- NZNOG - lists.nznog.org

RE: Contact Numbers [was: Y2K stuff]
by Robert Gray 22 Jun '99

22 Jun '99

>Just an idea -- any comments? Good scheme Robert Gray Clearview Communications, Auckland New Zealand bobg(a)clearview.co.nz http://www.clearview.co.nz/ Phone DDI +64 9 529 5704, Fax +64 9 529 5702, Mob +64 25 971 860 -----Original Message----- From: Richard Naylor [mailto:richard.naylor(a)citylink.co.nz] Sent: Wednesday, 23 June 1999 18:08 To: nznog(a)list.waikato.ac.nz Cc: jabley(a)clear.co.nz Subject: Re: Contact Numbers [was: Y2K stuff] At 04:44 pm 22/06/99 +1200, Joe Abley wrote: >On a more tedious, on-topic note, is anybody else interested in keeping >a central repository of contact e-mail addresses and phone numbers for >NZ net ops? Not for consumption by the general public, but maybe stuck >on a web page somewhere behind a crude password? > Yes - I'm keen. My black book is falling to pieces..... >I was thinking in terms of contacts for categories, like: > > + usenet feed-tweaking > + abuse notification > + routing strangeness > + network peering > + proxy peering + cables cut + bills not paid + stuffed routers >The idea is to provide a list of second-tier and third-tier support >to our counterparts in other providers, so that we don't end up having >to do battle with the helpdesk IVR at 3am when something nasty just >happened. > >Just an idea -- any comments? > You mean you don't like me phoning you cos yours is the only cell phone number in Clear I have ? Maybe thats why all the others don't give me numbers ........ Actually I have a page for the members of WIX and will do something similar for APE. rich richard.naylor(a)citylink.co.nz This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Make an us an offer we can't refuse
by Andy Linton 21 Jun '99

21 Jun '99

http://www.netlink.co.nz/Media_Release_22_June99.html --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

BGP filtering
by Joe Abley 09 Jun '99

09 Jun '99

Hi all, CLEAR publishes its routing policy in the RADB. Just out of interest, do any of our peers pull our policy from there in order to build filter lists? If so, how often do you do it? I ask because it seems that some of our advertisements are not being accepted by some peers; naturally the games players have been the first ones to notice and point this out :) If anybody would like a pre-built, up-to-date filter list for cisco routers (for advertisements from AS4768 routers only), please drop me a line. Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Facility available for APE
by Richard Naylor 08 Jun '99

08 Jun '99

CityLink would like to announce the availability of a peering facility on Level 48 of the Sky Tower in Auckland. This will be a neutral peering facility using an ethernet switch supported with a local unix box and UPS. The unix box will run mrtg for traffic statistics and NOCMON for port monitoring. Statistics will be available to peering users on their ports only on application. Users will be able to establish bilateral peering arrangements or in conjunction with users, we will establish a unilateral peering facility. The unix box will also offer a route server and reflector along with an AS number for users who may not currently have an AS of their own. CityLink will also operate an independent (pre-CIDR) address space for users to use for unilateral peering. The facility will be managed from Wellington using CityLink's established 24x7 support facility. Local hands on support will be sub-contracted to a local supplier. Access to the facility is available for a connection fee of $750.00 + GST and a monthly support fee of $62.50. Customer ports will be restricted to a limited number of MAC addresses to ensure some degree of security between customers. CityLink is a Network Operator based in Wellington with a large IP network based on a 40km fiber cable network. It operates the neutral Wellington Internet Exchange with approximately 12 connected Internet Service Providers. Its network has approximately 20 switches installed in a distributed switching fabric. Q1 - Why are you doing this ? CityLink has experience in neutral switching and IX operations in high bandwidth applications. CityLink operates a MAC based metropolitan area network with multiple ISPs Q2. Will there be a link between the Wellington IX and APE ? The ISP community provides this connectivity at the present time. It is not expected that CityLink will provide this facility. Q3. Does this mean that CityLink will be operating a network in Auckland ? No. We see that we can add value and experience in operating a neutral exchange in Auckland. Q4 - Aren't you scared of heights ? 48 Floors ? YES. Power poles ? No. Q5 - What will be there ? A 6 foot rack with nice gear in it. At this stage the rack has a UPS and Unix box and a small switch. The switch will grow as traffic and port requirements demand. Q6 - Where will spares be held ? Spare and hardware service will be provided locally in Auckland. Q7 - I want to join - How do I get signed up or find out more ? Send email to info(a)citylink.co.nz or phone 04-917-0200 Q8 - When will the service be live ? We expect to be installed and operating by 20 June 1999. Q9 - What sort of switch will be in APE ? At this stage we have a Cisco ethernet switch in the cabinet. We are talking with other suppliers about what options are available. Our experience is that we often grow a switch capacity as demand rises. We have a number of switches in Wellington and swap them out as the port count requires. (we have yet to see a bandwidth limitation) Q10 - Why are you charging ? We are charging on a simple cost recovery basis. We feel that if the peering point is free then it is abused. If a charge is levied then users will appreciate that management is applied to the exchange. CityLink is not a huge organisation and needs to recover some of its costs. The costs mentioned above should not be a barrier to likely user organisations. [ends] richard.naylor(a)citylink.co.nz This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DNS issues. BIND 8.2
by dylan＠ihug.co.nz 03 Jun '99

03 Jun '99

After much to-ing and fro-ing we are coming to the end of our collective teathers. Since Sunday morning (last Sunday) morning at around 8am we have been having an odd problem with our primary nameserver, ns1.ihug.net.nz (203.29.160.4). It goes something like this, nameserver is doing it's thing happily, when for no apparent reason it just stops responding to named requests for a short time and then a while later starts going again. For obvious reasons this is a major problem. And we can find nothing that is causing this. The symptoms: o Server stops responding to named queries. o At one stage it appeared that when constantly pinging it the TTL would change from 64 to 255 for the exact same duration that the nameserver was affected. I am unable to confirm that this is still the case. o The outages appear to be for exactly 2 or 3 minutes to the seccond. (Maybe other durations?) o At the same time this is happening we are getting "Possible syn flood" messages from various IP addresses (they don't seem to be related). It is my understanding that at about the same time (Sunday) that CLEAR, Waikato and possible Telecom/Xtra had a similar problems (I am not sure where this information comes from or how accurate it is), but are no longer. What we have done: o We swapped our nameservers around, this seems to solve the problem however, it affects our practical ability to control zones etc... o New software installations. The box affected had recently been rebuilt before the incident, and we did not suspect it was a software issue, but rebuilt anyhow. It has affected both Slackware and Debian installations with BIND 8.1.2 and BIND 8.2. Conclusions: o It only occurs when then machine is on 203.29.160.4 and is acting as a master. It does not affect slaves on that IP and does not affect masters on another IP. o Hardware is not a fault - We have used more than one physical machine. The effects did not change. o It appears the the nameserver itself stops during that time. Incoming traffic still reaches the box, but none goes out. Also for the duration there seems to be no nameserver logging. Short completely changing our nameserver infrastrucure we are at a loss as to what we can do. Probable solutions: o None - Goddammit! Any ideas? Dylan Reeve DDI: +64 9 359-2746 Assistant DNS Admin Fax: +64 9 358-5134 ihug business Freecall: 0800 847-638 http://www.ihug.co.nz/ Email: dylan(a)ihug.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 9

DEW alert
by bmanning＠ISI.EDU 01 Jun '99

01 Jun '99

Hi, I appologize for duplicates. Its almost time for the next quarterly walk of the inverse tree of the DNS. For the last few quarters, I've been walking the in-addr tree looking for numbers of delegations, accurate delegations, and types and styles of error conditions. So... this is a heads up that you will be seeing zone transfers being generated by a couple of the collecter machines here. For those of you who utilize BINDs access controls, I'd appreciate your inclusion of the collector machines in allowed transfers. The expectation is that they will be the following IP addresses: 128.9.160.57 and 198.32.4.13 Past data is at: www.isi.edu/div7/people/bmanning.home/in-addr-audit.html The run is scheduled to start 01 July 1999. If there are any questions or concerns, I'd be happy to talk about them. Past data has been presented at IEPG, Apricot and RIPE meetings. The expectation is that future data will be presented in the same and similar forums. -- bill --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Auckland Peering Exchange
by Joe Abley 31 May '99

31 May '99

Hi, The state of play would seem to be as follows: o CLEAR's provisioning people tell me that our racks will be complete (and our transmission network between Symonds Street and the Tower will be tested and ready for service) by the end of next week. o CLEAR will have 24 ports of 10baseT available as soon as everything else is ready, and we're happy to donate ports to other providers in the interests of getting things up and running. These ports will be physically in one of the CLEAR cabinets on L48, but we can run copper to other cabinets on request. o I'm hoping to have a stratum-1 (well, GPS-fed) NTP source installed in the tower some time relatively soon, which exchange participants will be most welcome to chime off. o Sky have at least one community cabinet available now on L48. o I have had two offers of donated ethernet switches. o I have had one offer of exchange management. My nosey enquiries seem to suggest that there are at least six or so providers who are in the closing stages of organising a presence in the Tower (or who already have one). There are issues to discuss, including: o Numbering; o Suitability of any particular vendors' offered free switches; o Are we happy to have multiple switches, owned/operated by different organisations, all bridged together to form the exchange media? o Suitability of any particular organisation's offered exchange management; o Exchange acceptable-use guidelines. To avoid cluttering the NZNOG list with matters specific to the APE (and in accordance with the current vogue in list proliferation), I have created a couple of APE-specific mailing lists: ape-discuss ape-announce To subscribe, send a message containing the line subscribe listname to listmanager(a)patho.gen.nz, cleverly substituting the list name for "listname". Archives are available by e-mail and on the web at http://www.patho.gen.nz/list/ If these lists aren't of any use (and/or people prefer to use the NZNOG list for this) that's fine, I'll remove them. Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 31 May '99

31 May '99

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has neither a king, a president nor a formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. (At last count the list had over eighty subscribers, with the count growing slightly each month.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document,. a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to meet over beer. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Annoying email addresses
by Michael Newbery 30 May '99

30 May '99

-- Michael Newbery Technology Manager Saturn Communications Tel: +64-4-939 5102 Mobile:021-642 957 Fax:+64-4-939 5100 >>> "2Day Chief Enthusiast" <peter(a)2day.com> - 31/5/99 10:57 AM >>> >Does anybody know of the use of an ampersand character in an e-mail address >is accepted as ok? > >him&her(a)isp.com > >I would have thought it quite bad form, but these larger free email services >seem to allow almost anything ascii in an email address these days. The >only reason I have a problem is I have a script somewhere in my world of >technology that does not like them, and being Monday morning, I cant find it No sympathy I'm afraid. From RFC822: address = mailbox ; one addressee / group ; named list mailbox = addr-spec ; simple address / phrase route-addr ; name & addr-spec addr-spec = local-part "@" domain ; global address local-part = word *("." word) ; uninterpreted ; case-preserved word = atom / quoted-string atom = 1*<any CHAR except specials, SPACE and CTLs> CHAR = <any ASCII character> ; ( 0-177, 0.-127.) specials = "(" / ")" / "<" / ">" / "@" ; Must be in quoted- / "," / ";" / ":" / "\" / <"> ; string, to use / "." / "[" / "]" ; within a word. Ampersand is not a 'special', so it's quite legal. When you find your script I hope you'll make sure it also copes with something . (note the white space and the comment (comments can nest) between the atoms) like-this* . "Is quite legal #@!!" @ liberals.are.us :-) The good news is that when you get down to it, it's very easy to write a parser for rfc822, if you base it on the production rules. BTW, pp 30-31 of RFC821 do not narrow the definition of address. In fact, rfc821/rfc822 are TOO restrictive, predating as they do UNICODE. There is no way to include non-Roman, or indeed accented characters, in an address, and no extension mechanism akin to HTML's %nn. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Annoying email addresses -Reply
by Donald Neal 30 May '99

30 May '99

>>> "2Day Chief Enthusiast" <peter(a)2day.com> 31/May/1999 10:57am >>> >Does anybody know of the use of an ampersand character in an e-mail >address >is accepted as ok? >him&her(a)isp.com Well, RFC821 says that "the mail data includes the memo header items such as Date, Subject, To, Cc, From" and that "The mail data may contain any of the 128 ASCII characters." - Donald Neal --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [registry-discuss] Zone transfers from .nz name servers
by david＠farrar.com 30 May '99

30 May '99

On Thu, 27 May 1999 11:36:22 +1200, Peter Mott wrote: >> I'd say that ISOCNZ did consult industry and are in the process of doing >> so. Some weeks ago the ISOCNZ technical committee, John Vorstermans, >> Mark Davies and Roger De Salis talked to Joe Abley and myself. If they >> didn't talk with Peter that doesn't mean they didn't talk with industry. > >We have a different view on what consultation is. FWIW in hindsight I believe there would have been merit in posting something on say nznog asking for feedback. Perhaps one of the things we can look at is"recognising" nznog as something which should form part of a consultation process on relevant issues. Of course nznog may not want this and might prefer say isocnz-l or isocnz-announce is used for all consultations on these sort of issues. I'll forward this post to nznog (not cross-post) for their interest. But having recognised consultation could be better, let me say nothing is cast in stone. ISOCNZ Council agreed to stop the situation where anyone at all could do zone transfers, but also recognised that certain people or groups would have legitimate grounds for access. Now that leaves enough flexibility to have a very liberal or very tight "access" policy. You have most of the ISOCNZ Technical Cmte on this list and I'm sure that if there is a widespread consensus on what is desirable, agreement can be reached. A point I'll make is ISOCNZ does have some obligations in terms of legal responsibilities as "custodian" which have to be considered. > > I have since been seconded onto ISOCNZ council to fill the vacancy left >> by Peter Mott's resignation and am now on that committee. The tech >> committee have the task of looking at closing of the zone transfer >> holes. This is not cast in stone and could be changed if valid reasons >> can be produced. > > David Farrer said a decision had already been made to disallow XFRS. Can >we get the story straight please? The decision was to stop anyone at all doing transfers. I don't think there is much disagreement that an open slather let anyone grab it and possibly spam with it scenario is desirable to continue. It was recognised some people would still have a need to do transfers. As for how stringent or liberal the policy is, could I pose a number of policy scenarios which may help people focus on what they consider desirable. Now I am not great on all the technical side so I hope I have captured this correctly. a) Status Quo - where anyone at all can do a transfer with no restriction b) No automatic transfers are possible but any *.nz name holder can ask for a zone transfer as long as they promise not to spam. Of course they may give it to others who do with no way to check this. c) Any NZ ISP (and how do we define that) may get a copy of the zone data. Perhaps with an agreement not to spam, on sell etc d) No automatic right of access but any person or group can ask for access, specifying the intended purpose of the data. DOMAINZ to decide which requests are accepted based on criteria set by ISOCNZ (which could come from this group). Note any info about why it is wanted which is given to DOMAINZ would be confidential and not to be publicised e) No access at all except to secondaries (ie those who *need* rather than *want* it Now I'm sure there are many more combinations but hopefully that gets much of it. Feedback on which option is desirable is welcome. Someone raised why ISOCNZ is involved at all. Well simply ISOCNZ has the *duty* on behalf of the Internet Community to be the custodian (for lack of a better word) of the *.nz DNS and associated data. As part of that role it does need to consider implications of what it does with the data. We do have a Privacy Act which few other countries have and we do need to be careful that if ever challenged on what our policies are to do with data we have collected, we can demonstrate that issues have been thought through in a considered manner. I realise the zone data itself may not be relevant to the privacy act, but that it *unlocks* other data may be an issue. Who knows at some stage we may have to spend some money on a legal opinion on our obligations. Speaking for me personally I have no firm view on how liberal or stringent access to the zone files should be (except I strongly support removing open slather access) and am inclined to be supportive of any consensus position reached by a group representative of the industry. DPF --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

Anyone running mail on Solaris 2.6 with tcp timestamps tunerd on?
by Chris Wedgwood 27 May '99

27 May '99

Is there anyone out there running using Solaris 2.6 with tcp timestamps turned on for mail? If so, would they mind letting me hit them with some test messages, maybe a hundred or so short messages? I'm trying to track down some funnies and want to be sure of things before I start blaming Solaris again :) -Chris --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: [registry-discuss] Zone transfers from .nz name servers
by Andy Linton 27 May '99

27 May '99

2Day Chief Enthusiast wrote: > > >I haven't yet got the draft minutes but my recollection of the ISOCNZ > >Council meeting on Friday is that the consensus was to do exactly that > >- for reasons of both privacy act considerations and anti-spamming. > > Yet another example of ISOCNZ making decisions without consulting industry. > Extremely bad form. I'd say that ISOCNZ did consult industry and are in the process of doing so. Some weeks ago the ISOCNZ technical committee, John Vorstermans, Mark Davies and Roger De Salis talked to Joe Abley and myself. If they didn't talk with Peter that doesn't mean they didn't talk with industry. I have since been seconded onto ISOCNZ council to fill the vacancy left by Peter Mott's resignation and am now on that committee. The tech committee have the task of looking at closing of the zone transfer holes. This is not cast in stone and could be changed if valid reasons can be produced. I'd also note some data points: 1) The root nameservers have had open transfers turned off. 2) The Domainz RFI for the management of the DNS indicates that in the near future the primary and secondary servers will be operated by Domainz. The organisations that host the secondary servers will not have administrative control over them so Joe's recent example where Clear and Xtra currently have access to the zone file data will not hold in the future. 3) Mark Davies' web pages which list the NZ domain names will disappear in their current form. I'd like people to put their cards on the table and say why they want access to the complete zone files. That would help us understand if there are valid reasons for leaving the transfers open. I also believe this discussion belongs on the NZNOG list. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 6

International Internet changing regimes
by Frank March 27 May '99

27 May '99

A further note on developments in this very occasional series. I have available a copy of the report of a meeting of the Rapporteur Group on International Network Cost Components for the Internet (part of the ITU, and published in the ITU Telecommunications Standardisation Sector newsletter COM 3-R 17-E March 1999). There seems to be some overlap in membership between this group and the APEC TEL activities. The meeting was in Sydney 22,23 September 1998 and covers work by a study group with the following terms of reference: -identify the international network components for the Internet which reside within the GII framework; -determine cost issues; and -if considered appropriate, to propose a set of principles on the equitable cost compensation between international circuit providers. The group notes that "it is not, at this time, in a position to propose a preferred set of principles" and further work is proposed. I will fax a copy (11 pages) to anyone sending me a number. Frank March Specialist Advisor, IT Policy Group Ministry of Commerce, PO Box 1473, Wellington Telephone (+64 4) 474 2908; Fax (+64 4) 471 2658 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

ICANN document of interest
by Andy Linton 27 May '99

27 May '99

http://www.icann.org/tld-deleg-prac.html NEW: Statement of IANA TLD Delegation Practices IMPORTANT NOTICE. The following document is being posted for the information of the Internet community. It contains a statement of the current policies being followed by the Internet Assigned Numbers Authority (IANA) in administering delegations of Top Level Domain Names of the Internet Domain Names System (DNS). At a future date, the ICANN Board may consider changes to these policies and will, at such time, notice proposed changes for public comment in accordance with the ICANN Bylaws. Comments on this document are welcome and should be directed to comments(a)icann.org. -- Mailto:asjl(a)netlink.net.nz Post: Netlink, PO Box 5358, Lambton Quay, Wellington, New Zealand -- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[Fwd: Delivery failure (registry-discuss@2day.com)]
by Andy Linton 26 May '99

26 May '99

> Subject: Re: [registry-discuss] Zone transfers from .nz name servers > Date: Thu, 27 May 1999 04:13:40 +0000 > From: Andy Linton <asjl(a)netlink.net.nz> > Organization: Netlink, Wellington > To: registry-discuss(a)2day.com > > 2Day Chief Enthusiast wrote: > > > > > I'd say that ISOCNZ did consult industry and are in the process of doing > > > so. Some weeks ago the ISOCNZ technical committee, John Vorstermans, > > > Mark Davies and Roger De Salis talked to Joe Abley and myself. If they > > > didn't talk with Peter that doesn't mean they didn't talk with industry. > > > > We have a different view on what consultation is. > > Just because you aren't included in a discussion, it doesn't mean there > hasn't been one. > > > > > > I have since been seconded onto ISOCNZ council to fill the vacancy left > > > by Peter Mott's resignation and am now on that committee. The tech > > > committee have the task of looking at closing of the zone transfer > > > holes. This is not cast in stone and could be changed if valid reasons > > > can be produced. > > > > David Farrer said a decision had already been made to disallow XFRS. Can > > we get the story straight please? > > > > Read my posting - I'm asking for reasons why this should be changed and > all I'm hearing is whinging about how unreponsive ISCONZ are. > > > p.s. If you took up my vacancy, you would be on the education and research > > subcommittee. > > Nope! I'm on the commitee that's most appropriate for my background and > experience. -- Mailto:asjl(a)netlink.net.nz Post: Netlink, PO Box 5358, Lambton Quay, Wellington, New Zealand -- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Re: Zone transfers from .nz name servers
by Robert Gray 26 May '99

26 May '99

>I'm still waiting for a reasoned argument from Peter about this issue. I've spoken to Peter about the zone transfers and he has told me why he wants the ability to do them. I would like to say that: a) the use he makes of it (IMHO) breaches no privacy nor has any other concern and b) it _is_ commercially sensitive - I certainly would not tell too many people unless I wanted competition. There's a conundrum then. Robert Gray Clearview Communications, Auckland New Zealand bobg(a)clearview.co.nz http://www.clearview.co.nz/ Phone DDI +64 9 529 5704, Fax +64 9 529 5702, Mob +64 25 971 860 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Restricting axfr's from ns99.waikato.ac.nz
by Chris Wedgwood 26 May '99

26 May '99

Without wishing to step into the flames, has anyone considered it may already be too _late_ to stop people form generating a list of all .nz domains? Right now, I'm sure plenty of people have copies on the .nz zone files (for various reasons), and they probably update these fairly often. Even if this information is made unavailable to the public at large, people can just check (daily) the Domainz Pending Activity page and produce deltas from that... I just verified that this is indeed possible with a little script that took no more than 5 minutes or so to get going... -cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Fw: Welcome
by Andy Linton 26 May '99

26 May '99

2Day Operations wrote: > > Date: Thursday, 27 May 1999 11:29 > Subject: Welcome > > >Welcome to the registry-discuss list provided by 2Day Internet Ltd > > > >PURPOSE > > > >This list is provided for discussion of commercial and > >technical issues associated with changes to the .nz > >domain name registration service advised by DOMAINZ on > >Tuesday 18 May 1999. > > > >INVITATION > > > >Any person or organisation with a commercial interest > >in this topic is invited to participate. > > > >ACCEPTABLE USE POLICY > > > >Without wishing to restrict the free flow of ideas and > >information, the list owner (2Day Internet Limited) > >requires that:- > > > > > >a) Messages posted to this list are NOT posted to any > > other list or news group at the same time. > > Looks like I'm breach of Peter's acceptable use policy so I'd better be unsubscribed from 'registry-discuss' I'll be talking about this on the NZNOG list from now on. Join me there if you want a list where who you post to is not dictated to by the list owner. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[Fwd: [registry-discuss] Zone transfers from .nz name servers]
by Roger De Salis 26 May '99

26 May '99

2Day Chief Enthusiast wrote: |> |> >I haven't yet got the draft minutes but my recollection of the |> >ISOCNZ Council meeting on Friday is that the consensus was to |> > do exactly that |> >- for reasons of both privacy act considerations and anti-spamming. |> |> Yet another example of ISOCNZ making decisions without consulting |> industry. Extremely bad form. | | I'd say that ISOCNZ did consult industry and are in the process of doing | so. Some weeks ago the ISOCNZ technical committee, John Vorstermans, | Mark Davies and Roger De Salis talked to Joe Abley and myself. If they | didn't talk with Peter that doesn't mean they didn't talk with industry. ===================================================================== Exactly 10 days ago, I did send out an email to the ISOCNZ council, plus Andy and Joe, with proposal to possibly restrict zone transfers. The sequence was:- 1/ Put an inital proposal to the council plus others to ensure that the technical proposal was sound, and find out if there were i) raving objections, ii) muted dissent iii) muted assent iv) other. 2/ Post the corrected proposal to the NOG for comment. 3/ Assemble and Post feedback to the NOG, and come to a acceptable consensus. Unfortunately real work interfered with this timetable. This email represents step 2. The proposal was informally discussed at the last council meeting, which I was not able to fully attend. Here is the proposal in full, as it was sent out earlier. I remind interested parties that this is a PROPOSAL. Thoughtful comment, dissent and wisely worded counter propoosals will all be thoroughly considered. Here is the proposal as originally sent out. ======================================================================== PROPOSAL:- The caretaker of the registry has been concerned for sometime about the ability to do a complete download of the zone files, and then trawl them for useful information. Typically why people do this is to keep score, and we have no evidence that people have used this information for malicious purposes thus far. But the information does contain personal information, which it must do to permit network operators to rightfully go about their business, and brilliant efforts to keep the internet running. It also potentially offers plenty of SPAM potential. If whole downloads were restricted, but reasonable queries of a moderate length we allowed, and a working who-is was on line, and there was an ability to run reasonable global queries (eg no of domains by provider etc etc), is a restriction on possible global downloads reasonable. A positive suggestion here is that global downloads continue to be permitted, but the receiver must authenticate themselves, so reasonable use can be estimated. A parallel example is Cisco's shipping database. You have query access (via login) to any information, but you need a valid number to be able to extract the single event. There is no way to get the whole of shipping details at that second. But in theory it is all there. The proposal is therefore to propose some minor technical changes with an eye on the Privacy requirements, but ensure that sufficiently useful access and information exists to permit the nog to do their job. I would be most interested to collect opinions about positive technical suggestions, leave it the way it is, or make these suggested changes. Rgds Roger De Salis ====================================================== Joe's comments came back as:- (and appear to me to be eminently reasonable. I hope he will not mind me re-publishing.) For the record, it's only ns99 and rata that currently permit zone transfers; none of the others do. A good compromise might be to restrict zone transfers from ns99 to "all authoritative servers plus authorised hosts" to allow people like Peter to continue to pull the data, without having to mess about with ftp. Domainz could authorise hosts as they saw fit (I would expect the authorisation policy to be fairly non-restrictive). The driver for doing this, remember, is to prevent the unscrupulous walking the DNS, enumerating domain names for the purposes of evil spam; it's not to stop record harvesting for the purposes of generating statistics. This is just for ns99 -- I would expect other authoritative servers to deny transfers from _anybody_. Maintaining a current transfer access list on every secondary is unnecessary. Being overly restrictive on this issue could be problematic anyway; for example CLEAR and Xtra have access to the zone files since they operate authoritative nameservers for the benefit of the community. It would be bizarre if other providers were denied access to the same information simply because they're small (or focused on niche services). Joe ================================================================ -- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L3, 117 Customhouse Qy /) +64 4 473 4912 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` Never underestimate the data transmission capacity (Mb/s) of a station wagon full of the backup tapes.

4 6

.nz Secondary -- Victoria University upgrading Bind to 8.2
by Patrick O'Brien 25 May '99

25 May '99

NZNOG'ers, FYI, Victoria University are in the process of upgrading the .nz Secondary from Bind 4.9(ish) to 8.2. In doing so, they will be restricting zone transfers to the Primary and Secondary .nz zone machines. Richard Stevenson is the contact, at Victoria My regards, PATRICK J O'BRIEN Fax: (04) 473-4569 Voice: (04) 473-4567 Mail: P.O.BRIEN(a)DOMAINZ.NET.NZ Web: http://www.DOMAINZ.NET.NZ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 7

Roger Hicks' email address
by Frank March 24 May '99

24 May '99

Folks: Off topic; unless the intention is to offer Roger a beer, I suppose, but does anyone know what his address is these days? Apparently his old Clear address is no longer operational. I would appreciate any assistance. Frank March Specialist Advisor, IT Policy Group Ministry of Commerce, PO Box 1473, Wellington Telephone (+64 4) 474 2908; Fax (+64 4) 471 2658 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

nz.org.isocnz newsfeed to tardis.patho.gen.nz
by Joe Abley 21 May '99

21 May '99

Hello people, Is anybody able to set up a tiny newsfeed to tardis.patho.gen.nz (203.97.2.226), feeding only nz.org.isocnz? Tardis won't be originating any messages. Path entry tardis.patho.gen.nz. Many thanks in giddy anticipation :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[Fwd: (Fwd) Class C]
by Roger De Salis 19 May '99

19 May '99

-- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L3, 117 Customhouse Qy /) +64 4 473 4912 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` Never underestimate the data transmission capacity (Mb/s) of a station wagon full of the backup tapes.

2 1

[Fwd: (Fwd) Class C] -Reply
by Brett Telfer 19 May '99

19 May '99

Hi, This address is part of the 210.55.x.x blocks being advertised by NetGate. I have passed on the message to Don (contactable at nic(a)netgate.net.nz), and he will be contacting Wayne directly to help sort this out. Regards BT >>> Roger De Salis <rdesalis(a)cisco.com> 20/May/1999 01:15pm >>> -- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L3, 117 Customhouse Qy /) +64 4 473 4912 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` Never underestimate the data transmission capacity (Mb/s) of a station wagon full of the backup tapes. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0