- NZNOG - lists.nznog.org

Spoofer Report for NZNOG for May 2018
by CAIDA Spoofer Project 08 Jun '18

08 Jun '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during May 2018: ASN Name Fixed-By 55850 TRUSTPOWERLTD 2018-05-21 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-05-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

TICSA and lawful intercept
by Cameron Beattie 05 Jun '18

05 Jun '18

Has any progress been made on a collaborative effort to address the TICSA requirements? Regards Cameron

7 7

ASB Bank NOC contact
by Tim Price 23 May '18

23 May '18

Hi All, If anyone from ASB Bank NOC is on-list or anyone knows someone who operates their firewalls can you please contact me off-list? We have a business customer who’s IP has been blacklisted by ASB. Cheers, Tim.

1 0

Bandwidth at Tauranga Exchange (Chorus/Spark Cameron Road)
by Jesse Archer 17 May '18

17 May '18

Good evening, Got a customer looking for secondary bandwidth options at Tauranga Exchange. Who has a physical presence here and a willingness to sell IP transit to a small client (below 1Gbps requirement) ? They’ve got an AS and a /22 that will be operational soon. Regards, Jesse -- *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

Bigpipe removing IPv6 from existing broadband connections
by Michael Fincham 15 May '18

15 May '18

Hi all, Looks like Bigpipe has decided to withdraw IPv6 from their broadband customers... If you have contacts at Bigpipe please get in touch with them and ask them WTF they're doing. This is absurd. I've been recommending Bigpipe to people for ages because they offered IPv6. Forcing their customers to renumber and drop back to legacy IPv4 at this point is just idiotic, let alone not continuing to offer this service. ---------- Forwarded message ---------- From: Bigpipe Broadband <support(a)bigpipe.co.nz> Date: 14 May 2018 at 09:54 Subject: Changes to your Bigpipe connection Hi [...], Thanks for taking part in our IPv6 trial that we announced on Geekzone. We’ve had a heap of really useful feedback to keep in mind for our future developments in this space. >From the 12th of June 2018 the trial will be ending and you may notice a short 5-10 minute outage while we withdraw it. We’ll be making the change overnight at a time that has as little impact as possible. There’s nothing further you need to do, however as with any outage if you find you haven’t automatically connected again, simply restart your modem or router. If you have any questions or want to chat this through, you can get in touch via https://ww.bigpipe.co.nz/contact-us Thanks again for getting involved. The Bigpipe People -- Michael

4 4

ntp kod
by Richard Hector 10 May '18

10 May '18

Hi all, I'm seeing lots of log messages like these: May 11 06:54:32 jet ntpd[2758]: receive: KoD packet from 2001:dce:2:17a::18 has inconsistent xmt/org/rec timestamps. Ignoring. ... on a home server. A quick web search suggests that KoD packets are a self-defence mechanism. Am I (accidentally) abusing s[1-3].ntp.net.nz? Cheers, Richard

3 3

Spoofer Report for NZNOG for Apr 2018
by CAIDA Spoofer Project 08 May '18

08 May '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Apr 2018: ASN Name First-Fixed 137259 M174-AS-AP 2018-04-26 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW-AS-AP 2016-09-26 2018-04-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fwd: [AusNOG] AusNOG 2018 Call for Presentations
by Mark Prior 06 May '18

06 May '18

Anyone from across the Ditch interested in speaking at AusNOG at the end of August? Mark.

1 0

Announcement - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Sebastian Castro 03 May '18

03 May '18

[with apologies to those who see this on multiple lists] The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. Workshop Milestones: - 01 May 2018 - Workshop Announcement - 01 Jun 2018 - Submissions and Registrations open via Indico - 13 Jul 2018 - Deadline for submission - 17 Aug 2018 - Contribution list published - 14 Sep 2018 - Full agenda published - 06 Oct 2018 - Deadline for slideset submission - 13 Oct 2018 - Workshop Sebastian Castro, on behalf of the joint Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Google mail Fu Help
by Don Gould 23 Apr '18

23 Apr '18

Can anyone with some clue help with sorting this out? I've tired following the link but I just don't understand what I'm not doing right. My mail server got compromised and has since been fixed but I'm still having problems sending mail to gmail. The mail system <Laurajmcintosh(a)gmail.com>: host gmail-smtp-in.l.google.com[173.194.203.27] said: 550-5.7.1 [182.54.234.40 12] Our system has detected that this message is 550-5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail, 550-5.7.1 this message has been blocked. Please visit 550-5.7.1https://support.google.com/mail/?p=UnsolicitedMessageError 550 5.7.1 for more information. c10-v6si12022767plr.398 - gsmtp (in reply to end of DATA command) -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Ph: 0800 00 15 92 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.yournet.co.nz skype: don.gould.nz

2 2

APNIC 46 - Call for paper now open
by Elly Tawhai 09 Apr '18

09 Apr '18

________________________________________________________________________ APNIC 46 Conference - Call for Paper ________________________________________________________________________ Hi NZNOG Community, The APNIC Program Committee is now seeking presentations for APNIC 46 in Nouméa, New Caledonia. We are looking for content that would suit technical conference sessions. Please note, the program committee is working to early deadlines so the APNIC conference program can be announced early. Key dates --------- The timeline for submissions is: Call for presentations opens 09 April 2018 First round acceptance 15 June 2018 Final deadline for submissions 13 July 2018 Final round acceptance 27 July 2018 Program material and submission ------------------------------- The technical sessions at APNIC 46 will include presentations relevant to Internet operations and technologies. For possible areas of topics and submission details, please visit: https://conference.apnic.net/46/program/call-for-papers If you have any other ideas or proposals for panel or BoF sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Program Committee at: conference(a)apnic.net For more information about APNIC 46, please visit: https://conference.apnic.net/46 On behalf of: APNIC 46 Program Committee

1 0

MikroTik User Meeting - Call for presentations
by Daniel Millar 05 Apr '18

05 Apr '18

Hey, Just a call for presentations to the group for the MikroTik User Meeting (MUM) being held in Auckland on the 21st of May. https://mum.mikrotik.com/2018/NZ/info/EN There is still a few slots available to fill. Presentation has to be somewhat based around the MikroTik Platform. 45 minute slots but MikroTik can make this flexible if needed. Contact me off list if you have any questions, or use the link above to ‘register’ for the event, in which you can select if you wish to do a presentation. Best Regards, Daniel Millar - Sales & Technical Engineer Phone: +64 3 741 1339 | Fax: +64 3 327 3193 | Email: dan(a)gowifi.co.nz<mailto:dan(a)gowifi.co.nz> | www.gowifi.co.nz<http://www.gowifi.co.nz/> [cid:image001.png(a)01D35979.70F92F50]<https://twitter.com/gowifinz/> [cid:image002.png(a)01D35979.70F92F50] <https://www.linkedin.com/company/go-wireless-nz-ltd-?> [cid:image003.png(a)01D35979.70F92F50] <https://www.facebook.com/gowirelessnz> [cid:image004.png(a)01D35979.70F92F50] <https://plus.google.com/+GowifiCoNz> [cid:image005.png(a)01D35979.70F92F50] <http://blog.gowifi.co.nz/> [cid:image006.png(a)01D35979.70F92F50] <https://www.youtube.com/user/streakwave> [cid:image007.png(a)01D35979.70F92F50]

1 0

Changes to NZRS and InternetNZ
by Daniel Griggs 02 Apr '18

02 Apr '18

Apologies if you have received this in other forums. Good morning, >From 1 April 2018, all the work of InternetNZ and NZRS is being streamlined under one banner; InternetNZ. The NZRS name will cease to exist, and its people and services have been merged into InternetNZ. While this change is occurring for our colleagues in InternetNZ, The Domain Name Commission has also focused in on its independent role overseeing the .nz domain name space and administering the .nz dispute resolution service. They have a smaller Board which means .nz policy development is now the responsibility of InternetNZ. It is setting up a new .nz policy committee to decide policy, fees and commercial terms (with input and advice from the community). The rationale for these changes is to simplify how Internet users work with us, and to improve the effectiveness of our part in governance and management of the Internet. The background work on these changes is detailed here [ https://internetnz.nz/blog/changing-internetnz-our-organisational-review] Our vision remains the same: a better world through a better Internet. If you have any questions or thoughts on the above, please contact me directly. -- Daniel Griggs e: daniel(a)internetnz.net.nz p: +64 27 448 8230

1 0

SKYTV and TVNZ Geo blocking
by Stuart Campbell 02 Apr '18

02 Apr '18

Hi, Is anyone from SkyTV and TVNZ able to contact me off-list please - we have a /22 IP range that appears to be being blocked. Regards, Stuart Campbell {scampbell(a)campbell.co.nz} ------------------------------------------------------------------------------- Mikrotik Trainer & Consultant, MTCNA, MTCWE, MTCRE, MTCTCE, MTCINE ------------------------------------------------------------------------------- Managing Director, Campbell Technology Ltd Phone: +64-4-802-7800 xtn 126 Fax: +64-4-802-7809 Mobile: +64-21-482-827

1 0

Network abuse
by Rudi Hefer 24 Mar '18

24 Mar '18

Gidday NZNoggers, Can someone please advise if it is appropriate to share know fraud activity in this mailing list so that fellow businesses do not get stung buy the same individual? We have now confirmed 4 victims to the same person. Understood if not the forum, but would appreciate if someone knew where this can be done. Kind regards, Rudi Hefer | Sales and Marketing Director m.+64 27 220 1881 |ddi. +64 9 951 5047 | rudi.hefer(a)solarix.co.nz<mailto:rudi.hefer(a)solarix.co.nz> [cid:99789FA2-FCD5-4D65-95D9-38F5F88F6C6F] [cid:1B69E9A3-16C0-44EF-B66D-21A93AF925D7] <https://www.linkedin.com/company/solarix-networks-limited> [cid:89D41135-A44C-423C-A7A9-515C001D90D9] <https://twitter.com/SolarixNetworks> 5 Omega Street, Rosedale, Auckland, New Zealand www.solarix.co.nz DISCLAIMER: This email message and any accompanying data contains information that is confidential and subject to legal privilege. If you are not the intended recipient you are notified that any use, dissemination, distribution or copying of the whole or any part of the information in this message or data is prohibited. If you have received this email message in error please notify us immediately and erase all copies of the message and attachments. No alterations to an email message or its attachments are to be made without the consent of Solarix Networks Limited. Solarix Networks Limited are not liable for any unauthorized alterations. Solarix Networks Limited do not represent or warrant that files attached to this email are free from computer viruses and other defects.

4 3

SkyTV geoblock
by Brad Cook 20 Mar '18

20 Mar '18

reaching out, is anyone from SkyTV able to contact me off-list, we have some ranges that are geoblocked.

2 1

IPv6 static addressing
by Richard Hector 16 Mar '18

16 Mar '18

Hi all, Apologies if this is a bit off-topic, but I know there's lots of IPv6 knowledge here :-) If I have an IPv6 ULA block (or several) using SLAAC, and I want to additionally give out some static addresses in one or more of those blocks, am I right in thinking I can pick anything I like as long as it doesn't have the magic fffe in the middle? Is there a more formal approach? Is this (SLAAC plus statics where required) the normal way of doing things? Thanks, Richard

2 3

Update from DNCL regarding WHOIS
by Daniel Griggs 15 Mar '18

15 Mar '18

Hi Everybody, DNCL attended the NZNOG conference in January, and talked about the policy consultation on Port 43 WHOIS requirements. You can read more about that consultation and the submissions here https://dnc.org.nz/port-43. Thanks to those NZNOG members who provided a submission. The DNCL Board has considered all submissions, and decided that the information returned via Port 43 will be reduced. Port 43 queries will continue to show domain name availability, Registrar contact details and name server details (including DS records). It will no longer show contact details of Registrant, Admin or Technical contacts, or the date billed until information. Though this information will still be available on the DNCL website (http://www.dnc.org.nz/) DNCL and InternetNZ/NZRS are working on a plan to implement the changes in early April 2018. If you have any questions regarding the process or decision feel free to drop a line to info(a)dnc.org.nz -- Daniel Griggs e: daniel(a)internetnz.net.nz p: +64 27 448 8230

1 0

Range Announcements ExChristchurch - Please update your GeoCoding as required.
by Don Gould 14 Mar '18

14 Mar '18

For those GeoCoding... Please be advised that we're announcing the follow exChristchurch. as=45887 router-id=202.68.88.218 network=103.68.122.0/24 network=103.68.123.0/24 network=103.68.121.0/24 network=117.121.244.0/24 network=182.54.234.0/24 TVNZ, MediaWorks... my wife would like your service back... NetFlix my wife liked her 2 days with the 'extended catalogue'... guess we can't have pie and eat it to! ;) D -- Don Gould 5 Cargill Place Richmond Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.bowenvale.co.nz skype: don.gould.nz -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Ph: 0800 00 15 92 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.yournet.co.nz skype: don.gould.nz

1 0

Looking for spare Xirrus XS-8 wireless devices
by Matt Stevens 13 Mar '18

13 Mar '18

Greetings, Victoria Uni, School of Engineering and Computer Science is heading to Samoa in April to do outreach to local Universities and High Schools. To help out we have been donated six Xirrus XS-8 wireless points to install. A big thank you to our donor :-) Having figured out how to install these, we are now thinking that it may be useful to have spare devices. Either spares for the local IT team for when the installed ones give up or to increase coverage. So... do you have any used/replaced Xirrus XS-8 wireless devices lying around, that you might be happy to donate? Brackets for these devices are also in short supply and it turns out, expensive to fabricate. Thank you for reading and please send me any responses off-list. Cheers! Matt Stevens Work Experience Coordinator Engineering and Computer Science Victoria University of Wellington

1 0

Asbestos in Remuera?
by Brian E Carpenter 01 Mar '18

01 Mar '18

Hi, Is anyone aware of access problems (asbestos issues) at the Remuera exchange? I'm being given the run-around by Chorus - just moved and no local loop for the last 10 days. (Yes, I know I should upgrade to fibre but that is stage 2.) This is a personal gripe but if the access problem is genuine it probably affects many subscribers. An off list reply would be fine. Regards Brian Carpenter

1 0

Removing the four stale TAL from the APNIC RPKI validation set.
by George Michaelson 26 Feb '18

26 Feb '18

Updating RPKI trust anchor configuration ------------------------------------------------------- APNIC has completed the process of transitioning from its previous Resource Public Key Infrastructure (RPKI) trust anchor arrangement to a new single trust anchor configuration. Each RIR will publish an 'all resources' global trust anchor, under which its own regional resources (IP addresses and ASNs) will be certified. APNICs trust anchor is one of the previous five, which has been retained as the sole trust anchor over all APNIC resource certificate products. If you are using relying-party software, such as the Dragon Research Labs RPKI Toolkit, RPSTIR or the RIPE NCC’s RPKI Validator, you are advised to update your software’s configuration to use only the current APNIC trust anchor, rather than the set of five APNIC trust anchors that were previously in use. The update is to remove four of the five: One has been retained as the current live Trust Anchor. Note: this update is not critical. However, if it is not done, the software will log or report warnings about being unable to retrieve the trust anchors that are no longer being used. All resources now validate under the single active trust anchor and no orphan products are valid under the other prior trust anchors. The current APNIC TAL is as follows: ------ rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RWSL61YAAYumEiU8z8 qH2ETVIL01ilxZlzIL9JYSORMN5Cmtf8V2JblIealSqgOTGjvSjEsiV73s67zYQI 7C/iSOb96uf3/s86NqbxDiFQGN8qG7RNcdgVuUlAidl8WxvLNI8VhqbAB5uSg/Mr LeSOvXRja041VptAxIhcGzDMvlAJRwkrYK/Mo8P4E2rSQgwqCgae0ebY1CsJ3Cjf i67C1nw7oXqJJovvXJ4apGmEv8az23OLC6Ki54Ul/E6xk227BFttqFV3YMtKx42H cCcDVZZy01n7JjzvO8ccaXmHIgR7utnqhBRNNq5Xc5ZhbkrUsNtiJmrZzVlgU6Ou 0wIDAQAB ------ Configuring Relying Party Software ----------------------------------------------- RIPE NCC RPKI Validator: If you upgrade to RIPE validator rpki-validator-app-2.24 the correct Trust Anchor is configured. No further work is required. Dragon Research Labs Rcynic Validator: If you run rcynic, you need to remove all the TAL, TA or CER entries in rcynic.conf except ones which point to apnic-rpki-root-iana-origin.cer or the related TAL. If you use the trusted-certs/ directory, simply remove the four files which are named for the non-APNIC RIR as follows: cd /etc/trust-anchors # or wherever you place the TAL files rm apnic-rpki-root-ripe-origin.tal rm apnic-rpki-root-arin-origin.tal rm apnic-rpki-root-lacnic-origin.tal rm apnic-rpki-root-afrinic-origin.tal RPSTIR To modify an installed RPSTIR system, locate the /usr/local/etc/rpstir directory and remove all but the current live APNIC TAL. More information is in the attached PDF describing how to update the trust anchor configuration in these three popular relying-partner software systems. -George

1 0

Survey
by Richard Nelson 15 Feb '18

15 Feb '18

Thankyou to everybody who responded to the NZNOG survey, the results are in and are very useful to us. Geoff Huston was considered a top three speaker most often followed by Francesco Alberti of Eolo. Hamid Maani of Hawaiki and Kraig Winters representing the Red Cross were third equal with a large group just behind them. More importantly almost all the speakers were considered interesting by someone attending the conference so we are pleased with the programme reception. Respondents liked Queenstown but didn't like the venue. They wanted desks in the conference and aircon in the rooms. The most popular destination choices for next years conference were Napier, Wellington and New Plymouth. This fairly closely corresponds with the trustees' thinking so we will check them out for venues and accommodation with air conditioned rooms. It will, however, be difficult to top jet boating as a social activity. Just over 90% of people are open to us changing the conference dates. We will investigate this. There were almost no other conferences identified to avoid clashes with but public holidays are clearly sancrosanct. There was also a suggestion that we avoid school holdiays which we currently don't do. People are happy for us to make the conference a bit bigger to make sure people don't miss out. There were also a lot of individual comments and suggestions that we will try to take on board. Richard Nelson

4 4

Re: [nznog] Survey
by Ewen McNeill 11 Feb '18

11 Feb '18

On 9/02/18 13:11, Barry Murphy wrote: > May be quite beneficial to have NZNog the week after, so those that have travelled > from AU the week before can stick around for another week and attend NZNog Could definitely work out. I can think of at least a half dozen Australia-nbased Linux.Conf.au regulars, who would probably come to LCA2019 in Christchurch too, working in networks/network operations as their day job. There's probably more who would find it relevant if it was easy to get to after Linux.Conf.au (Christchurch/Wellington is an easy regular flight; not sure about Christchurch/New Plymouth or Christchurch/Napier -- those might be two flights). (The week before might work too, but some of the people I'm thinking of usually help with LCA conference setup, which obviously is the end of the week before the conference...) Ewen

4 3

Looking for DNS resolver addresses in NZ for research project
by Sebastian Castro 01 Feb '18

01 Feb '18

Hi everyone: In case you haven't seen a message from me before, I'm Sebastian Castro, Technical Research Manager for NZRS, part of the InternetNZ team. Our Research Team has been conducting some research work on passive DNS analysis in order to identify real DNS resolvers in the wild, as authoritative DNS servers like the .nz nameservers get a lot of rubbish traffic. In order to advance the work, we are looking for some ground truth about real DNS resolvers in NZ. We have a list of known resolvers from organizatons like Spark, Vodafone, some ISPs, but we are looking to extend and refresh that list. If you operate a network that has a resolver, would you be so kind to share with us the IP addresses (both v4 and v6 if available) the resolver uses to send traffic? Depending on your architecture, it could be the address your users setup in their configuration, or a different address based on location where there is a load balancing architecture. There is no restriction: we want big and small resolvers, ISPs, Wireless ISPS, educational organizations, big and small companies, everything helps. The list won't be made public, it will be used for our research purposes. Thanks in advance and enjoy your Waitangi weekend. -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0