- NZNOG - lists.nznog.org

Jetstreamgames Realm Ips?
by jfp 21 Jul '04

21 Jul '04

> Now, I can only find one IP address for this, and was hoping > someone might be able to tell me if it's available over 2 > different Ips so I can use a host based static route to get > one file through one NIC (and ADSL router #1) and another > file through the other NIC (and ADSL router #2) If one of the routers does DNAT you could use the same ip, just use the translated IP on the router that allows it. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

1 0

Jetstreamgames Realm Ips?
by NZNOG＠neilnz.com 21 Jul '04

21 Jul '04

Hi guys - I think this is appropriate here... I have been asked to arrange a head to head speed test for a new product with an existing competitor product (ADSL routers) and I'd like to use the JSG realm for this... However, I'd like to use one PC for side by side testing and graphing (Yes, we have marketing people that want to see this, and to show it off to visitors). This would be easy with Jetstream but our test accounts are only tiny traffic ones, so the obvious choice is JSG. Now, I can only find one IP address for this, and was hoping someone might be able to tell me if it's available over 2 different Ips so I can use a host based static route to get one file through one NIC (and ADSL router #1) and another file through the other NIC (and ADSL router #2) If we can't do this then we need to do a Router A THEN Router B and the marketing people just aren't excited about that. (Also, using one machine at the same time elimiates PC differences) (Yes, I know there are other issues, NIC cards, ADSL line differences etc - Marketing doesn't care) Cheers - Neil G

1 0

RE: [nznog] Voyager national routing
by Gordon Smith 19 Jul '04

19 Jul '04

Well, looks like that router isn't managed from here... Good news is that the MCI rep here is passing all this on to their Ops Manager in Sydney. He'll also let them know that the domain info is no longer valid, and to update their contact info :-) I had hoped that they'd have someone on this list.......

1 0

Voyager national routing
by Gordon Smith 19 Jul '04

19 Jul '04

Does anyone have any contact info for whoever has taken over the management of the Voyager peering router on APE? Failing that, is it still carrying any legitimate traffic? It's leaking international traffic, which makes it a bit too convenient for handing off DoS attacks - national peering links being larger than intl.... Anything from that router has an international return path. Anyone seeing any route advertisements from there? BTW, all the domain contact info for them is invalid - the phone number listed in the Domainz record is for a sheetmetal shop on the Nth Shore!! Cheers, Gordon

1 0

Re: Domain Registry of America at it again
by Dominic O'Hare 17 Jul '04

17 Jul '04

The Internet Name Group are back too trading under "domainnames.com.au" using an eNom reseller account. ----- Original Message ----- From: <nznog-request(a)list.waikato.ac.nz> To: <nznog(a)list.waikato.ac.nz> Sent: Sunday, July 18, 2004 12:00 PM Subject: NZNOG Digest, Vol 19, Issue 14 > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Domain Registry of America at it again (Juha Saarinen) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 17 Jul 2004 15:11:06 +1200 > From: Juha Saarinen <juha(a)saarinen.org> > Subject: [nznog] Domain Registry of America at it again > To: NZ NOG <nznog(a)list.waikato.ac.nz> > Message-ID: <40F898CA.3000009(a)saarinen.org> > Content-Type: text/plain; charset=us-ascii; format=flowed > > Had a "DOMAIN NAME EXPIRATION NOTICE" in the PO box today, and I suspect > many others in NZ will receive similar letters as well, from the > infamous domain name registration slammers. > > Those of you providing registration services may want to warn your > customers about this -- again. > > Interesting diagram charting the operators behind the scam and their > outfits here: > > http://chesley-rafferty.whatsinaname.com.au/slammers/ > > -- > Juha > > > > ------------------------------ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > End of NZNOG Digest, Vol 19, Issue 14 > ************************************* > >

1 0

Domain Registry of America at it again
by Juha Saarinen 16 Jul '04

16 Jul '04

Had a "DOMAIN NAME EXPIRATION NOTICE" in the PO box today, and I suspect many others in NZ will receive similar letters as well, from the infamous domain name registration slammers. Those of you providing registration services may want to warn your customers about this -- again. Interesting diagram charting the operators behind the scam and their outfits here: http://chesley-rafferty.whatsinaname.com.au/slammers/ -- Juha

1 0

WorldxChange Peering
by Gordon Smith 15 Jul '04

15 Jul '04

Hi all, WorldxChange is now peering at APE. Would anyone wishing to peer with us directly please email peering(a)wxnz.net, and include AS number, prefix list, and router IP. Our details are: AS 17435 Prefix list: ip prefix-list wxnz-networks permit 202.182.192.0/19 le 20 Router IP: 192.203.154.108 If you're already peered with the APE route-servers, you should be seeing our route advertisements. BTW, we're seeing quite a bit of garbage originating nationally, which we're dropping. Seems to be a mixture of worms and exploits. The 2 main sources are Woosh and Voyager. Woosh - looks to be virus traffic; not a big deal, but it did show that the range 202.74.192.0 - 202.74.223.255 is missing reverse DNS Voyager - Really weird stuff. You guys need to add outbound filters. I'm seeing traffic from you claiming to be from Latin America and Level3 Networks. If you want a copy of logs, etc. give me a shout Cheers, Gordon Smith CCNA IP Services Manager WorldxChange Communications Ltd.

1 0

CallPlus prefix list update
by Steve Hawken 14 Jul '04

14 Jul '04

Hi, For networks peering with CallPlus AS 9790 please add the following to your prefix list, full prefix list attached. ip prefix-list callplus-networks permit 202.36.232.0/24 Cheers, Steve Steve Hawken Senior Network Engineer DDI ++ 64 9 919 6038 Mobile ++ 64 21 778 891 Email steveh(a)callplus.co.nz <mailto:steveh(a)callplus.co.nz>

1 0

System Admin Wanted
by Lamar - LH Web Services 11 Jul '04

11 Jul '04

My apologies if this is a slightly off-topic post. 02.Net Internet Services (Nelson based full ISP) will have an open job position for a system administrator (and also a couple of helpdesk staff) within the next 1 to 6 months. Duties would include managing Windows 2000, 2003 and Linux servers (mainly web, mail, radius, dns, etc). Cisco knowledge would be good too. Applicants must either be in Nelson or willing to relocate to Nelson. If your interested, feel free to contact me off list for more information and full duties, etc can be provided. -- Lamar Hargreaves :: Director :: 02.Net Internet Services :: LH Web Services Phone - 03 548 7474 (Ext 204) :: Fax - 03 548 4090 :: Email - lamar(a)02net.co.nz Postal Address - P.O Box 8020, Victory, Nelson, New Zealand This e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. Any opinions, advice or views contained in this e-mail may not reflect on the views of 02.Net Internet Services or LH Web Services.

1 0

Catalyst IT prefix update
by David Zanetti 08 Jul '04

08 Jul '04

For the people who peer with Catalyst IT (AS 23959) over WIX, we've got a new block behind us. Please update your filters as you feel appropriate. :) Full list follows: ip prefix-list catalyst description Catalyst IT netadmin(a)catalyst.net.nz ip prefix-list catalyst seq 10 permit 202.46.190.0/24 ip prefix-list catalyst seq 20 permit 202.49.159.0/24 ip prefix-list catalyst seq 30 permit 202.20.6.0/24 ip prefix-list catalyst seq 40 permit 202.36.119.0/24 Thanks. -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

1 0

TNZ Network Issues.
by Drew_Collins＠apn.co.nz 07 Jul '04

07 Jul '04

I just had the following emailed to me from Global Gateway (it may help). Upstream Provider Initial Outage Notification Australia Global-Gateway Internet is currently experiencing service disruption which began on 8th July 1400hrs You are likely to experience intermittent packet loss on your Australian service until this problem is resolved. The problem will be resolved by Australian provider early tomorrow morning. GGIS apologises for any inconvenience to you or your customers. Logged by Maurice Wilkinson on Thu Jul 8 17:34:13 2004 Drew Collins Group Communications Manager Group IT Services NZ APN Holdings NZ Ltd My DDI: +64 9 373 9573 My Mobile +64 21 823268 My Fax: +64 9 373 6411 Ph: +64 9 379 5050 My eMail: drew_collins(a)apn.co.nz Website: www.apn.co.nz *************************************************************************** This eMail may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of APN News & Media NZ Ltd. For more information on APN News & Media NZ Ltd please visit our web site at http://www.apn.co.nz ***************************************************************************

1 0

Slow access to NZ sites
by rod_christie＠wilsonandhorton.co.nz 06 Jul '04

06 Jul '04

Anyone else getting reports of slow access to their sites from international locations. Connected to both "T"s, but suspect "Telstra" as they were screwing with their international cache yesterday. Cheers Rod APNNZ Rod Christie Network Consultant APN Holdings NZ Limited E-Mail: rod_christie(a)apn.co.nz Mobile: (64) 21 636 909 DDI: (64) 9 373 9571 Fax: (64) 9 373 6411 *************************************************************************** This eMail may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of APN News & Media NZ Ltd. For more information on APN News & Media NZ Ltd please visit our web site at http://www.apn.co.nz ***************************************************************************

1 0

Woosh\Walker Wireless Prefix List Update
by Beatty Lane-Davis 06 Jul '04

06 Jul '04

Hullo again, we are advertising a new prefix to our valued peers at APE & WIX: 202.21.16.0/20 So we will now be advertising: ip prefix-list Woosh seq 5 permit 202.74.192.0/19 le 20 ip prefix-list Woosh seq 10 permit 202.21.16.0/20 Cheers, b Beatty Lane-Davis blanedavis(a)woosh.com Woosh Wireless +64.21.544.716

1 0

Telstra peering pricing.
by Simon Lyall 06 Jul '04

06 Jul '04

Little article here by the usual suspect: http://computerworld.co.nz/news.nsf/UNID/B67C1AFC59BD060FCC256EC900164A26?O… "According to several ISP sources who did not wish to be named, a month's megabit-per-second-level connection of TelstraClear's Domestic Internet Service will cost $160 plus GST. Purchase of TelstraClear circuits will also be required. " It would be interesting to see at what bandwidth the link will be worth getting, for small ISPs the circuit cost will probably mean it's just cheaper to use either their existing International link or another domestic provider to deliver the bandwidth. Even for larger providers the revenue is only going to be one or two thousand per month each. Not much to compensate for pissing everybody else off. And the larger providers will have plenty of options like sending Telstra customers like Waikato University bills to route their traffic nationally. -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

7 10

(no subject)
by Drew_Collins＠apn.co.nz 06 Jul '04

06 Jul '04

This is the formal reply from TCL on a email I sent them two days ago. Last Sunday morning between 0100-0600 during the regular planned maintanance window we upgraded 90% of the IP Networks' access switches to a new version of code. The main reason for this upgrade was to introduce software into the core switches that would support 'hitless upgrades' upon the next release of processor cards. This feature added resiliance to the IP Network in that we could upgrade software on the core switches and customers would not notice any outage. During the course of Sunday day/night there were a number of customers who appeared to have unrelated issues and engineers worked through the evening to resolve these. On Monday morning, when most customers started work, other network faults were reported. Along with some unrelated issues, it also appeared that there were issues with regard to the software upgrade on Sunday morning. About 12% of IP customers were affected with software issues related to the upgrade. After further diagnosis, it was decided to roll back to the previous, known good, software version of code on the core access switches in Auckland, Wellington and Christchurch. This was achieved by around 11am Monday morning and appeared to help restore service to affected customers. >From that point on, it was decided to work through all known affected customers with issues and rollback the software on the affected switches that they are connected to. This work carried on through the day on a case by case basis. This process will continue, as required, and engineers will work with any further affected customer. While the above is occuring, engineers are working with suppliers to resolve the issues and then a plan can be devised to complete the upgrade. We regret the impact this has had on customers. Significant steps were taken prior to the software change to avoid this happening. It is important to note that this version of GA (or General availability) code had gone through extensive testing in the TelstraClear IP Lab and had been running successfully online in parts of the Network for several weeks. Russell Prince TelstraClear Business Consultant Drew Collins Group Communications Manager Group IT Services NZ APN Holdings NZ Ltd My DDI: +64 9 373 9573 My Mobile +64 21 823268 My Fax: +64 9 373 6411 Ph: +64 9 379 5050 My eMail: drew_collins(a)apn.co.nz Website: www.apn.co.nz *************************************************************************** This eMail may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of APN News & Media NZ Ltd. For more information on APN News & Media NZ Ltd please visit our web site at http://www.apn.co.nz ***************************************************************************

11 20

RE: [nznog] (no subject)
by Scott Walsh 05 Jul '04

05 Jul '04

> Value their jobs ? It's company policy to NOT advertise major outtages > ? I'm more referring to current outtages, if anything. LET PEOPLE KNOW. I know departments in large provides that have a policy of not advising of planned outages, let alone unplanned (not implying that this is TC's). The techs/helpdesk in companies in companies that do not provide full information they are usual following their company policies or guidelines (or working with what they at the time). If techs/helpdesk doesn't give out information for policy reason, in my view the best people to try and change with this with are your account managers. Thanks Scott Walsh Service Implementation Specialist Logical CSI Level 2, 48 Greys Ave, P.O Box 5379, Wellesley Street, Auckland, New Zealand Tel: +64 9 359 4104 Fax: +64 9 309 3242 Mob: +64 21 307 763 www.nz.logical.com This email communication does not create or vary any contractual relationship between Logical and you. Internet communications are not secure and accordingly Logical does not accept any legal liability for the contents of this message. The contents of this email are confidential to the intended recipient at the email address to which it has been addressed. It may not be disclosed to or used by anyone other than this addressee, nor may it be copied in any way. If received in error, please contact Logical on 0800 802 729 quoting the name of the sender and the addressee and then delete it from your system. Please note that neither Logical nor the sender accepts any responsibility for viruses and it is your responsibility to scan the email and attachments (if any).

1 0

Re: [nznog] (no subject)
by neil gardner 05 Jul '04

05 Jul '04

>>> Drew Broadley <drew(a)corrupt.co.nz> 6/07/2004 4:37:28 p.m. >>> >I'm sure there are quite a few TC technicians on this list, why do none >of them announce it on here ? As has already been commented, I'm damn sure they aren't allowed to comment publically on the issues like this - and this list is actually public. A more reasonable lament would be to wonder why on earth their helpdesk was left to make up excuses when the TC knew about the problem very early and were already working through a plan to resolve the issues. I know that I would have felt MUCh happier with "We have a known problem with some core switches - it doesn't affect everyone but is affecting a lot of people. We're executing a rollback to a known good configuration. I can't give you a specific ETA on return of service for you but we expect to have 95% of the affected customers back online before 3pm", than I was with the "We've got upstream provider problems I think" The only difference between the 2 is a 5 minute email to the helpdesk staff from those in the know. Cheers - N. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

1 0

Urgent need for a Cisco with async serial port
by David Zanetti 05 Jul '04

05 Jul '04

We require fairly urgently a small Cisco router with at least one X.21 serial interface and Ethernet, for routing some IP. Recommended sources, and/or offers of actual units very welcome! -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

1 1

RE: [nznog] How to get square eyes
by Richard Naylor 05 Jul '04

05 Jul '04

At 06:03 p.m. 5/07/2004 +1200, Regan Murphy wrote: > > 4 TV stations now available - TV-One, TV-2, Shine TV and Maori TV > > > > check out www.r2.co.nz/meta/live.htm > > > >Went to fire up the TV One stream to catch the news but it seems to be >broadcasting TV2 instead? done battle with remotes. Should be all good now. no front panel controls and 3 STBs use the same remote. <sigh> at least I got the weather for next few days. (missed tomorrow, of course) There is some blocking artifacts due to satellite reception at the moment. This is also the cause of the occasional hue. Tomorrow we will try and put up some alternate bit rates for you to try as well as making the web pages a little more coherent. But what you see now is here to stay, so you can tell folks about it. rich

4 4

Re: [nznog] How to get square eyes
by Steve Martin 05 Jul '04

05 Jul '04

TV1 for me is fine, TV2 seems to be having ... issues. No picture or sound ... Was also the same for me last night ... Steve ----- Original Message ----- From: "Drew Broadley" <drew(a)corrupt.co.nz> To: "Richard Naylor" <richard.naylor(a)citylink.co.nz> Cc: <nznog(a)list.waikato.ac.nz> Sent: Tuesday, July 06, 2004 9:40 AM Subject: Re: [nznog] How to get square eyes Richard Naylor wrote: > done battle with remotes. Should be all good now. no front panel > controls and 3 STBs use the same remote. <sigh> at least I got the > weather for next few days. (missed tomorrow, of course) > > There is some blocking artifacts due to satellite reception at the > moment. This is also the cause of the occasional hue. > > Tomorrow we will try and put up some alternate bit rates for you to > try as well as making the web pages a little more coherent. But what > you see now is here to stay, so you can tell folks about it. > > rich I cannot seem to get any of the TV One and TV2 streams ? Streaming a blank screen and no sound (or hiss) - Drew _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

RE: [nznog] Internet Funkiness this morning
by Steve Schmidt 05 Jul '04

05 Jul '04

Once the rollback had been completed at 4pm, we had a couple of blips, 1 early evening and 1 at about 12am apparently due to problems on an alpine switch in Auckland. Other than that, all is looking good at this stage. _____ From: robbie_gernandt(a)wilsonandhorton.co.nz [mailto:robbie_gernandt(a)wilsonandhorton.co.nz] Sent: Tuesday, 6 July 2004 8:41 a.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Internet Funkiness this morning anybody still experiencing difficulties with TC services this morning? cheers Robbie G ************************************************************************ *** This eMail may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of APN News & Media NZ Ltd. For more information on APN News & Media NZ Ltd please visit our web site at http://www.apn.co.nz ************************************************************************ *** CAUTION: This e-mail and any attachment(s) contains information that is intended to be read only by the named recipient(s). It may contain information that is confidential, proprietary or the subject of legal privilege. This information is not to be used by any other person and/or organisation. If you are not the intended recipient, please advise us immediately and delete this e-mail from your system. Do not use any information contained in it.

1 0

RE: [nznog] Internet Funkiness this morning
by Scott Walsh 05 Jul '04

05 Jul '04

Hi, We were informed there will most likely be more drops this afternoon while the back out was done... Scott -----Original Message----- From: Mark Potter [mailto:Mark.Potter(a)tvnz.co.nz] Sent: Monday, 5 July 2004 1:19 p.m. To: nznog(a)list.waikato.ac.nz Subject: RE: [nznog] Internet Funkiness this morning I heard they were backing out changes made on the weekend. :( Mark P -----Original Message----- Hi guys - I expect this message will bounce or disappear somewhere since I have seen nothing over this list this morning (Monday 5th) but... Does anyone know what the story is with Telstra this morning? Our International has been bouncing up and down (more down than up) and now national is starting to act funky. I've confirmed several others are experiencing this on Telstra circuits but all anyone can get out of Telstra is "Upstream provider problems" Just like to know if I'm going to be able to do any (Internet) related work today. Cheers - Neil G ps. If you get this after Monday the 5th, just ignore the message. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog ================================================================ CAUTION: This e-mail and any attachment(s) contains information that is intended to be read only by the named recipient(s). It may contain information that is confidential, proprietary or the subject of legal privilege. This information is not to be used by any other person and/or organisation. If you are not the intended recipient, please advise us immediately and delete this e-mail from your system. Do not use any information contained in it. ================================================================ For more information on the Television New Zealand Group, visit us online at http://www.tvnz.co.nz ================================================================ _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

4 4

RE: [nznog] How to get square eyes
by Regan Murphy 04 Jul '04

04 Jul '04

> 4 TV stations now available - TV-One, TV-2, Shine TV and Maori TV > > check out www.r2.co.nz/meta/live.htm > Went to fire up the TV One stream to catch the news but it seems to be broadcasting TV2 instead? -- Regan

1 0

RE: [nznog] How to get square eyes
by Regan Murphy 04 Jul '04

04 Jul '04

http://www.videolan.org/ The open source VLC Media Player plays ASX streams no problem. > -----Original Message----- > From: Richard Naylor [mailto:richard.naylor(a)citylink.co.nz] > Sent: Monday, 5 July 2004 3:29 p.m. > To: Richard Hector; nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] How to get square eyes > > At 03:26 p.m. 5/07/2004 +1200, Richard Hector wrote: > > >How about something viewable with free software? > > use mplayer on Linux. Other players available for OS-X. And I > think VideoLAn works, but haven't tried it. > > rich > off to battle remote units and get channels right - again......... > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

How to get square eyes
by Richard Naylor 04 Jul '04

04 Jul '04

It was a busy week end. Another radio station available - Cool Blue Radio www.coolblueradio.com 4 TV stations now available - TV-One, TV-2, Shine TV and Maori TV check out www.r2.co.nz/meta/live.htm Things like audio levels etc are being checked, changed, and otherwise fiddled with. Equally routing will change later in the week, but will be transparent to most. If there is demand, we'll look at higher resolution versions as well. I also plan a page that lets you watch all 4 stations at once - for the serious channel surfer. enjoy ! rich ps - I know the web page is "soviet", I'll get that sorted soon.

6 6

RE: [nznog] Internet Funkiness this morning
by Mark Potter 04 Jul '04

04 Jul '04

I heard they were backing out changes made on the weekend. :( Mark P -----Original Message----- Hi guys - I expect this message will bounce or disappear somewhere since I have seen nothing over this list this morning (Monday 5th) but... Does anyone know what the story is with Telstra this morning? Our International has been bouncing up and down (more down than up) and now national is starting to act funky. I've confirmed several others are experiencing this on Telstra circuits but all anyone can get out of Telstra is "Upstream provider problems" Just like to know if I'm going to be able to do any (Internet) related work today. Cheers - Neil G ps. If you get this after Monday the 5th, just ignore the message. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog ================================================================ CAUTION: This e-mail and any attachment(s) contains information that is intended to be read only by the named recipient(s). It may contain information that is confidential, proprietary or the subject of legal privilege. This information is not to be used by any other person and/or organisation. If you are not the intended recipient, please advise us immediately and delete this e-mail from your system. Do not use any information contained in it. ================================================================ For more information on the Television New Zealand Group, visit us online at http://www.tvnz.co.nz ================================================================

1 0

Internet Funkiness this morning
by neil gardner 04 Jul '04

04 Jul '04

Hi guys - I expect this message will bounce or disappear somewhere since I have seen nothing over this list this morning (Monday 5th) but... Does anyone know what the story is with Telstra this morning? Our International has been bouncing up and down (more down than up) and now national is starting to act funky. I've confirmed several others are experiencing this on Telstra circuits but all anyone can get out of Telstra is "Upstream provider problems" Just like to know if I'm going to be able to do any (Internet) related work today. Cheers - Neil G ps. If you get this after Monday the 5th, just ignore the message. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

1 0

Zombies
by Simon Lyall 02 Jul '04

02 Jul '04

It looks like there are lot of NZ based Zombies sending very large amounts of Spam ( much of it in German) to some ISPs. This has really been going hard over the last hour. I'm seeing adsl accounts at xtra, iprolink and ihug, xtra dialups etc etc. As a related issue, how do people feel about a whitelist RBL of NZ mail servers, It looks like it's not good to just whitelist NZ IPs -- Simon J. Lyall. | Very Busy | Mail: simon(a)darkmere.gen.nz "To stay awake all night adds a day to your life" - Stilgar | eMT.

4 5

RE: [nznog] WorldXChange
by Gordon Smith 01 Jul '04

01 Jul '04

Thats probably because national peering isn't up yet :-) Cheers, Gordon -----Original Message----- From: Craig Spiers [mailto:craig(a)concept.net.nz] Sent: Friday, 2 July 2004 2:37 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] WorldXChange Anyone from WXC on this mailing list? Your domestic traffic is being routed via australia.. :)

1 0

WorldXChange
by Craig Spiers 01 Jul '04

01 Jul '04

Anyone from WXC on this mailing list? Your domestic traffic is being routed via australia.. :)

1 0

ECM UPS - Support
by Mark Piper 01 Jul '04

01 Jul '04

Good morning, Sorry if this is a bit offtopic. I am urgently trying to find a contact for someone who sells and/or provides support for ECM UPS equipment. Any contact details would be appreciated. Best Regards, -- Mark Piper SolNet Solutions Limited L12, SolNet House, 70 The Terrace PO Box 397, Wellington, New Zealand DDI +64 4 462 5089 Office +64 4 462 5000, Fax +64 4 462 5012 www.solnetsolutions.co.nz

1 0

Routing funky-ness to WIX via GGI?
by Matthew Poole 30 Jun '04

30 Jun '04

A number of people are reporting difficulties accessing the Debian mirror at ftp.citylink. FTPing in from IHUG or Max (and apparently from Xtra, and I'd guess anyone else who transits via GGI) gets the following message: 550- ISP Routing Error 550- 550- Your ISP's access to local New Zealand content is currently 550- broken. Please contact your ISP and advise them that they 550- may well be able to fix this problem for you by peering with 550- the route servers and/or other ISPs at the APE or the WIX. 550- 550- The server you have connected to is not within New Zealand. 550- In order to protect you from prohibitive international 550- traffic charges, you will not be able to access the resources 550- you were looking for, here. 550- 550- We apologise for any inconvenience. 550 Now, we all expect Xtra/Telecom to play nasty games with domestic traffic, but can anyone shed light on why "good" ISPs such as the Hug or Max aren't doing the domestic peering thing? Are we starting to see preemptive peering termination by ISPs who're preparing for the day when the two Ts stop playing the game? On the other side, are we now seeing a trend towards content providers playing a political game to try and reverse the swing away from peering? Obviously Citylink are far more involved at the peering level than nearly any other content provider, but blocking access to content mirrors under the guise of protecting the consumer(when in reality it's protecting the provider) is not a good way to make friends.

9 12

The New Zealand Network Operators' Group
by Donald Neal 30 Jun '04

30 Jun '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Meetings We're now working towards our next annual conference, to be hosted by the WAND group in Hamilton on February 2nd to 4th, 2005. See http://www.nznog.org/ for details of this year's conference, which drew something over 120 participants. Also see http://auckland.thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. About This Mailing List This list has around 690 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

RE: [nznog] Routing funky-ness to WIX via GGI?
by Craig Humphrey 29 Jun '04

29 Jun '04

Newbie alert! We're connected directly to GGI, what are our options (if any) for peering with APE/WIX? Later'ish Craig [don't ask, we have more politics than the Behive...] > -----Original Message----- > From: Matthew Poole [mailto:matt(a)p00le.net] > Sent: Wednesday, June 30, 2004 9:38 AM > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Routing funky-ness to WIX via GGI? > > > A number of people are reporting difficulties accessing the > Debian mirror > at ftp.citylink. > > FTPing in from IHUG or Max (and apparently from Xtra, and I'd guess > anyone else who transits via GGI) gets the following message: > 550- ISP Routing Error > 550- > 550- Your ISP's access to local New Zealand content is currently > 550- broken. Please contact your ISP and advise them that they > 550- may well be able to fix this problem for you by peering with > 550- the route servers and/or other ISPs at the APE or the WIX. > 550- > 550- The server you have connected to is not within New Zealand. > 550- In order to protect you from prohibitive international > 550- traffic charges, you will not be able to access the resources > 550- you were looking for, here. > 550- > 550- We apologise for any inconvenience. > 550 > > Now, we all expect Xtra/Telecom to play nasty games with > domestic traffic, > but can anyone shed light on why "good" ISPs such as the Hug > or Max aren't > doing the domestic peering thing? Are we starting to see preemptive > peering termination by ISPs who're preparing for the day when > the two Ts > stop playing the game? > > On the other side, are we now seeing a trend towards content providers > playing a political game to try and reverse the swing away > from peering? > Obviously Citylink are far more involved at the peering level > than nearly > any other content provider, but blocking access to content > mirrors under > the guise of protecting the consumer(when in reality it's > protecting the > provider) is not a good way to make friends. > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

3 2

Re: RE: [nznog] Routing funky-ness to WIX via GGI?
by Jonny Martin 29 Jun '04

29 Jun '04

I would have thought that taking users to the content is a far better approach in this instance. Mirroring the content at APE serves only to strengthen the Auckland-centric nature of the NZ internet. Cheers, Jonny. > > Well what about hosting a mirror in APE? If anyone could provide the > > space in Sky tower I have a spare box which could be used for an APE > > mirror and I don't mind maintaining it. Still getting the data from WIX > > to APE would incur a cost somewhere and seeing as my Orcon link also > > seems to route international, this isn't a possibility. > > > > I've asked the Same as well.. >

3 2

Re: [nznog] Routing funky-ness to WIX via GGI?
by Ewen McNeill 29 Jun '04

29 Jun '04

In message <Pine.LNX.4.56.0406301004510.32463(a)babylon.blakjak.net>, Matthew Poole writes: >On Wed, 30 Jun 2004, Matthew Poole wrote: >Which is doubly frustrating, since it means that nobody who wants anything >faster than a 128k connection in the vast majority of the country has any >chance to use peered traffic - Cable=Paradise=TelstraClear, and >Jetstream fullrate or Jetstream Surf=Telecom. FWIW, it is possible to reach the (WIX-based) ftp.citylink.co.nz server from Paradise/TelstraClear cable: -=- cut here -=- ewen(a)basilica:~ $ ftp ftp.citylink.co.nz Connected to ftp.citylink.co.nz. 220 (vsFTPd 1.2.1) Name (ftp.citylink.co.nz:ewen): anonymous 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 200 PORT command successful. Consider using PASV. 150 Here comes the directory listing. -rw-r--r-- 1 1004 1004 53894917 Jun 15 2003 OOo_1.0.3.1_Win32Intel_install.zip lrwxrwxrwx 1 1004 1004 7 May 26 09:44 OpenBSD -> openbsd drwxr-xr-x 12 1004 1004 1032 Jun 29 11:19 backports drwxr-xr-x 9 1004 1004 512 Jun 28 19:33 debian drwxr-xr-x 6 1004 1004 264 Nov 20 2003 debian-non-US drwxr-xr-x 5 1004 1004 192 Jun 29 16:02 debian-security [....] -=- cut here -=- So if you do have a choice between Paradise/TelstraClear cable and Jetstream and reaching the Citylink FTP server is important to you, you may wish to take that into account. Providers of high volume free content (such as the Citylink FTP server) are left in a somewhat difficult position -- either they do something like this (ie offer it on WIX for anyone who can reach WIX), or they somehow try to find enough money to pay for big enough links to reach everyone, or they just give up and don't offer anything at all. Given how popular ftp.citylink.co.nz probably is, and how much traffic that likely involves, I doubt that (after paying for all the mirroring costs, admin time, etc) Citylink's generosity can extend to paying for "domestic transit" links to all the people who might want to use it. Offering it free on WIX to anyone that can reach it seems like the next best thing to me. The "the content is here, come and get it" incentive is just an added bonus over the link cost savings. And I for one am pleased they chose to continue offering the FTP site even if access is not as NZ wide as it was before. Downloading at 2Mbps (Paradise cable) or 100Mbps (WIX) sure beats slower international downloads. Ewen

9 9

Re: [nznog] Routing funky-ness to WIX via GGI?
by Liz Q 29 Jun '04

29 Jun '04

> Well what about hosting a mirror in APE? If anyone could provide the > space in Sky tower I have a spare box which could be used for an APE > mirror and I don't mind maintaining it. Still getting the data from WIX > to APE would incur a cost somewhere and seeing as my Orcon link also > seems to route international, this isn't a possibility. > > Barry I have a box already at orcon doing mirror of a fair few things already - i have the drive space for more easily Liz

1 0

F.ROOT-SERVERS.NET
by Barry Murphy 29 Jun '04

29 Jun '04

Thinking of this whole routing issue. What's going to happen with the F Root server? If I remember correctly Telstra Clear helped make it happen and sponsored something (Maybe bandwidth or rack space?), what will happen here. Seeing as Telstra will be dropping links to APE, I'm guessing all their customers will be routing internationally for their F-root? Barry

4 3

Wanted...
by Craig Spiers 28 Jun '04

28 Jun '04

Anyone have any rackmount ears for a 7200 series cisco lying around they want to sell? Or an NPE-200 or better ? Reply offlist :) Thanks

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 28 Jun '04

28 Jun '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: - Date: Tue, 29 Jun 2004 12:58:48 +1200 (NZST) - Msg-Id: <Pine.LNX.4.58.0406291258240.3080(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS4770 descr: Route set for AS4770 members: 138.235.0.0/16^+, 192.173.16.0/21^+, 192.188.185.0/24, 202.6.84.0/24, 202.12.70.0/24, 202.14.100.0/24, 202.27.99.0/24, 202.36.36.0/22^+, 202.36.76.0/23^+, 202.37.76.0/24, 202.37.85.0/24, 202.37.132.0/24, 202.37.138.0/23^+, 202.37.140.0/22^+, 202.37.144.0/21^+, 202.37.163.0/24, 202.37.171.0/24, 202.37.184.0/23^+, 202.37.186.0/24, 202.37.192.0/23^+, 202.37.197.0/24, 202.37.200.0/22^+, 202.37.224.0/21^+, 202.37.248.0/22^+, 202.37.252.0/24, 202.49.144.0/24, 202.50.16.0/20^+, 203.99.65.0/24, 203.99.66.0/24, 203.99.71.0/24, 210.48.0.0/17^+, 210.54.0.0/22^+ admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz mnt-by: MAINT-NZRR-NZ changed: asjl(a)wix.net.nz 20030407 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS4770 descr: Route set for AS4770 members: 138.235.0.0/16, 192.173.16.0/21, 202.6.84.0/24, 202.12.70.0/24, 202.14.100.0/24, 202.21.130.0/24, 202.36.155.0/24, 202.36.157.0/24, 202.36.32.0/24, 202.36.36.0/22, 202.36.45.0/24, 202.36.76.0/23, 202.37.140.0/22, 202.37.144.0/21, 202.37.163.0/24, 202.37.197.0/24, 202.37.200.0/22, 202.37.224.0/21, 202.37.232.0/24, 202.37.252.0/23, 202.37.76.0/24, 202.37.85.0/24, 202.49.62.0/24, 202.49.89.0/24, 202.50.246.0/24, 202.55.96.0/20, 203.9.179.0/24, 203.9.180.0/24, 210.185.0.0/18, 210.48.0.0/17, 210.54.136.0/22, 210.54.140.0/24, 210.54.160.0/19, 210.55.182.0/23, 210.55.24.0/22, 210.55.253.0/24, 210.56.32.0/20 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz mnt-by: MAINT-NZRR-NZ changed: asjl(a)wix.net.nz 20030407 changed: rpsl-admin(a)wix.net.nz 20040629 source: NZRR --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS4770 descr: Route set for AS4770 members: 138.235.0.0/16^16-24, 192.173.16.0/21^21-24, 192.188.185.0/24, 202.6.84.0/24, 202.12.70.0/24, 202.14.100.0/24, 202.27.99.0/24, 202.36.36.0/22^22-24, 202.36.76.0/23^23-24, 202.37.76.0/24, 202.37.85.0/24, 202.37.132.0/24, 202.37.138.0/23^23-24, 202.37.140.0/22^22-24, 202.37.144.0/21^21-24, 202.37.163.0/24, 202.37.171.0/24, 202.37.184.0/23^23-24, 202.37.186.0/24, 202.37.192.0/23^23-24, 202.37.197.0/24, 202.37.200.0/22^22-24, 202.37.224.0/21^21-24, 202.37.248.0/22^22-24, 202.37.252.0/24, 202.49.144.0/24, 202.50.16.0/20^20-24, 203.99.65.0/24, 203.99.66.0/24, 203.99.71.0/24, 210.48.0.0/17^17-24, 210.54.0.0/22^22-24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz changed: rpsl-admin(a)ape.net.nz 20030428 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS4770 descr: Route set for AS4770 members: 138.235.0.0/16, 192.173.16.0/21, 202.6.84.0/24, 202.12.70.0/24, 202.14.100.0/24, 202.21.130.0/24, 202.36.155.0/24, 202.36.157.0/24, 202.36.32.0/24, 202.36.36.0/22, 202.36.45.0/24, 202.36.76.0/23, 202.37.140.0/22, 202.37.144.0/21, 202.37.163.0/24, 202.37.197.0/24, 202.37.200.0/22, 202.37.224.0/21, 202.37.232.0/24, 202.37.252.0/23, 202.37.76.0/24, 202.37.85.0/24, 202.49.62.0/24, 202.49.89.0/24, 202.50.246.0/24, 202.55.96.0/20, 203.9.179.0/24, 203.9.180.0/24, 210.185.0.0/18, 210.48.0.0/17, 210.54.136.0/22, 210.54.140.0/24, 210.54.160.0/19, 210.55.182.0/23, 210.55.24.0/22, 210.55.253.0/24, 210.56.32.0/20 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20030428 changed: rpsl-admin(a)wix.net.nz 20040629 source: NZRR

1 0

ICONZ prefix update
by John Johnston 28 Jun '04

28 Jun '04

For all that peer with ICONZ, we have an updated that needs to be applied. Prefix list is attached or list at http://www.iconz.net/prefix Cheers -- Regards John Johnston Engineering Manager ICONZ Phone: 64 9 977 3500 Fax: 64 9 977 3535 Mob: +64 21 277 5692 http://www.iconz.net

1 0

Clear postmaster bouncing
by David Zanetti 24 Jun '04

24 Jun '04

Just tried to email Clear's postmaster address and it's bounced. Was trying to report some bouncing of ecan.govt.nz which has Clear listed as a secondary. Someone may wish to look at both issues. Bounces and stuff follow... Emailing postmaster: Recipient address: postmaster(a)clear.net.nz Reason: Remote SMTP server has rejected address Diagnostic code: smtp;553 5.1.4 duplicate/ambiguous directory match: postmaster(a)clear.net.nz Remote system: dns;ms2.clear.net.nz (TCP|192.168.16.112|58792|192.168.16.29|25) Bounce for ecan.govt.nz: ----- The following addresses had permanent fatal errors ----- <chris.macann(a)ecan.govt.nz> (reason: 550 5.7.1 We do not relay, please contact postmaster(a)clear.net.nz) Lookup for ecan.govt.nz: $ host -t mx ecan.govt.nz ecan.govt.nz MX 20 mx.clear.net.nz ecan.govt.nz MX 10 bill.ecan.govt.nz -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

4 3

RE: [nznog] Auckland Wifi Operators
by paul_brislen＠nzherald.co.nz 24 Jun '04

24 Jun '04

Also Reach Wireless... www.reachwireless.co.nz. $8.50/hour, or $18.95/day according to the blurb. No mention of speed though. *************************************************************************** This eMail may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of APN News & Media NZ Ltd. For more information on APN News & Media NZ Ltd please visit our web site at http://www.apn.co.nz ***************************************************************************

1 0

RE: [nznog] Auckland Wifi Operators
by Peter Thompson 24 Jun '04

24 Jun '04

Try RoamAD - pretty sure they've got downtown covered.. http://www.roamad.com/ Peter Thompson Network Engineer Woosh Wireless Limited >>I'm interested in locating anyone who may be able to offer me a short term >>wifi connection in Auckland city, especially the downtown cbd area. >> >>If anyone has any info on any operators who might be able to assist, >>please let me know... >> >>--- >>Matt Camp _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 24 Jun '04

24 Jun '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: - Date: Fri, 25 Jun 2004 13:01:14 +1200 (NZST) - Msg-Id: <Pine.LNX.4.58.0406251257220.11308(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS17474 descr: Route set for ConceptNET - AS17474 members: 202.127.8.0/22^22-29, 203.97.44.0/24^24-29, 203.97.66.0/24^24-29, 202.62.116.0/23^23-29, 202.49.250.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: craig(a)concept.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040304 changed: rpsl-admin(a)ape.net.nz 20040325 changed: rpsl-admin(a)ape.net.nz 20040617 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS17474 descr: Route set for ConceptNET - AS17474 members: 202.49.250.0/24, 202.50.176.0/24, 202.62.116.0/23, 202.127.8.0/22, 202.150.96.0/20, 203.97.44.0/24, 203.97.66.0/24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: craig(a)concept.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040304 changed: rpsl-admin(a)ape.net.nz 20040325 changed: rpsl-admin(a)ape.net.nz 20040617 changed: rpsl-admin(a)ape.net.nz 20040625 source: NZRR

1 0

Auckland Wifi Operators
by Matt Camp 24 Jun '04

24 Jun '04

I'm interested in locating anyone who may be able to offer me a short term wifi connection in Auckland city, especially the downtown cbd area. If anyone has any info on any operators who might be able to assist, please let me know... --- Matt Camp

1 0

RE: [nznog] Spam sorkshop live media streams are now live.
by Regan Murphy 24 Jun '04

24 Jun '04

> > Rich's video streams of the spam workshop are now up and running. > > http://www.r2.co.nz/20040624/ > > Knock yourself out :) > > Cheers, > Jonny. Many thanks for streaming this. 384kbps asx stream ran perfectly for me. -- Regan

3 4

ConceptNET (AS17474) Prefix-list/Peering Update
by Craig Spiers 23 Jun '04

23 Jun '04

Could those of you with networks currently peering with Conceptnet (AS17474) please update your prefix lists to allow the following two ranges. Full prefix list further down. Those of you not currently peering, contact me via email and we can arrange peering. Changes: Added: 202.50.176.0/24 Added: 202.150.96.0/20 Full Prefix List: ip prefix-list conceptnet description ConceptNET Outbound Routes <craig(a)concept.net.nz> ip prefix-list conceptnet seq 5 permit 202.150.96.0/20 ip prefix-list conceptnet seq 10 permit 202.127.8.0/22 ip prefix-list conceptnet seq 15 permit 202.62.116.0/23 ip prefix-list conceptnet seq 20 permit 203.97.44.0/24 ip prefix-list conceptnet seq 25 permit 203.97.66.0/24 ip prefix-list conceptnet seq 30 permit 202.49.250.0/24 ip prefix-list conceptnet seq 35 permit 202.50.176.0/24 Regards, Craig - ConceptNET

1 0

Spam sorkshop live media streams are now live.
by jonny＠citylink.co.nz 23 Jun '04

23 Jun '04

Rich's video streams of the spam workshop are now up and running. http://www.r2.co.nz/20040624/ Knock yourself out :) Cheers, Jonny.

3 2

RE: [nznog] Spam sorkshop live media streams are now live.
by Craig Humphrey 23 Jun '04

23 Jun '04

A good salary and the party line.... > -----Original Message----- > From: Peter Mott [mailto:peter.mott(a)2day.com] > Sent: Thursday, June 24, 2004 2:26 PM > To: jonny(a)citylink.co.nz > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Spam sorkshop live media streams are now live. > > jonny(a)citylink.co.nz wrote: > > > Rich's video streams of the spam workshop are now up and running. > > > > http://www.r2.co.nz/20040624/ > > > > Knock yourself out :) > > Indeed, what is the women from Microsoft on for crying out loud! > > regards > > -- > Peter Mott > Chief Enthusiast > 2DAY INTERNET LIMITED > http://www.2day.com

1 0

NZNOG 2005 in Hamilton - Format
by Donald Neal 23 Jun '04

23 Jun '04

NZNOG People, Last Wednesday I wrote to the list: >Planning is now under way for the next NZ Network Operators' >Group conference. This is to be hosted by the WAND group >(Thanks again, guys!) at The University of Waikato's main >campus in Hamilton in the first week of February 2005. >If you have an opinion on the form this should take, please >speak up now. If not, you're likely to end up with something >bearing a strong resemblance to this year's gathering, with >tutorials on Wednesday and a stream of presentations on >Thursday and Friday. (That's 2-4 February.) My thanks to the one person who provided feedback. Next year's format is likely to bear a close resemblance to this year's, give or take changes dictated by the content being presented. - Donald Neal Donald Neal | Bubble and squeak Technical Specialist | - Boiled mouse. Operations Engineering | [Martin Neal] Integration & Services Division +----------------------- Alcatel NZ Ltd - Telecom's network operations manager ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

whois reverse lookups?
by Dan Clark 23 Jun '04

23 Jun '04

Is it just me or are reverse lookups just not working against IP Space? bash-2.05# whois 203.97.66.1 whois: connect(): Operation timed out Is this all dealt with via APNIC? Cheers Dan

4 5

SNORT IDS Collaborators
by James Spooner 22 Jun '04

22 Jun '04

Hi All We are looking to speak with those of you who have a SNORT deployed on a decent-size production network. In particular we are looking for real-world configurations and the opportunity to analyse the performance of our SNORT based products on a diverse range of networks. Anyone interested can contact me off-list. Best Regards James -- James Spooner, BCMS email: james(a)endace.com VHDL Firmware Development voice: +64 7 834 6721 Endace Technology fax: +64 7 858 5095 Hamilton, New Zealand mobile: +64 2 144 7638

1 0

Domainz Invoice PDFs
by Steve Withers 22 Jun '04

22 Jun '04

Just received a Domainz invoice e-mail with attached PDF file. Like last year, the PDF file is not readable in Acrobat or Ghostview. That took a few days to fix as I recall. I've sent it back and asked them to look into it. Others may see this. Steve

1 0

[OT] registrars
by PhoneNet 22 Jun '04

22 Jun '04

Need pointers to reputable domain registrar able to handle .nz, .au and the usual international (com, ca, uk) ... the one I use is able to all but au and nz Ian Phonenet/Webhostnz

1 0

Changes to announcements to the APE and WIX route servers
by Andy Linton 21 Jun '04

21 Jun '04

When you're announcing to the list that you are making changes to your BGP announcements it would help if people would: 1) State which AS these announcements are coming from. This helps me double check I'm making changes to the right route objects. 2) State which routers the BGP sessions are on. This helps me double check I'm making changes to the right route objects. 3) Give a list of all the prefixes you want announced in CIDR format. I'm happy to see a mention of the changes as well but having the complete list means I can be sure it's right. Posting the Cisco prefix list doesn't really help me that much as tthe route servers don't get configured by me cutting and pasting. Others may have different requirements but this info would really help me. For example, something like: We've added the following block to our announcement to the APE route servers: 222.222.222.0/24 Our AS is 34567 and the complete list we're announcing from 192.203.154.150 is: 222.222.219.0/24 222.222.221.0/24 222.222.222.0/24 ---- You can check what we think your filter lists look like by going to: http://www.ape.net.nz/cgi-bin/ShowRoutes.cgi http://www.wix.net.nz/cgi-bin/ShowRoutes.cgi

2 2

Trademe route announcement to WIX route servers
by Andy Linton 20 Jun '04

20 Jun '04

The guys at Trademe (www.trademe.co.nz) have asked me to point out that they are now announcing their own network numbers via their own AS to the WIX route servers. They've discontinued use of all other numbers. The AS is: 24078 Their router is: 202.7.1.67 The network block is: 202.21.128.0/24 If you peer with the WIX route servers (and if you don't I'd encourage you to do so) and for some reason you're not allowing this network block through your BGP filters, I'd recommend that you do. Trademe move a whole heap of traffic and optimising your path to them would be 'a good thing'. If you're not connected to WIX then your path to them will be via your upstream ISP which in many cases will see your traffic head to Auckland before coming back down to Wellington.

1 0

Reminder: Anti Spam Workshop
by David Farrar 20 Jun '04

20 Jun '04

InternetNZ has had around 55 registrations for the anti spam legislative options workshop next Thursday. If there is anyone else intending to attend, please can you register by the end of Monday (we need to change logistics if we end up with more than 70). There seems to be a good range of people attending with around 25+ from ISPs, Telcos and Network Operators; a dozen from Government Departments and agencies; half a dozen from business and even a couple of lawyers! One can register online at https://secure.internetnz.net.nz/membership/anti-spam040519.html The latest agenda is attached (as rtf) for those interested. DPF -- David Farrar e-mail: david(a)farrar.com blog: http://www.kiwiblog.co.nz msn: dpf666(a)hotmail.com icq: 29964527

2 4

HEADSUP: Upcoming Webcast
by Richard Naylor 19 Jun '04

19 Jun '04

There will be a dual webcast of 5 streams each on Tuesday 22 June. This will be between approximately 2pm and 5pm. The venue will be Parliament's debating chamber for the first reading of the NZ Sign Language Bill. The dual webcast features 2 distinct webcasts. One webcast will be of the MPs debate, the other will be of the Sign Language Interpreters, interpreting the debate. Both webcasts will carry audio of the debate. Traffic volumes are not expected to be high, but ISP Help Desks may receive calls for assistance from hearing impaired clients. There is also significant international interest in the issue. After the event, the material will be available for later viewing. rich

1 0

Woosh\Walker Wireless Prefix List Update
by Beatty Lane-Davis 17 Jun '04

17 Jun '04

Hi Everyone, Woosh Wireless has obtained some more addresses from the generous folks at APNIC that we'll be announcing to all our valued peers at APE, the magic number we'll be advertising is: 202.74.192.0/19 Cheers, b blanedavis(a)woosh.com +64.21.544.716

1 0

SMTP Servers and Reverse DNS Lookup
by Rawiri Blundell 17 Jun '04

17 Jun '04

I brought this to the attention of the applicable people, apparently you caught us at a bad time - we're in a transitional stage. Run a dig now, it should all resolve to TClear I'm told Hope I dont stuff this up.. my very first mailman post ever. Rawiri Blundell ComputerLand Technical Support Analyst http://wellington.nzwireless.org ------------------------------------------------------------------------ ----------- Tony Wicks Tue Jun 15 15:01:02 NZST 2004 Here is an example for a company that **should** know better - [root(a)s... <http://list.waikato.ac.nz/mailman/listinfo/nznog> root]# dig computerland.co.nz mx ; <<>> DiG 9.2.1 <<>> computerland.co.nz mx ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15150 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 1 ;; QUESTION SECTION: ;computerland.co.nz. IN MX ;; ANSWER SECTION: computerland.co.nz. 86400 IN MX 5 smtp.computerland.co.nz. computerland.co.nz. 86400 IN MX 10 mta.xtra.co.nz. ;; AUTHORITY SECTION: computerland.co.nz. 86400 IN NS alien.xtra.co.nz. computerland.co.nz. 86400 IN NS terminator.xtra.co.nz. ;; ADDITIONAL SECTION: smtp.computerland.co.nz. 86400 IN A 203.167.229.7 ;; Query time: 297 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Tue Jun 15 15:00:23 2004 ;; MSG SIZE rcvd: 143 [root(a)s... <http://list.waikato.ac.nz/mailman/listinfo/nznog> root]# dig -x 203.167.229.7 ; <<>> DiG 9.2.1 <<>> -x 203.167.229.7 ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61325 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;7.229.167.203.in-addr.arpa. IN PTR ;; AUTHORITY SECTION: 229.167.203.in-addr.arpa. 1800 IN SOA dns1.clear.net.nz. hostmaster.clear.net.nz. 2004051709 10800 3600 604800 1800 ;; Query time: 30 msec ;; SERVER: 203.98.6.51#53(203.98.6.51) ;; WHEN: Tue Jun 15 15:00:38 2004 ;; MSG SIZE rcvd: 108 [root(a)s... <http://list.waikato.ac.nz/mailman/listinfo/nznog> root]#

1 0

Fwd: Asia Pacific Peering Guidebook Reviewer Request
by Joe Abley 16 Jun '04

16 Jun '04

Begin forwarded message: > From: "William B. Norton" <wbn(a)equinix.com> > Date: 16 June 2004 12:49:01 EDT > To: nanog(a)merit.edu > Cc: wbn(a)equinix.com > Subject: Asia Pacific Peering Guidebook Reviewer Request > > > Hi all - > > If you have no interest in Internet Peering in Asia, read no further. > Otherwise,... > > Over the last year I have been working with the Peering Coordinator > Community, particularly those that have built into and throughout > Asia, to document what is *different* about peering in Asia as > compared to say the U.S. and Europe. In February of this year I > pulled together a group of Peering Coordinators for the APRICOT > Peering Track. I asked them to share Peering processes that they found > different, interesting, counter intuitive, or unexpected. This white > paper documents the lessons learned and insights gained from Peering > Coordinators experienced with peering in Asia. > > The Asia Pacific Peering Guidebook follows the path set by "The > Evolution of the US Peering Ecosystem" white paper that I presented at > the last NANOG, but focuses on the common dynamics and experiences > that folks shared with me over the last year and at the APRICOT > Peering Track. First, the paper documents what I call the "Foreign > Tier 1 Peering Dynamic" that casts a Tier 1 ISP in one Peering > Ecosystem as a Tier 2 ISP in another. We focus on the motivations, the > reasons why this occurs as ISPs expand globally. > > Next, Peering Coordinators shared five reasons that they expanded > into/within Asia: > 1) Incumbent Tier 1 ISPs to peer their routes outside their home market > 2) Meet US Tier 1 ISP Peering Prerequisites > 3) Customers want them in Asia > 4) Global Marketing Benefits > 5) Sell transit in a more attractive transit market > > using four methods of interconnection: > 1) Extend into foreign country > 2) reciprically peer in each others coountry > 3) Half-Circuit peering > 4) Buy an ISP with Tier 1 peering in the foreign ecosystem > > The Peering Coordinators shared nine lessons, things they wish they > had known before expanding into Asia: > 1) Tier 1 ISPs will not want to peer in their home market > 2) There are several challenges peering in Asia > 2a) Peering Process is different - peering@ does not uniformly work > 2b) Many language zones > 2c) Many time zones - logisitics issues here > 2d) Oceans add cost, latency - transpacific transport prices estimated > in the paper > 2e) local loops still a major expense > 2f) transit prices highly variable across countries in Asia - transit > street prices quoted > 3) Creative peering deals > 4) Watch for Inadvertent Tromboning > 5) Local Presence is required > 6) Separation of Int'l Transit from Domestic Transit in some markets > 7) Content that transcends the language barrier is not allowed to be > hosted in country > 8) No true regional content in Asia > 9) Content Peering works in Asia > 10) Understand the Internet Peering Ecosystem prior to building in > > On this last point, the paper enumerates several data points including > naming the Tier 1's, the emerging broadband players, the peering > inclinations, etc. for Hong Kong, Tokyo, Sydney and Singapore. Some of > the Yahoo!Broadband activities for example in Japan show that some > places in Asia are leap-frogging the US in terms of next-gen access > bandwidth. How would you like 40Mbps DSL access for $50/mo or FTTH for > $100/mo? > > I'm at the point where I'd like to do a dozen or so final paper > walk-throughs, where I email the white paper and walk interested folks > through the paper to solicit comments and suggestions. I've found > that talking people through the paper is this is the most effective > way for me to make sure the paper (and subsequent presentation) flow > well, and also increases the likelihood of me getting some feedback. > > If you have any interest in the topic and can spare about 30 minutes > for a walkthrough over the next few weeks, send me a note and let's > schedule a time I can talk you through the paper. I'm also planning a > group walk through (a concall basically) towards the end of the month. > > As with all the Peering White Papers, this one will be made freely > available to the community when it is finished. > > Bill > > Here are the other Peering White Papers that are available (google for > "William B. Norton" to find them on the web, or email wbn(a)equinix.com > with the white paper title in the subject line and I'll send you the > latest version of the white paper.) > > 1. Interconnection Strategies for ISPs documents two dominant > methods ISPs use to interconnect their networks. Over 200 ISPs helped > create this white paper to identify when Internet Exchange Points make > sense and the Direct Circuit interconnect method makes sense. > Financial Models included in the paper quantify the tradeoffs between > these two methods. All relevant data points are footnoted as to > source. > 2. Internet Service Providers and Peering answers the questions: > "What is Peering and Transit? What are the motivations for Peering? > What is the ISP Peering Coordinators Process for obtaining peering? > What are criteria for IX selection?" > 3. A Business Case for Peering builds upon the previous white > papers but focuses on the questions important to the Chief Financial > Officer: "When does Peering make sense from a financial standpoint? > When do all the costs of Peering get completely offset by the cost > savings?" > 4. The Art of Peering: The Peering Playbook builds on the > previous white papers by asking the Peering Coordinators to share the > "Tricks of the Trade", methods of getting peering where otherwise they > might not be able to get peering. These 20 tactics range from the > straight forward to the obscure, from the clever to the borderline > unethical. Nonetheless, Peering Coordinators might be interested in > field-proven effective ways of obtaining peering in this highly > controversial white paper. > 5. The Peering Simulation Game finishes up my half day Peering > Tutorial by engaging the audience in the role of the Peering > Coordinator. Each ISP in turn rolls the dice, expands their network, > collects revenue for each square of customer traffic, and pays transit > fees to their upstream ISP. They quickly learn that if they peer with > each other, the costs of traffic exchange are much less, but they need > to negotiate how to cover the costs of the interconnect. ISP Peering > coordinators have commented on how close the peering simulation game > is to reality in terms of the dialog that takes place. > 6. Do ATM-based Internet Exchange Points Make Sense Anymore? > Applies the "Business Case for Peering" financial models to ATM and > Ethernet-based IXes using current market prices for transit, > transport, and IX Peering Costs. > 7. The Evolution of the U.S. Peering Ecosystem, introduces and > focuses on several fundamental changes in the Peering Ecosystem > spurred by several events following the telecom collapse of 1999/2000. > 8. The Art of Peering: The IX Playbook follows the same tact as > The Peering Playbook; we first introduce the framework theory of how > and why IXes are valuable from an economic perspective. We then > enumerate about a dozen tactics IXes use to get over the "Start Up > Hump", to build a strong critical mass of participants, and finally, > defense tactics to maintain that population. (To be released at a > future date.) >

1 0

CallPlus prefix list update
by Steve Hawken 16 Jun '04

16 Jun '04

Hi, For networks peering with CallPlus AS 9790 please update your prefix list as below: ip prefix-list callplus-networks description callplus networks contact noc(a)callplus.co.nz ip prefix-list callplus-networks seq 5 permit 202.0.151.0/24 ip prefix-list callplus-networks seq 10 permit 202.36.244.0/23 le 24 ip prefix-list callplus-networks seq 15 permit 202.37.129.0/24 ip prefix-list callplus-networks seq 20 permit 202.49.34.0/23 le 24 ip prefix-list callplus-networks seq 25 permit 202.49.62.0/24 ip prefix-list callplus-networks seq 30 permit 202.50.109.0/24 ip prefix-list callplus-networks seq 35 permit 202.50.170.0/24 ip prefix-list callplus-networks seq 40 permit 202.180.64.0/18 le 24 ip prefix-list callplus-networks seq 45 permit 203.97.152.0/24 ip prefix-list callplus-networks seq 50 permit 203.100.223.208/20 le 24 ip prefix-list callplus-networks seq 55 permit 203.184.0.0/18 le 24 ip prefix-list callplus-networks seq 60 permit 203.215.142.0/23 le 24 ip prefix-list callplus-networks seq 65 permit 210.55.111.0/24 ip prefix-list callplus-networks seq 70 permit 210.55.254.0/24 Cheers, Steve Steve Hawken Senior Network Engineer DDI ++ 64 9 919 6038 Mobile ++ 64 21 778 891 Email steveh(a)callplus.co.nz <mailto:steveh(a)callplus.co.nz>

1 0

NZNOG 2005 in Hamilton
by Donald Neal 15 Jun '04

15 Jun '04

Planning is now under way for the next NZ Network Operators' Group conference. This is to be hosted by the WAND group (Thanks again, guys!) at The University of Waikato's main campus in Hamilton in the first week of February 2005. If you have an opinion on the form this should take, please speak up now. If not, you're likely to end up with something bearing a strong resemblance to this year's gathering, with tutorials on Wednesday and a stream of presentations on Thursday and Friday. (That's 2-4 February.) Don't rush to volunteer to present just yet - we should have a proper Call for Presenters out around the end of this month - but now is the time for people who are likely to attend to suggest topics they'd like to know more about, people they'd like to hear from, or changes to the way things have been done in the past. Please post suggestions either to me or to the list as seems appropriate. I'll try to provide a digest of responses by next Friday, 25 June. - Donald Neal Donald Neal | Bubble and squeak Technical Specialist | - Boiled mouse. Operations Engineering | [Martin Neal] Integration & Services Division +----------------------- Alcatel NZ Ltd - Telecom's network operations manager ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

Re: Dynamic address space in SORBS causes mail rejection
by Richard Cox 15 Jun '04

15 Jun '04

On Wed, 16 Jun 2004 11:14:12 +1200 "Craig Box" <craig(a)itpartners.co.nz> wrote: | While we're on the subject of mail rejections, I look after a couple | of sites on a TelstraClear Tempest connections, both with IP addresses | on 203.97.48.0/21. Unfortunately, spam DNS blacklist SORBS list them | as being on Dynamic IP space: | | 203.97.48.x found in Dynamic IP Space (Cable, DSL & Dial Ups) | Address or Block: 203.97.48.0 / 21 | Information: Dynamic IP address, use your ISPs mail server | | ..and as such a number of sites (a number growing by about one a day, | just the ones I get told about) are blocking mail based on the SORBS | listing. The point being that the inbound mail administrators have the right to decide whether to accept connections from hosts in dynamic-IP ranges. | Some months ago I got in touch with TC's faults desk and they | claim to have emailled off to SORBS to have this reclassified. | | Nothing changed, so I got in touch with our local tech contact at TC; | he said he'd fire it off to the ISP guys but I've not heard back from | him either. All true. On Jan 30 The Telstra Abuse Desk wrote to SORBS about the block being labelled as "dynamic" and asked for "a copy of the headers of the spam". SORBS replied, explaining that the DUHL list identified their IP's DHCP status, not that any spam had been sent. Telstra Abuse Desk didn't respond to that reply. On March 11 Mark Seward wrote in again from Telstra, asking for the block status to be changed: SORBS replied, explaining that for security reasons such a request would need to come from the designated APNIC PoC for the IP block (which currently would be netobjs(a)clear.net.nz) However that reply got an auto-response saying that Mark Seward was no longer with Telstra, and mail should now go to Peter Ambrose and/or Sid Jones, so SORBS dutifully forwarded the previous correspondence to those two people, hoping they'd get the appropriate person to write in to authorise the change. But nothing further was heard until April 7 when Jason, as "isp.duty(a)team.telstraclear.co.nz" wrote in asking how to get the block's status changed, and he was sent a similar answer to that which had gone to Mark Seward, Peter Ambrose, and Sid Jones: but still nothing was heard from the designated PoC. | I've asked around about this and the best suggestions are "you're an | ISP customer, you should be smarthosting through an ISP mail server." | Problems with this include the fact that we no longer have any control | over retry/routing/any of the niceties of controlling your own outbound | SMTP; the fact that clear.net.nz mailservers are currently being eaten | by Zafi and mail delivery will probably slow down; and the fact that | we "just plain shouldn't have to." If you're on static IP, then as you say, you shouldn't have to. TelstraClear should have been able to follow the simple instructions to get this changed, normally a very straightforward process! | I'm not sure where to go from here. It's possible that if I ask TC | to set the PTR for each affected customer to smtp.$CLIENT and then | manually request that it's removed from SORBS, it may be done. If an IP is to send mail, that is a good suggestion in its own right. DNS should also have a sensible TTL - at least 12 hours is reasonable. -- Richard Cox

1 0

Akamai outage
by Juha Saarinen 15 Jun '04

15 Jun '04

http://www.infoworld.com/article/04/06/15/HNakamaioutage_1.html Not sure if NZ is affected too, but have noticed that Windows Update is unusually slow. -- Juha

2 1

Dynamic address space in SORBS causes mail rejection
by Craig Box 15 Jun '04

15 Jun '04

Hi everyone. While we're on the subject of mail rejections, I look after a couple of sites on a TelstraClear Tempest connections, both with IP addresses on 203.97.48.0/21. Unfortunately, spam DNS blacklist SORBS (http://www.dnsbl.au.sorbs.net/) list them as being on Dynamic IP space: 203.97.48.x found in Dynamic IP Space (Cable, DSL & Dial Ups) Address or Block: 203.97.48.0 / 21 Information: Dynamic IP address, use your ISPs mail server ...and as such a number of sites (a number growing by about one a day, just the ones I get told about) are blocking mail based on the SORBS listing. Some months ago I got in touch with TC's faults desk and they claim to have emailled off to SORBS to have this reclassified. Nothing changed, so I got in touch with our local tech contact at TC; he said he'd fire it off to the ISP guys but I've not heard back from him either. I've asked around about this and the best suggestions are "you're an ISP customer, you should be smarthosting through an ISP mail server." Problems with this include the fact that we no longer have any control over retry/routing/any of the niceties of controlling your own outbound SMTP; the fact that clear.net.nz mailservers are currently being eaten by Zafi and mail delivery will probably slow down; and the fact that we "just plain shouldn't have to." We have a hosted mail server of our own that we could use as a smarthost, however it will be a significant increase in load on this machine where we have a perfectly good mail server sitting at the clients site. I agree completely about customers not running mail service on dial-up lines, but a Tempest connection with a static IP address is a business service, not a 56k modem with an infected Windows box behind it. I'm not sure where to go from here. It's possible that if I ask TC to set the PTR for each affected customer to smtp.$CLIENT and then manually request that it's removed from SORBS, it may be done. Their FAQ (http://www.dnsbl.au.sorbs.net/DUL-FAQ.html) suggests I'm more likely to be asked to have my ISP ask. I'd like to see TC deal to this, perhaps by putting more information in the WHOIS db about what space is static and what is dynamic, and possibly changing PTR records appropriately. According to the DNSBL faq, the contact listed in the RIR can have it changed - it would be really nice if this problem could go away. If there are any other suggestions that anyone has about how to deal with this problem, please let me know. Regards, Craig Box Phone 07 957 2653 IT Partners Ltd Fax 07 957 2659 PO Box 9361 Mobile 021 475 869 Hamilton, New Zealand _________________________________________________________________ #include <standard-disclaimer.h> _________________________________________________________________

1 0

Map/schematic over NZ Internet connectivity?
by Juha Saarinen 15 Jun '04

15 Jun '04

Has the NZ Internet connectivity been mapped out yet? Maybe I'm not googling right, but I can't find any resource which lists national and international connectivity for New Zealand. -- Juha

6 9

RE: [nznog] TelstraClear Inhternational / National Traffic billing
by Donald Neal 15 Jun '04

15 Jun '04

> On Tue, 15 Jun 2004, Joe Abley wrote: > > > On 15 Jun 2004, at 08:22, Drew Broadley wrote: > > > > > The end is nigh. > > > > The doomsaying is all very dramatic, but where's the reasoning? > > > > If it suddenly costs money to talk to networks which are > customers of > > TCL, it surely makes *more* sense to peer with them > directly, not less. Indeed. Peering by US content providers is one of the big changes identified in http://www.nanog.org/mtg-0405/pdf/norton.pdf . Perhaps sadly, one of the possible futures for the US identified by the author in answer to questions about his presentation at the most recent NANOG was the New Zealand model, in which charges aren't made for national traffic. - Donald Neal Donald Neal | Bubble and squeak Technical Specialist | - Boiled mouse. Operations Engineering | [Martin Neal] Integration & Services Division +----------------------- Alcatel NZ Ltd - Telecom's network operations manager ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

TelstraClear Inhternational / National Traffic billing
by neil gardner 15 Jun '04

15 Jun '04

Hi guys - I just spent 5 minutes talking to Telstra in between 45 minutes of working while on hold... The question I asked was: If TelstraClear go ahead with cutting the links to a couple of big national network access points (I was speaking to a non-tech), what will happen to the national / international traffic billing. This person had zero clue but came back ten minutes later and stated she'd been talking to someone that knew exactly what I was talking about. His statement was that "Shortly the International / National traffic distinction will be phased out and there will be only one class of traffic. The cost will be similar to the current International rate. But don't worry since it only matters if you go over your limit" (The lady relayed his comment and that's as close to a direct quote as I can recall) Does this mean that TelstraClear are going to adopt the Telecom Jetstream traffic charging model? Anyone in the know care to correct me if I was given false information by junior Telstra Staff? Or, horribly, was this statement correct? (I specifically wanted to know what would happen to my national / international charging if TelstraClear cut their peering, and it appears they do in fact have a plan to make sure the consumer experiences no confusion over what's National or International traffic) Cheers - Neil G NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

11 14

Re: [nznog] SMTP Servers and Reverse DNS Lookup
by Juha Saarinen 14 Jun '04

14 Jun '04

neil gardner wrote: > Um, no false positives? doesn't that mean you manually inspect all your > logs of dropped connections? Doesn't, by extension, that mean you might > as well let all the stuff through and check them at the client end? :-) Yes, I do check the logs, which is a lot easier than it may appear. No, it doesn't mean I might as well let the stuff through... -- Juha

1 0

Re: [nznog] SMTP Servers and Reverse DNS Lookup
by neil gardner 14 Jun '04

14 Jun '04

Um, no false positives? doesn't that mean you manually inspect all your logs of dropped connections? Doesn't, by extension, that mean you might as well let all the stuff through and check them at the client end? :-) Cheers - N >>> Juha Saarinen <juha(a)saarinen.org> 15/06/2004 3:30:14 p.m. >>> neil gardner wrote: > http://www.cs.niu.edu/~rickert/cf/bad-ehlo.html > > Decent understandable writeup of the "You should send the right info" > and "Don't drop email if you get the wrong info" arguments... ... and having said all that, I admit to dropping some some messages based on HELOs. Mainly viruses and spamware connections, with no false positives yet. Touch wood. -- Juha NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

2 1

Re: [nznog] SMTP Servers and Reverse DNS Lookup
by neil gardner 14 Jun '04

14 Jun '04

http://www.cs.niu.edu/~rickert/cf/bad-ehlo.html Decent understandable writeup of the "You should send the right info" and "Don't drop email if you get the wrong info" arguments... Cheers - N. >>> Juha Saarinen <juha(a)saarinen.org> 15/06/2004 2:56:14 p.m. >>> Regan Murphy wrote: > Is this sort of configuration becoming standard for organistions? Some admins think it's BOFH to do stuff like that, in the mistaken belief that it's RFC-compliant. It's a bit like fundamentalists interpreting various religious scriptures, but if they want to drop legitimate email, their choice I say. -- Juha _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

2 1

SMTP Servers and Reverse DNS Lookup
by Regan Murphy 14 Jun '04

14 Jun '04

I was having problems sending mail to an organisation and eventually worked out that the host name and reverse dns entry did not match and therefore mail transfer was refused: ------- 220 mail.xxxbar.co.nz ESMTP NetIQ MailMarshal (v5.5.5.8) Ready ehlo hellmouth.oaxxxsystems.co.nz 554 No SMTP service here ------- As soon as I corrected my server to use the correct host name to match the reverse (vampire.oaxxxsystems.co.nz) then mail was allowed to go through. I would assume this was a recent change by the receiving organisation as I have not had problems sending them emails before. Is this sort of configuration becoming standard for organistions? I would expect that may create problems for smaller organisations sending email directly from their in-house hosted mail server for which they have no control over reverse-dns entries. -- Regards, Regan

5 5

RE: [nznog] TelstraClear Inhternational / National Traffic billing
by Craig Spiers 14 Jun '04

14 Jun '04

Well.. You could get a link to both, but the only real benefit would be splitting the cost between two (probably slightly more expensive this way as a separate circuit is needed for both - generally cheaper to upgrade a 10meg to 100meg than it is to install 2x 10meg eg. one from each telco) However, you would have a shorter data path.. As with two circuits, the data goes direct to both carriers.. With just one circuit, data to clear, goes via telecom.. (provided they keep the peering between them). -----Original Message----- From: jfp [mailto:jfp(a)clearfield.com] Sent: Tuesday, 15 June 2004 12:16 p.m. To: 'Craig Spiers' Subject: RE: [nznog] TelstraClear Inhternational / National Traffic billing > They shouldn't be connected to the internet at all! They should be > shot in the foot for having such poor routing :) > > NZ > US > NZ :) Not being in the ISP business, but a client of ISP's, could you explain that one to me. I thought the whole point of peering at the APE and WIX was that you did not need to get point to point link to other providers. Why do you NEED to get a link to one of the telco's? jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

1 0

Re: Map/schematic over NZ Internet connectivity?
by Kerry Milestone 13 Jun '04

13 Jun '04

The National Library of New Zealand has been given a lot! of money, i expect they will have a good map soon......... http://www.beehive.govt.nz/ViewDocument.cfm?DocumentID=19882 And an older National Business Review article: http://www.nbr.co.nz/home/column_article.asp?id=1978&cid=1&cname=Media Maybe some of it can be spent on peering networks together to help with the flow of _all_ websites ending in .nz to be harvested daily by the NatLib... This task is now part of the National Library Bill and can be thought of being the same as the Legal Deposit legislation.

1 0

xtra's MTA again??
by Dan Clark 13 Jun '04

13 Jun '04

Hi Guys, just wondering if anyone else isn't getting any mail through to XTRA. If you are and your mta is MailMarshal please let me know also, from last time there appeared to be an issue with MailMarshal threads. Kind Regards Dan Clark Network Manager Synaptic Ltd

4 3

RE: Map/schematic over NZ Internet connectivity?
by Brendan Murray 12 Jun '04

12 Jun '04

> Message: 3 > Date: Sun, 13 Jun 2004 11:26:20 +1200 > From: Juha Saarinen <juha(a)saarinen.org> > Subject: Re: [nznog] Map/schematic over NZ Internet connectivity? > To: jon.brewer(a)worldnet.att.net > Cc: 'NZ NOG' <nznog(a)list.waikato.ac.nz> > Message-ID: <40CB911C.3010600(a)saarinen.org> > Content-Type: text/plain; charset=us-ascii; format=flowed > > Jonathan Brewer wrote: > > > I tried InternetNZ with this very question about a year ago, and the > > answer was no. > > I guess there was no follow-up along the lines of "... but we're working > on it"? Give me good/adequate/useful/whatever reasons for doing it and I'll take it to the INZ tech committee. Always nice to add things to the ToDo list. More usefully - others on this list probably already have some/all of a map - where can we access that information if INZ does decide its worth putting together? And how do we keep it up to date?

2 1

Re: [nznog] Zombies
by Ewen McNeill 10 Jun '04

10 Jun '04

In message <20040610051613.GJ20881(a)stateless>, Nicholas Lee writes: >On Thu, Jun 10, 2004 at 04:58:31PM +1200, Ewen McNeill wrote: >> [... suggesting] anti-spam legislation, a legal duty be placed on people >> not to connect/allow to remain connected an insecure/0wned/infected >> system under their control. > >Unlike vehicles, access to the internet for most people is not via a >"public road". [...] >A WOF/license for driving the internet just seems like needless legisation. I actually didn't suggest a WOF/license for driving on the Internet (this time -- although I do actually think it's a good idea). What I suggested was that those who have allowed systems they own to become unsafe/damaged so that they cause harm to others should be made responsible for that harm. And it doesn't seem like needless legislation to me. It's not _my_ systems (or any of the ones I'm responsible for administering) which are sending thousands of spam messages, viruses, worms, to machines across the world. I just get to receive thousands of them a day via all these machines of people who are not taking responisbility for the systems they're connecting to a common resource (viz, the Internet). As Juha says there is a problem with patches not being available. I'd be quite happy to allow "no vendor patch" as a complete defense for the end user (although if the issue is well known the vendor should perhaps be culpable). I'd even be willing to conceed "vendor patch too recently released, couldn't patch everything" with in a reasonable amount of time of the patch coming out. Simply persuading someone to take responsibility for the never-been-patched, installed-stuff-at-random, insecure-OS-design boxes would dramatically reduce the problem. >ISPs already have the power to regulate users this way via their TOS. Its >clear though that all ISPs would have to subscribe to the above for it >to have long-term effect. The days of ISPs taking responsibility for the actions of their users appear to be a fading memory. It's unlikely any ISP would block users with infected machines these days unless all ISPs did it; the only way that all ISPs are likely to do it is if it's a legal requirement. (Otherwise it's a prisoner's dilemma situation.) Ewen

7 6

Re: [nznog] Zombies
by neil gardner 10 Jun '04

10 Jun '04

OK, serious thought here... Bear with me... I may be a) Describing an existing system or b) way off base. Transparent SMTP proxy intercepts all messages and maintains a running total of emails sent per source IP. This running total is actually stored as a time distribution (ie. 10 emails in 10 minutes, then none in 10, then 100 in ten etc) Rulebase periodically examines this time distribution for each source IP. Something like If last 3 matches are >10, >10, >10 then block for 30 minutes per strikeout(sourceIP) and increment strikeout(sourceIP) by one. After expiry of downtime, open them up again. After (say) 90 minutes of non-abhorrent behaviour, decrement strikeout(sourceip) by one. If strikeout(sourceIP) gets to threshold (Say 10) then email user and 48 hours later disable account unless they contact helpdesk and claim to have addressed the situation. You probably want cleverer rules to identify bursts of email, and possibly a training period with rules referrent to earlier data from the same source - this should be able to reliably identify legitimate high volume users - especially if you build in a time of day factor. This should quickly throttle zombies and disable the account if not fixed, but allow for brief infections to be throttled, and if fixed, NOT need manual intervention to unblock. It may impact some legit heavy email users, but mail will bounce, and it should fix itself. Just a thought. Cheers - N. >>> Simon Lyall <simon(a)darkmere.gen.nz> 10/06/2004 1:46:38 p.m. >>> It looks like there are lot of NZ based Zombies sending very large amounts of Spam ( much of it in German) to some ISPs. This has really been going hard over the last hour. I'm seeing adsl accounts at xtra, iprolink and ihug, xtra dialups etc etc. As a related issue, how do people feel about a whitelist RBL of NZ mail servers, It looks like it's not good to just whitelist NZ IPs -- Simon J. Lyall. | Very Busy | Mail: simon(a)darkmere.gen.nz "To stay awake all night adds a day to your life" - Stilgar | eMT. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

6 7

Re: [nznog] Zombies
by Ewen McNeill 09 Jun '04

09 Jun '04

In message <s0c876cc.089(a)LEO.ALLIEDTELESYN.CO.NZ>, "neil gardner" writes: >To be fair though, in mentioning an opt-out system I was thinking of >clueful users deliberately running their own servers that would notice >within minutes that port 25 had been blocked - not the SMTP AUTH crowd >which may be significantly less clued up and not notice why their >previously working 'Email Thingy" isn't working anymore. The clueful users can always build tunnels and route stuff through the tunnels. I do this from my laptop when working in various organisations where I still want to send mail via my own mail server (because, eg, it's the only one listed in the SPF rules). SMTP AUTH is harder, but at least as a first cut simply permitting connections that did SMTP AUTH would probably select for the "good" connections and ignore the bad ones. Much the same for STARTTLS -- anything using that is probably not malware, at least at present. Most malware barely manages to interoperate with SMTP servers let alone actually supporting "fancy" features. As I've suggested before blocking some of these services by default, and providing an "enable this service again" automatic system for clueful users would be nearly as useful as trying to do layer-7 filtering on the protocol. It could even require turning on again with every reconnection, totally doing away with the need for the ISP to store anything associating permissions with the user. (Anyone who can't automate a GET of, eg, http://ihaveaclue.$ISP/enable?services=smtp or similar on reconnect doesn't have the necessary clue.) On a related tack, I am seriously considering writing to the appropriate government ministers and suggesting that, as part of their proposed anti-spam legislation, a legal duty be placed on people not to connect/allow to remain connected an insecure/0wned/infected system under their control. With the first breach resulting in mandatory disconnection of the system from the network, not to be reconnected until person had completed a course on "network security" and had their machine certified "cleaned up" by someone appropriate. Subsequent breaches resulting in that and fines and/or longer periods of mandatory disconnection. IMHO such insecure/0wned/infected systems are a nuisance (in the legal sense of the word) and thus the owners of them should be responsible for the damage they cause. Ewen

4 3

Google and MaxNet
by Cameron Kerr 09 Jun '04

09 Jun '04

Hello, is anyone getting `Your client has issued a malformed request' messages from Google when connected via MaxNet? I've tried with lynx, links, and Firefox. I'm getting these messages, not because my client is issuing a malformed request, but rather that MaxNet's transparent proxy is serving this. tcpflow reports the following in the response. Note the line that says `HIT' in it. HTTP/1.0 400 Bad Request Date: Tue, 08 Jun 2004 22:59:04 GMT Content-Type: text/html Server: GFE/1.3 Cneonction: Close <=== Hmmm, this is interesting. Content-Length: 1207 Age: 40 X-Cache: HIT from proxy2.akl1.maxnet.net.nz Connection: close This doesn't always happen under Firefox (it happened the first time, but after that, it worked ok. I'm guessing it's because of the short lifetime (Age: 40 seconds). Can anyone duplicate this? Just to be safe, I've disabled the transparent proxy here, and have no other proxy configured (direct connection). This was happening last night too. -- Cameron Kerr cameron.kerr(a)paradise.net.nz : http://nzgeeks.org/cameron/ Empowered by Perl!

12 22

Re: [nznog] Zombies
by neil gardner 09 Jun '04

09 Jun '04

To be fair though, in mentioning an opt-out system I was thinking of clueful users deliberately running their own servers that would notice within minutes that port 25 had been blocked - not the SMTP AUTH crowd which may be significantly less clued up and not notice why their previously working 'Email Thingy" isn't working anymore. I had the further thought that you could use some higher layer content inspection device to drop all SMTP traffic unless it's either to your own SMTP IP, or part of an SMTP AUTH conversation but that is way less than trivial as you'd need to completely proxy the sessions up until SMTP auth at least.... I'd say it was do-able, but not trivial. Cheers - N. >>> Nathan Ward <nznog(a)daork.net> 10/06/2004 2:50:13 p.m. >>> On 10/06/2004, at 2:43 PM, Perry Lorier wrote: > This breaks SMTP AUTH for people who send mail via another machine on > the Internet, because that host is the only one allowed to send with > SPF. > You conveniently ignored the opt-out system he mentioned. However for such an opt-out system to work, your packet filters would have to adjust themselves as dynamic users log in and out. That would suck. -- Nathan Ward _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

4 3

RE: [nznog] Zombies
by Gordon Smith 09 Jun '04

09 Jun '04

The problem with that would be dynamically assigned addresses, unless you included a lookup being done against your radius databases by the SMTP proxy, so that the user can be identified. Possibly, a better solution would be to analyse netflow data as it hits the collectors, and identify offending machines that way. By using netflow, you can extend detection of worms, etc to include all ports, rather than just port 25 Doing dynamic throttling of infected connections is much more difficult - there's not a large range of equipment out there that can do that reliably, although the Juniper ERX does spring to mind :-) But that's not a box you'd find in most ISPs Cheers, Gordon > -----Original Message----- > From: neil gardner [mailto:neil.gardner(a)alliedtelesyn.co.nz] > Sent: Thursday, 10 June 2004 3:20 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Zombies > > > OK, serious thought here... Bear with me... I may be a) Describing an > existing system or b) way off base. > > Transparent SMTP proxy intercepts all messages and maintains a running > total of emails sent per source IP. This running total is actually > stored as a time distribution (ie. 10 emails in 10 minutes, > then none in > 10, then 100 in ten etc) > > Rulebase periodically examines this time distribution for each source > IP. Something like > > If last 3 matches are >10, >10, >10 then block for 30 minutes per > strikeout(sourceIP) and increment strikeout(sourceIP) by one. > > After expiry of downtime, open them up again. After (say) 90 > minutes of > non-abhorrent behaviour, decrement strikeout(sourceip) by one. > > If strikeout(sourceIP) gets to threshold (Say 10) then email user and > 48 hours later disable account unless they contact helpdesk > and claim to > have addressed the situation. > > You probably want cleverer rules to identify bursts of email, and > possibly a training period with rules referrent to earlier > data from the > same source > - this should be able to reliably identify legitimate high volume > users - especially if you build in a time of day factor. > > This should quickly throttle zombies and disable the account if not > fixed, but allow for brief infections to be throttled, and if > fixed, NOT > need manual intervention to unblock. It may impact some legit heavy > email users, but mail will bounce, and it should fix itself. > > Just a thought. > > Cheers - N. > >

3 2

RE: [nznog] Zombies
by Gordon Smith 09 Jun '04

09 Jun '04

Neil gets my vote. This is by far the best solution I've seen in years :-) And it's extendable to other protocols as well..... Cheers, Gordon

1 0

Re: [nznog] Zombies
by neil gardner 09 Jun '04

09 Jun '04

Point taken. OK, revised suggestion is this: Cut port 25 entirely, when people call to complain, press a button to play this recorded message. "Dear customer, in order to combat the Child pornography, Terrorist communications and Spam being sent by infected computers - WHICH YOU MAY HAVE! - we have blocked all popular email programs form communicating to the Intarweb thingy. In future, please feel free to use http://webmail.isp.co.nz for your email requirements. If on the other hand you support Child Pornography, are a member of an active Terrorist Cell, or wish to get a b1gger p3nis now!, then please press (1) and we'll unblock your evil Email connection." Cheers - Neil G ps. Sorry - I'll get back ontopic by about Tuesday week. :-) >>> Juha Saarinen <juha(a)saarinen.org> 10/06/2004 2:58:56 p.m. >>> neil gardner wrote: > To be fair though, in mentioning an opt-out system I was thinking of > clueful users deliberately running their own servers that would notice > within minutes that port 25 had been blocked - "Hey Mr/Ms Helldesker, how come nobody can send us mail anymore?" -- Juha NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

1 0

Re: [nznog] Zombies
by neil gardner 09 Jun '04

09 Jun '04

>>> Simon Lyall <simon(a)darkmere.gen.nz> 10/06/2004 1:46:38 p.m. >>> >It looks like there are lot of NZ based Zombies sending very large amounts >of Spam ( much of it in German) to some ISPs. Would it not be relatively easy to drop all port 25 traffic unless it was directed at your own SMTP server? * (Or are the Zombies sending through your SMTP anyway?) Cheers - N. * - Allow an opt out for anyone that even notices - if they notice, they won't be part of the problem. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

3 2

Trade Me changes
by paul gold 09 Jun '04

09 Jun '04

Please be advised that the Trade Me group of sites are currently undergoing an addressing update. DNS records were changed last night, and all routing for our new address ranges continues to be via our upstream AT&T. Major sites affected; trademe.co.nz oldfriends.co.nz safetrader.co.nz findsomeone.co.nz (findsomeone.com.au, findsomeone.ca and personalstuff.co.nz plus other minority 'skins') circleoffriends.co.nz (circleoffriends.com.au) We are also physically moving the 'farm', which will introduce a number of interruptions and periods of downtime between Thursday 2300 and Friday 0700.

1 0

RE: [nznog] Google and MaxNet
by neil gardner 09 Jun '04

09 Jun '04

>>> "Craig Spiers" <craig(a)concept.net.nz> 10/06/2004 11:10:01 a.m. >>> >Heh.. Telecom ADSL's charges are for the data traveling across the telecom >data network, regardless where its come from.. This is a different situation >altogether.. You know what? I can't figure out if you're joking or serious :-) Really! N. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

1 0

RE: [nznog] Google and MaxNet
by Regan Murphy 09 Jun '04

09 Jun '04

> In the past, caching has made some sense for accelerating > content to clients. I like it when I download a service pack from microsoft (for example) and the 100MB comes in at 20Mbps instead of the 512kbps that my international pipe is limited to. The fact that it may only technically be local traffic but I get charged for international traffic makes no difference because I would have no choice but to be paying international rates if there was no cache. When security/antivirus vendors release patches and updates is there a large increase in international bandwidth use or do the caches assist there? Caching must also be good for sites where there limited bandwith is at the server end too. -- Regan

4 5

RE: [nznog] Google and MaxNet
by Gordon Smith 08 Jun '04

08 Jun '04

Hahaha... but they were better than some of the other commercial offerings out there. I have heard good things about the more recent squid code (haven't tried it though) - but who wants to maintain bypass lists just because users want to use dodgy web software :-( > -----Original Message----- > From: Tony Wicks [mailto:nzog(a)road.gen.nz] > Sent: Wednesday, 9 June 2004 1:23 p.m. > To: 'David Fox'; 'Steve' > Cc: 'NZ Network Operators Group' > Subject: RE: [nznog] Google and MaxNet > > > Well, maybe it's just that Cacheflows suck ? > > -----Original Message----- > From: David Fox [mailto:foxy(a)morenet.net.nz] > Sent: Wednesday, 9 June 2004 1:12 p.m. > To: Steve > Cc: NZ Network Operators Group > Subject: RE: [nznog] Google and MaxNet > > > I agree wholeheartedly with Steve comments below, the cost saving is > negligible while the required resource to administer was > high. I redeployed > my cache to a new position in our network: it is working very > well as a > footrest under my desk. > > I found removing the cache actually improved overall performance, my > customers - and even managers - noticed the improvement ... > some of them > even rang to say Thanks (that makes a change!) > > David >

1 0

RE: [nznog] Google and MaxNet
by Gordon Smith 08 Jun '04

08 Jun '04

I don't think its so much particular brands that are an issue, but rather the sheer volume of poorly designed websites. With the popularity of MS Word & Frontpage, there seems to be a lot of ignorance relating to the W3C standards. In the past, caching has made some sense for accelerating content to clients. As far as bandwidth savings go, I've never seen that achieved to the point that it made them worthwhile in that role. They can improve performance as perceived by the customer, but bypass lists rapidly become unwieldy when trying to compensate for sites that don't adhere to standards. Overall, in terms of TCO, they're probably not worth having in place any more Cheers, Gordon > -----Original Message----- > From: Juha Saarinen [mailto:juha(a)saarinen.org] > Sent: Wednesday, 9 June 2004 1:13 p.m. > To: Alastair Johnson > Cc: NZ Network Operators Group > Subject: Re: [nznog] Google and MaxNet > > > So which caches have people had success/hassle with? > > -- > Juha

1 0

Re: [nznog] Google and MaxNet
by neil gardner 08 Jun '04

08 Jun '04

>>> Joe Abley <jabley(a)isc.org> 9/06/2004 12:52:46 p.m. >>> >Akamai has nodes in New Zealand, though. Or are you suggesting that NZ >ISPs routinely cache domestic content as well as content from overseas? >Joe Well they might have to start caching Domestic traffic shortly if Peering goes the way the big players would like it to go. Cheers - N. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

1 0

Transparent Caching (was Google and Maxnet)
by Templeman Colin 08 Jun '04

08 Jun '04

A good topic! I 'discovered' transparent proxies recently when I was trying to resolve a problem I had obtaining security patches from security.debian.org via http. Other than having recently changed to cable broadband via Telstraclear, nothing (including apt sources) was altered, yet I was getting timeouts. After a couple of weeks of this, I eventually provided a comparison of latency output from 'ping' vs 'hping' to security.debian.org before the call was tacitly acknowledged and the problem silently fixed. I agree with Joe that they are an overhead when it comes to managing exceptions. -- Colin Templeman Security Analyst IT Risk and Security New Zealand Post Ltd This email with any attachments is confidential and may be subject to legal privilege. If it is not intended for you please reply immediately, destroy it and do not copy, disclose or use it in any way.

1 0

.nz Registry Directors
by Keith Davidson 08 Jun '04

08 Jun '04

Hello, Please pardon the intrusion to the NZNOG list. InternetNZ's subsidiary company, New Zealand Domain Name Registry Ltd, (NZRS) is responsible for operating the registry for the .nz namespace. This Company is governed by a board comprising 5 directors. Two directors retire by rotation at the Annual Meeting on 30 July 2004. Both retiring directors have declared themselves available for re-election. InternetNZ wishes to invite applications from others who believe they may have specific skills that would be advantageous to the Company. A full description of the position and skill sets being sought is available at www.internetnz.net.nz/public/registry/reg040606directors.html. Applications close on Monday 14 June 2004 (PLEASE NOTE - the web page states 11 June, but is in the process of being amended), and should be addressed to president(a)internetnz.net.nz or President, InternetNZ, P O Box 11-881, Wellington. Thanks Keith Davidson President - InternetNZ

1 0

Team Cymru Darknet Project
by Rob Thomas 03 Jun '04

03 Jun '04

-----BEGIN PGP SIGNED MESSAGE----- Hi, team. We are happy to at last release some documentation on Darknets and the Team Cymru Darknet Project. You will find the details at the following URL: <http://www.cymru.com/Darknet/> We hope this helps you to gain greater insight into your networks and the flows on them. Comments, feedback, and coffee are always welcome! :) Thanks! Rob, for Team Cymru. - -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQL/XxlkX3QAo5sgJAQFBLwP/akP6qwmfg0y20wPRmX0QuOENh0NU4fhN N7LFdPqnYU3jJv6MgAR7J/u2snLmpC1RLZLkSvEFx4OtiYqqdVci4/9jT4D+M9nU qxERosZJhS65zZCExMEMJLEATWpr29pONEEBFbHBZgNYMDhee+fgDB6/GaEqY/Cr Y0qNvD0KRs4= =mm6q -----END PGP SIGNATURE-----

2 1

Queenstown
by K. Anand Lal 02 Jun '04

02 Jun '04

Hi, ihug is looking to upgrade it's Queenstown POP and as part of the upgrade we are considering a physical move to a better site. Is anyone aware of a telehousing facility located in central Queenstown? We will supply our own UPS and 19" enclosure. Appreciate any help. -- K. Anand Lal ph: +64.9.3592767 Engineering Manager fax: +64.9.3581518 The Internet Group (ihug) Ltd. noc: +64.9.3592708

3 2

The New Zealand Network Operators' Group
by Donald Neal 31 May '04

31 May '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Meetings See http://www.nznog.org/ for details of the January 2004 conference, which drew something over 120 participants. We are now seeking to confirm arrangements for a similar gathering to be held in the first week of February 2005. Also see http://auckland.thursdaynightcurry.com/ if you live in or near Auckland. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. About This Mailing List This list has around 650 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

Re: [nznog] TC & T Possible Peering changes
by neil gardner 30 May '04

30 May '04

>>> Simon Lyall <simon(a)darkmere.gen.nz> 28/05/2004 2:24:47 p.m. >>> No, they'll change their terms and conditions so that National traffic is no longer free and is instead part of your quota. [snip] Yeah, I knew this would probably be the way they handled it. Thanks Telecom and TelstraClear, for between you managing to keep cheap high speed Internet a far off dream. Cheers - N. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

3 2

RE: [nznog] TC & T Possible Peering changes
by Gordon Smith 30 May '04

30 May '04

One thing that noone seems to have noticed yet, is that using TCNZ for transit in this way is virtually impossible due to the manner in which they route traffic. TCNZ use BGP communities to tag and filter, as did Clear before them. So ingress and egress paths are filtered at the exchange points. I don't know if Telecom have started using communities to manipulate traffic paths yet, but if they haven't, I'd say it's only a matter of time. The peering argument is a political one rather than a technical one. In my opinion, "unauthorised transit" is nothing more than a convenient excuse. If it did actually happen, perhaps they'd be better odd re-visiting filtering policies. Just my .02c worth :-) Cheers, Gordon

2 1

Re: [nznog] Indian government plans Internet exchanges
by Keith Davidson 28 May '04

28 May '04

Others wrote: > > Someone with some spare hands on their time needs to lobby > > the government to make peering in NZ legislation. > > > > Although TNZ and TCNZ will be wearing a lot of the network > > costs in terms of trunking traffic up and down the country, > > they also have most of the customers - so I think that's fair > > and justified. > > Yes it is good idea. > > So why not also make the Govt responsible for the trunking between > peering sites as well? > ISPs could still organise private peering for priority traffic in this > scenario. Is this an issue that nznog feels InternetNZ should pick up on? Keith Davidson President - InternetNZ

4 7

RE: [nznog] TC & T Possible Peering changes
by Donald Neal 28 May '04

28 May '04

> On Behalf Of Russell Fulton > Sent: Friday, 28 May 2004 1:56 p.m. > To: nznog > Subject: Re: [nznog] TC & T Possible Peering changes > > > On Fri, 2004-05-28 at 13:46, Don Gould wrote: > [...] > > * Why don't the IX have clear policies on this issue? > > Perhaps a better question is "When are the IXs going to > establish clear > policies on this issue?" > > Russell. Perhaps they already have a clear (no pun intended) policy - they're not responsible for what routes you advertise. - Donald Neal All opinions mine only. Donald Neal | Alphabet - ancient Technical Specialist | Greek lottery. Operations Engineering | [Martin Neal] Integration & Services Division +----------------------- Alcatel NZ Ltd - Telecom's network operations manager ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

3 2

RE: [nznog] Indian government plans Internet exchanges
by Seeby Woodhouse 28 May '04

28 May '04

What a good idea. Someone with some spare hands on their time needs to lobby the government to make peering in NZ legislation. Although TNZ and TCNZ will be wearing a lot of the network costs in terms of trunking traffic up and down the country, they also have most of the customers - so I think that's fair and justified. If they are worried about people using their networks as a free national backbone via the peering points, there are ways to allow peering but prevent being used as free transit... Cheers Seeby -----Original Message----- From: Andy Linton [mailto:asjl(a)citylink.co.nz] Sent: Friday, May 28, 2004 9:33 AM To: nznog Subject: [nznog] Indian government plans Internet exchanges This URL points to the incoming Indian governments 10 point agenda form IT - http://www.ciol.com/content/news/2004/104052609.asp In particular, see point 5: 5. Plan to connect all ISPs in India to a national internet exchange in order to achieve efficient internet traffic routing, cost reduction and improve quality of service for the Internet users in India. Four Internet exchanges points to be fully operationalised. Small and big ISPs to route their traffic through this exchange to ensure the security of domestic traffic. Currently, 25 ISPs are connected. ---- Note the reasons for doing this especially "improve quality of service for the Internet users". _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

7 6

RE: [nznog] TC & T Possible Peering changes
by Barry Murphy 27 May '04

27 May '04

Ok, But I still fail to see how this works. 1./ I buy my international pipe through telstra 2./ I buy my national pipe through telstra 3./ I try connect to nzdating.com but because iconz doesn't per with telstra, I use international and not 'national' and my pictures load SLOWLY!!! *phones helpdesk to complain about slow browsing* I'd freak. Whats T&T going to do to provide 'national' connectivity? Is it only national if the remote ISP peers with T. Is national defined as being within T's network only? That sucks BIG time. Somebodys been playing with their calculator to long and doesn't understand the internet to be able to make decisions like this. B My thoughts alone. -----Original Message----- From: Craig Spiers [mailto:craig(a)concept.net.nz] Sent: Friday, 28 May 2004 4:02 p.m. To: 'Barry Murphy'; 'Don Gould'; 'neil gardner' Cc: 'nznog' Subject: RE: [nznog] TC & T Possible Peering changes I think this is a stupid idea, how would you control who pays for what percentage of the link? What about the larger networks who utilise 50% of the shared link? Better to just get your own link and be done with it.. :) -----Original Message----- From: Barry Murphy [mailto:barry(a)unix.co.nz] Sent: Friday, 28 May 2004 3:59 p.m. To: 'Don Gould'; 'neil gardner' Cc: 'nznog' Subject: RE: [nznog] TC & T Possible Peering changes Why would everyone have to peer with T&T? 1./ Why don't all the ISP's currently peering at APE & WIX chip in a little and purchase a link between APE and both T or T. 2./ Assuming the traffic is flat rate and they don't charge you big time for the link, ISP's have domestic BW again 3./ Any traffic coming from T or T should go international, until such time as T or T purchase links to APE or your provider. I know this scenario is going to use up international bandwidth, but hey, outgoing bandwidth isn't as important as incoming. T&T customers will suffer the most. Barry -----Original Message----- From: Don Gould [mailto:don(a)bowenvale.co.nz] Sent: Friday, 28 May 2004 1:46 p.m. To: neil gardner Cc: nznog Subject: Re: [nznog] TC & T Possible Peering changes That's a really good question... 'bring it on'... Small claims wouldn't take much to defend and I'd suggest that's a fight the isp wants to loose (without it costing them to much in traffic so a smaller customer would be prefered). Start getting cases like this turning up in the court system and you've got leverage for a number of government agencies to take actions. However what's this question really about? Like you Neil I've been reading thru the endless banter and a few other questions come to mind... * Who are these ISPs that are using T&T for transit that shouldn't be? Why are we not also focusing on the limited number of these folk who are wrecking things for everyone else? ...or am I about to be told to shut up and keep quiet because I'm showing ignorance by not knowing that everyones doing it?! * Why don't the IX have clear policies on this issue? Why is the core of each IX not dealing to this? IX are generally a community venture, why haven't the IX set up to protect the community interest against these rogue users? Don't get me wrong, I'm not picking sides here, I've just been following the discussion and it seems to me that people are keeping quiet on some issue - perhaps I'm just stating the obvious and as a list newbi I'm just not up with all the politics yet? Someone called for someone with time to take the issue up with some lobying.... I'd put up a hand and have a look but as I see it at present the arguments suggest that the industry got what was coming to is... please don't abuse and flame me for that comment, I'm just saying it as I see it based on what's been presented in this discussion todate. Cheers Don _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

3 2

TC & T Possible Peering changes
by neil gardner 27 May '04

27 May '04

Goodness there has been a lot of stuff to wade through. I'm quite familiar with the benefits of peering and the (revenue) reasons that the big players want to change, but could someone please definitively answer this question... Will the proposed changes by Telstra mean that a large number of people currently paying different rates for National and International traffic will suddenly find that their ISP starts defining an awful lot more geographically national servers as International traffic? If this is indeed the case, have the various ISPs gotten their T&C well enough defined to defend against someone going to the small claims court and disputing a bill where traffic is obviously from a national server, even if it has transited an international link - since the ISP (may have) made a deliberate choice to route that traffic in a non-optimal fashion? Cheers - Neil G NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

8 8

Re: [nznog] TC & T Possible Peering changes
by neil gardner 27 May '04

27 May '04

>>> Juha Saarinen <juha(a)saarinen.org> 28/05/2004 2:06:47 p.m. >>> You're kidding right? We have T&Cs that speak of "best effort service" with no guarantee as to any aspect of delivery. I kid not... This quote is taken (almost at Random) from Paradise... "JetStart Traffic is calculated depending on the location of the site the traffic is coming from or going to. Any traffic to or from New Zealand sites (national traffic) is charged at 1/10th of the normal traffic charge, while traffic to or from a site outside New Zealand (international traffic) is charged at the full traffic rate." That tells me (in my mind) that traffic from a site in New Zealand will be charged at 1/10th of the normal rate. No normal home user should be expected to understand that just because of a spat between 2 National ISPs, Traffic from me here in Chch to a server in Wellington might go via Sydney and therefore be classed as International Traffic. Interestingly, as Paradise have that written right now, it doesn't matter. The way they have used the word "Site" in that context would clearly convey to a reasonable person that they mean the end server, not the last or most remote hop... So even if my traffic to and from Trademe goes via Timbuktu, the "Site" is Trademe, and it's a "New Zealand sites (national traffic)" (sic) Cheers - N. NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

3 2

RE: [nznog] Indian government plans Internet exchanges
by Regan Murphy 27 May '04

27 May '04

> Someone with some spare hands on their time needs to lobby > the government to make peering in NZ legislation. > > Although TNZ and TCNZ will be wearing a lot of the network > costs in terms of trunking traffic up and down the country, > they also have most of the customers - so I think that's fair > and justified. Yes it is good idea. So why not also make the Govt responsible for the trunking between peering sites as well? ISPs could still organise private peering for priority traffic in this scenario. -- Regan

3 2

RE: [nznog] Indian government plans Internet exchanges
by Gordon Smith 27 May '04

27 May '04

> -----Original Message----- > From: Craig Whitmore [mailto:lennon(a)orcon.net.nz] > Sent: Friday, 28 May 2004 12:33 p.m. > To: 'NZNOG Mailing List' > Subject: RE: [nznog] Indian government plans Internet exchanges > > > Why don't they just (like a lot of other people do), Advertise their > Auckland networks via APE only and their Wellington Networks > via WIX only. > Then they wouldn't be providing transit down the country. > > Advertising the Entire Clear Network via APE and the Entire > Clear Networks > via WIX is the problem. > Thanks > Craig > The use of BGP communities would help solve their problems regarding routing ingress and egress points. Pity it isn't more widely used..... Transits can be filtered by community tag within an AS, and most major vendors support using bgp communities in this way

1 0

Indian government plans Internet exchanges
by Andy Linton 27 May '04

27 May '04

This URL points to the incoming Indian governments 10 point agenda form IT - http://www.ciol.com/content/news/2004/104052609.asp In particular, see point 5: 5. Plan to connect all ISPs in India to a national internet exchange in order to achieve efficient internet traffic routing, cost reduction and improve quality of service for the Internet users in India. Four Internet exchanges points to be fully operationalised. Small and big ISPs to route their traffic through this exchange to ensure the security of domestic traffic. Currently, 25 ISPs are connected. ---- Note the reasons for doing this especially "improve quality of service for the Internet users".

5 4

netlantis news
by Pascal Gloor 26 May '04

26 May '04

Hello ppl, as you probably have noticed, netlantis is down since a while. Netlantis had critical performance problems and we decided to re-write some of the core scripts to improve the DB update. While doing this we had some new ideas about how to process the updates and much more has been re-written. There are no new features for the users, just the core-system works on a different way and all the BGP updates queuing problems will be gone. "What's new then ?" netlantis is running now since several weeks its own BGP daemon called (guess) nbgpd. So far it works well and has pretty nice performance (able to handle up to 500 full BGP sessions (tested up to 100)). "nbgpd" is dumping updates into files (per peer, per timestamp) in its own (simple) binary format. The updates are then sent to "ndb" (netlantis DB manager) which is a fast "routing table status file updater". This also runs since several weeks. the last difficulty is to convert this "ndb" format for the SQL database (to handle all the web/whois/telnet queries). So far we wrote the MySQL (MyISAM format) data file properly. "So? why isnt it up yet ????" We still have a last part to finish, writing the MySQL (MyISAM format) index file. Once this step completed, netlantis will come back up! "What's the difference for the lambda user??" Reliable informations! Until now, "global cisco bug upgrade worldwide in the world" made netlantis to go booom due to the high load of bgp updates. This will no more happen. We expect to have a delay to "real-time" of about 10 to 15 minutes, with few or many BGP updates, it wont matter! "Well, I dont care about your internal stuff, when will it be back????" We expect to bring netlantis back during the next week. We will inform you then. Best Regards, Pascal Gloor _ ______________ ___ _ ________________ / |/ / __/_ __/ / / _ | / |/ /_ __/ _/ __/ / / _/ / / / /__/ __ |/ / / / _/ /_\ \ /_/|_/___/ /_/ /____/_/ |_/_/|_/ /_/ /___/___/.org ... where all the routes meet

1 0

Location of Tangent/Vector Fibre in Auckland, Hopetoun Street
by Paul Adshead 26 May '04

26 May '04

Does anyone know the current extents of the Tangent/Vector fibre in Auckland? More specifically how far away is it from the Ponsonby end of Hopetoun Street. I'm trying to find out how far away it is and whether it's an option or not, but Vector are being difficult... Regards, Paul Adshead Network & Systems OTL Software Ltd www.otl.co.nz

4 4

Alternative to Running Cable down SH1
by Tikiri Wickramasingha 25 May '04

25 May '04

On Tue, 2004-05-25 at 01:53, Craig Spiers wrote: <snip> > > > > We could all possibly grab every redundant 10mbit hub in NZ and connect them > down SH1 through the north island and call it CountryLink ? > > Add up all those offcuts of Cat5 plus these redundant hubs, we could start > our own national ISP with VoIP ;) > A bit more viable - has anyone checked out the Helios project. Granted it crashed but NASA is prototyping a few newer and better ones. NASA Helios - remotely piloted, solar powered, extreme high altitude aircraft capable of carying a payload simillar to a small satelite. Uses Fuel Cells to store power generated by solar panels. It is designed to stay in the air forever. Wing Span approximately the size of a B-52 Bomber. Cost if I rememebr right was a couple million dollars. But that is a fraction of what running fibre all the way down SH1 would cost. Here is the link http://www.dfrc.nasa.gov/ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog

6 7

Peering.
by Simon Lyall 25 May '04

25 May '04

Little story here by Juha: http://www.nzherald.co.nz/storydisplay.cfm?storyID=3568316&thesection=busin… Looks like Telecom and Telstra are trying to put on a squeeze in order to make a couple more thousand per month. I'm a little surprised at the timing, Telecom has a bit of an advantage right now since it's got a monopoly on ADSL bandwidth but bitstream is only a few months away (allegedly) so it's going to be a lot easier for ADSL customers to switch pretty soon. Telstra doesn't even have that sort of leverage. I'd advise companies that are currently not connected to WIX or APE and are instead replying on the two companies above to deliver their National bandwidth to keep close tabs on things. If it suddenly costs ISPs thousands of dollars to send traffic to your site then the ISP (or whatever) is going to start looking hard are their benefits in the relationship (and remember this thousands is going to Telecom/Telstra not you). People like TVNZ . The Herald, TV3 etc who want to deliver bandwidth intensive content should take note especially. ISPs won't be able to afford to let customers watch your content all day if they are paying real money for a Telecom or Telstra circuit. And the circuit they do buy will be as small as possible. And remember if you connect to APE or WIX you have the choice of additional International bandwidth suppliers which will at least give you the chance to negotiate your next International bill down a little even if you stay with your existing Telco. It's a shame that Telecom and Telstra are basicly telling the Xtra and Paradise customers that the customers access to fast National content is less important than making a few thousand extra ( $50,000 tops, maybe ) on National bandwidth charges. Much as some sites don't offer bandwidth intensive services to International users they might be soon forced to not offer them to some (or all) National users. -- Simon J. Lyall. | Very Busy | Mail: simon(a)darkmere.gen.nz "To stay awake all night adds a day to your life" - Stilgar | eMT.

20 38

hfr
by Thomas 25 May '04

25 May '04

hope you've all got your orders in http://www.cisco.com/en/US/products/ps5763/index.html maybe citylink could buy a few for the collisionnet network. although the stm-256 modules only seem to have short-haul optics. bah humbug thomas

1 0

Allied Telesys Media Converter
by Drew Broadley 25 May '04

25 May '04

Hi all, Does someone happen to have a used Allied Telesys twin-fibre (100base-FX) to rj45 (100base-TX) media converter for lend or sale? We are having issues with our telstraclear circuit link and telstraclear keep throwing us the same brand different model converter. We have had issues with two media converters now and I wish to experiment with another brand (specifically Allied Telesys, as word of advice from a technician at Inspire who solved their issues) Can you please contact me off list or onlist to discuss any others that have had the same problems with these Transition media convertors. Cheers, Drew

2 1

Re: [nznog] Peering.
by Brian Gibbons 24 May '04

24 May '04

>From: "Drew Broadley" <drew(a)corrupt.co.nz> >We could all possibly grab every redundant 10mbit hub >in NZ and connect them down SH1 through the north island >and call it CountryLink ? OK, CityLink now runs CountryLink, and every NZ ISP is connected via a single peering exchange. CountyLink should then write to TelestraClear explaining the change in topology and how much it is going to cost TelstraClear to connect to CountryLink for "Domestic Peering", a per MB charge would seem appropriate. Cheers BG

7 8

Re: [nznog] Peering.
by Richard Naylor 24 May '04

24 May '04

At 03:28 p.m. 25/05/2004 +1200, Paul Brislen wrote: >If you (Customer A) set up a video server in Invercargil >(JuhaDownCountry.com) that for whatever reason got a lot of traffic, the >telcos would have to install new capacity/servers/gear/etc to cope with the >demand and they would need to recoup that cost from you, Customer A. being the owner of several video servers I can reply on this one. If you use the model they mention then Peter Jackson would have to pay the Embassy to screen his movies as well as the Embassy charging the public to watch. To give you a very real example. LOTR-3 Premiere. We got paid nothing for webcasting the event. Based on the extra traffic that went to TCL, they earned $250,000 in 5 hours of webcast. Not small change. TCNZ would have earned around $500,000 had they peered properly. The others probably earned around another $250,000 Had we not anycast LOTR-3 we would have had to pay our ISP. We deliberately engineered it to avoid that possibility, having accidentally generated a huge bill the year before. Yes a telco would have to install capacity to my server, but if they peer properly its for the traffic requests generated by their customers that runs over that peering link. Its exactly why all my servers are at exchanges, so that ISPs can get to the content with the least effort and cost. rich

2 1

Re: [nznog] Peering.
by Richard Naylor 24 May '04

24 May '04

At 05:16 p.m. 25/05/2004 +1200, Juha Saarinen wrote: >You're kidding? no - its for real >Oh hang on, you mean that TCL charged their customers some $250k, etc, not >that you paid them to send the data to their customers? looking at the incremental traffic flows and using TCL traffic charges, we estimate they earned $250k in 5 hours. We didn't get paid. But the beer from TV3 was nice ;-) rich

1 0

RE: [nznog] Peering.
by Regan Murphy 24 May '04

24 May '04

> Looks like Telecom and Telstra are trying to put on a squeeze > in order to make a couple more thousand per month. > > I'm a little surprised at the timing, Telecom has a bit of an > advantage right now since it's got a monopoly on ADSL > bandwidth but bitstream is only a few months away (allegedly) > so it's going to be a lot easier for ADSL customers to switch > pretty soon. > > Telstra doesn't even have that sort of leverage. If TelstraClear put a bit of time and effort into selling their services and retaining existing customers than putting all their fight into peering and local loop unbundling they would be a lot better off than they are now I'm sure. I have heard from several people who have had trouble buying products from them - both voice and data (business) - and have had endless troubles finding someone to return their calls. The unlucky ones to have actually bought their products from TelstraClear then have trouble getting service out of the Account Reps which seem to turnover several times a year... Clear was a great company but unfortunately they have been ruined. -- Regan

4 3

RE: [nznog] Peering.
by Craig Spiers 24 May '04

24 May '04

Let's call it.. CollisionNet :) -----Original Message----- From: Drew Broadley [mailto:drew(a)corrupt.co.nz] Sent: Tuesday, 25 May 2004 1:51 p.m. To: Brian Gibbons Cc: Craig Spiers; 'Juha Saarinen'; 'Jeremy Brooking'; 'nznog' Subject: Re: [nznog] Peering. Brian Gibbons wrote: >>From: "Craig Spiers" <craig(a)concept.net.nz> If telstraclear, was to >>stop peering at APE, and remove 'ports and connections to there' >>wouldn't that limit them to only having 'domestic' data inside their >>own network? >> >> > >This looks more like an attempt to change NZ from a Peering model to a >Tiered model, perhaps Telstra think they have the best backbone in NZ >and might be able to monopolise on it :) > >I am not completely familiar with the WIX/APE Topology, is there a >dedicated circuit between the two to carry domestic traffic? > >If not, is it possible that domestic traffic could traverse both APE >and WIX via TCL peering circuits to each? > We could all possibly grab every redundant 10mbit hub in NZ and connect them down SH1 through the north island and call it CountryLink ? Add up all those offcuts of Cat5 plus these redundant hubs, we could start our own national ISP with VoIP ;)

2 1

Re: [nznog] Peering.
by Jeremy Brooking 24 May '04

24 May '04

Craig Spiers wrote: > Let's call it.. CollisionNet :) > For SH1... Thats rather appropriate :)

1 0

Xtra de-peering in Wellington.
by Simon Blake 20 May '04

20 May '04

Just an FYI, For those that may be wondering why they're getting increased load on links in and out of APE, Xtra withdrew all routes and dropped their BGP session to WIX at about 11am this morning. This left a few parties delivering content to Xtra customers high and dry, and does little for the stability of the Interweb in NZ, which is a shame. Hopefully, the folks at TCNZ will see the light shortly, and turn it back on. Cheers Si

2 3

Port filtering by NZ ISPs?
by Neil Gardner 19 May '04

19 May '04

Hi guys - I'm trying to conduct some penetration testing on some networking equipment and I was finding that some ports were being filtered when someone else at the company was using an **** dialup account to try some things. A call to the **** helpdesk yielded exactly the results I expected so I was hoping someone here could give a more intelligent answer. I'd really like to find out what various ISPs are filtering from dialup or other pools - please email me directly if you have anything to offer. I am happy to sign and fax back NDAs if required and the info would be used for nothing but checking against our own test results or selecting ISPs for use during testing. Cheers - Neil G

1 0

Spam Legislation Workshop
by David Farrar 18 May '04

18 May '04

Hi all, You may have seen that the Government has released a discussion document on anti-spam legislation for New Zealand. As part of the consultation on any legislation, InternetNZ has arranged with the Government for an industry workshop on Thursday 24 June in Wellington for interested members of the Internet, business, legal and educational communities. The aim is to help make any legislation as effective and useful as possible. A formal invite has gone out snail mail to ISPs and others. I thought I'd mention it here also, so people can pass it on informally to anyone appropriate within their organisation etc. The draft programme for the workshop, a registration form, and a link to the Government's discussion document are all on InternetNZ's website at www.internetnz.net.nz. Cheers DPF -- David Farrar e-mail: david(a)farrar.com blog: http://www.kiwiblog.co.nz msn: dpf666(a)hotmail.com icq: 29964527

3 4

As expected, Swain nixed unbundling
by Juha Saarinen 18 May '04

18 May '04

http://www.nzherald.co.nz/latestnewsstory.cfm?storyID=3567355 Forgot to buy Telecom shares... arggh. -- Juha

1 0

DalNet nodes in NZ?
by Simon Blake 18 May '04

18 May '04

The folks from Dalnet are pestering Citylink to provide free hosting for a server they'll provide. I couldn't find any list of nodes on dalnet, so I have no feeling for how many there may already be in NZ. So I guess my question is, are these folks legit, is it a worthwhile thing to be associated with, would anybody use it if we did set it up? I have vague recollections of IRC nodes in NZ attracting significant DOS traffic in the past - does that sort of thing still happen? Shuold I run screaming from the room? Cheers Si

2 2

Lucent TNT Access Servers...
by Seeby Woodhouse 16 May '04

16 May '04

Apologies for the 'for sale' notice, but this really does seem like the most obvious forum that would have people interested in this sort of gear. Orcon currently has 6 x 480 Port Lucent TNT Access servers for sale, and we'll take the best offer over $12,000 + GST each (that's just $25 per port). You can still buy these new, and I have been told that current US$ list price is around US$181,000 Below is the current US$ list price of the components - each chassis has 10 x 48 port cards, 2 x E1 cards, and 1 of everything else. TNT-2DC-H 408078095 TNT Base, NCM3L20DRB $17,000.00 TNTV-SL-ADI-C 300076684 48-port MultiDSP NCD3BB0BAA $13,000.00 TNT-SL-CE1-C 300268471 Single-slot module (8) E1 interfaces IPI1GBABAA $4,000.00 TNT-SL-E100ND-C 300304193 4-Port, 10/100 Port Voice Ethernet Module IPI69D0CAA $10,000.00 TNT-OSLIC 300351004 Base TAOS RTU software license for the MAX TNT N/A $10,000.00 TNT-SO-R2 300071495 R2 tone-based support for most E1 countries. $5,000.00 TNT-SP-DRAM-32 407938745 32MB JEDEC DRAM Memory module. $1,000.00 Note: - The chassis in their current configuration won't do V.92. - The chassis also have the voice hash codes so that you can provide VOIP services on PRIs etc. Cheers Seeby Woodhouse Managing Director Orcon Internet Limited - www.orcon.net.nz Mob +64 (0) 21 366 666 / Wk +64 (9) 444 4414 ext 700

1 0

possible jeopardy for F root server in Auckland tomorrow morning
by Joe Abley 16 May '04

16 May '04

I hear there will be power testing on all levels in the Sky Tower tomorrow (Tuesday) between 0630 and 0730 local time, and "short breaks" are to be expected on all levels. The F root node in Auckland lives on Level 48. The power to the F-root node is supplied through UPSes, but I do not know the list time those UPSes were called upon to supply service. Accordingly, it is at least possible that multiple components of the F-root node will reboot, in which case peers of ISC in Auckland may see transient re-routing towards some other F-root node (Brisbane, Hong Kong, Palo Alto or San Francisco, probably). If there's any persistent issue outside that window, please feel free to send mail to noc(a)isc.org as usual. If you're at the APE and not peering with us, and you'd like to, send mail to peering(a)isc.org. Joe

1 1

NTP sources within NZ
by Russell Fulton 05 May '04

05 May '04

Hi, we have discovered that most of the off campus sources we had for our NTP service are no longer there. Anybody willing to let us connect to their servers? -- Russell Fulton /~\ The ASCII Network Security Officer \ / Ribbon Campaign The University of Auckland X Against HTML New Zealand / \ Email!

9 8

RE: [nznog] Hikoi webcast - maybe
by Richard Naylor 04 May '04

04 May '04

At 12:16 p.m. 5/05/2004 +1200, David Robb wrote: >On Wed, 5 May 2004, Jonathan Brewer wrote: > > > Hey Richard, > > > > Nice webcast, but where's the 8mbps HDTV stream!? > >Or at least something a bit higher bandwidth than 128kbit. Sorry - the HDTV stuff is about 12 months away due to a CPU capacity crisis - we need the 64bitters and appropriate software. I chose 128k as the best single stream to do that would be usable by the max people. I was using my laptop so cpu was limited. WHile I could have done a higher bit rate, the audience would have been restricted. A number of contacts reported firewall blocks in place and so some resorted to dial-up !! I use protocol roll over to try and get around firewalls, so I'm supporting mms and rtsp. So sorry bout the 128, but it did get a good audience. A link to the stream was carried by Stuff.co.nz and we had a simultaneous peak of 92 viewers. The log files shows something like 1550 connections looking at VideoNow. I didn't have individual logging turned on, so its mixed with other traffic, but VideoNow was saturating the log file, so about 1500 odd connex. The next stage is to get the gear a little more portable (like a backpack, like our other portable units) and also get multi-bit rate. And yes, we are available for the beach volley-ball championship, but would insist on full coverage of the event, including all the lead up trials etc. Do I have any volunteers for the camera crew ? rich

2 1

Re: [nznog] NTP sources within NZ
by Ewen McNeill 04 May '04

04 May '04

In message <2370.202.27.185.71.1083729519.squirrel(a)www.crypt.gen.nz>, "Kerry Tho mpson" writes: >Simon Blake said: >> Setting up a GPS NTP source has been on the list of things I've wanted >> to get done for a while now - I've got several rooftop mounted PC's that >> have stunning views of the heavens. [....] > >Dick Smiths have a usb GPS receiver ( http://www.dse.co.nz & search for >XH6831 ) which uses the standard NMEA protocol over what seems to be an >emulated serial port. IIRC that GPS receiver doesn't do PPS (pulse-per-second). Without pulse per second you can't get NTP-accurate time out of a GPS -- there's just too much jitter in the timing reports. (NMEA output is fairly slow (9600bps?) and in many GPSes they don't even treat the NMEA output as a high priority, so it's only "near the second" not on starting on the second.) >From what I remember most GPSes under about $400-$500 won't do PPS, and some of the more expensive ones don't either. I think there are some models around the $500-$600 range which will do PPS, but I don't recall which ones off hand. Ewen

1 0

Re: [nznog] NTP sources within NZ
by John Rumsey 04 May '04

04 May '04

mark.harris(a)ssc.govt.nz wrote: > Russell Fulton wrote: > >> we have discovered that most of the off campus sources we had for our >> NTP service are no longer there. Anybody willing to let us connect >> to their servers? > > > > Industrial Research's Measurement Standards Laboratory (MSL)is now > providing a publicly accessible primary Network Time Protocol (NTP) > server for the synchronisation of computer time for connections within > New Zealand. More details are available on their website: http://www.irl.cri.nz/msl/services/time/ntpServer.html cheers, John Rumsey

1 0

Hikoi webcast - maybe
by Richard Naylor 04 May '04

04 May '04

a "maybe" heads up. We have been developing a webcasting facility known as VideoNow. It is webcasting with the encoder over CafeNet, so you can roam around town. Last friday we drove the van around, which seems to have amused a few folks. I'll put some footage up later for a laugh. Tomorrow the Hokoi will parade/march thru town. There is a strong possibility that we will have a camera on Lambton Quay to catch the action. The VideoNow URL is http://www.r2.co.nz/20040414/ If the camera is live it will connect, if not you get a message. Keep trying - the stream will kick in as we get near an access point. The "maybe" part is how much sleep we get tonight. Camera batteries are already charging........ rich

9 9

RE: [nznog] NTP sources within NZ
by mark.harris＠ssc.govt.nz 04 May '04

04 May '04

Russell Fulton wrote: > we have discovered that most of the off campus sources > we had for our NTP service are no longer there. Anybody > willing to let us connect to their servers? Industrial Research's Measurement Standards Laboratory (MSL)is now providing a publicly accessible primary Network Time Protocol (NTP) server for the synchronisation of computer time for connections within New Zealand. The Measurement Standards Laboratory (MSL) is the official disseminator of the time standard, UTC(MSL), for New Zealand. (Most people will be familiar with their time service disseminated as a series of "pips" broadcast by Radio New Zealand on the National Radio station. ) MSL is now providing a Network Time Protocol (NTP) stratum 1 server for connections within New Zealand. The server is referenced to UTC(MSL) by direct connection of a pulse per second signal from the master caesium atomic clock which is part of the New Zealand time standard. The time in the server is typically stable to around 1 microsecond with respect to the time in the caesium clock. Using the server The server is a publicly available server open to all connections from within NZ. Its address is msltime.irl.cri.nz (Note: this server only services NTP and 'Simple Network Time Protocol' (SNTP) requests. It does not respond to 'datetime' requests. Government agencies however, should register their use of the server with MSL by sending the IP address of their server (a static address is required) and a contact email address to time(a)irl.cri.nz . The reason for this requirement is that some servers overseas have been flooded with requests from devices such as routers and access to the server may have to be restricted at some time in the future. Agencies should limit their requests to come from at most three servers and then any additional server should connect to what will be the agency's three stratum 2 clocks. The best and most accurate way of using this service is to install the official NTP distribution from www.ntp.org. Versions are available for most versions of Unix. Windows versions are available for Windows NT, 2000 and XP. Please note that this message has been liberally pillaged from a fact sheet on the E-government website (http://www.e.govt.nz/programme/docs/Time.pdf) and further details are contained there (sorry, pdf only at present. I'm working on getting more accessible pages up there). Regards Mark Harris Manager Moderation and Web Standards State Services Commission PO Box 329, Wellington, NZ Tel: 64 4 495 2844 Email mailto:web.guidelines(a)ssc.govt.nz -- Caution: The content of this email is the property of the State Services Commission. If you have received this message in error please notify the sender immediately and delete.

1 0

Heads Up - Webcast tomorrow - TUESDAY
by Richard Naylor 03 May '04

03 May '04

We have a webcast tomorrow - Tuesday 4 May 2004 NZ Wireless Data Forum conference at Te Papa. It appears that the organisers haven't put any URLS to the streams anywhere public, so I don't expect any traffic issues. But as usual Help Desks may get questions from users etc. Or you may have a few minutes free and want to see whats new in wireless stuff yourselves. http://www.r2.co.nz/20040504 If theres enough interest, we can use VideoNow (a camera and wireless laptop) to do a tour of the exhibition area to show what toys were on display. Need a time that suits. Theres no lunch break (S**T !!! when will we eat ? We're starting at 6:30am!) and the presentations go thru til 1630. May get someone else to drive that bit videonow is at http://www.r2.co.nz/20040414 rich

3 5

Sasser Virus Information
by Nick MacKechnie (thenet) 03 May '04

03 May '04

Hi All, Sasser seems to be alive and well, here is some information that you may find useful. -- Based on the information at the Symantec link: - Blocking destination tcp ports 5554 and 9996 at the routers will stop the payload being transferred across network segments. (5554 appears to be the content transfer channel (FTP), 9996 is the remote shell used to run commands on a host). - Deploying an IPSec policy with filter actions for Block on port 5554 and 9996 can be used to block the transfer of the payload to or from individual hosts. Blocking inbound 445 is also possible, but may cause problems depending on your specific requirements re File and Print sharing on clients. NB This is a technique to limit the spread of the virus, not to mitigate the vulnerability. -- Group Policy deployment of the removal tool has not been tested to my knowledge, but: - When assigned to a computer, the package is executed using a Local System logon, so shouldn't encounter any permissions issues. - The cleanup tool fails if the MS04-011 hotfix is not installed. - Group Policy does not guarantee an order of completion for assigned packages. - If the package runs unsuccessfully, it may not be run again by the software deployment engine; instead, consider using MSI to get the cleanup tool onto the workstations and a computer startup script to execute the tool. - Our typical suggestion is to install MS04-011, reboot, then run the cleanup tool; GP software deployment may not be able to accomplish this in a single step.

1 0

OT: Looking for 2nd hand 1U servers.
by Lin Nah 02 May '04

02 May '04

HI all I'm look for several ( more than 3 ) 1U machines for servers that I'm putting online. My budget is tight and I don't need high performance. Just realiable stuff. So if people have older boxes lying around ( that isn't broken) doing nothing that would be great. Minimum spec would be: 1U (2U might be okay but 1U prefered), 600MHz+ i386, IDE or SCSI disk (or ability to take a normal one) and 100Mb/s Ethernet. I'd prefer Auckland unless you have several to offset the cost of shipping. Anyway email me if you have any available or know where I can get hold of some. regards lin ps If you are interested in curry and beer this Thurs dinner, contact me if you are in Auckland or go to thursdaynightcurry.com for Wgtn.

1 0

The New Zealand Network Operators' Group
by Donald Neal 02 May '04

02 May '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Meetings See http://www.nznog.org/ for details of the January 2004 conference. We are now working towards a similar gathering to be held in late January or early February 2005. Also see http://auckland.thursdaynightcurry.com/ if you live in or near Auckland. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. About This Mailing List This list has over six hundred addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

go on - burn up some bandwidth
by Richard Naylor 29 Apr '04

29 Apr '04

http://www.r2.co.nz/xyzzy it will be gone shortly

3 2

RE: [nznog] go on - burn up some bandwidth
by Regan Murphy 29 Apr '04

29 Apr '04

> > http://www.r2.co.nz/xyzzy > > it will be gone shortly > 384Kbps streams nicely over telstraclear 2mpbs dsl with 100KB/sec of downloads running in the background :D -- Regan

1 0

WHOIS at ARIN.NET not responding.....
by Steve Withers 28 Apr '04

28 Apr '04

Anyone else unable to use the WHOIS at arin.net? I can't get a response when trying to check ownership of IP addresses. 15:24 2004 04 29 Steve

4 5

RE: [nznog] WHOIS at ARIN.NET not responding.....
by Gordon Smith 28 Apr '04

28 Apr '04

You should really be raising this as a fault with your ISP then. > -----Original Message----- > From: Steve Withers [mailto:swithers(a)mmp.org.nz] > Sent: Thursday, 29 April 2004 4:19 p.m. > To: nznog > Subject: RE: [nznog] WHOIS at ARIN.NET not responding..... > > > My IP is: 222.152.48.55 > > I'm on Jetstream (Orcon is the nominal ISP). > > Steve > >

1 0

Also can't reach: thememoryhole.org / 69.50.191.178
by Steve Withers 28 Apr '04

28 Apr '04

This site has also been unreachable by me at any time of the day or night since i first tried to access it several days ago: 165.229.193.230 www.thememoryhole.org I'm on Jetstream Surf via Orcon steve(a)tbird:~$ traceroute www.thememoryhole.org traceroute to www.thememoryhole.org (69.50.191.178), 30 hops max, 38 byte packets 1 * * * 2 210-55-64-32.adsl.netgate.net.nz (210.55.64.32) 52.484 ms 50.206 ms 51.823 ms 3 192.168.253.1 (192.168.253.1) 59.802 ms 58.922 ms 63.941 ms 4 p-c1.akbr1.global-gateway.net.nz (202.50.245.237) 67.791 ms 80.210 ms 75.767 ms 5 ge-0-3-0-6.akbr3.global-gateway.net.nz (202.37.246.18) 57.844 ms 58.677 ms 57.849 ms 6 p1-3.sjbr1.global-gateway.net.nz (202.50.116.178) 220.129 ms 216.446 ms 220.135 ms 7 so-1-3-0-0.pabr3.global-gateway.net.nz (202.37.245.230) 215.672 ms 216.760 ms 215.868 ms 8 sl-st20-pa-6-3.sprintlink.net (144.223.243.17) 226.198 ms 222.401 ms 227.933 ms 9 sl-bb20-sj-8-3.sprintlink.net (144.232.20.43) 237.942 ms 240.469 ms 239.977 ms 10 sl-bb21-sj-15-0.sprintlink.net (144.232.3.158) 219.841 ms 224.752 ms 219.945 ms 11 sl-st20-sj-13-0.sprintlink.net (144.232.9.58) 235.917 ms 238.727 ms 235.858 ms 12 sl-browing-21-0.sprintlink.net (144.223.242.10) 235.995 ms 234.561 ms 236.013 ms 13 g2-2-0.a1.hywr.broadwing.net (216.140.3.41) 221.734 ms 220.906 ms 219.880 ms 14 * * * 15 * * * 16 * * * 17 * * * ...etc....

1 0

RE: [nznog] WHOIS at ARIN.NET not responding.....
by Gordon Smith 28 Apr '04

28 Apr '04

Working fine from here (via Sprint) I'm assuming you're trying from port-222-152-48-55.fastadsl.net.nz (www.mmp.org.nz) I'd suggest checking your connectivity from one of the route-servers A trace to that box dies: 10 g8-0-0-6.akbr1.global-gateway.net.nz (202.37.246.17) 84.608 ms 77.022 ms 89.586 ms 11 fid-int.akbr1.global-gateway.net.nz (202.50.245.238) 90.192 ms 91.546 ms 90.002 ms 12 * * > -----Original Message----- > From: Steve Withers [mailto:swithers(a)mmp.org.nz] > Sent: Thursday, 29 April 2004 3:25 p.m. > To: nznog > Subject: [nznog] WHOIS at ARIN.NET not responding..... > > > Anyone else unable to use the WHOIS at arin.net? > > I can't get a response when trying to check ownership of IP > addresses. > > 15:24 2004 04 29 > > Steve > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

IANA IPv4 allocations and bogon update: 58/8, 59/8
by Rob Thomas 28 Apr '04

28 Apr '04

-----BEGIN PGP SIGNED MESSAGE----- Hi, team. **NOTE WELL: Thanks to a donation from the RIPE NCC we have a new bogon prefix data offering. See below for the details. The numerous Team Cymru bogon projects have been updated as of 01 APR 2004 to reflect the following IANA allocation made on 01 APR 2004: 58/8 Apr 04 APNIC 59/8 Apr 04 APNIC IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.qorbit.net/documents/junos-template.pdf> Secure JUNOS BGP Template (Juniper) - <http://www.qorbit.net/documents/junos-bgp-template.pdf> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-loose.pdf> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-strict.pdf> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> RIPE NCC fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#ripe> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. - -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQJApa1kX3QAo5sgJAQHypAP+NF/noJVKOCT8jfTviUyOvEUmr/UwcCwC XsomXcCp9/QAfaMElUaa34Jm4OY3eVUqIvwm/cF1Pg7EhfzjzgHzpru9EWMtMuju eHxGXZpETdVbh+YB3oZIqIP/jydO0UpwiEUHuq9behvTgM3FGjs/yMot/sIs1/dp /22VF+/QhOc= =Bmje -----END PGP SIGNATURE-----

1 0

RE: [nznog] Domainz issue
by Tim John - Domainz 28 Apr '04

28 Apr '04

> The ultimate gift from domainz and somebody complains about it. You just can't please some people :) Grant, please email me off list to discuss further. Tim -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Thursday, 29 April 2004 9:12 a.m. To: Grant Zanetti Cc: NZNOG(a)list.waikato.ac.nz Subject: Re: [nznog] Domainz issue Grant Zanetti wrote: > Currently anyone using the staff proxy here at Iconz is being refused > access to the domainz website. Any and all attempts to contact > someone so find out why this is have been ignored. Strike me dead! The ultimate gift from domainz and somebody complains about it. > Can someone from Domainz drop me an email to explain why we are being > blocked? And you want to fix this? /me recommends a stiff drink -- Peter Mott Chief Enthusiast 2DAY INTERNET LIMITED http://www.2day.com "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Domainz issue
by Grant Zanetti 28 Apr '04

28 Apr '04

Currently anyone using the staff proxy here at Iconz is being refused access to the domainz website. Any and all attempts to contact someone so find out why this is have been ignored. Can someone from Domainz drop me an email to explain why we are being blocked? Thanks. -- http://the.mani.ac.nz

2 1

Telstra Clear routing 210.54.142.0/24 incorrectly
by Peter Simmons 27 Apr '04

27 Apr '04

Hi, Perhaps there is someone from Telstra Clear on this list that can help. We (Strongnet) own the 210.54.142.0/24 range it is hosted at United Networks datacentre in Northcoat, Auckland. For some reason or other the routers that Telstra Clear 'Tempest' customers go through is routing traffic to that ip range as over its international connection. This means that those customers have to pay international rates for traffic that goes to our network. Obviously they should only have to pay national traffic rates as it is national. Traffic going from our network to the Telstra Clear 'Tempest' customers is routed nationally. Only traffic coming from the Telstra Clear 'Tempest' customers to our network is being routed internationally. It seems that only Telstra Clear customers are having this problem. So if anyone knows how to fix it or is in a position to fix it please do. Regards, Pete

2 1

"Domain Names Australia" banned from trading
by Matthew Poole 27 Apr '04

27 Apr '04

Not strictly related, but I know that a lot of people on here have had grief as a result of the little toad's actions. So, take a read of http://www.nzherald.co.nz/latestnewsstory.cfm?storyID=3563220, and gloat at the well-earned smack-down.

2 1

TestraClear WLL
by Philip D'Ath 27 Apr '04

27 Apr '04

Could someone from TelstraClear who deals with the wireless local loop box's in a technical capacity please contact me off list. http://www.ifm.net.nz/ CCNP, BCMS Philip D'Ath.

1 0

Re: NZNOG Digest, Vol 16, Issue 17
by Paul Gold 23 Apr '04

23 Apr '04

We started having problems more than a week ago, with queues of 10K and more building up over the day through to Xtra. At night, this was 2-3 times as bad. We managed to (finally) get through to CTSHelp, who advised us that Xtra had made a policy decision to only accept 2 connections per source IP/domain. This was effectively throttling our mail down to around 2-3 messages per second. Obviously an attempt to limit the impact of the recent Sober work and variants on xtra's part... Paul Date: Fri, 23 Apr 2004 16:33:12 +1200 From: jamesc(a)wave.co.nz (James Clark) Subject: Re: [nznog] Xtra To: Neil Gardner <NeilG(a)renaissance.co.nz> Cc: nznog(a)list.waikato.ac.nz Message-ID: <20040423043312.GA27729(a)phoenix.wave.co.nz> Content-Type: text/plain; charset=us-ascii On Fri, Apr 23, 2004 at 04:10:01PM +1200, Neil Gardner wrote: > Chuckle - I _KNOW_ it's just a coincidence, but less than 15 minutes after > lampooning Xtra's generally useless status page about never being updated, > they have managed to list the intermittent (!) email problem, only 26 hours > after it was first notied on this list! 26? Try more than 48 hrs, and apparently it was worse on Tuesday!

1 0

RE: [nznog] Xtra's "No known problems line"
by Robert Purdy (DSL AK) 22 Apr '04

22 Apr '04

Someone must have called Theresa - Current Status There is currently 1 known problem with the Xtra Network Unscheduled Event Products Affected: All Connections Areas Affected: Nationwide System(s) Affected: Receiving Email Sending Email System(s) Response: Intermittent Current Status: Investigating Resolution Expected: Unknown 1000+ messages queued here.... Rob -----Original Message----- From: Blair Harrison [mailto:nznog(a)jedi.school.nz] Sent: Friday, 23 April 2004 4:45 p.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Xtra's "No known problems line" On Fri, 23 Apr 2004 15:52:52 +1200 Neil Gardner <NeilG(a)renaissance.co.nz> wrote: > I'm not advocating anything illegal but... > > If anyone on here has the artistic skills, the access and the guts, > replacing that "No known problems" with a picture of an Ostrich with > it's head in the ground, and a speech bubble with "There are currently > no....".... Well, I'm not sure I could imagine anything funnier :-) > > N. > http://jedi.net.nz/~blair/xtra1.png Have a good friday laugh everyone, and stop worrying about your mail queues.. they'll sort themselves out eventually, they always do :) Cheers, Blair _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

Xtra's "No known problems line"
by Neil Gardner 22 Apr '04

22 Apr '04

I'm not advocating anything illegal but... If anyone on here has the artistic skills, the access and the guts, replacing that "No known problems" with a picture of an Ostrich with it's head in the ground, and a speech bubble with "There are currently no....".... Well, I'm not sure I could imagine anything funnier :-) N. -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

2 1

RE: [nznog] Xtra
by Neil Gardner 22 Apr '04

22 Apr '04

Chuckle - I _KNOW_ it's just a coincidence, but less than 15 minutes after lampooning Xtra's generally useless status page about never being updated, they have managed to list the intermittent (!) email problem, only 26 hours after it was first notied on this list! -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

2 1

Xtra
by jamesc＠wave.co.nz 22 Apr '04

22 Apr '04

Anyone else having a hard time getting email into Xtra? Cheers, James.

8 11

RE: [nznog] Xtra
by Neil Gardner 22 Apr '04

22 Apr '04

>From: Simon Byrnand [mailto:simon(a)igrin.co.nz] >Besides, on the Help page: "There are currently no known problems with the Xtra Network." :) Yes, but as I _think_ Simon Lyall once said to my intense amusement, "I have a theory that Theresa Gattung has to personally approve anything that gets posted there" Cheers - N. (apologies for wrong attribution or quote :-) -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

1 0

Update to Ihug Time Servers.
by Simon Lyall 22 Apr '04

22 Apr '04

[ This email is being sent to NZNOG and Bcc'd to about 100 people who have notified me that they are using Ihug's Time Servers. Apologies for any duplicates or errors. ] Ihug has made a small change to it's NTP servers which may affect people using them, Specifically: tk4.ihug.co.nz is going to be eliminated on 1st May 2004 tk3.ihug.co.nz had it's IP permanently moved yesterday (to 203.109.252.5) tk1.ihug.co.nz and tk2.ihug.co.nz are unchanged. If you are using tk4 then you will need to update your configuration, if you are using tk3 then you will need to ensure your NTP daemon is using it's new IP. Please use DNS of these machines in the config rather than IPs where possible. Please email me if you have any further questions. Also, If you are running a NTP server on a permanently connected machine you might want to look at joining the pool.ntp.org project , See http://www.pool.ntp.org/ for details. Currently New Zealand has around 5 servers in the project. -- Simon Lyall, | System Admin | Work: simon.lyall(a)ihug.co.nz Senior Engineer, | Network Admin | Home: simon(a)darkmere.gen.nz Ihug Ltd, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz

5 6

New Cisco Vulnerability - SNMP
by Gordon Smith 20 Apr '04

20 Apr '04

This came out today. Affected IOS's are 12.x series, including 12.3.6 http://www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml Page also lists which releases have been fixed - 12.3.x due mid May Cheers, Gordon

1 0

SANOG IV, Kathmandu, Nepal, 23-30 July 2004
by Joe Abley 18 Apr '04

18 Apr '04

[forwarded on behalf of the organisers] --- SANOG IV 23-30 July, 2004 Kathmandu, Nepal SANOG IV Program and Registration Announcement South Asian Network Operators Group (SANOG) IV program and agenda are now published on http://www.sanog.org/sanog4/. The registration has also now been opened. SANOG IV is being held at the Radisson Hotel in Kathmandu, Nepal from 23-30 July, 2004. You can refer to www.sanog.org for details. Program and Agenda: SANOG IV program incorporates the following Three hands-on workshops: 23-27 July, 2004 - Open Source IP Services for ISP, by NSRC - ISP Routing Workshop, by Cisco - DNS / DNSSec Workshop, by APNIC Eight Tutorials 28-29 July, 2004 - Anti-SPAM tutorial - Juniper Routing Workshop - VOIP technology and SIP Deployment - Internet Routing Registry Tutorial - Internet Exchange Point - Exim Mail Server - PGP mini Tutorial - APNIC Internet Resource Management Four Birds-of-a-Feather : 28-20 July, 2004 - Internet Exchange Point - ISP/NSP Security - West Asia BoF - PGP Key-Signing Party Full Day Conference Program : 30 July, 2004 - Regional Updates - Routing Practices - Application Deployment - Security Additional Programs: (28-30 July, 2004) - APCAUCE tutorials and meeting - APNIC Regional policy update - APNIC and RIPE NCC hostmaster Consultation - Regional Telecom/Internet Policy Session We expect a huge turn out from the region at this SANOG meeting owing to the popularity at previous meets. We also welcome participants from West Asia, with the newly established collaboration with the RIPE NCC. With the co-hosting of APCAUCE meeting, we also expect a larger participation from the entire Asia Pacific region. We hope you would be able to make it to this meeting. The meeting is open to everyone from the operational community, and thus anyone who needed a reason to visit Kathmandu now has one. You can register for SANOG by sending in the form available at www.sanog.org/sanog4. Online registration will open in May.

1 0

on the scrounge for a Cisco 3548 for APE.
by Simon Blake 18 Apr '04

18 Apr '04

Hi folks The active hardware at APE currently comprises a Cisco 3548 and 3508 pair. For the usual reasons, (and as part of some upcoming outages - more on this later), I'd like to replicate this. I have a spare 3508, but I'd really like a matching 3548 to go with it. So, the question, does anybody know of anybody in NZ who might have one they'd like to sell? They're no longer available from Cisco, so I thought I'd try the circle of friends first, before molesting the usual suspects (who'll doubtless try and sell me something newer and shinier). Cheers Si

1 0

CheckPoint Software
by Tim John - Domainz 16 Apr '04

16 Apr '04

Hi all, Can anyone recommend a reseller of Checkpoint software as I need a quote for upgrading. Also, does anyone have any experience between Checkpoint and PIX platforms ? I have very little experience of either so some 'pro' and 'con' arguments would be really helpful to me. Cheers, Tim

2 1

Issues with BIND
by Drew Broadley 15 Apr '04

15 Apr '04

I am having issues with a SINGLE domain "corrupt.co.nz", every other domain is fine! Here's the deal: Bind logs return nothing like they usually would saying there was an error with the domain. I can dig to ALL of my AUTH NS servers, and get the records returned no problemo. I can use XTRA, DTS (and a few others have used their own DNS servers) and get returned results without any SERVFAIL errors. I try to dig anything to the PARADISE NS servers (203.96.152{4,12}) and I get mixed results. I get www.corrupt.co.nz and corrupt.co.nz, but none of my overly important records (home.corrupt.co.nz, mail.corrupt.co.nz) It returns SERVFAIL id:2 whenever I try to request anything other then www.corrupt.co.nz / corrupt.co.nz via PARADISES NS Servers Any ideas? I have contacted soa(a)paradise.net.nz but god knows how long that will take to be processed. - Drew

5 6

Re: [nznog] Issues with BIND
by Mark Goldfinch 15 Apr '04

15 Apr '04

On Fri, 16 Apr 2004, Drew Broadley wrote: > I try to dig anything to the PARADISE NS servers (203.96.152{4,12}) and > I get mixed results. > > I get www.corrupt.co.nz and corrupt.co.nz, but none of my overly > important records (home.corrupt.co.nz, mail.corrupt.co.nz) > > It returns SERVFAIL id:2 whenever I try to request anything other then > www.corrupt.co.nz / corrupt.co.nz via PARADISES NS Servers ns1.dns.net.nz lists the nameservers for corrupt.co.nz as being: ns.iplay.net.nz. ns2.iplay.net.nz ns3.iplay.net.nz iplay nameservers list: ns1.iplay.net.nz. ns2.iplay.net.nz. ns3.iplay.net.nz. Which is okayish, however not entirely certain how badly this will affect things, ask the iplay servers about their own zone and you get a SERVFAIL for anything for within iplay.net.nz. You may want to ensure that the iplay nameservers reply for their own zone, otherwise bind may cache the SERVFAIL result for iplay records and then do the same for any zones which depend upon iplay records. Best Regards, --- Mark Goldfinch Senior Systems Administrator TelstraClear Ltd

1 0

RE: [nznog] Routing protocols
by Gordon Smith 15 Apr '04

15 Apr '04

> -----Original Message----- > From: Donald Neal [mailto:Donald.Neal(a)telecom.co.nz] > Sent: Friday, 16 April 2004 8:34 a.m. > To: nznog(a)list.waikato.ac.nz > Subject: RE: [nznog] Routing protocols > > > > In the words of Iljitsch van Beijnum's book "BGP", which I was reading > over Easter (I know, I'm a sad person): > > "If you are implementing a large-scale IP network or have unusual > requirements, you should definitely read up on all the > protocols so you > can make an informed decision. However, most small-to-medium sized > networks running just IP should go ahead and select OSPF: it does the > job, doesn't have any huge disadvantages, and is readily available." > > - Donald Neal > > Donald Neal | "I suspect most samba > Technical Specialist | developers are already > Operations Engineering | technically insane. Of course, > Integration & Services Divn. | since many of them are > Alcatel NZ Ltd | Australians you can't tell." > All opinions mine only. | - Linus Torvalds > > -------------------------------------------------------------- > ---------------- > "This communication, including any attachments, is confidential. > If you are not the intended recipient, you should not read > it - please contact me immediately, destroy it, and do not > copy or use any part of this communication or disclose > anything about it. Thank you. Please note that this > communication does not designate an information system for > the purposes of the Electronic Transactions Act 2002." > -------------------------------------------------------------- > ---------------- > What a terrible thing to be reading over easter :-) One advantage of using IS-IS is that if you're running both IPv4 and IPv6 on a network, you only need to run the one IGP for both. Doing both woth OSPF requires OSPFv2 and OSPFv3 :-( I did see a very good presentation some time ago (which may very well have been the AOL one that Joe mentioned) that detailed the transition to IS-IS where the network was live at the time. From memory, the primary reason for the change was the desire to move to an MPLS-capable network. Cheers, Gordon

1 0

RE: [nznog] Routing protocols
by Donald Neal 15 Apr '04

15 Apr '04

>> >> Yes... If you're thinking what I'm thinking, IS-IS is covered in the >> CCNP, CCDP and CCIP certification (and recertification) exams. And >> these are definites in the exam (not maybes). >> > http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_ exams/642-801.html > Hey look on the bright side - at least you don't have to learn about > SNA for CCDP anymore. Um, given that CCIP is aimed at large ISP's or telcos, including IS-IS in it would seem to make sense. The funny thing is that IS-IS is included in the CCNP recertification exam, but _not_ the CCIP recertification exam. - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

Routing protocols
by nznog 15 Apr '04

15 Apr '04

What routing protocols do people use on their networks? Particularly inside. Does anyone in the world actually use IS-IS ? I am not interested in what network runs what, just how many networks run various protocols. Rough idea of network size would be nice, and any partcular reasons you prefer one to the other. thanks for satisfying my curiosity JM -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org mQGiBD2JfrwRBACWgDlX/IoNxdk15KpELdl6Sou4cU0sbaBinYV7X12SoR3YljuM lJlhgtoahIdUkqOuvDmX1AUNY2a80sidbTA48B0QUzYrGnktPoBxz4O29LKm49t3 Ojoqj0AsnC6HB37N5pScATqMbXME8hkjACHvukSUvgjHiPRYaMz7WQ2W0wCg3t09 ErzU4f+J+8fExfcd8B1+ce0EAIsc5GlVeK6hTBf3XyTRFbLD0C2m+BZGamrpngmb ito2vhKxbxTHLR/Qy2nbvN4bT42CCnf4v5MguPepqbMT8V6hxXKxxUzJx3A67x6m 7e0Qag4TLopc7f7mY5bTk1yY2mjAg1b+uVEuxMxGVtFkm586aOpmQVfAAgtffsrl CLTlA/94q8gjqHk8A9funzsjlZKft1+Z+NpGObfw9M9cC7c8RJAdK8kusH7/oKb2 Yq9NsSSdULJiqZaKkH4aCV55yvDnF3b6BZQOGvqpYuSACSJoX+fEwASGL0Qq0Jym ykaxwyNKqvUdxuYb9TPU01O3OpTyAvI0DsyjJ+KGS9h9mZwPX7QtSmFtZXMgTWFo ZXIgKGg0eDByKSA8c2NvdXNlckBwYXJhZGlzZS5uZXQubno+iF0EExECAB0FAj2J frwFCQPCZwAFCwcKAwQDFQMCAxYCAQIXgAAKCRAlRgQ5B5O8vFi8AJsG0xt5FRG1 F10FJFblBhmtc4//vwCgnUmaClr8+F+qe4Rm9wnYqWyjF4S0JUphbWVzIE1haGVy IDxqYW1lcy5tYWhlckBpcmQuZ292dC5uej6IXQQTEQIAHQUCPYmWnwUJA8JnAAUL BwoDBAMVAwIDFgIBAheAAAoJECVGBDkHk7y8MvUAnRxhOIq1IAo239VFcBfN2IdZ XEehAJ9U0BB2ZZ8PjNWI1yvjzJ5P3B5lv7QhSmFtZXMgWCA8c2NvdXNlckBwYXJh ZGlzZS5uZXQubno+iF0EExECAB0FAj22c0sFCQPCZwAFCwcKAwQDFQMCAxYCAQIX gAAKCRAlRgQ5B5O8vNLkAKDZ4x+lDWYoBPVViuX37Tbd51golgCgiciBW3djy3wV 11Jdz3x38O5JwRW5Ag0EPYl+yhAIAL7K7wrwGjvgRRS+rh5hW8JJbrYQn0BvajTs Vm/OvtA5QdJN1zqBNBlGCM1OivxASjAZEmpUYMAnBcUjNicXaIu/WoB0AUPSmkZ7 4NHyWoU12cbHZw6pZno4OZ9DpwSIsOkaP5rDB8oaj9b9/nziuxBm3oqmKN64ohcN oSOFJ/4+66vEDM8I1p+4pvb2Jj5JYRS/5+piJEaBUFttHofRWkF34vnxR3c+MjY7 NSVWbu3EWtJV+se+MLeSdDZxzt4v7XD7wE/lt9xq9IlyOryQvRhqrduaYc0ABItd eashGzyDXeUCFhsyFszZG51cAP6FiYQiD9ztwNHUKhLzjcqDJTMAAwYIAL1D9sdU 8+BI3jH1HhPiM8VLq1zii8ksRw77iUthpfe7xMp8qhiachMdXnIMYlIskEiFP3nt BycQlPYBNOV96YEhnBngiBXbC40xgxXSkpJh24Fu6GbXAlLMnahkQeRSMjAcDJuh bNcYfwm+PE86g9XyLCDVByzSQ+bRY7Dof+Sjgtod4Ds4tYA3R3qgYE0Co1dtrf4z b58PlnaSAq9wVtMD0G8Da/n5MC8jsAcHZahfBqmwvKsGENH8zFVwsAeKDjQv075m tO+V96QxCMYuvJeVWWYvL/bIR2zya9yD6RCWds1IBljUIwLI+Ox4Dd3LfBT1Y2g3 x8DNsYXPOCPYWCyITAQYEQIADAUCPYl+ygUJA8JnAAAKCRAlRgQ5B5O8vA6DAJ4v ulRjiKp8UZ5iqCSFvboQRoM4zgCcCunR39pnorxd2ZxIi+miFuPx75U= =siNl -----END PGP PUBLIC KEY BLOCK-----

2 1

Re: [nznog] $1 a CPU hour to send SPAM
by Ewen McNeill 15 Apr '04

15 Apr '04

In message <B4F614073A647F4DAC7F5E4BE6E9EEF70328FA(a)w2kmail.bits.co.nz>, Carl Black writes: >basically they pay individuals $usd1.00 per hour they leave their PC >available as a SPAM relay - at ~$8700 a year, If you read the Slashdot discussion (and the website carefully) you'll see they are claiming they'll pay US$1.00 per hour of CPU time. Spam delivery is hardly CPU bound. A bunch of idiots will probably sign up thinking they're going to get thousands of dollars a year; even on the face of it they'll get hundreds at most. And I'd say it's better than even money they won't get anything -- rule #1: spammers lie. Given the number of zombie mail relays "administered" by people without the clue to manage a machine on the Internet I'm not sure that someone offering to pay for them is going to make a whole of difference to the volumes of spam. Ewen

4 3

RE: [nznog] Routing protocols
by Donald Neal 15 Apr '04

15 Apr '04

> What routing protocols do people use on their networks? > Particularly inside. > > Does anyone in the world actually use IS-IS ? > > I am not interested in what network runs what, just how many networks > run various protocols. > > Rough idea of network size would be nice, and any partcular > reasons you > prefer one to the other. > > thanks for satisfying my curiosity > JM In the words of Iljitsch van Beijnum's book "BGP", which I was reading over Easter (I know, I'm a sad person): "If you are implementing a large-scale IP network or have unusual requirements, you should definitely read up on all the protocols so you can make an informed decision. However, most small-to-medium sized networks running just IP should go ahead and select OSPF: it does the job, doesn't have any huge disadvantages, and is readily available." - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

RE: [nznog] Routing protocols
by Chris Hellberg 14 Apr '04

14 Apr '04

I knew that I phrased that wrong just after I clicked "send" I meant the IGP type rather than packet/PDU authentication :) I wonder if it's common that at BOFs and presentations you'd find engineers from ISPs and such talking on the subject of solvung problem xyz or why they find abc good in a particular IGP. Another interesting link sent to me is a disection between the two protocols: http://www.nanog.org/mtg-0006/katz.html > -----Original Message----- > From: Joe Abley [mailto:jabley(a)isc.org] > Sent: Thursday, 15 April 2004 22:37 > To: Chris Hellberg > Cc: nznog(a)glassmile.co.nz; nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Routing protocols > > > > On 15 Apr 2004, at 06:32, Chris Hellberg wrote: > > > I stand corrected. In this case, I wonder if it's the > exception rather > > than the norm that large carriers protect things such as their IGP > > then? > > I'm quite sure that AOL and MFN protect their IGP, but they > do so using > link-layer authentication, a link-scope, non-routed protocol (in the > case of IS-IS) and by not exposing it to customers or other external > entities. That's what we do at ISC. > > Security by obscurity is no longer in style, maybe. > > > Joe > > > ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

3 2

RE: [nznog] Routing protocols
by Chris Hellberg 14 Apr '04

14 Apr '04

> -----Original Message----- > From: Joe Abley [mailto:jabley(a)isc.org] > Sent: Thursday, 15 April 2004 22:28 > To: Chris Hellberg > Cc: nznog(a)glassmile.co.nz; nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Routing protocols > > > > > As for what networks are running what protocol, you're > unlikely to get > > too much on that sort of info. > > AOL's transport network runs IS-IS (there was a presentation about > their transition from OSPF at a semi-recent NANOG). > MFN/AboveNet did a > similar transition while I was there. We run IS-IS as our IGP in our > home network (AS 3557), although we still use OSPF in local-scope > anycast clusters since it's more straightforward to find ways of > supporting it on FreeBSD. > > > Joe I stand corrected. In this case, I wonder if it's the exception rather than the norm that large carriers protect things such as their IGP then? ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

RE: [nznog] Routing protocols
by Chris Hellberg 14 Apr '04

14 Apr '04

Large networks all over the world run IS-IS. You won't find an abundance of information on the protocol as you would with OSPF (especially such as John Moy's OSPF book), however it's still a very popular IGP. There's an interesting draft on the differences between OSPF and ISIS which probably wouldn't have been written if IS-IS wasn't used a whole heap: http://ftp.apnic.net/ietf/internet-drafts/draft-bhatia-manral-diff-isis-osp… As for what networks are running what protocol, you're unlikely to get too much on that sort of info. Chris > -----Original Message----- > From: nznog-bounces+chris.hellberg=telecom.co.nz(a)list.waikato.ac.nz > [mailto:nznog-bounces+chris.hellberg=telecom.co.nz(a)list.waikat > o.ac.nz]On > Behalf Of nznog > Sent: Thursday, 15 April 2004 22:07 > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Routing protocols > > > What routing protocols do people use on their networks? > Particularly inside. > > Does anyone in the world actually use IS-IS ? > > I am not interested in what network runs what, just how many networks > run various protocols. > > Rough idea of network size would be nice, and any partcular > reasons you > prefer one to the other. > > thanks for satisfying my curiosity > JM > -- > -----BEGIN PGP PUBLIC KEY BLOCK----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: For info see http://www.gnupg.org > > mQGiBD2JfrwRBACWgDlX/IoNxdk15KpELdl6Sou4cU0sbaBinYV7X12SoR3YljuM > lJlhgtoahIdUkqOuvDmX1AUNY2a80sidbTA48B0QUzYrGnktPoBxz4O29LKm49t3 > Ojoqj0AsnC6HB37N5pScATqMbXME8hkjACHvukSUvgjHiPRYaMz7WQ2W0wCg3t09 > ErzU4f+J+8fExfcd8B1+ce0EAIsc5GlVeK6hTBf3XyTRFbLD0C2m+BZGamrpngmb > ito2vhKxbxTHLR/Qy2nbvN4bT42CCnf4v5MguPepqbMT8V6hxXKxxUzJx3A67x6m > 7e0Qag4TLopc7f7mY5bTk1yY2mjAg1b+uVEuxMxGVtFkm586aOpmQVfAAgtffsrl > CLTlA/94q8gjqHk8A9funzsjlZKft1+Z+NpGObfw9M9cC7c8RJAdK8kusH7/oKb2 > Yq9NsSSdULJiqZaKkH4aCV55yvDnF3b6BZQOGvqpYuSACSJoX+fEwASGL0Qq0Jym > ykaxwyNKqvUdxuYb9TPU01O3OpTyAvI0DsyjJ+KGS9h9mZwPX7QtSmFtZXMgTWFo > ZXIgKGg0eDByKSA8c2NvdXNlckBwYXJhZGlzZS5uZXQubno+iF0EExECAB0FAj2J > frwFCQPCZwAFCwcKAwQDFQMCAxYCAQIXgAAKCRAlRgQ5B5O8vFi8AJsG0xt5FRG1 > F10FJFblBhmtc4//vwCgnUmaClr8+F+qe4Rm9wnYqWyjF4S0JUphbWVzIE1haGVy > IDxqYW1lcy5tYWhlckBpcmQuZ292dC5uej6IXQQTEQIAHQUCPYmWnwUJA8JnAAUL > BwoDBAMVAwIDFgIBAheAAAoJECVGBDkHk7y8MvUAnRxhOIq1IAo239VFcBfN2IdZ > XEehAJ9U0BB2ZZ8PjNWI1yvjzJ5P3B5lv7QhSmFtZXMgWCA8c2NvdXNlckBwYXJh > ZGlzZS5uZXQubno+iF0EExECAB0FAj22c0sFCQPCZwAFCwcKAwQDFQMCAxYCAQIX > gAAKCRAlRgQ5B5O8vNLkAKDZ4x+lDWYoBPVViuX37Tbd51golgCgiciBW3djy3wV > 11Jdz3x38O5JwRW5Ag0EPYl+yhAIAL7K7wrwGjvgRRS+rh5hW8JJbrYQn0BvajTs > Vm/OvtA5QdJN1zqBNBlGCM1OivxASjAZEmpUYMAnBcUjNicXaIu/WoB0AUPSmkZ7 > 4NHyWoU12cbHZw6pZno4OZ9DpwSIsOkaP5rDB8oaj9b9/nziuxBm3oqmKN64ohcN > oSOFJ/4+66vEDM8I1p+4pvb2Jj5JYRS/5+piJEaBUFttHofRWkF34vnxR3c+MjY7 > NSVWbu3EWtJV+se+MLeSdDZxzt4v7XD7wE/lt9xq9IlyOryQvRhqrduaYc0ABItd > eashGzyDXeUCFhsyFszZG51cAP6FiYQiD9ztwNHUKhLzjcqDJTMAAwYIAL1D9sdU > 8+BI3jH1HhPiM8VLq1zii8ksRw77iUthpfe7xMp8qhiachMdXnIMYlIskEiFP3nt > BycQlPYBNOV96YEhnBngiBXbC40xgxXSkpJh24Fu6GbXAlLMnahkQeRSMjAcDJuh > bNcYfwm+PE86g9XyLCDVByzSQ+bRY7Dof+Sjgtod4Ds4tYA3R3qgYE0Co1dtrf4z > b58PlnaSAq9wVtMD0G8Da/n5MC8jsAcHZahfBqmwvKsGENH8zFVwsAeKDjQv075m > tO+V96QxCMYuvJeVWWYvL/bIR2zya9yD6RCWds1IBljUIwLI+Ox4Dd3LfBT1Y2g3 > x8DNsYXPOCPYWCyITAQYEQIADAUCPYl+ygUJA8JnAAAKCRAlRgQ5B5O8vA6DAJ4v > ulRjiKp8UZ5iqCSFvboQRoM4zgCcCunR39pnorxd2ZxIi+miFuPx75U= > =siNl > -----END PGP PUBLIC KEY BLOCK----- > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

DNS TTL Problem.
by jfp 14 Apr '04

14 Apr '04

Hi guys, we currently have a problem where one of our client has have switched their dns mail and hosting over to us, but the monkeys they were with before had set the TLL at 7 days. So for example it's currently on day 5 in the Xtra dns cache. Is there anyway to speed up the process and flush those cached values? That client has of course just done send some publicity out :-) PS: The domain in question is thereef.co.nz. Thanks. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

3 3

$1 a CPU hour to send SPAM
by Carl Black 14 Apr '04

14 Apr '04

Surprised I haven't seen this crowd mentioned here before: www.virtualmda.com basically they pay individuals $usd1.00 per hour they leave their PC available as a SPAM relay - at ~$8700 a year, that's going to be VERY tempting for lots of people. Maybe time for blanket blocks on TCP25? There's some talk about it on /. http://yro.slashdot.org/yro/04/04/14/1415217.shtml?tid=111&tid=126&tid=95&ti d=98&tid=99

1 0

Broken PC
by Richard Naylor 13 Apr '04

13 Apr '04

How to show your boss that you need a new PC. Simply demo playing some streaming video that you can find here.......http://www.r2.co.nz/20040413 I suggest you don't try this on dsl.....It works on CafeNet, but you need to leave the lappy on mains power as some of them reduce cpu capacity to save power. These video clips eat CPU capacity. Its interesting what PCs and lappys can actually play this stuff, even off their own hard drive. If there enough feedback, I'll put the files up on an http server so that you can download them. The 5 clips total around 650MBytes. An excellent demo as to why "broadband" ISN'T 256kbps....... (there is another demo coming, but we can't show you that one yet) rich

1 0

HEADS UP - upcoming webcast
by Richard Naylor 12 Apr '04

12 Apr '04

Saturday 17 April 1200Hrs Public Memorial Service for Dr Michael King and his wife at Te Papa Official hours of webcast are 1200 to 1330, but as usual it will start with a title slide etc as early as we can get it going. The streaming server will be located in Wellington and is peering on WIX. Public interest is not expected to be huge, but may be high once the webcast is publicised presumably by Te Papa. Webcast details are on www.r2.co.nz The webcast will have 5 streams - video = 384kbps, 128kbps, 56kbps audio = 56kbps, 28kbps There is also an experimental video stream at 1500kbps - It looks very good, but I doubt if anyone will be watching. Feel free to use this for a broadcast feed if needed. This stream may stress a few networks. (and run up a few massive dsl bills). Many of the technical questions are still being resolved, but it is expected that the webcast will be a multi-camera event, like the NZNOG Conference, but with higher levels of production quality. (ie a full crew and better cameras, sound, lighting etc) For further details, questions etc, contact me via email or on 021 897 089 Richard

1 0

NZNOG Conference 2005 Host and Venue Offers
by Donald Neal 12 Apr '04

12 Apr '04

It seems likely that the Conference Organising Committee will be in a position shortly to select a host and venue for next year's conference, and to make an announcement some time next month. Could anyone offering to host this event who has not already done so please contact me by midday Friday, 16 April. Thanks for your attention. - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

RE: [nznog] Jetnet ISP
by Nick MacKechnie (thenet) 08 Apr '04

08 Apr '04

Hiya >From memory - jet.net.nz is for Jetstart Orcon users fastadsl.net.nz is for the new Surf DSL Orcon users.. Nick ________________________________ From: Craig Spiers [mailto:craig(a)concept.net.nz] Sent: Thu 8/04/2004 6:09 p.m. To: Stephen Sheehan; nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Jetnet ISP jet.net.nz is orcon's 'brand'. ----- Original Message ----- From: "Stephen Sheehan" <axpunix(a)yahoo.com> To: <nznog(a)list.waikato.ac.nz> Sent: Thursday, April 08, 2004 6:04 PM Subject: [nznog] Jetnet ISP > Does anybody have any contact info on this ISP. > www.jet.net.nz > www.jet.co.nz > > Domain name and Whois lookup's point to Orcon, but > they do not seem to know anything about them. > > > Thanks > > Stephen > > > __________________________________ > Do you Yahoo!? > Yahoo! Small Business $15K Web Design Giveaway > http://promotions.yahoo.com/design_giveaway/ > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Jetnet ISP
by Stephen Sheehan 07 Apr '04

07 Apr '04

Does anybody have any contact info on this ISP. www.jet.net.nz www.jet.co.nz Domain name and Whois lookup's point to Orcon, but they do not seem to know anything about them. Thanks Stephen __________________________________ Do you Yahoo!? Yahoo! Small Business $15K Web Design Giveaway http://promotions.yahoo.com/design_giveaway/

2 1

3com NBX telephones and NCPs
by criggie＠criggie.dyndns.org 07 Apr '04

07 Apr '04

Gidday all. If theres anyone on the list who has used or has access to any 3com NBX telephone systems or NCPs please email me off list. Have an uneventful easter break everyone.

1 0

Does anyone read email to abuse@xtra.co.nz
by Jeremy Brooking 06 Apr '04

06 Apr '04

If you do, and youre on this list... Take the time to bother to read my email, sort out your user, and reply to me. It really isnt that much to ask. regards, Jeremy Brooking.

2 2

Peering with Citylink
by Andy Linton 06 Apr '04

06 Apr '04

Those of you who peer at the WIX and APE route servers will see Citylink's announcements of our own networks via that path. You should see an AS path of: APE: 9560 23754 WIX: 9439 23754 It would be excellent if you'd make sure that you accept our network announcements from the route servers. If you want to construct filters based on address prefixes you can see the networks we announce by querying the NZ Routing Registry using: whois -r -h whois.wix.net.nz as9560:rs-routes:as23754 whois -r -h whois.wix.net.nz as9439:rs-routes:as23754 which gives: route-set: AS9560:RS-ROUTES:AS23754 descr: Route set for Citylink to APE members: 203.118.144.0/24, 198.48.0.0/22, 202.8.44.0/22^22-24, 202.7.4.0/24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)ape.net.nz changed: rpsl-admin(a)ape.net.nz 20031118 changed: rpsl-admin(a)ape.net.nz 20040303 changed: rpsl-admin(a)ape.net.nz 20040406 source: NZRR and route-set: AS9439:RS-ROUTES:AS23754 descr: Route set for Citylink to WIX members: 203.118.144.0/24, 198.48.0.0/22, 202.8.44.0/22^22-24, 202.7.4.0/24, 203.97.231.224/28, 210.48.103.0/28, 210.48.103.144/28, 210.48.103.136/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)wix.net.nz changed: rpsl-admin(a)wix.net.nz 20040112 changed: rpsl-admin(a)wix.net.nz 20040303 changed: rpsl-admin(a)wix.net.nz 20040322 changed: rpsl-admin(a)wix.net.nz 20040407 source: NZRR

1 0

Re: National Bank phishing
by Dominic O'Hare 05 Apr '04

05 Apr '04

ASB Bank has just sent out an alert to customers registered with FastNet Internet Banking. -- Dear Customer With the recent spate of email scams to hit some other New Zealand banks, we felt it timely to once again remind you about the importance of keeping your personal Internet banking details safe, and never disclosing your Internet access codes or passwords to anyone, even if you believe they are from the Bank. ASB Bank and ASB Securities have not been affected by these scams. To ensure you keep your personal Internet banking details safe, please remember: * Never share, write down or disclose your access codes or passwords to anyone, (other than during the normal sign in procedure), or store them in a file on your computer. * Always access the ASB Bank or ASB Securities website by starting up a new browser session and typing in the address directly into the address bar of your browser. Never follow a link in an email to the ASB Bank or ASB Securities website. * Never leave your computer signed onto Fastnet or ASB Securities when you are not there. * Never open emails, email attachments, or run software from untrusted or unknown sources. * Install anti-virus and other security software, such as a personal firewall, and keep it updated with the latest vendor updates. * Use the Sign Off button when you've finished using Fastnet Classic. * Use the Log Out button when you've finished using ASB Securities. If you have any questions please do not hesitate to contact ASB Bank or ASB Securities by visiting our websites or calling 0800 803 804. Yours sincerely, Barbara Chapman Head of Retail Banking and Marketing ASB Bank Limited --

1 0

National Bank phishing
by Simon Byrnand 04 Apr '04

04 Apr '04

Just a heads up, After the recent fake Westpac emails trying to phish for peoples internet banking passwords and logins, there are now some National Bank ones circulating that follow exactly the same technique...... looks like the target URL has already been taken down though... Funnily enough, SpamAssassin actually scored it at 16.30 and blocked it as spam :) Regards, Simon

2 1

IANA IPv4 allocations and bogon update: 85/8, 86/8, 87/8, 88/8
by Rob Thomas 02 Apr '04

02 Apr '04

Hi, team. [ Apologies to those who receive this post in multiple forums. ] The numerous Team Cymru bogon projects have been updated as of 01 APR 2004 to reflect the following IANA allocation made on 01 APR 2004: 85/8 Apr 04 RIPE NCC 86/8 Apr 04 RIPE NCC 87/8 Apr 04 RIPE NCC 88/8 Apr 04 RIPE NCC IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.qorbit.net/documents/junos-template.pdf> Secure JUNOS BGP Template (Juniper) - <http://www.qorbit.net/documents/junos-bgp-template.pdf> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-loose.pdf> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-strict.pdf> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

1 0

New APE web site
by Andy Linton 31 Mar '04

31 Mar '04

As of today, the APE web site has had a revamp. Those of you familiar with the WIX site will notice some similarities! The features that I think are useful from a day to day operational perspective are the Looking Glasses e.g. http://www.ape.net.nz/cgi-bin/mrlg-ape.cgi http://www.wix.net.nz/cgi-bin/mrlg-wix.cgi You can use these to see what routes are currently in the route servers and the state of peering seesions. For those of you who are keen to see what routes the route servers might push in your direction see: http://www.ape.net.nz/cgi-bin/ShowRoutes.cgi http://www.wix.net.nz/cgi-bin/ShowRoutes.cgi These will show you the filter lists we apply to outbound routes. This meta-table is the union of all the inbound filters applied to the BGP peering sessions of exchange participants. The list showing the export to 23754 is the same list applied to all participants.

3 5

The New Zealand Network Operators' Group
by Donald Neal 31 Mar '04

31 Mar '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Meetings See http://www.nznog.org/ for details of this year's conference. We are now working towards a similar gathering to be held early next year. Also see http://auckland.thursdaynightcurry.com/ if you live in or near Auckland. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. About This Mailing List This list has over six hundred addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

No beer, but spammer gets his comeuppance
by Juha Saarinen 29 Mar '04

29 Mar '04

http://news.bbc.co.uk/1/hi/business/3581435.stm Right, will go back to the ADSL list now. -- Juha

1 0

UBD
by jfp 29 Mar '04

29 Mar '04

Hi guys, it looks like the situation with UBD had been fixed. See Juha's article in the Herald. http://www.nzherald.co.nz/storydisplay.cfm?storyID=3557667&thesection=bu siness&thesubsection=technology Thanks to the Spamhaus guys for putting a bit of pressure on. And also thanks for the APN guys (owners of UBD) for resolving the issue quickly. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

1 0

Speed of Citilink provisioning?
by NZNOG＠neilnz.com 28 Mar '04

28 Mar '04

Hi guys - how quickly can Citilink provision a building next to their own that has had ethernet in the past (possibly currently for other tenants)? If anyone from Citilink spies this email and would like to help me out by giving me the the name of the right person to talk too, please email back. I would really like to have an active connection on the 6th of April so I can do some Firewall training at our Wellington Offices on the 7th and 8th. (After the training, the connection will stay as our Internet connection for the Wgtn office) Cheers - Neil G

1 0

Orcon Internet Prefix List Update (2004-03-29)
by Craig Whitmore 28 Mar '04

28 Mar '04

For all those peering with Orcon Internet (AS17746) nationally, please update your prefix lists with the following networks (also in attached file). Added: ip prefix-list orcon-national permit 202.53.176.0/20 Thanks Craig Whitmore Systems Administrator Orcon Internet http://www.orcon.net.nz

1 0

UBD, our local spammers's friend.
by jfp 25 Mar '04

25 Mar '04

Some of you might not be aware that UBD sells its list of e-mail addresses to local businesses who then proceed to SPAM you. UDB sells their service as a business directory for potential clients who might be interested in your company. What you get instead is people buying their mailing list to sell you stuff via SPAM. (All legally of course) We found this out last year and asked to have our email address removed from their list which they said they did. Only we are still getting SPAMmed this year. I had a discussion with them at the time and they did not see their selling a list of e-mail addresses for the wrong purpose as an issue. Has anybody had any dealings with them or can think of any way to make them change their ways? jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

2 1

[Fwd: Urgent message for all ANZ customers]
by Steve Withers 25 Mar '04

25 Mar '04

Now I'm getting phishing messages for the ANZ....

1 0

Largest MTU on your network
by Jonathan Brewer 24 Mar '04

24 Mar '04

Hi Folks, With all the talk of "Next Generation" networks and such, I wonder, what's the largest MTU allowed by your hardware? I have found some of my kit incapable of even the 9k "jumbograms" as belittled here: http://www.psc.edu/~mathis/MTU/ Who out there allows larger MTUs? Cheers, Jon Brewer

2 1

RE: [nznog] Legal log retention requirements?
by Donald Neal 23 Mar '04

23 Mar '04

> -----Original Message----- > From: > nznog-bounces+Donald.Neal=telecom.co.nz(a)list.waikato.ac.nz > [mailto:nznog-bounces+Donald.Neal=telecom.co.nz(a)list.waikato.a > c.nz] On Behalf Of Joe Abley > Sent: Wednesday, 24 March 2004 9:23 a.m. > To: James Riden > Cc: NZ Network Operators Group > Subject: Re: [nznog] Legal log retention requirements? [...] > The truly paranoid also won't use syslog :-) > > Has anybody seen an implementation of RFC3195 in the wild, by the way? > http://security.sdsc.edu/software/sdsc-syslog/ ? - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

Jamie Baddley, BCL
by Dan Clark 23 Mar '04

23 Mar '04

Hi can someone from BCL please tell me who took over Jamie Baddley's position, or someone of equivilent position? Email to him appears undeliverable. sorry about posting directly to the list. Kind Regards Dan Clark Network Manager Scarfies.Net Ltd

1 0

Legal log retention requirements?
by Cameron Kerr 23 Mar '04

23 Mar '04

Hello all, I know that in some countries there are legal requirements for how long logs are meant to be held for. Are their such laws like that in NZ, and can anyone point me to any references? -- Cameron Kerr cameron.kerr(a)paradise.net.nz : http://nzgeeks.org/cameron/ Empowered by Perl!

8 7

RE: [nznog] Legal log retention requirements?
by Neil Gardner 23 Mar '04

23 Mar '04

Taking a different view entirely - if you ARE required to maintain logs of something that perhaps you aren't too keen to be secure or reliable, like, say, P2P transfers of commercial music.... Do you think that storing the logs on a ramdisk on a machine with no UPS, running win95a - would get you in any actual trouble? "Oh, sorry sir, we don't appear to be able to locate the logs for that user, but yes, I am CERTAIN we are logging that info - it must have been a glitch" -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

1 0

Re: [nznog] Legal log retention requirements?
by Ewen McNeill 22 Mar '04

22 Mar '04

In message <20040323051819.GC21771(a)mithrak.localdomain>, Cameron Kerr writes: >Hello all, I know that in some countries there are legal requirements >for how long logs are meant to be held for. Are their such laws like >that in NZ, and can anyone point me to any references? The closest "generic" legislation that I'm aware of is the Electronic Transactions Act 2002 (you can see it at, eg, http://www.legislation.govt.nz/ -- a site which annoyingly doesn't seem to permit deep linking due to gratituous use of Javascript). While that Act was a 2002 one I believe that various portions of it are only just coming into effect this year. As others have pointed out, there are both operational and other legal reasons for retaining various types of records for longer which in some instances might extend to log files. And various overseas cases have shown that it's useful to have an established policy (and stick to it) for data retention -- being able to legitimately say "as a matter of policy we always delete those after 4 weeks" is much more useful than having to say "oh, umm, yeah we deleted those logs you want". Ewen

1 0

OT: Wanted - Token Ring NIC
by Matt Camp 21 Mar '04

21 Mar '04

Believe it or not, I have need for a token ring network card for a PC... unfortunately I can't even find any in the usual second hand crap places, or websites... and new ones are now nearly $300. So if anyone out there knows of one, please let me know. Any speed, PCI preferred but can deal with ISA... rj45 type preferable. --- Matt Camp

1 0

Has the physical infrastructure for the "advanced network" been built?
by Juha Saarinen 17 Mar '04

17 Mar '04

http://snipurl.com/55qf The launch is soon, so it seems like it. "Advanced networks typically provide internet data links at more than 1 Gigabit a second, or 200 times faster than a Telecom Jetstream connection." Wow. Imagine surfing your intarweb email at that speed! -- Juha

5 6