- NZNOG - lists.nznog.org

RE: Domainz spams entire .nz whois database
by Tim John 08 Dec '02

08 Dec '02

> However, competitors like 2day.com are in effect disadvantaged by this, > because they may want to offer their services as well, but they're not > in the same position as Domainz, and don't have existing relationships > with .nz name holders. But surely that is at the discretion of the .nz Provider - and in this instance (and there are reasons), 2Day.com have not signed the accreditation agreement, so the customers are actually that of Domainz. There are a significant number of domain names in the Registry that we _know_ are customers of Peter Mott, although they have registered with Domainz for their domain names. We fully expect Peter to contact his customers if, no when Peter becomes a Registrar and try to move them from us. This is fair competition. I'm sure there will be many other Providers are in the same boat and will try and entice their customers (and indeed everyone else's) away from Domainz. Obviously, Domainz must try and introduce facilities to keep our customers but the new marketplace is here. People now have choice. The email distributed this morning was to name holders of domain names that are directly billed by Domainz. How can this be spam ? Tim -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Sunday, 8 December 2002 11:48 a.m. To: Matt Brown Cc: nznog(a)list.waikato.ac.nz Subject: Re: Domainz spams entire .nz whois database On Mon, 9 Dec 2002, Matt Brown wrote: > Interesting to note that the individual who started this thread is now > a competitor to Domainz. I think it's a tricky one: it's fair to say that Domainz has an existing relationship with .nz name holders and thus, as you say, can communicate with its customers. However, competitors like 2day.com are in effect disadvantaged by this, because they may want to offer their services as well, but they're not in the same position as Domainz, and don't have existing relationships with .nz name holders. They'd be spamming if they were to try the same thing, basically. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Whois Server
by Ewen McNeill 08 Dec '02

08 Dec '02

In message <000101c29e78$9888ee10$0800a8c0(a)roadshow.org>, "Steve Winter" writes: >Was I asleep the day that someone mentioned that whois.domainz.net.nz no >longer existed, or is it simply a temporary situation this afternoon >that prevents me from getting anything useful from there...??...if it's >gone, can anyone point me in the direction of an alternative for the .nz >domain space.. whois.srs.net.nz That talks directly to the SRS database using the SRS Registrar/Registry protocol. The output format is similar, but different from the Domainz one; the format is documented at: http://dnc.org.nz/content/srs-whois-spec.html (A quick test suggests that the fix for the bug that Joe Abley mentioned to me (regarding timezone formatting) has gone live.) Last I heard whois.domainz.net.nz was eventually going to be pointed at the whois.srs.net.nz server (because "whois.domainz.net.nz" is hardcoded as a name into some whois clients), but AFAIK that hasn't been done yet. It appears that whois.domainz.net.nz is just down at present, and presumably will be back up again RSN. Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 7

Re: Domainz spams entire .nz whois database
by Ewen McNeill 08 Dec '02

08 Dec '02

In message <3.0.6.32.20021209095454.008f6430(a)mail.igrin.co.nz>, Simon Byrnand wr ites: >At 12:51 8/12/02 -0800, Chris Wedgwood wrote: >>On Mon, Dec 09, 2002 at 08:06:46AM +1300, Peter Mott wrote: >>> We note that Domainz has spammed every .nz registrart promoting new >>> URL and Email redirection services to be offered in the new year. >> >>A few people claim not to have seen this... attached. > >Now EVERYONE has seen it, whether they wanted to or not ;-) My best guess is that it was sent to the Admin Contact or Technical Contact. I have three domains registered at present, and only received one copy of the message, to the address used on all the Technical Contacts, and some of the Admin Contacts. I also suspect that it probably only went to "Domainz Customers" (ie, those with names not listed against another "registrar"). Which probably makes it technically not spam (ie, existing business relationship). A note on the website might have caused less concern than a large mailout though. Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Whois Server
by Steve Winter 07 Dec '02

07 Dec '02

Hi, Was I asleep the day that someone mentioned that whois.domainz.net.nz no longer existed, or is it simply a temporary situation this afternoon that prevents me from getting anything useful from there...??...if it's gone, can anyone point me in the direction of an alternative for the .nz domain space.. Thanks Steve

1 0

Re: Domainz spams entire .nz whois database
by Matt Brown 07 Dec '02

07 Dec '02

I personally appreciated receiving this email from Domainz and do not in any way consider it spam. I am a customer of Domainz and appreciate that Domainz are making an effort to keep me informed of the changes in the domain name system. Interesting to note that the individual who started this thread is now a competitor to Domainz. -- Matt Brown - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

GEEK.NZ
by Joe Abley 05 Dec '02

05 Dec '02

On Friday 30 August 2002 Dean Pemberton wrote: > Just got this back from InternetNZ re the .geek.nz submission. > > Interesting to note two things. > > 1) My request to have .geek.nz processed at the same time as .bank.nz > was > rejected. They can only apparently handle one at a time. > 2) There will be no more 2ld's until they finish a full review. > > Got in just in time but there will be no .celt.nz =( The wheels are in motion! http://geek.nznog.org/ Come, geeks! To arms! Reclaim your heritage! Add your name to the list! Stand up and be counted! etc! [obOnTopicContent: beers are on Dean if this gets the kind of voter support it so clearly deserves; developers: better not hard-code those regexes, geek.nz is coming; ISP helpdesks: prepare your staff to answer the surely massive barrage of interest in getting geek.nz domains from customers; NetOps: stand by for floods of traffic to authoritative servers as people who can't stand the excitement issue thousands of resolver requests for names under GEEK.NZ, etc, etc, etc.] GEEK.NZ CONSULTATION PROCESS BEGINS FOR IMMEDIATE RELEASE 6 December 2002 The first stage in the approval process for the proposed new GEEK.NZ second-level domain has begun. The office of the NZ Domain Name Commissioner has confirmed that a timetable for processing the GEEK.NZ application has been proposed, with public consultation to take place over the Christmas period. "The application for GEEK.NZ was submitted a few months ago, but we were happy to let the Domain Name Commissioner delay the approval process until the BANK.NZ application had been dealt with," confirmed Dean Pemberton, who made the initial application. The application for GEEK.NZ was made on behalf of the community technicians and engineers who built the Internet infrastructure in New Zealand over the past twenty years, and who continue to push it forward today. Despite the changing fortunes of the Internet and telecommunications industries, the technical community responsible for keeping the Internet running smoothly remains tightly knit and well-connected. "GEEK.NZ defines a distinct community of interest, just as other second-level domains do," explains Andy Linton. "However, GEEK.NZ also provides an opportunity for deploying additional, more experimental services such as DNS Security (DNSSEC) and IPv6, which are many years away from deployment in other registries, like CO.NZ." Linton sees GEEK.NZ performing a role for DNS service which is analogous to the role the high-speed, optical research network, "Internet2", provides for ISPs. "The community which GEEK.NZ serves is technical, and is driven by the development of technology in a way that the communities served by other second-level domains are not. You couldn't experiment with DNSSEC in CO.NZ without risking the quality of service that the commercial community expects, but experimentation is a way of life for the geek community," Linton added. GEEK.NZ will provide a place in the DNS where the community of technical people in New Zealand can express itself, thrive and expand. Providing recognition to the technical community in this way will allow New Zealand to demonstrate its commitment to the people who fuel the knowledge economy, and help slow the otherwise steady procession of technical people leaving the country every year. The approval process for GEEK.NZ includes a period for public consultation, which is followed by a vote conducted over the internet. Pemberton expects the NZ Domain Name Commissioner to publish the timetable for consultation this week. For more information, contact: media(a)geek.nznog.org More information on the GEEK.NZ proposal can be found at: http://geek.nznog.org/ ENDS - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: Joining the team
by Andy Linton 05 Dec '02

05 Dec '02

Anyone who wants to help with this and get beer from Dean should look at the web site listed in Joe's posting for details. Good to see the tradition of geeks not reading the documentation lives on! (:-) Let's not fill nznog with discussion on this. andy - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

New ASN allocation from IANA to RIPE
by Rob Thomas 03 Dec '02

03 Dec '02

Hi, NZNOG listfolk. [ Apologies to those of you who have seen this note in other fora. ] As of 03 December 2002 IANA has allocated a block of formerly unallocated ASNs to RIPE. I have adjusted my monitoring accordingly, and you should review any ASN filtering or logging you have in place. The ASN ranges involved are: Was: 28672 - 32767 IANA Now: 28672 - 29695 RIPE 29696 - 32767 IANA You will find the IANA master ASN list here: http://www.iana.org/assignments/as-numbers My ASN monitoring can be found at the following URLs: http://www.cymru.com/BGP/asnbogusrep.html http://www.cymru.com/BGP/asnreport.html http://www.cymru.com/BGP/ Comments and feedback are welcome and encouraged. Be the first (heck, even second) in your ASN to join the CREDITS section! :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[OT] I'm seeking work - could be stand-in while you take a holiday?
by Martin D Kealey 03 Dec '02

03 Dec '02

Sorry if this is a bit off-topic, but there are mouths to be fed... I'm currently seeking work/contracting/dosh-in-exchange-for-hours. So if you're looking for someone to cover for you while you enjoy the summer sunshine, I'd be happy to step up to the mark. I'm not quite your net-godfather like say Andy Linton, but I reckon I have a few clues; I can do network-adminny sorts of things, or security auditing, or programming ... or even just answering the phone and knowing what I'm talking about. I can be contacted on +64-21-637007, or by email to <martin(a)sig.net.nz>. I'm in Auckland but will travel if necessary. -Martin PS: For those don't who remember me, I was the convenor for the Uniforum conference earlier this year in Auckland, of which the NZNOG conference formed a part. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Info - Connection Speeds Outside Auckland
by Zuricka Azavedo 30 Nov '02

30 Nov '02

Hi All I am studying for my masters at AIS St. Helens. My research focuses on E-Commerce proliferation in the Wine Industry. Most companies that I have spoken with are outside Auckland and seem to suggest that the Internet connection speeds available to them are too slow to even effectively browse the Internet let alone host E-Commerce websites. Is it true that there are absolutely no connectivity issues anywhere in New Zealand, or is it Vice Versa ? Is it that higher speed telco circuits outside Auckland and Wellington are available but not affordable to most Small Businesses Can anyone please shed some light on this issue ? Also my research guide suggests that perhaps the vision of NZ being totally online and E-Commerce driven is being fuelled only by technical people who are less than 5% on the population. Is this true ? Thankyou in advance to everyone on this list Cheers Zuricka Azavedo

3 2

New routes for tranzpeer-networks
by Matthew Poole 28 Nov '02

28 Nov '02

Hi all. New advertisements of 202.37.64.0/24 and 202.37.65.0/24 Full prefix list attached Matthew Poole Network Engineer CallPlus, AKL, NZ DDI +64 9 919 6036 Fax +64 9 919 6037 Cell +64 21 224 6927

1 0

Who cut off the piece of string?
by Juha Saarinen 23 Nov '02

23 Nov '02

>From the US West Coast: ~$ traceroute www.domainz.net.nz traceroute: unknown host www.domainz.net.nz ~$ traceroute www.idg.co.nz traceroute: unknown host www.idg.co.nz ~$ dig idg.co.nz. soa +trace ; <<>> DiG 9.2.1 <<>> idg.co.nz. soa +trace ;; global options: printcmd . 162840 IN NS C.ROOT-SERVERS.NET. . 162840 IN NS D.ROOT-SERVERS.NET. . 162840 IN NS E.ROOT-SERVERS.NET. . 162840 IN NS F.ROOT-SERVERS.NET. . 162840 IN NS G.ROOT-SERVERS.NET. . 162840 IN NS H.ROOT-SERVERS.NET. . 162840 IN NS I.ROOT-SERVERS.NET. . 162840 IN NS J.ROOT-SERVERS.NET. . 162840 IN NS K.ROOT-SERVERS.NET. . 162840 IN NS L.ROOT-SERVERS.NET. . 162840 IN NS M.ROOT-SERVERS.NET. . 162840 IN NS A.ROOT-SERVERS.NET. . 162840 IN NS B.ROOT-SERVERS.NET. ;; Received 292 bytes from 127.0.0.1#53(127.0.0.1) in 4 ms nz. 172800 IN NS MX.NSI.NASA.GOV. nz. 172800 IN NS GORGON.XTRA.co.nz. nz. 172800 IN NS NS1.DNS.NET.nz. nz. 172800 IN NS NS2.DNS.NET.nz. nz. 172800 IN NS NS3.DNS.NET.nz. nz. 172800 IN NS NS4.DNS.NET.nz. ;; Received 258 bytes from 192.33.4.12#53(C.ROOT-SERVERS.NET) in 125 ms co.nz. 86400 IN NS ns1.dns.net.nz. co.nz. 86400 IN NS ns2.dns.net.nz. co.nz. 86400 IN NS ns3.dns.net.nz. co.nz. 86400 IN NS ns4.dns.net.nz. co.nz. 86400 IN NS ns5.dns.net.nz. co.nz. 86400 IN NS ns6.dns.net.nz. co.nz. 86400 IN NS ns7.dns.net.nz. ;; Received 273 bytes from 128.102.18.31#53(MX.NSI.NASA.GOV) in 74 ms idg.co.nz. 86400 IN NS ns1.idg.co.nz. idg.co.nz. 86400 IN NS ns1.iconz.co.nz. ;; Received 101 bytes from 203.97.8.250#53(ns3.dns.net.nz) in 183 ms ;; connection timed out; no servers could be reached -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 8

AS9736/SRS routing (was Re: Who cut off the piece of string?)
by Ewen McNeill 23 Nov '02

23 Nov '02

In message <80616.1038101587(a)toybsd.zl2tnm.gen.nz>, Don Stokes writes: >Joe wrote: >>Incidentally, wasn't the original plan for AS9736 to be multi-homed? >[.... yes, but didn't happen ....] >But mainly the need was for registry services rather than the DNS. In >real life, most of the automated stuff was going via the email template, >and that could back off and retry quite happily. FWIW, the primary site for the SRS systems is currently living outside the AS9736 address space (the secondary site is in a /24 inside that space). The primary site is in a long prefix CIDR block of ex-Paradise TelstraClear address space, which is also advertised into WIX (but not APE) as a long-prefix CIDR block, and that should help to ensure availabilty at least within NZ in the face of some outages, but otherwise it's not multihomed. (Although given a number of sites don't accept routes from WIX and/or don't accept prefixes that long, it may not help _that_ much. That said, I believe the current hosts of the SRS primary site are planning a renumbering into a shorter prefix CIDR block in the next month or two, which may help.) Given that the SRS is accessed through "online queries" there's probably going to be somewhat more need for AS9736 to be multi-homed if the primary site is moved into that space as well at some point. (AFAIK there'll be less reliance on the "email template" approach once the SRS opens up to competition in early December.) Ewen PS: The APNIC info for AS9736 looks to be somewhat out of date these days, which is interesting because I had thought at least some of the NZ DNS Politics were going to lead to it being updated.... - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Who cut off the piece of string?
by Juha Saarinen 23 Nov '02

23 Nov '02

On Sun, 24 Nov 2002, Chris O'Donoghue wrote: > Typical I reply and it seems things are working now :( Seems so -- is it just me or are some of the dns.net.nz not responding to queries? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

82/8 allocated to RIPE
by Rob Thomas 22 Nov '02

22 Nov '02

Howdy, NZNOG listfolk. [ Apologies to those of you who have received this note in other fora. ] 82/8, formerly IANA - Reserved, has been allocated to RIPE as of 23 NOV 2002. Please take the time to adjust your filters accordingly. I have updated my documents and monitoring for the new allocation. Master list of IANA IPv4 allocations http://www.iana.org/assignments/ipv4-address-space Bogon List http://www.cymru.com/Documents/bogon-list.html Bogon Monitoring http://www.cymru.com/BGP/robbgp-bogon.html Secure IOS Template (ported to Juniper by Steve Gill) http://www.cymru.com/Documents/secure-ios-template.html http://www.qorbit.net/documents/junos-template.pdf Secure BGP Template (ported to Juniper by Steve Gill) http://www.cymru.com/Documents/secure-bgp-template.html http://www.qorbit.net/documents/junos-bgp-template.pdf Secure BIND Template http://www.cymru.com/Documents/secure-bind-template.html Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Whangarei colo?
by K. Anand Lal 20 Nov '02

20 Nov '02

Are there any colo providers in the Whangarei CBD area? We're looking at housing ~16RU of kit. The facility must be secure and have temperature control. Generator backup power is desirable as is a 24/7 "arms and legs" site contact. Any leads would be appreciated. Cheers, ----------------------------------------------------------- K. Anand Lal | ph: +64.9.3592767 Senior Network & Systems Engineer | +1.310.7399323 AS7657 | fax: +64.9.3581518 | noc: +64.9.3592708 ----------------------------------------------------------- - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Nameserver swap request
by Lincoln Reid 18 Nov '02

18 Nov '02

Hi, We are looking for someone to exchange a fairly low volume dns server with to increase our name server diversity. Our dns server is a 2U procase rackmount, we would be happy to exchange the hosting of it for a similar arrangement in a rack at our premises. Our server room is situated in Thorndon ( Wellington ) just across from the stadium with a 100mbit citylink connection, we have the usual UPS / Generator / Air conditioning etc. Traceroute to linuxnet.co.nz to get an idea of where we are placed in terms of connectivity, or alternativly email / phone me. If anyone is interested, get in touch. Cheers, -- Lincoln Reid Systems Engineer LinuxNet - AS18119 lincoln(a)linuxnet.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Another RBll listing APNIC addresses as dialups and blocking them.
by jfp 17 Nov '02

17 Nov '02

http://www.dnsrbl.net/index.html You might want to check your addresses and get them to fix it. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Contacts for 3KB, AMP and Netsmart for APE website?
by Simon Lyall 13 Nov '02

13 Nov '02

Just a quick request. Do anyone have a network contact for any of the above 3 companies that appear to have been recently connected to APE? , I'd like to get their details up on the Website. I tried emailing Netsmart and 3KB but no luck and I've not idea on who to contact at AMP. I've forgotten the trick for getting the nznog subscriber list. Private email would be best rather than cluttering up the list. -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

LACNIC ASN allocation
by Rob Thomas 12 Nov '02

12 Nov '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this post in other fora. ] IANA has allocated a range of AS numbers to LACNIC, the new Latin American and Caribbean RIR, http://lacnic.net. This allocation was made as of 12 November 2002. The new LACNIC range is: 27648 - 28671 Allocated by LACNIC (November 2002) This changes the formerly IANA held range as follows: (was) 27648 - 32767 Held by the IANA (now) 28672 - 32767 Held by the IANA You may wish to adjust any filters accordingly. I have updated my bogus ASN monitoring, which can be found here: http://www.cymru.com/BGP/asnbogusrep.html The master list of ASNs can be found here: http://www.iana.org/assignments/as-numbers Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

FW: Important Informational Message - root.zone change
by David Farrar 07 Nov '02

07 Nov '02

Not sure how this is meant to circulate around but nznog seems a sensible list to pass this onto. DPF > ------ Forwarded Message > From: "John Crain" <crain(a)icann.org> > Date: Mon, 4 Nov 2002 15:26:17 -0800 > To: <dnsop(a)cafax.se> > Subject: Important Informational Message - root.zone change > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > *****PLEASE NOTE***** > This is an important Informational Message to the internet community: > > November 5, 2002, the IP address for J.root-servers.net will > change in the authoritative NS set for "dot". The change will > be reflected in zone serial # 2002110501. > > The new set of servers authoritative for "dot" will be: > A.ROOT-SERVERS.NET. 5w6d16h IN A 198.41.0.4 > H.ROOT-SERVERS.NET. 5w6d16h IN A 128.63.2.53 > C.ROOT-SERVERS.NET. 5w6d16h IN A 192.33.4.12 > G.ROOT-SERVERS.NET. 5w6d16h IN A 192.112.36.4 > F.ROOT-SERVERS.NET. 5w6d16h IN A 192.5.5.241 > B.ROOT-SERVERS.NET. 5w6d16h IN A 128.9.0.107 > J.ROOT-SERVERS.NET. 5w6d16h IN A 192.58.128.30 > K.ROOT-SERVERS.NET. 5w6d16h IN A 193.0.14.129 > L.ROOT-SERVERS.NET. 5w6d16h IN A 198.32.64.12 > M.ROOT-SERVERS.NET. 5w6d16h IN A 202.12.27.33 > I.ROOT-SERVERS.NET. 5w6d16h IN A 192.36.148.17 > E.ROOT-SERVERS.NET. 5w6d16h IN A 192.203.230.10 > D.ROOT-SERVERS.NET. 5w6d16h IN A 128.8.10.90 > > This WILL require a change to your root hints file. The new > file will be available via anonymous ftp from > rs.internic.net:/domain/named.root as well as > ftp.internic.net:/doamin/named.root starting 11/5/02 1700UTC (12pm > EST/9am PST). > > Both the new and old j.root-servers.net IP space will provide > answers in parallel for the foreseeable future. > > _________________________________________ > > John Crain > Manager of Technical Operations > ICANN/IANA > > crain(a)icann.org > 1AF4 F638 4B2D 3EF2 F9BA 99E4 8D85 69A7 > > _________________________________________ > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Personal Security 7.0.3 > > iQA/AwUBPcb++9Gxp5XUiliSEQI5wwCfXE2Dhz0XJCGJagRgPDz7y2A85ekAoIPb > 0ufIR65iR8KVhqKCFbeUoxsc > =GVDN > -----END PGP SIGNATURE----- > > > #---------------------------------------------------------------------- > # To unsubscribe, send a message to <dnsop-request(a)cafax.se>. > > ------ End of Forwarded Message > > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

[OT] RFV - bank.nz
by Lin Nah 07 Nov '02

07 Nov '02

Hi All The banks have been trying to get this for ages despite being told it isn't needed. This is the 3rd time they are trying and I assume they want to try and try and try again for 1000 times till they get it. That is IMHO not the way to do things. I strongly urge everyone to vote agaist the formation of bank.nz regards Lin ps If you would like curry and beer this thursday night, see if there's anything happening in your town at thursdaynightcurry.com If not start up one for your town. ---------- Forwarded message ---------- Date: Mon, 04 Nov 2002 08:28:47 +1300 From: David Farrar <secretary(a)internetnz.net.nz> Reply-To: public-discuss(a)internetnz.net.nz To: public-announce(a)internetnz.net.nz Subject: [public-announce] RFV - bank.nz RFV - Request For Votes - bank.nz InternetNZ (www.internetnz.net.nz) is conducting a vote to gauge whether there is support for the creation of a new second level domain in the *.nz namespace - namely bank.nz. The details of the application and the entire process can be found at http://www.internetnz.net.nz/dns/2nd-level-domains/ and it is being considered based on the policy adopted in May 1997 for considering new second level domains. The application from New Zealand Bankers' Association and the InternetNZ policy can be found at this link. Voting for this application will last 14 days from the date of the start. The vote will start November 3 2002 at 23:59 and closes November 17, 2002 at 23:59. The application must receive at least 200 votes and at least 70% support for it to enter the next phase which is a formal submission process. This vote will not determine if .bank.nz 2LD is implemented, only to see if it has wide enough support for it to continue in the approval process. Voting is available via a website or email and details of voting can be found at http://www.internetnz.net.nz/dns/2nd-level-domains/2ld021103-voting_details… Please note to be able to vote you have to have an valid email address and a NZ located postal address. Any missing information on the ballot will result in the ballot being ruled invalid. Please check to make sure all the required information is included on your ballot. Voting opens online at http://vote.internetnz.net.nz at 2359 Nov 3. An e-mail ballot can be cast by filling in the form below and sending it to vote-bank(a)internetnz.net.nz (reply should work but check). Delete two of the three voting options plus all text before and after the ballot. --BEGININNG OF BALLOT-- Name : E-mail address : NZ postal address : I VOTE FOR THE CREATION OF .BANK.NZ I VOTE AGAINST THE CREATION OF.BANK.NZ I ABSTAIN --END OF BALLOT-- Any inquiries should be sent to the Voting Officer at vote-help(a)internetnz.net.nz -- David Farrar, Secretary, InternetNZ secretary(a)internetnz.net.nz or david(a)farrar.com _______________________________________________ public-announce mailing list public-announce(a)internetnz.net.nz http://listserver.internetnz.net.nz/mailman/listinfo/public-announce - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

RE: Tranzpeer prefix list update
by Maurice Wilkinson 03 Nov '02

03 Nov '02

Matthew These prefixs were already present with GGI and Xtra ip prefix-list tranzpeer-networks seq 180 permit 203.215.142.0/24 ip prefix-list tranzpeer-networks seq 185 permit 203.215.143.0/24 Maurice -----Original Message----- From: Matthew Poole [mailto:matthew.poole(a)attica.co.nz] Sent: Mon 4/11/2002 2:42 p.m. To: NZNOG Cc: Subject: Tranzpeer prefix list update ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ N��r��y��|��צj)m�f��h��b��F��'�^��ay�ʇ��z��i�.�˛��m��

1 0

RE: [OT] RFV - bank.nz
by Donald Neal 03 Nov '02

03 Nov '02

> -----Original Message----- > From: Lin Nah [mailto:lin(a)darkmere.gen.nz] > Sent: Monday, 4 November 2002 15:02 > To: nznog(a)list.waikato.ac.nz > Subject: [OT] RFV - bank.nz > > > Hi All > The banks have been trying to get this for ages despite being told > it isn't needed. This is the 3rd time they are trying and I assume > they want to try and try and try again for 1000 times till > they get it. > > That is IMHO not the way to do things. I strongly urge everyone to > vote agaist the formation of bank.nz > > regards > Lin No, this is indeed off topic for this list. - Donald Neal NZNOG List Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Tranzpeer prefix list update
by Matthew Poole 03 Nov '02

03 Nov '02

To all those who peer with us, please add the following two networks: 203.215.142.0/24 203.215.143.0/24 Full list attached. Thanks -- Matthew Poole Network Engineer CallPlus, AKL, NZ DDI +64 9 919 6036 Fax +64 9 919 6037 Cell +64 21 224 6927

1 0

Filtering of WIX prefixes
by Sam Sargeant 31 Oct '02

31 Oct '02

I've run up against a frustrating problem and some advice would be appreciated. We have a /29 via AT&T here in Wellington. We advertise this /29 to the WIX route servers. Via WIX, we receive a prefix from a national ISP[1]. Any attempts to send traffic to this ISP fall silently into the bit-bucket. >From what I understand, the ISP does not accept any prefix from WIX that is larger than a /24. Given our traffic is being sent directly to their WIX router (layer-2 headers confirm this), I believe their ingress filtering is dropping this traffic since the return-path doesn't match. If I filter the ISP's prefix, the transit is handled by AT&T and everything works just fine. Effectively, the only way I can talk to them is to go "the long way". Now, I have no major problem with any AS saying "our policy states we only accept prefixes smaller than /24". What frustrates me is that the ISP is seemingly saying : ISP> Hello Wellington! If you have any packets for this prefix, send them to me! US > Excellent! Here, have some traffic for one of your hosts. ISP> What? Who are you? I think I'll drop this. [ ... ] ISP> Send me your traffic Wellington! >From what I can tell, there are 30 prefixes advertised on WIX that are >/24, and these amount to ~672 hosts. If I'm correct (and I'll admit I'm making an educated guess here), then all of those hosts are unable to talk to this ISP. So, my options are: 1. Stop playing with pissant /29's on WIX. 2. Get the ISP to change their ways. 3. Filter the ISP's prefixes that I receive from WIX. I think the most likely option is #3. However how am I to know what other networks do the same thing? Shall I troll every single WIX network to check I can talk to them, then build a filter-list based on that? Ugly. Sam. ----- [1] Since I have disagreed with the ISP in question, and they haven't been forthcoming in getting it resolved, I've elected not to name them. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

Lame reports - thanks!
by Rob Thomas 29 Oct '02

29 Oct '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this post in other fora. ] [ Apologies as well for all of the spam today. :) ] My thanks to the increasing number of you who submit lame delegation logs to me. This helps to increase the reach and usefulness of the Weekly Lame Name Server Report page: http://www.cymru.com/DNS/lame.html You will find a (much better bandwidth) mirror of the site here: http://bgp.lcs.mit.edu/dnsmirror/lame.html If you have logs you can share, anonymously or with full credit, feel free to send them to lamer(a)cymru.com. Be the first in your ASN to fill my lamer file system. :) Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

IANA IPv4 allocation list format change
by Rob Thomas 29 Oct '02

29 Oct '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this post in other fora. ] For those of you who don't know, the format of the IANA IPv4 allocation list has changed. It now lists each prefix as a distinct /8, instead of hyphenated ranges of prefixes. This change took place on 25 October. If you are parsing this file automagically, you may wish to modify your scripts. My own script claimed that several new allocations had been made. It's fixed now. :) http://www.iana.org/assignments/ipv4-address-space My thanks to the IANA folks for this change! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Any isps support ODMR - RFC2645?
by Steve Lang 23 Oct '02

23 Oct '02

Hiya. Thanx for the detailed reply, what you say makes much more sense. Interesting that Telecom don't send framed-ip, that'd be annoying. Are they still using the merit Radius code? But it's probably their NAS that is sending the Start prior to the ipcp negotiating IP Addr. Bugger. Then there is the issue of running servers etc, as you point out, I don't want to start that flame war again, and I don't want to run internet reachable SMTP servers @ home either. The previous discussions on this make several points, some of which are: 1) POP3, and in particular multi-drop POP mailboxes are problematic, and 2) running SMTP servers (even if legal) is problematic over intermittant/dialup/dynamic connections. Unfortunately there's nothing in-between, and something in-between is entirely valid for 'power' home users. And to make it worse, Paradise don't have a consistent, unique mail header to really make multi-drop pop mailboxes work. This is well within what paradise can do, and despite asking this particular question several times, they just don't seem to provide that facility. Oh to find a better solution, ODMR isn't. As someone pointed out, maybe UUCP? Cheers- > -----Original Message----- > From: Mark Goldfinch [mailto:mark.goldfinch(a)team.telstraclear.co.nz] > Sent: Thursday, 24 October 2002 11:52 p.m. > To: Steve Lang > Cc: nznog(a)list.waikato.ac.nz > Subject: RE: Any isps support ODMR - RFC2645? > > > > On Thu, 24 Oct 2002, Steve Lang wrote: > > > Yes, I Emailed postmaster(a)paradise.net.nz. To quote: > > > > "It's basically due to our DSMTP authentication being based around our > > dial-in RADIUS, and not our ADSL RADIUS. Given the choice between the > > two options, we decided to provision DSMTP for dial-in as it is > > recognised as more of a stop-gap method of mail delivery somewhere in > > between POP and a dedicated mail server." etc. And a statement to the > > fact that you're not meant to run servers behind Jetstart connections > > etc. > > While this isn't quite correct the end result is the same. > > The technical reason why this cannot happen is because our dsmtp radius > processing is only interested in Start and Stop accounting records. > > An example Jet* radius accounting record: > > Mon Oct 14 19:49:11 2002 > User-Name = "someusername" > NAS-Identifier = "GLF_RAN_01" > Service-Type = Framed-User > Framed-Protocol = PPP > NAS-Port = 540475748 > Acct-Session-Id = "20370164-3DAA68E6" > Acct-Authentic = RADIUS > Acct-Status-Type = Start > User-Id = "someusername" > User-Realm = "paradise.net.nz" > Proxy-State = 0 > Proxy-State = 0 > Timestamp = 1034578151 > > you may note that there is a distinctive lack of Framed-IP-Address field > present in this record. This is well known for Telecom's Jet* > infrastructure and has been noted in this forum beforehand. > Framed-IP-Address fields are present in the (approximately) 30 second post > connection and then hourly Alive records as well as Stop records. > > Now it is true that it would be somewhat simple to make Alive records be > treated in (almost) an identical fashion as Start records in this case, > but I really must question whether it is in our best interests to do so. > TelstraClear (or one of its legacy companies) will have signed an > agreement with Telecom surrounding the conditions and services which we > will offer JetStart to our customers. If we should be penalised the > implications for us would be somewhat larger than most other ISPs (other > than perhaps Xtra). > > Unfortunately if Telecom does not want business customers (or services > deemed to be of business grade) present on JetStart they probably have the > means to make us (and in turn our customers) very unhappy. > > Now of course I could be very wrong and Telecom could have had a recent > change of heart and are these days more than happy for us to hookup > businesses via JetStart. Please I would be more than happy to be proved > wrong. > > > Short of ringing them up, and demanding to speak to someone else, which > > I don't have time to do, what options are there? I know, move my > > business somewhere else? > > Good luck in finding a solution, yes it somewhat sucks that broadband > options are somewhat limited in this country, but it isn't just the > customer's who have few options. > > And on that note this thread is now probably heading quite off-topic. > > > Best Regards, > > --- > Mark Goldfinch > Senior Systems Administrator > TelstraClear Ltd > > > > > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Any isps support ODMR - RFC2645?
by steve＠spl.co.nz 23 Oct '02

23 Oct '02

Hiya. I've been investigating multi-drop mailboxes etc., for home use. The concept of On Demand Mail Routing (ODMR - RFC2645) came up. Do any ISP's in NZ support this? There is RFC2645 which seems to cover what I'm after in such a way as to easily support smtp queueing over dynamic internet connections etc. (jetstart to be precise) I've asked Paradise, and they aren't/can't oferring such a thing. Is anyone here offering this? Paradise also don't seem to have a useable header for calculating the original recipient in all cases. Do any other ISP's have a reliable consistent header that is accurate, not duplicated and contains the correct values even when bcc'd from Mail Lists? I'd seriousely consider changing providers if I can confirm one of the above. Cheers - - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 16

Non email popup spam
by Orcon Support - Jay Best 22 Oct '02

22 Oct '02

Have had a few of our dialup customers complaining about this one.. SNIP from geek tools--------- New "Messenger spam" invades desktops Just when you thought e-mail spam was bad enough, along comes Direct Advertiser software, which can send pop-up messages directly to users' desktops. These pop-up messages appear even if the user is not in e-mail or an Internet browser. The software utilizes Microsoft's Messenger Windows service, which is turned on by default (on WinNT, 2000, and XP systems) and used by administrators to send messages to users on the network. This is different from the MSN Messenger instant message software. http://www.geek.com/news/geeknews/2002Oct/gee20021017016848.htm Kindest Regards Jay Best Orcon Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 6

Hosting a file
by Mark Davies 22 Oct '02

22 Oct '02

Hi, Somewhat off topic but is there someone out there that can host a couple of 1.8MB files that have just been mentioned on slashdot. Our server is not coping very well :-( cheers mark - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

VoIP Tolls
by Matthew G Brown 21 Oct '02

21 Oct '02

Anyone offering VoIP tolls for National calling ? . Curious as I just got my last phone bill and OUCH! Sorry for the OT Matthew G Brown B & R Holdings LTD DDI: 027 4807731 Email: Matt(a)Brh.Co.Nz " Offsite Internet Backup & Wireless Network Dev " http://www.backupserver.co.nz http://www.brh.co.nz IMPORTANT NOTICE: This e-mail is confidential, and is for the intended recipient only. Access, disclosure, copying, distribution or reliance on any of it, or by anyone else is prohibited. Please delete this email if obtained in error and e-mail confirmation to the sender. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Orcon Internet Prefix List Update (#2)
by Craig Whitmore 20 Oct '02

20 Oct '02

Sorry about not including this one as well from this morning.. For all those peering with Orcon Internet (AS17746) at APE, please update your Filter Lists to: Add: 202.175.128.0/21 A Full prefix list is included as attachment. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

Orcon Internet Prefix List Update
by Craig Whitmore 20 Oct '02

20 Oct '02

For all those peering with Orcon Internet (AS17746) at APE, please update your Filter Lists to: Add: 202.49.250.0/24 A Full prefix list is included as attachment. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

Re: Contacting ISP re: CC fraud
by Saby Singh 16 Oct '02

16 Oct '02

1 0

APNIC Training/IX tutorial in New Zealand - Dec 2002
by Champika Wijayatunga 16 Oct '02

16 Oct '02

Dear all, APNIC is pleased to announce that we are planning to have an APNIC member training course on IP Address Management: Asia Pacific Policies and Procedures (Conducted by APNIC) and a tutorial on IX (conducted by Bill Woodcock, Packet Clearing House,USA) in Wellington, New Zealand on 09 December 2002. The APNIC training courses are currently offered on a sponsored basis to APNIC members and it is subsidised for them. But non-members are also welcome and however, they are usually charged a slightly higher fee. Basically these charges are to recover our costs on a non-profit basis. Previously this training course fee has ranged from 'No charge' to USD75.00 (charged in local currency) depending on the location & the sponsorships. Training materials, Lunch and refreshments will be provided. We would like to get your input regarding this training. We greatly appreciate if you could answer the following few questions and send it to us. Please note that this is NOT a registration form. This information is considered for our evaluation purposes only. * Your name & e-mail id: * Your company / APNIC Account name: * Are you interested in attending this training? Yes/No * How many participants will attend from your organisation? * Would you like to assist us in sponsoring this training? Yes/No If so in which way? (ex: providing a training venue, lunch & refreshments for the participants etc.) If you are interested in sponsorships please let us know, so that we can update you about the sponsorship benefits. * Any suggestion for a hotel/training centre? * Are you aware of any Internet related conference happening in New Zealand during December 2002 ? * Other comments Thank you for your cooperation ! We look forward to hearing from you soon. Warmest Regards, Champika. _____________________________________________________________________ Champika Wijayatunga, Training Manager <champika(a)apnic.net> Asia Pacific Network Information Centre phone: +61 7 3858 3100 http://www.apnic.net fax: +61 7 3858 3199 _____________________________________________________________________ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Contacting ISP re: CC fraud
by Donald Neal 16 Oct '02

16 Oct '02

I suspect that this thread has now exhausted its operational relevance. - Donald Neal NZNOG List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Contacting ISP re: CC fraud
by Mark Foster 16 Oct '02

16 Oct '02

And FWIW I agree, and thanks to those who emailed me offlist with similar echoed comments. :P My thinking was. 1) I dont like the use of Fraudulent Credit Cards regardless of who theyre being used with... 2) If The ISP is deemed to be the appropriate contact for a genuine crime then.. well.. *shrug* Of course the logical cause of action is obvious, but then again, when the NZCC have already pretty much told you what they think of you, its not suprising that the appropriate authorities havnt yet been invoked... ? At 01:21 p.m. 17/10/2002 +1300, Glen Wilson wrote: >The stick approach always has postive results. > >Glen Wilson >Senior Engineer and Administrator >Network Operations Shift Supervisor >Ihug, Auckland, New Zealand > >On Thu, 17 Oct 2002, Steve Phillips wrote: > > > At 13:03 17/10/2002 +1300, Mark Foster wrote: > > >This stuff strikes me as obvious enough - as a sysadmin I would expect a > > >lot of this is fairly logical proceedure for dealing with network abuse. > > > > He runs one of the biggest SPAM/MLM schemes in New Zealand, so its not > > surprising he doesn't know how "whois" works and doesn't trust that a > > remote ISP will actually respond to "abuse@" complaints (hell, we know HIS > > one didn't eh seeby ?) > > > > Maybe he just needs to be beaten about the head a few times with a very > > large clue stick. > > > > -- > > Steve. > > > > - > > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > > where the body of your message reads: > > unsubscribe nznog > > > >- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 7

Contacting ISP re: CC fraud
by Barry ＠ CASHevolution Support 16 Oct '02

16 Oct '02

Hi there guys, Hope you can possibly help. I have a situation where a member using a yahoo email account has located a credit card list and is utilizing it on our website. The person has used over 200 credit card numbers and many have been successful. I have log's of IP addresses and traced it to the following IP block owner. Instituto Tecnologico y de Estudios Superiores de Monterrey REDMEX-BNETS (NET-148-203-0-0-1) 148.203.0.0 - 148.250.255.255 Universidad Autonoma De Ciudad Juarez UACJ (NET-148-210-0-0-1) 148.210.0.0 - 148.210.255.255 Some of the IP addresses are as follows: 148.210.126.238 148.210.126.228 146.210.116.193 Doing a traceroute only gave me their ISP's uplink reverse, AT&T. How can I get in touch with this ISP to ensure this person is caught. Kindest Regards Barry Murphy Systems Administrator http://www.cashevolution.com <http://www.cashevolution.com/>

4 3

Domestic Prefix list update again AS7657
by Leon Chang 10 Oct '02

10 Oct '02

Hi people, Sorry we have to update this again as yesterday's list missed out a network: ip prefix-list ihug-networks seq 37 permit 202.49.144.0/24 FYI, the complete list is attached below. ip prefix-list ihug-networks description ihug peering prefix-list contact: noc(a)ihug.co.nz ip prefix-list ihug-networks seq 5 permit 202.36.94.0/23 le 24 ip prefix-list ihug-networks seq 10 permit 202.37.136.0/24 ip prefix-list ihug-networks seq 15 permit 202.37.182.0/24 ip prefix-list ihug-networks seq 20 permit 202.37.187.0/24 ip prefix-list ihug-networks seq 25 permit 202.37.194.0/24 ip prefix-list ihug-networks seq 30 permit 202.49.59.0/24 ip prefix-list ihug-networks seq 35 permit 202.49.88.0/23 le 24 ip prefix-list ihug-networks seq 37 permit 202.49.144.0/24 ip prefix-list ihug-networks seq 40 permit 202.49.148.0/23 le 24 ip prefix-list ihug-networks seq 45 permit 202.49.176.0/23 le 24 ip prefix-list ihug-networks seq 50 permit 202.49.180.0/23 le 24 ip prefix-list ihug-networks seq 55 permit 202.49.186.0/24 ip prefix-list ihug-networks seq 60 permit 202.49.240.0/22 le 24 ip prefix-list ihug-networks seq 65 permit 202.49.249.0/24 ip prefix-list ihug-networks seq 70 permit 202.50.84.0/24 ip prefix-list ihug-networks seq 75 permit 202.50.103.0/24 ip prefix-list ihug-networks seq 80 permit 202.50.255.0/24 ip prefix-list ihug-networks seq 85 permit 203.109.128.0/17 le 24 ip prefix-list ihug-networks seq 90 permit 203.118.128.0/18 le 24 ip prefix-list ihug-networks seq 95 permit 203.173.128.0/17 le 24 ip prefix-list ihug-networks seq 100 permit 210.55.184.0/24 ip prefix-list ihug-networks seq 105 permit 210.55.202.0/23 le 24 ip prefix-list ihug-networks seq 110 permit 210.55.248.0/21 le 24 -- Leon Chang, CCNP, CCDP Senior Network Engineer The Internet Group Ltd. (IHUG), Auckland, New Zealand AS7657 PH: +64 9 359 2710 --------------------------------------------------------------------- - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Prefix list update for Ihug AS7657
by Leon Chang 09 Oct '02

09 Oct '02

We have tidied up our peering prefix list a bit and added a new network 203.118.128.0/18. Can our domestic peers please update their current prefix-list. Regards, Leon Chang ip prefix-list ihug-networks description ihug peering prefix-list contact: noc(a)ihug.co.nz ip prefix-list ihug-networks seq 5 permit 202.36.94.0/23 le 24 ip prefix-list ihug-networks seq 10 permit 202.37.136.0/24 ip prefix-list ihug-networks seq 15 permit 202.37.182.0/24 ip prefix-list ihug-networks seq 20 permit 202.37.187.0/24 ip prefix-list ihug-networks seq 25 permit 202.37.194.0/24 ip prefix-list ihug-networks seq 30 permit 202.49.59.0/24 ip prefix-list ihug-networks seq 35 permit 202.49.88.0/23 le 24 ip prefix-list ihug-networks seq 40 permit 202.49.148.0/23 le 24 ip prefix-list ihug-networks seq 45 permit 202.49.176.0/23 le 24 ip prefix-list ihug-networks seq 50 permit 202.49.180.0/23 le 24 ip prefix-list ihug-networks seq 55 permit 202.49.186.0/24 ip prefix-list ihug-networks seq 60 permit 202.49.240.0/22 le 24 ip prefix-list ihug-networks seq 65 permit 202.49.249.0/24 ip prefix-list ihug-networks seq 70 permit 202.50.84.0/24 ip prefix-list ihug-networks seq 75 permit 202.50.103.0/24 ip prefix-list ihug-networks seq 80 permit 202.50.255.0/24 ip prefix-list ihug-networks seq 85 permit 203.109.128.0/17 le 24 ip prefix-list ihug-networks seq 90 permit 203.118.128.0/18 le 24 ip prefix-list ihug-networks seq 95 permit 203.173.128.0/17 le 24 ip prefix-list ihug-networks seq 100 permit 210.55.184.0/24 ip prefix-list ihug-networks seq 105 permit 210.55.202.0/23 le 24 ip prefix-list ihug-networks seq 110 permit 210.55.248.0/21 le 24 -- Leon Chang, CCNP, CCDP Senior Network Engineer The Internet Group Ltd. (IHUG), Auckland, New Zealand AS7657 PH: +64 9 359 2710 --------------------------------------------------------------------- - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

nameserver redundancy (of debatable on-topicness)
by Joe Abley 09 Oct '02

09 Oct '02

Morning, I'm looking for an ISP with a presence in Wellington who would like to swap 5U of colo somewhere close to the WIX for something similar in Auckland, close to the APE. Gear to be colo'd is a rack-mount nameserver plus UPS plus router; traffic to the nameserver will be overwhelmingly domestic, mainly DNS, plus a tiny dribble of management traffic. Reason for looking is to increase nameserver diversity. If anybody is interested, please drop me some private mail. Thanks! Joe - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

KCBBS / APE routing loop
by James Spooner 08 Oct '02

08 Oct '02

On behalf of a KCBBS customer... traceroute to 202.27.195.82 (202.27.195.82), 30 hops max, 38 byte packets 1 mid-e1-int (210.55.255.62) 8.859 ms 0.394 ms 0.363 ms 2 a3-0-29.tkcr1.global-gateway.net.nz (202.37.247.153) 12.388 ms 48.227 ms 90.343 ms 3 A5-0-0-19.akcr5.global-gateway.net.nz (202.50.245.105) 58.507 ms 118.496 ms 100.527 ms 4 telstraclear1.ape.net.nz (192.203.154.32) 115.903 ms 82.286 ms 62.978 ms 5 netgate.ape.net.nz (192.203.154.48) 28.580 ms 17.625 ms 19.105 ms 6 telstraclear1.ape.net.nz (192.203.154.32) 23.076 ms 22.687 ms * BGP Path: 202.27.192.0/21 202.37.247.153 IGP 0 100 SEQ 4648 4768 9303 9303; No global-gateway traffic seems to be getting to KCBBS, other APE peers (ICONZ) seem fine. International also working (according to route-server.cerf.net) Is somebody leaking routes at APE ? Cheers James - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Intel HAM modem strings ?
by Simon Byrnand 07 Oct '02

07 Oct '02

Not sure if this is ontopic, but I'll give it a go anyway ;-) Does anyone know of an init string for Intel HAM based modems that will force them to connect using only V34 ? (That works ?) People on rural lines often can't get reliable connections using V90 or 56Flex, but forcing the modem to use V34 usually makes a huge improvement. For the common Rockwell and Lucent based modems its easy, for example -V90=0S38=0 for LT winmodems and +MS=V34 for most Rockwell based modems. So far I've been totally unable to find a string that actually works for the Intel HAM based modems, and they seem to be worse than other modems when it comes to not falling back automatically on poor lines. (Read: they wont even connect at all on typical rural lines where Lucent/Rockwell modems will at least get some kind of connection, albeit dodgy) Any pointers ? (Sorry if this is offtopic, but I thought it was an issue that most ISP's will have had to deal with at some time or another) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

DRS Outage
by Tim John 07 Oct '02

07 Oct '02

Hi all, Many of you may already know that the Shared Registry System is to be implemented this weekend, 12th - 14th October 2002. As a result, the DRS will be taken down at 10:00 hrs on Saturday and will not be available until 01:00 hrs on the following Monday. A manual zone build will be pushed at 10:00 on Saturday and there will not be another zone push until 11:00 on Monday 14th. No domain registrations or modifications will be allowed during the outage period. There is currently a note from the Domain Name Commissioner (DNC) and this can be found at the Domainz website under 'Info/Media Center' or on the DNC's site - http://www.dnc.net.nz. We apologies for this inconvenience but look forward to using the new Registry system early next week. Regards, Tim Tim John IT Manager Managing New Zealand's National domain name Registry E-mail: tim.john(a)domainz.net.nz Web: www.domainz.net.nz Fax: (04) 473 - 4569 Phone: (04) 473 - 4567 DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Mailwasher (again)
by Simon Lyall 07 Oct '02

07 Oct '02

Sorry to divert people from the Microsoft bashing but I'd thought I'd bring this up again. I mentioned a few months ago about Mailwasher forging bounces, anyway I was hoping they would go away or their latest version would fix the problem but it doesn't appear that way. Checking our outgoing queues around 50% of emails waiting to go out appear to be mailwasher forgeries ( bounces from our mail servers are elsewhere) and I'm getting a little worried. I really try hard to get customer email delivered and I don't what "normal" email to get delayed when it gets stuck behind mailwasher junk. Just wondering what others are doing? Private email is okay. I'm trying to avoid blocking or deleting them if I can. One suggestion was to forward them all to feedback(a)mailwasher.net :) . The other problem is that it is fairly hard to actually pick these messages out from others in the queue safely. Maybe I can sic the fraud squad on Mr Bolton for forging my email address. FDrom their FAQ: Q. How does MailWasher bounce messages? A. MailWasher uses an algorithm to determine the best route to send the bounced message back (from, reply to, return path) and actually sends the bounce back via your isp's postmaster, so it looks exactly like it has come from your isp and not from you at your address. If the spammer has used a fake address, then your bounce message will itself be bounced back to the postmaster and you won't receive the bounced bounce email. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

11 22

Re: Mailwasher (again)
by Simon Byrnand 02 Oct '02

02 Oct '02

At 11:11 3/10/02 +1200, Simon Lyall wrote: >On Thu, 3 Oct 2002, Simon Byrnand wrote: >> I have to agree here. By definition email should have a return address if >> it is "genuine". If the domain name of the "from" address doesn't even >> exist, then its almost a sure bet that the email is bogus, and I see no >> reason it should be accepted. Most MTA's seem to default to this action as >> well. > >I guess you don't get email from people who post to newsgroups, most of >them use bogus addresses so if they reply via email to a post the address >will not be legit ( john(a)notihug.co.nz.nospam sort of thing ). Most newsreaders I've seen that have email integrated allow you to set a different email address for posting to the news group than for sending email. Even Outlook Express does this. People writing newsreaders know that fake address are almost mandatory to avoid being spammed....Newsreaders that don't have integrated email will be launching the normal email program with normal email address. You definately have a point, but I've honestly never come across this actually happening before. >Checking around I also came across: > >From: Promos(a)Glengarry Wines > >Which appears to be a legit little mailout sent last week from >e-wine(a)Glengarry.co.nz . I didn't see any others in the search. Are you talking about the envelope-sender address or the "From:" header ? It looks like you're talking about the From: header here. I'm (and presumably Chris was) talking about the envelope from address, as exchanged at the beginning of the SMTP transaction... >Our spam filtering also has a "No MX for From address" rules that helps >block those. Still if you feel comfortable blocking customer's email on >that basis I guess it's your choice. It's not part of a spam filter, its just a standard sendmail setting, which defaults to on. (I could turn it off if I wanted to) You made me curious though, so I did a quick survey of the ISP's listed in iMAG to see if they'd accept a message with a bogus domain as an envelope from address: (not a very scientific survey, but..) Actrix: Yes Baycity: No Clear Net: No Ezysurf: No E3: No HyperNet: Yes Iconz: No Igrin: No Ihug: Yes Inspire: No Iprolink: Yes Jafa Net: No Kc Computer: No Maxnet: Yes Net4U: Yes Orcon: Yes paradise.net: No Planet: No Quik: No Quicksilver: No Slingshot: Yes Valuenet: Yes Watchdog: Yes Wave: No Worldnet: Yes Xtra: Yes Zip Internet: Yes Thats 13 Yes's, and 14 No's. A couple of remarks - a few are actually virutal ISP's sharing the same mailserver so that would skew the results a bit, also I only checked the primary MX. I also suspect that it really comes down to the defaults of the mailserver in question rather than a thought-out policy, as most (but not all) the servers that rejected the bogus message were sendmail, or looked like sendmail, and that is the default of sendmail. (As an aside, I noticed more than one who were running ancient versions of sendmail that have, umm, known bugs.... ahem :) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: [NZNET] RE: Virus alert
by Saby Singh 02 Oct '02

02 Oct '02

1 0

Re: [NZNET] RE: Virus alert
by Mark Foster 01 Oct '02

01 Oct '02

On Wed, 2 Oct 2002 01:52:46 +1200 (NZST), Lin Nah <lin(a)darkmere.gen.nz> wrote : > Having said all that, I will admit that I work for an ISP that sets up > its customers on Outlook or OE. I think most of us know why that > happens. If you don't you can email me for a longer spiel 8) > Should we be doing more to educate our users? The answer would be yes. > I would like to find out what other NZ ISPs are doing in this area > with the hope of learning what works and what won't. A small clarification, I nearly posted this yesterday but it didnt seem appropriate or required at the time... Im one of the helpdesk team at the ISP Lin also works for. Our helpdesk is familiar with Outlook Express but that doesnt mean we're close minded about it. We regularly support clients who use other mailing software and as long as the software is reasonably generic we manage. We dont force our clients to use OE, but we do suggest it to our clients *because its there*. The differentiation is important, and stereotyping against helpdesk types isnt going to help. We all start somewhere. :-) I run Eudora in Sponsored mode and find it more than adequate - never caught anything through that, and I have never run resident antivirus either. (I manually scan my system from time to time using F-Prot for DOS.) Prior to using Eudora I used Netscape Messenger (4.x) and found this was also pretty good, although the limitation to only one mailbox is what forced me to migrate. Now that Netscape 7 is out I may consider switching back soon.... I think most ISP helpdesks crewed by reasonable people will accept that their clients dont *have* to use Outlook Express, and the only reason they may encourage their clients to use it is that especially for the less-than- technically-savvy sort, OE is easy to setup, and provided with all versions of Windows from 98 upward. If you work for an ISP and you dont have support staff familiar with a broader range of email clients than Outlook and Outlook Express, I would seriously suggest some more training is in order: Eudora, Netscape Messenger and Pegasus come to mind as alternatives, but theres obviously a lot more. </end rant> Mark. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: [NZNET] RE: Virus alert
by Donald Neal 01 Oct '02

01 Oct '02

I'm not really happy that this sort of posting meets the AUP, which talks about discussion between operators. There are cetainly announcements which may be of value to the list, but these seem to me to be characterised by not being present on a routine basis in other forums. I think that to allow announcements of this kind would have an unacceptable effect on the signal to noise ratio of the list. Unless people particularly want to see these here, I intend in future to treat them as outside the AUP. - Donald Neal NZNOG List Administrator > E-Secure-IT has just received this field report: > > While it does all the normal mass mailing stuff, own smtp engine, > harvests address lists etc this one did something really weird that > I've never seen before- it sent a postscript print job to > every printer > it could find. > > The scary thing was it even picked up printers attached to parallel > ports and which were not shared and sent the print job to them too. > I know it tries to access network shares, but looks like it tries to > access print q's also, be interested to see if anyone else has > seen this? > > FYI can confirm that NAV sigs of 30/9 do detect and clean. > > Arjen > www.e-secure-db.us ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 01 Oct '02

01 Oct '02

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This posting, or one like it, is sent to all subscribers each month. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Auckland Peering Exchange See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. About This Mailing List This list has around 370 subscribers, increasing by a few each month. You may only post to the list from an address subscribed to one of the lists described below. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations, nor the administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrator remains happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: [NZNET] RE: Virus alert
by Arjen De Landgraaf 01 Oct '02

01 Oct '02

E-Secure-IT has just received this field report: While it does all the normal mass mailing stuff, own smtp engine, harvests address lists etc this one did something really weird that I've never seen before- it sent a postscript print job to every printer it could find. The scary thing was it even picked up printers attached to parallel ports and which were not shared and sent the print job to them too. I know it tries to access network shares, but looks like it tries to access print q's also, be interested to see if anyone else has seen this? FYI can confirm that NAV sigs of 30/9 do detect and clean. Arjen www.e-secure-db.us - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Updated ASN allocation to ARIN
by Rob Thomas 30 Sep '02

30 Sep '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this post in other fora. ] A range of ASNs have been allocated to ARIN as of September 2002. The range is 26624 - 27647. You may wish to adjust your filters. The definitive list can be found here: http://www.iana.org/assignments/as-numbers I have updated my bogus ASN monitoring to reflect these changes. You can see the list of networks that leak bogus ASNs here: http://www.cymru.com/BGP/asnbogusrep.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [NZNET] RE: Virus alert
by Joe Abley 30 Sep '02

30 Sep '02

[I keep trying to redirect this noise somewhere else. Seems like some peoples' mail clients don't respect standard headers, or something] On Tue, Oct 01, 2002 at 04:47:16PM +1200, James Spooner wrote: > Are you in fact an expert on car safety, or do you buy/travel in a car based > on what you know about car safety? I'm no expert. > If in fact you do, does this not make you a parallel to someone using > windows and outlook express, who 'should know better'. > > Why do you think you travel in a particular car, is it perhaps because it's > available and it gets you from A to B? Sure. I don't make a habit of travelling in cars which are not licenced to drive on the road, though, and that affords me some safety without needing first-hand, expert knowledge of the dangers involved. > I think that the Car vs Computer parallel in fact works in favour of windows > in this case Joe. I don't follow you. There are safeguards set up to ensure people don't drive in unsafe cars, regardless of how little they personally know about car safety. There are no safeguards set up to encourage people not to use unsafe mail clients. The regular virus bulletins could say "as with this other large list of security problems, this one can be avoided simply by using a different mail client", but they don't. ISPs could stop shipping OE, or could find ways to encourage users to install different mail clients, but they don't. > Check my headers if you wonder which client I use :) So why do you use it? Joe - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 6

RE: Virus alert
by Arjen De Landgraaf 30 Sep '02

30 Sep '02

Hi Joe, We could state that in our advisories, However, wouldn't it be on the same line as: Avoid car accidents, disable all petrol and diesel? Personally I would love to have the death rate on the road reduced to 0. If this is realistically achievable right now is another question. The reality is that Microsoft and all its products are a very large part of the global business world right now. Just as unsafe cars. We can make them somewhat safer by awareness and vigilance, just as driving a car. That is not to say that we don't agree with you, but the other side of the coin is that there are plenty of "non-windows" threats around; SSL, apache etc also have their own vulnerabilities. Arjen -----Original Message----- From: Joe Abley [mailto:jabley(a)automagic.org] Sent: Tuesday, October 01, 2002 3:40 PM To: Arjen De Landgraaf Cc: 'Simon Byrnand'; nznog(a)list.waikato.ac.nz Subject: Re: Virus alert On Tue, Oct 01, 2002 at 03:16:57PM +1200, Arjen De Landgraaf wrote: > From www.e-secure-it.us > > DETAILED DESCRIPTION OF BUGBEAR, HOW TO RECOGNISE AND FIRST AID KIT. It continues to amazme me that the preventative measure "do not use microsoft e-mail clients", or even "do not use windows" is never suggested as part of these bulletins. I think ISP and IT helpdesks of the world would do everybody a big favour if they just stopped supporting mail clients which make it so trivial to execute encapsulated scripts. "I propose that we deploy Microsoft Outlook". "You're fired. Never insult us with your presence again." Mmm. "I have a problem with my e-mail." "Does it say Outlook Express at the top of the window?" "Yes." <click> brrrrrrr Reply-To set :) Joe - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 8

RE: [NZNET] RE: Virus alert
by Darryl Munro 30 Sep '02

30 Sep '02

On Tue, Oct 01, 2002 at 03:58:36PM +1200, Arjen De Landgraaf wrote: > Hi Joe, > > We could state that in our advisories, > However, wouldn't it be on the same line as: > > Avoid car accidents, disable all petrol and diesel? >No; I think it would be more along the lines of "do not drive vehicles >which are unsafe". LOL or could we also say "do not do those drugs as they are unsafe" > The reality is that Microsoft and all its products are > a very large part of the global business world right > now. Just as unsafe cars. We can make them > somewhat safer by awareness and vigilance, > just as driving a car. >Not quite. We reduce the problem of unsafe cars by passing laws which >seek to enforce minimum standards for cars. If nobody took any steps to >get unsafe cars off the road, more people would die. The same could be said of the Internet, as more and more countries pass legislation on what is and isn't acceptable use of this medium. If nobody took any steps to pass and police these laws then more software vulnerabilities would be discovered and exposed by, what can arguably be explained as the biggest pain in our collective IT butt, Hackers, or did I mean developers that move from the standard to claim their own. >If the most popular car on the road had a defect which routinely caused >people to die, I don't think people would say "the reality is that the >car in question has a large market share, so it's really not practical >to encourage people not to drive it." Fix the defect and do a recall on the car in question, it is not a question of practicality more one of morality, and we all know that practicality and morality are clouded when it comes to the bottom line. Darryl Joe - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Virus alert
by Arjen De Landgraaf 30 Sep '02

30 Sep '02

>From www.e-secure-it.us DETAILED DESCRIPTION OF BUGBEAR, HOW TO RECOGNISE AND FIRST AID KIT. Bugbear / Tanatos This virus is written in MSVC and packed with UPX. It shuts down anti-virus and firewall software designed to block out intruders and can spread by dropping copies of itself into folders on shared networks, which are commonly used at corporations and large organizations. The worm's most interesting feature is a Trojan horse component called PWS-Hooker that secretly watches every keystroke on an infected computer, and stores the captured information on the computer in encrypted form. The data can be accessed later by the virus writer or anyone else who happens upon the infected computer, or it can be e-mailed to the author. Bugbear might be spreading because it is cleverly crafted and difficult to spot with the naked eye. It arrives in a victim's e-mail inbox with a subject line chosen randomly from dozens of possibilities, including: Possible message subject lines include the following (however, other random subject lines are also possible): 25 merchants and rising Announcement bad news CALL FOR INFORMATION! click on this! Correction of errors Cows Daily Email Reminder empty account fantastic free shipping! Get 8 FREE issues - no risk! Get a FREE gift! Greets! Hello! Hi! history screen hmm.. I need help about script!!! Interesting... Introduction its easy Just a reminder Lost & Found Market Update Report Membership Confirmation My eBay ads New bonus in your cash account New Contests new reading News Payment notices Please Help... Re: $150 FREE Bonus! Report SCAM alert!!! Sponsors needed Stats Today Only Tools For Your Online Business update various Warning! wow! Your Gift Your News Alert The message body varies and may contain fragments of files found on the victim's system. The attachment name also varies, but may contain the following strings: Card Docs image images music news photo pics readme resume Setup song video The actual infected file arrives as an attachment, which also has a random name. And Bugbear's first task, upon infection, is to disable all installed antivirus software. It's throwing a lot of things at people to see if it can find something to slip under the radar. Once activated, the virus shuts down scores of vital processes used by Windows and by antivirus software, records user keystrokes, opens a backdoor to the infected machine for use by attackers, and attempts to mail copies of itself out to other users, randomly generating new subject lines and virus executable names as it does W32/Bugbear-A is an internet worm which spreads via SMTP and also attempts to spread via network shares. The worm copies itself to the Windows system folder as a file with a random four-letter name and an EXE extension and adds to the following registry entry to run this file on the next reboot: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce W32/Bugbear-A also drops a copy of itself in the Windows start up folder so that is run on system restart. The worm drops a randomly-named DLL file, which is related to logging keystrokes, in the Windows system folder. It can also terminate certain firewall and antivirus programs. How to recognise: The virus file is attached to e-mails with a wide variety of subject lines : Attachment Length: 50,688 bytes (UPXed) or 50,664 bytes The subject line, name of the attachment and text in the body of the message can vary, and the attachment name typically has a double extension, such as .xxx.pif, .xxx.scr etc IF YOU ARE INFECTED: Symptoms: Method Of Infection This virus spreads over the network (via network shares) and by mailing itself (using it's on SMTP engine). It attempts to terminate the process of the following security programs: ACKWIN32.exe F-AGNT95.exe ANTI-TROJAN.exe APVXDWIN.exe AUTODOWN.exe AVCONSOL.exe AVE32.exe AVGCTRL.exe AVKSERV.exe AVNT.exe AVP32.exe AVP32.exe AVPCC.exe AVPCC.exe AVPDOS32.exe AVPM.exe AVPM.exe AVPTC32.exe AVPUPD.exe AVSCHED32.exe AVWIN95.exe AVWUPD32.exe BLACKD.exe BLACKICE.exe CFIADMIN.exe CFIAUDIT.exe CFINET.exe CFINET32.exe CLAW95.exe CLAW95CF.exe CLEANER.exe CLEANER3.exe DVP95_0.exe ECENGINE.exe ESAFE.exe ESPWATCH.exe FINDVIRU.exe FPROT.exe IAMAPP.exe IAMSERV.exe IBMASN.exe IBMAVSP.exe ICLOAD95.exe ICLOADNT.exe ICMON.exe ICSUPP95.exe ICSUPPNT.exe IFACE.exe IOMON98.exe JEDI.exe LOCKDOWN2000.exe LOOKOUT.exe LUALL.exe MOOLIVE.exe MPFTRAY.exe N32SCANW.exe NAVAPW32.exe NAVLU32.exe NAVNT.exe NAVW32.exe NAVWNT.exe NISUM.exe NMAIN.exe NORMIST.exe NUPGRADE.exe NVC95.exe OUTPOST.exe PADMIN.exe PAVCL.exe PAVSCHED.exe PAVW.exe PCCWIN98.exe PCFWALLICON.exe PERSFW.exe F-PROT.exe F-PROT95.exe RAV7.exe RAV7WIN.exe RESCUE.exe SAFEWEB.exe SCAN32.exe SCAN95.exe SCANPM.exe SCRSCAN.exe SERV95.exe SPHINX.exe F-STOPW.exe SWEEP95.exe TBSCAN.exe TDS2-98.exe TDS2-NT.exe VET95.exe VETTRAY.exe VSCAN40.exe VSECOMR.exe VSHWIN32.exe VSSTAT.exe WEBSCANX.exe WFINDV32.exe ZONEALARM.exe TROJAN: Port 36974 open Existence of the following files (* represents any character): %WinDir%\System\****.EXE (50,688 or 50,684 bytes) %WinDir%\******.DAT %WinDir%\******.DAT %WinDir%\System\******.DLL %WinDir%\System\*******.DLL %WinDir%\System\*******.DLL This worm emails itself to addresses found on the local system. The worm copies itself to the Windows system folder as a file with a random four-letter name and an EXE extension and adds to the following registry entry to run this file on the next reboot: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce When run on the victim machine it copies itself to %WinDir%\System as ****.EXE (where * represents random character). For example in testing: Win98 : C:\WINDOWS\SYSTEM\FYFA.EXE 2k Pro : C:\WINNT\SYSTEM32\FVFA.EXE The following Registry key is set in order to hook next system startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion RunOnce "%random letters%" = %random filename%.EXE (Win9x) The worm copies itself to the Startup folder on the victim machine as ***.EXE (where * represents random character), for example: Win98 : C:\WINDOWS\Start Menu\Programs\Startup\CUK.EXE 2k Pro : C:\Documents and Settings\(username)\Start Menu\Programs\Startup\CYC.EXE Trojan component The worm opens a port on the victim machine - port 36794 and searches for various running processes, stopping them if found. The list of processes includes many popular AV and personal firewall products. This remote access server allows an attacker to upload, and download files, run executes, and terminate processes. It drops a DLL on the victim machine - keylogger related. This DLL is detected as PWS-Hooker.dll. Network share propagation The worm attempts to copy itself to the Startup folder of remote machines on the network (as ***.EXE - described above). Outgoing messages look to make use of the Incorrect MIME Header Can Cause IE to Execute E-mail Attachment vulnerability (MS01-020) in Microsoft Internet Explorer (ver 5.01 or 5.5 without SP2). FIRST AID KIT: AS EMERGENCY MEASURE - Remove, Disable or encrypt all local email addresses (addressbook etc) TO PREVENT FROM SPREADING (BEFORE YOU ARE INFECTED) INCOMING EMAILS: Filter on attachment length 50,688 bytes (UPXed) or 50,664 bytes Filter out attachments, especially .pif, .scr (By the way, you should filter out all attachments anyway) Nail down your Network shares - it replicates itself through them. Make sure all USER PC's have IE updated with latest security patches It takes advantage of a known vulnerability in Microsoft's Internet Explorer versions 5.01 and 5.5 that allows attackers to embed malicious code in the header of an improperly formatted HTML message that could cause e-mail clients such as Outlook to automatically launch attached executable files. Microsoft addressed the issue in Service Bulletin MS01-020 and issued a patch for the vulnerability in March of 2001. Trojan: Port 36974 open - CHECK ON THIS PORT!!!! Existence of the following files (* represents any character): %WinDir%\System\****.EXE (50,688 or 50,684 bytes) %WinDir%\******.DAT %WinDir%\******.DAT %WinDir%\System\******.DLL %WinDir%\System\*******.DLL %WinDir%\System\*******.DLL FURTHER INFORMATION ON PWS-HOOKER: Type: Zoo Trojan Horse Infection Length: variable Systems Affected: Windows 3.x, Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me Trojans in this family can record your keystrokes and store this information in encrypted form. The Trojan sends this encrypted file and the IP address of the compromised computer to email addresses that are defined by the hacker. The following is a description of a specific PWS.Hooker.Trojan variant that can be dropped by the W32.Badtrans.gen(a)mm worm. When the Trojan runs, it does the following: It copies itself as C:\%System%\Kern32.exe. NOTE: %System% is a variable. The Trojan locates the \Windows\System folder (by default this is C:\Windows\System or C:\Winnt\System32) and copies itself to that location. It also drops C:\%System%\Hksdll.dll. This file is a component of, and is detected as W32.Badtrans.gen(a)mm. The Trojan adds the value kernel32 C:\%System%\kern32.exe to the registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce This causes the Trojan to run then next time that you start Windows. Arjen de Landgraaf www.e-secure-db.us www.e-secure-it.us -----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] Sent: Tuesday, October 01, 2002 3:14 PM To: nznog(a)list.waikato.ac.nz Subject: Virus alert For those that havn't noticed yet, a new virus has just come out which is spreading extremely rapidly. Depending on what antivirus software you use its called "W32.Bugbear(a)mm" (Norton Antivirus) or "I-Worm.Tanatos" (Kaspersky) - it may go under different names on other scanners. Both Norton and Kaspersky have only added detection of it in the last 12 hours AFAIK, and it looks like it has been in the wild in NZ at least 24 hours before updates to most scanners were able to detect it. (On topic bit :) The thing that's interesting about this particular virus is that it actively scans netblocks for machines listening on port 137 (Windows file/printer sharing) using simple incremental scans, so its quite easy to spot machines that are infected. Apparently it also sends information about the compromised machine to a pre-defined email address, and also opens a backdoor listening on TCP port 36794. As well as that, it uses the I-Frame exploit to automatically infect machines with unpatched versions of Outlook Express, and has the ability to automatically close all commonly used virus scanners whenever you try to run them. Based on the massive flood of this virus we've seen today it looks like a Klez killer has arrived..... (its outnumbering Klez by about 16 to 1 in our stats today) More info: http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear(a)mm.ht… Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Virus alert
by Simon Byrnand 30 Sep '02

30 Sep '02

For those that havn't noticed yet, a new virus has just come out which is spreading extremely rapidly. Depending on what antivirus software you use its called "W32.Bugbear(a)mm" (Norton Antivirus) or "I-Worm.Tanatos" (Kaspersky) - it may go under different names on other scanners. Both Norton and Kaspersky have only added detection of it in the last 12 hours AFAIK, and it looks like it has been in the wild in NZ at least 24 hours before updates to most scanners were able to detect it. (On topic bit :) The thing that's interesting about this particular virus is that it actively scans netblocks for machines listening on port 137 (Windows file/printer sharing) using simple incremental scans, so its quite easy to spot machines that are infected. Apparently it also sends information about the compromised machine to a pre-defined email address, and also opens a backdoor listening on TCP port 36794. As well as that, it uses the I-Frame exploit to automatically infect machines with unpatched versions of Outlook Express, and has the ability to automatically close all commonly used virus scanners whenever you try to run them. Based on the massive flood of this virus we've seen today it looks like a Klez killer has arrived..... (its outnumbering Klez by about 16 to 1 in our stats today) More info: http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear(a)mm.ht… Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: domain renewal fee
by Donald Neal 24 Sep '02

24 Sep '02

> From: Andy Gardner [mailto:andy(a)navigator.co.nz] > Sent: Wednesday, 25 September 2002 08:59 > To: nznog(a)list.waikato.ac.nz > Subject: RE: domain renewal fee > > > At 8:52 AM +1200 9/25/02, Donald Neal wrote: > >Discussion of the value of InternetNZ's involvement with > ICANN looks to me > >to be way outside that policy. > > Not when you consider that ICANN is attempting to dictate > policy to APNIC. Discussion of APNIC: In Discussion of InternetNZ's air fares/hotel bills: Out - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: domain renewal fee
by Donald Neal 24 Sep '02

24 Sep '02

> From: Juha Saarinen [mailto:juha(a)saarinen.org] > Sent: Wednesday, 25 September 2002 08:47 > To: DPF > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: domain renewal fee [...] > > Hummm... $73,423 is the actual figure, so each meeting costs just over > $18,000, or $9,000 per person. > > Are the meetings worth that kind of expenditure? Could subscribers please remember that the AUP for this list reads in part: 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. ... 7. Postings of a political, philosophical or legal nature are discouraged. Discussion of the value of InternetNZ's involvement with ICANN looks to me to be way outside that policy. I believe any operational content of this thread has now been exhausted. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: domain renewal fee
by Juha Saarinen 24 Sep '02

24 Sep '02

On Tue, 24 Sep 2002, Keith Davidson wrote: > While I assume this was a little tongue in cheek, it should be noted > that the amount spent by InternetNZ on ICANN travel is less than 50 > cents per domain name per year. Oh no... you mean the rest ($91.50) is blown on gerbil-fuelled orgies and Bonzai Buddy licenses? No wonder .nz names are so expensive! ;-) -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

Re: domain renewal fee
by David Farrar 24 Sep '02

24 Sep '02

> On Tue, Sep 24, 2002 at 05:32:25AM +0000, David Farrar wrote: > > > Afternoon, > > > > > > Just wondering if anyone knows why the annual renewal fee has gone up > > > for .nz domains? Got a piece of a tree in the mail the other day > > > mentioning that renewals have gone up a few bucks a year. Granted other > > > costs have gone down, but for those who already have domains are going > > > to wear the punch. > > > > The issue is slightly complex. At present the .nz registry is with DOMAINZ and > > they have a range of fees depending if you are an accredited provider or if you > > register direct through their website. DOMAINZ is also the sole Registrar. > > > > I've heard the palava about the SRS coming online for a trial month, > then going live, however, where's the complexity which causes the > renewal fee to go up by 10 bucks a year? The renewal fee isn't going up by $10 a year. DOMAINZ at present charge what I would call a combined registry/registrar fee of $44 (or $74 for new customers) for those who register directly through them. Under the SRS the registry fee will be $24 and each registrar will charge their own registrar fee on top of that. DOMAINZ have signalled their prices and services, other registrars will vary no doubt. The idea behind the SRS is that registrants will be able to choose the registrar which offers what they want - price will be a factor in this but so will other considerations such as service, billing terms, bundling of other services etc. >I could justify keeping a couple of lines in a text file for a year for a few >hot breakfasts, but not the increase the fee's gone up to. You are right that the variable cost of registering a domain name is very low. There have been significant costs involved in setting up the SRS, consultation on business and technical rules etc and that is why the registry fee has been set at $2/month to cover depreciation etc. A major cost is actually paying for DNS Name Server Operations incidentially. I personally hope that after a short while this fee will track downwards once costs of running the new registry are known as opposed to projections. DPF - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 11

RE: domain renewal fee
by Steven Heath 23 Sep '02

23 Sep '02

On 24 Sep 2002, at 22:04, John Rothlisberger wrote: > Steven Heath wrote: > > >Street price is about $40 in NZ... street price for a .com is about > >$15 US... I dont really see a great deal of price difference. > > You obviously haven't heard of GoDaddy (http://registrar.godaddy.com/) > - USD$8.95 for a .com, .net or .org domain. Go daddy, go! Actually I have and also at least one .nz provider selling at $29.95 NZ. I was just using 'street price' which is $40 NZ or $15 US for .com. The wholesale .com cost is $6.. godaddy sells for $2.95 higher than their buy cost. Cant see that going in long term. SPH - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: domain renewal fee
by Andy Linton 23 Sep '02

23 Sep '02

On Tue, 24 Sep 2002, Keith Davidson wrote: > I'd wait anyway, until after the SRS rolls out - and see what kind of deal > you could strike with a Registrar. Yes, that's fine but this year I've just had to renew my registration with the incumbent and I'm kind of stuck with that until August next year. andy - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: domain renewal fee
by Juha Saarinen 23 Sep '02

23 Sep '02

On Tue, 24 Sep 2002, Keith Davidson wrote: > You pay $92 per domain name? I can cut you a deal for a 20% discount for > you if you want to swap name agents?? No, I can't afford .nz names being a broke and unbribed hack. Current Fees($NZ) New Domain Name Fee $44 New Nameholder Fee $30 New Secondary DNS Fee $18 Exclusive of GST Too expensive by the looks of it. > InternetNZ does not use Bonzai Buddy as the purple clashes with the > office decor. > > The orgies continue unabated of course... OK, I've got first dibs on this story. All your gerbil multimedia is belong to me. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Re: domain renewal fee
by David Farrar 23 Sep '02

23 Sep '02

> Afternoon, > > Just wondering if anyone knows why the annual renewal fee has gone up > for .nz domains? Got a piece of a tree in the mail the other day > mentioning that renewals have gone up a few bucks a year. Granted other > costs have gone down, but for those who already have domains are going > to wear the punch. The issue is slightly complex. At present the .nz registry is with DOMAINZ and they have a range of fees depending if you are an accredited provider or if you register direct through their website. DOMAINZ is also the sole Registrar. InternetNZ is 90% through implementing a shared registry system which will go live later this year. Only Registrars will be able to access the registry and there will be a standard fee of $2+GST per month per name. DOMAINZ will continue as a registrar offering registration services. From late this year there will also be other competing registrars whom you can choose to register through, if you so wish. There will no doubt be a variety of prices charged, lenths of terms available and other choices such as bundling of services etc. DPF - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

domain renewal fee
by Chris Hellberg 23 Sep '02

23 Sep '02

Afternoon, Just wondering if anyone knows why the annual renewal fee has gone up for .nz domains? Got a piece of a tree in the mail the other day mentioning that renewals have gone up a few bucks a year. Granted other costs have gone down, but for those who already have domains are going to wear the punch. Cheers, Chris - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

newzealand.com UDRP attempt coming up!
by Andy Gardner 23 Sep '02

23 Sep '02

http://arbiter.wipo.int/domains/cases/2002/d0600-0799.html Check out case D2002-0754 newzealand.com We're not told who is attempting to get the name. They keep all the case details secret until the decision is made, and then you only get to see what the "arbitor" decides you NEED to see. Perhaps a journalist here might like to contact the current name holder and ask him? It would be interesting to find out exactly who thinks they have enough rights over the term "New Zealand" to be allowed to wrestle it out of someone elses hands via the UDRP. Once they've got newzealand.com I guess nz.com will be their next target. -- Andrew P. Gardner barcelona.com stolen, stmoritz.com stays. What's uniform about the UDRP? We could ask ICANN to send WIPO a clue, but do they have any to spare? Get active: http://www.tldlobby.com - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

NZNOG conference 2003
by Chris Hellberg 17 Sep '02

17 Sep '02

Roger, I've lost the origional email about the conference, but what I'd like to see next year is someone involved from the early days of the NZ interweb. Somone who flicked the switch on the 4K8 link to NZ, or who ran the origional NZ DNS or similar would be interesting - grey hair types preferred ;) Cheers, Chris - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

11 17

Mail blip today?
by Simon Lyall 16 Sep '02

16 Sep '02

Did anybody else see a big jump in mail volume (as in bits/second) between 4pm and 5pm today? I think it was a combination of mailouts by travel.co.nz's (90-something kilobytes) and finewineonline.co.nz (1.6 Meg of "I accidentally included our logo" ) but it might be something else I missed that was affecting only us. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: NZNOG conference 2003
by Frank March 16 Sep '02

16 Sep '02

> -----Original Message----- > From: Don Stokes [SMTP:don(a)daedalus.co.nz] > Sent: Tuesday, 17 September 2002 16:41 > To: nznog(a)list.waikato.ac.nz > Subject: Re: NZNOG conference 2003 > > Some of the ex-DSIR people might be fun to have along -- these folks > were doing serious vendor-independent networking back when nobody much > else knew what it was, and developed the Ace/Network Dynamics/Securicor > 3net/Allied Telesyn routers which many ISPs used for many years. > The key guy at Allied Telesyn is the General Manager, Geoff Peck. He was deeply involved in all of the above which evolved out of the DSIR National Computer Network developments in the late 70s. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 Any opinions expressed in this message are not necessarily those of the Ministry of Economic Development. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Peering at APE
by Craig Whitmore 15 Sep '02

15 Sep '02

Can people peering with Orcon Internet (AS17746 192.203.154.66) at APE, please peer with 192.203.154.67 as well with the same prefix-list as the 1st. Also if you wish to MSDP and/or MBGP peer please let me know. Please let me know when/if you have set this up. Thanks Craig Whitmore Orcon Internet http://www.orcon.net.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: BGP Private ASes
by Andy Linton 12 Sep '02

12 Sep '02

I'm pleased to see this thread generate lots of discussion and I've thought some more about my position on this. I think the community should look at a number of things: 1) I think from postings from Philip Smith, Joe Abley, myself (and others) it's clear there is a mechanism for applying for globally unique ASNs and it is possible to get them assigned where need can be demonstrated. There may be an additional cost associated with this. Clearly such an ASN can be used anywhere on the net including Citylink or the APE. This should be the preferred option for anyone who wants to peer in whatever form with more than one other entity. Private ASNs should be reserved for use between two entities. This may well cover Simon's WIX route reflectors. Perhaps ISPs, telcos, and other organisations like Citylink should create mechanisms (if they don't already have them) to enable their customers to obtain ASN numbers from APNIC where those customers need an ASN. (My cynical mind makes me suspect that there may be some resistance to this as it may be perceived that customers are using this to avoid charging, connect to another provider etc. Please prove me wrong! Public declarations on this list might help.) 2) Additionally there is a mechanisms also identified in previous postings for obtaining IPv4 address space for multihoming. Explore those mechanisms if you *need* address space. 3) It would be good if we could work together to make the WIX model work efficiently. Some larger providers might wish that there were only larger providers peering at the WIX. That clearly isn't the case so it would be good to see them sit down with Simon Blake and work out how to get efficient and redundant peering working. 4) Ditto the APE. 5) If people want address the related but separate problem of using RPSL and the routing registry mechanism to express their public policy (and automatic generation of filter lists etc) then start trying to understand policy in terms of the provisions of RFC2622 and RFC2650. I'm happy to work on this with people when I get back to NZ in November. Others have said the same but I'll let them put their hands up. If you intend to do this please strongly consider using the APNIC service coming shortly. I posted yesterday that the service was hosted in Brisbane and mirrored at RIPE. They are also investigating the deployment of redundant services using anycast on four separate continents. How redundant do you need the service to be? andy - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Updated BGP monitoring
by Rob Thomas 12 Sep '02

12 Sep '02

Hi, NZNOG listfolk. [ Apologies to those of you who have received this note in other fora. ] I have updated my BGP monitoring to include ASN analysis. This includes the count of unique ASNs, the count of ASNs that originate at least one prefix, the average path length, the maximum path length, and the bogus ASNs. You will find it all here: http://www.cymru.com/BGP/index.html The bogus ASN page, complete with a colorful graph, can be found here: http://www.cymru.com/BGP/asnbogusrep.html Comments and feedback are always welcome! My thanks to those who donate peering and gear to my monitoring efforts. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: BGP Private ASes
by Ewen McNeill 11 Sep '02

11 Sep '02

Andy Linton sent me this response, which he tells me he intended for nznog as well. Below is Andy's response, and then my reply to Andy's response. Both are at least as relevant to the list as discussing Klez all day :-) Andy's response: On Wed, 11 Sep 2002, Ewen McNeill wrote: > In message <NABBJDOPDKGCDCNBNEDOCEPKFAAA.ascott(a)cisco.com>, "Arron Scott" writes: > >I get endless number of customers who want to peer with more than one ISP at > >a time, usually with the intention of resiliency at both the institutional > >and upstream provider levels. [... Want Class C, public AS, advertised > >prefix... ] > >Now ... what I was thinking is ... can we do this without the rare (and > >increasingly difficult to obtain) Public AS numbers. There are proposals to increase the size of the AS numbers from 16 to 32 bits but that soesn't solve the immediate difficulties in getting an AS number. > > I'm also in touch with clients that would like to do this -- they don't > especially care about the Class C, or Public AS, etc, but they would like > some resiliency for any disconnections from their provider or routing > issues for their provider, often because they have clients that have > that as a tick-box feature. I've heard some very interesting discussions about flap damping at the RIPE meeting this week. See http://psg.com/~randy/020910.zmao-flap.pdf. The important thing to note is that the thing that is damped is prefixes so dual homing may not give you all you hope for if flap damping is in use. > >Could we have a publically agreed on pool of Private AS numbers that > >enterprises can use to peer with service providers. The pool would > >administered by a "impartial" group (maybe WIX/APE). The AS number > >would then be stripped by both higher-order ISPs and and the IP > >address potentially unsuppressed by the ISP who owns the IP address aggregate. > > If I'm not mistaken about what you mean, this is what WIX (the route > reflectors) are trying to do. Dean Pemberton and I have been talking with Simon about trying to get WIX and APE whois servers running so that people could start registering routes and AS policy for RPSL use in NZ. Using these to allocate locally scoped private ASes for use on the WIX and APE would be a doddle. > The WIX approach seems to work, but: > - it appears some providers do not peer with the WIX route reflectors, > or do so only to advertise their routes, not to allow in extra routes > > - most providers filter "long" prefixes (and most enterprises without > public ASes tend to have only long prefixes). Certainly it's my > impression that pretty much all providers filter anything longer than > /24, and some appear to even filter /24, /23, /22, etc, meaning the > prefixes advertised by enterprises are likely to be filtered. It seems difficult to believe that the relatively small additional number of prefixes being announced by the enterprises on the WIX is significant. The total number of prefixes is around the 250 mark and many of those come from the "providers" anyway. Filtering out the few dozen prefixes that are /25 or greater would seem to have little impact on table size and the kosher ones could easily handled in a prefix-list. > So from an enterprise point of view WIX (the route reflectors) are useful > for picking up direct routes to providers POPs, but this tends to lead to > asymetric routes to/from the providers (and hence no real resiliency). So it would be nice to get the providers to use them. Some of them resist but surely this is an issue that could be driven by their respective customers. E.g. "As my provider I need you to provide a resilient efficient local mesh at WIX and APE. Perhaps I should consider moving to a provider who...." > > And it's useful for enterprise to enterprise peering (indeed one of my > clients connected to the WIX route reflectors soley for the enterprise > to enterprise peering; at the request of the other enterprise). > > The WIX route reflectors (according to the route table on a router > peering with them) appears to have about 50 systems peering with it > at present. > > But without providers willing to (a) peer with the route reflectors, and > (b) accept long prefixes (at least locally), it's probably not going to > be of general use for resiliency. > > To be of much general use providers would have to be willing to at least > accept /24 prefixes locally, even if they're part of a larger supernet > advertised by another provider. Longer prefixes would be desirable, > because otherwise anyone wanting resilency with CIDR space would need > to beg for a class-C sized CIDR chunk. See above --------------------------------------------------------------------------- And my response to Andy: In message <Pine.LNX.4.44.0209111930390.1763-100000(a)wark.lionra.net.nz>, Andy Linton writes: >On Wed, 11 Sep 2002, Ewen McNeill wrote: >> I'm also in touch with clients that would like to do this [advertise >> their blocks to multiple providers for resiliency] > >I've heard some very interesting discussions about flap damping at the >RIPE meeting this week. [...] The important thing to note is that the >thing that is damped is prefixes so dual homing may not give you all >you hope for if flap damping is in use. For both the clients I have in mind most of their benefits would be gained in about the first 5 hops or so (ie, within New Zealand), as that is the main market they're serving. So how important flap damping was to that would largely depend on how soon it was applied. >Dean Pemberton and I have been talking with Simon about trying to get WIX >and APE whois servers running so that people could start registering >routes and AS policy for RPSL use in NZ. Using these to allocate locally >scoped private ASes for use on the WIX and APE would be a doddle. This would definitely be a good thing. RPSL (from your talk at the Uniforum conference) looks like a Good Thing (tm), and a whole lot more sensible than the alternatives (yet more prefix listson nznog!). Scoped private ASes would also solve the immediate problem -- probably for Aaron too (hence my suggestion you mention this on nznog, and/or directly to Aaron). >It seems difficult to believe that the relatively small additional number >of prefixes being announced by the enterprises on the WIX is significant. WIX is worth about 300 prefixes or so on an average day, and "generally" includes the POPs of most NZ providers. For an organisation hosting a lot of content, there's definitely a win for them in sending traffic "directly" to the POPs (and bypassing the ticket counter at their ISP :-) ). If those routes were symmetric, then there'd also be a resiliency win. >The total number of prefixes is around the 250 mark and many of those come >from the "providers" anyway. Filtering out the few dozen prefixes that are >/25 or greater would seem to have little impact on table size and the >kosher ones could easily handled in a prefix-list. Last I spoke to Simon about it, he was starting to put filters in on the expected prefixes from each peer with the WIX route reflectors -- which would make it possible to have a pretty "exact" set of expected prefixes. There are 27 prefixes in WIX (right now) longer than /24. Some of them are as long as /30s, and there's a bunch of /29s. One of the clients I have in mind has a /27 CIDR block. They're starting to run out of public address space (despite using RFC1918 everywhere it can be used, and lots of NAT), and will probably try asking for more space. But even that more space is likely to be only another /28, another /27, or maybe if they're very lucky one /26. My point here is that while there might not be very many prefixes longer than /25 in WIX now, that's sort of a self-fulfilling prohpehcy, because prefixes longer than /24 (or /23, /22, /21, etc -- I haven't managed to find out what's considered "best practice" by NZ providers) are being filtered out already by lots of people. So "what's the point?". If the answer is "everyone use RPSL, and persuade people to accept all properly described RPSL lists" then I'm all for it. If the answer is "only providers get to do peering", then that's tantamount to "only people with public ASes get to do peering". And may well lead to a bunch of people chasing public ASes (and provider independant space for that matter) when they don't otherwise need them. Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 13

Re: BGP Private ASes
by Andy Linton 11 Sep '02

11 Sep '02

On Thu, 12 Sep 2002, Ewen McNeill wrote: > In message <Pine.LNX.4.44.0209120130270.2162-100000(a)wark.lionra.net.nz>, Andy Li > nton writes: > >I meant to post to all concerned. Do you want to forward my mail and your > >response to get this rolling again? > > Done. Joe Abley seems to be suggesting that public ASes can be obtained > (at least by providers for their customers) for the purposes that Aaron > is talking about, perhaps along with provider independent space with a > long prefix. But something tells me that won't scale to everyone on > Citylink getting provider independent space and their own AS... I agree with Joe that it is possible to get a public AS and some address space for mulithoming but we'd be talking about a 50% increase in NZ's AS number assignment. (APNIC have currently allocated 89 AS numbers to NZ + some earlier allocations from the US registries and we'd need 42+ private AS replacements for Citylink alone). The policy for AS numbers is effectively described at http://www.apnic.net/docs/drafts/apnic-draft-asn-v002.txt The problem I see with say Citylink customers applying under this schema is that assigning them an AS number does nothing to reduce the size of global address tables and the number will not be used to describe diverse routes in the global routing fabric. So private AS numbers seem like the 'right thing'. Where people really do want to multihome for global connectivity there is a mechanism - see the above and for multihoming IPv4 address space see http://www.apnic.net/info/faq/multihoming_faq.html But people should note - there is a cost in dollars and renumbering effort. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: BGP Private ASes
by Ewen McNeill 11 Sep '02

11 Sep '02

In message <NABBJDOPDKGCDCNBNEDOCEPKFAAA.ascott(a)cisco.com>, "Arron Scott" writes: >I get endless number of customers who want to peer with more than one ISP at >a time, usually with the intention of resiliency at both the institutional >and upstream provider levels. [... Want Class C, public AS, advertised >prefix... ] >Now ... what I was thinking is ... can we do this without the rare (and >increasingly difficult to obtain) Public AS numbers. I'm also in touch with clients that would like to do this -- they don't especially care about the Class C, or Public AS, etc, but they would like some resiliency for any disconnections from their provider or routing issues for their provider, often because they have clients that have that as a tick-box feature. >Could we have a publically agreed on pool of Private AS numbers that >enterprises can use to peer with service providers. The pool would >administered by a "impartial" group (maybe WIX/APE). The AS number >would then be stripped by both higher-order ISPs and and the IP >address potentially unsuppressed by the ISP who owns the IP address aggregate. If I'm not mistaken about what you mean, this is what WIX (the route reflectors) are trying to do. Enterprises on Citylink with an appropriate connection, but without public ASes are assigned a private AS, advertise their routes to the WIX route reflectors with that private AS, and the WIX route reflectors then advertises those to all other peers. APE may also have a similar setup, but my impression is that APE is mostly bilaterial peering, and it's mostly treated as a peering point, rather than a multilateral route exchange. The WIX approach seems to work, but: - it appears some providers do not peer with the WIX route reflectors, or do so only to advertise their routes, not to allow in extra routes - most providers filter "long" prefixes (and most enterprises without public ASes tend to have only long prefixes). Certainly it's my impression that pretty much all providers filter anything longer than /24, and some appear to even filter /24, /23, /22, etc, meaning the prefixes advertised by enterprises are likely to be filtered. So from an enterprise point of view WIX (the route reflectors) are useful for picking up direct routes to providers POPs, but this tends to lead to asymetric routes to/from the providers (and hence no real resiliency). And it's useful for enterprise to enterprise peering (indeed one of my clients connected to the WIX route reflectors soley for the enterprise to enterprise peering; at the request of the other enterprise). The WIX route reflectors (according to the route table on a router peering with them) appears to have about 50 systems peering with it at present. But without providers willing to (a) peer with the route reflectors, and (b) accept long prefixes (at least locally), it's probably not going to be of general use for resiliency. To be of much general use providers would have to be willing to at least accept /24 prefixes locally, even if they're part of a larger supernet advertised by another provider. Longer prefixes would be desirable, because otherwise anyone wanting resilency with CIDR space would need to beg for a class-C sized CIDR chunk. Simon Blake (Citylink) could probably speak more about what WIX's route reflectors do, and how well it's worked (or not worked) in practice. Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Mail relaying on the wane?
by Juha Saarinen 11 Sep '02

11 Sep '02

http://www.imc.org/ube-relay.html Didn't Joe Abley do a survey for NZ ages ago? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

BGP Private ASes
by Arron Scott 11 Sep '02

11 Sep '02

Hi all, I expect this is probably flame bait, but I keep hitting the same question in customer-land almost every week, and wondered if there were at least a different (if not necessarily smarter) way of dealing with the problem. Maybe this is already been done to some extent, and maybe we just need to formalise some of this. Anyway ... I get endless number of customers who want to peer with more than one ISP at a time, usually with the intention of resiliency at both the institutional and upstream provider levels. So what they usually want is a Public AS number and a class C which is advertised as a long prefix to the Internet via two upstreams such as Telecom GGI and TelstraClear, often with an intermediary ISP as their direct peer. Now ... what I was thinking is ... can we do this without the rare (and increasingly difficult to obtain) Public AS numbers. Could we have a publically agreed on pool of Private AS numbers that enterprises can use to peer with service providers. The pool would administered by a "impartial" group (maybe WIX/APE). The AS number would then be stripped by both higher-order ISPs and and the IP address potentially unsuppressed by the ISP who owns the IP address aggregate. One possible hiccup I see is between NZ peers, and whether there would be a problem when for instance the TelstraClear network sees the network as one AS hop direct to the customer, and one AS hop via Telecom (and vice-versa). However, on the otherside I also wondered whether this could be used on the APE and WIX for customer to customer peering, providing more rapid peering relationship growth in NZ. Any thoughts ... or have I, in my two years of vendor-land, turned into a BGP zombie who can no longer fathom the depths of BGPs arcane and sometimes infuriating nuances ? Arron Scott *********************************************************************** Arron Scott (CCIE #4099) Phone: +64-9-3551951 Systems Engineer Mobile: +64-27-4883163 Cisco New Zealand mailto:ascott(a)cisco.com http://www.cisco.com *********************************************************************** - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: So cool a flash,enjoy it
by Donald Neal 10 Sep '02

10 Sep '02

> From: Chris Wedgwood [mailto:cw(a)f00f.org] > Sent: Wednesday, 11 September 2002 15:42 > On Wed, Sep 11, 2002 at 12:15:57PM +1200, Donald Neal wrote: > > > This message was bounced by teletech.co.nz on the ground that it > > contained offensive language. I felt that whoever on the list is > > using this company's mail service should know that. > > *PLEASE* tell me this is a joke and you forgot the smiley? > > > --cw No smiley, no joke. I posted this as a notice to whoever the affected person is. I'm inclined to view further discussion as not appropriate for the list. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: So cool a flash,enjoy it
by Donald Neal 10 Sep '02

10 Sep '02

> -----Original Message----- > From: Joe Abley [mailto:jabley(a)automagic.org] > Sent: Wednesday, 11 September 2002 12:02 [...] > The best AV solution I can think of is for all possible holes and > exploits in Microsoft mail clients to be exploited as soon as > possible, and as violently as possible. Maybe if that happens fewer > people will run stupid Microsoft mail clients, and the whole issue > will just go away. > > By making half-hearted attempts at stripping virus-infected bits > from e-mail, you're just interfering with the natural order of > things and prolonging the life of **** software. > > > Joe > - This message was bounced by teletech.co.nz on the ground that it contained offensive language. I felt that whoever on the list is using this company's mail service should know that. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: So cool a flash,enjoy it
by Ewen McNeill 10 Sep '02

10 Sep '02

In message <9146DBDC8503D411B18A204C4F4F50200A65DB(a)172-16-1-2.static-dialup.xtra.co.nz>, James Guidera writes: >>[Joe Abley says: don't strip the viruses, let the natural order prevail] > >There is no point blaming the mail client. No matter who makes the mail >client, if it is popular it will be open to attach. Be it Notes, GroupWise, >Outlook. Whoever is the biggest and most common would be the target. There is every point in blaming the mail client -- it's the "automagically do stuff" behaviour of the mail clients which makes all of these viruses spreading around possible. The "automatically run programs when clicked on" is bad enough (where programs == "anything executable", including "documents" with embedded programming languages and auto execute features); the preview bugs are even worse. There were far far fewer mail viruses in the days when you had to work rather hard to run a program sent to you by mail (eg, cut out encoded section, manually feed to uudecode or unshar it, compile the source, and run it). cat, more, less and other similar mail clients have far fewer security problems. Even telnet has fewer security problems as a mail client (although it does suffer from plain text passwords over the wire). And mail/mailx don't have that many security problems on the _reading_ side (on the sending side they're a bit of a festering pile of security holes). There might be an argument that only mail clients vulnerable to being infected will be popular (the converse of what you're suggesting) -- because they're more point'n'drool. However I'm with Joe: if you let the viruses do their thing, preferably as dramatically as possible, then the natural order will prevail eventually, as people get tired of reinstalling their machine for the third time that week (and/or confidental documents leaking and/or their clients shunning them). To bring it vaguely back on topic: mail scanners at ISPs (eg, the Xtra ones) would do need to either forward on the bones, or bounce the whole message back to the "sender" -- silently dropping things is bad, as it just hides the problem (and can hide more stuff). For messages which appear to be viruses that send their own mail (ie, spreading as worms), I'd personally go for just bouncing the whole message back. (Yes I know Klez, et al, forge the from address too, so you can't usefully bounce it -- but the recipient doesn't want it either. I'm going to get stray Klez as either "sender" or recipient whichever way you go.) Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: So cool a flash,enjoy it
by Simon Byrnand 10 Sep '02

10 Sep '02

At 13:40 10/09/02 +1200, simon wrote: [snip] Normally I wouldn't reply to this sort of thing on list, but I've already received about 10 replies to this message which I did *not* send. Half of them were virus scanner reports, the other half were people saying "huh?", or "who are you?". For those that didn't bother to check the headers, here are the last few: Received: from mta204-rme.xtra.co.nz (mta204-rme.xtra.co.nz [210.86.15.147]) by mailserv.waikato.ac.nz (8.11.3/8.10.2) with ESMTP id g8A1eL732069 for <nznog(a)list.waikato.ac.nz>; Tue, 10 Sep 2002 13:40:21 +1200 Received: from mta2-rme.xtra.co.nz ([210.86.15.140]) by mta204-rme.xtra.co.nz with ESMTP id <20020910014016.CDID5662.mta204-rme.xtra.co.nz(a)mta2-rme.xtra.co.nz> for <nznog(a)list.waikato.ac.nz>; Tue, 10 Sep 2002 13:40:16 +1200 Received: from Anqm ([203.96.107.54]) by mta2-rme.xtra.co.nz with SMTP id <20020910013935.DSEG19105.mta2-rme.xtra.co.nz(a)Anqm> for <nznog(a)list.waikato.ac.nz>; Tue, 10 Sep 2002 13:39:35 +1200 The message clearly comes from an Xtra user, presumably infected with a virus. Which begs an interesting question, why did Xtra's much-touted virus scanner let it through ? :) Regards, Simon Byrnand (The real one :) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

12 32

RE: So cool a flash,enjoy it
by James Guidera 10 Sep '02

10 Sep '02

There is no point blaming the mail client. No matter who makes the mail client, if it is popular it will be open to attach. Be it Notes, GroupWise, Outlook. Whoever is the biggest and most common would be the target. -----Original Message----- From: Donald Neal [mailto:Donald.Neal(a)telecom.co.nz] Sent: Wednesday, 11 September 2002 12:16 p.m. To: nznog(a)list.waikato.ac.nz Subject: RE: So cool a flash,enjoy it > -----Original Message----- > From: Joe Abley [mailto:jabley(a)automagic.org] > Sent: Wednesday, 11 September 2002 12:02 [...] > The best AV solution I can think of is for all possible holes and > exploits in Microsoft mail clients to be exploited as soon as > possible, and as violently as possible. Maybe if that happens fewer > people will run stupid Microsoft mail clients, and the whole issue > will just go away. > > By making half-hearted attempts at stripping virus-infected bits > from e-mail, you're just interfering with the natural order of > things and prolonging the life of **** software. > > > Joe > - This message was bounced by teletech.co.nz on the ground that it contained offensive language. I felt that whoever on the list is using this company's mail service should know that. - Donald Neal ---------------------------------------------------------------------------- -- "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ---------------------------------------------------------------------------- -- - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Updated DNS monitoring, take 2
by Rob Thomas 05 Sep '02

05 Sep '02

Hi, NZNOG folks. [ Apologies to those of you who see this note in other fora. ] Rodney Joffe (thanks, Rodney!) correctly pointed out that my gTLD monitoring was only tracking the Verisign gTLD (com, net, org) name servers. I have now added the other TLDs to the mix. It can all be found in two places: http://www.cymru.com/DNS/ http://bgp.lcs.mit.edu/dnsmirror/ I will shortly have an additional web server on a much faster set of links, as well as another mirror. For the impatient, I recommend the MIT site. Don't forget to check the Lame Report while you're there. :) Comments and feedback are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: input required - Conference 2003
by Stephen Andrew 05 Sep '02

05 Sep '02

No - I'd suggest Alan Brown moderate. That should be fun. -- Andrew > -----Original Message----- > From: Roger De Salis [mailto:roger(a)desalis.gen.nz] > Sent: Thursday, September 05, 2002 7:36 PM > To: Simon Lyall > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: input required - Conference 2003 > > > You can moderate the plenary session.... > > Simon Lyall wrote: > > > > On Thu, 5 Sep 2002, Juha Saarinen wrote: > > > Dan Bernstein? > > > > Why don't we invite Richard Stallman, Patrick O'Brien, Alan > Brown, Maurice > > Williamson and Roger Sheppard at the same time? . That way > we can get them > > all in one go. > > > > :-) > > > > -- > > Simon Lyall. | Newsmaster | Work: > simon.lyall(a)ihug.co.nz > > Senior Network/System Admin | Postmaster | Home: > simon(a)darkmere.gen.nz > > ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz > > - > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog -- \_ Roger De Salis rdesalis(a)fx.net.nz </' FX Networks +64 25 481 452 /) Wellington, New Zealand roger(a)desalis.gen.nz (/ ` DSL - the 56k modem technology of 2004 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog This email with any attachments is confidential and may be subject to legal privilege. If it is not intended for you please reply immediately, destroy it and do not copy, disclose or use it in any way. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

input required - Conference 2003
by Roger De Salis 04 Sep '02

04 Sep '02

I think many of you enjoyed Paul Vixie's visit this year. Does anyone have any suggestions for a speaker next year? I have polled several of the "nog" informally, but I'd like to get a wider view. R -- \_ Roger De Salis rdesalis(a)fx.net.nz </' FX Networks +64 25 481 452 /) Wellington, New Zealand roger(a)desalis.gen.nz (/ ` DSL - the 56k modem technology of 2004 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

(no subject)
by Mohamad Simawy 04 Sep '02

04 Sep '02

auth 3b71458c subscribe nznog mohamad(a)zip.co.nz

1 0

shopping for a new gig
by David Anso 04 Sep '02

04 Sep '02

Does anyone know of jobs going for IP/Lucent/Linux/perl/database/network type engineers, preferably in Auckland or Wellington (but my arm is pretty twistable atm). It's time for some different challenges I feel. --- David Anso Systems/Network Administrator ZIP Internet/ZIPFone/Zip Kiosks - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Did Domainz apologise in public to Strongnet?
by Roger De Salis 04 Sep '02

04 Sep '02

Au contraire. I have an apology from Strongnet to DOmainz for using an old zone file (we had withdrawn the Zone Xfers by this time) for spamming the Asia Online customer base, when Asia online were in difficulties. The mild apology was accompanied by an assurance from Strongnet that this zone information would not be used for this purpose again. I let the matter rest at that point. I could dig out the relevant emails if further info is wanted, but I regarded it as a individual matter, rather than one that needed a wide audience. /R Juha Saarinen wrote: > > Hi Roger, > > That's what Seeby of Orcon and Bruce Morris of Cardlink (a > Strongnet/Orcon customer) both claim. > > However, I can find no traces of the public apology anywhere... would you > happen to know where it was posted? > > Cheers, > > -- > Juha Saarinen -- \_ Roger De Salis rdesalis(a)fx.net.nz </' FX Networks +64 25 481 452 /) Wellington, New Zealand roger(a)desalis.gen.nz (/ ` DSL - the 56k modem technology of 2004 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

WTB: DSP & Modem Cards for the MAX 6000
by David Anso 04 Sep '02

04 Sep '02

Hi Guys I'm looking for DSP Cards (such as the MXV-SL-DSP16) for MultiVoice on the MAX 6000 and Modem Cards for some of our other 6000's. If you've got either of the above spare that you're willing to sell or trade (for Beer or other), please drop me a line. You may even be able to twist my arm for a beer or two at the exchange point. Cheers David Anso Zip Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [OT] Did Domainz issue a public apology to Strongnet?
by Steve Phillips 03 Sep '02

03 Sep '02

At 14:42 4/09/2002, Juha Saarinen wrote: >Sorry about the non-beer content, but I've been told twice now that >Domainz issued a public apology to Strongnet about the suspension from the >NZ DNS last year. If there was a public apology then I must have missed it :-) Who told you they had apologised ? surely this person would know where you can find said apology ? -- Steve. -- Steve Systems Admin, ICONZ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

[OT] Did Domainz issue a public apology to Strongnet?
by Juha Saarinen 03 Sep '02

03 Sep '02

Sorry about the non-beer content, but I've been told twice now that Domainz issued a public apology to Strongnet about the suspension from the NZ DNS last year. Unfortunately, I cannot find any mention of the apology. Is anybody able to shed some light on this for me? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Progress of .geek.nz, and NO more 2ld submissions
by Dean Pemberton 29 Aug '02

29 Aug '02

Hi All. Just got this back from InternetNZ re the .geek.nz submission. Interesting to note two things. 1) My request to have .geek.nz processed at the same time as .bank.nz was rejected. They can only apparently handle one at a time. 2) There will be no more 2ld's until they finish a full review. Got in just in time but there will be no .celt.nz =( Dean ----- Forwarded message from Sue Leader <exe.dir(a)internetnz.net.nz> ----- To: Dean Pemberton <dean(a)deanpemberton.com> From: Sue Leader <exe.dir(a)internetnz.net.nz> Subject: Re: .geek.nz Cc: dnc(a)dnc.org.nz X-Virus-Scanned: by amavisd-milter (http://amavis.org/) Hi Dean The .nz Oversight Ctte (NZOC) reported on their planned work schedule at today's Council Meeting. NZOC noted that the review of both the new 2LD creation process and the surrounding discussions about the nature of the space itself, was high on their priority list after the SRS is implemented. On that basis, and in line with the sequential process adopted for .maori.nz/.bank.nz, the Council passed the following resolution: MOVED: Streatfield/Bourne 'THAT (a) a moratorium start today on all new 2LD applications (no more will be received) because of the upcoming review of 2nd level domains by NZOC (b) that .bank.nz continues (c) that .geek.nz proceeds sequentially after .bank.nz is concluded CARRIED ABSTENTION De Salis/Davidson Given that the review of the 2LD process will involve public consultation, and given the nature of your community of interest, the consultation would benefit from the input of your knowledge, experience and expertise. We will keep you posted on the progress on .bank.nz. I am unable to give you a precise time frame, as the Request For Discussion (RFD) for .bank.nz opened on August 26 and will not conclude before October 25, nor later than Nov 24. At that stage the straw poll will be arranged, which runs for a two week period, finishing around 9 December. Until then, we will not know whether that application moves into the next stage of public submissions, a period which runs for another 30-60 days. Note, that should .bank.nz fail to meet the threshold in the straw poll, that would mean that the .geek.nz proposal would move into the RFD stage in mid-December, a timing which may not give the proposal as much attention as might otherwise be the case. The timing is negotiable with the proposer. cheers Sue ----- End forwarded message ----- - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

Mailwasher Update?
by Mark Foster 29 Aug '02

29 Aug '02

IDG Article mentions NZNOG as well (apologies if its been seen already) http://www.idg.net.nz/webhome.nsf/UNID/CAE93CFD0D72B2A7CC256C21001B3127!ope… - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: bank.nz maori.nz geek.nz
by Frank March 28 Aug '02

28 Aug '02

> -----Original Message----- > From: Steven Heath [SMTP:sheath(a)paradise.net.nz] > Sent: Tuesday, 27 August 2002 16:19 > To: nznog(a)list.waikato.ac.nz > Subject: Re: bank.nz maori.nz geek.nz > > Other than InternetNZ sitting on this application for 3.5 months > InternetNZ has > done nothing wrong. In late May I presented a paper to council about > reviewing > the 2LD name space and it was assigned to the .nz oversight committee to > look > at where it has rotted ever since not even appearing on its agenda. > Actually, this *is* on the agenda of the .nz Oversight Committeen (NZOC). At present the NZOC is focused closely on the SRS rollout and urgent policy development associated with that. Details are available at www.dnc.org.nz. Partly because of the need for urgency, but also because Rose Percivall and others widely consulted over the SRS implementation over a number of months, there is minimal public input at this stage but once the SRS implementation is rolling forward, and subject to approval from the Council of InternetNZ, a review will be initiated for all current policies, including the process for allocation or extension of the SLD space, and public participation will be a critical part of that review. Frank March Chair, .nz Oversight Committee > - > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog Any opinions expressed in this message are not necessarily those of the Ministry of Economic Development. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

Updated DNS monitoring
by Rob Thomas 27 Aug '02

27 Aug '02

Hi, NZNOGers. [ Apologies to those of you who have received this note in other fora. ] I've crafted several enhancements to my DNS monitoring suite. I am now monitoring the gTLD name servers, and you can see the data here: http://www.cymru.com/DNS/gtlddns.html (graphs) http://www.cymru.com/DNS/gtlddnstext.html (text) I have enhanced the root and gTLD name server monitoring. Now instead of only graphing hourly query response, I am also graphing hourly ICMP 8 0 ("ping") response. This may provide some additional insight during periods of high latency; it may instead be specious as all get out. ;) You will find it here: http://www.cymru.com/DNS/index.html On a related note... Are you lame? Being lame means I will pick on you during my next presentation. Avoid this shame! :) Take a look at the lame server report below. It is updated weekly. My thanks to those who donate to the data. http://www.cymru.com/DNS/lame.html Comments, feedback, donated data, and peering sessions are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: RFD - proposal to create '.bank.nz'
by Juha Saarinen 27 Aug '02

27 Aug '02

Actually... I want to cash in on this. Gimme 'americascup.nz' now! -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

Re: [members-announce] RFD - proposal to create '.bank.nz'
by David Farrar 26 Aug '02

26 Aug '02

Andy wrote: > At 7:16 AM +1200 8/27/02, DPF wrote: > >On Mon, 26 Aug 2002 10:53:21 -0500, Andy Gardner > ><andy(a)navigator.co.nz> wrote: > > > >> > >>How about this: > >> > >>Once the SRS is running and has passed tests (tests conceived by someone > >>other than a baboon), .nz's SLD is opened up to allcomers? > > > >That exact proposition (plus other possible changes) is planned to > >indeed be the subject of consultation and review next year. Andy > >Linton amongst others has been pushing for this for some time and it > >was going to be reviewed and considered this year but as you > >suggested, we decided it was best to wait until the SRS is in place. > > > >It is pretty rare for a ccTLD to abolish a 2LD structure > > Who said anything about abolishing co/net/org etc? > > Open up the SLD to allcomers, but leave the existing registrations in > place. People will be free to continue their .co.nz, can register new names > in .co.nz if they want, but also have the choice of *.nz Yep that would be the way to do it. I suspect in reality though this would effectively kill co.nz etc as the vast majority of registrants would want to go from say telecom.co.nz to telecom.nz. DPF - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 8

Re: bank.nz maori.nz geek.nz
by Ewen McNeill 26 Aug '02

26 Aug '02

In message <Pine.LNX.4.44.0208271600320.2972-100000(a)wark.lionra.net.nz>, Andy Li nton writes: >On Tue, 27 Aug 2002, Ewen McNeill wrote: >> And then someone could build a directory service over the top of that >> offering a one-to-many mapping. > >And as Chris pointed out that's (almost) already been done by Google (or >whoever you deem to be search engine of the moment). Google is the best-substitute-for-a-directory-service which we have at the moment. It's not exactly ideal. Your point that we could be focusing on a new directory service is definitely a good one. Although I personally think if we're going to take that approach to a logical conclusion we should completely devalue domain names (making them provider assigned arbitrary strings) to take the rest of the argument out of them. Half-measures seem like a recipie for additional problems. >Imagine this debate being held over 0800 numbers: Except that the other prefixes that you talk about are purely arbitrary in the 0800-etc case, and the second level domain suffixes being suggested here are at least somewhat meaningful divisons. The equivilent to suggesting 801, 802, et al (which incidentally do exist in another form, viz 0800, 0508, in NZ, and others in the US) would be someone suggesting co1.nz, co2.nz, co3.nz etc. I don't think anyone's seriously suggested co1.nz yet. >Also nice to note the categories before and after BANKS: Balloons-Hot Air >and Banners. There's some food for thought in the Yellow Pages categories. :-) >And the justification would be the same as that of the banks. And of >course 'celts.nz' can use many of the arguments put forward by 'maori.nz'. And celts.nz has my support. When are you submitting the proposal? I'll pledge $10 towards the $1000 fee for celts.nz as well (I've already pledged $10 for geeks.nz for Dean). Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

bank.nz maori.nz geek.nz
by Roger De Salis 26 Aug '02

26 Aug '02

The value of the namespace arises from both being simple and logical. It is very hard to see how a 2LD can be justified to support the wishes of the 5 real banks, and ~20 wannabe banks, or broking houses, or insurance houses, who like to think they are bank like. 25 entries is not likely to stress the .co.nz namespace (which is surely the only reason for considering another 2LD.) In the mind of the applicant, why would banks be (at internet level) any more or less special than any other commercial entity. Sure this would lead to .legal.nz, .treaty.nz, and a variety of other groups who for whatever (spurious?) reason somehow think they are "special". I propose to make a submission against .bank. R Ewen McNeiil wrote:- > (b) I don't have a major problem with any of the suggestions > I've seen on either nznog or isocnz-members, providing it's > intended there be a moderately logical hierachy underneath it. asjl wrote:- > Given that the vast majority of registrants are in 'co.nz' > anyway - the last number I saw was around 95%, I really find > it hard to see what value the structure has anyway. -- \_ Roger De Salis rdesalis(a)fx.net.nz </' FX Networks +64 25 481 452 /) Wellington, New Zealand roger(a)desalis.gen.nz (/ ` DSL - the 56k modem technology of 2004 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 11

Re: bank.nz maori.nz geek.nz
by Ewen McNeill 26 Aug '02

26 Aug '02

In message <20020827043811.GZ83446(a)buffoon.automagic.org>, Joe Abley writes: >On Tue, Aug 27, 2002 at 04:16:06PM +1200, Ewen McNeill wrote: >> In message <20020827040606.GX83446(a)buffoon.automagic.org>, Joe Abley writes: >> [Why moderate 2ld but not 3ld?] >> It's higher up the delegation hierachy, so there are more people that >> might want it. > >I don't see that. Seems to me that the people who really care about >what names they get will register the names wherever they can. Does this mean that I can start selling names under newtld.naos.co.nz for the same sort of prices as names under co.nz get? Somehow I think not. Like it or not, there are advantages to shorter names, particularly where they're being printed on business cards, displayed in adverts, etc, with the expectation that people will type them in. Hence [a-z].co.nz, and [a-z][a-z].co.nz are all taken, for instance, but not all [a-z]{5}.co.nz are taken. >That being the case, there are probably the same number of people who >want $name.co.nz as there are who would want $name.nz. I disagree. I'm sure there'd be more people wanting $name.nz than $name.co.nz; possibly an order of magnitude more (but we might be talking a base smaller than 10...). While obviously the "land grab" could be managed, arguably that's exactly what the existing policy does -- manage the land grab. It's rather overmanaged for my tastes though. >> >[Why $foo-the-movie.nz rather than $foo.movie.nz] >> >Why do you need one? >> >> Because otherwise I think (a) a structured set of second level domains >> makes much more sense than the alternatives; and (b) we should approve >> any request that has a reasonable sub-delegation policy. > >There might be an appearance of structure in the way things are >currently organised, but I would suggest that close scrutiny of the >names registered within the current hierarchy don't illustrate the >point particularly well. I quite agree. At this point there are two ways to go -- (a) make more hierachy in such a way that people can be persuaded to use it (bank.nz, et al), or (b) give up. If we give up, then it'll be impossible to get any sort of hierachy again later. >I almost agree with your point (b), except that in my mind there >is no unreasonable sub-delegation policy, and consequently no need >for any "we" or "approve". I take it that you don't consider "we won't sub-delegate" to be an unreasonable policy, even for a much wanted name that would otherwise be an expected delegation point. (I do for "much wanted" names.) I'm afraid I have too little faith in human nature to think that the result of "any policy is okay" would be anything other than "no one plays nicely". >> We could all vote "yes" for bank.nz and never have to hear about the >> deleation of bank.nz again. Imagine that. :-) > >Why settle for a temporary cessation of symptoms when there's a >permanent cure for the disease? "I'm sorry sir, the legs will have to come off." "Which one?" "Both of them." Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: bank.nz maori.nz geek.nz
by Ewen McNeill 26 Aug '02

26 Aug '02

In message <20020827030232.GT83446(a)buffoon.automagic.org>, Joe Abley writes: >On Tue, Aug 27, 2002 at 12:04:10PM +1200, Roger De Salis wrote: >> It is very hard to see how a 2LD can be justified >> to support the wishes of the 5 real banks, and ~20 wannabe banks, >> or broking houses, or insurance houses, who like to think they >> are bank like. > >It's harder for me to figure out why anybody needs to be put in the >position of having to justify it. [no technical reason, etc] IMHO the reason for requiring a justification for creating 2lds is to ensure that they are created with some thought as to how they will be sub delegated, so that you can actually _have_ national.bank.nz, et al, rather than just having one organisation getting "bank.nz" and everyone else needing to get other variations (national-bank.nz, asb-bank.nz, whatever). The current process is, IMHO, way way over the top for what is required. Really all that we need to know is (a) there is a plan for sharing the name (ie, sub delegations), and (b) there isn't a much more logical unit of delegation to use instead (eg, "sport" might be more considered logical than "rugby-league"). FWIW, Dean's geek.nz seems more than adequately documented for these purposes to me, and I've already encouraged him to submit it. The alternative that some are suggesting (a free for all in the second level domain space) would basically ensure that the same "land grab" that happened in .com happens in .nz; and ensure that we have to have dozens of variations on $foo-movie $foo-the-movie movie-$foo (etc) to work around the collapsed namespace. ("national" being an obvious example.) As I said earlier today, I've yet to hear a compelling argument that $foo-the-movie.nz (and variations thereupon) is somehow better than $foo.movie.nz If we collapse the namespace so that it becomes "whatever you can get" under .nz, then we might as well give up any pretense that they're "obvious" and hand them out like ASNs. At least there'd be less call for "special" names -- once 42 and a few others had been handed out. And then someone could build a directory service over the top of that offering a one-to-many mapping. Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Re: bank.nz maori.nz geek.nz
by David Farrar 26 Aug '02

26 Aug '02

Juha wrote: > Michael Newbery wrote: > > http://www.cs.rice.edu/~ssiyer/minstrels/poems/395.html > > > > It seemed appropriate... > > Heh. > > > This seems to be two debates: > > 1. Do we need to open up the 2LD? As in totally open it up. Open > > slather. > > 2. Iff we don't want to open it up, do we need the .bank.nz domain? > > Isn't it more likely that openly commercial new 2lds like bank.nz are simply > attempts at bringing in revenue for InternetNZzzz....? Hmmn 17 names at $24 a year each will be a grand total of $408 a year extra income. Not a huge incentive. Opening up the 2LD space to anyone would generate a huge amount of extra revenue though. In fact it would arguably be possible to then set the registry fee at a lower level than the generic top level domains of US$6 (we are about to move to US$11.16 for .nz). DPF - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: bank.nz maori.nz geek.nz
by Ewen McNeill 26 Aug '02

26 Aug '02

In message <20020827040606.GX83446(a)buffoon.automagic.org>, Joe Abley writes: >On Tue, Aug 27, 2002 at 03:51:16PM +1200, Ewen McNeill wrote: >> IMHO the reason for requiring a justification for creating 2lds is to >> ensure that they are created with some thought as to how they will be >> sub delegated, [....] > >Nobody gave any thought to how domains under neos.co.nz might be >delegated before they agreed to delegate the name to you. I don't >really see why bank.nz should be any different. I assume you mean naos.co.nz; neos.co.nz is held by Eyecatchers Design Ltd. It's higher up the delegation hierachy, so there are more people that might want it. (A more obvious example in my case would be mcneill.gen.nz which I also hold -- and in that instance you might well argue that someone _should_ have considered how it'd have been delegated first, and I'd agree with you.) >> The alternative that some are suggesting (a free for all in the second >> level domain space) would basically ensure that the same "land grab" >> that happened in .com happens in .nz [....] > >I'm not sure that domain fever is still at the pitch it was a few >years ago. Certainly a couple of the new gTLD registry operators >seem to be disappointed that it isn't. Perhaps not. But I'm fairly sure there'd be land grab all the same. At very least, those that think that the Banker's Association would be the ones to get bank.nz (and the same for all the other obvious delegations) show an, umm, touching faith in human nature. >> As I said earlier today, I've yet to hear a compelling argument that >> $foo-the-movie.nz (and variations thereupon) is somehow better than >> $foo.movie.nz > >Why do you need one? Because otherwise I think (a) a structured set of second level domains makes much more sense than the alternatives; and (b) we should approve any request that has a reasonable sub-delegation policy. >> If we collapse the namespace so that it becomes "whatever you can get" >> under .nz, then we might as well give up any pretense that they're >> "obvious" and hand them out like ASNs. At least there'd be less call >> for "special" names -- once 42 and a few others had been handed out. > >That's a strange comparison. ASNs are a mucher scarcer resource >than names, they're much more expensive and difficult to get hold >of, and you get whatever number the RIR decides to give you, >regardless of preference. That was precisely my point. That if we're going to give up any pretence of structure, we might as well go the whole hog and make them be arbitrary tokens that you get give by someone when you want a fixed arbitrary token. (The scarcity of obtaining ASNs is only because of the small number space for them; we could make it many times bigger and that problem would go away too.) >> And then someone could build a directory service over the top of that >> offering a one-to-many mapping. > >We could turn one largely flat namespace into another largely flat >namespace, and *never have to hear about delegation of bank.nz >again*. Imagine that :) We could all vote "yes" for bank.nz and never have to hear about the deleation of bank.nz again. Imagine that. :-) Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RFD - proposal to create '.bank.nz'
by Sue Leader 26 Aug '02

26 Aug '02

Greetings Request for Discussion [RFD] Proposal (2002) to Create New Second Level Domain - ".bank.nz" InternetNZ is calling for public discussion regarding the request for a new second level domain name (2LD) of '.bank.nz'. Discussion is open for a period of 60-90 days from August 26 2002. Discussion will be open for at least 60 days (until October 24) but the period may end earlier than 90 days (Nov 23) if, in the opinion of the Domain Name Commissioner (http://www.dnc.org.nz) substantive discussion has ceased. Anyone who is interested in participating in the discussion is encouraged to read the proposal, which can be found at: http://www.internetnz.net.nz/dns/2nd-level- domains/banknz02/2ld02proposal-banknz.pdf Obviously the Internet community is free to discuss this application anywhere and at anytime and are encouraged to do so. However, you may wish to subscribe to the discussion mailing list - send an email to public-consult-request(a)internetnz.net.nz and put "subscribe" in the subject line to see what others are thinking and saying. For information on the policy and history of Second Level Domains please refer to: http://www.internetnz.net.nz/dns/2nd-level-domains/ cheers Sue -- Sue Leader - Executive Director InternetNZ Voice: +64-4-472-1600 Fax: +64-4-495-2115 [Note new number] Level 4, Economous Building, 4 Bond Street (P.O.Box 11-881) Wellington http://www.internetnz.net.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 14

Re: [members-announce] RFD - proposal to create '.bank.nz'
by Lin Nah 26 Aug '02

26 Aug '02

I am glad others have followed up to this. I actually almost replied and deleted what I wrote What do they think has changed this time? Do they think putting in a request over and over again that people will eventually vote for it? Or will they now try to have a concerted effort where people (such as bank employees) will be encouraged to vote for it? This is a waste of time. I am surprised they didn't decide to go for the .bank TLD after failing on this .nz 2LD. I would like to know if the anyone within the present ISOCNZ council supports this proposal. If yes, why. If no, why AND if there's a unanimous no, why is our time wasted by this RFD? lin - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

11 16

Wanted: Cisco AS5200
by J S Russell 26 Aug '02

26 Aug '02

Now, don't laugh, I but I'm trying to locate a Cisco AS5200 chassis, functional, with no modems/dsps/other modules installed. (Though, if it comes with any line cards, they'll be gratefully put on a shelf and pointed at from time to time) This is for a personal project, not an Iconz project, so if anyone has one (and I know someone must) spare, that they might want to exchange for money or beer or curry or similarly priced spare technojunk, please contact me. JSR -- John S Russell | Big Geek | Fun will now commence. "The enemy of my enemy is still my enemy." - Drago Museveni C.Y. 8427 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Auckland Thursday Night Curry.
by Simon Lyall 26 Aug '02

26 Aug '02

Some people here might be interested in this. Auckland Thursday Night Curry will next be held this Thursday the 29th. Forwarded details are below and current planning is to meet every 2 weeks. There is a (low volume) mailing list, to subcribe send email to majordomo(a)paradise.gen.nz with: subscribe curry in the body of the message. ----forwarded email---- The place we are trying this time is Raviz Indian Cuisine 15 Mt Eden Rd, Mt Eden. It is opposite Galbraiths 7:30pm start as usual a. Parking There's a pay and display park at the corner of Mt Eden and Symonds St, next to Galbraiths. The pay bit ends at 8pm. So you can put in a few coins for the last half hour (or take a gamble). Hopefully there'll be parks there. Otherwise try the parks along the streets, side street etc. b. Kingfisher They have kingfisher but not strong don't think we mind. c. menu Apart from the usual stuff (korma, vindaloo, tika, navabi etc), there's a few ne ones (new for me anyway) like Mango Chicken, Tikka Sawadee, and Tikka Banaras. I'll leave the other new ones for you to discover when you show up Can you please email Lin Nah <lin(a)darkmere.gen.nz> if you can definately make it. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

Re: [members-announce] RFD - proposal to create '.bank.nz'
by David Farrar 26 Aug '02

26 Aug '02

NOTE: This may be getting off topic for nznog - happy to leave nznog off any future replies if requested and keep this debate on INZ lists only. Bart wrote: > At 20:11 26/08/02 GMT, David Farrar wrote: > >Yep that would be the way to do it. I suspect in reality though this would > >effectively kill co.nz etc as the vast majority of registrants would want > to go > >from say telecom.co.nz to telecom.nz. > > Considering how small New Zealand is, it would have made sense to stick to > ..nz; > In the Netherlands they work happely with .nl and that country has a > population 15 million. > > If you would open it up now a lot of new income would be generated > ofcourse, as all major domain holders would have to use it, but also could > not afford to close down the .co.nz version either :) Let the money flow! > Actually, I would like to see it; First one in use would be bart.nz Opening up the 2LD would indeed be very profitable for INZ and Registrars as registrations would probably come close to doubling (hopefully INZ would lower the registry fee if this was the case). A lot of that money could be tied up in lawsuits if for example the owner of coke.co.nz missed out by a millisecond (assume first in first served with a known start date/time) at registering coke.nz they would get very upset with someone. You can mitigate this by allowing preferential rights to holders of name.co.nz, name.org.nz to register name.nz but I believe there are seveal thousand clashes where different registrants have different 2LD variations of a 3LD name. Example is national.org.nz is National Party and national.co.nz is the BNZ so no easy way to decide who gets first dibs to national.nz. None of these issues are unsolvable but one has to tread damn carefully to avoid death by 100 lawsuits. DPF - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: RFD - proposal to create '.bank.nz'
by Juha Saarinen 26 Aug '02

26 Aug '02

On Tue, 27 Aug 2002, Ben Martel wrote: > The most obvious reason was to follow the .uk model. Remember the Queen and > all that! Yes, yes, I *know* that already. But, cf. "co.uk" with "co.nz". Isn't the latter just a tiny bit anarcho-syndicalist and anti-capitalist? I'm reminded of Jello Biafra's bid for the San Francisco mayoralty -- one of his policies were to make businessmen wear clown suits during working hours. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: [members-announce] RFD - proposal to create '.bank.nz'
by Zanetti David 26 Aug '02

26 Aug '02

Apologies in advance for poor formatting and/or other Outlook-isms. From: Ewen McNeill [mailto:ewen(a)naos.co.nz] > In message <a0511173fb98fff084e9f(a)[10.0.1.3]>, Andy Gardner writes: > >How about this: > > > >Once the SRS is running and has passed tests (tests conceived by someone > >other than a baboon), .nz's SLD is opened up to allcomers? > > Each time someone proposes a SLD, someone (often several people) raise > the idea of a "free for all" in the SLD space. > > What no one has explained to me is: what is so much better > about nationalbank.nz than national.bank.nz or for that matter > matrix-the-movie.com than matrix.movie (to pick an example I find > particularly grating). [clip a fresh dose of sanity] Hear hear! Finally a sane point of view. > I should, however, note that (a) I think it should be a lot easier to > get more SLDs (I do think they should be moderated, but I also think a > 3-6 month proposal phase is _way_ too long; 3-6 _weeks_ would be > better), and (b) I don't have a major problem with any of the > suggestions I've seen on either nznog or isocnz-members, providing it's > intended there be a moderately logical hierachy underneath it. I'd support this, it is too long a process. I don't want to see it totally open slather, but since the whole vote thing can be easily rigged, it's of little value. Council should ask around, and then decide, and not a lot else should need to be done. -- David Zanetti <david.zanetti(a)nzpost.co.nz> Security Engineer, New Zealand Post Desk: +64-4-496-4005 Mobile: +64-25-832-572 "Hope.. is a dangerous thing" This email with any attachments is confidential and may be subject to legal privilege. If it is not intended for you please reply immediately, destroy it and do not copy, disclose or use it in any way. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [members-announce] RFD - proposal to create '.bank.nz'
by Ewen McNeill 26 Aug '02

26 Aug '02

NOTE: it's rather odd to have this discussion being crossposted to two member-posting-only mailing lists. Perhaps it would be better at, eg, public-consult(a)internetnz.net.nz which was mentioned in the original announcement that .bank.nz was being raised again. In message <a0511173fb98fff084e9f(a)[10.0.1.3]>, Andy Gardner writes: >How about this: > >Once the SRS is running and has passed tests (tests conceived by someone >other than a baboon), .nz's SLD is opened up to allcomers? Each time someone proposes a SLD, someone (often several people) raise the idea of a "free for all" in the SLD space. What no one has explained to me is: what is so much better about nationalbank.nz than national.bank.nz or for that matter matrix-the-movie.com than matrix.movie (to pick an example I find particularly grating). You don't get rid of the name space problem by getting rid of name spaces; you just move it around. And you move it around so that you end up with more ad-hoc variations than you would have, if you'd had a SLD. Not to mention that there are technical advantages from multiple SLDs, due to the way the DNS was designed (it was designed to be a deep hierachy). I should, however, note that (a) I think it should be a lot easier to get more SLDs (I do think they should be moderated, but I also think a 3-6 month proposal phase is _way_ too long; 3-6 _weeks_ would be better), and (b) I don't have a major problem with any of the suggestions I've seen on either nznog or isocnz-members, providing it's intended there be a moderately logical hierachy underneath it. Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Next generation of SPAM
by Philip D'Ath 20 Aug '02

20 Aug '02

Take a look at: http://www.directadvertiser.com/ It may become the next generation of SPAM. What these people appear to be doing is using Windows Messenger (note, not the same as MSN messenger) [aka, this method uses "net send ..."] to send advertising to people's desktop. The recipient of such a message gets a dialog pop up on their screen. Nothing amazing in the method - but they have wrapped it up in a simple interface so that anyone can do it. I think this is going to mainly affect dial up users with no firewall, as it shouldn't work through PAT connections [aka JetStream/Start] or firewalls. Philip D'Ath, BCMS, MCP, CCNA, CCDA. http://www.ifm.net.nz/ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 17

Re: Next generation of SPAM
by Juha Saarinen 20 Aug '02

20 Aug '02

On Wed, 21 Aug 2002, Adrian Smith wrote: > It appears to be using UDP on port 135, > > which according to www.iana.org/assignments/port-numbers is for > > epmap 135/tcp DCE endpoint resolution > epmap 135/udp DCE endpoint resolution If I read it right (too lazy to do a tcpdump), it depends on which version of Windows, and whether or not you've killed off NetBIOS over TCP/IP in favour "direct hosted SMB" http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q204279& -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Next generation of SPAM
by Adrian Smith 20 Aug '02

20 Aug '02

It appears to be using UDP on port 135, which according to www.iana.org/assignments/port-numbers is for epmap 135/tcp DCE endpoint resolution epmap 135/udp DCE endpoint resolution Adrian Smith >>>> "Juha Saarinen" <juha(a)saarinen.org> 21/08/2002 11:53:38 >>> >Gordon Smith wrote: >> Looks like a copy of an open source tool that was around some time >> ago. Also has bogus domain registration details, and the address on >> the site is in spammer paradise (Florida). >> >> I believe that the MS NET SEND command relies on NetBIOS over TCP, so >> having something like this at the borders should make it a non-issue: >> >> access-list 101 deny tcp any any eq 137 >> access-list 101 deny tcp any any eq 138 >> access-list 101 deny tcp any any eq 139 >You might have to add TCP and UDP 445 to that list, for Win2K/XP. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

peer (fwd)
by Matt Camp 18 Aug '02

18 Aug '02

Tim assures me he's fixed it this time..... As before, please apply this to any domestic peering session with either AS4768 or AS7714.

2 1

Noshade size
by nznog 18 Aug '02

18 Aug '02

------------------ Virus Warning Message ------------------ word is removed from here because it contains a virus. ------------------------------------------------------------- ------------------ Virus Warning Message ------------------ Found virus WORM_KLEZ.H in file word The uncleanable file is deleted. For more information regarding Xtra's anti-virus email filter please visit http://xtra.co.nz/anti-virus Please do not reply to this mailbox, as it is not managed. Any enquiries regarding anti-virus should be directed to anti-virus(a)xtra.co.nz -------------------------------------------------------------

1 0

"A secure, zoned Internet within five years"
by Juha Saarinen 15 Aug '02

15 Aug '02

http://www.theregister.co.uk/content/6/26695.html Interesting read. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Peering
by Matt Camp 15 Aug '02

15 Aug '02

Beloved Peers, Update to the TelstraClear Domestic Peering Prefix-List Please remove: 202.0.32.0/20 le 24 202.0.50.0/24 Please add: 202.0.32.0/19 le 24 202.37.137.0/24 Full list attached.

4 8

FW: Another anti-spam tool
by Gordon Smith 14 Aug '02

14 Aug '02

Just a heads-up for everyone - just found a customer using a nasty little tool called spamstalker. Not only does it forge headers when the user bounces messages, it also attempts a sendmail HELO buffer overflow exploit. It's distributed out of the U.S. Needless to say, we'll be contacting the author... Cheers, Gordon Smith CCNA Network Operations Manager MoreNet Ltd - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Fwd: Outage in Wellington
by Richard Naylor 14 Aug '02

14 Aug '02

At 04:41 p.m. 05/08/2002 +1200, Peter Mott wrote: >Are you saying that CityLink does not have UPS and autostart generator >on-site to run the whole works for at least 8 hours? I wondered when this would come up. CityLink has a different architecture and there is no "central office". Switching centers have ups and generators and smaller buildings just have UPS. But that doesn't guarantee anything. Y2k showed up a lot of "interesting effects" and I'm sure they haven't all been rectified. Having a geny in the building doesn't mean its tested and feeds everywhere you think it does. BTW - the building people mentioned this was their first outage in 7 years. In the case of this morning, we (and the other telcos in the room) run off the local power and took a short hit of around 15 minutes, despite a local outage measured in hours. We also elected to go to geny due to the switching issues the power boys were facing. We also supplied power to other tennants who had a need. If you have ever closed an 11kV switch on a fault in a metro ring main sub, you will understand why we made that decision. "did the earth move for you ?" is being polite. "Sudden suntans", stuck HT gloves, etc sometimes result. (aside: HT gloves come up to your elbow, when they are "stuck" it means they've melted to something, normally the switch handle or the wall on the other side of the room from where you were not so long ago.) Now whats really interesting is that after my earlier post, an ISP contacted me to see if the outage in Courtenay Place was the cause of two dropped pings in Thorndon. He mentioned that some of todays NZNOG discussion was already posted in a security list (?) being sent around, probably misquoted. My concern is that as a list we share fairly openly about incidents mixed with a degree of good humour and frequent light relief. If an unknowing party is quoting the list, then we need a closed list or reduce the chatter or even the info conveyed. Summary - this mornings outage wasn't a simple - NO POWER. It was complex, with enough other indicators to fool experienced (power) operators. They actually did a good job. rich richard.naylor(a)citylink.co.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: Domainz falling prey to spambots?
by Saby Singh 12 Aug '02

12 Aug '02

1 0

RE: DNS problems
by Tim John 11 Aug '02

11 Aug '02

Chris, I appreciate your concern, but I should have mentioned - and state for the record - that this name server issue is solely with the machine hosting the DRS and nothing to do with the .nz DNS. I don't want anyone thinking that the 'real' name servers are effected by this. Tim -----Original Message----- From: Chris Wedgwood [mailto:cw(a)f00f.org] Sent: Thursday, 8 August 2002 4:02 p.m. To: Tim John Cc: 'nznog(a)list.waikato.ac.nz' Subject: Re: DNS problems On Thu, Aug 08, 2002 at 02:42:38PM +1200, Tim John wrote: The mail queue on the server is unable to resolve the names for the relevant name servers when sending the notification mail. Why is this? It's troubling Domainz of all people are having DNS issues. --cw DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

latency
by Michael Newbery 11 Aug '02

11 Aug '02

It's Friday... I have been considering a suitable measure for IP latency. Inspired by the knowledge that at least one network protocol uses micro-fortnights as a unit (RFC 995), I respectfully offer the following modest proposal for consideration. We typically measure latency in msec, which is just so mundane and last millennium. Given that the speed of light is a constant, we can easily map between time and distance with the simple formula d=ct. Since our proposed new unit is purely nominal, we will use the speed of light in vacuo. In this post-modern world, why not use a tried and true, human centered measure. I like the cubit. It has stood the test of time, plus it has the word 'bit' in it. Now, typical values of latency produce a number of cubits that is rather large, so for most networks we will need to scale up the the mega-cubit (Mcubit). Those of us firmly wedded to powers of two may prefer the IEC standard nomenclature for powers of two prefixes of MiCubit (pronounced mebicubit). Which leads to the observation that the current distance from my workstation to Xtra is 3.47Mcubits, Cisco is 23Mcubits away, www.theregister.com is 34Mcubits away, and I am only 0.45 mebicubits from Paradise. Draw what comfort you may from this. -- Michael Newbery IP Architect TelstraClear Limited - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 16

Appreciation !
by Tim John 11 Aug '02

11 Aug '02

Hi Lin, Thank you for those words of reason; they are like a ray of light through the shadows. The DRS and all that went on at it's launch was before my time. I inherited the system when I started about 15 months ago and I believe we've made some good changes since then to make the system more reliable and hopefully a little better to work with. As we will be the 'stabilising registrar' under the SRS, Domainz have had to do some significant work to meet the needs of a shared environment. We will be introducing a new finance application in the next few weeks that will enable a large chunk of the existing system to be removed, thus giving an improvement in performance to what's left of the DRS. In my personal view, Domainz are in a 'strange' place at the moment. We are paying for the registry part of the existing system to be rebuilt and separated from us. We will be the guinea-pigs for the new environment and we are under the constant threat from our shareholders who are considering closing Domainz down. Quite frankly, it seems a lose/lose situation for us and which-ever way you look, we are bound to get a slamming once again. It's not a favourable spot for a Domainz (or any other) employee to be in ! Aside from the past, present and future politics of Domainz <groan>, I have made it my responsibility to try and provide the best system we can to our customers. I don't - to quote - 'hate the DRS', but I can assure you that I get as frustrated as everybody else from time to time. The DRS is all we've got at the moment, so we've got to try and make the most of it. If I hear of issues that could effect a wide audience of users, I want to get them fixed as soon as possible - as any IT Professional would. I appreciate that a lot of people have been burned in the past with the DRS and there is a lot of resentment out there (cue Peter M. :>) for both the system and some of the people involved in setting it up. My colleague Chris and I (IT Dept.) are simply trying to provide a level of service that is as good as possible given the tools we've got. Again, in my personal opinion, I am looking forward to the SRS and hope that Domainz can take on a commercial role in the future; I'd love to be involved in the next saga of the Company. There are some good people here who are passionate about their jobs, even under the continuing negativity of the DRS. Thanks again, Lin. My final point is that I enjoy working 'with' people and certainly not 'against' them. It's just not my style. Cheers, Tim -----Original Message----- From: Lin Nah [mailto:lin(a)darkmere.gen.nz] Sent: Sunday, 11 August 2002 11:49 p.m. To: nznog(a)list.waikato.ac.nz Subject: RE: DNS problems HI all While at the SRS information meeting the day before the nznog conference, I noticed the something that I am observing now. I am myself guilty of it. The negative opinion and suspicion we have of Domainz and their intentions is still there. I am not surprised by it. I myself (at the meeting) were asking questions to ensure the same thing didn't occur again. However I think we have to realise that many of the technical and even management of Domainz were not around or had nothing to do with the specification and implementation of the system forced on us on 1 May 2000. The current CEO is definitely different from POB. They have to live with it as we do until such time the new SRS is up and going. We all know the system is fubar'd. From what I gather they will decide at that point what to do with the DRS but until such time, they have to keep it going. Some of you met Tim John at the nznog conference. It was a pity though Derek Locke, the CEO, was registered for the conference and I did see him around one day, didn't introduce himself to those of you there so you could ask him questions about the transition from monopoly to SRS. In fact I was a bit annoyed when I found out about the SRS briefing that it wasn't held at the conference, to give some of you (network operators) an idea of what they were planning to accomplish with it. Why am I writing this? I think we should perhaps try to be helpful to people like Tim and other technical staff at domainz. I am sure they secretly hate it (the DRS) as much as we do. We know there are holes to that system. For example this week we hear not all emails went out and there's been no bounces etc. shrug - nothing new to me since I know of quite a few domain holders who never received their notification for renewal or initial invoice. I am not saying I will stop asking questions but I think I will try my best to do in a nicer tone. No we can't tell him about emails we didn't receive since we don't know about them. However if some of you have made changes to your domain, you should usually get an email about it. Similarly if you know your domain is due for renewal, they usually send renewal email reminders. So if you have received an invoice without a reminder email, that could be an indication why. regards Lin Footnote for those interested in the SRS: >From what I gather the SRS goes ahead on 1 Sept. At that point in time Domainz will be the sole registrar to the new registry. Once it is deemed stable etc, other registrars will be added on. I believe the deadline for that is 1 December 2002. They want a buffer period so they have an option to go back if things go horribly wrong. I believe once they start having other registrars it is a point of no return. Domainz has promissed to help in the transition process. Yes they have to help their competitors by helping with the transfer of domains to those registrars. Also the software for the SRS is open source. All interested registrars can either develop their own system or use the code developed. For the former, the technical specs have been placed online as well. There were lots more discussed at the meeting which went overtime ( I did think they were too optimistic that 2 hours was enough) Anyway if you want to know more, I suggest going to www.dnc.org.nz There's info there. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Very cool Internet appliance
by Juha Saarinen 08 Aug '02

08 Aug '02

http://reviews.zdnet.co.uk/review/2/2/1600.html Definitely something NZ ISPs should consider reselling! Wonder if you could use MRTG to graph the beer temperature/flow etc? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Newsfeed Services
by Arjen De Landgraaf 08 Aug '02

08 Aug '02

E-Secure-IT has a very complete and up-to-date newsfeed in the area of IT security. This is available free on their website (www.e-secure-uit.us) and can be made available to individual ISPs. Arjen de Landgraaf -----Original Message----- From: Tony Wicks [mailto:nzog(a)road.gen.nz] Sent: Friday, 9 August 2002 1:19 p.m. To: nznog(a)list.waikato.ac.nz Subject: RE: Newsfeed Services TelstraClear will supply newsfeed services to International Internet Wholesale customers, generally at no additional charge. ( delivered over domestic connectivity ). That service is not available to non-wholesale customers. > -----Original Message----- > From: owner-nznog(a)list.waikato.ac.nz > [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Donovan Jones > Sent: Thursday, 8 August 2002 1:45 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: Newsfeed Services > > > Given that Telecom will be terminating their Newsfeed service at > the end of > August, we are looking for a new source of usenet news for our customers. > Does anyone else in New Zealand provide Newsfeed services suitable for > an ISP (for a fee of course), or better yet is there anyone in New > Zealand that will provide (for a fee) direct access to a news server by > another ISPs customers. > > Supernews has been suggested as an option but we would obviously prefer > a local feed due to international bandwidth costs. > > Donovan Jones > > - > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Newsfeed Services
by Donovan Jones 08 Aug '02

08 Aug '02

Given that Telecom will be terminating their Newsfeed service at the end of August, we are looking for a new source of usenet news for our customers. Does anyone else in New Zealand provide Newsfeed services suitable for an ISP (for a fee of course), or better yet is there anyone in New Zealand that will provide (for a fee) direct access to a news server by another ISPs customers. Supernews has been suggested as an option but we would obviously prefer a local feed due to international bandwidth costs. Donovan Jones - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Change in Unsubscription Practice - Full Mailboxes
by Donald Neal 07 Aug '02

07 Aug '02

NZNOG People, I have in the past only unsubscribed addresses from the NZNOG list which produced permanent errors - unknown addresses rather than bounces due to relaying filters, for example. I have now been receiving bounces due to a full mailbox from two addresses for several days. Starting tomorrow, any address which produces bounces of that kind for long enough will be unsubscribed. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

RE: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> I don't think anyone thought this. I never claimed this, nor was it > the point I was making. Sorry - I didn't mean it as a retaliation. But it still worth mentioning. -----Original Message----- From: Chris Wedgwood [mailto:cw(a)f00f.org] Sent: Thursday, 8 August 2002 4:33 p.m. To: Tim John Cc: 'nznog(a)list.waikato.ac.nz' Subject: Re: DNS problems On Thu, Aug 08, 2002 at 04:13:09PM +1200, Tim John wrote: I don't want anyone thinking that the 'real' name servers are effected by this. I don't think anyone thought this. I never claimed this, nor was it the point I was making. --cw DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DNS problems
by Tim John 07 Aug '02

07 Aug '02

Hi all, I'm looking into some strange occurrences with the automatic emails generated by the Domainz DRS. There seems to be a few .nz Providers who have not received these emails recently and depend on them for registration notifications. The mail queue on the server is unable to resolve the names for the relevant name servers when sending the notification mail. I have restarted the DNS service, which will hopefully flush any cashed information and renew with current records. Are any other .nz Providers (or their customers) experiencing a lack of emails from Domainz ? Perhaps the lack of these emails could be seen as a good thing ... :> Cheers, Tim DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

FW: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> I for one was not impressed that it managed to cache 3 week old DNS > records for our MX servers. Not to mention the lack or > logging, bounces or traceability in your software. Me neither, but the software was developed before my time and I'm just carrying the baby ! The cached information did seem to be the cause of the problem though. -----Original Message----- From: Simon Lyall [mailto:simon.lyall(a)ihug.co.nz] Sent: Thursday, 8 August 2002 3:04 p.m. To: 'nznog(a)list.waikato.ac.nz' Subject: Re: DNS problems > On Thu, 8 Aug 2002, Tim John wrote: > > I have restarted the DNS service, which will hopefully > flush any cashed > > information and renew with current records. > > I for one was not impressed that it managed to cache 3 week old DNS > records for our MX servers. Not to mention the lack or > logging, bounces or > traceability in your software. > > When we moved our main MX servers we droppped the TTLs to 15 minutes > *and* kept the old servers running for a week to be sure, > nobody else had > a problem. > > Still things like DNS and email are hard, have you considered > contracting > them out to a company with more expertise in those areas? > > > -- > Simon Lyall. | Newsmaster | Work: > simon.lyall(a)ihug.co.nz > Senior Network/System Admin | Postmaster | Home: > simon(a)darkmere.gen.nz > ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: DNS problems
by Tim John 07 Aug '02

07 Aug '02

> We are, but we have your domain in our spam filters. It seems to be working > rather well OK. I walked into that one :) -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Thursday, 8 August 2002 3:24 p.m. To: Tim John; nznog(a)list.waikato.ac.nz Subject: RE: DNS problems > Are any other .nz Providers (or their customers) experiencing a lack of > emails from Domainz ? We are, but we have your domain in our spam filters. It seems to be working rather well -PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: DNS problems
by Simon Byrnand 07 Aug '02

07 Aug '02

At 14:42 8/08/02 +1200, Tim John wrote: >I'm looking into some strange occurrences with the automatic emails >generated by the Domainz DRS. There seems to be a few .nz Providers who have >not received these emails recently and depend on them for registration >notifications. > >The mail queue on the server is unable to resolve the names for the relevant >name servers when sending the notification mail. "unable to resolve" - can you be more specific than that ? A temporary failure to reach the authorative nameservers for the domain should just put the message back on the queue to be tried later. Unless the domain in question had failure of nameservers for a week straight, no messages should go missing....(people wouldn't want a .nz provider that had problems like that anyway :) >I have restarted the DNS service, which will hopefully flush any cashed >information and renew with current records. Which shouldn't be necessary unless your DNS is broken... >Are any other .nz Providers (or their customers) experiencing a lack of >emails from Domainz ? I wonder exactly how we're supposed to notice email which doesn't arrive ? :) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Netgate outage causes chaos!
by Chris Wedgwood 07 Aug '02

07 Aug '02

Still flogging a dead horse... On Sun, Aug 04, 2002 at 11:33:32PM +1200, Peter Mott wrote: But the telecom delegated /23 had no name resolution. Empty/broken zone, lame delegation or name-servers not responding? For your original email is sounds very much like the latter, in which case *most* things will keep working albeit a little more slowly at times perhaps. Email won't be lost, it will remain in the queues, web-traffic should be blisfully ignorant of this. As much of 25% of the 'NZ in-addr.arpa' space is bogus last time I checked. Thousands of web applications on our virtual web servers were unable to send mail because the in-addr zone ttl expired on our caching name servers Your expired in under 30 minutes? and lookups to auth name servers failed due to loss of parent name servers I'm not sure i follow here. Since our mailers require even our own host ip addresses to resolve to a useful name things were very sucky for a time. Eh? Your MTAs fail to stop working when they can't resolve their own names from address? Sounds pretty nasty to me.... We are making quite a few network changes at this time, so had ttl lower than usual. Needless to say I've wound it back up again. Lucky for us, none of our outbound mailers are on the /23 concerned, or other isp mailers would no doubt been refusing mail from our customers. I doubt it... so much DNS is busted out there almost body requires in-addr.apra to be working when receiving email. Sorry, I just don't understand why this was such a problem... reverse is broken for so many people and they never notice it. --cw - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

69/8 allocated to ARIN
by Rob Thomas 06 Aug '02

06 Aug '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this elsewhere. ] IANA has allocated 69/8 to ARIN. I have updated my Bogon List and my sundry templates to reflect this change. You should modify your filters accordingly. IANA IPv4 Allocation List - http://www.iana.org/assignments/ipv4-address-space Bogon List - http://www.cymru.com/Documents/bogon-list.html Secure IOS Template - http://www.cymru.com/Documents/secure-ios-template.html Secure BGP Template - http://www.cymru.com/Documents/secure-bgp-template.html Secure BIND Template - http://www.cymru.com/Documents/secure-bind-template.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Radius server for Telecoms IP.something
by Malcolm Lockyer 06 Aug '02

06 Aug '02

>From what I can deduce from your comments - it doesn't sound like you'll need to buy a $1000AU radius software package just yet (although it is good software). For you scale (I'm guessing - if you have thousands of dial-up customers or somthing, then I'm wrong :) some "freeware" radius package would do fine. I can recomend IC-Radius, although it isn't perfect and isn't exactly mature - but the major advantage to it is that by default it keeps almost all of its configuration, accounting and users in a mysql database. Which for small operations is really handy. I know that that isn't the best reliablility wise - because if the mysql server dies it will refuse to authenticate at all. If you need somthing more - then use free radius, using a flatfile database - with a perl script and a crontab job to re-generate the flatfile "text file" from the mysql database every 10 or so minutes. Installation and configuration of ic-radius isn't that hard - and they have a semi-active mailing list. Bassically for the install you just need to install the libries required (such as the Perl DBI - so the scipts can talk to your database), install and compile the radiusd binaries - then load the radius "Dictionaries" (a file which contains alot of variable atributes so that your radius can talk to the telecom radius - ask telecom for it). Then you have a working radius server. It even includes a cgi based basic management program to get you started quickly - which has been ported to php. <puts on flame proof jacket> Correct my if I'm wrong - I'm no expert... Malcolm >From: Andy Linton <asjl(a)lionra.net.nz> >To: Bjorn Nilsen <bnilsen(a)manux.co.nz> >CC: nznog(a)list.waikato.ac.nz >Subject: Re: Radius server for Telecoms IP.something >Date: Wed, 7 Aug 2002 18:23:36 +1200 (NZST) > >On Wed, 7 Aug 2002, Bjorn Nilsen wrote: > > > Hello, > > > > I want to set up a radius server as we are looking at using Telecoms > > IP.office/IP.remote (or whatever it is called) here. I have never set up >a > > radius server and only know what I have read about it. I have set up >Bind, > > Apache, QMail and various other Linux based systems so hopefully this is >not > > out of my capabilities. As with all Linux software there is many options >to > > choose from eg: Cistron Radius, Livingston Radius, GNU Radius, ICRadius, > > FreeRadius. I understand that radius is a standard but from experience >(eg: > > IPSec) different implementations are not always completely compatible. >What > > radius server would people recommend? It is to be used with Telecoms > > IP.whatever, and needs to run on Linux (or BSD). > > > >Not clear if you want a free server or are prepared to pay for one. If the >latter see http://www.open.com.au/radiator/index.html > >I've just been setting this up and I like it. > >Widely used - see http://www.open.com.au/customerlist.html > --snip-- _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spam from 200/8
by Mark Foster 06 Aug '02

06 Aug '02

Hi Guys, We've had to block 200.0.0.0/8 from our MTAs temporarily, our mail queue jumped to around 30,000 messages at around 6:40 this morning and we're still taking more than one message per second from MTAs which are predominantly in that netblock. There are exceptions now but blocking 200/8 certainly reduced the load something chronic. Looks like a sweep (random(a)ourdomain) looking for valid targets, and the source addresses are random(a)a-valid-but-forged-domain. As a result our MTAs are now bombarding the source domain MTA trying to bounce all the invalid addresses, and now we're getting complaints from them... Wonder whether any other NZ ISPs have seen this happen recently or whether this is the first of many? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

Speaking of spam...
by Dylan Reeve 06 Aug '02

06 Aug '02

I have seen spam 'from' brandebank(a)brandebank.com arrive at a number of addresses today, at least one of them is fairly new, and I have never posted it anywhere public that is likely to have been trawled. Anyone else seen these? Are they a symptom of the mass spam that had QSI blocking the majority of Latin American and the Caribbian? -- Dylan Reeve - dylan(a)wibble.net It's just not cricket. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Fwd: Outage in Wellington - OT
by Tim John 06 Aug '02

06 Aug '02

> "Hell, there are no rules here - we're trying to accomplish something!" > Thomas A Edison Peter, I notice your signature has changed ... Isn't it 'fun to do the impossible' any more :) Tim -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Tuesday, 6 August 2002 7:25 p.m. To: Richard Naylor; Peter Mott; Mark Foster; nznog(a)list.waikato.ac.nz Subject: RE: Fwd: Outage in Wellington > I wondered when this would come up. CityLink has a different architecture > and there is no "central office". Switching centers have ups and > generators > and smaller buildings just have UPS. So your switching centres stayed up and other locations with just UPS went down due to available runtime being exceeded by outage length? -PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Fwd: Outage in Wellington
by Wayne Kampjes 06 Aug '02

06 Aug '02

wot - no power backup for this stuff? -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Monday, 5 August 2002 12:05 To: Mark Foster Cc: nznog(a)list.waikato.ac.nz Subject: Re: Fwd: Outage in Wellington On Mon, 5 Aug 2002, Mark Foster wrote: > Ok try it from the right address now. :) > > > >Date: Mon, 05 Aug 2002 11:54:56 +1200 > >To: nznog(a)list.waikato.ac.nz > >From: Mark Foster <mfoster(a)quicksilver.co.nz> > >Subject: Outage in Wellington > > > >Just heard from one of our NOC team here that there seems to be a power > >outage in Wellington which has certainly affected Citilink (one of our > >links is down) and by the looks also Actrix (who dissapeared off the face > >of the map earlier this morning.) > > > >Just in case anyone else is wondering why things are being a bit strange. > > > >Mark. > >(Quicksilver Internet) Ohhh... is that why www.stuff.co.nz is dead too? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

RE: Magnetic field strength in NZ?
by Dan Langille 05 Aug '02

05 Aug '02

On 6 Aug 2002 at 8:42, Lindsay Druett wrote: > Now you're telling everyone how ancient you are.... I was only born > towards the end of the '60s And I in the early 60's. > Just out of curiosity, what did they/you use for the return path when > they/you measured the EMF induced by the earth's magnetic field onto > the disused telegraph cable ? I don't know. I should clarify. I was helping someone research what the cable had been used for after it was no longer used for telegraph (its original purpose). > -----Original Message----- > From: Dan Langille [mailto:dan(a)langille.org] > Sent: Monday, 5 August 2002 17:08 > To: Juha Saarinen > Cc: NZNOG > Subject: Re: Magnetic field strength in NZ? > > > Strange that you should mention it... I was involved in some > research on the Pacific Cable (a telegraph cable from Vancouver to > NZ). One of the things we found was that after decomissioning (in the > 60's I believe), it was used to measure earth current. -- > -- Dan Langille I'm looking for a computer job: http://www.freebsddiary.org/dan_langille.php - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Magnetic field strength in NZ?
by Juha Saarinen 04 Aug '02

04 Aug '02

Does anyone know roughly how many mG it is? Of course this is on topic for NZNOG. I need to ahhh... uhhh... measure electron deviation in network gear made for Northern Hemisphere magnetic conditions. ;-) -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: Fwd: Outage in Wellington
by Richard Naylor 04 Aug '02

04 Aug '02

At 11:59 a.m. 05/08/2002 +1200, Mark Foster wrote: Just heard from one of our NOC team here that there seems to be a power outage in Wellington which has certainly affected Citilink (one of our links is down) and by the looks also Actrix (who dissapeared off the face of the map earlier this morning.) >>Just in case anyone else is wondering why things are being a bit strange. The Power co had a cable fault they eventually found. Initially another substation fault was feared as a transformer tripped at the same time and at the same place as the ring opened - which happened to NOT be the faulty cable segment. After a few recloses (think "no shutdown" with lotsa power behind you) the fault became apparent. (ie someone felt the ground shake) and it was isolated. Most customers closed things down due to false restarts with the recloses. We waited and installed a geny as the UPS was horribly confused and pretty well dead. The outage affected New World, Actrix (where CityLink have a switch) and most of Courtenay Place. There were genies and extension cords everywhere.........even down the footpath. The New World Sub needs some new paint on the switchgear. Things are now restored and the power boys are off to do a location and dig. rich richard.naylor(a)citylink.co.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Still seeing Code Red/NIMDA activity?
by Juha Saarinen 04 Aug '02

04 Aug '02

Hi, Just a quick check if NZ network operators are still seeing Windows worm activity, so to speak. Has anyone kept statistics on this? If so, I'd be interested to hear about it -- contact me off-list, please. (Or keep it on-list, if it's deemed on topic.) Cheers, -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Fwd: Outage in Wellington
by Gavin Bartle 04 Aug '02

04 Aug '02

>From the looks of their site they might have been updating it -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Monday, 5 August 2002 12:05 p.m. To: Mark Foster Cc: nznog(a)list.waikato.ac.nz Subject: Re: Fwd: Outage in Wellington On Mon, 5 Aug 2002, Mark Foster wrote: > Ok try it from the right address now. :) > > > >Date: Mon, 05 Aug 2002 11:54:56 +1200 > >To: nznog(a)list.waikato.ac.nz > >From: Mark Foster <mfoster(a)quicksilver.co.nz> > >Subject: Outage in Wellington > > > >Just heard from one of our NOC team here that there seems to be a power > >outage in Wellington which has certainly affected Citilink (one of our > >links is down) and by the looks also Actrix (who dissapeared off the face > >of the map earlier this morning.) > > > >Just in case anyone else is wondering why things are being a bit strange. > > > >Mark. > >(Quicksilver Internet) Ohhh... is that why www.stuff.co.nz is dead too? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Fwd: Outage in Wellington
by Mark Foster 04 Aug '02

04 Aug '02

Ok try it from the right address now. :) >Date: Mon, 05 Aug 2002 11:54:56 +1200 >To: nznog(a)list.waikato.ac.nz >From: Mark Foster <mfoster(a)quicksilver.co.nz> >Subject: Outage in Wellington > >Just heard from one of our NOC team here that there seems to be a power >outage in Wellington which has certainly affected Citilink (one of our >links is down) and by the looks also Actrix (who dissapeared off the face >of the map earlier this morning.) > >Just in case anyone else is wondering why things are being a bit strange. > >Mark. >(Quicksilver Internet) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: latency
by Michael Bordignon 01 Aug '02

01 Aug '02

> -----Original Message----- > From: Michael Newbery [mailto:Michael.Newbery(a)team.telstraclear.co.nz] > Sent: Friday, 2 August 2002 4:48 PM > To: nznog(a)list.waikato.ac.nz > Subject: latency > > > It's Friday... yay! - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Cable seeking backhoes
by Michael Newbery 01 Aug '02

01 Aug '02

Does anyone have a suitable rule of thumb to predict the incidence of cable seeking backhoes/trawlers per km? I've tracked down one reference of 'one hit per 7 months per 1000km', without any qualification as to location. One would for instance imagine that armor-plated cable sitting on the bottom of the ocean would have a different failure rate to that of RG9 strung across the local street. Google has thus far been rather unhelpful. -- Michael Newbery IP Architect TelstraClear Limited - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

The New Zealand Network Operators' Group
by Donald Neal 01 Aug '02

01 Aug '02

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This posting, or one like it, is sent to all subscribers each month. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Auckland Peering Exchange See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. About This Mailing List This list has around 340 subscribers, a number currently more or less static. You may only post to the list from an address subscribed to one of the lists described below. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations, nor the administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrator remains happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ipv6 peering
by Chris Hellberg 30 Jul '02

30 Jul '02

Morning all, Thanks to Dean's great ipv6 presentation at Uniforum, everyone's got a ::/28 allocation from APNIC now, right? I'm interested in hearing from people who've got v6 allocations, either from tunnel brokers, or otherwise who'd like to peer at an NZ ipv6 peering point. APE and WIX are possibilities, however I have my doubts on the number of providers on WIX and APE who would be willing to add v6 addresses on their interfaces from citylink to any servers in their network; it'd be easier to put a 6to4 tunnel for testing purposes on a router in the middle of the network, especially if the router question already has a tunnel to a tunnelbroker overseas. One of the benefits of this is that any NZ<->NZ v6 traffic doesn't have to traverse international tunnels. The big driver of this will be the amount of local content available via v6. Admittedly there's not much around at the moment, however I do have mysql, apache, xfree86, cygwin, cpan and sunfreeware mirrors that are on the 6bone which could serve as good starters. I'm sure that there would be some webservers out there who are v6 aware which people would be willing to route ipv6 to. The more people we can get on the ix, the more content would become available. Sorta like the multicast chicken and egg thing. Could I get a showing of interest on who'd like to be on such an ix (just a box I have running zebra which a whole bunch of 6in4 tunnels), even if you've got a ::/64 tunnel allocation from a tunnel broker? There won't be any international v6 transit provided, just a BGP4+ feed of all the NZ prefixes of people peering. Cheers, Chris - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Banks to review ICMP filtering?
by Juha Saarinen 30 Jul '02

30 Jul '02

http://www.idg.co.nz/webhome.nsf/UNID/E8C8975FB28122B1CC256C0500167A15!open… -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Banking/Hospital Problems and MTU
by rob.edkins＠axon.co.nz 28 Jul '02

28 Jul '02

> > Probably the reason its not on by default, is because it is > not a "fix", > its just a workaround, to work around braindead firewalls > that block all ICMP. > Agreed, it's a hack...but it's not only firewalls that drop ICMP...I came across this a few years ago with a WAN router that was misbehaving between Token Ring and Ethernet segments. > As such there would probably be considerable sacrifice in > performance when > it has to operate - first of all there will have to be a few lost > retransmitions of large MTU packets before it realises > something is wrong, > and then (from Juha's post) it just drops the MTU to 536 for further > communication, which is definately sub optimal, depending on > what the real > maximum MTU of the path is... > Yes, although it will only kick in on these sites that have this problem. It's dynamic on a per connection basis. Overall performance on the majority of connections won't be affected, as the 'ol TCP stack will behave as intended. > If it was on by default, it would hide the real problem, and > nothing would > ever get done about it. > Fixing is always better than working around, but given that ICMP access policy at the far end of the pipe is not something that Joe User usually has a lot of control over, then something that will work is probably better than something that doesn't. (From a user perspective) Unless it has some other negative impact.... Rob -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DNS monitoring update
by Rob Thomas 28 Jul '02

28 Jul '02

Hi, NZNOGers. [ Apologies to those of you who have already seen this on NANOG. ] I have added two additional data collection points to my DNS root name server monitoring. I have also scaled the graphs and added a text only version. You will find it all here: http://www.cymru.com/DNS Comments and feedback are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Pictures from Uniforum 2002 Online
by Mark Foster 28 Jul '02

28 Jul '02

Thanks to Eaden and Robert from Opentec - http://opentec.co.nz/uniforum Cheers, Mark. (Please forgive the CrossPosting.) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Banking/Hospital Problems and MTU
by Simon Byrnand 28 Jul '02

28 Jul '02

At 10:46 29/07/02 +1200, rob.edkins(a)axon.co.nz wrote: >http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q159211& >http://support.microsoft.com/default.aspx?scid=KB;EN-US;q314825& > >Are useful too. > >This fix has been around for at least 4-5 years to my knowledge. >I don't know why it isn't on by default by now, but I guess it wasn't all >that big an issue in the old dial-up world. Probably the reason its not on by default, is because it is not a "fix", its just a workaround, to work around braindead firewalls that block all ICMP. As such there would probably be considerable sacrifice in performance when it has to operate - first of all there will have to be a few lost retransmitions of large MTU packets before it realises something is wrong, and then (from Juha's post) it just drops the MTU to 536 for further communication, which is definately sub optimal, depending on what the real maximum MTU of the path is... If it was on by default, it would hide the real problem, and nothing would ever get done about it. (I can see it now - "our Bank site works fine for MS operating systems, its only those weirdo's that run Linux that have problems because they don't have PMTUBHDetect" :) For once MS got something right by not making it on by default... Regards, Simon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Banking/Hospital Problems and MTU
by rob.edkins＠axon.co.nz 28 Jul '02

28 Jul '02

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q159211& http://support.microsoft.com/default.aspx?scid=KB;EN-US;q314825& Are useful too. This fix has been around for at least 4-5 years to my knowledge. I don't know why it isn't on by default by now, but I guess it wasn't all that big an issue in the old dial-up world. > > http://www.microsoft.com/windows2000/techinfo/reskit/en/cnet/c > nbc_imp_yvjd.htm > > has more details. > > -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Banking/Hospital Problems and MTU
by rob.edkins＠axon.co.nz 28 Jul '02

28 Jul '02

There's a somewhat simpler reg hack on Windoze. Set HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\EnablePMTUBHDetect to 1 This enables automatic 'Black Hole' router detection and triggers automatic MTU scaling. BTW, the 'Don't Fragment' Bit is on by default with Windows. Rob > > How incredibly serendipitous. I just ran into this problem > at work the > yesterday. The service techs. for our digital radiology > system came in > and applied the latest service update. All of a sudden users weren't > able to log in via their browser loaded Java client. Funny thing is, > these guys spent 2 days trying to figure out the problem before > resorting to asking "the network guy"... one of those pride things I > guess. > > Some quality time (15 minutes) with tcpdump (well, windump) showed the > DF bit being set and repeated acknowledgment requests during the > "hang". After a modest amount of investigation and a few phone calls > the following was found: > > 1. a remote firewall blocking all ICMP (the admin won't change it) > 2. a router somewhere in the path with a lower MTU requirement > 3. a software upgrade forcing the DF bit to be set (developer won't > change it) > > Lowering the MTU on the client end fixed the problem; > however, I need to > get the registry hack distributed across ~500 desktop and all > potentially have different interface descriptions in the > HKLM/system/current control set/service/ ...what a PITA. > > > -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Domainz falling prey to spambots?
by Simon Byrnand 28 Jul '02

28 Jul '02

Hi Everyone, I've just noticed a disturbing trend in the last few days. I've started receiving considerable spam to an address (which is actually just an alias) which we *only* use as the technical contact address when registering new domains with domainz. (I won't say what it is in this forum, least I make life easy for any spambots that havn't found it yet :) Email is *never* sent from this address, it is *not* on any of our web pages or used in way except to be listed as technical contact. (In case anyone just looked up our own domain, that is not the contact address in question, we've only been using it for registrations in the last couple of months) This poses the question - just how have the spambots got hold of it ? Maybe they got lucky, and guessed it, but I don't think so. That leaves the domainz website, and whois servers. For a spambot to be able to find contact details of a domain, it would have to know the domain existed in the first place, as to my knowledge domainz don't provide a "list" of domains they have in their registry for exactly this sort of reason. And yet only a few months ago there was the case of the disreputable Australian registry that somehow managed to get a list of a large number of .co.nz's and their contact details, presumably through some kind of automated queries. I'm curious if anyone else has received spam to an address they know for certain is only used as contact details on domains registered at domainz... Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Banking Problems and MTU
by Craig Whitmore 28 Jul '02

28 Jul '02

I was wondering what people think about this latest story.. http://www.idg.net.nz/webhome.nsf/UNID/4AA2988B4A1835C5CC256BFF0014A6A8!ope… (a more technical expanation from Cisco of the problem http://www.cisco.com/warp/public/105/56.html) I've noticed this problem for ages (for example the ASB's site) when viewing their pages via a GRE tunnel (or the inability to). Is blocking _all_ ICMP types the wrong thing to do? (in paticular type 3 (unreacable), subtype 4(needs fragmentation) for PMTU Discovery) and basiclly breaking their website for people who have paths who get fragmented TCP/IP Packets) Thanks Craig Whitmore

11 15

Are you lame? :)
by Rob Thomas 26 Jul '02

26 Jul '02

Hello, NZNOGers. [ Apologies to those of you who have already seen this post on NANOG. ] I recently came across a web site belonging to Justin McNutt that lists all of the lame delegations his name servers have detected. This is a great way to share some clue and keep track of errant domains. I have received his kind permission to mimic his efforts using data collected from three of my name servers. I will update this page weekly, and you will find it here: http://www.cymru.com/DNS/lame.html Justin's page is available here: https://dnps-linux2.telecom.missouri.edu/~mcnuttj/lame.html The DNS root name server statistics are still available, and have moved here: http://www.cymru.com/DNS/dns.html My thanks to the authors of the lamers.sh script, which I modified to suit my purposes. Comments and feedback are always welcome! Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

OT but desperate!
by PhoneNet 24 Jul '02

24 Jul '02

I'vspent several hours today tryingt o find info on how to get past an old Compaq deskpro's setup password so I can alter the system setup for a friend - any one know if it can be done? I've tried disconnecting the CMOS jumper but despite it losing the config the sytem password stuff still comes up and I figure its a ssociated with the compaq's diagnostics partition some how .... Can't find anyhting on the internet and I'm so frustrated I'm going home! - something fo rthe night owls to ponder? Ian PhoneNet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ICMP message types
by Rob Thomas 24 Jul '02

24 Jul '02

Hi, all. I am opposed to blocking all ICMP, for many good reasons. I do limit the ICMP types and codes I allow, however, and have put together a list that might help others as well: http://www.cymru.com/Documents/icmp-messages.html Feedback is welcome and encouraged. Be the first in your ASN to make it to the Credits section. :) I hope this helps! Simon, thanks for the suggestion to post this link to the list. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Banking Problems and MTU
by Donald Neal 24 Jul '02

24 Jul '02

>From: Juha Saarinen [mailto:juha(a)saarinen.org] >Sent: Thursday, 25 July 2002 08:55 >To: Joe Abley >Subject: Re: Banking Problems and MTU [...] >> The worst thing you'd expect in a path throughput constriction from 8M >> to 128k is surely the loss of a window's worth of data. You'd expect to >> TCP to wind back to slow start, and you'd expect the in-flight pipeline >> to drain very rapidly. Performance would certainly be hit, but I don't >> think I would expect consistently stalled connections. >Dunno if it's relevant, but Jetstart is rate-limited at the RAN, which can >be anywhere in NZ (my one is in Glenfield, some 25-30km away, but used to >be in Wellington). >To and from the DSLAM, Jetstart users have a full RADSL connection (which >incidentally is also rate-limited, to 4Mbps down). >Would this sort of rate-limiting affect the problem? You should simply see a return to TCP slow start. TCP congestion control is not very sophisticated, but it does sort of work. And it works end to end. The cause of any packet loss in the middle isn't known to it. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZNOG 2002 and Beyond
by Donald Neal 23 Jul '02

23 Jul '02

Counting heads during NZNOG papers last week showed a steady attendance of somewhere between 45 and 50. (Tony McGregor's paper first thing on Friday morning had an audience of only 36 when it began, but 48 by the time it finished. I suspect that to reflect time of day rather than content or presentation.) That level of attendance, and feedback to various organisers, suggests to me that holding a face to face gathering was a worthwhile exercise. My thanks to all those who contributed, and particularly to Dean Pemberton. Now, if that one was worthwhile, how about doing it again? We have already two offers for future NZNOG gatherings. 1/ UniForum NZ Roger De Salis has volunteered to act as convenor for next year's UniForum NZ conference. In general terms, his intention is to stage a conference similar in structure to this year's, though with Linux content much more focussed toward a business audience, and in general a stronger programme. NZNOG would be welcome to participate on more or less the same basis as this year, though presumably making up a smaller proportion of a larger conference. This would probably be at around the same time of year and probably in Auckland. 2/ The University of Waikato The University of Waikato have offered to host a NZNOG gathering, to be held at their main campus in Hamilton. This would be a stand-alone event, with the university providing administrative staff time for registrations and the like. No decision has been made as to when this would be. If held outside university terms, e.g. in February, accommodation on campus would be available at a cost of approximately $35 per night. There would be a cost for the venue, but this would be well below the rate a hotel would charge. The Hamilton option is likely to have a significantly lower cost. It is possible that a university setting would discourage sponsors, who provided a good number of overseas speakers this year. On the other hand, the likely venue photographs well and we haven't asked them yet. I'd be interested in feedback, quite possibly including issues not considered in this posting. If anyone else has an alternative venue/organisation suggestion, or believes we can support more than one organised gathering a year, let's hear it. - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 10

WTS: Cisco Routers
by Sahil Gupta 18 Jul '02

18 Jul '02

Hello there, I currently have 2 pieces of equipment that are up for sale: 1) Cisco 4700M+ Router, NE2E, NP4T 2) Cisco 2501, 8MB DRAM, 8MB FLASH Please email offers off-list. Cheers, Sahil

1 0

Bag Recovered :)
by Mark Foster 16 Jul '02

16 Jul '02

Thank you Lin for picking up my bag and saving it from a trip to Wellyhole.. er.. Wellington. :) Shes been nagging me about the 'reward' all day so I figured she must know where it went. :P :) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Bag Recovered :)
by Mark Foster 16 Jul '02

16 Jul '02

Thank you Lin for picking up my bag and saving it from a trip to Wellyhole.. er.. Wellington. :) Shes been nagging me about the 'reward' all day so I figured she must know where it went. :P :) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Bag Recovered :)
by Mark Foster 16 Jul '02

16 Jul '02

Thank you Lin for picking up my bag and saving it from a trip to Wellyhole.. er.. Wellington. :) Shes been nagging me about the 'reward' all day so I figured she must know where it went. :P :) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Orcon Internet Prefix List Update
by Craig Whitmore 15 Jul '02

15 Jul '02

For all those peering with Orcon Internet (AS17746) at APE, please update your Filter Lists to: Add: 202.49.233.0/24 Add: 210.55.1.0/24 A Full prefix list is included as attachment. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

Lost at Uniforum :/
by Mark Foster 15 Jul '02

15 Jul '02

Ive misplaced my Targus carryback (designed to carry a notebook computer) during the Uniforum conference. If anyone who was at the conference has picked up or remembers seeing a Black bag around the size of a briefcase - probably in or around the Amy Johnson room (where registrations were run from) id appreciate it if they would let me know. Reward Offered :) Mark. (Feeling somewhat sheepish) - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Election night results site peering
by Ewen McNeill 15 Jul '02

15 Jul '02

A client of mine (Catalyst IT) will be hosting the website with the "on the night" election results. The website is a set of static pages (which are updated regularly in a push from the central computer collating the results as they come in; Catalyst IT are also operating this computer at another facility). The website will be hosted at one (or possibly two) addresses out of the Catalyst IT 203.96.153.224/27 CIDR address range (allocated out of a Paradise block). This address range is advertised into WIX (WIX router is 202.7.0.72). They have a 100Mbps connection into Citylink so local bandwidth should be adequate. However for both efficiency and redundancy they are keen to take as much advantage of the peering on WIX as possible. Can I have an indication from the ISPs as to: - how many are accepting /27 routes from WIX? (I've heard some are not accepting routes smaller than /24, or even larger) - for those that do not routinely accept a /27 advertisement on WIX, whether they'd be prepared to accept that /27 advertisement around the election night period (or put in a temporary static route) - how many are advertising their dialup, adsl, cable, etc blocks into WIX (so that the return path is also peered) Comments from anyone that peers at APE (and would accept a /27 route), but doesn't have any peering/connection to Citylink/WIX would also be appreciated. At present the cheapest price for transit to APE (from Wellington) is probably outside the budget remaining, but the issue is still being considered. (Of course if someone wants to offer cheap transit to APE.... :-) ) Messages here (nznog) or directly to me (ewen(a)naos.co.nz or ewen(a)catalyst.net.nz) would be appreciated. Thanks, Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Thanks to all who attended the Conference
by Dean Pemberton 14 Jul '02

14 Jul '02

The story I heard was thata Vixie wanted wireless to his room. Now we all know how likely that is to happen in NZ. Geek Conference or no Geek conference =) The other 100 people there had no problem getting email over the wireless that was around. Dean On Mon, 2002-07-15 at 08:23, Joe Abley wrote: > > On Saturday, July 13, 2002, at 10:48 , Joe Abley wrote: > > > ... and the mysterious absense of 802.11b wireless access in the > > important areas of the hotel (lobby, bar, conference rooms). > > Having heard the subsequent thanks to you for providing 802.11b gear, > perhaps I misunderstood the criticism (maybe it was "transit through > telecom sucks", or "jetstream is wildly unsuitable for use in a > conference full of geeks attached at 11M"). > > Vixie apparently found it more efficient to travel back to Peter's house > on the north shore and get his mail there, for example, than to do so in > the hotel. > > Anyway, congratulations on getting something off the ground. I wish I > had been there :) > > > Joe > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Re: Thanks to all who attended the Conference
by Ewen McNeill 14 Jul '02

14 Jul '02

In message <Pine.WNT.4.44.0207151423220.2740-100000(a)den2>, Juha Saarinen writes: >On 15 Jul 2002, Dean Pemberton wrote: >> The story I heard was thata Vixie wanted wireless to his room. > >I gather it was his modem that didn't like the hotel switchboard (or the >other way round, really). I'm not sure which hotel he was staying in when having trouble (for complicated reasons conference attendees ended up in two different hotels) -- I was able to dial out of the Hotel Grand Chancellor, but only with a very long timeout (over 60 seconds) to allow the modem negotiation to work. Got about 28K8 connections IIRC. The Centra hotel appeared to have analogue POTS lines into the rooms, but I didn't try dialing out there. The wireless OTOH was very handy -- thanks to those who arranged it. (Even if the ADSL did occassionally have problems it all mostly worked, and was very handy.) The wireless definitely worked as far as the chairs outside the bar, as I saw someone using it there; inside the bar I don't know, but it was close enough it probably should have worked. >But, seeing that most hotels (outside NZ at least) offer a bedside >Ethernet port, something should've been arranged IMO. You must have a very different definition of "most" to the one I use. I've never actually seen this, even in hotels that advertise it. (Comment from reception at one hotel when I'd booked into a room advertising this "oh, we don't do that". No, I wasn't pleased.) Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

Re: Thanks to all who attended the Conference
by Mike Savory 14 Jul '02

14 Jul '02

Yeah Thanks to everyone that was involved in organising it Rodger volunteered to run one next year (probably in Auckland) as well as being elected as vice president on Saturday night. Start thinking of topics now... Mike Savory On Sunday, July 14, 2002, at 12:22 PM, Andy Linton wrote: > > On Sun, 14 Jul 2002, Dean Pemberton wrote: > > > Just wanted to say a quick thanks to everyone who attended the > conference. > I'm sure much more will be posted about specific subjects later. > > I hope you all enjoyed the sessions that you attended. > I'm sorry I couldn't stay around longer > > I'd also like to thank Dean, Donald and all the others who made the > conference possible. I too am sorry I couldn't stay around longer but > I'd > guess from what I saw on Thursday that another of these would be a good > idea. > > andy - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 6

More thanks ...
by Tim John 14 Jul '02

14 Jul '02

I had a great few days and would also like to thank everyone involved in the organisation AND everyone who attended. It was good to put a face to some of the names that appear on the list. The speakers were excellent and if the same caliber can be attracted next and subsequent years, I think it could be a start of something successful. Unfortunately, I missed the evening entertainment so didn't have a chance to drink with folk or dent 2Day.com's bar tab ! However, Thursday Night Curry in Wellington could be on the cards for that ... Thanks again all. Tim Domainz. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Uniforum 2002 Conference
by Mark Foster 13 Jul '02

13 Jul '02

Just a quick note to say thanks to all those NZNOG'rs whos efforts helped make the Uniforum/NZNOG Conference a success. Nice to put faces to some of the names which crop up here from time to time. Off the top of my head and by no means officially, but thanks are owed to some NZNOG-Specific folks who helped us out: Citilink (802.11 gear, which was well used) Dean - for helping arrange the above. Nathan Mercer, Microsoft NZ - The use of a Data Projector. Steve Philips, ICONZ - The use of a Data Projector, and also the Packeteer (For the record, we did 1.1GB for the 4 day period, so that wasnt so bad on a JS1200 connection was it. :) The packeteer most certainly helped keep utilisation reasonable. Roger De Salis / Cisco, for getting Paul Vixie out. He certainly kept everyones attention and is a fairly easy speaker to listen to. Martin Kealey - for organising the whole thing. Probably also need to thank Peace Software for letting him do so much during work hours :) Lin Nah - for much needed motivation and assistance in the logistics side. + Any others who I havnt mentioned. See you all at the next one. :) Mark Foster - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Thanks to all who attended the Conference
by Dean Pemberton 13 Jul '02

13 Jul '02

Just wanted to say a quick thanks to everyone who attended the conference. I'm sure much more will be posted about specific subjects later. I hope you all enjoyed the sessions that you attended. I'm sorry I couldn't stay around longer Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Heads up to Xtra and people receiving mail from Xtra
by Simon Byrnand 10 Jul '02

10 Jul '02

Hi All, Just noticed this morning, that Xtra seem to be sending mail from some "new" mailserver ip addresses recently, which include: 210.86.15.144 210.86.15.145 210.86.15.147 (and probably others) Unfortunately that whole /24 seems to be blacklisted by several different spamlists as either a "dialup range" or as a source of spam. See http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=210.86.15.144 for one example. (Note: slow link) So if you use any ip address based spam blocking you may not be receiving mail from xtra anymore until you allow that range..... :) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

video at uniforum
by Joe Abley 10 Jul '02

10 Jul '02

Is anybody recording any of the nznog track sessions at uniforum, in some digital fashion? If so, and anybody needs/wants a US mirror for the resulting data, let me know. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 9

(Fwd) The operator of the largest IX in NZ
by Sue Leader 09 Jul '02

09 Jul '02

Greetings If anyone is interested would they get in touch direct with Kyoko. chrs Sue ------- Forwarded message follows ------- From: "Kyoko Day" <kyoko(a)apia.org> To: <exe.dir(a)internetnz.net.nz> Subject: The operator of the largest IX in NZ Date sent: Tue, 9 Jul 2002 19:37:33 +1000 Dear Sue Leader, As continuation from the last APRICOT, Philip Smith of Cisco, Akira Kato of NSPIXP2/6 of WIDE Project, and I are organizing a meeting of IX operators during the next IETF in Yokohama and would like to know if one of the IX operators in NZ can attend our meeting. The below is a proposed list of agenda for the upcoming IX Operators Meeting in Yokohama on 16 July, 2002. Paul Vixie of former PAIX in place of Stephen Stuart, Bill Manning, Bill Woodcock, and other operators and the major vendors will be attending the meeting. This will be a gathering of the major IX *operators.* In this meeting, we are also expecting the other major IXs in AP regions such as JPIX, TWIX, TWNAP, KT, KIX, and Dacom, etc. Date/Time: July 16, 2002 -7:30am - 9:00am Place: Room 513, Pacifico Conference Center, Yokohama, Japan Purpose: 1) to form a close relations among the operators of the critical IX infrastructure, 2) to find an efficient and effective way to coordinate and collaborate among the operators, especially in the area of security, 3) to exchange information, share experiences, and try to find a solution to the common problem, and 4) to receive your input about our future activities. Participants: IX operators of the major IXs that are critical to the Internet infrastructure and individuals whose expertise and IX related activities go across the continents. Proposed Agenda: 1. Open the meeting - Background and the purpose of the meeting 2. Introduction of the participants 3. Agenda Bashing 4. Presentation and Discussion Items (a) A list of known IX operators and newly established IXs (b) IX Status Report by the participants (c) Discussion of future activities 5. Any Other Business 6. Close the meeting We welcome your ideas and suggestions for the upcoming meeting. In the event you will not be able to attend the meeting, please feel free to let us know by email to kato(a)wide.ad.jp or kyoko(a)apia.org. The information is also available at http://www.apia.org. Thank you in advance, and please let me know if someone from the largest IX in NZ can participate. We look forward to hearing from you soon. Regards, Akira Kato - WIDE Project/University of Tokyo Kyoko Day - APIA ______________________________________ Kyoko Day - Secretary General Asia & Pacific Internet Association (APIA) http://www.apia.org ------- End of forwarded message ------- -- Sue Leader - Executive Director InternetNZ Voice: +64-4-472-1600 Fax: +64-4-472-1207 Level 4, Economous Building, 4 Bond Street (P.O.Box 11-881) Wellington http://www.internetnz.net.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

CUG
by Philip D'Ath 06 Jul '02

06 Jul '02

I'm thinking about forming a Cisco Users Group (CUG) in Auckland, and modelling it after other CUGs such as http://www.cisco-users.org/. I know I will have the support of Cisco Systems, and Cisco's distributors. What I'm not sure about is how much interest there is out there for such an idea among the Cisco populous. I'm not aware of anything like this currently in NZ. Is anyone else aware of such a usergroup? I would like the CUG to be for engineering people, not sales people. Based on other CUGs, common things that the CUG would do are: * Technology presentations (e,g. Understanding IPSec, Queueing Options, etc) * Study groups, for people seeking Cisco Qualifications * Solutions that people have found to problems that take more than 30s to describe * Discussion groups (perhaps IP in NZ, peering, APE, etc). * Demos of new products (the kind where your allowed to touch the boxs). I would like the meetings to be once a month, and I'll probably ask a different distributor/Cisco/vendor/reseller to sponsor coke/beer/pizza each time. I can probably manage to do a lot of presentations myself to get things going, but I don't profess to being an expert in every field, and I'd hate to think I was preaching to people who knew more than myself (which I would be if no one offered me any support). So what do you think. Would I be wasting my time? Philip D'Ath, BCMS, MCP, CCNA, CCDA. http://www.ifm.net.nz/

11 18

Conference Schedule clash
by Mike Savory 05 Jul '02

05 Jul '02

Hi all I noticed that the Citylink presentation has been scheduled at the same time as the DDoS one. (Wacking the Moles) vs (Distributed Denial of Service: The current state and counter measures) Any chance of changing this (the conference looks pretty full though...) Mike - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Advance notice: Invitation to join NZ delegation to APEC TEL26 & associated Security Workshop and Training events
by Frank March 04 Jul '02

04 Jul '02

This message is being distributed to the following mailing lists: GOVIS, Internetnz-members, Ecommerce-contacts, NZNOG. [Apologies for any duplications] I will send follow-up messages on this topic only to anyone who registers interest by replying directly to frank.march(a)med.govt.nz As someone interested in the development of ecommerce, the Internet and related technologies, you are invited to join the New Zealand official delegation to the 26th meeting of the APEC Telecommunications and Information Working Group (TEL26) which will be held in Moscow, Russia from 19 to 23 August 2002. Information about the meeting will be available later on a dedicated website but in the meantime there is some information available on the main APEC TEL website at http://www.apectelwg.org/apec/main.html. The meeting programme will be held in conjunction with a number of associated seminars and workshops (on 19 an 20 August) which increase opportunities for making contacts and bilateral discussions. Of possible wide interest, there are at two security events timed to coincide with TEL26. A two-day workshop on training to combat cyber terrorism and crime, to be hosted and funded by USA, will take place following TEL26 and a two-day meeting between representatives of the European Electronic Signatures Standards Initiative (EESSI) and the TEL e-Security Task Group is proposed to take place prior to TEL26 (this meeting will be funded by EESSI). APEC TEL is one of the most productive APEC working groups and has a very strong private sector presence. It is very active in promoting electronic commerce as well as fostering projects in online security and PKI, telecommunications policy and regulation, broadband dissemination and take-up, research and educational projects and many other relevant areas. The New Zealand delegations to previous meetings of the TEL have included a number of private sector members as well as officials from government agencies. Please note that there is no registration fee for APEC TEL meetings, and the cost of at least some meals are met by sponsors, however delegates are expected to meet their own travel and accommodation costs. The delegation reports from TEL23, TEL24 and TEL25 may be found at along with other information about APEC activities at http://www.ecommerce.govt.nz/international/index.html Please contact me if you are interested in joining the delegation or if you would like any further information. And please pass this information on to anyone else you think might be interested. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 Any opinions expressed in this message are not necessarily those of the Ministry of Economic Development. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Anybody heard of these guys ?
by Simon Byrnand 03 Jul '02

03 Jul '02

Just to change the topic momentarily away from conference registrations etc to more technical matters.... :-) A while back I remember a bit of discussion about a "personal firewall" program that automatically sent out abuse(a)domain emails whenever it detected "intrusion attempts" that was really starting to get up the nose of system admins everywhere.... Yesterday I got a strong sense of Deja Vu when I received the following email to abuse@ (details xxx'ed to protect the innocent :) -------------------8<--------------------- Complaint ID: [securepipe.com #xxxxxx] The following is a complaint against an IP or domain which appeared in our logs, indicating possible network abuse. If you have received this report in error, please forward it to the appropriate party or let us know. A user, apparently from your network, probed port 139 (NETBIOS) on the IP appearing in the log except below. The port in question is commonly used for Windows networking, and thus the probe may represent a misconfigured client or an active attempt to gain unauthorized access to the target. All timestamps below are in UTC -0000 (Greenwich Mean Time) Jul 3 03:14:56 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=64034 F=0x4000 T=103 SYN (#25) Jul 3 03:14:59 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=547 F=0x4000 T=103 SYN (#25) Jul 3 03:15:05 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=4643 F=0x4000 T=103 SYN (#25) Jul 3 03:15:17 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=11811 F=0x4000 T=103 SYN (#25) We appreciate your assistance in resolving this matter. -- SecurePipe Incident Response Team Tel: +1 608 294 6940 Fax: +1 608 294 6950 (attn: IRT) incident.response(a)securepipe.com -------------------8<--------------------- Now I don't know about anyone else, but this email looks like an automatically generated report if I ever saw one...although this time comming from a linux firewall log. The question is should I be taking this seriously, or ignoring it. The fact that the "complaint" had an ID number suggested they may have a system like spamcop where you can quickly log in and address the issue on their website. Unless I'm blind, they don't have anything like that on their site, only lots of promotional material for their companys products/services. (Does that make this email effectively unsolicited advertising ? :) Then there is the question of severity - I'd be interested to know where most sysadmins draw the line between accidental and harmless connections and outright mallicious activity. IMHO a single connection attempt to port 139 doesn't fall into the category of mallicious, and could indeed be totally accidental. I can think of a number of actions in windows that will inadvertently cause it to try to make a netbios connection to a remote host - sometimes you have to go out of your way to STOP the stupid thing from doing that...(netbios hostname resolution anyone?) I'm definately not trying to downplay the importance of security, but I can see a lot of nuisance value if we get to the point where any connection to a non-desired port is automatically considered mallicious, and every man and his dog has their firewall automatically firing off emails every time somebody tries to connect to them on a port they weren't expecting connections on... Anyway, I'd be interested in hearing from anyone else who has dealt with "securepipe.com", or just peoples opinions on the matter of automated firewall abuse emailing in general... Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Beer!!!!!!
by Dean Pemberton 03 Jul '02

03 Jul '02

In the spirit of Networking and Beer (Yep it's in the AUP), I'd just like to invite anyone who is in Wellington on Thursday along to Curry. A few of the networking people around town have been doing Thursday night curries for a few weeks now (ever since I flew in, maybe a bit before) and it's become a bit of a thing. If anyone wants to join us for Curry/Chat/Beer on Thursday, then get yourself to ThursdayNightCurry.com, check out the rules etc and we'll see you there. Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 18

RE: Uniforum registration
by Tim John 03 Jul '02

03 Jul '02

I actually went ahead and enrolled my colleague yesterday anyway, but was happily surprised that for the three days, the total was only $628. Much appreciated ! C U there ... Tim -----Original Message----- From: martin(a)kurahaupo.gen.nz [mailto:martin(a)kurahaupo.gen.nz] Sent: Thursday, 4 July 2002 5:32 a.m. To: tim.john(a)domainz.net.nz Cc: nznog(a)list.waikato.ac.nz Subject: Re: Uniforum registration I've fixed the problem with the descriptive text (some days ago now, but I thought I'd better let people know). We've also had a re-think about the pricing, and have decided to continue a discounted rate for a while: Until midnight Monday the rate is $399 for two days and $157 for each addition day, including lunch but not dinner or accommodation. A few people booked at the "full" rates earlier this week; you're welcome to re-book at the reduced rate -- but use the same booking reference number or we'll wind up charging you for both! -Martin On Mon, 1 Jul 2002, Donald Neal wrote: > The rates now being advertised on the web site are not early bird > rates. Those ceased to be available once the first fifty registrations > were in. I believe work to be under way at present to fix the text on > the web site. Tim John" <tim.john(a)domainz.net.nz, on 07/01/02 11:20 wrote: > I'm trying to register a friend for the Uniforum next week and, > according to the website, there are still 'earlybird' places left, but > to register for three days cost's nearly $1,000. > > I registered a few weeks back and it came to a third of that. Was that > at a 'really, really, really earlybird discount' ? -- "War against Terror" is an oxymoron - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Uniforum registration
by Donald Neal 02 Jul '02

02 Jul '02

Tim, The rates now being advertised on the web site are not early bird rates. Those ceased to be available once the first fifty registrations were in. I believe work to be under way at present to fix the text on the web site. - Donald Neal -- Donald Neal Special Operations Network Delivery Telecom New Zealand Ltd >>> "Tim John" <tim.john(a)domainz.net.nz> 07/01/02 11:20 >>> I'm trying to register a friend for the Uniforum next week and, according to the website, there are still 'earlybird' places left, but to register for three days cost's nearly $1,000. I registered a few weeks back and it came to a third of that. Was that at a 'really, really, really earlybird discount' ? Tim - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Maxnet
by Juha Saarinen 02 Jul '02

02 Jul '02

On Wed, 3 Jul 2002, Geoff wrote: > Hi Juha, > > Abuse and postmaster(a)maxnet should work.. I see... they do work, at maxnet.co.nz, but not maxnet.net.nz. Oh well. :-) > however if you gimme the details I'll suss it out for you. Cheers, will do. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Maxnet
by Juha Saarinen 02 Jul '02

02 Jul '02

Could someone from there contact me with an admin address that I could use? One of Maxnet's customers has come down with W32/Yaha.E. Furthermore, it'd be cool if Maxnet could add a couple of aliases, such as: hostmaster postmaster abuse -- Regards, Juha C program run. C program crash. C programmer quit. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 01 Jul '02

01 Jul '02

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This posting, or one like it, is sent to all subscribers each month. NZNOG 2002 HURRY! HURRY! MAKE REGISTRATION FAST! Sorry, got a bit carried away there. A strong NZNOG programme makes up much of the content of the UniForum NZ conference to be held next week at the Auckland Airport Centre hotel. You can read the full programme and register at http://www.uniforum.org.nz/ . Yes, you could read the programme there and not register, but surely you wouldn't. Overseas speakers appear thanks to Cisco, Ericsson, Juniper and The University of Waikato. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Auckland Peering Exchange See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. About This Mailing List This list has around 340 subscribers, a number currently more or less static. You may only post to the list from an address subscribed to one of the lists described below. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations, nor the administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrator remains happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

OT: Wanted: Data Projectors for Uniforum
by Mark Foster 01 Jul '02

01 Jul '02

Hi folks, apologies for the offtopic nature of this post. We're in need of a couple of Datashow units for the Uniforum conference this year. The rates ive obtained for rental units so far arent particularly brilliant - ive managed to get one, we ideally would like to have three for the entire period Thursday-Sunday.. If anyone on this list is in a position to assist, im authorised to use a free conference registration as a bargaining chip :) Thats around $400 value for the four days worth. Note that two days are a weekend also. :) If anyone has a unit they could possibly loan us for the duration of the conference, please contact me directly either via email (offlist) or call me directly on 021 499 368. Auckland area preferred, and im happy make any other delivery arrangements. Thanks, Mark Foster Uniforum 2002 Conference Committee - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Uniforum registration
by Tim John 30 Jun '02

30 Jun '02

I'm trying to register a friend for the Uniforum next week and, according to the website, there are still 'earlybird' places left, but to register for three days cost's nearly $1,000. I registered a few weeks back and it came to a third of that. Was that at a 'really, really, really earlybird discount' ? Tim - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: CUG
by robbie_gernandt＠wilsonandhorton.co.nz 30 Jun '02

30 Jun '02

Yip, I'm in We would definitely qualify as a "multi-vendor" customer, but I would be keen to join in any case. regards Robbie Gernandt Network Consultant Wilson & Horton Ltd CCNA, NNCSS *************************************************************************** This may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of Wilson & Horton Limited. For more information on Wilson & Horton please visit our web site at http://www.wilsonandhorton.co.nz ***************************************************************************

1 0

RE: CUG
by Allister Clarke 30 Jun '02

30 Jun '02

I suppose I should mention publically that I am interested. CCNP here I come ... :-) Allister BSc CCNA -----Original Message----- From: Philip D'Ath [mailto:pid(a)ifm.net.nz] Sent: Sunday, 30 June 2002 1:24 p.m. To: nznog(a)list.waikato.ac.nz Cc: blakjak(a)blakjak.net Subject: RE: CUG The problem I face is that I would need to invest a lot of time initially to make it a success. Once it is running, other people would probably step forward to assist. Ideally SIGs (special interest groups) would form off the main club. I have a lot of experience with Cisco equipment, so I can provide the skills required to make it work. I can't make it happen if people bring along questions about 5 different vendors equipment. -----Original Message----- > > Because I'm passionate about Cisco networking equipment, and I > > think I can get a good sized crowd coming along. > > If I made it a NUG (Network Users Group), then it could swell it > > be something huge. ... Im definately interested in upskilling in this area so Id be in - but id be somewhat cautious if the people coordinating an event were so pro-one-manufacturer that they wound up being anti-the-others, you end up with a rather narrow field of expertise... (Shadows of MCSE? Or is that inappropriate? :P) Im all for it, but id prefer a vendor-neutral concept. Of course theres no reason why Cisco cant feature in a big way - but lets not close the idea off to other vendors. Otherwise anyone who wishes to retain a broader view, needs to find multiple training/user group sources instead of just one. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Klez Virus
by Philip D'Ath 29 Jun '02

29 Jun '02

I made a posting to this group within the last 24 hours, which I don't commonly do. I am now constantly getting copies of the Klez virus emailed to me. I think it is likely that someone on this list has the virus. Could be a coincidence. Philip D'Ath, BCMS, MCP, CCNA, CCDA. http://www.ifm.net.nz/

3 2

RE: CUG
by Malcolm Lockyer 29 Jun '02

29 Jun '02

Personally I think we should model it on what the "CHUG" website has to say... "Group meetings are held on the last Wednesday of every other month. They often consist of a one-hour technical presentation and a brief product update, after which the group splits into several informal discussion groups, allowing members to interact with their industry peers." http://www.chug-info.com/ Malcolm >From: "Philip D'Ath" <pid(a)ifm.net.nz> >To: <jabley(a)automagic.org> >CC: <nznog(a)list.waikato.ac.nz> >Subject: RE: CUG >Date: Sun, 30 Jun 2002 10:55:46 +1200 > > Because I'm passionate about Cisco networking equipment, and I >think I can get a good sized crowd coming along. > If I made it a NUG (Network Users Group), then it could swell it >be something huge. > > I have good contacts at Cisco, and the Cisco distributors. I >can arrange to get demo equipment for a night to show people, and to let >people touch. > > I have Cisco qualifications, and can help to get study groups >going. > >-----Original Message----- >On Sun, Jun 30, 2002 at 01:20:11AM +1200, Philip D'Ath wrote: > > I'm thinking about forming a Cisco Users Group (CUG) in > > Auckland, and modelling it after other CUGs such as > > http://www.cisco-users.org/. > >Just out of interest, if you were going to the effort of organising >something like this, why would you make it vendor-specific? > > _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: CUG
by Malcolm Lockyer 29 Jun '02

29 Jun '02

I'm definatly interested! Even though I'm in Hamilton - it definatly sounds worth the trip every month/whatever frequency you/we decide. Personally - I think it is best to keep it as a club - with very minimal/no cost - although I realise that refreshments/venues can cost somewhat. Also - I reakon it'd be nice to see some other vendors equipment - just for some variety. I'm also all for semi practical/workshop type situations - for doing stuff like ipsec or multicast (just to expand one's knowlege). Just the value of having a meet - where cisco people can talk cisco is just huuge. Malcolm >From: "Philip D'Ath" <pid(a)ifm.net.nz> >To: <jabley(a)automagic.org> >CC: <nznog(a)list.waikato.ac.nz> >Subject: RE: CUG >Date: Sun, 30 Jun 2002 10:55:46 +1200 > > Because I'm passionate about Cisco networking equipment, and I >think I can get a good sized crowd coming along. > If I made it a NUG (Network Users Group), then it could swell it >be something huge. > > I have good contacts at Cisco, and the Cisco distributors. I >can arrange to get demo equipment for a night to show people, and to let >people touch. > > I have Cisco qualifications, and can help to get study groups >going. > >-----Original Message----- >On Sun, Jun 30, 2002 at 01:20:11AM +1200, Philip D'Ath wrote: > > I'm thinking about forming a Cisco Users Group (CUG) in > > Auckland, and modelling it after other CUGs such as > > http://www.cisco-users.org/. > >Just out of interest, if you were going to the effort of organising >something like this, why would you make it vendor-specific? > > _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0