- NZNOG - lists.nznog.org

Spark outage
by Juha Saarinen 06 Sep '14

06 Sep '14

Saw that TIFKAT suggests that customers manually change their DNS settings to sort out website access issues: http://helpbusiness.spark.co.nz/app/answers/detail/a_id/3701/related/1 What actually happened? Seen suggestions that it was a DNS amplification DDoS that might have been related to Spark customers clicking on phishing messages that had them download some form of malware that compromised their computers. Spark said: http://www.spark.co.nz/help/servicealert/mobileservicealert/ “The root cause is likely to be a handful of customers on our network whose computers are affected by malware, generating high levels of traffic destined for overseas sites.” Looks like it’s an ongoing issue too, as per the Spark service alerts. Has anyone seen any more detail on the incident? If this isn’t super operational, please email me off-list. Thanks -- Juha Saarinen twitter: juhasaarinen

5 4

Geekzone.co.nz dns/email issue
by Jean-Francois Pirus 05 Sep '14

05 Sep '14

If anybody from Geekzone is around, your mail server's forward DNS is not set up correctly. The A record for mail.geekzone.co.nz is missing. Sep 6 09:59:57 zeus postfix/smtpd[26470]: warning: 202.175.128.168: hostname mail.geekzone.co.nz verification failed: Name or service not known dig -x 202.175.128.168 168.128.175.202.in-addr.arpa. 3220 IN PTR mail.geekzone.co.nz. dig mail.geekzone.co.nz #nothing PS: I could not contact Geekzone directly as I can't register, (see above) -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

2 1

IANA AS Numbers registry update
by Selina Harrington 05 Sep '14

05 Sep '14

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to LACNIC in September 2014: 64099-64197 Assigned by LACNIC 2014-09-05 263680-264604 Assigned by LACNIC 2014-09-05 264605-265628 Assigned by LACNIC 2014-09-05 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 02 Sep '14

02 Sep '14

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

2 1

IANA AS Numbers registry update
by Selina Harrington 02 Sep '14

02 Sep '14

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to APNIC in September 2014: 64000-64098 Assigned by APNIC 2014-09-02 133632-134556 Assigned by APNIC 2014-09-02 134557-135580 Assigned by APNIC 2014-09-02 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

DNSSEC single point of failure?
by Jean-Francois Pirus 26 Aug '14

26 Aug '14

Unless I'm missing something, looks like my internal dns stopped working because there were issues with the link to the US. All because dnssec is enabled in bind. Namely queries from a resolver server would timeout looking up MYHOST.MYDOMAIN.com.dlv.isc.org before it got to querying my authoritative server. Is there any way to work around that? Seems like a single point of failure, where resolvers will fail if there are any issues with com.dlv.isc.org. Thanks. -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

8 12

More NZ SDN news - CARDIGAN gains scale.
by Dean Pemberton 24 Aug '14

24 Aug '14

The CARDIGAN SDX system continues to gain scale in a production environment. The team is proud to announce that they have redesigned the system to provide OF1.3 multitable support which supports hardware with soft reconfigurable TCAM. CARDIGAN now provides a flexible controller framework which scales as quickly as vendors are increasing their TCAM support. With the current hardware (Pica8 3290 and Noviflow 1132) the system is able to support up to 130,000 flows today. The system optimises which flows are sent to the devices which means that many more routes that this number can be supported. Being able to support hardware from multiple vendors on the same framework allows engineers to deploy the right hardware, in the right location for them. In the early days of the deployment, there was concern expressed about the ability of this SDN system to scale. This framework now addresses those concerns head on. As can be seen below, the system is currently handling over 14,000 routes. We're going to make some changes so that we can test out the full capacity over the next few days. noviswitch# show stats table tableid 2 --------Table id: 2 Active count : 14716 Max_entries : 131071 Lookup count : 0 Match count : 0 The patches to the RouteFlow system which enable these features have been passed back to the RouteFlow development team so that they can be accessed by the entire community. Upwards and onwards.

2 1

Route limits
by Dave Mill 13 Aug '14

13 Aug '14

Hi all Just as a bit of a heads-up in case anyone else is hitting this issue (and not aware). We tend to be learning a total of about 511k or so unique IPv4 routes nowadays from external peers. Combine this with various internal routes and the actual number of IPv4 routes on a couple of our border routers is a few short of 512k. If any of these routers have a RIB or FIB limit of 512k IPv4 routes then expect some strange issues. Like random routes not showing up in your routing table.. *cough* brocade xmr default cam partition *cough* Have a nice day! Cheers Dave

6 8

IT/Network Service/Support in Shanghai
by Christoph Berthoud 11 Aug '14

11 Aug '14

Hi All, I am desperately looking for an IT consultant or company based in Shanghai who can offer Level 2/3 IT sales & support for my Shanghai office (10 staff) and speaks English as a first language. Trying to give technical instructions to someone with English as a second language is causing more harm than good and none of my staff there are technical enough for some of the steps I require of them. Any recommendations from our wonderful community much appreciated. Please reply off-list. -- Thanks Christoph

1 0

Apropos that dial-up discussion
by Juha Saarinen 06 Aug '14

06 Aug '14

<AOL>http://qz.com/245585/aol-still-has-2-3-million-dialup-subscribers-and-theyr…</AOL> -- Juha Saarinen twitter: juhasaarinen

1 0

Chorus ADSL to VDSL card swaps causing PPP issues
by Barry Murphy 06 Aug '14

06 Aug '14

Hey Guys, Chorus have been swapping cards in DSLAMs from NALT (ADSL Capable) to NVLT (VDSL Capable) throughout their network. >From looking at the Chorus Planned Network Notifications for a cabinet in BSY (Browns Bay) I can see over the last 2 months they have been swapping cards with about 65 customers at a time. Since this work began and customers swapped to the new cards we've noticed that some broadcom chipsets are having issues connecting with ADSL, it establishes PPP only around 10-20% of the time with 20 retries. Sometimes the router can connect within 5 mins and other times can take up to 60 minutes to reconnect. We've had Alcatel investigate and from our BNG/BRAS the correct PPPoE (chorus do the PPPoA conversion when used) packets are being sent to the CPE down the handovers however the CPE doesn't receive the ConfAck in the negotiation. Further investigation showed that the CPE was showing DSL sync but a downstream attenuation of 0, Chorus ESPM tool showed the same result, hence why the DSLAM may not be passing all the comms to the CPE. Cisco routers have no issues, however routers we have seen this issue with are DLINK: DSL-2750B, TP-LINK: W8950ND, NETGEAR: DGN1000, While I have not seen this issue on any of my direct customers, I have seeing about 30-40 cases on a ISP we manage their network for. Chorus have a case open for us though this has been ongoing for a few weeks now so just want to know if there are any other operators perhaps seeing similar cases? Many thanks -- Barry Murphy

2 1

Colo in the Tauranga West Chorus/UFF CO
by Jesse Archer 05 Aug '14

05 Aug '14

Evening, We're working on an upgrade project in Tauranga and may need to colocate some switches in the Chorus CO on Cameron RD. If you work for a operator that has rack space in this CO and know you can sublet space out to other operators, I'd appreciate if you could forward me a contact for one of your commercial guys so I can take it further. Only after 3-4U so thought I'd ask the community before looking at going down the road of getting an entire footprint (and having 90% of the space go to waste!). *Jesse Archer* *General Manager*Full Flavour *p. *07 929 7111 *ddi*. 07 281 1391 *s*. Skype username "myfullflavour" *e*. jesse(a)fullflavour.co.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.co.nz <http://www.fullflavourmedia.co.nz/> *a. *Tauranga Business Centre, 50 Devonport Road, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

1 0

Telecom Dial-up IPNet service
by Dave Mill 04 Aug '14

04 Aug '14

Hi Vaguely operational. Telecom have announced their Dial IP service will be retired on Dec 1 this year. Are any ISPs on this list intending on still offering dial-up after this date? Maybe using their own modem banks or via the TelstraVodahugClearDice equivalent service? Feel free to reply on or off list. Cheers Dave (vaguely representing Inspire Net)

8 7

Whitcoulls Network Contact
by Clayton Hubbard 03 Aug '14

03 Aug '14

Hi All, Is anyone on the list from Whitcoulls Networks that could contact me off-list. Thanks, *Clayton Hubbard* Senior Engineer, The Network for Learning Ltd W: http://www.n4l.co.nz A: Suite 306, Geyser Building, 100 Parnell Road, Parnell, Auckland 1052 P: PO Box 37118, Parnell, Auckland 1151 <http://www.n4l.co.nz> <https://twitter.com/@N4LNZ/> <https://www.facebook.com/NetworkForLearning> <https://plus.google.com/104649004276520409744/about> <http://www.linkedin.com/company/the-network-for-learning-ltd-n4l->

1 0

ntp2.ntp.net.nz failure
by Josh Simpson 01 Aug '14

01 Aug '14

Hi all, As some of you may have noticed ntp2.ntp.net.nz and its aliases p2.ntp.net.nz and s2.ntp.net.nz stopped responding late on 08-07-2014. This is related to a hardware fault with the NTP appliance, we are currently investigating both repair and replacement options. As a temporary measure the DNS records for ntp2.ntp.net.nz, p2.ntp.net.nz and s2.ntp.net.nz have been pointed to ntp3.ntp.net.nz. Information about these appliances and the services they provide can be found at https://ntp.net.nz. If you need any further information, please contact us at support(a)nzrs.net.nz Josh -- Josh Simpson Systems Administrator .nz Registry Services M: +64 21 783 399 P: +64 4 555 0124 GPG: 6516 B4EA 413B CAED 57B5 0956 124C 8AC3 A362 8080 www.nzrs.net.nz

5 7

Dynamic network topology mapping - L2 and L3
by Hamish 31 Jul '14

31 Jul '14

Hello there, Does anyone out there have a recommendation for a good network topology mapping application ? I want to see a live layer 2 and 3 topology diagrams - routing and vlans etc. juniper space used to have such a plugin but they killed it :( the only other mention of an app capable of such a thing that I have heard of is solar winds . Network Topology Mapper Any advice or experience with such an app would be much appreciated. cheers Hamish

8 8

Anyone got information about Lightbox Streaming
by Alexander Neilson 30 Jul '14

30 Jul '14

Hi All Just wondering if people knew where Spark was going to be serving up Lightbox from? Is it akamai? or another CDN system? I just looked at their base domain which seems to hit a redirect hosted in Amazon AWS and then to a register form hosted in Exact Target. Just wanting to see where the traffic will be coming from to be ready should it turn out to be popular (It does seem to be some first run stuff but still not convinced it will be amazingly popular - we will see) I didn’t find the information from my simple google search however this could be just a bad search. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

More Xtra (Yahoo) email changes
by Martin Kealey 28 Jul '14

28 Jul '14

Last week it was Xtra blocking outbound mail at reception. This week any message having a Xtra or Yahoo address in the From header is being rejected upon receipt from our listserver, despite the listserver using its own address in the envelope & in the Sender header. When I follow the URL in the quoted SMTP responses, it turns out that Yahoo think I should change my listserver so that the senders address does not appear in the From header. Which sucks, because we already put the listserver's own address in the Sender header (which most mail clients will then render as "From knitting circle on behalf of Jane Smith"), and as far as I know, we're following the RFCs to the letter. So have I missed something in the RFCs that permits Yahoo to do this? They're essentially saying "we don't permit our subscribers to subscribe to mailing lists unless the mailing list is deliberately broken". -Martin

4 3

Spark/Telecom DNS issue
by Daniel Siva 28 Jul '14

28 Jul '14

FYI - looks like there is an issue with telecom authoritative DNS. Short version: it's currently broken. Long version: there is a whois/NS loop $ whois telecom.co.nz. ... domain_datelastmodified: 2014-07-28T13:54:33+12:00 ... ns_name_01: ns1.spark.co.nz ns_name_02: ns2.spark.co.nz ns_name_03: ns3.spark.co.nz $ whois spark.co.nz ... domain_datelastmodified: 2014-06-10T10:08:28+12:00 ... ns_name_01: ish4.telecom.co.nz ns_name_02: ish5.telecom.co.nz No glue records, so no way to resolve the NS IP's FYI: ish4.telecom.co.nz. A 146.171.13.195 ish5.telecom.co.nz. A 146.171.13.194 ns1.spark.co.nz. A 146.171.13.195 ns2.spark.co.nz. A 146.171.247.25 ns3.spark.co.nz. A 146.171.13.194 -- Daniel

5 5

Experience with Open Wireless Networks?
by B. Morgan Murrah 27 Jul '14

27 Jul '14

Hello- I wanted to enquire for anyone who may have experience or had issues with people running Open Wireless Networks and/or have any particular view to the Open Wireless movement (https://openwireless.org/)? Alongside this question I am interested in gauging how much IP Addresses are used as a token of identity for legal purposes in practice. This for the purposes of research at the Law Faculty of Otago. My apologies if this is somewhat outside of the purview of this mailing list. Any insight gratefully accepted. Regards -- B. Morgan Murrah [image: http://]about.me/bmmurrah https://keybase.io/airbridge <https://keybase.io/airbridge/key.asc>

3 2

Re: [nznog] NZNOG Digest, Vol 139, Issue 19
by Frank March 24 Jul '14

24 Jul '14

On 25/07/2014 12:00 p.m., nznog-request(a)list.waikato.ac.nz wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Xtra's email changes (Glen Eustace) > 2. Re: Xtra's email changes (Glen Eustace) > 3. Re: Xtra's email changes (Nathan Ward) > 4. Re: Xtra's email changes (Nathan Ward) > 5. Re: Xtra's email changes (Brian Gibbons) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 24 Jul 2014 20:19:42 +1200 > From: Glen Eustace <geustace(a)godzone.net.nz> > To: nznog <nznog(a)list.waikato.ac.nz> > Subject: [nznog] Xtra's email changes > Message-ID: <1406189982.13837.6.camel(a)agree-6.godzone.net.nz> > Content-Type: text/plain; charset="utf-8" > > Hi, > > Can somebody confirm or deny please. > > I just had another query where a customer uses Xtra broadband, and is > hence an xtra customer but are hosting their email with us. If they use > their someone(a)xtra.co.nz email address to authenticate against > send.xtra.co.nz, can they continue to use their own domain when sending > email ? > > This seems, in my opinion, to be something that should be allowed but I > can't test it as I am not an Xtra customer nor have access to an Xtra > broadband connection. > > Glen > -- ----- Frank March at home +64 (0)21 494 165

1 0

Re: [nznog] Xtra's email changes
by Glen Eustace 24 Jul '14

24 Jul '14

On Thu, 2014-07-24 at 20:30 +1200, Alexander Neilson wrote: > Probable that nobody can give you a final answer on it until the > policy actually takes effect as it would work fine now. > > > However you could contact xtra and ask. Probably good advice, so I gave it a go. The first person I spoke to didn't know so I was passed on to another. The response I received was. The 'send.xtra.co.nz' server will reject any address that has not been registered even if an xtra.co.nz address has been used for authentication. To register such addresses, ring the Telecom Broadband Help Desk on 0800225598. I then raised the question of whether the MFD photocopiers had been catered for as many don't provide a particularly feature-full smtp client. The answer was "I don't know, please try it and see, if it doesn't work please contact us and we will try to get it working for you". These were better responses than I had expected but still leave me trying to explain to our customers what they need to do. Sigh...

3 2

Re: [nznog] Xtra's email changes
by Nathan Ward 23 Jul '14

23 Jul '14

(Replying to the list, because you did the same for Alexander Neilson) On 24/07/2014, at 9:53 pm, Glen Eustace <geustace(a)godzone.net.nz> wrote: > On Thu, 2014-07-24 at 21:46 +1200, Nathan Ward wrote: >> I’m confused, are there questions you have that are not answered by this page? >> http://www.telecom.co.nz/help/internet/smtpupdate.html > > OK, I plead ignorance. I didn't get the original letter sent to the customer and I didn't know about this page. And yes you are right it pretty much gives all the answers. I learned about this page from this post: http://list.waikato.ac.nz/pipermail/nznog/2014-July/020987.html I have learned that it is wise not to ignore email from Richard Naylor, especially when it is a reply to a post you’ve made to the list. > In relation to the MFDs from what I have heard, the ones that are broken are not that old <face-sad.png> Like I say, don’t put them anywhere near the Internet, or replace them with something with software written since the 1990s. I’m sure the NE2000 network card upgrade was expensive at the time, but really, I’m sure it’s done it’s dash. Anyway, I recommend that the rest of this conversation happen on Geekzone, there’s a thread on it here: http://www.geekzone.co.nz/forums.asp?forumid=39&topicid=150006 -- Nathan Ward

1 0

Xtra's email changes
by Glen Eustace 23 Jul '14

23 Jul '14

Hi, Can somebody confirm or deny please. I just had another query where a customer uses Xtra broadband, and is hence an xtra customer but are hosting their email with us. If they use their someone(a)xtra.co.nz email address to authenticate against send.xtra.co.nz, can they continue to use their own domain when sending email ? This seems, in my opinion, to be something that should be allowed but I can't test it as I am not an Xtra customer nor have access to an Xtra broadband connection. Glen -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen and Rosanne Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph: +64 6 357 8168, Fax: +64 6 357 8165, Mob: +64 27 542 4015 "A Ministry specialising in providing low-cost professional Internet Services to NZ Christian Churches, Ministries and Organisations"

1 0

CallPlus Old Open Recursive Resolver - closing
by Nick Clifford 22 Jul '14

22 Jul '14

Hi all, This by now is a pretty standard, we too are closing down public access to the last of our open recursive resolvers. CallPlus Group (Slingshot/Flip/2Talk/Callplus/Orcon) customers will continue to have access to them, but external access will be denied. IP Addresses: 202.180.64.2 202.180.64.3 202.180.64.4 202.180.64.9 Close Date: 31st July 2014 All of the above IP addresses will stop answering to recursive queries for non CallPlus/Slingshot/2Talk/Flip/Orcon customers Thursday Morning 31/July/2014. If for some strange reason this would cause you concern, please contact myself on this email address. (Malware authors are welcome to contact with their GPS coordinates and bunker thickness - we can arrange something). Cheers, Nick Nick Clifford NOC Support Manager Direct: +64 9 919 6162 Mobile: +64 21 960 411 Fax: +64 9 919 6163

1 1