- NZNOG - lists.nznog.org

Cidr report
by Andy Linton 27 Feb '04

27 Feb '04

Can I recommend the following web site to the list? http://www.cidr-report.org Lots of interesting stats about route announcements on the core of the net in particular those which are less than optimal. I'd suggest that all of us here who announce prefixes by BGP should at least go the the section at the very bottom of the page and generate the report for the AS numbers we're responsible for and take some action on the output if necessary. For example, Citylink's office network uses AS23754 and the report shows the following: (http://www.cidr-report.org/cgi-bin/as-report?as=as23754 will give a better formatted view) --- Announced Prefixes Rank AS Type Originate Addr Space (pfx) Transit Addr space (pfx) Description 8920 AS23754 ORIGIN Originate: 2560 /20.68 Transit: 0 /0.00 CITYLINK-AS-NZ Citylink Aggregation Suggestions This report does not take into account conditions local to each origin AS in terms of policy or traffic engineering requirements, so this is an approximate guideline as to aggregation possibilities. Rank AS AS Name Current Wthdw Aggte Annce Redctn % 12949 AS23754 CITYLINK-AS-NZ Citylink 4 0 0 4 0 0.00% AS23754: CITYLINK-AS-NZ Citylink Prefix (AS Path) Aggregation Action 198.48.0.0/22 1221 2764 3643 7657 23754 202.8.44.0/22 1221 2764 3643 7657 23754 202.37.19.0/24 1221 2764 3643 7657 23754 203.118.144.0/24 1221 2764 3643 7657 23754 Advertisements that are fragments of the original RIR allocation (more specifics) originated by this AS. AS23754 1 More Specifics 4 Total Advertisements CITYLINK-AS-NZ Citylink 203.118.144.0/24 (203.118.128.0/18) --- So it looks like I need to check with IHUG, our upstream, and see why they're announcing our particular subnet of 203.118.128.0/18 as well as the superblock. I've just come back from APRICOT where I saw a presentation that indicated that if we all were to get this sort of thing sorted out we'd reduce the size of the global routing table by 30% Let's get the NZ annoucements sorted at least!

1 0

Orcon Internet Prefix List Update (2004-02-27) (2nd Try - Revised)
by Craig Whitmore 26 Feb '04

26 Feb '04

For all those peering with Orcon Internet (AS17746) nationally, please update your prefix lists with the following networks (also in attached file) Added: ip prefix-list orcon-national permit 202.50.167.0/24 ip prefix-list orcon-national permit 202.37.19.0/24 ip prefix-list orcon-national permit 202.37.194.0/24 Thanks Craig Whitmore Systems Administrator Orcon Internet http://www.orcon.net.nz

1 0

Orcon Internet Prefix List Update (2004-02-27)
by Craig Whitmore 26 Feb '04

26 Feb '04

For all those peering with Orcon Internet (AS17746) nationally, please update your prefix lists with the following networks (also in attached file) Added: ip prefix-list orcon-national permit 202.50.167.0/24 ip prefix-list orcon-national permit 202.37.19.0/24 Thanks Craig Whitmore Systems Administrator Orcon Internet http://www.orcon.net.nz

1 0

Wellington ADSL Possible Mini-Outages
by Tristram Cheer 24 Feb '04

24 Feb '04

Afternoon all, A few of our clients are experiencing 20-50sec ADSL outages in the Wellington CBD and Hutt areas, we are also experiencing the same issue at work. Is anyone else out there having 20-50sec outages where they cant get a ping out?? Regards ############################################ Tristram Cheer Mobile: - 021-334-766 Work: - 04-499-9486 Fax: - 04-499-9586 After Hours: - 04-237-7593 ############################################################################ ######### This correspondence is for the named person's use only. It may contain confidential or legally privileged information, or both. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this correspondence in error, please immediately delete it from your system and notify the sender. You must not disclose copy or rely on any part of this correspondence if you are not the intended recipient.

4 3

(no subject)
by Donald Kneels 24 Feb '04

24 Feb '04

2 1

Organising the Next NZNOG Conference
by Donald Neal 24 Feb '04

24 Feb '04

People, As discussed at the conference last month, a committee is now being called into existence to ensure that the next NZNOG conference happens. I asked that those who'd volunteered to be part of that group email me. I've so far received emails from: Neil Fenemor Nathan Ward I'm confident I have working email addresses for Joe Abley Jamie Curtis Simon Lyall Tony McGregor Lin Nah Could the other volunteers please also email me fairly soon and tell me what addresses you'd like to use for this purpose? I'm asking this because I don't hold email addresses for all of you. Donald Neal | "Fiasco - an unsuccessful Technical Specialist | wall painting." Operations Engineering | Integration & Services Divn. | - Sandi Toksvig Alcatel NZ Ltd | All opinions mine only. | ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

(no subject)
by Philip D'Ath 24 Feb '04

24 Feb '04

Is it just me, or does this patent seem a bit extreme? http://ipwatch.internetnz.net.nz/files.asp?itemID=%7B2%30367DDC%2D6D29%2 D4%303F%2D838B%2DC%308366%30C8%304E%7D Abstract: A method for ordering a product over an internetwork of computer systems, wherein the product is ordered from a consumer computer (42) connected to the internetwork and billed by a billing server (34) connected to the internetwork comprises: (a) establishing a connection between the consumer computer and the billing server via the internetwork of computer systems; (b) transferring an order for a product from the consumer computer to the billing server via the internetwork; (c) transferring a transaction identification from the billing server to the consumer computer, wherein the transaction identification identifies the product ordered; (d) terminating the connection between the consumer computer and the billing server via the internetwork after the transaction identifier has been received by the consumer computer via the internetwork; (e) establishing a direct connection between the consumer computer and the billing server such as a telephone link administered by a telephone service provider and (f) transferring the transaction identification from the consumer computer back to the billing via the direct connection to identify the product ordered. CCNP, BCMS Philip D'Ath.

1 0

Anyone got contact info for free.net.nz?
by Russell Fulton 23 Feb '04

23 Feb '04

Subject says it all. I've got a small problem I need to discuss with someone from free.net.nz and I'd rather not call their 0900 support line... -- Russell Fulton /~\ The ASCII Network Security Officer \ / Ribbon Campaign The University of Auckland X Against HTML New Zealand / \ Email!

2 1

RE: [nznog] an interesting excercise in whodoneit.
by Riden, Jamie 22 Feb '04

22 Feb '04

It's in a few DNSBLs but not specifically for being an open proxy or trojaned box. But if it's in dynamic space, it might have recently changed its IP address. http://openrbl.org/ Lookup 67.172.127.63 (c-67-172-127-63.client.comcast.net) in 20+11 Zones AS: 67.160.0.0/12 AS6172 HomeCorp Redwood City/California Net 67/8 NET67 Chantilly, Virginia Results: Positive=6, Negative=25 (2004-02-23 18:30:32 UTC) @DYNAMIC/dialup: 67.172/16: 553 SORBS DUL @SPAM/spamsource: 67.172.127/24: 553 SPEWS [1] comcast/attbi, see http://spews.org/ask.cgi?S2963 SORBS/sorbs.net: 67.172/16: 553 SORBS DUL [Remove] SPEWS/spews.org: 67.172.127/24: 553 SPEWS2 [1] comcast/attbi, see http://spews.org/ask.cgi?S2963 RFC_IPWH/ipwhois.rfc-ignorant.org: Inaccurate or missing WHOIS data BLARS/block.blars.org: INET 127.1.0.1 Negative 25: @COUNTRY @ISP AHBL BOGONS BONDED BOPM CBL DRBL DSBL FIVETEN INTERSIL JIPPGMA LNSG NJABL NOMORE ORDB PSBL PSS REYNOLDS SBL SPAMBAG SPAMCOP SPAMRBL SPAMSITE UCEPROT cheers, Jamie > -----Original Message----- > From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] > Sent: Tuesday, 24 February 2004 6:14 a.m. > To: 'nznog NOG' > Subject: [nznog] an interesting excercise in whodoneit. > > > Hey Folks, > > It's been a while since I've looked at email headers... > Anyone want to tell me which of the below headers are real, > and which (if any) are forged? Instinct would tell me that > it's straight-forward, and someone rooted a box in the states > on a cable modem, but I have no idea what to believe these days. > > Cheers, > > JB > > ------------------ > > Received: from newman.its.waikato.ac.nz ([130.217.66.62]) > by worldnet.att.net (mtiwmxc15) with ESMTP > id <2004022316453701500ncss5e>; Mon, 23 Feb 2004 > 16:45:37 +0000 > X-Originating-IP: [130.217.66.62] > Received: from newman.its.waikato.ac.nz (localhost [127.0.0.1]) > by newman.its.waikato.ac.nz (Postfix) with ESMTP > id 4EC10127A79; Tue, 24 Feb 2004 05:45:34 +1300 (NZDT) > Received: from telescum (c-67-172-127-63.client.comcast.net > [67.172.127.63]) > by newman.its.waikato.ac.nz (Postfix) with SMTP id AA66312782A > for <nznog(a)list.waikato.ac.nz>; Tue, 24 Feb 2004 05:44:20 +1300 > (NZDT) > From: Donald(a)newman.its.waikato.ac.nz, Neal(a)newman.its.waikato.ac.nz > To: the(a)newman.its.waikato.ac.nz, guys(a)newman.its.waikato.ac.nz > Message-Id: <20040223164420.AA66312782A(a)newman.its.waikato.ac.nz> > Date: Tue, 24 Feb 2004 05:44:20 +1300 (NZDT) > Cc: > Subject: [nznog] (no subject) > X-BeenThere: nznog(a)list.waikato.ac.nz > X-Mailman-Version: 2.1.3 > Precedence: list > List-Id: New Zealand Network Operators Group > <nznog.list.waikato.ac.nz> > List-Unsubscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, > <mailto:nznog-request(a)list.waikato.ac.nz?subject=unsubscribe> > List-Archive: <http://list.waikato.ac.nz/pipermail/nznog> > List-Post: <mailto:nznog(a)list.waikato.ac.nz> > List-Help: <mailto:nznog-request(a)list.waikato.ac.nz?subject=help> > List-Subscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, > <mailto:nznog-request(a)list.waikato.ac.nz?subject=subscribe> > > > > -----Original Message----- > From: donald.neal(a)telecom.co.nz [mailto:donald.neal(a)telecom.co.nz] > Sent: Tuesday, February 24, 2004 5:54 AM > To: undisclosed-recipients: > Subject: [nznog] (no subject) > > I like to heat p[enis > da > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nzn> og > > > _______________________________________________ > NZNOG > mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nzn> og >

1 0

RE: [nznog] an interesting excercise in whodoneit.
by Gordon Smith 22 Feb '04

22 Feb '04

Most likely an open proxy, rather than a compromised machine. Typical spammer tactic is to bounce off these to avoid being shut down. Cheers, Gordon -----Original Message----- From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] Sent: Tuesday, 24 February 2004 6:14 a.m. To: 'nznog NOG' Subject: [nznog] an interesting excercise in whodoneit. Hey Folks, It's been a while since I've looked at email headers... Anyone want to tell me which of the below headers are real, and which (if any) are forged? Instinct would tell me that it's straight-forward, and someone rooted a box in the states on a cable modem, but I have no idea what to believe these days. Cheers, JB

1 0

RE: [nznog] an interesting excercise in whodoneit.
by Will Steele 22 Feb '04

22 Feb '04

looks like someone cant use telnet :) my guess is its someone in america :P _________________________________________________________________ Gaming galore at http://xtramsn.co.nz/gaming !

1 0

an interesting excercise in whodoneit.
by Jonathan Brewer 22 Feb '04

22 Feb '04

Hey Folks, It's been a while since I've looked at email headers... Anyone want to tell me which of the below headers are real, and which (if any) are forged? Instinct would tell me that it's straight-forward, and someone rooted a box in the states on a cable modem, but I have no idea what to believe these days. Cheers, JB ------------------ Received: from newman.its.waikato.ac.nz ([130.217.66.62]) by worldnet.att.net (mtiwmxc15) with ESMTP id <2004022316453701500ncss5e>; Mon, 23 Feb 2004 16:45:37 +0000 X-Originating-IP: [130.217.66.62] Received: from newman.its.waikato.ac.nz (localhost [127.0.0.1]) by newman.its.waikato.ac.nz (Postfix) with ESMTP id 4EC10127A79; Tue, 24 Feb 2004 05:45:34 +1300 (NZDT) Received: from telescum (c-67-172-127-63.client.comcast.net [67.172.127.63]) by newman.its.waikato.ac.nz (Postfix) with SMTP id AA66312782A for <nznog(a)list.waikato.ac.nz>; Tue, 24 Feb 2004 05:44:20 +1300 (NZDT) From: Donald(a)newman.its.waikato.ac.nz, Neal(a)newman.its.waikato.ac.nz To: the(a)newman.its.waikato.ac.nz, guys(a)newman.its.waikato.ac.nz Message-Id: <20040223164420.AA66312782A(a)newman.its.waikato.ac.nz> Date: Tue, 24 Feb 2004 05:44:20 +1300 (NZDT) Cc: Subject: [nznog] (no subject) X-BeenThere: nznog(a)list.waikato.ac.nz X-Mailman-Version: 2.1.3 Precedence: list List-Id: New Zealand Network Operators Group <nznog.list.waikato.ac.nz> List-Unsubscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, <mailto:nznog-request(a)list.waikato.ac.nz?subject=unsubscribe> List-Archive: <http://list.waikato.ac.nz/pipermail/nznog> List-Post: <mailto:nznog(a)list.waikato.ac.nz> List-Help: <mailto:nznog-request(a)list.waikato.ac.nz?subject=help> List-Subscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, <mailto:nznog-request(a)list.waikato.ac.nz?subject=subscribe> -----Original Message----- From: donald.neal(a)telecom.co.nz [mailto:donald.neal(a)telecom.co.nz] Sent: Tuesday, February 24, 2004 5:54 AM To: undisclosed-recipients: Subject: [nznog] (no subject) I like to heat p[enis da _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

(no subject)
by donald.neal＠telecom.co.nz 22 Feb '04

22 Feb '04

I like to heat p[enis da

1 0

(no subject)
by Donald＠newman.its.waikato.ac.nz 22 Feb '04

22 Feb '04

hi guys, I kneed help, I have been stuck in my chair all week end and I cant get out, my ass is too fat, please send help

1 0

(no subject)
by nznog＠list.waikato.ac.nz 22 Feb '04

22 Feb '04

1 0

annual beer-related APRICOT mail
by Joe Abley 21 Feb '04

21 Feb '04

Anybody here planning to go to (or already at) APRICOT in KL?

2 1

Great - spammer learning from viruses [Fwd: become and larger man...]
by Steve Withers 19 Feb '04

19 Feb '04

I wasn't happy to see SPAM arrive with what is probably Rory's real e-mail address.....spoofed just like a virus would. Steve

2 1

OT: VoIP <-> PSTN gateway operators in NZ
by Neil Simmonds 18 Feb '04

18 Feb '04

Hi, Sorry for the OT post, Is there anyone in NZ operating (in production, or close to it) a VoIP to PSTN gateway? Preferably SIP based? If so, could they email me, or email me a contact from the company?. Im looking for an allready established network rather than creating my own (expensive :o) Cheers Rob You could try iHug or WorldxChange They both have real customers on VoIP, their own soft-switches and PSTN connections. Neil

1 0

NZNOG BGP'04 Wrapup
by Jamie Curtis 16 Feb '04

16 Feb '04

Hi all, After much delay we have managed to update the NZNOG conference website at: http://www.nznog.org We now have up all the slides which we were able to get hold of, some simple statistics on the network usage over the term of the conference and the photos which were taken during the conference. Apologies for the quality of the photos, we didn't have appropriate gear for the size of the venue, but most importantly we lacked competent photographers ! :) Enjoy ! Jamie

1 0

Beer
by Andy Linton 16 Feb '04

16 Feb '04

Please note that despite the subject line of Beer this message may be in breach of NZNOG AUP: 7. Postings of a political, philosophical or legal nature are discouraged. Of course you may recognise yourself in the following. ------- How many group/list posters does it take to change a light bulb? 1 to change the light bulb and to post that the light bulb has been changed 14 to share similar experiences of changing light bulbs and how the light bulb could have been changed differently 7 to caution about the dangers of changing light bulbs 27 to point out spelling/grammar errors in posts about changing light bulbs 53 to flame the spell checkers 41 to correct spelling/grammar flames 6 to argue over whether it's "lightbulb" or "light bulb" 6 to condemn those 6 as anal-retentive 2 industry professionals to inform the group that the proper term is "lamp" 15 know-it-alls who claim *they* were in the industry, and that "light bulb" is perfectly correct 156 to email the participant's ISPs complaining that they are in violation of their "acceptable use policy" 109 to post that this group is not about light bulbs and to please take this discussion to a lightbulb group 203 to demand that cross posting to hardware forum, off-topic forum, and lightbulb group about changing light bulbs be stopped 111 to defend the posting to this group saying that we all use light bulbs and therefore the posts *are* relevant to this group 306 to debate which method of changing light bulbs is superior, where to buy the best light bulbs, what brand of light bulbs work best for this technique and what brands are faulty 27 to post URL's where one can see examples of different light bulbs 14 to post that the URL's were posted incorrectly and then post the corrected URL's 3 to post about links they found from the URL's that are relevant to this group which makes light bulbs relevant to this group 33 to link all posts to date, quote them in their entirety including all headers and signatures, and add "Me too" 12 to post to the group that they will no longer post because they cannot handle the light bulb controversy 19 to quote the "Me too's" to say "Me three" 4 to suggest that posters request the light bulb FAQ 44 to ask what is a "FAQ" 4 to say "didn't we go through this already a short time ago?" 143 to say "do a Google search on light bulbs before posting questions about light bulbs" 1 forum lurker to respond to the original post 6 months from now and start it all over again....

4 3

OT: VoIP <-> PSTN gateway operators in NZ
by Robert McDonald 12 Feb '04

12 Feb '04

Hi, Sorry for the OT post, Is there anyone in NZ operating (in production, or close to it) a VoIP to PSTN gateway? Preferably SIP based? If so, could they email me, or email me a contact from the company?. Im looking for an allready established network rather than creating my own (expensive :o) Cheers Rob

2 1

Re: Telecom and Jetstream
by Anaru Hartley 09 Feb '04

09 Feb '04

> So what? Your response would be the perfect Telecom response <read, > irrelevant>. The cost of buying and installing 2000 DSlams in NZ is not > likely to be different by more than a couple of percent to the cost of > installing 30000 DSlams in Mexico. The cost of copper cable is pretty much > the same anywhere. The difference in consumer pricing is the amount Telecom > takes as "profit" compared to other telcos... My message was not intended to be pro or anti Telecom. All I was suggesting is that out of 100,000,000 people only 3,500,000 use the Internet -- maybe there is something wrong -- what I was emplying is that we probably need 100Mbit connections running into our homes OR MAYBE people just don't need that 100Mbit connection. (using statistics; if 3.5 million of a population as big as Mexico's use the Internet, per person we have a much greater demand for innovation -- or not) My previous comments were more of a "serious sarcasim" aimed towards Telecom. I trust that makes sense. Anaru

1 0

TUANZ submission to Paul Swain, re the ComCom report on unbundling
by Juha Saarinen 09 Feb '04

09 Feb '04

http://snipurl.com/4ecb I'll go and post this to the ADSL Intarweb mailing site www.unixathome.org/adsl as well. -- Juha

1 0

RE: [nznog] New Telecom Jetstream Plans Leaked?
by Finnigan, Jamie (NZ - Wellington) 09 Feb '04

09 Feb '04

> From: Matthew Poole [mailto:matt(a)p00le.net] > Sent: Monday, 9 February 2004 1:15 p.m. > Subject: Re: [nznog] New Telecom Jetstream Plans Leaked? > > What's this "Speed MAY be reduced" (emphasis mine) bull? We all know that Telecom will > throttle you back to dialup speeds the second you touch that 10GB cap. I notice they > don't say what they'll throttle it back to, so you can be certain that it will be a > decidedly unattractive speed - 32kbit/s, anyone? Where does this idea of of the customer deserving flatrate broadband for peanuts come from? Telecom are not a charity. Flatrate internet will always be 'taken advantage of'[1] by a minority, and Telecom are in the position where they are able to do something about this. I personally like the idea of having a permanent connnection, with a cap that I'm unlikely to hit, but with the knowledge that if I do hit the cap then (a) my connection will no be disabled altogether and (b) I'm not going to be hit with huge excess usage charges. This is a marked improvement in contrast to pricing plans they've provided in the past, and they appear to have listened to what their customers have been asking for. Good on ya, Telecom. But I guess there will always be complainers.. :) Jamie [1] feel free to replace with 'abused', 'used as it should be', 'enjoyed', and any other term you wish according to your own viewpoint. -- CAUTION: This e-mail and any attachment(s) contains information that is both confidential and possibly legally privileged. No reader may make any use of its content unless that use is approved by Deloitte separately in writing. Any opinion, advice or information contained in this e-mail and any attachment(s) is to be treated as interim and provisional only and for the strictly limited purpose of the recipient as communicated to us. Neither the recipient nor any other person should act upon it without our separate written authorisation of reliance. Deloitte is a member firm of Deloitte Touche Tohmatsu. Deloitte Touche Tohmatsu is a Swiss Verein (association), and, as such, neither Deloitte Touche Tohmatsu nor any of its member firms has any liability for each other's acts or omissions. Each of the member firms is a separate and independent legal entity operating under the names "Deloitte," "Deloitte & Touche," "Deloitte Touche Tohmatsu," or other related names. Services are provided by the member firms and not by the Deloitte Touche Tohmatsu Verein. If you have received this message in error please notify us immediately and destroy this message. Thank you. Deloitte Internet: www.deloitte.co.nz

10 14

Conference Videos
by Richard Naylor 09 Feb '04

09 Feb '04

NZNOG Conference videos now available at www.r2.co.nz/20040129 rich

1 0

RE: [nznog] New Telecom Jetstream Plans Leaked?
by rob.edkins＠axon.co.nz 09 Feb '04

09 Feb '04

When I were 't lad, 'Broadband' was a technical term that meant simply a telecommunication medium that allowed a wide range of frequencies you could multiplex multiple channels down simultaneously. :-) Some other definitions: Newton's Telecom Dictionary: "...greater than a voice grade line of 3 KHz...some say [it should be at least] 20 KHz." Jupiter Communications: at least 256 Kbps. IBM Dictionary of Computing: A broadband channel is "6 MHz wide." Tannenbaum: "Broadband is used largely as a marketing rather than a technical term" [referring to DSL technology] > -----Original Message----- > From: Richard Naylor [mailto:richard.naylor(a)citylink.co.nz] > Sent: Monday, 9 February 2004 22:34 > To: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] New Telecom Jetstream Plans Leaked? > > > At 07:48 p.m. 9/02/2004 +1300, James White wrote: > > > Where does this idea that 256K is broadband come from? > > > >I thought it was something set by Telecom? > > who ever "set" it is crazy. Its anything above 2mbps. Before > "broadband", > you could get a 2mbps cct, so for the "new" thing it has to > be better. > Hence 2+ mbps, and in my thinking only really kicks in around 30mbps. > -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file.

1 0

IPV6 and Multicast Progress after NZNOG
by Craig Whitmore 08 Feb '04

08 Feb '04

Well we all enjoyed the NZNOG conference, but what has been done with the 2 subjects that had a bit of talk about (Multicast and IPv6). I see no new IPv6 Peers @ APE or WIX and nothing new Multicast wise there either. Yes I know adding this type of stuff into an existing commercial network needs "management approval" and alike but are any of the techs around talking to Management/Have plans in the future/near future about enabling either of these into their networks. I've had www.mbone.net.nz set up for quite a while which gives some examples of set up and I even added some juniper stuff into it a few weeks ago. All I can see at the moment all I can see is IHUG's MSDP announcements and MBGP (but not PIM????). And now to think about the content.. Any comments? Suggestions? Craig Whitmore

1 0

New Telecom Jetstream Plans Leaked?
by Seeby Woodhouse 08 Feb '04

08 Feb '04

Here's something that I think a few people may have overlooked... It seems to me that the new JetStream 'surf' products are just Telecom/Xtra's early implementation of the Bitstream product that the telecommunications commissioner recently ORDERED Telecom to wholesale to other providers. For those that missed it, Telecom has been told that they MUST provide a reasonably priced wholesale ADSL product (bitstream) to other ISP's, or they risk full unbundling of the local loop. (See www.comcom.govt.nz if you're in the dark about all this) So what has just happened, is that Telecom have worked out the pricing that OTHER ISPs are likely to come up with once they have the bitstream service to wholesale, and have simply launched to market first. We are in negotiations with Telecom regarding bitstream, and I am hopeful that we will be able to come up with an arrangement that will be beneficial to Orcon and the other 40+ ISP's that we wholesale ADSL services to. Once we have the technical issues with Telecom worked out over provisioning bistream I don't see why we won't be able to provide a flat-rate domestic ADSL service with differing downstream International data caps for a decent price per month. After all - once we wholesale bitstream it is totally up to us what we sell it to the customer at, and whether we provide flat rate domestic, data caps or a totally flat rate service altogether. One issue for small providers may be that it looks as though the investment in infrastructure required to wholesale bitstream may be prohibitive - however that's what we're here for - to help those guys out :-) Cheers Seeby Woodhouse Managing Director Orcon Internet Limited - www.orcon.net.nz Mob +64 (0) 21 366 666 / Wk +64 (9) 444 4414 ext 700

1 0

Current APNIC policy discussions
by Nurani Nimpuno 08 Feb '04

08 Feb '04

Hi all, At the last NZNOG meeting, we delivered a full day training course on Internet resource management. A few people have asked me for the material, so I thought a quick mail to the list would be useful. The APNIC training course material can be found here: http://www.apnic.net/training/recent/ and the policy development presentation I gave on the Friday (30th) can be found here: http://www.apnic.net/community/presentations/other.html There was quite a lot of good discussion at the NZNOG meeting on the current policy proposals so I'd like to encourage you to have a look at the full proposals and express your opinion on them! There was good feedback from the NZNOG community, especially on the issues of size and criteria for a minimum IPv4 allocation and reclamation of unused historical allocations. The proposals will be discussed at the upcoming APNIC meeting, but if you cannot make it to the meeting, you are welcome to participate in the discussion on the APNIC mailing lists. (We webcast the meetings too, so you can follow them online.) The current proposals are listed here: http://www.apnic.net/docs/policy/proposals/ You can subscribe to one of the mailing lists here: http://www.apnic.net/community/lists/ Policy stuff might not feel that operational, but the policies do affect you if you're running a business on the Internet and the only way to change them is to voice your opinon. We haven't had a lot of feedback from New Zealand in the past, so it'd be good to get your perspective in some of the discussions! If you have any questions about the proposals, the meeting or the discussions, don't hesitate to shoot me a mail. Cheers, Nurani ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Nurani Nimpuno <nurani(a)apnic.net> APNIC Training Tel:+61-7-38583100 http://www.apnic.net Fax:+61-7-38583199 ------------------------------------------------------------------ See you at the 17th APNIC Open Policy Meeting! Kuala Lumpur, Malaysia, 23-27 February 2004 http://www.apnic.net/meetings/ <meetings(a)apnic.net> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

RE: [nznog] New Telecom Jetstream Plans Leaked?
by Neil Gardner 08 Feb '04

08 Feb '04

Can anyone confirm if these plans: A) Will be available through other ISPs? (although the fact that these are labelled Telecom plans here, not Xtra - is confusing) B) Lump together the cheap-as-chips national and expensive as diamond International Data? I presume they do so all traffic counts towards the totals? -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345 -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Monday, 9 February 2004 11:55 a.m. To: Tristram Cheer Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] New Telecom Jetstream Plans Leaked? Tristram Cheer wrote: > Anyone on the list be able to confirm this? > > "download of 256k upload of 128k > 1gig plan, 3 gig and a 10 gig plan! But instead of being charged for > extra usage they throttle you to dialup speeds after the 10gig" > > http://www.angst.co.nz/arr.jpg Not leaked -- annnounced today. Note that the pricing will be $10 less for customers who put all their calls through Telecom. $39.95/$49.95 for the 1GB plan with 5c/MB excess $49.95/$59.95 for the 3GB plan with 5c/MB excess $59.95/$69.95 for the 10GB plan with no excess charging, but throttling That's retail, with/without Telecom Calling. Resale is $10 less. -- Juha _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

7 7

Geeks Put the Unsavvy on Alert: Learn or Log Off
by Andy Linton 08 Feb '04

08 Feb '04

Follow up to discussions at BGP04 http://www.nytimes.com/2004/02/05/technology/05VIRU.html?ex=1077173129&ei=1…

9 10

RE: [nznog] New Telecom Jetstream Plans Leaked?
by Gordon Smith 08 Feb '04

08 Feb '04

The splitting of national vs international traffic is an interesting point, and not very common internationally i.e. the people that write the applications that provide traffic calculations don't differentiate the two. Arguably, it is possible to do this with BGP communities; assuming, of course, that both Telecom and Telstra were willing to exchange national routing information at peering points with other providers. Otherwise the split will not be very accurate. >From the perspective of software management, I do know that boxes like the ERX pass traffic accounting information in the form of RADIUS interim accounting records, and as such have absolutely no awareness of traffic paths. In order to do a split, I'd guess that you'd have to come up with a way of reconciling NetFlow data with radius records, and I'm pretty sure that'd be pretty hard to make scalable Cheers, Gordon

1 0

RE: [nznog] New Telecom Jetstream Plans Leaked?
by Neil Gardner 08 Feb '04

08 Feb '04

I'm a heavy internet user. I'd change plans in a second if this plan differentiated National/International Data. But as far as I can see it doesn't. That's why Telecom can afford to offer a 10GB plan, depending on the user, much or all of this 10Gb will be the 'almost free' national variety.[1] Telecom could remove the incentive for other broadband players to go for the ADSL market by just making a 256/256 with reasonably large (10GB) International plans and free National data, and then pricing it at $89. They would appear to have listened to the vocal minority wanting better broadband, yet have protected their market and lined their own pockets even more. Anyone that REALLY wants to setup alternatives with wireless would still have markets to go for (Higher speed, more geographically spread population etc) to target, so they couldn't complain that Telecom is being monopolistic. Even then, Telecom would wholesale the new plans and the ISPs would have something to offer. No, I know it doesn't fix the root cause of Telecom being able to decide on the plan, the cost and the caps - but if Telecom listened and upped the plans once the masses started grumbling - they could stay ahead of the problem and keep the marketspace clear and collect for every (virtually) home broadband connection in the country for the forseeable future... Cheers - N. [1] The national packets are packed in blain brown paper headers, the International ones get gold plated by hand before shipping. -- Cheers - Neil Gardner Networking and Security Support Engineer Renaissance Brands (09) 968-3681 / (021) 746-345 -----Original Message----- From: Bryan Manson [mailto:evil_bry(a)xtra.co.nz] Sent: Monday, 9 February 2004 2:37 p.m. To: 'Jeremy Brooking'; 'Juha Saarinen' Cc: nznog(a)list.waikato.ac.nz Subject: RE: [nznog] New Telecom Jetstream Plans Leaked? Another interesting point... there is *again* no national/international differentiation. We have this with 128/128 jetstart plans, one would think telecom will have put some consideration into this with their new plans.. Sure, 10 gig is a bit. But 10 gig national? What's that costing telecom? I guess it is a step in the right direction, but we are still stuck banging our heads on brick walls stuck in the Stone Age to some extent. Juha Saarinen wrote: > > Not leaked -- annnounced today. > > Note that the pricing will be $10 less for customers who put all their > calls through Telecom. > > $39.95/$49.95 for the 1GB plan with 5c/MB excess $49.95/$59.95 for the > 3GB plan with 5c/MB excess $59.95/$69.95 for the 10GB plan with no > excess charging, but throttling > > That's retail, with/without Telecom Calling. Resale is $10 less. > Surely this must be seen as anti-competitive behaviour by the commerce commision. Who in their right mind is going to use another tolls provider, to save themselves $5 a month on calls, when being Telecom dangle this carrot infront of them. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

RE: [nznog] New Telecom Jetstream Plans Leaked?
by Donald Neal 08 Feb '04

08 Feb '04

This list does not exist for the discussion of general Internet-related issues, but specifically for technical and operational matters. This does not include discussion of whether people do or do not like anyone's retail pricing. This thread should either acquire some technical content or go away. Please before posting consider the list's Acceptable Use Policy, which begins: "The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate." - Donald Neal NZNOG List Administrator Donald Neal | "Fiasco - an unsuccessful Technical Specialist | wall painting." Operations Engineering | Integration & Services Divn. | - Sandi Toksvig Alcatel NZ Ltd | All opinions mine only. | > -----Original Message----- > From: nznog-bounces+Donald.Neal=telecom.co.nz(a)list.waikato.ac.nz > [mailto:nznog-bounces+Donald.Neal=telecom.co.nz(a)list.waikato.ac.nz]On > Behalf Of Jonathan > Sent: Monday, 9 February 2004 14:35 > To: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] New Telecom Jetstream Plans Leaked? > > > > > Where does this idea of of the customer deserving > flatrate broadband > > > for peanuts come from? > > I beleive this idea comes from other countries where more than one > telecommunications provider offers DSL/Cable systems, and > there is actual > competition. > > This is a great improvement from Telecom, however does not > compare to other > countries internet pricing. Being fair this could be put down > to the lower > quanitity of usable lines in NZ compared to the US, I don't > think we'll be > able to get the same prices as the US ever purely due to > population density > restrictions, however I do think the price could be > dramaticly lower and > Telecom still profit. > > Dont mean to be a complainer, I do like these new Telecom DSL > offers, they > are much better. JetStart actually qualifying as 'broadband' > with the 256K > download spec. Speed limiting in my eyes is a much preffered > alternative to > the huge cash bill at the end of the month. > > ----- Original Message ----- > From: "Juha Saarinen" <juha(a)saarinen.org> > To: "Finnigan, Jamie (NZ - Wellington)" <jfinnigan(a)deloitte.co.nz> > Cc: <nznog(a)list.waikato.ac.nz> > Sent: Monday, February 09, 2004 2:26 PM > Subject: Re: [nznog] New Telecom Jetstream Plans Leaked? > > > > Finnigan, Jamie (NZ - Wellington) wrote: > > > > > > > Conversely, where does the idea that Telecom deserves exemption from > > competition come from? Corporate charity? > > > > > > > CAUTION: This e-mail and any attachment(s) contains > information that > > > is both confidential and possibly legally privileged. No > reader may > > > make any use of its content unless that use is approved > by Deloitte > > > separately in writing. Any opinion, advice or information > contained > > > in this e-mail and any attachment(s) is to be treated as > interim and > > > provisional only and for the strictly limited purpose of the > > > recipient as communicated to us. Neither the recipient > nor any other > > > person should act upon it without our separate written > authorisation > > > of reliance. > > > > > > Deloitte is a member firm of Deloitte Touche Tohmatsu. Deloitte > > > Touche Tohmatsu is a Swiss Verein (association), and, as such, > > > neither Deloitte Touche Tohmatsu nor any of its member > firms has any > > > liability for each other's acts or omissions. Each of the member > > > firms is a separate and independent legal entity > operating under the > > > names "Deloitte," "Deloitte & Touche," "Deloitte Touche > Tohmatsu," or > > > other related names. Services are provided by the member firms and > > > not by the Deloitte Touche Tohmatsu Verein. > > > > > > If you have received this message in error please notify us > > > immediately and destroy this message. Thank you. > > > > > > Deloitte Internet: www.deloitte.co.nz > > > > http://www.goldmark.org/jeff/stupid-disclaimers/ > > > > -- > > Juha > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

RE: [nznog] New Telecom Jetstream Plans Leaked?
by Simon Oldham 08 Feb '04

08 Feb '04

<snip> And do you think they will have it set up for allocation of Static IP's?? Current Jetstart/5GB plan and static IP assignment are 'incompatible', supposedly, as this are not properly routable (must be nat'd or somit') This is a marked improvement in contrast to pricing plans they've provided in the past, and they appear to have listened to what their customers have been asking for. Good on ya, Telecom. But I guess there will always be complainers.. :) Jamie [1] feel free to replace with 'abused', 'used as it should be', 'enjoyed', and any other term you wish according to your own viewpoint. -- CAUTION: This e-mail and any attachment(s) contains information that is both confidential and possibly legally privileged. No reader may make any use of its content unless that use is approved by Deloitte separately in writing. Any opinion, advice or information contained in this e-mail and any attachment(s) is to be treated as interim and provisional only and for the strictly limited purpose of the recipient as communicated to us. Neither the recipient nor any other person should act upon it without our separate written authorisation of reliance. Deloitte is a member firm of Deloitte Touche Tohmatsu. Deloitte Touche Tohmatsu is a Swiss Verein (association), and, as such, neither Deloitte Touche Tohmatsu nor any of its member firms has any liability for each other's acts or omissions. Each of the member firms is a separate and independent legal entity operating under the names "Deloitte," "Deloitte & Touche," "Deloitte Touche Tohmatsu," or other related names. Services are provided by the member firms and not by the Deloitte Touche Tohmatsu Verein. If you have received this message in error please notify us immediately and destroy this message. Thank you. Deloitte Internet: www.deloitte.co.nz _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

If anyone is running their IPv6 machines on OpenBSD....
by Simon Oldham 05 Feb '04

05 Feb '04

Ladies and Gents, This was pushed onto the Slashdot stack not long ago, might bear some investigation if your platform of choice for your IPv6 is Open BSD 3.4 http://www.guninski.com/obsdmtu.html If the list has already seen this, please excuse the disturbing of your New Zealand Day (opps, Waitangi)

1 0

Solution to spam problem
by Andy Linton 05 Feb '04

05 Feb '04

Just when you thought the Internet sucked beyond redemption your faith in the net gods gets restored. Now let's find an answer for world hunger and peace. http://www.thespeciousreport.com/03031216nospam.html Has anybody idea how they make this work? (:-)

2 1

NOG Conference stuff
by Peter Macaulay 03 Feb '04

03 Feb '04

Great Event. Well run, good attendance. Attaboys all round. Sorry to miss the curry though. InternetNZ has enjoyed supporting the NOG, and has agreed to consider of more initiatives such as the IPV6 lab. Lotto results: Confirming that Craig Whitmore won the Linksys WRT54G. This was shipped to him yesterday. After a shipping saga, the Mulitcast books arrived here in Wellington today via Auckland, Hamilton, Auckland, Wellington. Michael Sutton is preparing the list, and Janet will ship these in the next day or so. We have yet to decide whether to order more than the original 25 so no one misses out. Commercial break --- if you are not a member of InternetNZ sign up now! https://secure.internetnz.net.nz/membership/individmem.html -- Peter Macaulay Executive Director InternetNZ Direct +64 4 495 2113

1 0

Dean Moreton/Christchurch/Foodstuffs is out of the office.
by Dean Moreton 03 Feb '04

03 Feb '04

I will be out of the office starting 02/02/2004 and will not return until 09/02/2004. I will respond to your message when I return. If you have any urgent queries please contact another member of the PC Support team. ##################################################################################### This e-mail message has been scanned for Viruses and Content by both MailMarshal and Norton's Antivirus. Attention: The information contained in this message and or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies. Please note that the views and opinions expressed in this message may be those of the individual and not necessarily those of Foodstuffs (South Island) Ltd #####################################################################################

4 4

Re: [nznog] The Internet for n00bs
by Ewen McNeill 02 Feb '04

02 Feb '04

In message <401C49BA.5040507(a)saarinen.org>, Juha Saarinen writes: >There's something wrong about neutering the 'Net for newbies instead of >going after those who spoil it for them. FWIW, Dean's talk wasn't solely about people spoiling the net for newbies (although there's a lot of that too), but also that they're inadvertantly doing dumb things because it's not obvious that it's dumb and it's not obvious that there's a better way to do it. (For instance consider a newbie mailing out a 10MB attachement to the whole company when they could have just sent a link.) To that end I think that "seamless integration" of the local network (and local machine) and the Internet is counterproductive -- there really are differences and sometimes you've still got to be aware of them. (Not everyone has a gigabit link to their house yet.) >Given how spammers, phishers, crackers, VXers et al have so far managed >to work around every countermeasure devised against them, I have reason >to believe even NewbieNet would only be a temporary fix. Indeed. That was basically my point in one of the talks, that whatever restrictions you put in place would be "routed around" by those with an incentive to do so. Okay you're down to "mere applications", but applications -- especially those used by newbies -- are notoriously insecure. (Some of them even have extra, designed in, insecurity.) Jamie (Baddeley)'s suggestion of thin client is perhaps one of the few ways you might get enough control over the end appliance to control things; another is perhaps Knoppix-style bootable-readonly-device (or perhaps something PS/2, Xbox, etc like). My point was that you can get 75% of the immediate benefit of a "newbie applicance network" right now simply by firewalling customer connections at the edge -- and that if you do, please provide an opt-out mechanism. (I'd really prefer that it wasn't necessary to buy, say, a E1 link (wholesale connectivity) in order to get reasonably unfiltered access. And tunnelling everywhere sucks.) That said, short of a rigorous punishment technique,[0] rigorously applied, I don't think we're going to get all of those that spoil the 'net. Ewen [0] Death. Or perhaps transportation to the colonies. I hear Mars isn't too crowded this time of year.

6 7

RE: [nznog] OT: Looking For Work
by Tristram Cheer 02 Feb '04

02 Feb '04

Just one of those days, format and reinstall and a little rushed. Too hot in Wellington I think ############################ Tristram Cheer Mobile: - 021-334-766 Work: - 04-499-9486 Fax: - 04-499-9586 After Hours: - 04-237-7593 ############################################################################ ######### This correspondence is for the named person's use only. It may contain confidential or legally privileged information, or both. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this correspondence in error, please immediately delete it from your system and notify the sender. You must not disclose copy or rely on any part of this correspondence if you are not the intended recipient. -----Original Message----- From: Kim Shepherd [mailto:kims(a)waikato.ac.nz] Sent: Tuesday, 3 February 2004 2:32 p.m. To: 'Trisram Cheer' Subject: RE: [nznog] OT: Looking For Work I can't offer you a job, sorry, but I can remind you that you've fogotten the second 't' in your name in your "From" line... Which might help with prospective employers? ;) > -----Original Message----- > From: Trisram Cheer [mailto:james.edward(a)paradise.net.nz] > Sent: Tuesday, 3 February 2004 2:25 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: RE: [nznog] OT: Looking For Work > > Whops! > > > > Wellington > > > > ############################################ > > Tristram Cheer > > Mobile: - 021-334-766 > > Work: - 04-499-9486 > > Fax: - 04-499-9586 > > After Hours: - 04-237-7593 > > > > ############################################################## > ####################### > > This correspondence is for the named person's use only. It > may contain confidential or legally privileged information, > or both. No confidentiality or privilege is waived or lost by > any mistransmission. If you receive this correspondence in > error, please immediately delete it from your system and > notify the sender. You must not disclose copy or rely on any > part of this correspondence if you are not the intended recipient. > > ________________________________ > > From: Dan Clark [mailto:dan(a)scarfies.net] > Sent: Tuesday, 3 February 2004 2:28 p.m. > To: Trisram Cheer > Subject: Re: [nznog] OT: Looking For Work > > > > what area? > > > > ----- Original Message ----- > > From: Trisram Cheer <mailto:james.edward(a)paradise.net.nz> > > To: nznog(a)list.waikato.ac.nz > > Sent: Tuesday, February 03, 2004 2:21 PM > > Subject: [nznog] OT: Looking For Work > > > > Apologies if this is too OT > > > > I've recently been made redundant and work finishes end > of this week. If anyone knows of any Helpdesk, User support > or Hardware support (workshop etc) Then please drop me a line > off list > > > > > > Thanks > > > > ############################################ > > Tristram Cheer > > Mobile: - 021-334-766 > > Work: - 04-499-9486 > > Fax: - 04-499-9586 > > After Hours: - 04-237-7593 > > > > > ############################################################## > ####################### > > This correspondence is for the named person's use only. > It may contain confidential or legally privileged > information, or both. No confidentiality or privilege is > waived or lost by any mistransmission. If you receive this > correspondence in error, please immediately delete it from > your system and notify the sender. You must not disclose copy > or rely on any part of this correspondence if you are not the > intended recipient. > > > > > ________________________________ > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > >

1 0

RE: [nznog] OT: Looking For Work
by Trisram Cheer 02 Feb '04

02 Feb '04

Whops! Wellington ############################################ Tristram Cheer Mobile: - 021-334-766 Work: - 04-499-9486 Fax: - 04-499-9586 After Hours: - 04-237-7593 ############################################################################ ######### This correspondence is for the named person's use only. It may contain confidential or legally privileged information, or both. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this correspondence in error, please immediately delete it from your system and notify the sender. You must not disclose copy or rely on any part of this correspondence if you are not the intended recipient. _____ From: Dan Clark [mailto:dan(a)scarfies.net] Sent: Tuesday, 3 February 2004 2:28 p.m. To: Trisram Cheer Subject: Re: [nznog] OT: Looking For Work what area? ----- Original Message ----- From: Trisram <mailto:james.edward(a)paradise.net.nz> Cheer To: nznog(a)list.waikato.ac.nz Sent: Tuesday, February 03, 2004 2:21 PM Subject: [nznog] OT: Looking For Work Apologies if this is too OT I've recently been made redundant and work finishes end of this week. If anyone knows of any Helpdesk, User support or Hardware support (workshop etc) Then please drop me a line off list Thanks ############################################ Tristram Cheer Mobile: - 021-334-766 Work: - 04-499-9486 Fax: - 04-499-9586 After Hours: - 04-237-7593 ############################################################################ ######### This correspondence is for the named person's use only. It may contain confidential or legally privileged information, or both. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this correspondence in error, please immediately delete it from your system and notify the sender. You must not disclose copy or rely on any part of this correspondence if you are not the intended recipient. _____ _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

JetStream Games Realm Adminitrator...
by Dan Clark 02 Feb '04

02 Feb '04

Hi all, Can someone please point me in the direction of the JetStream Games Realm administrator, or his/her boss please. Offlist. Kind Regards Dan Clark Network Manager Scarfies.Net Ltd

3 2

Credit card fraudsters......
by Steve Withers 02 Feb '04

02 Feb '04

In my e-mail this morning, with a clickable button to take me to their 'secure site': From: security(a)visa-security.com Dear Sir/Madam, We were informed that your credit card is used by another person or stolen. It could happen if you have been shopping on-line, and someone got your "Billing information" including your credit card number. To avoid and prevent any further fraud and billing mistakes and to refund your credit card, it is strongly recommended to proceed filling in the secure form on our site and applying for our Zero Liability program. Program is free and it will help us to confirm the fact of fraud and investigate this accident as soon as possible. Sincerely yours, Visa Support Assistant, Alwin Desagun.

5 5

The Internet for n00bs
by Ewen McNeill 02 Feb '04

02 Feb '04

One of the things discussed at the (excellent, thanks everyone) NZNOG 2004 conference was that the Internet sucks, and that a large portion of this suckage is due to ignorant n00bs who do the wrong thing, get 0wned, etc. It was suggested that the "only" fix to this problem was to kill the end to end Internet, making the "Internet" a core exchange network (a la telco style), and allowing users only access to a local proxy at their ISP for a very limited set of services. Aside from my objection that this won't help much except in the short term (plenty of protocols already tunnel around such firewall limitations -- eg, look at everything that's been tunneled through HTTP), this really sucks for the l33t who find it awfully restrictive. An alternative approach to that type of thing is possibly just to heavily firewall -- at the ISP end of the link -- connections to all "potential n00b" users (SMTP to ISP mail server, POP/IMAP/HTTP/HTTPS to whereever and a few other common things) by default. And then provide an "opt out" system that anyone with a clue can use to disable the default firewalling. I would suggest: telnet ihaveaclue.$ISP where you have to enter "My name is $NAME, and I have a clue" (with $NAME expanded, but otherwise literally). Possibly that setting could be sticky; possibly it would need to be done on each reconnection.[0] The remaining aspect is that anyone who claimed to have a clue in this manner and then lets something on their connection get 0wned or otherwise abuses the privilege, (a) loses the ability to unblock themselves, and (b) gets their name published on a list of shame. This could pretty much be implemented today by anyone with a firewall (or customer facing ACLs) which can be set on a per-customer basis. Various RAS boxes have this sort of facility already; at least one ISP I know of firewalls accounts that are over due so they can reach the accounting website and that's about it. The alternative seems to be that the clueful will just tunnel everything through whatever still works. Tunnelling through DNS requests is painful but doable; tunnelling through most other things is almost tolerably efficient by comparision. And I guess bandwidth is cheap enough now that we can cope with a 20-50% overhead due to tunnelling.[1] Ewen [0] Anyone who can't automate doing it on each reconnection doesn't have a clue. [1] Still, it'll make the ATM tax look cheap.

12 16

RE: [nznog] The Internet for n00bs
by Regan Murphy 01 Feb '04

01 Feb '04

> From: Seton Wingfield [mailto:SWingfield(a)atl.co.nz] > Sent: Sunday, 1 February 2004 7:00 p.m. > > I recently read the "Changes to Functionality in Microsoft > Windows XP Service Pack 2" and in it, it states that the > Internet Connection Firewall will be turned on by default. > Changes like this and Microsoft's long term commitment to > security via their "Trustworthy Computing" initiative may > make the problems that you are trying to solve a thing of the past. > Unfotunately it will be a long time until all net people shift from Windows 95 et al and move to WinXP etc. Also with the growth of linux variants can we expect the same default security options to be set there as well (remember all the sendmail exploits and the redhat vunerabilities)? Beyond that there are a lot of people that like to run programs such as p2p file sharing applications and irc and ftp and these unfortunately don't work too well with misconfigured firewalls. The typical answer to "how do I get p2p app working?" is "oh, you're running XP? Then disable the default firewall and it will all work". i.e. n00bs will always unwittingly impact the internet through miseducation and ignorance -- Regan

1 0

The New Zealand Network Operators' Group
by Donald Neal 31 Jan '04

31 Jan '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This month Donald Neal is joined as list administrator by Simon Blake and Simon Lyall. The aim of the increased head count is to provide better coverage in terms of time, and to reduce the list's reliance on any individual. Meetings See http://www.nznog.org/ for details of the conference which has just finished. Another fairly similar gathering seems likely to be held early next year. Also see http://thursdaynightcurry.com/about.html if you live in or near Wellington or Auckland. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. And possibly http://www.citylink.co.nz/information/news/nr1068413489.html . About This Mailing List This list has around six hundred addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

RE: [nznog] Conference Videocast
by mark.harris＠ssc.govt.nz 31 Jan '04

31 Jan '04

Richard Naylor wrote: > > Yes - all on DVD, but missed the start of Geoffs talk - > couldn't climb over > Si to get to DVD-R. Must get bigger van..... or a smaller Si ... ;-) mark

3 2

Re: [nznog] The Internet for n00bs
by Ewen McNeill 31 Jan '04

31 Jan '04

In message <1075610074.2007.305.camel(a)localhost>, Steve Withers writes: >On Sun, 2004-02-01 at 15:11, Anaru Hartley wrote: >> I kind of sense a "one track mind" approach to the >> issue at hand. There are plenty of alternatives, >> personally I don't think tightning the rope is going >> to help improve the Internet. The point was that some people (Dean cited his Nana as an example) really don't want to deal with all the complexity of keeping their system patched against the security hole du jour -- they just want an appliance that will let them talk to their grandchildren and maybe check a few details on their latest group's meetings. A 21st century telephone. The suggestion was then made (in a later talk) that the "only" solution to the mass of people who just wanted an applicance and were unwilling/unable to deal with the "dangerous" place that is the modern Internet, was an Internet-Lite -- the Internet for n00bs. The major part of its architecture was, essentially, a bunch of application proxies at the ISP with everything else firewalled off. The aim of this was to (dramatically) reduce the pool of reachable, unpatched, systems on the 'net. The current batch of worms to install open relays would be immunised against pretty much immediately for two reasons (couldn't reach open relays once established, couldn't reach remote hosts to infect them). >True. All you need is one ISP who offers "real" Internet....and everyone >would flock there. I know I would, if that was the choice. Yes, but you're l33t Steve. You'd flock there. Most people here would flock there. Much as I don't want to see "the Internet" become a dumbed down IntaWeb clone, I recognise that's just me ("when I want to be wrapped in cotton wool, I know where to find it"). There's a whole bunch of people, probably the majority by an order of magnitude, for whom the Internet, Large As Life, is scary, and intruding on their ability to just do the things they want to (eg, their machine keeps getting infected). So The Internet for n00bs will probably happen eventually. I just hope it isn't done in such a way that the only way to join the Real Internet (tm) is to qualify for your own ASN or by building tunnels through increasingly inappropriate application level protocols. A "walled garden" (to use the Citylink description of CafeNet) would be more appropriate -- with a way out for those that can figure out the gate, and a rule that they don't get to complain (or get out again) if they get run over by the traffic outside. Ewen

2 1

RE: [nznog] The Internet for n00bs
by Seton Wingfield 31 Jan '04

31 Jan '04

In my experience its never the people that find an exploit that end up causing the mayhem. If the flow of information from the exploit finders to the script kiddies could be stopped so would the majority of worms etc. I know this is old thinking but it seems like a easier option than firewalling off the Internet. I recently read the "Changes to Functionality in Microsoft Windows XP Service Pack 2" and in it, it states that the Internet Connection Firewall will be turned on by default. Changes like this and Microsoft's long term commitment to security via their "Trustworthy Computing" initiative may make the problems that you are trying to solve a thing of the past. http://www.microsoft.com/downloads/details.aspx?FamilyID=7bd948d7-b791-40b6… http://www.microsoft.com/mscorp/innovation/twc/twc_whitepaper.asp The documents are MS Word format. -----Original Message----- From: Ewen McNeill [mailto:ewen(a)naos.co.nz] Sent: Sunday, 1 February 2004 11:17 a.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] The Internet for n00bs One of the things discussed at the (excellent, thanks everyone) NZNOG 2004 conference was that the Internet sucks, and that a large portion of this suckage is due to ignorant n00bs who do the wrong thing, get 0wned, etc. It was suggested that the "only" fix to this problem was to kill the end to end Internet, making the "Internet" a core exchange network (a la telco style), and allowing users only access to a local proxy at their ISP for a very limited set of services. Aside from my objection that this won't help much except in the short term (plenty of protocols already tunnel around such firewall limitations -- eg, look at everything that's been tunneled through HTTP), this really sucks for the l33t who find it awfully restrictive. An alternative approach to that type of thing is possibly just to heavily firewall -- at the ISP end of the link -- connections to all "potential n00b" users (SMTP to ISP mail server, POP/IMAP/HTTP/HTTPS to whereever and a few other common things) by default. And then provide an "opt out" system that anyone with a clue can use to disable the default firewalling. I would suggest: telnet ihaveaclue.$ISP where you have to enter "My name is $NAME, and I have a clue" (with $NAME expanded, but otherwise literally). Possibly that setting could be sticky; possibly it would need to be done on each reconnection.[0] The remaining aspect is that anyone who claimed to have a clue in this manner and then lets something on their connection get 0wned or otherwise abuses the privilege, (a) loses the ability to unblock themselves, and (b) gets their name published on a list of shame. This could pretty much be implemented today by anyone with a firewall (or customer facing ACLs) which can be set on a per-customer basis. Various RAS boxes have this sort of facility already; at least one ISP I know of firewalls accounts that are over due so they can reach the accounting website and that's about it. The alternative seems to be that the clueful will just tunnel everything through whatever still works. Tunnelling through DNS requests is painful but doable; tunnelling through most other things is almost tolerably efficient by comparision. And I guess bandwidth is cheap enough now that we can cope with a 20-50% overhead due to tunnelling.[1] Ewen [0] Anyone who can't automate doing it on each reconnection doesn't have a clue. [1] Still, it'll make the ATM tax look cheap. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0