- NZNOG - lists.nznog.org

Re: [nznog] alcatel.co.nz domain
by Peter Lambrechtsen 07 Jan '13

07 Jan '13

I've forwarded this onto a number of friends & colleagues of mine in ALU. Hopefully one of them will find someone who can sort it... Sent from my HTC Wildfire S on Telecom's XT mobile network. ----- Reply message ----- From: "Simon Lyall" <simon(a)darkmere.gen.nz> To: "nznog" <nznog(a)list.waikato.ac.nz> Subject: [nznog] alcatel.co.nz domain Date: Tue, Jan 8, 2013 9:54 am This domain seems to be expiring... Just noticed cause a bunch of people are subscribed to this mailing list using it. -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Authoritative DNS config
by Richard Hector 07 Jan '13

07 Jan '13

This isn't an NZ specific question, and also perhaps a bit basic; hope that's ok. Packaged (debian, ubuntu anyway) versions of BIND come with various default zones configured - localhost, broadcast and root hints. Are any of these actually necessary for an authoritative-only name server? It seems to me they're mostly/only useful for short-circuiting simple/standard queries on a resolver. Is that right? Not having any other zones than my own in my config would make it somewhat easier to configure views. Thanks, Richard

3 3

Temporary fibre cable across Wanganui river near Harihari - anybody got photos?
by Sam Russell 02 Jan '13

02 Jan '13

I'm sure this looks hilarious, does anyone have pictures of their thrown fibre? Also beer -- Sam Russell Network Engineer Research & Education Advanced Network NZ Ltd ddi: +64 4 913 6365 mob: +64 21 750 819 fax: +64 4 916 0064 http://www.reannz.co.nz

1 1

Fwd: NZIX OpenFlow adventures phase 2
by Dean Pemberton 02 Jan '13

02 Jan '13

---------- Forwarded message ---------- From: *Dean Pemberton* Date: Wednesday, January 2, 2013 Subject: NZIX OpenFlow adventures phase 2 To: Truman Boyes <truman(a)suspicious.org> Cc: nznog <nznog(a)list.waikato.ac.nz> Nox at the moment. Happy to have a chat about different controllers if you've got a preference. Dean On Tuesday, January 1, 2013, Truman Boyes wrote: > Hey Dean, > > What are you using for the OFP controller? NOX/POX/Big Switch? > > Cheers, > Truman > > > On 18 Dec, 2012, at 10:40 PM, Dean Pemberton wrote: > > > Hi Everyone, > > > > So the OpenFlow router has been up for a wee white now so it seemed > > about time to let you all poke at it. > > Phase 2 of the project is to: > > Deploy an OF switch on an exchange point which can function as a route > server. > > This switch should be able to BGP peer with any peers which currently > > use the exchange and allow for the exchange of IPv4 prefixes as > > required. > > > > I've used the information on the WIX Peer list webpage > > (http://wix.nzix.net/peers.html) to pre-configure passive[1] BGP > > peering sessions for all existing WIX participants. > > > > So feel free to use your existing WIX IP addresses and AS numbers to > connect to > > > > IP: 202.7.0.119 > > Aut-num: 9483 > > > > Things to look for: > > 1) It should pass you the routes that it learns from the route > > servers with the Flatnet AS in the path but with the original next > > hops. This longer path should mean that you won't explicitly prefer > > the routes from me. Bit of safety there. > > 2) It will pass you any other routes that people pass me directly. > > > > As I mentioned before we've got a few more plans. The next phase will > > start to take us a bit beyond what the current exchanges offer. > > > > In the new year we are going to deploy a similar switch at the APE. > > This hardware will become part of the single SDN controlled switch > > that we currently have in Wellington. > > When you peer with the OpenFlow switch at the WIX you'll get APE > > prefixes as well. Peer at the APE, you'll get WIX prefixes. > > > > Once we can get some traffic on the fabric and a presence at multiple > > places then we can really start to innovate. > > > > . BGP prefix communities based on the millisecond difference between > > your peering port and the prefix next hop > > . BGP aware RPF on the exchange (solves the pointing default problem) > > > > Got any other ideas. Throw them in the mix and we'll see what we can do. > > > > > > Have a Merry Christmas everyone. > > > > > > Regards, > > Dean > > > > > > > > [1] Passive means that I'll never reach out and initiate a session > > with you. You need to initiate the session with me. Just safer > > incase people think that I'm TCP Port 179 hax0r-ing them. > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > > -- Regards, Dean

2 1

connection issues to ftp.nz.debian.org
by Hugh Davenport 27 Dec '12

27 Dec '12

Hey, On two of my servers running with different ISP's I've noticed connection issues in the last few days to ftp.nz.debian.org. I can ping it, but can't connect via HTTP or FTP. This is both on my flat server (Snap) and my parents server (Slingshot). When I try from work, which is connected to the WIX, it works fine. hugh(a)hugh-laptop:~$ ping -c 1 ftp.nz.debian.org PING ftp.citylink.co.nz (202.7.6.9) 56(84) bytes of data. 64 bytes from ftp.citylink.co.nz (202.7.6.9): icmp_req=1 ttl=60 time=13.7 ms --- ftp.citylink.co.nz ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 13.792/13.792/13.792/0.000 ms hugh(a)hugh-laptop:~$ telnet ftp.nz.debian.org 80 Trying 202.7.6.9... telnet: Unable to connect to remote host: Connection timed out hugh(a)hugh-laptop:~$ telnet ftp.nz.debian.org 21 Trying 202.7.6.9... telnet: Unable to connect to remote host: Connection timed out hugh(a)hugh-laptop:~$ On an interesting note, I tried using debian.ihug.co.nz/debian which is listed as a secondary server on http://www.debian.org/mirror/list. This gave me the error. hugh(a)hugh-laptop:~$ sudo apt-get update Hit ftp://debian.ihug.co.nz wheezy InRelease E: Release file for ftp://debian.ihug.co.nz/debian/dists/wheezy/InRelease is expired (invalid since 83d 20h 47min 21s). Updates for this repository will not be applied. hugh(a)hugh-laptop:~$ When I try using netselect-apt I get the following: hugh(a)hugh-laptop:~$ sudo netselect-apt wheezy <snip> The fastest 10 servers seem to be: http://ftp.nz.debian.org/debian/ http://debian.mirror.uber.com.au/debian/ http://mirror.transact.net.au/debian/ http://mirror.cse.unsw.edu.au/debian/ http://mirror.optus.net/debian/ http://mirror.optus.net/debian/ http://debian.nautile.nc/debian/ http://ftp.iinet.net.au/debian/debian/ http://mirror.waia.asn.au/debian/ http://ftp.au.debian.org/debian/ Of the hosts tested we choose the fastest valid for HTTP: http://ftp.nz.debian.org/debian/ Writing sources.list. Done. hugh(a)hugh-laptop:~$ Any thoughts? It used to work fine, and has only cropped up in the last few days. Cheers, Hugh

5 4

TV3 Ondemand Contact
by Ray | Taylor Communications 21 Dec '12

21 Dec '12

Would there be any list members inside Media works by any chance, or would someone have a contact who I can speak to? I seem to be having an issue with TV3 ondemand on our network - the preroll plays but the programme itself does not. Anyone that replies when I click "report issue" doesn't seem to be of any help. We have our own ip assignments from apnic. Maxmind and other such geolocation databases are indeed showing Napier as the location though this took 3 months when we got them a year ago. I was thinking it could possibly be an issue inside our main router with the RTMP protocol but I have proved it isnt. - When I go to http://nzcontent.mediaworks.co.nz I can play the http demo stream, but not the rtmp stream - When I go to http://www.etvlive.gov.et/ I can play both the http and the rtmp stream. This is just some overseas organisation who has a web facing adobe media server similar to tv3's So next I thought there could possibly be a firewall or protocol block of some sort - I can telnet into nzcontent.mediaworks.co.nz on port 1935 without an issue. Its been bugging me since we changed over to our own block of ip addresses with the occasional subscriber complaint about the tv3 service. So anyone you can refer me to inside TV3/mediaworks that can help (beyond the tier1 helpdesk monkeys) would be much appreciated. Ray Taylor Taylor Communications ray(a)ruralkwii.com 06-929-9082 021-483-280 www.taylorcom.co.nz

3 2

My Experiences with 3G (aka 2Degrees are pathetic)
by Skeeve Stevens 17 Dec '12

17 Dec '12

Hey all, So I arrive in Queenstown, go to Dick Smith, and pick up 2 TelecomXT Sims and a 2Degrees Sim. Also bought $270 worth of recharge vouchers. Telecom XT wasn't too much of a problem... ring up a number and recharge the sims.... worked fine. 2Degres. Useless bloody idiots who if I had the time I would lodge a complaint with whatever authority there was in NZ for doing do. So, got their Nano Sim, put it in the iPad Mini... and nothing. Says it sees the 2Degrees towers... but nothing. Won't activate. Call them, they say I need to put it in a phone with Nano slot (iPhone5) to activate... I didn't bother bringing the 5 because I had the Mini. Called last night, they took details, said to call back in the morning. I called this morning, waited an hour for these idiots to figure out why I or they couldn't activate it... and even got the comment when I said that if they are selling these for iPad Mini's and there is no way to activated they said 'Seems a bit stupid doesnt it'. They said someone would call me back... they didnt. I called back tonight, chick read through all the notes... says she couldn't do anything and the escalation meant I would receive a call back by the 21st of December. WTF?! These people are totally useless. Now the chick is telling me that Dick Smith 'should have' known.... really? Dick Smith said they have no idea and get no training whatsoever from 2Degrees, or any of the sims they sell. So my two Telecom XT work fine, but still needed a call to activate then... but 2Degrees is the biggest joke ever. They have no details, instructions or ANYTHING at all about activating sims on iPad's or iPad Mini's. They had the nerve to say I should go back to Dick Smith and get them to activate it... but didn't want to pay the $60 in taxi fare. If anyone knows anyone up there, feel free to forward them my email to them. This is the worst customer experience ever and I will be telling everyone I know not to use them. *frustrated* * * *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website! eintellego.mx Free Apple products during this promotion!!!

4 3

3G in the South
by Bevan McNaughton 16 Dec '12

16 Dec '12

Down here it seems that Vodafone is the fastest and ha good reliability (little overloading and good consistency), however doesn't have the best coverage. Telecom XT has better coverage but speed and reliability isn't as good. Vodafone may be your best bet. It deems to be consistent enough throughout Qtown, Dunedin & Invercargill (am doing work from those centres with Vodafone on and off often). Regards, -- Bevan McNaughton SouthLoop Invercargill

12 18

Re: [nznog] 3G in the South
by Richard Naylor 16 Dec '12

16 Dec '12

At 02:09 p.m. 16/12/2012, you wrote: >Is it just me or is this the most pathetic options I've ever seen? >I'm used to be able to get pre-paid data in Australia, like 12Gig or >$120 or something. >These plans are offering tiny little megs... "Pathetic" is a good description of the major carriers. Telecom do a 4GByte plan and in December seem to do a 2 for 1 deal. We get 8GB per stick from them Vodafone seem to think 4Gbyte is awesome. We carry a "reverse cell-site" that has sicks on both carriers. It uses external aerials to get that little bit extra. I used it in Wanaka in Jan just before NZNOG and Telecom wasn't too bad. Vodafone looked like it had good download, but it was only in short burst stuff. Sustained thru put was mediocre. We used satellite for the job. The 3G rig was just for us at the motel FYI - identical USB sticks sitting side by side have different performance figures. They're really made for metro areas with "immersive" coverage and in areas with less coverage performance is a struggle. For the Wanaka job, the producer is talking about using a bonded 3G rig to replace microwave link from chopper. It will be interesting.

1 0

3G in the south
by Ernest Cunningham 15 Dec '12

15 Dec '12

Just cut all the plastic around the chip on any 2degrees sim and it will fit in your iPhone 5 fine and work perfect. Ernest Sent from my iPhone

1 0

Advisory - D-root is changing its IPv4 address on the 3rd of January
by Sebastian Castro 14 Dec '12

14 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Original message can be found here https://lists.dns-oarc.net/pipermail/dns-operations/2012-December/009428.ht… - ------------------------------------------- Advisory ? D-root is changing its IPv4 address on the 3rd of January. This is advance notice that there is a scheduled change to the IPv4 address for one of the authorities listed for the DNS root zone and the .ARPA TLD. The change is to D.ROOT-SERVERS.NET, which is administered by the University of Maryland. The new IPv4 address for this authority is 199.7.91.13 The current IPv6 address for this authority is 2001:500:2d::d and it will continue to remain unchanged. This change is anticipated to be implemented in the root zone on 3 January 2013, however the new address is currently operational. It will replace the previous IP address of 128.8.10.90 (also once known as TERP.UMD.EDU) We encourage operators of DNS infrastructure to update any references to the old IP address, and replace it with the new address. In particular, many DNS resolvers have a DNS root ?hints? file. This should be updated with the new IP address. New hints files will be available at the following URLs once the change has been formally executed: http://www.internic.net/domain/named.root http://www.internic.net/domain/named.cache The old address will continue to work for at least six months after the transition, but will ultimately be retired from service. - --------------------------------------------------- Kind Regards, - -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDLakMACgkQWyqRrHcQWTmrzQCfeDQ0SZX9Wlf3unUUgu5f0pVZ ODQAn3ETzMd0WsaynqnJzX2bHPlPOF8y =5dXZ -----END PGP SIGNATURE-----

1 0

NZ scores first OpenFlow controlled connection to an IX
by Dean Pemberton 10 Dec '12

10 Dec '12

Hi all, Just wanted to share with you all what we think is a world first, right here in New Zealand. Today New Zealand can boast the first SDN controlled OpenFlow switch BGP peering with a public Internet Exchange. Because you're all geeks, I've decided to write the rest of the email as a FAQ: Q: What is SDN and/or OpenFlow? A: It's a new way of thinking about and building network devices. It stands for Software Defined Networking. It's basically a way to separate the control plane from the data plane in order to allow you unprecedented control over what your network can do, while still keeping it blindingly fast. You let the Software do what it's good for (running routing protocols, making policy decisions) and you let the Hardware do what it's good at (forwarding stuff at wire speed, zoooooom!). A match made in heaven Have a look at the wikipedia page http://en.wikipedia.org/wiki/Software-defined_networking Or this presentation from OpenFlow http://www.openflow.org/documents/OpenFlow_2011.pps Q: Why do I care? A: SDN and OpenFlow allow you much more control and flexibility over your network. It's a new technology however, and people are yet to begin playing with it. Q: Sounds like one of those scary technologies like IPv6 and DNSSEC. A: Well if you mean that other people are doing it while you're ignoring it and hoping that it will go away... Then you're right. =) Just like IPv6, before we saw people willing to deploy it on their networks they needed to get some experience with how it worked. We're at that stage with SDNs at the moment. It is because of this need for more experience and public awareness that we've gone ahead with this little project. Q: So what exactly have you done. A: We've deployed an OpenFlow controlled switch on the WIX and along with an OpenFlow controller built a BGP capable router. Q: Details? A: From the WIX looking glass Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 202.7.0.119 4 9483 24345 27397 0 0 0 07:21:59 1 Q: So what? Is that it? A: Hardly. We've got some more phases that we want to develop, so I guess this is a watch this space. Over the next few months, we'll be working on extending past this single box with a view to demonstrating to the NZ Internet community, and beyond, whats really possible with an SDN. Basically we don't want New Zealand falling behind whats happening in the rest of the world. Q: We're not ready for this. It's scary, poke it with a stick!!! A: Thats fine. We've chosen to use New Zealand as the initial production deployment here. But if it looks like thats not going to get the traction needed, then there are other places which this would work in. Lets make this a good Kiwi development moment though. Remember how we're so proud of telling people we had EFTPOS so long before anyone else. Q: Pfffft I've heard of this. It doesn't work! It's not production ready A: Hi, Welcome to the conversation. You're just the sort of person we need paying attention. We're doing this so that people arn't LISTENING about SDN, but are actually seeing it WORK. In a real world production setting. We hope you can stay for the rest of the show. Q: So who else does SDNs. This sounds a little too much like witchcraft to me. A: Well from back in the days of the Juniper M-Series people have been separating Routing Engines from Packet Forwarding Engines. We then started to see multi chassis versions. This is just an extension of the same sort of concept. There are some organisations which run huge-scale SDN style networks. Maybe you've used a search engine or mail platform from one... Q: This sounds like a pretty heavy sales pitch. What are you pushing? A: CYNIC! Nothing. Just like the reason I'm pushing people to think about IPv6 and DNSSEC, I want to see the New Zealand Internet community as a technology innovator, not just someone who swallows down the latest vendor slide-ware. And hey if SDN doesn't work then at least New Zealand still gets to write the book on it. Q: Sounds cool, can I help? A: Sure, anyone's welcome to come and learn along with the rest of us. Drop me a line if you think you can help and we'll see where we can fit you in. As a starter I'm looking for between 1 and 3U of space in Auckland with access to the APE. Q: Where can I hear more. A: If you're lucky I might do a lightning talk on where we've got to and where we're going at the NZNOG conference. Thanks to Prophecy Networks, REANNZ, VUW, Waikato University, Citylink, FX Networks and others, for their contributions and support in getting the project to where it is today and for not wanting it to stop there! Regards, Dean

3 4

Commsday: Russia, allies back off proposal to extend regulation across Internet
by Skeeve Stevens 10 Dec '12

10 Dec '12

Hey all, This was in this mornings Commsday. Seems like great news ...Skeeve ============================================== *Russia, allies back off proposal to extend regulation across Internet* * * In an extraordinary development late last night, Russia and its allies China, Saudi Arabia, Sudan, Egypt and the United Arab Emirates withdrew a radical proposal to overhaul international telecommunications regulations which would have given national governments sweeping new powers to regulate global ICT service providers such as Facebook and Twitter as well as Internet governance. CommsDay was told by sources that International Telecommunications Union secretary-general Hamadoun Toure personally intervened to persuade the Russians to withdraw their proposal following American threats to walk out of the World Conference on International Telecommunications if the revisions were considered for ratification. In a fast moving night:  United States delegation chief Ambassador Terry Kramer denied comments attributed to him by Dow Jones that his country would walk out of the conference if it sought to regulate Internet content. CommsDay has confirmed with Dow Jones that he made the comments now denied.  Russia withdrew, without explanation, a proposal with China, Saudi Arabia, Sudan, Egypt and the United Arab Emirates that would massively increase the ambit of international telecommunications regulations to cover almost all telecommunications and Internet activities. The proposal, leaked on Saturday, was disowned by a member of the Egyptian delegation which last night made a strong statement in favour of Internet freedom. This hinted at serious dysfunction behind the Russian-led coordination efforts.  A steering committee was immediately convened to get the conference, in danger of collapse, back on track. There was reportedly applause in the committee room as progress was made, especially on the detail of who the revised regulations might apply to. However access to the room was blocked by guards. Previously there were concerns that loose wording could extend the ambit of the regulations as far as users of virtual private networks and ham radio operators. The secretive machinations of a working group—the so-called Committee 5—will now apparently give way to open plenary sessions. Observers tell CommsDay that the radical Russian proposals had the effect of galvanising the conference into action. Although Russia and allies have formally withdrawn their proposed treaty revision, other countries may still attempt to advance some of the main points. Australian delegate Dr Bob Horton is believed to have played a major role last night, chairing an ad hoc meeting attempting to resolve the arguWCIT bombshell: SG averts collapse of conference LEAKED: The Russia-led proposalent over how Internet traffic is charged. African states and their supporters seek to restore the old voice traffic settlements regime for Internet traffic to provide a revenue source. The result of these efforts was unclear as we went to press 5AM Australian Eastern Summer Time. CommsDay was told last night that secretary general Toure personally called top Russians and asked them to back off because this would split the conference nproductively. “The head of delegation, considered a young tyro, apparently acted on his own and they shot him down. Partial confirmation is that Touré personally delivered the news to regional meetings before it was announced.” our source said, emphasising this was not officially confirmed. CommsDay sources say that the US delegation’s hundred-plus members fanned out to meet with almost every participating country in a last ditch effort to block the Russia-led move over the weekend. On sheer numbers, the Russia-led proposal would probably win a majority vote but there is an overriding preference by the ITU to forge a consensus on the eventual outcome. The alternative was a walkout by the US delegation and potentially some of its core allies. According to the .nxt website, Poland had also threatened to walk from the event. Australia generally supports the US position backing the status quo on Internet governance. CIVIL SOCIETY OBJECTS: Meanwhile, a group of civil society organisations from the US, Europe, India and Africa has slammed the ITU and WCIT process for a lack of transparency and input from outside groups. In a letter to the ITU, they state “Now that the conference is in session, we wish to call your attention to three immediate and pressing matters: the lack of any official standing to the public comments solicited prior to WCIT at the ITU’s invitation; the lack of access to and transparency of working groups, particularly the working groups of Committee 5; and the absence of mechanisms to encourage independent civil society participation.” ======== To subscribe to Commsday, please visit: http://www.commsday.com/ * * *Skeeve Stevens, CEO - *eintellego Pty Ltd <http://www.commsday.com/> <http://www.commsday.com/> <http://www.commsday.com/>skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website! eintellego.mx Free Apple products during this promotion!!!

1 0

.nz Second Key Generation Procedure
by Sebastian Castro 06 Dec '12

06 Dec '12

To the Technical Community: On December 5th 2012, NZRS successfully carried out the Second Key Generation Procedure. During this event, the cryptographic keys required to sign the .nz zones with DNSSEC for the next year were created. During the procedure NZRS also purged the keys that were not longer needed due to key rollovers. More details and links to the documentation trail created by the procedure can be found at https://nzrs.net.nz/content/second-key-generation If you have any questions, feel free to reply to this message or contact us privately. Have a great weekend, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

O/T: Request for hardware - 0.5m or 1m Mini SAS 36-Mini SAS 36
by James Baker 06 Dec '12

06 Dec '12

Sorry for the O/T; we're in a bit of a bind and need to find some internal 0.5m or 1m Mini SAS 36-Mini SAS 36 cables ( http://ultracartcgm.s3.amazonaws.com/TMCSC/1876/sas/internal/minisas36-mini… ) I need 4 but stocks seems to be 1 or less. Or a looong lead time. Does anyone know of any stock or does anyone have any handy? Thanks James

1 0

Telstra / Android updates - CDN issues?
by Leon Strong 04 Dec '12

04 Dec '12

Anyone else using any Telstra ip's that are being served by the Telstra/Google/CDN and noticing all android apps are failing? Notice on the redirector that i'm being directed to tnz1, seems to work fine on any other network. Any telstra peeps reading this hear anything from your side? _____________________________________________________________________________ This email has been filtered by SMX. For more information visit smxemail.com _____________________________________________________________________________

2 2

dmzglobal.ape.nzix.net - Packet Filtered
by Chris Hodgetts 03 Dec '12

03 Dec '12

Hello, I know this might not be the correct forum, but thought I would ask. I am trying to get to a govt. departments website, and its VERY slow.. I am seeing this on a ping and traceroute: chris(a)molly:~$ ping rsm.govt.nz PING rsm.govt.nz (116.89.228.176) 56(84) bytes of data. >From dmzglobal.ape.nzix.net (192.203.154.118) icmp_seq=1 Packet filtered >From dmzglobal.ape.nzix.net (192.203.154.118) icmp_seq=2 Packet filtered >From dmzglobal.ape.nzix.net (192.203.154.118) icmp_seq=4 Packet filtered Traceroute: 1. 192.168.100.1 0.0% 25 0.2 0.2 0.2 0.3 0.0 2. 192.168.1.1 0.0% 25 0.5 1.1 0.5 1.6 0.5 3. llu.bng1.nct.orcon.net.nz 0.0% 25 16.2 18.2 14.2 24.4 3.2 4. xe-2-2-0.cre1.nct.orcon.net.nz 0.0% 25 14.3 19.8 13.7 64.4 13.5 5. ge-0-3-0-0.cre1.sky.orcon.net.nz 0.0% 25 15.5 21.2 13.9 111.3 22.0 6. ??? Not sure if it's me, but it appears to be leaving my network OK .. and either getting lost leaving orcon, or having issues at WIX? Might be MED/RSM but is it normal to have nzix doing that? Cheers, and back to beer on such a lovely day..

3 4

DNS format error: their fault or mine?
by Richard Hector 29 Nov '12

29 Nov '12

Sorry if this is off topic. I'm seeing a bunch of this (and have been for ages) in my bind logs: http://pastebin.com/ydL0RhG4 (sample line for archives, when paste goes away: Nov 28 23:14:58 jet named[28427]: DNS format error from 120.204.202.200#53 resolving ns-os1.qq.com/AAAA: invalid response ) My understanding is qq.com is a Chinese IM service (which my flatmate uses). Dig doesn't tell me about any error; it merely doesn't return any AAAA records. Any suggestions on: - whether I should care, or just filter it out of my logcheck email - whether there's something I can fix - whether there's something I can do to figure out in more detail what's happening Note that this is my caching NS, on my home network (behind NAT) Thanks, Richard

6 9

Fw: [members-discuss] Invitation: The untold history of the Internet by Martin Geddes
by Donald Clark 26 Nov '12

26 Nov '12

Hopefully you'll forgive the cross posting. but if anyone out there wants to defend the honour of TCP, they may want to turn up to this… Lots of Martin's stuff is available on SlideShare if you want to explore... Forwarded message: > From: Vikram Kumar <vikram(a)internetnz.net.nz> > Reply To: InternetNZ Members Discussion List <members-discuss(a)mailman.internetnz.net.nz> > To: InternetNZ Members Discussion List <members-discuss(a)mailman.internetnz.net.nz> > Date: Tuesday, 27 November 2012 3:13:23 PM > Subject: [members-discuss] Invitation: The untold history of the Internet by Martin Geddes > > Hi, > > We are organising a talk by Martin Geddes in Wellington at 5 pm on Tuesday, 11th Dec, at InternetNZ's office. > > Martin will tells us the untold history of the Internet, and the unfortunate design errors now baked into every network router. He will also answer a series of provocative questions about the future. > > Details at https://internetnz.net.nz/news/blog/2012/Invitation-untold-history-Internet… > > We will have pizza after the talk to keep the discussion going. > > Please RSVP if you are coming so there is enough pizza for everyone. Please also invite anyone you think might be interested. > > Thanks and hope to see you then, > Vikram >

2 2

Re: [nznog] NZNOG Digest, Vol 119, Issue 14
by Sean Linton 24 Nov '12

24 Nov '12

Thanks, Sam, David, and Dean - Nothing specific motivated my enquiry. Its good to hear some of your thoughts on the issue. And good to see nznog, and in2security had a presence at NetHui_South over the weekend. Cheers, sean On 19 November 2012 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. please keep an eye out (Richard Naylor) > 2. Re: youth outreach? (Sam Sargeant) > 3. Re: youth outreach? (David Robinson) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 18 Nov 2012 19:41:24 +1300 > From: Richard Naylor <richard.naylor(a)R2.co.nz> > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] please keep an eye out > Message-ID: <20121118064123.BD29B2A061(a)sif.iconz.co.nz> > Content-Type: text/plain; charset="us-ascii"; format=flowed > > > Just a small advisory. I bought 1.5km of fiber for NetHui this week > and it was stolen from the supplier (Corys/Mastertrade) before I got > there to collect it. Its 12 core D-series, single mode LSZH cable > cut as 2x750m. The CCTV footage shows it stolen from the loading bay. > > So if you get offered some cheap fiber, I'm sure Corys would be very > pleased to hear from you. > > Replacement fiber arrived friday pm in one length. After a lot of > winding and splicing, the van is all loaded ready to roll tomorrow. > > I was suspicious that the folks mad keen on cable laying through the > roaring 40's to South America, had nicked it as a part of their project. > > Richard > > > > ------------------------------ > > Message: 2 > Date: Mon, 19 Nov 2012 09:33:39 +1300 > From: Sam Sargeant <sam.sargeant(a)gmail.com> > To: Sean Linton <sean(a)lpnz.org> > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] youth outreach? > Message-ID: <3D1F2ED3-22BD-4D20-93A8-5B2D3B926153(a)gmail.com> > Content-Type: text/plain; charset="us-ascii" > > On 17/11/2012, at 11:21 AM, Sean Linton <sean(a)lpnz.org> wrote: > > > How has the NZNOG community previously ensured that when a few key > people decide to do something else the organisation doesn't get into > trouble, so new blood keeps coming through? > > Hi Sean, > > Aside from the team of trustees and conference helpers there's no other > organisation to speak of so I'm assuming that's what we're talking about. > > From what I can see there are a couple of trustees who have been appointed > in the last year. If you missed it during the last NZNOG in Christchurch > I'm sure they'll be happy to introduce themselves. On the organising > committee there have been 3-4 new faces in the last two years before I > stopped doing any of the conference work. > > I don't think these have been community efforts; people on the team have > organised themselves quietly enough that I'd guess the wider community was > unaware of any changes. Perhaps you and the list could give feedback on > this approach? I'm wondering if there was something specific that triggered > your question. > > Sam. > >

1 0

Linux and/or Cisco Engineer Roles in Auckland ?
by Ian Batterbee 24 Nov '12

24 Nov '12

Hi all, I posted on this list in August, and do appreciate the replies I got then, however being still without a job, I'm forced to ask again if anyone knows of any senior network or sysadmin roles in Auckland (preferably CBD area). I have a number years of experience with Cisco kit, Linux scripting/automation/sysadmin, in both education (13 years) and ISP (5 years) environments. Please contact me off list if you know of anything. Thanks

1 0

Domain Registry of America sending out invoices again
by Juha Saarinen 24 Nov '12

24 Nov '12

Just a heads-up... got one in the post yesterday, from "Domain Renewal Group" or domainrenewalgroup.com. The physical address given on the envelope is: 189 Queen St Suite 209 Melbourne 3000 Australia The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. Registration Service Provided By: Domain Registry of America Contact: support(a)droa.com Web:http://www.droa.com Domain name: domainrenewalgroup.com Registrant Contact: Domain Registrar Domain Registry Group 2316 Delaware Avenue Suite 266 Buffalo NY, 14216-2687 US +1.8664340212 +1.8664340211 registrar(a)droa.com Administrative Contact: Domain Registrar Domain Registry Group 2316 Delaware Avenue Suite 266 Buffalo NY, 14216-2687 US +1.8664340212 +1.8664340211 registrar(a)droa.com Technical Contact: Domain Registrar Domain Registry Group 2316 Delaware Avenue Suite 266 Buffalo NY, 14216-2687 US +1.8664340212 +1.8664340211 registrar(a)droa.com Update date: 2011-04-13 Expiration date: 2017-01-03 Hei kona- mai,* -- *Juha Saarinen AITTP* *juha.saarinen.org <http://juha.saarinen.org> <http://twitter.com/juhasaarinen> Twitter <http://twitter.com/juhasaarinen>

1 0

3G in the South
by Skeeve Stevens 23 Nov '12

23 Nov '12

Hey all.. I will be spending 2 weeks in the south Island in December... Queenstown, Dunedin, Invercargil mostly. I need a solid 3G connection - prepaid preferably with some decent data. Anyone got any recommendations? I will be flying into and out of Queenstown. Thanks! * * *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website for Oct/Nov! eintellego.mx Free Apple products during this promotion!!!

1 0

Hurricane Sandy cleanup, for Verizon
by Criggie 20 Nov '12

20 Nov '12

http://www.theverge.com/2012/11/17/3655442/restoring-verizon-service-manhat… Worth a read - makes you wonder why we put kit in basements in the first place. -- Criggie http://criggie.org.nz/

1 0

youth outreach?
by Sean Linton 18 Nov '12

18 Nov '12

Recently Vikram Kumar Chief Executive at InternetNZ highlighted some of the youth outreach initiatives that InternetNZ is involved with. For example work with NetSafe, the 2020 Communications trust, and ICT-Connect. I think its timely activity. I have a question to anyone who is interested. How has the NZNOG community previously ensured that when a few key people decide to do something else the organisation doesn't get into trouble, so new blood keeps coming through? - Sean

3 2

please keep an eye out
by Richard Naylor 17 Nov '12

17 Nov '12

Just a small advisory. I bought 1.5km of fiber for NetHui this week and it was stolen from the supplier (Corys/Mastertrade) before I got there to collect it. Its 12 core D-series, single mode LSZH cable cut as 2x750m. The CCTV footage shows it stolen from the loading bay. So if you get offered some cheap fiber, I'm sure Corys would be very pleased to hear from you. Replacement fiber arrived friday pm in one length. After a lot of winding and splicing, the van is all loaded ready to roll tomorrow. I was suspicious that the folks mad keen on cable laying through the roaring 40's to South America, had nicked it as a part of their project. Richard

1 0

www.massey.ac.nz huge latency/packet loss last few hrs?
by Barry Murphy 13 Nov '12

13 Nov '12

Anyone know whats wrong with them, we getting some complaints... When their circuit over APE is up, it feels like i'm pinging the moon at times. Barrys-MacBook-Pro.local (0.0.0.0) Wed Nov 14 16:10:19 2012 Keys: Help Display mode Restart statistics Order of fields quit Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. 192.168.89.1 0.0% 444 1.1 0.4 0.3 2.9 0.2 2. l0-AKSBRAS.vibecom.co.nz 0.0% 444 0.9 0.8 0.6 2.8 0.3 3. 120.136.0.154 0.0% 444 0.8 1.1 0.6 31.5 2.3 4. massey.ape.nzix.net 0.0% 444 1.1 3.3 0.9 202.1 18.0 5. it028216-vlan2100.massey.ac.nz 94.6% 444 802.5 1463. 8.4 4843. 1842. 6. it032222-virt802.massey.ac.nz 95.5% 444 4691. 1198. 8.6 4691. 1824. 7. 10.100.3.184 95.0% 444 7475. 1395. 9.5 7475. 2050. 8. 10.100.188.2 95.5% 444 12.1 630.9 9.0 4868. 1422. 9. ns-proxy1.massey.ac.nz 95.0% 444 14.4 1122. 9.6 4907. 1603. Anyone from massey that can comment so we can advise downstream clients? Cheers Barry

1 0

Speaking of Wet Fibre to Sydney...
by Jed Laundry 12 Nov '12

12 Nov '12

Greetings, I've just noticed that there's a new AWS region available today: Asia Pacific (Sydney). I would imagine we're going to start to see a trickle of commercial offerings shortly, followed by a rapid increase of data. Before I start probing an instance to find out where/who's connected, does anyone have inside clue about how well connected NZ networks are to this new region? Probing commences after beer. Jed.

2 1

ISPMap topology update
by Barry Murphy 11 Nov '12

11 Nov '12

Hey guys, Guess while we're on the topic of international pipes, I've made a new capture map for http://www.ispmap.co.nz It's noticeable that Pacnet is nearly finished with NZ with only 1 ISP still using them... I guess this will soon go away when the contract expires. Here are the stats comparing to beginning of 05 July 2012 Telstra +2 Telecom -1 Pacnet -4 Vocus +1 Odyssey -1 As per usual, if anything needs updating email me offlist. Cheers Barry Murphy

1 0

Labour alleges failure of Southern Cross Cable
by David Robinson 11 Nov '12

11 Nov '12

http://computerworld.co.nz/news.nsf/news/labour-alleges-failure-of-southern… How much substance and how much Political Grandstanding? Yes a second cable would be nice but be careful saying the sky is falling.

19 27

Re: [nznog] Labour alleges failure of Southern Cross Cable
by Scott Weeks 11 Nov '12

11 Nov '12

--- pieter(a)insync.za.net wrote: From: Pieter De Wit <pieter(a)insync.za.net> SAT2 cable was full, iirc and SAT3 only linked to India etc up the west coast. ----------------------------------------------------------- http://submarinecablemap.com scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Re: [nznog] Labour alleges failure of Southern Cross Cable
by Sam Russell 08 Nov '12

08 Nov '12

One would hope she'd see the irony of using twitter over the link that she claims to be broken Sent from my iPhone On Nov 9, 2012, at 1:31 PM, Tim Price <tim(a)initech.co.nz> wrote: Except for where resiliency was down due to previously scheduled maintenance… Certainly wasn’t seamless from my point of view. But yes, Clare Curran needs to GTFO *From:* nznog-bounces(a)list.waikato.ac.nz [mailto: nznog-bounces(a)list.waikato.ac.nz] *On Behalf Of *Sam Russell *Sent:* Friday, 9 November 2012 3:27 p.m. *To:* Al Twohill *Cc:* nznog *Subject:* Re: [nznog] Labour alleges failure of Southern Cross Cable Presumably a redundant link means that nobody loses service when they accidentally break one of them? It does seem like an excuse to blame National for not propping up Pacific Fibre, rather than anything wrong with a redundant set of links failing over correctly due to a fault, as designed Sent from my iPhone On Nov 9, 2012, at 1:20 PM, Al Twohill <moebiusproject(a)gmail.com> wrote: On 9 November 2012 15:16, David Robinson <nznog(a)karit.geek.nz> wrote: http://computerworld.co.nz/news.nsf/news/labour-alleges-failure-of-southern… How much substance and how much Political Grandstanding? Yes a second cable would be nice but be careful saying the sky is falling. There is a thread discussing it on AUSNOG. Looks like Labour basically quoted that. http://lists.ausnog.net/pipermail/ausnog/2012-November/015297.html _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Open resolvers again
by Juha Saarinen 04 Nov '12

04 Nov '12

Spotted this earlier: http://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack "NZ Attack Sources: 167 AU Attack Sources: 1237" Are the local open resolvers seen as a problem? Hei kona- mai,* -- *Juha Saarinen AITTP* *juha.saarinen.org <http://juha.saarinen.org> <http://twitter.com/juhasaarinen> Twitter <http://twitter.com/juhasaarinen>

10 11

Re: [nznog] Open resolvers again
by Hamish MacEwan 03 Nov '12

03 Nov '12

On 3 November 2012 11:02, Matthew Luckie <mjl(a)caida.org> wrote: > http://en.wikipedia.org/wiki/Extension_mechanisms_for_DNS Oh, there's my misunderstanding right there, "The first set of extensions was published in 1999." Fascinating, ("Domain Information Groper") thanks for the link. Hamish. -- http://hamish.kiwi.me

1 0

Andy Linton is now an OpenFlow expert
by Josh Bailey 01 Nov '12

01 Nov '12

It took 2h. About 30m to make an OpenFlow controller PC out of bunch of trash, and boot my controller DVD. "ed" wasn't available on my controlled DVD so I made Andy use nano to configure it. That slowed us down quite a bit. 90m to put OpenFlow firmware on a 3780 switch, including walking up and down the hill to VUW get 1G SFPs. So if you have any questions about whether OpenFlow/SDN works/forwards packets in hardware - ask Andy. He knows. And has a live CD controller.

3 3

(non-op) shout out to NetHui South, November 2012
by Joe Abley 01 Nov '12

01 Nov '12

Hi all, For those who were not already aware, InternetNZ is planning a NetHui event in Dunedin in a few weeks: http://2012-south.nethui.org.nz/ Your amiable (and humble!) trustees support this effort, which looks to be very shiny and excellent. The programme looks good. You should go. You know, if you want to. Joe Abley NZNOG Trust Marketing Department

1 0

AJ the hero!!!
by Skeeve Stevens 31 Oct '12

31 Oct '12

Hey all, AJ is a hero!!! http://www.smh.com.au/travel/travel-incidents/extremely-obnoxious-no-help-f… * * *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website for Oct/Nov! eintellego.mx Free Apple products during this promotion!!!

5 5

NZNOG 2013 - registrations open
by Gerard Creamer 30 Oct '12

30 Oct '12

NZNOG 2013 - registrations open ============================= Registrations for New Zealand's pre-eminent technical Internet networking conference - NZNOG 2013 - are now open. Hosted by the New Zealand Network Operators Group, NZNOG 2013 is the country's only technical networking conference, and features a host of plenary sessions, practical workshops and tutorials. Spaces are limited, so register now and join your fellow ICT specialists for a feast of information sharing, technical up-skilling and professional networking. To register, please visit http://www.nznog.org/register What: NZNOG 2013 When: 21 - 25 January 2013 Where: Mercure Hotel, Wellington The platinum conference sponsor is Vocus Communications. ---- Conference structure NZNOG 2013 incorporates two three-day practical workshops, a one-day of technical tutorials and the conference-proper. Workshops: 21 to 23 January, 2013 Advanced routing - taught by Philip Smith, APNIC DNSSEC - trainer to be confirmed Tutorial: 23 January, 2013 Topics to be confirmed Conference-proper: 24 - 25 January, 2013 Programme and keynote speakers to be confirmed A range of pricing options are available, including a heavily-discounted student registration: Main conference (waged) - $250.00 Main conference (student) - $50.00 Practical workshop (advanced routing or DNSSEC) - $150.00 Tutorial - $50.00 ---- Conference Fellowships available Assistance is available to those people that mightn't otherwise be able to attend NZNOG 2013 but have a lot to offer to, or gain from, the NZNOG community. Fellowships are open to all - employed, unemployed, students, programmers. Fellowships will cover conference and tutorial registration fees, and accommodation. Travel assistance may also be considered. Applicants must: - Write a few paragraphs explaining why they need a fellowship to NZNOG 2013 and what they hope to get out of it. - Demonstrate a history of involvement in some aspect of the NZNOG community or an intent to become involved, and how attending NZNOG 2013 will benefit them. - Actually attend the NZNOG sessions! - Fellowship prospects will be helped greatly if applicants are presenting, or intend to present a conference paper, lightning talk or otherwise contribute to the conference. If you are interested in being considered for a fellowship please e-mail talks(a)nznog.org. ---- More information More information about NZNOG 2013 can be found at www.nznog.org. For sponsorship opportunities please contact sponsorship(a)nznog.org. Cheers, Gerard (NZNOG 2013 Organising Committee)

1 0

DKIM vulnerability
by Juha Saarinen 25 Oct '12

25 Oct '12

Thought this would be of operational interest to DKIM users.... http://www.wired.com/threatlevel/2012/10/dkim-vulnerability-widespread/all/ Hei kona- mai,* -- *Juha Saarinen AITTP* *juha.saarinen.org <http://juha.saarinen.org> <http://twitter.com/juhasaarinen> Twitter <http://twitter.com/juhasaarinen>

3 2

Xtra mail admins around?
by Tim Price 17 Oct '12

17 Oct '12

Can someone who looks after Xtra's mail systems please contact me. We're seeing problems with Xtra customers delivering mail to a domain recently transferred from Xtra to DTS. It looks like there are some legacy records left behind from the removal process. Regards Tim Price Network Operations Manager DTS Limited.

7 11

NZNOG 2013 - Call for Papers
by Gerard Creamer 17 Oct '12

17 Oct '12

Call for papers - NZNOG 2013 Doing something interesting in the Internetworking space? Submit an NZNOG conference paper and you could win a trip to the next APRICOT meeting in Singapore! ---- The NZNOG organising committee invites papers for its 12th annual conference, to be hosted at the Mercure Hotel, Wellington, New Zealand from 21 – 25 January 2013. There will the three day Workshops 21 – 23 January, a day of tutorials on 23 January with the main conference on 24 – 25 January. The best local conference paper as judged by the organising committee will win a trip to APRICOT 2013, to be held in Singapore, 19 February to 1 March 2013. So, get writing! Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practises and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 5 November. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate abstracts based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. The best local paper will be judged by a selection of the organising team. Return flights from New Zealand, accommodation, and conference fees will be covered. It will be expected the best paper is submitted by the winner for presentation at APRICOT. More details on paper submission can be found at http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org -- Netspace Services Limited http://www.netspace.net.nz Phone +64 4 917 8098 Mobile +64 21 246 2266 Level 4, 191 Thorndon Quay, Thorndon PO Box 12-082, Thorndon, Wellington 6004, New Zealand

1 0

TelstraClear 6to4 relay router down again?
by Lloyd Parkes 15 Oct '12

15 Oct '12

Does anyone know if the TelstraClear 6to4 relay is down again? This looks like what happened in May last year, except that this time, I'm working with a brand new router, so it could just be me. I think I've got the hang of the RouterOS firewall and the packet dumps say the 6to4 packets are going out, but I don't trust RouterOS that much yet. Cheers, Lloyd

2 1

If you are using APNIC as an RPKI trust anchor, please update your Trust Anchor Set.
by George Michaelson 14 Oct '12

14 Oct '12

If you are using APNIC as an RPKI trust anchor, please update your Trust Anchor Set. APNIC will be switching to a new RPKI 'split' trust anchor system on the 25th of October. This change is needed to align APNIC administered resources with their allocation hierarchy. These resources will also be certified under each responsible parent registry at the appropriate time. In accordance with RFC6490 the old APNIC Trust Anchor Locator, associated certificate and repository will be removed, when the certificate expires on the 28th of October. 5 new Trust Anchor Locator (TAL) have been published. These will be kept up to date as an independent trust anchor set for resources maintained by APNIC. The production cycle will start on the 25th of October. Relying parties must add these new TAL by the 25th of October in order to maintain continuity of validation. If you have any questions please contact me. George Michaelson (ggm(a)apnic.net) Please add the following to your trust anchor set: rsync://rpki.apnic.net/repository/apnic-rpki-root-afrinic-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMLL96YV9pf0rZ4Ow/bk cgpoPfsRzkcgmisyCuMUdotHwrp8pepujhohatScRK09ILRrZYCdpX4121MJhqXC P3u3hy9fF0CeARKX/Q82nJccD4dtUp23UcFys8hwJgNYZI910ajkAxwNT//H/TFw oUYbzZGBR7o2awMc7GdQl/j6dgOkV6AfYy5DyDEgOUNHnUxED2rreefL/E2Fr2ST Esar6bTR4Tg4+nVF1PjAkgN0tKZYe4wZ6VmtqV/VTngSLysim6av7ki+JR3cVgVU OqXeh1vPjH2tNu6u9bX37ZrdVb6NBRer9I99IDbKvyhELb6nzo8+Q74zga9HI+Pf QwIDAQAB rsync://rpki.apnic.net/repository/apnic-rpki-root-arin-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6vscYtzhe0CfFk5Ro44 llPhsInXtfAxqfYmK7m9V3khkqK3d3/ZAW6pcJm7qW8XhEGl+F5mUeeLIm5JoIhr kT5B5M6uL0VlCCkZJH4h76ybOa83vWITNZEDy9L3c3nK4S+Basu3vYoE4ICXGG+J 7zg5Iw9saV+p03E2w1g16pt1QI3Cnggp6edkeWClEz3aPw/ULOIHb7YmatWwdERl tL9LsuMSKszQLUY7F4XVpxey/rJYAZgzDUh+b6813WAClCkkydNjsbviuekAWJbx sW7Mcw53u30K4g8MP03CjkDOubyoR4Qo99R1UQJCdrRsFKbSSfN/fOA4y7ikc3xs jQIDAQAB rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RWSL61YAAYumEiU8z8 qH2ETVIL01ilxZlzIL9JYSORMN5Cmtf8V2JblIealSqgOTGjvSjEsiV73s67zYQI 7C/iSOb96uf3/s86NqbxDiFQGN8qG7RNcdgVuUlAidl8WxvLNI8VhqbAB5uSg/Mr LeSOvXRja041VptAxIhcGzDMvlAJRwkrYK/Mo8P4E2rSQgwqCgae0ebY1CsJ3Cjf i67C1nw7oXqJJovvXJ4apGmEv8az23OLC6Ki54Ul/E6xk227BFttqFV3YMtKx42H cCcDVZZy01n7JjzvO8ccaXmHIgR7utnqhBRNNq5Xc5ZhbkrUsNtiJmrZzVlgU6Ou 0wIDAQAB rsync://rpki.apnic.net/repository/apnic-rpki-root-lacnic-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoYPp3l3DWyPtLWrmRn4 Oux9hQ5bxd0SX/f6ygHxik+I3eMJP5J0Pr2e500tyXb2uKsX9kDqu/kckr+TUMhV BHd5yAv8OAE3YYEvpz/7uTX7cYy2yUeA76OEP75Y88OIQEzGpPLNpIzDxMggxuDh IhkA5xMiUJgVoEgmWSzR+MuRBjv2422wAGB5GpLgYsOjpwvG0VPmhnE+39+10ucQ CLt0Ny5kOR4an2tkvHjm7rzKDnFm8MWxPzAWESdf+8g7ITzSglqxDNiK5E5rdzNt h1Kvp+9RwaFArw6Ky1A4HhnoplN4EfKwxq0YamuKV0ZTTpWyT2+qDuE6sOfHRbJ0 5QIDAQAB rsync://rpki.apnic.net/repository/apnic-rpki-root-ripe-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsQlXmEklLYApoDo7GEa NNTEGFPU5wJpi04iXuga2xn+g/TMLOlyJbjuPYRtRm/7VbRnN3m9Ta+WETy03+Fm EbXzB4xxhJKVik/ARHBnrBWhLyURy8Q5/XplE9cJein37IE1mIsbKM7o/90S225w 7GuvW7T4kjPWYmBFOywHWsfQO1EdsgiJrkz+Ab67ZkdSIiKHkf2UE6/MrbDEj+QK 9+s/vKH8BtDhaLmTWY+bVvfJ3+AWDH6roo1ozbl5yamQFbLOl3ns30f3yOJcNSNu /qgMQRRyp2sXXQovhTy8yqm3LFspaCWnTmQtBieWZwibuOa4Z27A1FzTMst2T4wY /wIDAQAB

1 0

Xtra DNS
by Simon Lyall 14 Oct '12

14 Oct '12

Can somebody on the team that looks after Xtra's DNS servers please contact me. I'm seeing problems with a specific record that works okay with most/all other NZ ISPs ( the record has a short TTL but has been broken for days ). My work's site has a work-around in place but various other sites ( like some at Mozilla ) will be broken for Xtra customers. The servers I am talking about are: 202.27.184.3 alien 202.27.184.5 terminator 202.27.158.40 dnsc1 202.27.156.72 dnsc2 -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

1 0

Added a new Range of IP addresses in NZ - Geolocation updates
by Greg Theron 09 Oct '12

09 Oct '12

Hi Guys We have setup an ISP in New Zealand and have allocated part of our Australian IP address space over here. Could I please ask everyone to update their Geolocation Databases to include the 180.222.160.0/20 as being based in Auckland? Thanks heaps Greg inetnum: 180.222.160.0 - 180.222.175.255 netname: TELCOINABOX-AP descr: Telcoinabox Pty Ltd descr: Telcoinabox NZ Limited descr: Level 4, 15 Huron Street, Takapuna, Auckland country: NZ admin-c: TNLN1-AP<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=TNLN1-AP&form_type=advanc…> tech-c: TNLN1-AP<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=%20TNLN1-AP&form_type=adv…> mnt-by: APNIC-HM<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=%20APNIC-HM&form_type=adv…> mnt-lower: MAINT-TELCOINABOX-AU<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=MAINT-TELCOINABOX-AU&form…> mnt-routes: MAINT-TELCOINABOX-AU<http://wq.apnic.net/apnic-bin/whois.pl?searchtext=MAINT-TELCOINABOX-AU&form…> mnt-irt: IRT-TELCOINABOX-AU status: ALLOCATED PORTABLE remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ remarks: This object can only be updated by APNIC hostmasters. remarks: To update this object, please contact APNIC remarks: hostmasters and include your organisation's account remarks: name in the subject line. remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ changed: hm-changed(a)apnic.net 20091014 changed: hm-changed(a)apnic.net 20121009 source: APNIC Greg Theron [cid:image001.png(a)01CDA6D7.4DA3C3D0] Telcoinabox NZ Limited | Level 4, 15 Huron Street, Takapuna, Auckland D: +64 9 4880106 | M: +64 27 874 4783 | F: 0800 883 526 telcoinabox.co.nz Add us on social media: g [cid:image002.png(a)01CDA6D7.4DA3C3D0]<http://facebook.com/telcoinabox> [cid:image003.png(a)01CDA6D7.4DA3C3D0] <http://www.linkedin.com/company/419134?trk=tyah> [cid:image004.png(a)01CDA6D7.4DA3C3D0] <http://twitter.com/#!/telcoinabox_nz> ________________________________ The information contained in this electronic mail transmission is intended by Telcoinabox (NZ) Ltd for the use of the named individual or entity to which it is directed and may contain information that is confidential or privileged. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error. Opinions expressed in this email are those of the sender and not necessarily the opinions of the employer. This email and any attached files should be scanned to detect viruses. No liability will be accepted by the employer for loss or damage (whether caused by negligence or not) as a result of email transmission.

4 4

FW: ICANN News Alert -- Implementing the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA
by Leo Vegoda 08 Oct '12

08 Oct '12

Hi, The consultation described in the announcement below is being run to gather input on the best way to implement the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA, which was ratified in May. In particular, we are keen to gather input on the most useful registry format for the Recovered IPv4 Pool. If you have a particular preference, please provide input to the consultation. Many thanks, Leo Vegoda From: ICANN News Alert Sent: Thursday, October 04, 2012 1:37 PM Subject: ICANN News Alert -- Implementing the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA <http://www.icann.org/> Description: ICANN News Alert <http://www.icann.org/en/news/announcements/announcement-04oct12-en.htm> http://www.icann.org/en/news/announcements/announcement-04oct12-en.htm _____ Implementing the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA 4 October 2012 Forum Announcement: Comment Period Opens on Date: 4 October 2012 Categories/Tags: Internet Protocol Addressing Purpose (Brief): The Board ratified the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA in May. This public comment period is intended to gather input on options open for implementation. Public Comment Box Link: <http://www.icann.org/en/news/public-comment/implementing-ipv4-post-04oct12-…>http://www.icann.org/en/news/public-comment/implementing-ipv4-post-04oct12-… message was sent from:ICANN | 12025 Waterfront Drive Suite 300 | Los Angeles, CA 90094-2536Email Marketing by <http://www.icontact.com/a.pl/144186> Description:iContact - Try It Free! <http://app.icontact.com/icp/mmail-mprofile.pl?r=9828084&l=6333&s=FAC9&m=895…> Manage Your SubscriptionDescription:http://click.icptrack.com/icp/track.php?msgid=89518…

1 0

FW: APE MAC addresses
by Mark Frater 02 Oct '12

02 Oct '12

Anyone know what the rational is around the "official policy around APE" of only having a single MAC address per port? I would have thought that there was some technical merit in allowing at least 2 to cover rotuer replacement (without MAC address spoofing) and offer some peer router diversity options (e.g. either via separate peering sessions or VRRP implementation.) Regards Mark Frater

5 7

New surveillance Laws
by Tony Wicks 30 Sep '12

30 Sep '12

http://www.nzherald.co.nz/nz/news/article.cfm?c_id=1&objectid=10837641 Has anyone complied a definitive guide on what the enacted law means for us as network operators ? thanks

1 0

ETNO SPNP proposal
by Juha Saarinen 25 Sep '12

25 Sep '12

Wrote this earlier today: http://www.itnews.com.au/News/316593,eu-telcos-seek-end-to-settlement-free-… Would be interested to hear what the local view on mandatory SPNP. Hei kona- mai,* -- *Juha Saarinen AITTP* *juha.saarinen.org <http://juha.saarinen.org> <http://twitter.com/juhasaarinen> Twitter <http://twitter.com/juhasaarinen>

8 8

NZ peering - IPv6, Looking glasses etc.
by Sid Jones 17 Sep '12

17 Sep '12

FYI: We've upgraded the the Palmerston North exchange so that it supports IPv4 and IPv6 peering announcements, this means that all five of the NZ peering points operated by Citylink are now dual-stacked. If you want to add IPv6 peering please contact us - peering @ citylink.co.nz You can see who is peering with the route servers using http://nzix.net/peers.html There is also Looking Glass visibility to all the route servers available at http://nzix.net/cgi-bin/lg.cgi Lastly, another reminder that you no longer need to submit filter list updates.

1 0