- NZNOG - lists.nznog.org

Re: WIX Route Reflectors
by James Tyson 21 Aug '00

21 Aug '00

> So, let me get this straight. He gets troubles when he receives routes > from you directly, and then again via the route server? Yeah. Turns out he's running some horrible system based on gated. > Which means that the other 40 odd peers of the route servers will no > longer have direct paths to xtra's networks (of that 40, maybe half are on > private ASN, so can't easily peer directly with xtra), and vice versa. > I'm happy to not send updates we receive from xtra on to users xtra peer > directly with, but I need you to tell me who those peers are. If you > don't want us to send Xtra updates Plain, I'll knock 'em on the head > immediately. Personally, I'd hope that was a better solution that just > dropping the route server peering completely (it's what we do for > Paradise and Netlink, for example). What we have been doing in the past (and what we are doing now, for that matter) is to add our routes into the mix, but not learn anything from the route reflectors. > Thats going to be a tad pointless, when you've dropped your peer, and > Matthew currently has his peering down! Can you cut and paste some > examples of where the route server is doing something wrong? 'praps you > could give me a call on 025 XXX XXX, or let me know your number, and I'll > call you. Yeah, I realised that just after I sent you the last mail. However, allowing routes from the WIX route reflectors to enter our network raises trust issues. The problem being, I know of you, Mr Blake, but I'm afraid I don't know you (god I love that line, thank's Chris Roberts for giving us the wing commander movie!). I would rather under-utilise our WIX connection by using only explicit domestic peering with other large peers, whom I know how to contact, than use route reflectors, both of which are under a completely different routing domain, and can potentially have conflicting policies with mine. This is not, however, a personal attack on yourself, your administrative abilities, or your network, but merely a statement of fact. I cannot allow routes from unknown and untrusted sources to be injected into my AS unless stringent measures are undertaken on your part to ensure the sanity of said advertisements. I will however allow our network to learn routes from you if you are able to give documented evidence that every route is under the strict control of the WIX. In an effort to help, I am willing to send you a prefix-list of Xtra's networks. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

ICMP broadcast amplifier list (fwd)
by Alan Brown 21 Aug '00

21 Aug '00

For those not on Bugtraq. ---------- Forwarded message ---------- Date: Mon, 21 Aug 2000 18:40:39 -0700 From: Troy Davis <troy(a)NACK.NET> To: BUGTRAQ(a)SECURITYFOCUS.COM Subject: ICMP broadcast amplifier list netscan.org has rechecked all routed /24s for ICMP directed broadcasts (smurf amplification) and made public the complete list of misconfigured networks. The probes ran from 8/18-8/21. The results are queryable and downloadable at http://netscan.org Cheers, Troy --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

None
by None 17 Aug '00

17 Aug '00

JAA25389 for <nznog(a)list.waikato.ac.nz>; Fri, 18 Aug 2000 09:55:31 +1200 Received: from localhost [127.0.0.1]=20 by uber.samizdat.co.nz with esmtp (Exim 3.12 #1 (Debian)) id 13PXd8-0007OO-00; Fri, 18 Aug 2000 09:55:18 +1200 Date: Fri, 18 Aug 2000 09:55:18 +1200 (NZST) From: James Tyson <james(a)samizdat.co.nz> Sender: eugene(a)uber.samizdat.co.nz To: David Zanetti <dave2(a)earthling.net> cc: nznog(a)list.waikato.ac.nz Subject: Re: Bizzareness and Oddity with IOS In-Reply-To: <Pine.LNX.4.10.10008180939580.13987-100000(a)wakko.wetstring.net= > Message-ID: <Pine.LNX.4.21.0008180953350.28229-100000(a)uber.samizdat.co.nz> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=3DUS-ASCII > Hmmm.. very odd, 12.0(4)T with IP/FW leaked memory like there was no > tomorrow on our 3640 :) 12.0(7)T with the same features doesn't leak > memory (that I've noticed) and doesn't drop static routes either.. >=20 > Although they are different hardware platforms, so perhaps that'll make > the difference. I will obtain said image and try that :) We have found pretty much every IOS 12 release up until 12.0([10..11])S has been either unstable, leaked memory, or had some bug with one of the interface types we are running. That's on our 7500's though. Our 7200 VXR is running 11S and is as happy as larry, and has been for some time. James Tyson --- Samizdat New Media Solutions =20 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Weird BGP community stuff
by James Tyson 17 Aug '00

17 Aug '00

We have a router in Christchurch that seems to be sending community attributes to an EBGP peer, even though the neighbor statements dont contain the send-community argument. Does anyone know whats causing it? The router is running version 12.0(7)S1 on a 7500 series chasis. Also, on a somewhat related note, all domestic routes learned over WIX are being tagged with the community 9325:100, which is all cool. Our wix router does this: IPNWN1-B1#sh ip bgp 202.10.80.0 BGP routing table entry for 202.10.80.0/20, version 457621 Paths: (1 available, best #1, table Default-IP-Routing-Table) Advertised to non peer-group peers: 202.27.158.248 202.27.176.3 202.27.176.6 202.27.176.7 202.27.176.12 203.96.111.254 9718 202.7.0.78 from 202.7.0.78 (202.10.65.24) Origin IGP, metric 0, localpref 100, valid, external, best Community: 9325:100 The christchurch router says this: IPNCH1-B6#sh ip bgp 202.10.80.0 BGP routing table entry for 202.10.80.0/20, version 82178 Paths: (1 available, best #1) Advertised to non peer-group peers: 202.36.174.82 9718 202.7.0.78 (metric 179712) from 202.27.176.4 (202.27.185.135) Origin IGP, metric 0, localpref 100, valid, internal, best Community: 611123300 ^^^^^^^^^ - what is this?!?!? shouldnt it be 9325:100?? Any ideas anyone has would be helpful. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Weird BGP community stuff
by Ben Martel 17 Aug '00

17 Aug '00

James, Your 611123300 wierdo is actually just another way of representing 9325:100. It is really two sixteen bit values added together eg. 9325*65536 = 611123200 + 100 = 611123300 ( your answer) To change this representation you need to enter the IOS command: ip bgp-community new-format Cheers Ben > -----Original Message----- > From: James Tyson [mailto:james(a)samizdat.co.nz] > Sent: Friday, 18 August 2000 4:18 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: Weird BGP community stuff > > > > We have a router in Christchurch that seems to be sending > community > attributes to an EBGP peer, even though the neighbor > statements dont > contain the send-community argument. Does anyone know whats > causing it? > > The router is running version 12.0(7)S1 on a 7500 series chasis. > > Also, on a somewhat related note, all domestic routes learned > over WIX are > being tagged with the community 9325:100, which is all cool. Our wix > router does this: > > IPNWN1-B1#sh ip bgp 202.10.80.0 > BGP routing table entry for 202.10.80.0/20, version 457621 > Paths: (1 available, best #1, table Default-IP-Routing-Table) > Advertised to non peer-group peers: > 202.27.158.248 202.27.176.3 202.27.176.6 202.27.176.7 202.27.176.12 > 203.96.111.254 > 9718 > 202.7.0.78 from 202.7.0.78 (202.10.65.24) > Origin IGP, metric 0, localpref 100, valid, external, best > Community: 9325:100 > > The christchurch router says this: > > IPNCH1-B6#sh ip bgp 202.10.80.0 > BGP routing table entry for 202.10.80.0/20, version 82178 > Paths: (1 available, best #1) > Advertised to non peer-group peers: > 202.36.174.82 > 9718 > 202.7.0.78 (metric 179712) from 202.27.176.4 (202.27.185.135) > Origin IGP, metric 0, localpref 100, valid, internal, best > Community: 611123300 > ^^^^^^^^^ - what is this?!?!? shouldnt it be > 9325:100?? > > Any ideas anyone has would be helpful. > > James Tyson --- > Samizdat New Media Solutions > > > --------- > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog > --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Bizzareness and Oddity with IOS
by Donald Neal 17 Aug '00

17 Aug '00

>>> "Sid Jones" <sjones(a)netlink.net.nz> 18/August/2000 11:39am >>> >Well I'm going to ask... why doesn't it just work? For a full explanation, see http://www.ubersoft.net/d/20000804.html . - Donald Neal :{)* --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Bizzareness and Oddity with IOS
by Scott, Arron 17 Aug '00

17 Aug '00

Not particularly odd to me, the 12.0T stream has various "new tchnologies" and "your milage may vary". Past VERY INTENSE relationships I have had with a number of 12.0T releases indicated that various hardware platforms behave very differently with each minor-release, and the activation of one feature or another also directly affects the behaviour. The 12.1 stream includes all the features of 12.0T, and is stabilising out well, you may want to look at trialling a release in there soon, if 12.04T gives you no luck. Arron Scott Systems Engineer Cisco Systems -----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of David Zanetti Sent: Thursday, 17 August 2000 14:46 To: nznog(a)list.waikato.ac.nz Subject: Re: Bizzareness and Oddity with IOS On Thu, 17 Aug 2000, Russell Sharpe wrote: > Based on your description of required features ie BGP on a firewall > feature set, you will need the following: > > c7200-ios-mz.12.0-4.T (32/16) <<...>> S72CH-12.0.4T or S72CH-12.0.4T=, > which is IP/Firewall. Hmmm.. very odd, 12.0(4)T with IP/FW leaked memory like there was no tomorrow on our 3640 :) 12.0(7)T with the same features doesn't leak memory (that I've noticed) and doesn't drop static routes either.. Although they are different hardware platforms, so perhaps that'll make the difference. I will obtain said image and try that :) -- David Zanetti <dave2(a)earthling.net> | Crowd: "Someone else, someone else!" Moderator, nz.politics.announce | Homer: "I'm someone else!" #include <geek/unix.h> | -- The Simpsons --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Bizzareness and Oddity with IOS
by Donald Neal 17 Aug '00

17 Aug '00

James Tyson wrote: > Hmmm.. very odd, 12.0(4)T with IP/FW leaked memory like there was no > tomorrow on our 3640 :) 12.0(7)T with the same features doesn't leak > memory (that I've noticed) and doesn't drop static routes either.. > > Although they are different hardware platforms, so perhaps that'll make > the difference. I will obtain said image and try that :) We have found pretty much every IOS 12 release up until 12.0([10..11])S has been either unstable, leaked memory, or had some bug with one of the interface types we are running. That's on our 7500's though. Our 7200 VXR is running 11S and is as happy as larry, and has been for some time. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

BOUNCE nznog@list.waikato.ac.nz: Admin request of type/\buns\w*b/i at line 9 -Forwarded
by Donald Neal 17 Aug '00

17 Aug '00

1 0

Bizzareness and Oddity with IOS
by David Zanetti 17 Aug '00

17 Aug '00

Have a Cisco 7206 (not the newer VXR model, the older one) and attempted last night to upgrade IOS on it from 11.2(3) to 12.0(7)T. Seemed to run okay (nothing on boot jumped out and said "broken") and pinged various bits of the network, with no problems. Left and went home :) Got to work this morning to discover "Internet broken". (Eventually) noticed that the 7206 had dropped two static routes, one of which was the default route. Hmmm.. Add them back, and a few minutes later they disappear again. Hmmmm.. Perhaps it's something odd comming from the BGP sessions with the WIX route server? Drop BGP, it still forgets the static routes after a few minutes. At this point we decided to back out of the IOS upgrade, and rebooted with 11.2(3), which has been running fine since. We do have a 3640 with the same feature set/revision, and it doesn't exhibit this problem. Suggestions? Give up on 12.0(7)T and pick a later release? Give up on the 12.0 tree altogether? Give up on IOS and Cisco altogether? :)) -- David Zanetti <dave2(a)earthling.net> | Crowd: "Someone else, someone else!" Moderator, nz.politics.announce | Homer: "I'm someone else!" #include <geek/unix.h> | -- The Simpsons --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

WIX Route Reflectors
by James Tyson 17 Aug '00

17 Aug '00

Just so that everyone knows; I have disabled Xtra's peering sessions with the WIX route reflectors and am falling back to direct peering arrangements with other ISP's and networks. If you need to ask why, then take a look at some of the AS-path's that thing is propagating. If you do not have a direct peering arrangement with Xtra over the WIX then I suggest that you mail me at james.tyson(a)team.xtra.co.nz, and do it fast, because I am leaving next friday. Cheers. James Tyson --- Samizdat New Media Solutions --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Open spam relay at Port of Nelson
by Alan Brown 15 Aug '00

15 Aug '00

---------- Forwarded message ---------- Return-Path: <chops30(a)earthlink.net> Delivered-To: <aroberts(a)manawatu.gen.nz> Received: from gateway.pnl.co.nz (smtp.pnl.co.nz [210.54.242.145]) by mailhost.manawatu.net.nz (8.10.1/8.9.3) with ESMTP id e7G3SW530095 for <aroberts(a)manawatu.gen.nz>; Wed, 16 Aug 2000 15:28:32 +1200 Received: from sdn-ar-001tnknoxP108.dialsprint.net_[206.133.83.68] (sdn-ar-001tnknoxP108.dialsprint.net [206.133.83.68]) by gateway.pnl.co.nz (8.9.3/8.8.7) with SMTP id OAA20790; Wed, 16 Aug 2000 14:58:23 +1200 From: chops30(a)earthlink.net Received: from 206.133.83.68 by sdn-ar-001tnknoxP108.dialsprint.net with ESMTP; Tue, 15 Aug 2000 22:57:18 -0400 Message-ID: <00003536566a$000005ed$00004503(a)206.133.83.68> To: <Undisclosed.Recipients(a)gateway.pnl.co.nz> Subject: Gain Financial Success Today!! 17667 Date: Tue, 15 Aug 2000 22:57:08 -0400 X-Priority: 3 X-MSMail-Priority: Normal <HTML> FOLLOW ME TO FINANCIAL FREEDOM!! I Am looking for people with good work ethic and extrordinary desire to earn at least $10,000 per month working from home! NO SPECIAL SKILLS OR EXPERIENCE REQUIRED We will give you all the training and personal support you will need to ensure your success! This LEGITIMATE HOME-BASED INCOME OPPORTUNITY can put you back in control of your time,your finances,and your life! If you've tried other opportunities in the past that have failed to live up their promises, THIS IS DIFFERENT THEN ANYTHING ELSE YOU'VE SEEN! THIS IS NOT A GET RICH QUICK SCHEME! YOUR FINANCIAL PAST DOES NOT HAVE TO BE YOUR FINANCIAL FUTURE! CALL ONLY IF YOU ARE SERIOUS! 1-800-345-9708 DONT GO TO SLEEP WITHOUT LISTENING TO THIS! "ALL our dreams can come true- if we have the courage to persue them" -Walt Disney Please Leave Your Name And Number And Best Time To Call DO NOT RESPOND BY EMAIL ------------------------------------------------------------------------ This message is sent in compliance of the new email bill section 301.PerSection 301, Paragraph (a)(2)(C) of S. 1618. We will comply with all removal requests.Just Put Remove mailto:bagboy(a)burmeses.net ------------------------------------------------------------------------</HTML> --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

spam relay at actrix: MISC: There's a Fungus (Spammer didn't rhyme) Among Us (fwd)
by Alan Brown 12 Aug '00

12 Aug '00

---------- Forwarded message ---------- Date: Sat, 12 Aug 2000 19:37:10 -0400 From: Up Yours Spammer <up.yours.spammer(a)MINDSPRING.COM> Subject: MISC: There's a Fungus (Spammer didn't rhyme) Among Us My Up.Yours.Spammer(a)mindspring.com address was created solely for receiving postings from SPAM-L and has never been used publicly anywhere else. Locate the slime bag who sent this and you'll locate a Spammer on this list who's snagging addresses. Insert applicable rule re: disclaimer at the bottom. Lart sent to @home for remove address. X-Persona: <Up Yours Spammer> Return-Path: <sea(a)home.com> Received: from angel.actrix.co.nz ([203.96.16.105]) by niles.mail.mindspring.net (Mindspring Mail Service) with ESMTP id spb8mp.bth.37kbi1o Sat, 12 Aug 2000 15:17:36 -0400 (EDT) Received: from ROTWILER1J - 38.29.28.108 by angel.actrix.co.nz with Microsoft SMTPSVC(5.5.1774.114.11); Sun, 13 Aug 2000 07:17:13 +1200 To: sea(a)home.com From: sea(a)home.com Comments: Authenticated sender is <sea(a)home.com> Reply-to: sea(a)home.com Subject: Make $1,000 a day with E-Marketing Message-Id: <200008123477ZAA48793(a)post.96.23.127> Date: 13 Aug 2000 07:17:34 +1200 <snipped> (Offer expires 8-14-00) http://www.smtm1.com http://www.nightauto.com ________________________________________________________________ ********************* This is a 100% opt-in email list. You are recieving this message because you have either subscribed to our newsletter or indicated that you want to recieve this type of email on another website. If you feel that you have recieved this message in error, please send an email to: sea(a)home.com with "Remove" as your subject. We immediately honor all requests to be removed from this list. This message is being sent to you in compliance with the Federal legislation for commercial e-mail (H.R.4176 - Section 101, Paragraph (e)(1)(a)) and Bill s.1618 Title III passed by the 105th US Congress. ********************* --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Fwd: Re: surge in spam email (fwd)
by Andy Linton 10 Aug '00

10 Aug '00

Well I found this a reasonably rational description of the problem and amusing at the same time so I thought I'd share it with you all..... >X-Sieve: cmu-sieve 1.3 >Delivered-To: nanog-outgoing(a)merit.edu >X-Authentication-Warning: world.std.com: bzs set sender to >bzs(a)world.std.com using -f >From: Barry Shein <bzs(a)world.std.com> >Date: Thu, 10 Aug 2000 15:59:25 -0400 (EDT) >To: woods(a)weird.com (Greg A. Woods) >Cc: nanog(a)merit.edu >Subject: Re: surge in spam email (fwd) >X-Mailer: VM 6.75 under Emacs 20.5.2 >Sender: owner-nanog(a)merit.edu >X-Loop: nanog > > > > >I think if *everyone* stood up at once and declared that open relays > >were bad for us all then there wouldn't be too much trouble because > >there'd be nowhere for frustrated customers to jump to! ;-) > >Ya know, Greg, if everyone in China jumped off a 12 inch stool >simultaneously it'd cause a tidal wave which would sweep over the >entire United States. > >Or maybe not. > >But it's not worth losing sleep over. > >I'm not really trying to be too sarcastic, but I think your world-view >of what the net has become is anachronistic and the idea that some >project like ORBS is going to harass every open-relay in the world, >every workstation capable of forwarding mail for example, into >behaving better is at this point in time kinda like the Chinese >footstool tidal wave (is that from Dr Strangelove? whatever.) > >No, we need a legislative approach, with some technical support to >help increase the likelihood that spammers who break the law will get >caught. But first it has to be illegal, or else it's all for naught. > >Put it this way: I consider my house locked up even if I do have glass >windows, and even if glass is rather easy to break. > >If it were legal for a person of ill intent to break the glass to get >into my house to rob me the first approach would not in my mind be to >board up all the glass unless I really lived in some mad max anarchy. > >I'd first want to see it made illegal to break into my property. > >Then, with reasonable diligence, I can enjoy the sunshine and spend my >time and money on more important things than trying to engineer it so >it's impossible to break in. > >Or at least I can do the cost/benefit analysis from the situation >where it's illegal to break in, rather than just a stupid cat and >mouse game as we're currently playing with spammers most of the time. > > > The Walrus and the Carpenter > Were walking close at hand; > They wept like anything to see > Such quantities of sand: > "If this were only cleared away," > They said, "It would be grand!" > > "If seven maids with seven mops > Swept for half a year, > Do you suppose," the walrus said, > "That they could get it clear?" > "I doubt it," said the Carpenter, > And shed a bitter tear. > > >-- > -Barry Shein > >Software Tool & Die | bzs(a)world.std.com | http://www.TheWorld.com >Purveyors to the Trade | Voice: 617-739-0202 | Login: 617-739-WRLD >The World | Public Access Internet | Since 1989 *oo* --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Open IP Directed Broadcast List... (fwd)
by Alan Brown 09 Aug '00

09 Aug '00

For those not on Bugtraq. ---------- Forwarded message ---------- Date: Tue, 8 Aug 2000 22:59:37 -0400 From: dies <dies(a)PULLTHEPLUG.COM> To: BUGTRAQ(a)SECURITYFOCUS.COM Subject: Open IP Directed Broadcast List... Well, I've rescanned the Internet. I've chosen to scan down to /27 subnets this time. My new list of open broadcasts is available at.... http://www.pulltheplug.com If you are an ISP or work for one, PLEASE VISIT THIS SITE AND CHECK FOR YOUR NETWORKS OR DOWNSTREAMS!! If there are no broadcasts to use, there are no broadcast based attacks! 125102 networks broken...I've posted the top 4000 amp sites this time around... As always I'm looking for help...If you think you can help out, email me. Enjoy --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 06 Aug '00

06 Aug '00

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. At last count the list had just over 160 subscribers, with the count growing by around five each month. (The addresses aitken(a)voyager.co.nz and stevebar(a)ihug.co.nz have been removed. The users of those addresses are welcome to re-subscribe with addresses which work.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to meet over beer. Some subscribers are likely to attend the Uniforum NZ 2000 conference in Hamilton in the first week of October. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spammers at NZNET: SPAM: Fwd: ClientTell Newsletter - Marketing Tips (fwd)
by Alan Brown 04 Aug '00

04 Aug '00

NZNET traces through CLIX, clienttell.com traces through netgate. ---------- Forwarded message ---------- Date: Fri, 4 Aug 2000 19:56:13 -0400 Subject: SPAM: Fwd: ClientTell Newsletter - Marketing Tips Anyone (AB?) with insider knowledge of this yoyo <stephen(a)clienttell.com> in Kiwiland? He even had the balls to put his photo into the sig (and he's just as ugly as Rodent's better side....) and apparently is not even trying to hide who he is. We just got a few of these 23 Kb spewages in. and it looks like it's a continuing run. TGIF for the chickenboners - but this looks like professionalism - or a joe-job. TIA Paul whois -h whois.networksolutions.com clienttell.com ... Registrant: S R ANDREWS (CLIENTTELL-DOM) 4 Blakeborough Drive Forrest Hill Auckland, NZ 1310 NZ Domain Name: CLIENTTELL.COM Administrative Contact, Technical Contact, Zone Contact, Billing Contact: Andrews, Stephen (SA4085) stephen(a)NZNET.GEN.NZ NZNet Internet Services Limited Unit C1 - 5 Douglas Alexander Parade North Harbour Industrial Estate Auckland NZ +64 9 914 0058 (FAX) +64 9 914 0040 Record last updated on 07-Nov-1999. Record expires on 07-Nov-2001. Record created on 07-Nov-1999. Database last updated on 4-Aug-2000 14:26:02 EDT. Domain servers in listed order: NS1.CLIENTTELL.COM 203.167.232.54 NS2.NZNET.GEN.NZ 210.54.156.35 >X-Persona: <z-default-stormy> >Return-Path: <ezine(a)clienttell.com> >Received: from bo.nznet.gen.nz (bo.nznet.gen.nz [210.54.156.34]) > by eagle.reach.net (8.10.2/8.9.3) with ESMTP id e74NOQj04691; > Fri, 4 Aug 2000 19:24:26 -0400 >X-Envelope-From: ezine(a)clienttell.com >Received: from localhost (roscoe.nznet.gen.nz [210.54.156.38]) > by bo.nznet.gen.nz (8.8.7/8.8.7) with ESMTP id LAA07978; > Sat, 5 Aug 2000 11:12:25 +1200 >Message-Id: <200008042312.LAA07978(a)bo.nznet.gen.nz> >X-Sender: ezine(a)clienttell.com >From: Stephen Andrews <ezine(a)clienttell.com> >To: "ClientTells Free For All Links Site" <ezine(a)clienttell.com> >Date: Sat, 05 Aug 2000 11:12:02 +1200 >Subject: ClientTell Newsletter - Marketing Tips >Reply-To: ezine(a)clienttell.com >Organization: ClientTell Marketing >MIME-Version: 1.0 >Content-Type: multipart/alternative; > boundary="----=_NextPart_000_001__8215413_40322.45" >Status: > [snip a bunch of html] >Article by Stephen Andrews is the owner of NZNET Internet Services Ltd (Since 1994), an Internet Service Provider based in New Zealand that specializes in Internet solutions for small to medium businesses. He is a qualified Electrical Engineer who has specialized in Telecommunication Systems. He has the concept that a business should be automated as much as possible to be competitive in todays marketplace. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Mail flood from 202.46.160.18 (www-wlg.domainz.net.nz)
by Mark Seward 04 Aug '00

04 Aug '00

Just a heads up in case any other ISPs are seeing the same thing.. I've had to block inbound traffic from www-wlg.domainz.net.nz - the load average on our primary MX was at a nice healthy 97 thanks to an extremely large number of connections originating from this mail server. Thankfully, we were dropping it all on the floor because the sender domain doesn't exist (why not?): ruleset=check_mail, arg1=<4Service(a)wlg-iis.domainz.net.nz>, relay=www-wlg.domainz.net.nz [202.46.160.18], reject=501 5.1.8 <4Service(a)wlg-iis.domainz.net.nz>... Domain of sender address 4Service(a)wlg-iis.domainz.net.nz does not exist Domainz, please investigate and explain. I suspect whatever caused this will have left a large amount of mail queued on 202.46.160.18 waiting to be sent on. Regards, - -- Mark Seward [ Network Operations Manager ] Paradise Net Telstra Saturn Limited Phone: 0800 467272 Fax: 0800 367200 Email: <mds(a)tsnz.net> --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Heads-up: Kiwi spammer looking for a new home (fwd)
by Alan Brown 02 Aug '00

02 Aug '00

Terminated off 2day.com last night (25 domains) Apparently it's their second offence. === Domain Name: ESCAPEADV.COM Administrative Contact, Billing Contact: Etherington, John (JEF127) john(a)ESCAPEADVENTURES.CO.NZ Escape Adventures PO Box 3046 Richmond, 7001 NZ +6425 2307442 (FAX) +648 3261 610 AB ---------- Forwarded message ---------- Date: Wed, 2 Aug 2000 11:55:02 +0100 From: Malcolm Pack <spam-l(a)POTNOODLE.NET> Reply-To: SPAM-L(a)PEACH.EASE.LSOFT.COM To: SPAM-L(a)PEACH.EASE.LSOFT.COM Subject: SPAM: "Escape" NZ insertion and web host, opt-out spam (QP "fixed" by me). | Return-Path: <info(a)escapeadv.com> | Received: from pop3.demon.co.uk by smtpserver.homeip.net with POP3 (Mailtraq/1.1.4.1130) | id SMTP1771244673; Wed, 02 Aug 2000 11:29:22 +0100 | Received: from punt-2.mail.demon.net by mailstore | id 965211792:20:05619:2; | Wed, 02 Aug 2000 10:23:12 GMT | Received: from [212.111.39.44] ([212.111.39.44]) by punt-2.mail.demon.net | id aa2124442; 2 Aug 2000 10:23 GMT | Received: from mta4-rme.xtra.co.nz (mta4-rme.xtra.co.nz [203.96.92.15]) | by pegasus.net90.co.uk (8.10.2/8.10.2) with SMTP id e72AP1O17606; | Wed, 2 Aug 2000 11:25:03 +0100 | Received: from xtr65014501 ([203.96.109.92]) by mta4-rme.xtra.co.nz | (InterMail vM.4.01.02.17 201-229-119) with SMTP | id <20000802102718.OCZW1941812.mta4-rme.xtra.co.nz(a)xtr65014501>; | Wed, 2 Aug 2000 22:27:18 +1200 | Reply-To: <info(a)escapeadv.com> | From: "Escape Adventures" <info(a)escapeadv.com> | To: <info(a)escapeadv.com> | Subject: "Escape" | Date: Wed, 2 Aug 2000 22:37:11 +1200 | Message-ID: <LPBBKLKAGNJIILLBOLBNIEANCEAA.info(a)escapeadv.com> | MIME-Version: 1.0 | Content-Type: text/plain; | charset="Windows-1252" | X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) | Content-Transfer-Encoding: quoted-printable | X-MIME-Autoconverted: from 8bit to quoted-printable by pegasus.net90.co.uk id e72AP1O17606 | X-Hops: 2 | | Need a break from IT pressures?. | | How about Mountain biking and Cycling in Kenya, Trekking on Kilimanjaro and | Mt Kenya, Rafting the White Nile in Uganda or Biking and Seakayaking in New | Zealand. | | ESCAPE ADVENTURES www.escapeadv.com , | Multi-Activity Adventures in Africa and New Zealand from 2-3 weeks. | | "Late booking special, 15% discount. 26th August departure, Biking in Kenya, | Trek Kilimanjaro, Gameparks and Zanzibar, 3 weeks". | | ESCAPE ADVENTURES | UK, PO Box 19598 London, SW11 1GA. Ph 020 7801 9516. | NZ, PO Box 3046, Richmond, Nelson. Ph +64 3 5489929. | USA, 181 Mt Owen Drive, Driggs, ID 83422.Ph 208 354 0967. | WWW.ESCAPEADV.COM or info(a)escapeadv.com | | | If you would like to be removed from our database please reply with "Remove" | in subject line. Most annoying is that this was harvested from one of Jobserve or Jobsite, UK recruitment listings services, of which I am a member as I am currently seeking work. The idea of a NZ escape adventure is truly tempting. Certainly worth spending my dole-money on... LARTS to abuse(a)xtra.co.nz, postmaster(a)xtra.co.nz with a comment to the effect that "opt-out = spam". -- Malcolm Pack --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Hi! Let's be friend?
by nurul＠excite.com 31 Jul '00

31 Jul '00

Hi, I am Nurul, 17, from Malaysia. From a search, I got your email from your homepage. Want to be friend? I just joined asiadragons efriend to make some new friends. Sign up is free and you can sign up too: http://friend.asiadragons.com/cgi-bin/refsign.pl?refuid=nurul Ok, I make some friends and $ lah :) So, sign up ok? And about me..... http://friend.asiadragons.com/cgi-bin/mdets.pl?uid=nurul After you join in, just write to me ok? Bye. from, Nurul Hisham --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Telstra blacklisted by ORBS
by Paul Montgomery 28 Jul '00

28 Jul '00

Those predictions made by Alan Brown more than a month ago have turned out to be true. The following is forwarded from an Australian mailing list. Ben Elliston <bje(a)redhat.com> wrote: > This morning every IP address in my home network was blacklisted in > ORBS. Upon investigation, I discovered this in the orbs.org name > server: > > 233.38.24.203.relays.orbs.org. 20h54m17s IN TXT "Telstra - spam > haveners, refusing to act. " > > Because my ISP is a customer of Telstra Internet, my entire network > has been blacklisted. As best as I can tell _all_ networks downstream > from Telstra Internet have been blacklisted in ORBS. I have contacted > ORBS and the blacklists will remain in place until the spamming > activity originating from Telstra Internet ceases. Until then, I > cannot send email to company mailing lists. There's something wrong > with this picture. -- Paul Montgomery, CEO @ AusBONE, the ISP peering co-operative. Land: not yet Mobile: 0410 622 589 mailto:monty(a)ausbone.net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

whois.radb.net: transition to RPSL from RIPE-181
by Chris Wedgwood 26 Jul '00

26 Jul '00

I guess most people who use whois.radb.net have already received this notification, but for those who haven't... --cw This RIPE-181 version of the database WILL BE DECOMMISSIONED on August 7, 2000, and all customer sites need to transition to the new RPSL database. Please forward this message to the appropriate staff in your organization responsible for routing policy. On 11/1/99, at 12:01:00 a.m., the default RADB database converted to RPSL. The new RPSL database server is available at: whois.radb.net 198.108.0.18 The old (and now deprecated) address was: whois-ripe181.radb.net 198.108.0.11 If you have comments or questions about the transition to RPSL, please see our Web page: http://www.radb.net Or send email to db-admin(a)radb.net. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Hello from AusBONE
by Paul Montgomery 24 Jul '00

24 Jul '00

My name is Paul Montgomery, and I am the CEO of AusBONE, which is a peering organisation in Australia (don't worry, this is not a spam). I've been watching progress at APE, WIX and NZIX with interest, since we are doing similar things in Sydney, Melbourne, Brisbane and Adelaide. I'll be lurking on this list in future, but I thought I should say hello. One of AusBONE's main activities has been to link up interstate peering exchanges within Australia. The possibility exists to connect NZ with Australia in this network, but I'm not sure about how affordable this can be. Trans-Tasman tails are cost-prohibitive, as I'm sure I don't need to tell you. If any of you have thought about this and have come up with any workable ideas, I'd love to hear from you. Also, I've put up a page on our site listing peering activities in NZ and Asia - "peer review" of this document would be appreciated. http://www.ausbone.net/apac.htm -- Paul Montgomery, CEO @ AusBONE, the ISP peering co-operative. Land: not yet Mobile: 0410 622 589 mailto:monty(a)ausbone.net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Anybody know GCS?
by Juha Saarinen 22 Jul '00

22 Jul '00

Got another one of the Sterling Casino Lines blah blah blah Florida cruises spams from Abac.com, but this time the spamvertised site seems to belong to a NZer: http://134.251.52.240/yzvfr275kx/cruise domain: gcs.co.nz admin-c: GCS Hostmaster tech-c: Gcs Hostmaster nserver: ns1.gcs.co.nz nserver: ns2.gcs.co.nz remarks: domain_datecreated: 28/10/98 remarks: holder_name: GCS Ltd. remarks: domain_name_status: 01 Current remarks: registrar: UNALLOCATED changed: postmaster(a)gcs.co.nz 19991009 source: AUTOMAGIC person: GCS Hostmaster address: Wang House,195-201 Willis Street, address: WELLINGTON, phone: +64 4 385 3399 fax-no: +64 4 385 3399 e-mail: gcs(a)dns-support.net changed: postmaster(a)gcs.co.nz 19991009 source: AUTOMAGIC person: Gcs Hostmaster address: Wang House 195-201 Willis St address: Wellington NEW ZEALAND phone: +64 4 385 3399 fax-no: +64 4 385 3399 e-mail: gcs(a)dns-support.net changed: postmaster(a)gcs.co.nz 19991009 source: AUTOMAGIC Seems to be the same as vrmark123.net and AFAICT hangs off uunet.ca with DNS by robust.net. Anybody know who GCS is/are? -- Regards, Juha PGP fingerprint: 79E9 87B0 2A5C 335C E9CB E6BD 9AE6 8AA0 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[OT] [spam] Vodafone SIM For Sale
by Joe Abley 19 Jul '00

19 Jul '00

Hi, As part of my last-minute, poorly-planned departure from New Zealand, I have a Vodafone contract to give away. There are 30 months remaining on the current contract, which is attached to the Daytime 400 plan ($190/month, 400 free minutes any time). The contract can be changed to any other Daytime plan, e.g. Daytime 40 ($35.51/month, 40 free minutes) with no additional fees. I'll even throw in a lovely yellow Alcatel one-touch-easy handset, at no additional cost. So, if anybody was already planning to buy an after-hours support phone and fancies knocking twelve months off the contract, drop me a line -- we can just sign the contract over. You might want to change the number, of course :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0