- NZNOG - lists.nznog.org

NZNOG/UniForum NZ Conference - Registrations Now Open
by Donald Neal 13 Jun '02

13 Jun '02

Registrations are now open at http://www.uniforum.org.nz/registration.cgi for this year's conference. Subject to sufficient registrations, this will be held in Auckland from July 11th to 14th. A strong NZNOG programme is offered over the Thursday and Friday, with on Saturday a tutorial by Paul Vixie, original author of BIND. You can read a full programme on the web site. A "voucher" code has already been sent to all NZNOG subscribers entitling you to free drinks on Thursday night, courtesy of 2Day Internet Ltd. Remember to use that when registering. (Please contact me if you haven't received it.) The conference is now go *subject to sufficient registrations being received*. Reduced rates are available to the first fifty registrants. We do really need to see at least couple of dozen registrations in short order to ensure that all this does happen. Over to you. - Donald Neal (P.S. This is a good programme. Please register REAL SOON.) ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZNOG bookings - erratum
by Martin D Kealey 13 Jun '02

13 Jun '02

The conference web pages suggest phoning 0508-733267 if you have any queries; unfortunately my cellphone is broken so that number may not get through. If you have any questions about booking, I can be reached on 09-3730400 extn 5117 during the day, or 09-6272063 in the evening/weekends. -Martin - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

passport.com
by Juha Saarinen 12 Jun '02

12 Jun '02

Yeah, Microsoft does send out emails from passport.com with return addresses like PPMSVCMG(a)PASSPORT.COM even though there are no MX records for the domain. Just found a bunch of undeliverable bounces to passport.com stuck in a mail queue... -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 5

Re: passport.com
by Simon Byrnand 12 Jun '02

12 Jun '02

At 13:42 13/06/02 +1200, David Robb wrote: >On Thu, 13 Jun 2002, Juha Saarinen wrote: > >> Yeah, Microsoft does send out emails from passport.com with return >> addresses like PPMSVCMG(a)PASSPORT.COM even though there are no MX records >> for the domain. > >Unless RFC 974 has been superceeded : > > It is possible that the list of MXs in the response to the query will > be empty. This is a special case. If the list is empty, mailers > should treat it as if it contained one RR, an MX RR with a preference > value of 0, and a host name of REMOTE. (I.e., REMOTE is its only > MX). In addition, the mailer should do no further processing on the > list, but should attempt to deliver the message to REMOTE. The idea > here is that if a domain fails to advertise any information about a > particular name we will give it the benefit of the doubt and attempt > delivery. Quite true. The problem is that passport.com doesn't accept connections on port 25, so there is no valid server to accept the bounces that they're generating..... Regards, Simon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Dean's email addy?
by Andy Gardner 11 Jun '02

11 Jun '02

Sorry for the off-topic. Trying to email Dean Pemberton but the addres I have is bouncing. Could someone email me some other addresses to try. Semi-urgent. Thanks, -- Andrew P. Gardner barcelona.com stolen, stmoritz.com stays. What's uniform about the UDRP? We could ask ICANN to send WIPO a clue, but do they have any to spare? Get active: http://www.tldlobby.com - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

OT: Bandwidth/Connectivity in Matamata
by Mark Derricutt 11 Jun '02

11 Jun '02

'lo, off topic, but you lot would be the best to ask I'm guessing... what bandwidth/connectivity options are there in Matamata these days? Is it ADSLable yet? Walker wireless? Thinking of running another cybercafe out there at a music fest and wanting something better than the dialup we had to suffer last year, or the ISDN we had the year before... The bitcher is that the connection would only be for 3-4 days. Mark -- \m/ -- "...if I seem super human I have been misunderstood." (c) Dream Theater mark(a)talios.com - ICQ: 1934853 JID: talios(a)myjabber.net - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

passport.com
by thom hooker 10 Jun '02

10 Jun '02

does anybody else think it strange that microsoft's passport.com domain has no MX record? and the A record listed for it isn't listening on port 25? i've had mail queueing for it for the past few months (mainly bounces for invalid addresses) and as far as i can tell microsoft are unwilling to do anything about all the bounce mail they're generating (i mean, how hard can it be to add 2 lines to dns?) is anybody else seeing this? -- thom hooker p: 64 9 3555 279 xtra.co.nz f: 64 9 3555 260 unix systems support c: 64 21 523 521 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

NZ IP's
by Steve Winter 07 Jun '02

07 Jun '02

Hi I often find the discussions here well beyond my level of understanding, but never the less interesting...I expect that this question may be rather trivial, but this is the only place I could think where I may get an answer... I am trying to discover how I might find out all the IP ranges which are used in New Zealand. My ultimate goal is to check users visiting a website to see if they are connected to the internet within New Zealand and redirect them to different pages accordingly, much like Google seems to be able to do these days, ie when I enter www.google.com, I end up at www.google.co.nz, and I'm assuming that this is done based on the IP address of the machine I'm on...??.. Can anyone point me in the right direction for a source of this information...or if I'm heading in the wrong direction to achieve my goal, enlighten me as to how Google manages this... Thanks for any suggestions Steve +----------------------------------------------+ Steve Winter, Assistant Director National Science-Technology Roadshow Trust P.O. Box 598, Wellington New Zealand Phone +64 27 434 1577 Fax +64 8 326 3263 http://www.roadshow.org +----------------------------------------------+ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

12 15

RE: NZ IP's
by Thomas Salmen 06 Jun '02

06 Jun '02

> > > The hostnames of my home machine and my colocated machine > both end in .net > - but I still see google.co.nz, not google.com :) > I suppose most people who are plain old ISP customers will have .nz > hostnames, but there'll be others who dont... especially > anyone who has > their own domain name (we all know that .com's are generally > cheaper than > .nz's - I know a few of my clients have realised the same.) - and the > ability to get their own DNS set up. > I know that I've given the idea some thought in the past. For a service provider that differentiates billing based on traffics geographical source/destination (eg, in New Zealand, whether traffic is domestic or international), one would expect that reasonable care would be taken to ensure that any address databases or lists would be accurate and well-maintained. The only thing I can suggest as being nearly accurate or up-to-date enough would be periodic analysis of routing tables. For example: if a route is learned from a particular peer, that prefix must be located in a certain area. You'd need to be sure of certain things, though. You'd have to be peering both locally and outside the country, or buying transit from a peer that feeds international and domestic routes separately. Or you might have some luck persuading a peer to tag locally-learned routes with a given community. If you happened to peer via APE/WIX, you could assume that you'd only be learning NZ routes there. You'd also have to be prepared for the inevitable mistakes whenever a route leaks where it shouldn't. And if you didn't peer with anyone, you'd have even more problems :-) I don't think it would work very well if we didn't have so few pipes into New Zealand. But I imagine that Google would peer with enough providers in enough places to make a pretty accurate guess as to which country a host is located. Anyway. I know that some providers use Packeteer-type systems to differentiate between local and international traffic: perhaps they would be willing to comment how they make the distinction? (I don't know anything about them myself - I expect they judge based on which circuit a packet enters or leaves by and don't take much notice of the actual address of the remote host (?) - actual analysis of source/destination probably isn't necessary.) > > At 01:23 7/06/02 -0500, Andy Gardner wrote: > >At 5:52 PM +1200 6/7/02, Chris Hellberg wrote: > > > > >It will work most of the time, but those few who do have > .com reverse > > >lookups will fail. > > > >What NZ ISP's have named their dial-up hostnames as .com instead of > >*.nz ? > > > >I guess it's not as bad as the UK. > > -- Regards, Thomas Salmen Network Manager Radionet Ltd. 72 Paul Matthews Road Albany, Auckland, New Zealand Ph: +64 9 4140 300 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group[
by Donald Neal 06 Jun '02

06 Jun '02

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This posting, or one like it, is sent to all subscribers each month. NZNOG 2002 Work is now under way towards a conference and social gathering to be held in Auckland on 11, 12 and possibly 13 July 2002. Registrations should open Real Soon Now. If you wish to act a sponsor and have not already discussed this either with me or the Convenor, please contact me at this email address. My thanks to 2Day Internet Ltd, Cisco, Ericsson and Juniper. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators rather than by most customers. Auckland Peering Exchange See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. About This Mailing List This list has around 340 subscribers, increasing slightly each month. You may only post to the list from an address subscribed to one of the lists described below. (There's nowadays much more spam bounced than non-member postings.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations, nor the administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrator remains happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Port 2017 TCP
by Denis Gordon 05 Jun '02

05 Jun '02

Juha, TCP 2000 + line_no provides reverse telnet to whatever is connected to that line on the 2500. So I would expect 2017 to connect to line 17. That's AUX on a 2511 - don't know about a 2503. regards Denis Gordon Network Administrator Information Systems Technical Support Dunedin City Council 50 The Octagon, PO Box 5045, Dunedin, New Zealand Ph: +64-3-474 3566 Fax: +64-3-474 3503 Mobile: 025 845 583 Email: denis(a)dcc.govt.nz WWW: http://www.CityOfDunedin.com/ -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Thursday, 6 June 2002 8:31am To: NZNOG Subject: Port 2017 TCP That port is listed in services as "cypress-stat" but does anyone know what's listening on it, on a 2503? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Port 2017 TCP
by Juha Saarinen 05 Jun '02

05 Jun '02

That port is listed in services as "cypress-stat" but does anyone know what's listening on it, on a 2503? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

WIX/APE route servers (WARNING useful content)
by Dean Pemberton 04 Jun '02

04 Jun '02

Ok - Thought it was about time that the list had some more on-topic posts for the week. So I want to tackle the issue of the WIX and APE route servers. Any why some people just don't love them. First some background (excuse the lameness, but I thought I'd talk to a wider audience on the list while I was at it). If you want to ignore this then skip to the bottom where I get to the point (search for *THE POINT*) There are two route servers WIX and APE for the purpose of exchangeing a list of prefix's which are reacable locally via each of those networks. Network entities peer with these servers inorder to get local (wix/ape) nexthop information for prefix's rather than have to default route them through an upstream provider. Example: Company A and Company B both have a presence on Citylink in Wellington. They both have differernt upstream providers. Under normal routing conditions, the traffic between these companies would be routed to their upstream providers and delt with according to their routing/billing policy. It is possible however for Company A and Company B to route traffic directly to each other and thus bypass the upstream. Gaining all the speed and billing advantages along the way. This works well at the moment and there is no problem with this portion of the route servers. The issue comes from ISP's peering to the route servers. Most of the ISP's who have a presence on citylink also advertise routes to the route servers. This is great. It means that if I'm using ISP A for my upstream, I can pass traffic to ISP B's networks across Citylink . The majority of these ISP's however are not listening to any advertisments from the WIX/APE route servers. Which leads to the following situation. Company A uses ISP A as an upstream. Company A is learning prefix's for ISP B through the route server and will pass packets to them directly to ISP B. ISP B however is not listening to any advertisments from the route servers, and will pass all traffic BACK to Company A via ISP A. Thus negating the point of sending the traffic locally in the first place. *THE POINT* SO - I know a few of the reasons why ISP's are not listening to the routes from the servers, but I want to be able to understand them all. Some possible problems ("We don't think that they are safe enough") can be fixed. Other possible concerns ("We don't peer because we don't think we need to") can not. I want to see if it's worth pursueing this kind of network design. So I want to see how many problems fall into each of my catagories above. So if ISP's can send me the responses to: "What are the reasons that you are not listening to prefix's via the wix/ape route servers" I'd appreciate it (private email ok) If you are already listening to all the prefix's then keep the list noise down and stay quiet =) But I know who's not - so don't try and fool me. =) Here are some possible concerns/solutions that I prepared earlier. Might make your response easier C: "People are morons. There is no way that I'm letting little people like Company A inject BGP routes into my network. GOD it took me long enought to understand BGP I'm not trusting some snotty nosed small company administrator" S: Ok - first of all get back on the medication. Secondly - Simon Blake (the route server admin) assures me that he has been running full import and export filters on all peering sessions for the last 18 months. So there is no way that the small networks we are talking about can advertise anything that they have not cleared with Simon first. So in a sense you are not trusting every small company admin - you are trusting Simon. So make your judgement on that. C: "Piss off - I'm not providing domestic transit to other peoples customers. Are you mental" S: Well not last time I checked - but I have had a mountain bike accident since then. I'm not asking you to provide domestic transit for free. Just advertise the routes that you are happy to accept traffic for. for example - maybe you only advertise Wellington routes at WIX and Auckland routes at APE. You all have networks where you can tell the difference right? =) C: "I don't peer with anyone smaller than myself" S: Thats sad. I'm getting a network version of A Christmas Coral flashbacks =) Sure if thats your company policy then I'm not about to pass judgement on it. But if it were me - I'd want to get traffic out of my network as quick as possible. And passing it to a companies upstream is not always the best (read cheapest) way of doing that. Nuff said. C: "Peering is hard. Everytime you peer you add another level of complexity to the network" S: Sure. This is why Simon is also looking at automating the process using some route registry tools. If this is one of your concerns then make it known, but also keep in mind that it's in the pipes. And remember you only have one peer (the server) not all the different companies. Simon has already done one level of scrubbing for you. Pity him his job =) OK So mail me (private if you dont' want to do it to the list) your reasons for not loving the route servers. Even if all you have to say is "Didn't know about them" or "Far too busy" (don't lie though) Thanks Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 13

Re: More Spam to All ISP's
by Steve Phillips 03 Jun '02

03 Jun '02

At 10:36 1/06/2002, Craig Whitmore wrote: >[snippage about spam] paradise customer, someone from paradise want to LART this person ? we have already asked for the domain aim.net.nz to be pulled by kudos.net.nz (our customer hosting the domain) http://aim.net.nz/pipermail/nzisps_aim.net.nz.mbox/nzisps_aim.net.nz.mbox :-) -- Steve. Systems Admin, ICONZ -- Steve Systems Admin, ICONZ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

aim.net.nz null routed until further notice
by David Fox 01 Jun '02

01 Jun '02

FYI Regards David Fox Network Engineer ICONZ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

More Spam to All ISP's
by Craig Whitmore 01 Jun '02

01 Jun '02

Hi all, If you didn't notice aim.net.nz just added all ISP's to their own little New Zealand ISP Mailing list.(I guess to spam about the new ".kiwi" domain name (alternative DNS system) (http://aim.net.nz/pipermail/nzisps_aim.net.nz/2002-May/000000.html) I suggest if you are on this spam list, to remove yourself with the password they just emailed all the email addresses. (sales@ and help@ all the ISP's in NZ) (See http://aim.net.nz/mailman/roster/nzisps_aim.net.nz ) Thanks Craig Whitmore - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: Ape Cabinet ringing again
by Mark Foster 30 May '02

30 May '02

At 19:23 31/05/02 +1200, you wrote: >FYI Someone was trying to ring the APE cabinet at wround 12:30pm today >Hope it wasn't urgent 8) See we go the other way.. our phone in there doesnt have a working ringer.. just a light that flashes... ... Last time I was up there I was working with Mark and he said 'i'll ring you on the phone up there'. Course I Didnt know it wouldnt ring. I got distracted, happened to glance at it and see the light flashing. I still don't know how long he'd been letting it ring for... =P - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Cisco Value added.
by Simon Lyall 30 May '02

30 May '02

I hope this is a joke. Nice to see where our money goes. http://www.theinquirer.net/29050203.htm PS: I sent this to the other list but it seems to be down. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 11

Ape Cabinet
by Matt Camp 30 May '02

30 May '02

I'm in the tower right now, and the APE cabinet was just ringing. Was someone trying to contact it? (Via phone)? --- Matt Camp --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

7 6

Attica/Callplus Prefix List Update
by James Tyson 30 May '02

30 May '02

Hi folks. Please be advised that we have added the following two networks: 202.36.244.0/24 202.36.245.0/25 Full prefix list is: ip prefix-list tranzpeer-networks seq 5 permit 192.100.53.0/24 ip prefix-list tranzpeer-networks seq 10 permit 202.14.252.0/24 ip prefix-list tranzpeer-networks seq 15 permit 202.27.48.0/21 ip prefix-list tranzpeer-networks seq 20 permit 202.36.204.0/23 ip prefix-list tranzpeer-networks seq 25 permit 202.36.244.0/24 ip prefix-list tranzpeer-networks seq 30 permit 202.36.245.0/24 ip prefix-list tranzpeer-networks seq 35 permit 202.37.129.0/24 ip prefix-list tranzpeer-networks seq 40 permit 202.49.62.0/24 ip prefix-list tranzpeer-networks seq 45 permit 202.49.82.0/24 ip prefix-list tranzpeer-networks seq 50 permit 202.49.83.0/24 ip prefix-list tranzpeer-networks seq 55 permit 202.49.152.0/21 ip prefix-list tranzpeer-networks seq 60 permit 202.49.250.0/24 ip prefix-list tranzpeer-networks seq 65 permit 202.50.60.0/22 ip prefix-list tranzpeer-networks seq 70 permit 202.50.170.0/24 ip prefix-list tranzpeer-networks seq 75 permit 202.154.128.0/19 ip prefix-list tranzpeer-networks seq 80 permit 202.180.64.0/18 ip prefix-list tranzpeer-networks seq 85 permit 202.180.113.16/28 ip prefix-list tranzpeer-networks seq 90 permit 202.180.116.0/24 ip prefix-list tranzpeer-networks seq 95 permit 203.96.16.0/20 ip prefix-list tranzpeer-networks seq 100 permit 203.96.48.0/20 ip prefix-list tranzpeer-networks seq 105 permit 210.55.111.0/24 ip prefix-list tranzpeer-networks seq 110 permit 210.55.158.0/24 ip prefix-list tranzpeer-networks seq 115 permit 210.55.254.0/24 -- Cheers. --- James Tyson Moebius Systems Ltd http://www.moebius.co.nz/

1 0

Re: Cisco Value added.
by Matthew G Brown 29 May '02

29 May '02

Not to mention the support and the channel the product takes to reach the customer. Upgrades and development of firmware costs money!. Go buy an RG-1000 and open it up . 486-sec, Lucent Winmodem, RealTek Ethernet chipset. 8mb Flash memory. Infact we installed BSD on one the other day and have it running a Linux router. We can even take the 11mb Silver card our and run a Cisco in it :) . Development costs money , Support costs money . Best Regards Matthew G Brown B & R Holdings LTD DDI: 027 4807731 Email: Matt(a)Brh.Co.Nz " Online Data Security & Wireless Internet Wholesale " http://www.backupserver.co.nz http://www.brh.co.nz IMPORTANT NOTICE: This e-mail is confidential, and is for the intended recipient only. Access, disclosure, copying, distribution or reliance on any of it, or by anyone else is prohibited. Please delete this email if obtained in error and e-mail confirmation to the sender. > You're presumably paying for what the box can do, not a simple summation > of the cost of its components. If what the box can do does not justify > the price, don't buy it. This is not rocket science. > > > Joe > > - > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > where the body of your message reads: > unsubscribe nznog > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Fwd: [Nzisps] Domain Names (fwd)
by Mark Foster 26 May '02

26 May '02

Anyone get this one this morning? Our helpdesk got a copy. General FYI otherwise. (I seem to recall this, or similar, was discussed here some time back.) Mark. >----------Forwarded message ---------- > >From: "Dominic O'Hare" <dominic.ohare(a)aimhosting.co.nz> >To: <nzisps(a)aim.net.nz> > > > >To the director of the Internet Service Provider,=20 > >=20 > >Australasian Internet Marketing In association with Technologies = >Integrated will next month release a new and exciting venture for all = >Kiwis'. The venture is a new innovative namespace for new top-level = >domain names specific to New Zealand surpassing ICANN (The Internet = >Corporation of Assigned Names & Numbers). > >=20 > >The scheme will work much the same as multi-lingual domain names are = >based; the name typed into the browser which then cloaks the real URL = >via you the isp or a plug-in downloaded from our website. The procedure = >is seamless unlike stealth forwarding, which is a frame-based process = >and is limited to cloaking normal web addresses eg. CJB.NET. The outcome = >is, when you type in a url with one of our new domain suffixes in the = >status bar content will load from the url you typed in.=20 > >Example, A user types in - http://www.yourname.kiwi=20 > >A graphic on the page loads, and shows up in the status bar as loading = >from - http://www.yourname.kiwi/welcome.jpg > >=20 > >This is exactly the same, as any normal TLD or ccTLD would load up in = >any browser. > >=20 > >This scheme has been tried, tested and successful in the United States = >by a company selling new domain names such as ".art" and ".church" named = >New.net, The company has made partnerships with large international ISPs = >like Tiscali (Europe) and Netzero (USA) to enable the domain names to = >users of the ISPs. The company has also made deals with large = >distribution software like Kazza to instantly install the companies = >plug-in to enable the new domain names if the users ISP have not enabled = >New.net domain names. New.net domain names now have a growing audience = >to their domain names of over 150 million people worldwide. > > > >New.net has a somewhat different plan of action than us, although they = >clearly show that the creation of new and non-ICANN domain names is = >easily possible and worthwhile.=20 > >=20 > >We are currently looking for partners in this venture, our site and = >network will go live on the 1st of June. If you are interested in = >partnership with us or would like more information, you may contact us = >by email at xtldsproject(a)aim.net.nz.=20 > >Kindest Regards, > >Dominic O'Hare > >=20 > >Managing Director=20 > >Australasian Internet Marketing (NZ) Limited. > >To the director of the Internet Service Provider, > > <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /> > >Australasian Internet Marketing In association with Technologies >Integrated will next month release a new and exciting venture for all >Kiwis. The venture is a new innovative namespace for new top-level domain >names specific to New Zealand surpassing ICANN (The Internet Corporation >of Assigned Names & Numbers). > > > >The scheme will work much the same as multi-lingual domain names are >based; the name typed into the browser which then cloaks the real URL via >you the isp or a plug-in downloaded from our website. The procedure is >seamless unlike stealth forwarding, which is a frame-based process and is >limited to cloaking normal web addresses eg. CJB.NET. The outcome is, when >you type in a url with one of our new domain suffixes in the status bar >content will load from the url you typed in. > >Example, A user types in http://www.yourname.kiwi > >A graphic on the page loads, and shows up in the status bar as loading >from http://www.yourname.kiwi/welcome.jpg > > > >This is exactly the same, as any normal TLD or ccTLD would load up in any >browser. > > > >This scheme has been tried, tested and successful in the United States by >a company selling new domain names such as .art and .church named >New.net, The company has made partnerships with large international ISPs >like Tiscali (Europe) and Netzero (USA) to enable the domain names to >users of the ISPs. The company has also made deals with large distribution >software like Kazza to instantly install the companies plug-in to enable >the new domain names if the users ISP have not enabled New.net domain >names. New.net domain names now have a growing audience to their domain >names of over 150 million people worldwide. > >New.net has a somewhat different plan of action than us, although they >clearly show that the creation of new and non-ICANN domain names is easily >possible and worthwhile. > > > >We are currently looking for partners in this venture, our site and >network will go live on the 1st of June. If you are interested in >partnership with us or would like more information, you may contact us by >email at <mailto:xtldsproject(a)aim.net.nz>xtldsproject(a)aim.net.nz. > >Kindest Regards, > >Dominic OHare > > > >Managing Director > >Australasian Internet Marketing (NZ) Limited. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Pay to be removed from block list?
by Juha Saarinen 26 May '02

26 May '02

Here's something that popped up on the Exim users list. Apparently, there's a new blocking list that charges US$25 to remove entries from its database: http://www.mailabusedatabase.com/ Thought it might be of minor interest to NZNOG... -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spam from inside qwest.net
by Mark Foster 25 May '02

25 May '02

Im being spammed from a netblock inside qwest... ive made three individual attempts to mail their abuse people and get nothing but their automated bounce message... Has anyone successfully dealt with spam or abuse inside qwest.net ? At this point im considering blocking the MTA concerned from connecting to my server, but then theyll just go to my backup MX (who doesnt want to impose the same restrictions that I am willing to.. *frustrated*. Mark. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 10

Looking Glass.
by Simon Lyall 23 May '02

23 May '02

I have a little Looking Glass online at: http://www.usenet.net.nz/lg.cgi that people might be find useful. It's looking at what people are sending to ihug plus ihug's advertisements. -- Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

quest.net.nz ?
by Simon Lyall 23 May '02

23 May '02

It's just been pointed out to me that these guys appear to have vanished. Anyone have some further details? I just need to know if I should remove them from the Noc and Ape webpages. Their phone numbers are all disconnected and the domains don't look very healthy either. Simon. -- Simon J. Lyall. | Very Busy | Mail: simon(a)darkmere.gen.nz "To stay awake all night adds a day to your life" - Stilgar | eMT. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Ihug Domestic peering prefix update (AS7657)
by Leon Chang 22 May '02

22 May '02

Please change the network 210.55.203.0/24 to 210.55.202.0/23 le 24 Full prefix list attached for your reference. ip prefix-list ihug-networks: 53 entries seq 5 permit 202.36.94.0/23 le 24 seq 10 permit 202.37.21.0/24 seq 25 permit 202.37.162.0/24 seq 30 permit 202.37.182.0/24 seq 40 permit 202.49.88.0/23 le 24 seq 45 permit 202.49.148.0/23 le 24 seq 50 permit 202.49.176.0/24 seq 55 permit 202.49.177.0/24 seq 60 permit 202.49.180.0/24 seq 65 permit 202.49.186.0/24 seq 70 permit 202.49.241.0/24 seq 75 permit 202.49.242.0/24 seq 80 permit 202.49.249.0/24 seq 85 permit 202.49.252.0/23 le 24 seq 90 permit 202.49.255.0/24 seq 95 permit 202.50.103.0/24 seq 100 permit 202.50.84.0/24 seq 105 permit 203.109.128.0/18 le 24 seq 109 deny 203.109.252.0/22 ge 23 seq 110 permit 203.109.192.0/19 le 24 seq 115 permit 203.109.224.0/19 le 24 seq 120 permit 203.173.192.0/19 seq 140 permit 203.96.125.0/24 seq 145 permit 203.173.224.0/20 seq 150 permit 206.17.112.0/21 le 24 seq 155 permit 206.18.96.0/20 le 24 seq 160 permit 207.17.104.0/21 le 24 seq 165 permit 207.212.238.0/23 le 24 seq 175 permit 207.213.218.0/24 seq 180 permit 207.214.12.0/23 le 24 seq 185 permit 207.214.7.0/24 seq 190 permit 209.232.124.0/23 le 24 seq 195 permit 209.233.54.0/23 le 24 seq 200 permit 209.233.56.0/22 le 24 seq 205 permit 209.76.100.0/22 le 24 seq 210 permit 209.76.148.0/22 le 24 seq 215 permit 209.77.128.0/22 le 24 seq 225 permit 209.78.48.0/24 seq 230 permit 209.79.136.0/24 seq 235 permit 209.79.139.0/24 seq 240 permit 209.79.142.0/24 seq 245 permit 210.55.184.0/24 seq 250 permit 210.55.202.0/23 le 24 seq 255 permit 210.55.248.0/24 seq 265 permit 210.55.251.0/24 seq 270 permit 210.55.252.0/24 seq 310 permit 202.50.255.0/24 seq 320 permit 202.37.44.0/24 seq 325 permit 203.173.244.0/22 seq 330 permit 203.173.204.0/23 seq 335 permit 202.49.252.0/22 seq 340 permit 202.49.180.0/23 seq 345 permit 202.49.181.0/24 Leon Chang, CCNP, CCDP Senior Network Engineer The Internet Group Ltd. (IHUG), Auckland, New Zealand AS7657 PH: +64 9 359 2710 --------------------------------------------------------------------- - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: WIX/APE route servers (WARNING useful content)
by Frank March 22 May '02

22 May '02

> -----Original Message----- > From: Joerg Micheel [SMTP:joerg(a)cs.waikato.ac.nz] > Sent: Thursday, 23 May 2002 09:41 > To: Roger De Salis > Cc: Dean Pemberton; NZNOG List; k claffy; David Moore > Subject: Re: WIX/APE route servers (WARNING useful content) > > On Wed, May 22, 2002 at 08:24:59PM +1200, Roger De Salis wrote: > > APNIC quote several examples of poor policy within national > > communications framework where local traffic travels to the US > > backbone and back, due to local regualtions that make peering > > impossible. (India is a classic example.) > > We have backbone data from an OC48MON in San Jose which confirms > this kind of erratic routing for a number of countries in the > Asia Pacific. If you need more details, we should get CAIDA > involved in this discussion. > This discussion has a direct bearing on the matter of international Internet charging about which I have posted on a number of occasions. There is a widespread movement in intergovernmental organisations (APEC TEL, APT, ITU-T, ITU-D) attempting to first measure international traffic (nothing wrong with that), second assess who benefits (by some yet to be determined means), and then through some regulatory mechanism institute a 'fairer' cost sharing mechanism. There is no prize for essays outlining the numerous pitfalls in all of this. At the same time, there is some evidence that NZ is quite disadvantaged cf US operators by the present 'smallest ISP/carrier carries all the connnection costs' system. For example we have some very new survey results indicating that 18% of NZ firms with 50+ staff locate their web sites off shore (presumably, mainly in the US). Having better peering systems world-wide would not actually assist NZ much in this as we face the same problem with links to Australia and Asia as we do to the US. Nevertheless, saner peering would reduce costs overall and increase reliability, decrease latency, etc. I would very much appreciate anyone with information relating to influences on current traffic flows and especially regulatory effects, such as the regulatory system in India which prevents local peering, contacting me directly. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 Any opinions expressed in this message are not necessarily those of the Ministry of Economic Development. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Xtra APE circuit down
by Peter Fitchett 22 May '02

22 May '02

FYI Xtra's APE circuit went down this morning at about 4.20am The fault is under action. regards peter - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RPSL on rs2.ape.net.nz - a request for help.
by Simon Blake 21 May '02

21 May '02

Hi Folks ASJL and I are working on RPSL on the second route server on APE, we're investigating ways of making the route servers better, stronger, more trustworthy, and easier to use for the ISP's out there. To that end, we need as many peers advertising routes into the route server as we can lay our grubby mitts on. So, a request please - if you're on APE, can you set up a peering session with 192.203.154.2 on ASN 9560, and drop me a line with your prefix list in it. At this stage, I'd recommend ignoring everything you receive from the route servers. Thanks muchly Si - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

RE: Red Alert - sharp increase port 1433 (MS SQL) scans
by Arjen De Landgraaf 21 May '02

21 May '02

For those who are interested, a rolling update on the 1433/SQL Snake outbreak is published in "Latest Security News" at www.e-secure-it.us The document Port 1433/SQL Snake Update(text)is updated whenever new details become available. Arjen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Red Alert - sharp increase port 1433 (MS SQL) scans
by Michael Bordignon 21 May '02

21 May '02

we've been getting alot of these too - 3 connections from each host, 21 so far (all today, between 11am and 4pm) - michael -----Original Message----- From: Arjen De Landgraaf [mailto:arjen.de.landgraaf(a)cologic.co.nz] Sent: Tuesday, 21 May 2002 3:44 PM To: nznog(a)list.waikato.ac.nz Subject: Red Alert - sharp increase port 1433 (MS SQL) scans Importance: High We just issued a "Red Alert" on a rapid and sharp increase in port 1433 TCP probes. If you have MS SQL Server behind web services, you should monitor. Further information will be available shortly under newsitems at: www.e-secure-it.us www.e-secure-it.co.nz Arjen de Landgraaf E-Secure-IT - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Red Alert - sharp increase port 1433 (MS SQL) scans
by Arjen De Landgraaf 20 May '02

20 May '02

We just issued a "Red Alert" on a rapid and sharp increase in port 1433 TCP probes. If you have MS SQL Server behind web services, you should monitor. Further information will be available shortly under newsitems at: www.e-secure-it.us www.e-secure-it.co.nz Arjen de Landgraaf E-Secure-IT - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Cisco 2610
by Leon Toh 19 May '02

19 May '02

Hi Folks, I'm looking for a Cisco 2610 to purchase. If anyone out there happen to have 1 and willing to part with it please drop me a line than (off the list). Best Regards, Leon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Resources
by James Tyson 19 May '02

19 May '02

Hey folks. I thought I would do a quick whip-around and ask if anyone knows of any recruitment companies, etc that specialise in our high-level expertise? Or is it always who you know and not what you know? -- Cheers. --- James Tyson Moebius Systems Ltd http://www.moebius.co.nz/

4 4

Forcing TTL expirey in bind
by Donovan Jones 15 May '02

15 May '02

Hi I'm a new subscriber to the list. I have a few questions I believe are appropriate for this list. On a non-authoritative nameserver running BIND is it possible (when sshed onto the server): 1. to view the current TTL on a cached record? 2. to force a cached record with some time still to run to expire, i.e. to re query the record. Using the nslookup or host commands is it possible to: query a nameserver to get the time till a cached name will be looked up host -t SOA domain.net returns the initial TTL, but not the time remaining Donovan Jones - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

NZNOG 2002 Speakers - Updated Draft List
by Donald Neal 14 May '02

14 May '02

Here's the current draft list of NZNOG speakers for 11 and 12 July. Work is continuing on clarifying one or two other contributions. This looks to me like a strong two-day programme. 802.11a - Matthew G. Brown, B & R Holdings Distributed Denial of Service: The current state and counter measures - Juergen Brendel, Esphion Ltd IPv6 for Dummies (and not so Dummies) - Dean Pemberton, Juniper Networks (Aust.) Multicast Development - Greg Shephard, Juniper Networks (USA) Multicasting - an Introduction to the Technology and Applications - David Robb, Telecom NZ Multitenanted VoIP and the VoIP Market in New Zealand - Roger De Salis, Cisco Systems NLANR Active Measurement Project - Tony McGregor, The University of Waikato Providing Outsourced Network Security Solutions - Arron Scott, Cisco Systems Residential Ethernet-on-Fibre - Colin Goodwin, Ericsson NZ RPSL - Andy Linton, Lionra Strategies for Managing Denial of Service - Ian Quinn, Juniper Networks Tracking and Quantifying DDoS Attacks - David Moore, CAIDA (USA) Any substantial addition - and such an addition is possible - would mean that we'd need to go to a third day. If that were done, Thursday and Friday 11 and 12 July would remain the days for papers, with tutorial time on Saturday 13th. A registration announcement should follow shortly. - Donald Neal "MMS <telecom.co.nz>" made the following annotations on 05/13/02 10:52:50 ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 5

Job Opening.
by Roger De Salis 13 May '02

13 May '02

Tired of the same-old same-old meetings. Bothered by 5 minutes of creative programming, and 168 hours of mindless meetings to explain a simple concept to a weird guy in a suit.... Here is your opportunity... Recommend your favourite telecom executive to the career opportunity of a lifetime, think about how the Monday morning meetings will look when everyone at the table has a Kalashnikov...... think about project overruns when the result is likely to be impacted by the arrival of B52's.... :-) /R Subject: Short term assignment: Afghanistan Ministry of Communications Date: Tue, 14 May 2002 02:07:34 +1000 (EST) Draft Terms of Reference, Adviser to Afghan Ministry for Communications I. Introduction Internews Network, through its leadership of the USAID-funded dot-GOV program, has been asked to identify and recruit an adviser to work directly with the Ministry of Communications, Government of Afghanistan. This position will be for three to six months. Additional work may be needed, depending upon the political and economic situation. The need to place an experienced individual with the Ministry to provide technical assistance to advise the Minister and his staff is acute. The adviser would receive additional support through the dot-GOV program in terms of specialized technical information needed to help the Minister and Ministry. Current situation. The infrastructure for telecommunications in Afghanistan is virtually nonexistent on a national basis. There are currently several thousand analog and Chinese supplied digital phones in Kabul. Kandahar and Herat have only a few thousand operating phones. There is great interest in the role of VSATs for network expansion. Additionally, there are high expectations for a new mobile cellular. There are plans to develop a microwave long distance network linking six major metropolitan hubs from which the network could be gradually expanded to villages and towns. Development needs. With the need for Afghans to rebuild infrastructure and restore a knowledge base in all sectors (health, agriculture, education, industry, finance and banking, the arts, trade), it is essential that Afghan citizens be provided with telecommunications access and the physical infrastructure for development of the Internet, radio and TV. Access to telephones and the Internet for women are critical factors for stimulating local markets and alternative educational and health services, and reintegrating, at their own pace, women back into public life. Afghans living in remote villages cut off by areas heavily infested with land mines need to know what is happening in various parts of the country and have the capacity for two-way communication. A functional and effective transparent telecommunications system is fundamental to rebuilding infrastructure in each sector of the economy and to discouraging consolidation of power over ICT technologies that limit the use and access to these by the average citizen. Market forces. Leaving aside security and military concerns, international telecommunication firms are currently trying to advise the Afghan government on which set of systems or alternative technologies to invest in and which systems and equipment to purchase. Without a strategic policy framework built by the Ministry staff and a related legislative framework for telecommunications, the Afghan government could find itself frozen into inappropriate technologies and bad system and vendor initial choices. Given the dire need for reconstruction and development of alternative small and medium sized economic activities it will not be possible for the Afghan government to achieve realistic economic development goals and rebuild civil society without an active and knowledgeable Ministry of Communications. II. Illustrative Tasks This individual will advise the Minister of Communications and his designates on developing a policy and regulatory environment needed to build on and evolve an operative telecommunications system in Afghanistan. Ideally the individual will have experience working in with the legal, technical, regulatory, and financial areas of telecommunications. However, what perhaps is equally important is an adviser who has experience working with governments in transition, with very poor physical infrastructure, a diverse and geographically and socially isolated population. Key to the success of this technical assistance assignment is the development of: 1. A clear strategic plan that the policy and technical staff of the Ministry can make operative through various steps (depending upon the political environment) that will address at the minimum: Licensing policy Spectrum management Interconnection management Consumer protection The need for a regulatory agency and role of regulation Internet issues 2. Intensive follow-on mentoring and advising the Afghans that have been supported by the US government for short-term training in the U.S., Afghanistan, and elsewhere. 3. Day-to-day assistance advising on the administrative and management plans for the Ministry. 4. Supporting the Ministry through active liaison with international aid agencies and UN organizations for the purpose of implementing a telecommunications infrastructure, and developing effective mechanisms for dealing with the private sector telecommunications industry. 5. Identify additional needs for technical assistance and training in telecommunications. 6. Any other tasks that will materially assist the Ministry with progress toward its goal of achieving a critical set of competencies in telecommunications management and regulation. III. Deliverables A set of concrete, realistic deliverables will be formalized within the first week of the assignment, related to the tasks illustrative tasks listed above. These will be agreed upon with the Minister of Communications, the USAID Mission, the dot-GOV CTO, and dot-GOV technical team. Please contact any of the following if you have possible candidates: 1. Dr. Sarah J. Tisch, dot-GOV Project Director 202-833-5740, ext. 203 stisch(a)internews.org 2. Dr. George Sadowsky, dot-GOV Senior Technical Adviser 202-415-1933 george.sadowsky(a)internews.org 3. Ms. Mariana Ovtcharova, dot-GOV Program Associate 202-833-5740, ext. 206 mariana(a)internews.org -- \_ Roger De Salis rdesalis(a)cisco.com </' Cisco Systems NZ Ltd +64 25 481 452 /) L8, ASB Tower, 2 Hunter St +64 4 496 9003 (/ Wellington, New Zealand roger(a)desalis.gen.nz ` In October 2001, the 5th most important product line by value for Cisco is - the telephone. Cisco 79x0 IP telephones. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Domain name spammers
by Simon Byrnand 12 May '02

12 May '02

Hi all, Just wondering if anyone else is getting spammed to death lately by a company calling themselves "Internic Online" http://www.interniconline.com trying to peddle "cheap" domain name registration. The fact that they're sending their junk through dozens of different open relays makes them hard to block, and I fail to see how any legitimate company would send "advertising" material through open relays.... Anyone ever tried to contact them and tell them to go away ? :) Regards, Simon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Connection problems to SMTP servers
by Tracy Briscoe 11 May '02

11 May '02

Ordinary I would not post to this list, but as I could not get any useful help out of the two ISPs help desks I called, I will go to those who actually can provide some help. One of our clients is running MDaemon version 2.8.5.0, and has it set up to do a DNS lookup, and send the mail to the appropriate SMTP server as indicated by the MX record. On Thursday we were notified that mail was not getting to Ihug or Tranz Rail. Upon investigating on Friday, I found that they could connect to zuul.ihug.co.nz (I Telneted into port 25 for this diagnosis), but the welcome message "220 mx1.ihug.co.nz ESMTP Exim 3.22 #1 Sat, 11 May 2002 21:29:37 +1200" took between 1 and 1.5 minutes to come up. Connections to mxtrlwn1.tranzrail.co.nz could be made, but I gave up waiting for the welcome message. Connections to other SMTP servers work fine. I have got around the problem by forwarding all their mail to their ISP's SMTP server for distribution, but would like to know what may have caused this so that it can be fixed properly. I have included any info that I thought might be useful below. Any help gratefully received. -Tracy Briscoe -Network Engineer -Patcom Ltd ---------------------------------------------------------------------------- ---------------------------------------------------------------- Windows NT 4.00.1381 running as a proxy server, ie not as their fileserver Running: MDaemon version 2.8.5.0, netmaster 2.4.1, proxy 2 Connecting via ISDN to Xtra route print =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 90 27 f7 1b 0d ...... Intel(R) PRO PCI Adapter 0x3 ...00 90 bc 01 48 0a ...... SkyMedia-200D Ethernet Adapter. 0x4 ...00 01 f0 ab d6 80 ...... NdisWan Adapter =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 210.54.227.49 210.54.227.49 1 100.100.100.0 255.255.255.0 100.100.100.100 100.100.100.100 2 100.100.100.100 255.255.255.255 127.0.0.1 127.0.0.1 1 100.255.255.255 255.255.255.255 100.100.100.100 100.100.100.100 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.11.0 255.255.255.0 192.168.11.2 192.168.11.2 2 192.168.11.2 255.255.255.255 127.0.0.1 127.0.0.1 1 192.168.11.255 255.255.255.255 192.168.11.2 192.168.11.2 1 210.54.227.0 255.255.255.0 210.54.227.49 210.54.227.49 1 210.54.227.49 255.255.255.255 127.0.0.1 127.0.0.1 1 224.0.0.0 224.0.0.0 100.100.100.100 100.100.100.100 1 224.0.0.0 224.0.0.0 192.168.11.2 192.168.11.2 1 224.0.0.0 224.0.0.0 210.54.227.49 210.54.227.49 1 255.255.255.255 255.255.255.255 192.168.11.2 192.168.11.2 1 =========================================================================== ipconfig Windows NT IP Configuration Host Name . . . . . . . . . : jdwnt2 DNS Servers . . . . . . . . : 202.27.184.5 202.27.184.3 Node Type . . . . . . . . . : Hybrid NetBIOS Scope ID. . . . . . : IP Routing Enabled. . . . . : Yes WINS Proxy Enabled. . . . . : No NetBIOS Resolution Uses DNS : No Ethernet adapter E100B1: Description . . . . . . . . : Intel(R) PRO PCI Adapter Physical Address. . . . . . : 00-90-27-F7-1B-0D DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 192.168.11.2 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : Primary WINS Server . . . . : 192.168.11.1 Secondary WINS Server . . . : 192.168.11.2 Ethernet adapter sm200dtp4: Description . . . . . . . . : SkyMedia-200D Ethernet Adapter. Physical Address. . . . . . : 00-90-BC-01-48-0A DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 100.100.100.100 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : PPP adapter NdisWan5: Description . . . . . . . . : NdisWan Adapter Physical Address. . . . . . : 00-01-f0-ab-d6-80 DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 210.54.227.49 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : 210.54.227.49 traceroute Tracing route to zuul.ihug.co.nz [203.109.252.10] over a maximum of 30 hops: 1 63 ms 78 ms 78 ms 192.168.9.200 2 187 ms 110 ms 125 ms 192.168.9.3 3 78 ms 78 ms 78 ms 203.96.111.230 4 94 ms 94 ms 78 ms f0-0-0-1.IPNAK1-B3.xtra.co.nz [203.96.111.145] 5 78 ms 78 ms 78 ms ihug1.ape.net.nz [192.203.154.36] 6 79 ms 93 ms 94 ms mx2.ihug.co.nz [203.109.252.10] Trace complete. Tracing route to mxtrlwn1.tranzrail.co.nz [202.135.38.132] over a maximum of 30 hops: 1 78 ms 78 ms 79 ms 192.168.9.200 2 219 ms 203 ms 110 ms 192.168.9.3 3 78 ms 63 ms 78 ms 203.96.111.230 4 78 ms 78 ms 78 ms f0-0-0-1.IPNAK1-B3.xtra.co.nz [203.96.111.145] 5 78 ms 78 ms 78 ms att.ape.net.nz [192.203.154.74] 6 93 ms 79 ms 78 ms auck1br1-fe-4-0-0.nz.prserv.net [152.158.255.222] 7 78 ms 94 ms 93 ms well1br1-0-0.we.nz.prserv.net [152.158.254.85] 8 125 ms 125 ms 109 ms nz-tranz.nz.prserv.net [152.158.254.73] 9 * * * Request timed out. 10 * * * Request timed out. 11 * * * Request timed out. 12 * * * Request timed out. 13 * * * Request timed out. 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. 21 * * * Request timed out. 22 * * * Request timed out. 23 * * * Request timed out. 24 * * * Request timed out. 25 * * * Request timed out. 26 * * * Request timed out. 27 * * * Request timed out. 28 * * * Request timed out. 29 * * * Request timed out. 30 * * * Request timed out. Trace complete. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

List of ADSL providers
by Dalibor Andzakovic 10 May '02

10 May '02

Hello, I'm trying to compile a complete list of nz's ADSL providers for an onlinan sale site. Can anyone point me to the one, or post one on this list? Tia dali - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 6

NZNOG 2002 Speakers - Draft List
by Donald Neal 10 May '02

10 May '02

Here's the current draft list of speakers for the NZNOG gathering of 11 and 12 July 2002. Work is continuing (thanks, Dean) on clarifying the contributions of other speakers. Announcements of further speakers and of registration arrangements should follow shortly. - Donald Neal Papers ―---- 802.11a - Matthew G. Brown, B & R Holdings DDoS - Juergen Brendel, Esphion Ltd DoS - Ian Quinn, Juniper Networks IPv6 for Dummies - Dean Pemberton, Juniper Networks (Aust.) Multi-Tenanted VoIP and the VoIP market in New Zealand - Roger De Salis, Cisco Systems NLANR Active Measurement Project - Tony McGregor, The University of Waikato Tracking and Quantifying DoS Attacks - David Moore, CAIDA (USA) Voice over DSL - Colin Goodwin, Ericsson NZ Tutorial ―------ RPSL - Andy Linton, APNIC -- Donald Neal Special Operations Network Delivery Telecom New Zealand Ltd "MMS <telecom.co.nz>" made the following annotations on 05/10/02 15:26:14 ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: List of ADSL providers
by Zanetti David 09 May '02

09 May '02

Joe Abley [mailto:jabley(a)automagic.org] wrote: > On Fri, May 10, 2002 at 10:47:17AM +1200, Dalibor Andzakovic wrote: > > I'm trying to compile a complete list of nz's ADSL providers for an > > onlinan sale site. > > The Onlinans are lucky, as the list of generally-available DSL > providers is quite manageable: > > 1. Telecom New Zealand. > 2. Certain customers of Telecom New Zealand. Don't Clear do DSL over their own copper. Approximately of no useful availability, but that's beside the point. :) -- David Zanetti <david.zanetti(a)nzpost.co.nz> Security Engineer, New Zealand Post Desk: +64-4-496-4005 Mobile: +64-25-832-572 "Hope.. is a dangerous thing" This email with any attachments is confidential and may be subject to legal privilege. If it is not intended for you please reply immediately, destroy it and do not copy, disclose or use it in any way. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Carriers blocking IPSec...official policy?
by rob.edkins＠axon.co.nz 09 May '02

09 May '02

> We do IPSec VPNs on a weekly basis, and have never struck any > carrier in NZ blocking ESP traffic. > Nor had we until we did ;-) It's probably more accidental than intentional, like I say, 'catch all' rules that occaisonally bite. It's something to look out for though. We wasted a lot of time on debugging the first one. Rob -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Off-Topic : MainStream Internet Solutions Limited
by Sahil Gupta - Net4U Limited 08 May '02

08 May '02

This applies to clients/wholesalers of MainStream Internet Solutions Limited. This is to inform the people of this industry that Net4U Limited has formerly ceased all dealings with MainStream Internet Solutions Limited. Dialup Internet Accounts were terminated at 6pm on 8th May, 2002 and ADSL Accounts shall be terminated by 6pm on 9th May, 2002. The domain name "faster.net.nz" still remains property of "Francois Computer Systems Limited". Wholesalers are advised not to deal with the company for various reasons, if require any further information you are welcome to contact me off-list, if necessary. Regards, Sahil Gupta Net4U Limited - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Carriers blocking IPSec...official policy?
by rob.edkins＠axon.co.nz 08 May '02

08 May '02

Greetings folks, We have had several instances recently of problems with IPSec VPNs that turned out to be caused by ACL's at the ISP or carrier level blocking ESP traffic, or rather any IP traffic that isn't TCP, UDP, ICMP or routing stuff. There is no one particular network provider involved (one was offshore), and it doesn't seem to be a general practice, but we seem to be getting caught occaisonally by default "deny all IP" catch-all rules of the kind you stick at the bottom of the access list. Sometimes, it's only one interface in a particular direction. We've wasted a large amount of time and effort debugging and trying to get people to check their router configs for us, with varying degrees of co-operation. Has anyone else struck similar issues? Can anyone comment on whether this is a general 'no VPNs on our turf' policy, as one provider's help desk has (not terribly helpfully) suggested? Rgds, Rob Edkins Systems Consultant Axon Computertime email: rob.edkins(a)axon.co.nz -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Traffic Magnet At It Again
by Mark Foster 06 May '02

06 May '02

I got hit by Traffic Magnet again.. spamcrawlers are nasty. I noticed a coupla quirks... Firstly, when I traceroute to the IP concerned, clix are sending me to LA first.. whats up with that? :) Next... 26. 202.106.192.222 0% 38 38 418 415 438 469 27. GSR01-ToBTO-02.tynoc.bj.capitalnet 22% 30 38 420 409 442 496 28. RSM04-ToGSR01.TY.bj.capitalnet.com.cn 0% 38 38 441 433 481 542 29. 211.101.236.29 0% 38 38 417 417 438 466 Interesting hostname on hop 27 there.. :) I know this host has been discussed in the past, did anyone make any progress pursuing this? Im about to block capitalnet from connecting to my MTA... Mark. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Mailwasher.
by Simon Lyall 06 May '02

06 May '02

Are other people having problems with customers using this program? It has a function for "bounce" spam which forges bounces from MAILER-DAEMON at the ISP's domain. I seem to only have a very small number of customers using it but the queues on my mail smtp servers are growing a bit with emails to bogus addresses waiting to time out (which is why there is a seperate server for bounces in the first place). I'm really worried that if use of the program takes off I'll have to re-resource ($$$) my mail servers to take account of a few 10,000s emails sitting in the outgoing queues or else the same customers will start blaming me for not delivering their emails in less than 10 seconds. I think the author is from New Zealand, anybody know them , an address where I can send a bill would be great. I also really object to the concept of the program forging email addresses on emails. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Mailwasher.
by Darrin Cooke 06 May '02

06 May '02

-----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] >Maybe the author of the program needs a friendly but firm whack with a clue >stick to remove the offending functions of the program. The last thing we >need is more undeliverable crap sitting in outbound queues. The spammers >themselves provide ample quantity there :) >Regards, >Simon I just dicovered that the Netguide magazine has half a page about mailwasher, They seem to be recommending it; "Mailwasher (insert URL here) analyses each email as is arrives and warns you if it is suspected junkmail or a virus. But not only does it let you delete unwanted emails before you download them, it also bounces them back so it looks like your email address is invalid." etc etc etc. They credit a "Christchurch businessman Nick Bolton" with the idea. <insert comments regarding LART'ing with large clue stick here> Cheers, Darrin - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Mailwasher.
by Gordon Smith 06 May '02

06 May '02

Hi Simon, I had a couple of customers using it, until I informed them that technically they were breaching our AUP (forging headers). I don't care if they want to use it for filtering, but trying to bounce to domains with bogus MX pointers just causes me problems. Once they understood the issue, they were quite happy to just use the filtering functions. Cheers, Gordon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1