- NZNOG - lists.nznog.org

IPv6 in NZ?
by Juha Saarinen 15 Apr '03

15 Apr '03

Noticed on: http://snurl.com/1638 that Xtra "isn't considering moving to" IPv6 and also claims that "none of the ISPs are", presumably meaning the NZ ones. I know this is not correct, and that Joe Abley and Clear were at it back in '98 already, with the Uni of Canterbury. Where are things at with IPv6 in NZ now though? -- Juha Saarinen

8 8

RE: [nznog] IPv6 in NZ?
by Zanetti David 15 Apr '03

15 Apr '03

Jeremy Brooking wrote on 16 April 2003: > On Wed, 2003-04-16 at 11:56, Zanetti David wrote: > > Please let us not head down the path of handing out RFC1918 space to end > > users as if this is a real connection. That way leads to Much Pain with Less > > Than Friendly Protocols. Which seems to be an awful lot beyond CS weenies :) > > 36878 players and 3132 clans ranked on 3 servers in 7 days. > > I wouldnt exactly say 36 thousand paying customers are 'weenies' Never said they weren't paying customers. :) -- David Zanetti <david.zanetti(a)nzpost.co.nz> Desk: +64-4-496-4005 Mobile: +64-25-832-572 "Hope.. is a dangerous thing" This email with any attachments is confidential and may be subject to legal privilege. If it is not intended for you please reply immediately, destroy it and do not copy, disclose or use it in any way.

1 0

RE: [nznog] IPv6 in NZ?
by Zanetti David 15 Apr '03

15 Apr '03

Nathan Ward wrote on 16 April 2003: > In that case RFC1918 space can be used... else beware the whining gamer > who can't play CounterStrike with a v6 address. Please let us not head down the path of handing out RFC1918 space to end users as if this is a real connection. That way leads to Much Pain with Less Than Friendly Protocols. Which seems to be an awful lot beyond CS weenies :) The day an ISP hands me an address which is RFC1918 is the day I switch away. -- David Zanetti <david.zanetti(a)nzpost.co.nz> Desk: +64-4-496-4005 Mobile: +64-25-832-572 "Hope.. is a dangerous thing" This email with any attachments is confidential and may be subject to legal privilege. If it is not intended for you please reply immediately, destroy it and do not copy, disclose or use it in any way.

3 2

Re: [nznog] IPv6 in NZ?
by Nathan Ward 15 Apr '03

15 Apr '03

In that case RFC1918 space can be used... else beware the whining gamer who can't play CounterStrike with a v6 address. Nathan Ward Donald Neal wrote: >>-----Original Message----- >>From: Nathan Ward [mailto:nward(a)esphion.com] >>Sent: Wednesday, 16 April 2003 10:58 >>To: Jeremy Brooking >>Cc: NZNOG >>Subject: Re: [nznog] IPv6 in NZ? >> >> >>It is probably also worth noting that the article implies >>that v6 would >>fix the problem... >>This isn't really true as v4 will still have to be available.. >> >> > >But not to all of the people all of the time. The bulk of traffic from Xtra end users will presumably be going to Xtra's own boxes - email, proxy cache and games. > >- Donald Neal >(all opinions my own, etc.) > >------------------------------------------------------------------------------ >"This communication, including any attachments, is confidential. >If you are not the intended recipient, you should not read >it - please contact me immediately, destroy it, and do not >copy or use any part of this communication or disclose >anything about it. Thank you." > >------------------------------------------------------------------------------ > > > > >

1 0

RE: [nznog] tranzpeer leaking at APE
by Robert Purdy (DSL AK) 13 Apr '03

13 Apr '03

We have also had one of our main providers leaking the global routing table into our routers. Its time to heed Joes advice and ensure your max prefixes are set (or at least your filtering is correctly configured) Cheers Rob Purdy -----Original Message----- From: Joe Abley [mailto:jabley(a)automagic.org] Sent: Monday, 14 April 2003 5:14 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] tranzpeer leaking at APE 192.203.154.46 in AS 9790 seems to be leaking a global table to peers across the APE at the moment; if you aren't filtering (or don't have maximum-prefix limits set) and you were wondering where all your traffic is going, it might be going that way. _______________________________________________ Nznog mailing list Nznog(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

tranzpeer leaking at APE
by Joe Abley 13 Apr '03

13 Apr '03

192.203.154.46 in AS 9790 seems to be leaking a global table to peers across the APE at the moment; if you aren't filtering (or don't have maximum-prefix limits set) and you were wondering where all your traffic is going, it might be going that way.

1 0

ns iprange
by Edward Yardley 13 Apr '03

13 Apr '03

Could someone please point me in the direction of a New Zealand IP range list? Regards Edward ---------------------------------------------------------------------------- Edward Yardley Director Edan Technologies Limited www.edan.co.nz edward(a)edan.co.nz "Providing plain english technological solutions" ----------------------------------------------------------------------------

6 5

nz.* newsgroups updates.
by Simon Lyall 12 Apr '03

12 Apr '03

Can you please pass onto your local Usenet admin. I've just removed the following nz.* newsgroups nz.org.isocnz nz.biz.misc Also the following unmoderated newsgroups have been added over the past few months: nz.tech nz.soc.maori Please contact me if you have any further questions, want to arrange feeds etc. Simon. Wearing his "nz.* hierarchy Coordinator" hat. -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

1 0

Xtra makes appearance on slashdot.
by jfp 09 Apr '03

09 Apr '03

For those that missed it. http://yro.slashdot.org/yro/03/04/09/018236.shtml?tid=95 jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

1 0

RE: [nznog] vISP
by Seeby Woodhouse 08 Apr '03

08 Apr '03

Hi there Neo I notice that you are a HyperNet user. Orcon purchased HyperNet a while ago - so you're already a customer of ours. Currently Orcon is the largest VISP provider / ISP wholesaler in NZ We supply around 40 ISP's in NZ with VISP style services, and a couple in Australia. Talk to us and we can simply add VISP services onto your existing bill :-) (pretty much) The person you need to contact is Patrick Sharp (patrick(a)orcon.net.nz) he's our VISP account manager and he can tell you everything you need to know.. Cheers Seeby Woodhouse Orcon Internet Ltd - www.orcon.net.nz Ph +64-9-444-4414 Fax +64-9-444-4444 Mob +64-21-366-666 > -----Original Message----- > From: neo [mailto:neo(a)hyper.net.nz] > Sent: Sunday, 6 April 2003 6:58 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] vISP > > > Does anyone provide reasonable priced vISP type packages? > Providing your an honest entity and capable of providing a > quality, if not, standard service. > > neo > > _______________________________________________ > Nznog mailing list > Nznog(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

2 1

Netforum 2003
by Roger De Salis 08 Apr '03

08 Apr '03

Gentlefolks, Please find attached a brochure for Netforum 2003. Please note that the extremely strong ISP component will be augmented with additional stuff. The program will likely be moved around a little such that Joe Abley, Ben Martel and Barry Raveendren Greene will be interleaved in such a manner that those specifically interested in the ISP management and design stuff can see it all, rather than having to choose between competing talks. I look forward to meeting you all there... Rgds Roger De Salis -- \_ Roger De Salis rdesalis(a)fx.net.nz </' FX Networks +64 25 481 452 /) Wellington, New Zealand roger(a)desalis.gen.nz (/ ` DSL - the 56k modem technology of 2004

1 0

The New Zealand Network Operators' Group
by Donald Neal 08 Apr '03

08 Apr '03

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. NZNOG held a face to face gathering as part of the UniForum NZ conference in 2002, and is to do the same again from 10-12 July this year. See http://www.uniforum.org.nz/conference 2003/conference.html for details, but note that the NZNOG schedule there is well short of final. NZNOG doesn't hold other national face to face meetings, but see http://thursdaynightcurry.com/ if you live in or near Wellington or Auckland. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Auckland Peering Exchange See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. About This Mailing List This list has around 470 addresses subscribed, increasing by around twenty a month at present. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations, nor the administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrator remains happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins -- Donald Neal | piano - a musical Technical Specialist | shipping line. Network Delivery | [ Graeme Garden ] Telecom Corp. NZ Ltd | ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

1 0

Bogon update 60/8 and 223/8
by Rob Thomas 08 Apr '03

08 Apr '03

[ Apologies to those who have received this post in other fora. ] IANA has received 223/8 *from* APNIC, and allocated 60/8 *to* APNIC. Thus 223/8 reverts to RESERVED (bogon) status and 60/8 moves to ALLOCATED status. The numerous Team Cymru bogon projects have been updated to reflect the following IANA allocation on April 08, 2003: 60/8 Apr 03 APNIC 223/8 Apr 03 IANA - Reserved NOTE WELL: This post includes an allocation and a DE-ALLOCATION. Please be sure to adjust your filters accordingly. IANA allocations change over time, so please check regularly to ensure you have the latest filters. The use of the bogon route-server will automate these updates for you and your network (see below). We do announce updates to the bogon projects to the FIRST community, as well as on lists such as NANOG, isp-routing, isp-security, isp-bgp, cisco-nsp, and bogon-announce. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/index.html> A quick summary of the documents and projects that have been updated include the following: HTTP <http://www.cymru.com/Bogons/> The Bogon List The Text Bogon List, Unaggregated The Text Bogon List, Aggregated Secure BIND Template Secure IOS Template (Cisco) Secure BGP Template (Cisco) Secure JUNOS Template (Juniper) Secure JUNOS BGP Template (Juniper) Ingress Prefix Filter Templates, Loose and Strict (Cisco) Ingress Prefix Filter Template, Loose and Strict (Juniper) BGP <http://www.cymru.com/BGP/bogon-rs.html> Bogon route-server[*] RADb <http://www.radb.net/cgi-bin/radb/whois.cgi?obj=fltr-bogons> <http://www.radb.net/cgi-bin/radb/whois.cgi?obj=fltr-unallocated> <http://www.radb.net/cgi-bin/radb/whois.cgi?obj=fltr-martian> fltr-unallocated fltr-martian fltr-bogons DNS <http://www.cymru.com/Bogons/index.html#dns> Bogon (bogons.cymru.com) zone Monitoring <http://www.cymru.com/BGP/> Bogon prefix monitoring [*] All of the bogon peers have received the appropriate BGP prefix updates. Please feel free to contact Team Cymru with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. -- Team Cymru http://www.cymru.com/About/teamcymru.html ASSERT(coffee != empty);

1 0

RE: [nznog] vISP
by Steve Phillips 07 Apr '03

07 Apr '03

Before I start, I believe this to be on topic as it pertains to some that are on this list. While strictly speaking not a 'NOG' issue, using 'marketing' under the guise of 'it cuts down chatter' or 'needless questions' is IMHO not something that should make it onto a list that is here for technical discussion - sure, answer the post, but keep it technical. At 12:20 7/04/2003, Seeby Woodhouse wrote: >My apologies to Steve and others that may hold similar views that my >post was inappropriate. I am sure that "sorry" means "I wont do it again" - so I expect that this will be the case. >My resons for copying the list were: >- There are obviously people subscribed to the list interested in VISP >services that haven't yet heard of us, hence a reply to the person >concerned as well as the list will save future queries. "Orcon does it" - hmm, stopping future enquiries by sending people directly to you as the first stop ? sounds markedly like marketing to me. >- There are a lot of Orcon staff members subscribed to NZNOG, and >multiple people may have replied to this person if they hadn't seen a >post from me. I'm sure you are more than capable of contacting your own staff (BCC works wonders to an all-staff mailing list) and replying to the person enquiring without even touching this list. >I only post very occasionally, and although my post was promoting >Orcon's services, I felt that it was on topic. And it appears that anytime i see you 'post' something it is either defending Orcon after they screwed up or trying to market your company in the wrong forums. >Steve - I feel just as strongly as you about keeping posts relevant in >NZNOG, but if every time someone posts something that a competitor feels >is a 'plug' or of marginal value, they get publically dragged through >the coals for it, then: This was not marginal - it was against the reasons this list was set up. This is a technical list, not a "come buy off me" list. >A) people are going to be afraid to post articles that could be relevant >to NZNOG unless they are totally sure of relevance and ISP neutrality. And possibly this should be the case - the NOG is a group of operators, we post things that are of relevance to everyone, not simply random drivel that we _think_ might interest people. The people that are members of this list and _do_ actually post usually do so in a neutral way - with the occasional dig thrown in as this is a friendly group (as a whole) and we do know each other and their respective trades/affiliations. >B) The number of 'flame' posts critisizing people for their posts will >keep outnumbering the actual posts, which is just a waste of everyone's >time. (this is now the 4th post on this thread, when it could have >stopped at two, as only the first two were relevant) >In future, if you don't like my posts, then email me privately as I will >take your comments on board. This I thought long about - I _was_ going to e-mail you privately, but then no one else would get the benefit of understanding why they just got told off for posting their own random drivel as "but Seeby did it and got away with it x years ago !" And as for the 'flames out numbering the posts' - surely this could be a warning to someone that actually starts to post with a biased opinion on an apparently 'unbiased' list ? And as for taking comments on board' that's cool - since when have you actually _acted_ on these comments ? you used to do this same thing on usenet over and over despite people _publicly_ telling you not to. It appears that you simply don't listen. >Personally - I am happy to receive emails from other NZNOG members that >are of borderline relevance, because it all helps to fit together the >jigsaw of what is happening in the industry, and I want know what is >going on, and who we're up against, If I didn't like the sort of posts >that people are putting up, then I'd unsubscribe. That's great, we are happy that you are happy, however, I am rather unhappy that when i post responses to peoples queries such as this I try my hardest to ensure that I in no way bias the user toward the company I work for, If I really believe that we offer the only service of this nature then I will tend to reply in private or simply post a "please contact me off list" type post - it actually makes me quite angry when someone else puts forward resources that are hijacked by some marketing drone who feels that simply because the resource is there they have some innate right to pollute everyone's mailboxen with their marketing drivel. Now, some constructive criticism to take on board. When replying to this post, you could have mentioned the other ISP's that offer VISP's, you could also have mentioned that many other ISP's would be more than willing to help setup a VISP were they being paid for it (setup costs and consulting possibly) To mention a few ISP's VISP/E3/ICONZ Morenet Ihug Attica Orcon and possibly Paradise There are also a large number of ex ISP staff that know pretty much everything there is to know about setting up an ISP and would be more than willing to offer their services to assist and advise on setups/costs etc and could also be there to offer ongoing support should you require it. (reading archives will show some names up) These all offer differing plans for telehousing/co-location should you wish to own and operate your own servers and could assist in setups, licensing fee's, backboning current infrastructure and some can even lease equipment to you and/or give you virtual space on their own managed systems. They pretty much all have account managers that you can contact for things like this and you would probably find that they will bend over backwards to have you on board. As for reputations - just look about the Internet and ask people that you know that are in the internet business how the various companies conduct themselves - also, don't forget that you are able to ask for 'reference customers' from most organisations that will put you in contact with someone that will tell you what the overall experience has been like. Starting a VISP may seem 'easy' but there should be a lot of work involved before you choose which provider to go with, and don't be scared of doing a little ground work before you make the final decision. <end example> Seeby, you should know better, infact, I _know_ that you know better and just like to push the boundaries of what's acceptable - Someday I sincerely hope it comes back to kick you in the posterior -- Steve.

1 0

RE: [nznog] vISP
by Seeby Woodhouse 07 Apr '03

07 Apr '03

My apologies to Steve and others that may hold similar views that my post was inappropriate. My resons for copying the list were: - There are obviously people subscribed to the list interested in VISP services that haven't yet heard of us, hence a reply to the person concerned as well as the list will save future queries. - There are a lot of Orcon staff members subscribed to NZNOG, and multiple people may have replied to this person if they hadn't seen a post from me. I only post very occasionally, and although my post was promoting Orcon's services, I felt that it was on topic. Steve - I feel just as strongly as you about keeping posts relevant in NZNOG, but if every time someone posts something that a competitor feels is a 'plug' or of marginal value, they get publically dragged through the coals for it, then: A) people are going to be afraid to post articles that could be relevant to NZNOG unless they are totally sure of relevance and ISP neutrality. B) The number of 'flame' posts critisizing people for their posts will keep outnumbering the actual posts, which is just a waste of everyone's time. (this is now the 4th post on this thread, when it could have stopped at two, as only the first two were relevant) In future, if you don't like my posts, then email me privately as I will take your comments on board. Personally - I am happy to receive emails from other NZNOG members that are of borderline relevance, because it all helps to fit together the jigsaw of what is happening in the industry, and I want know what is going on, and who we're up against, If I didn't like the sort of posts that people are putting up, then I'd unsubscribe. Cheers Seeby Woodhouse Orcon Internet Ltd - www.orcon.net.nz Ph +64-9-444-4414 Fax +64-9-444-4444 Mob +64-21-366-666 > -----Original Message----- > From: Steve Phillips [mailto:steve(a)focb.co.nz] > Sent: Tuesday, 8 April 2003 6:57 a.m. > To: NZNOG Mailing List (NZNOG Mailing List) > Subject: RE: [nznog] vISP > > > Was it really necessary to reply to the list like this Seeby ? > > This sort of marketing thing should be kept off list - a simple "yes, > contact me off list for details" would have sufficed. > > (but then you already know this as you have been told > repeatedly about this > sort of thing in various forums over the past two to three > years _at least_) > > I guess this would mean that Orcon doesn't fit at least one > of his criteria > then, an ISP that SPAMs to sell its own services could hardly > be called > "reputable" > > > -- > Steve. > > At 20:07 6/04/2003, Seeby Woodhouse wrote: > >Hi there Neo > > > >I notice that you are a HyperNet user. > >Orcon purchased HyperNet a while ago - so you're already a > customer of > >ours. Currently Orcon is the largest VISP provider / ISP > wholesaler in > >NZ We supply around 40 ISP's in NZ with VISP style services, and a > >couple in Australia. > > > >Talk to us and we can simply add VISP services onto your > existing bill > >:-) > >(pretty much) > > > >The person you need to contact is Patrick Sharp > (patrick(a)orcon.net.nz) > >he's our VISP account manager and he can tell you everything > you need > >to know.. > > > >Cheers > > > >Seeby Woodhouse > >Orcon Internet Ltd - www.orcon.net.nz > >Ph +64-9-444-4414 Fax +64-9-444-4444 Mob +64-21-366-666 > > > > > > > -----Original Message----- > > > From: neo [mailto:neo(a)hyper.net.nz] > > > Sent: Sunday, 6 April 2003 6:58 p.m. > > > To: nznog(a)list.waikato.ac.nz > > > Subject: [nznog] vISP > > > > > > > > > Does anyone provide reasonable priced vISP type packages? > Providing > > > your an honest entity and capable of providing a quality, if not, > > > standard service. > > > > > > neo > > > > > > _______________________________________________ > > > Nznog mailing list > > > Nznog(a)list.waikato.ac.nz > > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > >_______________________________________________ > >Nznog mailing list > >Nznog(a)list.waikato.ac.nz > >http://list.waikato.ac.nz/mailman/listinfo/nznog > > -- > Steve Phillips > Professional Slacker > > -----BEGIN GEEK CODE BLOCK----- > Version: 3.1 > GIT/CS/CC d- s+:- a- C++++(---)$ UL++++$ UB++++$ US++++$ > UC++++$ P+ L+++$ > E- W-(+) N+$ w$ O V PS+ PE++ Y+ PGP++ t+@ 5+++ tv++ b+ G e+>* > h r--- z+ ------END GEEK CODE BLOCK------ To decode see > http://www.ebb.org/ungeek/ > > > _______________________________________________ > Nznog mailing list > Nznog(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

RE: [nznog] vISP
by Steve Phillips 07 Apr '03

07 Apr '03

Was it really necessary to reply to the list like this Seeby ? This sort of marketing thing should be kept off list - a simple "yes, contact me off list for details" would have sufficed. (but then you already know this as you have been told repeatedly about this sort of thing in various forums over the past two to three years _at least_) I guess this would mean that Orcon doesn't fit at least one of his criteria then, an ISP that SPAMs to sell its own services could hardly be called "reputable" -- Steve. At 20:07 6/04/2003, Seeby Woodhouse wrote: >Hi there Neo > >I notice that you are a HyperNet user. >Orcon purchased HyperNet a while ago - so you're already a customer of >ours. >Currently Orcon is the largest VISP provider / ISP wholesaler in NZ >We supply around 40 ISP's in NZ with VISP style services, and a couple >in Australia. > >Talk to us and we can simply add VISP services onto your existing bill >:-) >(pretty much) > >The person you need to contact is Patrick Sharp (patrick(a)orcon.net.nz) >he's our VISP account manager and he can tell you everything you need to >know.. > >Cheers > >Seeby Woodhouse >Orcon Internet Ltd - www.orcon.net.nz >Ph +64-9-444-4414 Fax +64-9-444-4444 Mob +64-21-366-666 > > > > -----Original Message----- > > From: neo [mailto:neo(a)hyper.net.nz] > > Sent: Sunday, 6 April 2003 6:58 p.m. > > To: nznog(a)list.waikato.ac.nz > > Subject: [nznog] vISP > > > > > > Does anyone provide reasonable priced vISP type packages? > > Providing your an honest entity and capable of providing a > > quality, if not, standard service. > > > > neo > > > > _______________________________________________ > > Nznog mailing list > > Nznog(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > >_______________________________________________ >Nznog mailing list >Nznog(a)list.waikato.ac.nz >http://list.waikato.ac.nz/mailman/listinfo/nznog -- Steve Phillips Professional Slacker -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT/CS/CC d- s+:- a- C++++(---)$ UL++++$ UB++++$ US++++$ UC++++$ P+ L+++$ E- W-(+) N+$ w$ O V PS+ PE++ Y+ PGP++ t+@ 5+++ tv++ b+ G e+>* h r--- z+ ------END GEEK CODE BLOCK------ To decode see http://www.ebb.org/ungeek/

1 0

New IANA IPv4 DE-allocations and bogon updates
by Rob Thomas 06 Apr '03

06 Apr '03

[ Apologies to those who have received this post in other fora. ] The numerous Team Cymru bogon projects have been updated to reflect the following IANA DE-allocations on April 05, 2003: 173/8 Apr 03 IANA - Reserved 174/8 Apr 03 IANA - Reserved 175/8 Apr 03 IANA - Reserved 176/8 Apr 03 IANA - Reserved 177/8 Apr 03 IANA - Reserved 178/8 Apr 03 IANA - Reserved 179/8 Apr 03 IANA - Reserved 180/8 Apr 03 IANA - Reserved 181/8 Apr 03 IANA - Reserved 182/8 Apr 03 IANA - Reserved 183/8 Apr 03 IANA - Reserved 184/8 Apr 03 IANA - Reserved 185/8 Apr 03 IANA - Reserved 186/8 Apr 03 IANA - Reserved 187/8 Apr 03 IANA - Reserved 189/8 Apr 03 IANA - Reserved 190/8 Apr 03 IANA - Reserved Note well: These are IP DE-allocations which increases the number of Bogon networks! Also note that 188/8 is NOT part of the list above. IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to the FIRST community, as well as on lists such as NANOG, isp-routing, isp-security, isp-bgp, cisco-nsp, and bogon-announce. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the master Bogon Reference Page can be found here: http://www.cymru.com/Bogons/index.html A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List The Text Bogon List, Unaggregated The Text Bogon List, Aggregated Secure BIND Template Secure IOS Template (Cisco) Secure BGP Template (Cisco) Secure JUNOS Template (Juniper) Secure JUNOS BGP Template (Juniper) Ingress Prefix Filter Templates, Loose and Strict (Cisco) Ingress Prefix Filter Template, Loose (Juniper) Ingress Prefix Filter Template, Strict (Juniper) BGP Bogon route-server * RADb fltr-unallocated fltr-martian fltr-bogons DNS Bogon (bogons.cymru.com) zone Monitoring Bogon prefix monitoring * All of the bogon peers have received the appropriate BGP prefix updates. Please feel free to contact Team Cymru with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. [http://www.cymru.com/About/teamcymru.html] -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

1 0

vISP
by neo 05 Apr '03

05 Apr '03

Does anyone provide reasonable priced vISP type packages? Providing your an honest entity and capable of providing a quality, if not, standard service. neo

1 0

New IANA IPv4 allocations and bogon updates
by Rob Thomas 03 Apr '03

03 Apr '03

Hi, NZNOG folks. [ Apologies to those who have received this post in other fora. ] The numerous Team Cymru bogon projects have been updated to reflect the following IANA allocation on April 04, 2003: 201/8 Apr 03 LACNIC (whois.lacnic.net) IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to the FIRST community, as well as on lists such as NANOG, isp-routing, isp-security, isp-bgp, cisco-nsp, and bogon-announce. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not blindly apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the master Bogon Reference Page can be found here: http://www.cymru.com/Bogons/index.html A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List The Text Bogon List, Unaggregated The Text Bogon List, Aggregated Secure BIND Template Secure IOS Template (Cisco) Secure BGP Template (Cisco) Secure JUNOS Template (Juniper) Secure JUNOS BGP Template (Juniper) Ingress Prefix Filter Templates, Loose and Strict (Cisco) Ingress Prefix Filter Template, Loose and Strict (Juniper) BGP Bogon route-server * RADb fltr-unallocated fltr-martian fltr-bogons DNS Bogon (bogons.cymru.com) zone Monitoring Bogon prefix monitoring * All of the bogon peers have received the appropriate BGP prefix updates. Please feel free to contact Team Cymru with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. [http://www.cymru.com/About/teamcymru.html] -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

1 0

Fwd: [public-consult] Geek.nz up for submissions
by Robert McDonald 01 Apr '03

01 Apr '03

FYI ---------- Forwarded Message ---------- Subject: [public-consult] Geek.nz up for submissions Date: Wed, 2 Apr 2003 13:25:23 +1200 From: "Gavin Lambert" <gavinl(a)compacsort.com> To: <public-consult(a)internetnz.net.nz> I'm a little surprised there hasn't been an official announcement on this list; or perhaps there has and I just missed it somehow. Anyway, for those like me that hadn't heard before, the proposal for geek.nz has now entered the "Request for Submissions" phase. More details can be found at: http://www.dnc.org.nz/story/30107-30-1.html _______________________________________________ public-consult mailing list public-consult(a)internetnz.net.nz http://listserver.internetnz.net.nz/mailman/listinfo/public-consult ------------------------------------------------------- -- -------------- Robert McDonald NZPages.Net Web Services Ph: 021 1770061 ICQ: 86984875 http://www.nzpages.net

1 0

NZ importer for reliawave WLAN ?
by Steve Wright 01 Apr '03

01 Apr '03

Can anyone point me to a NZ importer for Reliawave WLAN Gear ? vis, http://www.demarctech.com/products/reliawave-rwz/reliawave-rwz-200mw-prism2… TIA, Steve

1 0

FW: RFC 3514
by mark.harris＠ssc.govt.nz 01 Apr '03

01 Apr '03

I'm surprised nobody posted this yesterday > -----Original Message----- > > You may like to check out this excellent new RFC: > > ftp://ftp.rfc-editor.org/in-notes/rfc3514.txt > > Mark Harris > Senior Advisor, State Services Commission > Tel: 64 4 495 2844 >

1 0

RE: CERT Advisory CA-2003-12 Buffer Overflow in Sendmail
by Tony Wicks 31 Mar '03

31 Mar '03

Hi all, the Redhat mirror server ftp.wicks.co.nz ( ftp.isl.net.nz ) now has the Sendmail updates. Infact it just synced up the updates for Redhat 9.0, which is a bit ironic as 9.0 is not even released yet. > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > > CERT Advisory CA-2003-12 Buffer Overflow in Sendmail > > > > Original release date: March 29, 2003 > > Last revised: > > Source: CERT/CC > > > > A complete revision history can be found at the end of this file. > > > > Systems Affected > > > > * Sendmail Pro (all versions) > > * Sendmail Switch 2.1 prior to 2.1.6 > > * Sendmail Switch 2.2 prior to 2.2.6 > > * Sendmail Switch 3.0 prior to 3.0.4 > > * Sendmail for NT 2.X prior to 2.6.3 > > * Sendmail for NT 3.0 prior to 3.0.4 > > * Systems running open-source sendmail versions prior > to 8.12.9, > > including UNIX and Linux systems > > > > Overview > > > > There is a vulnerability in sendmail that can be exploited > to cause a > > denial-of-service condition and could allow a remote > attacker to > > execute arbitrary code with the privileges of the > sendmail daemon, > > typically root. > > > > I. Description > > > > There is a remotely exploitable vulnerability in sendmail > that could > > allow an attacker to gain control of a vulnerable > sendmail server. > > Address parsing code in sendmail does not adequately check > the length > > of email addresses. An email message with a specially > crafted address > > could trigger a stack overflow. This vulnerability was > discovered by > > Michal Zalewski. > > > > This vulnerability is different than the one described in CA-2003-07. > > > > Most organizations have a variety of mail transfer agents > (MTAs) at > > various locations within their network, with at least one > exposed to > > the Internet. Since sendmail is the most popular > MTA, most > > medium-sized to large organizations are likely to have at > least one > > vulnerable sendmail server. In addition, many UNIX > and Linux > > workstations provide a sendmail implementation that is > enabled and > > running by default. > > > > This vulnerability is message-oriented as > opposed to > > connection-oriented. That means that the vulnerability is > triggered by > > the contents of a specially-crafted email message > rather than by > > lower-level network traffic. This is important because > an MTA that > > does not contain the vulnerability will pass the > malicious message > > along to other MTAs that may be protected at the network > level. In > > other words, vulnerable sendmail servers on the interior of > a network > > are still at risk, even if the site's border MTA uses > software other > > than sendmail. Also, messages capable of exploiting this > vulnerability > > may pass undetected through many common packet filters or firewalls. > > > > This vulnerability has been successfully exploited to > cause a > > denial-of-service condition in a laboratory > environment. It is > > possible that this vulnerability could be used to execute > code on some > > vulnerable systems. > > > > The CERT/CC is tracking this issue as VU#897604. This > reference number > > corresponds to CVE candidate CAN-2003-0161. > > > > For more information, please see > > > > http://www.sendmail.org > > http://www.sendmail.org/8.12.9.html > > http://www.sendmail.com/security/ > > > > For the latest information about this vulnerability, > including the > > most recent vendor information, please see > > > > http://www.kb.cert.org/vuls/id/897604 > > > > This vulnerability is distinct from VU#398025. > > > > II. Impact > > > > Successful exploitation of this vulnerability may > cause a > > denial-of-service condition or allow an attacker to > gain the > > privileges of the sendmail daemon, typically root. Even > vulnerable > > sendmail servers on the interior of a given network may > be at risk > > since the vulnerability is triggered by the contents of a > malicious > > email message. > > > > III. Solution > > > > Apply a patch from Sendmail, Inc. > > > > Sendmail has produced patches for versions 8.9, 8.10, 8.11, > and 8.12. > > However, the vulnerability also exists in earlier > versions of the > > code; therefore, site administrators using an earlier > version are > > encouraged to upgrade to 8.12.9. These patches, and a > signature file, > > are located at > > > > ftp://ftp.sendmail.org/pub/sendmail/prescan.tar.gz.uu > > ftp://ftp.sendmail.org/pub/sendmail/prescan.tar.gz.uu.asc > > > > Apply a patch from your vendor > > > > Many vendors include vulnerable sendmail servers as > part of their > > software distributions. We have notified vendors of this > vulnerability > > and recorded the statements they provided in Appendix > A of this > > advisory. The most recent vendor information can be > found in the > > systems affected section of VU#897604. > > > > Enable the RunAsUser option > > > > There is no known workaround for this vulnerability. Until a > patch can > > be applied, you may wish to set the RunAsUser option to > reduce the > > impact of this vulnerability. As a good general practice, > the CERT/CC > > recommends limiting the privileges of an application > or service > > whenever possible. > > > > Appendix A. - Vendor Information > > > > This appendix contains information provided by vendors > for this > > advisory. As vendors report new information to the > CERT/CC, we will > > update this section and note the changes in our revision > history. If a > > particular vendor is not listed below, we have not > received their > > comments. > > > > Red Hat Inc. > > > > Red Hat distributes sendmail in all Red Hat Linux > distributions. We > > are currently [Mar29] working on producing errata packages > to correct > > this issue, when complete these will be available > along with our > > advisory at the URL below. At the same time users of > the Red Hat > > Network will be able to update their systems using the > 'up2date' tool. > > > > Red Hat Linux: > > > > http://rhn.redhat.com/errata/RHSA-2003-120.html > > > > Red Hat Enterprise Linux: > > > > http://rhn.redhat.com/errata/RHSA-2003-121.html > > > > The Sendmail Consortium > > > > The Sendmail Consortium recommends that sites upgrade > to 8.12.9 > > whenever possible. Alternatively, patches are available for > 8.9, 8.10, > > 8.11, and 8.12 on http://www.sendmail.org/. > > > > Sendmail, Inc. > > > > All commercial releases including Sendmail Switch, > Sendmail Advanced > > Message Server (which includes the Sendmail Switch MTA), > Sendmail for > > NT, and Sendmail Pro are affected by this issue. Patch > information is > > available at http://www.sendmail.com/security/. > > _________________________________________________________________ > > > > Our thanks to Eric Allman, Claus Assmann, Greg > Shapiro, and Dave > > Anderson of Sendmail for reporting this problem and > for their > > assistance in coordinating the response to this problem. We > also thank > > Michal Zalewski for discovering this vulnerability. > > _________________________________________________________________ > > > > Authors: Art Manion and Shawn V. Hernan > > > ______________________________________________________________________ > > > > This document is available from: > > http://www.cert.org/advisories/CA-2003-12.html > > > ______________________________________________________________________ > > > > CERT/CC Contact Information > > > > Email: cert(a)cert.org > > Phone: +1 412-268-7090 (24-hour hotline) > > Fax: +1 412-268-6989 > > Postal address: > > CERT Coordination Center > > Software Engineering Institute > > Carnegie Mellon University > > Pittsburgh PA 15213-3890 > > U.S.A. > > > > CERT/CC personnel answer the hotline 08:00-17:00 > EST(GMT-5) / > > EDT(GMT-4) Monday through Friday; they are on call for > emergencies > > during other hours, on U.S. holidays, and on weekends. > > > > Using encryption > > > > We strongly urge you to encrypt sensitive information sent > by email. > > Our public PGP key is available from > > http://www.cert.org/CERT_PGP.key > > > > If you prefer to use DES, please call the CERT > hotline for more > > information. > > > > Getting security information > > > > CERT publications and other security information are > available from > > our web site > > http://www.cert.org/ > > > > To subscribe to the CERT mailing list for advisories and > bulletins, > > send email to majordomo(a)cert.org. Please include in the > body of your > > message > > > > subscribe cert-advisory > > > > * "CERT" and "CERT Coordination Center" are registered > in the U.S. > > Patent and Trademark Office. > > > ______________________________________________________________________ > > > > NO WARRANTY > > Any material furnished by Carnegie Mellon University and > the Software > > Engineering Institute is furnished on an "as is" > basis. Carnegie > > Mellon University makes no warranties of any kind, either > expressed or > > implied as to any matter including, but not limited to, > warranty of > > fitness for a particular purpose or merchantability, > exclusivity or > > results obtained from use of the material. Carnegie Mellon > University > > does not make any warranty of any kind with respect to > freedom from > > patent, trademark, or copyright infringement. > > _________________________________________________________________ > > > > Conditions for use, disclaimers, and sponsorship information > > > > Copyright 2003 Carnegie Mellon University. > > Revision History > > > > March 29,2003: Initial release > > > > -----BEGIN PGP SIGNATURE----- > > Version: PGP 6.5.8 > > > > iQCVAwUBPoX5XGjtSoHZUTs5AQHvjgQAqTy3GQnszPHtUnUBX7VDM4NKSesFHHvC > > 2JmDAMPYmCO2b32xvWDmMcWdPhOBmJLB2o6zv7mRWX1K0B1GN5TBErIii6dxTaDD > > OAUNjirMGdTr+WnxIjdk0gj57JbOU6ZdHHcAijG5SE/dZq4sMrOCGEAMJTVNDzYp > > BtHbFwDeLEY= > > =dgBI > > -----END PGP SIGNATURE----- > >

1 0

Moderation etc.
by Donald Neal 30 Mar '03

30 Mar '03

NZNOG People, I'd like to make a number of comments about events on this list over the last couple of days. This is partly because I simply don't have the time to respond individually to all of the emails sent to me. Sorry. But first, a brief chronology of some of this morning's events: 9:03 List notified that mastermithras(a)yahoo.co.nz has been unsubscribed 10:11 List notified that phuct up(a)msn.com has been unsubscribed 10:19 Abusive email with forged From address posted to the list 10:31 "^god" with address god(a)hackers.net.nz subscribes to the list 10:39 Address god(a)hackers.net.nz unsubscribed by administrator 11:00 Notice from Xtra received that originator of abusive email has been removed from Xtra's network. All of which makes sense to me, but it's taken us some time to get here. The current AUP process is written to allow a certain amount of stupidity to take place before people get unsubscribed. For myself, I'd prefer to keep it that way. Complaining to the List ----------------------- Over the last couple of days, we've seen a considerable number of postings to the list complaining about AUP breaches. I don't mind people emailing me directly, and I certainly don't mind people emailing the senders of such email directly either, but please don't send this sort of thing to the list. It does not seem to influence people who are being intentionally silly, but does swell the volume of non-operational postings. Moderation ---------- There have been a number of quite understandable suggestions of late that the list should become moderated, if only for a time. I remain unwilling to do this. This is partly to ensure that relevant operational material can be disseminated quickly. It is also because it doesn't look to me possible to square moderation in any circumstances with continuing denial that the administrator is responsible for the content of the list or its archive. Administration Head Count ------------------------- The existing process for dealing with idiocy in varying degrees relies on the issuing of warnings. Faster issuing of warnings would result in faster unsubscription of the determinedly anti-social. One way to achieve that would be to move from having a single list administrator to having more than one. Which raises the twin questions of whether there'd be any volunteers for such a role, and "In whom do the people trust?" - Donald Neal List Administrator -- Donald Neal | piano - a musical Technical Specialist | shipping line. Network Delivery | [ Graeme Garden ] Telecom Corp. NZ Ltd | ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

17 22

Peer moderation
by Michael Hallager 28 Mar '03

28 Mar '03

Hello all, I do not trust peer moderation or a pair review process to get on this list. There is currently a issue going on between two respectable ISP's that has culminated in mail blocking - A sad state of affiars for the NZ Internet as I thought we got over this nonsense last century. (Remember Voyager vs. Xtra?). I will not name these two ISPs at this point as I respect them both and I believe that my mail is able to get through although I havn't checked. To the two ISP's involved I say - You have both been around for long enough and you are both of a big enough size to sort this out in an amicable fastion and set a good example for newer and/or smaller players. I suggest that your relevant management peoples gets together and sorts the issues out. (That is, if you havn't already). I do not run an ISP (Although I work part time for one in a technical role). I run a business selling used high end networking equipment and setting up Linux systems. I am a one man band here trying to make an honest living. As I have the skills and inclination, I run all my own servers (Mail, web etc). My network is used purely by myself and I have *never* caused anyone any trouble or had any complaints about how my system is operated. Yet, despite being an innocent third party, I am caught out by what is going on higher up in the scheme of things. C'mon you two, what is the use of a knowledge economy, internet yada yada etc, if this sort of games are still going on? No wonder ISP's have the reputation of used car dealers. (Many of whom have actually cleaned up their act now). No wonder there is call for ISP's to be "licensed". http://computerworld.co.nz/webhome.nsf/UNID/DF3A054F76F9698ECC256CE10008E9D… Best regards to all, Michael Hallager Comsolve Networks (NZ) Limited Networkstuff Limited

3 2