- NZNOG - lists.nznog.org

S92a implementation delayed, clause may be suspended.
by Juha Saarinen 22 Feb '09

22 Feb '09

http://bit.ly/3RiQL Bit.ly URL goes to Computerworld NZ. -- Juha Saarinen juha(a)saarinen.org

1 1

(Urgent) APNIC Executive Council (EC) Election this Week - We need your votes!
by Skeeve Stevens 22 Feb '09

22 Feb '09

Hey Everyone, I am here in Manila at the APRICOT 2009/APNIC 27 conference and it looks like this week is going to be a lot of fun with great people to meet as well as some very interesting things happening. The key issue I am sending this email to the AU/NZNOG and Aussie-ISP lists is to appeal to anyone who has not yet decided to, or just plain forgot to do anything about the voting power they may have as an APNIC member. We have a chance of getting two Australians onto the APNIC EC. The current membership is listed at http://www.apnic.net/ec/ and as you can see, it would be massively beneficial if we had some Australian representation. Our two nominations are James Spenceley<http://meetings.apnic.net/elections/james-spenceley.html> from Vocus Communications (www.vocus.com.au<http://www.vocus.com.au>) and David Woodgate<http://meetings.apnic.net/elections/david-woodgate.html> from Telstra. Both of these guys have both been involved in internet policy making for a VERY long time and are both worthy for the positions available on the EC. They are very respected in the Internet Community, both in Australia and NZ and the world over, both having presented policies an given talks at many conferences. If you don't know them and want some more information, please refer to their Nomination profiles by clicking on their names above. There are 10 nominations and 4 positions available with 1 re-standing with most of the nominees are people from countries with massive populations and large voting power such as China, India and so on. If we have any chance to get Australia/NZ to have some involvement in influencing the direction of internet governance and policy going forward, it is time we stood up and did something with out votes instead of wasting them. To me, it doesn't matter if you like or dislike either James or David, have a past or future with these guys, but if you want to support the Internet community in Australia and New Zealand as a whole, I think that these guys are will represent the issues of Australia/New Zealand very well and certainly worth the 5 minutes to fill out the proxy form and help get them elected. Details about the current election are here: http://meetings.apnic.net/elections/index.html The list of current nominations are as listed at: http://www.apnic.net/news/2009/0216a.html If you wish to contribute your votes there are two ways. You can assign proxy, or you can vote online using MyAPNIC, but many have not registered for this, and it is too late now if you already have not. I am happy to be the person for you to allocate your votes to, which you can do once off for this election by using the Proxy Form included. Please note: A proxy appointment is valid only for a single election, so I can only vote for you in this one case. You are not assigning me permanent voting rights for your organisation. If you didn't receive the attached Proxy form you can download a pre-filled one with my details from http://www.eintellego.net/apnic/APNIC27VoteProxySkeeve.pdf, or failing that, use my details below - don't forget to inform me if you are sending me your proxy as I need to know what members I am collecting the forms for. For details: http://meetings.apnic.net/elections/about/proxy.html are the official details on assigning your proxy votes. If you don't know your membership level as it is right now, Aussies please check http://www.apnic.net/apnic-bin/memlist.pl?size=&cc=au&sort=ascending or for the Kiwi's http://www.apnic.net/apnic-bin/memlist.pl?size=&cc=nz&sort=ascending which will show you what APNIC considers your membership level to currently be. Note: You may have more resources than your current level, but your annual membership might not have come up yet. All your votes are useful, even if you are an associate with only 1 vote as they all add up and elections can come down to just a couple of votes. The number of votes you have are as follows: Associate 1 Very small 2 Small 4 Medium 8 Large 16 Very large 32 Extra large 64 My voting will be for James and David, but with the excess votes, I will be following their advice on who else should be supported. If you know anyone on that membership list who isn't using those votes, please contact them... the larger the members the better as it is less work, but every single vote counts. Forward this email to them and they might have the 5 minutes to fill it out. Just remember, it has to be completed by the Corporate Contact. Also, this has to be done today or tomorrow... please spare the 5 minutes to help us have a say in our own future as ISP's and internet community members. If you have any questions, please send them and I will get back to you asap ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

1 0

UPDATE: CCIP Alert: Adobe Acrobat unpatched vulnerability
by Paul McKitrick 21 Feb '09

21 Feb '09

UPDATE: Apologies for the previous email that contained the wrong content. Good Afternoon, For those of you who are not already aware, CCIP would like to bring your attention the critical vulnerability in Adobe Reader and Adobe Acrobat that could potentially allow an attacker to take control of the affected system which was released on February 19: http://www.adobe.com/support/security/advisories/apsa09-01.html CCIP is releasing this alert as it has been made aware of active exploitation of this vulnerability in the wild. Adobe have stated that they are expecting to release an update by 11 March 2009 for Adobe 9 and updates for other versions (8 and 7) to follow soon after. Adobe has reported that the following versions are affected: * Adobe Reader 9 and earlier versions * Adobe Acrobat Standard, Pro, and Pro Extended 9 and earlier versions Shadowserver have a write up on their website: http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219 The US-CERT write up (https://www.kb.cert.org/vuls/id/905281) includes the following mitigation advice: Disable JavaScript in Adobe Reader and Acrobat Disabling Javascript may prevent this vulnerability from being exploited. Acrobat JavaScript can be disabled in the General preferences dialog (Edit -> Preferences -> JavaScript and un-check Enable Acrobat JavaScript). Some vendors ship javascript support in a seperate package. Removing this package may remove javascript support in the Adobe PDF reader. Prevent Internet Explorer from automatically opening PDF documents The installer for Adobe Reader and Acrobat configures Internet Explorer to automatically open PDF files without any user interaction. This behavior can be reverted to the safer option of prompting the user by importing the following as a .REG file: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\AcroExch.Document.7] "EditFlags"=hex:00,00,00,00 Disable the displaying of PDF documents in the web browser Preventing PDF documents from opening inside a web browser may mitigate this vulnerability. If this workaround is applied to updated versions of the Adobe reader, it may mitigate future vulnerabilities. To prevent PDF documents from automatically being opened in a web browser: 1. Open Adobe Acrobat Reader. 2. Open the Edit menu. 3. Choose the preferences option. 4. Choose the Internet section. 5. Un-check the "Display PDF in browser" check box. Do not access PDF documents from untrusted sources Do not open unfamiliar or unexpected PDF documents, particularly those hosted on web sites or delivered as email attachments Regards, The CCIP Team -- Centre for Critical Infrastructure Protection Government Communications Security Bureau P: +64 4 498 7654 F: +64 4 498 7655 E: info(a)ccip.govt.nz I: www.ccip.govt.nz --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

1 0

CCIP Alert: Adobe Acrobat unpatched vulnerability
by Paul McKitrick 21 Feb '09

21 Feb '09

Good Afternoon, For those of you who are not already aware, CCIP would like to bring your attention the the Critical Microsoft Security Bulletin MS09-002 that was released on February 10: http://www.microsoft.com/technet/security/bulletin/ms09-002.mspx Microsoft have announced a vulnerability in Internet Explorer 7 that could allow remote code execution if a user views a specially crafted Web page. Administrators are advised to patch immediately. Microsoft have rated as Critical for Window XP and Windows Vista and as Moderate for Windows Server 2003 and Windows Server 2008. CCIP is releasing this alert as it has been made aware of active exploitation of this vulnerability in the wild. Due to the recent impact of the Conficker worm CCIP wants to ensure that there is awareness of the active exploitation of MS09-002 and to encourage the patching of systems if they have not already been patched. AusCERT have a write up on their website: http://www.auscert.org.au/render.html?it=10477 There is also a write up on the Sourcefire Vulnerability Research Team’s blog: http://vrt-sourcefire.blogspot.com/2009/02/ms09-002-in-wild.html Regards, The CCIP Team -- Centre for Critical Infrastructure Protection Government Communications Security Bureau P: +64 4 498 7654 F: +64 4 498 7655 E: info(a)ccip.govt.nz I: www.ccip.govt.nz --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

1 0

CCIP ALERT: Exploitation of MS09-002
by Paul McKitrick 21 Feb '09

21 Feb '09

Good Afternoon, For those of you who are not already aware, CCIP would like to bring your attention the the Critical Microsoft Security Bulletin MS09-002 that was released on February 10: http://www.microsoft.com/technet/security/bulletin/ms09-002.mspx Microsoft have announced a vulnerability in Internet Explorer 7 that could allow remote code execution if a user views a specially crafted Web page. Administrators are advised to patch immediately. Microsoft have rated as Critical for Window XP and Windows Vista and as Moderate for Windows Server 2003 and Windows Server 2008. CCIP is releasing this alert as it has been made aware of active exploitation of this vulnerability in the wild. Due to the recent impact of the Conficker worm CCIP wants to ensure that there is awareness of the active exploitation of MS09-002 and to encourage the patching of systems if they have not already been patched. AusCERT have a write up on their website: http://www.auscert.org.au/render.html?it=10477 There is also a write up on the Sourcefire Vulnerability Research Team’s blog: http://vrt-sourcefire.blogspot.com/2009/02/ms09-002-in-wild.html Regards, The CCIP Team -- Centre for Critical Infrastructure Protection Government Communications Security Bureau P: +64 4 498 7654 F: +64 4 498 7655 E: info(a)ccip.govt.nz I: www.ccip.govt.nz --- This e-mail contains official New Zealand Government information, which is intended for the use of addressees only. If you have received this e-mail in error, please notify the sender immediately and delete. You should not further disseminate, distribute or copy this e-mail in any way. ---

1 0

NZNOG-09 Videos
by Richard Naylor 20 Feb '09

20 Feb '09

Video and audio (MP3) from NZNOG 09 is available at http://www.r2.co.nz/20090129/ There is both streamed and downloadable versions, and versions in wmv, MP4 and MP3. One talk was not recorded at the request of the presenter. The video isn't too bad - the lighting was a challenge, and there was no one driving the audio desk, so the feed we got varied a little. But it should be quite usable for those who couldn't make it. Richard

1 0

Voting process
by Skeeve Stevens 19 Feb '09

19 Feb '09

Just a quick question about the APNIC EC elections. If someone has a lot of votes/proxies, and they don't get up, are they able to pass their votes to someone else? ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

8 8

New Telstra transparent proxy/config?
by Joel Wiramu Pauling 19 Feb '09

19 Feb '09

Over the last 24-48 hours I have noticed that I am seeing my IP being mis-represented quite often as 203.98.50.27 which appears to be a new upstream proxy hop I have not seen before: traceroute to 203.98.50.27 (203.98.50.27), 30 hops max, 40 byte packets 1 121-73-24-1.cable.telstraclear.net (121.73.24.1) 18.037 ms 17.681 ms 17.413 ms 2 ae0-840.ie4.telstraclear.net (203.167.223.114) 12.952 ms 12.781 ms 12.475 ms 3 ge-1-2-0-843.ie1.telstraclear.net (218.101.61.105) 21.357 ms 20.910 ms 20.661 ms 4 203.98.50.27 (203.98.50.27) 24.332 ms 24.066 ms 23.950 ms I have noticed it preventing non http traffic flowing across port 80 (netcat to amazon cloud), as well as interfering with stun and various other bits and pieces, (incoming and outgoing connections to/from local webserver take longer than usual) Can anyone confirm similar behaviour who is on Telstra cable network, or have further details. Appears to be a netcache proxy. Proxy Server Details: 1.1 nc2 (NetCache NetApp/6.0.5P1) Kind regards -JoelW

5 6

S92A - Public demonstration at MIDDAY parliament grounds
by Andrew Ruthven 18 Feb '09

18 Feb '09

[Forwarded, very last minute, sorry for the late warning] Hi folks, So today there is a public demonstration at MIDDAY on Parliament grounds in support of MPs speaking against Section 92A. Details are here: http://creativefreedom.org.nz/story.html?id=127 "In Wellington on the steps of Parliament on Thursday 19th at MIDDAY with a petition handover at 12:30pm. This is a postive event where we will hand out hundreds of CDs and thank the politicans that support us - so please keep it friendly and polite. While we appreciate people arranging their own demonstrations it might be best if we don't dilute our numbers with multiple events. We want everyone reading this to email everyone they know in Wellington about this. We can't let this be another internet protest that results in few people turning up. This is important so we need to prove it in numbers. NOTE: Please don't wear all black as that has negative associations with other demonstrations but instead come along with bright clothes and BLACK PLACARDS!" As an example of how to be awesome do this: http://coffee.geek.nz/public-demonstration.html Now here's the sobering bit... We need everyone you can get to be there. This is a lot about establishing the credibility of the anti-S92A voice in numbers. If you can bring your friends and co-workers that's the kind of thing that will make this work. We need all of your support -- don't think that other will do it -- we need you to be there MIDDAY. Thanks, Matthew Holloway Creative Freedom -- Andrew Ruthven, Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2010 | Follow the signs. Visit Wellington! | http://www.penguinsvisiting.org.nz

2 1

NZRR Route Registry Update
by NZRR Database Notifications 18 Feb '09

18 Feb '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES6:AS131110 descr: Route set advertised to AS9439 by Slush Technologies - AS131110 mp-members: 2001:4410:2005:0:0:0:0:0/48^48-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: dene(a)slush.ca mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20080910 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES6:AS131110 descr: Route set advertised to AS9439 by Dane Foster - AS131110 mp-members: 2001:4410:2005:0:0:0:0:0/48^48-64, 2001:0470:a080:0:0:0:0:0/48^48-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: dane(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090219 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 16 Feb '09

16 Feb '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24183 descr: advertised to AS9439 by DTS Ltd - AS24183 members: 202.68.80.0/20^20-29, 210.48.160.0/20^20-29, 117.18.80.0/21^21-29, 202.20.0.0/21^21-29, 202.27.88.0/23^23-29, 202.174.178.0/23^23-29, 202.174.184.0/23^23-29, 202.174.190.0/23^23-29, 192.173.17.0/24^24-29, 202.27.90.0/24^24-29, 202.36.137.0/24^24-29, 202.36.173.0/24^24-29, 202.37.197.0/24^24-29, 203.170.56.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: vaa(a)dts.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090120 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24183 descr: advertised to AS9439 by DTS Ltd - AS24183 members: 202.68.80.0/20^20-29, 210.48.160.0/20^20-29, 117.18.80.0/21^21-29, 202.20.0.0/21^21-29, 202.27.88.0/23^23-29, 202.174.178.0/23^23-29, 202.174.184.0/23^23-29, 202.174.190.0/23^23-29, 192.173.17.0/24^24-29, 202.27.90.0/24^24-29, 202.36.137.0/24^24-29, 202.36.173.0/24^24-29, 202.37.197.0/24^24-29, 203.170.56.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: vaa(a)dts.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090217 source: NZRR ------------------------------------------------------------

1 0

FileMaker Pro 10 - now with IPv6
by Skeeve Stevens 15 Feb '09

15 Feb '09

Hey all, Just a bit of data for you network guys and application hosting guys out there... Filemaker Pro 10 which has just been released is saying that it "Complies with Internet Protocol Version 6 standards." http://www.filemaker.com/products/fmp/all_features.html Good to see mainstream applications adopting and promoting it. -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

10 14

2009 APNIC EC Election – Voting criteria
by Srinivas (Sunny) Chendi 12 Feb '09

12 Feb '09

_______________________________________________________________________ 2009 APNIC EC Election – Voting criteria _______________________________________________________________________ The APNIC Executive Council (EC) 2009 elections will be held at the APNIC Member Meeting (AMM) on Friday, 27 February 2009. The members whose positions are up for reelection are Kuo-Wei Wu, Kusumba Sridhar, Mao Wei, and Ming-Cheng Liang. Voting criteria --------------- Only APNIC Members or their assigned proxies may vote at the EC elections. Voting may be done online using MyAPNIC, or onsite with a paper ballot at the AMM. By default, all voting rights are controlled by the Member’s Corporate Contact. To cast a vote the Corporate Contact may vote themselves, or may assign voting rights to another registered APNIC contact (using MyAPNIC), or appoint external representatives as a proxy to vote on their behalf. A proxy voter may be any individual and need not be an employee of the Member organization or APNIC Members in their own right. A proxy appointment is only valid when confirmed by the APNIC Secretariat. Proxy voters may only vote onsite and must be registered for the AMM. For more information about appointing a proxy, see http://meetings.apnic.net/elections/about/proxy.html Online voting ------------- Online voting opens on 16 February 2009 and closes on 25 February 2009 (09:00 UTC+8, Manila time). It is only available with valid digital certificate access to the MyAPNIC Member website. An online vote cannot be withdrawn after it has been submitted. Onsite voting ------------- Onsite voting takes place at the AMM on 27 February 2009. Ballots can be collected by the Corporate Contact, a Member representative with voting rights assigned by the Corporate Contact, or a proxy voter. For more on how to vote and the list of current nominees, see http://meetings.apnic.net/elections/about/voting/how.html Regards -------------------------------------------------------------------- Srinivas (Sunny) Chendi email: sunny(a)apnic.net External Relations Manager, APNIC sip: sunny(a)voip.apnic.net http://www.apnic.net ph/fx: +61 7 3858 3100/99 ____________________________________________________________________ * Join us for APNIC 27 in Manila, 23-27 February 2009! * A fun week of workshops, seminars, and policy discussion awaits! * * For more information, see: http://meetings.apnic.net ____________________________________________________________________

1 0

NZRR Route Registry Update
by NZRR Database Notifications 11 Feb '09

11 Feb '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by Maximum Internet Ltd - AS9889 members: 123.100.64.0/18^18-29, 124.198.128.0/18^18-29, 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 114.134.160.0/20^20-29, 202.55.96.0/20^20-29, 114.134.176.0/21^21-29, 119.47.112.0/21^21-29, 202.189.160.0/21^21-29, 113.197.64.0/22^22-29, 122.102.108.0/22^22-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 117.53.150.0/23^23-29, 202.49.88.0/23^23-29, 203.84.134.0/23^23-29, 210.54.142.0/23^23-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.8.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.162.0/24^24-29, 202.37.181.0/24^24-29, 202.37.232.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.12.15.0/24^24-29, 203.97.42.0/24^24-29, 205.233.243.0/24^24-29, 210.54.13.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20081219 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by Maximum Internet Ltd - AS9889 members: 123.100.64.0/18^18-29, 124.198.128.0/18^18-29, 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 112.109.64.0/20^20-29, 114.134.160.0/20^20-29, 119.47.112.0/20^20-29, 202.55.96.0/20^20-29, 112.109.80.0/21^21-29, 114.134.176.0/21^21-29, 202.189.160.0/21^21-29, 113.197.64.0/22^22-29, 122.102.108.0/22^22-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 117.53.150.0/23^23-29, 202.49.88.0/23^23-29, 203.84.134.0/23^23-29, 210.54.142.0/23^23-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.8.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.162.0/24^24-29, 202.37.181.0/24^24-29, 202.37.232.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.12.15.0/24^24-29, 203.97.42.0/24^24-29, 205.233.243.0/24^24-29, 210.54.13.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090212 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 10 Feb '09

10 Feb '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS42 descr: Route set advertised to AS9560 by PCH1 - AS42 members: 192.36.148.0/24^24-29, 194.146.106.0/24^24-29, 194.146.107.0/24^24-29, 194.146.108.0/24^24-29, 199.7.77.0/24^24-29, 199.7.64.0/24^24-29, 204.61.210.0/24^24-29, 204.61.210.0/23^23-29, 204.61.212.0/23^23-29, 204.61.216.0/23^23-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: scg(a)pch.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050302 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS42 descr: advertised to AS9560 by Packet Clearing House - AS42 members: 74.80.64.0/18^18-29, 199.249.112.0/20^20-29, 204.61.216.0/23^23-29, 198.182.167.0/24^24-29, 199.7.64.0/24^24-29, 199.7.77.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)pch.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090211 source: NZRR ------------------------------------------------------------

1 0

Nominations for APNIC Executive Council closes soon
by Srinivas (Sunny) Chendi 05 Feb '09

05 Feb '09

_______________________________________________________________________ Nominations for APNIC Executive Council closes soon _______________________________________________________________________ Nominations for four positions open for election on the APNIC Executive Council (EC) will close on 13 February 2009 (17:30 UTC+10). Nominees do not have to be representatives of members, but only APNIC members may nominate and vote for candidates. The EC positions up for reelection are Kuo Wei Wu, Kusumba Sridhar, Mao Wei, and Ming-Cheng Liang. Nominations must be made using the online nomination form: http://meetings.apnic.net/elections/nominate.html The election will be held at APNIC 27 on Friday, 27 Febrary 2009. For more information on nominations received, proxy registration, current EC members, and the role of the EC, please refer to: http://meetings.apnic.net/elections/about/index.html Nominees should note that positions on the APNIC EC are currently voluntary and that APNIC may not be able to reimburse EC members all expenses associated with EC duties. Where possible, however, APNIC will reimburse actual expenses for attendance at APNIC meetings, providing that these fall within budget and cash flow constraints. If you have any questions, please contact the APNIC Secretariat at: secretariat(a)apnic.net Regards, -------------------------------------------------------------------- Srinivas (Sunny) Chendi email: sunny(a)apnic.net External Relations Manager, APNIC sip: sunny(a)voip.apnic.net http://www.apnic.net ph/fx: +61 7 3858 3100/99 ____________________________________________________________________ * Join us for APNIC 27 in Manila, 23-27 February 2009! * A fun week of workshops, seminars, and policy discussion awaits! * * For more information, see: http://meetings.apnic.net ____________________________________________________________________

1 0

Telstra Fibre Outage?
by Chris Hodgetts 04 Feb '09

04 Feb '09

Anyone else experiencing any issues with Telstra Clear fibre?

11 14

Looking for Cisco1841 Rack Ears.
by Dean Pemberton 03 Feb '09

03 Feb '09

Hi all. Does anyone have a set of rack ears which would fit a Cisco1841. Willing to exchange for cash or beer (see this post is AUP compliment now too). Thanks Dean

1 0

Wellington Power Outage
by Joel Wiramu Pauling 03 Feb '09

03 Feb '09

Just to show some solidarity, there is a power outage currently in parts of Wellington. NEC house (Manners/Taranaki) and the WCC/Library building are affected. The information I have just states it was cut due to a Transformer issue and are stating up to 4 hours before it is restored. -JoelW

2 2

Widespread Auckland Power Outage 2009-02-03
by Jonathan Brewer 03 Feb '09

03 Feb '09

Hi Folks, Starting around 13:06 this afternoon, a number of parts of Auckland lost power. At a glance, I saw some of our monitored subscribers with unprotected (or underprotected) devices go down in: Ellerslie Mt. Richmond Newmarket Otahuhu Parnell Penrose Westfield Regards, Jon

18 24

NZRR Route Registry Update
by NZRR Database Notifications 03 Feb '09

03 Feb '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- NEW OBJECT CREATION: route-set: AS9560:RS-ROUTES:AS9733 descr: advertised to AS9560 by Netspace Services - AS9733 members: 210.4.208.0/21^21-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: gerard(a)netspace.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090204 source: NZRR ------------------------------------------------------------

1 0

Re: [nznog] Widespread Auckland Power Outage 2009-02-03 (fwd)
by Mark Foster 02 Feb '09

02 Feb '09

Mind your reply-to's, Joel :) Forwarded as intended for the list. ---------- Forwarded message ---------- Date: Tue, 3 Feb 2009 16:59:45 +1300 From: Joel Wiramu Pauling <aenertia(a)aenertia.net> To: Mark Foster <blakjak(a)blakjak.net> Subject: Re: [nznog] Widespread Auckland Power Outage 2009-02-03 Out of curiosity how many people on this list have Sustainable UPS collection/top up schemes in place in parts of their networks. I.e Solar/Wind feeders to battery units? I know diesel generators are the norm, but I have also seen solar array powered gear work pretty well (NZ Wireless I believe have Solar fed battery arrays on their Somes Island AP). -JoelW 2009/2/3 Mark Foster <blakjak(a)blakjak.net>: > > > On Tue, 3 Feb 2009, Patrick Jordan-Smith wrote: > >> >> On 3/02/2009, at 3:43 PM, Nicholas Lee wrote: >> >>> You would think that Transpower would learn not do work to critical >>> systems in the middle of a hot day when it would be a peak. >> >> Personally I'd prefer to have the time when there is risk of power >> cuts during the day - at least there is a big light in the sky (most >> days.) Much easier than trying to find the candles when the power cuts >> out at 10pm and it all goes dark. Much easier to deal with traffic >> issues. >> > > Yes, and people are at work to deal with the ramifications, instead of > being on callback/overtime and delayed to respond... > > After all, UPS is just brownout protection, right? > > :-) > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

The New Zealand Network Operators' Group
by Donald Neal 01 Feb '09

01 Feb '09

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. It consists of the subscribers to this mailing list. The group is intended to facilitate discussion among operators of networks in New Zealand on matters relevant to network operators as described in the list's Acceptable Use Policy. That policy appears later in this posting. Conference See http://2009.nznog.org/ for details of the conference just finished. The plan is that next year's conference will be further south than Auckland. Discussions are now being held with prospective hosts, so if you have a burning desire to host New Zealand's only technical networking conference, now would be the time to speak up. Other Meetings See http://thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.nznog.org/?page_id=6 for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://www.nzix.net/ for details of exchanges in operation. About This Mailing List This list has around 1000 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of APN Online, Citylink, and The University of Waikato. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ . Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins -- Donald Neal | "Careful design and strict discipline are Research Officer | necessary to prevent this sort of mess WAND | from escaping the development laboratory The University of Waikato | and infesting the production environment." | - D. Russell

1 0

Outage at iPrimus Datacentre - 55 King St, Melbourne
by Skeeve Stevens 31 Jan '09

31 Jan '09

Hey all, Little detail at present... but the iPrimus DC in 55 King St Melbourne seems to have had a complete failure. Power, UPS and Generator have apparently all failed. Anyone else have more detail, feel free to follow up. ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

1 0

Re: [nznog] NZNOG streams...
by Richard Naylor 27 Jan '09

27 Jan '09

At 11:06 a.m. 28/01/2009, Neil Gardner wrote: >OK, you've all got a lot uglier and the format of the conference is >significantly different this year... > >I don't for example, recall anyone leading conference speakers around >in a ring while they were dressed in horse costumes. > >Additionally, the discussion on BGP for resilient services sounded a >lot more like a horsie auction than I expected. Classic !!! I confess - we recycle URLs. The NZNOG streams will be sorted tonight after we finish setting up and the bandwidth works. The horses are actually live on another 2 streams. NZNOG will have 4 and a test link to Manila has one. and as of 10:30 this morning, the Reserve Bank has another one. So let me apologise in advance if the NZNOG opening ceremony is a little less than expected. At 0900 when RBNZ announce a new cash rate, I'm live switching the feed from the van at NZNOG. I could either get this right or horribly wrong..............

2 1

NZNOG streams...
by Neil Gardner 27 Jan '09

27 Jan '09

OK, you've all got a lot uglier and the format of the conference is significantly different this year... I don't for example, recall anyone leading conference speakers around in a ring while they were dressed in horse costumes. Additionally, the discussion on BGP for resilient services sounded a lot more like a horsie auction than I expected. Are the NZnog streams up anywhere? Yes I followed the links on the NZnog site... http://2009.nznog.org/streaming Cheers - N

8 8

Re: [nznog] NZNOG Digest, Vol 73, Issue 24
by Jeff Sutton - AKBREW 27 Jan '09

27 Jan '09

-----Original Message----- From: nznog-request(a)list.waikato.ac.nz [mailto:nznog-request(a)list.waikato.ac.nz] Sent: Wednesday, 28 January 2009 11:07 a.m. To: nznog(a)list.waikato.ac.nz Subject: NZNOG Digest, Vol 73, Issue 24 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. Re: Juniper J2320, rate limit based on bgp community (national/international) (Truman Boyes) 2. Re: Juniper J2320, rate limit based on bgp community (national/international) (Barry Murphy) 3. Vendor reception at NZNOG - Open to all (Nathan Ward) 4. Re: Vendor reception at NZNOG - Open to all (Neil Gardner) 5. Re: Vendor reception at NZNOG - Open to all (Nathan Ward) 6. NZRR Route Registry Update (NZRR Database Notifications) 7. NZRR Route Registry Update (NZRR Database Notifications) 8. NZNOG IRC Channel (Mark Foster) 9. Re: NZNOG IRC Channel (Scott Howard) 10. NZNOG streams... (Neil Gardner) ---------------------------------------------------------------------- Message: 1 Date: Tue, 27 Jan 2009 11:56:25 +1100 From: Truman Boyes <truman(a)suspicious.org> Subject: Re: [nznog] Juniper J2320, rate limit based on bgp community (national/international) To: Craig Spiers <Craig.Spiers(a)staff.solarix.co.nz> Cc: Nznog <nznog(a)list.waikato.ac.nz> Message-ID: <85A47E88-60DA-40BA-8DDE-9DF52A11142E(a)suspicious.org> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Hey there, What you want is destination class policing / source class policing based on destination class usage (DCU) This allows you to have policing based on BGP communities instead of managing prefix lists. This is supported on J-series since 8.5R1. Basically you want to: 1. apply bgp communities to routes learned from specific peers (international tag, domestic tag, etc). 2. write a policy that matches on tagged routes, and has an action of 'then destination-class INTERNATIONAL' etc... 3. apply the policy as as export policy to the forwarding-table. 4. configure accounting for destination-class-usage on interfaces that you wish to collect account for ... 5. configure a firewall filter that matches on destination-class and polices traffic to the correct rate. I can unicast you some configs once I dig them up from back in the day. DCU/DCP is a highly scalable way to provide differentiated accounting / policing for specific aggregate services. I have seen this deployed with 40+ regional zones. Cheers, Truman Boyes On 22/01/2009, at 2:21 PM, Craig Spiers wrote: > Hi All.. > > To try and better explain what barry is trying to do.. hes trying to > traffic shape certain IP addresses on his network based on the BGP > community a specific route is a member of.. > > Eg domestic traffic is a member of community 100 and international is > 200 > > Eg 1.2.3.4 on his network communicating with a route dest in community > 100 = 128k > Eg 1.2.3.4 on his network communicating with a route dest in community > 200 = 64k > > I do this on our cisco's using BGP with ip-qos-map's and a service > policy on the interface.. hes looking for the juniper equivalent.. > > Any ideas? > > > Kind Regards, > > Craig Spiers - Network Manager > Solarix Limited > DDI: +64 9 974 4753 | FAX: +64 9 523 8057 FAULTS: 0800 89 41 42 > MOB: +64 21 857 183 | email: craig.spiers(a)staff.solarix.co.nz > The information contained in this email is privileged and confidential > and > intended for the addressee only. If you are not the intended recipient > you > are asked to respect that confidentiality and not disclose, copy or > make > > use of its contents. If received in error you are asked to destroy > this > email and contact the sender immediately. > > > -----Original Message----- > From: Barry Murphy [mailto:barry(a)unix.co.nz] > Sent: Thursday, 22 January 2009 3:42 p.m. > To: Nznog > Subject: [nznog] Juniper J2320,rate limit based on bgp community > (national/international) > > Hey Guys, > > Hope this fits in with the AUP, however I'd hope so as not many forums > show > how to rate-limit based on national/international traffic as they > don't > bill accordingly, however in NZ this is standard practice so hoping > someone > with juniper knowledge can assist me here. > > Basically I want to allow all traffic to/from national without > rate-limit, > then restrict international, for eg 128k. > > icepick(a)NCCORE01# show firewall > policer 128k { > if-exceeding { > bandwidth-limit 128k; > burst-size-limit 4500; > } > then discard; > } > filter 128k { > term 1 { > from { > forwarding-class assured-forwarding; > } > then accept; > } > term 2 { > from { > forwarding-class best-effort; > } > then { > policer 128k; > accept; > } > } > } > > > > icepick(a)NCCORE01# show policy-options policy-statement Orcon-Primary- > In > term 1 { > from community [ Orcon-Local Orcon-National Orcon-Peering > Orcon-Telstra > Orcon-Telecom ]; > then { > local-preference 110; > forwarding-class assured-forwarding; > accept; > } > } > term 2 { > from { > route-filter 0.0.0.0/0 upto /24; > } > then { > local-preference 110; > forwarding-class best-effort; > accept; > } > } > term 3 { > from { > route-filter 0.0.0.0/0 exact; > } > then { > local-preference 120; > accept; > } > } > term 4 { > then reject; > } > > > icepick(a)NCCORE01# show interfaces ge-0/0/1 unit 55 > description "Test interface"; > vlan-id 55; > family inet { > filter { > input 128k; > output 128k; > } > address 113.21.x.x/29; > } > > > The problem I'm running into is all traffic is being rate-limited at > 128k, > rather than just the international. I was able to find one example > located > at > http://archives.devshed.com/forums/networking-100/policer-based-on-commu > nity-2015343.html > however this describes the use of destination-class where I only have > forwarding-class so I'm not sure if this has been depreciated or > renamed > or > not supported by J2320. > > I understand this may be a question for JTAC, however I'd like to hear > from > users here in NZ that have managed to get this going with junos. To > keep > the list sane, please reply offlist, if many people are interested > I'll > post the working solution after being tested for archive purposes. > > Public holiday for Aucklanders next monday, extra long weekend of > beer, > mmmmm > > Thanks > Barry > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > ------------------------------ Message: 2 Date: Tue, 27 Jan 2009 14:02:09 +1300 From: Barry Murphy <barry(a)unix.co.nz> Subject: Re: [nznog] Juniper J2320, rate limit based on bgp community (national/international) To: Truman Boyes <truman(a)suspicious.org> Cc: Craig Spiers <Craig.Spiers(a)staff.solarix.co.nz>, Nznog <nznog(a)list.waikato.ac.nz> Message-ID: <42d6b86dda5ad39384980a4346e7b3ce(a)localhost> Content-Type: text/plain; charset="UTF-8" Hi Truman, Yes this was how I planned to do it, if you note my second to last paragraph, my J2320 doesn't seem to have destination-class available at the policer level. Thanks Barry On Tue, 27 Jan 2009 11:56:25 +1100, Truman Boyes <truman(a)suspicious.org> wrote: > Hey there, > > What you want is destination class policing / source class policing > based on destination class usage (DCU) This allows you to have > policing based on BGP communities instead of managing prefix lists. > This is supported on J-series since 8.5R1. > > Basically you want to: > > 1. apply bgp communities to routes learned from specific peers > (international tag, domestic tag, etc). > 2. write a policy that matches on tagged routes, and has an action of > 'then destination-class INTERNATIONAL' etc... > 3. apply the policy as as export policy to the forwarding-table. > 4. configure accounting for destination-class-usage on interfaces that > you wish to collect account for ... > 5. configure a firewall filter that matches on destination-class and > polices traffic to the correct rate. > > I can unicast you some configs once I dig them up from back in the day. > > DCU/DCP is a highly scalable way to provide differentiated > accounting / policing for specific aggregate services. I have seen > this deployed with 40+ regional zones. > > Cheers, > Truman Boyes > > > > On 22/01/2009, at 2:21 PM, Craig Spiers wrote: > >> Hi All.. >> >> To try and better explain what barry is trying to do.. hes trying to >> traffic shape certain IP addresses on his network based on the BGP >> community a specific route is a member of.. >> >> Eg domestic traffic is a member of community 100 and international is >> 200 >> >> Eg 1.2.3.4 on his network communicating with a route dest in community >> 100 = 128k >> Eg 1.2.3.4 on his network communicating with a route dest in community >> 200 = 64k >> >> I do this on our cisco's using BGP with ip-qos-map's and a service >> policy on the interface.. hes looking for the juniper equivalent.. >> >> Any ideas? >> >> >> Kind Regards, >> >> Craig Spiers - Network Manager >> Solarix Limited >> DDI: +64 9 974 4753 | FAX: +64 9 523 8057 FAULTS: 0800 89 41 42 >> MOB: +64 21 857 183 | email: craig.spiers(a)staff.solarix.co.nz >> The information contained in this email is privileged and confidential >> and >> intended for the addressee only. If you are not the intended recipient >> you >> are asked to respect that confidentiality and not disclose, copy or >> make >> >> use of its contents. If received in error you are asked to destroy >> this >> email and contact the sender immediately. >> >> >> -----Original Message----- >> From: Barry Murphy [mailto:barry(a)unix.co.nz] >> Sent: Thursday, 22 January 2009 3:42 p.m. >> To: Nznog >> Subject: [nznog] Juniper J2320,rate limit based on bgp community >> (national/international) >> >> Hey Guys, >> >> Hope this fits in with the AUP, however I'd hope so as not many forums >> show >> how to rate-limit based on national/international traffic as they >> don't >> bill accordingly, however in NZ this is standard practice so hoping >> someone >> with juniper knowledge can assist me here. >> >> Basically I want to allow all traffic to/from national without >> rate-limit, >> then restrict international, for eg 128k. >> >> icepick(a)NCCORE01# show firewall >> policer 128k { >> if-exceeding { >> bandwidth-limit 128k; >> burst-size-limit 4500; >> } >> then discard; >> } >> filter 128k { >> term 1 { >> from { >> forwarding-class assured-forwarding; >> } >> then accept; >> } >> term 2 { >> from { >> forwarding-class best-effort; >> } >> then { >> policer 128k; >> accept; >> } >> } >> } >> >> >> >> icepick(a)NCCORE01# show policy-options policy-statement Orcon-Primary- >> In >> term 1 { >> from community [ Orcon-Local Orcon-National Orcon-Peering >> Orcon-Telstra >> Orcon-Telecom ]; >> then { >> local-preference 110; >> forwarding-class assured-forwarding; >> accept; >> } >> } >> term 2 { >> from { >> route-filter 0.0.0.0/0 upto /24; >> } >> then { >> local-preference 110; >> forwarding-class best-effort; >> accept; >> } >> } >> term 3 { >> from { >> route-filter 0.0.0.0/0 exact; >> } >> then { >> local-preference 120; >> accept; >> } >> } >> term 4 { >> then reject; >> } >> >> >> icepick(a)NCCORE01# show interfaces ge-0/0/1 unit 55 >> description "Test interface"; >> vlan-id 55; >> family inet { >> filter { >> input 128k; >> output 128k; >> } >> address 113.21.x.x/29; >> } >> >> >> The problem I'm running into is all traffic is being rate-limited at >> 128k, >> rather than just the international. I was able to find one example >> located >> at >> http://archives.devshed.com/forums/networking-100/policer-based-on-commu >> nity-2015343.html >> however this describes the use of destination-class where I only have >> forwarding-class so I'm not sure if this has been depreciated or >> renamed >> or >> not supported by J2320. >> >> I understand this may be a question for JTAC, however I'd like to hear >> from >> users here in NZ that have managed to get this going with junos. To >> keep >> the list sane, please reply offlist, if many people are interested >> I'll >> post the working solution after being tested for archive purposes. >> >> Public holiday for Aucklanders next monday, extra long weekend of >> beer, >> mmmmm >> >> Thanks >> Barry >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> > ------------------------------ Message: 3 Date: Tue, 27 Jan 2009 14:33:01 +1300 From: Nathan Ward <nznog(a)daork.net> Subject: [nznog] Vendor reception at NZNOG - Open to all To: nznog <nznog(a)list.waikato.ac.nz> Message-ID: <17CA2F72-294E-4358-BB5E-06FBF51F83BF(a)daork.net> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Hi all, Wednesday night we are running a "vendor reception", similar to the "gear and beer" evenings at NANOG. Renaissance have generously made a prize available for the evening - an iPod Nano. This will be an open bar, with finger food. Network operators and related parties can attend - even people who are not attending the main conference. Please bring some business cards - one for to go in the prize jar, and one to put in your name tag holder if you are not a conference attendee. Please RSVP to info(a)nznog.org and let us know if you are attending, and also anyone you are bringing with you so we can put you on some kind of list. It would be great to see you here, to get a taste of the NZNOG conference, and a drink or two[1]. -- Nathan Ward [1] or three. ------------------------------ Message: 4 Date: Tue, 27 Jan 2009 14:47:30 +1300 From: Neil Gardner <nznog(a)neilnz.com> Subject: Re: [nznog] Vendor reception at NZNOG - Open to all To: nznog <nznog(a)list.waikato.ac.nz> Message-ID: <632d599d0901261747n2388b020xdfdb1083b02857a2(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 I've been politely waiting, and mid afternoon on the day before the conference seems like a reasonable time to ask again... What's the deal with streaming of the conference talks / discussions / full and frank exchange of view sessions? Cheers - N ------------------------------ Message: 5 Date: Tue, 27 Jan 2009 15:34:54 +1300 From: Nathan Ward <nznog(a)daork.net> Subject: Re: [nznog] Vendor reception at NZNOG - Open to all To: nznog <nznog(a)list.waikato.ac.nz> Message-ID: <58FF2B25-CBDE-4975-8063-5397D65B9B2A(a)daork.net> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes On 27/01/2009, at 2:47 PM, Neil Gardner wrote: > I've been politely waiting, and mid afternoon on the day before the > conference seems like a reasonable time to ask again... > > What's the deal with streaming of the conference talks / discussions / > full and frank exchange of view sessions? R2 are doing streaming, as per usual. I'm pretty sure we've said that on the list already. This will be for the main conference, not the tutorial days. So, Thurs+Fri. We have microphones, plus microphones for anyone asking questions. -- Nathan Ward ------------------------------ Message: 6 Date: Tue, 27 Jan 2009 16:08:54 +1300 From: NZRR Database Notifications <rpsl-admin(a)nzix.net> Subject: [nznog] NZRR Route Registry Update To: nznog(a)list.waikato.ac.nz Message-ID: <E1LReJq-0003lj-IU(a)totti.citylink.co.nz> Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS17435 descr: advertised to AS9560 by WorldxChange Communications Ltd - AS17435 members: 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 202.49.204.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: cbarr(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20070824 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS17435 descr: advertised to AS9560 by WorldxChange Communications LTD - AS17435 members: 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 202.49.240.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29, 203.171.223.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: cbarr(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090127 source: NZRR ------------------------------------------------------------ ------------------------------ Message: 7 Date: Tue, 27 Jan 2009 16:22:11 +1300 From: NZRR Database Notifications <rpsl-admin(a)nzix.net> Subject: [nznog] NZRR Route Registry Update To: nznog(a)list.waikato.ac.nz Message-ID: <E1LReWh-0004Pr-B6(a)totti.citylink.co.nz> Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS17435 descr: advertised to AS9439 by WorldxChange Communications Ltd - AS17435 members: 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 202.49.204.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: cbarr(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20070824 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS17435 descr: advertised to AS9439 by WorldxChange Communications LTD - AS17435 members: 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 202.49.240.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29, 203.171.223.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: cbarr(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090127 source: NZRR ------------------------------------------------------------ ------------------------------ Message: 8 Date: Tue, 27 Jan 2009 22:36:06 +1300 (NZDT) From: Mark Foster <blakjak(a)blakjak.net> Subject: [nznog] NZNOG IRC Channel To: nznog(a)list.waikato.ac.nz Message-ID: <Pine.LNX.4.64.0901272233100.27157(a)skyhawk.blakjak.net> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Hi all A headsup that #NZNOG on the Undernet IRC Network is open for NZNOG'rs to lurk in, and to perhaps provide some means of interaction between those that are here and those that, well, aren't. the DNS aliases us.undernet.org and eu.undernet.org are likely suspects if you dont know any other valid server addresses to try to connect to. See you there, Mark. ------------------------------ Message: 9 Date: Tue, 27 Jan 2009 12:57:20 -0800 From: Scott Howard <scott(a)doc.net.au> Subject: Re: [nznog] NZNOG IRC Channel To: Mark Foster <blakjak(a)blakjak.net> Cc: nznog(a)list.waikato.ac.nz Message-ID: <f1dedf9c0901271257l68036743ud3ddbc4521f20393(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" On Tue, Jan 27, 2009 at 1:36 AM, Mark Foster <blakjak(a)blakjak.net> wrote: > the DNS aliases us.undernet.org and eu.undernet.org are likely suspects if > you dont know any other valid server addresses to try to connect to. Or even the far more relevant nz.undernet.org :) (Sure, it's just a CNAME to "us", but that's not the point...) Scott

1 0

NZNOG IRC Channel
by Mark Foster 27 Jan '09

27 Jan '09

Hi all A headsup that #NZNOG on the Undernet IRC Network is open for NZNOG'rs to lurk in, and to perhaps provide some means of interaction between those that are here and those that, well, aren't. the DNS aliases us.undernet.org and eu.undernet.org are likely suspects if you dont know any other valid server addresses to try to connect to. See you there, Mark.

2 1

NZRR Route Registry Update
by NZRR Database Notifications 26 Jan '09

26 Jan '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS17435 descr: advertised to AS9439 by WorldxChange Communications Ltd - AS17435 members: 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 202.49.204.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: cbarr(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20070824 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS17435 descr: advertised to AS9439 by WorldxChange Communications LTD - AS17435 members: 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 202.49.240.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29, 203.171.223.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: cbarr(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090127 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 26 Jan '09

26 Jan '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS17435 descr: advertised to AS9560 by WorldxChange Communications Ltd - AS17435 members: 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 202.49.204.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: cbarr(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20070824 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS17435 descr: advertised to AS9560 by WorldxChange Communications LTD - AS17435 members: 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 202.49.240.0/22^22-29, 202.14.217.0/24^24-29, 202.49.59.0/24^24-29, 202.50.176.0/24^24-29, 203.171.223.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: cbarr(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090127 source: NZRR ------------------------------------------------------------

1 0

Vendor reception at NZNOG - Open to all
by Nathan Ward 26 Jan '09

26 Jan '09

Hi all, Wednesday night we are running a "vendor reception", similar to the "gear and beer" evenings at NANOG. Renaissance have generously made a prize available for the evening - an iPod Nano. This will be an open bar, with finger food. Network operators and related parties can attend - even people who are not attending the main conference. Please bring some business cards - one for to go in the prize jar, and one to put in your name tag holder if you are not a conference attendee. Please RSVP to info(a)nznog.org and let us know if you are attending, and also anyone you are bringing with you so we can put you on some kind of list. It would be great to see you here, to get a taste of the NZNOG conference, and a drink or two[1]. -- Nathan Ward [1] or three.

2 2

Juniper J2320, rate limit based on bgp community (national/international)
by Barry Murphy 26 Jan '09

26 Jan '09

Hey Guys, Hope this fits in with the AUP, however I'd hope so as not many forums show how to rate-limit based on national/international traffic as they don't bill accordingly, however in NZ this is standard practice so hoping someone with juniper knowledge can assist me here. Basically I want to allow all traffic to/from national without rate-limit, then restrict international, for eg 128k. icepick(a)NCCORE01# show firewall policer 128k { if-exceeding { bandwidth-limit 128k; burst-size-limit 4500; } then discard; } filter 128k { term 1 { from { forwarding-class assured-forwarding; } then accept; } term 2 { from { forwarding-class best-effort; } then { policer 128k; accept; } } } icepick(a)NCCORE01# show policy-options policy-statement Orcon-Primary-In term 1 { from community [ Orcon-Local Orcon-National Orcon-Peering Orcon-Telstra Orcon-Telecom ]; then { local-preference 110; forwarding-class assured-forwarding; accept; } } term 2 { from { route-filter 0.0.0.0/0 upto /24; } then { local-preference 110; forwarding-class best-effort; accept; } } term 3 { from { route-filter 0.0.0.0/0 exact; } then { local-preference 120; accept; } } term 4 { then reject; } icepick(a)NCCORE01# show interfaces ge-0/0/1 unit 55 description "Test interface"; vlan-id 55; family inet { filter { input 128k; output 128k; } address 113.21.x.x/29; } The problem I'm running into is all traffic is being rate-limited at 128k, rather than just the international. I was able to find one example located at http://archives.devshed.com/forums/networking-100/policer-based-on-communit… however this describes the use of destination-class where I only have forwarding-class so I'm not sure if this has been depreciated or renamed or not supported by J2320. I understand this may be a question for JTAC, however I'd like to hear from users here in NZ that have managed to get this going with junos. To keep the list sane, please reply offlist, if many people are interested I'll post the working solution after being tested for archive purposes. Public holiday for Aucklanders next monday, extra long weekend of beer, mmmmm Thanks Barry

3 3

System Administrators Miniconf draft schedule
by Ewen McNeill 26 Jan '09

26 Jan '09

The NZNOG 2009 conference starts tomorrow (Wed 2009-01-28) with the tutorial day, including the System Administrators Miniconf. As previously announced the System Administrators Miniconf is being held in more of a BoF style (shorter intro talks, more discussion) with a more flexible schedule than previous years. But for the benefit of those who are hoping to switch back and forth between tutorials, this is approximately what we intend to have in terms of ordering and timing: -=- cut here -=- Intro/Welcome Ewen McNeill: Scaling System and Network monitoring Peter Mott: VMware in a production environment Jonny Martin: PCH VMWare Platform * Morning Tea * Amos Jeffries: Squid web caching Michael Robinsion: Configuration automation (puppet, cfengine, etc) Jonny Martin: ENUM intro -=- cut here -=- About the only thing which is actually fixed is the morning tea (10:30-11:00) and the start (at approximately 09:00). I believe we have the room for at least half a day, and perhaps the full day, so we're open to adding more topics (or a general "problem solving" type BoF) after the things listed above. Ewen

1 0

One room available at the NZNOG venue this week.
by Jonny Martin 26 Jan '09

26 Jan '09

Hi All, We've had one room become available at the conference venue for this week, it's available for Tuesday through Friday nights. If you still haven't sorted your accommodation out for this week, then you may be in luck. First to reply to me gets it. Cheers, Jonny.

1 1

Xtra DNS Servers
by Jonathan Wood 25 Jan '09

25 Jan '09

Hi there all, I just got this message from our friends at telecom Dear Customer, On Saturday morning (24 January 2009) an unforeseen technical fault affected some Telecom customers. Broadband and Dial-Up internet connections were working, however you may have had problems accessing Xtra email, as well as some services on the Yahoo!Xtra website. Our technical teams worked swiftly to identify and resolve the problem, and the majority of services were restored by midday. We apologise if you were impacted or inconvenienced by the interruption. Sincerely, The Team at Telecom This email is being sent to you as it is a service related message about products and services you have with Telecom. It is not a promotional email. This email is being sent on behalf of Telecom NZ Ltd by Jericho Ltd. Telecom New Zealand. 8 Hereford Street, Freemans Bay, Auckland 1011, NZ. jonno

1 0

Re: [nznog] Use of .0 and .255 in address pools
by Scott Weeks 25 Jan '09

25 Jan '09

: Curiousity about what people are using as far as : addressing pools these days - lots of /24s (and : excluding the end addresses), or bigger blocks? : More specifically, is anyone handing out the .0 : and .255 addresses, or are there still sufficient : CPE/endpoints out there which cope poorly with : those addresses? :: I've been handing out /23s for years now and have :: had zero problems with the middle 0 and 255. ::: I guess I should qualify my statement. I have ::: been handing out /23s with no problems at all ::: on a eyeball network. Not on a content network. :::: I know Telecom were/are handout out .0 addresses :::: on their 3G connections too. It's a pain Can you elaborate on this? Are you still talking about the 'middle' .0 and .255 IPs of /23s and larger? What troubles have you seen and what kind of mobile devices are you talking about? scott ----------------------------- ----------------------------- -----------------------------

1 0

Re: [nznog] Use of .0 and .255 in address pools
by Scott Weeks 25 Jan '09

25 Jan '09

------ surfer(a)mauigateway.com wrote: ------- ------ ender(a)paradise.gen.nz wrote: -------- Curiousity about what people are using as far as addressing pools these days - lots of /24s (and excluding the end addresses), or bigger blocks? More specifically, is anyone handing out the .0 and .255 addresses, or are there still sufficient CPE/endpoints out there which cope poorly with those addresses? ------------------------------------------ I've been handing out /23s for years now and have had zero problems with the middle 0 and 255. ------------------------------------------- I guess I should qualify my statement. I have been handing out /23s with no problems at all on a eyeball network. Not on a content network. scott ----------------------- ----------------------- -----------------------

2 1

Xtra DNS Servers
by Nick Larsen (ZeroOne Operations) 23 Jan '09

23 Jan '09

Hi, Is anyone having trouble resolving domains hosted on {alien,terminator}.xtra.co.nz? Xtra's DNS servers seem to have disappeared (at least from the locations I've tried from). Kind regards, Nick Larsen Network Technician DDI +64.4.471.4447 Freephone 0800 ZEROONE Ph +64.4.499.0018 Fax +64.4.499.0019 Address Level 4, United Building. 107 Customhouse Quay, Wellington, New Zealand

6 8

Re: [nznog] [AusNOG] Cisco Pricing.. blah
by Skeeve Stevens 23 Jan '09

23 Jan '09

Thank God! -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced. > -----Original Message----- > From: Tom Storey [mailto:tom(a)snnap.net] > Sent: Saturday, 24 January 2009 12:54 PM > To: skeeve(a)skeeve.org > Cc: ausnog(a)ausnog.net; nznog(a)list.waikato.ac.nz; Skeeve Stevens > Subject: Re: [AusNOG] Cisco Pricing.. blah > > > On 24/01/2009, at 11:55 AM, Skeeve Stevens wrote: > > > Then January 9th 09 of 18% > > > > Now it is going up another 18% on 30th January 09 > > > Not quite. > > The price rise on Jan 9 was pushed back to Feb 1, so only one 18% > increase (thankfully). > > Tom

1 0

Re: [nznog] [AusNOG] Cisco Pricing.. blah
by Tom Storey 23 Jan '09

23 Jan '09

On 24/01/2009, at 11:55 AM, Skeeve Stevens wrote: > Then January 9th 09 of 18% > > Now it is going up another 18% on 30th January 09 > Not quite. The price rise on Jan 9 was pushed back to Feb 1, so only one 18% increase (thankfully). Tom

1 0

FW: Cisco Pricing.. blah
by Skeeve Stevens 23 Jan '09

23 Jan '09

Hey all, Cisco had a price rise 1st November 08 Then January 9th 09 of 18% Now it is going up another 18% on 30th January 09 Fun oh fun. I assume this effects NZ as well, but not sure to what % ...Skeeve From: http://www.lansystems.com.au/NewsAndEvents/News/NewsItem.asp?objid=168&cont… As you are most likely aware there will be a Cisco price increase effective close of business Friday 30th January 2009. The price increase of approximately 18% will affect all hardware orders. All orders received by 12pm AEDST on Friday 30th January 2009 will be processed by Westcon Group at the quoted pricing. Any orders received after this time will need to be requoted at the new pricing. All quotes for Cisco hardware products will only be valid until 12pm AEDST 30th January 2009. There will be no delays providing Cisco quotations following the price increase. Westcon Group will continue to maintain our standard Cisco quoting turnaround times. Please continue to send all quote requests to support(a)westcongroup.com.au<mailto:support(a)westcongroup.com.au>. A friendly reminder of Westcon's purchase order requirements: * All Cisco orders require valid end user information. * Any amendments received after 30th January 2009 to orders placed prior to Friday 30th January 2009 will be at the new pricing. * Any orders without valid or correct Cisco Deal ID information placed prior to the 30th January 2009 will need to be amended at the new pricing. No exceptions will be made to the above requirements. -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced. NOC, NOC, who's there?

1 0

Try these DNS servers on Xtra's network
by Robert Cotter 23 Jan '09

23 Jan '09

202.27.158.40 202.27.184.5 202.27.184.3 202.27.156.72 Regards Robert Cotter Sales Engineer rcotter(a)distributioncentral.co.nz<mailto:rcotter(a)distributioncentral.co.nz> ________________________________ This email is for the intended recipient(s) only. Be advised that if you have received this email in error that any use, dissemination, forwarding, printing or copying of this email is strictly prohibited. The sender cannot guarantee that this email or any attachment to it is free of computer viruses or other conditions which may damage or interfere with data, hardware or software with which it might be used. If you have received this email in error, please notify Distribution Central on +61 2 8986 5000 or notify sender.

2 1

Use of .0 and .255 in address pools
by David Robb 22 Jan '09

22 Jan '09

Curiousity about what people are using as far as addressing pools these days - lots of /24s (and excluding the end addresses), or bigger blocks? More specifically, is anyone handing out the .0 and .255 addresses, or are there still sufficient CPE/endpoints out there which cope poorly with those addresses? --David

8 10

2009 APNIC Member and Stakeholder Survey
by Elly Tawhai 21 Jan '09

21 Jan '09

_______________________________________________________________________ 2009 APNIC Member and Stakeholder Survey _______________________________________________________________________ Hi NZNOG Community, The 2009 APNIC Member and Stakeholder survey has now closed and APNIC would like to thank all those who participated. Your input will directly affect APNIC activities, in particular: * the assessment of APNIC performance; * where APNIC member revenue should be invested; and * IPv6 readiness in the Asia Pacific region APNIC appreciates the time and effort you have taken to complete the survey (or those parts relevant to you). KPMG are now collating the results and this will be made available to all stakeholders (both members and non-members) as soon as possible. KPMG have informed us of the following winners of the prize draw: Apple i-phone ------------- Name: Chinbaatar Bazargur Economy: MONGOLIA Eee PCs ------- Name: Doug Purdie Economy: AUSTRALIA Name: Praveen Pai Economy: INDIA APNIC thanks you for Having Your Say! Kind regards, Elly ------------------------------------------------------------------------ Elly Tawhai email: elly(a)apnic.net Senior Internet Resource Analyst/ sip: elly(a)voip.apnic.net Liaison Officer(Pacific), APNIC phone: +61 7 3858 3188 http://www.apnic.net fax: +61 7 3858 3199 ________________________________________________________________________

1 0

Re: [nznog] Use of .0 and .255 in address pools
by Scott Weeks 21 Jan '09

21 Jan '09

------ ender(a)paradise.gen.nz wrote: -------- From: David Robb <ender(a)paradise.gen.nz> Curiousity about what people are using as far as addressing pools these days - lots of /24s (and excluding the end addresses), or bigger blocks? More specifically, is anyone handing out the .0 and .255 addresses, or are there still sufficient CPE/endpoints out there which cope poorly with those addresses? ------------------------------------------ I've been handing out /23s for years now and have had zero problems with the middle 0 and 255. scott ----------------------- ----------------------- -----------------------

1 0

Re: [nznog] Wellington Power Outage
by Craig Spiers 20 Jan '09

20 Jan '09

Yep all of our gear is back too.. --- original message --- From: "Matthew Poole" <matt(a)p00le.net> Subject: Re: [nznog] Wellington Power Outage Date: 21st January 2009 Time: 9:16:38 am -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Looks like it's just come back. My mail server just returned to life. Jonathan Brewer wrote: | Hi Folks, | | For those in the rest of the country wondering what's gone wrong in | Wellington, we started seeing end users disappear at 07:44 this morning from | a power outage. It looks like parts of the CBD, Te Aro, Kandallah, | Roseneath, Kelburn, Mt. Cook, Brooklyn, and Melrose are still without power. | | | | Too many tea kettles and hair dryers at the same time I guess. | | | | Regards, | | Jon | | | | | ------------------------------------------------------------------------ | | _______________________________________________ | NZNOG mailing list | NZNOG(a)list.waikato.ac.nz | http://list.waikato.ac.nz/mailman/listinfo/nznog - -- Matthew Poole "Don't use force. Get a bigger hammer." -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.10 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkl2MR8ACgkQTdEtTmUCdpyoCACfdc1rxUkkUaExubiaTY61FDYR JK8An0rJ8DmsSVKVmMS4FeKKQj5ya+dq =MWV/ -----END PGP SIGNATURE----- _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Wellington Power Outage
by Jonathan Brewer 20 Jan '09

20 Jan '09

Hi Folks, For those in the rest of the country wondering what's gone wrong in Wellington, we started seeing end users disappear at 07:44 this morning from a power outage. It looks like parts of the CBD, Te Aro, Kandallah, Roseneath, Kelburn, Mt. Cook, Brooklyn, and Melrose are still without power. Too many tea kettles and hair dryers at the same time I guess. Regards, Jon

3 2

APNIC 27 - Last days for Early Bird registration
by Srinivas (Sunny) Chendi 19 Jan '09

19 Jan '09

_______________________________________________________________________ Last days for Early Bird registration _______________________________________________________________________ Register now to take advantage of a discount of up to 25% on your registration in our early bird special. http://meetings.apnic.net/register PROGRAM HIGHLIGHTS ------------------ Check the latest information update for the content-packed APNIC 27 / APRICOT 2009 program. IPv6 in 3D ----------- Is your IPv6 world feeling a little flat? Flesh it out with this three-dimensional plenary! Hear speakers share their practical experiences from three layers of the network stack. http://meetings.apnic.net/program/ipv63d/index.html Internet Governance Pulong --------------------------- Gather to discuss how we can overcome the challenges facing Internet operators across our region. http://meetings.apnic.net/program/igov/index.html ARE YOU READY FOR APNIC 27? --------------------------- Book your travel ---------------- Manila is also the gateway to the many popular tourist destinations of the Philippines. The APNIC 27 Meeting website has all the information you need to plan your APNIC 27 trip. http://meetings.apnic.net/manila Join the policy discussion --------------------------- Draft policy proposals are now online for review and discussion. Be a part of the policy development process by participating in the APNIC policy mailing list and in the Policy SIG session at APNIC 27. http://www.apnic.net/docs/drafts Executive Council nominations and proxies ----------------------------------------- Four positions on the APNIC Executive Council are open in the election at the APNIC Member Meeting in Manila on Friday, 27 February 2009. Nominate your candidate http://meetings.apnic.net/elections/nominate.html If you would prefer to assign your votes to a proxy, APNIC is currently accepting proxy nominations. The nomination form should be faxed to +61-7-38583199 or emailed to helpdesk(a)apnic.net. Complete a proxy form http://www.apnic.net/meetings/proxy.html For more on APNIC 27, visit: http://www.meetings(a)apnic.net _______________________________________________________________________ Srinivas (Sunny) Chendi email: sunny(a)apnic.net External Relations Manager, APNIC sip: sunny(a)voip.apnic.net http://www.apnic.net ph/fx: +61 7 3858 3100/99 _______________________________________________________________________

1 0

NZRR Route Registry Update
by NZRR Database Notifications 19 Jan '09

19 Jan '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS24324 descr: advertised to AS9560 by Kordia - AS24324 members: 118.148.0.0/15^15-29, 124.157.64.0/18^18-29, 58.84.224.0/20^20-29, 114.134.0.0/20^20-29, 116.89.224.0/20^20-29, 202.56.32.0/20^20-29, 202.68.80.0/20^20-29, 203.144.32.0/20^20-29, 116.90.128.0/21^21-29, 117.104.176.0/21^21-29, 123.108.144.0/21^21-29, 202.20.0.0/21^21-29, 202.49.16.0/21^21-29, 202.49.128.0/21^21-29, 202.56.48.0/21^21-29, 202.137.240.0/21^21-29, 218.185.224.0/21^21-29, 202.6.116.0/23^23-29, 202.27.88.0/23^23-29, 202.49.164.0/23^23-29, 202.65.160.0/23^23-29, 202.174.190.0/23^23-29, 203.110.28.0/23^23-29, 192.173.17.0/24^24-29, 202.21.130.0/24^24-29, 202.27.34.0/24^24-29, 202.27.83.0/24^24-29, 202.27.90.0/24^24-29, 202.36.75.0/24^24-29, 202.36.137.0/24^24-29, 202.36.154.0/24^24-29, 202.36.173.0/24^24-29, 202.37.168.0/24^24-29, 202.37.197.0/24^24-29, 202.49.158.0/24^24-29, 202.49.168.0/24^24-29, 202.49.183.0/24^24-29, 202.129.253.0/24^24-29, 203.30.174.0/24^24-29, 203.92.25.0/24^24-29, 203.171.4.0/24^24-29, 203.174.26.0/24^24-29, 203.208.21.0/24^24-29, 203.97.62.200/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.johnson(a)kordia.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20081105 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS24324 descr: advertised to AS9560 by Kordia - AS24324 members: 118.148.0.0/15^15-29, 124.157.64.0/18^18-29, 58.84.224.0/20^20-29, 114.134.0.0/20^20-29, 116.89.224.0/20^20-29, 202.56.32.0/20^20-29, 202.68.80.0/20^20-29, 203.144.32.0/20^20-29, 116.90.128.0/21^21-29, 117.104.176.0/21^21-29, 123.108.144.0/21^21-29, 202.20.0.0/21^21-29, 202.49.16.0/21^21-29, 202.49.128.0/21^21-29, 202.56.48.0/21^21-29, 202.137.240.0/21^21-29, 218.185.224.0/21^21-29, 202.6.116.0/23^23-29, 202.27.88.0/23^23-29, 202.49.164.0/23^23-29, 202.65.160.0/23^23-29, 202.174.190.0/23^23-29, 203.110.28.0/23^23-29, 192.173.17.0/24^24-29, 202.21.130.0/24^24-29, 202.27.34.0/24^24-29, 202.27.83.0/24^24-29, 202.27.90.0/24^24-29, 202.36.75.0/24^24-29, 202.36.137.0/24^24-29, 202.36.154.0/24^24-29, 202.36.173.0/24^24-29, 202.37.168.0/24^24-29, 202.37.197.0/24^24-29, 202.49.158.0/24^24-29, 202.49.168.0/24^24-29, 202.49.183.0/24^24-29, 202.129.253.0/24^24-29, 203.30.174.0/24^24-29, 203.92.25.0/24^24-29, 203.170.56.0/24^24-29, 203.171.4.0/24^24-29, 203.174.26.0/24^24-29, 203.97.62.200/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: david.johnson(a)kordia.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090120 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 19 Jan '09

19 Jan '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24183 descr: advertised to AS9439 by DTS Ltd - AS24183 members: 202.68.80.0/20^20-29, 210.48.160.0/20^20-29, 117.18.80.0/21^21-29, 202.20.0.0/21^21-29, 202.49.16.0/21^21-29, 202.27.88.0/23^23-29, 202.174.178.0/23^23-29, 202.174.190.0/23^23-29, 192.173.17.0/24^24-29, 202.27.90.0/24^24-29, 202.36.137.0/24^24-29, 202.36.173.0/24^24-29, 202.37.197.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: support(a)dts.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20070907 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24183 descr: advertised to AS9439 by DTS Ltd - AS24183 members: 202.68.80.0/20^20-29, 210.48.160.0/20^20-29, 117.18.80.0/21^21-29, 202.20.0.0/21^21-29, 202.27.88.0/23^23-29, 202.174.178.0/23^23-29, 202.174.184.0/23^23-29, 202.174.190.0/23^23-29, 192.173.17.0/24^24-29, 202.27.90.0/24^24-29, 202.36.137.0/24^24-29, 202.36.173.0/24^24-29, 202.37.197.0/24^24-29, 203.170.56.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: vaa(a)dts.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090120 source: NZRR ------------------------------------------------------------

1 0