- NZNOG - lists.nznog.org

InternetNZ to host APRICOT 2016 in Auckland!
by Dean Pemberton 10 Sep '13

10 Sep '13

It's my pleasure to announce that InternetNZ has been awarded the hosting rights for the 2016 APRICOT conference. The conference will be held at SkyCity and Auckland University of Technology in February 2016. The press release at the following link has some more information. https://internetnz.net.nz/news/media-releases/2013/New-Zealand-host-Asia-Pa… Needless to say this is a big opportunity for the networking community within New Zealand and we look forward to getting you all involved before, during and after the event. Regards, Dean -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

1 0

IPSec vendor interoperability war stories
by Mark Goldfinch 10 Sep '13

10 Sep '13

Hi everyone, I have a business need to support IPSEC tunnels with many different vendors as we don't get to select our partner's equipment vendors. We've had some recent problems with our existing equipment. At the moment we're look at whether whether software upgrades will help our current situation. While we're doing that we're also looking at what other options exist. I'd appreciate anyone's operational experiences between different IPSec vendors, either on-list or to me directly if you want to protect the identities of the not so innocent :-) Beer for those who can offer their experiences! Thanks, -- * *Mark Goldfinch | Systems Team Leader MODICA GROUP nz: +64 4 498 6000

6 7

Vodafone RBI Tower Cosite
by Jonathan Brewer 10 Sep '13

10 Sep '13

Hi Folks, Anyone want to share their experiences co-siting on one of Vodafone's new RBI funded towers? As I understand there are fixed prices for co-site, backhaul from Chorus, etc.. It should be a pretty sweet deal. If there's anyone from Vodafone listening, I'd appreciate a pointer to a location list, rate card, and application form. I can't find them online. Cheers, Jon

1 0

Xtra mail admin and ptr records...
by Don Gould 10 Sep '13

10 Sep '13

From:<gillian.halkett(a)nzvanlines.co.nz <mailto:gillian.halkett(a)nzvanlines.co.nz>> SIZE=50696 Tue 2013-09-10 15:27:37: [126020:1] <-- 250 2.1.0 Ok Tue 2013-09-10 15:27:37: [126020:1] --> RCPT To:<jenna(a)christchurchapartments.co.nz <mailto:jenna(a)christchurchapartments.co.nz>> Tue 2013-09-10 15:27:38: [126020:1] <-- 553 5.7.1 <222-154-247-46.adsl.xtra.co.nz <http://adsl.xtra.co.nz>[222.154.247.46]>: Client host rejected: AUTO_[A|X]DSL We aren't accept direct connection not from dedicated SMTP servers. Please use your internet provider SMTP Server. Tue 2013-09-10 15:27:38: [126020:1] --> QUIT We're rejecting mail from nzvanlines.co.nz because they're running their smtp server on a service with a|x|vdsl in the ptr record. I think we've had this discussion on list before, and iirc we decided that we just get providers to update ptr records, but I'm a bit scared to ring L1HD and ask for a ptr change. Is there an admin on list from Telecom who can work with your customer to fix this for as I doubt it's only us it's impacting? D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb)

5 6

Fwd: [PAG] Fwd: [isoc-advisory-council] STATEMENT: Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology
by Dean Pemberton 09 Sep '13

09 Sep '13

Given that protocols and standards effect NZ network operators, this seems to be on topic. Seeing how IETF handles these issues and rebuilds trust will be interesting. ---------- Forwarded message ---------- From: Alicia Jackson <jackson(a)isoc.org> Date: 10 September 2013 08:03 Subject: [isoc-advisory-council] STATEMENT: Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology To: "isoc-advisory-council(a)elists.isoc.org" <isoc-advisory-council(a)elists.isoc.org> Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology The Internet Society is alarmed by continuing reports alleging systematic United States government efforts to circumvent Internet security mechanisms. The Internet Society President and CEO, Lynn St. Amour, said, “If true, these reports describe government programmes that undermine the technical foundations of the Internet and are a fundamental threat to the Internet’s economic, innovative, and social potential. Any systematic, state-level attack on Internet security and privacy is a rejection of the global, collaborative fabric that has enabled the Internet's growth to extend beyond the interests of any one country.” The Internet Society believes that global interoperability and openness of the Internet are pre-requisites for confidence in online interaction, they unlock the Internet as a forum for economic and social progress, and they are founded on basic assumptions of trust. We are deeply concerned that these principles are being eroded and that users' legitimate expectations of online security are being treated with contempt. As the institutional home of the Internet Engineering Task Force (IETF), we believe that open and transparent processes are essential for security standardization, and result in better outcomes than any alternative approach. For example, protocols developed by the IETF are open for all to see, inspect, and verify, as are the open and inclusive processes by which they are specified. IETF Chairman Jari Arkko has strongly reiterated the IETF’s commitment to improving security in the Internet, and to seeking ways of improving security protocols in light of these new revelations and security threats. “The IETF has a long-standing commitment to openness and transparency in developing security protocols for the Internet, and sees this as critical to confidence in their use and implementation.” To read more, visit: http://www.ietf.org/blog/2013/09/security-and-pervasive-monitoring/. However, the open development of robust technical specifications is just one link in the chain. Security standards must be properly implemented and used. This is a wake-up call for technology developers and adopters alike, to reexamine what we can do to ensure that all links in the chain are equally strong. This is key to helping restore public trust and confidence in the Internet. The Internet has tremendous potential for economic and social good, but unless all stakeholders trust the Internet as a safe place for business, social interaction, academic enquiry, and self-expression, those economic and social benefits are put at risk. To fulfill its potential, the Internet must be underpinned by the right combination of technology, operational processes, legislation, policy, and governance. The recent reports suggest that U.S. Government programmes have systematically undermined some or all of those measures, and that is why we view the revelations with such grave concern. With this mind, we issue these calls to action for the global community: • To every citizen of the Internet: let your government representatives know that, even in matters of national security, you expect privacy, rule of law, and due process in any handling of your data. Security is a collective responsibility that involves multiple stakeholders. In this regard, we call on: •Those involved in technology research and development: use the openness of standards processes like the IETF to challenge assumptions about security specifications. •Those who implement the technology and standards for Internet security: uphold that responsibility in your work, and be mindful of the damage caused by loss of trust. •Those who develop products and services that depend on a trusted Internet: secure your own services, and be intolerant of insecurity in the infrastructure on which you depend. •To every Internet user: ensure you are well informed about good practice in online security, and act on that information. Take responsibility for your own security. At the Internet Society, we remain committed to advancing work in areas such as browser security, privacy settings, and digital footprint awareness in order to help users understand and manage their privacy and security. The citizens of the Internet deserve a global and open platform for communication built on solid foundations of security and privacy. _______________________________________________ Isoc-advisory-council mailing list Isoc-advisory-council(a)elists.isoc.org https://elists.isoc.org/mailman/listinfo/isoc-advisory-council

6 7

One block of AS Numbers allocated to the RIPE NCC
by Leo Vegoda 09 Sep '13

09 Sep '13

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of one block of 1,024 AS Numbers to the RIPE NCC in September 2013: 61952-62463 Assigned by RIPE NCC whois.ripe.net 2013-09-09 199680-200191 Assigned by RIPE NCC whois.ripe.net 2013-09-09 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/ Regards, Leo Vegoda ICANN IANA

1 0

Maxnet/Vocus Colo - sublet
by Skeeve Stevens 08 Sep '13

08 Sep '13

Hey all, I am looking for about 5RU in the Maxnet/Vocus DC. I think they only sell in minimum half racks - which is excessive for our needs. Does anyone have some space they are subletting? I am also looking for a quote on a cross-connect from Maxnet DC to SkyTower. Responses off-list please (via email only!) ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

1 0

Mail admins for dmzglobal, yahoo and ihug
by Don Gould 04 Sep '13

04 Sep '13

Could mail admins for dmzglobal, yahoo and ihug please make them selves known off list please. I have a client who is having trouble getting mail to some of your customers. I've run a trace on our log files and proven that your mail systems are accepting mail from our server on behalf of our client. I can provide mail logs, but I'll do that directly off list. Thanks D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb)

1 0

Kiwicon 7 CFP
by Mike Forbes 02 Sep '13

02 Sep '13

HI NZNOG FRIENDS Just advising the list the Kiwicon 7 CFP is out. We welcome submissions from our networky chums. https://www.kiwicon.org/cfp2013.txt -- On behalf of the Kiwicon Crüe

1 0

Orcon IPv6 rDNS delegation
by Jonathan Spence 01 Sep '13

01 Sep '13

Hi everyone, Google have just started enforcing PTR records for IPv6 addresses delivering to Gmail. Our IPv6 works great with Orcon but having serious issues getting delegation back to our nameservers setup. I have been told a few times that everything is setup on their end but I don't think it is. Our IP space: 2400:4800:4017::/48 is meant to be sent to ns1.power-business.co.nz and ns2.power-business.co.nz. However it doesn't seem to. For example our website is:2400:4800:4017:200:250:56ff:fe90:82f If I query ns1.power-business.co.nz from my home computer is works fine: -----command----- C:\Users\Jonathan Spence>nslookup 2400:4800:4017:0200:0250:56ff:fe90:082f 60.234.77.213 Server: UnKnown Address: 60.234.77.213 Name: midas.power-business.co.nz Address: 2400:4800:4017:200:250:56ff:fe90:82f ------ end command ----- However other hosts don't resolve this. When using this tool it doesn't work failing when reaching Orcon's nameserver: http://www.simpledns.com/lookup-dg.aspx Can anyone comment? Thanks, Jonathan ------- output ------- Received referral response - DNS servers for "0.4.2.ip6.arpa": -> ns4.apnic.net (no IP address) -> apnic1.dnsnode.net (no IP address) -> ns3.apnic.net (no IP address) -> tinnie.arin.net (no IP address) -> ns2.lacnic.net (no IP address) -> sec1.authdns.ripe.net (no IP address) -> ns1.apnic.net (no IP address) ---------------------------------------- Attempting to resolve DNS server name "apnic1.dnsnode.net" (details not logged) ---------------------------------------- Resolved DNS server name "apnic1.dnsnode.net" to IP address 194.146.106.106 ---------------------------------------- Sending request to "apnic1.dnsnode.net" (194.146.106.106) ---------------------------------------- Received referral response - DNS servers for "0.0.8.4.0.0.4.2.ip6.arpa": -> ns1.orcon.net.nz (no IP address) -> ns2.orcon.net.nz (no IP address) ---------------------------------------- Attempting to resolve DNS server name "ns2.orcon.net.nz" (details not logged) ---------------------------------------- Resolved DNS server name "ns2.orcon.net.nz" to IP address 210.55.12.2 ---------------------------------------- Sending request to "ns2.orcon.net.nz" (210.55.12.2) ---------------------------------------- Received authoritative (AA) response: -> Header: Non-Existent Domain ----- end output ----- Jonathan Spence Chief Information Officer Mobile: +64-21-1055634 Work: +64-9-9503306 Web: power-business.co.nz The information contained in this message is privileged and intended only for the recipient names. If the reader is not a representative of the intended recipient, any review, dissemination or copying of this message or the information it contains is prohibited. Views expressed in this message may notnecessarily be those of Power Business Services Limited. If you have received this message in error, please immediately notify the sender, and delete the original message and attachments.

3 3

DNS hijacking of a few domains
by Blair Harrison 27 Aug '13

27 Aug '13

Hi Folks, Seems like there has been a bit of DNS hijacking happening today - NYTimes.com as one of the targets - you may wish to look at flushing your recursive nameserver caches.. See this dns-oarc post for more details. https://lists.dns-oarc.net/pipermail/dns-operations/2013-August/010617.html Cheers, Blair

1 0

Colo in SkyTower
by Skeeve Stevens 26 Aug '13

26 Aug '13

Hey all, I am wondering who is offering Colo in Sky Tower. I am looking at 2 or 3RU. Just feeling out pricing for a project I am scoping out. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

3 3

APNIC 36 - Join the Webcast
by Elly Tawhai 25 Aug '13

25 Aug '13

Hi NZNOG Community, APNIC 36 Webcast is going to start in 15 minutes. There will be two parallel live webcasts. You can access then from here http://conference.apnic.net/36/program#broadcast Hope you can all join the webcast to take part in APNIC 36 sessions from Xian, China. See you online! Kind regards, Elly APNIC

1 0

Deep rack available in Auckland
by Alexander Neilson 17 Aug '13

17 Aug '13

I am looking for a large (42RU or taller) and deep (900mm) 19" rack lying around in Auckland (or for sale, in stock, in Auckland) We can't wait for standard lead times sorry so looking for someone with an empty one wanting to get it hauled away for free and re used or someone who sells / supplies them based in Auckland holding stock on premises. Looking for off list replies / suggestions / options Thank you all Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

Fibre / Connectivity issues - Sky Tower?
by Barry Murphy 12 Aug '13

12 Aug '13

Hey guys Anyone seeing any issues with GGI / Chorus, particularly Sky Tower. We lost Chorus Auckland UFB for 8 minutes, physical interface down. We lost a 1Gb GGI International circuit to one of our clients in Sky Tower but no traffic passing. Also had reports of some other fibre circuits having issues that terminate to Sky & MDR though these have not been confirmed. Many thanks Barry Murphy

1 1

Call for Papers for NZNOG 2014
by Dean Pemberton 08 Aug '13

08 Aug '13

Call for papers - NZNOG 2014 Doing something interesting in the Internetworking space? Submit an NZNOG conference paper and you could win a trip to the next APRICOT meeting in Bangkok Thailand! ---- The NZNOG organising committee invites papers for its 13th annual conference, to be hosted at the Rutherford Hotel, Nelson, New Zealand from 27 – 31 January 2014. There will the three day Workshops 27 – 29 January, a day of tutorials on 29 January with the main conference on 30 – 31 January. The best local conference paper as judged by the trustees in association with the programme committee will win a trip to APRICOT 2014, to be held in Bangkok, Thailand, 18-28 February 2014. So, get writing! Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practises and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 21st October. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. Please note that full slide decks will be required by 18th November. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate abstracts based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. The best local paper will be judged by a selection of the trustees and the programme committee. Return flights from New Zealand, accommodation, and conference fees will be covered. It will be expected the best paper is submitted by the winner for presentation at APRICOT. More details on paper submission can be found at http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

Call for NZNOG 2014 Programme Committee participants
by Dean Pemberton 08 Aug '13

08 Aug '13

Afternoon everyone, The NZNOG 2014 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the NZNOG 2014 conference (www.nznog.org) The NZNOG Trustees selects a new Programme Committee each year and is now seeking nominations from the community. Eligible PC candidates are those who have attended NZNOG conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of NZNOG conferences. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content for the event and review submissions for technical merit. The PC will meet by regular conference calls, during the months prior to the event. If you are interested in joining the PC send a brief note to "trustees at nznog.org". The note should include affiliation (if any) and contact details (including e-mail address), and a brief description of why you would make a good addition to the PC. PC members receive complimentary registration for the event. The NZNOG Trustees will accept nominations received by the end of Friday 30th August, 2013, and will announce the new PC shortly thereafter. Many thanks! NZNOG Trustees

1 0

Policy Proposals at APNIC36
by Dean Pemberton 07 Aug '13

07 Aug '13

Hi all, There are currently 3 policies for consideration at the APNIC 36 meeting Xi'an at the end of August. They are: prop-108 Suggested changes to the APNIC Policy Development Process prop-107 AS number transfer policy proposal prop-105 Distribution of returned IPv4 address (Modification of prop-088) I'll go through briefly what the proposals and where appropriate what I think about them. I'm going to be one of the NZers at the meeting, if there is a point of view that you'd like me to keep in mind during the discussion there then just drop me a line. Regards, Dean prop-108 Suggested changes to the APNIC Policy Development Process ----- Proposed by Dean Pemberton[1] and Izumi Okutani (JPNIC) This proposal seeks to clarify a set of 3 issues with the current PDP which were highlighted during the last meeting in Singapore. The issues are: **Timing Requirements for the Policy-SIG chairs to announce consensus** in the Open Policy Meeting (OPM)** At the moment the Chair calls for consensus on proposals during the OPM and then moves to immediately gauge if consensus has been reached. Due to the nebulous nature of gauging consensus, the Chairs have expressed a desire to be allowed an opportunity to discuss among themselves if consensus has been reached. This proposal seeks to give them this ability as long as a determination on consensus is delivered before the end of the OPM. **Requiring for consensus to be called and demonstrated at the AMM** A historical artefact from the days when there were multiple SIGs within APNIC all producing policy requires that proposals not only gain consensus at their individual OPMs, but also again when the whole membership comes together a day later at the APNIC Members Meeting. This was done to ensure that if there were conflicting policies produced by two SIGs at the same meeting, this would become obvious during the second call for consensus at the AMM and resolved. Now that the Policy-SIG is the only policy-generating body within APNIC, this is no longer necessary and creates confusion as to why a second consensus call is required. This proposal seeks to remove the requirement for a second call for consensus at the AMM unless the SIG Chair deems that it is necessary for any reason. **The length of the required comment period for successful policy proposals after the AMM** Once a policy proposal has gained consensus at the OPM/AMM, it is returned to the mailing list for a comment period lasting 8 weeks. This was historically to allow members not at the OPM/AMM to contribute on the mailing list. In practice there is little to no comment during this time, with all comment on a proposal happening before the OPM. This has the effect of delaying any policy implementations for 8 weeks. This proposal seeks to shorten this comment period to a minimum of 2 weeks unless the SIG Chair deems that it should be longer. Pros: Streamlines the process and removes some of the things which make the PDP a pain Cons: Some members may feel that it gives the Policy-SIG power to implement policy without AMM oversight. In practice this isn't the case as the APNIC exec council has the final decision on policy introduction. prop-107 AS number transfer policy proposal ----- Proposed by Tomohiro Fujisaki There have been a lot of policies dealing with the transfer of IPv4 addresses as RIRs reached exhaustion. What has not been dealt with however are any policies around transferring AS numbers either between APNIC members, or between APNIC members and members of other RIRs. While this is not a huge problem in terms of demand (actual numbers are hard to get, but I’ve been told there are a non-zero number of applicants), it would be good to close this gap in current policy. Generally I'm supportive. Pros: Makes a level playing field between AS numbers and other IP resources in relation to transfer policy Cons: More policy for an area which doesn’t have a significant demand. prop-105 Distribution of returned IPv4 address (Modification of prop-088) ----- Proposed by Tomohiro Fujisaki This one is a bit more contentious. At present APNIC is operating under a policy of only giving a single block of 1024 IPv4 addresses out to any existing or new members. This is basically because they are all gone. Once you get this special last block (being called a 'last slash-8 block') you can never get any more IPv4 addresses. The thing is... IANA has a few more numbers which they can give out. These are dregs which other people have given back to IANA and they are preparing to hand them out to the RIRs. So the question is, what should APNIC do with those addresses? There aren’t THAT many of them (probably about 4 million, but don't quote me), certainly not enough to go back to the old way of allocating them (they would last less than a few months). Should they just be placed into the current pool and treated the same as the 'last slash-8' addresses, or, as this proposal suggests, should APNIC members be allowed a second bite at the cherry? This policy proposes that members be allowed one allocation from the 'last slash-8' and then an additional allocation from any addresses returned by IANA. Opinion is divided here. Some feel that it gives people one last hope for IPv4 when they should be concentrating on deploying IPv6, while others say that they need just a few more addresses to tide them over. Still others say that it should only be available to developing nations or organisations with small allocations already. I'm on the fence here, but I think that the framework we would need to put in place to administer this would outweigh the benefit gained from offering another allocation to members. I'm currently in favour of just putting them in the existing pool and carrying on as we do today. I’ll be meeting with the author in Xi’an to see if there is any convincing argument the other way. If anyone has any feedback on this one let me know. Pros: Gets addresses out to people who need them Cons: Gives an inaccurate impression that there are any more IPv4 addresses left. People should be moving their large IP address demands to IPv6 [1] While I have strived for balance in this assessment, readers should be aware that I am a co-author of the proposal. -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

1 0

smilecity.co.nz routing issue
by Alexander Neilson 06 Aug '13

06 Aug '13

Hi Everyone Can anyone on here (or someone from smilycity ops) contact me please. >From inside our network I am seeing trace routes like this: Serenity:Dude alexander$ traceroute smilecity.co.nz traceroute to smilecity.co.nz (202.177.214.122), 64 hops max, 52 byte packets 1 172.31.2.1 (172.31.2.1) 0.510 ms 0.331 ms 0.295 ms 2 192.168.1.1 (192.168.1.1) 0.456 ms 0.381 ms 0.306 ms 3 113.197.96.18 (113.197.96.18) 3.943 ms 3.854 ms 4.531 ms 4 103.9.216.18 (103.9.216.18) 10.741 ms 10.409 ms 10.276 ms 5 103.9.216.17 (103.9.216.17) 10.374 ms 10.706 ms 10.324 ms 6 203.167.223.89 (203.167.223.89) 16.319 ms 15.262 ms 16.715 ms 7 ge-0-2-0-914.xcore1.acld.telstraclear.net (203.98.42.17) 15.760 ms 11.881 ms 20.355 ms 8 * unknown.telstraglobal.net (134.159.174.37) 21.230 ms 16.681 ms 9 i-0-0-4-1.sydo-core02.bx.telstraglobal.net (202.84.142.149) 40.901 ms 46.391 ms 39.776 ms 10 tengige0-1-0-11.oxf-gw1.sydney.telstra.net (203.50.13.165) 37.536 ms 38.606 ms 40.730 ms 11 bundle-ether2.oxf-gw2.sydney.telstra.net (203.50.6.86) 39.208 ms 45.322 ms 38.338 ms 12 bundle-ether1.chw-core2.sydney.telstra.net (203.50.6.89) 37.451 ms 43.868 ms 42.258 ms 13 10gigabitethernet7-1.chw45.sydney.telstra.net (203.50.20.183) 44.120 ms 37.368 ms 45.299 ms 14 equini3.lnk.telstra.net (139.130.117.214) 46.450 ms 43.879 ms 38.092 ms 15 ge-3-2.br103.sy1.ap.equinix.com (27.111.240.158) 41.385 ms 37.662 ms 40.540 ms 16 ge-3-1.br101.sy1.ap.equinix.com (202.177.217.181) 45.515 ms 37.164 ms 48.858 ms 17 * * * 18 * * * ^C Serenity:Dude alexander$ traceroute smilecity.co.nz traceroute to smilecity.co.nz (202.177.214.122), 64 hops max, 52 byte packets 1 172.31.2.1 (172.31.2.1) 0.536 ms 0.325 ms 0.363 ms 2 192.168.1.1 (192.168.1.1) 0.438 ms 0.451 ms 0.451 ms 3 113.197.96.18 (113.197.96.18) 3.944 ms 4.262 ms 4.055 ms 4 103.9.216.18 (103.9.216.18) 10.531 ms 10.460 ms 10.452 ms 5 103.9.216.17 (103.9.216.17) 10.377 ms 10.452 ms 10.407 ms 6 203.167.223.89 (203.167.223.89) 12.253 ms 19.681 ms 11.798 ms 7 ge-0-2-0-914.xcore1.acld.telstraclear.net (203.98.42.17) 11.325 ms 12.228 ms 17.588 ms 8 unknown.telstraglobal.net (134.159.174.37) 12.124 ms unknown.telstraglobal.net (134.159.174.41) 16.676 ms unknown.telstraglobal.net (134.159.174.37) 17.402 ms 9 * i-0-0-4-1.sydo-core02.bx.telstraglobal.net (202.84.142.149) 37.856 ms 38.422 ms 10 tengige0-1-0-11.oxf-gw1.sydney.telstra.net (203.50.13.165) 40.765 ms 41.609 ms 39.188 ms 11 bundle-ether2.oxf-gw2.sydney.telstra.net (203.50.6.86) 39.683 ms 40.859 ms 39.406 ms 12 bundle-ether1.chw-core2.sydney.telstra.net (203.50.6.89) 37.026 ms 41.156 ms 44.457 ms 13 10gigabitethernet7-1.chw45.sydney.telstra.net (203.50.20.183) 38.273 ms 38.520 ms 37.169 ms 14 equini3.lnk.telstra.net (139.130.117.214) 43.372 ms 42.876 ms 40.542 ms 15 ge-3-2.br103.sy1.ap.equinix.com (27.111.240.158) 50.179 ms 49.605 ms 48.397 ms 16 ge-3-1.br101.sy1.ap.equinix.com (202.177.217.181) 50.201 ms 47.475 ms 54.071 ms 17 * * * 18 * * * ^C However from kcbbs.gen.nz trace route tool I see: traceroute to smilecity.co.nz (202.177.214.122), 30 hops max, 40 byte packets 1 f0-1-0-15-c7507-1.kc.net.nz (202.27.217.193) 0.608 ms 0.552 ms 1.452 ms 2 domr1.kci.net.nz (202.27.217.135) 0.739 ms 0.873 ms 0.678 ms 3 vocus1.ape.nzix.net (192.203.154.123) 1.047 ms 1.005 ms 0.983 ms 4 ten-0-2-0-400.bdr01.akl01.akl.VOCUS.net.au (114.31.202.43) 24.834 ms 25.714 ms 25.57 ms 5 ten-0-1-0-0.cor01.alb01.akl.VOCUS.net.nz (114.31.202.86) 25.069 ms ten-0-1-0-1.cor01.alb01.akl.VOCUS.net.nz (114.31.202.67) 26.103 ms ten-0-1-0-0.cor01.alb01.akl.VOCUS.net.nz (114.31.202.86) 25.668 ms 6 ten-0-0-0-2.cor03.syd03.nsw.VOCUS.net.au (114.31.199.116) 25.569 ms 25.356 ms 25.368 ms 7 ten-0-1-0-3.cor01.syd04.nsw.VOCUS.net.au (175.45.72.225) 25.556 ms ten-0-5-0-1.cor01.syd04.nsw.VOCUS.net.au (175.45.72.118) 24.679 ms ten-0-1-0-3.cor01.syd04.nsw.VOCUS.net.au (175.45.72.225) 25.096 ms 8 ge-0-0-0.bdr02.syd04.nsw.VOCUS.net.au (175.45.72.78) 24.974 ms ip-123.72.45.175.VOCUS.net.au (175.45.72.123) 24.761 ms ge-0-0-1.bdr02.syd04.nsw.VOCUS.net.au (175.45.72.80) 24.471 ms 9 ip-194.73.45.175.VOCUS.net.au (175.45.73.194) 26.621 ms 38.67 ms 25.987 ms 10 xe-0-1-1.gw101.sy1.ap.equinix.com (27.111.240.144) 26.464 ms 25.811 ms 25.527 ms 11 ge-3-2.br101.sy1.ap.equinix.com (27.111.240.154) 31.744 ms 26.245 ms 26.222 ms 12 202.177.214.66 (202.177.214.66) 26.129 ms 25.577 ms 26.983 ms 13 202.177.214.122 (202.177.214.122) 26.725 ms 25.909 ms 25.476 ms and down for everyone or just me tells me its up for others. We don't have a vocus pipe for me to re route though or test from this location. This has been happening for a while and is not a new issue today. traffic is coming from 113.197.96.0/22 I will be raising it with Telstra NOC but as the loss seems to happen inside Equinix I wondered if anyone from smile city themselves may be able to help Will be cross posted to AUSNOG re: equinix Off list replies welcomed. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

2 1

Commsday: New NSA training deck reveals servers in ANZ
by Skeeve Stevens 01 Aug '13

01 Aug '13

Hey all, I haven't seen any discussion on AUSNOG/NZNOG about the details revealed in the XKeyscore presentation ( http://www.theguardian.com/world/interactive/2013/jul/31/nsa-xkeyscore-prog… ). If, as expected, more revelations and details emerge, then there might be ISPs and carriers in the ANZ region who are complicit in assisting in this programme... In Australia I am expecting the Internet Society in Australia, the Australian Privacy Foundation, the EFA, and others to be having something to say about this. This is from 2008... I'd hate to think to what extent their capabilities are now. Discussion? ;-) ----- New NSA training deck reveals servers in ANZ A NSA presentation newly leaked by former government employee Edward Snowden detailing a global online surveillance system clearly shows infrastructure inside the borders of Australia and New Zealand. According to a map shown in the 2008 training presentation on a program called XKeyscore, there are at least four surveillance nodes in Australia and at least one in New Zealand. The actual map does not specify the exact location of the nodes, but they roughly correspond to coordinates near Darwin, Perth, Sydney, and Alice Springs. The document also explicitly names Australia and New Zealand, along with Canada and Great Britain in its footnotes although their exact roles remained unclear. At the time the presentation was created, XKeyscore covered “approximately 150 sites” and operated “over 700 servers.” According to the presentation, XKeyscore used the servers to gather data on internet activity by users. The data is then catalogued by different variables, including phone numbers, email addresses, log ins and user activity through the use of metadata tables. Once indexed, the information is searchable by NSA operatives via different parameters, such as geography, encryption, language, and even web searches, the material asserted. The author of the presentation said XKeyscore has led to the arrest of 300 terrorists. But Australia’s Pirate Party, which has put forth two candidates for Senate in Queensland and New South Wales, warns the revelation could have far wider implications for Australians. “The implications of all these revelations are troubling and it should concern all Australians that Australian spy agencies may be using US surveillance programs and information-sharing agreements to bypass local restrictions and safeguards,” the Pirate Party said in a release. “As Australians, the US agencies see us as ‘foreign’ and thus not even the minimal safeguards that apply to US citizens would apply to Australians under these programs.” Tony Chan ----- Remember... Read it first in Commsday - www.commsday.com.au - Subscribe today. .Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

1 0

Inaugral Meeting of the NZ OpenStack Users Group
by Andrew Ruthven 29 Jul '13

29 Jul '13

Hey, A bunch of us who are working with OpenStack in New Zealand are putting together a users group. If you're working with or on OpenStack, or even if you just want to, then we'd love to hear from you. What is OpenStack? OpenStack is a global collaboration of developers and cloud computing technologists producing the ubiquitous open source cloud computing platform for public and private clouds. The project aims to deliver solutions for all types of clouds by being simple to implement, massively scalable, and feature rich. The technology consists of a series of interrelated projects delivering various components for a cloud infrastructure solution. [0] The first meeting is to determine where everyone is at with OpenStack. Do you have a 3 node or a 10,000 node cluster*[1]? Are you a core developer on an OpenStack project, or do you want to be? (Does that thought terrify you? That's okay as well.) >From this initial meeting we'd like to work out what topic areas are of interest to the larger group, and who is willing to talk about their areas of interest. Practical details: When: 6pm on 26 August Duration: Probably an hour and a half Website: http://www.meetup.com/New-Zealand-OpenStack-User-Group Location: Level 3 Catalyst House 150 Willis Street Wellington The front door of Catalyst House locks at 6pm, there'll be a sign on the door with someones' phone number on it. There'll be beer, non-beer and nibbles. [2] Cheers! [0] Pinched from http://www.openstack.org [1] You don't need to have a cluster to come along, that's okay, we can help there as well. [2] Thank you to Catalyst IT for sponsoring this event. -- Andrew Ruthven, Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2014 | Come swan on the Swan River | http://lca2014.linux.org.au -- Andrew Ruthven, Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2014 | Come swan on the Swan River | http://lca2014.linux.org.au

1 0

Want to go to Bali?
by Dean Pemberton 24 Jul '13

24 Jul '13

Hi all, I wanted to make sure you know that applications are open for InternetNZ fellowships to attend the Global Internet Governance Forum (IGF) to be held in Bali, Indonesia 21-25 October 2013. About the IGF: The IGF is the global multistakeholder Internet event, which brings together people from all over the world to talk about Internet issues and policy. Find out more here: http://www.intgovforum.org/cms/aboutigf Regional and national IGF initatives, such as our very own event NetHui, are ideal to feed into the global event. InternetNZ is keen to encourage the Internet community to attend, especially as this year's IGF is relatively close to us, in the Asia-Pacific region, being held in Bali Indonesia. Find out more about the event here: http://igf2013.or.id/ What's on offer: These fellowships are designed to enable NetHui participants and the wider Internet Community to join in the discussions and proceedings this year in Bali. InternetNZ is seeking to award Fellowships across the wide range of interests and topics under discussion at the IGF. InternetNZ will provide fellowship funding to up to 4 New Zealanders to attend. Fellowship funding is limited to no more than $2,500, which will probably require some additional funding to be secured or provided by the applicant. Applications close tomorrow 26 July so get an application quick if you are interested! https://internetnz.net.nz/content/InternetNZ-IGF-Bali-Fellowships -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

1 0

Global IPv6 Deployment Survey- Still Open for Participation
by Elly Tawhai 23 Jul '13

23 Jul '13

________________________________________________________________________ Global IPv6 Deployment Survey ________________________________________________________________________ Hi NZNOG Community, The 2013 Global IPv6 Deployment Survey is still open for participation to Wednesday, 31 July. Please take a few minutes to complete the survey at: https://www.surveymonkey.com/s/GlobalIPv6survey2013 The purpose of the survey is to better understand what can be done to increase IPv6 adoption in the Asia Pacific region and worldwide. We appreciate your time and interest in completing this survey. If you have any questions concerning the survey, please send an email to: info(a)gnksconsult.com Kind regards, Elly APNIC

1 0

★ Nznog, Jonas Bergler left a message for you
by Blendr 19 Jul '13

19 Jul '13

Jonas Bergler left a message for you Its sender and content will be shown only to you and you can delete it at any time. You can instantly reply to it, using the message exchange system. To find out what was written to you, just follow this link: http://eu1.blendr.com/0330934130/in/jfXbUxCNn08/?lang_id=3&g=57&m=63&mid=51… If clicking the links in this message does not work, copy and paste them into the address bar of your browser. This email is a part of delivering a message sent by Jonas Bergler on the system. If you received this email by mistake, please just ignore it. After a short time the message will be removed from the system. Have fun! The Blendr Team Blendr is powered by Badoo. You have received this email from Badoo Trading Limited (postal address below). If you do not wish to receive further email communications from Badoo click here to opt out: http://eu1.blendr.com/impersonation.phtml?lang_id=3&email=nznog%40list.waik… Badoo Trading Limited is a limited company registered in England and Wales under CRN 7540255 with its registered office at Media Village, 131 - 151 Great Titchfield Street, London, W1W 5BB.

1 0

Simon Hackett talks about Australia's NBN
by Andy Linton 17 Jul '13

17 Jul '13

This was posted on the PICISOC list. NBN ~= UFB? If you've got a spare 20 minutes, this is worth a read and a watch: http://simonhackett.com/2013/07/17/nbn-fibre-on-a-copper-budget/

1 0

iSky
by Jesse Archer 17 Jul '13

17 Jul '13

Anyone from Sky TV NOC on this list? We've got users on our new network reporting they can't use iSky services. We'd like to find a solution so if you are from Sky TV NOC or can point me towards someone who can help, that would be great.

1 0

DNS Specialist position available at NZRS
by Sebastian Castro 16 Jul '13

16 Jul '13

Hi: I'll be leaving my position as DNS Specialist to move into Technical Research within NZRS, opening up a vacant. An updated draft of the job description is attached. If you have any questions about the role, feel free to contact me privately. If you see yourself as the right fit and want to talk about the hiring process, please contact our CEO, Jay Daley(jay(a)nzrs.net.nz) Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

OT - 1/3 Rack Cabinet Manufacturers
by Liam Farr 12 Jul '13

12 Jul '13

Hi, Can anyone recommend a Manufacturer of 1/3 (think 12 RU ish) rack cabinets that has NZ distribution? Particularly ones that are solid enough to be stacked / bolted together? (Not the wall mount type). So far I have just found the Eaton (Wright Line) Vantage range, but I don't believe there is local stock. Cheers Liam

6 6

Off List Replies Please: Quotes for IP Transit
by Alexander Neilson 03 Jul '13

03 Jul '13

Slightly early for Beer O'clock but, Beer We have reached the cap of our existing IP Transit capabilities and have requesting pricing and lead time from our existing provider for increased capacity. If anyone on list is providing IP Transit and can handover to us in SkyTower L48 we would be interested in seeing price per Mbps for Domestic and also for International. This is a pricing comparison as we are very happy with the service level of our existing provider. Price advantage would need to be substantial to more or possibly a backup feed etc. Please can any replies be sent directly to me and not to the list. Simply posted here to invite to treat. Looking for pricing in the few 100's of Mbps each of Domestic and International transit. Thank you Now back to the regular Beer Schedule (I mean intense discussions of network operations) Regards Alexander

1 0

Douglas Englebart - inventor of the mouse
by Richard Naylor 03 Jul '13

03 Jul '13

http://www.washingtonpost.com/blogs/wonkblog/wp/2013/07/03/the-inventor-of-…

1 0

4th Global IPv6 Deployment Survey
by Dean Pemberton 01 Jul '13

01 Jul '13

Hi All, The 4th Global IPv6 Deployment Survey is open and will collect information until July 31st The survey is available at https://www.surveymonkey.com/s/GlobalIPv6survey2013 and just to save people from having to goto the page to read about it here is the blurb: --------------- We are conducting the 4th Global IPv6 Deployment Survey between 1 July 2013 - 31 July 2013. Results will be compared with the results of the earlier Global Surveys, which will help to better understand the developments with regards to IPv6 preparedness and deployment. This survey is designed by GNKS Consult BV in collaboration with TNO and the Regional Internet Registries, based on a design originally by ARIN/CAIDA in 2008, and has been carried out in 2009 with the support of RIPE NCC and APNIC, and globally, with support from the African Network Information Center (AFRINIC), the American Registry for Internet Numbers (ARIN), the Asia Pacific Network Information Centre (APNIC), the Latin American and Caribbean Internet Addresses Registry (LACNIC) and RIPE NCC , in 2010, 2011 and 2012. The 2013 survey is supported by the EU IPv6 Observatory project (for more information see http://www.ipv6observatory.eu/) In 2012 more than 90% of respondents indicated they would be willing to participate again, this year. The survey is secure and GNKS Consult will keep all data confidential. The data will be used for analysis on IPv6 deployment by ISPs and other stakeholders in the RIR communities around the world, and only presented in summary form. The data will be made available for analysis to the RIRs as well under this same confidentiality clause. It will take about 15 minutes to fill in the survey. We appreciate your time in taking this survey. The results will be made available via the websites of the NRO, the participating RIRs and http://www.gnksconsult.com. For questions or remarks, please send an email to info(a)gnksconsult.com.

1 0

Tools found at Sky Tower
by Simon Paterson 23 Jun '13

23 Jun '13

Hi, While at Sky Tower today, I noticed a small zip-up tool case left on level 48, in a slightly out of the way location. It is still sitting where I saw it. If it's yours, but aren't sure exactly where you left it, reply to me with a description of it, and I'll let you know exactly where it is. Cheers, Simon

1 0

APNIC 36 Call for Papers
by Srinivas Chendi 20 Jun '13

20 Jun '13

________________________________________________________________________ APNIC 36 Conference - Call for Papers ________________________________________________________________________ The APNIC 36 Programme Committee is now seeking tutorials and presentations for the APNIC 36 Conference to be held in Xi'an, China, from 26 - 30 August 2013. We are looking for content which would suit the APOPS Plenary, the technical conference sessions and the tutorials. Key Dates --------- The timeline for submissions is: Call for Papers Opens Now First Round Paper Acceptance 12 July 2013 Final Deadline for Submissions 12 August 2013 Final Round Paper Acceptance 18 August 2013 Final Slides Received 25 August 2013 Submitting Proposals -------------------- http://submission.apnic.net/paper/submit/user/login.php?event=1 Programme Material ------------------ The technical sessions at APNIC 36 will include presentations relevant to Internet operations and technologies. The following topics are examples of possible areas of interest. - IPv4 exhaustion / IPv6 deployment and operations - IPv6 transition / IPv4 prolongation technologies - ISP and Carrier Services - IXPs and Peering - Network security - Access and Transport Technologies - Content and Service Delivery If you have any another ideas or proposals for panel or Birds of Feather sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Programme Committee at: program(a)apricot.net For more information about APNIC 36, please visit: http://conference.apnic.net/36 On behalf of: APNIC 36 Programme Committee Co-chairs: Philip Smith, Mark Tinka & Dean Pemberton

1 1

InTAC Conference - Come along, Get Involved, Do Something
by Dean Pemberton 18 Jun '13

18 Jun '13

*Look for the helping opportunity near the end of the message* Hi Everyone, This year, InTAC is being held in Wellington as part of NetHui 2013. You can register online at http://nethui.eventbrite.co.nz. What: InTAC (the Internet Technical Architecture Conference) When: Monday 8 July, 2013 Where: Wellington Town Hall Cost: Free (Registration required) Why should I attend? The New Zealand Internet is like a huge super tanker. The bad news is that it takes a long time to change course if you don't like the direction you're headed. The good news is the earlier you start making those changes the smaller the changes need to make. The InTAC conference will be more than just a collection of technology presentations. This year InTAC will be a collaborative environment designed to focus on outcomes as well as the discussions needed to bring them about. InTAC this year will take a long term view driven by short term actions. The focus of the conference will be around answering the following questions: "What do we want the New Zealand Internet to look like in 5 years?” “What are the 5 actions the industry can perform in the next 5 months to make that future more likely?" Don't miss out on your chance to be part of the technical decisions facing the direction of the New Zealand Internet for the next 5 years. *** Helping opportunity *** I'm also looking for people/organisations to show the attendees a little bit about what they are doing across the next 5 years. To that end if you want to produce me a 2 minute youtube video of any of the following topics, I'll select some to play during the day in order to get attendees heads into that forward looking mode: . What you're up to which has something to do with the Internet (even if it's just a blog to help people find lost cats) . What you need the NZ Internet to provide you (what doesn't it do at the moment that you need it to?) . What you'd be able to provide others if the NZ Internet was just a little different (If it did this, I could save more cats.) . Anything else you think the conference might like to know/hear *** For those keen to stick around for NetHui - being held 8 to 10 July in Wellington - we encourage you to also register for this at http://nethui.eventbrite.co.nz Looking forward to seeing you there. Regards, Dean Pemberton Technical Policy Advisor InternetNZ

1 0

Tender issued for construction of new Trans-Tasman Cable
by Gaurab Raj Upadhaya 14 Jun '13

14 Jun '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I thought this is good development in the context of the discussion on NZNOG a few months ago. http://www.voxy.co.nz/business/tender-issued-construction-new-telecommunica… Excerpt: Thursday, 13 June, 2013 - 09:05 The three telecommunications companies that intend to co-invest in a new submarine cable between New Zealand and Australia have issued a tender for the cable’s construction. Several international submarine cable contractors have been invited to tender for the Tasman Global Access (TGA) Cable and all have indicated strong interest in responding. - -gaurab - -- http://www.gaurab.org.np/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.19 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlG7SPUACgkQSo7fU26F3X26HQCfRIrG/QyigTdt1Onfz+e1LLkk 1ogAoJa02TDgQupChaqC9Dm1yHvRdyk+ =r3U0 -----END PGP SIGNATURE-----

1 0

IANA AS Numbers registry update
by Leo Vegoda 11 Jun '13

11 Jun '13

Hi, The IANA AS Numbers registry has been updated to reflect two changes. LACNIC has returned the range 61440-62463 in exchange for a block composed of two non-contiguous ranges: 61440-61951 263168-263679 Both ranges were allocated today. You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers Regards, Leo Vegoda leo.vegoda(a)icann.org ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Fwd: [outages] Open Resolver Project
by Joe Abley 11 Jun '13

11 Jun '13

There seem to be a non-trivial number of open resolvers in the few NZ ASes I just checked. It would be good if there was a concerted effort into shutting them down, or otherwise neutering them so that they can't be effective amplifiers for DDoS attacks. This is last decade's open mail relay problem, except with less spam, more packet love. Begin forwarded message: > From: Jared Mauch <jared(a)puck.nether.net> > Subject: [outages] Open Resolver Project > Date: 7 May 2013 10:52:53 EDT > To: "outages(a)outages.org" <outages(a)outages.org> > X-Mailer: Apple Mail (2.1503) > > The Open Resolver Project made a mistake in the automation process of the weekly data import. If you're unaware of what it is, I suggest looking at the website - openresolverproject.org > > If you operate a DNS server, or are a network operator, you should check your IP space for Open Resolvers. These are used in DDoS attacks and pose a significant risk to the global network. > > The website has been restored to operation, but please take a moment and check your IPv4 space. > > If you want a report based on your ASN, please e-mail dns-scan(a)puck.nether.net from a corporate e-mail address or something matching the RIR database entry. > > Thanks, > > - jared > _______________________________________________ > Outages mailing list > Outages(a)outages.org > https://puck.nether.net/mailman/listinfo/outages

14 28

Re: [nznog] [outages] Open Resolver Project
by Pete Mundy 10 Jun '13

10 Jun '13

If you don't like the answers, don't query the server? > On 11/06/2013, at 9:13 PM, Sebastian Castro <sebastian(a)nzrs.net.nz> wrote: > >> Please please avoid to do this at all costs... I've seen those "clever >> tricks" before and they cause more breakage than desired. Specially >> those deploying v6 networks see those tricks as a pain, because A >> records are rewritten but not AAAA records >

1 0

Re: [nznog] [outages] Open Resolver Project
by Pete Mundy 10 Jun '13

10 Jun '13

I can confirm that Mac OS X at least does this (it only queries the resolvers of your highest priority IPv4 interface as defined by the 'Set Service Order' option in the Network section of System Preferences). No beer required for sharing this feedback ;) Pete On 11/06/2013, at 8:41 PM, Nathan Ward <nznog(a)daork.net> wrote: > If you receive (via DHCP) a DNS server over the wireless network, are modern operating systems intelligent enough to only send queries to that DNS server out that interface?

1 0

Re: [nznog] NZNOG Digest, Vol 126, Issue 3
by Rowan Smith 09 Jun '13

09 Jun '13

Speaking from personal experience in Wellington around 2005-2006, I found Unlimited Potential http://up.org.nz/ a great way to meet people that work around the industry and hear what it's really like on the ground and also what hiring managers look for in a candidate. The most important thing I learned from this experience is not to expect any handouts, but take comfort in the fact that most people are very supportive and willing to hear and share ideas. The hard news to take, is that no matter how good you are, you generally have to start somewhere simple and prove yourself for some years. This is definitely true for larger employers, but the more people you talk to the more opportunities you will discover. Feel free to message me off list with any questions, always happy to use my experiences in helping others on a similar path. Rowan Smith Cheers Rowan On 10 June 2013 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Re: Mentoring Groups (Jed Laundry) > 2. Re: Mentoring Groups (Dean Pemberton) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 9 Jun 2013 16:25:29 +1200 > From: Jed Laundry <jlaundry(a)jlaundry.com> > To: Jonathan Robins <jonathan(a)tron.net.nz> > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Mentoring Groups > Message-ID: > <CALYPt1RtG4OttpSUJxbpvVnvLTQ+Mn_JBPJCfP=Lr6yA= > EtYkw(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Hey, > > Nothing that I know of; are you volunteering to organise? > > Thanks, > Jed. > > Sent from a small screen. > On 7/06/2013 4:42 PM, "Jonathan Robins" <jonathan(a)tron.net.nz> wrote: > > > Hi, > > > > Would be interested to know if anyone is aware of any mentoring groups > out > > there that are targeted at High School leavers to help guide those that > are > > keen to join the telecommunications industry? > > > > Cheers > > > > Jonathan > > > > ______________________________**_________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/**mailman/listinfo/nznog< > http://list.waikato.ac.nz/mailman/listinfo/nznog> > > >

1 0

Zone and host scanning by NZRS
by Jay Daley 09 Jun '13

09 Jun '13

Hi Sorry no beer here. Once a month we run a scan on the .nz zone to collect some IPv6 stats which are then provided to the IPv6 taskforce. This has been going for a while with no problems reported. We now plan to expand this scanning, partly to provide better stats on the use of DNS, like this above, and partly to help .nz run better. For example by detecting lame delegations and telling our registrars about this. As well as more DNS scanning we are also planning web site home page scanning for a very limited set of data related to .nz. For example finding out how many web sites in .nz use an SSL cert and would benefit from moving to storing details about these in DNS (see the IETF DANE WG for details - http://datatracker.ietf.org/wg/dane/charter/) Before we expand our scanning we've published a draft practice statement that sets out in detail what we are doing, why we are doing it and how we will do it and we want to hear what people have to say about that. We're not aware of anyone else creating and publishing a doc like this so this is very much new ground. The practice statement is here: http://nzrs.net.nz/dns/zone-and-host-scanning and we welcome comments on it. cheers Jay

1 0

Mentoring Groups
by Jonathan Robins 09 Jun '13

09 Jun '13

Hi, Would be interested to know if anyone is aware of any mentoring groups out there that are targeted at High School leavers to help guide those that are keen to join the telecommunications industry? Cheers Jonathan

3 2

Level One GVT-1000 SFP Media Converter in Trendnet TFC-1600 Fibre Chassis
by Alexander Neilson 06 Jun '13

06 Jun '13

I have a Level One GVT-1000 SFP to 1Gbps transceiver that looks like it should fit inside my TrendNET TFC-1600 chassis system http://www.flickr.com/photos/30026567(a)N04/8975140328/in/set-7215763398094… Top is the Level One and bottom is a TrendNET known compatible (but not useful in this situation) media converter. Has anyone got any experience using this hardware together? if so was is compatible / successful? I can use it stand alone if it won't work but I mainly want to avoid blowing it up. It would be a waste to use it stand alone (and a lot messier in the POP) if I can use the perfectly good chassis already waiting there for me. I will test it and come back with results if anyone else would like to know Off list replies are welcomed. Apologies if this breaches the charter. I had a read and felt it was close enough but happy to accept any feedback. Also if somebody knows of a supplier with in country supplies of chassis / standalone TrendNET and Transition Networks media converters (fixed laser and SFP Types) could they please let me know off list. Regards Alexander

3 3

Re: [nznog] Another Brocade question for my favorite mailing list
by McDonald Richards 04 Jun '13

04 Jun '13

CES/CER can handle 1000 LSPs (lsp tunnels) before they stop making new ones. This can be an issue if you're letting your entire Cisco LDP domain pollute them. MLX would be a good order of magnitude larger but I don't have a specific figure. Have tested and used MTUs of 9000+ for VLL with no issues. Have tested and used MTUs of 4000+ for VPLS with some issues although this is the smaller CES platform and there may have been some feature gap in the Ironware version I was using at the time (MLX will have more features around this). QinQ works fine if you do port mode VLLs. Also have tested it working in a "raw" VPLS environment (port mode again). In case that’s not clear, port mode would be where you have all client ports as untagged. Raw mode every time if you ever want to do inter-op. This will set the VC-type to 5 and indicates that the port is transparent – from memory Cisco have this as a default in IOS. Macca From: Sam Russell <sam.h.russell(a)gmail.com<mailto:sam.h.russell(a)gmail.com>> Date: Tuesday, 4 June 2013 12:05 PM To: "nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>" <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Another Brocade question for my favorite mailing list Hi, The interop stuff was a resounding success, and the details are at http://pieknywidok.blogspot.co.nz/2013/06/brocade-and-juniper-interop-ospf-… if anyone is interested. I'm now trying to engineer it so we can add Juniper devices while changing as little Brocade config as possible. Can anyone help me with the following questions: - How many LSPs can a Brocade MLX4/MLX8 handle before it falls over? We have a mesh of 15 chassis, and the output of "show mpls memory" looks like this: Mem-Type Alloc BytesAlloc TotalAlloc TotalFree AllocPeak AllocFail FreeFail LSP 28 25760 369 341 28 0 0 Does this mean that it's full? The documentation is sparse, I'm hoping someone else has gone down that rabbit hole and found an answer for me :) - What MTU are people using for VLL/VPLS? - Has anyone got QinQ working with VLL/VPLS on a Brocade? - Does anyone have a preference for raw mode vs tagged mode for VLL and VPLS? Cheers Sam

2 1

Another Brocade question for my favorite mailing list
by Sam Russell 03 Jun '13

03 Jun '13

Hi, The interop stuff was a resounding success, and the details are at http://pieknywidok.blogspot.co.nz/2013/06/brocade-and-juniper-interop-ospf-… if anyone is interested. I'm now trying to engineer it so we can add Juniper devices while changing as little Brocade config as possible. Can anyone help me with the following questions: - How many LSPs can a Brocade MLX4/MLX8 handle before it falls over? We have a mesh of 15 chassis, and the output of "show mpls memory" looks like this: Mem-Type Alloc BytesAlloc TotalAlloc TotalFree AllocPeak AllocFail FreeFail LSP 28 25760 369 341 28 0 0 Does this mean that it's full? The documentation is sparse, I'm hoping someone else has gone down that rabbit hole and found an answer for me :) - What MTU are people using for VLL/VPLS? - Has anyone got QinQ working with VLL/VPLS on a Brocade? - Does anyone have a preference for raw mode vs tagged mode for VLL and VPLS? Cheers Sam

1 0

IANA AS Numbers registry update
by Selina Harrington 30 May '13

30 May '13

The IANA AS Numbers registry has been updated to reflect the allocation of 1 block to ARIN in 2013-05-30: 62464-63487 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Fwd: [wellylug] Next meeting 17th Jun 6pm
by Hugh Davenport 28 May '13

28 May '13

-------- Original Message -------- Subject: [wellylug] Next meeting 17th Jun 6pm Date: 2013-05-23 13:01 From: Hugh Davenport <hugh(a)davenport.net.nz> To: Wellington Linux Users Group <wellylug(a)lists.wellylug.org.nz> Reply-To: Hi All, Thank you heaps for those who came to the social meetup the other week. I caught a few of you there when I finally arrived, and you seemed like a interesting bunch of people. I'm happy to announce that I have scheduled a technical meeting for next month. It will be on Monday 17th of June, at 6pm. The location is Level 3 Catalyst House. The front doors lock at 6pm, so best to come earlier, but there will be a number on the wall to get someone to come let you in. Future meetings will be on the third Monday of every month and will hopefully be pizza and beverages supplied (this one should as well!). I would be interested if anyone would like to present any material, let me know if you would like to. I will send a follow up closer with details of the talks on the night. tl;dr, come to lvl 3 catalyst house 6pm 17th june, email me to speak. Cheers, Hugh

1 0

Juniper and Brocade VPLS interop - any horror stories?
by Sam Russell 26 May '13

26 May '13

We've got a mix of Brocade MLX and Juniper MX chassis on our network and I'm working on getting VPLS standing up between them with LDP signalling (RSVP underneath for the base MPLS). Everything seems okay except for the odd quirk (Brocade can't do OSPF with jumbo frames, Juniper doesn't automatically strip VLAN tags when sending into the VPLS cloud) but otherwise it's standing up. I just wanted to see if anyone else has this sort of setup, and whether there's anything I should be looking for that might trip me up? My logic so far is as long as I don't try and make the Brocades do BGP then I should be safe, is this about right? Thanks in advance Sam

4 4

Global Gateway support details
by Tristram Cheer 24 May '13

24 May '13

Hi All, I'm in need of the GG support number, Google and APNIC Whois is turning up dead numbers. Thanks -- Tristram Cheer Network Architect - Most problems are the result of previous solutions... [cid:image001.jpg(a)01CE594D.F453A780] Tel. 09 438 5472 Ext 803 | Mobile. 022 412 1985 | PO Box 5083, Whangarei, 0140 tristram.cheer(a)ubergroup.co.nz<mailto:tristram.cheer(a)ubergroup.co.nz> |www.ubergroup.co.nz<http://www.ubergroup.co.nz> [cid:image003.png(a)01CE594E.D0F0B480]<http://ubergroup.co.nz/fb> [cid:image005.png(a)01CE594E.D0F0B480] <https://twitter.com/#!/ubergroupltd>

2 1

ISP provided routers
by Mauricio Freitas 23 May '13

23 May '13

So, which ISP is providing Tenda modem/routers to users? >From http://www.geekzone.co.nz/forums.asp?forumid=49&topicid=119152 "I installed a Tenda W150D at a friends place 2 weeks ago and their internet usage jumped from 200-600MB/day to 2-15GB/day." This had default DNS responder, open web administration and telnet visible from the WAN side. Cheers Mauricio Freitas www.geekzone.co.nz<http://www.geekzone.co.nz> www.freitasm.com<http://www.freitasm.com> www.twitter.com/freitasm<http://www.twitter.com/freitasm>

2 2