- NZNOG - lists.nznog.org

HEADS UP - upcoming webcast
by Richard Naylor 12 Apr '04

12 Apr '04

Saturday 17 April 1200Hrs Public Memorial Service for Dr Michael King and his wife at Te Papa Official hours of webcast are 1200 to 1330, but as usual it will start with a title slide etc as early as we can get it going. The streaming server will be located in Wellington and is peering on WIX. Public interest is not expected to be huge, but may be high once the webcast is publicised presumably by Te Papa. Webcast details are on www.r2.co.nz The webcast will have 5 streams - video = 384kbps, 128kbps, 56kbps audio = 56kbps, 28kbps There is also an experimental video stream at 1500kbps - It looks very good, but I doubt if anyone will be watching. Feel free to use this for a broadcast feed if needed. This stream may stress a few networks. (and run up a few massive dsl bills). Many of the technical questions are still being resolved, but it is expected that the webcast will be a multi-camera event, like the NZNOG Conference, but with higher levels of production quality. (ie a full crew and better cameras, sound, lighting etc) For further details, questions etc, contact me via email or on 021 897 089 Richard

1 0

NZNOG Conference 2005 Host and Venue Offers
by Donald Neal 12 Apr '04

12 Apr '04

It seems likely that the Conference Organising Committee will be in a position shortly to select a host and venue for next year's conference, and to make an announcement some time next month. Could anyone offering to host this event who has not already done so please contact me by midday Friday, 16 April. Thanks for your attention. - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

RE: [nznog] Jetnet ISP
by Nick MacKechnie (thenet) 08 Apr '04

08 Apr '04

Hiya >From memory - jet.net.nz is for Jetstart Orcon users fastadsl.net.nz is for the new Surf DSL Orcon users.. Nick ________________________________ From: Craig Spiers [mailto:craig(a)concept.net.nz] Sent: Thu 8/04/2004 6:09 p.m. To: Stephen Sheehan; nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Jetnet ISP jet.net.nz is orcon's 'brand'. ----- Original Message ----- From: "Stephen Sheehan" <axpunix(a)yahoo.com> To: <nznog(a)list.waikato.ac.nz> Sent: Thursday, April 08, 2004 6:04 PM Subject: [nznog] Jetnet ISP > Does anybody have any contact info on this ISP. > www.jet.net.nz > www.jet.co.nz > > Domain name and Whois lookup's point to Orcon, but > they do not seem to know anything about them. > > > Thanks > > Stephen > > > __________________________________ > Do you Yahoo!? > Yahoo! Small Business $15K Web Design Giveaway > http://promotions.yahoo.com/design_giveaway/ > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Jetnet ISP
by Stephen Sheehan 07 Apr '04

07 Apr '04

Does anybody have any contact info on this ISP. www.jet.net.nz www.jet.co.nz Domain name and Whois lookup's point to Orcon, but they do not seem to know anything about them. Thanks Stephen __________________________________ Do you Yahoo!? Yahoo! Small Business $15K Web Design Giveaway http://promotions.yahoo.com/design_giveaway/

2 1

3com NBX telephones and NCPs
by criggie＠criggie.dyndns.org 07 Apr '04

07 Apr '04

Gidday all. If theres anyone on the list who has used or has access to any 3com NBX telephone systems or NCPs please email me off list. Have an uneventful easter break everyone.

1 0

Does anyone read email to abuse@xtra.co.nz
by Jeremy Brooking 06 Apr '04

06 Apr '04

If you do, and youre on this list... Take the time to bother to read my email, sort out your user, and reply to me. It really isnt that much to ask. regards, Jeremy Brooking.

2 2

Peering with Citylink
by Andy Linton 06 Apr '04

06 Apr '04

Those of you who peer at the WIX and APE route servers will see Citylink's announcements of our own networks via that path. You should see an AS path of: APE: 9560 23754 WIX: 9439 23754 It would be excellent if you'd make sure that you accept our network announcements from the route servers. If you want to construct filters based on address prefixes you can see the networks we announce by querying the NZ Routing Registry using: whois -r -h whois.wix.net.nz as9560:rs-routes:as23754 whois -r -h whois.wix.net.nz as9439:rs-routes:as23754 which gives: route-set: AS9560:RS-ROUTES:AS23754 descr: Route set for Citylink to APE members: 203.118.144.0/24, 198.48.0.0/22, 202.8.44.0/22^22-24, 202.7.4.0/24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)ape.net.nz changed: rpsl-admin(a)ape.net.nz 20031118 changed: rpsl-admin(a)ape.net.nz 20040303 changed: rpsl-admin(a)ape.net.nz 20040406 source: NZRR and route-set: AS9439:RS-ROUTES:AS23754 descr: Route set for Citylink to WIX members: 203.118.144.0/24, 198.48.0.0/22, 202.8.44.0/22^22-24, 202.7.4.0/24, 203.97.231.224/28, 210.48.103.0/28, 210.48.103.144/28, 210.48.103.136/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)wix.net.nz changed: rpsl-admin(a)wix.net.nz 20040112 changed: rpsl-admin(a)wix.net.nz 20040303 changed: rpsl-admin(a)wix.net.nz 20040322 changed: rpsl-admin(a)wix.net.nz 20040407 source: NZRR

1 0

Re: National Bank phishing
by Dominic O'Hare 05 Apr '04

05 Apr '04

ASB Bank has just sent out an alert to customers registered with FastNet Internet Banking. -- Dear Customer With the recent spate of email scams to hit some other New Zealand banks, we felt it timely to once again remind you about the importance of keeping your personal Internet banking details safe, and never disclosing your Internet access codes or passwords to anyone, even if you believe they are from the Bank. ASB Bank and ASB Securities have not been affected by these scams. To ensure you keep your personal Internet banking details safe, please remember: * Never share, write down or disclose your access codes or passwords to anyone, (other than during the normal sign in procedure), or store them in a file on your computer. * Always access the ASB Bank or ASB Securities website by starting up a new browser session and typing in the address directly into the address bar of your browser. Never follow a link in an email to the ASB Bank or ASB Securities website. * Never leave your computer signed onto Fastnet or ASB Securities when you are not there. * Never open emails, email attachments, or run software from untrusted or unknown sources. * Install anti-virus and other security software, such as a personal firewall, and keep it updated with the latest vendor updates. * Use the Sign Off button when you've finished using Fastnet Classic. * Use the Log Out button when you've finished using ASB Securities. If you have any questions please do not hesitate to contact ASB Bank or ASB Securities by visiting our websites or calling 0800 803 804. Yours sincerely, Barbara Chapman Head of Retail Banking and Marketing ASB Bank Limited --

1 0

National Bank phishing
by Simon Byrnand 04 Apr '04

04 Apr '04

Just a heads up, After the recent fake Westpac emails trying to phish for peoples internet banking passwords and logins, there are now some National Bank ones circulating that follow exactly the same technique...... looks like the target URL has already been taken down though... Funnily enough, SpamAssassin actually scored it at 16.30 and blocked it as spam :) Regards, Simon

2 1

IANA IPv4 allocations and bogon update: 85/8, 86/8, 87/8, 88/8
by Rob Thomas 02 Apr '04

02 Apr '04

Hi, team. [ Apologies to those who receive this post in multiple forums. ] The numerous Team Cymru bogon projects have been updated as of 01 APR 2004 to reflect the following IANA allocation made on 01 APR 2004: 85/8 Apr 04 RIPE NCC 86/8 Apr 04 RIPE NCC 87/8 Apr 04 RIPE NCC 88/8 Apr 04 RIPE NCC IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.qorbit.net/documents/junos-template.pdf> Secure JUNOS BGP Template (Juniper) - <http://www.qorbit.net/documents/junos-bgp-template.pdf> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-loose.pdf> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.qorbit.net/documents/junos-isp-prefix-filter-strict.pdf> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

1 0

New APE web site
by Andy Linton 31 Mar '04

31 Mar '04

As of today, the APE web site has had a revamp. Those of you familiar with the WIX site will notice some similarities! The features that I think are useful from a day to day operational perspective are the Looking Glasses e.g. http://www.ape.net.nz/cgi-bin/mrlg-ape.cgi http://www.wix.net.nz/cgi-bin/mrlg-wix.cgi You can use these to see what routes are currently in the route servers and the state of peering seesions. For those of you who are keen to see what routes the route servers might push in your direction see: http://www.ape.net.nz/cgi-bin/ShowRoutes.cgi http://www.wix.net.nz/cgi-bin/ShowRoutes.cgi These will show you the filter lists we apply to outbound routes. This meta-table is the union of all the inbound filters applied to the BGP peering sessions of exchange participants. The list showing the export to 23754 is the same list applied to all participants.

3 5

The New Zealand Network Operators' Group
by Donald Neal 31 Mar '04

31 Mar '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Meetings See http://www.nznog.org/ for details of this year's conference. We are now working towards a similar gathering to be held early next year. Also see http://auckland.thursdaynightcurry.com/ if you live in or near Auckland. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. About This Mailing List This list has over six hundred addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

No beer, but spammer gets his comeuppance
by Juha Saarinen 29 Mar '04

29 Mar '04

http://news.bbc.co.uk/1/hi/business/3581435.stm Right, will go back to the ADSL list now. -- Juha

1 0

UBD
by jfp 29 Mar '04

29 Mar '04

Hi guys, it looks like the situation with UBD had been fixed. See Juha's article in the Herald. http://www.nzherald.co.nz/storydisplay.cfm?storyID=3557667&thesection=bu siness&thesubsection=technology Thanks to the Spamhaus guys for putting a bit of pressure on. And also thanks for the APN guys (owners of UBD) for resolving the issue quickly. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

1 0

Speed of Citilink provisioning?
by NZNOG＠neilnz.com 28 Mar '04

28 Mar '04

Hi guys - how quickly can Citilink provision a building next to their own that has had ethernet in the past (possibly currently for other tenants)? If anyone from Citilink spies this email and would like to help me out by giving me the the name of the right person to talk too, please email back. I would really like to have an active connection on the 6th of April so I can do some Firewall training at our Wellington Offices on the 7th and 8th. (After the training, the connection will stay as our Internet connection for the Wgtn office) Cheers - Neil G

1 0

Orcon Internet Prefix List Update (2004-03-29)
by Craig Whitmore 28 Mar '04

28 Mar '04

For all those peering with Orcon Internet (AS17746) nationally, please update your prefix lists with the following networks (also in attached file). Added: ip prefix-list orcon-national permit 202.53.176.0/20 Thanks Craig Whitmore Systems Administrator Orcon Internet http://www.orcon.net.nz

1 0

UBD, our local spammers's friend.
by jfp 25 Mar '04

25 Mar '04

Some of you might not be aware that UBD sells its list of e-mail addresses to local businesses who then proceed to SPAM you. UDB sells their service as a business directory for potential clients who might be interested in your company. What you get instead is people buying their mailing list to sell you stuff via SPAM. (All legally of course) We found this out last year and asked to have our email address removed from their list which they said they did. Only we are still getting SPAMmed this year. I had a discussion with them at the time and they did not see their selling a list of e-mail addresses for the wrong purpose as an issue. Has anybody had any dealings with them or can think of any way to make them change their ways? jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

2 1

[Fwd: Urgent message for all ANZ customers]
by Steve Withers 25 Mar '04

25 Mar '04

Now I'm getting phishing messages for the ANZ....

1 0

Largest MTU on your network
by Jonathan Brewer 24 Mar '04

24 Mar '04

Hi Folks, With all the talk of "Next Generation" networks and such, I wonder, what's the largest MTU allowed by your hardware? I have found some of my kit incapable of even the 9k "jumbograms" as belittled here: http://www.psc.edu/~mathis/MTU/ Who out there allows larger MTUs? Cheers, Jon Brewer

2 1

RE: [nznog] Legal log retention requirements?
by Donald Neal 23 Mar '04

23 Mar '04

> -----Original Message----- > From: > nznog-bounces+Donald.Neal=telecom.co.nz(a)list.waikato.ac.nz > [mailto:nznog-bounces+Donald.Neal=telecom.co.nz(a)list.waikato.a > c.nz] On Behalf Of Joe Abley > Sent: Wednesday, 24 March 2004 9:23 a.m. > To: James Riden > Cc: NZ Network Operators Group > Subject: Re: [nznog] Legal log retention requirements? [...] > The truly paranoid also won't use syslog :-) > > Has anybody seen an implementation of RFC3195 in the wild, by the way? > http://security.sdsc.edu/software/sdsc-syslog/ ? - Donald Neal Donald Neal | "I suspect most samba Technical Specialist | developers are already Operations Engineering | technically insane. Of course, Integration & Services Divn. | since many of them are Alcatel NZ Ltd | Australians you can't tell." All opinions mine only. | - Linus Torvalds ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

Jamie Baddley, BCL
by Dan Clark 23 Mar '04

23 Mar '04

Hi can someone from BCL please tell me who took over Jamie Baddley's position, or someone of equivilent position? Email to him appears undeliverable. sorry about posting directly to the list. Kind Regards Dan Clark Network Manager Scarfies.Net Ltd

1 0

Legal log retention requirements?
by Cameron Kerr 23 Mar '04

23 Mar '04

Hello all, I know that in some countries there are legal requirements for how long logs are meant to be held for. Are their such laws like that in NZ, and can anyone point me to any references? -- Cameron Kerr cameron.kerr(a)paradise.net.nz : http://nzgeeks.org/cameron/ Empowered by Perl!

8 7

RE: [nznog] Legal log retention requirements?
by Neil Gardner 23 Mar '04

23 Mar '04

Taking a different view entirely - if you ARE required to maintain logs of something that perhaps you aren't too keen to be secure or reliable, like, say, P2P transfers of commercial music.... Do you think that storing the logs on a ramdisk on a machine with no UPS, running win95a - would get you in any actual trouble? "Oh, sorry sir, we don't appear to be able to locate the logs for that user, but yes, I am CERTAIN we are logging that info - it must have been a glitch" -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345

1 0

Re: [nznog] Legal log retention requirements?
by Ewen McNeill 22 Mar '04

22 Mar '04

In message <20040323051819.GC21771(a)mithrak.localdomain>, Cameron Kerr writes: >Hello all, I know that in some countries there are legal requirements >for how long logs are meant to be held for. Are their such laws like >that in NZ, and can anyone point me to any references? The closest "generic" legislation that I'm aware of is the Electronic Transactions Act 2002 (you can see it at, eg, http://www.legislation.govt.nz/ -- a site which annoyingly doesn't seem to permit deep linking due to gratituous use of Javascript). While that Act was a 2002 one I believe that various portions of it are only just coming into effect this year. As others have pointed out, there are both operational and other legal reasons for retaining various types of records for longer which in some instances might extend to log files. And various overseas cases have shown that it's useful to have an established policy (and stick to it) for data retention -- being able to legitimately say "as a matter of policy we always delete those after 4 weeks" is much more useful than having to say "oh, umm, yeah we deleted those logs you want". Ewen

1 0

OT: Wanted - Token Ring NIC
by Matt Camp 21 Mar '04

21 Mar '04

Believe it or not, I have need for a token ring network card for a PC... unfortunately I can't even find any in the usual second hand crap places, or websites... and new ones are now nearly $300. So if anyone out there knows of one, please let me know. Any speed, PCI preferred but can deal with ISA... rj45 type preferable. --- Matt Camp

1 0