- NZNOG - lists.nznog.org

Wellington airport has problems still
by Ian McDonald 03 Feb '05

03 Feb '05

Articles as of midday: Fog Problems Again At Airport 04/02/2005 09:29 AM NewstalkZB Fog is still causing problems at Wellington airport with flights being diverted or delayed. After a day and a half of delays due to low cloud, the airport had only just reopened yesterday morning and airlines were trying to clear the backlog of thousands of passengers. Today, weather conditions at the airport are being described as marginal and deteriorating. Some flights are getting out and one from Nelson has managed to land. Passengers are being advised to check with their airline. Find this item at: http://xtramsn.co.nz/news/0,,11964-4078710,00.html

1 0

RE: [nznog] Notes from NZNOG 05 history of peering session
by Craig Box 03 Feb '05

03 Feb '05

While it's fresh in everyone's minds: > Talking to Joe there was a suggestion from someone that we put > together a Wiki to collect this altogether as a NZ Internet History. > Sounds good to me and we could add whole sections on 0867, IPNet and > start writing active history on UBS etc. I've taken Ian's information, wikified it and put it up on http://www.wlug.org.nz/NewZealandInternetHistory Anyone can edit this - just use YourName as a login ID. (If you can't figure out how to log in, in Bill's words, "you're excused"). If you're linking to something like Telecom, TelstraClear etc, we probably have pages about them already. Please check before linking externally. Craig

1 0

Citylink systems admin
by Barry Murphy 03 Feb '05

03 Feb '05

Hi, Can someone from citylink that can provide me with wix and ape ip space please contact me offlist. I had a chat to Andy some time ago about this, however recently I can't get hold of him so wonder if he is away. Thanks Barry

2 1

Reminder! PGP Key Signing at NZNOG 2005
by Joe Abley 02 Feb '05

02 Feb '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reminder! If there are people who are not staying late enough tomorrow to attend, feel free to track me down directly and exchange signatures (or track down someone else who turns up at some other time). Begin forwarded message: > We're going to engage in a frenzy of PGP keysigning at the NZNOG > meeting in Hamilton. People who know what PGP stands for should read > on. People who don't know what PGP is are more than welcome to ask me > off-list, or alternatively ask Google (who at least knows people who > know). > > Here's what we will attempt to do for the meeting next week: > > 1. As soon as you can, generate an ASCII-armoured copy of your public > key and paste it into the convenient form here: > > http://www.biglumber.com/x/web?keyring=5468 > > Consult your PGP software's documentation to find out how to generate > an ASCII-armoured copy of your public key. With GnuPG you use "gpg -a > - --export <your-key-id>". You're looking for a block of ASCII text > which begins with the line "-----BEGIN PGP PUBLIC KEY BLOCK-----". > > 2. Before you set off to the NZNOG meeting, remember two things: > > 2.1. BRING PHOTO ID. Key signing is a process of representing trust, > and if you are interested in getting signatures on your key (and > you're reading, so presumably you are) you should be ready to provide > proof of your identity to other people. Drivers licences, passports, > things of that nature. BRING PHOTO ID. > > 2.2. BRING A TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. This could be > achieved by bringing a laptop with a trusted copy of your public key > on it, or alternatively you could generate the fingerprint of your > public key, write it down and bring the bit of paper with you. BRING A > TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. > > The precise procedure we use at the key signing party will depend on > how many keys are uploaded in the next week; if there's a small > handful we can read signatures aloud -- if there are more, we can try > Len Sassaman's efficient key signing method > (<http://sion.quickie.net/keysigning.txt>). I'll send more words on > this closer to the time. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCAY6O/f+PWOTbRPIRAk41AJ9pQm1q+YiNkYGrnlr+duzA8q2AlQCgvp+7 im7yw9JZLD+cNEkqW09xuHU= =62cR -----END PGP SIGNATURE-----

1 0

Zombie Spam
by Ian McDonald 02 Feb '05

02 Feb '05

Given some of the talks at NZNOG 05 you may find below interesting: Zombie trick expected to send spam sky-high By Jim Hu http://news.com.com/Zombie+trick+expected+to+send+spam+sky-high/2100-7349_3… Story last modified Wed Feb 02 11:25:00 PST 2005 Spam levels are about to skyrocket, according to experts who warned this week that spammers have developed a new way of delivering their wares. According to the SpamHaus Project--a U.K.-based antispam compiler of blacklists that block 8 billion messages a day--a new piece of malicious software has been created that takes over a PC. This "zombie" computer is then used to send spam via the mail server of that PC's Internet service provider. This means the junk mail appears to come from the ISP, making it very hard for an antispam blacklist to block it. Previously, zombie PCs have been used as mail servers themselves, sending spam e-mails directly to recipients. "The Trojan is able to order proxies to send spam upstream to the ISP," said Steve Linford, director of SpamHaus. Linford believes that this Trojan horse was created by the same people who write spamming software. ISPs in the United States may have already been hit. "We've seen a surge in spam coming from major ISPs. Now all of the ISPs are having large amounts of spam going out from their mail servers," Linford said. This will cause serious problems for the e-mail infrastructure, as it is impractical to block mail with domain names from large ISPs. Linford predicts that ISPs will see a growth in the volume of bulk mail they send and receive over the next two months, with spam levels rising from 75 percent of all e-mail to around 95 percent within a year. "The e-mail infrastructure is beginning to fail," Linford warned. "You'll see huge delays in e-mail and servers collapsing. It's the beginning of the e-mail meltdown." Linford said that ISPs need to act fast to take control of the problem. "They've got to throttle the number of e-mails coming from ADSL accounts. They are going to have to act quickly to clean incoming viruses. ISPs have so much spam--they are too understaffed to call people up and tell them they have Trojans on their machines. And no one would know what you're talking about." Antispam company MessageLabs confirmed Linford's findings. "This ups the ante in the need for filters," said Mark Sunner, chief technology officer for MessageLabs. "It makes it more difficult for people who compile blacklists, which is why spammers are doing this. It will put more pressure on ISPs to take greater interest in the traffic they carry and filter at source." The Information Commissioner's Office, the United Kingdom's point-of-call to report spam, said it had received no complaints of bulk spam from ISPs. Some U.S.-based ISPs contacted by News.com said an e-mail meltdown has yet to arrive. But technicians at some of the largest Internet providers have acknowledged the issue and similar exploits in the past. Many, but not all, U.S. ISPs have blocked open relay ports, such as port 25, to shut out spammers from disseminating messages from home-operated servers. The block has helped some broadband ISPs limit the output of zombie spam, and some have noticed the new form of malware taking shape. Time Warner Cable, the nation's second largest cable company, said it had become aware of this spam "vector," as it calls it, and has mechanisms to control it, according to company spokesman Keith Cocozza. He noted that the company's ISP, called Road Runner, has outgoing e-mail limits in place, but declined to elaborate on how the company monitors and responds to this malware issue. Earthlink, which runs a dial-up and broadband service, said it noticed a gradual increase in spam volume coming from its legitimate mail servers since the beginning of 2004. The company claims it has implemented safeguards, such as authenticated SMTP servers and re-routing of legitimate e-mail, to cut down the flow. "Overall we've been able to greatly reduce the amount of spam from our network by routing activities and applying chokepoints," said Trip Cox, Earthlink's chief technology officer. Cox added that the measure have reduced spam from 30 percent of the ISP's total e-mail volume to 2 percent. Dan Ilett of ZDNet UK reported from London.

1 0

CACert Assurance
by Joe Abley 02 Feb '05

02 Feb '05

CACert is a non-evil X.509 certificate authority based in Australia. They give out free certificates to people whose identities they can verify, and they way they verify identities involves a web of trust. I met the CACert people in a meeting in the US last year, and they verified my identity in appropriately paranoid fashion, and made me an Assurer. That means I can act as an introducer. If any of this rings bells, and there's someone at the meeting who would like to be "assured", flag me down at some point and It Will Be Done. Joe

1 0

nznog stream
by Chris Hellberg 02 Feb '05

02 Feb '05

The stream is looking good from Frankfurt. Very little rebuffering (although I think that's the DSL at this end) and clear audio. Watching Dean's interweb presentation right now.

1 0

Transport to NZNOG
by David Zanetti 01 Feb '05

01 Feb '05

Hey all. Due to someone placing an airport in a suboptimal location, I won't be any closer than Auckland to NZNOG conferencage by (hopefully!) 7.30am tomorrow morning. If anyone is planning on driving down in the morning, I would hugely appreciate a lift. Give me a call on the cell number below. Thanks :) -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

2 1

Last mile in CHCH
by Richard Patterson 01 Feb '05

01 Feb '05

What options do people in/around the Christchurch CBD have ? AFAIK TelstraClear cable is fairly predominant around there. Any other options? Local wireless/fibre carriers ? -Richard

11 12

RE: [nznog] Stats from Webcast
by Kenneth Wells 01 Feb '05

01 Feb '05

.. I loved the ..er.. post session "out-takes". Those who watched till the room went dark will know what I'm talking about - as will the few people who came back into the room to check things out for tomorrows sessions.. ..and no matter how "cute" that device on the desk is.. It would probably be missed if stolen... :-) grin grin. Seriously though, great webcasting. The audio is clear and it's easy to hear everyone in the room. Cheers, Kenneth -----Original Message----- From: Richard Naylor [mailto:richard.naylor(a)citylink.co.nz] Sent: Wednesday, 2 February 2005 5:04 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Stats from Webcast Todays webcast Duration 4 hrs 44 min 827MBytes at an average of 405kbps. File copy is 876MB Peak of 26 viewers, average 22. Will be back up at around 8:30 tomorrow - (provided we get here in time) Thanks to the presenter(s), and local camera operator - Matt ? rich _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Stats from Webcast
by Richard Naylor 01 Feb '05

01 Feb '05

Todays webcast Duration 4 hrs 44 min 827MBytes at an average of 405kbps. File copy is 876MB Peak of 26 viewers, average 22. Will be back up at around 8:30 tomorrow - (provided we get here in time) Thanks to the presenter(s), and local camera operator - Matt ? rich

1 0

RE: [nznog] NZNOG Conference "Relays?"
by Craig Box 01 Feb '05

01 Feb '05

>> If anyone is willing to receive emails during presentations with >> comments or questions, would advising of this "live" on the list be >> an acceptable use? > > Or perhaps creation of an alternate list for this specific purpose > would be in order? Sounds like a bloody good idea IMHO. Though > perhaps a question from Hamish would exceed my verboseness capacity > as a relay... There are a number of people here with laptops who "commentate" the conference on #nznog on the Undernet IRC network. Perhaps asking a question in that channel would be the best way to get it asked? Craig

1 0

NZNOG Conference "Relays?"
by Hamish MacEwan 01 Feb '05

01 Feb '05

If anyone is willing to receive emails during presentations with comments or questions, would advising of this "live" on the list be an acceptable use? Not certain of the coverage there, but if you are in coverage and able to check email, this would be a simple DIY solution for those of us who can see and hear, but not speak. Hamish. -- http://del.icio.us/Hamish.MacEwan

3 2

Audio Streams, Webcasts, and IT Conversations
by Mark Derricutt 01 Feb '05

01 Feb '05

Has anyone thought about recording/streaming the sessions from NZNOG this year? Could also be good for whoever's looking after that to contact Doug Kay at IT Conversations ( http://www.itconversations.com/ ) for syndication...

13 18

Re: [nznog] Asx typo...
by Richard Naylor 01 Feb '05

01 Feb '05

At 12:57 PM 2/1/2005 -0800, Mike Savory wrote: >Looks like a typo in the ASX file... its an intelligence test - I just failed.......... >(mms: is misssing a 2....) Its all fixed - sorry about that and thanks for bringing it to my attention.... rich

2 1

RE: [nznog] Last mile in Albany
by Peter Thompson 01 Feb '05

01 Feb '05

We have limited Woosh (non LOS) coverage in Albany. Check www.woosh.com and plug your address into the 'coverage' tool on the homepage. I guess Liz is referring to us as we use 'booster' antennas for our modems. We also have 5.8Ghz (LOS) coverage in parts of Albany, if you want more info contact me off-list and I'll give you the contact details of our man for 5.8 on the North Shore. Regards Pete -----Original Message----- From: Simon Garner [mailto:sgarner(a)expio.co.nz] Sent: Wednesday, 2 February 2005 1:37 p.m. To: Liz Q Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Last mile in Albany On 2/02/2005 1:30 p.m., Liz Q wrote: > On Wed, 02 Feb 2005 13:20, Simon Garner wrote: > >>While we're on the subject... anybody know what's available in the >>Albany area (North Shore)? Other than DSL. >> > > you can get wireless (sometimes requires booster for your aerial) > > Liz > From who/where? :) -Simon _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

RE: [nznog] asia netcom, sprint
by Mark Frater 01 Feb '05

01 Feb '05

It was Aug/Sep 2002 for Asia Netcom. I think Callplus was one of their first customers. That was back in the days when Quest were also offering bandwidth.. I never really did get the full story about what happened to them.. Unsure about Sprint, but I'm pretty sure it was within 6 months of that. Mark --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.775 / Virus Database: 522 - Release Date: 8/10/2004

1 0

asia netcom, sprint
by Joe Abley 01 Feb '05

01 Feb '05

Does anybody have any estimates on when Asia Netcom and Sprint set up shop selling international transit in Auckland? Handwaving and rampant inaccuracy is fine. Private replies are fine.

4 3

Re: [Nznog-org] Registrations Closed?
by Richard Nelson 31 Jan '05

31 Jan '05

We have now reached the legal limit on the number of people in the room for Thursday. This means that registrations are _really_ closed. There will be no registrations on the day unless we have cancellations or no-shows. We can still take extra people for dinner. Richard Nelson WAND Network Research Group.

3 2

Re: NZNOG Digest, Vol 26, Issue 1
by David 31 Jan '05

31 Jan '05

Re: Multicast in NZ FAQ (Lennon - Orcon) I had a really interesting guy call me up on the helpdesk about a year ago and he spent like an hour on the phone explaining the benefits of mulitcasting. He was trying to convince all the schools to do it in case there was an outbreak of SARS meaning all the schools would be shut and that it would be a good way to push out assignments to students...intersting stuff. Wouldn't viruses be spread quicker via multicast? My 2c Trakman.

1 0

Agenda for spam session on Wednesday
by David Farrar 31 Jan '05

31 Jan '05

Hi all - for those attending the spam session tomorrow as part of NZNOG Conference, the revised agenda FYI is below. You can sleep in :-) 1030 Morning Tea 1100 Welcome - Rodney Prescott 1110 Anti-Spam Technology (David Harris, Richard Jowsey, Simon Lyall) - Sender-ID/SPF (Microsoft) - DomainKeys (Yahoo) - Cisco Initiative - Cascaded statistical filtering 1200 Spam - A dose of reality Simon Lyall, Telecom NZ 1230 Lunch 1330 Spam Trends and Changes (David Harris, Richard Jowsey, Simon Lyall) - Web-bugs/Beacons - Phishing, Mafia links - Trojans - Disposable domains - Zombies - Collateral damage - Blacklists/Blocklists 1500 Afternoon Tea 1530 NZ Anti-Spam Legislation - consequences for industry - Likely shape of legislation (David Farrar) - Code of Practice (Pete Macaulay) 1630 Drinks -- David Farrar e-mail: david(a)farrar.com mob: 027 447 0216, ph: 04 471 0956, fax: 04 471 0946 blog: http://www.kiwiblog.co.nz msn: dpf666(a)hotmail.com, icq: 29964527 Director, Curia Market Research http://www.curia.co.nz Vice-President, InternetNZ http://www.internetnz.net.nz Director, .nz Registry Services, http://www.nzrs.net.nz

1 0

bandwidth in AKL
by Richard Naylor 31 Jan '05

31 Jan '05

Hi There, I have a possible major webcast in AKL at the Showgrounds in mid March. I'm going to need 2 carriers with around 2.5-3 mbps each. I just need to get back to APE, so traffic upstream isn't too great. Current plans are to use Wired Country and IP Star via ICONZ. Any one (incl Telecom and TCL) with something better and do-able before mid March, please contact me off list. Its 3 days live and allowing for set up etc, is a total of maybe 5 days. Thanks - Rich

1 0

The New Zealand Network Operators' Group
by Donald Neal 31 Jan '05

31 Jan '05

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. It consists of the subscribers to this mailing list, which anyone is free to join. Conference Our next conference starts tomorrow. See http://www.nznog.org/ for more information about the conference, including how to get there. You may be out of luck if you haven't already registered. If you are going, see http://www.nznog.org/curry_about.php for dinners on Wednesday and Friday. Other Meetings See http://auckland.thursdaynightcurry.com/ or http://wellington.thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://nzix.net/ for details of the Auckland, Palmerston North and Wellington exchanges, and some information on others under construction. About This Mailing List This list has around 750 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and Telecom. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

backscatter attack
by Spencer Stapleton 30 Jan '05

30 Jan '05

One of our user domains has just been heavily hit by *huge* quantities of Non-Delivery Receipts addressed to random_string(a)domain_name. At it's peak we were seeing around 50,000 NDR's coming in per hr. The worst has passed (<fingers crossed>), but this does raise a couple of issues with the current Internet mail infrastructure. A good discussion of the attack and surrounding issues can be found here at http://www.gossamer-threads.com/lists/spf/discuss/17041. In a nutshell we need Sender Policy Framework (http://spf.pobox.com/) - or something similar ASAP. There is nothing that could stop this happening to us again tomorrow. I don't think I've ever felt so powerless. RBL lists proved useless in the line of defense, as these messages were coming from legitimate sources. We were able to temporarily remove a few IP's here and there where the remote MTA were going overkill throwing these NDR's at us. It would seem that the original spambots that delivered the original message sent it just about everywhere. An interesting stat is that we received NDR's for atleast 352,423 unique recipients (<352,423 unique strings>@domain)!!! We only had a number of things at our disposal to do to limit the damage: Stop generating any 'unknown user' NDR responses ourselves (ignoring RFC876). Split the affected domain away from the rest of our incoming mail stream and then to start removing obvious NDR's from the isolated queues. Remove more NDR's from the queue. <repeat last step again> <and again>... <etc...> Has anyone seen something similar? Did you manage to locate a better solution? I can't say I've enjoyed the last couple of days one bit! Spencer. -- Systems Engineer Compass Communications http://www.compass.net.nz

8 14

Radius?
by Craig Spiers 30 Jan '05

30 Jan '05

What Radius Software are the majority of people out there using? Small Scale.. And large scale.. with SQL Backend? Anyone know anything about freeradius? Regards Craig - ConceptNET

6 5