- NZNOG - lists.nznog.org

Re: [nznog] NZNOG 05'
by Ewen McNeill 04 Jan '05

04 Jan '05

In message <F63658CB-5E83-11D9-BF97-000D93B24C7A(a)isc.org>, Joe Abley writes: >On 4 Jan 2005, at 13:52, Joshua Brady wrote: >> One last question I have no problems driving in NZ with a US Licence? > >Your hire car will have three pedals instead of two; there will be this >strange lever in the middle that you use to change gears; the steering >wheel will be on the wrong side; the fuel will be called "petrol" >instead of "gas"; there will be roundabouts and the roads will actually >have bends in them. You can, and possibly should, ask for an automatic when you book your hire car, rather than a manual (stick shift). An automatic will restore the number of pedals to two (accelerator (gas) and brake), and remove the need to use the strange lever in the middle to change gears (well apart from selecting drive/park/reverse). I suspect at least half of most hire fleets are automatics so it shouldn't be too difficult to get one. Unfortunately the steering wheel will continue to be on the right hand side of the car, which you should consider a reminder to drive on the left hand side of the road :-) New Zealand roads specialise in bends, and from memory the Auckland -> Hamilton road is also through fairly rolling country so you'll have both gentle hills and bends to help keep you awake. You may also wish to keep in mind that speed limits are in kilometres per hour (not miles per hour), and speed limits are enforced with speed cameras in various (sometimes hidden) places; fortunately any hire car you get will also have a speedo showing kilometres per hour so it's just a matter of matching up the numbers. >Your US licence will be fine though, as far as I know :-) http://www.newzealand.com/travel/transport/driving-in-nz/driving-in-new-zea… It appears that providing your licence is current in the US, and you carry it with you (at all times while driving) you can drive in NZ for up to 12 months without a problem. Ewen

1 0

Re: [nznog] NZNOG 05'
by Ewen McNeill 03 Jan '05

03 Jan '05

In message <6cdc2eb4050104075957b23612(a)mail.gmail.com>, Joshua Brady writes: >I am booking my flight a bit late, but need to know what airport is >going to be easiest to get to from the US. I will be flying KRIC to >KLAS for NANOG, then want to transfer over to NZNOG from there >(leaving early 02/01/05). Can anyone advise me on what exact airport >I'll need to take? Then travel plans from there? Keep in mind that 1 Feburary 2005 Pacific Time is 2 Feburary 2005 in New Zealand for most of the day (all but 5 hours). And the US->New Zealand flight crosses the date line. So if you leave LAX on the evening of 1 Feburary 2005 you'll arrive in New Zealand on the morning of _3_ Feburary 2005, effectively missing out on 2 Feburary 2005 completely. As the NZNOG conference starts with tutorials on 2 Feburary, and the main conference on 3 February that doesn't leave you much spare time. Given that you have limited time, the best option is most likely to fly into AKL (Auckland, New Zealand) which is the closest major international airport. Then drive from there to Hamilton as Joe suggests. The flight will get in around 06:00 in New Zealand, and the drive will take about 2 hours, so you'll arrive just before the main NZNOG conference assuming you leave the US on the evening of 1 Feburary 2005. Both Qantas and Air New Zealand fly LAX->AKL daily, and most major US airlines code share those flights.[0] If you can get a good deal it may be worth considering flying into CHC (Christchurch, New Zealand), and getting a connecting flight from CHC to HLZ (Hamilton, New Zealand). HLZ is the closest airport to the conference (about 15 minutes in a taxi), but has limited international flights (mainly only from Australia). There are fairly regular connecting flights from CHC -> HLZ throughout the day with Air New Zealand and some with Origin Pacific; the connecting flights would take about 1 hour. If you had more time you could consider flying via Australia (BNE (Brisbane), SYD (Sydney) or MEL (Melbourne)), but the US-> Australia flight takes about 3-4 hours longer than US->AKL, and the Australia -> New Zealand flights take about 4 hours. With connections it'd probably add 10-12 hours to the travel time, which you don't have spare. Ewen [0] There are a few flights from AKL->HLZ (Hamilton, New Zealand -- the closest airport to the conference) daily, taking about 30 minutes flying time, but the first one is 11:50 so it's not much use to you.

3 2

The New Zealand Network Operators' Group
by Donald Neal 01 Jan '05

01 Jan '05

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Conference Our next annual conference is to be hosted by the WAND group in Hamilton on February 2nd to 4th. That's less than five weeks away. See http://www.nznog.org/ for more information and to REGISTER NOW. Other Meetings See http://auckland.thursdaynightcurry.com/ or http://wellington.thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://www.nzix.net.nz/ for details of the Auckland, Palmerston North and Wellington exchanges, and some information on others under construction. About This Mailing List This list has around 750 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and Telecom. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

Telecom Outage
by Dream Net Internet 31 Dec '04

31 Dec '04

Hello Everyone, Happy New Year!! Does any one know of a Telecom outage around 8.30 last night (new years eve?) Regards Adam Fenech www.dreamnet.co.nz Check out our online store for great deals www.dreamnet.co.nz/store.html

3 2

Upcoming webcast activity
by Richard Naylor 29 Dec '04

29 Dec '04

The following webcasting activity is scheduled for the next few days/weeks. While we don't expect large volumes of traffic, Operators may like to be aware of the activity, as some communities of interest are involved that may generate extra calls to Help Desks. Scouts Jamboree - about now until about 8 Jan ------------------------- We are webcasting their Radio Station and TV station. The URLs are http://www.r2.co.nz/meta.jamradio.asx http://www.r2.co.nz/meta/jamtv.asx These are in windows media 9 format - available from MS. We hope they leave the encoding PC alone long enough for people to be able to listen/watch. It was all go just before my cup of tea.........<sigh> Radio Tarana ------------------- Radio Tarana are now webcasting 24/7 - off their web site www.tarana.co.nz - they are an AKL based Hindi radio station, so locals may be interested. Because of content rights, this webcast may be restricted to NZ based clients only. Radio NZ -------------- National Radio will be starting a programme series on 1 Jan, with each programme available for listening "on-demand" afterwards. The topic is Split Enz so may be popular. Because of RIANZ rights issues, the content will only be available to NZ based clients, using Anycast routing into WIX, where the server is located. ISPs not peering at WIX may receive Help Desk calls asking why the content won't play. On the other hand the weather may be really good and no one will bother with any of this....... Happy Christmas and New Year - Rich

2 1

Re: [nznog] [Inetnum object]
by Andy Linton 24 Dec '04

24 Dec '04

About a month ago Sid Jones and I had a conversation about one of his customers who has a /23 in this space. We raised the issue with APNIC and I attach the thread. There's a clear implication in the mail below that APNIC expect Telecom NZ to cooperate on this issue which seems to be at odds with their behaviour over 202.49.252.0 - 202.49.255.255 as David Robb has noted. I suggest a number of things here: 1) each ISP who routes portions of this block should encourage their customers to write to APNIC requesting that as this block was allocated via the University of Waikato which was operating as a proto NZNIC at the time then this address space should be deemed to be provider independent space which should be administered as other 'swamp' space. For example, here's a record that's recently been obscured as part of this exercise: inetnum: 202.36.137.0 - 202.36.137.255 > netname: NZMFE > descr: Ministry for the Environment > descr: P.O. Box 10-362 > descr: The Terrace > descr: Wellington > country: NZ > admin-c: MB22-AP > tech-c: MB22-AP > notify: dbmon(a)apnic.net > mnt-by: APNIC-HM > changed: hostmaster(a)apnic.net 19931217 > status: ALLOCATED PORTABLE > changed: hm-changed(a)apnic.net 20031020 > source: APNIC This is clearly PORTABLE space and makes no reference to Telecom NZ and the admin-c and tech-c details were updated just over a year ago. Note that this address was allocated in 1993 long before Netway (a Telecom NZ subsidiary) entered the picture at all. Why are APNIC changing the goal posts? 2) the customers should also write to Telecom NZ making clear that their portion of address space was not issued to Telecom NZ but to them by the University of Waikato (acting as a proto NZNIC) and that they want Telecom to relinquish control of this space back to APNIC. 3) I'd encourage APNIC to look again at this. 4) user groups such as InternetNZ, TUANZ etc need to get across this issue and raise it with Telecom NZ 5) I'd suggest the press get their teeth into this but that's probably not necessary as there's no story here. (:-) andy -------- Original Message -------- Subject: Re: [Fwd: [APNIC #624302] 202.27.0.0/16 and http://www.apnic.net/info/faq/privacy-faq.html (fwd)] (fwd) Date: Thu, 4 Nov 2004 09:20:59 +1000 (EST) From: John Tran <john(a)apnic.net> To: asjl(a)citylink.co.nz CC: Anne Lord <anne(a)apnic.net>, Elly Tawhai <elly(a)apnic.net>, Tim Jones <tim(a)apnic.net> Hi Andy, We have searched all our historical emails and records regarding NZNIC as well as all information relating to 202.27.0.0/16. Here is the summary of what we found. Before 1995, the following address ranges had been allocated by APNIC to the University of Waikato, which operated as a gateway for New Zealand, under the name NZGATE: 202.27/16 202.37/16 202.36/16 202.49/16 202.50/16 These ranges were allocated on the basis that NZGATE would make further allocations to their customers. In 1995, Netway Commnication Ltd took over the international gateway function from the University of Waikato and the IP addresses were transfered with APNIC's approval. Netway continued contracting University of Waikato staff to allocate IP addresses on Netway's behalf to its customers. NZNIC was then established by the University of Waikato to obtain provider independent addresses for other organisations like Clear Communication and Netlink. Netway was then transfered to NZtelecom in late 1997, along with the corresponding address space. In November 1998, because of the confusion in the Internet community in New Zealand about whether the address space that they obtained from the University of Waikato was portable or not, APNIC and Brett Telfer (Netgate) re-confirmed that the above ranges would be best managed by NZTelecom. Since then, these address ranges are used by APNIC to determine the membership tier paid by NZtelecom as outlined in: http://www.apnic.net/member/feesinfo.html NZTelcom is able to assist any organisation holding address space with reverse DNS and is able to change the status of DB object to public, if so requested. I hope the above information is useful for you. If you need additional information please contact us. If you would prefer to discuss this further, we can arrange a telephone conference. Regards Son ---------- Forwarded message ---------- Date: Mon, 25 Oct 2004 12:39:44 +1000 (EST) From: Anne Lord <anne(a)apnic.net> To: Andy Linton <asjl(a)citylink.co.nz> Cc: son(a)apnic.net Subject: Re: [Fwd: [APNIC #624302] 202.27.0.0/16 and http://www.apnic.net/info/faq/privacy-faq.html (fwd)] hi Andy, Thanks for your email. I'm no longer involved in handling resource requests, but I have copied Son Tran, the manager of the Member Services department, on this email, who is and who will be able to help you. It certainly looks like this warrants a much closer examination of the records and history and I am sure Son would be happy to talk to you. Best wishes, Anne cc: Son On Fri, 22 Oct 2004, Andy Linton wrote: > Anne, > > I've had a conversation today with Sid Jones about this mail. These blocks > were allocated to the University of Waikato which operated as the proto NZNIC > in the early nineties prior to APNIC handling this work. > > Aaron Scott who is listed in the changed record below went to work for Telecom > NZ when they took over handling the exchange point at Waikato. There are a > significant number of NZ government departments and other "blue chip" > identities listed in the records who don't use Telecom NZ as their ISP and who > believe that they have portable space. Some of them have /21 allocations and > perhaps even /20 allocations. > > This whole set of blocks really should be considered as swamp space. > > I will be raising this issue on the NZNOG mailing list suggesting that those > entities who have had these blocks allocated to then for periods in the order > of 10 years or more should contact you asking for clarification of their position. > > I think it would be good if APNIC took a good look at the allocations within > these ranges and considered what's going on here. > > Happy to discuss - +64 4 910 5654 > > andy > > ---------- Forwarded message ---------- > Date: Thu, 21 Oct 2004 13:44:30 +1000 > From: gpan via RT <helpdesk(a)apnic.net> > To: sid(a)tsnz.net > Subject: [APNIC #624302] 202.27.0.0/16 and > http://www.apnic.net/info/faq/privacy-faq.html > > > Dear Sid, > > Thank you for your enquiry. It was proposed at the APNIC 16 > meeting in 2003 that customer assignments (and sub-allocation > records) need no longer be publicly accessible via normal > 'whois' queries to the APNIC Whois Database. > > Customer registration records must still be registered within > the APNIC Whois Database, in order to document address > utilisation, however a new 'public' database attribute has been > created to allow these records to be excluded from public whois > query results. This is why you are unable to receive any > result when querying the APNIC Whois Database about this > particular /23. You will get the result as: > > inetnum: 202.27.0.0 - 202.27.255.255 > netname: NZGATE-NZ > descr: NZ Gate National Service Provider > descr: Component of University Of Waikato > descr: New Zeland > country: NZ > admin-c: DBK1-AP > tech-c: KS61-AP > remarks: service provider > notify: dbmon(a)apnic.net > mnt-by: APNIC-HM > mnt-lower: NZTELECOM > changed: ARRON(a)WAIKATO.AC.NZ 19950612 > changed: hostmaster(a)apnic.net 20020208 > changed: hm-change(a)apnic.net 20020621 > status: ALLOCATED PORTABLE > source: APNIC > > Information contained within the historical records outlines that > NZTelecom has full authority over the following blocks: > > 202.27.0.0/16 > 202.36.0.0/16 > 202.37.0.0/16 > 202.49.0.0/16 > 202.50.0.0/16 > 203.96.0.0/17 > > Information from those records also outline that the assignments from > these ranges are non portable. > > 202.27.xx.0/23 > > This address space is from a block allocated, by APNIC to NZTelecom. > This means that all assignments made from this block are non portable. > > If your customer would like to see or change their records in APNIC > whois database, please advise them to contact NZ Telecom. > > Best Regards, > Guangliang > > ____________________________________________________________________ > Guangliang Pan, Internet Resource Analyst <gpan(a)apnic.net> > Asia Pacific Network Information Centre phone: +61 7 3858 3100 > http://www.apnic.net fax: +61 7 3858 3199 > Helpdesk phone: +61 7 3858 3188 > email: helpdesk(a)apnic.net > > Please send Internet Resource Requests to <hostmaster(a)apnic.net> > _____________________________________________________________________ > > > [sid(a)tsnz.net - Wed Oct 20 12:27:02 2004]: > > > Hi > > > > I'm writing to you on behalf of one of my customers XXXXXXX > > as we have something of a dilemma. > > > > I believe the XXXXXX applied for some PI address space from the > > university of waikato sometime in the mid-1990s and were allocated > > 203.27.xx.0/23. > > > > I also believe this space was "swamp" space and not allocated to any > > of the various service providers in New Zealand. > > > > > > They have had this space routed to them via effectively the same > > provider since then. The provider for the past 3 years has been > > TelstraClear NZ Ltd, prior to that it was Telstra NZ Ltd and > > previously Netlink > > > > Can you please clarify who the /23 is allocated to. > > > > Can you please clarify if the customer can still use this space while > > connected to the provider they have had for the past decade. > > > > Further if this is the case how do we get the current records updated > > to reflect this sub-delegation. I'm also curious as to what effect > if > > any this has on other customers I have in 202.27/16 > > > > >

9 8

Exim 4 Book
by Jamie Curtis 20 Dec '04

20 Dec '04

Hi all, As Richard announced late last week, Philip Hazel, the lead author of Exim, is attending NZNOG to give a full day workshop on the configuration and administration of Exim servers. A few people have indicated that the Exim 4 book (http://www.uit.co.uk/exim-book/) is hard to get hold of in NZ and Philip recommends it in addition to the Exim tutorial. I have talked to the publisher of the book, and we can arrange a direct shipment of the books to NZ from the UK for the tutorial. They have offered us the book, including shipping, for slightly less than GBP 30, or about NZ$80. This price comes down to less than NZ$70 as we order more. We can only get these prices if we order suitable quantities, so I need people to indicate to me if they are interested in purchasing the book at the tutorial. If we get enough numbers, I will confirm to all interested the exact price before we place the order. As they have to be shipped to us in time for NZNOG at the start of Feb, we need to know numbers ASAP. Cheers, Jamie ----------------------------------------------------------------------- Jamie Curtis office: G.1.01 WAND Group, Dept of Computer Science phone: +64 7 838 4136 University of Waikato, mobile: +64 21 392 102 Hamilton, fax: +64 7 858 5095 New Zealand email: jamie(a)wand.net.nz -----------------------------------------------------------------------

2 2

Orcon contact me
by Jamie Baddeley 17 Dec '04

17 Dec '04

can someone from Orcon contact me offlist ASAP please. jamie

1 0

Re: [nznog] NZNOG Tutorials
by Richard Naylor 16 Dec '04

16 Dec '04

At 08:41 AM 12/17/2004 +1300, Jamie Baddeley wrote: >On Thu, 2004-12-16 at 22:55, Simon Blake wrote: > > He's always keen as mustard for non-royalty-attracting audio, in > > whatever format you've got. If you don't send him something, you got no > > rights to whinge at what he plays. > > >http://creativecommons.org/wired/ > >No whinging from me then! noted - I'll make up a new disk :-) rich

1 0

NZNOG Tutorials
by Richard Nelson 16 Dec '04

16 Dec '04

We have more tutorials for NZNOG'05! Philip Hazel, lead author of Exim is coming from Cambridge, UK to give a one day tutorial on configuring this MTA. Juniper are providing a hands on tutorial on "Border Routing in ISP and Large Private Networks". Due to the hands on nature of this tutorial it is limited to 16 places only. Places will be allocated first come first served based on registration time and a reserve list will be kept. Note that registering for this tutorial does not guarantee a place. Places will be confirmed by email. As always full details are on the website http://www.nznog.org . You can choose which tutorial you wish to attend when you register. Note that any attendees who have already registered and paid for NZNOG'05 who wish to change their details due to these announcements should email registration(a)nznog.org. Due to the first-come first-served arrangements for the Juniper tutorial, these people will get priority. Richard Nelson WAND.

5 6

NZNOG International Speakers
by Richard Nelson 15 Dec '04

15 Dec '04

We are working as hard as possible to confirm the speakers for NZNOG, but it will still be some time till the complete programme is available. To help people who are deciding whether to come, here is the latest list of the planned international speakers. (Topics are still provisional.) Confirmed: Vijay Gill (AOL) "Big Fast Networks" Bill Woodcock (PCH) "INOC-DBA" Bill Norton (Equinix) "Peering" Joe Abley (ISC) "History of NZ Peering" Subject to final confirmation George Michaelson (APNIC) "Address Space Usage" Bill Manning (EP.net) "DNSSEC" Biographical details and talk abstracts will be added to the website as they become available. We also have a couple of extra tutorial streams to add. These will be advertised later today. People who have already registered for NZNOG will be given the opportunity to enroll for these. Richard Nelson WAND

2 1

SPF problems with nznog registration.
by Steve Phillips 15 Dec '04

15 Dec '04

um.. This message was created automatically by mail delivery software (Exim). A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: richardn(a)cs.waikato.ac.nz (generated from registration(a)nznog.org) SMTP error from remote mailer after MAIL FROM:<steve(a)focb.co.nz> SIZE=1986: host mail.cs.waikato.ac.nz [130.217.241.36]: 550 Please see http://spf.pobox.com/why.html?sender=steve%40focb.co.nz&ip=130.217.250.15&r… ------ This is a copy of the message, including all the headers. ------ Return-path: <steve(a)focb.co.nz> Received: from [64.246.60.77] (helo=wibble.focb.co.nz) by warlock.cs.waikato.ac.nz with smtp (Exim 3.35 #1 (Debian)) id 1CegkR-0005mq-00 for <registration(a)nznog.org>; Thu, 16 Dec 2004 10:31:51 +1300 Received: (qmail 10492 invoked by uid 501); 15 Dec 2004 21:31:49 -0000 Received: from localhost (sendmail-bs(a)127.0.0.1) by localhost with SMTP; 15 Dec 2004 21:31:49 -0000 Date: Wed, 15 Dec 2004 15:31:49 -0600 (CST) From: Steve Phillips <steve(a)focb.co.nz> To: registration(a)nznog.org Can you guys please fix your registration/mail system ? and someone really should be told that bouncing mail based on SPF records alone is a bad thing [tm] (sending here because I cant seem to mail them directly..) -- Steve.

4 4

RE: [nznog] SSH login attempts
by Philip D'Ath 14 Dec '04

14 Dec '04

No. Most of ours have come from (so far): 64.191.62.135 61.59.33.44 217.107.212.104 219.240.134.41 213.215.76.1 -----Original Message----- From: Chris Hodgetts [mailto:chris(a)archnetnz.com] Sent: Wednesday, 15 December 2004 9:40 a.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] SSH login attempts Were the majority of attempts comming from: 210.0.192.40 Thats where I seem to be getting the majority of my attempts from. <snip>

2 1

RE: [nznog] Bedlam DL3
by Hamish Macewan 14 Dec '04

14 Dec '04

More scary than funny, the math I mean: "We've got well over 100,000 mailboxes in our email infrastructure, [deletia] he created several distribution lists. Each distribution list had about a quarter of the mailboxes in the company on it (so there were about 13,000 mailboxes on each list)." A quarter of 100,000 is ~13,000? But later: "Remember, there are 25,000 people on this mailing list." Later still: "First off, the original mail went to 13,000 users." Further: "For the sake of argument, let's assume that 10% of the recipients on each message (130) are on each server." 10% of 13,000 would be 1,300? Not in MS land it would seem. It would seem that Corporate blogs are either as garbled as Corporate email or they actually have no clue. Hamish. -----Original Message----- From: James J. Guidera [mailto:james(a)miracle.co.nz] Sent: Wednesday, 15 December 2004 8:52 a.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Bedlam DL3 As a Wednesday morning laugh, Many people read the blog on msdn on Bedlam DL3? Bit of a laugh.... http://blogs.msdn.com/exchange/archive/2004/04/08/109626.aspx Cheers James

1 0

Re: [nznog] Bedlam DL3
by Lesley Walker 14 Dec '04

14 Dec '04

>Many people read the blog on msdn on Bedlam DL3? > >Bit of a laugh.... >http://blogs.msdn.com/exchange/archive/2004/04/08/109626.aspx Good to see them get a taste of their own medicine. I have no sympathy (for the company) whatsoever, they should have designed the MTA better. (Plenty of sympathy for the poor bastards who had to deal with it though) Lesley Walker Former Exchange admin

1 0

Re: [nznog] SSH login attempts
by Anton Smith 14 Dec '04

14 Dec '04

> Moving the ssh port to something else that 22 seems to help as well. > > -- > Juha Port knocking is an interesting method of protecting your machine. If you're a debian user apt-get install knockd - comes with a fairly simple configuration file as well. The only problem with this is generating the knock sequences, especially when you are out and about and on a foreign machine (can still be done using the venerable telnet for syn packets but netcat or nemesis would be better). Regards, Anton Smith

1 0

SSH login attempts
by Philip D'Ath 14 Dec '04

14 Dec '04

We are getting lots of requests at the moment trying to log into one of our box's via SSH. It happens in 20 minute bursts, with a new request being tried every 6s. After the 20 minutes it goes away for 8 hours. It appears to be a straight dictionary attack, with the attempts cycling though usernames like root, user, test, john, henry, george, frank, alan, adam, server, backup, account, master, sybase, oracle, web, data, webmaster, noc, cip51, cip52, cosmin, pamela, jane, adm, irc, apache, operator, mysql, www-data, matt, www, wwwrun, cyrus, horde, iceuser, rolo, patrick, nobody. It spends most of its time trying to login as root. The requests are mostly coming from Russia, with a couple of other IP's from other countries. The device they are attempting to log into is not advertised in anyway, so was probably picked up during a normal port scan. For the moment I've limited connections to the box for SSH to only be accepted over IPSec, so that's the end of the login attempts. I guess what I'm posting this for is to make sure everybody has a good password policy in place. Someone is actively trying to compromise accounts via SSH.

6 6

Bedlam DL3
by James J. Guidera 14 Dec '04

14 Dec '04

As a Wednesday morning laugh, Many people read the blog on msdn on Bedlam DL3? Bit of a laugh.... http://blogs.msdn.com/exchange/archive/2004/04/08/109626.aspx Cheers James

2 1

XML schema for interface configuration
by Cameron Kerr 12 Dec '04

12 Dec '04

Does anyone know of, or has found a useful XML language for modelling network interface configuration? I just need the basics, more precisely IPv4 interfaces. Manual and DHCP configuration (maybe also ZeroConf) Subnetmask Routes (static, but dynamic would be good also) IPv6 interfaces. ??? DNS configuration Other stuff? (tunnels, p-t-p interfaces, ...) I could model one myself, but I would much prefer input from something more time-proven. I don't need anything with a formal schema. -- Cameron Kerr cameron(a)humbledown.org; http://humbledown.org

2 1

NZNOG Registrations
by Richard Nelson 09 Dec '04

09 Dec '04

Registrations for next years NZNOG Conference are now being accepted at http://www.nznog.org. The conference is again being hosted by the WAND Network Research Group at the University of Waikato. Last year we had 125 registrations. The largest lecture theatre holds 140 so places are strictly limited. There is a tutorial/workshop day before the conference. Tutorials that we have confirmed are: APNIC - IRME LinkIT - Trango Wireless InternetNZ - Spam Handling Accomodation is available on campus. Some rooms (28) are available with Ethernet ports which will be allocated first come first served. All prices and details are available on the website. Late registrations (after January 14) will incur late fees. The main overseas speakers will be confirmed shortly... Richard Nelson WAND.

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 08 Dec '04

08 Dec '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: - Date: Thu, 9 Dec 2004 12:48:25 +1300 (NZDT) - Msg-Id: <Pine.LNX.4.58.0412091247560.28480(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS64597 descr: advertised to AS9439 by Araneo - AS64597 members: 202.53.189.128/29, 210.48.101.64/27^27-29, 210.48.109.224/27^27-29, 202.174.161.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: jon.brewer(a)araneo.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041028 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS64597 descr: advertised to AS9439 by Araneo - AS64597 members: 202.53.189.128/29, 210.48.101.64/27^27-29, 210.48.101.112/29, 210.48.109.224/27^27-29, 202.174.161.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: jon.brewer(a)araneo.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20041209 source: NZRR

1 0

[Apnic-announce] Protecting historical records in the APNIC database (fwd)
by John Tran 05 Dec '04

05 Dec '04

Hi all, Just following from last week emails. Here is an announcement that could be interested to some of you. If you wish to know what happening in the APNIC community please subscribe to apnic-annouce mailing list which is available at: http://www.apnic.net/community/lists/index.html Regards son ---------- Forwarded message ---------- Date: Mon, 06 Dec 2004 14:56:11 +1000 From: APNIC Secretariat <secretariat(a)apnic.net> Reply-To: apnic-talk(a)apnic.net, secretariat(a)apnic.net To: apnic-announce(a)apnic.net Subject: [APNIC Members] [Apnic-announce] Protecting historical records in the APNIC database Dear colleagues, The APNIC Secretariat will implement a policy on 14 December 2004 to protect historical records in the APNIC database from unverified transfers, abuse, and unauthorised use. The proposal document, presentation, minutes, and discussion are available at: http://www.apnic.net/docs/policy/proposals/prop-018-v001.html Please note, after 14 December 2004, the maintainer of all historical resource registrations will be changed to "APNIC-HM". To ensure the integrity of information in the APNIC Whois Database, APNIC will not update historical information in the APNIC Whois Database unless the resource holder can establish its right to the resources and enters a formal agreement with APNIC, either as a member or as a non-member account holder. Further details and all supporting documentation will be available on 14 December. If you have any questions regarding this policy, please contact the APNIC helpdesk at: E-mail: helpdesk(a)apnic.net Phone: +61-7-3858-3188 Fax: +61-7-3858-3199 Regards ______________________________________________________________________ APNIC Secretariat <secretariat(a)apnic.net> Asia Pacific Network Information Centre (APNIC) Tel: +61-7-3858-3100 PO Box 2131 Milton, QLD 4064 Australia Fax: +61-7-3858-3199 Level 1, 33 Park Road, Milton, QLD http://www.apnic.net ---------------------------------------------------------------------- See you at APNIC 19 Kyoto, Japan, 21 - 25 February 2005 www.apnic.net/meetings ----------------------------------------------------------------------

1 0

APRICOT 2005
by Neil Fenemor 05 Dec '04

05 Dec '04

Can anyone who is going to be attending the next APRICOT in Kyoto, Japan, please drop me a message off list. I wish to discuss beer (just to keep this somewhat near being on topic) Cheers neil

1 0

Viruses originating from Xtra network
by Lesley Walker 05 Dec '04

05 Dec '04

Please forgive me if this is off-topic, I don't know anywhere else to ask for help. How does one get the attention of the abuse people at Xtra? A mailing list that I administer is being attacked by viruses that originate at a Jetstream address (details below). I sent email to abuse(a)xtra.co.nz a couple of days ago and have not had the courtesy of a response, not even a "sod off" answer, or even a bounce. The viruses come in batches from a consistent IP address - the address has changed a couple of times but I think it's the same infected machine because the messages have a consistent "look and feel". The received header looks like this: Received: from srunjn.com (210-86-89-213.jetstream.xtra.co.nz [210.86.89.213]) by [munged] with SMTP id iB1CGab26947; Thu, 2 Dec 2004 01:16:36 +1300 (NZDT) The envelope "from" appears to be randomly generated nonsense as it is different every time, but the originating IP address is consistent for each batch. The messages are designed to look like bounces from various ISPs and companies but in fact contain virus attachments. The latest originating address is 210.86.90.246, as at Sat, 4 Dec 2004 08:36:21 +1300 (NZDT) -- Lesley Walker, Wellington, New Zealand LRW(a)clear.net.nz http://home.clear.net.nz/pages/lrw http://walkinguphills.blogspot.com/

11 12

Re: [nznog] Viruses originating from Xtra network
by Lesley Walker 04 Dec '04

04 Dec '04

Glen wrote: >As one would expect, Xtra get a fair few notifications and I must admit that >I was more than a little surprised to find that their 'abuse team' are the >most responsive of all the ISPs in NZ !! They acknowledge the notifications >by automated return mail and as each incident is closed we get a closure >report. I spoke with them by phone when we were getting the system setup and >they were very supportive and helpful. Then I have to conclude that my email didn't actually get through. But I haven't received a bounce, so it must have been dropped into the bit-bucket somewhere along the way. I must admit it's easy to fall into the trap of treating email as if it were a guaranteed-delivery system so if I've maligned them unfairly I apologise, and I'll try again and see what happens. >Most of the ISPs we send the notifications to are taking them seriously and >do do something. Private companies that have no abuse, no postmaster >address etc are proving to be a pain and there are quite a few of them. I can relate to that! Thanks for your comments. Lesley.

1 0