- NZNOG - lists.nznog.org

Re: [nznog] Labour alleges failure of Southern Cross Cable
by Scott Weeks 11 Nov '12

11 Nov '12

--- pieter(a)insync.za.net wrote: From: Pieter De Wit <pieter(a)insync.za.net> SAT2 cable was full, iirc and SAT3 only linked to India etc up the west coast. ----------------------------------------------------------- http://submarinecablemap.com scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Re: [nznog] Labour alleges failure of Southern Cross Cable
by Sam Russell 08 Nov '12

08 Nov '12

One would hope she'd see the irony of using twitter over the link that she claims to be broken Sent from my iPhone On Nov 9, 2012, at 1:31 PM, Tim Price <tim(a)initech.co.nz> wrote: Except for where resiliency was down due to previously scheduled maintenance… Certainly wasn’t seamless from my point of view. But yes, Clare Curran needs to GTFO *From:* nznog-bounces(a)list.waikato.ac.nz [mailto: nznog-bounces(a)list.waikato.ac.nz] *On Behalf Of *Sam Russell *Sent:* Friday, 9 November 2012 3:27 p.m. *To:* Al Twohill *Cc:* nznog *Subject:* Re: [nznog] Labour alleges failure of Southern Cross Cable Presumably a redundant link means that nobody loses service when they accidentally break one of them? It does seem like an excuse to blame National for not propping up Pacific Fibre, rather than anything wrong with a redundant set of links failing over correctly due to a fault, as designed Sent from my iPhone On Nov 9, 2012, at 1:20 PM, Al Twohill <moebiusproject(a)gmail.com> wrote: On 9 November 2012 15:16, David Robinson <nznog(a)karit.geek.nz> wrote: http://computerworld.co.nz/news.nsf/news/labour-alleges-failure-of-southern… How much substance and how much Political Grandstanding? Yes a second cable would be nice but be careful saying the sky is falling. There is a thread discussing it on AUSNOG. Looks like Labour basically quoted that. http://lists.ausnog.net/pipermail/ausnog/2012-November/015297.html _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Open resolvers again
by Juha Saarinen 04 Nov '12

04 Nov '12

Spotted this earlier: http://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack "NZ Attack Sources: 167 AU Attack Sources: 1237" Are the local open resolvers seen as a problem? Hei kona- mai,* -- *Juha Saarinen AITTP* *juha.saarinen.org <http://juha.saarinen.org> <http://twitter.com/juhasaarinen> Twitter <http://twitter.com/juhasaarinen>

10 11

Re: [nznog] Open resolvers again
by Hamish MacEwan 03 Nov '12

03 Nov '12

On 3 November 2012 11:02, Matthew Luckie <mjl(a)caida.org> wrote: > http://en.wikipedia.org/wiki/Extension_mechanisms_for_DNS Oh, there's my misunderstanding right there, "The first set of extensions was published in 1999." Fascinating, ("Domain Information Groper") thanks for the link. Hamish. -- http://hamish.kiwi.me

1 0

Andy Linton is now an OpenFlow expert
by Josh Bailey 01 Nov '12

01 Nov '12

It took 2h. About 30m to make an OpenFlow controller PC out of bunch of trash, and boot my controller DVD. "ed" wasn't available on my controlled DVD so I made Andy use nano to configure it. That slowed us down quite a bit. 90m to put OpenFlow firmware on a 3780 switch, including walking up and down the hill to VUW get 1G SFPs. So if you have any questions about whether OpenFlow/SDN works/forwards packets in hardware - ask Andy. He knows. And has a live CD controller.

3 3

(non-op) shout out to NetHui South, November 2012
by Joe Abley 01 Nov '12

01 Nov '12

Hi all, For those who were not already aware, InternetNZ is planning a NetHui event in Dunedin in a few weeks: http://2012-south.nethui.org.nz/ Your amiable (and humble!) trustees support this effort, which looks to be very shiny and excellent. The programme looks good. You should go. You know, if you want to. Joe Abley NZNOG Trust Marketing Department

1 0

AJ the hero!!!
by Skeeve Stevens 31 Oct '12

31 Oct '12

Hey all, AJ is a hero!!! http://www.smh.com.au/travel/travel-incidents/extremely-obnoxious-no-help-f… * * *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website for Oct/Nov! eintellego.mx Free Apple products during this promotion!!!

5 5

NZNOG 2013 - registrations open
by Gerard Creamer 30 Oct '12

30 Oct '12

NZNOG 2013 - registrations open ============================= Registrations for New Zealand's pre-eminent technical Internet networking conference - NZNOG 2013 - are now open. Hosted by the New Zealand Network Operators Group, NZNOG 2013 is the country's only technical networking conference, and features a host of plenary sessions, practical workshops and tutorials. Spaces are limited, so register now and join your fellow ICT specialists for a feast of information sharing, technical up-skilling and professional networking. To register, please visit http://www.nznog.org/register What: NZNOG 2013 When: 21 - 25 January 2013 Where: Mercure Hotel, Wellington The platinum conference sponsor is Vocus Communications. ---- Conference structure NZNOG 2013 incorporates two three-day practical workshops, a one-day of technical tutorials and the conference-proper. Workshops: 21 to 23 January, 2013 Advanced routing - taught by Philip Smith, APNIC DNSSEC - trainer to be confirmed Tutorial: 23 January, 2013 Topics to be confirmed Conference-proper: 24 - 25 January, 2013 Programme and keynote speakers to be confirmed A range of pricing options are available, including a heavily-discounted student registration: Main conference (waged) - $250.00 Main conference (student) - $50.00 Practical workshop (advanced routing or DNSSEC) - $150.00 Tutorial - $50.00 ---- Conference Fellowships available Assistance is available to those people that mightn't otherwise be able to attend NZNOG 2013 but have a lot to offer to, or gain from, the NZNOG community. Fellowships are open to all - employed, unemployed, students, programmers. Fellowships will cover conference and tutorial registration fees, and accommodation. Travel assistance may also be considered. Applicants must: - Write a few paragraphs explaining why they need a fellowship to NZNOG 2013 and what they hope to get out of it. - Demonstrate a history of involvement in some aspect of the NZNOG community or an intent to become involved, and how attending NZNOG 2013 will benefit them. - Actually attend the NZNOG sessions! - Fellowship prospects will be helped greatly if applicants are presenting, or intend to present a conference paper, lightning talk or otherwise contribute to the conference. If you are interested in being considered for a fellowship please e-mail talks(a)nznog.org. ---- More information More information about NZNOG 2013 can be found at www.nznog.org. For sponsorship opportunities please contact sponsorship(a)nznog.org. Cheers, Gerard (NZNOG 2013 Organising Committee)

1 0

DKIM vulnerability
by Juha Saarinen 25 Oct '12

25 Oct '12

Thought this would be of operational interest to DKIM users.... http://www.wired.com/threatlevel/2012/10/dkim-vulnerability-widespread/all/ Hei kona- mai,* -- *Juha Saarinen AITTP* *juha.saarinen.org <http://juha.saarinen.org> <http://twitter.com/juhasaarinen> Twitter <http://twitter.com/juhasaarinen>

3 2

Xtra mail admins around?
by Tim Price 17 Oct '12

17 Oct '12

Can someone who looks after Xtra's mail systems please contact me. We're seeing problems with Xtra customers delivering mail to a domain recently transferred from Xtra to DTS. It looks like there are some legacy records left behind from the removal process. Regards Tim Price Network Operations Manager DTS Limited.

7 11

NZNOG 2013 - Call for Papers
by Gerard Creamer 17 Oct '12

17 Oct '12

Call for papers - NZNOG 2013 Doing something interesting in the Internetworking space? Submit an NZNOG conference paper and you could win a trip to the next APRICOT meeting in Singapore! ---- The NZNOG organising committee invites papers for its 12th annual conference, to be hosted at the Mercure Hotel, Wellington, New Zealand from 21 – 25 January 2013. There will the three day Workshops 21 – 23 January, a day of tutorials on 23 January with the main conference on 24 – 25 January. The best local conference paper as judged by the organising committee will win a trip to APRICOT 2013, to be held in Singapore, 19 February to 1 March 2013. So, get writing! Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practises and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 5 November. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate abstracts based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. The best local paper will be judged by a selection of the organising team. Return flights from New Zealand, accommodation, and conference fees will be covered. It will be expected the best paper is submitted by the winner for presentation at APRICOT. More details on paper submission can be found at http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org -- Netspace Services Limited http://www.netspace.net.nz Phone +64 4 917 8098 Mobile +64 21 246 2266 Level 4, 191 Thorndon Quay, Thorndon PO Box 12-082, Thorndon, Wellington 6004, New Zealand

1 0

TelstraClear 6to4 relay router down again?
by Lloyd Parkes 15 Oct '12

15 Oct '12

Does anyone know if the TelstraClear 6to4 relay is down again? This looks like what happened in May last year, except that this time, I'm working with a brand new router, so it could just be me. I think I've got the hang of the RouterOS firewall and the packet dumps say the 6to4 packets are going out, but I don't trust RouterOS that much yet. Cheers, Lloyd

2 1

If you are using APNIC as an RPKI trust anchor, please update your Trust Anchor Set.
by George Michaelson 14 Oct '12

14 Oct '12

If you are using APNIC as an RPKI trust anchor, please update your Trust Anchor Set. APNIC will be switching to a new RPKI 'split' trust anchor system on the 25th of October. This change is needed to align APNIC administered resources with their allocation hierarchy. These resources will also be certified under each responsible parent registry at the appropriate time. In accordance with RFC6490 the old APNIC Trust Anchor Locator, associated certificate and repository will be removed, when the certificate expires on the 28th of October. 5 new Trust Anchor Locator (TAL) have been published. These will be kept up to date as an independent trust anchor set for resources maintained by APNIC. The production cycle will start on the 25th of October. Relying parties must add these new TAL by the 25th of October in order to maintain continuity of validation. If you have any questions please contact me. George Michaelson (ggm(a)apnic.net) Please add the following to your trust anchor set: rsync://rpki.apnic.net/repository/apnic-rpki-root-afrinic-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMLL96YV9pf0rZ4Ow/bk cgpoPfsRzkcgmisyCuMUdotHwrp8pepujhohatScRK09ILRrZYCdpX4121MJhqXC P3u3hy9fF0CeARKX/Q82nJccD4dtUp23UcFys8hwJgNYZI910ajkAxwNT//H/TFw oUYbzZGBR7o2awMc7GdQl/j6dgOkV6AfYy5DyDEgOUNHnUxED2rreefL/E2Fr2ST Esar6bTR4Tg4+nVF1PjAkgN0tKZYe4wZ6VmtqV/VTngSLysim6av7ki+JR3cVgVU OqXeh1vPjH2tNu6u9bX37ZrdVb6NBRer9I99IDbKvyhELb6nzo8+Q74zga9HI+Pf QwIDAQAB rsync://rpki.apnic.net/repository/apnic-rpki-root-arin-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6vscYtzhe0CfFk5Ro44 llPhsInXtfAxqfYmK7m9V3khkqK3d3/ZAW6pcJm7qW8XhEGl+F5mUeeLIm5JoIhr kT5B5M6uL0VlCCkZJH4h76ybOa83vWITNZEDy9L3c3nK4S+Basu3vYoE4ICXGG+J 7zg5Iw9saV+p03E2w1g16pt1QI3Cnggp6edkeWClEz3aPw/ULOIHb7YmatWwdERl tL9LsuMSKszQLUY7F4XVpxey/rJYAZgzDUh+b6813WAClCkkydNjsbviuekAWJbx sW7Mcw53u30K4g8MP03CjkDOubyoR4Qo99R1UQJCdrRsFKbSSfN/fOA4y7ikc3xs jQIDAQAB rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RWSL61YAAYumEiU8z8 qH2ETVIL01ilxZlzIL9JYSORMN5Cmtf8V2JblIealSqgOTGjvSjEsiV73s67zYQI 7C/iSOb96uf3/s86NqbxDiFQGN8qG7RNcdgVuUlAidl8WxvLNI8VhqbAB5uSg/Mr LeSOvXRja041VptAxIhcGzDMvlAJRwkrYK/Mo8P4E2rSQgwqCgae0ebY1CsJ3Cjf i67C1nw7oXqJJovvXJ4apGmEv8az23OLC6Ki54Ul/E6xk227BFttqFV3YMtKx42H cCcDVZZy01n7JjzvO8ccaXmHIgR7utnqhBRNNq5Xc5ZhbkrUsNtiJmrZzVlgU6Ou 0wIDAQAB rsync://rpki.apnic.net/repository/apnic-rpki-root-lacnic-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoYPp3l3DWyPtLWrmRn4 Oux9hQ5bxd0SX/f6ygHxik+I3eMJP5J0Pr2e500tyXb2uKsX9kDqu/kckr+TUMhV BHd5yAv8OAE3YYEvpz/7uTX7cYy2yUeA76OEP75Y88OIQEzGpPLNpIzDxMggxuDh IhkA5xMiUJgVoEgmWSzR+MuRBjv2422wAGB5GpLgYsOjpwvG0VPmhnE+39+10ucQ CLt0Ny5kOR4an2tkvHjm7rzKDnFm8MWxPzAWESdf+8g7ITzSglqxDNiK5E5rdzNt h1Kvp+9RwaFArw6Ky1A4HhnoplN4EfKwxq0YamuKV0ZTTpWyT2+qDuE6sOfHRbJ0 5QIDAQAB rsync://rpki.apnic.net/repository/apnic-rpki-root-ripe-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsQlXmEklLYApoDo7GEa NNTEGFPU5wJpi04iXuga2xn+g/TMLOlyJbjuPYRtRm/7VbRnN3m9Ta+WETy03+Fm EbXzB4xxhJKVik/ARHBnrBWhLyURy8Q5/XplE9cJein37IE1mIsbKM7o/90S225w 7GuvW7T4kjPWYmBFOywHWsfQO1EdsgiJrkz+Ab67ZkdSIiKHkf2UE6/MrbDEj+QK 9+s/vKH8BtDhaLmTWY+bVvfJ3+AWDH6roo1ozbl5yamQFbLOl3ns30f3yOJcNSNu /qgMQRRyp2sXXQovhTy8yqm3LFspaCWnTmQtBieWZwibuOa4Z27A1FzTMst2T4wY /wIDAQAB

1 0

Xtra DNS
by Simon Lyall 14 Oct '12

14 Oct '12

Can somebody on the team that looks after Xtra's DNS servers please contact me. I'm seeing problems with a specific record that works okay with most/all other NZ ISPs ( the record has a short TTL but has been broken for days ). My work's site has a work-around in place but various other sites ( like some at Mozilla ) will be broken for Xtra customers. The servers I am talking about are: 202.27.184.3 alien 202.27.184.5 terminator 202.27.158.40 dnsc1 202.27.156.72 dnsc2 -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

1 0

Added a new Range of IP addresses in NZ - Geolocation updates
by Greg Theron 09 Oct '12

09 Oct '12

Hi Guys We have setup an ISP in New Zealand and have allocated part of our Australian IP address space over here. Could I please ask everyone to update their Geolocation Databases to include the 180.222.160.0/20 as being based in Auckland? Thanks heaps Greg inetnum: 180.222.160.0 - 180.222.175.255 netname: TELCOINABOX-AP descr: Telcoinabox Pty Ltd descr: Telcoinabox NZ Limited descr: Level 4, 15 Huron Street, Takapuna, Auckland country: NZ admin-c: TNLN1-AP<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=TNLN1-AP&form_type=advanc…> tech-c: TNLN1-AP<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=%20TNLN1-AP&form_type=adv…> mnt-by: APNIC-HM<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=%20APNIC-HM&form_type=adv…> mnt-lower: MAINT-TELCOINABOX-AU<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=MAINT-TELCOINABOX-AU&form…> mnt-routes: MAINT-TELCOINABOX-AU<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=MAINT-TELCOINABOX-AU&form…> mnt-irt: IRT-TELCOINABOX-AU status: ALLOCATED PORTABLE remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ remarks: This object can only be updated by APNIC hostmasters. remarks: To update this object, please contact APNIC remarks: hostmasters and include your organisation's account remarks: name in the subject line. remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ changed: hm-changed(a)apnic.net 20091014 changed: hm-changed(a)apnic.net 20121009 source: APNIC Greg Theron [cid:image001.png(a)01CDA6D7.4DA3C3D0] Telcoinabox NZ Limited | Level 4, 15 Huron Street, Takapuna, Auckland D: +64 9 4880106 | M: +64 27 874 4783 | F: 0800 883 526 telcoinabox.co.nz Add us on social media: g [cid:image002.png(a)01CDA6D7.4DA3C3D0]<http://facebook.com/telcoinabox> [cid:image003.png(a)01CDA6D7.4DA3C3D0] <http://www.linkedin.com/company/419134?trk=tyah> [cid:image004.png(a)01CDA6D7.4DA3C3D0] <http://twitter.com/#!/telcoinabox_nz> ________________________________ The information contained in this electronic mail transmission is intended by Telcoinabox (NZ) Ltd for the use of the named individual or entity to which it is directed and may contain information that is confidential or privileged. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error. Opinions expressed in this email are those of the sender and not necessarily the opinions of the employer. This email and any attached files should be scanned to detect viruses. No liability will be accepted by the employer for loss or damage (whether caused by negligence or not) as a result of email transmission.

4 4

FW: ICANN News Alert -- Implementing the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA
by Leo Vegoda 08 Oct '12

08 Oct '12

Hi, The consultation described in the announcement below is being run to gather input on the best way to implement the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA, which was ratified in May. In particular, we are keen to gather input on the most useful registry format for the Recovered IPv4 Pool. If you have a particular preference, please provide input to the consultation. Many thanks, Leo Vegoda From: ICANN News Alert Sent: Thursday, October 04, 2012 1:37 PM Subject: ICANN News Alert -- Implementing the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA <http://www.icann.org/> Description: ICANN News Alert <http://www.icann.org/en/news/announcements/announcement-04oct12-en.htm> http://www.icann.org/en/news/announcements/announcement-04oct12-en.htm _____ Implementing the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA 4 October 2012 Forum Announcement: Comment Period Opens on Date: 4 October 2012 Categories/Tags: Internet Protocol Addressing Purpose (Brief): The Board ratified the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA in May. This public comment period is intended to gather input on options open for implementation. Public Comment Box Link: <http://www.icann.org/en/news/public-comment/implementing-ipv4-post-04oct12-…>http://www.icann.org/en/news/public-comment/implementing-ipv4-post-04oct12-… message was sent from:ICANN | 12025 Waterfront Drive Suite 300 | Los Angeles, CA 90094-2536Email Marketing by <http://www.icontact.com/a.pl/144186> Description:iContact - Try It Free! <http://app.icontact.com/icp/mmail-mprofile.pl?r=9828084&l=6333&s=FAC9&m=895…> Manage Your SubscriptionDescription:http://click.icptrack.com/icp/track.php?msgid=89518…

1 0

FW: APE MAC addresses
by Mark Frater 02 Oct '12

02 Oct '12

Anyone know what the rational is around the "official policy around APE" of only having a single MAC address per port? I would have thought that there was some technical merit in allowing at least 2 to cover rotuer replacement (without MAC address spoofing) and offer some peer router diversity options (e.g. either via separate peering sessions or VRRP implementation.) Regards Mark Frater

5 7

New surveillance Laws
by Tony Wicks 30 Sep '12

30 Sep '12

http://www.nzherald.co.nz/nz/news/article.cfm?c_id=1&objectid=10837641 Has anyone complied a definitive guide on what the enacted law means for us as network operators ? thanks

1 0

ETNO SPNP proposal
by Juha Saarinen 25 Sep '12

25 Sep '12

Wrote this earlier today: http://www.itnews.com.au/News/316593,eu-telcos-seek-end-to-settlement-free-… Would be interested to hear what the local view on mandatory SPNP. Hei kona- mai,* -- *Juha Saarinen AITTP* *juha.saarinen.org <http://juha.saarinen.org> <http://twitter.com/juhasaarinen> Twitter <http://twitter.com/juhasaarinen>

8 8

NZ peering - IPv6, Looking glasses etc.
by Sid Jones 17 Sep '12

17 Sep '12

FYI: We've upgraded the the Palmerston North exchange so that it supports IPv4 and IPv6 peering announcements, this means that all five of the NZ peering points operated by Citylink are now dual-stacked. If you want to add IPv6 peering please contact us - peering @ citylink.co.nz You can see who is peering with the route servers using http://nzix.net/peers.html There is also Looking Glass visibility to all the route servers available at http://nzix.net/cgi-bin/lg.cgi Lastly, another reminder that you no longer need to submit filter list updates.

1 0

Security Survey: Please Participate
by Sockrider, Gary 17 Sep '12

17 Sep '12

[http://www.swiftpage1.com/CampResource/2T0ZVZBHI4PY5TEG/header.jpg] ________________________________ Arbor Networks would like to invite you to participate in our annual Infrastructure Security Survey - a survey of service providers, enterprises, government agencies, universities and other network operators around the world. The purpose of the survey is to gauge and report on general security issues, practices, procedures and observations from the industry. All data gathered from the survey will be compiled in the aggregate and published as Arbor’s 8th annual infrastructure security report and accompanying presentations. Individual responses are treated anonymously and no respondent names will appear in the report or presentations. As a reference, you may access a copy of our 7th annual report here: http://pages.arbornetworks.com/rs/arbor/images/WISR2011_EN.pdf<http://www.swiftpage1.com/SpeClicks.aspx?X=2T0ZVZBHI4PY5TEG00Y9WW> To participate in this year's survey, please click on the following link: http://www.arbornetworks.com/survey/ISR2012<http://www.swiftpage1.com/SpeClicks.aspx?X=2T0ZVZBHI4PY5TEG01Y9WW>. You will be directed to a secure (SSL) connection to begin. The survey should take 30 minutes or less to complete. Survey completion by September 28, 2012 would be greatly appreciated. Thank you very much for your consideration. Please feel free to contact me at cmorales(a)arbor.net<mailto:cmorales(a)arbor.net> should you have any questions on the survey or Arbor Networks. Regards, Carlos E. Morales Vice President Systems Engineering and Sales Operations

1 0

Fwd: RIPE NCC now allocating IPv4 address space from the last /8 netblock
by Skeeve Stevens 14 Sep '12

14 Sep '12

* * *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Cloud ---------- Forwarded message ---------- From: Eugen Leitl <eugen(a)leitl.org> Date: Sat, Sep 15, 2012 at 2:12 AM Subject: RIPE NCC now allocating IPv4 address space from the last /8 netblock To: NANOG list <nanog(a)nanog.org>, tt(a)postbiota.org, forkit! <fork(a)xent.com> http://arstechnica.com/information-technology/2012/09/europe-officially-run… Europe officially runs out of IPv4 addresses RIPE NCC now allocating IPv4 address space from the last /8 netblock by Iljitsch van Beijnum - Sep 14, 2012 3:20 pm UTC Earlier today, the RIPE NCC (Réseaux IP Européens Network Coordination Centre) announced it is down to its last "/8" worth of IPv4 addresses. This means that it is no longer possible to obtain new IPv4 addresses in Europe, the former USSR, or the Middle East, with one small exception: every network operator that is a "RIPE member" or "local Internet registry" (LIR) can obtain one final block of 1024 IPv4 addresses. To fulfill these requests, the RIPE NCC is keeping that last /8, which contains 16.8 million addresses, in reserve. RIPE NCC None of this comes as a surprise given that the global pool of free IPv4 addresses was emptied in February 2011. APNIC, which distributes IP addresses in the Asia-Pacific region, ran out of IPv4 addresses in May 2011; it has been working under the "final /8" regime ever since. The remaining three Regional Internet Registries are AfriNIC (Africa), LACNIC (Latin America and the Caribbean), and ARIN (North America), which all have enough IPv4 addresses to last at least two more years. Since the depletion of IPv4 address space in the APNIC region, little information has surfaced about how network operators in the region have managed the situation. However, the lack of IPv4 addresses only impacts organizations and consumers who need additional addresses, or who need addresses for the first time. Existing IPv4 users remain unaffected, and so the immediate impact is limited. Also, large network operators get large address blocks from the RIRs and they typically have a pool of unused addresses of their own, so few will be experiencing immediate problems. However, every year for the past five years, some 200 million new IPv4 addresses have been put into use. Without a steady supply of fresh addresses, many Internet-related activities are going to become problematic in the years to come. Fortunately, 20 years ago the Internet Engineering Task Force (IETF) foresaw that the 3.7 billion addresses afforded by the 32-bit IPv4 address space would become a problem, and started working on a replacement: IPv6. But the IPv4 depletion didn't happen as fast as the IETF originally predicted, and IPv6 adoption has languished. But recently, IPv6 adoption got a big push in the form of World IPv6 Launch. Eventually, IPv6 will replace IPv4, but the transition won't be pretty. Reader comments 19 Iljitsch van Beijnum / Iljitsch is a contributing writer at Ars Technica, where he contributes articles about network protocols as well as Apple topics. He is currently finishing his Ph.D work at the telematics department at Universidad Carlos III de Madrid (UC3M) in Spain. @iljitsch

1 0

speedtest.net - Texas to Wellington vs. Texas to Christchurch
by Jeremy Lawson 10 Sep '12

10 Sep '12

I was having some issues transferring to/from one of my Rackspace VPSs, so I run a few tests on speedtest.net from the VPS to various parts of NZ. I expect SOME difference, but these are outrageous. Basically: What the hell is going on in Christchurch? Ping 41ms - Wellington (CityLink) 167ms - Christchurch (Snap) 182 - Culverdon (Amuri Net) Download (transfer to Texas from NZ) 152.79 Mb/s - From Wellington 2.35 Mb/s - From Christchurch 1.99 Mb/s - From Culverdon Upload (transfer to NZ From Texas) 69.28 Mb/s - To Wellington 18.97 Mb/s - To Christchurch 7.48 Mb/s - To Culverdon Source: (each of these are the last of several similar results) http://www.speedtest.net/result/2171916814.png http://www.speedtest.net/result/2171913440.png http://www.speedtest.net/result/2171915443.png ---------------------------------------------------------------------------- Jeremy Lawson

8 8

FW: Request to clear DNS record cache in the ISP Network
by John Gandy 10 Sep '12

10 Sep '12

ISPs may wish to action the attached request from Al-Jazeera received today. Regards J John Gandy Commerce Commission | Chief Adviser 44 The Terrace ‌| PO Box 2351 ‌| Wellington 6140 | New Zealand DDI +64 (0)4 924 3677 | john.gandy(a)comcom.govt.nz<mailto:Alfred.example(a)comcom.govt.nz> [cid:image001.png(a)01CD8FFF.FB2104D0]<https://twitter.com/#!/FutureBroadband> [cid:image002.jpg(a)01CD8FFF.FB2104D0]<http://www.linkedin.com/groups?gid=4036838&trk=hb_side_g> From: telco Sent: Tuesday, 11 September 2012 8:04 a.m. To: John Gandy; Simon Thomson Subject: FW: Request to clear DNS record cache in the ISP Network Importance: High Kind regards, Silvia From: Nabil Belkaid [mailto:BelkaidN(a)aljazeera.net] Sent: Monday, 10 September 2012 11:20 p.m. To: telco Subject: Request to clear DNS record cache in the ISP Network Importance: High Dear Sir/Madam, To whom it may concern We, the Al-Jazeera Network is one of the worlds leading media network, is requesting your cooperation in instructing ISP's within your jurisdiction to clear their DNS cache. Our DNS servers were compromised recently and hackers set a long TTL (Time To Live) timer for our DNS record. Even though we have recovered from the attack, many users within your jurisdiction are unable to reach our services because of the incorrect DNS record for our domain names in the providers network. We are requesting your assistance to reach the providers so that they can clear the caches for the following domains that belongs to AlJazeera Networks. aljazeera.net aljazeera.com aljazeerasport.net aljazeerasport.com ajsdealers.com ajtransparency.com aljazeerait.net aljazeerakiswahili.com aljazeerakiswahili.org aljazeeraportal.net beinsport.net beinsport.fr beinsports.net beinsports.tv thepalestinepapers.com ajnm.me ajb.me aje.me ajtu.me aljazeera-story.net aljazeera.co.uk Aljazeera.com.tr Aljazeera.com.qa Maila.aljazeera.net Mailb.aljazeera.net We kindly request that you instruct the providers within your jurisdiction to take this action immediately. Please note that this is affecting our brand negatively and our ability to deliver the news. Please kindly act immediately. With Regards [cid:aljazeera_logo1] Nabil Belkaid Senior Engineer Media Networks & Security Section IT & Digital Media Department | Technology Division [cid:al_tel1]+974 44897073 | [cid:al_mobile1] +974 33217191 [cid:al_env1] belkaidn(a)aljazeera.net<mailto:belkaidn(a)aljazeera.net> [cid:al_mouse1] www.aljazeera.net<http://www.aljazeera.net> ________________________________ Notice: This email is intended only for the use of the individual or entity named above and may contain information that is confidential and privileged. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this email is strictly prohibited. Opinions, conclusions and other information in this message that do not relate to the official business of our firm shall be understood as neither given nor endorsed by it. </PRE>############################################################### The information contained in this e-mail may be legally privileged and CONFIDENTIAL. If you are not the intended recipient you are hereby notified that any use, dissemination, distribution or reproduction of this message is prohibited. If you have received this message in error, please delete the message and notify the sender. Any views or opinions presented are solely those of the author and are not those of the Commerce Commission. ###############################################################

1 0

Vic Uni Mail Admin about? SPF rec issue...
by Don Gould 09 Sep '12

09 Sep '12

I do SPF checking. # grep $user mail.log Sep 10 09:05:48 mx tumgreyspf[13335]: 'SPF Permanent Error: Too many DNS lookups': QUEUE_ID=""; identity=mailfrom; client-ip=216.32.181.183; helo=ch1outboundpool.messaging.microsoft.com; envelope-from=$User(a)vuw.ac.nz; receiver=$user(a)tauatapu.net.nz; vuw.ac.nz IN TXT v=spf1 ip4:130.195.81.0/24 ip4:130.195.86.0/24 ip4:202.36.141.0/24 ip4:216.235.196.0/22 ip4:216.235.200.0/21 include:mcs.vuw.ac.nz include:mailprimer.com include:_spf.learningsourceapp.com include:spf.messaging.microsoft.com ~all 1. Is anyone else having this issue with vuw? 2. Should I be doing something to change my config or do others feel that the vuw spf record is to wide? D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699

5 6