- NZNOG - lists.nznog.org

Do ISPs monitor abuse@?
by Scott Newton 17 Jun '20

17 Jun '20

Hi Been getting some bans on my web server where the source is in the local NZ range. Was wondering if it was worth forwarding these on to the the abuse@ addresses or do most ISPs just ignore them due to high volume of spam they get? Thanks -- Regards Scott Newton

1 0

First APNIC virtual "networking from home" next Tuesday afternoon
by Mark Prior 29 May '20

29 May '20

The first session is on Tuesday, starting at noon Brisbane time. Looks like it could be interesting. Keynote from Geoff Huston and other talks from Merike Kaeo, Tom Paseka, Warrick Mitchell and Swapneel Patnekar. <https://nfh.apnic.net/events/sea/#/day/1> Mark.

1 0

IANA AS Numbers Registry Update
by Selina Harrington 18 May '20

18 May '20

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to LACNIC: 270749-271772 Assigned by LACNIC 2020-05-18 271773-272796 Assigned by LACNIC 2020-05-18 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

NZ Eyeball ISP Top Talkers
by Jonathan Brewer 14 May '20

14 May '20

Hi Folks, I'm trying to help out a customer in the Pacific understand what a developed market traffic profile looks like. In particular I'm looking for a list of your top 20 ASNs by traffic volume. Big bonus if you can attach percentages to those ASNs. If any of you can share any rough detail it would be much appreciated. Anything's fine - attributable, non-attributable, fallen off the back of a truck, apocryphal tales from a late night whisky session, whatever. Thanks, Jon

2 2

Oracle Certification Exams...
by Michael Bullut 09 Apr '20

09 Apr '20

Greetings Team, Are there any Oracle Certified Professionals in the group? Currently, I am undertaking several Oracle certifications during this month and would to inquire which materials did you use to prepare for the aforementioned? Warm regards, Michael Bullut. --- *Cell:* *+254 723 393 114.**Skype Name:* *Michael Bullut.* *Blog: http://www.kipsang.com/ <http://www.kipsang.com/>* *E-mail:* *main(a)kipsang.com <main(a)kipsang.com>* *---*

1 0

Moderated Membership?
by Mark Foster 02 Apr '20

02 Apr '20

Can we rig up some of the rules to catch of these spamming signups? Surprised at the silence.

6 6

Free Software Mirror Group's fourth birthday
by Michael Fincham 02 Apr '20

02 Apr '20

Hi all, Just a quick note to say that yesterday was The Free Software Mirror Group's fourth birthday (we think). Which is quite incredible. I've said it before but I'd like to say it again: thank you to all the support and aroha we've received from the NZ operator community to facilitate the work we've been doing. In particular our sponsors: - REANNZ, who provide us with power, colo and a fat series of tubes - Insomnia Security, Catalyst, Advantage Computers, who contributed heartily towards hardware - and WAND group for letting Brad spend so much time on FSMG stuff :) And thanks to everyone else who's offered hardware, compute time or other resources. I'd also like to personally thank the two volunteers who've done huge amounts of work on the project: - Brad Cowie - James Forman I couldn't have kept things running as smoothly without you guys! Here are some highlights of our work in the last four years: - Upgraded our PoPs to 10 gig connections to REANNZ (Wellington on hold due to pandemic) - Official NZ mirrors for: - http://ftp.nz.debian.org - http://nz.archive.ubuntu.com - https://mirror.fsmg.org.nz/archlinux/ - https://mirror.fsmg.org.nz/debian-cd/ - https://mirror.fsmg.org.nz/kali/ - https://mirror.fsmg.org.nz/pub/OpenBSD/ - https://mirror.fsmg.org.nz/raspbian/ - Unofficial mirrors for a variety of other things, check out https://mirror.fsmg.org.nz/ for a list - Presented at LCA on our mirroring infrastructure - Built Ansible playbooks and numerous pieces of in-house tooling to automate and improve the process of running software mirrors (which we still want to open source!) If you're interested in seeing some stats on what we mirror, how much bandwidth we're using etc, you can find it on our dashboards for each site: https://mirror.fsmg.org.nz/.fsmg/nodes/hlzmel/ https://mirror.fsmg.org.nz/.fsmg/nodes/wlglam/ Our goal for 2020 and beyond is still to upgrade the hardware we're using and to open source our infrastructure tooling. We're not sure what this is going to look like yet but we'll keep folks in the loop :) Cheers again and if you have any questions or want to chat, we're in #fsmg on freenode. -- Michael Fincham

1 0

Buy Verified Veeam Users List At Technology User Lists
by karaphelps121＠gmail.com 02 Apr '20

02 Apr '20

At Technology User Lists we provide data that is accurate for a host of multichannel campaigns. The Veeam NetSuite marketing data is therefore an ideal investment for technology marketers as it ensures higher deliverables. The Veeam customers data list is certain to help marketers reach targeted audience base and promote their services. The Veeam users contact data is the perfect solution for multichannel campaigns that help marketers amplify ROI in the most effortless manner. For assured returns and maximum ROI, buy Veeam users mailing database and give your campaigns an advantage. For more details:- Visit:- https://www.technologyuserlists.com/veeam-users-list/ Call: 213 377 2747  Email: info(a)technologyuserlists.com  Address: 16237 W Washington Blvd, Los Angeles-90066, California

1 0

NZ Working From Home Traffic Profile
by ahmad.saeed＠huawei.com 01 Apr '20

01 Apr '20

With lots of New Zealanders and other countries citizens are working from home and the jump in residential Broadband traffic, I am interested in the NZ operators observations. There are few published charts in the NZ Herald article from Chorus and UFF showing phenomenal increase in traffic. In my opinion this is an event that we should document and learn from. I have few questions 1) The jump in residential day time peak ~2PM , is it equal to a drop in business daytime peak ? 2) How do you explain the jump in night time peak (probably people are not going out and are now streaming at home?

13 22

IANA AS Numbers Registry Update
by Selina Harrington 01 Apr '20

01 Apr '20

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to the RIPE NCC: 210332-211355 Assigned by RIPE NCC 2020-04-01 211356-212379 Assigned by RIPE NCC 2020-04-01 212380-213403 Assigned by RIPE NCC 2020-04-01 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

Buy Updated Realtors Email List
by alliciawills1212＠gmail.com 31 Mar '20

31 Mar '20

Get access to verified real estate mailing list and reap business success The real estate industry is one of the fastest growing sectors and if you have products and services aligned with the industry you should invest in the mailing lists. At Mail Prospects we provide b2b campaign ready US relators email list database that will help you connect with key decision makers in the real estate sector. Compiled from veritable sources, the email list of real estate agents is free from errors, duplicates or erroneous data. Each of the mailing data is accurate, responsive and SMTP checked. Though the real estate agent email list is sourced from business directories, trade shows or conferences, they are collated into one large and exhaustive database. This facilitates seamless communication with major decision makers ensuring that global campaigns get an edge. The lists help marketers build strong business association. For assured campaign success, buy real estate agent email list and get assured success through multichannel campaigns. For more details:- Visit:- https://mail-prospects.com/industry-mailing-lists/realtors-email-list/ Call: 17028158511 Email: info(a)mail-prospects.com Address: Mail Prospects LLC,848 N Rainbow Blvd, Las Vegas,Nevada 89107, United States

1 0

IANA AS Numbers Registry Update
by Selina Harrington 05 Mar '20

05 Mar '20

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following block to AFRINIC: 328704-329727 Assigned by AFRINIC 2020-03-05 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

spark sip trunk config on a cisco isr/cube
by Blair Harrison 05 Mar '20

05 Mar '20

Hi Folks, Does anyone have a reference config for Cisco CUBE for connecting to Spark's SIP trunk service? Assume I am missing something simple here as incoming working fine but outgoing gets 404s. Cheers, Blair

2 2

Chorus lab tour - Auckland - March 11
by Nathan Ward 24 Feb '20

24 Feb '20

Hi all, Our friends at Chorus have put together a tour of their Auckland lab for the NZNOG community. Details are below. Any questions, please drop either myself or Brent Marquis a line. If you haven’t been to the Chorus lab, it’s certainly an interesting place to check out, and will be a good chance to ask questions and see how some cool technologies work. Note that you do not need to be a Chorus customer to attend - but per below you do need to be a network operator of some description so we can keep it technical and conversation free flowing. -- The NZNOG Chorus Lab Tour Off the back of a couple of talks at the NZNOG 2020 conference, Chorus would like to keep the NZNOG community engagement running. We would like to offer a tour of the Chorus fibre lab, hosted by Brent and Kurt. This will certainly have a Chorus Network Technology and innovation focus, not sales and marketing :) We will provide a guided tour of the lab - showcasing new innovations like Hyperfibre and WiFi ONTs alongside a view of the physical network deployment and a demo of air blown fibre. It will be an open session where you can ask the hosts questions as we go. To top it off, will put on some nibbles and drinks after the tour. There are a couple of important points… This session is anticipated to be attended by the trusted NZ network operator community, and we encourage attendees to be open and forthcoming with their questions and discussion As such, this is not open to the public outside the trusted NZ network operator community. The NZNOG community traditionally comprises RSPs, LFCs, NZ telcos, and those operate a sizeable IT network or other critical infrastructure. We collect some information at registration to assist with this. That information will not be retained or used for any purpose other than verifying attendee eligibility. If the event gets too big, we reserve the right to cancel registrations. Be aware this is on a weekday! The Fibre lab is located in Auckland (on Kyber Pass Road) – you’ll need to make your own way there. We do have some parking available, although, note the ‘drinks’ bit below. The finer details: Wednesday 11th March, 3pm. Nibbles and drinks (alcoholic and non-alcoholic beverages supplied) at conclusion of the tour. Registrations are open: https://www.eventbrite.co.nz/e/nznog-chorus-lab-tour-registration-951135802… <https://www.eventbrite.co.nz/e/nznog-chorus-lab-tour-registration-951135802…> -- Nathan Ward

1 0

20 Lonely Quotes: All From Masterpieces
by marchenry1916＠gmail.com 14 Feb '20

14 Feb '20

When faced with loneliness and solitude, sometimes it is comforting to read materials on this topic that echo with our own feelings and perhaps offer a new perspective. In this article the most inspiring 20 lonely quotes from world literature are selected, aimed to help us take a better look at this phenomenon. Nobody likes being alone that much.I don't go out of my way to make friends, that's all.It just leads to disappointment. “Where are the people?” Resumed the little prince at last. “It's a little lonely in the desert…” “It is lonely when you're among people, too,” said the snake. https://cwordsworth.com/lonely-quotes/

1 0

Why does storytelling work for both business and consumers
by kingcomputertechreview＠gmail.com 10 Feb '20

10 Feb '20

Research shows that 65% of the conversations we have with other people involve some element of storytelling, whether it’s relaying a personal story or sharing gossip about someone else. https://hapticmedia.fr/blog/en/storytelling/

1 0

Spoofer Report for NZNOG for Jan 2020
by CAIDA Spoofer Project 08 Feb '20

08 Feb '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jan 2020: none inferred Source Address Validation issues inferred during Jan 2020: ASN Name First-Spoofed Last-Spoofed 4768 VFNZ-INET 2019-09-14 2020-01-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

APNIC EC Elections
by Jonathan Brewer 06 Feb '20

06 Feb '20

Hi All, Elections for the APNIC Executive Committee are now open. If you don't spend a lot of time working outside of NZ, you may not know the candidates well. I've had the pleasure of working with several & thought I'd offer some endorsements. While all the nominees may be skilled, I think a few have gone above & beyond with contributions to their communities & deserve your support. *Achie Atienza* for his work with phNOG *Kams Yeung* a current EC member who has worked with a very long list of NOGs *Sumon Sabir* for his work with bdNOG, SANOG, & IGF activities Thanks, Jon

1 0

Lightning talks
by Richard Nelson 30 Jan '20

30 Jan '20

We have a lightning talks session this afternoon. There are still spaces left. Please email talks(a)nznog.org (mailto:talks(a)nznog.org) if you would like to present. Thanks, Richard

1 0

NZNOG 2020 Streaming
by Dave Mill 30 Jan '20

30 Jan '20

Hi all https://youtu.be/yHEadTFFFpg Note, this URL may change but our website will always have an up to date URL. www.nznog.org Cheers Dave

2 2

Fwd: RIP: Bill Manning
by Mark Foster 28 Jan '20

28 Jan '20

Not sure how many of you read NANOG. We hosted Bill at NZNOG 2009 in Auckland, and Dunedin 2008. May he rest in peace. -------- Original Message -------- From: Brett Watson <brett(a)the-watsons.org> Sent: 28 January 2020 9:34:44 AM NZDT To: nanog(a)nanog.org Subject: RIP: Bill Manning I was saddened to see this yesterday, that Bill Manning had passed. I was surprised this morning that it hadn’t hit NANOG yet but thought I’d post something because I have a ton of respect for Bill as I’m sure many here do. I met Bill as a very young, thought-I-knew-everything network engineer around ’92 when I was starting my internet life at a small ISP in Houston. Bill was visiting Stan Barber @ Sesquinet, which was my upstream provider at the time via T1, if I remember it all correctly. I was young, fresh out of college with a CS degree, and learning this “internet thing.” I met with Bill on campus at Rice University to discuss networking/routing, and Bill taught me CIDR, which I had no f-ing idea at that time what it was. Bill was always gracious and willing to share/teach. We always chatted and stayed in touch at NANOG and IETF conferences and through his relationship with Los Nettos over the years. Most notable, to me, was 2007 when my youngest daughter was diagnosed with cancer, and I believe Bill’s wife had (or previously battled) cancer as well. I hadn’t seen Bill for a few years, but he immediately reached out, shared his positive thoughts/prayers, and kept in touch during the battle we went through. Bill cared about people, and as noted below, he was smart as hell, and always had a crazy idea for how to solve a problem. Also as noted in Rod’s note below, Bill had a wealth of music knowledge and could always recommend something new and interesting to listen to. I’ll definitely miss Bill, and his passing makes me feel the years, and the mileage, but in a good way. -b >> This morning I talked to Julie Manning, Bill's wife. Bill died early >> Saturday morning, at home in Oregon. Most of you know Bill was >> waiting for a new heart. He would perhaps have gotten one next >> month. I guess the old one just wouldn't hold out long enough. >> >> I first met Bill in about 1995, when I returned to ISI after my first >> stint in Japan. He had taken a position in the Los Nettos project at >> ISI, a regional network project in the days when Internet service and >> operations work was still heavily shared between business and >> academia. Bill brought an operator's eye to the project, often seeing >> things differently from the researchers in the group. >> >> Bill kept the most erratic hours of any non-student I've ever met. He >> might be in the office at 2am or at 2pm, either was equally likely. >> I'd ask, "Bill, what time did you come in?" He'd reply, "10am." "I >> was here before that, and you were already here, it must have been >> earlier." "Greenwich Mean Time." >> >> And in one phase of life, "Bill, where do you live?" "Seat 4A." He >> would speculate about his average altitude and speed over the previous >> month. >> >> And, like any good geek, Bill had a spectacular collection of tie-dye >> t-shirts. He came by the look honestly: growing up in the Bay Area, >> he had actually snuck into Grateful Dead rehearsals held in a barn, >> and had traveled as a deadhead for a while. >> >> At ISI, we called Bill "the bad idea fairy". He always brought a >> slightly-off-kilter view of technical problems, which triggered >> endless discussions of fascinating, if usually implausible, >> alternatives. >> >> He had the most broad-ranging musical tastes of anyone I knew, and >> would eat almost anything (though, like me, he didn't drink alcohol). >> I was often envious of his eating and musical experiences. He >> certainly lived life to its fullest. >> >> On one occasion, I recall, we were eating lunch in a Thai restaurant >> for the first time. Bill called for the food "the way you'd make it >> in Thailand". The waiter went back into the kitchen and came out with >> a few raw Thai chiles. Bill ate one whole, without even breaking a >> sweat. The owner of the restaurant immediately came out to see who >> was eating them. Pam became a friend to our group. >> >> On other occasions, when the waiter asked for his order, Bill would >> point to another person at the table, and say, "I'll have what she's >> having." "Well, what is she having?" "I don't know, I haven't heard >> her say." Once in a while, he would point to someone else in the >> restaurant and say, "I'll have what they are having." It was funny >> and sometimes disconcerting, which was very Bill, and it was also his >> way of making sure he himself was eating (and thinking and doing) as >> broadly as possible, without getting stale. >> >> Bill worked in a bakery before joining Texas Instruments and >> accidentally falling into computer networking. (When we first met, he >> was commuting between Houston and L.A.; Julie and the kids were still >> in Houston.) I believe he attended a series of colleges but never >> finished his bachelor's degree. Just a few years ago, however, Jun >> Murai convinced him to get a Ph.D.; this took clearing administrative >> hoops to demonstrate that Bill's life experience matched that of a >> bachelor's degree, which it certainly did. I was honored to be on his >> Ph.D. committee. I literally created a "trouble ticket" accounting >> scheme to track change requests for his thesis. >> >> Bill was a valued member of the WIDE Project here in Japan. He worked >> with the DNS root operations group here, and participated in as many >> WIDE meetings as he could. He also came to Keio University's Shonan >> Fujisawa Campus when he was in Japan, and one of the best things about >> Bill was how seriously he took the students and their work, treating >> them like adult colleagues. >> >> Bill had friends on all seven continents, and for all I know on the >> International Space Station, as well. He was loved by us all. >> >> Julie does not plan to have a funeral immediately, so there is no need >> for flowers or the like. The family may do a memorial service in Utah >> in the spring. >> >> He was a unique and wonderful human being. And a good friend. >> Rest in peace, Bill. >> >> —Rod > -- Sent from a mobile device.

1 0

Re: Need emergency source for Chorus ONT power supply, or equivalent.
by Paul Adshead 26 Jan '20

26 Jan '20

Good option. Offline replies have also pointed me towards CDL and PBTech which are selling the same item (which includes a tiny UPS), as well as an offer of borrowing a genuine part. Thanks, Paul. On Mon, 27 Jan 2020, 09:23 Matthew Harrison (Primo), <matthewh(a)primo.nz> wrote: > Yeah cut it off the old one and splice it to the new one, I run all my > onts off 12v batteries with a charger > > Kind regards > Matthew Harrison > The Top Dog / Managing Director > The information transmitted, including attachments, is intended only for > the person(s) or entity to which it is addressed and may contain > confidential and/or privileged material. Any review, retransmission, > dissemination or other use of, or taking of any action in reliance upon > this information by persons or entities other than the intended recipient > is prohibited. If you received this in error, please contact the sender and > destroy any copies of this information. > ------------------------------ > *From:* Paul Adshead <paul.adshead(a)gmail.com> > *Sent:* Monday, January 27, 2020 9:13:01 AM > *To:* Matthew Harrison (Primo) <matthewh(a)primo.nz> > *Cc:* nznog <nznog(a)list.waikato.ac.nz> > *Subject:* Re: [nznog] Need emergency source for Chorus ONT power supply, > or equivalent. > > It needs the weird molex(?) Connector on the end though. > > On Mon, 27 Jan 2020, 09:10 Matthew Harrison (Primo), <matthewh(a)primo.nz> > wrote: > > Any 12v psu will do... > > Kind regards > Matthew Harrison > The Top Dog / Managing Director > The information transmitted, including attachments, is intended only for > the person(s) or entity to which it is addressed and may contain > confidential and/or privileged material. Any review, retransmission, > dissemination or other use of, or taking of any action in reliance upon > this information by persons or entities other than the intended recipient > is prohibited. If you received this in error, please contact the sender and > destroy any copies of this information. > ------------------------------ > *From:* Paul Adshead <paul.adshead(a)gmail.com> > *Sent:* Monday, January 27, 2020 09:09 > *To:* nznog > *Subject:* [nznog] Need emergency source for Chorus ONT power supply, or > equivalent. > > Chorus are sending a replacement, but I need options to buy or borrow one > for a number of days. Central/West Auckland location. > > Single point of failure and all that - doh.. > > Cheers, > Paul Adshead. > >

1 0

Re: Need emergency source for Chorus ONT power supply, or equivalent.
by Paul Adshead 26 Jan '20

26 Jan '20

It needs the weird molex(?) Connector on the end though. On Mon, 27 Jan 2020, 09:10 Matthew Harrison (Primo), <matthewh(a)primo.nz> wrote: > Any 12v psu will do... > > Kind regards > Matthew Harrison > The Top Dog / Managing Director > The information transmitted, including attachments, is intended only for > the person(s) or entity to which it is addressed and may contain > confidential and/or privileged material. Any review, retransmission, > dissemination or other use of, or taking of any action in reliance upon > this information by persons or entities other than the intended recipient > is prohibited. If you received this in error, please contact the sender and > destroy any copies of this information. > ------------------------------ > *From:* Paul Adshead <paul.adshead(a)gmail.com> > *Sent:* Monday, January 27, 2020 09:09 > *To:* nznog > *Subject:* [nznog] Need emergency source for Chorus ONT power supply, or > equivalent. > > Chorus are sending a replacement, but I need options to buy or borrow one > for a number of days. Central/West Auckland location. > > Single point of failure and all that - doh.. > > Cheers, > Paul Adshead. >

1 0

Need emergency source for Chorus ONT power supply, or equivalent.
by Paul Adshead 26 Jan '20

26 Jan '20

Chorus are sending a replacement, but I need options to buy or borrow one for a number of days. Central/West Auckland location. Single point of failure and all that - doh.. Cheers, Paul Adshead.

1 0

NZNOG2020 - Programme Available.
by Richard Nelson 22 Jan '20

22 Jan '20

The complete programme is now available at http://www.nznog.org/nznog-2020/nznog-2020-programme Registrations are going well. We are on track to just beat last years record attendance. Richard

1 0

Open Network User Group - Wellington network meetup 23/1/2020
by Alex White-Robinson 20 Jan '20

20 Jan '20

Kia ora koutou, I've been running a User Group in Wellington for the last three months - it's a place to discuss network implementations in the datacentre, service-provider or enterprise arena. The stated interests of the group are network ecosystem tools including monitoring and configuration deployment, as well as network technology topics ranging from protocol options to ASIC choices. To date, the user group has covered techologies including automatic pre-change testing, EVPN implementations in the DC, infrastructure as code and IPAM software. Our next meeting is on Thursday the 23rd of January, from 16:30 in the Thistle Inn, with a short (20 minute) talk from 5:15 in the Katherine Mansfield room. This month, we have a short presentation on monitoring and a demo of setting up prometheus, grafana & alertmanager as a network monitor suite. You can track the talks, published code repositories and slide decks @ https://www.meetup.com/Open-Network-User-Group. Registration/RSVP is not required for those wishing to attend. Cheers, Alex White-Robinson.

1 0

The Times Change
by Donald Neal 20 Jan '20

20 Jan '20

Work is under way to remove Vocus New Zealand's AS9790 from Auckland Peering Exchange. This does not reflect a change in Vocus NZ's open peering policy and does not involve other Vocus AS's. In particular, there is no change to AS4826. * Donald Neal Donald Neal | Network Architect D: +64 9 929 2958E: Donald.Neal(a)vocusgroup.co.nz M: +64 27 808 1023W: vocusgroup.co.nz A: Level 5, 34 Sale St, Auckland 1010

3 2

Waikato Uni Contact for list.waikato.ac.nz?
by Simon Lyall 20 Jan '20

20 Jan '20

Anyone got a contact for the admins of list.waikato.ac.nz ? I looked at their contact page but it seems to be directed at staff/students. The problem is that https://list.waikato.ac.nz/ is not working on some browsers (Chrome, curl) and giving a cert error. It would appear the following intermediate cert: issuer=/C=BM/O=QuoVadis Limited/CN=QuoVadis Global SSL ICA G3 (which is the one that signs list.waikato.ac.nz) is the problem. It appears that it is built into firefox which is okay and possibly was included in Chrome in the past. https://www.waikato.ac.nz includes this intermediate cert in replies so it is not affected. -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

2 2

NZNOG 2020 brought to you by Cisco
by Nathan Ward 15 Jan '20

15 Jan '20

Hi all, NZNOG 2020 registrations are filling up, so if you’re a “late registerer” it’s worth getting in there ASAP so as not to miss out. http://www.nznog.org/nznog-2020 <http://www.nznog.org/nznog-2020> As you all know it’s based in Christchurch this year, so if you’re local and haven’t been to an NZNOG conference you should come along. We move the NZNOG conference around so that we can make it more accessible to people in each region, so, please take advantage of that! There’s a number of tutorials and workshops happening in the 2 days before the conference - most of these will appeal to any organisation with a router or two, not just service providers. They are really good value - thanks to the generosity of the trainers and our sponsors, what NZNOG charges for these is less than our costs, so much better value than industry training you’ll often see. Our conference keynote speaker is Dr. Paul Vixie, who’s also running one of those tutorials - Threat Hunting Using Passive DNS. This is a pretty rare chance get some training from one of the pioneers of the Internet and modern computing. This would be a great one if you’re more of an enterprise network as well as for service providers. This email will almost certainly reach you due to software Paul has written - cron, bind, dhcpd.. you get the idea. We’ve also got Red Hat providing a couple of different training sessions on Containers, and using Ansible for network config. APNIC are running a course on BGP basics, and another on ROA validation - very important if you’re doing any sort of BGP or peering these days. Sponsors this year are of course on our sponsors page - http://www.nznog.org/nznog-2020/sponsors-2020 <http://www.nznog.org/nznog-2020/sponsors-2020>, and include Cisco, InternetNZ, GoWireless, NZIX, Red Hat, Vocus, and Vodafone. Our sponsors make the NZNOG conference a reality and keep our prices low, so please check out our sponsors page for the full list, and make sure you thank them! -- Nathan Ward

1 0

citylink dns is down
by Jean-Francois Pirus 15 Jan '20

15 Jan '20

Their name servers are not responding. Anybody know how to contact them? It's a bit hard with their website and email not working :-) ns_name_01: ns1.citylink.co.nz ns_ip4_01: 202.8.44.226 ns_name_02: ns3.citylink.co.nz ns_ip4_02: 202.8.47.10 dig citylink.co.nz @202.8.44.226 dig citylink.co.nz @202.8.47.10 status: SERVFAIL -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

8 11

2talk Down
by Jesse Archer 30 Dec '19

30 Dec '19

...what a day for faults... Any Vocus / 2talk engineers on the list? 2talk website is down, sip packets are failing after this hop: 4 27-111-14-76.2talk.co.nz (27.111.14.76) 5.794 ms 7.590 ms 6.658 ms [image: facebook] <https://www.facebook.com/fullflavour.co.nz/> [image: twitter] <https://twitter.com/myfullflavour> Jesse Archer General Manager Full Flavour 07 579 9999 jesse(a)fullflavour.nz http://fullflavour.nz 148 Durham Street, Tauranga 3110

3 2

NZIX (AKL-IX) Route Servers BGP Flapping
by Jesse Archer 30 Dec '19

30 Dec '19

Started just after 6pm last night, 9 flaps since. Doesn't appear to be a problem with any of our bi-lats on AKL-IX. Can't get hold of anyone on the NZIX or IAA NOC numbers. [image: facebook] <https://www.facebook.com/fullflavour.co.nz/> [image: twitter] <https://twitter.com/myfullflavour> Jesse Archer General Manager Full Flavour 07 579 9999 jesse(a)fullflavour.nz http://fullflavour.nz 148 Durham Street, Tauranga 3110

2 1

Looking for a Microsoft operational contact
by Neil Gardner 17 Dec '19

17 Dec '19

I have a couple of questions about some regular traffic spikes we're seeing to parts of our infrastructure from various Microsoft owned prefixes around the world - if there's anyone from Microsoft on here that might be able to help me chase it up, please get in touch directly so I can understand if this is by design and has a purpose or is something one of us has to fix. Regards ________________________________ [spark] Neil Gardner Network Engineer Spark New Zealand T +64 4 802 9659 (extn 40659) M +64 27 651 9993 E Neil.Gardner(a)spark.co.nz Spark New Zealand Trading Limited ________________________________ This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Contract and Commercial Law Act 2017.

2 1

High Packet Loss using ADSL on Flip/Vocus Networks
by geoffrey.jackson＠protonmail.com 13 Dec '19

13 Dec '19

Prolonged periods of high packet loss. Started all of a sudden about a month ago. Was fine until then. Getting 14 Mbps with no jitter or packet loss. Now only getting 0.3 to 0.8 Mbps with lots of jitter and 12.5% packet loss. Can be bad for hours and then all of a sudden good for a few hours but then bad again. OK for email but too slow for browsing. Flip, my ISP, say they can't help. They advise that I go to fibre but I don't need it and I can't afford it. I might have to go through Telecommunications Dispute Resolution (TDR). Before I do I was wondering if anyone here might be able to explain what's going on. Like is Flip throttling my ADSL service to get me to go over to fibre? Or does Vocus need to upgrade its network to cope with all the new fibre users without marginalizing copper users? Any comments or advice would be much appreciated. Thanks.

2 2

NZNOG 2020 - Registrations are open!
by Dave Mill 28 Nov '19

28 Nov '19

Hi all Registrations are open to NZNOG 2020. http://www.nznog.org/nznog-2020 If you are a speaker or sponsor you should have received a discount code. If you haven't please contact us before attempting to register. Talks accepted so far have been published - http://www.nznog.org/nznog-2020/nznog-2020-talks We have some awesome training available on the Tue/Wed - http://www.nznog.org/nznog-2020/nznog-2020-tutorials We have discounted accommodation available, first in, first served - http://www.nznog.org/nznog-2020/nznog-2020-accommodation Look forward to seeing you there! Cheers Dave

1 0

Delivery Status Notification (Delay)
by Simon Lyall 22 Nov '19

22 Nov '19

Second go. On Sat, 23 Nov 2019, Simon Lyall wrote: > > This is a test message. Waikato recently moved their ouutgoing email to > google who likes to tell us every time emails are delayed by an hour. > > Since netspace.net.nz and whoever Perry uses for mail hosting are down we are > getting a few of these. > > In theory you won't see this but putting an explanation just in case you do. > > Simon. > NZNOG Moderator > > -- > Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ > "To stay awake all night adds a day to your life" - Stilgar > _______________________________________________ > NZNOG mailing list -- nznog(a)list.waikato.ac.nz > To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz > > -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

1 1

Delivery Status Notification (Delay)
by Simon Lyall 22 Nov '19

22 Nov '19

This is a test message. Waikato recently moved their ouutgoing email to google who likes to tell us every time emails are delayed by an hour. Since netspace.net.nz and whoever Perry uses for mail hosting are down we are getting a few of these. In theory you won't see this but putting an explanation just in case you do. Simon. NZNOG Moderator -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

1 0

Emergency Mobile Alert Nationwide Test 24th November
by Damian Kissick [TSY] 20 Nov '19

20 Nov '19

Kia Ora all, The Ministry of Civil Defence & Emergency Management will be testing the Emergency Mobile Alert system between 18:00hrs and 19:00hrs this Saturday (24th November). MCDEM has sent out a formal notification via their lifeline channels, but we thought it would nice to give a general heads up to NZNOG as the alert refers to www.civildefence.govt.nz. Feedback from network operators is welcome at opsteam at dpmc.govt.nz Cheers, - Damian -- Senior Network Engineer Corporate and Shared Services The Treasury / DPMC & MCDEM [UNCLASSIFIED] -- CONFIDENTIALITY NOTICE The information in this email is confidential to the Treasury, intended only for the addressee(s), and may also be legally privileged. If you are not an intended addressee: a. please immediately delete this email and notify the Treasury by return email or telephone (64 4 472 2733); b. any use, dissemination or copying of this email is strictly prohibited and may be unlawful.

2 2

BGP / Dedicated Server Option
by Matthew Matters 20 Nov '19

20 Nov '19

Hey Guys, We are an Australian hosting provider and in search of a NZ based dedicated server for a customer. We are struggling to find a reasonably priced server with BGP from a trusted company. Any replies off list would be greatly appreciated Regards, Matthew Matters Managing Director / CEO of Aus Net Servers Australia Pty Ltd Management Department | Small Business Hosting Sales & Services | Aus Net Servers Australia Pty Ltd P 03 5326 0050 | M 0402 711 135 | E mmatters(a)ausnetservers.net.au<https://www.ansamail.com.au/owa/redir.aspx?C=106998d21b72497a98b44c48875775…> | W www.ausnetservers.net.au<http://www.ausnetservers.net.au/>

3 2

FW: [AusNOG] Heads up: Super awful FreePBX RCE
by Mark Foster 19 Nov '19

19 Nov '19

NZNOG’s been a bit quiet lately! This might be of interest or relevance to NZ Operators, so FYI… Cheers Mark. From: AusNOG <ausnog-bounces(a)lists.ausnog.net> On Behalf Of Rob Thomas Sent: Wednesday, 20 November 2019 4:24 pm To: <ausnog(a)lists.ausnog.net> <ausnog(a)lists.ausnog.net> Subject: [AusNOG] Heads up: Super awful FreePBX RCE If you have any FreePBX machines floating around, now is the time to make sure they're up to date, ESPECIALLY if they're visible from the interwebs. https://www.reddit.com/r/VOIP/comments/dypp36/20191119_critical_freepbx_sec… I backdated it for those yanks who are living in the past, but it was discovered this morning. The quick summary is it's a trivial exploit, with the ability to escalate to a root shell - which means a pwned machine, all the attacker needs is unauthenticated visibility to any of the admin pages. Feel free to hit me up offlist if you need any more info. And yes, it was my code that was vulnerable, but in my defence it was 12 year old code, and the vulnerability was only just discovered now 8) --Rob

1 0

IPv6 Global Unicast Address Assignments Registry Update
by Selina Harrington 06 Nov '19

06 Nov '19

Hi, The IPv6 global unicast address assignments registry has been updated to reflect the allocation of the following block to ARIN: 2630:0000::/12 You can find the registry at: https://www.iana.org/assignments/ipv6-unicast-address-assignments/ The allocation was made in accordance with the Policy for Allocation of IPv6 Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/allocation-ipv6-rirs-2012-02-25-en Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

The Times Change
by Donald Neal 04 Nov '19

04 Nov '19

BGP sessions for Vocus New Zealand’s AS9790 with the Auckland Peering Exchange’s route servers were shut down this morning. This does not reflect a change in Vocus NZ’s open peering policy and does not involve other Vocus AS’s. In particular, there has been no change to AS4826. * Donald Neal Donald Neal | Network Architect D: +64 9 929 2958<tel:+64%209%20929%202958> E: Donald.Neal(a)vocusgroup.co.nz<mailto:Donald.Neal(a)vocusgroup.co.nz> M: +64 27 808 1023<tel:+64%2027%20808%201023> W: vocusgroup.co.nz<http://vocusgroup.co.nz> A: Level 5, 34 Sale St, Auckland 1010 [cid:image979000.jpg(a)682DCA25.913A1343]<http://www.vocusgroup.co.nz/> Donald Neal | Network Architect D: +64 9 929 2958E: Donald.Neal(a)vocusgroup.co.nz M: +64 27 808 1023W: vocusgroup.co.nz A: Level 5, 34 Sale St, Auckland 1010

1 0

The Times Change
by Donald Neal 29 Oct '19

29 Oct '19

Work is under way to remove Vocus New Zealand's AS9790 from Auckland Peering Exchange. We plan to shut down our peering with the exchange route servers in the coming fortnight. This does not reflect a change in Vocus NZ's open peering policy and does not involve other Vocus AS's. In particular, there is no change to AS4826. * Donald Neal Donald Neal | Network Architect D: +64 9 929 2958E: Donald.Neal(a)vocusgroup.co.nz M: +64 27 808 1023W: vocusgroup.co.nz A: Level 5, 34 Sale St, Auckland 1010

1 0

FW: [pacnog] APRICOT 2020 Fellowships
by Terry Sweetser 15 Oct '19

15 Oct '19

On behalf of APNOG and FYI, see below. Regards, Terry Sweetser General Manager, IX Australia Terry.Sweetser(a)ix.asn.au -----Original Message----- From: pacnog-bounces(a)pacnog.org <pacnog-bounces(a)pacnog.org> On Behalf Of Philip Smith Sent: Wednesday, 16 October 2019 9:09 AM To: PacNOG <pacnog(a)pacnog.org> Subject: [pacnog] APRICOT 2020 Fellowships Hi everyone, Fellowships for APRICOT 2020 can now be applied for! If you meet the eligibility criteria as per: https://2020.apricot.net/fellowship/overview/ please apply via that URL. Applications close on Monday, 28th October at 23:59 (UTC +8). Successful candidates will be notified from 22nd November onwards. The 2020 Programme ------------------ APRICOT provides financial support to network operators and engineers from these developing economies to build their Internet infrastructure capacity, network with Internet network professionals, and assist their professional development. The APRICOT 2020 Fellowship programme is especially interested to receive applications from qualified candidates living and working outside the major urban centres in the Asia & Pacific region. Women are especially encouraged to apply. What's included --------------- Successful fellows will receive: - 100% of the registration fees to either the workshop or conference - 100% of the accommodation costs (up to six nights for the workshop and up to five nights for the conference) - A contribution towards airfare and per diem up to a total of USD 400 for Australia/New Zealand based fellows and USD 700 for Asia & Pacific based fellows. More information ---------------- For more information about the key dates, eligibility and selection criteria, please visit: https://2020.apricot.net/fellowship/overview/ General Guidelines ------------------ To help with your application, please provide the information asked for. Personal CVs and employer mission statements are not suitable answers to any of the questions. Applicants should also seek approval from their employers before applying, as this will avoid disappointment later on. We look forward to receiving your application! Best wishes, Rupesh Shrestha, Aftab Siddiqui, Philip Smith APRICOT Fellowship Committee Chairs -- _______________________________________________ pacnog mailing list pacnog(a)pacnog.org https://mailman.apnic.net/mailman/listinfo/pacnog

1 0

Spoofer Report for NZNOG for Sep 2019
by CAIDA Spoofer Project 07 Oct '19

07 Oct '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Sep 2019: ASN Name Fixed-By 55850 TRUSTPOWERLTD 2019-09-18 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2019: ASN Name First-Spoofed Last-Spoofed 4768 VFNZ-INET 2019-09-14 2019-09-14 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Call for Papers - NZNOG 2020 conference
by Richard Nelson 11 Sep '19

11 Sep '19

Yes it is that time again - plan your talks... The NZNOG trustees invite papers for the 17th annual NZNOG conference, to be hosted at the Rydges Latimer Hotel in central Christchurch on 30 and 31 Jan 2019. With the conference there will be a three day Workshop 27-29 Jan and a day of tutorials on 29 Jan. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in talks that involve real world deployment experience, particularly in New Zealand. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 28 Oct (Labour day). Please provide your talk title, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements you need to let us know at submission time. This year conference registration for accepted presenters will be free. To submit your paper please e-mail: talks(a)nznog.org Proposals will be evaluated on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog-2020/call-for-papers-2020 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

A very interesting presentation from NLNOG
by Mark Prior 08 Sep '19

08 Sep '19

Do yourself a favour and spend some time reading this presentation. <https://nlnog.net/static/nlnogday2019/3_NLNOG_day_2019_Erik_Bais_Working_un…> Mark.

3 2

Re: A very interesting presentation from NLNOG
by Scott Weeks 06 Sep '19

06 Sep '19

--- mrp(a)mrp.net wrote: From: Mark Prior <mrp(a)mrp.net> Do yourself a favour and spend some time reading this presentation. <https://nlnog.net/static/nlnogday2019/3_NLNOG_day_2019_Erik_Bais_Working_un…> -------------------------------------------- I learned this lesson long ago. It was really important for my mental health to do what it says. Try it. scott _______________________________________________ NZNOG mailing list -- nznog(a)list.waikato.ac.nz To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz

1 0

Invitation to participate in DMARC bootcamp
by Save Vocea 02 Sep '19

02 Sep '19

Dear NZNOG list members, (Apologies for any cross-posts as I’ve shared in regional NOG lists as well) Just thought I’d share this here in case there are interested ppl/orgs from NZ that want to join. Please read below. Regards, Save Vocea (ICANN.org staff in Oceania) ---<start>--- Link for registration: https://mailchi.mp/1833debd40eb/dmarcbootcamp On September 9th, GCA will start a 6-week DMARC Bootcamp. This bootcamp will guide participants to implement a DMARC - an effective way to limit the spoofing of email from protected domains. This bootcamp will guide participants to implement policy level of “none” after becoming acquainted with DMARC within the first few weeks. By the end of the bootcamp, participants will have enough information and confidence to move to the highest DMARC policy level of “reject” immediately or within a few months. DMARC is considered the industry standard for email authentication to prevent attacks in which malicious third parties send harmful email using a counterfeit address. DMARC stops email impersonation - by implementing DMARC, domains lower the odds of their domains being spoofed and used for phishing attacks on recipients. The result of a domain not implementing any form of DMARC policy is exposing its recipients to possible phishing attacks and, unsurprisingly, 91% of all cyber-attacks begin with a phishing email. Since June 2016, the Global Cyber Alliance (GCA) has been working to accelerate adoption of DMARCthrough advocacy, by providing a set of easy-to-use tools, and campaigns to drive deployment. GCA also measured the economic impact of DMARC. In just a few short years, GCA’s DMARC initiative has resulted in more than 5,700 organizations across more than 180 countries adopting DMARC. This has led to estimated financial benefits of more than $19 Million USD in 2018 across a diverse array of industries and governments. Moreover, the $19M estimate is merely from GCA’s activity. GCA’s other partners, including nonprofit organizations, commercial vendors, governments, and enterprises are also deploying and supporting the deployment of DMARC. For these organizations, the most-affected 1% of them will save $302,000 per year solely from reducing business email compromise (BEC) through DMARC, even assuming only 1% of BEC emails lead to action. If that number grows to 5%, the loss reduction for that 1% is $1.3M per year. Adding that up across the Internet is a big number, and that is from BEC losses alone. Starting September 9, GCA will run a 6 weeks bootcamp to enable organizations to learn about DMARC and support them in its implementation. Every step of the way, GCA and partners will assist with resources and guidance, including multiple webinars and demonstrations. (Please note that the below is subject to change and additional webinars and resources may be added as needed) • Timings for Webinars: Wednesday of each week o 7am EST (12pm BST, 1pm Paris), o 12pm EST (9am PST, 5pm BST, 6pm Paris) , o 12am EST (12pm Singapore, 2pm Sydney, AU) The agenda will be as follows: Weeks 1-2: Getting Started Overview of DMARC, SPF and DKIM Weeks 3-4: Time to Implement! Demonstrations on how to implement DMARC on Windows DNS, BIND and a Cloud-based DNS Provider. Weeks 5-6: On Going Management: Analyze, Review and Adjust What to look for in DMARC reports and what needs to be adjusted before moving to an enforcement policy More details on the modules are here: Weeks One-Two: Getting Started Sept 10th - Bootcamp introduction and DMARC: An Overview (60 min) This is the first webinar of the DMARC Bootcamp series. We will provide a brief overview of the bootcamp and then an overview of DMARC. Sept 18th - What are SPF and DKIM? (60 min) In this session we will be going over SPF and DKIM. We’ll cover the basics and options of performing DKIM key generation and signing. Weeks 3-4: Time to Implement! Sept 24 and Sept 30 - DMARC Technical Details and Windows DNS (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on Windows DNS. Sept 25 and Oct 2 - DMARC Technical Details and BIND (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on BIND server (Linux). Sept 26 and Oct 3 - DMARC Technical Details and Cloud DNS (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on Google Cloud DNS and 1&1.com<http://1.com>. Weeks 5-6: On Going Management: Analyze, Review and Adjust We will have multiple webinars from DMARC partners regarding DMARC reporting and next steps. Date and times are being set for these. Additional information and links will be forthcoming as the bootcamp advances. Please register for the bootcamp in order to receive the link for all of the webinars. Sign up to join the bootcamp and get updates about our Webinars and other resources as they become available. Please join us by registering at https://mailchi.mp/1833debd40eb/dmarcbootcamp . If you have any questions, contact gca-dmarc(a)globalcyberalliance.org<mailto:gca-dmarc(a)globalcyberalliance.org> .

1 0

[Misc] Research project on blacklists
by Anushah Hossain 16 Jul '19

16 Jul '19

Hi everyone, I'm a researcher at UC Berkeley and the International Computer Science Institute. My colleagues and I are working on evaluating and improving the accuracy of blacklists. As part of this work, we'd like to hear from you about the blacklists you currently use, what you perceive as their strengths and weaknesses, and any thoughts you have on how they might be improved. We've prepared an anonymous survey where you can share your views: https://berkeley.qualtrics.com/jfe/form/SV_200mg5hnQiAOgUl If you have five to ten minutes free today to fill it out, I would greatly appreciate your help! Thank you, and please don't hesitate to respond to me with comments or questions. (Apologies if you receive this message twice - trying to minimize cross-posting while still reaching a broad audience) Best, Anushah -- Anushah Hossain, PhD Student Energy and Resources Group, UC Berkeley

1 0

Using Cloudflare after Christchurch
by Peter Lambrechtsen 09 Jul '19

09 Jul '19

I don't think this question has been asked but I think it's worth asking. After the Christchurch attacks and the fact that Cloudflare clearly support terrorist and white supremacist sites has there been any consideration on if peering or engaging with Cloudflare is something that providers no longer wish to participate in. Or there isn't a sense of morality when it comes to the internet. Cloudflare have a LONG history of not caring about any and all vile material and have absolutely no intention to do anything about it from the engagements I have had with them post Christchurch. https://arstechnica.com/tech-policy/2017/05/cloudflare-changes-abuse-policy… https://www.theregister.co.uk/2018/12/19/cloudflare_terror_groups/ https://suespammers.net/tag/cloudflare-com-doing-nothing-about-spam-abuse/ https://krebsonsecurity.com/tag/cloudflare/ https://www.propublica.org/article/how-cloudflare-helps-serve-up-hate-on-th… To me they are clearly supportive of all sorts of vile content and have zero interest in doing anything about it while they still earn money. Has the horrific events of Christchurch given anyone pause to think if they want to engage with Cloudflare? Are morals important when running a service?. Peter

9 20

Shutting down the RPKI Validator
by Sebastian Castro 03 Jul '19

03 Jul '19

Hello, community: Back in 2014 InternetNZ (NZRS at that time) set up and made publicly available an RPKI Validator (validator.rpki.net.nz). It allows network engineers to test ROA validation in their routers without the hassle of setting up and maintaining their own. During the last five years, very little use has been given to the validator, with one registered user during that time. Currently, we are using a piece of old software that’s no longer maintained. With that in mind, we’d like to announce we’ll be shutting down validator.rpki.net.nz on 15 July 2019. We might rebuild the service if there is a need from the community using modern software, so please let us know if you would like it back. In the meantime, we appreciate the involvement of the NZNOG community with the validator, including a couple of presentations making reference to the service in the last years. Kind Regards, -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

decent SOHO switches?
by Richard Hector 01 Jul '19

01 Jul '19

Hi all, I hope this isn't too far off topic. What's available in the way of managed switches (at least including 802.1q VLANs) at a suitable price for a small office? The (8-port) one I bought 4 years ago, even at the time the https ui didn't work, because browsers had stopped supporting old certs or ciphers or something. I raised it with the wholesaler, who raised it with the manufacturer - no new firmware ever came out. I couldn't load my own cert onto it either. Is there anything better around, at a reasonable price? I'm not keen on what I understand is the cisco model either, where you have to maintain a support contract to get any updates. Stretching even further - I don't suppose there's anything out there with fully Free (as in freedom) firmware? Does SDN give us that? Feel free to reply off-list if you don't want to promote (or disparage) your suppliers (or self) in public :-) Cheers, Richard

5 8

IANA AS Numbers Registry Update
by Selina Harrington 12 Jun '19

12 Jun '19

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to APNIC: 139578-140601 Assigned by APNIC 2019-06-12 140602-141625 Assigned by APNIC 2019-06-12 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

IPv6 Global Unicast Address Assignments Registry Update
by Selina Harrington 06 Jun '19

06 Jun '19

Hi, The IPv6 global unicast address assignments registry has been updated to reflect the allocation of the following block to the RIPE NCC: 2a10:0000::/12 You can find the registry at: https://www.iana.org/assignments/ipv6-unicast-address-assignments/ The allocation was made in accordance with the Policy for Allocation of IPv6 Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/allocation-ipv6-rirs-2012-02-25-en Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

AusNOG 2019 Call for Presentations.
by Terry Manderson 18 May '19

18 May '19

Colleagues, Here starts the AusNOG 2019 Call for Presentations. I'm sure you have all been waiting with bated breath! AusNOG 2019 will be held on the 5th and 6th of September at Sofitel Melbourne. As usual we are making a call for people to submit proposals for talks at AusNOG 2019 that would be of interest to the Internet operations community, ie technical presentations and not sales talks. Previous year's feedback has strongly suggested that AusNOG participants prefer to hear from operators. So, we are especially looking for operators to share what they know! (for example, sharing experiences about the NBN, deployments, or things that truely impact operations). Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Speaking slots are typically 30 minutes, including Q&A time, although we can accommodate a limited number of requests for 45/60 minute slots. We would also entertain requests for 15 minutes. There will be a call for lightning talks (5 minutes) closer to the event. By submitting a presentation for consideration in the AusNOG 2019 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Presenters receive complimentary registration while those not selected will be offered registration at the early bird rate. Deadlines =-=-=-=-= 21 June: Submission of presentation title, presentation description (300 words), and presenter biography (150 words) 19 July: Presenters notified of their acceptance status as an AusNOG 2018 presentation. 16 August: Submission of final presentation slides as PowerPoint, Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions MUST be sent by email to organisers AT ausnog DOT net. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. Cheers Terry

1 0

Anyone using vMX for BNG?
by Jesse Archer 23 Apr '19

23 Apr '19

Happy Easter All. Wondering if anyone has any experience with Juniper vMX in BNG scenario? I'm investigating how we could scale beyond 4000 subs on our existing Juniper hardware. Regards, *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

3 2

Network roll call
by Jamie Baddeley 16 Apr '19

16 Apr '19

Hi, So Don's post made me think about how many networks do we have active today at 30 years old. What have I missed or which ones shouldn't be on here? So I skimmed the Chorus service providers list and the Wispa list but I didn't bother with the ISPANZ list or the NZNOG list (sorry mods) and came up with this (the count is the number of times they appeared in the Chorus Regions or WISPA list): 15 Wireless Nation 15 PrimoWireless 14 Worldnet 14 Warner Telecommunications Ltd 14 Wanna 14 Voyager 14 Vorco 14 Vodafone 14 Vocus 14 Telnet 14 Spark Digital 14 Solarix Networks Limited 14 Slingshot 14 SecureCom 14 PlanB 14 Orcon 14 New Zealand Technology Group 14 Network Edge 14 NOW 14 Kordia 14 Kiwilink 14 Inspire Net 14 HD Net 14 Business Technology Group 14 ACS Data 14 2degrees 13 Devoli 13 DTS 12 Xtreme Networks 12 2Talk 11 MyRepublic 10 Digital Island 9 nzwireless 9 Trustpower 6 Lightwire 5 Lightwire Business 5 Compass 4 Smartlinx 3 3 Vector 3 Trust Power 3 Hi-Tech Solutions 3 Fusion Networks 3 Fastcom 3 CityLink 2 Velocitynet 2 Unifone 2 NorthCloud 2 Network Tasman 2 Gisborne.net.nz 2 Bryte Internet Solutions 1 yrless 1 Zelan 1 Wireless Dynamics 1 Wifi Connect 1 Wicked Networks 1 Wanna Internet 1 WIZwireless 1 Vibe Communications 1 VelocityNet 1 Unicom New Zealand Ltd 1 Ultimate Broadband 1 The Pacific.net 1 Taylor Communications 1 OnNetworks 1 NetSpeed 1 Megatel 1 MATnet 1 Kiwi Wifi 1 Inspire 1 Fusion 1 Ezykonect 1 Evolution Networks 1 CountryNet 1 Connecta 1 AoNet Broadband 1 Amuri Here's the same list but using the Chorus Residential (instead of business) list: 15 Vorco 15 Vodafone 15 Slingshot 15 PrimoWireless 15 Devoli 14 Worldnet 14 Warner Telecommunications Ltd 14 Wanna 14 Telnet 14 Stuff Fibre 14 Spark 14 Orcon 14 New Zealand Technology Group 14 NOW 14 MyRepublic 14 Kiwilink 14 Inspire Net 14 ICONZ 14 Econofibre 14 Compass 14 Big Pipe 14 2degrees 14 2Talk 13 Skinny Broadband 12 Trustpower 10 Voyager 9 Vocus 8 nzwireless 6 Unlimited Internet 6 Nova Energy 4 Smartlinx 3 4 Farmside 3 Wireless Nation 2 Velocitynet 2 Unifone 2 Speedster Ltd 2 NorthCloud 2 Megatel 2 Gisborne.net.nz 1 yrless 1 Zelan 1 Wireless Dynamics 1 Wifi Connect 1 Wicked Networks 1 Wanna Internet 1 WIZwireless 1 VelocityNet 1 Unicom New Zealand Ltd 1 Ultimate Broadband 1 The Pacific.net 1 Taylor Communications 1 OnNetworks 1 NetSpeed 1 MATnet 1 Lightwire 1 Kiwi Wifi 1 Inspire 1 Gisborne 1 Ezykonect 1 Evolution Networks 1 CountryNet 1 Connecta 1 Bryte 1 AoNet Broadband 1 Amuri And this is the two combined (with some edits to remove obvious overlaps). For those of you with big numbers, you win a biscuit. But as an aside 80 different brands operating in either wireless or fibre. Wow! 30 Wanna 30 PrimoWireless 30 Inspire 29 Vorco 29 Vodafone 29 Slingshot 29 Devoli 28 Worldnet 28 Warner Telecommunications Ltd 28 Telnet 28 Spark 28 Orcon 28 New Zealand Technology Group 28 NOW 28 Kiwilink 28 2degrees 26 2Talk 25 MyRepublic 24 Voyager 24 Trustpower 23 Vocus 19 Compass 18 Wireless Nation 17 nzwireless 14 Stuff Fibre 14 Solarix Networks Limited 14 SecureCom 14 PlanB 14 Network Edge 14 Kordia 14 ICONZ 14 HD Net 14 Econofibre 14 Business Technology Group 14 Big Pipe 14 ACS Data 13 Skinny Broadband 13 DTS 12 Xtreme Networks 12 Lightwire 10 Digital Island 8 Smartlinx 3 6 Unlimited Internet 6 Nova Energy 4 Velocitynet 4 Unifone 4 NorthCloud 4 Gisborne.net.nz 4 Fusion 4 Farmside 3 Vector 3 Megatel 3 Hi-Tech Solutions 3 Fastcom 3 CityLink 3 Bryte 2 yrless 2 Zelan 2 Wireless Dynamics 2 Wifi Connect 2 Wicked Networks 2 WIZwireless 2 VelocityNet 2 Unicom New Zealand Ltd 2 Ultimate Broadband 2 The Pacific.net 2 Taylor Communications 2 Speedster Ltd 2 OnNetworks 2 Network Tasman 2 NetSpeed 2 MATnet 2 Kiwi Wifi 2 Ezykonect 2 Evolution Networks 2 CountryNet 2 Connecta 2 AoNet Broadband 2 Amuri Discuss! cheers jamie

4 3

Internet in NZ: 30 years today
by Don Stokes 16 Apr '19

16 Apr '19

Since nobody else seems to have noticed ... ... today is the 30th anniversary of the Internet reaching NZ. On 16 April 1989, John Houlker plugged in the PACCOM link connecting the University of Waikato, via an analogue circuit on the ANZCAN cable,to the University of Hawaii and thence to the Internet. https://www.youtube.com/watch?v=98xdUWja_aM Also of note was that on 1 April 1989, the Telecommunications Amendment Act 1988 came into force, formally ending the century-old NZPO/Telecom regulated telecommunications monopoly. (The de-facto monopoly took a bit longer to dismantle.) -- Don Stokes, don(a)nz.net <mailto:don(a)nz.net>, 021 796 072

3 7

LocalCloud IaaS | service closure
by Peter Mott 15 Apr '19

15 Apr '19

Hello NZNOG'ers! A quick heads up that I have closed down LocalCloud’s VMware IaaS clusters in Auckland and Hamilton. For me this means semi retirement. I would like to thank the folk here who have helped us along the way from the mid 1990’s through to today. First with 2Day Internet, and then LocalCloud. It’s been a blast, but it's now time for me to find other things to occupy my time. I will for the time being continue to take care of the .AQ (Antarctica) ccTLD and a hand full of customers who migrated to Microsoft Azure. We have some useful IPv4 net blocks we would like to transfer to another APNIC member. Also available is a bunch of Dell (compute and storage) and Juniper kit (EX and MX series). None of this is free, but I am keen to move it on so we can get our living room back! Please indicate your interest by contacting me off list. So long, and take care out there. regards Peter Mott LOCALCLOUD LIMITED +64 21 279 4995 -/-

2 1

IPv6 Global Unicast Address Assignments Update
by Selina Harrington 12 Mar '19

12 Mar '19

Hi, The IPv6 Global Unicast Address Assignments registry has been updated to reflect the allocation of the following block to the RIPE NCC: 2001:3c00::/22 RIPE NCC 2019-03-12 You can find the registry at: https://www.iana.org/assignments/ipv6-unicast-address-assignments/ Best regards, -- Selina Harrington Lead IANA Services Specialist

1 0

IPv4 Recovered Address Space Update
by Selina Harrington 01 Mar '19

01 Mar '19

Hi, The IPv4 Recovered Address Space registry has been updated according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… The global policy can be found at: https://www.icann.org/resources/pages/allocation-ipv4-post-exhaustion-2012-… Kind regards, -- Selina Harrington Lead IANA Services Specialist

1 0

APNIC EC ELECTION - NOMINATIONS
by Justin Kaitapu 18 Feb '19

18 Feb '19

Dear Members, Initially, I was aware that being nominated to the Executive Council Member election for APNIC would be a challenge for anyone in the Pacific Region, mainly due to proportion and members within our Pacific Region. Having being nominated, I'm humbled to at least give it a try. I seek your support and vote for the Executive Council Member of APNIC, if voted in, quite humbly I will be your voice for Oceania within the Council. It is in my view that having a member within the Pacific Region will be advantageous to all of us. I understand the voting process is a simple matter for those of you who are members of APNIC, using your access to your myapnic and just follow the voting tab. For more details and information on APNIC EC Election Nominees, please refer to https://conference.apnic.net/47/elections/nominations/ I thank you in advance for your support. Malo, Justin Kaitapu | | | EziNET Tonga Ltd Dateline Bld, Hala Bypass, Ma'ufanga, Nuku'alofa P.O Box 2867, Kingdom of Tonga. South Pacific. P (+676) 550-0000 | M (+676) 875-1853 (+64) 2825587361 | justin.kaitapu(a)ezinet.to<mailto:justin.kaitapu(a)ezinet.to> ------------------------------------------------------------------------ Notice of Confidentiality: "This e-mail and any attachments to it (the "Communication") is, unless otherwise stated, confidential, may contain copyright material and is for the use only of the intended recipient. If you receive the Communication in error, please notify the sender immediately by return e-mail, delete the Communication and the return e-mail, and do not read, copy, retransmit or otherwise deal with it. Any views expressed in the Communication are those of the individual sender only, unless expressly stated to be those of relevant business or entity of the sender, we do not accept liability in connection with the integrity of or errors in the Communication, computer virus, data corruption, interference or delay arising from or in respect of the Communication."

1 0

Vodafone mail admin contact
by Richard Gray 13 Feb '19

13 Feb '19

Hi, Can anyone on the list put me in contact with an email administrator at Vodafone? We (SMX) have been seeing mail delivery problems to Vodafone properties (vodafone.co.nz, clear.net.nz, etc) from several locations for the past day or so. Please contact me off list. Thanks, -- *Richard Gray* | Operations Technical Lead *Mobile:* +64 21 050 8178 *DDI:* +64 9 950 2196 *Freephone:*0800 SMX SMX (769 769) *SMX Limited:* Level 10, 19 Victoria Street West, Auckland, New Zealand SMX | Cloud Email Hosting & Security <https://smxemail.com> _____________________________________________________________________________ This email has been filtered by SMX. For more info visit http://smxemail.com _____________________________________________________________________________

5 5

Spoofer Report for NZNOG for Jan 2019
by CAIDA Spoofer Project 07 Feb '19

07 Feb '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jan 2019: none inferred Source Address Validation issues inferred during Jan 2019: ASN Name First-Spoofed Last-Spoofed 55785 MAXUM 2017-02-18 2019-01-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

DNS flag day - more info somewhere?
by Richard Hector 30 Jan '19

30 Jan '19

Hi all, I hope this is more or less on topic ... I've been testing my zones with the tool at https://dnsflagday.net/ and getting results I don't entirely understand. I get errors from my secondary (ns2), which is a service from my VPS provider, and ok from my master (ns1), which I run myself. But apart from ns2 returning an aa flag for a failed query, I can't see any difference in the results, when I run the query manually from my desktop (having upgraded dnsutils to one that supports +nocookie) Additionally, the tool says an SOA record is returned (from the failed query), and I don't see that. Is there more detailed info somewhere? The tool does say my zone will continue to work but will have issues in the future, so I'm not immediately worried. Cheers, Richard

4 5

Call for Lightning talks
by Richard Nelson 30 Jan '19

30 Jan '19

We have a slot for lightning talks tomorrow afternoon in the NZNOG conference. Talks should be five minutes or less. If anyone has a talk that they would like to give, could you please email the title, and topic (one sentence) to talks(a)nznog.org Thanks, Richard

1 0

NZNOG 2019 - About to get underway, incl. streaming link
by Nathan Ward 30 Jan '19

30 Jan '19

Hi! We’re about to get underway with NZNOG 2019. Great to see everyone here. Reminder that the programme is on the website, and on the screens in the lobby. The stream will be available at http://thevideo.nz/nznog <http://thevideo.nz/nznog> during the sessions. This will 302 to Youtube, but the Youtube URI will change each session, so hit this each time and it’ll get you there. It’s on the website as well. -- Nathan Ward

1 0

Slack trial / potential use case at conference
by David Young 28 Jan '19

28 Jan '19

Hey NZNoggers, I see that there's a trial of Slack for realtime/conference discussions (http://www.nznog.org/slack) I'm keen to try this out pre-conference, and I understand (above) that I need an existing member to invite me. Can an existing NZNOG slack member please message me off-list to setup an invite? Thanks! D

2 1

Re: [nznog] Tongan Internet Outage
by Mehmet Akcin 27 Jan '19

27 Jan '19

resending without the attachment - i have uploaded here instead. https://twitter.com/mhmtkcn/status/1089759385373425670 On Sun, Jan 27, 2019 at 9:33 PM Mehmet Akcin <mehmet(a)akcin.net> wrote: > here is an interesting datapoint. I believe the cable repair ship that is > going to Tonga is TE Subcom's Reliance. > > https://www.marinetraffic.com/en/ais/home/shipid:711444/zoom:9 > > [image: Screen Shot 2019-01-27 at 9.31.16 PM.png] > > On Sun, Jan 27, 2019 at 6:25 PM Mehmet Akcin <mehmet(a)akcin.net> wrote: > >> Interesting and thank you for sharing >> >> I am running https://dev.networkatlas.org >> >> If you have any more data, i would love to update. >> >> Mehmet >> >> On Sun, Jan 27, 2019 at 16:17 Pete Mundy <pete(a)fiberphone.co.nz> wrote: >> >>> >>> There was an interview with the deputy CEO of Tonga Communications Corp >>> in Dateline Pacific on Friday which had some more information for those >>> interested: >>> >>> >>> https://www.radionz.co.nz/international/programmes/datelinepacific/audio/20… >>> >>> It mentions that the breaks in the two separate cables are 5km apart yet >>> occurred at the same time. >>> >>> The interviewee's comments suggest that the satellite provider may be >>> putting thumbscrews on for long-term commitments before approving >>> additional capacity. >>> >>> It's a shame Google don't have a spare loom balloon to send their way to >>> patch into some Facebook style satellite laser backhaul! >>> >>> >>> > On 28/01/2019, at 12:59 PM, Mark Foster <blakjak(a)blakjak.net> wrote: >>> > >>> > Surprised I hadn't seen much news on this, tripped over it whilst >>> looking >>> > into other things. >>> > >>> > >>> https://www.radionz.co.nz/international/pacific-news/381086/tongans-urged-t… >>> > >>> > Related articles indicate that there's two breaks to submarine cables >>> > offshore and they don't know what caused it yet, but it's likely to be >>> at >>> > least a week before repairs are completed. >>> > Limited capacity in the interim (Satellite only, maybe?) >>> > >>> > Cheers >>> > Mark. >>> >>> _______________________________________________ >>> NZNOG mailing list >>> NZNOG(a)list.waikato.ac.nz >>> https://list.waikato.ac.nz/mailman/listinfo/nznog >>> >> -- >> Mehmet >> +1-424-298-1903 >> >

1 0

Tongan Internet Outage
by Mark Foster 27 Jan '19

27 Jan '19

Surprised I hadn't seen much news on this, tripped over it whilst looking into other things. https://www.radionz.co.nz/international/pacific-news/381086/tongans-urged-t… Related articles indicate that there's two breaks to submarine cables offshore and they don't know what caused it yet, but it's likely to be at least a week before repairs are completed. Limited capacity in the interim (Satellite only, maybe?) Cheers Mark.

3 2

New Chorus ONT - ACS changes required.
by Brent Marquis 24 Jan '19

24 Jan '19

Hi folks, It is looking to me like some of the technical detail around this is not getting through to all of the right people In all of the right RSPs. The important headline is that if you are an RSP and use the POTS port on our ONTs for your voice service, you *MUST* make ACS updates or voice will not work on the new ONT. If you weren’t in the meeting we had on Wednesday afternoon and you look after an RSP ACS for UFB ONTs, can you please get in touch. We are running an internal staff trial for the new ONTs from 4th Feb, with production launch early March. When the production launch hits, the new ONT will be popping up on Chorus UFB connections (new installs and fault replacements). Further detail here, but please get in touch with myself and/or your SDM if you have questions or need any assistance. https://sp.chorus.co.nz/product-update/3rd-generation-ont-phase-1-rollout-s… Thanks, Brent Brent Marquis Senior Network Design Engineer T +64 4 8964169 M +64 27 2290923 E Brent.Marquis(a)chorus.co.nz PO Box 632 Wellington 6011 www.chorus.co.nz Aon Hewitt Best Employer in Australasia 2012-2017 Aon Hewitt Best of the Best Employers in Australasia 2015  Please consider the environment before printing this e-mail _______________________________________________________________________________ The content of this email (including any attachments) is intended for the addressee only, is confidential and may be legally privileged. If you’ve received this email in error, you shouldn’t read it - please contact me immediately, destroy it, and do not copy or use any of the content of this email . No confidentiality or privilege is waived or lost by any mis-transmission or error. This communication does not designate an information system for the purposes of Part 4 of the Contract and Commercial Law Act 2017. Although we have taken reasonable precautions to ensure no viruses are present in this email, we cannot accept responsibility for any loss or damage arising from the use of this email or its attachments.

1 0

Conference updates
by Richard Nelson 21 Jan '19

21 Jan '19

Conference registrations have now reached 162 people. This is the highest number I can recall for any NZNOG conference. For catering we will cap registrations at 170 so we are down to the final few places left. The programme for this year is now available: http://www.nznog.org/nznog-2019/nznog-2019-programme Richard

1 0

DNS Flag day - What you need to know
by Sebastian Castro 15 Jan '19

15 Jan '19

Hello: Starting in July 2018 InternetNZ has been monitoring and measuring how .nz domains will be affected by DNS Flag day. For those who don't know, DNS Flag Day, or 1 February 2019, has been set by a number of DNS software developers as a coordinated day to release new DNS software versions. The changes will remove DNS protocol workarounds related to EDNS. You can find more information at https://dnsflagday.net InternetNZ has been actively notifying affected DNS Operators, Registrars and Registrants in the past weeks, and the situation has greatly improved. If you haven't tested your authoritative nameservers, we strongly suggest you do. There are still a few high profile .nz domains affected. I'll be presenting about this topic during the next NZNOG meeting in Napier, with a description of what's changing, how the problem has been evolving for .nz and other interesting bits and pieces. There are a number of DNS software implementors involved, as well as a number of ccTLDs measuring and campaigning to reduce the number of domains affected. If you have any questions or comments, feel free to contact me. Cheers, -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Old Telstra Saturn Cable infrastructure in wellington.
by Jamie Baddeley 13 Jan '19

13 Jan '19

Hi, I had reason to try and contact Vodafone over the weekend due to some concerns about the mechanical integrity of their ageing overhead cable network. Basically there was a bit that was in danger of getting snagged by a bus or similar. No one on the helpdesk had a clue. The fact that they had overhead wires in a city in NZ seemed like a complete surprise to them. I'm emailing here because the standard routine did not work. This after being routed to several different desks. Does anyone here know how one would resolve an issue like this? Are VF even using this stuff anymore? If not, when are they going to start taking it down so apparent mismanagement of the "asset" doesn't pose a risk to the public? If they are still using it can someone advise the right place to call to get it quickly resolved? Or at least when someone says 'overhead cable infrastructure fault' the response is not 'you'll have to ring Chorus'. cheers jamie

4 4

NZNOG Slack
by Nathan Ward 09 Jan '19

09 Jan '19

Hi all, Some of you may have noticed that we recently added another page to the website describing the NZNOG Slack we're trialling. This particular one was created a few years back for conference organisation stuff, but we’re opening it up to others. Slack is a commercial chat product, which is used pretty widely by tech companies[1]. We’re using the free plan right now. We’ll see if we qualify for the non-profit thing to get the extra features, but, not really important at the minute. ** Why: There’s a few different Slacks in related industries in NZ that work really well, and most people I interact with professionally are in a couple of Slacks. It’s really useful to be able to drop someone a quick message, where email isn’t quite the right tool. The goal of the Slack is to facilitate real time conversations between people, and build some more direct relationships. You can have private chats with people when you’re debugging something. You can ask in the public channels for people to send you some traceroutes. You can post funny networking related things in the #random channel. You get the idea. The key really is real time. Also: If you have a clever idea for an integration that’s useful for NZ operators, please, let me know. Write a bot for your looking glass, that sort of thing. ** But what about: There is no intent to take away from the mailing list at all, and I would strongly encourage people to post important messages, requests, and all the usual stuff to this list in order to get a good audience. Of course, I’m aware of other places operators in NZ also discuss stuff that are not NZNOG - and we’ve no intent to take things away from those groups either. There is a #conference-2019 channel, for discussion of whatever’s going on at the conference, announcements, etc. In the past there’s been an IRC channel, and probably still is. ** What else should I know?: Some key notes: - The intent is that it’s for network operators in NZ, or people operating networks that touch NZ networks in some way. - Existing members can nominate new members through Slack itself, and then one of the admins will approve/reject. - The expectation is that discussions are not shared. - Don’t post secrets, passwords etc. There is a code of conduct, which you should read for more: http://www.nznog.org/slack/slack-code-of-conduct <http://www.nznog.org/slack/slack-code-of-conduct> ** How do I get on?: - We’re going to invite everyone who’s registered for the conference. I’m going to do that now, and update it with new registrations as they happen. - Ask someone who’s already on there, and they can nominate you. - Up until the conference, if you want on and the above don’t work, email me (nathan(a)nznog.org <mailto:nathan(a)nznog.org>) and tell me who you are and such, and I’ll invite you. -- Nathan Ward [1] Yes there are other “Free”, “Open”, etc. systems. Yes we could host our own system. The intent here is to get something that’s easy for the largest audience, and right now things tend to be looking towards Slack. This is a trial, so if something significantly better comes along then maybe we move to it - but let’s see if there’s value in this way of interacting first.

1 1

NZNOG 2019 Napier Update
by Dave Mill 09 Jan '19

09 Jan '19

Hi all Just an update on a few conference related things. We have so far sold 134 tickets to the conference proper. This puts us on track to be one of the biggest NZNOGs yet. This year we've specifically booked a large venue so we don't expect to sell out but who knows! Book soon if you want to be guaranteed a spot. Whilst we don't have a full programme just yet we've been updating the speaker list as we accept/confirm them - http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers TICSA workshop: After getting feedback on and off list we've arranged for a TICSA workshop at the conference. This is a practical session aimed at giving an operator the tools and knowledge to achieve TICSA compliance. A decent chunk of the session will be a tutorial on setting up OpenLI the free open source lawful intercept package ( https://openli.nz/ ) kicked off on this list, funded by our industry, and written by WAND. If you have TICSA obligations that you aren't currently achieving please come along. We also have two other workshops/tutorials available on SDN and network automation. Details here : http://www.nznog.org/nznog-2019/nznog-2019-workshop-and-tutorials Finally, for those of you who don't know, the NZNOG conference is made possible by the NZNOG Trust with support from InternetNZ. The NZNOG Trustees are currently: Dave Mill Richard Nelson Gerard Creamer Barry Murphy Nathan Ward Any questions please sing out on or off list. info(a)nznog.org Cheers Dave

1 0

Spoofer Report for NZNOG for Dec 2018
by CAIDA Spoofer Project 07 Jan '19

07 Jan '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Dec 2018: ASN Name Fixed-By 131291 LANWORXLIMITED 2018-12-09 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Dec 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-12-10 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

OpenBSD informal talk, Wellington, 23 January 2019
by Richard Procter 22 Dec '18

22 Dec '18

Hi, I'm posting this here at the suggestion of Dylan Hall and Neil Fenemor. A number of OpenBSD developers will be visiting Victoria University in January. As part of that, they will be giving an informal talk on what they have been working on recently, open to the public. A number of the OpenSSH and LibreSSL devs will be there, including Theo de Raadt, Bob Beck and Damien Miller, as well as one of the devs who spear-headed the OpenBSD response to Meltdown, among others. The venue is Lecture Theatre LBLT118, Laby Building, Victoria University, Wellington on 23 January starting at 14:00. Feel free to contact me if you've any questions. best, Richard.

2 1

CFP - INFOCOM19 ICCN Due on 30/12
by William Liu 10 Dec '18

10 Dec '18

INFOCOM19 1st International Workshop on Intelligent Cloud Computing &Networking (ICCN) - The Flyer URL (by tinyurl): https://tinyurl.com/infocom19-iccn-flyer - Info.+: https://tinyurl.com/infocom19-iccn Cheers Will(a)AUT, Auckalnd

1 0

CFP - ICC19 DDINS Due on 15 Jan
by William Liu 08 Dec '18

08 Dec '18

ICC19 1st International Workshop on Data Driven Intelligence for Networks & Systems (DDINS) URL (by tinyurl): https://tinyurl.com/icc19-ddins Cheers Will(a)AUT, Auckland

1 0

Spoofer Report for NZNOG for Nov 2018
by CAIDA Spoofer Project 07 Dec '18

07 Dec '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Nov 2018: none inferred Source Address Validation issues inferred during Nov 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-11-28 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Call For Presentations - DNS-OARC Workshop, Thailand, Bangkok, 12th/13th May 2019
by Sebastian Castro 05 Dec '18

05 Dec '18

(Apologies in advance if you see this message from multiple mailing lists) The 30th DNS-OARC Workshop will take place at the Shangri-La Hotel, Bangkok, Thailand, on May 12th and 13th 2019, hosted by ICANN. (Note that several co-located meetings are taking place immediately prior to the DNS-OARC Workshop, including the GDD Industry Summit, May 6th-9th, the Registrations Operations Workshop, May 9th, and the ICANN DNS Symposium, May 10th-11th.) The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A time slot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted until the start of the morning session on day two. There will be a Members-only session during the workshop, which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. Workshop Milestones: 05 Dec 2018 - Submissions open via Indico 22 Feb 2019 - Deadline for submission 01 Mar 2019 - Initial Contribution list published 22 Mar 2019 - Full agenda published 03 May 2019 - Deadline for slides submission 12 May 2019 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/31/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Shumon Huque, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Call for Interests to New Zealand SDN Workshop February 13th and 14th 2019 Wellington NZ
by William Liu 27 Nov '18

27 Nov '18

Call for Interests to New Zealand Software-Defined Networking (SDN) Workshop, February 13th and 14th, 2019 , Victoria University, Wellington. The workshop information can be found here (the Google Docs link is shortened by bitly): http://bit.ly/sdncon3 If with any inquire please do not hesitate to contact Associate Professor Dr Ian Welch <ian.welch(a)vuw.ac.nz<mailto:ian.welch(a)vuw.ac.nz>>. Cheers Will(a)AUT, NZ

1 0

KMZ help
by Mehmet Akcin 27 Nov '18

27 Nov '18

NZNOG friends, I am looking for help for https://dev.networkatlas.org project in NZ. I can't seem to be able to collect KZMs from people ;) if you are able to help us get KMZs (terrestrial) it would be great. thanks bunch in advance. ps; if you want to help in any other way, please reach out. mehmet

1 0

NZNOG 2019 registrations are open
by Dave Mill 26 Nov '18

26 Nov '18

Hi NZNOG 2019 registrations are open. Early bird pricing available for a limited time only! https://nznog-2019.lilregie.com/booking/attendees/new Conference details : http://www.nznog.org/nznog-2019 Current speakers (will be updated as we accept or pester more speakers) : http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers Accommodation : http://www.nznog.org/nznog-2019/nznog-2019-accommodation Hopefully see you there. Cheers Dave

1 0

Cisco routers for Beer
by Stuart Pigneguy 23 Nov '18

23 Nov '18

Hi All, Long time lurker here, just a quick note to see if anyone wants four Cisco 1720 routers before they go in the e-waste bin? There may also be other older Cisco kit on offer (Pix, switches etc). If there is interest please contact me off list with offers of postage and maybe beer, I am located in New Plymouth. Cheers, Stuart.

4 3

NZNOG 2019 update - registrations opening very soon
by Dave Mill 21 Nov '18

21 Nov '18

Hi all The NZNOG conference is being held in Napier during the week of 28 Jan to 1 Feb, 2019. The conference proper is held on the Thursday and Friday. Pricing and overview here - http://www.nznog.org/nznog-2019 We have scouted out accommodation for you - http://www.nznog.org/nznog-2019/nznog-2019-accommodation We have 3 different workshops available prior to the conference proper - http://www.nznog.org/nznog-2019/nznog-2019-workshop-and-tutorials We have accepted various talks and are starting to publish details on the following page - http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers If you haven't submitted a talk and are still keen please do so. We still have some time available. Registrations will open very soon! Feel free to book your travel and accommodation in the meantime. We have much more space for the conference proper than last year. Cheers Dave

1 0

Invitation to the free Domain Name Abuse Forum 27 November 2018 Wellington and evening stakeholder event
by Sebastian Castro 11 Nov '18

11 Nov '18

Hello NZNOG Community: InternetNZ and the Domain Name Commission are hosting a forum on domain name abuse issues in Wellington on Tuesday 27 November. There are various forms of abuse - content, infrastructure, and registration related - where the Domain Name System faces challenges, including challenges where other parties in the Internet ecosystem need to be part of the solution. This note is to let you know about the event as I thought it might be of interest to you. The programme draft is on our site along with registration at https://internetnz.nz/event/domain-name-abuse-forum Kind Regards, -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Spoofer Report for NZNOG for Oct 2018
by CAIDA Spoofer Project 07 Nov '18

07 Nov '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Oct 2018: none inferred Source Address Validation issues inferred during Oct 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-10-04 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Network atlas november 2018 update
by Mehmet Akcin 05 Nov '18

05 Nov '18

Hello everyone, We wanted to share several updates about our project Network Atlas with you. First of all we are very excited to announce now our page has many more features (and more to come) and hosted in a much more robust platform at www.networkatlas.org We've recently made a press release about our project , https://finance.yahoo.com/news/network-atlas-launches-map-global-221500875.… Now we are working on two major tracks 1) Raising funds via sponsorship and our kickstarter to be able to afford future of developments. 2) Talking to engineers , network professionals to understand what would make this tool better everyone. As you might be already aware we have a slack channel you can join and discuss/help the project. here is the slack channel link - https://join.slack.com/t/kapany/shared_invite/enQtNDUwOTIzMDEwODM4LWE5NjNmO… Overall we need network operators who have access to networks/fibre/route information and operational status as we are developing our self service portal which via GUI and API will enable you to be able to provide status of global fibre optic cables, and receive updates the same way. For more information about this project, and other ideas feel free to join our slack or email me directly at mehmet(a)networkatlas.org thank you and we will follow up with further updates in December 2018! We are very excited how far we came so far providing more visibility already ( even though we are just in demo state ) Mehmet Network Atlas https://angel.co/mhmtkcn

1 0

TICSA annual update required in November
by ticsa＠police.govt.nz 04 Nov '18

04 Nov '18

Hello NZNOG A reminder to all New Zealand Network Operators that it is November again, which means its time for your Designated Contacts to ensure the Chief Executive completes your annual TICSA update. Complete the update here -- TICSA Registration Portal: https://services.police.govt.nz/ticsa Information -- Police TICSA webpage: https://www.police.govt.nz/advice/businesses-and-organisations/ticsa Portal Issues -- Contact NZ Police TICSA Team: https://forms.police.govt.nz/forms/contact-ticsa-registrar/57 TICSA Legislation - Link to the act: http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5177923.html Excerpt from the act: ------------------------------------------------------------------------------------------------------ 69 Annual update (1) A network operator must give to the Registrar each year in November an annual update of information on the register relating to that operator. (2) The annual update must— (a) specify any changes to the information referred to in section 62 that have occurred since the network operator last gave information to the Registrar (whether in a notice under section 68, the previous annual update, or an application under section 61); and (b) confirm that, apart from the changes under paragraph (a), all other information referred to in section 62 that is currently held by the Registrar remains correct; and (c) be in the form (if any) required by the Registrar; and (d) be accompanied by a certificate signed by the chief executive of the network operator confirming that the information contained in the annual update is true and correct. (3) An annual update does not need to be provided in the year during which this section comes into force. ------------------------------------------------------------------------------------------------------ Thank you NZ Police TICSA Team. =============================================================== WARNING The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately

1 0

Papamoa UFF fibre outage
by Jesse Archer 31 Oct '18

31 Oct '18

Hey All, Did anyone get more details (or photos!) on the massive Ultrafast Fibre outage in Papamoa? https://ultrafastfibre.statuspage.io The fibre strike happened on Monday afternoon, the outage looks set to be resolved tonight (more than 48 hours since the outage began) which must be a record on the UFF network to date. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

5 5

NZNOG2019 CFP
by Richard Nelson 24 Oct '18

24 Oct '18

Yep, it is that time again... The NZNOG trustees invite papers for the 16th annual NZNOG conference, to be hosted at the Napier Conference Centre on 31 Jan and 1 Feb 2019. With the conference there will be a three day Workshop 28-30 Jan and a day of tutorials on 30 Jan. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in talks that involve real world deployment experience, particularly in New Zealand. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 29 Oct. Please provide your talk title, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements you need to let us know at submission time To submit your paper please e-mail: talks(a)nznog.org Proposals will be evaluated on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog-2019/call-for-papers-2019 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

2 1

Re: [nznog] Hurricane Electric joining APE
by Sid Jones 23 Oct '18

23 Oct '18

FYI: We will be standing up the first session tomorrow from 10am rs2.ape.nzix.net 192.203.154.2 2001:7fa:4:c0cb::9a02 From: <nznog-bounces(a)list.waikato.ac.nz> on behalf of Todd Dickason <todd.dickason(a)citylink.co.nz> Date: Thursday, 18 October 2018 at 17:31 To: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> Subject: [nznog] Hurricane Electric joining APE Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

4 5

Re: [nznog] Hurricane Electric joining APE
by Walt 19 Oct '18

19 Oct '18

We are very close When we do go live we value bilateral sessions more than over the route servers Please email peering(a)he.net to get a bilateral session Thanks Walt From: <nznog-bounces(a)list.waikato.ac.nz<mailto:nznog-bounces(a)list.waikato.ac.nz>> on behalf of Todd Dickason <todd.dickason(a)citylink.co.nz<mailto:todd.dickason(a)citylink.co.nz>> Date: Wednesday, October 17, 2018 at 9:31 PM To: "nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>" <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Hurricane Electric joining APE Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

1 0

Hurricane Electric joining APE
by Todd Dickason 17 Oct '18

17 Oct '18

Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

1 0

Internet for Kiwicon
by Mike Forbes 15 Oct '18

15 Oct '18

Could I have some contacts off list that would be willing to help out Kiwicon with a dedicated / reliable / fast internet link? Requirements are a fast (at least 100Mbit) connection and mostly international traffic (video streaming, CTF hosted in AWS Sydney) We're operating out of the Michael Fowler Centre in Wellington on the 15/16/17 November. The building is lit with Citylink fibre but Citylink are unable to help. Kiwicon is non profiting but we do have cash to make this happen, and i'd like to get it sorted! Thanks, Mike

1 0

LCA2019 Sysadmin Miniconf -- Call for Presentations
by Ewen McNeill 10 Oct '18

10 Oct '18

Linux.Conf.Au 2019 is being held in Christchurch, New Zealand near the end of January 2019 (21-25 January), the week before NZNOG 2019 (http://www.nznog.org/nznog-2019) -- thanks to NZNOG for moving from their regular slot to make it possible for those of us who like to attend both conferences. LCA2019 early bird tickets are on sale this month (https://linux.conf.au/attend/tickets/) As usual at LCA, we (Simon Lyall and I) are running a System Administration Miniconf as part of LCA2019, and I'd be quite keen to see some networking-related presentations. Perhaps someone would like to talk about GNS3 for network lab simulation? Or using Ansible / Salt for network configuration automation? Or anything around network monitoring/management. Or high performance networking on commodity hardware controlled by Linux? The LCA2019 Sysadmin Miniconf Call for Presentations is at: http://sysadmin.miniconf.org/cfp19.html and the text is included below for your convenience. Ewen PS: The Sysadmin Miniconf is part of LCA2019, so you'll need a ticket to LCA2019 to attend/speak the Sysadmin Miniconf or any other LCA2019 Miniconf. -=- cut here -=- Call for Presentations Linux.conf.au 2019 Systems Administration Miniconf There will be a one day mini conference on Linux Systems Administration held as part of linux.conf.au 2019. LCA2019 will be held in Christchurch, New Zealand on 21 - 25 January 2019. The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. This is our 13th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website: https://sysadmin.miniconf.org/. Presentation Topics =================== We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments large and small. Topics for presentations could include (but are not limited to): Virtualisation and Cloud Computing Kubernetes / Docker / Containers / Orchestration Infrastructure/Platform/Software as a Service (IAAS, PAAS, SAAS) Sysadmin Administration in a "serverless" environment (FAAS) DevOps and SysAdmin Culture Systems Administration Best Practice Monitoring and metrics. Collection, storage and presentation Networkng: IPv6, SDN (Software Defined Networking), performance DevOps, Configuration Management and provisioning Bootstrapping systems, Lifecycle Management Dealing with BYOD Backups in a virtual/distributed world Troubleshooting techniques Keeping legacy systems functioning War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in professional Unix/Linux administration (many in the audience will have decades of experience). Format of Presentations ======================= We are now seeking proposals for presentations at the mini-conference. We have openings for: 15-25 minute short presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA opening before morning tea), we expect the majority of available timeslots to be 20 minutes or less, with possibly 1-2 slightly longer talks if there is space in the schedule. We have a general policy of accepting a high proportion of proposals but handing out relatively short timeslots. Please see previous years Miniconf schedules for examples of how the programme is organised. Submitting talks ================ Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up by the time the conference happens) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor to priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. To submit a talk to the LCA2019 Sysadmin Miniconf, create an account on the LCA2019 website: https://linux.conf.au/dashboard create a speaker profile, and then select "SysAdmin Miniconf Talk" (in the "New Proposal" section of the Dashboard), or while logged into the LCA2019 site, go directly to: https://linux.conf.au/proposals/submit/sysadmin-miniconf/ Please pick a preferred length for your presentation from Short Presentation (15/20/25 minutes) or Lightning Talk (5/10 minutes) in the submission form; if you could do either (with more or less detail) use the Private Abstract field to describe the options and what you would prefer. In some cases we maybe able to add a few extra minutes to a few Short Presentations if there is any spare time left in the programme. Use the Private Abstract field to let us know a few more minutes would be useful for your presentation. Questions should be sent to: lca2019 at sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions, priority (both of inclusion and scheduling) will be given to presentations submitted by 23:59 (any time zone) on 31st of October 2018. If you have a good presentation idea, please let us know early, even if you need time to finalise the presentation abstract. Please let us know directly if you need an early confirmation to assist you in arranging time off work or travel; we will do our best to help. 2018-10-31 - Deadline for early submissions 2018-11-18 - Deadline for submissions 2018-12-04 - LCA2019 Sysadmin Miniconf programme published 2019-01-21 - LCA2019 Sysadmin Miniconf held (Christchurch, NZ) Contact and Questions ===================== Please see our website at https://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2019 at sysadmin.miniconf.org -=- cut here -=-

1 0

new subnet not accepted by smx
by Paul Willard 09 Oct '18

09 Oct '18

Anybody here from smx? I'm advertising a new subnet. Upstream (vocus) suggests that smx may have incorrect routes? Contact me off list paul(a)paulwillard.nz

1 0

KSK Roll coming 12th October
by Jay Daley 08 Oct '18

08 Oct '18

For those of you who don’t know, the KSK Roll is happening starting at 5am on 12th October (11th October 16:00 UTC). More details here https://www.icann.org/resources/pages/ksk-rollover The quick guide on how to check/prepare your DNS servers is https://www.icann.org/en/system/files/files/ksk-rollover-quick-guide-prepar… cheers Jay -- Jay Daley jay(a)daley.org.nz +64 21 678840 skype: jaydaley twitter: @jay_daley linkedin: www.linkedin.com/in/jaydaley

1 1

Spoofer Report for NZNOG for Sep 2018
by CAIDA Spoofer Project 07 Oct '18

07 Oct '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Sep 2018: ASN Name Fixed-By 4764 wideband-as-au 2018-09-01 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-09-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

IPv6 / Cisco ASA / 2degrees UFB
by Bill Walker 06 Oct '18

06 Oct '18

Hi All, I’ve been quite happily running a Cisco router at home on Snap/2degrees, but with the upgrade to UFB its not coping with the throughput. I’ve managed to locate a suitably equipped ASA, however I cant get IPv6 going. The config I have on the ASA is very similar to that of the router: nterface GigabitEthernet0/7 description 2degrees nameif EXTERNAL security-level 0 no ip address ciscoasa# sh run int gi0/7.10 ! interface GigabitEthernet0/7.10 description 2degrees vlan 10 nameif 2degrees10 security-level 0 pppoe client vpdn group 2degrees ip address pppoe setroute ipv6 address autoconfig ipv6 address dhcp ipv6 enable ipv6 dhcp client pd 2degrees-v6 However, if I remember correctly the IPv6 dhcp assignment happens inside the PPPoE connection once its established. Can anyone confirm that or provide a working config? In case someone wants versions, the ASA is on 9.9.2 (asa992-smp-k8.bin) Thanks, Bill Sent from Mail for Windows 10

6 8

Re: [nznog] Comcom/Samknows broadband testing from a different perspective
by Brian Cole 01 Oct '18

01 Oct '18

Hi all, Longtime listener; first time caller. I signed up to SamKnows (partly out of curiosity and partly so I can have hard data about my connection that I pay for) at home. Over the last week my connection has gone from slightly adequate with the occasional drop out to a slow connection with regular drop outs. Netflix and YouTube are stuttering, video games drop connection, and websites hang at random times. I can't help but think that the email shared by Dylan sheds some light on why that maybe. This programme won't be terribly successful if everyone gets sick of having a terrible connection during peak hours and shuts the white box down. Pretty frustrating. Brian -- *Brian Cole* */** Research Projects Developer* *Research & Enterprise **/** Research Office **/** University of Waikato* *Private Bag 3105* */* *Hamilton 3240* */* *New Zealand**www.waikato.ac.nz* <http://www.waikato.ac.nz/> */* *mob + 64 21 049 9183**email brian.cole(a)waikato.ac.nz <brian.cole(a)waikato.ac.nz> *

10 13

Comcom/Samknows broadband testing from a different perspective
by Dylan Hall 26 Sep '18

26 Sep '18

Hi all, I'm wearing my REANNZ hat today. I thought I'd share what we're seeing hosting the M-Lab [1] nodes in NZ that the new Comcom/Samknows [2] broadband testing are using for some of their tests. For a start, it looks like the testing has been ramping up over the last week (see attached graph), in particular during the evening (6pm-midnight). I had assumed the testing would be evenly spread out throughout the day, but it looks like they're concentrating the testing during the busy evening period. If anyone is interested in following how that traffic grows we have publicly available graphs for the two M-Lab nodes: AKL: https://weathermap.reannz.co.nz/node.php?src=and01&int=xe_0_0_9 WLG: https://weathermap.reannz.co.nz/node.php?src=and02&int=xe_0_2_7 If you want to try out the M-Lab nodes themselves, type "speedtest" into a Google search box and there is a "Run Speed Test" option that uses M-Lab (at least in my copy of Chrome, your mileage may vary). The nodes each consist of 4 x Dell servers front ended by a Juniper QFX switch. They're connected at 10Gbps. The nodes are fully run by M-Lab, we're just providing some address space and capacity. If anyone is concerned about their connectivity to REANNZ, we're on all the major NZ exchanges (APE, WIX, CHIX, AKL-IX) where we peer with the route servers. I note Comcom have posted a FAQ [3] on their website with some more details. The nodes are also IPv6 connected with addresses allocated from 2404:138::/32. It's worth noting we've been hosting M-Lab nodes for around 5 years now, but no one from Comcom or Samknows has spoken to us about the testing so it's all come as a bit of a surprise to us. If you have any interesting information to share, we'd like to know more :) [1] https://www.measurementlab.net [2] https://comcom.govt.nz/regulated-industries/telecommunications/monitoring-t… [3] https://comcom.govt.nz/__data/assets/pdf_file/0032/98276/SamKnows-technical… Thanks, Dylan

1 0

Hello Hurricane Electric, doubling the size of our domestic table?
by Michael Fincham 18 Sep '18

18 Sep '18

Hi all, So my domestic tables now have some 76,000 prefixes in them, as of ~ 6:30 last night. I guess hello HE and welcome to AKL-IX? Domestic table for NZ was more like ~ 10,000 prefixes not that long ago! -- Michael

14 30

Juniper Lab
by Jesse Archer 16 Sep '18

16 Sep '18

Hi All, I've got some config that I'd like to lab but my own kit is tied up in a transition. Wondering if anyone has a spare MX5-MX80 they would be willing to fire up to allow me to perform some tests. Unfortunately, vMX doesn't quite work in this case. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

VPS with BGP
by Mehmet Akcin 08 Sep '18

08 Sep '18

Hello NZNOG Friends, long time. I am looking for a VPS hosting firm which support BGP advertisements for DNS anycast (for my experiement) 200GB Disk, 16 GB Memory , 4core cpu and small bandwidth running 18.04 Ubuntu Please contact me offlist if you are able offer this. thank you -- Mehmet +1-424-298-1903

1 0

Spoofer Report for NZNOG for Aug 2018
by CAIDA Spoofer Project 08 Sep '18

08 Sep '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Aug 2018: none inferred Source Address Validation issues inferred during Aug 2018: ASN Name First-Spoofed Last-Spoofed 4764 wideband-as-au 2018-08-16 2018-08-17 131291 LANWORXLIMITED 2018-08-24 2018-08-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

RFC 8145 Root Trust Anchor Reports
by Matthew Luckie 06 Sep '18

06 Sep '18

>From http://root-trust-anchor-reports.research.icann.org/ : The ICANN org is publishing the IP addresses that are sending RFC 8145 telemetry ostensibly indicating that a resolver at the reported address (or another resolver that is forwarding through the resolver at the address) is validating using only KSK-2010 as a trust anchor. Publishing these addresses allows ISPs and other organizations who know who operates resolvers at those addresses to contact the resolver operator and notify them of the need to update their DNSSEC trust anchors. Without further action, these resolvers will stop working after the root KSK is rolled on 11 October 2018. http://root-trust-anchor-reports.research.icann.org/rfc8145-addresses.txt The following ASes have their country recorded as NZ in whois, and are in the ICANN list. The following resolvers may or may not be operated by the ASN identified. 4771 Spark 122.56.234.219 122-56-234-219.mobile.spark.co.nz. 122.57.192.56 122-57-192-56-adsl.sparkbb.co.nz. 122.61.118.222 122-61-118-222-adsl.sparkbb.co.nz. 219.88.186.152 rns6.xtra.co.nz. 222.153.3.78 222-153-3-78-fibre.sparkbb.co.nz. 222.154.149.63 222-154-149-63-fibre.sparkbb.co.nz. 9500 Vodafone 203.96.208.52 akrdns2.akl.vf.net.nz. 203.96.208.61 akrdns3.akl.vf.net.nz. 203.96.208.62 akrdns4.akl.vf.net.nz. 203.96.208.91 cbrdns1.chc.vf.net.nz. 203.96.208.92 cbrdns2.chc.vf.net.nz. 210.246.17.115 210-246-17-115.dsl.dyn.ihug.co.nz. 2407:7000:ff00:5382:bd9d::1 2407:7000:ff00:5382:bd9d::2 49.224.251.45 45.251.224.49.dyn.cust.vf.net.nz. 23655 SNAP 111.69.178.254 254.178.69.111.dynamic.snap.net.nz. 111.69.195.153 153.195.69.111.dynamic.snap.net.nz. 24183 DTS 202.174.180.228 38793 2degrees 118.148.149.52 52-149-148-118.nzcomms.co.nz. 118.149.151.121 121-151-149-118.nzcomms.co.nz. 45177 Vibe 45.64.48.2 cdns-02.as45177.net. 45179 SiteHost 103.250.234.202 103-250-234-202.static.webslice.co.nz. 45267 Lightwire 114.134.0.194 114-134-0-194.lightwire.co.nz. 132347 MikiPro 2404:ab00:6:1::6 132692 GlobiCom 103.18.58.198 vpn2.torguardvpnaccess.com. 133607 Web Connect 103.51.101.28 135069 Feenix 103.208.143.164 103-208-143-164.feenix.co.nz. Further information is available at the ICANN site, and it might pay for other operators on NZNOG to double check the ICANN list. http://root-trust-anchor-reports.research.icann.org Matthew

1 0

NZNOG 2019 Workshop/Tutorials
by Dave Mill 03 Sep '18

03 Sep '18

Hi all As part of NZNOG we normally offer a 3 day workshop (Mon to Wed) and a few tutorials on the Wednesday. APNIC have the following workshops/tutorials offered at the moment. https://training.apnic.net/courses/ We're seeking feedback (on or off list) on what people may want. Note, most recently we've had a 1 day Network Security tutorial (Queenstown) and a 3 day MPLS workshop (Tauranga). Ideas for next year: -3 day Network Security -3 day Routing I -3 day SDN (5 days condensed in to 3 days) -3 day DNSSEC -1 day IPv6 essentials -1 day DNSSEC -1/2 day BGP techniques Or, what else would people like to see at NZNOG (workshop and tutorial wise) that APNIC don't offer? On-list discussion encouraged :) Cheers Dave

9 14

CFP AINTEC 2018 (in coop. with SIGCOMM), November 12 - 14, 2018 Bangkok, Thailand - Abstract registration due on August 18, 2018
by William Liu 10 Aug '18

10 Aug '18

Call for Papers 14th Asian Internet Engineering Conference (AINTEC) 2018, in cooperation with ACM SIGCOMM, November 12 - 14, 2018. Pullman Bangkok King Power Hotel, Bangkok, Thailand Website: http://www.interlab.ait.ac.th/aintec2018/ Paper submission: http://www.interlab.ait.ac.th/aintec2018/paper-submission.php Important dates ------------------------------ Abstract registration: August 18, 2018 Full paper submission: September 2, 2018 Acceptance notification: October 15, 2018 Camera-ready due: October 24, 2018 Conference dates: November 12-14, 2018 (Right after IETF 103 in Bangkok) IETF 103 Information: https://www.ietf.org/how/meetings/103/ The 14th Asian Internet Engineering Conference (AINTEC), in cooperation with ACM SIGCOMM, provides an international technical forum for experts from industry and academia. AINTEC especially aims at addressing issues pertinent to the Asia and Pacific region, with vast diversities of socio-economic and networking conditions, while inviting high quality and recent research results from the Internet research community at large. AINTEC 2018 follows the previous ten successful editions held in Thailand. The conference is single-track and features a technical program with significant opportunities for individual and small-group discussions among a diverse set of participants. The technical sessions will include invited talks by leading experts, presentations of papers, demos, posters. A student author of the AINTEC Best Paper Award affiliated in an Asian institution is eligible for the ACM SIGCOMM geo-diversity grant program to attend ACM SIGCOMM 2019. AINTEC 2018 solicits high quality papers that improve digital communications in diverse situations including, but not limited to: * Future Internet architectures and technologies * Networking technologies in developing regions * Internet measurement, analysis and modelling * Disaster networking, including experience with earthquakes and tsunamis * Sensor networking and applications * Wireless, mobile and ad hoc networks * Delay and disruption tolerant networks * Location management and positioning * Content diffusion with P2P, CDN or ICN * Multimedia systems and applications * Network operations and management * Quantum networking * Social networks * Network security * Cloud Computing and Services * Internet of Things * Network Acceleration * Blockchain Technology and Applications Paper submission ------------------------ Submissions must be original, unpublished work, and not have been submitted to another conference or journal for publication. Paper length cannot exceed 8 pages in the 10pts ACM SIGCOMM format. AINTEC 2018 proceedings will be included in the ACM Digital Library. Papers must be submitted in electronic format following the instructions provided on the AINTEC Web site: http://www.interlab.ait.ac.th/aintec2018/ Submission of a paper implies that should the paper be accepted for publication in the conference proceedings, at least one of the authors will register and present the paper in the conference. Authors of accepted papers must pay for their registration on or before the camera ready version deadline. Important dates ------------------------------ Abstract registration: August 18, 2018 Full paper submission: September 2, 2018 Acceptance notification: October 15, 2018 Camera-ready due: October 24, 2018 Conference dates: November 12-14, 2018 (Right after IETF 103 in Bangkok) Scientific Advisory Committee: Randy Bush, Internet Initiative Japan Inc., USA Erol Gelenbe, Imperial College, UK Jun Murai, WIDE Project and Keio University, Japan Keith W. Ross, Polytechnic Institute of NYU, USA Dario Rossi, Telecom ParisTech, France Surasak Sanguanpong, APAN-TH, Thailand Steering Committee: Kenjiro Cho, IIJ and WIDE Project, Japan Serge Fdida, UPMC, France Philippe Jacquet, INRIA, France Kanchana Kanchanasut, Asian Institute of Technology, Thailand Giovanni Pau, UPMC, France Aruna Seneviratne, NICTA, Australia Rodney Van Meter, WIDE Project, Keio University, Japan General Chair: Sukumal Kitisin, Kasetsart University, Thailand Kunwadee Sripanidkulchai, Chulalongkorn University, Thailand Technical Program Committee Co-Chairs: Cristel Pelsser, University of Strasbourg/ICube laboratory, France Shigeya Suzuki, WIDE Project, Keio University, Japan Technical Program Committee: Ignacio Castro, Queen Mary University of London, UK Roderick Fanou, CAIDA/UC San Diego, USA Kensuke Fukuda, National Institute of Informatics Japan, Japan Kei Hiroi, Nagoya University, Japan Pan Hui, University of Helsinki, Finland & HKUST, Hong Kong Oana Iova, INSA Lyon, France Kotaro Kataoka, IIT Hyderabad, India Andra Lutu, Simula, Norway Matthew Luckie, University of Waikato, New Zealand Kanae Matsui, Tokyo Denki University, Japan Shinichiro Matsuo, Georgetown University, USA Florian Michahelles, Siemens USA, USA Ryo Nakamura, The University of Tokyo, Japan Anant Shah, Verizon Digital Media Services., USA Keiichi Shima, IIJ-II, Japan Anna Sperotto, University of Twente, NL Joe Touch, The Aerospace Corp., USA Wantanee Viriyasitavat, Google, USA Vasaka Visoottiviseth, Mahidol University, Thailand Tat-Chee Wan, Universiti Sains Malaysia, Malaysia Publicity Committee: Wantanee Viriyasitavat, Google, USA Local Organizers: Rey Padilla, AIT, Thailand Glaziel Kae Tagamolila, AIT, Thailand Wutjanun Muttitanon, Mahidol University , Thailand

1 0

Spoofer Report for NZNOG for Jul 2018
by CAIDA Spoofer Project 08 Aug '18

08 Aug '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jul 2018: ASN Name Fixed-By 45267 LIGHTWIRE 2018-07-08 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jul 2018: none inferred Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Invitation to APNIC 46
by Elly Tawhai 06 Aug '18

06 Aug '18

Hi NZNOG Community, It is our pleasure to invite your organisation to attend APNIC 46 meeting a week of workshops, tutorials, policy and operational discussions, and social events. Connectivity and network security in the Pacific will be key themes to be discussed at the upcoming APNIC 46 conference in Nouméa, New Caledonia, from 6 to 13 September 2018. Keynote presenter John Brewer shares his expertise on the explosion of new submarine and satellite infrastructure connecting the remote islands of the Pacific, joining Raja Azrina Raja Othman, who will talk about security, privacy, and safety in this age of interconnectedness. Full speakers list here: < https://conference.apnic.net/46/program/speakers/#/> There are direct flights to Noumea from Auckland. Hope to see you there! Kind regards, Elly APNIC

1 0

Spoofer Report for_NZNOG for Jun 2018
by CAIDA Spoofer Project 08 Jul '18

08 Jul '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jun 2018: none inferred Source Address Validation issues inferred during Jun 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-06-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Affordable TICSA LI Solution and Support
by brianparsons＠subpico.com 04 Jul '18

04 Jul '18

We are Telecom Forensics, an OEM of LI solutions based on the Kapiti Coast. � Being an OEM, there are no 'middle men' to inflate the price. We can provide a drop-in LI system that is fully supported, local and affordable. � We are proven LI Systems experts operating since 2005. We have deployed with national providers and on many complex projects both cellular and fixed. ASN.1 and ETSI Standards is what we do all day, everyday. Our projects and experience are detailed on out website: www.telecomforensics.com. � Our Costs and Deliverables: We supply the complete turnkey solution for your TICSA regulatory compliance. No minimum contract term, full 24/7 support is provided. � Costs One off: Upfront $5K Signup Fee - covers design, integration, pre-production testing and systems training, Monthly: Starting at fixed $5K lease cost per month. For industry fairness the monthly charge is scaled to the number of subscribers. *** SPECIAL OFFER ***: 10% discount on the monthly lease if you sign-up within the next four weeks!� Contact us via our website forms, https://www.telecomforensics.com/. �� Annual contracts are also available. Contact us to discuss your requirements. � Deliverables A working pre-production environment; Provisioning, (HI 2/3) ASN.1 correct, complete & ready to cut-over to LEA Test then eventually LIVE. Training on the LI system in parallel with LEA validation/testing HI 'usable format' pre-production delivery. Training (provisioning and alarms) to meet the 'always ready' requirement of the TICSA Act. Support: The monthly fee includes Layer 3 support.� TFE Solution License and Support Contract to meet Service Level Agreements of the TICSA solution Once you have Agency sign-off to switch to their LIVE environment, you can get back to your core business activity. Time Frame: Depending on the size of the network, this could take one to two weeks after sign-up. � Custom interface work is available including any OEM TIER 4 Code level support. POA. � TFE offers affordability for a trusted and reliable LI solution. � We welcome your enquiry through our web forms, https://www.telecomforensics.com/, kind regards Brian Parsons BE(E&EE) MIEE | CEO TFE | +64272987097 www.telecomforensics.com ___________________________________________________________________________________________________________________________________________ Some technical detail: Our systems operate an exokernel with optimised LI ASN.1 and protocol firmware on the Network (NWO) traffic inputs. The NWO interface work independent of main OS for speed and security and line rate processing (at any packet size). We support the following line interfaces: GE, 10G, 40G scaled to 100G, and typically can receive from any newtork tap/mirror port, splitter. The probe throughput (XI fwd rate) after processing is wire speed with capacity per interface of 1.1 million sessions per gig of installed Mem. Typical System interfaces: GE NWO, GE XI/OAM, GE HI. ___________________________________________________________________________________________________________________________________________ �

13 15

Satellite TV installations within MDU
by Carl Gunness 02 Jul '18

02 Jul '18

Hi NZNog, I'm looking for a contact within Sky Television or a contractor who installs Satellite TV within MDU? I'm trying to confirm if Satellite TV is installed the same way as we do in Australia. eg, a "BLUBOX" on a typical MDU build. Cheers, Carl

2 1

Re: [nznog] Registration for AusNOG 2018 is now open
by Nick MacKechnie 28 Jun '18

28 Jun '18

Hiya, Who's going? I'd be keep to catch-up for a drink or two while over in Sydney. (Feel free to ping me off the DL) Nick MacKechnie Fixed & Transmission Operations Manager 021 999 010 03 345 7875 nick.mackechnie(a)2degrees.nz Two Degrees New Zealand Limited | 2degrees House 351 Lincoln Road, Addington, Christchurch 8024 PO Box 8540, Riccarton, Christchurch 8440 | New Zealand -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Mark Prior Sent: Monday, June 11, 2018 10:44 PM To: nznog <NZNOG(a)list.waikato.ac.nz> Subject: [nznog] Registration for AusNOG 2018 is now open Get in early for the early bird rate! <https://www.eventbrite.com.au/e/ausnog-2018-tickets-46925221601> We're also still looking for interesting talks so why not submit a proposal and lock in that early bird rate (or get free rego if accepted :-) Regards, Mark. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog ________________________________ This transmission may contain information that is confidential and legally privileged. If you are not the intended recipient, please do not read, copy, or re-transmit this communication. If you have received this communication in error, please notify me and delete this message (and your reply) and any attachments.

2 1

Anyone interested in donating space / connectivity / kit for a proper NZ Debian mirror?
by Michael Fincham 28 Jun '18

28 Jun '18

Hi everyone, Citylink's official Debian mirror (ftp.nz.debian.org) is apparently again broken (not even listening on port 80 from where I'm sitting). Would anyone be seriously interested in donating rack space, national transit, or hardware to the cause of another official Debian mirror for NZ? Having reliable and cheap access to free software projects like Debian is critically important, and having a second official mirror seems like a no-brainer to me. I am very happy to donate my time to admin and monitor any equipment provided for this, and to liase with the Debian project as required. Perhaps Citylink could give us some insight in to the traffic levels their existing mirrors see? -- Michael Fincham

15 28

Call For Presentations - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Sebastian Castro 26 Jun '18

26 Jun '18

The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted on the first day of the workshop, until 4pm. The second afternoon of the workshop will start with a Members-only session which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. The Members-only session will be followed by the AGM. Workshop Milestones: 15 Jun 2018 - Submissions and Registrations open via Indico 13 Jul 2018 - Deadline for submission 17 Aug 2018 - Contribution list published 14 Sep 2018 - Full agenda published 06 Oct 2018 - Deadline for slideset submission 13 Oct 2018 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/29/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Sebastian Castro, on behalf of the Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

NZNOG 2019 Announcement
by Dave Mill 17 Jun '18

17 Jun '18

Hi all I'm happy to announce that we have locked in a venue for the NZNOG conference in 2019. Where : Napier Conference Centre, Napier When (conference proper) : 31 January to 1 February, 2019 As normal, expect there will be various workshops and tutorials in the days prior the conference proper. Note, this is a change from our usual dates due to Linux Conference Australia coming to Christchurch during NZNOG's 'normal' week. We'll be putting together our sponsorship packages this month. In the meantime, if anyone is interested in sponsoring the conference please make contact with info(a)nznog.org . Cheers Dave (on behalf of the NZNOG Trust)

1 0

Interesting links on hacking in the large
by Matt Stevens 12 Jun '18

12 Jun '18

Greetings, I am interested in looking at the progression of hacking strategies over the last ten years or so. However hackers typically don't talk and sadly my circle of friends do not extend to those leading the hacking trends, that is, well resourced criminal groups and nation states. Hackers do however read. I'm interested in what you have found that already exists in the public domain. Stuff where you have gone "ohhh, interesting..." or "that's novel" or "I can't talk about it, but I have seen this...". I am anticipating links to publicly available news articles, government reports, conference presentations, YouTube videos or what-have-you. The goal is an academic paper examining these trends that hopefully will present interesting insights. I am a researcher at Victoria in Wellington under Professor Ian Welch whom runs our Cyber Security undergraduate degree and postgraduate research. I have an ME in Software Engineering with a Network Security slant and am currently working towards a PhD in the same field with an applied science focus. I like to think I am making stuff that is actually useful. I am very happy to chat if you are interested and will respect the need to discuss clients and employers in the abstract. Coffee is on me. But, my main interest here is interesting links Please email me direct! Cheers Matt Stevens Researcher Engineering and Computer Science Victoria University

1 0

Registration for AusNOG 2018 is now open
by Mark Prior 10 Jun '18

10 Jun '18

Get in early for the early bird rate! <https://www.eventbrite.com.au/e/ausnog-2018-tickets-46925221601> We're also still looking for interesting talks so why not submit a proposal and lock in that early bird rate (or get free rego if accepted :-) Regards, Mark.

1 0

Take the APNIC Survey - Your Views Matter
by Elly Tawhai 10 Jun '18

10 Jun '18

Hi NZNOG Community, As you may know, every two years APNIC conducts a large-scale survey to help us understand the needs and wishes of its Members and those who use APNIC services. The results of the survey provide guidance for the future direction of APNIC. As a valued member of the APNIC community, I’d like to personally invite you to take the survey. Please also share the survey link with your colleagues so they can complete the survey too. https://survey.apnic.net The survey is anonymous and no identifying information will be made available to APNIC. The survey closes on 2 July 2018. There will be three prize draws during the survey period. Thank you for your continued support of APNIC. Kind regards, Elly APNIC

1 0

Spoofer Report for NZNOG for May 2018
by CAIDA Spoofer Project 08 Jun '18

08 Jun '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during May 2018: ASN Name Fixed-By 55850 TRUSTPOWERLTD 2018-05-21 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-05-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

TICSA and lawful intercept
by Cameron Beattie 05 Jun '18

05 Jun '18

Has any progress been made on a collaborative effort to address the TICSA requirements? Regards Cameron

7 7

ASB Bank NOC contact
by Tim Price 23 May '18

23 May '18

Hi All, If anyone from ASB Bank NOC is on-list or anyone knows someone who operates their firewalls can you please contact me off-list? We have a business customer who’s IP has been blacklisted by ASB. Cheers, Tim.

1 0

Bandwidth at Tauranga Exchange (Chorus/Spark Cameron Road)
by Jesse Archer 17 May '18

17 May '18

Good evening, Got a customer looking for secondary bandwidth options at Tauranga Exchange. Who has a physical presence here and a willingness to sell IP transit to a small client (below 1Gbps requirement) ? They’ve got an AS and a /22 that will be operational soon. Regards, Jesse -- *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

Bigpipe removing IPv6 from existing broadband connections
by Michael Fincham 15 May '18

15 May '18

Hi all, Looks like Bigpipe has decided to withdraw IPv6 from their broadband customers... If you have contacts at Bigpipe please get in touch with them and ask them WTF they're doing. This is absurd. I've been recommending Bigpipe to people for ages because they offered IPv6. Forcing their customers to renumber and drop back to legacy IPv4 at this point is just idiotic, let alone not continuing to offer this service. ---------- Forwarded message ---------- From: Bigpipe Broadband <support(a)bigpipe.co.nz> Date: 14 May 2018 at 09:54 Subject: Changes to your Bigpipe connection Hi [...], Thanks for taking part in our IPv6 trial that we announced on Geekzone. We’ve had a heap of really useful feedback to keep in mind for our future developments in this space. >From the 12th of June 2018 the trial will be ending and you may notice a short 5-10 minute outage while we withdraw it. We’ll be making the change overnight at a time that has as little impact as possible. There’s nothing further you need to do, however as with any outage if you find you haven’t automatically connected again, simply restart your modem or router. If you have any questions or want to chat this through, you can get in touch via https://ww.bigpipe.co.nz/contact-us Thanks again for getting involved. The Bigpipe People -- Michael

4 4

ntp kod
by Richard Hector 10 May '18

10 May '18

Hi all, I'm seeing lots of log messages like these: May 11 06:54:32 jet ntpd[2758]: receive: KoD packet from 2001:dce:2:17a::18 has inconsistent xmt/org/rec timestamps. Ignoring. ... on a home server. A quick web search suggests that KoD packets are a self-defence mechanism. Am I (accidentally) abusing s[1-3].ntp.net.nz? Cheers, Richard

3 3

Spoofer Report for NZNOG for Apr 2018
by CAIDA Spoofer Project 08 May '18

08 May '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Apr 2018: ASN Name First-Fixed 137259 M174-AS-AP 2018-04-26 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW-AS-AP 2016-09-26 2018-04-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fwd: [AusNOG] AusNOG 2018 Call for Presentations
by Mark Prior 06 May '18

06 May '18

Anyone from across the Ditch interested in speaking at AusNOG at the end of August? Mark.

1 0

Announcement - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Sebastian Castro 03 May '18

03 May '18

[with apologies to those who see this on multiple lists] The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. Workshop Milestones: - 01 May 2018 - Workshop Announcement - 01 Jun 2018 - Submissions and Registrations open via Indico - 13 Jul 2018 - Deadline for submission - 17 Aug 2018 - Contribution list published - 14 Sep 2018 - Full agenda published - 06 Oct 2018 - Deadline for slideset submission - 13 Oct 2018 - Workshop Sebastian Castro, on behalf of the joint Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Google mail Fu Help
by Don Gould 23 Apr '18

23 Apr '18

Can anyone with some clue help with sorting this out? I've tired following the link but I just don't understand what I'm not doing right. My mail server got compromised and has since been fixed but I'm still having problems sending mail to gmail. The mail system <Laurajmcintosh(a)gmail.com>: host gmail-smtp-in.l.google.com[173.194.203.27] said: 550-5.7.1 [182.54.234.40 12] Our system has detected that this message is 550-5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail, 550-5.7.1 this message has been blocked. Please visit 550-5.7.1https://support.google.com/mail/?p=UnsolicitedMessageError 550 5.7.1 for more information. c10-v6si12022767plr.398 - gsmtp (in reply to end of DATA command) -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Ph: 0800 00 15 92 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.yournet.co.nz skype: don.gould.nz

2 2

APNIC 46 - Call for paper now open
by Elly Tawhai 09 Apr '18

09 Apr '18

________________________________________________________________________ APNIC 46 Conference - Call for Paper ________________________________________________________________________ Hi NZNOG Community, The APNIC Program Committee is now seeking presentations for APNIC 46 in Nouméa, New Caledonia. We are looking for content that would suit technical conference sessions. Please note, the program committee is working to early deadlines so the APNIC conference program can be announced early. Key dates --------- The timeline for submissions is: Call for presentations opens 09 April 2018 First round acceptance 15 June 2018 Final deadline for submissions 13 July 2018 Final round acceptance 27 July 2018 Program material and submission ------------------------------- The technical sessions at APNIC 46 will include presentations relevant to Internet operations and technologies. For possible areas of topics and submission details, please visit: https://conference.apnic.net/46/program/call-for-papers If you have any other ideas or proposals for panel or BoF sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Program Committee at: conference(a)apnic.net For more information about APNIC 46, please visit: https://conference.apnic.net/46 On behalf of: APNIC 46 Program Committee

1 0

MikroTik User Meeting - Call for presentations
by Daniel Millar 05 Apr '18

05 Apr '18

Hey, Just a call for presentations to the group for the MikroTik User Meeting (MUM) being held in Auckland on the 21st of May. https://mum.mikrotik.com/2018/NZ/info/EN There is still a few slots available to fill. Presentation has to be somewhat based around the MikroTik Platform. 45 minute slots but MikroTik can make this flexible if needed. Contact me off list if you have any questions, or use the link above to ‘register’ for the event, in which you can select if you wish to do a presentation. Best Regards, Daniel Millar - Sales & Technical Engineer Phone: +64 3 741 1339 | Fax: +64 3 327 3193 | Email: dan(a)gowifi.co.nz<mailto:dan(a)gowifi.co.nz> | www.gowifi.co.nz<http://www.gowifi.co.nz/> [cid:image001.png(a)01D35979.70F92F50]<https://twitter.com/gowifinz/> [cid:image002.png(a)01D35979.70F92F50] <https://www.linkedin.com/company/go-wireless-nz-ltd-?> [cid:image003.png(a)01D35979.70F92F50] <https://www.facebook.com/gowirelessnz> [cid:image004.png(a)01D35979.70F92F50] <https://plus.google.com/+GowifiCoNz> [cid:image005.png(a)01D35979.70F92F50] <http://blog.gowifi.co.nz/> [cid:image006.png(a)01D35979.70F92F50] <https://www.youtube.com/user/streakwave> [cid:image007.png(a)01D35979.70F92F50]

1 0

Changes to NZRS and InternetNZ
by Daniel Griggs 02 Apr '18

02 Apr '18

Apologies if you have received this in other forums. Good morning, >From 1 April 2018, all the work of InternetNZ and NZRS is being streamlined under one banner; InternetNZ. The NZRS name will cease to exist, and its people and services have been merged into InternetNZ. While this change is occurring for our colleagues in InternetNZ, The Domain Name Commission has also focused in on its independent role overseeing the .nz domain name space and administering the .nz dispute resolution service. They have a smaller Board which means .nz policy development is now the responsibility of InternetNZ. It is setting up a new .nz policy committee to decide policy, fees and commercial terms (with input and advice from the community). The rationale for these changes is to simplify how Internet users work with us, and to improve the effectiveness of our part in governance and management of the Internet. The background work on these changes is detailed here [ https://internetnz.nz/blog/changing-internetnz-our-organisational-review] Our vision remains the same: a better world through a better Internet. If you have any questions or thoughts on the above, please contact me directly. -- Daniel Griggs e: daniel(a)internetnz.net.nz p: +64 27 448 8230

1 0

SKYTV and TVNZ Geo blocking
by Stuart Campbell 02 Apr '18

02 Apr '18

Hi, Is anyone from SkyTV and TVNZ able to contact me off-list please - we have a /22 IP range that appears to be being blocked. Regards, Stuart Campbell {scampbell(a)campbell.co.nz} ------------------------------------------------------------------------------- Mikrotik Trainer & Consultant, MTCNA, MTCWE, MTCRE, MTCTCE, MTCINE ------------------------------------------------------------------------------- Managing Director, Campbell Technology Ltd Phone: +64-4-802-7800 xtn 126 Fax: +64-4-802-7809 Mobile: +64-21-482-827

1 0

Network abuse
by Rudi Hefer 24 Mar '18

24 Mar '18

Gidday NZNoggers, Can someone please advise if it is appropriate to share know fraud activity in this mailing list so that fellow businesses do not get stung buy the same individual? We have now confirmed 4 victims to the same person. Understood if not the forum, but would appreciate if someone knew where this can be done. Kind regards, Rudi Hefer | Sales and Marketing Director m.+64 27 220 1881 |ddi. +64 9 951 5047 | rudi.hefer(a)solarix.co.nz<mailto:rudi.hefer(a)solarix.co.nz> [cid:99789FA2-FCD5-4D65-95D9-38F5F88F6C6F] [cid:1B69E9A3-16C0-44EF-B66D-21A93AF925D7] <https://www.linkedin.com/company/solarix-networks-limited> [cid:89D41135-A44C-423C-A7A9-515C001D90D9] <https://twitter.com/SolarixNetworks> 5 Omega Street, Rosedale, Auckland, New Zealand www.solarix.co.nz DISCLAIMER: This email message and any accompanying data contains information that is confidential and subject to legal privilege. If you are not the intended recipient you are notified that any use, dissemination, distribution or copying of the whole or any part of the information in this message or data is prohibited. If you have received this email message in error please notify us immediately and erase all copies of the message and attachments. No alterations to an email message or its attachments are to be made without the consent of Solarix Networks Limited. Solarix Networks Limited are not liable for any unauthorized alterations. Solarix Networks Limited do not represent or warrant that files attached to this email are free from computer viruses and other defects.

4 3

SkyTV geoblock
by Brad Cook 20 Mar '18

20 Mar '18

reaching out, is anyone from SkyTV able to contact me off-list, we have some ranges that are geoblocked.

2 1

IPv6 static addressing
by Richard Hector 16 Mar '18

16 Mar '18

Hi all, Apologies if this is a bit off-topic, but I know there's lots of IPv6 knowledge here :-) If I have an IPv6 ULA block (or several) using SLAAC, and I want to additionally give out some static addresses in one or more of those blocks, am I right in thinking I can pick anything I like as long as it doesn't have the magic fffe in the middle? Is there a more formal approach? Is this (SLAAC plus statics where required) the normal way of doing things? Thanks, Richard

2 3

Update from DNCL regarding WHOIS
by Daniel Griggs 15 Mar '18

15 Mar '18

Hi Everybody, DNCL attended the NZNOG conference in January, and talked about the policy consultation on Port 43 WHOIS requirements. You can read more about that consultation and the submissions here https://dnc.org.nz/port-43. Thanks to those NZNOG members who provided a submission. The DNCL Board has considered all submissions, and decided that the information returned via Port 43 will be reduced. Port 43 queries will continue to show domain name availability, Registrar contact details and name server details (including DS records). It will no longer show contact details of Registrant, Admin or Technical contacts, or the date billed until information. Though this information will still be available on the DNCL website (http://www.dnc.org.nz/) DNCL and InternetNZ/NZRS are working on a plan to implement the changes in early April 2018. If you have any questions regarding the process or decision feel free to drop a line to info(a)dnc.org.nz -- Daniel Griggs e: daniel(a)internetnz.net.nz p: +64 27 448 8230

1 0

Range Announcements ExChristchurch - Please update your GeoCoding as required.
by Don Gould 14 Mar '18

14 Mar '18

For those GeoCoding... Please be advised that we're announcing the follow exChristchurch. as=45887 router-id=202.68.88.218 network=103.68.122.0/24 network=103.68.123.0/24 network=103.68.121.0/24 network=117.121.244.0/24 network=182.54.234.0/24 TVNZ, MediaWorks... my wife would like your service back... NetFlix my wife liked her 2 days with the 'extended catalogue'... guess we can't have pie and eat it to! ;) D -- Don Gould 5 Cargill Place Richmond Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.bowenvale.co.nz skype: don.gould.nz -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Ph: 0800 00 15 92 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.yournet.co.nz skype: don.gould.nz

1 0

Looking for spare Xirrus XS-8 wireless devices
by Matt Stevens 13 Mar '18

13 Mar '18

Greetings, Victoria Uni, School of Engineering and Computer Science is heading to Samoa in April to do outreach to local Universities and High Schools. To help out we have been donated six Xirrus XS-8 wireless points to install. A big thank you to our donor :-) Having figured out how to install these, we are now thinking that it may be useful to have spare devices. Either spares for the local IT team for when the installed ones give up or to increase coverage. So... do you have any used/replaced Xirrus XS-8 wireless devices lying around, that you might be happy to donate? Brackets for these devices are also in short supply and it turns out, expensive to fabricate. Thank you for reading and please send me any responses off-list. Cheers! Matt Stevens Work Experience Coordinator Engineering and Computer Science Victoria University of Wellington

1 0

Asbestos in Remuera?
by Brian E Carpenter 01 Mar '18

01 Mar '18

Hi, Is anyone aware of access problems (asbestos issues) at the Remuera exchange? I'm being given the run-around by Chorus - just moved and no local loop for the last 10 days. (Yes, I know I should upgrade to fibre but that is stage 2.) This is a personal gripe but if the access problem is genuine it probably affects many subscribers. An off list reply would be fine. Regards Brian Carpenter

1 0

Removing the four stale TAL from the APNIC RPKI validation set.
by George Michaelson 26 Feb '18

26 Feb '18

Updating RPKI trust anchor configuration ------------------------------------------------------- APNIC has completed the process of transitioning from its previous Resource Public Key Infrastructure (RPKI) trust anchor arrangement to a new single trust anchor configuration. Each RIR will publish an 'all resources' global trust anchor, under which its own regional resources (IP addresses and ASNs) will be certified. APNICs trust anchor is one of the previous five, which has been retained as the sole trust anchor over all APNIC resource certificate products. If you are using relying-party software, such as the Dragon Research Labs RPKI Toolkit, RPSTIR or the RIPE NCC’s RPKI Validator, you are advised to update your software’s configuration to use only the current APNIC trust anchor, rather than the set of five APNIC trust anchors that were previously in use. The update is to remove four of the five: One has been retained as the current live Trust Anchor. Note: this update is not critical. However, if it is not done, the software will log or report warnings about being unable to retrieve the trust anchors that are no longer being used. All resources now validate under the single active trust anchor and no orphan products are valid under the other prior trust anchors. The current APNIC TAL is as follows: ------ rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RWSL61YAAYumEiU8z8 qH2ETVIL01ilxZlzIL9JYSORMN5Cmtf8V2JblIealSqgOTGjvSjEsiV73s67zYQI 7C/iSOb96uf3/s86NqbxDiFQGN8qG7RNcdgVuUlAidl8WxvLNI8VhqbAB5uSg/Mr LeSOvXRja041VptAxIhcGzDMvlAJRwkrYK/Mo8P4E2rSQgwqCgae0ebY1CsJ3Cjf i67C1nw7oXqJJovvXJ4apGmEv8az23OLC6Ki54Ul/E6xk227BFttqFV3YMtKx42H cCcDVZZy01n7JjzvO8ccaXmHIgR7utnqhBRNNq5Xc5ZhbkrUsNtiJmrZzVlgU6Ou 0wIDAQAB ------ Configuring Relying Party Software ----------------------------------------------- RIPE NCC RPKI Validator: If you upgrade to RIPE validator rpki-validator-app-2.24 the correct Trust Anchor is configured. No further work is required. Dragon Research Labs Rcynic Validator: If you run rcynic, you need to remove all the TAL, TA or CER entries in rcynic.conf except ones which point to apnic-rpki-root-iana-origin.cer or the related TAL. If you use the trusted-certs/ directory, simply remove the four files which are named for the non-APNIC RIR as follows: cd /etc/trust-anchors # or wherever you place the TAL files rm apnic-rpki-root-ripe-origin.tal rm apnic-rpki-root-arin-origin.tal rm apnic-rpki-root-lacnic-origin.tal rm apnic-rpki-root-afrinic-origin.tal RPSTIR To modify an installed RPSTIR system, locate the /usr/local/etc/rpstir directory and remove all but the current live APNIC TAL. More information is in the attached PDF describing how to update the trust anchor configuration in these three popular relying-partner software systems. -George

1 0

Survey
by Richard Nelson 14 Feb '18

14 Feb '18

Thankyou to everybody who responded to the NZNOG survey, the results are in and are very useful to us. Geoff Huston was considered a top three speaker most often followed by Francesco Alberti of Eolo. Hamid Maani of Hawaiki and Kraig Winters representing the Red Cross were third equal with a large group just behind them. More importantly almost all the speakers were considered interesting by someone attending the conference so we are pleased with the programme reception. Respondents liked Queenstown but didn't like the venue. They wanted desks in the conference and aircon in the rooms. The most popular destination choices for next years conference were Napier, Wellington and New Plymouth. This fairly closely corresponds with the trustees' thinking so we will check them out for venues and accommodation with air conditioned rooms. It will, however, be difficult to top jet boating as a social activity. Just over 90% of people are open to us changing the conference dates. We will investigate this. There were almost no other conferences identified to avoid clashes with but public holidays are clearly sancrosanct. There was also a suggestion that we avoid school holdiays which we currently don't do. People are happy for us to make the conference a bit bigger to make sure people don't miss out. There were also a lot of individual comments and suggestions that we will try to take on board. Richard Nelson

4 4

Re: [nznog] Survey
by Ewen McNeill 11 Feb '18

11 Feb '18

On 9/02/18 13:11, Barry Murphy wrote: > May be quite beneficial to have NZNog the week after, so those that have travelled > from AU the week before can stick around for another week and attend NZNog Could definitely work out. I can think of at least a half dozen Australia-nbased Linux.Conf.au regulars, who would probably come to LCA2019 in Christchurch too, working in networks/network operations as their day job. There's probably more who would find it relevant if it was easy to get to after Linux.Conf.au (Christchurch/Wellington is an easy regular flight; not sure about Christchurch/New Plymouth or Christchurch/Napier -- those might be two flights). (The week before might work too, but some of the people I'm thinking of usually help with LCA conference setup, which obviously is the end of the week before the conference...) Ewen

4 3

Looking for DNS resolver addresses in NZ for research project
by Sebastian Castro 01 Feb '18

01 Feb '18

Hi everyone: In case you haven't seen a message from me before, I'm Sebastian Castro, Technical Research Manager for NZRS, part of the InternetNZ team. Our Research Team has been conducting some research work on passive DNS analysis in order to identify real DNS resolvers in the wild, as authoritative DNS servers like the .nz nameservers get a lot of rubbish traffic. In order to advance the work, we are looking for some ground truth about real DNS resolvers in NZ. We have a list of known resolvers from organizatons like Spark, Vodafone, some ISPs, but we are looking to extend and refresh that list. If you operate a network that has a resolver, would you be so kind to share with us the IP addresses (both v4 and v6 if available) the resolver uses to send traffic? Depending on your architecture, it could be the address your users setup in their configuration, or a different address based on location where there is a load balancing architecture. There is no restriction: we want big and small resolvers, ISPs, Wireless ISPS, educational organizations, big and small companies, everything helps. The list won't be made public, it will be used for our research purposes. Thanks in advance and enjoy your Waitangi weekend. -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

TICSA – Security contacts
by TICSA 01 Feb '18

01 Feb '18

Hi folks, In keeping with Tarus’s comments, I too would like to thank you all for your time at the NZNOG. It was great to catch up with old friends and make some new ones. We can be reached at TICSA(a)NCSC.govt.nz for anything relating to the Network Security section (part 3) of the TICSA How to submit a notification is covered in the Guidelines document which can be found at https://www.ncsc[dot]govt.nz/ticsa Regards Steve Martin On behalf of The TICSA Team National Cyber Security Centre Government Communications Security Bureau This electronic message, together with any attachments, contains information that is provided in confidence and may be subject to legal privilege. Any classification markings must be adhered to. If you are not the intended recipient, you must not peruse, disclose, disseminate, copy or use the message in any way. If you have received this message in error, please notify us immediately by return email and then destroy the original message. The New Zealand Intelligence Community (NZIC) and the departments comprising the NZIC accepts no responsibility for changes to this e-mail, or to any attachments, after its transmission from NZIC. This communication may be accessed or retained for information assurance purposes. Thank you. ______________________________________________________________________________ This email has been filtered by SMX. For more information visit http://smxemail.com ______________________________________________________________________________

1 0

OpenNMS at NZNOG 2018
by Tarus BALOG 31 Jan '18

31 Jan '18

Gang: I just wanted to thank NZNOG for allowing me to come speak at your conference. I had a great time and I wrote about it here: https://www.adventuresinoss.com/2018/01/31/2018-new-zealand-network-operato… As loud, fat and ugly American I have a tendency to overstay my welcome, but if there is interest I'd love to come back next year. We are working on a project called OpenNMS Drift and the company sponsoring it just asked us to add OpenConfig and gRPC telemetry support. The work will be completed by NZNOG 2019, so that is a potential topic. Thanks again for having me. -T -- Tarus BALOG, Maintainer Main: +1 919 533 0160 The OpenNMS Group, Inc. Fax: +1 773 345 3645 Email: tarus(a)opennms.org URL: http://www.opennms.org PGP Key Fingerprint: AFA1 DDA2 24B0 4B61 8D76 9CC7 91F4 79A0 FBF2 DC21

1 0

Lost shirt
by Tim Price 25 Jan '18

25 Jan '18

Did anyone happen to find a spare medium size nznog shirt? I seem to have left mine somewhere by accident and I suspect there aren't any left. Not an emergency but I thought I would ask anyway. Sent from my iPhone

1 0

Conference network and Faucet Statistics
by Jamie Curtis 25 Jan '18

25 Jan '18

Hi all, Firstly I'd like to start by thanking the NZNOG community and in particular the Trustees and conference organisers for supporting REANNZ and the Faucet team to deploy a Faucet based network again for this years conference. As seen by many young development projects, it's often a challenge to find places to get good production operational experience. Running the network each year at NZNOG has provided some great experience for the team and we've learnt lots each year. Thanks for everyones patience as we've got things stabilised. So - some statistics from the network through to today: * 1799 GB total data forwarded by data-plane * 2,240,472,504 packets forwarded by data-plane * 274 dhcp leases issued * 169 unique mac addresses Some slightly less common statistics that we get thanks to the new monitoring inside Faucet: * 1,345,598 L2 learn events inside faucet * 1.50 GB flooded by data-plane * 79,785 openflow control messages sent by faucet * 27,035 openflow control messages received by faucet And, the contribution to the project thanks to running it at NZNOG: * Two versions of faucet released (1.6.17 & 1.6.18) for required features and bug fixes * 75 commits to git, 667 line additions and 238 line deletions * 284 lines of faucet configuration (YAML) built as examples for others * Three new engineers trained in running Faucet in production * One happy PhD student who now has more data for his research project! Thanks again to all for making NZNOG '18 such a great conference, looking forward to next year already! Jamie -- Jamie Curtis Head of Technology Research & Education Advanced Network New Zealand Ltd M +64 21 392 102 P +64 4 913 6363 E jamie.curtis(a)reannz.co.nz www.reannz.co.nz

1 0

Thanks - Port 43 - IntNZ group changes
by Jordan Carter 24 Jan '18

24 Jan '18

Hi all Thanks for the chance to talk at the Conference today. Just a quick couple of links and pointers. For more info about InternetNZ: https://internetnz.nz/ For more info about NZRS: https://nzrs.net.nz/ For more info about the Domain Name Commission: https://dnc.org.nz/ There's a bit of info about the changes to how we organise the InternetNZ group at this URL: https://internetnz.nz/blog/changing-internetnz-our-organisational-review Our commitment to quality in the services we provide is unchanged - .nz is important and we aim to maintain the level of service you're used to. All current products and services continue through the transition, as we merge IntNZ and NZRS. Brent Carey is the incoming Domain Name Commissioner - he outlined the consultation DNCL are running on access to WHOIS via port 43. The info on that is here: https://dnc.org.nz/port-43 Consultation closes 5 Feb - any info you can share on use cases, impact of any change to that service, etc, would be brilliant in informing any changes. Easy to do by email - policies(a)dnc.org.nz. My email is below. Brent is on dnc(a)dnc.org.nz. We're both here tonight and tomorrow and welcome any thoughts or feedback or questions while NZNOG carries on. Finally thanks to two of our team, Yvonne Shelton and Maryann Robertson, who have been working with the trustees to put this conference together. cheers Jordan -- *Jordan Carter* Group Chief Executive InternetNZ Office: +64 4 495 2118 <04-495%202118> | Mobile: +64 21 442 649 <021%20442%20649> | Skype: jordancarter Email: jordan(a)internetnz.net.nz *A better world through a better Internet *

1 0

NLNZ 2018 domain crawl
by Ben O'Brien 24 Jan '18

24 Jan '18

Hi, We at the National Library are about to begin our 2018 New Zealand domain crawl. As in previous years, the crawl is being run by Internet Archive, and some of you may have already seen the crawlers as IA go through their initial setup with some test crawls. The user agent string their crawlers will be using is: NLNZ_IAHarvester2018 While we do our best to crawl respectfully, obey robots.txt, and break out of any crawler traps before grinding too much bandwidth, if you encounter any issues from us then please get in contact. Cheers, Ben O’Brien | Digital Preservation Web Engineer | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467, Wellington 6140, New Zealand | www.natlib.govt.nz<http://www.natlib.govt.nz/>

1 0

Devoli (aka Vibe) Beverages.
by Callum Barr 23 Jan '18

23 Jan '18

Hi All, Devoli are putting on some tasty beverages in the bar on level 6 of the Rydges in the next 10minutes if anyone is keen. Would be great to see you there! Cheers, Callum -- Callum Barr me(a)callumb.com

1 0

TVNZ on Demand contact
by Stan Rivett 11 Jan '18

11 Jan '18

Afternoon Does anyone have a useful contact at TVNZ on demand? I have a /21 that they seem to think is Australian which is making some of my clients a teensy bit grumpy ;-) Cheers Stan Rivett ------------------ Netspeed PO Box 5691 Dunedin P: +64 3 481 7245 C: +64 21 323 841 ------------------

1 0

Conference registrations
by Dave Mill 07 Jan '18

07 Jan '18

Hi all Just a quick update that registrations are a lot higher when compared to the same date in previous years so its very likely that we'll be selling out this year. If you are planning on attending book soon! Also, make sure you have accommodation sorted before you book the conference - a lot of hotels are also selling out. Cheers Dave

1 1

DNS OARC March 2018: Call for Presentations
by Geoff Huston 15 Dec '17

15 Dec '17

Yes, it is on the other side of the world. On the other hand, if the DNS is your obsessive passion, this is the best venue around that will allow you to share your interest with other like minded geeks. :-) Geoff [with apologies to those who see this on multiple lists] Call For Presentations The 28th DNS-OARC Workshop will be hosted by ICANN in San Juan, Puerto Rico, and will take place on March 8th and 9th immediately before ICANN61 (March 10th - 15th) [*] The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. The first day of the workshop will start with a Members-only session which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. A timeslot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted on the first day of the workshop, until 4pm. Workshop Milestones: 19 Jan 2018 - Deadline for submission 23 Jan 2018 - Initial contribution list published 16 Feb 2018 - Full agenda published 02 Mar 2018 - Deadline for slideset submission Details for presentation submission are published here: <https://indico.dns-oarc.net/event/28/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Ray Bellis, for the OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) [*] <https://www.icann.org/news/blog/icann61-still-slated-for-puerto-rico> <https://www.icann.org/news/blog/a-look-ahead-to-icann61-in-puerto-rico>

1 0

Looking for a network engineer/admin internship - 6 month
by Maël Kervella 13 Dec '17

13 Dec '17

Hi everyone, I'm a French student at CentraleSupélec school (http://www.centralesupelec.fr/en) I'm currently doing a gap year before starting my last student year (master's degree) in IT security and I've nearly finished the first 6 months of this gap year as a software developer on the VLC media player. I'm now looking for a 6-month internship abroad (thus out of France) during the first semester of 2018. I'm free from mid-january to end of august 2018 and willing to improve my skills as a network manager and/or network security so I'm asking here if anyone has an internship as Network Engineer or Network Admin available for that period. I've been invested in IT and new technologies for around a decade and I really got involved into networks management when I took in charge my school's campus network (200+ users). That gave me the opportunity to learn a lot about the technologies involved from Linux systems, to routing equipment, from OSI layers to various protocols while dealing with daily maintenance of the systems and users problems. I fluently speaks French and English and know basics of Spanish too. I'm open for jobs at any location. For more about my profile and my projects or any question, feel free to check out my web site at https://www.maelkervella.eu or contact me off the list at mk(a)maelkervella.eu. Thanks Maël Kervella -- web : www.maelkervella.eu email : mk(a)maelkervella.eu tel : +33634983646

1 0

APNIC Hackathon @ APRICOT 2018
by Elly Tawhai 12 Dec '17

12 Dec '17

________________________________________________________________________ APNIC Hackathon @ APRICOT 2018 ________________________________________________________________________ Hi NZNOG Community, Applications are open for APNIC's first Hackathon, to be held from 23 to 25 February 2018 in Kathmandu, Nepal. What are Hackathons? -------------------- Hackathons (hacking marathons) are events where a group of people work together on a pre-defined set of problems, intensively, for a period of a few days. At the first APNIC Hackathon, participants will identify and help resolve IPv6-related challenges of their choice. Attendance is free but will be limited to 25 participants. Who should apply ---------------- - Informatics professionals (developers, testers, designers and so forth) - Telecommunications professionals (network/telecom engineers, network administrators/operators and so forth) - Researchers working on Internet measurements, networking, or similar projects - Advanced students of technology degrees For more information, application form, and key dates, visit the APRICOT 2018 website: https://2018.apricot.net/program/hackathon Participants will also receive an APNIC Hackathon t-shirt, a certificate of participation, and a chance to win assorted prizes. For any further queries, please email the Hackathon team at: conference(a)apnic.net _______________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net _______________________________________________________________________

1 0

NZNOG 2018 Speakers
by Dave Mill 04 Dec '17

04 Dec '17

Hi all We've published a list of all speakers accepted in to the conference proper so far (Thursday and Friday). http://www.nznog.org/nznog18/nznog-2018-conference-speakers Just a reminder that our early-bird accommodation rates close on the 12/12/17. Cheers Dave

1 0

Facebook #NETENGCODE NZNOG Hackathon 2018
by Dave Mill 30 Nov '17

30 Nov '17

Hi all We're excited to announce that Facebook are running a network automation hackathon as part of NZNOG. Full details and registration are here - https://netengcodenzhack2018.splashthat.com/ This is not a type of event that often comes to NZ so I'd encourage anyone that is interested to register early. Expect an update on confirmed speakers for the conference proper soon also. Note, our Rydges' accommodation rate ends on 12/12/17. Cheers Dave (on behalf of the NZNOG Trust)

1 0

Kiwibank phishing reporting email issues
by Jean-Francois Pirus 15 Nov '17

15 Nov '17

If anybody from Kiwibank on here, your Kiwibank phishing reporting email is having issues. aka: sending to suspicious.email(a)kiwibank.co.nz you get: Subject: Undeliverable Mail: "Fwd: You've a new message" Your message: From: jfp(a)clearfield.com Subject: Fwd: You've a new message Could not be delivered because of Server refused mail at END OF DATA - 550 5.7.64 Relay Access Denied ATTR36. For more details please refer to https://support.microsoft.com/kb/3169958 [ME1PR01MB1170.ausprd01.prod.outlook.com] [ME1PR01CA0043.ausprd01.prod.outlook.com] [ME1AUS01FT003.eop-AUS01.prod.protection.outlook.com] The following recipients were affected: Kiwibank-abuse(a)feeds.phishlabs.com Additional Information ====================== Original Sender: <jfp(a)clearfield.com> Sender-MTA: <65.55.88.146> Remote-MTA: <65.55.88.138> Reporting-MTA: <smtp.kiwibank.co.nz> MessageName: <B5a0b538c0000.5a0b538c000e.000a.mml> Last-Attempt-Date: <09:50:26 Wed, 15 November 2017> -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

3 2

Re: [nznog] That FYI from Dylan at Samsung
by Damian Kissick 12 Nov '17

12 Nov '17

Hey all, Just a heads up that I got a hold of someone at Samsung and they are aware of it and apparently working on fixing it. Can a moderator please unsubscribe the e-mail address from the list in the short term? Cheers, - Damian On 13 November 2017 at 10:36, Dylan DeLoretta <dylan(a)gtlnetworks.com> wrote: > Good morning, > > > > Please refer to the enclosed document for your kind perusal > > > > Kind regards, > > > > *Dylan DeLoretta* > > Technical Support | GTL Networks Ltd | New Zealand > > DDI +64 9 415 6711 <09-415%206711> > > dylan(a)gtlnetworks.com | www.samsungnz.com > > > > [image: Description: Description: GTL-Logo] [image: > Description: Description: Samsung_Ent_IPSolutions] > > > > The information contained in this e-mail is privileged and confidential > and intended for the addressee only. If you are not the intended recipient, > you are asked to respect that confidentiality and not disclose, copy or > make use of its contents. If received in error you are asked to destroy the > e-mail and contact the sender immediately. > > > > > > > > > > > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > https://list.waikato.ac.nz/mailman/listinfo/nznog > >

1 0

FW: FYI
by Dylan DeLoretta 12 Nov '17

12 Nov '17

Good morning, Please refer to the enclosed document for your kind perusal Kind regards, Dylan DeLoretta Technical Support | GTL Networks Ltd | New Zealand DDI +64 9 415 6711 dylan(a)gtlnetworks.com<mailto:dylan(a)gtlnetworks.com> | www.samsungnz.com<http://www.samsungnz.com/> [Description: Description: GTL-Logo] [Description: Description: Samsung_Ent_IPSolutions] The information contained in this e-mail is privileged and confidential and intended for the addressee only. If you are not the intended recipient, you are asked to respect that confidentiality and not disclose, copy or make use of its contents. If received in error you are asked to destroy the e-mail and contact the sender immediately.

2 1

FW: FYI
by Dylan DeLoretta 09 Nov '17

09 Nov '17

Good day, Please refer to the enclosed document for your kind perusal Kind regards, Dylan DeLoretta Technical Support | GTL Networks Ltd | New Zealand DDI +64 9 415 6711 dylan(a)gtlnetworks.com<mailto:dylan(a)gtlnetworks.com> | www.samsungnz.com<http://www.samsungnz.com/> [Description: Description: GTL-Logo] [Description: Description: Samsung_Ent_IPSolutions] The information contained in this e-mail is privileged and confidential and intended for the addressee only. If you are not the intended recipient, you are asked to respect that confidentiality and not disclose, copy or make use of its contents. If received in error you are asked to destroy the e-mail and contact the sender immediately.

1 0

BRAS Options
by Stan Rivett 09 Nov '17

09 Nov '17

Hi all The time has come to replace my poor old Cisco 7301 and the quote I got for an ASR1002-HX made my eyes water. Still waiting for a Juniper quote but the general discussion seemed like similar numbers. Are there any other reliable options out there that don't cost more than my first house? Cheers Stan Rivett ------------------ Netspeed PO Box 5691 Dunedin P: +64 3 481 7245 C: +64 21 323 841 ------------------

7 7

Re: [nznog] BRAS Options
by Stan Rivett 09 Nov '17

09 Nov '17

Crikey, thanks for all the replies Yes we need 10 Gbit, at least 3 ports and I'd rather not be too specific about numbers but more than a few thousand. Apologies for being a bit of a cheap bugger but you know what its like as an SME, it all comes out of my pocket ;-) Cheers Stan Rivett ------------------ Netspeed PO Box 5691 Dunedin P: +64 3 481 7245 C: +64 21 323 841 ------------------ On 8 November 2017 at 11:14, Tim Price <tim(a)initech.co.nz> wrote: > Juniper MX5 + licensing shouldn’t cost you more than $30k depending on > your Juniper partner status and where you buy it from. > > > > *From: *<nznog-bounces(a)list.waikato.ac.nz> on behalf of Stan Rivett < > stan(a)netspeed.net.nz> > *Date: *Wednesday, 8 November 2017 at 11:02 AM > *To: *nznog <NZNOG(a)list.waikato.ac.nz> > *Subject: *[nznog] BRAS Options > > > > Hi all > > > > The time has come to replace my poor old Cisco 7301 and the quote I got > for an ASR1002-HX made my eyes water. Still waiting for a Juniper quote but > the general discussion seemed like similar numbers. > > > > Are there any other reliable options out there that don't cost more than > my first house? > > > > Cheers > > > > Stan Rivett > > ------------------ > > Netspeed > > PO Box 5691 > > Dunedin > > P: +64 3 481 7245 <03-481%207245> > > C: +64 21 323 841 <021%20323%20841> > > ------------------ > > _______________________________________________ NZNOG mailing list > NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog >

9 18

Open Source LI project
by Shane Alcock 09 Nov '17

09 Nov '17

Hi all, A couple of months back, there was a discussion on this list about the ETSI standard for lawful intercept and the lack of available open source implementations of the standard. After some preliminary research and consultation with a handful of operators, WAND (and myself in particular) are putting together a proposal to develop an ETSI-compliant lawful intercept software tool, provided that this is still something that will be of use to people in the NZNOG community. We propose that the resulting software will be open-source and freely available to anyone, but that anyone who wants to see this project progress quickly should consider chipping in some funding to help cover the cost of having a dedicated programmer working on this for ~10-20 hours a week. The total funding pool doesn't need to be overly large: I am confident we will need much less than some of the numbers I've been hearing as the likely cost of a single piece of ETSI-compliant vendor kit. Of course, anyone who is providing funding would be consulted during the development process to ensure that the resulting software will be compatible with their particular network configuration. For now, I'd be interested in hearing from anyone who would like to use this software, regardless of whether you are able to fund the development or not. Replies can be on or off list. If we get enough interest, we would be looking at holding a meeting with anyone interested in funding later on this month (probably in Hamilton) to discuss the requirements for the software and how the funding model is going to work. The goal is to try and have the software in a deployable state (including being signed-off by police as being compliant) by April. I'm happy to take further questions or comments, either on or off list. Thanks, Shane Alcock Research Programmer WAND University of Waikato

2 2

NZNOG conference registrations are open!
by Dave Mill 08 Nov '17

08 Nov '17

Hi all Registrations are open - https://nznog-2018.lilregie.com . Our conference is being held at the Rydges Hotel, Queenstown from 22 - 26 January, 2018 - http://www.nznog.org/nznog18/venue Conference schedule and general information : http://www.nznog.org/nznog18 Available training : http://www.nznog.org/nznog18/nznog-2018-training . Please note, Facebook are handling their own registrations for the Wednesday Facebook event. If you are taking part in the Mikrotik training please note the prerequisites on our training page. We'll be publishing details on the talks/speakers at the conference proper (Thur/Fri) when we accept the talks. Expect the first details on those in the next couple of weeks. Any questions please ask. Cheers Dave

2 2

Important announcement from Microsoft
by Peter Tobin 07 Nov '17

07 Nov '17

On behalf of Microsoft Auckland (APE), Wellington (WIX) and AKL-IX Exchange peers, Microsoft is in the process of refining our peering policies to better serve our customers and the internet community. As part of this we are reaching out to peers for direct or bilateral BGP sessions, as we will stop advertising routes via the public route servers shorty. If you wish bring up a direct BGP session with us, review our peering policy at www.microsoft.com/peering<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.microso…> and request a session using the peering request form<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.micros…>. Please also ensure your PeeringDB record is up to date and has a 24x7 NOC role email and phone number listed, and only request a session if we are not already directly peered. This change is a reflection of Microsoft’s evolving IX policy, and is in the process of being implemented across various exchanges. The drivers behind this are many, and include more predictable routing, cleaner ASN path metrics as well as internal tool changes. Thank you for peering with Microsoft. AS8075 [osoft] http://www.peeringdb.com/view.php?asn=8075<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.peering…> ……………………………….. If any peers have difficulty in achieving a bi-lat across exchange fabric please reach out to the CityLink team (peering(a)citylink.co.nz)<mailto:peering(a)citylink.co.nz)> as we may be able to assist with facilitation via our contacts within Microsoft. CityLink Peering Team

1 0

Important announcement from Microsoft
by Peter Tobin 07 Nov '17

07 Nov '17

On behalf of Microsoft Auckland (APE), Wellington (WIX) and AKL-IX Exchange peers, Microsoft is in the process of refining our peering policies to better serve our customers and the internet community. As part of this we are reaching out to peers for direct or bilateral BGP sessions, as we will stop advertising routes via the public route servers shorty. If you wish bring up a direct BGP session with us, review our peering policy at www.microsoft.com/peering<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.microso…> and request a session using the peering request form<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.micros…>. Please also ensure your PeeringDB record is up to date and has a 24x7 NOC role email and phone number listed, and only request a session if we are not already directly peered. This change is a reflection of Microsoft’s evolving IX policy, and is in the process of being implemented across various exchanges. The drivers behind this are many, and include more predictable routing, cleaner ASN path metrics as well as internal tool changes. Thank you for peering with Microsoft. AS8075 [rosoft] http://www.peeringdb.com/view.php?asn=8075<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.peering…> ……………………………….. If any peers have difficulty in achieving a bi-lat across exchange fabric please reach out to the CityLink team (peering(a)citylink.co.nz)<mailto:peering(a)citylink.co.nz)> as we may be able to assist with facilitation via our contacts within Microsoft. CityLink Peering Team

1 0

NZNOG 2018 Update
by Dave Mill 31 Oct '17

31 Oct '17

Hi all Our CFP has now officially closed. We've received a lot of good submissions and will begin accepting talks soon. If you have missed the CFP close and still want to talk definitely let us know. However, we will first be accepting the on time submissions. We've added a page about the training events we're offering to our website - http://www.nznog.org/nznog18/nznog-2018-training . The Mikrotik training has some pre-requisite details on that page. Go Wireless are offering the required pre-requisite training in the near future. Links to Go Wireless' training page is on our training page. We're just waiting to lock in the Facebook training and maybe one other training session and we'll then open registrations. Apologies for the delays - we're chasing the other parties as much as we can. Cheers Dave (on behalf of the NZNOG Trust)

1 0

Sysadmin Miniconf 2018 - Call for Presentations
by Simon Lyall 24 Oct '17

24 Oct '17

There will be a one day mini conference on Linux Systems Administration held as part of linux.conf.au 2018 (held in Sydney, Australia on 22 - 26 January 2018). The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf, https://sysadmin.miniconf.org/cfp18.html (A copy of the CFP text is included below for your convenience.) Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. This is our 12th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website: https://sysadmin.miniconf.org/ -=+ Presentation Topics +=- We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments large and small. Topics for presentations could include (but are not limited to): * Systems Administration Best Practice * Virtualisation and Cloud Computing * Containers and orchestration * Sysadmin Administration in a "serverless" environment (FAAS) * TLS everywhere * Monitoring and metrics. Collection, storage and presentation * Infrastructure/Platform/Software as a Service (IAAS, PAAS, SAAS) * Networkng: IPv6, SDN (Software Defined Networking), performance * DevOps, Configuration Management and provisioning * Bootstrapping systems, Lifecycle Management * Dealing with BYOD * Backups in a virtual/distributed world * Troubleshooting techniques * DevOps and SysAdmin Culture * Web and Email management * Keeping legacy systems functioning * War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. -=+ Format of Presentations +=- We are now seeking proposals for presentations at the mini-conference. We have openings for: 15-25 minute short presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA keynote before morning tea), we expect the majority of available timeslots to be 20 minutes or less, with possibly 1-2 slightly longer talks if there is space in the schedule. We have a general policy of accepting a high proportion of proposals but handing out relatively short timeslots. Please see previous years Miniconf schedules for examples of how the programme is organised. -=+ Submitting talks +=- Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up by the time the conference happens) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor to priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. To submit a talk to the LCA2017 Sysadmin Miniconf, create an account on the LCA2018 website: https://linux.conf.au/dashboard create a speaker profile, and then select "New Proposal" and "System Administration Miniconf Presentation", or while logged into the LCA2018 site, go directly to: https://rego.linux.conf.au/proposals/submit/sysadmin-miniconf/ If you have a preferred length of your Short Presentation (15/20/25 minutes) or Lightning Talk (5/10 minutes) please use the Private Abstract field to describe what would work best for your talk. Otherwise we will pick a length that best suits the gaps in the programme as we put the final programme together. In some cases we maybe able to add a few extra minutes to a few Short Presentations if there is any spare time left in the programme. -=+ Dates and Deadlines +=- To encourage early submissions, priority (both of inclusion and scheduling) will be given to presentations submitted by 23:59 UTC on the 5th of November 2017. I f you have a good presentation idea, please let us know early, even if you need time to finalise the presentation abstract. Please indicate if you need an early confirmation to aid you in arranging time off work or travel; we will do our best to assist. 2017-11-05 - Deadline for early submissions 2017-12-03 - Deadline for submissions 2017-12-10 - Miniconf programme published 2018-01-22 - Sysadmin Miniconf held. -=+ Contact and Questions +=- Please see our website at https://sysadmin.miniconf.org for more information on the Miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2018 @ sysadmin.miniconf.org Ewen McNeill and Simon Lyall LCA2018 Sysadmin Miniconf Conveners -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

1 0

ntp.net.nz changes and update
by Josh Simpson 16 Oct '17

16 Oct '17

Hi NZNOG, Time for a ntp.net.nz update and upcoming changes. ntp1.ntp.net.nz needs to be migrated to a new router, this will mean the IPv4 and IPv6 addresses will change, currently scheduled for 2017-10-22. 202.46.191.123 to 202.46.177.18 2001:dce:4000:2::123 to 2001:dce:3:17a::18 ntp2.ntp.net.nz is still IPv4 only, we are working on restoring IPv6 once we have upstream connectivity sorted. ntp3.ntp.net.nz has had IPv6 turned back on, this has been operating with v6 since 2017-09-25. ntp4.ntp.net.nz has been live for over 14 months, IPv4 only, this is located in Christchurch. We are working with our upstream to have IPv6 connectivity. We have also been testing a number of the servers in pool.ntp.org in the New Zealand and Oceania Pools, this has been going well and we have seen a jump in NTP packets per second on each node from a max of ~7 to a max of ~1000. We plan to add the rest of the servers in shortly. Details of the service can be found at https://ntp.net.nz As always let us know if you have any queries. Cheers Josh -- Josh Simpson Systems Administrator NZRS Ltd M: +64 21 783 399 P: +64 4 555 0124 GPG: 6516 B4EA 413B CAED 57B5 0956 124C 8AC3 A362 8080 www.nzrs.net.nz

1 0

[Owasp-New_Zealand] OWASP NZ Day 2018 - Registration, call for presentations, trainers and sponsors
by Kim Carter 03 Oct '17

03 Oct '17

Hi All, The OWASP NZ crew are pleased to announce the 9th OWASP New Zealand Day conference, to be held at the University of Auckland. As per previous years, OWASP NZ Day 2018 will be a free conference dedicated to information security with an emphasis on secure development techniques and management. The con will be held on the 5th of February, with training being run the day before (4th of February). Further information is available on the event wiki page here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018 The registration link can be found here: https://owaspnz2018.eventbrite.com/ Please note that registration cut off is the 29th of January. We have plenty of seats, and though we've come to expect the flood of last minute emails from those of you that are either forgetful or just plain lazy, it messes with our numbers. It also hurts our collective feelings. So register. Do it. We have a large number of presenter slots to fill. We're interested in topics covering everything from introductory topics, to deeply technical subjects to risk and compliance. Presentation submissions are welcome from all interested parties, and we're especially keen to hear from the developers and other technical communities, not just the professional infosec nerds. We will not consider vendor pitches, commercial content or other such attempts to pedal your filthy, filthy wares. More info is available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Pre…<https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2017#tab=Call_For_Pre…> CFP Deadline: 8th of December. This year we have a number of training slots to fill. If you have a security related training you'd like to give the day before the main con, then please sub! More info is available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Tra…<https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2017#tab=Call_For_Tra…> CFT Deadline: 8th of December. OWASP is strictly not for profit and to keep our conference free we need sponsors to support us. The sponsorship cash is used to help make OWASP NZ Day a free and valuable experience for the audience. More details on sponsorship specifics available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Spo… Event Website: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018 About OWASP: https://www.owasp.org/ About the NZ Chapter: https://www.owasp.org/index.php/New_Zealand Cheers! Denis Andzakovic, Kim Carter and Kirk Jackson OWASP NZ Chapter Leaders

1 0

TICSA and Lawful Interception
by ticsa＠police.govt.nz 01 Oct '17

01 Oct '17

Hi NZNOG The TICSA Registrar invites you to a Technical Discussion about Lawful Interception. There has been a lot of discussion about LI recently and we would like to clarify what it means to be Compliant. The aim of this meeting is to work through ‘the how’ and to answer any questions you may have. This is targeted at Network Engineers to whom PCAP, ASN.1 and ETSI 102.232-1 means something. Please register your interest by emailing off list, as space is limited (attendance by invitation only). Meeting will be held in Wellington on the 16th of October. Cheers Neil =============================================================== WARNING The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately

1 0

KSK Rollover Postponed
by Save Vocea 28 Sep '17

28 Sep '17

Dear NZNOG community, A couple of weeks ago I posted ICANNs’ KSK rollover timelines in here. It was announced today that the plan to change the cryptographic key that helps protect the Domain Name System (DNS) is being postponed. The changing or "rolling" of the KSK Key was originally scheduled to occur on 11 October, but it is being delayed because some recently obtained data shows that a significant number of resolvers used by Internet Service Providers (ISPs) and Network Operators are not yet ready for the Key Rollover. The availability of this new data is due to a very recent DNS protocol feature that adds the ability for a resolver to report back to the root servers which keys it has configured. Full announcement is here: https://www.icann.org/news/announcement-2017-09-27-en Regards, Save Vocea ICANN staff in the region From: Save Vocea <save.vocea(a)icann.org> Date: Tuesday, September 12, 2017 at 4:53 PM To: NZNOG <nznog(a)list.waikato.ac.nz> Subject: KSK rollover timeline and how to check if your systems are ready Dear NZNOG list members, I’d appreciate if this is shared through your network /organizations and to check if your systems won’t be affected by the following change. The Internet Corporation for Assigned Names and Numbers (ICANN) is planning to roll, or change, the “top” pair of cryptographic keys used in the Domain Name System Security Extensions (DNSSEC) protocol, commonly known as the Root Zone KSK. This will be the first time the KSK has been changed since it was initially generated in 2010, and is considered an important security step, in much the same way that regularly changing passwords is considered a prudent practice by any Internet user. What does that mean? Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other Domain Name System (DNS) resolver operators; DNS resolver software developers; system integrators; and hardware and software distributors who install or ship the root's "trust anchor." The KSK is used to cryptographically sign the Zone Signing Key (ZSK), which is used by the Root Zone Maintainer to DNSSEC-sign the root zone of the Internet's DNS. Why do you need to prepare? Currently, 25% of global Internet users, or 750 million people, use DNSSEC-validating resolvers that could be affected by the KSK rollover. If these validating resolvers do not have the new key when the KSK is rolled, end users relying on those resolvers will encounter errors and be unable to access the Internet. How to know if your systems are up-to-date? ICANN is offering a test bed for operators or any interested parties to confirm that their systems handle the automated update process correctly. Check to make sure your systems are ready by visiting: http://go.icann.org/KSKtest. What is the timeline for this process? October 27, 2016: KSK rollover process begins as the new KSK is generated. July 11, 2017: Publication of new KSK in DNS. September 19, 2017: Size increase for DNSKEY response from root name servers. October 11, 2017: New KSK begins to sign the root zone key set (the actual rollover event). January 11, 2018: Revocation of old KSK. March 22, 2018: Last day the old KSK appears in the root zone. August 2018: Old key is deleted from equipment in both ICANN Key Management Facilities. More information about the root zone KSK rollover is available here: https://www.icann.org/resources/pages/ksk-rollover. Thank you, Save vocea VP, Global Stakeholder Engagement, Oceania ICANN

2 1

NZNOG 2018 Updates
by Dave Mill 24 Sep '17

24 Sep '17

Hi all As promised here is the list of workshops/tutorials that we have organised so far. These aren't definite yet but are very likely to happen. *Wednesday tutorials:* -Network Security Tutorial (run by APNIC) -Facebook Network Automation Hack event (run by Facebook, will be similar to https://netengcodehack2017.splashthat.com/%29 ) *Workshop (roughly Monday 9am to Wednesday 12pm):* -Mikrotik MTCINE training - Outline here https://mikrotik.com/download/pdf/MTCINE_Outline.pdf Our CFP is still open. Details here - http://www.nznog.org/nznog18/call-for-papers-2018 . If anyone else wants to help Richard Nelson and myself put together the programme for Thur/Fri please get in contact. So far we've received details on some really interesting talks. If you want to sponsor NZNOG please reach out also. Cheers Dave

1 0

Datacom having network problems?
by Mauricio Freitas 23 Sep '17

23 Sep '17

Does anyone have a network contact at Datacom please? I can't get to datacom.co.nz (direct) from my NZ connection, and can't get to Geekzone via Cloudflare either (CF returns a timeout trying to reach origin). However if I fire a VPN to Sydney both datacom.co.nz and Geekzone work fine. Called datacentre and ops guys have no idea what's going on. Seems that traffic to NZ is being impacted but not to overseas. Cheers Mauricio Freitas https://about.me/freitasm

1 1

NZNOG 2018 updates
by Dave Mill 14 Sep '17

14 Sep '17

Hi all I wanted to give some more details on our plans for the conference next year. On Wednesday Facebook are looking at holding a Network Automation Hack event as part of NZNOG. This should be a really awesome session. It will be similar to this - https://netengcodehack2017.splashthat.com/%29 . Whilst this isn't completely locked in yet it has approval internally at Facebook and looks set to happen. I'd suggest if this interests you then plan to be at NZNOG from Wed - Fri. Be warned, seats will be limited. The other event I wanted to announce I unfortunately still can't. I've been chasing people pretty hard on it and I still don't know that it will definitely happen :( I will update when I know more. Cheers Dave

1 0

Dialup over Ethernet
by Ewen McNeill 13 Sep '17

13 Sep '17

A client had a (business) customer switch over to UFB and needed assistance reconfiguring the (Mikrotik) router being attached to the ONT -- it turned out whoever first set up the Mikrotik (sensibly) assumed it'd be seeing IP packets over VLAN 10, but actually the ISP required IP packets over PPPoE over VLAN 10 in order for it to work. Looking around it appears this client's customer's ISP isn't the only one that is requiring PPPoE over VLAN tagging over Ethernet for their UFB connections. Is there a reason other than "let's make everything look like 1990s dialup so it works with our legacy equipment" for the bit/CPE CPU overhead of PPPoE on UFB, including imposing the lowered usable MTU and PMTU discovery headaches on the end user? The only one that really comes to mind is "user/password authentication" (rather than needing to collect CPE MAC addresses which seems to happen with, eg, Vodafone cable/FibreX). But it's not clear to me why, eg, 802.1X isn't used for the user/password authentication in that case; or DHCP with some extension to pass a "secret" identifier. 20-bytes-per-packet-forever seems a large overhead to pay for user/password authentication at CPE power on.... (Maybe in the beginning there's "lack of CPE support" -- but we're a few years into the UFB rollout, and lots of ISPs seem to be supplying their own ISP-badged CPEs anyway, which could presumably implement whatever was needed.) Ewen

10 16

AirNZ SPF Issues
by Pieter De Wit 11 Sep '17

11 Sep '17

Hey NZNOG’rs, I know that this is not “nice to do” but I have tried the contact centre - the issue is logged but I doubt it will get to the right people ? AirNZ currently has 2 SPF entries and this is causing emails to fail: dig TXT airnz.co.nz | grep spf1 airnz.co.nz. 21301 IN TXT "v=spf1 a ..." airnz.co.nz. 21301 IN TXT "v=spf1 …" Please fix :) I have error logs going back to the 8th of Aug, if that helps ? I don’t know what other domains this was done on. Cheers, Pieter

2 1

KSK rollover timeline and how to check if your systems are ready
by Save Vocea 11 Sep '17

11 Sep '17

Dear NZNOG list members, I’d appreciate if this is shared through your network /organizations and to check if your systems won’t be affected by the following change. The Internet Corporation for Assigned Names and Numbers (ICANN) is planning to roll, or change, the “top” pair of cryptographic keys used in the Domain Name System Security Extensions (DNSSEC) protocol, commonly known as the Root Zone KSK. This will be the first time the KSK has been changed since it was initially generated in 2010, and is considered an important security step, in much the same way that regularly changing passwords is considered a prudent practice by any Internet user. What does that mean? Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other Domain Name System (DNS) resolver operators; DNS resolver software developers; system integrators; and hardware and software distributors who install or ship the root's "trust anchor." The KSK is used to cryptographically sign the Zone Signing Key (ZSK), which is used by the Root Zone Maintainer to DNSSEC-sign the root zone of the Internet's DNS. Why do you need to prepare? Currently, 25% of global Internet users, or 750 million people, use DNSSEC-validating resolvers that could be affected by the KSK rollover. If these validating resolvers do not have the new key when the KSK is rolled, end users relying on those resolvers will encounter errors and be unable to access the Internet. How to know if your systems are up-to-date? ICANN is offering a test bed for operators or any interested parties to confirm that their systems handle the automated update process correctly. Check to make sure your systems are ready by visiting: http://go.icann.org/KSKtest. What is the timeline for this process? October 27, 2016: KSK rollover process begins as the new KSK is generated. July 11, 2017: Publication of new KSK in DNS. September 19, 2017: Size increase for DNSKEY response from root name servers. October 11, 2017: New KSK begins to sign the root zone key set (the actual rollover event). January 11, 2018: Revocation of old KSK. March 22, 2018: Last day the old KSK appears in the root zone. August 2018: Old key is deleted from equipment in both ICANN Key Management Facilities. More information about the root zone KSK rollover is available here: https://www.icann.org/resources/pages/ksk-rollover. Thank you, Save vocea VP, Global Stakeholder Engagement, Oceania ICANN

1 0

New Zealand Internet Research Forum 2017 - Registrations open
by Nicole Skews-Poole 11 Sep '17

11 Sep '17

Kia ora, Registrations for this year's New Zealand Internet Research Forum are open. The Forum will be held on 8 November, the day before NetHui 2017 <https://2017.nethui.nz/> - as part of the NetHui umbrella. *You can register for free by selecting the first event here: https://nethui-2017.lilregie.com/step1 <https://nethui-2017.lilregie.com/step1>* you can also register there for NetHui 2017 should you want to come along! The programme for this year will be finalised soon, and in the meantime you can check out last year's programme <https://internetnz.nz/internet-research-forum-2016-programme> for an idea of what goes on at the NZIRF. Please consider sharing this with your networks. I look forward to seeing you there! *Ngā mihi nui,* *Nicole Skews-Poole* NZIRF Organiser InternetNZ Mobile: +64 27 323 8914 Email: nicole(a)internetnz.net.nz A better world through a better Internet

1 0

TICSA and lawful intercept
by Dave Mill 06 Sep '17

06 Sep '17

Hi all So, probably a bit a touchy subject this one but here goes.. If you are a network operator and you have more than 4000 customers in my understanding you need to have full interceptions capabilities. (I'm not a lawyer, etc, etc) This is more than just being 'interception ready'. http://www.police.govt.nz/advice/businesses-and-organisations/ticsa/interce… This will mean having a mediation system and being able to produce intercept data in the ETSI standard - again, as far as I know. What are companies/organisations out there doing about this? Is there a nice open source solution out there for this? (I haven't found one yet) Are people putting their heads in the sand and praying they never get served a warrant? Is everyone just shelling out hundreds of thousands of dollars on a vendor LI solutions? What network kit are people integrating with LI in NZ? And note, the last paragraph on the URL I linked above reads: "Can I share interception capability resources? Network operators may co-ordinate, share or contract for services (equipment or staff) in order to meet the interception capability requirements in the Act. However, it remains the responsibility of the network operator to ensure that any such arrangement does not affect any obligations that apply under the Act. Before entering into any such arrangement a network operator must notify the Director of the GCSB." Replies on or off list welcomed. Cheers Dave (AS17705)

9 20

Christchurch Hacker Conference 2017 (CHCon) Tickets and Training now on sale
by CHCon crew 05 Sep '17

05 Sep '17

Hi Everyone. The Christchurch Hacker Conference (CHCon) tickets are now up for grabs at (https://chcon.nz) along with merchandise as part of the ticket purchase process. The conference is running on Friday 27th and Saturday 28th of October We also have a collection of excellent trainings available on Thursday 26 October. A big thanks to Insomnia (platinum) and Quantum Security (silver) for sponsoring us and helping us get this far. We are still looking for additional sponsors to help make the conference even better. We look forward to seeing you at the con! CHCon Team.

1 0

NZNOG'18 - Call For Papers
by Richard Nelson 03 Sep '17

03 Sep '17

The NZNOG organising committee invites papers for its 15th annual conference, to be hosted at Rydges Hotel, Queenstown, New Zealand from 22 - 26th January 2017. There will the three day Workshops 22 – 24 January, a day of tutorials on 24 January with the main conference on 25 – 26 January. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 30th October. Please provide your talk title, duration, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking- related subject matter. Normally presentations are video streamed live and slide decks are posted to the NZNOG website. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. The organising committee will evaluate proposals based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog18/call-for-papers-2018 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

3 2

SPF for Spark Business Mail
by Matthew McTague 22 Aug '17

22 Aug '17

Hi Noggers, Hoping to find some help from someone knowledgeable here as I can't get any answers through normal channels. I'm trying to find the correct SPF record (include FQDN or IP address ranges) for customers sending email via Spark Business Hub Mail. Have tried through normal support channels (to be told the SPF record is commercially sensitive) and have tried normal escalation paths. Anyone with knowledge on the subject, please contact me (perhaps if the correct SPF record can be a reply on-list, so everyone has it on record. It would help the NZNOG community as a whole.) Warm Regards, [https://www.vetta.tech/sig/vetta_signature_logo.png] <http://www.vetta.tech> [https://www.vetta.tech/sig/facebook_signature_icon.png] <http://www.facebook.com/VettaTech> [https://www.vetta.tech/sig/twitter_signature_icon.png] <http://www.twitter.com/VettaTech> [https://www.vetta.tech/sig/linkedin_signature_icon.png] <http://www.linkedin.com/company/2840435> [https://www.vetta.tech/sig/partnersilver.png] [https://s3.amazonaws.com/htmlsig-assets/spacer.gif] Matthew McTague / Systems & Network Engineer matthew(a)vetta.tech<mailto:matthew(a)vetta.tech> / DDI: +64 3 222 6013 Vetta Technologies Ltd 0800 4 VETTA / +64 3 683 9090 Level 3, Cnr Stafford & George Streets, Timaru 16 Pope Street, Christchurch East Tamaki, Auckland PO Box 923, Timaru www.vetta.tech<http://www.vetta.tech> This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender.

2 1

Vodafone outage in Karori/Highbury/Aro Valley (Wellington)
by Joel Wirāmu Pauling 21 Aug '17

21 Aug '17

Just spoke with Vodafone NOC - there was is planned upgrade work going on Karori prod node. Whatever it is seems to have taken out Highbury CMNT network. The Public facing Network status meter however shows all good - when there has been an ongoing outage since around 0100. Change window is meant to close at 0300 so hopefully it resumes before then. I am a little annoyed when there is planned work but the Public reporting tool isn't updated or fed by these things. -Joel

1 0

NZNOG 2018
by Dave Mill 13 Aug '17

13 Aug '17

Hi all There is now a link to book accommodation at our venue at our group rate on our website - http://www.nznog.org/nznog18 . The link is on the Venue page. We will be adding other accommodation options as they get back to our conference organiser. We hope to announce a very good workshop and tutorial in the coming few weeks.. More details on these once they are locked in. If you want to sponsor NZNOG please get in contact - info(a)nznog.org . Cheers Dave

1 0

Multiple connections to UFB in server room
by Paul Adshead 10 Aug '17

10 Aug '17

Hi guys. A shared server room has an active UFB service for another business on the floor. We want UFB service to our office too. Is an additional ONT install needed (as I'm being told by <ISP>)? Or, can Chorus just enable another port on the existing ONT and have and then run a network cable out to both routers from one ONT? Is the ONT capable of multiple PPPOE sessions to the offsite hardware? Or is this just creating a problem that doesn't need to exist (- ie say yes to the second ONT install)? Many thanks, Paul Adshead. 021890258

9 9

Spark (telecom) paging pacnet interface broken ?
by Ian Batterbee 01 Aug '17

01 Aug '17

Hi all, Does anyone here look after, or know who looks after, the 026 400 1283 modem interface to spark paging ? It's currently answering calls, but not giving a modem handshake. (Please don't respond with messages about paging being end-of-life'd, the fire service is paying for it to kept alive on life-support.) Thanks

4 5

IPv6 deployment survey - please participate and disseminate
by JORDI PALET MARTINEZ 30 Jul '17

30 Jul '17

Hi all, I’ve been running a survey for about 15 months, regarding the way IPv6 is being deployed for residential customers. I will be presenting an updated version of the survey results in the next APNIC 44 (https://conference.apnic.net/44/) to be held in Taichung next 7-14 September. As the IPv6 deployment is still ongoing in many countries, it will be interesting to gather new responses for the survey, in order to have as much accurate as possible data. So please, take the survey, is just a couple of minutes, and forward this email to other colleagues, mail exploders for NOGs and others, so we can increase the dissemination as much as possible. We are lacking responses from many countries in AP region, specially India and South Korea. The survey is available in several languages: English: http://survey.consulintel.es/index.php/175122?lang=en Chinese: http://survey.consulintel.es/index.php/175122?lang=zh-Hans Japanese: http://survey.consulintel.es/index.php/175122?lang=ja Korean: http://survey.consulintel.es/index.php/175122?lang=ko Spanish: http://survey.consulintel.es/index.php/175122?lang=es Portuguesse: http://survey.consulintel.es/index.php/175122?lang=pt-BR Thanks ! Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Free 42U Rack
by Jay Lee 26 Jul '17

26 Jul '17

We have a 42U rack in Riccarton exchange available for free. It's in very good condition. Size is H 2m x W 0.6m x D 1.01m, black colour. Mesh doors, side panels and some shelves. Pick up only from the exchange so you need PTN accreditation. If anyone is interested please contact me off list.

1 0

GLIF 2017 programme
by GLIF Secretariat 25 Jul '17

25 Jul '17

All, Apologies for the advertising (and cross-posting), but the programme for this global research and education networking event hosted by AARNet in Sydney is now available, and may be of interest to some… https://www.glif.is/meetings/2017/programme.pdf <https://www.glif.is/meetings/2017/programme.pdf> Regards, Kevin Meynell GLIF Secretariat ---- 17th Annual Global LambdaGrid Workshop - GLIF 2017 25-27 September 2017 Camperdown Campus, University of Sydney, Australia We are pleased to announce the programme for the 17th Annual Global LambdaGrid Workshop, which is being hosted by AARNet, the Australian National Research and Education Network. This event is bringing together networking experts from around the world to collaborate and exchange knowledge on new lambda networking technologies, middleware and applications. The workshop will have a specific focus on how global network architectures are supporting research applications in the Pacific region, in particular astronomy, high-energy physics, and other data intensive science. There will also be demonstrations of high-bandwidth applications. The registration fee is AUD 450 per person (AUD 350 for registered students) up to 23 August 2017, and AUD 500 per person (AUD 400 for registered students) thereafter. Accommodation is available in the Rydges Camperdown at the special rate of AUD 165 per night including GST, the Mercure Sydney Central at the special rate of AUD 249 per night, and the Waldorf Sydney Central Serviced Apartments at the special rate of AUD 195 per night including GST. These can be reserved when registering for the workshop, and should be booked before 23 August 2017. Please note that a Software Defined Networking (SDN) Workshop will also be held on Thursday, 28 September 2017 at the University of New South Wales. You can register, book accommodation and pay online at https://www.glif.is/meetings/2017/ <https://www.glif.is/meetings/2017/> We look forward to seeing you in Sydney!

1 0

Re: [nznog] Paging might be broken again today?
by Troy Baird 23 Jul '17

23 Jul '17

Yep, correct. Michael will email you off list from work mail to follow up on this with some internal teams here. -Troy Baird On 24/07/2017 4:14 PM, "David Maclagan" <david(a)verso.org> wrote: On 2017-07-24 15:32, Michael Fincham wrote: > On Thu, 20 Jul 2017 19:01:49 +1200, Ian Batterbee <ibatterb(a)gmail.com> > wrote: > >> Does anyone here look after, or know who looks after, the 026 400 1283 >> modem interface to spark paging ? >> >> It's currently answering calls, but not giving a modem handshake. >> > > We're getting modemy sounding noises today but NO CARRIER :( > > Anyone know what's up? Spark has not been helpful so far. > Talking to a firie contact, they're under the impression that the platform's been EoLed for everyone other than the firies. So that could be the issue? Cheers David _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog

3 2

Mikrotik and VLAN stripping
by Steve Phillips 18 Jul '17

18 Jul '17

Hi Guys, I was just wondering if it’s possible to set an egress rule on a mikrotik to strip any vlan tag without specifying the VLAN, and if so, what this configuration would look like? (i.e – vlan=any) It seems that you can do this for specific VLANS but if the inbound VLAN tag is random there doesn’t seem to be any ready examples on how to do this. Is it even possible? Or am I just trying to do things incorrectly? -- Steve.

1 0

Surgeries cancelled and patients told to avoid going to Rotorua and Taupo hospitals after fire | Stuff.co.nz
by Alan Maher 16 Jul '17

16 Jul '17

https://www.stuff.co.nz/national/health/94810043/rotorua-hospital-fire-cuts… And you know that this will take more than 24 hours. No form of fire protection?

1 0