- NZNOG - lists.nznog.org

IPv4 Recovered Address Space Update
by Selina Harrington 01 Mar '19

01 Mar '19

Hi, The IPv4 Recovered Address Space registry has been updated according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… The global policy can be found at: https://www.icann.org/resources/pages/allocation-ipv4-post-exhaustion-2012-… Kind regards, -- Selina Harrington Lead IANA Services Specialist

1 0

APNIC EC ELECTION - NOMINATIONS
by Justin Kaitapu 18 Feb '19

18 Feb '19

Dear Members, Initially, I was aware that being nominated to the Executive Council Member election for APNIC would be a challenge for anyone in the Pacific Region, mainly due to proportion and members within our Pacific Region. Having being nominated, I'm humbled to at least give it a try. I seek your support and vote for the Executive Council Member of APNIC, if voted in, quite humbly I will be your voice for Oceania within the Council. It is in my view that having a member within the Pacific Region will be advantageous to all of us. I understand the voting process is a simple matter for those of you who are members of APNIC, using your access to your myapnic and just follow the voting tab. For more details and information on APNIC EC Election Nominees, please refer to https://conference.apnic.net/47/elections/nominations/ I thank you in advance for your support. Malo, Justin Kaitapu | | | EziNET Tonga Ltd Dateline Bld, Hala Bypass, Ma'ufanga, Nuku'alofa P.O Box 2867, Kingdom of Tonga. South Pacific. P (+676) 550-0000 | M (+676) 875-1853 (+64) 2825587361 | justin.kaitapu(a)ezinet.to<mailto:justin.kaitapu(a)ezinet.to> ------------------------------------------------------------------------ Notice of Confidentiality: "This e-mail and any attachments to it (the "Communication") is, unless otherwise stated, confidential, may contain copyright material and is for the use only of the intended recipient. If you receive the Communication in error, please notify the sender immediately by return e-mail, delete the Communication and the return e-mail, and do not read, copy, retransmit or otherwise deal with it. Any views expressed in the Communication are those of the individual sender only, unless expressly stated to be those of relevant business or entity of the sender, we do not accept liability in connection with the integrity of or errors in the Communication, computer virus, data corruption, interference or delay arising from or in respect of the Communication."

1 0

Vodafone mail admin contact
by Richard Gray 13 Feb '19

13 Feb '19

Hi, Can anyone on the list put me in contact with an email administrator at Vodafone? We (SMX) have been seeing mail delivery problems to Vodafone properties (vodafone.co.nz, clear.net.nz, etc) from several locations for the past day or so. Please contact me off list. Thanks, -- *Richard Gray* | Operations Technical Lead *Mobile:* +64 21 050 8178 *DDI:* +64 9 950 2196 *Freephone:*0800 SMX SMX (769 769) *SMX Limited:* Level 10, 19 Victoria Street West, Auckland, New Zealand SMX | Cloud Email Hosting & Security <https://smxemail.com> _____________________________________________________________________________ This email has been filtered by SMX. For more info visit http://smxemail.com _____________________________________________________________________________

5 5

Spoofer Report for NZNOG for Jan 2019
by CAIDA Spoofer Project 08 Feb '19

08 Feb '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jan 2019: none inferred Source Address Validation issues inferred during Jan 2019: ASN Name First-Spoofed Last-Spoofed 55785 MAXUM 2017-02-18 2019-01-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

DNS flag day - more info somewhere?
by Richard Hector 30 Jan '19

30 Jan '19

Hi all, I hope this is more or less on topic ... I've been testing my zones with the tool at https://dnsflagday.net/ and getting results I don't entirely understand. I get errors from my secondary (ns2), which is a service from my VPS provider, and ok from my master (ns1), which I run myself. But apart from ns2 returning an aa flag for a failed query, I can't see any difference in the results, when I run the query manually from my desktop (having upgraded dnsutils to one that supports +nocookie) Additionally, the tool says an SOA record is returned (from the failed query), and I don't see that. Is there more detailed info somewhere? The tool does say my zone will continue to work but will have issues in the future, so I'm not immediately worried. Cheers, Richard

4 5

Call for Lightning talks
by Richard Nelson 30 Jan '19

30 Jan '19

We have a slot for lightning talks tomorrow afternoon in the NZNOG conference. Talks should be five minutes or less. If anyone has a talk that they would like to give, could you please email the title, and topic (one sentence) to talks(a)nznog.org Thanks, Richard

1 0

NZNOG 2019 - About to get underway, incl. streaming link
by Nathan Ward 30 Jan '19

30 Jan '19

Hi! We’re about to get underway with NZNOG 2019. Great to see everyone here. Reminder that the programme is on the website, and on the screens in the lobby. The stream will be available at http://thevideo.nz/nznog <http://thevideo.nz/nznog> during the sessions. This will 302 to Youtube, but the Youtube URI will change each session, so hit this each time and it’ll get you there. It’s on the website as well. -- Nathan Ward

1 0

Slack trial / potential use case at conference
by David Young 28 Jan '19

28 Jan '19

Hey NZNoggers, I see that there's a trial of Slack for realtime/conference discussions (http://www.nznog.org/slack) I'm keen to try this out pre-conference, and I understand (above) that I need an existing member to invite me. Can an existing NZNOG slack member please message me off-list to setup an invite? Thanks! D

2 1

Re: [nznog] Tongan Internet Outage
by Mehmet Akcin 27 Jan '19

27 Jan '19

resending without the attachment - i have uploaded here instead. https://twitter.com/mhmtkcn/status/1089759385373425670 On Sun, Jan 27, 2019 at 9:33 PM Mehmet Akcin <mehmet(a)akcin.net> wrote: > here is an interesting datapoint. I believe the cable repair ship that is > going to Tonga is TE Subcom's Reliance. > > https://www.marinetraffic.com/en/ais/home/shipid:711444/zoom:9 > > [image: Screen Shot 2019-01-27 at 9.31.16 PM.png] > > On Sun, Jan 27, 2019 at 6:25 PM Mehmet Akcin <mehmet(a)akcin.net> wrote: > >> Interesting and thank you for sharing >> >> I am running https://dev.networkatlas.org >> >> If you have any more data, i would love to update. >> >> Mehmet >> >> On Sun, Jan 27, 2019 at 16:17 Pete Mundy <pete(a)fiberphone.co.nz> wrote: >> >>> >>> There was an interview with the deputy CEO of Tonga Communications Corp >>> in Dateline Pacific on Friday which had some more information for those >>> interested: >>> >>> >>> https://www.radionz.co.nz/international/programmes/datelinepacific/audio/20… >>> >>> It mentions that the breaks in the two separate cables are 5km apart yet >>> occurred at the same time. >>> >>> The interviewee's comments suggest that the satellite provider may be >>> putting thumbscrews on for long-term commitments before approving >>> additional capacity. >>> >>> It's a shame Google don't have a spare loom balloon to send their way to >>> patch into some Facebook style satellite laser backhaul! >>> >>> >>> > On 28/01/2019, at 12:59 PM, Mark Foster <blakjak(a)blakjak.net> wrote: >>> > >>> > Surprised I hadn't seen much news on this, tripped over it whilst >>> looking >>> > into other things. >>> > >>> > >>> https://www.radionz.co.nz/international/pacific-news/381086/tongans-urged-t… >>> > >>> > Related articles indicate that there's two breaks to submarine cables >>> > offshore and they don't know what caused it yet, but it's likely to be >>> at >>> > least a week before repairs are completed. >>> > Limited capacity in the interim (Satellite only, maybe?) >>> > >>> > Cheers >>> > Mark. >>> >>> _______________________________________________ >>> NZNOG mailing list >>> NZNOG(a)list.waikato.ac.nz >>> https://list.waikato.ac.nz/mailman/listinfo/nznog >>> >> -- >> Mehmet >> +1-424-298-1903 >> >

1 0

Tongan Internet Outage
by Mark Foster 27 Jan '19

27 Jan '19

Surprised I hadn't seen much news on this, tripped over it whilst looking into other things. https://www.radionz.co.nz/international/pacific-news/381086/tongans-urged-t… Related articles indicate that there's two breaks to submarine cables offshore and they don't know what caused it yet, but it's likely to be at least a week before repairs are completed. Limited capacity in the interim (Satellite only, maybe?) Cheers Mark.

3 2

New Chorus ONT - ACS changes required.
by Brent Marquis 24 Jan '19

24 Jan '19

Hi folks, It is looking to me like some of the technical detail around this is not getting through to all of the right people In all of the right RSPs. The important headline is that if you are an RSP and use the POTS port on our ONTs for your voice service, you *MUST* make ACS updates or voice will not work on the new ONT. If you weren’t in the meeting we had on Wednesday afternoon and you look after an RSP ACS for UFB ONTs, can you please get in touch. We are running an internal staff trial for the new ONTs from 4th Feb, with production launch early March. When the production launch hits, the new ONT will be popping up on Chorus UFB connections (new installs and fault replacements). Further detail here, but please get in touch with myself and/or your SDM if you have questions or need any assistance. https://sp.chorus.co.nz/product-update/3rd-generation-ont-phase-1-rollout-s… Thanks, Brent Brent Marquis Senior Network Design Engineer T +64 4 8964169 M +64 27 2290923 E Brent.Marquis(a)chorus.co.nz PO Box 632 Wellington 6011 www.chorus.co.nz Aon Hewitt Best Employer in Australasia 2012-2017 Aon Hewitt Best of the Best Employers in Australasia 2015  Please consider the environment before printing this e-mail _______________________________________________________________________________ The content of this email (including any attachments) is intended for the addressee only, is confidential and may be legally privileged. If you’ve received this email in error, you shouldn’t read it - please contact me immediately, destroy it, and do not copy or use any of the content of this email . No confidentiality or privilege is waived or lost by any mis-transmission or error. This communication does not designate an information system for the purposes of Part 4 of the Contract and Commercial Law Act 2017. Although we have taken reasonable precautions to ensure no viruses are present in this email, we cannot accept responsibility for any loss or damage arising from the use of this email or its attachments.

1 0

Conference updates
by Richard Nelson 21 Jan '19

21 Jan '19

Conference registrations have now reached 162 people. This is the highest number I can recall for any NZNOG conference. For catering we will cap registrations at 170 so we are down to the final few places left. The programme for this year is now available: http://www.nznog.org/nznog-2019/nznog-2019-programme Richard

1 0

DNS Flag day - What you need to know
by Sebastian Castro 15 Jan '19

15 Jan '19

Hello: Starting in July 2018 InternetNZ has been monitoring and measuring how .nz domains will be affected by DNS Flag day. For those who don't know, DNS Flag Day, or 1 February 2019, has been set by a number of DNS software developers as a coordinated day to release new DNS software versions. The changes will remove DNS protocol workarounds related to EDNS. You can find more information at https://dnsflagday.net InternetNZ has been actively notifying affected DNS Operators, Registrars and Registrants in the past weeks, and the situation has greatly improved. If you haven't tested your authoritative nameservers, we strongly suggest you do. There are still a few high profile .nz domains affected. I'll be presenting about this topic during the next NZNOG meeting in Napier, with a description of what's changing, how the problem has been evolving for .nz and other interesting bits and pieces. There are a number of DNS software implementors involved, as well as a number of ccTLDs measuring and campaigning to reduce the number of domains affected. If you have any questions or comments, feel free to contact me. Cheers, -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Old Telstra Saturn Cable infrastructure in wellington.
by Jamie Baddeley 13 Jan '19

13 Jan '19

Hi, I had reason to try and contact Vodafone over the weekend due to some concerns about the mechanical integrity of their ageing overhead cable network. Basically there was a bit that was in danger of getting snagged by a bus or similar. No one on the helpdesk had a clue. The fact that they had overhead wires in a city in NZ seemed like a complete surprise to them. I'm emailing here because the standard routine did not work. This after being routed to several different desks. Does anyone here know how one would resolve an issue like this? Are VF even using this stuff anymore? If not, when are they going to start taking it down so apparent mismanagement of the "asset" doesn't pose a risk to the public? If they are still using it can someone advise the right place to call to get it quickly resolved? Or at least when someone says 'overhead cable infrastructure fault' the response is not 'you'll have to ring Chorus'. cheers jamie

4 4

NZNOG Slack
by Nathan Ward 09 Jan '19

09 Jan '19

Hi all, Some of you may have noticed that we recently added another page to the website describing the NZNOG Slack we're trialling. This particular one was created a few years back for conference organisation stuff, but we’re opening it up to others. Slack is a commercial chat product, which is used pretty widely by tech companies[1]. We’re using the free plan right now. We’ll see if we qualify for the non-profit thing to get the extra features, but, not really important at the minute. ** Why: There’s a few different Slacks in related industries in NZ that work really well, and most people I interact with professionally are in a couple of Slacks. It’s really useful to be able to drop someone a quick message, where email isn’t quite the right tool. The goal of the Slack is to facilitate real time conversations between people, and build some more direct relationships. You can have private chats with people when you’re debugging something. You can ask in the public channels for people to send you some traceroutes. You can post funny networking related things in the #random channel. You get the idea. The key really is real time. Also: If you have a clever idea for an integration that’s useful for NZ operators, please, let me know. Write a bot for your looking glass, that sort of thing. ** But what about: There is no intent to take away from the mailing list at all, and I would strongly encourage people to post important messages, requests, and all the usual stuff to this list in order to get a good audience. Of course, I’m aware of other places operators in NZ also discuss stuff that are not NZNOG - and we’ve no intent to take things away from those groups either. There is a #conference-2019 channel, for discussion of whatever’s going on at the conference, announcements, etc. In the past there’s been an IRC channel, and probably still is. ** What else should I know?: Some key notes: - The intent is that it’s for network operators in NZ, or people operating networks that touch NZ networks in some way. - Existing members can nominate new members through Slack itself, and then one of the admins will approve/reject. - The expectation is that discussions are not shared. - Don’t post secrets, passwords etc. There is a code of conduct, which you should read for more: http://www.nznog.org/slack/slack-code-of-conduct <http://www.nznog.org/slack/slack-code-of-conduct> ** How do I get on?: - We’re going to invite everyone who’s registered for the conference. I’m going to do that now, and update it with new registrations as they happen. - Ask someone who’s already on there, and they can nominate you. - Up until the conference, if you want on and the above don’t work, email me (nathan(a)nznog.org <mailto:nathan(a)nznog.org>) and tell me who you are and such, and I’ll invite you. -- Nathan Ward [1] Yes there are other “Free”, “Open”, etc. systems. Yes we could host our own system. The intent here is to get something that’s easy for the largest audience, and right now things tend to be looking towards Slack. This is a trial, so if something significantly better comes along then maybe we move to it - but let’s see if there’s value in this way of interacting first.

1 1

NZNOG 2019 Napier Update
by Dave Mill 09 Jan '19

09 Jan '19

Hi all Just an update on a few conference related things. We have so far sold 134 tickets to the conference proper. This puts us on track to be one of the biggest NZNOGs yet. This year we've specifically booked a large venue so we don't expect to sell out but who knows! Book soon if you want to be guaranteed a spot. Whilst we don't have a full programme just yet we've been updating the speaker list as we accept/confirm them - http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers TICSA workshop: After getting feedback on and off list we've arranged for a TICSA workshop at the conference. This is a practical session aimed at giving an operator the tools and knowledge to achieve TICSA compliance. A decent chunk of the session will be a tutorial on setting up OpenLI the free open source lawful intercept package ( https://openli.nz/ ) kicked off on this list, funded by our industry, and written by WAND. If you have TICSA obligations that you aren't currently achieving please come along. We also have two other workshops/tutorials available on SDN and network automation. Details here : http://www.nznog.org/nznog-2019/nznog-2019-workshop-and-tutorials Finally, for those of you who don't know, the NZNOG conference is made possible by the NZNOG Trust with support from InternetNZ. The NZNOG Trustees are currently: Dave Mill Richard Nelson Gerard Creamer Barry Murphy Nathan Ward Any questions please sing out on or off list. info(a)nznog.org Cheers Dave

1 0

Spoofer Report for NZNOG for Dec 2018
by CAIDA Spoofer Project 08 Jan '19

08 Jan '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Dec 2018: ASN Name Fixed-By 131291 LANWORXLIMITED 2018-12-09 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Dec 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-12-10 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

OpenBSD informal talk, Wellington, 23 January 2019
by Richard Procter 22 Dec '18

22 Dec '18

Hi, I'm posting this here at the suggestion of Dylan Hall and Neil Fenemor. A number of OpenBSD developers will be visiting Victoria University in January. As part of that, they will be giving an informal talk on what they have been working on recently, open to the public. A number of the OpenSSH and LibreSSL devs will be there, including Theo de Raadt, Bob Beck and Damien Miller, as well as one of the devs who spear-headed the OpenBSD response to Meltdown, among others. The venue is Lecture Theatre LBLT118, Laby Building, Victoria University, Wellington on 23 January starting at 14:00. Feel free to contact me if you've any questions. best, Richard.

2 1

CFP - INFOCOM19 ICCN Due on 30/12
by William Liu 10 Dec '18

10 Dec '18

INFOCOM19 1st International Workshop on Intelligent Cloud Computing &Networking (ICCN) - The Flyer URL (by tinyurl): https://tinyurl.com/infocom19-iccn-flyer - Info.+: https://tinyurl.com/infocom19-iccn Cheers Will(a)AUT, Auckalnd

1 0

CFP - ICC19 DDINS Due on 15 Jan
by William Liu 08 Dec '18

08 Dec '18

ICC19 1st International Workshop on Data Driven Intelligence for Networks & Systems (DDINS) URL (by tinyurl): https://tinyurl.com/icc19-ddins Cheers Will(a)AUT, Auckland

1 0

Spoofer Report for NZNOG for Nov 2018
by CAIDA Spoofer Project 08 Dec '18

08 Dec '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Nov 2018: none inferred Source Address Validation issues inferred during Nov 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-11-28 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Call For Presentations - DNS-OARC Workshop, Thailand, Bangkok, 12th/13th May 2019
by Sebastian Castro 05 Dec '18

05 Dec '18

(Apologies in advance if you see this message from multiple mailing lists) The 30th DNS-OARC Workshop will take place at the Shangri-La Hotel, Bangkok, Thailand, on May 12th and 13th 2019, hosted by ICANN. (Note that several co-located meetings are taking place immediately prior to the DNS-OARC Workshop, including the GDD Industry Summit, May 6th-9th, the Registrations Operations Workshop, May 9th, and the ICANN DNS Symposium, May 10th-11th.) The Workshop's Program Committee is now requesting proposals for presentations. All DNS-related subjects are welcome. A time slot will also be available for lightning talks (5-10 minutes) on day two of the workshop for which submissions will be accepted until the start of the morning session on day two. There will be a Members-only session during the workshop, which will include reports on DNS-OARC's activities. If you are an OARC member and have a sensitive topic that you wish to present during that session those can be accommodated. Workshop Milestones: 05 Dec 2018 - Submissions open via Indico 22 Feb 2019 - Deadline for submission 01 Mar 2019 - Initial Contribution list published 22 Mar 2019 - Full agenda published 03 May 2019 - Deadline for slides submission 12 May 2019 - Workshop Details for presentation submission are published here: <https://indico.dns-oarc.net/event/31/call-for-abstracts/> The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Shumon Huque, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Call for Interests to New Zealand SDN Workshop February 13th and 14th 2019 Wellington NZ
by William Liu 27 Nov '18

27 Nov '18

Call for Interests to New Zealand Software-Defined Networking (SDN) Workshop, February 13th and 14th, 2019 , Victoria University, Wellington. The workshop information can be found here (the Google Docs link is shortened by bitly): http://bit.ly/sdncon3 If with any inquire please do not hesitate to contact Associate Professor Dr Ian Welch <ian.welch(a)vuw.ac.nz<mailto:ian.welch(a)vuw.ac.nz>>. Cheers Will(a)AUT, NZ

1 0

KMZ help
by Mehmet Akcin 27 Nov '18

27 Nov '18

NZNOG friends, I am looking for help for https://dev.networkatlas.org project in NZ. I can't seem to be able to collect KZMs from people ;) if you are able to help us get KMZs (terrestrial) it would be great. thanks bunch in advance. ps; if you want to help in any other way, please reach out. mehmet

1 0

NZNOG 2019 registrations are open
by Dave Mill 26 Nov '18

26 Nov '18

Hi NZNOG 2019 registrations are open. Early bird pricing available for a limited time only! https://nznog-2019.lilregie.com/booking/attendees/new Conference details : http://www.nznog.org/nznog-2019 Current speakers (will be updated as we accept or pester more speakers) : http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers Accommodation : http://www.nznog.org/nznog-2019/nznog-2019-accommodation Hopefully see you there. Cheers Dave

1 0

Cisco routers for Beer
by Stuart Pigneguy 23 Nov '18

23 Nov '18

Hi All, Long time lurker here, just a quick note to see if anyone wants four Cisco 1720 routers before they go in the e-waste bin? There may also be other older Cisco kit on offer (Pix, switches etc). If there is interest please contact me off list with offers of postage and maybe beer, I am located in New Plymouth. Cheers, Stuart.

4 3

NZNOG 2019 update - registrations opening very soon
by Dave Mill 21 Nov '18

21 Nov '18

Hi all The NZNOG conference is being held in Napier during the week of 28 Jan to 1 Feb, 2019. The conference proper is held on the Thursday and Friday. Pricing and overview here - http://www.nznog.org/nznog-2019 We have scouted out accommodation for you - http://www.nznog.org/nznog-2019/nznog-2019-accommodation We have 3 different workshops available prior to the conference proper - http://www.nznog.org/nznog-2019/nznog-2019-workshop-and-tutorials We have accepted various talks and are starting to publish details on the following page - http://www.nznog.org/nznog-2019/nznog-2019-conference-speakers If you haven't submitted a talk and are still keen please do so. We still have some time available. Registrations will open very soon! Feel free to book your travel and accommodation in the meantime. We have much more space for the conference proper than last year. Cheers Dave

1 0

Invitation to the free Domain Name Abuse Forum 27 November 2018 Wellington and evening stakeholder event
by Sebastian Castro 11 Nov '18

11 Nov '18

Hello NZNOG Community: InternetNZ and the Domain Name Commission are hosting a forum on domain name abuse issues in Wellington on Tuesday 27 November. There are various forms of abuse - content, infrastructure, and registration related - where the Domain Name System faces challenges, including challenges where other parties in the Internet ecosystem need to be part of the solution. This note is to let you know about the event as I thought it might be of interest to you. The programme draft is on our site along with registration at https://internetnz.nz/event/domain-name-abuse-forum Kind Regards, -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Spoofer Report for NZNOG for Oct 2018
by CAIDA Spoofer Project 08 Nov '18

08 Nov '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Oct 2018: none inferred Source Address Validation issues inferred during Oct 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-10-04 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Network atlas november 2018 update
by Mehmet Akcin 06 Nov '18

06 Nov '18

Hello everyone, We wanted to share several updates about our project Network Atlas with you. First of all we are very excited to announce now our page has many more features (and more to come) and hosted in a much more robust platform at www.networkatlas.org We've recently made a press release about our project , https://finance.yahoo.com/news/network-atlas-launches-map-global-221500875.… Now we are working on two major tracks 1) Raising funds via sponsorship and our kickstarter to be able to afford future of developments. 2) Talking to engineers , network professionals to understand what would make this tool better everyone. As you might be already aware we have a slack channel you can join and discuss/help the project. here is the slack channel link - https://join.slack.com/t/kapany/shared_invite/enQtNDUwOTIzMDEwODM4LWE5NjNmO… Overall we need network operators who have access to networks/fibre/route information and operational status as we are developing our self service portal which via GUI and API will enable you to be able to provide status of global fibre optic cables, and receive updates the same way. For more information about this project, and other ideas feel free to join our slack or email me directly at mehmet(a)networkatlas.org thank you and we will follow up with further updates in December 2018! We are very excited how far we came so far providing more visibility already ( even though we are just in demo state ) Mehmet Network Atlas https://angel.co/mhmtkcn

1 0

TICSA annual update required in November
by ticsa＠police.govt.nz 04 Nov '18

04 Nov '18

Hello NZNOG A reminder to all New Zealand Network Operators that it is November again, which means its time for your Designated Contacts to ensure the Chief Executive completes your annual TICSA update. Complete the update here -- TICSA Registration Portal: https://services.police.govt.nz/ticsa Information -- Police TICSA webpage: https://www.police.govt.nz/advice/businesses-and-organisations/ticsa Portal Issues -- Contact NZ Police TICSA Team: https://forms.police.govt.nz/forms/contact-ticsa-registrar/57 TICSA Legislation - Link to the act: http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5177923.html Excerpt from the act: ------------------------------------------------------------------------------------------------------ 69 Annual update (1) A network operator must give to the Registrar each year in November an annual update of information on the register relating to that operator. (2) The annual update must— (a) specify any changes to the information referred to in section 62 that have occurred since the network operator last gave information to the Registrar (whether in a notice under section 68, the previous annual update, or an application under section 61); and (b) confirm that, apart from the changes under paragraph (a), all other information referred to in section 62 that is currently held by the Registrar remains correct; and (c) be in the form (if any) required by the Registrar; and (d) be accompanied by a certificate signed by the chief executive of the network operator confirming that the information contained in the annual update is true and correct. (3) An annual update does not need to be provided in the year during which this section comes into force. ------------------------------------------------------------------------------------------------------ Thank you NZ Police TICSA Team. =============================================================== WARNING The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately

1 0

Papamoa UFF fibre outage
by Jesse Archer 31 Oct '18

31 Oct '18

Hey All, Did anyone get more details (or photos!) on the massive Ultrafast Fibre outage in Papamoa? https://ultrafastfibre.statuspage.io The fibre strike happened on Monday afternoon, the outage looks set to be resolved tonight (more than 48 hours since the outage began) which must be a record on the UFF network to date. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

5 5

NZNOG2019 CFP
by Richard Nelson 24 Oct '18

24 Oct '18

Yep, it is that time again... The NZNOG trustees invite papers for the 16th annual NZNOG conference, to be hosted at the Napier Conference Centre on 31 Jan and 1 Feb 2019. With the conference there will be a three day Workshop 28-30 Jan and a day of tutorials on 30 Jan. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in talks that involve real world deployment experience, particularly in New Zealand. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 29 Oct. Please provide your talk title, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements you need to let us know at submission time To submit your paper please e-mail: talks(a)nznog.org Proposals will be evaluated on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog-2019/call-for-papers-2019 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

2 1

Re: [nznog] Hurricane Electric joining APE
by Sid Jones 23 Oct '18

23 Oct '18

FYI: We will be standing up the first session tomorrow from 10am rs2.ape.nzix.net 192.203.154.2 2001:7fa:4:c0cb::9a02 From: <nznog-bounces(a)list.waikato.ac.nz> on behalf of Todd Dickason <todd.dickason(a)citylink.co.nz> Date: Thursday, 18 October 2018 at 17:31 To: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> Subject: [nznog] Hurricane Electric joining APE Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

4 5

Re: [nznog] Hurricane Electric joining APE
by Walt 19 Oct '18

19 Oct '18

We are very close When we do go live we value bilateral sessions more than over the route servers Please email peering(a)he.net to get a bilateral session Thanks Walt From: <nznog-bounces(a)list.waikato.ac.nz<mailto:nznog-bounces(a)list.waikato.ac.nz>> on behalf of Todd Dickason <todd.dickason(a)citylink.co.nz<mailto:todd.dickason(a)citylink.co.nz>> Date: Wednesday, October 17, 2018 at 9:31 PM To: "nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>" <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Hurricane Electric joining APE Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

1 0

Hurricane Electric joining APE
by Todd Dickason 17 Oct '18

17 Oct '18

Hello APE peers (and NZNOG), A heads up from CityLink Peering (http://nzix.net) Hurricane Electric (AS6939) are in the process of connecting to the Auckland Peering Exchange (APE) and you can expect to see an increase in the number of prefixes once they're connected. We'll send another post to NZNOG when we've a confirmed turn-up date. We're going to follow the sensible lead of ix.nz here (credit where it's due Joe) and only open the filters for Hurricane Electric up on one of our route servers (rs2.ape.nzix.net) initially. We'll open up rs1.ape.nzix.net when we see all peers functioning normally on rs2.ape.nzix.net. Hurricane Electric have advised us that they will advertise approximately 28,000 IPv6 routes and up to 57,000 IPv4 routes initially. Additionally they've suggested prefix limit adjustments to cater for increases from them of 65k IPv6 and 175k IPv4 routes. FYI: our details AS9560 rs1.ape.nzix.net, 192.203.154.1, 2001:7fa:4:c0cb::9a01 rs2.ape.nzix.net, 192.203.154.2, 2001:7fa:4:c0cb::9a02 Any queries for our customers who are on-list please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>. Cheers Todd CityLink/TeamTalk Ops

1 0

Internet for Kiwicon
by Mike Forbes 15 Oct '18

15 Oct '18

Could I have some contacts off list that would be willing to help out Kiwicon with a dedicated / reliable / fast internet link? Requirements are a fast (at least 100Mbit) connection and mostly international traffic (video streaming, CTF hosted in AWS Sydney) We're operating out of the Michael Fowler Centre in Wellington on the 15/16/17 November. The building is lit with Citylink fibre but Citylink are unable to help. Kiwicon is non profiting but we do have cash to make this happen, and i'd like to get it sorted! Thanks, Mike

1 0

LCA2019 Sysadmin Miniconf -- Call for Presentations
by Ewen McNeill 10 Oct '18

10 Oct '18

Linux.Conf.Au 2019 is being held in Christchurch, New Zealand near the end of January 2019 (21-25 January), the week before NZNOG 2019 (http://www.nznog.org/nznog-2019) -- thanks to NZNOG for moving from their regular slot to make it possible for those of us who like to attend both conferences. LCA2019 early bird tickets are on sale this month (https://linux.conf.au/attend/tickets/) As usual at LCA, we (Simon Lyall and I) are running a System Administration Miniconf as part of LCA2019, and I'd be quite keen to see some networking-related presentations. Perhaps someone would like to talk about GNS3 for network lab simulation? Or using Ansible / Salt for network configuration automation? Or anything around network monitoring/management. Or high performance networking on commodity hardware controlled by Linux? The LCA2019 Sysadmin Miniconf Call for Presentations is at: http://sysadmin.miniconf.org/cfp19.html and the text is included below for your convenience. Ewen PS: The Sysadmin Miniconf is part of LCA2019, so you'll need a ticket to LCA2019 to attend/speak the Sysadmin Miniconf or any other LCA2019 Miniconf. -=- cut here -=- Call for Presentations Linux.conf.au 2019 Systems Administration Miniconf There will be a one day mini conference on Linux Systems Administration held as part of linux.conf.au 2019. LCA2019 will be held in Christchurch, New Zealand on 21 - 25 January 2019. The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. This is our 13th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website: https://sysadmin.miniconf.org/. Presentation Topics =================== We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments large and small. Topics for presentations could include (but are not limited to): Virtualisation and Cloud Computing Kubernetes / Docker / Containers / Orchestration Infrastructure/Platform/Software as a Service (IAAS, PAAS, SAAS) Sysadmin Administration in a "serverless" environment (FAAS) DevOps and SysAdmin Culture Systems Administration Best Practice Monitoring and metrics. Collection, storage and presentation Networkng: IPv6, SDN (Software Defined Networking), performance DevOps, Configuration Management and provisioning Bootstrapping systems, Lifecycle Management Dealing with BYOD Backups in a virtual/distributed world Troubleshooting techniques Keeping legacy systems functioning War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in professional Unix/Linux administration (many in the audience will have decades of experience). Format of Presentations ======================= We are now seeking proposals for presentations at the mini-conference. We have openings for: 15-25 minute short presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA opening before morning tea), we expect the majority of available timeslots to be 20 minutes or less, with possibly 1-2 slightly longer talks if there is space in the schedule. We have a general policy of accepting a high proportion of proposals but handing out relatively short timeslots. Please see previous years Miniconf schedules for examples of how the programme is organised. Submitting talks ================ Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up by the time the conference happens) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor to priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. To submit a talk to the LCA2019 Sysadmin Miniconf, create an account on the LCA2019 website: https://linux.conf.au/dashboard create a speaker profile, and then select "SysAdmin Miniconf Talk" (in the "New Proposal" section of the Dashboard), or while logged into the LCA2019 site, go directly to: https://linux.conf.au/proposals/submit/sysadmin-miniconf/ Please pick a preferred length for your presentation from Short Presentation (15/20/25 minutes) or Lightning Talk (5/10 minutes) in the submission form; if you could do either (with more or less detail) use the Private Abstract field to describe the options and what you would prefer. In some cases we maybe able to add a few extra minutes to a few Short Presentations if there is any spare time left in the programme. Use the Private Abstract field to let us know a few more minutes would be useful for your presentation. Questions should be sent to: lca2019 at sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions, priority (both of inclusion and scheduling) will be given to presentations submitted by 23:59 (any time zone) on 31st of October 2018. If you have a good presentation idea, please let us know early, even if you need time to finalise the presentation abstract. Please let us know directly if you need an early confirmation to assist you in arranging time off work or travel; we will do our best to help. 2018-10-31 - Deadline for early submissions 2018-11-18 - Deadline for submissions 2018-12-04 - LCA2019 Sysadmin Miniconf programme published 2019-01-21 - LCA2019 Sysadmin Miniconf held (Christchurch, NZ) Contact and Questions ===================== Please see our website at https://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2019 at sysadmin.miniconf.org -=- cut here -=-

1 0

new subnet not accepted by smx
by Paul Willard 09 Oct '18

09 Oct '18

Anybody here from smx? I'm advertising a new subnet. Upstream (vocus) suggests that smx may have incorrect routes? Contact me off list paul(a)paulwillard.nz

1 0

KSK Roll coming 12th October
by Jay Daley 09 Oct '18

09 Oct '18

For those of you who don’t know, the KSK Roll is happening starting at 5am on 12th October (11th October 16:00 UTC). More details here https://www.icann.org/resources/pages/ksk-rollover The quick guide on how to check/prepare your DNS servers is https://www.icann.org/en/system/files/files/ksk-rollover-quick-guide-prepar… cheers Jay -- Jay Daley jay(a)daley.org.nz +64 21 678840 skype: jaydaley twitter: @jay_daley linkedin: www.linkedin.com/in/jaydaley

1 1

Spoofer Report for NZNOG for Sep 2018
by CAIDA Spoofer Project 08 Oct '18

08 Oct '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Sep 2018: ASN Name Fixed-By 4764 wideband-as-au 2018-09-01 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2018: ASN Name First-Spoofed Last-Spoofed 131291 LANWORXLIMITED 2018-09-21 2018-09-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

IPv6 / Cisco ASA / 2degrees UFB
by Bill Walker 06 Oct '18

06 Oct '18

Hi All, I’ve been quite happily running a Cisco router at home on Snap/2degrees, but with the upgrade to UFB its not coping with the throughput. I’ve managed to locate a suitably equipped ASA, however I cant get IPv6 going. The config I have on the ASA is very similar to that of the router: nterface GigabitEthernet0/7 description 2degrees nameif EXTERNAL security-level 0 no ip address ciscoasa# sh run int gi0/7.10 ! interface GigabitEthernet0/7.10 description 2degrees vlan 10 nameif 2degrees10 security-level 0 pppoe client vpdn group 2degrees ip address pppoe setroute ipv6 address autoconfig ipv6 address dhcp ipv6 enable ipv6 dhcp client pd 2degrees-v6 However, if I remember correctly the IPv6 dhcp assignment happens inside the PPPoE connection once its established. Can anyone confirm that or provide a working config? In case someone wants versions, the ASA is on 9.9.2 (asa992-smp-k8.bin) Thanks, Bill Sent from Mail for Windows 10

6 8

Re: [nznog] Comcom/Samknows broadband testing from a different perspective
by Brian Cole 01 Oct '18

01 Oct '18

Hi all, Longtime listener; first time caller. I signed up to SamKnows (partly out of curiosity and partly so I can have hard data about my connection that I pay for) at home. Over the last week my connection has gone from slightly adequate with the occasional drop out to a slow connection with regular drop outs. Netflix and YouTube are stuttering, video games drop connection, and websites hang at random times. I can't help but think that the email shared by Dylan sheds some light on why that maybe. This programme won't be terribly successful if everyone gets sick of having a terrible connection during peak hours and shuts the white box down. Pretty frustrating. Brian -- *Brian Cole* */** Research Projects Developer* *Research & Enterprise **/** Research Office **/** University of Waikato* *Private Bag 3105* */* *Hamilton 3240* */* *New Zealand**www.waikato.ac.nz* <http://www.waikato.ac.nz/> */* *mob + 64 21 049 9183**email brian.cole(a)waikato.ac.nz <brian.cole(a)waikato.ac.nz> *

10 13

Comcom/Samknows broadband testing from a different perspective
by Dylan Hall 26 Sep '18

26 Sep '18

Hi all, I'm wearing my REANNZ hat today. I thought I'd share what we're seeing hosting the M-Lab [1] nodes in NZ that the new Comcom/Samknows [2] broadband testing are using for some of their tests. For a start, it looks like the testing has been ramping up over the last week (see attached graph), in particular during the evening (6pm-midnight). I had assumed the testing would be evenly spread out throughout the day, but it looks like they're concentrating the testing during the busy evening period. If anyone is interested in following how that traffic grows we have publicly available graphs for the two M-Lab nodes: AKL: https://weathermap.reannz.co.nz/node.php?src=and01&int=xe_0_0_9 WLG: https://weathermap.reannz.co.nz/node.php?src=and02&int=xe_0_2_7 If you want to try out the M-Lab nodes themselves, type "speedtest" into a Google search box and there is a "Run Speed Test" option that uses M-Lab (at least in my copy of Chrome, your mileage may vary). The nodes each consist of 4 x Dell servers front ended by a Juniper QFX switch. They're connected at 10Gbps. The nodes are fully run by M-Lab, we're just providing some address space and capacity. If anyone is concerned about their connectivity to REANNZ, we're on all the major NZ exchanges (APE, WIX, CHIX, AKL-IX) where we peer with the route servers. I note Comcom have posted a FAQ [3] on their website with some more details. The nodes are also IPv6 connected with addresses allocated from 2404:138::/32. It's worth noting we've been hosting M-Lab nodes for around 5 years now, but no one from Comcom or Samknows has spoken to us about the testing so it's all come as a bit of a surprise to us. If you have any interesting information to share, we'd like to know more :) [1] https://www.measurementlab.net [2] https://comcom.govt.nz/regulated-industries/telecommunications/monitoring-t… [3] https://comcom.govt.nz/__data/assets/pdf_file/0032/98276/SamKnows-technical… Thanks, Dylan

1 0

Hello Hurricane Electric, doubling the size of our domestic table?
by Michael Fincham 18 Sep '18

18 Sep '18

Hi all, So my domestic tables now have some 76,000 prefixes in them, as of ~ 6:30 last night. I guess hello HE and welcome to AKL-IX? Domestic table for NZ was more like ~ 10,000 prefixes not that long ago! -- Michael

14 30

Juniper Lab
by Jesse Archer 16 Sep '18

16 Sep '18

Hi All, I've got some config that I'd like to lab but my own kit is tied up in a transition. Wondering if anyone has a spare MX5-MX80 they would be willing to fire up to allow me to perform some tests. Unfortunately, vMX doesn't quite work in this case. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

VPS with BGP
by Mehmet Akcin 08 Sep '18

08 Sep '18

Hello NZNOG Friends, long time. I am looking for a VPS hosting firm which support BGP advertisements for DNS anycast (for my experiement) 200GB Disk, 16 GB Memory , 4core cpu and small bandwidth running 18.04 Ubuntu Please contact me offlist if you are able offer this. thank you -- Mehmet +1-424-298-1903

1 0

Spoofer Report for NZNOG for Aug 2018
by CAIDA Spoofer Project 08 Sep '18

08 Sep '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Aug 2018: none inferred Source Address Validation issues inferred during Aug 2018: ASN Name First-Spoofed Last-Spoofed 4764 wideband-as-au 2018-08-16 2018-08-17 131291 LANWORXLIMITED 2018-08-24 2018-08-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

RFC 8145 Root Trust Anchor Reports
by Matthew Luckie 06 Sep '18

06 Sep '18

>From http://root-trust-anchor-reports.research.icann.org/ : The ICANN org is publishing the IP addresses that are sending RFC 8145 telemetry ostensibly indicating that a resolver at the reported address (or another resolver that is forwarding through the resolver at the address) is validating using only KSK-2010 as a trust anchor. Publishing these addresses allows ISPs and other organizations who know who operates resolvers at those addresses to contact the resolver operator and notify them of the need to update their DNSSEC trust anchors. Without further action, these resolvers will stop working after the root KSK is rolled on 11 October 2018. http://root-trust-anchor-reports.research.icann.org/rfc8145-addresses.txt The following ASes have their country recorded as NZ in whois, and are in the ICANN list. The following resolvers may or may not be operated by the ASN identified. 4771 Spark 122.56.234.219 122-56-234-219.mobile.spark.co.nz. 122.57.192.56 122-57-192-56-adsl.sparkbb.co.nz. 122.61.118.222 122-61-118-222-adsl.sparkbb.co.nz. 219.88.186.152 rns6.xtra.co.nz. 222.153.3.78 222-153-3-78-fibre.sparkbb.co.nz. 222.154.149.63 222-154-149-63-fibre.sparkbb.co.nz. 9500 Vodafone 203.96.208.52 akrdns2.akl.vf.net.nz. 203.96.208.61 akrdns3.akl.vf.net.nz. 203.96.208.62 akrdns4.akl.vf.net.nz. 203.96.208.91 cbrdns1.chc.vf.net.nz. 203.96.208.92 cbrdns2.chc.vf.net.nz. 210.246.17.115 210-246-17-115.dsl.dyn.ihug.co.nz. 2407:7000:ff00:5382:bd9d::1 2407:7000:ff00:5382:bd9d::2 49.224.251.45 45.251.224.49.dyn.cust.vf.net.nz. 23655 SNAP 111.69.178.254 254.178.69.111.dynamic.snap.net.nz. 111.69.195.153 153.195.69.111.dynamic.snap.net.nz. 24183 DTS 202.174.180.228 38793 2degrees 118.148.149.52 52-149-148-118.nzcomms.co.nz. 118.149.151.121 121-151-149-118.nzcomms.co.nz. 45177 Vibe 45.64.48.2 cdns-02.as45177.net. 45179 SiteHost 103.250.234.202 103-250-234-202.static.webslice.co.nz. 45267 Lightwire 114.134.0.194 114-134-0-194.lightwire.co.nz. 132347 MikiPro 2404:ab00:6:1::6 132692 GlobiCom 103.18.58.198 vpn2.torguardvpnaccess.com. 133607 Web Connect 103.51.101.28 135069 Feenix 103.208.143.164 103-208-143-164.feenix.co.nz. Further information is available at the ICANN site, and it might pay for other operators on NZNOG to double check the ICANN list. http://root-trust-anchor-reports.research.icann.org Matthew

1 0

NZNOG 2019 Workshop/Tutorials
by Dave Mill 03 Sep '18

03 Sep '18

Hi all As part of NZNOG we normally offer a 3 day workshop (Mon to Wed) and a few tutorials on the Wednesday. APNIC have the following workshops/tutorials offered at the moment. https://training.apnic.net/courses/ We're seeking feedback (on or off list) on what people may want. Note, most recently we've had a 1 day Network Security tutorial (Queenstown) and a 3 day MPLS workshop (Tauranga). Ideas for next year: -3 day Network Security -3 day Routing I -3 day SDN (5 days condensed in to 3 days) -3 day DNSSEC -1 day IPv6 essentials -1 day DNSSEC -1/2 day BGP techniques Or, what else would people like to see at NZNOG (workshop and tutorial wise) that APNIC don't offer? On-list discussion encouraged :) Cheers Dave

9 14