix.gen.nz ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62610 ;; flags: qr aa rd ra; Ques: 1, Ans: 2, Auth: 2, Addit: 2 ;; QUESTIONS: ;; mail2.actrix.gen.nz, type = A, class = IN ;; ANSWERS: mail2.actrix.gen.nz. 43200 CNAME mercury.actrix.gen.nz. mercury.actrix.gen.nz. 43200 A 203.96.16.37 ;; AUTHORITY RECORDS: actrix.gen.nz. 43200 NS ns1.actrix.gen.nz. actrix.gen.nz. 43200 NS ns2.actrix.gen.nz. ;; ADDITIONAL RECORDS: ns1.actrix.gen.nz. 43200 A 203.96.16.35 ns2.actrix.gen.nz. 43200 A 203.96.16.36 ;; Total query time: 51 msec ;; FROM: tardis to SERVER: default -- 203.97.2.226 ;; WHEN: Sun Apr 30 15:56:09 2000 ;; MSG SIZE sent: 37 rcvd: 156 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 5

Re: More on DDOS Attacks
by Donald Neal 27 Apr '00

27 Apr '00

Date: Thu, 24 Feb 2000 07:47:46 +1300 From: Chris Wedgwood <cw(a)f00f.org> In-Reply-To: <s8b3a585.032(a)groupwise.telecom.co.nz>; from Donald.Neal(a)telecom.co.nz on Wed, Feb 23, 2000 at 09:16:40AM +1300 X-No-Archive: Yes > Speaking of the stablity of different IOS versions, we have a 3640 > with 12.0(4)T on it that needs rebooting after about 7 weeks of > uptime. Starts spamming the console port with memory allocation > failures, although still manages to route stuff. > > It's not a particullarly odd setup, just routing between a couple > of FE ports, but we are using dynamic packet filtering on it, ala > "permit ... reflect outbound". > > Ring any bells for anyone? Couldn't see anything that jumped out at > me in the later release notes, and wasn't keen on an upgrade just > to "try it out".. Sure, 12.0x is really immature right now and full of bugs. Try the most recent 12.0x release and see if that makes your problems go away. Experience says release start to get usable around about '10 and stable about '16 or so -- so you still have a while to wait. -cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Domainz system change
by Peter Mott 26 Apr '00

26 Apr '00

Does anybody here know an exact date and time for when domainz will switch off the UoW registration system (comprising domainz.waikato.ac.nz and whois server)? I dont recall it being published anywhere as yet. Regards Peter Mott Chief Enthusiast 2day.com -/- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

FW: Wireless Internet Training Program Development
by Frank March 25 Apr '00

25 Apr '00

Please forward within your own networks as seems appropriate. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 > -----Original Message----- > From: Bruce W. McConnell [SMTP:mcconnell(a)mcconnellinternational.com] > Sent: Friday, 21 April 2000 07:40 > To: itcoord(a)undp.org > Subject: Wireless Internet Training Program Development > > Dear National IT Focal Points, > > Below I am sending you an announcement from the World Bank announcing > three > paid fellowships to enhance developing country training programs in > wireless > internet technology at the university level. The program is being > supported > by Motorola to help address the worldwide shortage of knowledgable > experts. > The selected applicants would spend four to six months in the United > States > developing a training curriculum and materials to be used in their home > countries. > > The deadline for applications is May 31, 2000. Please send the > announcement > of this opportunity to those who might be interested in participating. > > Regards, > > Bruce W. McConnell > Facilitator, Information Technology Coordination List > for the United Nations Working Group on Informatics > > 1341 G Street, NW - Suite 1100 > Washington, DC 20005 > +1.202.347.7445 > fax +1.202.347.7446 > mcconnell(a)mcconnellinternational.com > > +++++++++++ > > REQUEST FOR APPLICATION > > THE VISITING SCHOLARS FELLOWSHIP PROGRAM > FOR WIRELESS COMMUNICATIONS CURRICULUM DEVELOPMENT > > infoDev and Motorola University (MU) are pleased to announce that they are > accepting applications for the Visiting Scholars Fellowship Program. > > This Fellowship program seeks to address the shortage of communication > professionals in emerging economies. The program is divided into two > phases: > Phase I - Design and Development will have a university curriculum manager > from an emerging economy work with MU to develop a generic > university-level > educational curriculum focused on communications and IP-based networks > technologies. During the four-month visit, the Scholar will also update > and > improve his/her existing home university curriculum and core materials to > achieve state-of-the-art technology training. > Phase II - Dissemination and Awareness will provide shorter-term > fellowships > to two selected developing country university curricula managers to also > work with MU to adapt and customize the generic curriculum and test the > material and curriculum in the classroom. > > GOALS AND OBJECTIVES > > The objectives of the Visiting Scholars Fellowship Program are to: > · establish new and strengthen existing university-level educational > curricula focused on communications technologies and Internet > Protocol-based > (IP-based) networks; and > · create a "Virtual Curriculum Managers Network" (explained below). > > The ultimate intent is to bridge the gap between existing technologies in > the Scholars' countries and state-of-the-art technologies in > communications > and IP-based, networks curriculum. The Visiting Scholar will be provided > with state-of-the-art training and knowledge, and in turn will be expected > to provide better education to engineering students in their universities. > > PROGRAM STRUCTURE > > To meet these goals, MU will host Visiting Scholars from emerging > economies > at the Motorola corporate headquarters in Schaumburg, Illinois, located > outside of Chicago. The Program will be structured in two phases, with > one > Phase I Scholar visiting for a period of four months, starting after July > 1, > 2000, and two Phase II Scholars visiting later for approximately two > months > each. > Phase I: Design and Development - During this phase, one Visiting Scholar > will structure and develop a generic curriculum, and then a customized one > for their university. First, the Scholar will work with technical > education > and training professionals and Motorola staff to develop a generic > university-level educational curriculum focused on wireless communications > and IP network technologies. The Scholar's efforts will be coordinated > with > ongoing MU efforts in curriculum development. Working under the > supervision > of education and training specialists provided through MU's College of > Technology, the Scholar will design a high-level curriculum, develop > individual course modules, and update existing materials. When necessary, > the Scholar will create new educational materials where none exist to > round > out the generic curriculum. > > The Scholar should plan, if possible, to initiate the effort by utilizing > ex > isting materials brought from their university. Materials and resources, > both knowledge and human, will also be made available through MU and > Motorola. In addition, material from the World Bank will be made > available > to be incorporated into the Program design as appropriate, including the > "infoDev Regulatory Handbook" which is under development. > > The generic curriculum will then be customized to create a new curriculum > for their technical training program in the home country university. This > will involve preparing a customized curriculum and course materials that > fill the gap between existing technologies in the Scholar's country and > cutting edge technologies in communications and IP-based networks > curriculum. > > The Scholar, working together with the infoDev webmaster, will also work > to > establish a Virtual Curriculum Managers Network, to link together > curriculum > managers (involved in wireless communications and IP network technologies) > into an electronic virtual network to share knowledge and best practice in > the development and deployment of such curricula. > > Output from this Phase I will consist of: > (i) both a generic and a customized curriculum focused on communications > and > IP-based networks technologies, > (ii) both generic and customized specific course content, including > materials, lecture notes, texts, reading lists, syllabi, etc., and > (iii) the initial activities related to the Virtual Curriculum Managers > Network, to include selecting the material for the webpage, developing a > listserve of curriculum manager, etc. > > Phase II: Dissemination and Awareness - Building on the work of Phase I, > two > shorter-term Fellowships (approximately two months in residence) will be > made available to selected university curricula managers from emerging > economies. Similar to Phase I, the Phase II Visiting Scholars will work > with MU to adapt and customize the generic curriculum from Phase I. When > they return to their country, they will test the customized material and > curriculum in the classroom. > > infoDev and MU will make the newly developed generic curriculum from Phase > I > widely available through the Internet. The Visiting Scholars website, to > be > created and maintained by the Visiting Scholar and infoDev, will reside on > the infoDev website. The infoDev Webmasters will provide assistance in > making the content available widely on the Internet. Curriculum and > course > materials also will be distributed by infoDev through the infoDev > Symposium, > annual meetings, conferences, etc. The Phase II Scholars will also be > responsible for advancing the Virtual Curriculum Managers Network. > > Phase II should produce: > (i) customized curricula focused on communications and IP-based networks > technologies for the Phase II Visiting Scholars' home country > universities, > (ii) customized course content including materials, lecture notes, texts, > reading lists, syllabi, etc., and > (iii) an Internet web presence and updated content to advance the Virtual > Curriculum Managers Network, available to curriculum managers for training > of engineers worldwide. > > STIPENDS > > PHASE I: The monthly stipend will be $5,000, providing a total stipend of > $20,000 for the four months residence of the Visiting Scholar. Economy > roundtrip airfare and insurance for the time of the fellowship will also > be > covered. Modest additional funds will be available for training outside > MU, > and for travel connected with the Visiting Scholarship. Office space, > equipment, etc. will be provided by MU while the Scholar is in residence. > > PHASE II: The monthly stipend for each scholar will be $5,000 providing a > total stipend of $10,000 for the two months per Visiting Scholar. Economy > roundtrip airfare and insurance will be covered. Office space, equipment, > etc. will be provided by MU while the Scholar is in residence. > > SELECTION CRITERIA > > The following criteria will be used to select the scholars from among the > applicants: > · Ability of the candidate to develop a strong, generic curriculum > focused > on communica-tions technologies and Internet Protocolbased (IPbased) > networks, and to modify such a curriculum to meet the needs of their > university and country. Qualifications will in-clude teaching and > curriculum development experience as well as expertise in the technology; > · Commitment of the candidate's home institution to adopt and utilize > an > improved curriculum (demonstrated in letters of support, willingness to > equip facilities for students, etc.); > · Improvement in training of students in the candidate's institution > likely > to result from the improved curriculum (innovation, critique of the > current > curriculum, etc.); > · Need (priority will be given to universities in low-income > countries, or > to universities that face special difficulties funding foreign training > for > staff.) > · Importance of the training to be provided via the new curriculum to > social > and economic development in the candidate's country and region (numbers of > students likely to be trained, rank and importance of the institution in > preparing engineers and technical staff for his/her country, likely career > paths of graduates, rate of introduction of wireless technology, etc.). > > QUALIFICATIONS > > There is only one application process for both Phases of the Program. > > Candidates must have responsibility for development and maintenance of an > education curriculum in a technical or engineering university or other > accredited training and education institute in an emerging-economy > country. > The Candidates also must have authority to modify and put into practice a > new education curriculum. In addition, the Candidate must be available to > manage the Virtual Curriculum Managers Network during the Fellowship. > Candidates must have strong English language skills. Phase I Scholars > must > be available to live in residence in Schaumburg for a period of four > months, > starting after early July 2000. > > Applicants should submit a curriculum vita and a typed Statement of > Purpose, > (500-700 words).The Statement of Purpose will describe the applicants: > (i) aims in creating an communications and IP-network based curriculum > for > their home country's university, > (ii) why they feel that participation in the Visiting Scholars Fellowship > Program will help them achieve these objectives, and > (iii) what the applicant feels they can contribute to the Visiting > Scholars > Fellowship Program. > > The applicant should include letters of support from their home > university, > and web sites or other materials that describe the university and its > curriculum. he applicant should also arrange that three reference letters > be sent to infoDev from individuals who can testify to the applicants > professional qualifications, institutional role in the university, and > likelihood to succeed in the creation/reform of the curriculum. > > Deadline for applications is May 31, 2000. > > Please send the completed application form via email to > infodev(a)worldbank.org > > Alternatively, you mail send it via regular mail on diskette to: > > Information for Development Program (infoDev) > Attn: Visiting Scholars Fellowship > The World Bank > F5P-156 > 1818 H Street NW > Washington, DC 20433 USA > > CANDIDATE SELECTION PROCESS > > The applications will be distributed to a panel of three reviewers: one > representative from infoDev, one representative from Motorola, and one > independent reviewer. The three top-rated candidates for the Visiting > Scholars Fellowship Program will be contacted for phone interviews. Each > candidate will receive votes based the ranking given by the panel member: > the top candidate receives three points, 2nd candidate receives two > points, > and 3rd candidate receives one point. The candidate receiving the most > points will be offered the Phases I Visiting Scholar Fellowship. The 2nd > and 3rd candidates will be offered the two Phase II Visiting Scholar > Fellowships. It is expected that candidates will be notified of > Fellowship > awards by the end of June (see calendar below). > > If, after this process, three suitable candidates have not been > identified, > a new call for applications may be issued. > > > RESOURCES > > Curriculum design and course content will be made available by MU, > including > course materials, lecture notes, texts, reading lists, syllabi, etc. Some > of this material contains intellectual property that is confidential and > will not be available for further distribution; any such limitations on a > specific document will be specified by Motorola to the Scholar. It is > planned that an infoDev representative and a MU staff member will visit > Scholars after the training to review progress in the curriculum > development/reform and to learn ways of continuing and expanding the > Program. > > > GUEST LECTURING > > In cooperation with several local universities in the Chicago area, > Visiting > Scholars may be able to offer guest teaching assignments to enhance the > Scholarship Program. Universities that Motorola has relationships with > include: (i) Roosevelt University, School of Science and Technology, (ii) > Illinois Institute of Technology, Department of Electrical and Computer > Engineering, and (iii) University of Illinois's (Chicago) Department of > Electrical Engineering and Computer Science. > > > > THE VISITING SCHOLARS FELLOWSHIP PROGRAM FOR WIRELESS COMMUNICATIONS > CURRICULUM DEVELOPMENT -- TENTATIVE TIMETABLE > April 12 infoDev officially announces the Motorola Visiting Scholars > Fellowship Program. Applications to the Program being > accepted by > infoDev. > May 31 Deadline for Applications to the Program (6:00 PM EST). > June 16 Completion of preliminary round of evaluations by the > Selection > Committee. Start of the phone interview stage of evaluation > process. > June 23 Completion of final round of evaluations by the Selection > Committee. > Award letters issued jointly by infoDev and > Motorola. > July 1 Deadline for acceptance for Visiting Scholar Program. > After July 1 Phase I of the Visiting Scholars Fellowship Program will > commence. > Phase II will commence immediately after the close of Phase I. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZ MBONE Nominations
by James Tyson 24 Apr '00

24 Apr '00

There are still no maintainers nominated on mbone.samizdat.co.nz. Remember that geography is irrelevant due to the automagical nature of the internet. If you think that you have even the vague skillset neccessary to maintain this system then please visit the site and nominate yourself. Cheers. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 7

an item of interest?
by Bill Manning 19 Apr '00

19 Apr '00

sorry for the broad cross-posting... While waiting for the 2q2000 inverse tree audit to finish, <http://www.isi.edu/~bmanning/in-addr-audit.html> I crunched some numbers on the previous two quarters data. This is only for servers in the in-addr.arpa tree that responded. Servers w/ modified replies to the version query are not included but they are less than a single percent. <http://www.isi.edu/~bmanning/in-addr-versions.html> (Shouts to you folks w/ back level code... tis better to upgrade than not. And hiding your version is no protection.) Comments appreciated. --bill --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Idle hands in Santa Clara?
by Rob Isaac 18 Apr '00

18 Apr '00

Folks, I'm after someone clueful in the Santa Clara, California area to visit a facility, break down a rack with some equipment in it and arrange shipping of that equipment across state to San Jose. Reasonable demands for quantities of cash, travelling expenses, sponsored clothing or alcoholic beverages of your choice will not be refused. If you're in the area, or you know of someone you'd trust who is, please let me know. The alternative is that I have to fly there and do it myself, and a trans-Pacific flight to spend about fifteen minutes arguing with some PSInet monkeys about where my rack is, followed by a flight back again is a pleasure I think I can live without. Regards, Rob. PS: The catch is -- it's a PSI co-location facility, so anyone you suggest is likely to need saint-like patience and speak fluent Idiot. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Introduction of the new Domainz system
by Andy Linton 18 Apr '00

18 Apr '00

A couple of days ago I got mail from Andrew Mason, a consultant acting for Domainz, who posed a set of questions to me about Netlink's readiness to adopt the new system. I have answered that noting a number of reservations including lack of whois server to enable easy checking of existing records and the apparent lack of consensus among many of the industry players about how things should be done. I'm trying to gauge who is happy with the *technical* interface. (I know that many are unhappy with the politico-commercial position.) If everyone else is ecstatically happy I'll accept the judgement of my peers and get on with things, do without the long promised whois server and check all my domains using the web interface. If however you are unhappy about how things are progressing let's put our heads together and go back to ISOCNZ with an open letter requesting them to ensure that Domainz starts acting as a public service organisation and not as a business solely focussed on making money and using its monopoly postion to dictate to the NZ Internet community. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

[Fwd: Whois.patho.gen.nz]
by Andy Linton 18 Apr '00

18 Apr '00

John, I'm writing to you as chair of the ISOCNZ committee reviewing Domainz's activities. Will ISOCNZ now instruct Domainz to implement a whois server with data that they are prepared to stand behind before the new system goes on line next month? andy -- jabley(a)automagic.org wrote: > > I have been running a whois server on whois.patho.gen.nz for some > time; this server was running before the Waikato-supplied > whois.domainz.net.nz was made available, and presents its output in a > ripe-181 compatible format, as per the current ISOCNZ policy on whois > for NZ. [whois.domainz.net.nz uses a private format, presumably > invented by Domainz]. > > whois.patho.gen.nz is a service that I run for free, and which, since > 12 March, has attracted an average of just under 240 queries per day > from all round the world. I hear the Waikato-run whois.domainz.net.nz > receives a similar number of hits. > > It's very small and simple, and essentially retrieves a page of HTML > from a UoW-supplied server using HTTP, and re-formats the data as > ripe-181 to be presented via whois. > > <operational-content> > When the Waikato system is turned down next month, whois.patho.gen.nz > will stop working. The new system does not include provision for a > whois service of any kind -- hence, at this time there will be no > whois service for the NZ ccTLD. Anyone who currently depends on > whois.domainz.net.nz, whois.patho.gen.nz or nz.whois-servers.net > (which is a CNAME for tardis.patho.gen.nz) should investigate other > means of obtaining access to the register. > </operational-content> > > Note that I would be more than happy to modify whois.patho.gen.nz to > provide continued service if someone from Domainz or Glazier could > give me some pointers as to how I can pull the same information > currently available at > http://domainz.waikato.ac.nz/cgi-bin/DNZ-REGISTER?domain_name=foo.co.nz > from the new system. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Whois.patho.gen.nz
by jabley＠automagic.org 18 Apr '00

18 Apr '00

I have been running a whois server on whois.patho.gen.nz for some time; this server was running before the Waikato-supplied whois.domainz.net.nz was made available, and presents its output in a ripe-181 compatible format, as per the current ISOCNZ policy on whois for NZ. [whois.domainz.net.nz uses a private format, presumably invented by Domainz]. whois.patho.gen.nz is a service that I run for free, and which, since 12 March, has attracted an average of just under 240 queries per day from all round the world. I hear the Waikato-run whois.domainz.net.nz receives a similar number of hits. It's very small and simple, and essentially retrieves a page of HTML from a UoW-supplied server using HTTP, and re-formats the data as ripe-181 to be presented via whois. <operational-content> When the Waikato system is turned down next month, whois.patho.gen.nz will stop working. The new system does not include provision for a whois service of any kind -- hence, at this time there will be no whois service for the NZ ccTLD. Anyone who currently depends on whois.domainz.net.nz, whois.patho.gen.nz or nz.whois-servers.net (which is a CNAME for tardis.patho.gen.nz) should investigate other means of obtaining access to the register. </operational-content> Note that I would be more than happy to modify whois.patho.gen.nz to provide continued service if someone from Domainz or Glazier could give me some pointers as to how I can pull the same information currently available at http://domainz.waikato.ac.nz/cgi-bin/DNZ-REGISTER?domain_name=foo.co.nz from the new system.

3 2

International Internet Charging Regimes... feedback on comments received (long)
by Frank March 13 Apr '00

13 Apr '00

I am providing here a summary of the comments received. Thank you for the feedback, which has been of a very high standard and very helpful. In this summary I have edited comments and in some cases combined them with others and précised. I take full responsibility for any misrepresented or ignored and mangled points that result and further comments and corrections are welcome. I have been asked for more information, especially about the background to the Australian position. My apologies for not giving this before. The ICAIS Task Force web site is at http://www.apii.or.kr/telwg/ICAIS/ICAIS-frame.html Included on the site is a paper outlining Australian objectives for the project. Unfortunately there is little 'hard data' on the site other then the reports of the study group itself. There is a paper on Internet traffic measurement by Nevil Brownlee. My summary of feedback follows. The draft comment was circulated to the New Zealand Network Operators emailing list (nznog(a)list.waikato.ac.nz) and to the members of the Internet Society of New Zealand (ISOCNZ, isocnz-members(a)isocnz.org.nz). These two groups encompass most, if not all, of the technically knowledgeable people in New Zealand dealing with TCP/IP issues and many others who are concerned with policy development in the Internet area. The draft was also passed by subscribers to one or other list to Australian commentators. A total of 11 people have returned comments so far, some of whom are experts in TCP/IP matters and measurement of Internet traffic flows. Some comments were privately to me, others were broadcast to the NZNOG list and elicited further online comment and discussion. Overall there has been support for the draft, with some specific criticism of para 11 which needs redrafting and clarification. In general the New Zealand position statement seems to have the support of at least the technical community. Points made supportive of the draft include: (i) International traffic is carried over symmetric pipes but traffic flows are usually in fact highly asymmetric. Pipes are usually sized to accommodate flows in one direction (in New Zealand's case, inwards) so that the much smaller back-flows are often essentially free to the circuit provider. (ii) Much traffic between non-US countries crosses the US networks and the cost is negotiated as part of inter-provider agreements. We are smaller than the US providers and need them more than they need us. There's nothing in principle stopping an NZ ISP negotiating with a US ISP an arrangement where the US ISP paid for US traffic crossing the international link. (iii) We do not want governments imposing a regime which would force ISPs to do PTT-style charging for voice calls over the Internet - that would severely limit the development of voice, video, multimedia, etc. technologies over the Internet. (iv) The number of services running across the PSTN is limited so it is relatively straightforward to make an agreement on interconnect. By comparison, on the Internet subscribers of the network are free to invent their own services without the interconnecting networks knowing anything about them. Hence any simplistic (and non-zero-settlement) charging regime imposed by network operators and based on aggregate traffic measurement is doomed to failure. For example, a charging scheme that attributed value to volume of traffic would place all the value in the content consumer - content supplier relationship with the content supplier (since there would be a net traffic volume imbalance in the direction supplier -> consumer). (v) The current Southern Cross project is an example of how various telecommunication companies will invest, regardless of (potentially) unfavourable interconnection arrangements. Over five years, Telecom's international Internet traffic carriage has fallen from 98% to 22% highlighting that significant other Service Providers have chosen to implement large bandwidth provisions regardless of the supposed "unfair" interconnection agreements. NZ's position should be to actively argue that the current arrangements should not be changed rather than passively opt for the status quo. (vi) Unless interconnect agreements mandate a flat 50% share of the costs, the asymmetry of the traffic means that non-US connectors would still pay the lions share. (vii) Since 90% of the end user cost is attributed to local access cost issues can be addressed locally without recourse to expensive international quango's. There were no comments strongly opposed to the draft but there were some cautionary comments and a number of questions. My interpolated comments are in parentheses. (viii) There was some surprise expressed at the high proportion of the cost to the end user being attributed to the local loop quoted in my initial commentary. (It should be noted that this is over the APEC area and in NZ's case is likely to be lower but the actual figure is not known for NZ). It was also pointed out that the proportion of the international traffic cost to the ISP well be much higher than for an end user since they are paying a smaller part of the cost of the local loop. Very late in the preparation of this commentary, Neil James provided the following figures for Otago University: LAN (local loop) 57%; National 4%; International 39%. (These figures are probably a reasonable attribution of the costs faced by a NZ-based ISP rather than an end user, if so, costs to end users in NZ for international connectivity are substantially higher than the 3% measured for the APEC area as a whole. This reflects the relatively lower overall local loop cost in NZ than is the case for the APEC area as a whole.) (ix) Whether the current situation has limited growth or not is surely only part of the equation. The other part of the equation must be 'are we paying a fair proportion of the costs?'. (x) How much hosting business is lost to overseas hosting companies because of the international traffic costs? Some government departments even host sites overseas. And a similar point made by another commentator: NZ ISPs are effectively subsidising anyone outside NZ who views a website hosted by them. There is anecdotal evidence that NZ ISPs are reluctant to host popular websites for this reason. Ihug, for example, finds it cheaper to host their clients' websites on a server in the US. (xi) From a national perspective, we are subsidising consumers in another nation. It would be interesting to compare the costs of hosting an identical website in NZ and the US and see whether the traffic charges are significant in the NZ case. (xii) There were a number of comments to the effect that measurement of traffic flows is both possible and useful, noting that para 11 of the draft is misleading on this point. (Clearly this paragraph needs redrafting to ensure accuracy and clarity.) (xiii) The statement in the draft that value of Internet use is not measurable just in terms of traffic flows is a subjective, value-laden statement, which makes it harder to defend. It should be amended to the effect that the Internet allows much more varied styles of remote interaction than voice telephony, which greatly enhances the ability for groups of people to work together despite being located in different economies. (xiv) VOIP certainly raises new issues. If NZ typically provides the gateway into the an IP pipe used for VoIP from US to NZ for US callers clearly we would want the US to pay a portion. Despite the problem of measurement one has now to wonder just how we can agree on appropriate sharing of costs. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

International Internet Charging Regimes... Draft NZ Government po sition (comments sought)
by Frank March 11 Apr '00

11 Apr '00

To all NZNOG subscribers & ISOCNZ members: This is pretty long so if you or, more particularly, your organisation have no interest at all in international Internet connection costs please pass by. Last year I circulated some information to NZNOG about an APEC TEL study on Internet costs, especially the costs of connection across the Pacific (the concern being that non-US Internet users and ISPs are subsidising US users and ISPs). This is stated to be because, unlike telephone charging, where the costs are taken up by the teleco whose subscriber originates the call, non-US ISPs have to rent circuits and thus pay for all traffic irrespective of origin. The study is now known as ICAIS (for: International Charging Arrangements for Internet Services). An interim report has been prepared for the ICAIS Task Force. The report concludes inter alia that about 90% of the costs of Internet connection for Pacific Rim countries is due to the local loop, about 7% is national backbone and a mere 3% is due to international link costs (however the consultants who wrote the report consider this is still considered sufficient to justify further work). The Task Force is now preparing a report for the APEC TEL Ministerial meeting which is scheduled for May. It would be fair to say that there is much disagreement between US and Canada on the one hand and just about everyone else on the other. Having set the ball in motion, Singapore has been happy to let the Australian's carry the torch for reform and Japan, the China and Chinese Taipei, Korea have all agreed with their position. The two positions can be briefly summarised as: the reformers claim that Internet development is being held back unfairly because everyone else subsidises the US costs of connectivity. The opposing viewpoint (and one that I personally hold to) is that there is no evidence of slow take up in NZ and Australia (both are in the top 10 countries in terms of Internet use, along with similarly 'disadvantaged' nations such as Finland, Sweden etc). Most of the rest of the OECD group come well behind but, of course, well ahead of the 2nd and 3rd world. Slow take up in Asia is due to other factors, especially local connection costs and heavily regulated markets. *************** The issue I want to raise here is: does the NZ Internet/ISP industry perceive there to be a problem over this issue? I have asked this question on the NZNOG list at least twice before and received essentially no feedback. I have taken this to mean that there is not an issue for NZ generally, and the ISPs in particular. ************** For this reason, NZ has not advanced any particular position within the APEC TEL but tends to side with the US and Canada. Our position is quite different from that of Australia on this issue (although I cannot see how they can seriously argue evidence of market failure in their case). The brief paper below sets out a draft NZ statement for the Ministerial meeting. I would be interested in any feedback at all (needs to be within a few days, say Friday 14 April). We intend to snail mail a paper version to CEOs of ISPs and other organisations but quick comment from the more technical community would be helpful before we undertake that task. I would emphasise that the NZ position is far from fixed at this point and no statement has yet been made internationally. It may be helpful to quote para 5.1.2 from the draft report as we think this fully encompasses the NZ position (there is a reference to this statement in para 6 below.) <para 5.1.2 draft report> 5.1.2 -- Other economies consider that international charging arrangements are only one element in the total costs and value exchange of international Internet interconnection. They note that these international charging arrangements have not been shown to be a significant factor in overall costs, and that these arrangements have produced rapidly falling bandwidth prices. They note the Internet is a new, dynamic industry where business models are developing rapidly in response to market conditions. They see the Internet as fundamentally different from PSTN networks, note that traffic flows can not be used to infer which party receives the benefit from such traffic, and believe government mandated allocation of costs based on traffic flows potentially detrimental to the growth and functioning of the Internet. They believe the current international Internet market to be operating in a competitive market and note that high prices for consumers appear to be associated with the level of competition and pricing for consumer Internet connection in domestic markets. Therefore, consistent with APEC's APII Principles, they believe there is no basis for government intervention at this time, and that responses to these commercial arrangements will be worked out most quickly if the Internet market is left unhampered. " </para 5.1.2 draft report> I have included the full draft even though it makes reference to parts of the Task Force report that you will not have seen... unfortunately as a draft, the Task Force report is confidential. I would be very interested in any comments on paras 10 & 11. DRAFT NEW ZEALAND POSITION ON ICAIS (for possible circulation to the ICAIS Task Force) 1 New Zealand has not taken an active role in debate at Task Force meetings, largely because the International Internet charging regime has not been drawn to the government's attention by New Zealand industry players or users as a matter of concern. Therefore, there has not been a mandate for New Zealand's TEL delegation to put forward substantive views on this. 2 Nonetheless, we have followed the discussions closely and wish to make some comments as an input to the process of finalising a TEL position for the TELMIN4 meeting in May. 3 We agree that the final report to Ministers should be as brief as possible, consistent with enabling them to appreciate the range of views held by member economies, and the valuable work undertaken by the consultants. Any consideration of this issue also should take account of the fact that the consultants report indicates that international connectivity makes up a very small proportion of the total costs involved in Internet traffic. 4 Some comment has been made about the current funding arrangements hindering the growth of the Internet. Although we do not know what the optimum growth of the Internet might be, there seems little if any evidence of market failure to date. 5 Even if that were the case, there are many other factors which impact on growth and take-up of Internet services, other than the costs of the international element of carriage. Important among these are: the level of the economy's domestic telecommunications market liberalisation and competition, foreign investment restrictions, the effect of local as well as international cost/price structures on the actual cost to end-users, the impact of compliance/regulatory requirements on the development and availability of the Internet, roll-out of domestic infrastructures and the availability of bandwidth, the amount of local Internet content, consumer confidence in the case of e-commerce, open market access for ISPs. 6 We have not entered the debate over the text on what is agreed or not: there are already plenty of economies putting forward their views on this: we would, however, support the US wording for para 5.1.2 (e-mail of 8 April). 7 As far as the conclusion of the report is concerned, we are not convinced that a case has been made for substantive recommendations in terms of the requirement to study and if appropriate to make recommendations on the issue. We are quite attracted by the Canadian paper (TELWG/21/ICAIS/12), as a useful way forward, except for the use of the rather subjective term "affordable" in relation to the cost of internet access. 8 The applicability of any recommendations must also be borne in mind, recognising APEC's voluntary nature. Any recommendations which are arrived at would not have mandatory force. 9 However, we accept that the majority of participants seem to want to have recommendations to put to Ministers who, in turn, are likely to be expecting something concrete to discuss at TELMIN4. 10 The impact of Voice over Internet Protocol (VOIP) needs to be taken into account. At this stage of technical development and with the declining relevance of ITU SG3 recommendations on international telecommunications traffic (accounting rates), we would not want to see any arrangements that imposed unjustified compliance costs or that endeavoured to mandate negotiations that would subject Internet traffic to similar costing regimes as voice telephony (for these reasons, New Zealand has not supported active ITU-T involvement in Internet charging arrangements either). 11 The task group must avoid any outcomes where the cost of measurement or monitoring exceeds the cost/value involved. Unlike telephony, the Internet is not measurable in terms of traffic flows: the flows themselves do not indicate where the value of traffic lies, even if you could measure it. 12 Looking at the recommendations as they stand in the latest draft report, we would prefer that section 6.1 (Recommended international charging arrangements for Internet services) be deleted. If it is to stay, recommendations 6.1.1 and 6.1.2 should be prefaced by the words "Where bilaterally agreed". It is accepted that this would leave unsaid the approach to be taken if- as seems probable in many cases- the 2 parties cannot agree. 13 In general, we could support the suggested APEC principles (section 6.2), except that 6.2.5 (a) should be amended to read "efficient market principles", rather than "fair market principles". 14 Any reference to further TEL work in this area should also include the need to continue a strong focus on the points raised in our paragraph 5 above that need to be addressed as an integral part of Internet development. The current recommendation 6.3.1 tends to imply that there is a problem to be addressed, and we are not convinced this is appropriate. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 6

The New Zealand Network Operators' Group
by Donald Neal 05 Apr '00

05 Apr '00

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has neither a king, a president nor a formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. At last count the list had just over 130 subscribers, with the count growing slightly each month. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to meet over beer. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[John.Hine@MCS.VUW.AC.NZ: Registry Review]
by Joe Abley 04 Apr '00

04 Apr '00

Forwarded on behalf of JH, since it seems his earlier message did not make it to the nznog list (at least, I can't find it in the archives). ----- Forwarded message from John Hine <John.Hine(a)MCS.VUW.AC.NZ> ----- At its meeting on Friday, 31 March, the Council of ISOCNZ approved the terms of reference and working plan for a review of the DNS Registry/Registrar framework for the .nz ccTLD. The working group will report to the ISOCNZ AGM currently scheduled for 23 June. The background, full terms of reference and timetable for this review will be found at the review web site: http://www.isocnz.org.nz/consult/. At this site you will also be able to subscribe to a separate mailing list for the discussion of this issue. The site also contains instructions for making submissions, and will, in due course, hold the submissions themselves. This review will establish policy that will determine the framework for the relationships between the registry, registrars and name holders within .nz for the medium term future. Consequently it will impact on ISPs, name registrars, name holders and the registry. If you are one of these, this review may impact the type of service you will receive or be able to offer. Please take an active part in the review process. John H. Hine Working Group Chair ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: www.i4free.co.nz - Forwarded
by Donald Neal 04 Apr '00

04 Apr '00

From: "Michael Baxter" <Michael_Baxter(a)utopia.co.nz> To: <nznog(a)list.waikato.ac.nz> Subject: Re: www.i4free.co.nz Date: Mon, 3 Apr 2000 12:39:50 +1200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.5 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Yesterday I could call up www.i4free.co.nz using Ihug - BUT - not the joinup/subscribe page (?) Today, cannot call up www.i4free.co.nz at all using Ihug. Regards Michael Baxter (Manager) Utopia (www.utopia.co.nz) P.O. Box 84-217 Michael_Baxter(a)utopia.co.nz Westgate, Auckland +64 25 289 3532 New Zealand Member, International Webmasters Association http://iwanet.org The information contained in this document is confidential. Attachments are (c) Baxter Innovations All prices are in NZ$ and exclude GST --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZ MBONE Page
by James Tyson 03 Apr '00

03 Apr '00

I have set up a quick page about the proposed NZ MBONE, If anyone has any related links for me then please send them my way. Also, if anyone feels like writing any white-papers about the proposed architecute, or anything else to do with this, then please, go ahead and do so, and forward to me. I will make sure that it get's posted and commented on. The URL is http://mbone.samizdat.co.nz/ James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZ MBONE
by James Tyson 03 Apr '00

03 Apr '00

Just one more thing. When I talk about where to put this router I am talking about Auckland, as most ISP's core networks are in Auckland and they are more likely to be equiped to deal with the increased traffic demands in Auckland. Once we have a fair idea of the bandwidth being used by it then we can probably ask for someone to supply some inter-city bandwidth. Cheers. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZ MBONE
by James Tyson 03 Apr '00

03 Apr '00

Okay, having talked to Josh in private email, etc, I have come to the following conclusions: Can someone from Citylink email me about putting Roger's router in the citylink rack, and about a few other management things. Can Roger email me about the router so that we can sort out exactly what we are going to need, etc. I am going to be talking to various people over the next few days about various ways of landing the tunnel in NZ - and mostly who wants to put up bandwidth for it, so if your David Robb or Joe Abley then I would expect that you will get a call from me shortly. Can people also email me nominations for who you would trust to maintain the router (which I don't expect to be very complicated or time consuming), and next monday I will stop taking nominations and put a web-based polling system up to decide who gets chosen. If anyone has any questions then fire me off an email. I don't want to piss anyone off, but it would appear that no one wants to take responsiblity for getting this going - so I decided to. Cheers. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: [isocnz-l]Re: MBONE-less
by jabley＠automagic.org 03 Apr '00

03 Apr '00

I am happy to do this, at least for a trial period (say six months or so). I can house a loaner mbone termination router within 100M range of the APE. ----Original Message----- >From: Josh Bailey <joshbailey(a)lucent.com> >To: David Robb <david.robb(a)staff.ihug.co.nz> >Cc: nznog(a)list.waikato.ac.nz; isocnz-l(a)isocnz.org.nz >Subject: [isocnz-l]Re: MBONE-less >Reply-To: isocnz-l(a)isocnz.org.nz >Date: Tuesday, 4 April 2000 08:53 > >On Tue, 4 Apr 2000, David Robb wrote: > >> *raises hand* I'm interested. > >I should qualify what I meant by serious interest, before you be so kind >as to volunteer. :-) > >The last proposal that was "floating around" was for us to land the tunnel >on a router housed somewhere. The person administering/housing that router >would of course have to provide bandwidth for it, and configure GRE >tunnels to other ISPs that might want "downstream" feeds. IOW, there is >money and administrative overhead involved. > >-- >Josh Bailey (joshbailey(a)lucent.com) "Josh is... at large" -- F.W. > > >_______________________________________________ >go to http://listserver.actrix.co.nz/mailman/listinfo/isocnz-l >for subscription/unsubscription information. > >

1 0

Testimony of Richard Pethia; Director, CERT Centers before a US S enate committee
by Frank March 03 Apr '00

03 Apr '00

This is the second posting I have made to this list of information related to security issues affecting the Internet. The information is sourced from a email list of the GOVIS information security forum which is convened by Mike Pearson of the Ministry of Fisheries. Unless there is objection that the information is off-topic or inappropriate I shall continue to make such postings when it seems to me that the information is of potential interest to members of the nznog. Happy to receive comments direct if people prefer not to clog the list with feedback. Full report at: http://www.cert.org/congressional_testimony/Pethia_testimony_Mar28-2000.html <extract> The recently publicized rash of attacks on Internet e-commerce sites reminds us once again of the fragility of many sites on the Internet and of our ongoing need to improve our ability to assure the integrity, confidentiality, and availability of our data and systems operations. While it is important to react to crisis situations when they occur, it is just as important to recognize that cyber defense is a long-term problem. The Internet and other forms of communication systems will continue to grow and interconnect. More and more people and organizations will conduct business and become otherwise dependent on these networks. More and more of these organizations and individuals will lack the detailed technical knowledge and skill that is required to effectively protect systems today. More and more attackers will look for ways to take advantage of the assets of others or to cause disruption and damage for personal or political gain. The network and computer technology will evolve and the attack technology will evolve along with it. Many information assurance solutions that work today will not work tomorrow. </extract> Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

www.i4free.co.nz
by James Tyson 03 Apr '00

03 Apr '00

I was just wondering if anyone else is having trouble connecting to i4free.co.nz from ihug's network. I am able to connect to it from anywhere else on the internet, but not from my webserver machine which is hosted at the end of an ihugbusiness dds. Does anyone have any ideas? James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 9

Re: www.i4free.co.nz
by Rob Isaac 02 Apr '00

02 Apr '00

>> Why on earth would ihug do that ? > >Haemorrhage prevention? If you can avoid your customers from >accessing someone elses on-line signup? ironic adj 1: humorously sarcastic or mocking; "dry humor"; "an ironic remark often conveys an intended meaning obliquely"; "an ironic novel"; "an ironical smile"; "with a wry Scottish wit" [syn: dry, ironical, wry] 2: characterized by often poignant difference or incongruity between what is expected and what actually is; "madness, an ironic fate for such a clear thinker"; "it was ironical that the well-planned scheme failed so completely" [syn: ironical] --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

FW: SANS Flash: Urgent Request For Help In Stopping DOS Attacks
by Frank March 30 Mar '00

30 Mar '00

Folks: This message was circulated by Jay Garden, who have a talk last week to the GOVIS security forum (inaugural meeting in fact) on the recent spate of DOS attacks. I pass it on for your interest, information and possible action. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 > -----Original Message----- > From: Jay Garden (GCSB) [SMTP:jay(a)gcsb.govt.nz] > Sent: Friday, 31 March 2000 11:21 > To: GOVIS Security Forum > Subject: Fw: SANS Flash: Urgent Request For Help In Stopping DOS > Attacks > > Please action as you see fit. > Cheers, > Jay. > > > > To: Jay Garden (SD070339) > > > Sent: Wednesday, March 29, 2000 6:37 PM > > > From: Alan Paller, Research Director, The SANS Institute > > > > > > This is an urgent request for your cooperation to slow down the wave > of > > > denial of service attacks? > > > > > > As you may know, denial of service (DOS) attacks are virulent and > still > > > very dangerous. These are the attacks responsible for the many outages > > > reported recently in the press and others that have been kept more > secret. > > > DOS attacks are a source of opportunities for extortion and a > potential > > > vehicle for nation-states or anyone else to cause outages in the > computer > > > systems used by business, government, and academia. DOS > > > attacks, in a nutshell, comprise a world-wide scourge that > > > has already been unleashed and continues to grow in > > > sophistication and intensity. > > > > > > One effective defense for these attacks is widely available and > > > is neither expensive nor difficult to implement, but requires > > > Internet-wide action; that's why we're writing this note to > > > request your cooperation. > > > > > > The defense involves straightforward settings on routers that > > > stop key aspects of these attacks and, in doing that, reduce > > > their threat substantially. These settings will not protect you > > > from being attacked, but rather will stop any of the > > > computers in your site from being used anonymously in attacking > > > others. In other words, these settings help protect your systems > > > from being unwitting assistants in DOS attacks, by eliminating > > > the anonymity upon which such attacks rely. If everyone > > > disables the vehicles for anonymity in these attacks, the attacks > > > will be mitigated or may cease entirely for large parts of the net. > > > > > > The simple steps can be found at the SANS website at the URL > > > http://www.sans.org/dosstep/index.htm and will keep your site > > > from contributing to the DOS threat. Tools will soon be > > > publicly posted to determine which organizations have and have > > > not protected their users and which ones have systems that > > > still can be used as a threat to the rest of the community. > > > > > > More than 100 organizations in the SANS community have tested > > > the guidelines, which were drafted by Mark Krause of UUNET with > > > help from security experts at most of the other major ISPs and > > > at the MITRE organization. The testing has improved them > > > enormously. (A huge thank-you goes to the people who did the > > > testing.) > > > > > > We hope you, too, will implement these guidelines and reduce > > > the global threat of DOS attacks. > > > > > > We also urge you to ask your business partners and universities and > > > schools with which you work to implement these defenses. And if you > > > use a cable modem or DSL connection, please urge your service provider > > > to protect you as well. > > > > > > As in all SANS projects, this is a community-wide initiative. > > > If you can add to the guidelines to cover additional routers and > systems, > > > we welcome your participation. > > > > > > Alan > > > > > > Alan Paller > > > Director of Research > > > SANS Director of Research > > > sansro(a)sans.org > > > 301-951-0102 > > > > > > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Serious technical comment
by Nevil Brownlee 29 Mar '00

29 Mar '00

Hello Donald: I saw your call for papers for Uniforum 2000, it looks interesting. > I believe this is the only conference left in New Zealand where there's > room for serious technical content. (I'd be interested if anyone >knows of another one.) How about Passive & Active Measurements Workshop, PAM2000 see http://pam2000.cs.waikato.ac.nz This is a two-day workshop on network measuremnts, with about 20 papers from all over the world. If you're interested in this, it's not too late to register, you can do that on the Web site. (This is the first PAM workshop, I hope they'll become an annual event, but - alas - they'll probably be hosted at other places around the world). Cheers, Nevil +---------------------------------------------------------------------+ | Nevil Brownlee Director, Technology Development | | Phone: +64 9 373 7599 x8941 ITSS, The University of Auckland | | FAX: +64 9 373 7425 Private Bag 92019, Auckland, New Zealand | +---------------------------------------------------------------------C --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

I have resigned from Victoria University
by Russell Sharpe 28 Mar '00

28 Mar '00

Hi All I have resigned from Victoria University in order to take up a position as Network Consultant with Compaq New Zealand. My new position involves Data / Voice integration projects, which I feel is the place to be! My last day at VUW is Friday April 28th, I will be starting at Compaq on Monday 1st May. My thanks go out to all who have provided helpful support and friendship over the last few years (2.5 at VUW), and hope that these friendships will continue. Tim Lewis, Craig Reynolds and myself will be partaking at the Loaded Hog in Bond St on Friday the 14th April after work for those who wish to have a get together. My direct number at Compaq is yet unknown, but I will be able to be reached at russell.sharpe(a)compaq.com or +64 4 4965800. kind regards Russell Sharpe ------------------------------------------------------------ Russell Sharpe Phone:+64 4 463 5554 Network Manager Fax: +64 21 218 1289 Information Technology Services Cell: +64 21 682 541 Victoria University of Wellington russell.sharpe(a)vuw.ac.nz PO Box 600 Wellington www.vuw.ac.nz New Zealand ------------------------------------------------------------ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Uniforum NZ 2000 Call for Papers
by Donald Neal 28 Mar '00

28 Mar '00

In case people missed it, the Call for Papers has now been issued for this year's Uniforum NZ conference . It says in part: "UniForum is about systems interoperability and the future direction of computing. ... We would particularly welcome abstracts about NDS, DNS and Active Server implementation and integration. We look for technical implementation abstracts on Linux, Win2K, Cluster computing and on web based applications. ... If you have an idea which you believe will be of interest and value to the NZ technical community please submit an abstract. SAGE-NZ will also be participating with UniForum this year, so system administration topics will have a dedicated stream, as well as the inclusion of ISOCNZ and internet papers. This residential conference provides an immersion environment where the speakers and attendees have extended opportunities in the "social" interludes to discuss the concepts being presented." "Important Dates for most speakers: NOW!! Registration of Interest March 22nd Commitment to Present a Paper April 5th Abstract and Speaker Profile Required April 19th Notification of Presentation Acceptance August 23rd Publication Materials Required" See http://www.uniforum.org.nz/ for full details. I believe this is the only conference left in New Zealand where there's room for serious technical content. (I'd be interested if anyone knows of another one.) - Donald Neal --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

job@waikato - network engineer
by Warwick Glendenning 27 Mar '00

27 Mar '00

Hi Folks See the url http://www.waikato.ac.nz/hrm/external/vacancies/adminsupp.html#G00/73 Regards Warwick ********************************************* Warwick Glendenning Manager - IT Infrastructure Information & technology Services Division University of Waikato Private Bag 3105 Hamilton, NZ Tel:07-8384363 Fax:07-8384066 cellphone:025-356121 email:warwickg(a)waikato.ac.nz <<Warwick Glendenning.vcf>>

1 0

[lin@darkmere.gen.nz: Computer Science Seminar, 1 PM, Wednesday April 5th, 2000 (fwd)]
by Joe Abley 25 Mar '00

25 Mar '00

----- Forwarded message from Lin Nah <lin(a)darkmere.gen.nz> ----- Date: Sun, 26 Mar 2000 01:16:27 +1200 (NZST) From: Lin Nah <lin(a)darkmere.gen.nz> To: jabley(a)patho.gen.nz Subject: Computer Science Seminar, 1 PM, Wednesday April 5th, 2000 (fwd) Subject: Computer Science Seminar, 1 PM, Wednesday April 5th, 2000 WHO..... Bob Fink, Lawrence Berkeley National Laboratory WHEN.... 1 PM, Wednesday April 5th, 2000 WHERE... Computer Science Seminar Room (Rm 246, Maths/Physics Bldg) ABSTRACT A next generation Internet Protocol, called IPv6, has been designed to solve various problems with the current IPv4 protocol. This talk will present the background and technical details of IPv6, how a transition from IPv4 to IPv6 might be done for the worldwide Internet, and what the status of implementation and deployment is. Bob Fink, a Lawrence Berkeley National Laboratory computer scientist, is the Assoicate Head for Research for ESnet, the Energy Sciences Network of the US Dept. of Energy. He is a co-chair of the "NGtrans" IPv6 Transition working group of the IETF, and leads the 6bone IPv6 Testbed project. He is currently organizing and leading the international 6REN initiative to create worldwide IPv6 production network services by organizing Research and Education Networks worldwide. All welcome. John +------------------------------------------------------------+ | See http://www.cs.auckland.ac.nz/seminars <http://www.cs.auckland.ac.nz/seminars> for a list of | | present and past seminars, as well as instructions on how | | to arrange to give a seminar at the department. | | | | See http://www.cs.auckland.ac.nz/techrep <http://www.cs.auckland.ac.nz/techrep> for on-line | | copies of Computer Science Department technical reports. | +------------------------------------------------------------+ ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Cybercrime swbsite
by Lin Nah 15 Mar '00

15 Mar '00

Since there's been discussion in here regarding DDOS, perhaps someone here may be interested in the new cyber crime website http://www.cybercrime.gov/ It tells you how to report a crime, what they do etc. Lin (one of those who read nznog via the web archive) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Domainz web site off-air - Sunday 18:00 - Update
by Patrick O'Brien 12 Mar '00

12 Mar '00

Good morning, The Domainz site is still down. Actrix had a part flown in from Auckland last night but this did not fix their problem. Another replacement part is being flown down from Auckland this morning. They indicate that the site should be running again mid morning, around 11:00. We'll keep you updated. Regards, Patrick -----Original Message----- From: newz-flash-admin(a)domainz.net.nz [mailto:newz-flash-admin(a)domainz.net.nz]On Behalf Of Patrick O' Brien Sent: Sunday, March 12, 2000 7:17 PM To: NewZ-Flash(a)domainz.net.nz Subject: [NewZ-Flash] Domainz web site off-air - Sunday 18:00 NewZ-Flash readers. Notification that the Domainz web site is currently off-air. The site is hosted by Actrix Networks and they are currently working to resolve a problem with their web server software. Current estimates indicate the site will be operable later tonight, Sunday. There are no issues at Waikato. Apologies for any inconvenience. My regards, PATRICK J O'BRIEN Fax: (04) 473-4569 Voice: (04) 473-4567 Mail: P.O.BRIEN(a)DOMAINZ.NET.NZ Web: http://www.DOMAINZ.NET.NZ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

RE: [isocnz-l]I presume http://www.domainz.net.nz/ is down?
by Peter Mott 12 Mar '00

12 Mar '00

> The Domainz site is still down. > > Actrix had a part flown in from Auckland last night but this did not fix > their problem. Another replacement part is being flown down from Auckland > this morning. This is an excellent example of why DOMAINZ should not be the only registrar for .nz. Fortunately under the current system, ISP's dont need the DOMAINZ website to maintain the registry. Under the new system, a failure of the DOMAINZ site will bring us all to a halt. A business critical site should be located on a bullet proof dedicated host, and in the unlikely event of failure, be setup so a move to another host is doable in minutes, not days. regards Peter Mott Chief Enthusiast 2Day.com -/- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

[NewZ-Flash] Domainz web site off-air - Sunday 18:00
by Patrick O' Brien 12 Mar '00

12 Mar '00

NewZ-Flash readers. Notification that the Domainz web site is currently off-air. The site is hosted by Actrix Networks and they are currently working to resolve a problem with their web server software. Current estimates indicate the site will be operable later tonight, Sunday. There are no issues at Waikato. Apologies for any inconvenience. My regards, PATRICK J O'BRIEN Fax: (04) 473-4569 Voice: (04) 473-4567 Mail: P.O.BRIEN(a)DOMAINZ.NET.NZ Web: http://www.DOMAINZ.NET.NZ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

Everybody Would Understand
by Joe Abley 07 Mar '00

07 Mar '00

Interesting comment in today's Herald: The question being asked in telecommunications circles is, how did it happen? Such systems are supposed to be fail-safe. Had a contractor put a digger through a fibre optic cable servicing the exchange, everyone would have understood. But not so the failure of a complex marriage of computer equipment from several international suppliers. Protecting the network from backhoe surgery is easy -- you just throw in diverse paths around any potential single point of failure. A "complex marriage of computer equipment from several international suppliers" on the other hand sounds like a recipe for disaster :) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Waikato Server availability
by Andrew McGhie 07 Mar '00

07 Mar '00

Editing details and registering new domain names through the web interface with Waikato should go through now with no message of "server not available". Many thanks Andrew --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Waikato Server availability
by Andrew McGhie 07 Mar '00

07 Mar '00

Any one attempting to edit details or register a domain name through the web interface to Waikato at present is getting the message "server not available". We are investigating this and will post further details as soon as they are available. Many thanks Andrew --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

As Seen On Slashdot
by Joe Abley 06 Mar '00

06 Mar '00

If anybody else runs intel servers remotely, and thinks this is the best thing they have seen all year: http://www.realweasel.com/intro.html then drop me a line, and maybe we can send one big order over instead of all kinds of little bitty ones. They're doing pretty small fab runs at the moment, and the price per card is US$250 (which would be completely unreasonably out of the question if this wasn't such a good idea). If we can get a big order together maybe we can drag that price down a bit... Anyway. Let me know :) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Domainz -- Ringing Helpdesk Phones
by Joe Abley 05 Mar '00

05 Mar '00

Domainz have sent a letter to every nameholder under .NZ with details of the new Domainz/Glazier system; it appears that some have already arrived with nameholders this morning. Some definitely haven't (I haven't received anything yet). The letter advises nameholders to contact their ISP for more information. Operators may want to find out from Domainz exactly what nameholders have been told, so that they are able to field questions on the helpdesk. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

Re: Domainz -- Ringing Helpdesk Phones
by Rob Isaac 05 Mar '00

05 Mar '00

While we're on the subject... The letter below seems to consistently substitute commas ( , ) for apostrophes ( ' ). Is it just me, or is there some top secret Domainz, character mapping or MIME type I should be using to view this text? Can anyone confirm that the original letter is also formatted this way? Sorry to be pedantic, but when someone sends out a letter like this that has the potential to cause confusion among the herd, I like to make sure I know *exactly* what I'm dealing with. Regards, Rob. >3 March, 2000 > Our ref: >holder_name >holder_contact >holder_address1 >holder_address2 >holder_address3 >holder_city >holder_country >holder_postcode > >Dear .nz Domain Name Holder > >For Your Information - Changes to the .nz Register > >This letter is to advise you as a .nz Name Holder of the changes planned to >the Domain Registration System. > >According to our records you are the holder of the following domain name(s) >currently listed in the .nz Register: > > domain_name > >As part of the change process, we will create a Customer Record and link the >above domain(s) to your record. The latest contact information we have about >you was taken from your domain - domain_name - which we see was last >modified on date_updated. This contains the address information above, plus >your contact details below: > > holder_email > holder_phone > holder_fax > >If your contact details need updating, now is a good time and you may need >to talk to your ISP to help you do this. > >We will keep you informed of the process and once set up you will be emailed >the Customer ID and Password using the above email address. > >If youd like to keep in touch with progress more information can be found >on our website at the following address: > > http://www.domainz.net.nz/DRS_Changes.html > >Yours sincerely, > > >Patrick OBrien >Chief Executive --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Domainz -- Ringing Helpdesk Phones
by Rob Isaac 05 Mar '00

05 Mar '00

>> Regarding dealing to the responses from the letter, most enquiries that we >> are receiving indicate that the Name holder and address is OK, but the >> contact details (typically the representative and email address) are >> incorrect and have not been updated in the .nz Register. > >We are now being swamped with calls from people who have read the letter but >dont understand what it means. They are particularly concerned that DOMAINZ >are talking about a customer ID and password. > >We are advising customers to ring DOMAINZ for an explanation. > >regards > >Peter Mott Presumably, someone at Domainz just made a mistake by telling people to contact their ISPs about something that is really Domainz's doing. In the wider context of what they're doing, it would be easy for them to overlook the inconvenience and time-wasting that one little sentence will cause. Maybe they intended to inform ISPs, registrars and so on before they sent the letters, but simply forgot. Who did this, any idea? Who is the letter signed by? I still haven't seen a copy of it, but since it's being delivered on paper, it will probably take a while to filter through to anyone clueful. Regards, Rob. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

NZ MBONE
by James Tyson 28 Feb '00

28 Feb '00

David Robb from IHUG and I have been talking about setting up a local MBONEesque system across APE or WIX, I was just wanting a show of hands as to who would want it, and how people think it should be implemented. Cheers James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

12 22

Re: (fwd) History of Internet in NZ
by Mark Davies 28 Feb '00

28 Feb '00

From: Don Stokes <don(a)daedalus.co.nz> Date: Sat, 26 Feb 2000 20:49:43 +1300 > VUW router's change log says the Kawaihiko DDS links were added on > 14 Jun 90; the PC-router links running before that. This was before I > started there; Mark Davies or Michael Newbery may have more info. Jonathan, Andy and I put the PC-router links in in late '89. They were running SLIP over the the DSIR's terminal network (with Tony van der Peet, then at DSIR, making the required changes to their precursors of the ACE boxes to allow for permanent links). The initial link was between Waikato and here followed up by a similar link between here and Massey. We ran a slightly modified version of SLIP to deal with the non 8bit clean nature of the lines and they ran at the glorious speed of 4.8K. cheers mark --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Re: (fwd) History of Internet in NZ
by Michael Newbery 27 Feb '00

27 Feb '00

Mark Davies <mark(a)MCS.VUW.AC.NZ> wrote at 27/2/00 2:47 PM >Jonathan, Andy and I put the PC-router links in in late '89. They were >running SLIP over the the DSIR's terminal network (with Tony van der Peet, >then at DSIR, making the required changes to their precursors of the ACE boxes >to allow for permanent links). The initial link was between Waikato and here >followed up by a similar link between here and Massey. We ran a slightly >modified version of SLIP to deal with the non 8bit clean nature of the lines >and they ran at the glorious speed of 4.8K. And a SHARED 4.8k at that. The theory was that there was sufficient spare capacity on the DSIR network to accomodate the DISR internal traffic and the University use. This proved not to be the case :-) -- Michael Newbery Technology Manager Saturn Communications Tel: +64-4-939 5102 Mobile:021-642 957 Fax:+64-4-939 5100 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

ICANN Membership
by Chris Wedgwood 27 Feb '00

27 Feb '00

Most of you will know about this already, but those who do not, here as an opportunity to join ICANN at no cost: http://members.icann.org/ Please see the web page for more details. -cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

(fwd) History of Internet in NZ
by DPF 25 Feb '00

25 Feb '00

Off topic but this list seemed the most likely source of information to help me answer the query below. I think Jonathon Stone is now working for a US university. If anyone has any specific info on Jonathon or the old "backbone" that would be appreciated. Ta DPF >I am trying to track down >information about the role that a person called "Jonathon Stone" may >have played in the establishment of the Internet backbone in New >Zealand and wondered if you had ever heard of him. I believe he may >have been in the computer department of Victoria University at the >time but in quite what capacity I do not know. I would be grateful >for any information you might be able to let me have. > >In any case, when exactly was the NZ Internet backbone installed and >who was in charge of it anyway. I seem to recall it was a committee >and not just the one person. Is there a FAQ or URL which covers all >this? ________________________________________________________________________ <david at farrar dot com> NZ Usenet FAQs - http://www.dpf.ac.nz/usenet/nz ICQ 29964527 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: RE: More on DDOS Attacks
by Michael Newbery 24 Feb '00

24 Feb '00

Well, I've just gone to 12.0(8) on a 3620, up from 11.3, and that difference is most pleasent. 11.3 did not crash, but had some, um, infelicities. I'm quite happy with 12.0(8). Of course, if you want a stable release, well the following may amuse you (although it's not strictly IOS of couse, its a Catalyst 2926). Tardis> sh sys PS1-Status PS2-Status Fan-Status Temp-Alarm Sys-Status Uptime d,h:m:s Logout ---------- ---------- ---------- ---------- ---------- -------------- --------- faulty ok ok off faulty 737,05:06:53 20 min -- Michael Newbery Technology Manager Saturn Communications Tel: +64-4-939 5102 Mobile:021-642 957 Fax:+64-4-939 5100 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 9

Open IP Directed Broadcast List... (fwd)
by Alan Brown 24 Feb '00

24 Feb '00

Supplementary to http://www.netscan.org/ and http://www.powertech.no/smurf/ > ---------- Forwarded message ---------- > Date: Wed, 23 Feb 2000 14:48:10 -0500 > From: dies <dies(a)PULLTHEPLUG.COM> > To: BUGTRAQ(a)SECURITYFOCUS.COM > Subject: Open IP Directed Broadcast List... > > Well I guess I reinvented the wheel here. On that note. > > I've compiled a list of open ip directed broadcasts. I've scanned > down into 26 bit subnet's and found some interesting results. Over > 138,000 broken networks where found. A list of these networks is > currently available at http://www.pulltheplug.com. The reason I did this > was because netscan.org is only hitting 24 bit subnets and with the > recent "Internet Rush" for companies, CIDR, etc I felt it was time to look > deeper into the problem. I've been pulled away from this project as of > late (real job calls) and I have yet to walk the networks through > arin/ripe/apnic and obtain contacts. That will be my next step, > ETA - 2/28/00. After that I'd like to jump down to 27 and 28 bit > subnets. I'd be willing to get some help from anyone that is interested. > > Lastly, for the script kiddies out there. Please do not go and > grab this list and annihilate someone. Take the information and maybe > learn something from it, like just was subnetting is and how it works.. > > dies(a)pulltheplug.com --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: NZ MBONE
by Richard Naylor 24 Feb '00

24 Feb '00

At 12:28 PM 2/25/00 +1300, James Tyson wrote: > >David Robb from IHUG and I have been talking about setting up a local >MBONEesque system across APE or WIX, I was just wanting a show of hands as >to who would want it, and how people think it should be implemented. > cool ! at long last. Count me in as interested/keen, etc. I have the stuff running at home, but haven't had time to bring it into work yet. Do you want to stay with MBONE or use the H.323 stuff thats out there. My experience is that the H.323 stuff is faster and gives better results. I was planning to have an H.323 device in next week which will host a conference call, and have auto answer, and have a TV channel on it so that you can see the latency. Only problem is some copyright issues with the content so it might have to be a live camera from the office or a video tape on a loop. rich richard.naylor(a)citylink.co.nz This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

[dangerously off-topic] Government to Regulate Routing!
by Joe Abley 23 Feb '00

23 Feb '00

** Quite Possibly of Negligable Operational Interest ** The Herald has an article about the Telecoms review being carried out (or to be carried out, give me a break, it's early): > The inquiry's brief is to examine interconnection issues, the Kiwi Share > obligation -which guarantees free local calling - number portability > and administration, management of internet traffic and the > development of New Zealand as a knowledge economy. "Management of internet traffic" was the phrase that caught my eye. If this review strays into the issues of routing, traffic filtering and peering at the packet layer, then I am scared. Mind you, this is probably the Herald quoting some government press release, so I wouldn't necessarily expect any the terms contained within it to be accurate. Anyway, just thought I'd share this. Please feel free to return to your usual network-wrangling activities. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Back to Non-Subscriber Postings
by Donald Neal 23 Feb '00

23 Feb '00

NZNOG-People, Yes, it seems restricting postings to subscribed addresses does create substantial inconvenience. I have now turned this off again. My thanks to all of the people who reminded me what a poor MUA I'm using. If I had any plans to do anything about this, I wouldn't be able to tell you about them. Donald Neal NZNOG Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: More on DDOS Attacks
by Donald Neal 23 Feb '00

23 Feb '00

At one stage we tried 12.0(5)T on 5 different boxes, all five failed with different faults ;-) 12.0(7)T1 is apparently the last in the 12.0T stream with 12.1 being its replacement (apparently within a couple of weeks). I think you should go to 12.0(7)T1 if you need T features. Arron Scott -----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Andrew Cutler Sent: Wednesday, February 23, 2000 08:43 To: nznog(a)list.waikato.ac.nz Subject: Re: More on DDOS Attacks I had a customer with a 2610 running 12.0(4) that had constant random "spurious memory access" errors. I advised him to upgrade to upgrade to 12.0(5) but haven't heard back. Cheers, Andrew Donald Neal wrote: Subject: BOUNCE nznog(a)list.waikato.ac.nz: Non-member submission from [David Zanetti <dave2(a)earthling.net>] Date: Tue, 22 Feb 2000 19:43:41 +1300 From: owner-nznog(a)list.waikato.ac.nz To: owner-nznog(a)list.waikato.ac.nz >From d1nc(a)telecom.co.nz Tue Feb 22 19:43:40 2000 Received: from wakko.burlap.net.nz (p267.tnt1.dialup.the.net.nz [203.110.6.13]) by johnwayne.waikato.ac.nz (8.9.1a/8.9.1/Debian/GNU) with ESMTP id TAA14625 for <nznog(a)list.waikato.ac.nz>; Tue, 22 Feb 2000 19:43:33 +1300 Received: from localhost (dave2(a)localhost) by wakko.burlap.net.nz (8.9.3/8.9.3/Debian/GNU) with ESMTP id TAA08222 for <nznog(a)list.waikato.ac.nz>; Tue, 22 Feb 2000 19:43:31 +1300 X-Authentication-Warning: wakko.burlap.net.nz: dave2 owned process doing -bs Date: Tue, 22 Feb 2000 19:43:30 +1300 (NZDT) From: David Zanetti <dave2(a)earthling.net> X-Sender: dave2(a)wakko.burlap.net.nz To: nznog(a)list.waikato.ac.nz Subject: Re: More on DDOS attacks In-Reply-To: <20000222133907.A5270(a)styx.clear.net.nz> Message-ID: <Pine.LNX.4.10.10002221936550.8170-100000(a)wakko.burlap.net.nz> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII On Tue, 22 Feb 2000, Chris Wedgwood wrote: > > I've been meaning to have another try with a newer version of 12 > > (especially as 12 has gone GD) so your experience is only going to > > encourage me, can I ask what version of IOS and on what platform you lab > > setup was using? [clip] > That's not to say it is very stable, the last I tried 12.0.7(S) > was pretty horrible. I have '9 down but not tested yet. Speaking of the stablity of different IOS versions, we have a 3640 with 12.0(4)T on it that needs rebooting after about 7 weeks of uptime. Starts spamming the console port with memory allocation failures, although still manages to route stuff. It's not a particullarly odd setup, just routing between a couple of FE ports, but we are using dynamic packet filtering on it, ala "permit ... reflect outbound". Ring any bells for anyone? Couldn't see anything that jumped out at me in the later release notes, and wasn't keen on an upgrade just to "try it out".. -- David Zanetti <dave2(a)earthling.net> | (__) Mr Moo says: Moderator, nz.politics.announce | ( oo #include <geek/unix.h> | /L_= ... ( Eat more porridge ) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

None
by None 22 Feb '00

22 Feb '00

[203.97.2.226]) by johnwayne.waikato.ac.nz (8.9.1a/8.9.1/Debian/GNU) with ESMTP id = KAA06207 for <nznog(a)list.waikato.ac.nz>; Wed, 23 Feb 2000 10:44:28 +1300 Received: from [192.168.0.4] (admin4-admd-skyt.qsi.net.nz [202.89.128.132] = (may be forged)) by tardis.patho.gen.nz (8.9.3/8.9.3) with ESMTP id KAA20340; Wed, 23 Feb 2000 10:44:25 +1300 (NZDT) Message-Id: <200002222144.KAA20340(a)tardis.patho.gen.nz> X-Mailer: Microsoft Outlook Express for Macintosh - 4.01 (295)=20 Date: Tue, 22 Feb 2000 14:37:18 +1300 Subject: 12 good reasons to choose webmail.net.nz [WAS: Media announcement on free webmail] From: "Rob Isaac" <rob(a)terabyte.co.nz> To: nznog(a)list.waikato.ac.nz CC: Joe Abley <jabley(a)patho.gen.nz> Mime-version: 1.0 X-Priority: 3 Content-type: text/plain; charset=3D"US-ASCII" Content-transfer-encoding: 7bit >On Tue, Feb 22, 2000 at 01:40:35PM -1100, reply(a)webmail.net.nz wrote: >> Show Off New Zealand announces the launch of its free web-based Email >> service Webmail.net.nz in conjunction with American Email giant = Commtouch. > >These guys win today's prize for the least clue displayed in a public >forum. I have tried to think of a more moronic way for them to advertise >their product, and I have failed. > >Congratulations! Twelve good reasons to choose webmail.net.nz as *your* web email provider = -- a list of twelve publicly known exploits against Microsoft IIS, version = 3.0, currently being run by 'webmail.net.nz': Bugtraq ID: 978 2000-02-09 NT IIS ASP VBScript Runtime Error Viewable Source Vulnerability Bugtraq ID: 968 2000-02-02 NT IIS idq.dll Directory Traversal Vulnerability Bugtraq ID: 592 1999-07-20 Persits AspUpload Buffer Overflow Vulnerability Bugtraq ID: 529 1999-07-19 NT IIS MDAC RDS Vulnerability Bugtraq ID: 591 1999-07-07 NT IIS SSL DoS Vulnerability Bugtraq ID: 477 1999-06-24 NT IIS Double Byte Code Page Vulnerability Bugtraq ID: 501 1999-03-08 NT IIS ISAPI Extension Vulnerability Bugtraq ID: 230 1999-02-11 NT Using ASP And FSO To Read Server Files Vulnerability Bugtraq ID: 194 1999-01-26 NT IIS IISAPI Extension Enumerate Root Web Server Directory Vulnerability Bugtraq ID: 192 1999-01-24 NT IIS FTP DoS / Buffer Overflow Vulnerability Bugtraq ID: 149 1998-07-01 NT IIS ASP Alternate Data Streams Vulnerability Bugtraq ID: 676 1998-06-26 Multiple Vendor PKCS#1 Vulnerability They're currently vulnerable to 978, 968, 591, 477, 501, 230, 194, 192 and = 149. I can't confirm the others, mainly because their server seems to = lack the needed third party software that makes the exploit possible. Be sure to recommend them to all your friends, just because of their = innovative marketing strategies. By 'your friends', I mean bored fifteen = year olds with ADSL, cable modems or wheel on lots of well connected = machines. *cough* We now return you to your normal, spam-free programming. Regards, Rob. =20 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

12 good reasons to choose webmail.net.nz [WAS: Media announcement]
by Donald Neal 22 Feb '00

22 Feb '00

1 0

Re: More on DDOS Attacks
by Donald Neal 22 Feb '00

22 Feb '00

2 1

[bb@nsimail.com: Regarding Webmail]
by Joe Abley 22 Feb '00

22 Feb '00

In case anybody is still in any doubt as to the sensitivity of these webmail.net.nz people to the issue of spam, see attached message. Apparently it is ok for webmail.net.nz to send commercial, unsolicited mail because it is "useful information", as opposed to other unsolicited, commercial e-mail which is apparently not. Ho hum. File under "moron spam haven" and take appropriate precautions. Joe ----- Forwarded message from bb(a)nsimail.com ----- From: bb(a)nsimail.com Date: 21 Feb 2000 20:50:40 -0800 X-Sent: 22 Feb 2000 04:50:40 GMT To: jabley(a)patho.gen.nz X-Mailer: Web Mail 3.5.1.4 Subject: Regarding Webmail Hi Joe, We have had great feedback and alot of people have joined our service from the general public. We have been offering this state of the art free service to anyone who wishes to use it, and have been astounded by some harsh responses from people who themselves work in the industry. We have offered leading edge technology in NEW ZEALAND for new zealanders and cannot understand some of the hostile responses we have had, almost all from IT proffesionals, when we have had such a great response from the general public. Because of the pressure put on us by a few in the industry we will not be emailing anybody else but feel that the issue of spamming is such a grey area that useful information is being put in the same circle as email suggesting you buy a ticket to africa at your local travel branch in Vancouver. I am sorry if i have caused undue stress by emailing you, but it was only our intention to inform nz'ers of this superior technology that is free for them to operate as they please. Kindest Regards Billy. ------------------------------------------------- Get personalized e-mail and a web address or your own free e-mail at http://www.networksolutions.com. ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

None
by None 22 Feb '00

22 Feb '00

13]) by johnwayne.waikato.ac.nz (8.9.1a/8.9.1/Debian/GNU) with ESMTP id = TAA14625 for <nznog(a)list.waikato.ac.nz>; Tue, 22 Feb 2000 19:43:33 +1300 Received: from localhost (dave2(a)localhost) by wakko.burlap.net.nz (8.9.3/8.9.3/Debian/GNU) with ESMTP id TAA08222 for <nznog(a)list.waikato.ac.nz>; Tue, 22 Feb 2000 19:43:31 +1300 X-Authentication-Warning: wakko.burlap.net.nz: dave2 owned process doing = -bs Date: Tue, 22 Feb 2000 19:43:30 +1300 (NZDT) From: David Zanetti <dave2(a)earthling.net> X-Sender: dave2(a)wakko.burlap.net.nz To: nznog(a)list.waikato.ac.nz Subject: Re: More on DDOS attacks In-Reply-To: <20000222133907.A5270(a)styx.clear.net.nz> Message-ID: <Pine.LNX.4.10.10002221936550.8170-100000(a)wakko.burlap.net.nz> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=3DUS-ASCII On Tue, 22 Feb 2000, Chris Wedgwood wrote: > > I've been meaning to have another try with a newer version of 12 > > (especially as 12 has gone GD) so your experience is only going to > > encourage me, can I ask what version of IOS and on what platform you = lab > > setup was using?=20 [clip]=20 > That's not to say it is very stable, the last I tried 12.0.7(S) > was pretty horrible. I have '9 down but not tested yet. Speaking of the stablity of different IOS versions, we have a 3640 with 12.0(4)T on it that needs rebooting after about 7 weeks of uptime. Starts spamming the console port with memory allocation failures, although still manages to route stuff. It's not a particullarly odd setup, just routing between a couple of FE ports, but we are using dynamic packet filtering on it, ala "permit ... reflect outbound".=20 Ring any bells for anyone? Couldn't see anything that jumped out at me in the later release notes, and wasn't keen on an upgrade just to "try it out"..=20 --=20 David Zanetti <dave2(a)earthling.net> | (__) Mr Moo says: Moderator, nz.politics.announce | ( oo #include <geek/unix.h> | /L_=3D ... ( Eat more porridge ) =20 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0