- NZNOG - lists.nznog.org

Good luck!
by Jesse Archer 16 Jul '17

16 Jul '17

[image: Inline image 1]

3 2

Christchurch Hacker Con (CHCon) 2017 - Call for Presentations Training and Sponsors
by CHCon crew 16 Jul '17

16 Jul '17

Hi Everyone We are proud to announce the second Christchurch Hacker Conference (CHCon), to be held at the UCSA Events Centre, 90 Ilam Rd, Riccarton, on Friday 27 and Saturday 28th October, 2017. That’s right, we’re aiming for a two day conference - with an additional training day before the main event. The call for presenters, trainers, and sponsors is open. We will open registration for general attendees in the coming weeks, so stay tuned as registrations will be limited. CHCon is a two-day conference this year dedicated to technology security with an emphasis on both breaking and building. We will be offering training on the day before the conference (Thursday 26th October). We have a large amount of presenter slots that we need to fill, on everything from the Suggested Topics under the Call For Papers at https://2017.chcon.nz/#cfp. Presentation submissions are welcome from all interested parties, we're not interested in vendor pitches or commercial content. The close off date is approaching fast. More information is available here: https://2017.chcon.nz/#cfp We also have a number of training slots we'd like to fill. If you have a security related training you'd like to give the day before the main conference, please make a submission. More information is available here: https://2017.chcon.nz/#cft CHCon is strictly not for profit and to keep our conference fee as low as possible, we need sponsors to support us. The sponsorship money is used to help make CHCon, an instructive and quality event for the Canterbury & NZ tech community. More information about sponsorship is available here: https://2017.chcon.nz/#cfs Event Website: https://2017.chcon.nz/ Thanks from the CHCon crew

1 0

Request for contact in TVNZ On Demand for escalation of support ticket 117175
by Alexander Neilson 05 Jul '17

05 Jul '17

Hi All Sorry for the noise. Can someone inside TVNZ On Demand please make contact off list. It looks like some of our IP's (At $DAYJOB - inside 45.118.188.0/22) are on some kind of block list being used by TVNZ On Demand for Akamai delivered videos. The video player just shows a fairly useless error message, and when looked at in fiddler a 403 is being returned from the Akamai server. We are not aware of any lists any of the affected IP's are on and I believe they may be legacy listings. I have been trying to work through with TVNZ On Demand Support under Ticket 117175. So far I haven't been able to escalate this or get any feedback or way forward. We have worked with our upstream carrier and they have raised it with Akamai who have indicated it isn't a block they have in place but that their customer has hence trying to make contact with someone who could check if the blocks are recent or prior to being held by us and if recent what caused them so we can resolve it. Thank you for your time. Regards Alexander 022 456 2326

2 1

NZNOG 2018 Announcement
by Dave Mill 02 Jul '17

02 Jul '17

Hi all We'd like to announce that we will be holding NZNOG 2018 at the Rydges Hotel in Queenstown. The conference dates are 22 - 26 January, 2018. The conference proper will be the Thursday and Friday (25 - 26 January) as normal. If anyone is interested in sponsoring the event please make contact with info(a)nznog.org . We will be putting together this year's sponsorship prospectus soon. Previous sponsors have first right of return. Have a good weekend. Cheers Dave (on behalf of the NZNOG Trust)

1 1

RFC 8195 "Use of Large Communities"
by Job Snijders 01 Jul '17

01 Jul '17

Dear NZNOG, RFC 8195 "Use of BGP Large Communities" was just now published: https://tools.ietf.org/html/rfc8195 RFC 8195 presents examples and inspiration for the operational application of Large Communities. The document suggests logical categories of Large Communities and demonstrates an orderly manner of organizing community values within those categories to achieve typical goals in routing policy. Any network or route server operator can consider using the concepts presented as the basis for their own Large Communities repertoire. RFC 8195 is meant as a companion document in the same way that RFC 1998 provided a concrete real-world application for RFC1997 BGP Communities. The RFC draws on the experience of operator communities such as NANOG and NLNOG. A ton of open source implementations [1] with Large support are already available. And with more traditional vendors like IOS XR, Junos, Arista & Nokia having releases around the corner, I hope this will be useful when planning your Large Communities deployment later this year. Kind regards, Job [1]: http://largebgpcommunities.net/implementations/

1 0

Reminder to update noc contact list/details
by Joel Wirāmu Pauling 28 Jun '17

28 Jun '17

Hi all; was looking something up for a client and noticed the Noc list here; http://www.nznog.org/noc-list - could do with some updating. Voyager is missing, other things I know to be wrong are that several of the Noc's listed have been subsumed into larger orgs. -Joel

14 16

NZIX AGM
by Dave Mill 25 Jun '17

25 Jun '17

Hi all NZIX (the peering exchange formerly known as AKL-IX) are holding their AGM in Auckland on June 27. Details are here - https://ix.nz/2017/05/30/annual-general-meeting/ NZIX is a member run, not-for-profit, peering exchange. Have your say in where the IX is heading. Non-members are also welcome. Hope to see you there! Cheers Dave

1 1

Beer
by Lesley Longhurst 22 Jun '17

22 Jun '17

Sorry for the distraction, I just think you should all see this label. Homebrew made by a friend-of-a-friend. Rather tasty, too. [cid:image001.png(a)01D2EC34.7CF018D0] Lesley Longhurst Technical Lead - Network Services Opus International Consultants Ltd, Opus IT Operations 33 The Esplanade, Petone, Lower Hutt 5012, New Zealand PO Box 30 845, Lower Hutt 5040, New Zealand +64 21 244 3718 lesley.longhurst(a)opus.co.nz<mailto:lesley.longhurst(a)opus.co.nz> www.opus.co.nz<http://www.opus.co.nz>

1 0

InternetNZ presents: Dr Marc Bruyere - The TouSIX project: SDN IXPs from design to production
by Dean Pemberton 14 Jun '17

14 Jun '17

Hi all, Just wanted to let you know about a presentation that InternetNZ is hosting in Wellington. The TouSIX project: SDN IXPs from design to production Wed 28th Jun 12:00pm – 1:00pm InternetNZ offices, level 11, 80 Boulcott Street, Wellington, New Zealand Registration: https://the-tousix-project-sdn-ixps-from-design-to-production.lilregie.com/… Come along to a presentation from Dr. Marc Bruyere. Bio here: https://www.internetsociety.org/afpif-2016/speakers/dr-marc-bruyere The Internet eXchange Points (IXP) are essential for the Internet evolution as they empower high bandwidth low latency and inexpensive local traffic peering as opposed to transit traffic. OpenFlow SDN enables more dynamic network programmability to control network behaviour via open interfaces, as opposed to the legacy closed-box solutions and proprietary-defined interfaces. This presentation is about the migration of the TouIX from a traditional to a full OpenFlow IXP. It especially describes how switches have been selected, configured and installed, and presents the TouSIX-Manager tools that have been developed for the IXP fabric robustness and members benefit. It also includes future SDX work in Japan and elsewhere, and the historical NZ based CARDIGAN SDX. TouIX is a non-profit neutral Internet eXchange Point organisation founded in 2005. It provides an interconnected network infrastructure at 4 PoPs around the city of Toulouse and the Paris FranceIX and LyonIX IXPs. Please note catering will not be provided.

1 0

plea for increase participation in v6ops/IETF
by JORDI PALET MARTINEZ 10 Jun '17

10 Jun '17

Hello all, At the last LACNIC event, I mentioned on a couple of occasions the need for ISPs in the region, especially small and medium-sized ones, to participate in the decisions taken in the IETF IPv6 Operations Working Group (v6ops). I’m sending this here as well, as I believe the situation also apply to this region. When I asked among the attendees how many participate in v6ops, only one person raised his hand. What does it mean to participate in the mailing list? Follow some emails (sometimes only 1-2 a week, sometimes they can be several in a day), and therefore learn about what is being discussed and give your opinion and, given that decisions are made by Consensus, influence them. What consequences has NOT participating? That decisions against your interests/opinions could be taken, and obviously do not consider your perspective in the standards. Generally large operators are involved, which implies that your interests are not sufficiently represented, and in general are contrary to yours. Your "vote/opinion" is not worth more than yours, but the big one is present and the small/medium NO! I give you a very concrete example. The serious problem that small and medium ISPs have, is to continue offering IPv6 and IPv4 services to their customers, when they already do not have IPv4 addresses. Only the biggest ISPs have a great purchasing power and can influence the manufacturers to do for them what they need. One possibility to solve it, extending the life of IPv4, but not necessarily deploying IPv6, is using CGN, which is also very expensive, and breaks many things. The solution is simple. Deploying IPv6-only services in the last mile, which involves using transition mechanisms, such as 464XLAT that has been deployed on millions of smartphones worldwide, so that applications continue to operate transparently as they "believe" they have IPv4. What is the problem, then? That manufacturers of CPEs are based on an old specification (RFC7084) that does not contemplate these transition mechanisms, so when a small/medium ISP asks a manufacturer for a firmware upgrade or a new CPE, they do not include that solution and perhaps they offer it with an extra cost. In my view, this should change, and that is why I am working on a number of documents, including RFC7084-bis (https://datatracker.ietf.org/doc/draft-ietf-v6ops-rfc7084-bis/) To update this situation, but there is opposition from large ISPs and virtually no small/medium "talks" about it, and in fact these large ISPs deny the situation. In addition, the document also specifies the "automated" support of those cases in which the user installs other routers (which is very common as we all know, and will be more and more in IPv6, IoT, etc.), behind the router installed by the ISP, through homenet (HNCP). I am not asking for your support for my documents, but for understanding the problem and the solution that is being proposed and/or possible new ones, and for the opinion of not only those very few “big ones”, but also of many small and medium, who are most affected. If you want to subscribe to this list, search for "subscribing" at: https://www.ietf.org/mailman/listinfo/v6ops You can see the files of the discussion in: https://mailarchive.ietf.org/arch/search/?email_list=v6ops I remind you that participating in the IETF does not require a presence in the meetings, as consensus is agreed in the list. Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Free parking network contact
by Simon 07 Jun '17

07 Jun '17

Hi there, is anyone from free parking on this list from their network operations team and can contact me please?

2 1

SkyTV NOC
by John Burns 30 May '17

30 May '17

Is anyone from SkyTV on this list? I have a /23 (allocated March 2017) that is being geoblocked on fanpass.co.nz and our customers would like us to solve it before the Lions tour starts!

1 0

cantva.canterbury.ac.nz Mail Admin at canterbury.ac.nz your server is not coming back from Greylist
by Don Gould 24 May '17

24 May '17

If there's a mail admin from canterbury.ac.nz on list, could you have a quick look at your server? We're not seeing mail coming from you because your server doesn't come back to have another go. We run a 10 minute greylist timer but you don't seem to come back for another go. # grep canterbury.ac.nz mail.log May 24 21:46:04 mx postfix/smtpd[22652]: connect from cantva.canterbury.ac.nz[132.181.2.27] May 24 21:46:05 mx tumgreyspf[22740]: Initial greylisting: REMOTEIP="132.181.2.27" HELO="cantva.canterbury.ac.nz" SENDER="stephen.hickson(a)canterbury.ac.nz" RECIPIENT="don(a)bowenvale.co.nz" QUEUEID="" May 24 21:46:05 mx postfix/smtpd[22652]: NOQUEUE: reject: RCPT from cantva.canterbury.ac.nz[132.181.2.27]: 450 4.7.1 <stephen.hickson(a)canterbury.ac.nz>: Sender address rejected: Service unavailable, greylisted (http://projects.puremagic.com/greylisting/) from=<stephen.hickson(a)canterbury.ac.nz> to=<don(a)bowenvale.co.nz> proto=ESMTP helo=<cantva.canterbury.ac.nz> TIA. D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.thinkdesignprint.co.nz skype: don.gould.nz

2 2

GLIF 2017
by GLIF Secretariat 22 May '17

22 May '17

All, Apologies for the advertising, but this global research and education networking event hosted by AARNet in Sydney may be of interest to some… Regards, Kevin Meynell ---- 17th Annual Global LambdaGrid Workshop - GLIF 2017 25-27 September 2017 Camperdown Campus, University of Sydney, Australia https://www.glif.is/meetings/2017/flyer.pdf <https://www.glif.is/meetings/2017/flyer.pdf> We are pleased to announce that registration is now open for the 17th Annual Global LambdaGrid Workshop which is being hosted by AARNet, the Australian National Research and Education Network. This will bring together leading network personnel from around the world to collaborate and exchange knowledge on new lambda networking technologies, middleware and applications. The workshop will have a specific focus on how global network architectures are supporting research applications in the Pacific region, in particular astronomy, high-energy physics, and microbiology and how big data is sent and processed around the world. There will also be discussions on the Pacific Islands Research and Education Network, long distance parallel file systems, new SDN and SDX initiatives, along with demonstrations of applications that can take advantage of these network facilities. The registration fee is AUD 450 per person (AUD 350 for registered students) up to 23 August 2017, and AUD 500 per person (AUD 400 for registered students) thereafter. Accommodation is available in the Rydges Camperdown at the special rate of AUD 165 per night including GST, the Mercure Sydney Central at the special rate of AUD 249 per night, and the Waldorf Sydney Central Serviced Apartments at the special rate of AUD 195 per night including GST. These can be reserved when registering for the workshop, and should be booked before 23 August 2017. Please note that a Software Defined Networking (SDN) Workshop will also held on Thursday, 28 September 2017 at the University of New South Wales. You can register, book accommodation and pay online at https://www.glif.is/meetings/2017/ <https://www.glif.is/meetings/2017/>

1 0

Issue with connections from CanIt-Domain-PRO anti-spam filter
by Jean-Francois Pirus 18 May '17

18 May '17

Hi all, I have an interesting issue. Just upgraded our mail server to handle srs-milter. Since the upgrade we found that the srs-milter would crash around 05:50 and 22:20 everyday. (Obviously it's got a bug) Turns out everyday around 05:50 we get a connection from canit-1.iserve.net.nz[202.191.33.141] And every night around 20:20 we get a connection from canit-scanner-2.slingshot.co.nz[60.234.4.40] They both seem to be running CanIt-Domain-PRO anti-spam filter. I cannot just block the scanner as the address is shared with MX's (ie: canit-scanner-2.slingshot.co.nz[60.234.4.40] and canit-slingshot-mx-2.t3.nz) Seems like the scanner is sending 'unusual' data once a day on a schedule. Any ideas what that single daily connection is about? or workarounds? Thanks. PS: Apart from fixing the bug myself... -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

2 5

Power issues in Skytower
by Patrick Ohearn 16 May '17

16 May '17

Hi list, Has anyone has any power issues in skytower this afternoon? We briefly lost power on level 47 around 1600.

1 0

AusNOG 2017 Call for Presentations
by Mark Prior 08 May '17

08 May '17

The next AusNOG conference is only four months away, scheduled to be held at The Langham, Melbourne, on 7 & 8 September 2017, so we are making our first call for presentations of interest to the Internet operations community. Previous feedback has suggested that attendees would like more content from the community so we'd like to encourage members of the community to submit more proposals, especially if you haven't previously presented! Internet operations is a broad topic but some areas of interest are: * Improving the redundancy/resiliency/sustainability of your network * Using automation to improve service reliability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year Naturally other topics that are of interest to the network operator community are also welcome but presentations of a purely marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Please note any timing constraints when submitting a presentation. By submitting a presentation for consideration in the AusNOG 2017 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 12 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 10 July: Presenters notified of their acceptance status as an AusNOG 2017 presentation. 30 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent by email to organisers AT ausnog DOT net. A separate call for lightning talks will be made closer to the AusNOG 2017 event. As in previous years you must be registered to attend AusNOG 2017 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation.

1 0

Alcatel IPv6 PPPoE
by Pieter De Wit 03 May '17

03 May '17

Good Morning List, I was wondering if anyone out here (there :)) has a working config for an Alcatel 7750 to give out IPv6 to subscribers. We would like to allocate /112's as a link net between the CPE and the BNG. We then want to route a /64 or /48 over this link net. All of this is configured in Radius. The link-nets are configure using the "wan-host" option under the subscriber interface. The /64 or /48 subnets is part of a /36 configured as the "pd" option. From what I was reading, it appears as if the link-nets needs to be /64...surely not ? Cheers, Pieter

11 17

Russian-controlled telecom hijacks financial services’ Internet traffic
by Michael Fincham 27 Apr '17

27 Apr '17

Morning all, For those who didn't spot this yet: <https://arstechnica.com/security/2017/04/russian-controlled-telecom-hijacks…> "On Wednesday, large chunks of network traffic belonging to MasterCard, Visa, and more than two dozen other financial services companies were briefly routed through a Russian government-controlled telecom under unexplained circumstances that renew lingering questions about the trust and reliability of some of the most sensitive Internet communications." -- Michael

1 0

OOB - Vocus DC, 7A Parkhead Pl, Albany
by Bruce Forster 26 Apr '17

26 Apr '17

Hi Noggers, Looking for a 2/10mb OOB link in Vocus DC, 7A Parkhead Pl, Albany Can someone please email me off list with some pricing? -- Regards, Bruce

1 0

Re: [nznog] Alcatel IPv6 PPPoE
by JORDI PALET MARTINEZ 24 Apr '17

24 Apr '17

Sorry, wrong paste … https://www.sinog.si/docs/draft-IPv6pd-BCOP-v1.pdf Regards, Jordi -----Mensaje original----- De: JORDI PALET MARTINEZ <jordi.palet(a)consulintel.es> Fecha: lunes, 24 de abril de 2017, 23:49 Para: <nznog(a)list.waikato.ac.nz> Asunto: Re: [nznog] Alcatel IPv6 PPPoE This may be useful. Is work in progress, but we believe that we will reach consensus in the next RIPE meeting adding some suggestions that we got in the last weeks: º ALBARÁN.......: 02643/2557863 SERVICIO........: Ecommerce FECHA............: 20/04/2017 CLIENTE RECOGIDA.: MOREMAR SL CLIENTE ENTREGA.: ANA SUBIRATS RODRÍGUEZ CLIENTE ABONADO..: MOREMAR SL LOCALIDAD ENTREGA: IGUALADA OBS. ENTREGA TTM: HEMOS LLAMADO DURANTE TODA LA TARDE Y NADIE HA CONTESTADO, TENIAMOS 2 TELEFONOS Y NAD A -DESTINATARIO AUSENTE/CERRADO : X Regards, Jordi -----Mensaje original----- De: <nznog-bounces(a)list.waikato.ac.nz> en nombre de Brian E Carpenter <brian.e.carpenter(a)gmail.com> Organización: University of Auckland Responder a: <brian.e.carpenter(a)gmail.com> Fecha: lunes, 24 de abril de 2017, 22:35 Para: Pieter De Wit <pieter(a)insync.za.net>, <nznog(a)list.waikato.ac.nz> Asunto: Re: [nznog] Alcatel IPv6 PPPoE On 25/04/2017 07:51, Pieter De Wit wrote: > Good Morning List, > > I was wondering if anyone out here (there :)) has a working config for > an Alcatel 7750 to give out IPv6 to subscribers. We would like to > allocate /112's as a link net between the CPE and the BNG. We then want > to route a /64 or /48 over this link net. Please don't hand out /64s. That prevents people subnetting their IPv6 in their home or office. You can always hand out /56 if you really think /48 is too much. > All of this is configured in > Radius. > > The link-nets are configure using the "wan-host" option under the > subscriber interface. The /64 or /48 subnets is part of a /36 configured > as the "pd" option. > > From what I was reading, it appears as if the link-nets needs to be > /64...surely not ? Not unless your vendor has a pointless restriction. The only RFC in the area is https://tools.ietf.org/html/rfc6164 which recommends /127 but there's nothing to prevent /112 from working if that's what you want. Regards Brian _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Xtra and SPF
by Glen Eustace 19 Apr '17

19 Apr '17

Hi, We have started receiving complaints from several of our customers for whom we are the MX for their domain. Some addresses in the domain are delivered locally, some are relayed to other mailboxes e.g. gmail and xtra. It seems that there are folks who still believe that SPF is a good thing and have ‘-all’ on their record. Xtra it would appear is now enforcing the rejection on email we relay to them. We are placed in an awkward position. Our customer wants us to fix something that we are not really able to. The SPF policy belongs to the sender and Xtra are doing the rejection. I have come across another add on technology for postfix called SRS for rewriting senders but that seems to be broken from all accounts as well. Is anyone else having these sort of issues, is there something I should be doing in the ‘relay’ process that will prevent the rejections I’d love to hear. Glen -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph +64 6 357 8168, Mob +64 27 542 4015 “Specialising in providing low-cost professional Internet Services since 1997"

13 16

Interesting issue with iperf3 and UDP
by Dylan Hall 30 Mar '17

30 Mar '17

I stumbled across an issue with iperf3 and it's UDP mode recently that I thought was worth sharing. In short it's very bursty and in my opinion broken. Use iperf (2.0.x) instead. The interesting detail: I recently got UFB at home (200/100 plan) and wanted to put it through it's paces. I did the usual TCP tests and it all looked good, so I decided to try UDP to look for packet loss. Even with fairly low rates (10-50 Mbps) I was seeing loss vary from 5% to 50%. I tried a number of different hosts around NZ, and one in the US and although each reported different amounts of loss there was always loss. I ran the tests with "-l 1400" as an option to force 1400 byte packets. Without this iperf sends 8kB packets that get fragmented which confuses the loss figures somewhat. I repeated the tests with iperf rather than iperf3 and everything worked perfectly. Focusing on one testing host, a 10G connected server near my ISP to minimise transit network in the way. The following is a little piece of a packet capture from the sending host using iperf (2.0.5). The rate was set to 15 Mbps. I've added the Delta field which is the time since the last packet was seen in micro seconds. 23:27:57.979021 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 746 23:27:57.979766 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 745 23:27:57.980511 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 745 23:27:57.981254 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 743 23:27:57.982001 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 747 23:27:57.982749 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 748 23:27:57.983492 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 743 23:27:57.984238 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 746 23:27:57.984986 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 748 23:27:57.985731 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 745 23:27:57.986478 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 747 The packets are very evenly spaced. The following is using iperf3 (3.1.3) also at 15 Mbps. 23:28:23.913489 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 8 23:28:23.913496 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 7 23:28:23.913505 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 9 23:28:23.913513 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 8 23:28:23.913520 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 7 23:28:23.913529 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 9 23:28:23.913537 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 8 23:28:24.012445 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 98908 23:28:24.012458 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 13 23:28:24.012468 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 10 23:28:24.012475 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 7 23:28:24.012483 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 8 23:28:24.012492 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 9 23:28:24.012499 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 7 23:28:24.012508 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 9 It appears to send a burst of very closely spaced packets, then take a break, then repeat. The cycle is about 100ms. Applying some hopefully correct maths, it appears to send about 187kB of data in just over 1ms, then rest for almost 99ms. This gives is about the right average rate (15 Mbps), but for that first 1 ms it's sending at about 1.4 Gbps. I assume that the loss I'm seeing is either buffers over flowing somewhere in the path or the Chorus rate-limit on UFB discarding the packets. The old version of iperf uses a busy loop in the sender to achieve the very precise timing for UDP mode which has the side effect of causing 100% CPU while sending. I wonder if the change in iperf3 is an attempt to make it more efficient. Had I Googled the issue at the beginning I would have found this is a known problem: https://github.com/esnet/iperf/issues/296 https://github.com/esnet/iperf/issues/386 Hopefully this will save someone else from a couple hours of confusion :) Thanks, Dylan

3 2

Re: [nznog] AS-path changes on nzix.net route-servers
by Sid Jones 29 Mar '17

29 Mar '17

We’ve largely finished making the changes to the AS-path for those that have requested it on the APE and the WIX. We’ve not seen any issues so far. If you wish to schedule a change, please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>

1 1

Bulk .nz whois
by Simon Lyall 20 Mar '17

20 Mar '17

One if the guys at $work is working to clean up our domains (mostly .nz) . We have a few hundred that are registered all over the place at various times, by different people, etc that we are hoping to consolidate. Problem is we need to get whois data for them but we ran into the dnc's limits. Any way to get around the limits? We tried reaching out to them but all they could suggest was going via a registrar. Simon Lyall | simon(a)darkmere.gen.nz | http://simonlyall.com Sent from a phone that cost more than my car

2 2

AS-path changes on nzix.net route-servers
by Sid Jones 12 Mar '17

12 Mar '17

Reminder, the NZIX changes will start being applied from today. We’re starting the changes on the WIX. APE changes will be in the next few days. Please contact us if you see any issues - faults(a)citylink.co.nz<mailto:faults(a)citylink.co.nz> or 0800 424 895

1 0

Anyone near AKL cbd have spare 3 x 1000Base-LX/LH (cisco coded GLC-LH-SMD) SFPs?
by Gareth Fletcher 05 Mar '17

05 Mar '17

that they would want to sell or give away (or for beer!!)! Please contact me off list :) In a pinch and my china order hasn't arrived yet. it's a nice hot day in Akl, you could be drinking cool beer this afternoon :) Today is your lucky day. Cheers Gareth

1 0

looking for 2U rackspace close to IX in NZ
by lenz 01 Mar '17

01 Mar '17

Hi, a bunch of friends of mine would like to extend their anycast cluster to NZ and were asking me if I know anyone who would have 2U of secure rack space with two separate uplinks and BGP-peering they could rent. Preferably close to one of the exchanges here, they are not too fuzzed where as they would only deal with the boxes remotely anyway. Company is reputable german company and there is beer for a successful referral :) Answers or pointers off-list would be the preferred comms channel :) cheers Lenz -- Lenz Gschwendtner geek, mentor, punk co-founder iwantmyname and others lnz.me/about

1 1

IRD Contact - Issue with services.ird.govt.nz
by Alexander Neilson 01 Mar '17

01 Mar '17

Hi NZNOG If there is someone in network operations from IRD on list or anyone has a contact could they please make contact off list. At $DAYJOB I have a customer who can load and interact with the main ird.govt.nz site but trying anything that touches https://services.ird.govt.nz is timing out. I have tested from two other IP Addresses in the same /24 and both other sites are loading correctly. (All three sites resolve / connect to 222.153.202.43) Same router is being used at all sites and the firewall rules that are different are not recording any matches during testing. SYN is sent but no SYN/ACK received. Customer has spoken to IRD but was told by IRD vague "Firewall issues" so I am looking for a contact to understand whats being seen from IRD side to resolve. Regards Alexander alexander(a)neilson.net.nz 021 329 681

2 2

Re: [nznog] Citylink IX communication
by Richard Naylor 01 Mar '17

01 Mar '17

At 11:18 p.m. 27/02/2017, Dylan Hall wrote: >Disclaimer: I worked for CityLink a while back so feel free to >consider the following biased or well informed as you see fit :) > >I think one aspect of this discussion that is often overlooked is >who participates in the peering exchanges. It's not just a handful >of large ISP's and content providers. > >Take a look at: > ><http://nzix.net/ape-peers.html>http://nzix.net/ape-peers.html >http://nzix.net/wix-peers.html > >We have a huge range of participants: universities, schools, >government, data centres, finance, researchers, broadcasters, etc. >Very few of these organisations operate networks as their core business. > >If it's so important to convince them all to opt-in to the change >what are we doing to explain why they should make that change? >Pointing at an RFC and yelling loudly hardly seems likely to be >accepted as a convincing argument outside of the networking community. Similar Disclaimer: I worked for CityLink a while back so feel free to consider the following biased or well informed as you see fit :) The original name WIX was "Wellington Information Exchange" back in 1996 to 1998. In 1997 (roughly) there was trial work done with Fore ATM switches because there was significant interest in " video" peering and "E1-peering", between Govt agencies. Of course VoIP-peering does a better job but has made less progress. WIX may lack the traffic volumes and number of carriers/ISPs but WIX is a more interesting exchange in terms of economic development in a community. Of course it does by-pass "service providers" in doing a lot of that. Some of the applications that (in theory) run include page ads for newspapers where the bank can update the interest rate in the ad for each edition of a newspaper. The ads used to cross town via cycle courier. WIX enabled that to be via FTP, without traffic charges. ( and couriers). So many of the WIX peers were on private AS numbers and often had someone else manage a simple peering router. This B2B peering is why there was a focus on having as many regional IXs as possible.

1 0

IANA IPv4 Recovered Address Space registry updated
by Paula Wang 01 Mar '17

01 Mar '17

Hi, An update has been made to the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA (https://www.icann.org/resources/pages/allocation-ipv4-post-exhaustion-2012-…) The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ Kind regards, Paula Wang IANA Services Specialist PTI

1 0

Citylink IX communication
by Tim Hoffman 26 Feb '17

26 Feb '17

Greetings, Given the importance of Citylink's IX services in the community, I feel that it is valuable to notify this communication from them to the entire list. I would note that they are explicitly stating in this communication they will not ever forcibly require consistent behavior. I would note that this is in direct violation of RFC7947; *2.2.2.1. Route Server AS_PATH Management* * As a route server does not participate in the process of forwarding* * data between client routers, and because modification of the AS_PATH* * attribute could affect the route server client BGP Decision Process,* * the route server SHOULD NOT prepend its own AS number to the AS_PATH* * segment nor modify the AS_PATH segment in any other way.* I would like to encourage (publicly) that Citylink implement this consistently, rather than in a haphazard way that varies customer by customer. Consistency is the key to supporting the NZ internet effectively *(Note, RFC7947 doesn't say "do this when your customer can be bothered")*. Additionally, I would like to encourage Citylink to communicate with the NZNOG community when publishing updates that could have an operational impact on the internet in NZ as a whole. Cheers, Tim ####### FOREWARDED MESSAGE BELOW ####### Dear REDACTED CityLink would like to inform you of some exciting NZIX developments that concern your existing ExchangeNET connection(s). We’re introducing some changes to the way we operate the NZIX route servers in order to improve our compliance with recent proposed standards (RFC7947 and RFC7948), and to minimise the disruption caused by routine administrative changes going forward. *Background* CityLink provides two route servers at each of the NZIX exchanges - currently Auckland (APE), Hamilton (HIX), Wellington (WIX), Christchurch (CHIX) and Dunedin (DPE). The route servers facilitate multilateral interconnection between the participants at each exchange by simplifying the BGP configuration and admin overhead otherwise needed to exchange routing information between multiple eBGP speakers. The NZIX route servers have traditionally prepended the exchange’s Autonomous System (AS) number to the AS path of the prefixes they advertise back out to peers. *What is changing?* A number of ExchangeNET customers have expressed a preference that the NZIX route servers no longer prepend the exchange AS number to the AS path of advertisements sent to them. This preference is consistent with recent proposed standards (RFC7947 and RFC7948), and is the recommended best current practice for Internet exchange route server operation. However, in order to put this change into effect, ExchangeNET customers who peer with the NZIX route servers may need to make a (potentially disruptive) change to their existing BGP configuration. While CityLink would prefer all ExchangeNET customers peering with the NZIX route servers to support this alignment with best current practice, we recognise that the timing to implement such changes may differ based on your individual business needs. Therefore, we have decided to implement the changes on a per-participant basis, and we invite those ExchangeNET customers who would like to “opt-in” to the changes (that is, for the NZIX route servers to no longer prepend the exchange AS number to the AS path of the advertisements sent to them), to contact us. We will endeavor to accommodate requests for configuration changes to be made at times convenient for each ExchangeNET customer, commencing from *13th March 2017* onwards. *Note:* We will *not* be changing the configuration of any existing sessions without that participant’s agreement. *What are the implications of the change?* · ExchangeNET customers who peer with the NZIX route servers will see the AS path for prefixes received shortened by one hop (the exchange AS number). This may alter the current choice of best path for those prefixes. · If you had been using the presence of an exchange AS in the AS path to influence your organisation’s routing policy, you may need to amend your configuration in order to achieve your routing policy objectives. It may not be quite so obvious that a given route has been learnt from a particular NZIX exchange point going forward. · Your router may need to be configured with its equivalent of *no bgp enforce-first-as* to restore its BGP session(s) with the NZIX route servers after the change is made. *I’d like to “opt-in” to the change. What do I need to do?* If you’d like us to remove the exchange AS number from the AS path of the advertisements you receive from the NZIX route servers, please email us at *peering(a)citylink.co.nz <peering(a)citylink.co.nz>* with your AS number, the contact details for the person(s) from your organisation that will be involved in making the changes, and an initial indication of when you’d like to implement the change (if known). Changes will only be implemented at a mutually-agreed time to minimise any disruption, commencing from *13th March 2017* onwards. *I’d prefer not to “opt-in” to the change right now. Do I need to do anything?* If you’d prefer that the NZIX route servers continue prepending the exchange AS number to the AS path of advertisements sent to you, you don’t need to take any action right now. However, we would appreciate a return email confirming the contact details for the most suitable person(s) from your organisation whom we should engage with on these matters going forward. *I’d prefer not to “opt-in” to the change at all. Will I be encouraged to eventually?* It is hoped that over time all ExchangeNET customers will choose to “opt-in” and thus support CityLink’s efforts to align the NZIX exchanges with best current practices, to the benefit of the wider NZ Internet community. *What will be the “default” configuration for new ExchangeNET customers?* Going forward, all new BGP sessions configured on the NZIX route servers will conform to the recommend best current practice (that is, the route servers will *not* prepend the exchange AS number to the AS path of prefixes sent to peers). *Is anything else changing?* Yes! The method by which configuration changes have historically been “pushed” to the NZIX route servers has necessitated a “hard reset” of the BGP session(s) with all existing peers. Although the two route servers at each exchange are reloaded independently (ensuring that each peer has an established session with at least one NZIX route server at all times), the overheads associated with performing the hard reset are higher than they need to be. In order to minimise the impact of routine administrative changes going forward, we are changing the way in which configuration changes are pushed to the route servers. Note that changes will continue to be applied to each route server independently, however, thereby ensuring optimal availability for NZIX. *I have a question about these changes. Who should I contact?* Please email us at *peering(a)citylink.co.nz <peering(a)citylink.co.nz>* in the first instance. We’ll be happy to help! Kind Regards, [image: CityLink Ltd] <http://www.citylink.co.nz/> *Toll Free* 0800 424 895 Level 6, 25 Cambridge Terrace *www.citylink.co.nz <http://www.citylink.co.nz/>* Wellington 6011 This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail and its attachments.

7 10

Re: [nznog] Xtra and SPF
by Glen Eustace 20 Feb '17

20 Feb '17

> On 8/02/2017, at 1:15 PM, Criggie <criggie(a)criggie.org.nz> wrote: > > Its not really an answer, but SPF is doing what its told. Agreed. > > So either you have to convince Xtra's mail to disable their rejections > (unlikely) or you have to get something into the customer's SPF record > to permit your hosts to send. The domains with the hard fail SPFs are not my customers so I have no control over them at all. The issue is people emailing from those domains to domains we do host and they are getting the bounce and blaming us. (perhaps rightly so, but this has only become an issue in the last week and even then for only 2 customers) > Dirty hack that won't work much is to IPv6-enable your mail relay. There > seem to be fewer restrictions on that side, at least google is a little > more accepting. Already fully IPv6 enabled. So it looks like I need to go back and have another look at SRS. It would seem that either few organisations hosting email are ‘relaying’ like we do or have already implemented SRS. If that is the case, I’d be interested in knowing whether SRS creates its own set of problems.

12 11

NZNOG 2017 Videos
by Dave Mill 20 Feb '17

20 Feb '17

Hi all We have made the talks available from NZNOG 2017. Day 1 : https://www.youtube.com/playlist?list=PLeAkos2dldO5EmOe5zPbSuQzXoq4s Jeos Day 2 : https://www.youtube.com/playlist?list=PLeAkos2dldO5vjrg6vS0rYEPIvRs8 naAA Thanks to our A/V guys for doing the work behind this. Cheers Dave

2 1

Upcoming APNIC elections
by Tim Hoffman 20 Feb '17

20 Feb '17

Hi New Zealand internet community! I wanted to remind everyone that the APNIC elections <https://www.apnic.net/community/participate/elections/ec/ec-election-proces…> are coming up, with voting <https://www.apnic.net/community/participate/elections/ec/voting/> now closing in 6 days (3pm Monday, 27 February 2017). It's important that we all get involved in the democratic process that APNIC has and vote - those elected will determine policies that impact us all (for instance around IP address transfers and justification of IP space as we ramp down IPv4). Specifically, I wanted to highlight two candidates from the list of nominees <https://2017.apricot.net/elections/nominations/> that you may want to consider voting for to represent us. Both have had ties to the New Zealand internet community for over a decade, understand the challenges we face, and I believe would represent our needs well. Jon Brewer <https://2017.apricot.net/elections/nominations/jonathan-brewer/> is well known to our community. Wellington based, he founded Araneo and ran this company for some years, then since selling Araneo to TeamTalk has focused on helping developing communities (particularly in the pacific islands) establish better connectivity locally and to the world. *Gaurab Raj Upadhaya* <https://2017.apricot.net/elections/nominations/gaurab-raj-upadhaya/> has had involvement in many countries whose internet infrastructures have been developing over the past decade. He has strong ties to the networking community in New Zealand; these began in the early FX days. Starting his career in Nepal, he has experienced challenges greater than those we face in New Zealand around being a remote internet community connected to a US-centric internet first hand. He now leads the network organization at Limelight. *Don't forget to vote!* Cheers Tim -- Tim Hoffman | Twitter, Inc. 1355 Market St. | San Francisco, CA | 94103

2 1

Drinks - Auckland CBD 14/2
by Fraser McGlinn 13 Feb '17

13 Feb '17

Hi Guys, I'll be over in NZ (Auckland) early next week with the boss and thought a few beers were in order to catch up with people that we may not have seen in a while as well as to meet more of the NZNOG folk. We'll be putting on a few drinks at The Bluestone Room (9-11 Durham Ln, Auckland) on the 14th Feb from about 5:30pm, feel free to come down and join us for a few beers. Cheers, Fraser Drinks - Auckland CBD 14/2 Fraser McGlinn - Senior Network Operations Officer Web: www.anycast.com.au<http://www.anycast.com.au/> Peering: AS58511<https://www.peeringdb.com/asn/58511> Main Office: +61356224600 Level 1, 5/15 Phoenix Street Warragul, Victoria 3820, Australia [cid:image001.png(a)01D272FA.31833AC0] This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it.

7 7

AWS Sydney
by Jed Laundry 08 Feb '17

08 Feb '17

Hey, Is anyone else noticing high packet loss to AWS Sydney this morning? PING ap-southeast-2.console.aws.amazon.com (54.240.195.68) 56(84) bytes of data. 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=12 ttl=240 time=40.4 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=17 ttl=240 time=39.6 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=20 ttl=240 time=40.7 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=32 ttl=240 time=161 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=34 ttl=240 time=40.2 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=39 ttl=240 time=294 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=41 ttl=240 time=40.7 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=47 ttl=240 time=40.4 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=54 ttl=240 time=65.5 ms Thanks, Jed.

10 9

Re: [nznog] Xtra and SPF
by Glen Eustace 07 Feb '17

07 Feb '17

> On 8/02/2017, at 1:03 PM, Jasper Bryant-Greene <jbg(a)rf.net.nz> wrote: > > SRS is the solution to this and is a standard, available on most mail systems. SPF is a good idea according to most of the internet, and is very widely implemented, so I suggest just getting with the times and fixing your mail relay to rewrite sender addresses according to the SRS standard rather than claiming to send mail for domains it's not authorized to do so for. I have found several articles saying that SRS is, like SPF, basically broken in that it doesn’t handle any situation where multiple relays are involved (not prepared to comment on whether that is right or not), hence my reluctance at this stage to using it. I agree that in principal SPF is a good idea but it breaks mailing lists, forwarding and relays. It has been my believe that using ~all (soft fail) is better than -all (hard fail) so that various anti-spam systems can use the soft fail as a contributing weighting, along with other things to determine what should be done with a message and to not rely on just the SPF.

1 0

NZIX / AKL-IX feedback
by Chris Browning 26 Jan '17

26 Jan '17

Hi All, With NZIX being a Not-for-profit that is overseen by a committee of its members, there a number of idea's bouncing around the of things that we could/should do with NZIX and the membership funds coming in. The NZIX committee is really interested in feedback on how we are going and where we should be heading to ensure that we steer the exchanges in the direction that best serves our members and the New Zealand Internet. NZIX has made a short survey to attempt to get some feedback on what we should be focusing on which can be found here https://www.surveymonkey.com/r/NZIX2017. Cheers Chris

1 0

Our poor Aussie mate
by Tim Hoffman 25 Jan '17

25 Jan '17

Hey all, Gav has lost his laptop at NZNOG, if anyone finds a backpack with megaport, AMS-IX, and PTC16 stickers, with a "Gavin tweedie" business card on it send me or him a message. Sorry for the aussie! Tim Sent from my iPhone

1 0

NZNOG 2017 Live Stream from Tauranga
by Jesse Archer 25 Jan '17

25 Jan '17

Morning, For those that can't make it... We're now streaming! http://www.nznog.org/nznog17/stream Recordings of each talk will also be posted on the NZNOG website after the event. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

3 4

NZNOG Conference 2017 - SOLD OUT!
by Jesse Archer 24 Jan '17

24 Jan '17

On behalf of the trustees, thanks to everyone who's registered for NZNOG 2017 in Tauranga. Welcome to those already in Tauranga for the workshop/tutorials - and safe travels for everyone else coming over the next 24 hours - we'll see you tomorrow! *Just a quick note that tickets have sold out. * Because we're so close to conference getting underway and as ticket sales have already exceeded our expectations, we won't be operating a waitlist. Ticket name changes with a small admin fee are permitted. Thanks! *Jesse Archer*

3 3

Lightning Talks
by Richard Nelson 24 Jan '17

24 Jan '17

Hi, Could anybody who would like to give a lightning talk please send an email to talks(a)nznog.org. Please give the topic of your talk and the time you expect to take. Thanks, Richard

1 0

Internet at the conference
by Nathan Ward 22 Jan '17

22 Jan '17

Hi, I’m in Tauranga for the week for work, and am staying at Trinity where the conference is being held. I’m attending on Thurs/Fri (now that I’ve registered having prev. forgotten haha). The wifi here, at least in the rooms, is abysmal - I’ve stayed here a few times before, and it’s always the same - and is the same now. Anywhere from 10-25% loss, and 100-500ms std-dev when ARPing the gateway at various times. I note that there’s an NZNOG SSID - is this using the same wifi equipment? MACs seem similar, but reception is poor, so maybe it’s just in the conference area? If you have an ethernet adapter, you can plug in to the lower of the two RJ45 holes in your room, get 100mbit link, auth with the captive portal, and get 2% loss instead, much better RTT though. Seems I can get around 8mbit/s out of it. Of course, if this is how it is without a bunch of nerds, it’s not going to get any better at the tail end of the week ! Long story short - unless the conf. organisers are sorting something else out, bring some 4G if you need to be online reliably - 4G on VFNZ seems to be OK here and has been a life saver for me when staying here in the past. Cheers, -- Nathan Ward

2 1

Amazon Prime Cache
by Mark Frater 19 Jan '17

19 Jan '17

Does anyone know what the story is with caching Amazon Prime traffic? Do they have an ISP programme for rolling out caches like the Netflix Open Connect Appliances?

1 0

looking for rack mount ears - HP 1920 series
by Terry Hughes 18 Jan '17

18 Jan '17

sorry, I know this is way off-topic, but I'm out of options. I need to re-work a small rack with a few 1920 OfficeConnect switches in it, and the original installer threw out the mounting ears and just sat the switches on top of some old equipment. The holes don't match any of the generic mounting kits I've got, and HP don't list the mounts as spares. Does anyone have a couple of mounting kits, or at least the ears? Fair compensation no problem. I'm in Wellington, but know how couriers work... thanks, Terry (long time lurker etc) 021 575715

1 0

NZNOG Conference Begins Next Week
by Jamie Baddeley 16 Jan '17

16 Jan '17

Hi Folks, Welcome to 2017 and another edition of the 'Nog. Next week the conference http://www.nznog.org/nznog17 begins! http://www.nznog.org/nznog17/nznog-2017-workshop http://www.nznog.org/nznog17/nznog-2017-tutorials http://www.nznog.org/nznog17/conference-programme It's not too late to register - the programme is looking good - thanks to the Programme Committee and the Presenters that have put their names forward and made the time to give back to the NZNOG community. For those of you attending the Social on Thursday Night - pack something warm/decent shoes - the event is outside and so far the summer has been pretty meh. Conference attendance is looking good, we look forward to seeing you all there next week! If any of you fancy putting your hand up for some random work to help with odd jobs at the conference let us know (and when you'd be available) at info(a)nznog.org - we'd appreciate it. Cheers Jamie on behalf of the NZNOG Trustees.

1 0

Supporting RIPE Atlas
by Sebastian Castro 15 Jan '17

15 Jan '17

Hi everyone: On preparation for NZNOG 2017 next week, I'd like to pitch the RIPE Atlas project to this audience. RIPE Atlas https://atlas.ripe.net/ is global measurement network composed by hundreds of lightweight probes, that allow their users to run a variety of network measurements. The probes are small, powered by USB, and let you run Ping, Traceroute, lightweight HTTP, DNS lookups, etc. It provides the convenience of running measurements from different networks, very useful for troubleshooting and monitoring, as well as research. There are 82 active probes in New Zealand, and we would like to cover most of the active ASNs in the country with a probe. NZRS uses RIPE Atlas for some of our research work, like Detecting if NZ ISP are doing DNSSEC validation <http://blog.nzrs.net.nz/dnssec-validation-at-spark-nz/> or testing local ISP resolvers for centricity <http://blog.nzrs.net.nz/resolvers-centricity-detection/>, as well as our efforts to map the Internet topology of NZ that will be presented at the conference. Some NZNOG members are RIPE Atlas ambassadors, like Dean Pemberton or myself, we can get you a probe if you are interested on hosting one. I'll bring a few to Tauranga next week, feel free to contact me if you want one. If there is more demand than available probes, I can get a bunch directly from RIPE and post them to you later. Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Call For Presentations - DNS-OARC Workship 26, Madrid, 14-15 May 2017
by Geoff Huston 07 Jan '17

07 Jan '17

[with apologies to those who see this on multiple lists] Call For Presentations The DNS-OARC 26th Workshop will take place in Madrid, Spain on May 14th and 15th 2017, the Sunday and Monday following the ICANN GDD Industry Summit 2017. The Workshop's Program Committee is now requesting proposals for presentations. This workshop intends to build from previous strong DNS-OARC workshops, where both operational content and research are welcome. All DNS-related subjects are welcome. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. A timeslot will be available for lightning talks (5-10 minutes) on Monday May 15th, for which submissions will be accepted during May 14th on a first-come first-served basis. Workshop Milestones: 6th January 2017, Call for Presentations posted and open for submissions 24th February 2017, Deadline for submission 17th March 2017, Draft Programme published 14th April 2017, Final Program published 28th April 2017, Final deadline for slideset submission Details for presentation submission will be published here: https://indico.dns-oarc.net/event/26/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Ray Bellis, for the OARC Programme Committee OARC depends on sponorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

Met Service
by Alan Maher 03 Jan '17

03 Jan '17

Merry Xmas all, Anyone have a contact with Met Service IT provider/manager/ help desk? http://www.metservice.com/ is running on complete go slow right now. "Someone" needs to take a look at it. Cheers Alan Maher --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

3 2

a bufferbloat-less christmas
by Dave Taht 22 Dec '16

22 Dec '16

I gave a talk at nznog about 2 years ago about bufferbloat and the fixes we had planned for it. I'm pleased to say that we've got it mostly fixed in the Linux kernel at this point. did the NZwrt idea ever get traction? In particular, the wifi fixes (fq_codel at the mac layer, and airtime fairness) have today, entered lede (formerly openwrt). There's full support for the ath9k and partial support for some ath10k chips. Builds should be popping out in a few hours. Most of these patches are now in the linux 4.10 mainline - and ATF is scheduled for 4.11. The sqm-scripts (in lede and openwrt, which also work on mainline linuxes) have long enabled fixing dsl, cable, fiber, ethernet - but *are not* required to fix wifi - with these patches, "wifi just works!" with far less bloat and more concurrency. There's a ton of ath9k/ath10k using products out there supported by lede. The Turris Omnia has all the sqm-scripts, fq_codel, and the ath9k/ath10k stuff either in it now, or rapidly pending. There's also some good stuff in the dsl-aware-autoconfig-ing http://evenroute.com/ (but not the wifi stuff as yet). A lot of people are liking the edgerouter-x... ... And there are dozens of other firmwares and products using fq_codel functionality - notably the ubnt edgerouter calls it what it is, but you'll see it also under names like "adaptive qos", and so on. For a good bit of research as to how fq_codel helps on slow connections (in this case, in australia across NBN's speed tiers), see: http://caia.swin.edu.au/reports/161107A/CAIA-TR-161107A.pdf for some details what went into fixing wifi, see: https://lwn.net/Articles/705884/ So... Have a bloat-free christmas! fix it for yourself, and then a friend, or two. My testing while I was in NZ last time seemed to indicate no particular tuning was needed for your country, but I remain curious as to what happens when you deploy this new stuff, there - and, if, over the last 2 years, you had been. Wish I was there, myself. Looks nice and warm. -- Dave Täht Let's go make home routers and wifi faster! With better software! http://blog.cerowrt.org

1 0

pool.ntp.org traffic gone wild
by Lincoln Reid 19 Dec '16

19 Dec '16

Hi, Is anyone else in NZ seeing their pool.ntp.org traffic volumes up by an order of magnitude over the last few days? 20mbps+ seems like quite a lot of NTP. Cheers, -- Lincoln Reid Head of Networks ACSData - AS18119 lincoln(a)acsdata.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201

12 19

Certifications
by Lesley Longhurst 14 Dec '16

14 Dec '16

Hi all, As an all-purpose leading network bod for my company, what's a good certification strategy? I deal with a wide range of stuff from local LANs to international backbones, and it's high time I got myself a piece of paper to "prove" that I know some stuff. Is CCNA still a good starting point? Lesley Longhurst Opus International Consultants Ltd, 33 The Esplanade, Petone, Lower Hutt 5012, New Zealand PO Box 30 845, Lower Hutt 5040, New Zealand +64 4 471 7002 +64 21 244 3718 lesley.longhurst(a)opus.co.nz<mailto:lesley.longhurst(a)opus.co.nz> www.opus.co.nz<http://www.opus.co.nz/>

9 14

Re: [nznog] Certifications
by Kerry Milestone 13 Dec '16

13 Dec '16

You may also wish to look at some of the online MOOCs. For example, a certified course (you pay for, and get your work verified etc) in Digital Network Essentials but you've probably moved on already a bit from this particular one. https://www.edx.org/course/digital-networks-essentials-imtx-net01x "All about the IP, TCP and UDP Internet protocols and their properties (quality of service, congestion management, etc.)" Or slightly more esoteric and off the original topic but still interesting to do is this one, put together by some fairly clued up people in their field: https://www.edx.org/course/cyber-security-economics-delftx-secon101x "We discuss and apply different economic models that help determine the costs and benefits of security investments in network security." Looking at this one from Ivan Pepelnjak, the six week course covers quite a bit and certainly would expose the holes in your current knowledge you need filling. Playing First Packet in a network symphony orchestra would be a good place to progress from should you require to learn the specifics and intricacies of certain equipment. http://www.ipspace.net/Building_Network_Automation_Solutions "In the hands-on part of the course you’ll build your own lab, either using virtual devices or physical gear. If you decide to go with the virtual device approach, you can choose between Arista vEOS, Cisco VIRL, Cisco CSR, Cumulus VX, Juniper vSRX or Juniper vMX." >From a business perspective, I think it is more useful knowing the why rather than just the how which is what certificates themselves often can't portray and may become very clear in an interview or stressed (the internets are broken...) situation. On 14/12/16 09:45, nznog-request(a)list.waikato.ac.nz wrote: > > > Today's Topics: > > 1. Certifications (Lesley Longhurst) > 2. Re: Certifications (Nathan Ward) > 3. Re: Certifications (Criggie) > 4. Re: Certifications (Chris O'Donoghue) > 5. Re: Certifications (Lesley Longhurst) > 6. Re: Certifications (Dave Mill) > 7. Re: Certifications (Nathan Ward) > 8. Re: Certifications (Bill Walker) > 9. Re: Certifications (Joel Wir?mu Pauling)

1 0

Accommodation Early Bird Has Ended - Other Options
by Jesse Archer 12 Dec '16

12 Dec '16

Hi All, Just a heads up that the Trinity Wharf early bird pricing ended yesterday. Other options if you're looking to save some $$ are listed at the following link, but I wouldn't muck around (Tauranga is one of NZ's Summer hot spots). http://www.nznog.org/nznog17/venue Conference is selling nicely, if you're interested in the Workshop or Tutorials on offer, don't muck around - only a few spots left on those. Conference will finish at 4.30pm on Friday Jan 27. Your direct flight home options on this date include: *Auckland 5pm & 6:20pm* *Wellington 5:25pm* *Christchurch 4:00pm (transit via Wellington or Auckland available at 5:25pm or 6:20pm).* Check-in is 20 minutes before departure, I'd allow 30 minutes travel time from the venue to the airport just in case there is some peak Friday afternoon traffic on Hewletts Road (lots of traffic lights). Regards, Jesse Archer On Behalf Of The NZNOG Trustees

1 0

NZNOG 2017 Registrations are Open
by Dave Mill 04 Dec '16

04 Dec '16

Hi all A heads-up that we have just opened registrations to the NZNOG 2017 conference in Tauranga. Details are here - http://www.nznog.org/nznog17 . The conference is brought to you by Go Wireless NZ. We have placed information regarding our current workshop and tutorials on these pages: http://www.nznog.org/nznog17/nznog-2017-workshop http://www.nznog.org/nznog17/nznog-2017-tutorials (Note, we might have some Grandstream phone training available on the Wednesday as well - we are still firming up details) We'd encourage people to register early for the tutorials and workshops as some of these will have limited seats due to room availability. Also, a reminder that early bird accommodation rates at the conference venue will finish on December 12. Rooms are limited so again book your accommodation early. Check out accommodation options here - http://www.nznog.org/nznog17/venue A big thank you to all of our sponsors so far - http://www.nznog.org/nznog17/nznog-2017-sponsorship Hope to see you there! Cheers Dave (on behalf of the NZNOG Trust)

2 2

Strange issues in CHCH - Routing SYN Timeouts
by Brad Nightingale 01 Dec '16

01 Dec '16

Hi We are experiencing weird issues from out of our internet break out in CHCH. I don't want to drop our upstream in it so no names mentioned, but yes a ticket has been logged with them - this is just becoming urgent as it started . Since I have done this I have had reports from other IT Service Providers that say their customers are experiencing the same thing. Basically we can ping anything, but we cant web browse to wide range of certain sites (e.g. www.bnz.co.nz) - these would appear to be internationally hosted sites but I can't categorically state this. We are getting SYN Timeouts almost like there is async routing somewhere way up stream or some random MTU issue. I don't expect to have anyone solve the problem from this email, just a "yes there is an issue and we are experiencing it too and know XXX is working on it" would be helpful to know. Thanks Brad ________________________________ CAUTION: This communication, including any attachments are confidential. If you have received this communication in error, please advise the sender immediately and delete the message and any attachments. Nothing in this email designates an information system for the purposes of Section 11(a) of the New Zealand Electronic Transactions Act 2002, unless expressly stated otherwise.

1 0

Network Status/Anecdotes from #eqnz
by Joel Wirāmu Pauling 13 Nov '16

13 Nov '16

Hi all, Hope everyone is safe; thoughts are with everyone back home. As I went through the call list of friends and family this morning ; from the considerably less shakey Eastern Canada - my mind turned to work and network operators. Have a fairly rag-tag list of info mostly anecdotal from users on a variety of places (twitter/reddit/g+) about loss of services from ISP's (Nelson area seems pretty hard hit) Wondering how everyone's networks have held up and if there are any pain points, am sure the people at the forefront are already hard at work and sharing resources as required. But if there is anything people can and/or are willing to share it would be appreciated. -Joel

1 0

Re: [nznog] NZNOG Digest, Vol 167, Issue 2
by Logan Douglas 07 Nov '16

07 Nov '16

Try Jason Foden - General manager of Ondemand. He can point you in the right direction. I think his email is jason.foden(a)tvnz.co.nz Will confirm. Logan @ Live Motorsport NZ On Tue, Nov 8, 2016 at 12:00 PM, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > https://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. TVNZ onDemand Contact (Tristram Cheer) > 2. Re: TVNZ onDemand Contact (Jesse Archer) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 7 Nov 2016 03:05:50 +0000 > From: Tristram Cheer <t(a)uber.co.nz> > To: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> > Subject: [nznog] TVNZ onDemand Contact > Message-ID: > <PS1PR03MB16598F6295DE95103FAE52B096A70(a)PS1PR03MB1659. > apcprd03.prod.outlook.com> > > Content-Type: text/plain; charset="us-ascii" > > Hi All, > > I'm looking for someone in charge over at TVNZ who works on their Ondemand > platform, Helpdesk and noc so far are stuck and I need someone to work on a > widespread issue with their platform. > > > Cheers > > > TRISTRAM CHEER > UBER GROUP LIMITED > NETWORK ARCHITECT - MOST PROBLEMS ARE THE RESULT OF PREVIOUS SOLUTIONS... > > [Facebook]<https://www.facebook.com/UberGroup?_rdr=p> [Twitter] < > https://twitter.com/ubergroupltd> > > E: t(a)uber.co.nz<mailto:t(a)uber.co.nz> > P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz<http://www. > uber.co.nz> > 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND > > > > >

1 0

TVNZ onDemand Contact
by Tristram Cheer 06 Nov '16

06 Nov '16

Hi All, I'm looking for someone in charge over at TVNZ who works on their Ondemand platform, Helpdesk and noc so far are stuck and I need someone to work on a widespread issue with their platform. Cheers TRISTRAM CHEER UBER GROUP LIMITED NETWORK ARCHITECT - MOST PROBLEMS ARE THE RESULT OF PREVIOUS SOLUTIONS... [Facebook]<https://www.facebook.com/UberGroup?_rdr=p> [Twitter] <https://twitter.com/ubergroupltd> E: t(a)uber.co.nz<mailto:t(a)uber.co.nz> P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz<http://www.uber.co.nz> 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND

2 1

NZNOG 2017 Sponsorship and Conference Update
by Dave Mill 02 Nov '16

02 Nov '16

Hi all First of all, I'd like to welcome aboard Go Wireless NZ as our naming and Platinum sponsor for NZNOG 2017. NZNOG conferences just wouldn't be possible without sponsors like Go Wireless NZ so I'd strongly encourage you all to support them. Check out their website - https://www.gowifi.co.nz/ At the moment we haven't had as many sponsors come on-board as we would have hoped for. If you have been considering sponsoring NZNOG but haven't made contact yet please do so. If you know any companies that might consider sponsoring NZNOG please encourage them also. sponsorship(a)nznog.org is the email address for any sponsorship inquiries. If we don't get more sponsors on-board we may have to consider raising conference fees slightly. We'd really hope to not do this and to keep NZNOG at its standard low cost. We have a $1000 community sponsor level available so even having a few more companies/organisations coming on-board at that level would help a lot. We have a call for papers for the conference out. Richard Nelson posted this on Oct 13 to the list - its also available at http://www.nznog.org/call-for-papers . We have just locked in our first workshop (23 - 25 Jan) and tutorial (25 Jan) and hope to have more options soon. We'll aim to release some more details on these soon. Finally, we've had a few people book in accommodation at our venue nice and early which is great to see. A reminder, this conference is in Tauranga in the height of summer and accommodation will be at a premium. Some accommodation options are available here - http://www.nznog.org/nznog17/venue . Look forward to seeing you next year. Cheers Dave (on behalf of the NZNOG trust) http://www.nznog.org/nznog17

1 0

Juniper EX4600 "process switching"?
by Ewen McNeill 24 Oct '16

24 Oct '16

Does anyone have any suggestions for how to investigate what looks like certain paths of inter-virtual-router layer 3 switching (routing, via routes leaked into the VR) on a Juniper EX4600 (and I'd guess QFX5100) being sent via the supervisor CPU? Searching online turns up lots of advice for investigating, eg, "process switching" on Cisco (eg, http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-software-r…) but I'm not finding much documented for Juniper :-( From the customer point of view the most obvious symptom is approximately 10-20 ms additional latency on a local routed path (VLAN A on VR 1 to VLAN B on VR 2), but apparently only in one direction (ie, if we bypass the EX4600 in the problematic direction then it "seems to be okay". It happens even when there's basically no traffic (eg, under 1Mbps on a 1Gbps link), and only a couple of dozen devices on each VLAN. (At times we've seen the latency as high as 1000+ ms -- so over 1s, for local traffic -- but that was at a busier site.) From an internal point of view, the most obvious symptom is that the forwarding-options analzyer shows ingress/egress on one of the VLANs, but only ingress on the other VLAN; and "monitor traffic ..." shows only the missing egress traffic. Since I'd understood "monitor traffic" to only see traffic that goes via the supervisor CPU, I'm starting to wonder if the latency is coming due to the packet flow in that direction going through the processor CPU -- for some unknown reason. This is happening at two sites, but they're basically identical EX4600s facing basically identical switches, and equivalently configured routing instances in each. The two VLANs are sub-interfaces on the same aggregation (ae1) to the same switch, so it's sort of hairpinned, but via leaked static routes in the two routing instances. The on-VLAN hardware at each site is pretty similar too. So we're guessing the cause is the same, but don't know what it is. We've already tried testing with the aggregation down to a single link, and it appears to make no difference. We've also forced ethernet flow control off at both ends, without making a difference. Any thoughts, particularly to see what path through the EX4600 packets are taking, welcomed. Or documentation for how the EX4600/QFX5100 packet forwarding engine architecture works (I can find M/T/MX documents, but not the one I want...). Thanks, Ewen

2 3

[Job] The National Library of New Zealand is looking for an experienced Digital Preservation Web Engineer [Closes 28th Oct]
by Jay Gattuso 24 Oct '16

24 Oct '16

The National Library of New Zealand is looking for an experienced Digital Preservation Web Engineer to lead its web archiving programme. You will be responsible for the strategic and operational management of the Library's web archiving programme. The primary purpose of the Digital Preservation Web Engineer is to define, implement and support the efficient acquisition, preservation and discovery/delivery of web based digital content subject to the Library's legislated mandate. This includes harvesting via the Library's selective and whole-of-domain web archiving programmes and the design, deployment and implementation of mechanisms for storing, indexing and providing access (including data mining) to the web collections. You will be working within a team of 8 digital preservation specialists in the Preservation Research & Consultancy team and be responsible for: * developing a world class approach to the gathering, preservation, dissemination and interrogation of web based collections. * drafting a business case for indexing, search and delivery for the Library approx 80Tb of web archives. * contributing to the development of the strategic direction of the National Library with particular emphasis on the Library's digital (web) collection building, preservation and access roles. * working closely with national and international peers, related teams within the department and with external vendors. Working at the Department of Internal Affairs, you'll have the opportunity to make a real difference in the lives of New Zealanders. The National Library of New Zealand sits within the Information and Knowledge Services branch, the Department's epicentre of information management. Our branch is all about collecting, storing and preserving important things that are precious to New Zealand. You will have substantial practical experience in an IT environment with specific emphasis on web framework technologies and protocols, and preferably also demonstrated experience in web archiving. You will be a self-driven specialist, ideally with a tertiary qualification in information technology, computer science or information science or its equivalent. This role also requires you to be legally entitled to work in New Zealand. If you want to join a team of smart, committed people who do spectacular work for New Zealand - then this might be the right job for you. Applications close: 5PM, Friday 28 October 2016 For more information please contact: Steve Knight, Programme Director Preservation Research on +64 21 490 503 or steve.knight(a)dia.govt.nz<mailto:steve.knight(a)dia.govt.nz> Job description: To review the full job description, please click here<http://www.bfound.net/Company/164-20160916152621.pdf> Applications: To apply for this role at the National Library of New Zealand, please click here<https://www.bfound.net/loginbox.aspx?loginState=3&jobId=136955&CoId=164>

1 0

NZNOG17 - Call for Papers
by Richard Nelson 12 Oct '16

12 Oct '16

The NZNOG organising committee invites papers for its 14th annual conference, to be hosted at Trinity Wharf, Tauranga, New Zealand from 23 - 27th January 2017. There will the three day Workshops 23 – 25 January, a day of tutorials on 25 January with the main conference on 26 – 27 January. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 28th November. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate proposals based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

APNIC 42 has started - participate remotely!
by Elly Tawhai 03 Oct '16

03 Oct '16

________________________________________________________________________ APNIC 42 has started - participate remotely! ________________________________________________________________________ Hi NZNOG Community, If you can't attend a session in person, you can participate remotely using our online participation tools. We provide an Adobe Connect virtual conference room with live video, audio, transcript, chat, and real-time slides and YouTube live, allowing you to virtually attend and participate in APNIC 42 online. https://conference.apnic.net/42/remote Policy SIG ---------- If you want to play a part in how Internet number resources are managed, be sure to participate at the three Policy SIG sessions. As well as the proposals under discussion, there will also be interesting presentations on whois data quality and accuracy, and IPv4 transfers. https://conference.apnic.net/42/policy First TC Security Session ------------------------- With cyber security threats on the rise, it's important to keep up to date on Internet security vulnerabilities, mitigation techniques, and ways the Internet community can work together to find solutions. Check out the FIRST Technical Colloquia sessions to hear from regional and international Internet security experts share their real-world experiences. https://conference.apnic.net/42/program#/schedule/day/8/first-tc-security-s… Thanks to our sponsors ---------------------- Huge thanks go to our APNIC 42 sponsors. We really appreciate your support! https://conference.apnic.net/42/sponsor#sponsors Keep in touch ------------- Stay up to date with what's happening at the conference by subscribing to the APNIC Blog and following us on our social networks. http://blog.apnic.net https://www.apnic.net/about-APNIC/social-media ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________

1 0

Huawei AR160 - Chorus VDSL config anyone?
by Mike Taylor 26 Sep '16

26 Sep '16

Just thought I'd chuck this out there, as my Google-fu seems to be failing. Does anyone have a known good, Chorus Wholesale, VDSL config for an Huawei AR160 router? (The look like a Cisco 800 series, NOT the white,plastic consumer version) Specifically, I'm having an issue where PPPoE Active Discovery is working. The ISP core starts sending PPPoE LCP requests, and the Huawei _seems_ to think it's sending replies, but I'm wiresharking it in our core, and PPPoE frames are NOT making it back to us... Cheers, Mike -- Mike Taylor The Total Team 0800 888 326 / +64 3 3779050

4 4

[Job] Telcos job opportunities
by Pierre-Emmanuel Goiffon 21 Sep '16

21 Sep '16

Hi NZNog, Please apologize if I breach any mailing-list rule with this email. I recently joined this mailing-list and I would like to introduce myself as I am actively looking for a job in telcos here. I have 14 years’ experience in the telecommunication Industry in Europe - in different types of companies like Renater (French equivalent to REANNZ), BT, Orange Business Services, Level 3 Communications - in different types of environments : Integrator, Telecommunications provider, Consultancy - in different types of positions : network engineer, contract manager, project manager, sales engineer I recently relocated in New Zealand for family reason, and I'm now actively looking for a Job here. As I found my last position in France via the FRNOG Community, I though it would make sense to contact the NZNOG Community here :) I am mainly looking for presales or project manager positions, but I am opened to hear about any vacancy that could match my profile. My CV is available here: https://www.dropbox.com/s/a7v3e16fvaokgqi/GOIFFON-CV_Sept2016.pdf?dl=0 Please reply off-list. Best Regards, Pierre-Emmanuel Goiffon

1 0

[Job posting] Digital Preservation Web Engineer
by Jay Gattuso 19 Sep '16

19 Sep '16

The National Library of New Zealand is looking for an experienced Digital Preservation Web Engineer to lead its web archiving programme. https://www.bfound.net/detail.aspx?jobId=136955&CoId=164&rq=5 You will be responsible for the strategic and operational management of the Library's web archiving programme. The primary purpose of the Digital Preservation Web Engineer is to define, implement and support the efficient acquisition, preservation and discovery/delivery of web based digital content subject to the Library's legislated mandate. This includes harvesting via the Library's selective and whole-of-domain web archiving programmes and the design, deployment and implementation of mechanisms for storing, indexing and providing access (including data mining) to the web collections. You will be working within a team of 8 digital preservation specialists in the Preservation Research & Consultancy team and be responsible for: * developing a world class approach to the gathering, preservation, dissemination and interrogation of web based collections. * drafting a business case for indexing, search and delivery for the Library approx 80Tb of web archives. * contributing to the development of the strategic direction of the National Library with particular emphasis on the Library's digital (web) collection building, preservation and access roles. * working closely with national and international peers, related teams within the department and with external vendors. Working at the Department of Internal Affairs, you'll have the opportunity to make a real difference in the lives of New Zealanders. The National Library of New Zealand sits within the Information and Knowledge Services branch, the Department's epicentre of information management. Our branch is all about collecting, storing and preserving important things that are precious to New Zealand. You will have substantial practical experience in an IT environment with specific emphasis on web framework technologies and protocols, and preferably also demonstrated experience in web archiving. You will be a self-driven specialist, ideally with a tertiary qualification in information technology, computer science or information science or its equivalent. This role also requires you to be legally entitled to work in New Zealand. If you want to join a team of smart, committed people who do spectacular work for New Zealand - then this might be the right job for you. Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

PCH peering survey 2016
by Bill Woodcock 14 Sep '16

14 Sep '16

Background: Five years ago PCH conducted the first, and to date only, comprehensive survey characterizing Internet peering agreements. The document that resulted can be found here: https://www.pch.net/resources/Papers/peering-survey/PCH-Peering-Survey-2011… <https://www.pch.net/resources/Papers/peering-survey/PCH-Peering-Survey-2011…> That document was one of the principal inputs to an important document that the OECD publishes every five years, one that recommends communications regulatory policy to OECD member nations: http://www.oecd.org/officialdocuments/publicdisplaydocumentpdf/?cote=DSTI/I… <http://www.oecd.org/officialdocuments/publicdisplaydocumentpdf/?cote=DSTI/I…> The survey had several useful findings which hadn’t previously been established as fact—most notably the portion of peering relationships that are “handshake” agreements, without written contract. These findings have improved the regulatory environments in which many of us operate our networks. At the time of the 2011 survey, we committed to repeating the survey every five years, so as to provide an ongoing indication of the direction peering trends take. It’s now five years later, so we’re repeating the survey. The survey is global in scope, and our goal is to reflect the diversity of peering agreements in the world; we’re interested in large ISPs and small ISPs, ISPs in Afghanistan and in Zimbabwe, bilateral agreements and multilateral, private and public. Our intent is to be as comprehensive as possible. In 2011, the responses we received represented 86% of all of the world’s ISPs and 96 countries. We would like to be at least as inclusive this time. Privacy: In 2011, we promised to collect the smallest set of data necessary to answer the questions, to perform the analysis immediately, and not to retain the data after the analysis was accomplished. In that way, we ensured that the privacy of respondents was fully protected. We did as we said, no data was leaked, and the whole community benefited from the trust that was extended to us. We ask for your trust again now as we make the same commitment to protect the privacy of all respondents, using the same process as last time. We are asking for no more data than is absolutely necessary. We will perform the analysis immediately upon receiving all of the data. We will delete the data once the analysis has been performed. The Survey: We would like to know the following five pieces of information relative to each Autonomous System you peer with: • Your ASN • Your peer’s ASN (peers only, not upstream transit providers or downstream customers) • Whether a written and signed peering agreement exists (the alternative being a less formal arrangement, such as a "handshake agreement") • Whether the terms are roughly symmetric (the alternative being that they describe an agreement with different terms for each of the two parties, such as one compensating the other, or one receiving more or fewer than full customer routes) • Whether a jurisdiction of governing law is defined • Whether IPv6 routes are being exchanged (this year, we’ll still assume that IPv4 are) The easiest way for us to receive the information is as a tab-text or CSV file or an Excel spreadsheet, consisting of rows with the following columns: Your ASN: Integer Peer ASN: Integer Written agreement: Boolean Symmetric: Boolean Governing Law: ISO 3166 two-digit country-code, or empty IPv6 Routes: Boolean For instance: 42 <tab> 715 <tab> false <tab> true <tab> us <tab> true <cr> 42 <tab> 3856 <tab> true <tab> true <tab> us <tab> true <cr> We are asking for the ASNs only so we can avoid double-counting a single pair of peers when we hear from both of them, and so that when we hear about a relationship in responses from both peers we can see how closely the two responses match, an important check on the quality of the survey. As soon as we've collated the data, we'll strip the ASNs to protect privacy, and only the final aggregate statistics will be published. We will never disclose any ASN or any information about any ASN. We already have more than 8,000 ASN-pair relationships documented, and we hope to receive as many more as possible. We'd like to finish collecting data by the end of September, about two weeks from now. If you’re peering with an MLPA route-server, you’re welcome to include just the route-server’s ASN, if that’s easiest, rather than trying to include each of the peer ASNs on the other side of the route-server. Either way is fine. If all of your sessions have the same characteristics, you can just tell us what those characteristics are once, your own ASN once, and give us a simple list of your peer ASNs. If your number of peers is small enough to be pasted or typed into an email, rather than attached as a file, and that’s simpler, just go ahead and do that. If you have written peering agreements that are covered by non-disclosure agreements, or if your organizational policy precludes disclosing your peers, but you’d still like to participate in the survey, please let us know, and we’ll work with whatever information you’re able to give us and try to ensure that your practices are statistically represented in our results. If you're able to help us, please email me the data in whatever form you can. If you need a non-disclosure, we're happy to sign one. Finally, if there are any other questions you’d like to see answered in the future, please let us know so that we can consider addressing them in the 2021 survey. The question about IPv6 routing in this year’s survey is there because quite a few of the 2011 respondents asked us to include it this time. Please respond by replying to this email, before the end of September. Thank you for considering participating. We very much appreciate it, and we look forward to returning the results to the community. -Bill Woodcock Executive Director Packet Clearing House

1 0

AS paths from NZIX route servers
by Lincoln Reid 08 Sep '16

08 Sep '16

Hi All, Currently ( all? ) the NZIX route servers insert the exchange ASN into routes that are advertised to the route servers. The exchanges that we peer with overseas such as Any2 in LA, Equinix Sydney and NSW-IX plus the new AKL-IX exchange do not insert the exchange ASN into advertisements, so all else being equal the paths from those exchanges are shorter than routes from APE and WIX by one AS hop. There are other NZ networks like us that peer at APE and/or WIX and also peer at overseas exchanges and to have optimal traffic flows with them, we put in one off hacks per network. The least ugly ways of doing this for us work fine but create per peer config that must be maintained. Ideally we can put bilateral peering up at APE and WIX so that the extra AS hop goes away but sometimes bilateral peering is impractical due to the other networks peering policy. I can't think of a reason why putting the exchange ASN in the path helps anyone. Is this just a hangover from the old days? Or is there some legitimate reason that it should be like this? Cheers, -- Lincoln Reid Head of Networks ACSData - AS18119 lincoln(a)acsdata.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201

21 33

IANA AS Numbers registry update
by Paula Wang 08 Sep '16

08 Sep '16

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following block to LACNIC in September 2016: 265629-266652 Assigned by LACNIC 2016-09-08 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, Paula Wang IANA Specialist ICANN

1 0

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 01 Sep '16

01 Sep '16

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ Kind regards, Selina Harrington IANA Senior Specialist ICANN

1 0

Security clearance under TICSA
by Juha Saarinen 14 Aug '16

14 Aug '16

Thought I should pass on these somewhat partisan tweets: https://twitter.com/norightturnnz <https://twitter.com/norightturnnz> To those who haven’t seen them already. Full text of the bill here: http://www.legislation.govt.nz/bill/government/2016/0158/latest/DLM6921310.… <http://www.legislation.govt.nz/bill/government/2016/0158/latest/DLM6921310.…> Would be interested in comments on this, if it applies or not, and other things. Cheers — Juha

3 2

Call for Presentations - DNS-OARC 25th Workshop, Oct 2016 [Deadline Extended]
by Sebastian Castro 01 Aug '16

01 Aug '16

The DNS-OARC 25th Workshop will take place in Dallas, Texas during October 15th and 16th 2016, the Saturday and Sunday before NANOG68. To attract the best DNS minds, DNS-OARC is requesting proposals for presentations, with a preference for Resolver's Operations experiences, including running DNSSEC validating resolvers. This workshop intends to build from previous strong DNS-OARC workshops, where both operational content and research are welcome. All DNS-related subjects are accepted. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. A time-slot will be available for lightning talks (5-10 minutes) on Sunday October 16th, for which submissions will be accepted during October 15th on a first-come first-served basis. Workshop Milestones * 15th June 2016, Call for Presentations posted and open for submissions * 21st August 2016, Deadline for submission * 1st September 2016, Final Program published * 10th October 2016, Final deadline for slideset submission Details for presentation submission will be published here: https://indico.dns-oarc.net/event/25/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To ensure the quality of the workshop, submissions should include slides. Draft slides are acceptable on submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

IANA AS Numbers registry update
by Selina Harrington 29 Jul '16

29 Jul '16

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to RIPE NCC: 64396-64495 Assigned by RIPE NCC 2016-07-29 204288-205211 Assigned by RIPE NCC 2016-07-29 205212-206235 Assigned by RIPE NCC 2016-07-29 206236-207259 Assigned by RIPE NCC 2016-07-29 The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en The 16-bit AS Number pool has now been exhausted. Future allocations will be made from the 32-bit pool. You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml Regards, Selina Harrington IANA Senior Specialist ICANN

1 0

Fwd: [AusNOG] AusNOG 2016 programme and initial call for lightning talks
by Mark Prior 26 Jul '16

26 Jul '16

In case people are interested in heading across the ditch for AusNOG in September. Mark. -------- Forwarded Message -------- Subject: [AusNOG] AusNOG 2016 programme and initial call for lightning talks Date: Tue, 26 Jul 2016 12:29:24 +0930 From: Mark Prior <mrp(a)mrp.net> To: ausnog(a)lists.ausnog.net <ausnog(a)lists.ausnog.net> Hello, The AusNOG web site has now been updated with the AusNOG 2016 programme. See <http://www.ausnog.net/events/ausnog-2016> for more details on the programme and abstracts for most of the presentations. As you will notice this year we will again be having a short lightning talk session. Anyone registered to attend AusNOG is welcome to submit a proposal to <organisers(a)ausnog.net> by 29 August 2016. A lightning talk is a short presentation on topics that are either too short, too timely or too preliminary to include on the general agenda, or even just something to stir up some discussion. There is no requirement for slides. As we tried to cram in as many presentations as possible this year time for lightning talks is limited and so we may need to restrict them to 5 minutes (or just run late :-) The organisers would like to especially encourage people who haven't spoken at an AusNOG before to consider having a go. Kind Regards, Mark Prior (For the AusNOG Board) _______________________________________________ AusNOG mailing list AusNOG(a)lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog

1 0

Microsoft APE port going into maintenance mode today at 2pm (NZT)
by Peter Tobin 25 Jul '16

25 Jul '16

Sent on behalf of Microsoft: Hello Auckland Peering Exchange Members, Microsoft will be performing maintenance on our connection into the exchange today, Tuesday 7/26 at 2pm local. You will see your sessions to AS 8075 drop while we complete our work. We will do our best to minimize impact. Thank you for your patience and thank you for peering with Microsoft. Microsoft AS8075 peering(a)microsoft.com<mailto:peering(a)microsoft.com>

1 0

Re: [nznog] Perth to Singapore link cut
by Regan Murphy 21 Jul '16

21 Jul '16

Would affect traffic to the Microsoft datacenters in Singapore and Hong Kong, think we have some bw on that leg. Alternate routes via JPN or Guam are much slower ☹ Sent from my Windows 10 phone From: Don Stokes<mailto:don(a)daedalus.co.nz> Sent: Friday, 22 July 2016 5:05 PM To: NZNOG(a)list.waikato.ac.nz<mailto:NZNOG(a)list.waikato.ac.nz> Subject: [nznog] Perth to Singapore link cut I just got a note from Vocus indicating a failure in the Perth to Singapore link. Hasn't had too much impact - the Japan based M.root-servers.net is showing a longish RTT routing via California (going from ~205ms to ~265ms). Not sure if it affects anyone in NZ other than Vocus-connected sites. Looks like the cut occurred around 14:53 today (NZST). -- don _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

Perth to Singapore link cut
by Don Stokes 21 Jul '16

21 Jul '16

I just got a note from Vocus indicating a failure in the Perth to Singapore link. Hasn't had too much impact - the Japan based M.root-servers.net is showing a longish RTT routing via California (going from ~205ms to ~265ms). Not sure if it affects anyone in NZ other than Vocus-connected sites. Looks like the cut occurred around 14:53 today (NZST). -- don

1 0

Trying to locate a cell device of the coast of Otago
by Travis Baird 20 Jul '16

20 Jul '16

Hi everyone. I am posting here as a last resort and this isn't really relevant to to this group, but more than anything I am hoping someone here may have some more knowledge about cellular technology than me. I have a customer that has lost a fairly expensive Buoy off the cost of Otago and it's GPS has stopped working. Vodafone have confirmed they are still seeing it connected to their cell tower (2G only) but the Vodafone helpdesk people aren't particularly helpful when we start asking them about options for finding a rough location at sea so we have an idea where to look for it. Does anyone know if it's possible to triangulate a location of a cellular device these days? Is there a cutoff distance from the tower that the device will no longer be able to connect (e.g. if there is this helps narrow the search area at least)? Does anyone have an contact details for someone at VF that might be able to help? If anyone has any info that might help, please contact me off list. Thanks in advance. Regards -- Travis Baird | Managing Director Unifone NZ ltd <http://unifone.net.nz> a. 7 Kitchener St, Dunedin <https://www.google.co.nz/search?q=7+kitchener+st+dunedin> e. travis(a)unifone.net.nz <mailto:travis(a)unifone.net.nz> m. 029 763 8911 <tel:+64297638911> t. 03 974 8233 <tel:+6439748233>

7 7

A Leap Second will be added at 2016/12/31 23:59:60 UTC (Security=UNCLASSIFIED)
by HENDERSON MIKE, MR 20 Jul '16

20 Jul '16

FYI/A A Leap Second will be added to the world's clocks at 2016/12/31 23:59:59/60 UTC. Owing to the fortuitous operation of the rotating globe, this will happen at lunchtime NZ Time (noon or 13:00, depending on how NZ Summer Time works) on New Year's Day 2017, so will more likely affect our post-prandial nap than interrupt our New Year revels Details below sig block. Happy New Year 2017 :) Mike ______________________________ Mike Henderson Manager Information Systems Policy, Policy & Plans group, CIS Branch New Zealand Defence Force DDI: +64 4 496 0186 | Mobile: +64 21 243 8183 www.nzdf.mil.nz <http://force4nz.mil.nz/> ============================================================ Reformatted from https://datacenter.iers.org/web/guest/eop/-/somos/5Rgv/latest/16 INTERNATIONAL EARTH ROTATION AND REFERENCE SYSTEMS SERVICE (IERS) SERVICE INTERNATIONAL DE LA ROTATION TERRESTRE ET DES SYSTEMES DE REFERENCE SERVICE DE LA ROTATION TERRESTRE DE L'IERS OBSERVATOIRE DE PARIS 61, Av. de l'Observatoire 75014 PARIS France Tel: +33 1 40 51 23 35 e-mail: services.iers(a)obspm.fr web: http://hpiers.obspm.fr/eop-pc Paris, 6 July 2016 Bulletin C 52 To authorities responsible for the measurement and distribution of time UTC TIME STEP on the 1st of January 2017 A positive leap second will be introduced at the end of December 2016. The sequence of dates of the UTC second markers will be: * 2016 December 31, 23h 59m 59s * 2016 December 31, 23h 59m 60s * 2017 January 1, 0h 0m 0s The difference between UTC and the International Atomic Time TAI is: * from 2015 July 1, 0h UTC, to 2017 January 1 0h UTC : UTC-TAI = - 36s * from 2017 January 1, 0h UTC, until further notice : UTC-TAI = - 37s Leap seconds can be introduced in UTC at the end of the months of December or June, depending on the evolution of UT1-TAI. Bulletin C is mailed every six months, either to announce a time step in UTC or to confirm that there will be no time step at the next possible date. Christian Bizouard Head Earth Orientation Center of IERS Observatoire de Paris, France The information contained in this Internet Email message is intended for the addressee only and may contain privileged information, but not necessarily the official views or opinions of the New Zealand Defence Force. If you are not the intended recipient you must not use, disclose, copy or distribute this message or the information in it. If you have received this message in error, please Email or telephone the sender immediately.

1 0

Large increase in traffic
by Dave Mill 12 Jul '16

12 Jul '16

Hi We're seeing a large increase in inbound traffic levels today. Appears to be coming in both over peering links and internationally. Right now it appears to be Microsoft related. An AKL-IX graph shows it well - http://monitor.akl-ix.nz/cacti/graph.php?local_graph_id=14&rra_id=all Or the MS port: http://monitor.akl-ix.nz/cacti/graph.php?action=view&local_graph_id=137&rra… Does anyone else have more information to add as to what MS patches or similar are causing this? And over what borders this traffic is entering their networks? Cheers Dave

5 4

Huge increase in Spam traffic over the past few days - Domains registered with MelbourneIT?
by Cameron Bradley 12 Jul '16

12 Jul '16

Hi All, Wondering if anyone else has seen the same situation in their environments. Our MTAs are taking an absolute pounding (and as a result I'm not sleeping much!) from a bunch of hosts with PTRs for domains ending in 'eas.com' (ex 'leipai168eas.com', 'attractive7eas.com', 'theevermoreseas.com', 'bajasouleas.com'). All the domains seem to be registered through Melbourne IT to random gmail addresses (which themselves look spammy!) and using cloudns nameservers. There has also been a noted increase in traffic from other domains, but this one stood out to me as a pattern. We've got mitigations in play, but I'd still be interested to see if anyone else was experiencing any noise. Cheers, Cam

1 0

Take the APNIC Survey - Your Views Matter
by Elly Tawhai 06 Jul '16

06 Jul '16

________________________________________________________________________ Take the APNIC Survey - Your Views Matter ________________________________________________________________________ Hi NZNOG Community, The APNIC Survey 2016 is now open. https://survey.apnic.net APNIC runs the survey every two years to ensure it is meeting the needs and wishes of its Members and those who use APNIC services. Your views are extremely valuable to APNIC. The results of the survey help guide the future direction of the organization. The survey will be conducted by independent research organization Survey Matters. The survey is anonymous and no identifying information will be made available to APNIC. The survey closes on 5 August 2016. Early Bird prize draw --------------------- Take the survey by Sunday, 10 July (23:59 UTC +10) to be in the draw for the Early Bird prize of a Microsoft Surface Pro 4 (128GB / Intel Core M3 / 4GB RAM). There are other prizes to be won during the survey period, including an Apple Watch Sport (42mm), so the sooner you complete the survey, the more chances you have to win. Take the APNIC Survey 2016 now! https://survey.apnic.net Thank you for your continued support of APNIC. ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________

1 0

NOC status (was 2Degrees (SNAP) issues at 220 Queen Street this morning)
by Jamie Baddeley 05 Jul '16

05 Jul '16

I think it's a great idea. Would be a good paper/lightning talk from someone at the next NZNOG conference. The key issue is a standard API that network operators could present to an aggregator location like http://www.nznog.org/noc-list and for it to include info that operators need to know and care about. If some sort of API spec was published then at least folks would know what to aim for. Jeez, even a set of twitter handles to aggregate would be a start. But then we'd rely on Timmeh not breaking shit. Anyone up for talking about that sort of stuff in February? Jamie On 5 July 2016 at 14:07, Ian Lewis <Ian.Lewis(a)ultrafast.co.nz> wrote: > Just a thought… What do you folks think about adding “Network Status” page > links to the existing NOC list? http://www.nznog.org/noc-list > > > > Could provide a quick and easy zero-touch way of getting the word out > about network faults without tying up hard-working NOC people with serial > phone calls / emails? > > > > Disclaimer: my company doesn’t actually **have** a Network Status page > yet (working on it), but many on the NOC list do… > > > > Thoughts? > > > > PS Thanks for the idea Jesse Archer. J > > > > *Ian Lewis* > *T* +64 7 850 3841 |* M* +64 27 405 7765 | *E* > ian.lewis(a)ultrafast.co.nz > > > > *From:* nznog-bounces(a)list.waikato.ac.nz [mailto: > nznog-bounces(a)list.waikato.ac.nz] *On Behalf Of *Liam Farr > *Sent:* Tuesday, 5 July 2016 2:01 p.m. > *To:* Tim Hoffman > *Cc:* NZNOG Mailing-List > *Subject:* Re: [nznog] 2Degrees (SNAP) issues at 220 Queen Street this > morning > > > > Indeed shutting down all (flapping) circuits from the affected provider at > that location allowed traffic to traverse alternate paths and carriers and > normal operation to resume. > > > > Unfortunately not all downstream customers choose to buy 100% diverse > services due to cost constraints, and as such are vulnerable to network > interruptions affecting a particular POP or hand over point, this is an > accepted risk they take, but it doesn't make it any less impacting when it > breaks. (I believe you actually built some of the affected non-diverse > circuits back in the day bro). > > > > Sometimes when your shit is on fire, and you don't have enough information > about whats happening, in a communications vacuum it can help to reach out > to the community as someone else may know more than you, and sometimes when > you do that you don't always write the most comprehensive or eloquent > emails as your a little pre-occupied with the issues at hand. > > > > Thankfully the issues are mostly resolved or routed around, although a RCA > is going to take some time. > > > > On 5 July 2016 at 13:39, Tim Hoffman <tim(a)hoffman.net.nz> wrote: > > Sounds like your network is lacking in carrier diversity if they can cause > you that much bother bro > > Sent from my iPhone > > > On Jul 4, 2016, at 6:32 PM, Liam Farr <liam(a)maxumdata.com> wrote: > > Your right Tim, its not the NOC. > > > > At the time the NOC was being uncommunicative, and as a customer I was > left in the dark about a major P1 fault affecting me. > > > > Due to communication difficulties with the NOC and in exasperation as a > customer I decided to post here to see if anyone else was affected, or had > any further information they could provide on the issue, (i.e. is anyone > else affected, I'm trying to find out what the fuck is actually going on), > had the NOC been more communicative at the time I would not have resorted > to posting here. > > > > Subsequently I escalated this to my account manager and then the CTO, and > the flow of communication from NOC to customer has resumed in a > satisfactory manner. > > > > Thanks for your concern. > > > > On 5 July 2016 at 13:22, Tim Hoffman <tim(a)hoffman.net.nz> wrote: > > I wasn't aware that this mailing list was the 2degrees NOC email. > > > > On Mon, Jul 4, 2016 at 5:52 PM, Jesse Archer <jesse(a)fullflavour.co.nz> > wrote: > > We also noticed some issues. > > > > 2Degrees NOC are aware. > > > > > > > > > > *Jesse Archer * > *General Manager *Full Flavour > > *p. *07 577 0099 *ddi*. 07 281 1391 > *s*. Skype "myfullflavour" > *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> > *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> > *a. *Basestation, 148 Durham Street, Tauranga > *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand > > > > On Tue, Jul 5, 2016 at 11:02 AM, Liam Farr <liam(a)maxumdata.com> wrote: > > Hi, > > > > Just wondering if anyone else had issues with services delivered > by 2Degrees (SNAP) at 220 Queen Street this morning from 9AM onwards? > > > > > > > -- > > Kind Regards > > > > > > Liam Farr > > > > Maxum Data > > +64-9-950-5302 > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > https://list.waikato.ac.nz/mailman/listinfo/nznog > > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > https://list.waikato.ac.nz/mailman/listinfo/nznog > > > > > > > > -- > > Kind Regards > > > > > > Liam Farr > > > > Maxum Data > > +64-9-950-5302 > > > > > > -- > > Kind Regards > > > > > > Liam Farr > > > > Maxum Data > > +64-9-950-5302 > ------------------------------ > *Attention:* This e-mail message is intended for the intended recipient > only and it may contain Ultrafast Fibre Limited confidential or legally > privileged information or both. No confidentiality or privilege is waived > or lost if this email has been delivered to the wrong recipient. If you > have received this email in error, please immediately delete it from your > system and notify Ultrafast Fibre Limited. You must not disclose, copy or > relay any part of this correspondence if you are not the intended > recipient. Any views expressed in this message are those of the individual > sender and not Ultrafast Fibre Limited. This email has been checked for > viruses. However, Ultrafast Fibre Limited makes no warranty that this email > or any attachments are free from viruses or other conditions which may > damage or interfere with recipient data, hardware or software. The > recipient relies on its own procedures and assumes all risk of use and of > opening any attachments. > ------------------------------ > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > https://list.waikato.ac.nz/mailman/listinfo/nznog > >

9 8

Office 365
by Ryan Finnesey 05 Jul '16

05 Jul '16

I was hoping to touch base with providers that are offering office 365 or would like to offer office 365. Please ping me off list I have a few questions. Cheers Ryan

1 0

2Degrees (SNAP) issues at 220 Queen Street this morning
by Liam Farr 04 Jul '16

04 Jul '16

Hi, Just wondering if anyone else had issues with services delivered by 2Degrees (SNAP) at 220 Queen Street this morning from 9AM onwards? -- Kind Regards Liam Farr Maxum Data +64-9-950-5302

9 15

Vocus / FX Issues
by Jesse Archer 28 Jun '16

28 Jun '16

Hi, Anyone else having Vocus / FX issues this evening? *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

6 6

Fw: [AusNOG] IPAM/DCIM - NetBox
by Michael Fincham 28 Jun '16

28 Jun '16

Hi folks, For those not also on AusNOG - we've been having a play with this today, and enjoying it considerably more than certain previous IPAM and DCIM solutions. About half of AusNOG seems to have turned up in the IRC channel, #netbox on Freenode. See you there. -Michael Begin forwarded message: Date: Tue Jun 28 14:07:32 EST 2016 From: Peter Carstairs <peter.carstairs+ausnog(a)gmail.com> To: ausnog(a)lists.ausnog.net Subject: [AusNOG] IPAM/DCIM - NetBox Hi noggers, Long time listener, first time caller. Thought people still use excel spreadsheets as their IPAM would find NetBox interesting and useful. https://github.com/digitalocean/netbox There's a live demo at http://netbox-demo01.packetlife.net/ username:admin password:demo Cheers, Pete

2 2

Smart hands requests
by Michael Lim 28 Jun '16

28 Jun '16

Hi Guys, We're looking for someone to provide us with smart hands assistance (rack, stack and remote console) around Auckland and Wellington. Just wondering if anyone here could help us out with some recommendations. Many Thanks Mike

1 0

NZNOG17 to be held in Tauranga
by Jamie Baddeley 26 Jun '16

26 Jun '16

Hi Folks, On behalf of the Trustees, I'm very pleased to announce that from the 23rd-27th of January 2017 the conference will be held in the Bay of Heaps, or more specifically, Tauranga. The venue is http://www.trinitywharf.co.nz - A couple of the trustees have visited the venue and they report it is a great spot. I know I'm looking forward to seeing you all there. I encourage all of you that are planning on going to book accomodation now. Book early and book often. We'll have more information up on the website soon about accomodation options. We'll let you know when that's up. I'll say it again, book now. At the venue, down the road, your mates place, whatever - it's the Bay of Plenty in January. You get the idea. For those of you out there seeking to sponsor this conference, then please get in touch with us via sponsorship(a)nznog.org (subject: sponsor)- we'd love to hear from you. For our good friends and sponsors from previous years, I'll be getting in touch with you next week. As always we sincerely appreciate your support. Now that we've got the venue sorted out we'll be sorting out registrations and all the rest of it which brings me to: --------- *Program Committee:* Once again we'll also need to assemble a program committee. Eligible PC candidates are those who have attended NZNOG conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of NZNOG conferences. PC members are expected to work actively to solicit content for the event and review submissions for technical merit. What the PC do and come up with is the most important thing for the whole conference. If you are interested in joining the PC send a brief note to "trustees at nznog.org". The note should include affiliation (if any) and contact details, and a brief description of why you would make a good addition to the PC. PC members receive complimentary registration for the event. ------------ Finally, can I just add that in what seems to be an ongoing climate of consolidation and acquisition, now is the time for all operators to get together to discuss what smart new things need to happen to keep moving the packets faster and better. There is always a better way. Cheers Jamie Baddeley on behalf of the NZNOG Trust.

6 7

Re: [nznog] Do people even read these? Re: BGP Update Report
by Geoff Huston 18 Jun '16

18 Jun '16

> On 19 Jun 2016, at 6:05 AM, Mikael Abrahamsson <swmike(a)swm.pp.se> wrote: > > On Fri, 17 Jun 2016, cidr-report(a)potaroo.net wrote: > >> >> TOP 20 Unstable Prefixes >> Rank Prefix Upds % Origin AS -- AS Name >> 1 - 202.65.32.0/21 28086 0.8% AS10131 -- CKTELECOM-CK-AP Telecom Cook Islands, CK >> 2 - 110.170.17.0/24 21868 0.7% AS134438 -- AIRAAIFUL-AS-AP Aira & Aiful Public Company Limited, TH >> 3 - 123.231.192.0/24 21562 0.7% AS133841 -- IDOLA-BROADBAND-AS-ID INDONESIA BROADBAND ACCESS - ANYWHERE, ID >> 4 - 93.181.192.0/19 20895 0.6% AS13118 -- ASN-YARTELECOM Verhnevolzhsky branch, RU >> 5 - 123.231.206.0/24 19170 0.6% AS133841 -- IDOLA-BROADBAND-AS-ID INDONESIA BROADBAND ACCESS - ANYWHERE, ID >> 6 - 123.231.193.0/24 19082 0.6% AS133841 -- IDOLA-BROADBAND-AS-ID INDONESIA BROADBAND ACCESS - ANYWHERE, ID >> 7 - 195.128.159.0/24 15455 0.5% AS56636 -- ASVEDARU , RU >> 8 - 192.254.88.0/24 15452 0.5% AS21859 -- ZNET - Zenlayer Inc, US >> 9 - 185.11.121.0/24 14957 0.5% AS202105 -- DSP-AS , SA > > Everyone of these prefixes have managed to average one update per 40 seconds during a week, or worse. How is that even possible? Yes, I know we don't generally have dampening anymore, but geez, that's a lot of updates. > In the case of Cook Islands Telecom the problem is not directly with them - its their one-up upstream Spark NZ (AS4648) who appears to be flicking this route across a number of transit upstreams (http://bgpupdates.potaroo.net/cgi-bin/per-prefix?prefix=202.65.32.0.21) Geoff

1 0

Call for Presentations - DNS-OARC 25th Workshop, Oct 2016
by Sebastian Castro 16 Jun '16

16 Jun '16

The DNS-OARC 25th Workshop will take place in Dallas, Texas during October 15th and 16th 2016, the Saturday and Sunday before NANOG68. To attract the best DNS minds, DNS-OARC is requesting proposals for presentations, with a preference for Resolver's Operations experiences, including running DNSSEC validating resolvers. This workshop intends to build from previous strong DNS-OARC workshops, where both operational content and research are welcome. All DNS-related subjects are accepted. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. A timeslot will be available for lightning talks (5-10 minutes) on Sunday October 16th, for which submissions will be accepted during October 15th on a first-come first-served basis. Workshop Milestones * 15th June 2016, Call for Presentations posted and open for submissions * 14th August 2016, Deadline for submission * 1st September 2016, Final Program published * 10th October 2016, Final deadline for slideset submission Details for presentation submission will be published here: https://indico.dns-oarc.net/event/25/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To ensure the quality of the workshop, submissions should include slides. Draft slides are acceptable on submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

Major fibre cut today
by Jesse Archer 08 Jun '16

08 Jun '16

Hi All, Anyone aware of a major fibre cut today in NZ that may have taken UFB services down for several ISPs? A certain ISP is claiming "all ISPs affected" but we haven't seen any issues with the carriers we use. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

3 2

Anyone got a 100Base-FX SFP?
by Nick Larsen 04 Jun '16

04 Jun '16

Hi all, Just wondering if anyone has a Cisco GLC-GE-100FX SFP they want to sell or give away. If so, please contact me off list. Regards, Nick Larsen

1 0

IANA AS Numbers registry update
by Selina Harrington 02 Jun '16

02 Jun '16

Hi, The IANA AS Numbers registry was updated on 25 May 2016 to reflect the allocation of the following blocks to APNIC: 64297-64395 135581-136505 136506-137529 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington IANA Senior Specialist ICANN

1 0

Consulting: IPSec VPNs to multiple customer networks
by Christoph Berthoud 01 Jun '16

01 Jun '16

Hi All, We are looking for any network consultant/company who can assist with the following. Replies off-list please :) We have several customers who we have established site-to-site IPSec VPN tunnels with to provide them with remote support (I hate this concept but I have to go with it). Some of these connections are just single sites with a single network, others are to a customer's head office with multiple sites/networks behind. As we onboard more customers, terminating all of these VPNs onto our office firewall/router is becoming a headache. We regularly make changes to our firewall/routing and frequently run into issues affecting the VPN tunnels. We also have complex NATing for customers that have overlapping subnets. I want to remove our office firewall/router as the terminating endpoint of these VPN tunnels. My thought is to build a 'hub and spoke' topology, using a centralised hub router to terminate all of the customer VPN tunnels, and our office then also becoming a spoke. Now changes to my office network have no impact on the VPN setup, and vice-versa. If this is something you, your company or someone you can refer has experience in, I would very much like to hear from you. If you have had this problem in the past and have any other clever solutions, I would also love to hear from you! Happy long weekend! -- Thanks Christoph Berthoud

2 1

IPv6 residential deployment survey
by Elly Tawhai 24 May '16

24 May '16

[On behalf of Consulintel] Hi NZNOG Community, Jordi Palet of Consulintel, who is actively promoting IPv6 globally and has participated at various APNIC events, is running a short survey on IPv6 home/residential access. If you work for an ISP that provides residential IPv6 access, or a customer of such an ISP, please feel free to participate in this survey at http://survey.consulintel.es/index.php/175122 Thanks, Elly

1 0

NZNOG 2017 Information
by Daniel Millar 24 May '16

24 May '16

Hi, Just wondering what the timeline is for information being released in regards to location etc? Best Regards, Daniel Millar - Sales & Technical Engineer Phone: +64 3 741 1339 | Fax: +64 3 327 3193 | Email: daniel.millar(a)gowifi.co.nz<mailto:daniel.millar(a)gowifi.co.nz> | www.gowifi.co.nz<http://www.gowifi.co.nz/> [cid:image001.png(a)01D1B6A2.6C3BF180]

3 2

APNIC 42/bdNOG6 Conference - Call for Papers
by Elly Tawhai 22 May '16

22 May '16

_______________________________________________________________________ APNIC 42/bdNOG6 Conference - Call for Papers _______________________________________________________________________ Hi NZNOG Community, The APNIC 42/bdNOG6 Program Committee is now seeking presentations for the APNIC 42/bdNOG6 Conference in Dhaka, Bangladesh. We are looking for content that would suit technical conference sessions, lightning talks and Birds of Feather (BoF) sessions. Key Dates --------- The timeline for submissions is: Call for Papers Opens 19 May 2016 First Round Paper Acceptance 11 July 2016 Final Deadline for Submissions 14 September 2016 Final Round Paper Acceptance 21 September 2016 Final Slides Received 01 October 2016 Submitting Proposals -------------------- https://conference.apnic.net/42/program#call-for-papers Program Material ---------------- The technical sessions at APNIC 42/bdNOG6 will include presentations relevant to Internet operations and technologies. The following topics are examples of possible areas of interest. - IP core network routing, switching and operations - IPv6 deployment and transition technologies - Access and transport network including 3G/LTE, WiMax, FTTx/GPON, STM, MPLS etc - Wi-Fi and SP Wi-Fi technologies - Content & service delivery (Multicast, Voice, Video, Telepresence, Gaming) and cloud computing - DNS / DNSSEC, Mail, WWW etc - Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) - Firewall and network security BCPs - Internet policy (Security, Regulation, Content Management, Addressing, etc) - IXPs and Peering - Research on Internet operations and deployment - Academic research on Internet technologies - IP telephony and voice - Internet operation and application in the Asia Pacific region perspective - ISP and Telco backbone network operation - Software defined networking and network function virtualization - Internet of Things architectures, standards, services, security, addressability, and manageability If you have any other ideas or proposals for panel or BoF sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Program Committee: conference(a)apnic.net For more information about APNIC 42/bdNOG6, please visit: https://conference.apnic.net/42 On behalf of: APNIC 42/bdNOG6 Program Committee

1 0

Encouragement for the tech community to submit on the .nz WHOIS review
by Dean Pemberton 22 May '16

22 May '16

Hi All, Wearing my INZ hat here. The Domain Name Commission is currently running a consultation process around the .nz WHOIS policies and InternetNZ would like to encourage people to make submissions on that process. This is especially true of people in the technical and security fields. While I don't want to offer an opinion about the current policies, any of the submissions, or proposals, what I do want to do is to encourage you to read the proposal and submissions and consider if you might like to make a submission of your own on the process. You can see more information at the link below with an outline of a proposed process. https://dnc.org.nz/consultation-whois-review-process If you think that there might be a better process than the one outlined then please put in a submission with your input and if possible details of an alternative process. If you think that the process outlined is appropriate then please consider putting in a submission detailing why you support it. It's important to ensure that both sides are well represented in the submissions being considered. Comments can be sent by email to policies(a)dnc.org.nz, or by post to PO Box 11881 Wellington 6142. Submissions should be received by 7 June 2016. Regards, Dean -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz A better world through a better Internet

1 0

Mikrotik BGP VRF Advise
by Liam Farr 18 May '16

18 May '16

Hi, Im looking for someone to give some architectural advise on setting up VRFs on a Mikrotik for separating out BGP routing table functionally. E.g. Local BGP Peers / Local IX's > Local VRF National Transit BGP Peers > National VRF International Transit BGP Peers > International VRF Then leaking those routes into other VRFs, for example a customer transit VRF containing routes from all three. Is there anyone other there who has done this on a Mikrotik (preferably in production) that might be interested in providing some architectural advise / initial configuration help? Payment in cash / beer / hard liquor / your preferred currency. -- Kind Regards Liam Farr Maxum Data +64-9-950-5302

1 0

Exploit on Ubiquiti AirOS
by Dean Pemberton 16 May '16

16 May '16

Hi All I'm told that the local WISP operator community is dealing with a new worm[1] that exploits Ubiquiti AirOS devices running older firmwares. This could potentially be a lot of devices. http://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-… has ISPs from Spain, Brasil, and the US reporting infections in thelast 24 hours. Versions prior to these are vulnerable: 5.5.11 XM/TI. 5.5.10u2 XW 5.6.2 XW/XM/TI There looks to be some more information here which might or might not be related. https://hackerone.com/reports/73491 If you know anyone who makes use of UBNT AirOS products, now might be a time to give them a nudge. [1] quote from the forums "It's a self-distributing virus, so, once it can "see" neighbour antenas within the same subnet, it attacks the others."

2 1

AS17746 Gone burger
by Simon Allard 05 May '16

05 May '16

Good Morning NZNog. Just a FYI AS17746 is no longer aggregating any of the ex-Orcon IPv4 or Ipv6 subnets. These have been moved to AS9790. Its made our IPV6 uptake stats look a little sad, but that's just how it is. 17746 is still in the AS path for some routes, but the goal is for that to change overtime. Any issues encountered, please sing out Cheers, Si Simon Allard | Senior Network Architect D: 09 550 2790E: Simon.Allard(a)m2group.co.nz M: 020 100 0790W: vocus.co.nz A: PO Box 108-109, Symonds St, Auckland 1150

1 0

IANA AS Numbers registry update
by Selina Harrington 04 May '16

04 May '16

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to ARIN: 395165-396188 396189-397212 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington IANA Senior Specialist ICANN

1 0

Xtra mail issues
by Chris Roberts 18 Apr '16

18 Apr '16

Hi Is there someone that can help with the issue of delayed mail with Xtra / Yahoo. There has been no mail sent to the xtra domain for some days now (like a week) so should there have been any issues it should have resolved. The NZNOG phone number for the NOC ends in Asia with some unhelpful people. We suspect the issue may have been caused by a winery sending a newsletter or a compromised user email address as you do from time to time. The domain that is being rejected is amuri.net I some one can contact me or sam(a)amuri.net or remove the block which would be even better that would be great. Below is the reject message: Action: failed Status: 4.4.2 Diagnostic-Code: X-Postfix; delivery temporarily suspended: lost connection with mx2.tnz.mail.yahoo.com[124.108.96.211] while sending RCPT TO and The mail system <xxxxxxx(a)xtra.co.nz>: delivery temporarily suspended: lost connection with mx2.tnz.mail.yahoo.com[124.108.96.211] while sending RCPT TO Cheers Chris --

1 0

OT: Dodgy Russian port-scanning service / 158.255.5.147 causing high CPU
by Liam Farr 16 Apr '16

16 Apr '16

Hi, Just thought I’d throw this at the list, more of an interest piece than anything. A downstream network noticed today some extra latency on their network, caused by a significant increase in packets / CPU usage on a Mikrotik CCR in the path. At approximately 3:20 am this morning there was an uptick of about 25k PPS on their network, although not a significant increase in the amount of overall traffic (mbps) on the network. After some investigation this afternoon it was found that the additional increase in traffic was coming from 158.255.5.147 which appears to be a Russian web based port scanning service. While the service itself claims not to be malicious, by design it was causing a detrimental affect on the customer network, (increased CPU and increased latency), there is also the question of what the results of the port scan are used for, which I highly doubt is a legitimate purpose... Anyway enjoy your Sunday :) Liam

1 0

InternetNZ briefing criticises proposed new GCSB spying powers
by Dean Pemberton 12 Apr '16

12 Apr '16

Hi NZNOG members, Just a cross post from INZ-members to let you know InternetNZ has done a short briefing on the recent report from the Intelligence & Security review. If you're interested but can't be faffed reading through 180 pages - The InternetNZ one is only 9 (including title page) and covers off a lot of the key issues for the Internet Community - think of it as a useful starter for 10. https://internetnz.nz/sites/default/files/submissions/InternetNZ_Briefing%2… Feel free to let us know if you have questions or things you think we got wrong. Cheers, Dean -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz A better world through a better Internet

1 0

RAD E1 over IP converters
by Richard Naylor 11 Apr '16

11 Apr '16

Having a bit of a clean out here and found a pair of RAD IP-MUX-11 units. They are E1 over IP. Basically they use about 10Mbps to shift an E1 circuit (2 Mbps). One unit has a faulty power supply (5v and 3.5V) but otherwise is good. Free to a good home can be your "home lab" or business - otherwise they go into the recycle bin. Email off list if you're interested will this (de)generate into a series of emails...... Rich

1 0

Re: [nznog] Fiji
by Lesley Longhurst 10 Apr '16

10 Apr '16

Sure. The answers boiled down to two: * ?Fiji Telecom * Talk to Jonathon Brewer I also had a useful phone call from ACS. (We're already in contact with them via other channels) ________________________________ From: Bill Walker <bill(a)wjw.co.nz> Sent: Monday, 11 April 2016 7:50 p.m. To: Lesley Longhurst Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Fiji Hi Lesley, Would you mind posting a summary to the list? Thanks Sent from my Motorola mr1 On 11/04/2016, at 7:35 PM, Lesley Longhurst <Lesley.Longhurst(a)opus.co.nz<mailto:Lesley.Longhurst(a)opus.co.nz>> wrote: Thanks all, I've had a few off-list answers. ________________________________ From: nznog-bounces(a)list.waikato.ac.nz<mailto:nznog-bounces(a)list.waikato.ac.nz> <nznog-bounces(a)list.waikato.ac.nz<mailto:nznog-bounces(a)list.waikato.ac.nz>> on behalf of Lesley Longhurst <Lesley.Longhurst(a)opus.co.nz<mailto:Lesley.Longhurst(a)opus.co.nz>> Sent: Monday, 11 April 2016 3:16 p.m. To: nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> Subject: [nznog] Fiji Hi all, and "beer". Is there someone on the list who has a good understanding of ISPs and internet services in Fiji, or can someone point me at a better source for such info? Lesley Longhurst | Linux Systems Administrator | Opus International Consultants Ltd Phone +64 4 471 7002 | Mobile +64 21 244 3718 | Fax +64 4 473 3017 | Email lesley.longhurst(a)opus.co.nz<mailto:lesley.longhurst(a)opus.co.nz> Level 9, Majestic Centre, 100 Willis Street, Wellington 6011, New Zealand PO Box 12343, Wellington 6144, New Zealand Visit us online: www.opus.co.nz<http://www.opus.co.nz/> _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz<mailto:NZNOG(a)list.waikato.ac.nz> http://list.waikato.ac.nz/mailman/listinfo/nznog

2 2

Fiji
by Lesley Longhurst 10 Apr '16

10 Apr '16

Hi all, and "beer". Is there someone on the list who has a good understanding of ISPs and internet services in Fiji, or can someone point me at a better source for such info? Lesley Longhurst | Linux Systems Administrator | Opus International Consultants Ltd Phone +64 4 471 7002 | Mobile +64 21 244 3718 | Fax +64 4 473 3017 | Email lesley.longhurst(a)opus.co.nz<mailto:lesley.longhurst(a)opus.co.nz> Level 9, Majestic Centre, 100 Willis Street, Wellington 6011, New Zealand PO Box 12343, Wellington 6144, New Zealand Visit us online: www.opus.co.nz<http://www.opus.co.nz/>

1 1

Contacting Microsoft regarding Domain Names
by lennon＠orcon.net.nz 03 Apr '16

03 Apr '16

I tried contacting Microsoft Regarding .kiwi.nz domain a number of times but I have had no response from them and the problem has not been resolved. (This is over multiple years and multiple complaints) (Its only been 4 years) The Problem is.... I own www.kiwi.nz. This shouldn’t actually cause any problems except with bing webmaster tools. (Most other people including Google get it right within a few days/weeks) . Yes at the start I expected a problem but seeing all the bing stats for the thousands of other .kiwi.nz domains isn’t interesting for me. I expect people who own other domains like www.maori.nz and www.geek.nz etc would have the same issue as well maybe but you never know. Craig

3 2

Re: [nznog] Contacting Microsoft regarding Domain Names
by Regan Murphy 03 Apr '16

03 Apr '16

Have you been in touch via support? If so let me know an incident# to chase If not, come back to me privately with a more detailed account of the issue and I’ll see what I can do internally. Cheers, Regan Sent from my Windows 10 phone From: lennon(a)orcon.net.nz<mailto:lennon(a)orcon.net.nz> Sent: Monday, 4 April 2016 1:37 PM To: nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> Subject: [nznog] Contacting Microsoft regarding Domain Names I tried contacting Microsoft Regarding .kiwi.nz domain a number of times but I have had no response from them and the problem has not been resolved. (This is over multiple years and multiple complaints) (Its only been 4 years) The Problem is.... I own www.kiwi.nz. This shouldn’t actually cause any problems except with bing webmaster tools. (Most other people including Google get it right within a few days/weeks) . Yes at the start I expected a problem but seeing all the bing stats for the thousands of other .kiwi.nz domains isn’t interesting for me. I expect people who own other domains like www.maori.nz and www.geek.nz etc would have the same issue as well maybe but you never know. Craig _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

NZNOG Trustees update
by Gerard Creamer 30 Mar '16

30 Mar '16

Hello NZNOG, We have some new Trustees to help us ensure that the NZNOG goodness perpetuates into the future. A big welcome to (in descending alphabetical order by the last letter in their first name) Barry Murphy, Jesse Archer, and Dave Mill. Remember to pass on your [congratulations|commiserations] next time you’re dealing with them. This means that we’re well stocked with Trustees as we prepare for NZNOG 2017. Our full roster is (in ascending numeric order by the second digit in their phone numbers): Jamie Baddeley Gerard Creamer Richard Nelson Dave Mill Jesse Archer Barry Murphy We’re working on venue options now, and will announce something when there’s something to announce. NZNOG is held in the last usable week in January, so that’ll be 23-27 January 2017. A huge thanks to all of the past Trustees - you have all done such fantastic work setting up solid structures and processes (with documentation!) that our jobs are less chaotic than I recall from pre-Trust days. Cheers, Gerard (NZNOG Trustee)

1 0

Fwd: [Akl-ix] It's official NZ IX Inc. Exists!
by Dave Mill 30 Mar '16

30 Mar '16

Hi all Last week there was a formal announcement of our new, community run internet exchange. It hasn't made it to NZNOG yet so passing this along. See below for details. Cheers Dave ---------- Forwarded message ---------- From: Joe Wooller <joe(a)akl-ix.nz> [image: page1image408] [image: page1image576] MEDIA RELEASE 17 March 2016 IAA supports the launch of NZ Internet Exchange Inc as foundation member “Following the overwhelming success of the Auckland Internet Exchange (AKL-IX) trial conducted by the Internet Association of Australia (IAA), operators of IX Australia, we are pleased to announce the launch of the New Zealand Internet Exchange Incorporated (NZIX Inc),” said Chairman Davey Goode. “Through the support of the team at IAA we have developed a member governed, neutral peering exchange which will provide easier and more cost effective interconnects for the internet community of New Zealand. “Moving forward the NZIX Inc committee will take on overseeing the management and growth of the exchange with the ongoing support of IAA.” “As a founding member of NZ-IX Inc we are committed to providing ongoing support to the exchange growth,” said IAA President Tom Berryman. “The development of an independent and neutral peering exchange in New Zealand benefits the internet community in the region by introducing more peering options and services, as well as our existing membership and peering base at home in Australia.” The AKL-IX exchange has been in a trial period for 12 months, and the exchange will commence charging for services from 1 July 2016. We are now inviting all our current peers to sign up as members of NZIX Inc by visiting https://portal.akl-ix.nz/ and ordering the required port size, 1GB or 10GB, both sizes will be charged at $350 NZD per month (excluding GST). NZIX looks forward to the support of our existing peers, and welcomes new peers to contact us to join. For further information please contact peering(a)akl-ix.nz or visit www.akl-ix.nz [image: page1image15568] [image: page1image15728] [image: page1image15888] New Zealand Internet Exchange Incorporated Foundation Members CloudFlare, Inc Connectivity I.T. Full Flavour Ltd Inspire Net Ltd Lightwire Limited Vibe Communications LTD Vocus Pty Ltd Internet Association of Australia Inc. Committee Members Davey Goode, Vibe Communications LTD (Chairman) Joseph Wooller, Internet Association of Australia Inc. (Secretary) Petar Nikolich, Internet Association of Australia Inc.(Treasurer) Chris Browning, Lightwire Limited Dave Mill, Inspire Net Ltd Tom Paseka, CloudFlare, Inc Ends Media Contact Kellie Ireland, Executive Officer, IAA Mobile| 0417 913 059 Email | kellie(a)waia.asn.au Technical Enquiries Joe Wooller, IX-Australia Technical Manager Mobile | 0412 005 457 Email | joe(a)internet.asn.au [image: page2image8208] [image: page2image8368] About the Internet Association of Australia Inc The Internet Association of Australia Inc (IAA) is a member-based association representing the Internet community. Founded in 1995, as the Western Australian Internet Association (WAIA), the Association changed its name in early 2016 to better reflect our membership growth. IAA representatives are available for comment on a range of issues regarding the internet including, but not limited to, internet infrastructure, internet technologies and the use of the Internet in business. IAA is keen to provide independent, balanced information and impartial advice for Internet users including businesses, parents, kids, schools, seniors, the media, law enforcement and mobile users. For more information on IAA please visit our website www.internet.asn.au About IX-Australia and Peering IX-Australia is a service provided by the Internet Association of Australia to Corporate members. It is the longest running and lowest cost Internet Exchange in Australia. The Queensland (QLD-IX), Victorian (VIC-IX), South Australian (SA-IX), New South Wales (NSW-IX) and Australian Capital Territory (ACT-IX) services have built on the success of the WA Internet Exchange (WA-IX). IAA has also established a peering point in New Zealand (AKL-IX). The peering service provides direct, low latency and high speed connectivity between members at a fraction of the cost of using a typical upstream provider. The members of the exchange point benefit by lowering their operating costs while providing a better internet experience to their end customers. IAA highly recommends peers join PeeringDB to facilitate the exchange of information related to peering. Visit www.peeringdb.com for more information. [image: page3image13680] [image: page3image13840]

2 1

apricot 2016 videos
by Joel van Velden 29 Mar '16

29 Mar '16

Hi list, I see there are videos of the last apricot conference up on youtube. I'm going to be stuck on a plane for 24 hours and want to downloaded them all. Does anyone know if these videos are available without having to use a youtube scraper? -- Regards, Joel van Velden +64211083357

4 3

Reminder of the L-Root IPv6 address renumbering
by Terry Manderson 21 Mar '16

21 Mar '16

(again, apologies for using my personal address - but it's subscribed here) This is reminder that there is a scheduled change to the IPv6 addresses for the L-Root server, that will take effect on March 23, 2016. The new IP addresses for the L.ROOT-SERVERS.NET will be: 199.7.83.42 2001:500:9f::42 Please remember to update your root “hints” files on your DNS infrastructure. (as per : http://www.dns.icann.org/2015/11/05/l-root-ipv6-renumbering/ ) Cheers Terry

1 0

fx4.wix.nzix.net (202.7.1.176) looking a bit busted
by Michael Fincham 15 Mar '16

15 Mar '16

Hi folks, Vocus is looking in to this however if you're peered with the WIX route servers you might want to check what prefixes you're learning with 202.7.1.176 as the next hop - we're seeing packet loss across the WIX to that peer. fx3.wix.nzix.net (.175) looks to be fine still :) -- Michael Fincham

1 0

Enable Fibre Fault
by Laurence Bullivant 13 Mar '16

13 Mar '16

Someones having a bad day? As always we want pictures! http://www.enable.net.nz/about-enable/news-and-media-centre/network-outage-… NETWORK OUTAGE NOTIFICATION – 14 March 2016 Enable has experienced a major network outage impacting a significant number of customers across parts of Christchurch, and in Rangiora, Kaiapoi and Woodend. The outage is a result of a third-party contractor damaging underground cable. Enable is working to understand the extent of the outage – including reach and number of customers impacted, and the timeframe for resolution. Repair resources have been mobilised. Enable is working closely with its retail service providers to provide them with further details as these become available. -- Laurence Bullivant laurence(a)bullivant.co.nz 021 909 906

3 2

SCCN Issue
by Tristram Cheer 11 Mar '16

11 Mar '16

Hi All, Anyone else being impacted by the SCCN fault? Being told it’s impacting multiple clients. Cheers

5 5

L-Root IPv6 address renumbering
by Terry Manderson 10 Mar '16

10 Mar '16

Hi All, (wearing a different hat, and using this email address for convenience as it is subscribed here) This is advance notice that there is a scheduled change to the IPv6 addresses in the Root Zone for the L root-server, also known as L.ROOT-SERVERS.NET, which is administered by ICANN. The current IP addresses for the L.ROOT-SERVERS.NET service are: 199.7.83.42 2001:500:3::42 As of March 23, 2016, the new IP addresses for the L.ROOT-SERVERS.NET service will be: 199.7.83.42 2001:500:9f::42 The change will be implemented on the root zone on March 23 2016, however the new address is already operational. We encourage DNS infrastructure operators to update their DNS resolvers root "hints” file. New hints files will be available at the following URLs once the change has been formally executed on March 23, 2016: • http://www.internic.net/domain/named.root • http://www.internic.net/domain/named.cache Cheers Terry

1 0

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 02 Mar '16

02 Mar '16

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… Kind regards, Selina Harrington IANA Senior Specialist ICANN

2 1

New survey report published: The regulatory conditions of internet interconnection
by Uta Meier-Hahn 01 Mar '16

01 Mar '16

Hi, A couple of months ago, I asked you to share your experiences with regards to public regulation of internet interconnection in a survey. Many networkers from around the globe participated. Thank you! The report has now been published. I’m including the executive summary below. The full paper can be downloaded at <http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2740312>. Feel free to share this link wherever you see fit. Thanks again for providing your highly valuable input. I will be happy to hear what you think about the results. Best wishes, Uta # Exploring the regulatory conditions of internet interconnection ## Executive summary Network interconnection is a central feature of the internet that has been subject to only little formal regulation. However, local public regulation is starting to emerge – be it through disclosure regulations, mandatory peering or licensing terms. Due to the networked nature of the internet, local rules may acquire a global scope. This report explores internet interconnection professionals’ encounters with public regulation and it provides an initial overview about how this regulation affects internet connectivity. On the basis of a convenience sample of 163 survey submissions, the following has been found: * Nine out of ten kinds of regulation presented to the participants have been encountered by more than half of them. This result gives reason to revisit the widespread notion that internet interconnection is an unregulated space. 66% of the participants have encountered a regulatory authority that imposes its own technical or operational standards. Moreover, imposition of regulatory standards was regarded to be the most influential on internet interconnection practices, together with competition laws (both 67%). * Local regulation of internet interconnection creates a tension between the regulated and the unregulated space in the internet. In order to overcome the normative difference, network operators need to make an extra effort. The degree to which network operators are affected by local regulation depends on a networks’ structure rather than on its size. Local regulation raises more difficulties for the kinds of infrastructural innovations that depend on having many points of presence. * For networkers, public regulation of internet interconnection is relevant in three thematic domains: 1) in the economies of internet interconnection, 2) in engineering and operations, and 3) in the modes of governance. * Overarching observations note that public regulation of internet interconnection contributes to a formalisation of the otherwise very informal sector. It also shines a spotlight on how networks are categorised and are thereby “prepared” for the application of regulation. Further, various examples highlight how regulatory authorities co-opt internet infrastructure for new policy purposes that were previously not understood as central to internet operations, e.g., data retention. * Local networkers value the presence of international network operators not only as potential peering partners but also as mediators for know-how about best practices and advanced modes of internet interconnection. * Networkers are very critical about regulations that contradict engineering principles. The most accepted forms of regulation also apply in other societal spheres: basic rights for citizens, e.g., for broadband, and competition regulation. — Uta Meier-Hahn | Doctoral Researcher Alexander von Humboldt Institute for Internet and Society Französische Straße 9 | 10117 Berlin Phone +49 30 200 760-82 | http://www.hiig.de/en

1 0

nad.org.nz website content = default pages
by Pete Mundy 28 Feb '16

28 Feb '16

Hello NOGers, Does anyone happen to know contact information we could use to get in touch with the people who run the Number Administration Deed website, nad.org.nz? Is it the TCF themselves, or a subbie? The site content has all gone missing with the various pages now reporting default-install messages along the lines of 'Welcome to SilverStripe! This is the default homepage'. Even the 'contact us' page has a similar message. Hence the request here for contact details :) Would appreciate a pointer from anyone who can point me in the right direction for a maintainer contact. Pete Mundy

2 3

WXC / VNGS Down - Anyone out there????!
by Liam Farr 26 Feb '16

26 Feb '16

Hey, Anyone out there from WXC / VNGS? All my SIP trunks have been up and down over the last hour.... Their website is down... No one is answering the NOC phone, (when it rings... now it seems to be going straight to 404 / disconnected). No one is answering the NOC email address, their main 0800123456 seems up and down as well, and waiting in the support queue just ends up in a disconnect. -- Kind Regards Liam Farr Maxum Data +64-9-950-5302

2 1

FYI Auckland Thursday Night Curry at 7pm tonight 25 Feb
by Lin Nah 24 Feb '16

24 Feb '16

HI all Just a note to those of you in town for Apricot 2016. Hope APRICOT is going well for you. Auckland Thursdaynight curry is on at 7pm 25 February 2016 in. Mt Eden (not in CBD). All are welcome though there may be space constraints. We should be able to accommodate about 30 people. Location: Nite Spice Mt Eden. Address: 407 Mt Eden Rd, Mt Eden Village If you haven't been there before, we are usually put in the back room. So walk in to look for us. Menu: http://www.zomato.com/auckland/nite-spice-1-mount-eden/menu Location: City end of Mt Eden Village. A few doors away from RAD (what used to be Sitar). Google Map: http://maps.google.com/maps/place?cid=1836108314118101884 Bus Route No: 274 No doubt there'll be post-curry coffee at one of the cafes nearby. Would appreciate knowing if you'd be there or not FB event https://www.facebook.com/events/183741448664126/ Thanks regards lin

1 0

NZWIP contact? [UNCLASSIFIED]
by Peter Gent 10 Feb '16

10 Feb '16

Hi, Could someone on the NZWIP committee please contact me off list if possible? Thanks Peter Peter Gent PLANNING ANALYST Radio Spectrum Management Commerce, Consumers and Communications Branch, Building, Resources and Markets Group Ministry of Business, Innovation & Employment peter.gent(a)mbie.govt.nz | DDI: +64 4 462 4279 | Ext 44279 Free Phone: 0508 RSM INFO (776 463) | Website: www.rsm.govt.nz 15 Stout Street, PO Box 2847, Wellington, New Zealand www.govt.nz - your guide to finding and using New Zealand government services Any opinions expressed in this message are not necessarily those of the Ministry of Business, Innovation and Employment. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer.

1 0

Address book leak - from where? (was Re: Fw: new important message)
by Nicholas Lee 08 Feb '16

08 Feb '16

Anyone figure out the source/method of these address book leaks? See: http://wardinewrock.blogspot.co.nz/2015/09/email-sent-under-my-name-not-fro… Nicholas

2 1

Fw: new important message
by neil＠underground.geek.nz 08 Feb '16

08 Feb '16

Hello! New message, please read <http://123adreszoeken.nl/waiting.php?1> neil(a)underground.geek.nz

1 0

Spark....please enable ripe.net
by Brad Hooper 26 Jan '16

26 Jan '16

Morning, Could someone from Spark please ping me off list. Your DNS servers haven't been resolving ripe.net domains for the last 3 months. Your helpdesk is telling me that RIPE has been shutdown because they cannot ping them. Thanks, Brad

3 3

Freelance support for Cisco PBX
by Jesse Archer 21 Jan '16

21 Jan '16

Morning, We've got a client in Auckland with a Cisco UC560 PBX. This isn't a unit we're familiar with. They'd like to change SIP providers which will involve changes to their current public WAN address on the unit and other settings. Is there someone who would be willing to assist with this? Send replies off-list please. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

Fw: new important message
by neil＠underground.geek.nz 20 Jan '16

20 Jan '16

Hello! New message, please read <http://esportskart.com/age.php?1qqky> neil(a)underground.geek.nz

1 0

Sneak Peak at some of the 2016 APRICOT programme.
by Dean Pemberton 19 Jan '16

19 Jan '16

Hey everyone. There must be some perk to having two Kiwis as the co-chairs of the APRICOT programme committee. All I could think of was that I can give you guys a look at the titles of some of the talks we've accepted before they make it up on the website. So here you go. There's more coming in as well as more already submitted that we're working to put the final touches to. So no more excuses, If you needed a reason for your boss, choose some of those and register here: https://2016.apricot.net/register If you know anyone who works for one of our telcos.... I can't recommend the "IPv6 in Mobile Networks" tutorial by Sunny Yeung(a)Telstra enough. He's a great speaker and he's got all the experiences from an organisation who has actually gone down the track of doing something here. If anyone got an issue with not being able to register for any reason, then email me personally and lets have a chat. Don't forget, there's no NZNOG this year, so this is basically it =) Dean CONFERENCE TALKS 'OpenFlow: What is it Good For?' - Pete Moyer(a)Brocade 'Virtualisation For Network Testing & Staff Training' - Philip Smith(a)Network Startup Resource Center 'EDNS (in)Compatibility: Adventures in Protocol Extension' - Eddy Winstead(a)ISC 'Building a Small DC' - Karl Brumund(a)Dyn 'Recent Network Trends in Asia and Oceania' - Cody Williams(a)TeleGeography 'Next Generation Network Architectures' - Sunny Yeung(a)Telstra Corporation Limited 'BGP in 2015' - Geoffrey Huston(a)APNIC 'IPv6 Performance' - Geoffrey Huston(a)APNIC 'New Zealand Broadband Map' - Jay Daley(a)NZRS 'prefix hijacked' - Yoshinobu Matsuzaki(a)IIJ 'SoftBank Global AS migration practice' - Hirokazu Taira(a)SoftBank 'Why I should Model my Network' - Jeff Young(a)Juniper Networks 'Making the best of satellite links to Pacific Islands' - Ulrich Speidel(a)University of Auckland 'DDoD Mitigation using BGP Flowspec' - Justin Ryburn(a)Juniper Networks 'Bit Indexed Explicit Replication (BIER)' - Greg Shepherd(a)Cisco 'Top Misused ASNs' - Anurag Bhatia(a)Hurricane Electric TUTORIALS 'IPv6 in Mobile Networks' - Sunny Yeung(a)Telstra Corporation Limited 'NETCONF/YANG' - Shishio Tsuchiya(a)Cisco Systems G.K. 'BGP Multihoming Techniques' - Philip Smith(a)APIA 'BGP Techniques for Network Operators' - Philip Smith(a)APIA 'Segment Routing: A Tutorial' - Paresh Khatri(a)Alcatel-Lucent

1 0

Thanks for the suggestions
by Lloyd Parkes 19 Jan '16

19 Jan '16

Hi all, Thanks for your suggestions. About half of you said Juniper and the other half of you recommended a wide variety of good solid choices. Particularly valuable was the reminder to use eBay, which is actually reliably useful these days. I’ve bought a Juniper and I’m keeping your other suggestions in mind for the future. Cheers, Lloyd

1 0

Suggestions for a lab switch?
by Lloyd Parkes 13 Jan '16

13 Jan '16

Hi all, I’ve run out of port capacity in my lab, so I need another switch. Since it’s a lab, I want a brand of switch that I don’t already have so that I can do more testing. Since it’s a brand I don’t already have, I don’t really know what to get. What I want/need is: managed (somehow, SNMP at least) gigabit (I have lots of 100Mb thanks) rack mount around $600 (so, an SMB class switch I guess) ~24 ports What I don’t want/need (I have these already): obsolete Cisco IOS devices Mikrotik Netgear D-Link a lemon PoE Please reply off list with suggestions of devices to either buy or avoid. Thanks, Lloyd

1 0

a routing loop??
by Victor Zhong 07 Jan '16

07 Jan '16

Afternoon there, feels like there is an ongoing rooting loop somewhere between Auckland and Hamilton?ideas? [image: Inline images 2] -- Cheers, Victor Xin ZHONG 021 026 35239

3 3

Vocus Transit Outage
by Jesse Archer 02 Jan '16

02 Jan '16

Morning, Did anyone else experience an outage with Vocus IP Transit services last night? *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

2 1

Whole of Domain (.nz) 2016 Web Harvest
by Jay Gattuso 22 Dec '15

22 Dec '15

Hi Noggers, Further to previous emails (6th Nov 2015), we are all set to kick off the web harvest in the new year. We’ll be starting the crawl on the 11th Jan 2016, and expect to be crawling for approximately 3 to 4 weeks. The crawlers will be using the user agent string ““NLNZ_IAHarvester2016” so if you do need to set any specific rules for our crawlers this would be the identifier to use. The robots.txt and Robots META tag exclusions on crawled sites will be obeyed with some minor exceptions:- We’ll strictly obey all rules that relate to the user agent (apart from slash pages, which will be harvested regardless). Facebook and some other curated social media sites will be harvested regardless of their Robots.txt. The Crawl Notification (Notice to Webmasters) page is located at on the Library’s web site at: http://natlib.govt.nz/publishers-and-authors/web-harvesting/domain-harvest. If you have any questions or concerns about the harvest, please drop me a line. I’ll watch for email at various points over the Christmas break, and back in the office on the 4th Jan to address any questions/concerns. Best, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

Who's breaking the APE?
by Michael Fincham 20 Dec '15

20 Dec '15

Can you knock it off please? -- Michael

5 4

Orcon DNS Akl
by Stuart Campbell 16 Dec '15

16 Dec '15

5 5

Free racks in Auckland
by Jason Keating 16 Dec '15

16 Dec '15

Hi all, Apologies if this is deemed crappy use of the email group, but I have free stuff to give away. I have 5 HP series 1000 racks (42u and 600 wide) sitting in Albany, Auckland which are free to anyone that may wish to pick them up. Feel free to email me direct if you are interested. Jason Keating Trade Me Limited www.trademe.co.nz<http://www.trademe.co.nz> Telephone: +64 4 897 7952 Mobile: +64 21 191 5339

1 1

NZNog/Apricot
by Patrick Jordan-Smith 16 Dec '15

16 Dec '15

Hi guys and mostly the NZNOG trustees (whoever they are at the moment.) I remember seeing a while back that some funds were going to be made available for helping people fund the cost of attending Apricot (since it's taking the place of the 2016 conference.) Did anything ever eventuate out of this? The cost for Apricot is significantly higher than the usual nznog cost plus hotels etc if you're not from Auckland. Would be good to see some clarity on this given that early bird tickets are now closed and not everyone has a corporate to fund their attendance. Even if its a "its not happening" comment that would be still helpful. Alternately have the trustees talked to the Apricot organisers at all about possibilities? Thanks, Pat

8 10

NZIRF invite
by Nicole Skews-Poole 14 Dec '15

14 Dec '15

Kia ora NZNOG-ers, The following event may be of interest to you: *Following the success of the inaugural New Zealand Internet Research Forum in 2015 <https://internetnz.nz/internet-research-forum-2015-programme>, InternetNZ in conjunction with AUT's Institute of Culture, Discourse & Communication is pleased to announce a second forum to be held early in 2016. This event, which brings together Internet researchers and interested parties to discuss their proposed, current and finished research with the New Zealand Internet community.* *The Forum will be held at AUT on 4-5 February 2016, with discussion groups for postgraduate students and early-career researchers and Birds of a Feather session spaces available on the afternoon of Thursday 4 February and a welcome function on evening of Thursday 4 February.* *The NZIRF will have a technical and a non-technical stream and supports the continued establishment of a network of researchers working in a wide range of fields such as social media, virtual worlds, cyber security, online activism, crowd-sourcing, computer engineering, copyright, gaming, digital politics, online communities, the virtual public sphere, online journalism, and digital literacy.* *The NZIRF is free to attend for those participating in the programme (i.e. presenting, organising). Space for those not participating in the programme will be confirmed in early 2016 based on availability. Please complete an Expression of Interest (EoI) <https://internetnz.nz/new-zealand-internet-research-forum-0> in attending and we’ll keep you posted with Forum developments including the finalised programme. * Please consider distributing this notice to others who may be interested in attending. Kind regards, Nicole Skews-Poole Community Programme Liaison InternetNZ Mobile: +64 27 323 8914 Office:+64 4 495 2336 Skype: nicoleskews For a better world through a better Internet

1 0

Re: [nznog] "updating" stats.labs.apnic.net
by George Michaelson 07 Dec '15

07 Dec '15

the stats overwhelmingly come from HTML5 advert placements in google, which predominantly but not solely are placed over youtube videos. Approximately 5-6m placements per day. -george On 8 December 2015 at 04:42, Pieter De Wit <pieter(a)insync.za.net> wrote: > Hi Guys, > > > > Does anyone know where stats.labs.apnic.net get's it's stats from ? I > would ask APNIC, but they are still closed :) > > > > Cheers, > > > > Pieter > >

1 0

Clueful contact for Sky TV about?
by Neil Gardner 07 Dec '15

07 Dec '15

Hi gents (and gentesses?) If there's someone on here that has a properly network clueful contact at SkyTV I'd love them to get in touch with me please regarding some DNS behaviour we're observing related to them. Regards ________________________________ [Spark] Neil Gardner Solution Design Engineer - Fixed T +64 4 802 9659 (extn 40659) M 027 651 9993 E Neil.Gardner(a)spark.co.nz Ground Floor, 16 Walker Street P O Box 1473, Christchurch 8140 www.sparknz.co.nz<http://www.sparknz.co.nz> ________________________________ This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 1

"updating" stats.labs.apnic.net
by Pieter De Wit 07 Dec '15

07 Dec '15

Hi Guys, Does anyone know where stats.labs.apnic.net get's it's stats from ? I would ask APNIC, but they are still closed :) Cheers, Pieter

2 1

Orcon IPv6 Rollout
by Simon Allard 06 Dec '15

06 Dec '15

Hi NZNog Riding on the coat tails of the Stuff IPv6 post (which is really cool btw!). Over the last few weeks we have been rolling out Ipv6 dual stack on the Orcon customer base. We targeted this brand as the CPE's we give to customers has support for IPv6. (Some modems require firmware upgrades which we are pushing out). If this goes well for us, we will review Ipv6 for the other brands in the new year. Currently just supporting ipv6 on the xDSL product range, with UFB coming in the new year. Seeing some really good stats coming through on the APNIC Ipv6 Stats page (http://stats.labs.apnic.net/ipv6/AS17746) - The 1 month view shows the best trend. Still very early days and I expect to see that number grow as CPE firmware gets pushed out and customers reconnect to get their IPV6 PD. Feedback from customers has been positive :D Any questions please drop me a line Cheers, Si Simon Allard | Senior Network Architect D: 09 550 2790M: 020 100 0790 www.orcon.net.nz | www.slingshot.co.nz | www.flip.co.nz | www.callplus.co.nz | www.2talk.co.nz Shared Services Banner This message and any attachments contain privileged and confidential information. If you are not the intended recipient of this message, you are hereby notified that any use, dissemination, distribution or reproduction of this message is prohibited. If you have received this message in error please notify the sender immediately via email and then destroy this message and any attachments.

6 7

Re: [nznog] NZNOG Digest, Vol 156, Issue 4
by Murray King 04 Dec '15

04 Dec '15

1 0

www.stuff.co.nz on ipv6
by Jethro Carr 03 Dec '15

03 Dec '15

Good Morning Noggers, As of this morning, www.stuff.co.nz is serving our production content on IPv6. $ host www.stuff.co.nz www.stuff.co.nz is an alias for kona6.fairfaxmedia.com.au.edgekey.net. kona6.fairfaxmedia.com.au.edgekey.net is an alias for e1365.dsce2.akamaiedge.net. e1365.dsce2.akamaiedge.net has address 23.222.106.112 e1365.dsce2.akamaiedge.net has IPv6 address 2600:1415:5:181::555 e1365.dsce2.akamaiedge.net has IPv6 address 2600:1415:5:183::555 e1365.dsce2.akamaiedge.net has IPv6 address 2600:1415:5:184::555 Giving NZNOG a heads up incase your customers encounter any issues, particularly given our size/popularity. Naturally things on our end are perfect, but uh, if you happen to see any “unexpected routing features” please feel free to reach out to myself. Note that our IPv6 connectivity is provided by the Akamai CDN network. regards, Jethro

4 6

UFB DFAS Lawful Interception
by Tristram Cheer 03 Dec '15

03 Dec '15

Hi All. Does anyone here know what the LFC's are doing for LI on dark fibre? I think most will be some kind of splitter but one LFC is talking about using a 50/50 split introducing 3db of loss into each leg and I'd like to get an idea of what the others are doing. Normally I'd look at the CFH tech specs but LI on DFAS came after them and there's no reference in the agreements Cheers :) TRISTRAM CHEER UBER GROUP LIMITED NETWORK ARCHITECT - MOST PROBLEMS ARE THE RESULT OF PREVIOUS SOLUTIONS... [Facebook]<https://www.facebook.com/UberGroup?_rdr=p> [Twitter] <https://twitter.com/ubergroupltd> E: t(a)uber.co.nz<mailto:t(a)uber.co.nz> P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz<http://www.uber.co.nz> 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND

3 2

Anyone else having Chorus issues in Auckland with EUBA/WVS this morning?
by Jesse Archer 01 Dec '15

01 Dec '15

We are seeing issues yet nothing reported on the Chorus status pages.

4 3

ETSI 102 232 1-7 complaint LI solutions
by Tristram Cheer 30 Nov '15

30 Nov '15

Hi All, I was wondering what solutions exist for small to medium sized ISP's to have "ETSI standard Lawful Interception" as part of the Interception Capable upgrade from Interception Ready. I was hoping there may be a solution that has a presence in NZ or AU that is cost effective enough for the small guys :) Cheers TRISTRAM CHEER UBER GROUP LIMITED NETWORK ARCHITECT - MOST PROBLEMS ARE THE RESULT OF PREVIOUS SOLUTIONS... [Facebook]<https://www.facebook.com/UberGroup?_rdr=p> [Twitter] <https://twitter.com/ubergroupltd> E: t(a)uber.co.nz<mailto:t(a)uber.co.nz> P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz<http://www.uber.co.nz> 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND

1 0

Call for Presentations - DNS-OARC 24th Workshop, Mar 2016
by Sebastian Castro 30 Nov '15

30 Nov '15

The DNS-OARC 24th Workshop will take place in Buenos Aires, Argentina between March 31st and April 1st 2016, Thursday and Friday before IETF95. This will be the first time DNS-OARC is held in the Southern Hemisphere. To attract the best DNS minds and local audience, DNS-OARC is requesting proposals for presentations, with a preference for Operational Practices Reports, and "How we solved this problem" presentations. This workshop intends to build from previous strong DNS-OARC workshops, where both operational content and research are welcome. Presentations from DNS operators are particularly desired, as well as from DNS researchers. All DNS-related subjects are accepted. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. A timeslot will be available for lightning talks (5-10 minutes) on April 1st, for which submissions will be accepted during March 31st on a first-come first-served basis. Workshop Milestones 30th November 2015, Call for Presentations posted and open for submissions 29th January 2016, Deadline for submission 16th February 2016, Final Program published 28th March 2016, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net/event/22/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To ensure the quality of the workshop, submissions including draft slides will get extra points during evaluation. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Whose residential UFB in Whanganui has diverse backhaul?
by Donald Gordon 26 Nov '15

26 Nov '15

Hi I've had UFB at home for two years now. I'm on to my second ISP. ISP #1 had an 8 hour outage for all their Whanganui UFB customers due to fault in their backhaul. ISP #2 had a 20 hour outage last month for all their Whanganui UFB customers due to a fault in their backhaul (they say Chorus) between here and Palmerston North. Who provides residential UFB in Whanganui that won't be brought down by a single backhaul fibre fault? I realise I'm getting a residential service with essentially no SLA, and that the fibre between me and the interconnect point is a single point of failure. I'm happy to take off list answers and won't post your answers publicly unless you particularly want me to. Regards Donald Gordon

5 4

Re: [nznog] AKL-IX MDR Pop
by Tim Hoffman 26 Nov '15

26 Nov '15

This is true, I did miss the WIX! And Wellington coffee is 100x better then that in the states! Apologies! Still - it is nice to see relatively even amounts of traffic on both Auckland platforms from a resiliency point of view. Perhaps CityLink will now considering lowering prices to the $450/month/10g IX Australia publicly disclose that they charge? Sent from my iPhone > On Nov 26, 2015, at 11:47 AM, Sid Jones <sid.jones(a)citylink.co.nz> wrote: > > FYI: We’ve had some traffic from 1 or 2 providers move from across the APE to the WIX instead. http://nzix.net/wix.html > > There’s a pretty consistent 2 to 2.5 Gbps on the WIX most days – and lets not discount Wellington Tim - as you well know we have by far the best coffee ;) > > From: <nznog-bounces(a)list.waikato.ac.nz> on behalf of Tim Hoffman <tim(a)hoffman.net.nz> > Date: Friday, 27 November 2015 at 8:31 AM > To: Scott Lawson <scott.lawson.nz(a)gmail.com> > Cc: NZNOG Mailing-List <NZNOG(a)list.waikato.ac.nz> > Subject: Re: [nznog] AKL-IX MDR Pop > > Thanks Joe! Great to see that we have another strong option in NZ. > > Interesting also to see now that we have very equal traffic volumes between AKL-IX and APE (even outside the last time this was discussed where we had a major software release coming out of a CDN connected to AKL-IX if I recall correctly). In fact, it looks like AKL-IX is doing just a slight bit more! > > Having two solid IXs in Auckland is the best result for the resiliency of the New Zealand internet - it's great to see that we finally go there! > > Cheers, > Tim > > > >> On Thu, Nov 26, 2015 at 12:11 AM, Scott Lawson <scott.lawson.nz(a)gmail.com> wrote: >> Hi Joe, >> >> Thanks for the update re MDR AKL-IX POP. Keep up the good work! >> >> Do you have any timeline for when the society will be incorporated and you will be moving to paid ports? >> >> Cheers, >> >> Scott. >> >> >>> On 26/11/15 8:44 PM, Joe Wooller wrote: >>> Hey all, >>> >>> Firstly sorry not sorry if this email is off topic. :) >>> >>> I will keep this brief. >>> AKL-IX MDR pop is now live. As we are still waiting for the Society to be Incorporated we will be offering trials for peers interconnecting at MDR. >>> If you would like to hook up please drop me an email and we can get the ball rolling! >>> >>> Cheers >>> Joe >>> >>> _______________________________________________ >>> NZNOG mailing list >>> NZNOG(a)list.waikato.ac.nz >>> http://list.waikato.ac.nz/mailman/listinfo/nznog >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog > > <ape7.png> > <graph_image.php.png>

1 0

AKL-IX MDR Pop
by Joe Wooller 26 Nov '15

26 Nov '15

Hey all, Firstly sorry not sorry if this email is off topic. :) I will keep this brief. AKL-IX MDR pop is now live. As we are still waiting for the Society to be Incorporated we will be offering trials for peers interconnecting at MDR. If you would like to hook up please drop me an email and we can get the ball rolling! Cheers Joe

5 4

UPC lite - does anyone have any info on what kind of service this actually is?
by Mike Taylor 23 Nov '15

23 Nov '15

I'm trying to get some sensible info on exactly what a 'UPC lite' circuit from Chorus is. The info I've managed to glean so far is: - It's an ATM based service (PVC 0/101 from the info I can get from googling.) - I'm told it can only be delivered over a BUBA handover - which means it looks like it might be an aDSL service, restricted to 256k up/down So, putting all this together, it sounds like I'll need an aDSL modem, and treat it just like a 'normal' residential aDSL service, but on PVC 0/101, with PPP <?> and PAP/CHAP? Does anyone have the low down on what this actually is? Thanks in advance, Mike Just so you know, the only two links I could find that say anything useful about UPC lite were: http://www.sparkwholesale.co.nz/n36,3,letter=u.html and http://www.gpforums.co.nz/threads/420210-UPC-lite-connection-%28need-help%29 --

1 1

nzwrt redux?
by Dave Taht 22 Nov '15

22 Nov '15

this is looking quite good: https://www.indiegogo.com/projects/turris-omnia-hi-performance-open-source-… Dave Täht Let's go make home routers and wifi faster! With better software! https://www.gofundme.com/savewifi

10 14

about NZNOG Conference 2016
by Hiroki Kashiwazaki 21 Nov '15

21 Nov '15

Hi, Although I want to attend NZNOG conference 2016, I cannot find any information on NZNOG web site and ML archives. Are there any information?

2 1

UFB 2M upload issues - DEI markings - Juniper
by Dave Mill 19 Nov '15

19 Nov '15

Hi all We have finally fixed our 2M upload issues on Chorus UFB accelerate plans. Skip to the end of this email if you just want an example fix. Along the way we established a couple of incorrect "facts". Some of which I shared with this list. These were: 1) DEI marked packets were being silently dropped on ingress from the Chorus handover 2) Junos 12.3 fixed this issue Recently I deemed that "fact" 1) was wrong and hence "fact" 2) was a bit irrelevant. Here's a crude diagram of our typical set-up: <Chorus handover> <-> [1] <MX80> [2] <-> MPLS/VPLS over Backhaul fibre <-> [3] <PMR MPLS MX> [4] <-> [5] <PMR BNG> Where the numbers in the square brackets are interfaces where I performed some traffic stats. I deemed that DEI=1 marked packets were still showing up at [1] and [3]. They were not showing up at interfaces [4] and [5]. This deemed my above "facts" incorrect. With Juniper CoS you classify on ingress and rewrite on egress. Once we deemed that DEI marked packets were not being dropped at [1] and instead were being dropped between [3] and [4] we can now rewrite these before interface [4]. As we need to rewrite on egress we'll do this at point [2]. In our test case interface [2] is actually xe-1/2/0.388 . And a simple fix for the issue is under the class-of-service section implement: interfaces { xe-1/2/0 { unit 388 { rewrite-rules { ieee-802.1ad { ieee-802.1ad-dei-rewrite; vlan-tag outer; } } } } } rewrite-rules { ieee-802.1ad ieee-802.1ad-dei-rewrite { forwarding-class best-effort { loss-priority low code-point 0000; loss-priority high code-point 0000; } } } The key is to use a ieee-802.1ad rewrite rule rather than a ieee-802.1 rule. The leftmost bit of the 4 bit code-point is the DEI bit. This is all assuming that all traffic is classified as best-effort at interface [1] - if that is not the case then re-write the DEI bit for your other queues as well. You only need to rewrite the outer vlan DEI bit. This is tested on Junos 12.3R8.7 on a MX80. Thanks to all involved in helping fix this - Steve K, Vance and Ivan especially. Cheers Dave

3 4

Cisco Config for Chorus HSNS SHDSL Service?
by Alan Howard 19 Nov '15

19 Nov '15

Hi I have to configure a Cisco 888EA router for a 10Mb HSNS SHDSL service from Chorus, which is not something I have tackled before. Does anyone have a config example suitable for the Chorus service that they can share? I've been Googling for a config but can't find anything specific to Chorus. Any assistance appreciated. Alan.

2 3

1000BaseT SFP modules
by Gareth Fletcher 19 Nov '15

19 Nov '15

Hi team Sooo would anyone happen to be in Auckland and have a couple of spare GLC-T 1G SFP modules that they'd be willing to part with for a month or so? The $nobrand ones we got coded for our Nexus 9Ks don't work in our 3k :( And now in a bit of a pinch... If you do please reply off-list, and please include your beer of preference. Cheers Gareth

1 0

Re: [nznog] nzwrt redux?
by Ray Taylor 18 Nov '15

18 Nov '15

I imagine once we see ufb unbundling then that could slightly change. The big issue is incompatibilities between pon systems and making an ont in a small sfp form factor. Sent from my Samsung Galaxy smartphone.<div> </div><div> </div><div>-------- Original message --------</div><div>From: Tristram Cheer <t(a)uber.co.nz> </div><div>Date: 19/11/2015 13:04 (GMT+12:00) </div><div>To: Daniel Christie <daniel.christie(a)enlighten.co.nz>, Dave Taht <dave.taht(a)gmail.com>, NZNOG(a)list.waikato.ac.nz </div><div>Subject: Re: [nznog] nzwrt redux? </div><div> </div>Under the current UFB structure there is no scope for RSP supplied or end user supplied pluggable optics TRISTRAM CHEER Network Architect - Most problems are the result of previous solutions... E: t(a)uber.co.nz P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Daniel Christie Sent: Thursday, 19 November 2015 1:02 p.m. To: Dave Taht <dave.taht(a)gmail.com>; NZNOG(a)list.waikato.ac.nz Subject: Re: [nznog] nzwrt redux? That actually seems really cool, Would the SFP port work in NZ for removing the need of an ONT? Is it something that the fibre companies would allow consumers to do? ---------------------------------------------------------------------- Daniel Christie SYSTEMS ENGINEER/APPLICATION SPECIALIST PHONE +64 7 8536060 | www.enlighten.co.nz -----Original Message----- From: Dave Taht [mailto:dave.taht(a)gmail.com] Sent: Tuesday, 17 November 2015 1:20 AM To: NZNOG(a)list.waikato.ac.nz Subject: [nznog] nzwrt redux? this is looking quite good: https://www.indiegogo.com/projects/turris-omnia-hi-performance-open-source-… Dave Täht Let's go make home routers and wifi faster! With better software! https://www.gofundme.com/savewifi _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

Dell R610 P/Supply
by Shaun McGuane 16 Nov '15

16 Nov '15

Hi NZNog, Apologies for being off topic - Trying to tap into the local knowledge :) I am over here at our office and shipped over some servers that had a power supply go bang! Wondered if you guys knew of any local places where I could pick up server spares. In particular Dell R610 717W – Model D717P-S0 Thanks in advance Regards Shaun

2 1

Re: [nznog] Dell R610 P/Supply
by Shaun McGuane 16 Nov '15

16 Nov '15

Thanks for the replies everyone. All sorted. Cheers Shaun From: <nznog-bounces(a)list.waikato.ac.nz<mailto:nznog-bounces(a)list.waikato.ac.nz>> on behalf of Shaun McGuane <shaun(a)rackcentral.com<mailto:shaun(a)rackcentral.com>> Date: Tuesday, 17 November 2015 at 10:22 AM To: NZNOG <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Dell R610 P/Supply Hi NZNog, Apologies for being off topic - Trying to tap into the local knowledge :) I am over here at our office and shipped over some servers that had a power supply go bang! Wondered if you guys knew of any local places where I could pick up server spares. In particular Dell R610 717W – Model D717P-S0 Thanks in advance Regards Shaun

1 0

Does Spark host any actual IPv6-connected resources behind AS4648?
by Mark Foster 15 Nov '15

15 Nov '15

Hiya folks, An honest question... Having been told by a commercial solutions type person at Spark that IPv6 peering is only available for International Transit services - not Domestic - i'm left wondering how much IPv6 actually exists within AS4648? I am not aware of any specific examples of IPv6 connections (either 'content' or 'eyes') in the AS to use as a starting point, but it's quite disappointing to consider that any traffic between my AS and Spark's is being forced to use international transit. (The wording of the correspondence I received on the subject used the word 'currently' suggesting a possible future change on this position, but it also said 'no date for when this will be available' which suggests no great hurry either). Obviously the disappointment would be metered a little if I knew for sure there was essentially no chance of requiring such a peering link, for example if there's no other IPv6 within-or-behind AS4648 that I can't get to via other means. I assume that other NOG'rs who have 'domestic transit' or 'paid peering' with Spark have got similar ipv6 peering problems - I find it incredible that this many years beyond IPv6's initial 'push' [1], that backbone environments - those that don't necessarily have heavy ties to software or systems that may still have compatibility issues[2] - cannot be rigged for IPv6 in relatively short order. Interested in the experiences of others, on-or-offlist as preferred, in terms of Spark and IPv6, or if there's any insight as to Spark's intentions to deploy IPv6 and support it for their wholesale domestic links. Cheers Mark. [1] The oldest post on the NZ IPv6 Task Force website is dated August 2009. We've certainly had a complete technology-refresh-cycle since then, surely?! [2] Notwithstanding [1] I know there are still limitations to IPv6 offerings to customers within my organisation[3], but we are at least committed to working through these and for a large subset of product types, dual-stack is fully available. As such we are seeking to establish IPv6 peering arrangements, initially with all those that we peer with over IPv4 but obviously as openly as possible for the benefit of all parties. [3] When I say 'We' i'm talking about ICONZ, AS4770. If you peer with ICONZ (directly or via a peering exchange[4]) and would like to peer over IPv6, please do drop a note to noc(a)iconz.net and we'll happily set it up. We're already peered with the APE and WIX RR's and with a few domestic peers in addition to our transit provider(s). I should also note that i'm leaving ICONZ in the next week or so, so personal enquiries about ICONZ's position may have finite value. :-) [4] ICONZ is presently on APE and WIX and is hoping to establish a link to AKL-IX in the new year. If they share physical footprint or switch domain they're also happy to bilat or direct-ethernet if it makes sense to do so. Cheers Mark.

2 1

GPON/VDSL/ADSL vendor advice
by Mark Tees 04 Nov '15

04 Nov '15

Hi all, Looking for some advice/recommendations. We’re looking to select a GPON/VDSL/ADSL vendor for a number of new greenfield and brownfield deployments and have been considering the big 3 - ALU, Huawei and Calix. In PON land we would be delivering an “RSP” style service where each port, or a VLAN on a port can be sold to a different RSP to deliver services on. We are also delivering RF and POTS services via these units. So far we’ve found most them to be largely feature comparable and stable in terms of implementation and support. Each vendor has been keen to engage with us and work to make us as comfortable as possible with their product set. The only major differentiator on a hardware level is we’ve noted that the newer ALU chassis do not support xDSL cards, and so we would be stuck on the previous generation of chassis if we wanted to retain xDSL support, where Huawei and Calix don’t have this limitation. We do like Calix’s general view towards software programability and what they are talking about in terms of the future of SDN based networking. That said, there seems to be a number of pro’s/con’s with respect to each vendor in their own ways. Does any one have any strong opinions or recommendations why one vendor is better than another? Equally, does anyone have any brilliant success stories with any of the vendors or horror stay-away stories that we should know? -- Regards, Mark L. Tees

3 2

Whole of Domain (.nz) Web Harvest 2016
by Jay Gattuso 04 Nov '15

04 Nov '15

Hi All, It’s that time of year again. The National Library of New Zealand is in the final planning stages for the 2016 Whole of Domain web harvest. Per previous years we’ll be walking through the .nz domain pulling back a ~20Tbs snapshot of the live web. The work will be contacted out to the Internet Archive, and I’ll contact this list with the final details once we’ve finished the various planning parts. At the moment it looks like we’ll undertake the crawl around the middle of Jan, and from past experience it usually takes 3 to 4 weeks to complete. We expect to try and grab embedded large binaries (video, audio etc), but otherwise we will generally be respectful of robots.txt. We will have crawl agent string that I will inform you of, so if you have any concerns with our crawling activity we can be blocked. :( I wanted to give you early sight of the crawl, and invite any questions or thoughts from the mailing list. We would also like to acknowledge the assistance and support of dnc.org.nz and nzrs.net.nz – without their efforts we would not be able to make heritage snapshots of the live web for research use today and into the future. Best, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

Chorus issues
by Steve Hawken 02 Nov '15

02 Nov '15

Anyone else seeing issues with adsl and vdsl via Chorus this afternoon ? Seeing lots of subscribers disappear for a few minutes and come back. Cheers, Steve

2 2

More KFC scams
by Cody Cooper 31 Oct '15

31 Oct '15

We have just detected some more of the KFC delivery scam websites on our network. They’re starting to register a lot of domains! I’m getting in touch with the registrars now to get them taken down but may take some time as it’s outside business hours. getkfcnow.co.nz getkfcnow.com.au ilovekfc.co.nz kfcnow.co.nz kfcnow.com.au kfctime.co.nz kfctohome.co.nz timeforkfc.co.nz Regards, Cody Cooper | Head of Broadband DDI: +64 (3) 928-2645, ext 9892 Mob: +64 (21) 666-505 Why not Go MAD today? Visit gomad.co.nz <http://gomad.co.nz/>

4 3

APRICOT2016 Call For Papers
by Dean Pemberton 31 Oct '15

31 Oct '15

Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) 15th February - 26th March 2016, Auckland, New Zealand https://2016.apricot.net CALL FOR PAPERS =============== The APRICOT 2016 Programme Committee is now seeking contributions for Presentations and Tutorials for APRICOT 2016. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics. Please submit on-line at: http://papers.apricot.net/user/login.php?event=34 CONFERENCE MILESTONES --------------------- Call for Papers Opens: 2 November 2015 Draft Program Published: As Papers Confirmed Final Deadline for Submissions: 25 January 2016 Final Program Published: 1 February 2016 Final Slides Received: 8 February 2016 **NOTE THAT REGARDLESS OF DEADLINESSLOTS ARE FILLED ON A FIRST COME, FIRST SERVED BASIS*** PROGRAMME MATERIAL ------------------ The APRICOT Programme is organised in three parts, including workshops, tutorials and the conference. Topics for tutorials and the conference must be relevant to Internet Operations and Technologies: - IPv4 / IPv6 Routing and operations - IPv6 deployment and transition technologies - Internet backbone operations - ISP and Carrier services - IXPs and Peering - Research on Internet Operations and Deployment - Pacific/Oceania Internet - Software Defined Networking / Network Function Virtualisaton - Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) - DNS / DNSSEC - Internet policy (Security, Regulation, Content Management, Addressing, etc) - Access and Transport Technologies, including Cable/DSL, 3G/LTE, wireless, metro ethernet, fibre, MPLS - Content & Service Delivery (Multicast, Voice, Video, "telepresence", Gaming) and Cloud Computing CfP SUBMISSION -------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the Programme Committee will be unable to review the submission. For avoidance of doubt this means that submissions which do not include slides will be rejected immediately. For work in progress, the most current information available at time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC may, at their discretion, retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Every year we turn away submissions, due to filling up all available program slots before the deadline. Presenters should endeavour to get material into the PC sooner rather than later Please submit on-line at: http://papers.apricot.net/user/login.php?event=34 Any questions or concerns should be addressed to the Programme Committee by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Mike Jager & Dean Pemberton Co-Chairs, APRICOT 2016 Programme Committee

1 0

2talk NOC
by Jesse Archer 27 Oct '15

27 Oct '15

Evening, Anyone from 2talk on the list? I can't get hold of anyone via the wholesale support number or the NOC number I have on-hand. Having some issues with inbound calls affecting a number of customers. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

3 3

tvnz/tv3, on demand, etc
by Matthew ＠ PrimoWireless 26 Oct '15

26 Oct '15

Can someone from the above please contact me off list as some of our IP ranges are not working for NZ customers. Kind regards, Matthew Harrison The Top Dog / Managing Director [http://www.primowireless.co.nz/primo_office_move.jpg]<http://www.primowireless.co.nz/help/contact-us> The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.

1 0

Short (!) survey about internet interconnection
by Uta Meier-Hahn 21 Oct '15

21 Oct '15

Dear networkers from around the world, Internet interconnection is largely unregulated. However, in some countries, public regulation has emerged – be it through transparency rules, mandatory peering or licensing terms. Currently, we lack an overview about where regulation exists and we know little about how it affects internet connectivity on a global scale. To start filling this information gap, I have set up a short survey for network engineers, peering coordinators and network-savvy legal staffers. The goal is to crowdsource an initial overview about formal regulation of internet interconnection around the world. Please participate! It takes no more than 10 minutes and will serve the community: http://limesurvey.hiig.de/index.php/675663?lang=en <http://limesurvey.hiig.de/index.php/675663?lang=en> I will publish the results under a Creative Commons license. Also, please consider helping by forwarding the link to fellow interconnection professionals - think of your Facebook, VKontakte or LinkedIn groups, of chat channels and mailing lists. The more regional diversity, the better. Thank you! Thank you! Kind regards, Uta Meier-Hahn PhD Candidate Alexander von Humboldt Institute for Internet and Society Oberwallstr. 9 | 10117 Berlin meier-hahn(a)hiig.de <mailto:meier-hahn(a)hiig.de> | T +49 30 200 760-82 | www.hiig.de/en

7 8

KFC shows that once again New Zealand needs a CSIRT. Well here's a start.
by Dean Pemberton 20 Oct '15

20 Oct '15

Hi All, The recent KFC incident has highlighted a lack of awareness of where to effectively report online security issues. A point made worse by New Zealand not having a CSIRT. At the NZITF we're working to create New Zealand’s first public facing Computer Security Incident Response Team (or CSIRT). Essentially, we have decided it's time to stop talking about creating a CSIRT and instead partner with like-minded companies to fund and incubate a small, agile team to prove the value that a public-facing CSIRT can bring to New Zealand. We have produced a short 1-pager about why the NZITF are setting up CSIRTnz and what we hope to achieve. http://nzitf.org.nz/pdf/NZITF-CSIRT-ValProp.pdf Feel free to get in touch (info(a)nzitf.org.nz) if you, or your organisation wants to know more about the initiative. In the mean time, while we get this all setup, any incidents sent to info(a)nzitf.org.nz will receive attention, and we'll look to provide co-ordination, albeit on a best efforts basis. Regards, Dean

1 0

Spark / GG & ICMP
by Jonathan Brewer 19 Oct '15

19 Oct '15

Hi Folks, Anyone know of NZ-based Global Gateway or Spark infrastructure that responds to ICMP ping requests globally? On or off-list reply fine. I've found hosts in AS4648 that respond to ping selectively - from some, but not all of the servers I'm using to collect data for my project on peering in the Pacific http://pacpeer.org/ Bizarre & frustrating things going on with this network. Same for AS4771. Failing that happy to take suggestions for Auckland based single-homed customers on AS4648 or AS4771 that are fibre connected with 1-2ms latency from provider core - and don't mind the occasional ping. I've got Atlas probes I can ping, but they're on the end of consumer tails & that mucks up the stats. Thanks, Jon

2 2

kfcdelivery.co.nz ongoing scam
by Nathan Ward 19 Oct '15

19 Oct '15

All, You might’ve seen ‘kfcdelivery.co <http://kfcdelivery.co/>.nz’ pop up on social media today. It’s a scam. If you have the ability to block this website so your users cannot reach it, please do so. If you have stuck your CC details in there, cancel your card. It is hosted through CloudFlare, don’t block the IPs, but perhaps you can filter on your DNS or something. I have reached out to the registrar for the domain to get it blocked (discount domains). If anyone has a contact there other than support@ to get it pulled ASAP, please use it - I don’t know anyone there. The logic of the site is roughly: <snip> # Validate input and set error if validation fails if(error){ "You must fill in the red fields" }else{ "Our servers are down due to heavy traffic, please try again later" } # send data to servers anyway </snip> -- Nathan Ward

8 13

Stats NZ ISP survey
by Jay Daley 15 Oct '15

15 Oct '15

Those of you that use the ISP survey from Stats NZ might like to know that the’ve reissued it, silently, following discovery of discrepancies between this release and previous releases for historical data. Basically they re-ran the random rounding for historical data and got different random values from before. This is now fixed and the latest spreadsheet is consistent with previous ones. http://www.stats.govt.nz/~/media/Statistics/Browse%20for%20stats/ISPSurvey/… Jay -- Jay Daley Chief Executive NZRS Ltd desk: +64 4 931 6977 mobile: +64 21 678840 linkedin: www.linkedin.com/in/jaydaley

6 9

Fixing home router firmware
by Dave Taht 14 Oct '15

14 Oct '15

I think those here that would like to have better home gateway firmware might like the proposals vint cerf, I, and 260 other notables (incl linus torvalds, dave reed, jim gettys, etc, etc)... have just circulated throughout Washington, DC. http://www.businesswire.com/news/home/20151014005564/en/Global-Internet-Exp… reshare and enjoy. -- Dave Täht Do you want faster, better, wifi? https://www.patreon.com/dtaht

1 0

Re: [nznog] Large increase of Data on AKL-IX
by Pete Mundy 13 Oct '15

13 Oct '15

On 14/10/2015, at 10:47 AM, Craig Whitmore <lennon(a)orcon.net.nz> wrote: > Does anyone know what got added/what changed at AKL-IX which suddenly doubled the amount of traffic from AKL-IX this morning? > > http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=1… If you look at the graphs for individual peers you can see pretty easily the ASes (AS'?) most of it is coming from. Not sure where it's all going though! http://monitor.akl-ix.nz/cacti/graph.php?action=view&local_graph_id=93&rra_… Pete

12 14

Large increase of Data on AKL-IX
by Craig Whitmore 13 Oct '15

13 Oct '15

Does anyone know what got added/what changed at AKL-IX which suddenly doubled the amount of traffic from AKL-IX this morning? http://monitor.akl-ix.nz/cacti/graph_image.php?action=view <http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=1 4&rra_id=2> &local_graph_id=14&rra_id=2 Thanks Craig

4 3

CFP - Sysadmin Miniconf - Linux.conf.au 2016
by Simon Lyall 12 Oct '15

12 Oct '15

Call for Presentations Linux.conf.au 2016 Systems Administration Miniconf There will be a one day mini conference on Linux Systems Administration at linux.conf.au 2016 . LCA2016 will be held in Geelong, Australia on 1 - 5 February 2016 The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear from at this Miniconf This is our 10th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website http://sysadmin.miniconf.org/. Presentation Topics =================== We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments. Topics for presentations could include (but are not limited to): * Systems Administration Best Practice * Containers and orchestration * TLS everywhere * Monitoring and metrics. Collection, storage and presentation * Infrastructure/Platform/Software as a Service (IAAS) * Virtualisation and Cloud Computing * IPv6 * Software Defined Networking (SDN) * DevOps * Configuration Management * Bootstrapping systems, Lifecycle Management * Dealing with BYOD * Backups in a virtual/distributed world * Troubleshooting techniques * Buying Decisions * Web and Email management * Keeping legacy systems functioning * War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. Format of Presentations ======================= We are now seeking proposals for presentations at the mini-conference. We have openings for: 45 minute double-length presentations 15-20 minute full presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA keynote before morning tea), we expect the majority of available timeslots to be 20 minutes or less. We have a general policy of accepting a high proportion of proposals but handing out relativly short timeslots. Please see previous years Miniconf schedules for examples. Submitting talks ================ Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. Submissions should be made via: http://sysadmin.miniconf.org/proposal16.html Questions should be sent to: lca2016 @ sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions priority (both of inclusion and scheduling) will be given to presentations submitted before the 8th of November 2015. Please indicate if you need an early confirmation to aid you in arranging time off work or travel. 2015-10-31 - Deadline for early submissions 2015-11-08 - Early submissions confirmation 2015-12-12 - Deadline for submissions 2015-12-19 - Confirmation of all presentations 2016-02-02 - Sysadmin Miniconf held. Contact and Questions ===================== Please see our website at http://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2016 @ sysadmin.miniconf.org

1 0

your private ASs are showing
by Geoff Huston 09 Oct '15

09 Oct '15

Maybe this is not what they wanted to propagate:…. can anyone help SNAP? thanks Geoff www.cidr-report.org AS4200000005 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000052 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000055 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ AS4200000290 Announced by AS23655 SNAP-NZ-AS Snap Internet Limited,NZ (see the cidr report at the verybottom)

1 0

Call for APRICOT 2016 PC volunteers
by Dean Pemberton 06 Oct '15

06 Oct '15

Hi everyone, The APRICOT 2016 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the APRICOT 2016 conference (http://2016.apricot.net/) The APIA Board selects a new Programme Committee each year and is now seeking nominations from the community. Eligible PC candidates are those who have attended APRICOT conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of APRICOT conferences. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to each event. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "apiasec at apia.org". The note should include affiliation (if any) and contact details (including e-mail address), and a brief description of why you would make a good addition to the PC. PC members who are active and contribute to regular meetings and submit reviews receive complimentary registration for APRICOT 2016. The APIA Board will accept nominations received by the end of Friday 23 October, 2015, and will announce the new PC shortly thereafter. Many thanks! Mike Jager & Dean Pemberton (APRICOT 2016 PC Chairs)

1 0

Cable cut/damaged?
by Juha Saarinen 01 Oct '15

01 Oct '15

Hi NZNOG, Not sure if this qualifies as operational, but Telstra tweeted there’s a cable cut somewhere: https://twitter.com/Telstra/status/649565187687628800 Would anyone happen to know which cable it is and where it’s been cut - if that’s the case? Am told it’s causing slowdowns with Akamai, making Apple users unhappy. Thanks — Juha

4 5

Anyone else seeing Akamai issues this morning
by Jesse Archer 30 Sep '15

30 Sep '15

Coinciding with this? http://monitor.akl-ix.nz/cacti/graph_image.php?action=view&local_graph_id=7… *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

7 8

Re: [nznog] NZNOG Digest, Vol 153, Issue 20
by Murray King 25 Sep '15

25 Sep '15

Hi Nathan, Happy to talk you through your application and help you out on this. I'm the Spirent distributor for NZ. Murray King Sales Engineer Nichecom Delivery Address: 1 Lincoln Avenue, Tawa,Wellington Postal Address: P.O. Box 56-045, Wellington New Zealand Phone: 64 4 2323233 Facsimile: 64 4 2323230 Mobile: 64 (0)21 379 192 murray(a)nichecom.co.nz www.nichecom.co.nz -----Original Message----- From: nznog-request(a)list.waikato.ac.nz To: nznog(a)list.waikato.ac.nz Date: Sat, 26 Sep 2015 12:00:03 +1200 Subject: NZNOG Digest, Vol 153, Issue 20 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. Router testers (Nathan Ward) ---------------------------------------------------------------------- Message: 1 Date: Fri, 25 Sep 2015 14:37:09 +1200 From: Nathan Ward <nznog(a)daork.net> To: nznog <NZNOG(a)list.waikato.ac.nz> Subject: [nznog] Router testers Message-ID: <8E1B60F1-712F-40E1-8BCE-E088051ACEFB(a)daork.net> Content-Type: text/plain; charset=utf-8 Hi, Does anyone have a line on router testers that are available for lease in NZ (or Aus, I guess)? Either from a proper leasing company, or if you?ve got one kicking around you don?t need for a few weeks.. Something that does PPPoE, IPoE, maybe MPLS and BGP would be nice. Ixia or Spirent or something. -- Nathan Ward ------------------------------ _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog End of NZNOG Digest, Vol 153, Issue 20 **************************************

1 0

Router testers
by Nathan Ward 24 Sep '15

24 Sep '15

Hi, Does anyone have a line on router testers that are available for lease in NZ (or Aus, I guess)? Either from a proper leasing company, or if you’ve got one kicking around you don’t need for a few weeks.. Something that does PPPoE, IPoE, maybe MPLS and BGP would be nice. Ixia or Spirent or something. -- Nathan Ward

1 0

Ideas pls for keynote speaker - APRICOT 2016
by Jordan Carter 21 Sep '15

21 Sep '15

Hi all We're hosting APRICOT 2016 - an Internet technical community conference - in Auckland in February. (Details at https://2016.apricot.net) NZNOG is a key supporter of the event so thank you for that, I am hoping this request is (beer) sufficiently on topic for the list.... One of the things a local host gets to do is to propose a local/national Keynote speaker for the event. Do you have suggested speakers we could put into the mix? One name that popped into my head is Steve Cotter who is shortly off to head the European research network, after running REANNZ for a few years. But this is an event aimed squarely at people like you, and so your ideas would be incredibly helpful. Grateful for your suggestions, ideally by the end of the week... thanks! Jordan -- Jordan Carter Chief Executive *InternetNZ* +64-495-2118 (office) | +64-21-442-649 (mob) Email: jordan(a)internetnz.net.nz Skype: jordancarter Web: www.internetnz.nz *A better world through a better Internet *

1 0

Re: [nznog] nz ip range
by Kerry Milestone 21 Sep '15

21 Sep '15

{from those archives} 10 years...??? blimey. http://list.waikato.ac.nz/pipermail/nznog/2005-June/010239.html Perhaps the way to go about it will end up being to legislate, that you'll end up having to register your "NZ" IP address allocation with the Intellectual Property Office - because they like the acronym IP too. But, this of course will still ensure there is much humour to be had. https://www.fyi.org.nz/request/1830-ip-address-range On 20/09/15 01:00, nznog-request(a)list.waikato.ac.nz wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. nz ip range (bigalownz) > 2. Re: nz ip range (Jethro Carr) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 19 Sep 2015 23:35:28 +1200 > From: "bigalownz" <bigalownz(a)gmail.com> > To: <nznog(a)list.waikato.ac.nz> > Subject: [nznog] nz ip range > Message-ID: <D7FB71253CD54F99B15C3EAE3FE397AD(a)SEANPC> > Content-Type: text/plain; format=flowed; charset="iso-8859-1"; > reply-type=original > > im doing a little project and im looking for a script to get nz ip ranges > > i did a Google search and found this, but as you can see it was from 2005 > and out dated, the url doesn't work etc > i need some help to update it > thanks > > #!/usr/local/bin/php > <?php > > $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; > // $in_file = "country-ipv4.lst"; > $out_file = "nzipranges.txt"; > > $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); > > $handle_output = fopen($out_file, "w"); > > $now = date ("r"); > > fwrite ($handle_output,"# Generated: $now\n\n"); > > while (!feof($handle_input)) { > $buffer = fgets($handle_input); > if ( ereg ( "nz", $buffer) ) { > // echo $buffer; > $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : > [\d\.]+(\/\d+) .+#","$1$2", $buffer )); > fwrite ($handle_output,"\n" . $this_range); > } > } > fclose($handle_input); > > fwrite ($handle_output,"\n"); > fclose($handle_output); > > > ?> > > > > ------------------------------ > > Message: 2 > Date: Sat, 19 Sep 2015 23:49:35 +1200 > From: Jethro Carr <jethro.carr(a)jethrocarr.com> > To: bigalownz <bigalownz(a)gmail.com>, nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] nz ip range > Message-ID: <etPan.55fd4bcf.3d8a9f57.27d(a)kobol.local> > Content-Type: text/plain; charset="utf-8" > > Hi bigalownz, > > I wrote a Puppet module that you can use to pull IP address lists from various registries. If you?re using Puppet, it means you can get an array of all the IPs for a specific region (such as NZ) for use in configuration files or resources. > > https://github.com/jethrocarr/puppet-rirs > > If you?re not using Puppet, the good news is that it?s almost entirely Ruby, so you could take a look at the function and adapt it very quickly to be a standalone script. > > https://github.com/jethrocarr/puppet-rirs/blob/master/lib/puppet/parser/fun… > > regards, > Jethro > > > -- > Jethro Carr > www.jethrocarr.com > > On 19 September 2015 at 23:34:33, bigalownz (bigalownz(a)gmail.com) wrote: >> im doing a little project and im looking for a script to get nz ip ranges >> >> i did a Google search and found this, but as you can see it was from 2005 >> and out dated, the url doesn't work etc >> i need some help to update it >> thanks >> >> #!/usr/local/bin/php >>> >> $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; >> // $in_file = "country-ipv4.lst"; >> $out_file = "nzipranges.txt"; >> >> $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); >> >> $handle_output = fopen($out_file, "w"); >> >> $now = date ("r"); >> >> fwrite ($handle_output,"# Generated: $now\n\n"); >> >> while (!feof($handle_input)) { >> $buffer = fgets($handle_input); >> if ( ereg ( "nz", $buffer) ) { >> // echo $buffer; >> $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : >> [\d\.]+(\/\d+) .+#","$1$2", $buffer )); >> fwrite ($handle_output,"\n" . $this_range); >> } >> } >> fclose($handle_input); >> >> fwrite ($handle_output,"\n"); >> fclose($handle_output); >> >> >> ?> >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> > > > ------------------------------ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > End of NZNOG Digest, Vol 153, Issue 16 > **************************************

2 1

nz ip range
by bigalownz 20 Sep '15

20 Sep '15

im doing a little project and im looking for a script to get nz ip ranges i did a Google search and found this, but as you can see it was from 2005 and out dated, the url doesn't work etc i need some help to update it thanks #!/usr/local/bin/php <?php $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; // $in_file = "country-ipv4.lst"; $out_file = "nzipranges.txt"; $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); $handle_output = fopen($out_file, "w"); $now = date ("r"); fwrite ($handle_output,"# Generated: $now\n\n"); while (!feof($handle_input)) { $buffer = fgets($handle_input); if ( ereg ( "nz", $buffer) ) { // echo $buffer; $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : [\d\.]+(\/\d+) .+#","$1$2", $buffer )); fwrite ($handle_output,"\n" . $this_range); } } fclose($handle_input); fwrite ($handle_output,"\n"); fclose($handle_output); ?>

8 7

TICSA Amendment Bill - Long commentary is long
by Beau Murrah 17 Sep '15

17 Sep '15

Hello- A long post follows that is adapted from some questions I received yesterday. These are some of my legal academic thoughts and not legal advice. My overall assessment of this very short one page TICSA Amendment Bill is that community must put energy into this process even if the Bill itself is insufficient and likely to be voted down. If it makes it past the first step there is a chance for proposing additions and changes in the form of Supplementary Order Papers and this is something to be optimistic about and contact your MP’s about. Even if the Bill fails at the first stage, there is the risk though that unless there is obvious energy put into it the whole issue reaches a state of entropy until some unforeseeable reactive event occurs where the law will finally get replaced or repealed. The Government will likely claim a lack of energy put into the Bill as evidence the status quo is acceptable, and who knows how many years it might be till the issue comes again on the Parliamentary floor for any kind of substantive change. Is this toothless? Yes, the Bill has no legal teeth in its own right in terms of statutory offences. On a personal level I must say I also think it is weak. There is no legal duty for the Minister/Director to follow the recommendations. For this could be dismissed as ineffectual. However, the Bill would creates added statutory powers and responsibilities that creative avenues legal challenge such as a judicial review of an Agency decision. Even if such a judicial review is never actualised it can start to carry weight “in the shadow of the law”. It means the Agency can be pressed to its statutory responsibilities by some entity pointing to a legal basis for their claims. I also think there is potential for the Bill to widen existing judicial review avenues elsewhere in the legislation that were very limited, given the interaction of the TAB and the Minister/Director’s duties. Consider Clause 2 of the Bill “Any matter to be referred to the Minister requesting the Minister to exercise his or her discretion or recommend the prescribing of an additional area of specified security interest must first be referred to the Technical Advisory Board for analysis and recommendations. “ If a Minister fails to refer the matter to the TAB first with enough time and detail so the TAB can give actual considered analysis and recommendations, on its face there would be breach of the Minister’s statutory responsibilities. This would tap into well established legal common law norms about the duty of consult and what that means in practice by Ministers, and open the case to judicial review in a Court. If the issue was intrusive enough on network operators this could potentially receive remedy’s in the form of injunctions on the matter at hand and form precedent for the future. I am trying to think of an example where this would be worth it economically, or in defence of rights of a NetOp or their subscribers, its not unforeseeable. A judicial review action could potentially be taken to seek an injunction on a area of security being decided while the TAB fully considers the issue. This could enforce a lag-time for compliance to allow network operators to react and plan ahead for impending decisions by the Minister. Take for example s50 of the Act: http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5626115.html <http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5626115.html> This section is closely related to the process of the Director in identifying network security risks which is relevant to the Bill. s50 also gives a list of things the Director must consider. Failing to give consideration to a mandatory consideration is a well recognised ground of judicial review of exercises of statutory power. As you can gather from the list above in the Section, its typically aimed at an enumerated list of more or less specific items. On its own an action by an individual against a public figure for merely failing to consider mandatory considerations has only a formal/technical remedy and it would be an expensive and lengthy procedure for all involved. The Agency would then, usually, only have to correct the error in some token way - such as issuing a report saying “we have consider all the relevant matters, our opinion is unchanged” - and move forward. However, the existence of this action combined with a technical advisory board gives potential for a legal entity that can bring to light a bigger picture of systemic and formal breaches that would make great copy in the newspaper or an Ombudsman-like governmental complaint if not a court judgment. Whichever of you may decide to sit on the Board (to be honest, not an entirely desirable role) would have the ability to oversee that mandatory consideration has been given on all of the ground under S50s. The Board could start issuing recommendations that align with the statutory duties and language, and force more compliance by the Agency, if it starts pointing out where this consideration hasn’t been given. This is at least one way a TAB could be applied to put the Agency on their toes like a real watchdog is supposed to. Isn’t all this going to play out in secret anyways because NatSec? If the Agency doesn’t follow any recommendations this would be secret? One issue I am interested in is use of the term “Security Interest” in the Bill and considering how much it maps onto the definition of “Security Risk” currently in the TICSA legislation, and whether this should change. The definition of security risk in the TICSA legislation is inclusive of the concept of national security but the term national security itself is not defined. This question about whether all of the risks and all of the Agencies TICSA decisions/activities are to be legally treated as national security concerns is ultimately going to decide whether TICSA plays out before and in an open civil court as the norm or whether it will go into classified operations only where sufficient evidence is provided to the Courts to justify otherwise. I am strongly of the view this is a piece of regulation which only narrowly intersects with national security. Cloaking the daily and annual grind of bureaucracy and notification schemes and compliance in national security is a wrong approach and arguably just a very easy lawyerly way of keeping the Agency out of Court. I will be writing more on this topic and releasing it in a proper text form, and am definitely planning on submitting something TICSA-related to Kiwicon. Kind regards ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Changes to the NZRS zone and web scan policy
by Sebastian Castro 17 Sep '15

17 Sep '15

Hello everyone: Following some useful feedback from an operator, we have made changes to the zone and web scan practice statement. Modifications are around three main areas - Provide a web page associated to the server where the scan comes from. Now http://zonescan.nzrs.net.nz will lead you to an information page that explains what is the scan about - Kind of data collected. - Reference to where aggregated data from the zone scan is published, using our new Internet Data Portal We are always open to receive feedback and improve our communication and processes. With the aggregated data available, your can find out the state of the .nz name space. The URL of the improved practice statement is https://nzrs.net.nz/dns/zone-and-web-scanning Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

TICSA Amendment Bill drawn from ballot
by Beau Murrah 16 Sep '15

16 Sep '15

Hello NZNOG, http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC… <http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC…> Clare Curran’s TICSA Amendment Bill has been drawn from the ballot. Ill be giving it a close read myself in the next day or two, would be interested in any comments/discussion off-list or on-list. A link to the Bill itself is here: http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a… <http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a…> My research & writing on TICSA is still ticking along- I am considering trying to submit a talk for Kiwicon but thats quite a high bar to aim for, but I plan to release the text regardless around the same time as the conference. As a brief repeat summary, the text focuses in-depth on the deeply untested/unprecedented legal concept of Good Faith which has been imported into this area. It is imperative to avoiding any liability under the Act and also crucial to any sort of pro-active action against the Agency. Kind regards, ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Can whois registrar info be wrong?
by Richard Hector 16 Sep '15

16 Sep '15

Hey all, Is it technically possible for the registrar details in whois (for a .com domain) be out of date, or is the whois the canonical source of the info? If it is possible, how would I go about finding out who's really in control? Does a registrar have an interface for that? Unfortunately I'm not sure how reliable my client's own records are on this ... Cheers, Richard

4 5

Phish? Re: .NZ would like 5 minutes of your time
by Richard Hector 16 Sep '15

16 Sep '15

It's an email apparently from one party (NZRS), apparently sent by a second party (my registrar), via a third party (mscv.net) with a link to a fourth party (surveymonkey.com) which seems classic phishing. On the other hand it "looks quite legit". If it is legit, am I right in thinking it's a bad way to go about it? Any comments from participants? Richard

2 2

Victoria University breakfast seminar for IT managers in Auckland 1st October 7am
by Ian Welch 14 Sep '15

14 Sep '15

Hi, My colleague at the School of Information Management has organised a seminar at the VUW campus in Auckland aimed at managers. They said that they are particularly interested in people working in networking so I thought I’d pass it on via the list. The main speakers are Ian Clarke (CEO of Fronde) and Prof Benoit Aubert (Information Systems at Victoria Business School). RSVP by 18th of September. Full details are here: http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ… <http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ…> Cheers, Ian — Ian Welch School of Engineering and Computer Science Victoria University of Wellington

1 0

KIWICON 9 CALL FOR (cyber) PAPERS
by Mike Forbes 14 Sep '15

14 Sep '15

---{ A WHIRRING TELETYPE CHIRPS, SPEWING FORMFEED INTO THE PILE }--- UNCLAS MSGID/SITREP/9TH CYB DIV// UNIT/KIWICON RESERVE REAR INTEL GRP// PERID/120915:0000Z/TO:111215:0000Z// HEADING/TITLE// AMPN/INTEL SITREP SUMMARY NEW ZEALAND CYBERWAR DAY 137// HEADING/GENERAL// AMPN/FORWARD EMPLACEMENTS REPORT CONTINUING ENGAGEMENT WITH ENEMY. 3 X SORTIES OF 8 X SU-25 FROGFOOT CONDUCTED GND ATTACKS WITH TCP SYN/FIN ON PORT 7199. JMX CONSOLE TOOK HEAVY CASUALTIES, ACTING CO RPTS OPERATIONAL READINESS AT 40%, LOAD AVG 18.7. WOUNDED EVACED TO DEV SHM, AWAITING ONWARD TRANSPORT. RECCE REPORTS ENEMY RESUPPLY CONVOY MAPREF PAPA-ZULU WITH BMP-24BIT MECH INF DIVISION STRENGTH, B-HAWK MANPAD UNITS, PDF MINELAYERS.// HEADING/COMMANDER EVALUATION// AMPN/ FURTHER ATTACKS ON DUG IN POSITIONS AT MAPREF XRAY-PAPA. SIGNIFICANT ESCALATION OF CYBERING EXPECTED. RECOMMEND IMMEDIATE REINFORCEMENT FROM CYBER RESERVE// ---------------------{ SOME TIME LATER ... }--------------------- KIWICON 2015 (HTTPS://WWW.KIWICON.ORG/CFP.HTML) SELECTIVE CYBER SERVICE | CALL FOR CYBER PAPERS We hereby notify you that by this notice published on the Internet pursuant to the some fictitious regulations, you have been called up for service with the Kiwicon Cyber Expeditionary Force, as a Reservist of the Ninth Division of the General Hacker Reserve, Kiwicon Cyber Corps. You are hereby and forthwith directed to present your response to the Kiwicon 9 CFP by filing your report on this page. Each talk and/or training submission should be made on a separate form. They must be filed individually, and upsetting the file clerks is never a good idea this early in campaign season. The first round of talks, correction: CYBER WARFIGHTER EDUCATIONAL MATERIALS will be announced on the 26th of October, NZDT, and will be complete by the 9th of November, NZDT. If the evaluation board passes you as fit for service, you will be required to present yourself to the St James Theatre of Cyberwar for the dissemination of the aforementioned material. You will be notified in due course by an authorized officer of the Crue regarding your particular time and place for reporting. Practical training will be held on the 9th of December, 2015, while presentations will be given on the 10th and 11th of December. Note: it is the responsibility of the instructor to ensure all material has been appropriately declassified. You are also hereby further notified that if you fail to obey this order you are liable to be considered sensible without further notice. God save the Mince Queen, Col. St. John Beauchamp-Beauclerk (Adjutant Crue) IMPORTANT NOTICES (read each paragraph carefully) If you report pursuant to this order please fill out our google form (triplicate copies not required at this time) at https://goo.gl/JnoCb3. Answer the questions to the best of your ability, and let us know if you have any special requirements (motorcycles, pyrotechnics, therapy animals, exorcisms). Should floods, illness, fires, and poorly scheduled wedding ceremonies unavoidably prevent you from reporting as ordered above, you must write immediately to the Adjutant Crue stating the circumstances which prevent you from reporting. As per special order, written notes from Lord Tuskington will also be accepted. If you are employed, you should inform your employer of this order and that the examination is merely to determine if you may be fit for service. If found suitable for induction, documentation will be provided by an authorized officer of the Crue for your employer as early as possible. Troop movements to the marshaling point are the fiduciary responsibility of the cyber warfighter and will not be reimbursed regardless of evaluation board determination. To re-familiarise yourself with your duties as Cyber Reserve, please review the Standard Operating Procedure with particular observation to the sections relevant to the ongoing conflict, viz; Cybering Computering Minced meats Cyber hacking Computer cyber hacking Hacking (cyber) Cyber hoodies, correct wear and maintenance of, Cyber warring Any further communications arising from this notice must be sent by to kiwicon(a)kiwicon.org. IRC communications cannot be accepted due to our ongoing lack of ability to remember to tell everyone else that they happened.

1 0

Vodafone / ihug DNS Servers - Reset of Zone File
by Justin Lewis - ResponseMedia 14 Sep '15

14 Sep '15

Hi All, Is anyone else seen ns1.ihug.net.nz and ns2.ihug.net.nz Reverting to older zone files since around lunch time today? Looking like the zone serial is back to "2015082705" should be at least "20150905XX" Have a customer who's entire zone file has been reverted to an old record that's is over 3 weeks old. Customer portal is showing the new zone file though. Regards, Justin Lewis ResponseMedia [https://newoldstamp.com/editor/profilePictures/profile-3c8f7090e76fa0afb6a3…] Mobile: 027 300 6242 Email: justin.lewis(a)responsemedia.co.nz<mailto:justin.lewis(a)responsemedia.co.nz> Address: Christchurch, NZ [https://editor.newoldstamp.com/images/f.jpg]<http://www.facebook.com/ResponseMedia.NZ> [https://editor.newoldstamp.com/images/tw.jpg] <http://www.twitter.com/ResponseMediaNZ> [https://editor.newoldstamp.com/images/instagram.jpg] <https://instagram.com/ResponseMediaNZ/> Dropbox Partner SMX Mail Partner

2 1

Any NOCs seeing alarms in the Tauranga Chorus exchange?
by Jesse Archer 12 Sep '15

12 Sep '15

We've lost power in the colo room, to both A + B feeds.

3 4