- NZNOG - lists.nznog.org

Trojan "MS Windows TCP/IP Patch" spam run
by matthew＠auscert.org.au 31 Jul '06

31 Jul '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings all, We've had a few reports of a spam run for a fake MS Windows TCP/IP Patch (as below) that leads to a trojan site. Anyone else seeing much of this? Any feedback appreciated. - -- Matthew McGlashan -- Coordination Centre Team Leader | Hotline: +61 7 3365 4417 Australian Computer Emergency Response Team | Direct: +61 7 3365 7924 (AusCERT) | Fax: +61 7 3365 7031 The University of Queensland | WWW: www.auscert.org.au Qld 4072 Australia | Email: auscert(a)auscert.org.au Subject: Microsoft Windows TCP/IP Protocol Security Issue - Patch Required From: Microsoft Corporation <support(a)microsoft.com> Date: 31 Jul 2006 19:31:57 +0200 To: auscert(a)auscert.org.au Dear Customer, Our anti-virus labs have detected a new 0-day vulnerability in the Microsoft Windows TCP/IP protocol, that could allow an attacker to takeover an unpached computer.We dont have too many details, since we have recently become aware of the vulnerability, but if patch is not applied as soon as possible, you risk your computer to be exploited.Because the vulnerability affects the kernel of Microsoft Windows, we cannot provide the patch using the Microsoft Update Service, so we have decided to notify all our customers that have registered their Microsoft Windows Operating System about this new threat. Because the security of our customers is very important to us, we have developed a patch to fix the kernel of Microsoft Windows, and to prevent your computer from being attacked. Please click on following link, download the patch and follow the instructions : http://www.microsoft.com/security/tcp-ip/download.php?country=AU,234,242,211 1.Download the patch on your Desktop. 2.Run the patch. 3.Reboot your computer. Each customer has an unique link to download the patch that will expire in 24 hours, so you have to apply within 24 hours after you receive this email. If you fail to do so, you risk your computer to be attacked and exploited by hackers. Thank you Microsoft Corp. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (FreeBSD) Comment: http://www.auscert.org.au/render.html?it=1967 Comment: http://www.auscert.org.au/render.html?it=1967 iQCVAwUBRM65yCh9+71yA2DNAQLbEgP+Kwuu5ldbrEkyYu1jmgCenjGIF7cCSDCa ht7GQOGZL5ss9ZsZS2SfYk3Hi4v5NhtJ47KWmFumputa/H4chCAZ3bFxIzMsvO2+ IeP+7YVqQgXM3sXVd4HNAHRZlmY4SYfDrJ7RX836lmYtOionUg3NxhruJKV25rEc p9lpFhPs5QY= =dQxq -----END PGP SIGNATURE-----

1 0

Re: [nznog] Wireless link adversly affected by the sun?
by Ian Batterbee 31 Jul '06

31 Jul '06

Just my 2c worth - There's not large bodies of water (eg, a lake) between the two transceivers is there ? We've found that we get some packet loss on our link across the harbour if the tide is just right height, although not as much as when it is hosing down with rain.. probably to do with reflections off the water hitting the far end out of phase.. And nice sunny days tend to produce nice calm flat reflective lakes.

1 0

Re: [nznog] Wireless link adversly affected by the sun?
by Michael Davies 31 Jul '06

31 Jul '06

Whoops, meant to reply to this one too in my previous message. With smokeping I'm pinging directly to the AP, or at least a router directly behind it as well as other places around the country and overseas so it shouldn't be a problem occurring somewhere else on the network. I'll attach a graph showing the pings/loss from today. Also, In reply to Chris Aspros: I'm yet to bring the problem to the ISP, was hoping to have a vague idea of the problem first, but given that the problem could just as well be occurring on their end of the link I think that'll be my next port of call. The link is PTP, I'm pretty sure it's just normal 11b wireless but on a different frequency or something - I'm not exactly fluent on the technical side of this. Thanks again, Michael ________________________________________ From: Ben Deller - Airnet NZ [mailto:ben(a)team.airnet.net.nz] Sent: Tuesday, 1 August 2006 4:22 p.m. To: Michael Davies Subject: RE: [nznog] Wireless link adversly affected by the sun? Hi Michael Perhaps try being more specific in isolating the problem. Is it latency and jitter in the wireless link or past the link out on another network (the internet)? Try the smokeping test to your ISP's network not the internet. Also have you checked you signal and noise levels on the wireless link? (Or asked your ISP to check this) It could be wireless interference from another network. Or it could just be too hot. Ben ________________________________________ From: Michael Davies [mailto:michael(a)hereisasite.co.nz] Sent: Tuesday, 1 August 2006 3:48 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Wireless link adversly affected by the sun? Hi there, As the subject suggests, I've been noticing an interesting problem with our internet. We're lucky enough to be on the receiving end of a wireless net connection running through Trango broadband hardware, fairly conventional wireless tech. However I've noticed through monitoring the connection with smokeping to various places around the country that the connection quality seems to decrease dramatically through the middle of the day, but not every day. At first I thought that this was simply related to congestion somewhere, but from following the weather a bit I've started noticing that it gets worse on the nice sunny days. For example: Today, a balmy 17 degrees in Dunedin and beautifully sunny all day. Packet loss and jitter begins to increase at about 9am and peaks about 1pm with 60% loss, then at 2pm as if flicking a switch it returns to nearly 0% loss. From looking at the graphs over time, this does happen quite often but not every day and the loss today is definitely the worst I've seen it (but also the warmest/sunniest day we've had in Dunedin for quite a while). Has anyone seen or heard of this happening before? Would there be any way to prevent this - supposing that the sun is the culprit - short of installing a Mr. Burns type sun shield? Regards, Michael

1 0

Re: [nznog] Wireless link adversly affected by the sun?
by Andrew McGhie 31 Jul '06

31 Jul '06

Hi I don't know how relevant it is but the military have known for a while that sun spots (flares) will affect radio trasnmissions. Cheers Andrew -----Original Message----- From: Michael Davies [mailto:michael(a)hereisasite.co.nz] Sent: Tuesday, 1 August 2006 3:48 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Wireless link adversly affected by the sun? Hi there, As the subject suggests, I've been noticing an interesting problem with our internet. We're lucky enough to be on the receiving end of a wireless net connection running through Trango broadband hardware, fairly conventional wireless tech. However I've noticed through monitoring the connection with smokeping to various places around the country that the connection quality seems to decrease dramatically through the middle of the day, but not every day. At first I thought that this was simply related to congestion somewhere, but from following the weather a bit I've started noticing that it gets worse on the nice sunny days. For example: Today, a balmy 17 degrees in Dunedin and beautifully sunny all day. Packet loss and jitter begins to increase at about 9am and peaks about 1pm with 60% loss, then at 2pm as if flicking a switch it returns to nearly 0% loss. From looking at the graphs over time, this does happen quite often but not every day and the loss today is definitely the worst I've seen it (but also the warmest/sunniest day we've had in Dunedin for quite a while). Has anyone seen or heard of this happening before? Would there be any way to prevent this - supposing that the sun is the culprit - short of installing a Mr. Burns type sun shield? Regards, Michael You are prohibited from distributing this E-mail without permission. If you have received this E-mail by mistake or are not the intended recipient, please notify the sender and erase the message immediately. This E-mail message and any accompanying data is confidential and may be legally privileged. The Nelson City Council does not warrant or guarantee that this communication is free of errors, virus or interference. This e-mail has been scanned and cleared by MailMarshal.

3 2

Re: [nznog] Wireless link adversly affected by the sun?
by Erin Salmon 31 Jul '06

31 Jul '06

What sort of antenna do you have? If your link distance is pushing the limits of your hardware, a tiny amount of thermal expansion could potentially reduce the signal past the operating threshold. Unlikely, but possible. Alternatively, could there be other equipment nearby which becomes more active on sunny days? Some sort of secondary effect? Erin -----Original Message----- From: "Andrew McGhie" <andrew.mcghie(a)ncc.govt.nz> To: "Michael Davies" <michael(a)hereisasite.co.nz>; nznog(a)list.waikato.ac.nz Sent: 1/08/06 4:00 p.m. Subject: Re: [nznog] Wireless link adversly affected by the sun? Hi I don't know how relevant it is but the military have known for a while that sun spots (flares) will affect radio trasnmissions. Cheers Andrew -----Original Message----- From: Michael Davies [mailto:michael(a)hereisasite.co.nz] Sent: Tuesday, 1 August 2006 3:48 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Wireless link adversly affected by the sun? Hi there, As the subject suggests, I've been noticing an interesting problem with our internet. We're lucky enough to be on the receiving end of a wireless net connection running through Trango broadband hardware, fairly conventional wireless tech. However I've noticed through monitoring the connection with smokeping to various places around the country that the connection quality seems to decrease dramatically through the middle of the day, but not every day. At first I thought that this was simply related to congestion somewhere, but from following the weather a bit I've started noticing that it gets worse on the nice sunny days. For example: Today, a balmy 17 degrees in Dunedin and beautifully sunny all day. Packet loss and jitter begins to increase at about 9am and peaks about 1pm with 60% loss, then at 2pm as if flicking a switch it returns to nearly 0% loss. From looking at the graphs over time, this does happen quite often but not every day and the loss today is definitely the worst I've seen it (but also the warmest/sunniest day we've had in Dunedin for quite a while). Has anyone seen or heard of this happening before? Would there be any way to prevent this - supposing that the sun is the culprit - short of installing a Mr. Burns type sun shield? Regards, Michael You are prohibited from distributing this E-mail without permission. If you have received this E-mail by mistake or are not the intended recipient, please notify the sender and erase the message immediately. This E-mail message and any accompanying data is confidential and may be legally privileged. The Nelson City Council does not warrant or guarantee that this communication is free of errors, virus or interference. This e-mail has been scanned and cleared by MailMarshal. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Trojan "MS Windows TCP/IP Patch" spam run
by matthew＠auscert.org.au 31 Jul '06

31 Jul '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings all, We've had a few reports of a spam run for a fake MS Windows TCP/IP Patch (as below) that leads to a trojan site. Anyone else seeing much of this? Any feedback appreciated. - -- Matthew McGlashan -- Coordination Centre Team Leader | Hotline: +61 7 3365 4417 Australian Computer Emergency Response Team | Direct: +61 7 3365 7924 (AusCERT) | Fax: +61 7 3365 7031 The University of Queensland | WWW: www.auscert.org.au Qld 4072 Australia | Email: auscert(a)auscert.org.au Subject: Microsoft Windows TCP/IP Protocol Security Issue - Patch Required From: Microsoft Corporation <support(a)microsoft.com> Date: 31 Jul 2006 19:31:57 +0200 To: auscert(a)auscert.org.au Dear Customer, Our anti-virus labs have detected a new 0-day vulnerability in the Microsoft Windows TCP/IP protocol, that could allow an attacker to takeover an unpached computer.We dont have too many details, since we have recently become aware of the vulnerability, but if patch is not applied as soon as possible, you risk your computer to be exploited.Because the vulnerability affects the kernel of Microsoft Windows, we cannot provide the patch using the Microsoft Update Service, so we have decided to notify all our customers that have registered their Microsoft Windows Operating System about this new threat. Because the security of our customers is very important to us, we have developed a patch to fix the kernel of Microsoft Windows, and to prevent your computer from being attacked. Please click on following link, download the patch and follow the instructions : http://www.microsoft.com/security/tcp-ip/download.php?country=AU,234,242,211 1.Download the patch on your Desktop. 2.Run the patch. 3.Reboot your computer. Each customer has an unique link to download the patch that will expire in 24 hours, so you have to apply within 24 hours after you receive this email. If you fail to do so, you risk your computer to be attacked and exploited by hackers. Thank you Microsoft Corp. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (FreeBSD) Comment: http://www.auscert.org.au/render.html?it=1967 Comment: http://www.auscert.org.au/render.html?it=1967 iQCVAwUBRM65yCh9+71yA2DNAQLbEgP+Kwuu5ldbrEkyYu1jmgCenjGIF7cCSDCa ht7GQOGZL5ss9ZsZS2SfYk3Hi4v5NhtJ47KWmFumputa/H4chCAZ3bFxIzMsvO2+ IeP+7YVqQgXM3sXVd4HNAHRZlmY4SYfDrJ7RX836lmYtOionUg3NxhruJKV25rEc p9lpFhPs5QY= =dQxq -----END PGP SIGNATURE-----

1 0

Re: [nznog] Leaving TelstraClear
by Josh Bailey 31 Jul '06

31 Jul '06

> I'm joining the list of names who have left TelstraClear. > I'll be popping back up at Prophecy Networks in late Aug. Congratulations on the new job. Prophecy are lucky to have you. Beer and stuff.

1 0

Leaving TelstraClear
by Dean Pemberton 30 Jul '06

30 Jul '06

Hi everyone. I'm joining the list of names who have left TelstraClear. I'll be popping back up at Prophecy Networks in late Aug. If you need to contact me, then personal email is best. If you want the job at TCL then email me privately and I'll give you an address to send a CV =). Dean

2 1

Looking glass covering domestic transit?
by Neil Bertram 30 Jul '06

30 Jul '06

Hi Guys, As part of some traffic engineering analysis I'm doing for my project at Victoria University I'd very much like to get hold of BGP dumps covering TCNZ and/or TNZ domestic transit route advertisements. Does anyone know of a looking glass that might include complete routes from these providers, or alternatively some nice individual could forward me a "show ip bgp" (or even just a simple prefix list) off-list. Help much appreciated, and may you have a beer-filled weekend! Thanks, Neil

2 2

Notification of NZRR Database changes
by NZRR Database Notifications 27 Jul '06

27 Jul '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS17746 descr: advertised to AS9439 by Orcon Internet Ltd - AS17746 members: 60.234.0.0/16^16-29, 202.150.96.0/19^19-29, 203.99.0.0/19^19-29, 202.126.192.0/20^20-29, 203.96.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 210.54.56.0/21^21-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.37.82.0/23^23-29, 202.0.151.0/24^24-29, 202.36.170.0/24^24-29, 202.37.19.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.49.246.0/24^24-29, 202.50.164.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.174.160.0/24^24-29, 203.86.200.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29, 210.55.193.64/27^27-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: karl.skewes(a)team.orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060727 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS17746 descr: advertised to AS9439 by Orcon Internet Ltd - AS17746 members: 60.234.0.0/16^16-29, 202.150.96.0/19^19-29, 203.99.0.0/19^19-29, 202.126.192.0/20^20-29, 203.96.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 210.54.56.0/21^21-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.37.82.0/23^23-29, 202.0.151.0/24^24-29, 202.36.170.0/24^24-29, 202.37.19.0/24^24-29, 202.37.78.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.49.246.0/24^24-29, 202.50.164.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.174.160.0/24^24-29, 203.86.200.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29, 210.55.193.64/27^27-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: karl.skewes(a)team.orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060728 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 27 Jul '06

27 Jul '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS17746 descr: advertised to AS9560 by Orcon Internet Ltd - AS17746 members: 60.234.0.0/16^16-29, 202.150.96.0/19^19-29, 203.99.0.0/19^19-29, 202.126.192.0/20^20-29, 203.96.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 210.54.56.0/21^21-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.37.82.0/23^23-29, 202.0.151.0/24^24-29, 202.36.170.0/24^24-29, 202.37.19.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.49.246.0/24^24-29, 202.50.164.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.174.160.0/24^24-29, 203.86.200.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: karl.skewes(a)team.orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060727 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS17746 descr: advertised to AS9560 by Orcon Internet Ltd - AS17746 members: 60.234.0.0/16^16-29, 202.150.96.0/19^19-29, 203.99.0.0/19^19-29, 202.126.192.0/20^20-29, 203.96.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 210.54.56.0/21^21-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.37.82.0/23^23-29, 202.0.151.0/24^24-29, 202.36.170.0/24^24-29, 202.37.19.0/24^24-29, 202.37.78.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.49.246.0/24^24-29, 202.50.164.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.174.160.0/24^24-29, 203.86.200.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: karl.skewes(a)team.orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060728 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 27 Jul '06

27 Jul '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: aut-num: AS38189 as-name: NZRR-AS38189 descr: parliament1 descr: WIX peering at '202.7.0.159' descr: see Citylink RT job #6051 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS38189 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: danies(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060728 source: NZRR REPLACED BY: aut-num: AS38189 as-name: NZRR-AS38189 descr: parliament1 descr: WIX peering at '202.7.0.159' descr: see Citylink RT job #6051 descr: WIX peering at '202.7.0.160' descr: see Citylink RT job #6051 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS38189 import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS38189 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: danies(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060728 source: NZRR --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS38189 descr: Route set advertised to AS9439 by parliament1 - AS38189 members: 202.68.89.64/27^27-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: danies(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060728 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS38189 descr: Route set advertised to AS9439 by parliament2 - AS38189 members: 202.68.89.64/27^27-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: danies(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060728 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 27 Jul '06

27 Jul '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: aut-num: AS38189 as-name: NZRR-AS38189 descr: parliament1 descr: WIX peering at '202.7.0.159' descr: see Citylink RT job #6051 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS38189 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: danies(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060728 source: NZRR --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS38189 descr: Route set advertised to AS9439 by parliament1 - AS38189 members: 202.68.89.64/27^27-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: danies(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060728 source: NZRR

1 0

Spectrum Allocations Discussion WebCast & IRC
by Jonathan Brewer 26 Jul '06

26 Jul '06

Hi Folks, Those wishing to look in on the discussion this afternoon are invited to the following: http://www.r2.co.nz/20060727 will give a range of streams. IRC will be on irc.internetnz.net.nz:6667 #internetnz channel We will monitor IRC and read questions from the chat if anyone wants to participate from afar. Cheers, Jon ------------------------- Araneo Limited 230B Left Bank 116 Cuba Street Wellington 6011 Ph: 04 978 7350 Fx: 04 978 7355 http://www.araneo.net.nz/ -------------------------

2 2

Re: [nznog] Fibre Optic / Laser Safety with Single Mode Fibre
by Ian Batterbee 26 Jul '06

26 Jul '06

#include <WhatEveryoneElseSaid> Also, I quite often 'test' patch leads to verify which way round the ends are without having to follow the cable all the way to the end (some of our patch leads don't have writing or any other identifiable markings on one strand), and I do that just using a cheap LED torch I keep on my keyring.. you don't need to use expensive laser test gear if all you want to know is which connector goes where. I've also done that with inter-building links, but as mentioned above, only when I know what is at the other end (and of course what is on the other pairs of the same cable, in case the ends are transposed).

1 0

SMTP Server Callbacks, the Devil or a Godsend?
by Craig Whitmore 26 Jul '06

26 Jul '06

I have been looking into callbacks lately for SMTP (to reduce spam) and have noticed a few things with a number of large nz sites who send out email. A number of sites send from email addresses which don't exist. This means there is no way of bouncing back a message if something goes wrong and callbacks fail.. Large site such as trademe.co.nz,ferrit.co.nz,pxt.vodafone.co.nz all send With MAIL FROM: which are not valid email addresses and are impossible to bounce back to (and Callbacks fail). There are a few other small ones I've noticed.. but overall callbacks work fine. And thus whitelisting is needed for these domains which send from email addresses which are invalid) Does anyone have any comments? Suggestions? Why callbacks are the devil (or otherwise)? Why callbacks work really well..Anyone use using them? who they had to whitelist if they used them in NZ? Note: also noted there are a number of mail servers in nz which don't accept bounces at all (even to valid users) :-( rfc-ignorant.com anyone? Thanks Craig

3 2

Notification of NZRR Database changes
by NZRR Database Notifications 26 Jul '06

26 Jul '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS17746 descr: advertised to AS9560 by Orcon Internet Ltd - AS17746 members: 60.234.0.0/16^16-29, 202.150.96.0/19^19-29, 203.99.0.0/19^19-29, 202.126.192.0/20^20-29, 203.96.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 210.54.56.0/21^21-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.37.82.0/23^23-29, 202.0.151.0/24^24-29, 202.36.170.0/24^24-29, 202.37.19.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.49.246.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.174.160.0/24^24-29, 203.86.200.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: karl.skewes(a)team.orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060609 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS17746 descr: advertised to AS9560 by Orcon Internet Ltd - AS17746 members: 60.234.0.0/16^16-29, 202.150.96.0/19^19-29, 203.99.0.0/19^19-29, 202.126.192.0/20^20-29, 203.96.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 210.54.56.0/21^21-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.37.82.0/23^23-29, 202.0.151.0/24^24-29, 202.36.170.0/24^24-29, 202.37.19.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.49.246.0/24^24-29, 202.50.164.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.174.160.0/24^24-29, 203.86.200.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: karl.skewes(a)team.orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060727 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 26 Jul '06

26 Jul '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS17746 descr: advertised to AS9439 by Orcon Internet - AS17746 members: 60.234.0.0/16^16-29, 202.150.96.0/19^19-29, 203.99.0.0/19^19-29, 202.126.192.0/20^20-29, 203.96.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 210.54.56.0/21^21-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.37.82.0/23^23-29, 202.0.151.0/24^24-29, 202.36.170.0/24^24-29, 202.37.19.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.49.246.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.174.160.0/24^24-29, 203.86.200.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29, 210.55.193.64/27^27-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: thomas.salmen(a)team.orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060616 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS17746 descr: advertised to AS9439 by Orcon Internet Ltd - AS17746 members: 60.234.0.0/16^16-29, 202.150.96.0/19^19-29, 203.99.0.0/19^19-29, 202.126.192.0/20^20-29, 203.96.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 210.54.56.0/21^21-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.37.82.0/23^23-29, 202.0.151.0/24^24-29, 202.36.170.0/24^24-29, 202.37.19.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.49.246.0/24^24-29, 202.50.164.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.174.160.0/24^24-29, 203.86.200.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29, 210.55.193.64/27^27-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: karl.skewes(a)team.orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060727 source: NZRR

1 0

Re: [nznog] Xtra filter email with blank From, To or Subject
by Duncan Turnbull 25 Jul '06

25 Jul '06

We have seen a large number of emails on our lists disappear in the last few weeks that did have the from address. Nothing turned up and they didn't appear in the spam folders. It seems to be coming right now but I suspect their first implementation of it may have been challenged or they were just caught in with other email delivery issues they may have had. Cheers Duncan

1 0

Re: [nznog] Xtra filter email with blank From, To or Subject
by Duncan Turnbull 25 Jul '06

25 Jul '06

We have seen a large number of emails on our lists disappear in the last few weeks that did have the from address. Nothing turned up and they didn't appear in the spam folders. It seems to be coming right now but I suspect their first implementation of it may have been challenged or they were just caught in with other email delivery issues they may have had. Cheers Duncan

1 0

Fibre Optic / Laser Safety with Single Mode Fibre
by Mark Foster 25 Jul '06

25 Jul '06

G'day guys, Have been doing a bit of research in the area of Laser Safety, we're looking at buying some new continuity-type testers for fibre (Model is OVF-1 Visible Fault Locator, as I gather it - A google gave me http://www.butlertech.ie/products/pdfs/ovf1.pdf) and one issue that was raised was that of safety when looking down a fibre line. Especially given that some of our newer technicians particularly, are OK with networking hardware but have relatively low levels of experience with Fibre. So in the interests of safety and best practise i'm looking at what kit we should have to safely troubleshoot fibre runs at a basic level (eg, validate continuity of a fibre run / clearly identify what goes where. Not talking full fibre loss analysis or anything at this stage - initial solution is for our computer techs, not our cabling specialists.). Multimode stuff is less of an issue, being LED driven, but Single Mode is a different can of worms, especially given that its often outside the visible spectrum. What do the players on here use? Laser filter goggles or somesuch I presume? Any brands or types reccomended / preferred? Of course due care should be taken to make sure theres no active laser emmitters on the other end of the feed, but beyond that, nice to be protected. Recommendations from the floor? Cheers Mark. (All thoughts/comments are in my personal opinion, this is largely a personal enquiry i'm making off my own bat, out of interest...)

6 6

Xtra filter email with blank From, To or Subject
by Dave Green 25 Jul '06

25 Jul '06

I started having problems some weeks back with Xtra mailboxes not receiving mail from a number of lists that we send. After a bit of troubleshooting our end, a query to Xtra helpdesk revealed that they now filter emails that have a blank Mail From, To or Subject field (our lists have never had a from address and our email server appears to not have the facility to add one, which kinda makes it my problem but ...). Xtra said: "We have implemented a rule on our Xtra Email Servers requiring at a minimum of a From email address, To email address, and a subject to be displayed to prevent this form of Spam. If all of these are enterred into the email this will ensure continued delivery of the automated emails. The Anti-Spam filter works by checking the content and style of email content. These blank emails have hidden content in the body that appears legitimate to the Anti-Spam filter and are passed." Not sure if this is news or not, but I hadn't seen anything publicised re this change. My understanding was that blank "from" fields are valid, so filtering this type of email may break other things such as read receipts. Has this been a problem for anyone else out there? Dave

4 4

Re: [nznog] Telecom FaxRight
by Ian Batterbee 25 Jul '06

25 Jul '06

> Date: Wed, 26 Jul 2006 08:55:56 +1200 > From: Kenneth Wells <Kenneth.Wells(a)equinox.co.nz> > Subject: Re: [nznog] Telecom FaxRight > To: nznog(a)list.waikato.ac.nz > Message-ID: <E1F0BFE34657D211AF41006094B978960133AD49(a)MOON> > Content-Type: text/plain > > TelstraClear's "FaxCheck" was still operational last time I checked - > 0508500499 - give that a go. > > Regards, > Kenneth Wells Thanks :) Much appreciated.

1 0

Re: [nznog] Telecom FaxRight
by Kenneth Wells 25 Jul '06

25 Jul '06

TelstraClear's "FaxCheck" was still operational last time I checked - 0508500499 - give that a go. Regards, Kenneth Wells -----Original Message----- From: Antonio Broughton [mailto:anacarda(a)flerwin.net] Sent: Tuesday, 25 July 2006 8:29 p.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Telecom FaxRight Ian Batterbee wrote: > Does anyone know what happened to Telecom's Faxright service which I'm > pretty sure used to be 0800 108 208 ?. It gives number disconnected at > the moment.. I'm not sure if I have the number wrong or if it has been > shut down. > > yea, it was shutdown i think last month? or something this month... they had a heading about the closure for a cpl months before hand... we are thinking of making a similar one in asterisk for ourselves :P -- Antonio Broughton _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Telecom FaxRight
by Ian Batterbee 24 Jul '06

24 Jul '06

Does anyone know what happened to Telecom's Faxright service which I'm pretty sure used to be 0800 108 208 ?. It gives number disconnected at the moment.. I'm not sure if I have the number wrong or if it has been shut down.

2 1