- NZNOG - lists.nznog.org

Open Source LI project
by Shane Alcock 09 Nov '17

09 Nov '17

Hi all, A couple of months back, there was a discussion on this list about the ETSI standard for lawful intercept and the lack of available open source implementations of the standard. After some preliminary research and consultation with a handful of operators, WAND (and myself in particular) are putting together a proposal to develop an ETSI-compliant lawful intercept software tool, provided that this is still something that will be of use to people in the NZNOG community. We propose that the resulting software will be open-source and freely available to anyone, but that anyone who wants to see this project progress quickly should consider chipping in some funding to help cover the cost of having a dedicated programmer working on this for ~10-20 hours a week. The total funding pool doesn't need to be overly large: I am confident we will need much less than some of the numbers I've been hearing as the likely cost of a single piece of ETSI-compliant vendor kit. Of course, anyone who is providing funding would be consulted during the development process to ensure that the resulting software will be compatible with their particular network configuration. For now, I'd be interested in hearing from anyone who would like to use this software, regardless of whether you are able to fund the development or not. Replies can be on or off list. If we get enough interest, we would be looking at holding a meeting with anyone interested in funding later on this month (probably in Hamilton) to discuss the requirements for the software and how the funding model is going to work. The goal is to try and have the software in a deployable state (including being signed-off by police as being compliant) by April. I'm happy to take further questions or comments, either on or off list. Thanks, Shane Alcock Research Programmer WAND University of Waikato

2 2

NZNOG conference registrations are open!
by Dave Mill 08 Nov '17

08 Nov '17

Hi all Registrations are open - https://nznog-2018.lilregie.com . Our conference is being held at the Rydges Hotel, Queenstown from 22 - 26 January, 2018 - http://www.nznog.org/nznog18/venue Conference schedule and general information : http://www.nznog.org/nznog18 Available training : http://www.nznog.org/nznog18/nznog-2018-training . Please note, Facebook are handling their own registrations for the Wednesday Facebook event. If you are taking part in the Mikrotik training please note the prerequisites on our training page. We'll be publishing details on the talks/speakers at the conference proper (Thur/Fri) when we accept the talks. Expect the first details on those in the next couple of weeks. Any questions please ask. Cheers Dave

2 2

Important announcement from Microsoft
by Peter Tobin 07 Nov '17

07 Nov '17

On behalf of Microsoft Auckland (APE), Wellington (WIX) and AKL-IX Exchange peers, Microsoft is in the process of refining our peering policies to better serve our customers and the internet community. As part of this we are reaching out to peers for direct or bilateral BGP sessions, as we will stop advertising routes via the public route servers shorty. If you wish bring up a direct BGP session with us, review our peering policy at www.microsoft.com/peering<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.microso…> and request a session using the peering request form<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.micros…>. Please also ensure your PeeringDB record is up to date and has a 24x7 NOC role email and phone number listed, and only request a session if we are not already directly peered. This change is a reflection of Microsoft’s evolving IX policy, and is in the process of being implemented across various exchanges. The drivers behind this are many, and include more predictable routing, cleaner ASN path metrics as well as internal tool changes. Thank you for peering with Microsoft. AS8075 [osoft] http://www.peeringdb.com/view.php?asn=8075<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.peering…> ……………………………….. If any peers have difficulty in achieving a bi-lat across exchange fabric please reach out to the CityLink team (peering(a)citylink.co.nz)<mailto:peering(a)citylink.co.nz)> as we may be able to assist with facilitation via our contacts within Microsoft. CityLink Peering Team

1 0

Important announcement from Microsoft
by Peter Tobin 07 Nov '17

07 Nov '17

On behalf of Microsoft Auckland (APE), Wellington (WIX) and AKL-IX Exchange peers, Microsoft is in the process of refining our peering policies to better serve our customers and the internet community. As part of this we are reaching out to peers for direct or bilateral BGP sessions, as we will stop advertising routes via the public route servers shorty. If you wish bring up a direct BGP session with us, review our peering policy at www.microsoft.com/peering<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.microso…> and request a session using the peering request form<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.micros…>. Please also ensure your PeeringDB record is up to date and has a 24x7 NOC role email and phone number listed, and only request a session if we are not already directly peered. This change is a reflection of Microsoft’s evolving IX policy, and is in the process of being implemented across various exchanges. The drivers behind this are many, and include more predictable routing, cleaner ASN path metrics as well as internal tool changes. Thank you for peering with Microsoft. AS8075 [rosoft] http://www.peeringdb.com/view.php?asn=8075<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.peering…> ……………………………….. If any peers have difficulty in achieving a bi-lat across exchange fabric please reach out to the CityLink team (peering(a)citylink.co.nz)<mailto:peering(a)citylink.co.nz)> as we may be able to assist with facilitation via our contacts within Microsoft. CityLink Peering Team

1 0

NZNOG 2018 Update
by Dave Mill 31 Oct '17

31 Oct '17

Hi all Our CFP has now officially closed. We've received a lot of good submissions and will begin accepting talks soon. If you have missed the CFP close and still want to talk definitely let us know. However, we will first be accepting the on time submissions. We've added a page about the training events we're offering to our website - http://www.nznog.org/nznog18/nznog-2018-training . The Mikrotik training has some pre-requisite details on that page. Go Wireless are offering the required pre-requisite training in the near future. Links to Go Wireless' training page is on our training page. We're just waiting to lock in the Facebook training and maybe one other training session and we'll then open registrations. Apologies for the delays - we're chasing the other parties as much as we can. Cheers Dave (on behalf of the NZNOG Trust)

1 0

Sysadmin Miniconf 2018 - Call for Presentations
by Simon Lyall 24 Oct '17

24 Oct '17

There will be a one day mini conference on Linux Systems Administration held as part of linux.conf.au 2018 (held in Sydney, Australia on 22 - 26 January 2018). The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf, https://sysadmin.miniconf.org/cfp18.html (A copy of the CFP text is included below for your convenience.) Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. This is our 12th Sysadmin Miniconf at Linux.conf.au. Previous presentations can be found at the website: https://sysadmin.miniconf.org/ -=+ Presentation Topics +=- We welcome talks on best current practice, new developments in Systems Administration, cutting edge techniques and technologies, and ways to better manage Linux environments large and small. Topics for presentations could include (but are not limited to): * Systems Administration Best Practice * Virtualisation and Cloud Computing * Containers and orchestration * Sysadmin Administration in a "serverless" environment (FAAS) * TLS everywhere * Monitoring and metrics. Collection, storage and presentation * Infrastructure/Platform/Software as a Service (IAAS, PAAS, SAAS) * Networkng: IPv6, SDN (Software Defined Networking), performance * DevOps, Configuration Management and provisioning * Bootstrapping systems, Lifecycle Management * Dealing with BYOD * Backups in a virtual/distributed world * Troubleshooting techniques * DevOps and SysAdmin Culture * Web and Email management * Keeping legacy systems functioning * War stories from the "Real World" Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. -=+ Format of Presentations +=- We are now seeking proposals for presentations at the mini-conference. We have openings for: 15-25 minute short presentations 5-10 minute "lightning talks" Please note, due to the single day available (and whole-LCA keynote before morning tea), we expect the majority of available timeslots to be 20 minutes or less, with possibly 1-2 slightly longer talks if there is space in the schedule. We have a general policy of accepting a high proportion of proposals but handing out relatively short timeslots. Please see previous years Miniconf schedules for examples of how the programme is organised. -=+ Submitting talks +=- Please note that in order to give a presentation or attend the Miniconf you must be registered (and paid up by the time the conference happens) for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor to priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. To submit a talk to the LCA2017 Sysadmin Miniconf, create an account on the LCA2018 website: https://linux.conf.au/dashboard create a speaker profile, and then select "New Proposal" and "System Administration Miniconf Presentation", or while logged into the LCA2018 site, go directly to: https://rego.linux.conf.au/proposals/submit/sysadmin-miniconf/ If you have a preferred length of your Short Presentation (15/20/25 minutes) or Lightning Talk (5/10 minutes) please use the Private Abstract field to describe what would work best for your talk. Otherwise we will pick a length that best suits the gaps in the programme as we put the final programme together. In some cases we maybe able to add a few extra minutes to a few Short Presentations if there is any spare time left in the programme. -=+ Dates and Deadlines +=- To encourage early submissions, priority (both of inclusion and scheduling) will be given to presentations submitted by 23:59 UTC on the 5th of November 2017. I f you have a good presentation idea, please let us know early, even if you need time to finalise the presentation abstract. Please indicate if you need an early confirmation to aid you in arranging time off work or travel; we will do our best to assist. 2017-11-05 - Deadline for early submissions 2017-12-03 - Deadline for submissions 2017-12-10 - Miniconf programme published 2018-01-22 - Sysadmin Miniconf held. -=+ Contact and Questions +=- Please see our website at https://sysadmin.miniconf.org for more information on the Miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2018 @ sysadmin.miniconf.org Ewen McNeill and Simon Lyall LCA2018 Sysadmin Miniconf Conveners -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

1 0

ntp.net.nz changes and update
by Josh Simpson 16 Oct '17

16 Oct '17

Hi NZNOG, Time for a ntp.net.nz update and upcoming changes. ntp1.ntp.net.nz needs to be migrated to a new router, this will mean the IPv4 and IPv6 addresses will change, currently scheduled for 2017-10-22. 202.46.191.123 to 202.46.177.18 2001:dce:4000:2::123 to 2001:dce:3:17a::18 ntp2.ntp.net.nz is still IPv4 only, we are working on restoring IPv6 once we have upstream connectivity sorted. ntp3.ntp.net.nz has had IPv6 turned back on, this has been operating with v6 since 2017-09-25. ntp4.ntp.net.nz has been live for over 14 months, IPv4 only, this is located in Christchurch. We are working with our upstream to have IPv6 connectivity. We have also been testing a number of the servers in pool.ntp.org in the New Zealand and Oceania Pools, this has been going well and we have seen a jump in NTP packets per second on each node from a max of ~7 to a max of ~1000. We plan to add the rest of the servers in shortly. Details of the service can be found at https://ntp.net.nz As always let us know if you have any queries. Cheers Josh -- Josh Simpson Systems Administrator NZRS Ltd M: +64 21 783 399 P: +64 4 555 0124 GPG: 6516 B4EA 413B CAED 57B5 0956 124C 8AC3 A362 8080 www.nzrs.net.nz

1 0

[Owasp-New_Zealand] OWASP NZ Day 2018 - Registration, call for presentations, trainers and sponsors
by Kim Carter 03 Oct '17

03 Oct '17

Hi All, The OWASP NZ crew are pleased to announce the 9th OWASP New Zealand Day conference, to be held at the University of Auckland. As per previous years, OWASP NZ Day 2018 will be a free conference dedicated to information security with an emphasis on secure development techniques and management. The con will be held on the 5th of February, with training being run the day before (4th of February). Further information is available on the event wiki page here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018 The registration link can be found here: https://owaspnz2018.eventbrite.com/ Please note that registration cut off is the 29th of January. We have plenty of seats, and though we've come to expect the flood of last minute emails from those of you that are either forgetful or just plain lazy, it messes with our numbers. It also hurts our collective feelings. So register. Do it. We have a large number of presenter slots to fill. We're interested in topics covering everything from introductory topics, to deeply technical subjects to risk and compliance. Presentation submissions are welcome from all interested parties, and we're especially keen to hear from the developers and other technical communities, not just the professional infosec nerds. We will not consider vendor pitches, commercial content or other such attempts to pedal your filthy, filthy wares. More info is available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Pre…<https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2017#tab=Call_For_Pre…> CFP Deadline: 8th of December. This year we have a number of training slots to fill. If you have a security related training you'd like to give the day before the main con, then please sub! More info is available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Tra…<https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2017#tab=Call_For_Tra…> CFT Deadline: 8th of December. OWASP is strictly not for profit and to keep our conference free we need sponsors to support us. The sponsorship cash is used to help make OWASP NZ Day a free and valuable experience for the audience. More details on sponsorship specifics available here: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018#tab=Call_For_Spo… Event Website: https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2018 About OWASP: https://www.owasp.org/ About the NZ Chapter: https://www.owasp.org/index.php/New_Zealand Cheers! Denis Andzakovic, Kim Carter and Kirk Jackson OWASP NZ Chapter Leaders

1 0

TICSA and Lawful Interception
by ticsa＠police.govt.nz 01 Oct '17

01 Oct '17

Hi NZNOG The TICSA Registrar invites you to a Technical Discussion about Lawful Interception. There has been a lot of discussion about LI recently and we would like to clarify what it means to be Compliant. The aim of this meeting is to work through ‘the how’ and to answer any questions you may have. This is targeted at Network Engineers to whom PCAP, ASN.1 and ETSI 102.232-1 means something. Please register your interest by emailing off list, as space is limited (attendance by invitation only). Meeting will be held in Wellington on the 16th of October. Cheers Neil =============================================================== WARNING The information contained in this email message is intended for the addressee only and may contain privileged information. It may also be subject to the provisions of section 50 of the Policing Act 2008, which creates an offence to have unlawful possession of Police property. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, distribute or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. If you have received this message in error, please email or telephone the sender immediately

1 0

KSK Rollover Postponed
by Save Vocea 28 Sep '17

28 Sep '17

Dear NZNOG community, A couple of weeks ago I posted ICANNs’ KSK rollover timelines in here. It was announced today that the plan to change the cryptographic key that helps protect the Domain Name System (DNS) is being postponed. The changing or "rolling" of the KSK Key was originally scheduled to occur on 11 October, but it is being delayed because some recently obtained data shows that a significant number of resolvers used by Internet Service Providers (ISPs) and Network Operators are not yet ready for the Key Rollover. The availability of this new data is due to a very recent DNS protocol feature that adds the ability for a resolver to report back to the root servers which keys it has configured. Full announcement is here: https://www.icann.org/news/announcement-2017-09-27-en Regards, Save Vocea ICANN staff in the region From: Save Vocea <save.vocea(a)icann.org> Date: Tuesday, September 12, 2017 at 4:53 PM To: NZNOG <nznog(a)list.waikato.ac.nz> Subject: KSK rollover timeline and how to check if your systems are ready Dear NZNOG list members, I’d appreciate if this is shared through your network /organizations and to check if your systems won’t be affected by the following change. The Internet Corporation for Assigned Names and Numbers (ICANN) is planning to roll, or change, the “top” pair of cryptographic keys used in the Domain Name System Security Extensions (DNSSEC) protocol, commonly known as the Root Zone KSK. This will be the first time the KSK has been changed since it was initially generated in 2010, and is considered an important security step, in much the same way that regularly changing passwords is considered a prudent practice by any Internet user. What does that mean? Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other Domain Name System (DNS) resolver operators; DNS resolver software developers; system integrators; and hardware and software distributors who install or ship the root's "trust anchor." The KSK is used to cryptographically sign the Zone Signing Key (ZSK), which is used by the Root Zone Maintainer to DNSSEC-sign the root zone of the Internet's DNS. Why do you need to prepare? Currently, 25% of global Internet users, or 750 million people, use DNSSEC-validating resolvers that could be affected by the KSK rollover. If these validating resolvers do not have the new key when the KSK is rolled, end users relying on those resolvers will encounter errors and be unable to access the Internet. How to know if your systems are up-to-date? ICANN is offering a test bed for operators or any interested parties to confirm that their systems handle the automated update process correctly. Check to make sure your systems are ready by visiting: http://go.icann.org/KSKtest. What is the timeline for this process? October 27, 2016: KSK rollover process begins as the new KSK is generated. July 11, 2017: Publication of new KSK in DNS. September 19, 2017: Size increase for DNSKEY response from root name servers. October 11, 2017: New KSK begins to sign the root zone key set (the actual rollover event). January 11, 2018: Revocation of old KSK. March 22, 2018: Last day the old KSK appears in the root zone. August 2018: Old key is deleted from equipment in both ICANN Key Management Facilities. More information about the root zone KSK rollover is available here: https://www.icann.org/resources/pages/ksk-rollover. Thank you, Save vocea VP, Global Stakeholder Engagement, Oceania ICANN

2 1

NZNOG 2018 Updates
by Dave Mill 24 Sep '17

24 Sep '17

Hi all As promised here is the list of workshops/tutorials that we have organised so far. These aren't definite yet but are very likely to happen. *Wednesday tutorials:* -Network Security Tutorial (run by APNIC) -Facebook Network Automation Hack event (run by Facebook, will be similar to https://netengcodehack2017.splashthat.com/%29 ) *Workshop (roughly Monday 9am to Wednesday 12pm):* -Mikrotik MTCINE training - Outline here https://mikrotik.com/download/pdf/MTCINE_Outline.pdf Our CFP is still open. Details here - http://www.nznog.org/nznog18/call-for-papers-2018 . If anyone else wants to help Richard Nelson and myself put together the programme for Thur/Fri please get in contact. So far we've received details on some really interesting talks. If you want to sponsor NZNOG please reach out also. Cheers Dave

1 0

Datacom having network problems?
by Mauricio Freitas 23 Sep '17

23 Sep '17

Does anyone have a network contact at Datacom please? I can't get to datacom.co.nz (direct) from my NZ connection, and can't get to Geekzone via Cloudflare either (CF returns a timeout trying to reach origin). However if I fire a VPN to Sydney both datacom.co.nz and Geekzone work fine. Called datacentre and ops guys have no idea what's going on. Seems that traffic to NZ is being impacted but not to overseas. Cheers Mauricio Freitas https://about.me/freitasm

1 1

NZNOG 2018 updates
by Dave Mill 14 Sep '17

14 Sep '17

Hi all I wanted to give some more details on our plans for the conference next year. On Wednesday Facebook are looking at holding a Network Automation Hack event as part of NZNOG. This should be a really awesome session. It will be similar to this - https://netengcodehack2017.splashthat.com/%29 . Whilst this isn't completely locked in yet it has approval internally at Facebook and looks set to happen. I'd suggest if this interests you then plan to be at NZNOG from Wed - Fri. Be warned, seats will be limited. The other event I wanted to announce I unfortunately still can't. I've been chasing people pretty hard on it and I still don't know that it will definitely happen :( I will update when I know more. Cheers Dave

1 0

Dialup over Ethernet
by Ewen McNeill 13 Sep '17

13 Sep '17

A client had a (business) customer switch over to UFB and needed assistance reconfiguring the (Mikrotik) router being attached to the ONT -- it turned out whoever first set up the Mikrotik (sensibly) assumed it'd be seeing IP packets over VLAN 10, but actually the ISP required IP packets over PPPoE over VLAN 10 in order for it to work. Looking around it appears this client's customer's ISP isn't the only one that is requiring PPPoE over VLAN tagging over Ethernet for their UFB connections. Is there a reason other than "let's make everything look like 1990s dialup so it works with our legacy equipment" for the bit/CPE CPU overhead of PPPoE on UFB, including imposing the lowered usable MTU and PMTU discovery headaches on the end user? The only one that really comes to mind is "user/password authentication" (rather than needing to collect CPE MAC addresses which seems to happen with, eg, Vodafone cable/FibreX). But it's not clear to me why, eg, 802.1X isn't used for the user/password authentication in that case; or DHCP with some extension to pass a "secret" identifier. 20-bytes-per-packet-forever seems a large overhead to pay for user/password authentication at CPE power on.... (Maybe in the beginning there's "lack of CPE support" -- but we're a few years into the UFB rollout, and lots of ISPs seem to be supplying their own ISP-badged CPEs anyway, which could presumably implement whatever was needed.) Ewen

10 16

AirNZ SPF Issues
by Pieter De Wit 11 Sep '17

11 Sep '17

Hey NZNOG’rs, I know that this is not “nice to do” but I have tried the contact centre - the issue is logged but I doubt it will get to the right people ? AirNZ currently has 2 SPF entries and this is causing emails to fail: dig TXT airnz.co.nz | grep spf1 airnz.co.nz. 21301 IN TXT "v=spf1 a ..." airnz.co.nz. 21301 IN TXT "v=spf1 …" Please fix :) I have error logs going back to the 8th of Aug, if that helps ? I don’t know what other domains this was done on. Cheers, Pieter

2 1

KSK rollover timeline and how to check if your systems are ready
by Save Vocea 11 Sep '17

11 Sep '17

Dear NZNOG list members, I’d appreciate if this is shared through your network /organizations and to check if your systems won’t be affected by the following change. The Internet Corporation for Assigned Names and Numbers (ICANN) is planning to roll, or change, the “top” pair of cryptographic keys used in the Domain Name System Security Extensions (DNSSEC) protocol, commonly known as the Root Zone KSK. This will be the first time the KSK has been changed since it was initially generated in 2010, and is considered an important security step, in much the same way that regularly changing passwords is considered a prudent practice by any Internet user. What does that mean? Rolling the KSK means generating a new cryptographic public and private key pair and distributing the new public component to parties who operate validating resolvers, including: Internet Service Providers; enterprise network administrators and other Domain Name System (DNS) resolver operators; DNS resolver software developers; system integrators; and hardware and software distributors who install or ship the root's "trust anchor." The KSK is used to cryptographically sign the Zone Signing Key (ZSK), which is used by the Root Zone Maintainer to DNSSEC-sign the root zone of the Internet's DNS. Why do you need to prepare? Currently, 25% of global Internet users, or 750 million people, use DNSSEC-validating resolvers that could be affected by the KSK rollover. If these validating resolvers do not have the new key when the KSK is rolled, end users relying on those resolvers will encounter errors and be unable to access the Internet. How to know if your systems are up-to-date? ICANN is offering a test bed for operators or any interested parties to confirm that their systems handle the automated update process correctly. Check to make sure your systems are ready by visiting: http://go.icann.org/KSKtest. What is the timeline for this process? October 27, 2016: KSK rollover process begins as the new KSK is generated. July 11, 2017: Publication of new KSK in DNS. September 19, 2017: Size increase for DNSKEY response from root name servers. October 11, 2017: New KSK begins to sign the root zone key set (the actual rollover event). January 11, 2018: Revocation of old KSK. March 22, 2018: Last day the old KSK appears in the root zone. August 2018: Old key is deleted from equipment in both ICANN Key Management Facilities. More information about the root zone KSK rollover is available here: https://www.icann.org/resources/pages/ksk-rollover. Thank you, Save vocea VP, Global Stakeholder Engagement, Oceania ICANN

1 0

New Zealand Internet Research Forum 2017 - Registrations open
by Nicole Skews-Poole 11 Sep '17

11 Sep '17

Kia ora, Registrations for this year's New Zealand Internet Research Forum are open. The Forum will be held on 8 November, the day before NetHui 2017 <https://2017.nethui.nz/> - as part of the NetHui umbrella. *You can register for free by selecting the first event here: https://nethui-2017.lilregie.com/step1 <https://nethui-2017.lilregie.com/step1>* you can also register there for NetHui 2017 should you want to come along! The programme for this year will be finalised soon, and in the meantime you can check out last year's programme <https://internetnz.nz/internet-research-forum-2016-programme> for an idea of what goes on at the NZIRF. Please consider sharing this with your networks. I look forward to seeing you there! *Ngā mihi nui,* *Nicole Skews-Poole* NZIRF Organiser InternetNZ Mobile: +64 27 323 8914 Email: nicole(a)internetnz.net.nz A better world through a better Internet

1 0

TICSA and lawful intercept
by Dave Mill 06 Sep '17

06 Sep '17

Hi all So, probably a bit a touchy subject this one but here goes.. If you are a network operator and you have more than 4000 customers in my understanding you need to have full interceptions capabilities. (I'm not a lawyer, etc, etc) This is more than just being 'interception ready'. http://www.police.govt.nz/advice/businesses-and-organisations/ticsa/interce… This will mean having a mediation system and being able to produce intercept data in the ETSI standard - again, as far as I know. What are companies/organisations out there doing about this? Is there a nice open source solution out there for this? (I haven't found one yet) Are people putting their heads in the sand and praying they never get served a warrant? Is everyone just shelling out hundreds of thousands of dollars on a vendor LI solutions? What network kit are people integrating with LI in NZ? And note, the last paragraph on the URL I linked above reads: "Can I share interception capability resources? Network operators may co-ordinate, share or contract for services (equipment or staff) in order to meet the interception capability requirements in the Act. However, it remains the responsibility of the network operator to ensure that any such arrangement does not affect any obligations that apply under the Act. Before entering into any such arrangement a network operator must notify the Director of the GCSB." Replies on or off list welcomed. Cheers Dave (AS17705)

9 20

Christchurch Hacker Conference 2017 (CHCon) Tickets and Training now on sale
by CHCon crew 05 Sep '17

05 Sep '17

Hi Everyone. The Christchurch Hacker Conference (CHCon) tickets are now up for grabs at (https://chcon.nz) along with merchandise as part of the ticket purchase process. The conference is running on Friday 27th and Saturday 28th of October We also have a collection of excellent trainings available on Thursday 26 October. A big thanks to Insomnia (platinum) and Quantum Security (silver) for sponsoring us and helping us get this far. We are still looking for additional sponsors to help make the conference even better. We look forward to seeing you at the con! CHCon Team.

1 0

NZNOG'18 - Call For Papers
by Richard Nelson 03 Sep '17

03 Sep '17

The NZNOG organising committee invites papers for its 15th annual conference, to be hosted at Rydges Hotel, Queenstown, New Zealand from 22 - 26th January 2017. There will the three day Workshops 22 – 24 January, a day of tutorials on 24 January with the main conference on 25 – 26 January. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 30th October. Please provide your talk title, duration, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking- related subject matter. Normally presentations are video streamed live and slide decks are posted to the NZNOG website. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. The organising committee will evaluate proposals based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog18/call-for-papers-2018 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

3 2

SPF for Spark Business Mail
by Matthew McTague 22 Aug '17

22 Aug '17

Hi Noggers, Hoping to find some help from someone knowledgeable here as I can't get any answers through normal channels. I'm trying to find the correct SPF record (include FQDN or IP address ranges) for customers sending email via Spark Business Hub Mail. Have tried through normal support channels (to be told the SPF record is commercially sensitive) and have tried normal escalation paths. Anyone with knowledge on the subject, please contact me (perhaps if the correct SPF record can be a reply on-list, so everyone has it on record. It would help the NZNOG community as a whole.) Warm Regards, [https://www.vetta.tech/sig/vetta_signature_logo.png] <http://www.vetta.tech> [https://www.vetta.tech/sig/facebook_signature_icon.png] <http://www.facebook.com/VettaTech> [https://www.vetta.tech/sig/twitter_signature_icon.png] <http://www.twitter.com/VettaTech> [https://www.vetta.tech/sig/linkedin_signature_icon.png] <http://www.linkedin.com/company/2840435> [https://www.vetta.tech/sig/partnersilver.png] [https://s3.amazonaws.com/htmlsig-assets/spacer.gif] Matthew McTague / Systems & Network Engineer matthew(a)vetta.tech<mailto:matthew(a)vetta.tech> / DDI: +64 3 222 6013 Vetta Technologies Ltd 0800 4 VETTA / +64 3 683 9090 Level 3, Cnr Stafford & George Streets, Timaru 16 Pope Street, Christchurch East Tamaki, Auckland PO Box 923, Timaru www.vetta.tech<http://www.vetta.tech> This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender.

2 1

Vodafone outage in Karori/Highbury/Aro Valley (Wellington)
by Joel Wirāmu Pauling 21 Aug '17

21 Aug '17

Just spoke with Vodafone NOC - there was is planned upgrade work going on Karori prod node. Whatever it is seems to have taken out Highbury CMNT network. The Public facing Network status meter however shows all good - when there has been an ongoing outage since around 0100. Change window is meant to close at 0300 so hopefully it resumes before then. I am a little annoyed when there is planned work but the Public reporting tool isn't updated or fed by these things. -Joel

1 0

NZNOG 2018
by Dave Mill 13 Aug '17

13 Aug '17

Hi all There is now a link to book accommodation at our venue at our group rate on our website - http://www.nznog.org/nznog18 . The link is on the Venue page. We will be adding other accommodation options as they get back to our conference organiser. We hope to announce a very good workshop and tutorial in the coming few weeks.. More details on these once they are locked in. If you want to sponsor NZNOG please get in contact - info(a)nznog.org . Cheers Dave

1 0

Multiple connections to UFB in server room
by Paul Adshead 10 Aug '17

10 Aug '17

Hi guys. A shared server room has an active UFB service for another business on the floor. We want UFB service to our office too. Is an additional ONT install needed (as I'm being told by <ISP>)? Or, can Chorus just enable another port on the existing ONT and have and then run a network cable out to both routers from one ONT? Is the ONT capable of multiple PPPOE sessions to the offsite hardware? Or is this just creating a problem that doesn't need to exist (- ie say yes to the second ONT install)? Many thanks, Paul Adshead. 021890258

9 9

Spark (telecom) paging pacnet interface broken ?
by Ian Batterbee 01 Aug '17

01 Aug '17

Hi all, Does anyone here look after, or know who looks after, the 026 400 1283 modem interface to spark paging ? It's currently answering calls, but not giving a modem handshake. (Please don't respond with messages about paging being end-of-life'd, the fire service is paying for it to kept alive on life-support.) Thanks

4 5

IPv6 deployment survey - please participate and disseminate
by JORDI PALET MARTINEZ 30 Jul '17

30 Jul '17

Hi all, I’ve been running a survey for about 15 months, regarding the way IPv6 is being deployed for residential customers. I will be presenting an updated version of the survey results in the next APNIC 44 (https://conference.apnic.net/44/) to be held in Taichung next 7-14 September. As the IPv6 deployment is still ongoing in many countries, it will be interesting to gather new responses for the survey, in order to have as much accurate as possible data. So please, take the survey, is just a couple of minutes, and forward this email to other colleagues, mail exploders for NOGs and others, so we can increase the dissemination as much as possible. We are lacking responses from many countries in AP region, specially India and South Korea. The survey is available in several languages: English: http://survey.consulintel.es/index.php/175122?lang=en Chinese: http://survey.consulintel.es/index.php/175122?lang=zh-Hans Japanese: http://survey.consulintel.es/index.php/175122?lang=ja Korean: http://survey.consulintel.es/index.php/175122?lang=ko Spanish: http://survey.consulintel.es/index.php/175122?lang=es Portuguesse: http://survey.consulintel.es/index.php/175122?lang=pt-BR Thanks ! Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Free 42U Rack
by Jay Lee 26 Jul '17

26 Jul '17

We have a 42U rack in Riccarton exchange available for free. It's in very good condition. Size is H 2m x W 0.6m x D 1.01m, black colour. Mesh doors, side panels and some shelves. Pick up only from the exchange so you need PTN accreditation. If anyone is interested please contact me off list.

1 0

GLIF 2017 programme
by GLIF Secretariat 25 Jul '17

25 Jul '17

All, Apologies for the advertising (and cross-posting), but the programme for this global research and education networking event hosted by AARNet in Sydney is now available, and may be of interest to some… https://www.glif.is/meetings/2017/programme.pdf <https://www.glif.is/meetings/2017/programme.pdf> Regards, Kevin Meynell GLIF Secretariat ---- 17th Annual Global LambdaGrid Workshop - GLIF 2017 25-27 September 2017 Camperdown Campus, University of Sydney, Australia We are pleased to announce the programme for the 17th Annual Global LambdaGrid Workshop, which is being hosted by AARNet, the Australian National Research and Education Network. This event is bringing together networking experts from around the world to collaborate and exchange knowledge on new lambda networking technologies, middleware and applications. The workshop will have a specific focus on how global network architectures are supporting research applications in the Pacific region, in particular astronomy, high-energy physics, and other data intensive science. There will also be demonstrations of high-bandwidth applications. The registration fee is AUD 450 per person (AUD 350 for registered students) up to 23 August 2017, and AUD 500 per person (AUD 400 for registered students) thereafter. Accommodation is available in the Rydges Camperdown at the special rate of AUD 165 per night including GST, the Mercure Sydney Central at the special rate of AUD 249 per night, and the Waldorf Sydney Central Serviced Apartments at the special rate of AUD 195 per night including GST. These can be reserved when registering for the workshop, and should be booked before 23 August 2017. Please note that a Software Defined Networking (SDN) Workshop will also be held on Thursday, 28 September 2017 at the University of New South Wales. You can register, book accommodation and pay online at https://www.glif.is/meetings/2017/ <https://www.glif.is/meetings/2017/> We look forward to seeing you in Sydney!

1 0

Re: [nznog] Paging might be broken again today?
by Troy Baird 23 Jul '17

23 Jul '17

Yep, correct. Michael will email you off list from work mail to follow up on this with some internal teams here. -Troy Baird On 24/07/2017 4:14 PM, "David Maclagan" <david(a)verso.org> wrote: On 2017-07-24 15:32, Michael Fincham wrote: > On Thu, 20 Jul 2017 19:01:49 +1200, Ian Batterbee <ibatterb(a)gmail.com> > wrote: > >> Does anyone here look after, or know who looks after, the 026 400 1283 >> modem interface to spark paging ? >> >> It's currently answering calls, but not giving a modem handshake. >> > > We're getting modemy sounding noises today but NO CARRIER :( > > Anyone know what's up? Spark has not been helpful so far. > Talking to a firie contact, they're under the impression that the platform's been EoLed for everyone other than the firies. So that could be the issue? Cheers David _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog

3 2

Mikrotik and VLAN stripping
by Steve Phillips 18 Jul '17

18 Jul '17

Hi Guys, I was just wondering if it’s possible to set an egress rule on a mikrotik to strip any vlan tag without specifying the VLAN, and if so, what this configuration would look like? (i.e – vlan=any) It seems that you can do this for specific VLANS but if the inbound VLAN tag is random there doesn’t seem to be any ready examples on how to do this. Is it even possible? Or am I just trying to do things incorrectly? -- Steve.

1 0

Surgeries cancelled and patients told to avoid going to Rotorua and Taupo hospitals after fire | Stuff.co.nz
by Alan Maher 16 Jul '17

16 Jul '17

https://www.stuff.co.nz/national/health/94810043/rotorua-hospital-fire-cuts… And you know that this will take more than 24 hours. No form of fire protection?

1 0

Good luck!
by Jesse Archer 16 Jul '17

16 Jul '17

[image: Inline image 1]

3 2

Christchurch Hacker Con (CHCon) 2017 - Call for Presentations Training and Sponsors
by CHCon crew 16 Jul '17

16 Jul '17

Hi Everyone We are proud to announce the second Christchurch Hacker Conference (CHCon), to be held at the UCSA Events Centre, 90 Ilam Rd, Riccarton, on Friday 27 and Saturday 28th October, 2017. That’s right, we’re aiming for a two day conference - with an additional training day before the main event. The call for presenters, trainers, and sponsors is open. We will open registration for general attendees in the coming weeks, so stay tuned as registrations will be limited. CHCon is a two-day conference this year dedicated to technology security with an emphasis on both breaking and building. We will be offering training on the day before the conference (Thursday 26th October). We have a large amount of presenter slots that we need to fill, on everything from the Suggested Topics under the Call For Papers at https://2017.chcon.nz/#cfp. Presentation submissions are welcome from all interested parties, we're not interested in vendor pitches or commercial content. The close off date is approaching fast. More information is available here: https://2017.chcon.nz/#cfp We also have a number of training slots we'd like to fill. If you have a security related training you'd like to give the day before the main conference, please make a submission. More information is available here: https://2017.chcon.nz/#cft CHCon is strictly not for profit and to keep our conference fee as low as possible, we need sponsors to support us. The sponsorship money is used to help make CHCon, an instructive and quality event for the Canterbury & NZ tech community. More information about sponsorship is available here: https://2017.chcon.nz/#cfs Event Website: https://2017.chcon.nz/ Thanks from the CHCon crew

1 0

Request for contact in TVNZ On Demand for escalation of support ticket 117175
by Alexander Neilson 05 Jul '17

05 Jul '17

Hi All Sorry for the noise. Can someone inside TVNZ On Demand please make contact off list. It looks like some of our IP's (At $DAYJOB - inside 45.118.188.0/22) are on some kind of block list being used by TVNZ On Demand for Akamai delivered videos. The video player just shows a fairly useless error message, and when looked at in fiddler a 403 is being returned from the Akamai server. We are not aware of any lists any of the affected IP's are on and I believe they may be legacy listings. I have been trying to work through with TVNZ On Demand Support under Ticket 117175. So far I haven't been able to escalate this or get any feedback or way forward. We have worked with our upstream carrier and they have raised it with Akamai who have indicated it isn't a block they have in place but that their customer has hence trying to make contact with someone who could check if the blocks are recent or prior to being held by us and if recent what caused them so we can resolve it. Thank you for your time. Regards Alexander 022 456 2326

2 1

NZNOG 2018 Announcement
by Dave Mill 02 Jul '17

02 Jul '17

Hi all We'd like to announce that we will be holding NZNOG 2018 at the Rydges Hotel in Queenstown. The conference dates are 22 - 26 January, 2018. The conference proper will be the Thursday and Friday (25 - 26 January) as normal. If anyone is interested in sponsoring the event please make contact with info(a)nznog.org . We will be putting together this year's sponsorship prospectus soon. Previous sponsors have first right of return. Have a good weekend. Cheers Dave (on behalf of the NZNOG Trust)

1 1

RFC 8195 "Use of Large Communities"
by Job Snijders 01 Jul '17

01 Jul '17

Dear NZNOG, RFC 8195 "Use of BGP Large Communities" was just now published: https://tools.ietf.org/html/rfc8195 RFC 8195 presents examples and inspiration for the operational application of Large Communities. The document suggests logical categories of Large Communities and demonstrates an orderly manner of organizing community values within those categories to achieve typical goals in routing policy. Any network or route server operator can consider using the concepts presented as the basis for their own Large Communities repertoire. RFC 8195 is meant as a companion document in the same way that RFC 1998 provided a concrete real-world application for RFC1997 BGP Communities. The RFC draws on the experience of operator communities such as NANOG and NLNOG. A ton of open source implementations [1] with Large support are already available. And with more traditional vendors like IOS XR, Junos, Arista & Nokia having releases around the corner, I hope this will be useful when planning your Large Communities deployment later this year. Kind regards, Job [1]: http://largebgpcommunities.net/implementations/

1 0

Reminder to update noc contact list/details
by Joel Wirāmu Pauling 28 Jun '17

28 Jun '17

Hi all; was looking something up for a client and noticed the Noc list here; http://www.nznog.org/noc-list - could do with some updating. Voyager is missing, other things I know to be wrong are that several of the Noc's listed have been subsumed into larger orgs. -Joel

14 16

NZIX AGM
by Dave Mill 25 Jun '17

25 Jun '17

Hi all NZIX (the peering exchange formerly known as AKL-IX) are holding their AGM in Auckland on June 27. Details are here - https://ix.nz/2017/05/30/annual-general-meeting/ NZIX is a member run, not-for-profit, peering exchange. Have your say in where the IX is heading. Non-members are also welcome. Hope to see you there! Cheers Dave

1 1

Beer
by Lesley Longhurst 22 Jun '17

22 Jun '17

Sorry for the distraction, I just think you should all see this label. Homebrew made by a friend-of-a-friend. Rather tasty, too. [cid:image001.png(a)01D2EC34.7CF018D0] Lesley Longhurst Technical Lead - Network Services Opus International Consultants Ltd, Opus IT Operations 33 The Esplanade, Petone, Lower Hutt 5012, New Zealand PO Box 30 845, Lower Hutt 5040, New Zealand +64 21 244 3718 lesley.longhurst(a)opus.co.nz<mailto:lesley.longhurst(a)opus.co.nz> www.opus.co.nz<http://www.opus.co.nz>

1 0

InternetNZ presents: Dr Marc Bruyere - The TouSIX project: SDN IXPs from design to production
by Dean Pemberton 14 Jun '17

14 Jun '17

Hi all, Just wanted to let you know about a presentation that InternetNZ is hosting in Wellington. The TouSIX project: SDN IXPs from design to production Wed 28th Jun 12:00pm – 1:00pm InternetNZ offices, level 11, 80 Boulcott Street, Wellington, New Zealand Registration: https://the-tousix-project-sdn-ixps-from-design-to-production.lilregie.com/… Come along to a presentation from Dr. Marc Bruyere. Bio here: https://www.internetsociety.org/afpif-2016/speakers/dr-marc-bruyere The Internet eXchange Points (IXP) are essential for the Internet evolution as they empower high bandwidth low latency and inexpensive local traffic peering as opposed to transit traffic. OpenFlow SDN enables more dynamic network programmability to control network behaviour via open interfaces, as opposed to the legacy closed-box solutions and proprietary-defined interfaces. This presentation is about the migration of the TouIX from a traditional to a full OpenFlow IXP. It especially describes how switches have been selected, configured and installed, and presents the TouSIX-Manager tools that have been developed for the IXP fabric robustness and members benefit. It also includes future SDX work in Japan and elsewhere, and the historical NZ based CARDIGAN SDX. TouIX is a non-profit neutral Internet eXchange Point organisation founded in 2005. It provides an interconnected network infrastructure at 4 PoPs around the city of Toulouse and the Paris FranceIX and LyonIX IXPs. Please note catering will not be provided.

1 0

plea for increase participation in v6ops/IETF
by JORDI PALET MARTINEZ 10 Jun '17

10 Jun '17

Hello all, At the last LACNIC event, I mentioned on a couple of occasions the need for ISPs in the region, especially small and medium-sized ones, to participate in the decisions taken in the IETF IPv6 Operations Working Group (v6ops). I’m sending this here as well, as I believe the situation also apply to this region. When I asked among the attendees how many participate in v6ops, only one person raised his hand. What does it mean to participate in the mailing list? Follow some emails (sometimes only 1-2 a week, sometimes they can be several in a day), and therefore learn about what is being discussed and give your opinion and, given that decisions are made by Consensus, influence them. What consequences has NOT participating? That decisions against your interests/opinions could be taken, and obviously do not consider your perspective in the standards. Generally large operators are involved, which implies that your interests are not sufficiently represented, and in general are contrary to yours. Your "vote/opinion" is not worth more than yours, but the big one is present and the small/medium NO! I give you a very concrete example. The serious problem that small and medium ISPs have, is to continue offering IPv6 and IPv4 services to their customers, when they already do not have IPv4 addresses. Only the biggest ISPs have a great purchasing power and can influence the manufacturers to do for them what they need. One possibility to solve it, extending the life of IPv4, but not necessarily deploying IPv6, is using CGN, which is also very expensive, and breaks many things. The solution is simple. Deploying IPv6-only services in the last mile, which involves using transition mechanisms, such as 464XLAT that has been deployed on millions of smartphones worldwide, so that applications continue to operate transparently as they "believe" they have IPv4. What is the problem, then? That manufacturers of CPEs are based on an old specification (RFC7084) that does not contemplate these transition mechanisms, so when a small/medium ISP asks a manufacturer for a firmware upgrade or a new CPE, they do not include that solution and perhaps they offer it with an extra cost. In my view, this should change, and that is why I am working on a number of documents, including RFC7084-bis (https://datatracker.ietf.org/doc/draft-ietf-v6ops-rfc7084-bis/) To update this situation, but there is opposition from large ISPs and virtually no small/medium "talks" about it, and in fact these large ISPs deny the situation. In addition, the document also specifies the "automated" support of those cases in which the user installs other routers (which is very common as we all know, and will be more and more in IPv6, IoT, etc.), behind the router installed by the ISP, through homenet (HNCP). I am not asking for your support for my documents, but for understanding the problem and the solution that is being proposed and/or possible new ones, and for the opinion of not only those very few “big ones”, but also of many small and medium, who are most affected. If you want to subscribe to this list, search for "subscribing" at: https://www.ietf.org/mailman/listinfo/v6ops You can see the files of the discussion in: https://mailarchive.ietf.org/arch/search/?email_list=v6ops I remind you that participating in the IETF does not require a presence in the meetings, as consensus is agreed in the list. Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Free parking network contact
by Simon 07 Jun '17

07 Jun '17

Hi there, is anyone from free parking on this list from their network operations team and can contact me please?

2 1

SkyTV NOC
by John Burns 30 May '17

30 May '17

Is anyone from SkyTV on this list? I have a /23 (allocated March 2017) that is being geoblocked on fanpass.co.nz and our customers would like us to solve it before the Lions tour starts!

1 0

cantva.canterbury.ac.nz Mail Admin at canterbury.ac.nz your server is not coming back from Greylist
by Don Gould 24 May '17

24 May '17

If there's a mail admin from canterbury.ac.nz on list, could you have a quick look at your server? We're not seeing mail coming from you because your server doesn't come back to have another go. We run a 10 minute greylist timer but you don't seem to come back for another go. # grep canterbury.ac.nz mail.log May 24 21:46:04 mx postfix/smtpd[22652]: connect from cantva.canterbury.ac.nz[132.181.2.27] May 24 21:46:05 mx tumgreyspf[22740]: Initial greylisting: REMOTEIP="132.181.2.27" HELO="cantva.canterbury.ac.nz" SENDER="stephen.hickson(a)canterbury.ac.nz" RECIPIENT="don(a)bowenvale.co.nz" QUEUEID="" May 24 21:46:05 mx postfix/smtpd[22652]: NOQUEUE: reject: RCPT from cantva.canterbury.ac.nz[132.181.2.27]: 450 4.7.1 <stephen.hickson(a)canterbury.ac.nz>: Sender address rejected: Service unavailable, greylisted (http://projects.puremagic.com/greylisting/) from=<stephen.hickson(a)canterbury.ac.nz> to=<don(a)bowenvale.co.nz> proto=ESMTP helo=<cantva.canterbury.ac.nz> TIA. D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.thinkdesignprint.co.nz skype: don.gould.nz

2 2

GLIF 2017
by GLIF Secretariat 22 May '17

22 May '17

All, Apologies for the advertising, but this global research and education networking event hosted by AARNet in Sydney may be of interest to some… Regards, Kevin Meynell ---- 17th Annual Global LambdaGrid Workshop - GLIF 2017 25-27 September 2017 Camperdown Campus, University of Sydney, Australia https://www.glif.is/meetings/2017/flyer.pdf <https://www.glif.is/meetings/2017/flyer.pdf> We are pleased to announce that registration is now open for the 17th Annual Global LambdaGrid Workshop which is being hosted by AARNet, the Australian National Research and Education Network. This will bring together leading network personnel from around the world to collaborate and exchange knowledge on new lambda networking technologies, middleware and applications. The workshop will have a specific focus on how global network architectures are supporting research applications in the Pacific region, in particular astronomy, high-energy physics, and microbiology and how big data is sent and processed around the world. There will also be discussions on the Pacific Islands Research and Education Network, long distance parallel file systems, new SDN and SDX initiatives, along with demonstrations of applications that can take advantage of these network facilities. The registration fee is AUD 450 per person (AUD 350 for registered students) up to 23 August 2017, and AUD 500 per person (AUD 400 for registered students) thereafter. Accommodation is available in the Rydges Camperdown at the special rate of AUD 165 per night including GST, the Mercure Sydney Central at the special rate of AUD 249 per night, and the Waldorf Sydney Central Serviced Apartments at the special rate of AUD 195 per night including GST. These can be reserved when registering for the workshop, and should be booked before 23 August 2017. Please note that a Software Defined Networking (SDN) Workshop will also held on Thursday, 28 September 2017 at the University of New South Wales. You can register, book accommodation and pay online at https://www.glif.is/meetings/2017/ <https://www.glif.is/meetings/2017/>

1 0

Issue with connections from CanIt-Domain-PRO anti-spam filter
by Jean-Francois Pirus 18 May '17

18 May '17

Hi all, I have an interesting issue. Just upgraded our mail server to handle srs-milter. Since the upgrade we found that the srs-milter would crash around 05:50 and 22:20 everyday. (Obviously it's got a bug) Turns out everyday around 05:50 we get a connection from canit-1.iserve.net.nz[202.191.33.141] And every night around 20:20 we get a connection from canit-scanner-2.slingshot.co.nz[60.234.4.40] They both seem to be running CanIt-Domain-PRO anti-spam filter. I cannot just block the scanner as the address is shared with MX's (ie: canit-scanner-2.slingshot.co.nz[60.234.4.40] and canit-slingshot-mx-2.t3.nz) Seems like the scanner is sending 'unusual' data once a day on a schedule. Any ideas what that single daily connection is about? or workarounds? Thanks. PS: Apart from fixing the bug myself... -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

2 5

Power issues in Skytower
by Patrick Ohearn 16 May '17

16 May '17

Hi list, Has anyone has any power issues in skytower this afternoon? We briefly lost power on level 47 around 1600.

1 0

AusNOG 2017 Call for Presentations
by Mark Prior 08 May '17

08 May '17

The next AusNOG conference is only four months away, scheduled to be held at The Langham, Melbourne, on 7 & 8 September 2017, so we are making our first call for presentations of interest to the Internet operations community. Previous feedback has suggested that attendees would like more content from the community so we'd like to encourage members of the community to submit more proposals, especially if you haven't previously presented! Internet operations is a broad topic but some areas of interest are: * Improving the redundancy/resiliency/sustainability of your network * Using automation to improve service reliability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year Naturally other topics that are of interest to the network operator community are also welcome but presentations of a purely marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Please note any timing constraints when submitting a presentation. By submitting a presentation for consideration in the AusNOG 2017 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 12 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 10 July: Presenters notified of their acceptance status as an AusNOG 2017 presentation. 30 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent by email to organisers AT ausnog DOT net. A separate call for lightning talks will be made closer to the AusNOG 2017 event. As in previous years you must be registered to attend AusNOG 2017 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation.

1 0

Alcatel IPv6 PPPoE
by Pieter De Wit 03 May '17

03 May '17

Good Morning List, I was wondering if anyone out here (there :)) has a working config for an Alcatel 7750 to give out IPv6 to subscribers. We would like to allocate /112's as a link net between the CPE and the BNG. We then want to route a /64 or /48 over this link net. All of this is configured in Radius. The link-nets are configure using the "wan-host" option under the subscriber interface. The /64 or /48 subnets is part of a /36 configured as the "pd" option. From what I was reading, it appears as if the link-nets needs to be /64...surely not ? Cheers, Pieter

11 17

Russian-controlled telecom hijacks financial services’ Internet traffic
by Michael Fincham 27 Apr '17

27 Apr '17

Morning all, For those who didn't spot this yet: <https://arstechnica.com/security/2017/04/russian-controlled-telecom-hijacks…> "On Wednesday, large chunks of network traffic belonging to MasterCard, Visa, and more than two dozen other financial services companies were briefly routed through a Russian government-controlled telecom under unexplained circumstances that renew lingering questions about the trust and reliability of some of the most sensitive Internet communications." -- Michael

1 0