- NZNOG - lists.nznog.org

Bitstream 3a MAC limits
by Dave Mill 12 Mar '14

12 Mar '14

Hi all I know the answer to my question here is likely hidden deep in a PDF somewhere but someone on this list may know the answer off hand. I see that Bitstream 3a has a 64 MAC limit. What doesn't seem clear to me is if this MAC limit is a customer ONT port MAC limit, or a MAC limit for the entire customer S-VID. I had always assumed it was a limit on MACs that can be sourced from the customer ONT port but am I wrong? Is it a MAC limit on the total number of MACs that can be learnt over the entire customer S-VID (src'ed from either the provider or customer end of the link)? I'm extracting the 64 MAC limit from this document here - http://www.crownfibre.govt.nz/wp-content/uploads/2013/01/Chorus-UFB-Service… Any feedback, especially this afternoon, would be very useful. Provider is UFF. I am not really wanting to debate why someone would want that number of MACs over a BS3 connection and why some layer 3 should probably be involved here.... Cheers Dave

4 4

TVNZ On Demand
by Barry Murphy 12 Mar '14

12 Mar '14

Hey guys, wondering if anyone from TVNZ On Demand is on this list and wouldn't mind contacting me offlist regarding problems streaming if a user has an IPv6 address. The helpdesk doesn't appear to know what ipv6 is so thought I'd try an alternative. Many thanks Barry

2 1

IPv6 redundancy
by Jonathan Spence 11 Mar '14

11 Mar '14

Hi all, I started a thread on the IPv6 group on LinkedIn in regards to this but.... What is the best way to provide redundant connectivity to SMBs with IPv6? Using v4 with NAT is easy with most routers but v6 is harder. Shim6 seems to be a good idea but looks to be a dead duck. People in that thread were advocating full AS and BGP but I don't think that is easy for most SMBs unless their IT support is top notch and trained (which lets face it, most don't even know how to screw in a lightbulb). It also may mess up global routing tables causing them to get much bigger. Any ideas? Jonathan Spence Chief Executive Officer Fixed: +64 9 9510448 Mobile: +64211055634

2 1

Web audio collection
by Richard Hulse 10 Mar '14

10 Mar '14

Radio NZ has an audio collection for the web's birthday: http://www.radionz.co.nz/collections/world-wide-web Featuring Vint Cerf, Tim Berners-Lee and Andy Linton. Add beer as required.

1 0

Turning on DNSSEC validation - you know you want to!
by Andy Linton 10 Mar '14

10 Mar '14

>From this posting: http://www.internetsociety.org/deploy360/blog/2014/01/circleid-dns-security… I like this quote: However, on the recursive resolver side, I am much more of a fan of having the DNS resolution occur as close to the end user as possible. This is particularly true when you enable DNSSEC validation.

1 0

Some discussion starters from APRICOT 37
by Michael Fincham 09 Mar '14

09 Mar '14

Hi all, I recently had the pleasure of attending APRICOT 37 (many thanks to the NZNOG and InternetNZ folks, and others, who made this possible!) and felt that there were some interesting topics discussed that may be worth bringing back to the NZNOG community. Here's an unsorted and terse list of some things I thought worthwhile: -> We need to stop looking at Alexa's "top 100" websites for IPv6 support and being disappointed - we need to be looking at a much smaller proportion of the "top sites" as this is where "all of the traffic" is actually going. Facebook, YouTube, Google, Wikipedia, Akamai and GGC cache nodes. It's a port 80 world and a few sites dominate :) -> Some big providers (T-Mobile, Telstra AU) talked about having rolled out IPv6 in various forms (single stack v6, dual stack with CGNAT on v4 and native v6) to their mobile subscriber base with approximately no support impact. A common theme: "We need to test IPv6 before deploying it!" "What testing did you do with IPv4?" "None" "Well do that with IPv6 too!" -> Paraphrasing: "Customers don't know what IPv4 is to begin with, so they sure don't know or care what IPv6 is." -> These operators reported seeing /40%/ of the traffic on any given subscriber where dual stack was available going straight out to the native v6 Internet! This is a huge win if you're looking at deploying CGNAT as it means approximately half as much state needs to be kept on your expensive CGNAT boxes, and half as much traffic is being molested on the way from the customer to the 'net :) It also means you should definitely be rolling out dual stack alongside your CGNAT :) -> 464XLAT (http://tools.ietf.org/html/rfc6877) looks like it's about to be a big deal in the mobile IPv6 space. In short, 464XLAT allows for phones to run single stack native IPv6 while applications on the phone can continue to access v4 literals etc if required. Makes use of a clever combination of existing technologies. Only Android 4.3+ supports this so far, but more phone support shouldn't be far away. To me this looks like it would be a killer feature to have on fixed line CPEs, though I am unclear how it would interact with the type of NAT these CPEs typically perform (though this ought not be too far away from a tethering scenario on a phone). -> Geoff Huston's closing presentation on the state of BGP in 2013 contained some interesting measurements and insights about how worried we should be able router performance and so on. The video (https://www.youtube.com/watch?feature=player_detailpage&v=e4N9ELoM76M#t=1798) and slides (https://conference.apnic.net/data/37/2014-02-27-bgp2013_1392943641.pdf) are worth a look if you have ~ 20 minutes. Since the NZNOG list has been more alive of late, I'd welcome discussion on any of these points as certainly there is plenty here that is relevant to NZ :) -- Michael Fincham System Administrator, Unleash Office: 0800 750 250

2 2

ICONZ-Webvisions (NZ) to close Open DNS Resolvers
by Mark Foster 05 Mar '14

05 Mar '14

Hi folks ICONZ-Webvisions (the entity formerly known simply as ICONZ in NZ) will be blocking external access to our recursive DNS servers to non-customer subnets on the evening of 6 March 2014. In the knowledge that there may well be former customers or third-parties who have hard-coded the IP's of our DNS servers into their configs (or their customer configs) I'm giving notice now; the following IP's will cease to provide DNS resolution to clients outside of our network space, at that time: 210.48.65.1 210.48.65.2 210.48.66.1 210.48.66.2 Customers with concerns about this change are invited to contact our Customer Care team on 0800 843 638 or via support.nz(a)iconz-webvisions.com<mailto:support.nz(a)iconz-webvisions.com>. Regards Mark. -- Mark Foster Technical Services Manager - Australia & New Zealand [iconz-webvisions-logo-png] www.iconz-webvisions.com<https://webmail.iconz.net/owa/redir.aspx?C=ToykmhkSsEaPr3XJN6nrf-rRV-b9iM8I…> ICONZ-Webvisions, ICONZ House, 60 Airedale Street, Auckland 1010, New Zealand

2 2

NZNOG 2014 videos
by Richard Naylor 05 Mar '14

05 Mar '14

Folks I just noticed an upgrade to the video player software had taken away the SD/HD control, or at least it wasn't explicitly obvious. There is a newer version that is slightly better, but I've rolled back a release so that SD/HD is obvious. Comments/feedback appreciated. They can be off list to save clutter. Also is HD worth it ? Richard

1 0

RFC 7149 -- SDN
by Sebastian Castro 05 Mar '14

05 Mar '14

Hi: Given SDN has been a buzzword within NZNOG, I would recommend RFC 7149 as reading for those interested: http://www.rfc-editor.org/rfc/rfc7149.txt SDN: A perspective from within a Service Provider Environment Cheers -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

NZNOG conference dates for the next hundred years
by Dean Pemberton 03 Mar '14

03 Mar '14

Hi All >From time to time we run into people who claim that we keep moving the NZNOG conference dates around. Normally this is because NZNOG happens to conflict with another conference that they might want to go to. The official policy is.. "The last full usable week in January" I'm just about the give the NZNOG update at the APRICOT meeting in Kuala Lumpur. So I thought I'd solve the problem once and for all. Here are the conference dates for the next hundred years along with a script to check which a particular year. I might have a couple of these wrong and we do reserve the right to change them if required, but they are a good place to start. #!/usr/bin/perl -w use strict ; use DateTime ; use feature qw( say ) ; my $year = $ARGV[ 0 ]; my $dt = DateTime->last_day_of_month( year => $year , month => 1 ) ; while ( $dt->day_of_week != 5 ) { $dt->subtract( days => 1 ) ; } my $nznogenddate = $dt->dmy; $dt->subtract (days => 5) ; my $nznogstartdate = $dt->dmy; print ("In $year NZNOG will be held from $nznogstartdate to $nznogenddate\n") ; $ for i in `seq 2015 1 2115`; do ./dates.pl $i ; done In 2015 NZNOG will be held from 25-01-2015 to 30-01-2015 In 2016 NZNOG will be held in conjunction with APRICOT 2016, Auckland In 2017 NZNOG will be held from 22-01-2017 to 27-01-2017 In 2018 NZNOG will be held from 21-01-2018 to 26-01-2018 In 2019 NZNOG will be held from 20-01-2019 to 25-01-2019 In 2020 NZNOG will be held from 26-01-2020 to 31-01-2020 In 2021 NZNOG will be held from 24-01-2021 to 29-01-2021 In 2022 NZNOG will be held from 23-01-2022 to 28-01-2022 In 2023 NZNOG will be held from 22-01-2023 to 27-01-2023 In 2024 NZNOG will be held from 21-01-2024 to 26-01-2024 In 2025 NZNOG will be held from 26-01-2025 to 31-01-2025 In 2026 NZNOG will be held from 25-01-2026 to 30-01-2026 In 2027 NZNOG will be held from 24-01-2027 to 29-01-2027 In 2028 NZNOG will be held from 23-01-2028 to 28-01-2028 In 2029 NZNOG will be held from 21-01-2029 to 26-01-2029 In 2030 NZNOG will be held from 20-01-2030 to 25-01-2030 In 2031 NZNOG will be held from 26-01-2031 to 31-01-2031 In 2032 NZNOG will be held from 25-01-2032 to 30-01-2032 In 2033 NZNOG will be held from 23-01-2033 to 28-01-2033 In 2034 NZNOG will be held from 22-01-2034 to 27-01-2034 In 2035 NZNOG will be held from 21-01-2035 to 26-01-2035 In 2036 NZNOG will be held from 20-01-2036 to 25-01-2036 In 2037 NZNOG will be held from 25-01-2037 to 30-01-2037 In 2038 NZNOG will be held from 24-01-2038 to 29-01-2038 In 2039 NZNOG will be held from 23-01-2039 to 28-01-2039 In 2040 NZNOG will be held from 22-01-2040 to 27-01-2040 In 2041 NZNOG will be held from 20-01-2041 to 25-01-2041 In 2042 NZNOG will be held from 26-01-2042 to 31-01-2042 In 2043 NZNOG will be held from 25-01-2043 to 30-01-2043 In 2044 NZNOG will be held from 24-01-2044 to 29-01-2044 In 2045 NZNOG will be held from 22-01-2045 to 27-01-2045 In 2046 NZNOG will be held from 21-01-2046 to 26-01-2046 In 2047 NZNOG will be held from 20-01-2047 to 25-01-2047 In 2048 NZNOG will be held from 26-01-2048 to 31-01-2048 In 2049 NZNOG will be held from 24-01-2049 to 29-01-2049 In 2050 NZNOG will be held from 23-01-2050 to 28-01-2050 In 2051 NZNOG will be held from 22-01-2051 to 27-01-2051 In 2052 NZNOG will be held from 21-01-2052 to 26-01-2052 In 2053 NZNOG will be held from 26-01-2053 to 31-01-2053 In 2054 NZNOG will be held from 25-01-2054 to 30-01-2054 In 2055 NZNOG will be held from 24-01-2055 to 29-01-2055 In 2056 NZNOG will be held from 23-01-2056 to 28-01-2056 In 2057 NZNOG will be held from 21-01-2057 to 26-01-2057 In 2058 NZNOG will be held from 20-01-2058 to 25-01-2058 In 2059 NZNOG will be held from 26-01-2059 to 31-01-2059 In 2060 NZNOG will be held from 25-01-2060 to 30-01-2060 In 2061 NZNOG will be held from 23-01-2061 to 28-01-2061 In 2062 NZNOG will be held from 22-01-2062 to 27-01-2062 In 2063 NZNOG will be held from 21-01-2063 to 26-01-2063 In 2064 NZNOG will be held from 20-01-2064 to 25-01-2064 In 2065 NZNOG will be held from 25-01-2065 to 30-01-2065 In 2066 NZNOG will be held from 24-01-2066 to 29-01-2066 In 2067 NZNOG will be held from 23-01-2067 to 28-01-2067 In 2068 NZNOG will be held from 22-01-2068 to 27-01-2068 In 2069 NZNOG will be held from 20-01-2069 to 25-01-2069 In 2070 NZNOG will be held from 26-01-2070 to 31-01-2070 In 2071 NZNOG will be held from 25-01-2071 to 30-01-2071 In 2072 NZNOG will be held from 24-01-2072 to 29-01-2072 In 2073 NZNOG will be held from 22-01-2073 to 27-01-2073 In 2074 NZNOG will be held from 21-01-2074 to 26-01-2074 In 2075 NZNOG will be held from 20-01-2075 to 25-01-2075 In 2076 NZNOG will be held from 26-01-2076 to 31-01-2076 In 2077 NZNOG will be held from 24-01-2077 to 29-01-2077 In 2078 NZNOG will be held from 23-01-2078 to 28-01-2078 In 2079 NZNOG will be held from 22-01-2079 to 27-01-2079 In 2080 NZNOG will be held from 21-01-2080 to 26-01-2080 In 2081 NZNOG will be held from 26-01-2081 to 31-01-2081 In 2082 NZNOG will be held from 25-01-2082 to 30-01-2082 In 2083 NZNOG will be held from 24-01-2083 to 29-01-2083 In 2084 NZNOG will be held from 23-01-2084 to 28-01-2084 In 2085 NZNOG will be held from 21-01-2085 to 26-01-2085 In 2086 NZNOG will be held from 20-01-2086 to 25-01-2086 In 2087 NZNOG will be held from 26-01-2087 to 31-01-2087 In 2088 NZNOG will be held from 25-01-2088 to 30-01-2088 In 2089 NZNOG will be held from 23-01-2089 to 28-01-2089 In 2090 NZNOG will be held from 22-01-2090 to 27-01-2090 In 2091 NZNOG will be held from 21-01-2091 to 26-01-2091 In 2092 NZNOG will be held from 20-01-2092 to 25-01-2092 In 2093 NZNOG will be held from 25-01-2093 to 30-01-2093 In 2094 NZNOG will be held from 24-01-2094 to 29-01-2094 In 2095 NZNOG will be held from 23-01-2095 to 28-01-2095 In 2096 NZNOG will be held from 22-01-2096 to 27-01-2096 In 2097 NZNOG will be held from 20-01-2097 to 25-01-2097 In 2098 NZNOG will be held from 26-01-2098 to 31-01-2098 In 2099 NZNOG will be held from 25-01-2099 to 30-01-2099 In 2100 NZNOG will be held from 24-01-2100 to 29-01-2100 In 2101 NZNOG will be held from 23-01-2101 to 28-01-2101 In 2102 NZNOG will be held from 22-01-2102 to 27-01-2102 In 2103 NZNOG will be held from 21-01-2103 to 26-01-2103 In 2104 NZNOG will be held from 20-01-2104 to 25-01-2104 In 2105 NZNOG will be held from 25-01-2105 to 30-01-2105 In 2106 NZNOG will be held from 24-01-2106 to 29-01-2106 In 2107 NZNOG will be held from 23-01-2107 to 28-01-2107 In 2108 NZNOG will be held from 22-01-2108 to 27-01-2108 In 2109 NZNOG will be held from 20-01-2109 to 25-01-2109 In 2110 NZNOG will be held from 26-01-2110 to 31-01-2110 In 2111 NZNOG will be held from 25-01-2111 to 30-01-2111 In 2112 NZNOG will be held from 24-01-2112 to 29-01-2112 In 2113 NZNOG will be held from 22-01-2113 to 27-01-2113 In 2114 NZNOG will be held from 21-01-2114 to 26-01-2114 In 2115 NZNOG will be held from 20-01-2115 to 25-01-2115

9 8

Re: [nznog] OT: Ethernet
by Scott Weeks 03 Mar '14

03 Mar '14

--- richard.naylor(a)R2.co.nz wrote: From: Richard Naylor <richard.naylor(a)R2.co.nz> Been some celebrations recently over ethernet. Going from 10Mbps to 100Gbps over 40 years. ------------------------------------------ Late reply, but to inspire those who have (have had) managers that just don't understand what you're doing... :-) http://b2b.cbsimg.net/blogs/19740305-xerox-ethernet-memo1.jpg scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Andy Linton in the news as holder of a key to the internet
by Nigel Roberts 02 Mar '14

02 Mar '14

As spotted over here in the fairfax papers: http://www.theage.com.au/it-pro/security-it/meet-andy-linton-one-of-the-few… I think I’d get sick of the key holder (master?) jokes, too. Thanks for your good work Andy. Nigel

1 0

OT: Ethernet
by Richard Naylor 28 Feb '14

28 Feb '14

Been some celebrations recently over ethernet. Going from 10Mbps to 100Gbps over 40 years. http://www.eetimes.com/document.asp?doc_id=1263267&page_number=1 You might find it interesting reading. The call for participation in 400Gbps ethernet was made about a year ago. Interesting points (other than the historical stuff) + 10G NICs will surpass 1G in 2015. Interesting to see fall of 100Mbps. + Graph showing ATM fall off and rise of ethernet in Telco cores. Hilarious from my point of view. The first switch at CityLink was a dual ethernet/ATM one. We never had much of an ATM network because we couldn't afford the second switch ! A shareholder did loan us two, but they were multi-mode fiber and so wasn't much use. No customers wanted ATM due to the cost. None of the telcos took us seriously because we used ethernet. About 6 or 7 years later both Telecom and Clear developed ethernet products. Occasionally we showed people our pole mounted ethernet switches, running PoE, but no one really understood it. James Watts in PNN did and ran some of it. Cheaper fiber replaced it. We also had pole mounted Linux routers that we used for WiF point to point links. Another story.

1 0

IANA AS Numbers registry update
by Selina Harrington 28 Feb '14

28 Feb '14

The IANA AS Numbers registry has been updated to reflect the allocation of 2 blocks to the RIPE NCC in 2014-02-28: 200192-201215 201216-202239 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

What's the BCP/RFC that says that routers within an ISP network should not have RFC1918 link IPs?
by Matt Grant 27 Feb '14

27 Feb '14

Hi! Know I am some small fry on the list, but your help would be appreciated. This would be useful in talking to my ISP about some PMTU issues that I am having re a VPN going over PPPoE, with MTU 1480. Thanks! Matt Grant

11 11

[OT] {Humour} NCSC.govt.nz traceroute
by Alexander Neilson 26 Feb '14

26 Feb '14

The trusted guardian of NZ Information Assets. So where do they host this important guardian of our assets, of course they would host it here in Wellington wouldn’t they, maybe a backup in Auckland Serenity:~ alexander$ traceroute ncsc.govt.nz traceroute to ncsc.govt.nz (199.83.134.194), 64 hops max, 52 byte packets 1 172.31.2.1 (172.31.2.1) 0.548 ms 0.215 ms 0.191 ms 2 192.168.1.1 (192.168.1.1) 0.324 ms 0.296 ms 0.275 ms 3 113.197.96.18 (113.197.96.18) 4.058 ms 3.873 ms 4.489 ms 4 103.9.216.18 (103.9.216.18) 10.866 ms 10.734 ms 27.593 ms 5 103.9.216.19 (103.9.216.19) 10.699 ms 10.737 ms 10.956 ms 6 203.167.218.185 (203.167.218.185) 13.539 ms 11.339 ms 10.953 ms 7 ge-0-2-0-914.xcore1.acld.telstraclear.net (203.98.42.17) 11.106 ms 11.315 ms 10.950 ms 8 unknown.telstraglobal.net (134.159.174.37) 14.115 ms unknown.telstraglobal.net (134.159.174.41) 13.334 ms unknown.telstraglobal.net (134.159.174.37) 14.271 ms 9 i-0-0-4-1.tlot-core01.bx.telstraglobal.net (202.84.142.106) 136.672 ms i-0-0-4-0.tlot-core01.bx.telstraglobal.net (202.84.142.118) 138.917 ms i-0-6-4-1.tlot-core01.bx.telstraglobal.net (202.84.142.114) 138.757 ms 10 i-0-4-0-0.eqla01.bi.telstraglobal.net (202.84.251.174) 136.206 ms i-0-4-0-7.eqla01.bi.telstraglobal.net (202.40.149.254) 137.496 ms i-0-4-0-0.eqla01.bi.telstraglobal.net (202.84.251.174) 137.301 ms 11 nlayer-peer.eqla01.pr.telstraglobal.net (134.159.61.42) 143.708 ms 136.787 ms 140.136 ms 12 ae0-110g.cr1.lax1.us.nlayer.net (69.31.127.137) 138.668 ms ae0-110g.cr1.lax1.us.nlayer.net (69.31.127.141) 137.965 ms ae0-110g.cr1.lax1.us.nlayer.net (69.31.127.137) 136.064 ms 13 xe-5-3-0.cr1.iah1.us.nlayer.net (69.22.142.121) 167.796 ms 167.996 ms 168.156 ms 14 xe-3-1-1.cr1.dfw1.us.nlayer.net (69.22.142.3) 171.539 ms 194.181 ms 193.122 ms 15 xe-0-2-1.cr1.ord1.us.nlayer.net (69.22.142.4) 190.842 ms 190.634 ms 190.443 ms 16 ae0-60g.cr2.ord1.us.nlayer.net (69.31.111.154) 191.285 ms 190.151 ms 189.922 ms 17 ae2-20g.ar1.ord6.us.nlayer.net (69.31.110.254) 192.570 ms 195.793 ms 195.315 ms 18 * * * 19 * * * 20 * * * 21 * * * mmmmm. that looks like a long trip to Wellington or Auckland Whois that IP: Serenity:~ alexander$ whois 199.83.134.194 # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # # # Query terms are ambiguous. The query is assumed to be: # "n 199.83.134.194" # # Use "?" to get help. # # # The following results may also be obtained via: # http://whois.arin.net/rest/nets;q=199.83.134.194?showDetails=true&showARIN=… # NetRange: 199.83.128.0 - 199.83.135.255 CIDR: 199.83.128.0/21 OriginAS: AS19551 NetName: INCAPSULA NetHandle: NET-199-83-128-0-1 Parent: NET-199-0-0-0-0 NetType: Direct Assignment RegDate: 2011-01-14 Updated: 2012-02-24 Ref: http://whois.arin.net/rest/net/NET-199-83-128-0-1 OrgName: Incapsula Inc OrgId: INCAP-5 Address: 3500 SOUTH DUPONT HIGHWAY City: Dover StateProv: DE PostalCode: 19901 Country: US RegDate: 2010-09-15 Updated: 2014-02-25 Ref: http://whois.arin.net/rest/org/INCAP-5 OrgAbuseHandle: INCAP1-ARIN OrgAbuseName: Incapsula AbuseDesk OrgAbusePhone: +1-866-250-7659 OrgAbuseEmail: abuse(a)incapsula.com OrgAbuseRef: http://whois.arin.net/rest/poc/INCAP1-ARIN OrgTechHandle: INCAP2-ARIN OrgTechName: Incapsula Operations OrgTechPhone: +1-866-250-7659 OrgTechEmail: ip(a)incapsula.com OrgTechRef: http://whois.arin.net/rest/poc/INCAP2-ARIN OrgNOCHandle: INCAP2-ARIN OrgNOCName: Incapsula Operations OrgNOCPhone: +1-866-250-7659 OrgNOCEmail: ip(a)incapsula.com OrgNOCRef: http://whois.arin.net/rest/poc/INCAP2-ARIN # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # Serenity:~ alexander$ hmmmm, Delaware, now thats a funny place for it. It doesn’t seem to be any CDN or anything, I wonder if they are just going best price for their hosting, or does this path lead through the 5 Eyes network? Maybe our network lords and masters will be telling us to embed our network systems in foreign countries as part of our new approvals. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

5 10

Open NTP servers in New Zealand.
by Dean Pemberton 26 Feb '14

26 Feb '14

Hi All, One of the sessions this morning was from Geoff Huston on the recent NTP server DDoS attacks. The presentation is here https://conference.apnic.net/data/37/2014-02-25-ntpddos_1392941955.pdf In short if you appear on the http://openntpproject.org/ list then you should be looking to clean this up before you contribute to global DDoS attacks the size of which we have not seen in the past. I've run the WIX and APE peering ASNs against the page and here are the number of open NTP servers. You can do this yourself by substituting your AS (instead of 9483) into the following URL http://openntpproject.org/searchby-asn.cgi?search_asn=9483 If you want it as a csv then use http://openntpproject.org/searchby-asn.cgi?search_asn=9483&csv=1 Here is the WIX & APE list. Bear in mind that this only covers the NTP servers which are in the AS that peers on the exchange. Not the customers of that AS. You should use the page above to check all your customer ASNs as well and work with them to patch any servers. WIX Open NTP servers 4823 total 709 AS4770 618 AS2687 603 AS9503 368 AS23838 304 AS23655 272 AS17746 256 AS18119 205 AS24183 187 AS45280 187 AS24466 158 AS18400 122 AS10022 118 AS18015 117 AS55454 91 AS9872 73 AS132040 63 AS24324 58 AS38477 53 AS18353 51 AS45177 39 AS17412 27 AS17435 25 AS42 23 AS9433 19 AS17705 17 AS24347 12 AS23905 10 AS8674 8 AS9834 4 AS24074 4 AS24005 4 AS17649 4 AS17484 3 AS38329 3 AS132003 3 AS12076 2 AS24006 1 AS7696 1 AS18021 1 AS17792 APE Open NTP servers 11877 total 2472 AS4739 1773 AS9889 1236 AS9738 709 AS4770 618 AS2687 603 AS9503 460 AS4826 368 AS23838 304 AS23655 285 AS45459 272 AS17746 256 AS18119 229 AS38333 205 AS24183 187 AS45280 187 AS24466 185 AS24130 158 AS18400 125 AS9790 125 AS9245 122 AS10022 118 AS18015 97 AS56030 91 AS9872 73 AS132040 63 AS24324 58 AS38477 53 AS18353 51 AS45177 44 AS58666 39 AS17412 37 AS55561 27 AS17435 26 AS9303 25 AS42 23 AS9898 23 AS9433 19 AS55752 19 AS17705 17 AS9431 16 AS18199 10 AS24398 10 AS23710 8 AS9834 7 AS17492 6 AS55785 5 AS9559 5 AS55872 4 AS24074 4 AS24005 4 AS17649 3 AS45946 3 AS12076 2 AS9897 2 AS9896 2 AS37974 1 AS38451 1 AS132347 1 AS132304 1 AS10200

12 13

IPAM software
by Glen Eustace 25 Feb '14

25 Feb '14

A year or maybe two back, Andy presented a demo of some software that CityLink were using that if I recall did both the IPAM And inventory function. I think it was an open source system from a US university but I can't remember what it was called. If you can can you let me know. Thanks. Glen.

6 10

Work Practices of Cyber Security Professionals
by Muhammad Adnan 24 Feb '14

24 Feb '14

Dear Sir/Madam, I am a university researcher who is investigating the development of new, usable tools that will improve the work practices of cyber security professionals. As a first step to achieve this goal, I am undertaking a survey to gain an in-depth understanding of the day-to-day activities of cyber security professionals. The targeted participants for this survey are those who perform security related activities as a part of their job (e.g. security analysts, network administrators, systems administrators, etc.). I would be very grateful if you could spare some time and complete this short (approx. 10-15 minutes) survey for me. It can be accessed at the following link: http://edu.surveygizmo.com/s3/1536165/Work-Practices-of-Cyber-Security-Prof… If you have questions or concerns about this research, please contact me ( Muhammad.Adnan(a)gcu.ac.uk) or my Ph.D. supervisor Dr. Mike Just ( Mike.Just(a)gcu.ac.uk), both at the Interactive and Trustworthy Technologies research group (http://www.ittgroup.org/) Glasgow Caledonian University, UK. Kind regards, Adnan

1 0

NZNOG 2014 Videos
by Richard Naylor 19 Feb '14

19 Feb '14

http://www.r2.co.nz/20140130/ The videos from NZNOG 2014 should be available about now. The CDN/cache is filling at the moment. If a file plays poorly, it could still be loading, so be patient. HD files also require a decent CPU to play. All talks except the Lightning talks are in both SD and HD. There is about 28GB of video. The lightning talks are numbered sequentially. I can add names and topics if a kind person sends me those details. Thanks for waiting patiently, there was a lot to get through while we were doing other jobs. rich

2 1

Those RPKI stats
by Michael Fincham 18 Feb '14

18 Feb '14

Hi all, Firstly, thanks NZNOG folks for a great conference. In spite of getting sick and missing ~ 50% I'd still have to say I enjoyed myself :) It's been long enough now that we've probably all forgotten that I'd promised to pony up some more "interesting" RPKI stats at NZNOG, so just to keep you on your toes here they are. ---> First order of business: Did we really hijack the Internet? <--- Sadly no, we just broke BGPMON. It's a long story. ---> RPKI data for the IXes, "domestic transit" <--- I've published a fixed slide deck + some other potentially useful info on my personal website at: <http://hotplate.co.nz/archive/nznog/2014/rpki/> The website includes a link to a web based "relying party cache query tool" I've put together, for anyone interested in having a play with validating some "real world" route data. This tool is also available directly at <http://rpki-validator.lab.hotplate.co.nz/>. In short, the totals for the IXes look like this: APE: 64 invalid, 165 valid, 5474 unvalidated routes out of 3694 unique prefixes WIX: 48 invalid, 92 valid, 1875 unvalidated routes out of 1190 unique prefixes CHIX: 8 invalid, 48 valid, 769 unvalidated routes out of 728 unique prefixes A detailed breakdown of what's valid / invalid and "why" is available from the web page above, along with the raw data so these results can be replicated if desired. Does my data look dodgy or suspect? Is my methodology bogus? Probably! Please do let me know :) -- Michael Fincham

1 0

Interesting Adwords Advert..
by Craig Whitmore 18 Feb '14

18 Feb '14

I just noticed this today.. http://finch.am/scratch/dnc_discontent.png (This is what the advert looks like) It was an adwords advert I presume targeted towards NZers. Which links to.. http://dnc.org.nz/2ld-policy-amendments?gclid=CIzyxuPd1rwCFcEnpQodmFUAOQ Does anyone know who is paying for these adverts . As far as I know the new 2LD domain policy won¹t result in people loosing their .co.nz domain names. (Is this ³false² advertising?) Thanks Craig

2 3

LICA Boundaries
by Liam Farr 18 Feb '14

18 Feb '14

Hi, Does anyone out there know of or have an accurate definition of all the NZ LICA boundaries they could point me to or provide off list? Or otherwise be able to point me at the correct person to ask, Chorus / NAD / MBIE perhaps? I am trying to produce some sort of useful graphical tool, (e.g. google maps overlay) to assist a customer, where they can punch in an address and get the correct LICA displayed for that address. (I also have a stockpile of spare liquor if that helps :D). -- Kind Regards Liam Farr liamfarr(a)me.com +64-22-610-7884

3 2

Re: [nznog] LICA Boundaries
by Peter Lambrechtsen 18 Feb '14

18 Feb '14

Or the mapping folks from Chrous... I have some maps but don't think I will be allowed to share them :/ Sent from my phone on the smartphonetwork. -------- Original message -------- From: Peter Gent <Peter.Gent(a)mbie.govt.nz> Date: 19/02/2014 8:19 AM (GMT+12:00) To: NZNOG(a)list.waikato.ac.nz Subject: Re: [nznog] LICA Boundaries Hi, Have you tried contacting the people behind www.nad.ord.nz<http://www.nad.ord.nz> to start with? Regards Peter -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Liam Farr Sent: Tuesday, 18 February 2014 11:32 p.m. To: Nznog List Subject: [nznog] LICA Boundaries Hi, Does anyone out there know of or have an accurate definition of all the NZ LICA boundaries they could point me to or provide off list? Or otherwise be able to point me at the correct person to ask, Chorus / NAD / MBIE perhaps? I am trying to produce some sort of useful graphical tool, (e.g. google maps overlay) to assist a customer, where they can punch in an address and get the correct LICA displayed for that address. (I also have a stockpile of spare liquor if that helps :D). -- Kind Regards Liam Farr liamfarr(a)me.com +64-22-610-7884 _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog http://newzealand.govt.nz/ - connecting you to New Zealand central & local government services Any opinions expressed in this message are not necessarily those of the Ministry of Business, Innovation and Employment. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Apologies
by Ray Taylor 17 Feb '14

17 Feb '14

I must apologise to the group. I have been a long time subscriber but don't post. Mailing list technology is a bit before my time so I was not exactly sure how I was to keep replies within the same thread / branch on the list archive. I was assuming if I forward to the list, it would place it in the correct thread much like a support ticketing system based on subject. Of course I was forwarding a few emails one after the other with responses and didn't see the particular email was sent to me off list. I shall go and find a how-to wiki on this mailing list stuff next time I need to post. With regards to my issue, I have our IP block / ASN advertised on our behalf by our upstream provider as we don't peer using BGP. The NOC at vocus replied to me and said somewhere along the chain there is an issue and they were most helpful in passing a message to whoever is responsible. As predicted by those who responded to my query, they were very fast in their response. Jonathan Brewer has quite rightly reminded me this is one of the woes of tier 7 bandwidth..something I should look at changing. Anyhow, thanks for the help Ray Taylor Taylor Communications ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 Description: header_logo

2 1