- NZNOG - lists.nznog.org

Lightening Talks
by Richard Nelson 24 Jan '13

24 Jan '13

We are now looking for lightening talks for tomorrows session at the conference. If anyone would like to present a talk lasting 5 min or so could you please send an email to either me or talks(a)nznog.org. Thanks, Richard Nelson

1 1

Barracuda product warning.
by Alex White-Robinson 24 Jan '13

24 Jan '13

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/2013… Vulnerability overview/description: ----------------------------------- 1) Backdoor accounts Several undocumented operating system user accounts exist on the appliance. They can be used to gain access to the appliance via the terminal but also via SSH. (see 2) These accounts are undocumented and can _not_ be disabled! 2) Remote access via SSH An SSH daemon runs on the appliance, but network filtering (iptables) is used to only allow access from whitelisted IP ranges (private and public). The public ranges include servers run by Barracuda Networks Inc. but also servers from other, unaffiliated entities - all of whom can access SSH on all affected Barracuda Networks appliances exposed to the Internet. The backdoor accounts from 1) can be used to gain shell access. This functionality is entirely undocumented and can only be disabled via a hidden 'expert options' dialog (see Workaround).

1 0

IPv6 Security
by Andrew Ruthven 23 Jan '13

23 Jan '13

Hey, These emails that just came through on the ipv6hackers seem relevant given Karl's talk on IPv6 Security. Cheers! -- Andrew Ruthven Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2013 | Come join the party... | http://linux.conf.au

1 0

networking is hard - tshirts
by Sam Russell 23 Jan '13

23 Jan '13

I hope you're all enjoying the conference, and the awesome tshirts that some of us are wearing. I've had a few requests for them, so I thought I'd ask on list to see who wants them - they're $35 each, sizes are a bit larger than kiwi (my size M is like a normal kiwi size L), black with white text on them saying "networking is hard" I need to get about 10 requests all up to make it worthwhile, and I've had 5 already, so if I can get another 5 by the end of the day I might be able to get them printed in time for tomorrow - if not, you'll have to find some way to get your shirt, I'm in wellington, but given how much many of us travel I'm sure you could find someone to courier yours to you -- Sam Russell Network Engineer Research & Education Advanced Network NZ Ltd ddi: +64 4 913 6365 mob: +64 21 750 819 fax: +64 4 916 0064 http://www.reannz.co.nz

1 0

NZIX OpenFlow adventures phase 3
by Dean Pemberton 22 Jan '13

22 Jan '13

Morning everyone, You all remember the NZIX OpenFlow project I've been posting about of late. Well we've just ticked off Phase 3, and as far as we can tell it's another world first. Phase 3 was to implement a distributed SDN controlled fabric and pass production traffic over it. Today, with considerable support from Citylink, REANNZ and others in the SDN community. We have managed to extend our existing fabric across the city, provision our first customer link and pass their production traffic across the fabric and onto the WIX. I'll be giving some of the technical details at the NZNOG conference this week, but suffice to say that we're not about to stop here. We've got a distributed fabric now, and we're looking to extend this even further. 1) More locations. I still want Auckland and we're very close to having this be a reality 2) Look at further services this enables at Layer3 (going to working closely with Citylink on developing this) 3) Look at the auto-provisioning options this can provide at Layer2 So a couple of things to take away from this. . Remember that if you have a WIX peering session currently, I've already configured you a test session on my route server for you. Turn up a test session and convince yourself that it works router bgp 9483 bgp router-id 202.7.0.119 . If you have any suggestions of things we can be working on in the future then now's the time to get in touch and let us know your thoughts. What are the things that you always wished you could do on the exchange but couldn't? We can build those tools. . Thank you to all the people who made this success possible. If you've been a supporter since the beginning then we know who you are and thanks. See you that the conference! Regards, Dean

1 0

Re: [nznog] Will the conference wireless have IPv6?
by Pete Mundy 22 Jan '13

22 Jan '13

Yep, it'll work just fine, I was using it today to get to Google hosted email via IMAP/SSL/IPv6 & KAREN. Pete On 23/01/2013, at 6:16 PM, Lloyd Parkes <lloyd(a)must-have-coffee.gen.nz> wrote: A game server that I've just built here at home is only on IPv6 and I'd like to be able to connect to it. Cheers, Lloyd

1 0

Will the conference wireless have IPv6?
by Lloyd Parkes 22 Jan '13

22 Jan '13

A game server that I've just built here at home is only on IPv6 and I'd like to be able to connect to it. Cheers, Lloyd

1 0

National Library of New Zealand Web Harvest 2013
by Jay Gattuso 18 Jan '13

18 Jan '13

Hi All, This email is to inform you of the NLNZ intent to undertake its 3rd Whole of Domain Web Harvest. The planned dates for this exercise are the 4th to the 22nd of February 2013. The harvest will be undertaken by the Internet Archive<http://archive.org/index.php> on our behalf, More details can be found on the web harvest website: http://natlib.govt.nz/publishers-and-authors/web-harvesting/2013-nz-web-har… If anyone has any specific concerns, requests or questions, please do not hesitate to contact me directly: jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)dia.govt.nz> or via the project email address: Web.Archive(a)dia.govt.nz<mailto:Web.Archive(a)dia.govt.nz?Subject=About%20the%202013%20Web%20Harvest> If anyone wants to discuss this further on the mailing list I am happy to do so. King regards, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

5 5

Microsoft at APE and WIX
by Kevin Epperson 16 Jan '13

16 Jan '13

Hello Good folks of NZNOG - After following several recent threads on this list and other forums regarding Microsoft performance issues in New Zealand, I am pleased to now be in a position to solicit peering sessions at both APE and WIX (details below.) We are also peering with the route servers at both exchanges. Please feel free to email me directly with any related questions and also be on the look out for a Microsoft network engineer at NZNOG next week. Microsoft Details: AS macro: AS-MICROSOFT Suggested max prefixes : 250 Prefer no MD5. NOC E-mail: ioc(a)microsoft.com NOC Phone : 1-425-705-2686 Peering: peering(a)microsoft.com ASN: 12076 APEv4: 192.203.154.162 APEv6: 2001:07FA:0004:c0cb::9aa2 WIXv4: 202.7.0.220 WIXv6: 2001:07FA:0003:ca07::00dc Full details at http://as8075.peeringdb.com To establish a session please set up your side and reply with the details below to peering(a)microsoft.com ASN: IPv4 address: IPv6 address: Approx number of IPv4 prefixes: Approx number of IPv6 prefixes: AS macro: NOC email: NOC phone: Peering email: Regards, -Kevin

1 0

NZNOG13 Update - Space still available in workshops and tutorials
by NZNOG Announcements 14 Jan '13

14 Jan '13

*NZNOG13 RegistrationsThis year, the 10th year of standalone NZNOG meetups is looking to be a cracker. The conference itself is now sold out but we do have a waitlist and some places may become available. You can sign up to the conference waitlist at: http://nznog.org/register We still have places on the tutorials and workshops, so if you are interested you might want to get in sooner than later. Tutorials - Wednesday the 23rd of January - Mikrotik wireless and routing systems (full day) - APNIC - Internet Resource Management IRMe (half day) - APNIC - DNSSEC (half day) - IPv6 Security - Karl Auer, Into6 (half day with morning and afternoon sessions) - Out of Band Management - OpenGear (half day) Workshops - Monday the 21st - Wednesday the 23rd JanuaryIPV6 BGP Routing - Philip Smith (APNIC) and Daniel Griggs (PCH) This workshop is targeted at engineers and network administrators from both ISPs and SOHO/enterprise networks. - ISP network topology overview - ISP IP Addressing Plan - Introduction of Internet routing infrastructure - 2 Byte and 4 Byte AS Numbers - BGP operation - Understanding BGP metric and path selection process - Configuring BGP within an AS [iBGP, route reflector] - Configuring BGP between ASes [eBGP] - Controlling routing update traffic [prefix list, distribute list, route map] - Route Summarization with BGP - BGP Traffic engineering [MED, Local Pref, AS-Path prepend] It is highly recommended that participants bring their own laptop computers (At least Pentium 4, 1gb Ram, DVD drive, with administrative access to system) to practice the lessons learned during the workshops. DNSSec Workshop - Phil Regnauld (NSRC) and Joe AbleyThe course is designed for network engineers, systems administrators, and anyone who is involved in managing DNS operations. - DNS concepts - BIND (DNS server) and Resolver (DNS client) configurations - Reverse DNS - DNS Security - TSIG - DNS security extensions (DNSSEC) - DNS and IPv6 It's more DNSSEC centric than a DNS operations 101 course. Goals - Learn about the real world threats that exploit DNS weaknesses - Understand the risks you run when your DNS isn't secured - Learn about the security extensions for DNS: DNSSEC - Enable signing & validation in the organisation - Learn about the impact of DNSSEC on one's DNS infrastructure - Help participants take the next step, whether it involves deploying their own signing solution, acquiring a vendor based solution, or using a third party service Topics zone signature, key management, automated DNSSEC management using BIND & OpenDNSSEC, Hardware Security Modules (HSM) presentation on key ceremonies, DNSSEC Practice Statements Sponsors NZNOG are grateful for the support we receive from our sponsors. Platinum Sponsor - Vocus Communications Gold Sponsors - Go Wireless NZ - Internet New Zealand - Network Hardware Resale - Alcatel Lucent - Citylink - Kordia - FX Networks - REANNZ Silver Sponsors - Fortinet - Opengear - Brocade - ISPANZ Bronze Sponsors - Allied Telesis Workshop Sponsor - Internet New Zealand For further information: To register: http://www.nznog.org/register Follow us on Twitter: @NZNOG Susbscribe to the NZNOG mailing list: http://www.nznog.org/mailing-list Visit the conference website: http://nznog.org <http://2012.nznog.org.nz/> For general enquiries info(a)nznog.org*

1 0

National Library of New Zealand - Whole of Domain Web Harvest 2013
by Jay Gattuso 14 Jan '13

14 Jan '13

Hi All, This is a quick reminder that the National Library of New Zealand about to embark on its 2013 Whole of Domain Web Harvest. Our partners, the Internet Archive will be commencing a test harvest within the next 24 hours. This test harvest is expected to last a few days, and will attempt to complete a basic resources discovery for all the URIs included in the seedlist for the harvest. >From this test we expect to identify: (1) URIs that are no-longer active, (2) robust approximations for storage requirements and (3) URIs that could result in significant quantities of resources being harvested. These results will be used to hone the seed list in preparation for the harvest proper (running between the 4th and 22nd of February 2013). Please refer to this link for more information: http://natlib.govt.nz/publishers-and-authors/web-harvesting/2013-nz-web-har… Or feel free to drop me a line if you have any questions. Best, Jay Gattuso Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

[offer] Accommodation NZNOG
by Joel Wirāmu Pauling 13 Jan '13

13 Jan '13

Kia ora, just putting out an offer of (free) accommodation for this years conference. We have 1 queen guest bedroom and a bed settee . Reply off list it you want to take up the offer. -Joel http://linkedin.com/in/aenertia http://couchsurfing.org/people/aenertia

1 0

Call for APNIC 35 Policy Proposals
by Skeeve Stevens 12 Jan '13

12 Jan '13

Dear Colleagues, Is there something in APNIC's policies that you think needs an update, could be improved or changed for the better? If so, then why don't you submit a policy proposal for APNIC 35? If you are not sure whether your policy idea has merit or is covered by an existing one, please seek some advice from the Chairs or the community in general by posting to this mailing list. You never know until you ask. Policy proposals will need to be submitted before Wednesday 30 January 2013 to be considered for consensus at the APNIC 35 Policy SIG in Singapore 25 February - 1 March 2013. There are two ways to submit a policy proposal: 1. Use the online form at: http://www.apnic.net/community/policy/proposals/submit 2. Send your proposal in TEXT format to <policy at apnic dot net>. We encourage you to submit proposals well before the deadline. This gives the community more time to consider your proposal and gives you the opportunity to amend your proposal, if needed, based on the community's feedback. More information ---------------- APNIC's policy development process is explained at: http://www.apnic.net/policy View current and past policy proposals at: http://www.apnic.net/policy/proposals Learn more about APNIC 35 at: http://conference.apnic.net/35 We look forward to seeing you in Singapore APNIC Policy SIG Chairs Andy, Skeeve, and Masato * * *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website! eintellego.mx Free Apple products during this promotion!!!

1 0

Looking for Juniper person experienced with vlan bridging on J Series
by Bryan Tabb 09 Jan '13

09 Jan '13

Hi As subject mentions looking to get some help with what is possible, if what is envisaged is a good or bad idea and some config. Suspect this will only take an hour or two. If interested please drop me a line with contact details. Thanks Bryan Tabb

1 0

NZIX OpenFlow adventures phase 2
by Dean Pemberton 09 Jan '13

09 Jan '13

Hi Everyone, So the OpenFlow router has been up for a wee white now so it seemed about time to let you all poke at it. Phase 2 of the project is to: Deploy an OF switch on an exchange point which can function as a route server. This switch should be able to BGP peer with any peers which currently use the exchange and allow for the exchange of IPv4 prefixes as required. I've used the information on the WIX Peer list webpage (http://wix.nzix.net/peers.html) to pre-configure passive[1] BGP peering sessions for all existing WIX participants. So feel free to use your existing WIX IP addresses and AS numbers to connect to IP: 202.7.0.119 Aut-num: 9483 Things to look for: 1) It should pass you the routes that it learns from the route servers with the Flatnet AS in the path but with the original next hops. This longer path should mean that you won't explicitly prefer the routes from me. Bit of safety there. 2) It will pass you any other routes that people pass me directly. As I mentioned before we've got a few more plans. The next phase will start to take us a bit beyond what the current exchanges offer. In the new year we are going to deploy a similar switch at the APE. This hardware will become part of the single SDN controlled switch that we currently have in Wellington. When you peer with the OpenFlow switch at the WIX you'll get APE prefixes as well. Peer at the APE, you'll get WIX prefixes. Once we can get some traffic on the fabric and a presence at multiple places then we can really start to innovate. . BGP prefix communities based on the millisecond difference between your peering port and the prefix next hop . BGP aware RPF on the exchange (solves the pointing default problem) Got any other ideas. Throw them in the mix and we'll see what we can do. Have a Merry Christmas everyone. Regards, Dean [1] Passive means that I'll never reach out and initiate a session with you. You need to initiate the session with me. Just safer incase people think that I'm TCP Port 179 hax0r-ing them.

8 14

NZNOG13 - Register now and get a free Mikrotik Access Point
by NZNOG Announcements 08 Jan '13

08 Jan '13

*NZNOG13 Is Upon Us Register early for NZNOG13 and receive a free Mikrotik wireless access point and router!! The New Zealand Network Operators Group (NZNOG) is holding their annual conference and training workshops and tutorials in Wellington from the 21st to 25th January 2012. Training workshops and tutorials run from the 21st to the 23rd of January. The conference is then held on the 24th and 25th of January. Our annual conference provides both an opportunity to exchange technical information, and a high-value opportunity for NZ’s networking staff to ‘network’ amongst themselves. This is New Zealand’s only technical networking conference. The event will be held at the Mecure Hotel in Wellington. Accommodation is available on site at a discounted rate for conference attendees as well as in the immediate area. Registrations are open. The cost of attendance has been confirmed at $250, students receive a 60% discount and a fellowship scheme exists should you require assistance to attend. Conference Presentations 24-25th January Confirmed presenters for NZNOG13 include: Scott Bartlett (Orcon) - UFB one year in Andrew McDonald (Vodafone) - RBI Wholesale 12 months. Colin Dyer (GeoNet) and Ewen McNeill (Naos, Consultant) - Geonet: 1pps to 10,000 hits/second. Beatty Lane-Davis - SDN: accelerating the pace of evolution in packet and transport networks Sam Russell (REANNZ) - Thimble: OpenFlow-enabled device David Brownlie (REANNZ) - perfSONAR for measuring performance, and troubleshooting. Donald Love - UFB realities Philip Smith (APNIC) - IPv4 / IPv6 route table analysis for NZ Phil Regnauld (NSRC) - DNSSEC George Michaelson (APNIC) - Last words on IPv6 Stu Fleming (WIC) - On being a WISP Plus updates from NZRS, APNIC, CityLink, IPv6 Task Force, WAND and InternetNZ. Tutorials - 23rd January - Mikrotik wireless and routing systems (full day) - APNIC - Internet Resource Management IRMe (half day) - APNIC - DNSSEC (half day) - IPv6 Security - Karl Auer IPv6Now (half day) - Out of Band Management (TBC) Workshops - 21st - 23rd January IPV6 BGP Routing - Philip Smith (APNIC)This workshop is targeted at engineers and network administrators from both ISPs and SOHO/enterprise networks. - ISP network topology overview - ISP IP Addressing Plan - Introduction of Internet routing infrastructure - 2 Byte and 4 Byte AS Numbers - BGP operation - Understanding BGP metric and path selection process - Configuring BGP within an AS [iBGP, route reflector] - Configuring BGP between ASes [eBGP] - Controlling routing update traffic [prefix list, distribute list, route map] - Route Summarization with BGP - BGP Traffic engineering [MED, Local Pref, AS-Path prepend] It is highly recommended that participants bring their own laptop computers (At least Pentium 4, 1gb Ram, DVD drive, with administrative access to system) to practice the lessons learned during the workshops. DNSSec Workshop - Phil RegnauldThe course is designed for network engineers, systems administrators, and anyone who is involved in managing DNS operations. - DNS concepts - BIND (DNS server) and Resolver (DNS client) configurations - Reverse DNS - DNS Security - TSIG - DNS security extensions (DNSSEC) - DNS and IPv6 Social Events Wednesday Night EventThe Southern Cross<http://www.thecross.co.nz/>bar on Abel Smith Street has been confirmed for the networking event sponsored by Network Hardware Resale. The Southern Cross (affectionately known as 'The Cross') is somewhat of an icon in Wellington with unique decor and an impressive range of boutique beers - not to mention their legendary stone grills and Kiwiana inspired menus. Kick off will be 6PM, Wednesday the 23rd of January. Thursday Night Conference DinnerOne of the highlights of the NZNOG conferences each year is the conference dinner which provides an opportunity for attendees to get together, relax and enjoy a night out. The 2013 event will be held at Zealandia: The Karori Wildlife Experience<http://www.visitzealandia.com/what-is-zealandia/zealandia-in-a-nutshell/>and promises to be a great night! Buses will leave the conference venue for Zealandia at 6PM on Thursday the 24th of January. Accommodation Options Mercure is offering an exclusive room rate for NZNOG attendees starting from: $115.00 room only $135.00 bed and breakfast for one guest, 1 room $155.00 bed and breakfast for two guests, 1 room * Rates include GST. * Rates are per room per night, based on single, double or twin share occupancy To book contact Dean on Dean.Grocott(a)accor.com and mention you are with attending NZNOG 2013 http://www.accorhotels.com/gb/hotel-1991-mercure-wellington/index.shtml Multiple other accommodation options within Wellington exist. Sponsors NZNOG are grateful for the support we receive from our sponsors. Platinum Sponsor - Vocus Communications Gold Sponsors - Go Wireless NZ - Internet New Zealand - Network Hardware Resale - Alcatel Lucent - Citylink - Kordia - FX Networks - REANNZ Silver Sponsors - Fortinet - Opengear - Brocade - ISPANZ Bronze Sponsors - Allied Telesis Workshop Sponsor - Internet New Zealand For further information: To register: hhttp://www.nznog.org/register Follow us on Twitter: @NZNOG Susbscribe to the NZNOG mailing list: http://www.nznog.org/mailing-list Visit the conference website: <http://nznog.org.nz/>http://nznog.org<http://2012.nznog.org.nz/> For information in fellowships info(a)nznog.org*

3 2

Re: [nznog] NZIX OpenFlow adventures phase 2
by Josh Bailey 08 Jan '13

08 Jan '13

Hi Nathan; Hardware flows != OpenFlow flows. OpenFlow is an API. Some reflection on these statements may suggest an answer. Thanks, == If you hit the limit of number of flows, what happens? Does it reject the flow, or does it delete older ones to make room for it? Given there is no default route, what happens if you get a packet that doesn't match a flow? Does it drop it, or punt it to the controller? (ie. is there a default flow to drop) If it deletes older flows, and punts non-matching packets to the controller, that sounds like there's a potential for really bad performance spikes as you approach the upper limits of the flow table. If it deletes older flows and drops non-matching packets, then that's worse. If you simply reject new flows, then that's a bit better, but you've got to make sure that the route reflectors never re-advertise prefixes unless they're installed in to the flow tables successfully, or you drop packets, or punt them to the controller as above. Some interesting issues to consider! Agreed re. VPLS/etc. - but you've got to make sure your switches have reliable connectivity to your controller(s). In a network like WIX, that might be hard, not sure.

4 4

Re: [nznog] Temporary fibre cable across Wanganui river near Harihari - anybody got photos?
by Richard Naylor 08 Jan '13

08 Jan '13

At 11:38 a.m. 3/01/2013, Sam Russell wrote: >I'm sure this looks hilarious, does anyone have pictures of their >thrown fibre? You live a sheltered life and have been denied the goods things.. A good lineman will put a throw line between the two wires you ask for at the top of a pole with great ease. These days a cherry picker seems to be the answer to everything high up. My old throw line finally broke and split. Come to NZNOG-13 and buy me a beer and I'll tell you how it was made. These days I'm a little more elegant and carry a bow and arrow, with fishing line, but its really not as good as a throw line and only really good at blasting through trees. In the old days (before helicopters were cheap to hire), power boards got cables across rivers, gullys and valleys etc using rockets with a draw line. Of course, the drawline was sometimes forgotten, completely by accident, of course. In much the same way it was strange how the 11kV earth sticks kept falling into streams and rivers that had fish in them. Very strange. While a good linesman was amazing, us mere mortals caused much hilarity and rolling around laughing by the gang. Working life used to be so much fun - actually it still is. Leave the office for a day or two and experience Layer 0 engineering..

10 10

Microsoft Office 365 Routing Issues with Telecom/Xtra/Global Gateway?
by Regan Murphy 07 Jan '13

07 Jan '13

Going to get my clients to attempt to log this with Telecom, but it sounds like a widespread problem developing.... http://www.geekzone.co.nz/forums.asp?ForumId=86&topicid=113151 -- Regan

2 1

alcatel.co.nz domain
by Simon Lyall 07 Jan '13

07 Jan '13

This domain seems to be expiring... Just noticed cause a bunch of people are subscribed to this mailing list using it. -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

3 2

Re: [nznog] alcatel.co.nz domain
by Peter Lambrechtsen 07 Jan '13

07 Jan '13

I've forwarded this onto a number of friends & colleagues of mine in ALU. Hopefully one of them will find someone who can sort it... Sent from my HTC Wildfire S on Telecom's XT mobile network. ----- Reply message ----- From: "Simon Lyall" <simon(a)darkmere.gen.nz> To: "nznog" <nznog(a)list.waikato.ac.nz> Subject: [nznog] alcatel.co.nz domain Date: Tue, Jan 8, 2013 9:54 am This domain seems to be expiring... Just noticed cause a bunch of people are subscribed to this mailing list using it. -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Authoritative DNS config
by Richard Hector 07 Jan '13

07 Jan '13

This isn't an NZ specific question, and also perhaps a bit basic; hope that's ok. Packaged (debian, ubuntu anyway) versions of BIND come with various default zones configured - localhost, broadcast and root hints. Are any of these actually necessary for an authoritative-only name server? It seems to me they're mostly/only useful for short-circuiting simple/standard queries on a resolver. Is that right? Not having any other zones than my own in my config would make it somewhat easier to configure views. Thanks, Richard

3 3

Temporary fibre cable across Wanganui river near Harihari - anybody got photos?
by Sam Russell 02 Jan '13

02 Jan '13

I'm sure this looks hilarious, does anyone have pictures of their thrown fibre? Also beer -- Sam Russell Network Engineer Research & Education Advanced Network NZ Ltd ddi: +64 4 913 6365 mob: +64 21 750 819 fax: +64 4 916 0064 http://www.reannz.co.nz

1 1

Fwd: NZIX OpenFlow adventures phase 2
by Dean Pemberton 02 Jan '13

02 Jan '13

---------- Forwarded message ---------- From: *Dean Pemberton* Date: Wednesday, January 2, 2013 Subject: NZIX OpenFlow adventures phase 2 To: Truman Boyes <truman(a)suspicious.org> Cc: nznog <nznog(a)list.waikato.ac.nz> Nox at the moment. Happy to have a chat about different controllers if you've got a preference. Dean On Tuesday, January 1, 2013, Truman Boyes wrote: > Hey Dean, > > What are you using for the OFP controller? NOX/POX/Big Switch? > > Cheers, > Truman > > > On 18 Dec, 2012, at 10:40 PM, Dean Pemberton wrote: > > > Hi Everyone, > > > > So the OpenFlow router has been up for a wee white now so it seemed > > about time to let you all poke at it. > > Phase 2 of the project is to: > > Deploy an OF switch on an exchange point which can function as a route > server. > > This switch should be able to BGP peer with any peers which currently > > use the exchange and allow for the exchange of IPv4 prefixes as > > required. > > > > I've used the information on the WIX Peer list webpage > > (http://wix.nzix.net/peers.html) to pre-configure passive[1] BGP > > peering sessions for all existing WIX participants. > > > > So feel free to use your existing WIX IP addresses and AS numbers to > connect to > > > > IP: 202.7.0.119 > > Aut-num: 9483 > > > > Things to look for: > > 1) It should pass you the routes that it learns from the route > > servers with the Flatnet AS in the path but with the original next > > hops. This longer path should mean that you won't explicitly prefer > > the routes from me. Bit of safety there. > > 2) It will pass you any other routes that people pass me directly. > > > > As I mentioned before we've got a few more plans. The next phase will > > start to take us a bit beyond what the current exchanges offer. > > > > In the new year we are going to deploy a similar switch at the APE. > > This hardware will become part of the single SDN controlled switch > > that we currently have in Wellington. > > When you peer with the OpenFlow switch at the WIX you'll get APE > > prefixes as well. Peer at the APE, you'll get WIX prefixes. > > > > Once we can get some traffic on the fabric and a presence at multiple > > places then we can really start to innovate. > > > > . BGP prefix communities based on the millisecond difference between > > your peering port and the prefix next hop > > . BGP aware RPF on the exchange (solves the pointing default problem) > > > > Got any other ideas. Throw them in the mix and we'll see what we can do. > > > > > > Have a Merry Christmas everyone. > > > > > > Regards, > > Dean > > > > > > > > [1] Passive means that I'll never reach out and initiate a session > > with you. You need to initiate the session with me. Just safer > > incase people think that I'm TCP Port 179 hax0r-ing them. > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > -- Regards, Dean

2 1

connection issues to ftp.nz.debian.org
by Hugh Davenport 27 Dec '12

27 Dec '12

Hey, On two of my servers running with different ISP's I've noticed connection issues in the last few days to ftp.nz.debian.org. I can ping it, but can't connect via HTTP or FTP. This is both on my flat server (Snap) and my parents server (Slingshot). When I try from work, which is connected to the WIX, it works fine. hugh(a)hugh-laptop:~$ ping -c 1 ftp.nz.debian.org PING ftp.citylink.co.nz (202.7.6.9) 56(84) bytes of data. 64 bytes from ftp.citylink.co.nz (202.7.6.9): icmp_req=1 ttl=60 time=13.7 ms --- ftp.citylink.co.nz ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 13.792/13.792/13.792/0.000 ms hugh(a)hugh-laptop:~$ telnet ftp.nz.debian.org 80 Trying 202.7.6.9... telnet: Unable to connect to remote host: Connection timed out hugh(a)hugh-laptop:~$ telnet ftp.nz.debian.org 21 Trying 202.7.6.9... telnet: Unable to connect to remote host: Connection timed out hugh(a)hugh-laptop:~$ On an interesting note, I tried using debian.ihug.co.nz/debian which is listed as a secondary server on http://www.debian.org/mirror/list. This gave me the error. hugh(a)hugh-laptop:~$ sudo apt-get update Hit ftp://debian.ihug.co.nz wheezy InRelease E: Release file for ftp://debian.ihug.co.nz/debian/dists/wheezy/InRelease is expired (invalid since 83d 20h 47min 21s). Updates for this repository will not be applied. hugh(a)hugh-laptop:~$ When I try using netselect-apt I get the following: hugh(a)hugh-laptop:~$ sudo netselect-apt wheezy <snip> The fastest 10 servers seem to be: http://ftp.nz.debian.org/debian/ http://debian.mirror.uber.com.au/debian/ http://mirror.transact.net.au/debian/ http://mirror.cse.unsw.edu.au/debian/ http://mirror.optus.net/debian/ http://mirror.optus.net/debian/ http://debian.nautile.nc/debian/ http://ftp.iinet.net.au/debian/debian/ http://mirror.waia.asn.au/debian/ http://ftp.au.debian.org/debian/ Of the hosts tested we choose the fastest valid for HTTP: http://ftp.nz.debian.org/debian/ Writing sources.list. Done. hugh(a)hugh-laptop:~$ Any thoughts? It used to work fine, and has only cropped up in the last few days. Cheers, Hugh

5 4