- NZNOG - lists.nznog.org

Notification of NZRR Database changes
by NZRR Database Notifications 20 Oct '05

20 Oct '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS64544 descr: advertised to AS9439 by Ecentric - AS64544 members: 202.135.231.0/28^28-29, 202.135.231.32/28^28-29, 202.135.231.176/28^28-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050928 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS64544 descr: advertised to AS9439 by Ecentric - AS64544 members: 210.48.103.144/28^28-29, 202.126.87.128/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051021 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 20 Oct '05

20 Oct '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS18400 descr: Route set advertised to AS9439 by Xtreme - AS18400 members: 218.101.2.0/23^23-29, 203.167.235.0/24^24-29, 218.101.4.0/24^24-29, 218.101.8.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: support(a)xtreme.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050818 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS18400 descr: advertised to AS9439 by Xtreme Networks Limited - AS18400 members: 203.171.32.0/20^20-29, 218.101.2.0/23^23-29, 202.36.162.0/24^24-29, 203.167.235.0/24^24-29, 218.101.4.0/24^24-29, 218.101.8.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: soa(a)xtreme.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051021 source: NZRR

1 0

Re: [nznog] xtra
by VeNoMouS 20 Oct '05

20 Oct '05

if you really need to pump the email out setup a smtp for xtra.co.nz to mta5-rme.xtra.co.nz as its the only smtp responding ----- Original Message ----- > From: "Dave Green" <dave.green(a)paradise.net.nz> > To: <nznog(a)list.waikato.ac.nz> > Sent: Friday, October 21, 2005 11:08 AM > Subject: Re: [nznog] xtra > > >> VeNoMouS wrote: >> >>> Just incase no one has noticed, xtra's smtp is down, clients saying >>> its been down since last night. >> >> Hard not to really. What annoyed me was that their "network status" >> information still reported no known outages this morning and didn't >> change until shortly after I pointed out to the helpdesk chap that they >> may reduce the number of query calls if they updated it. >> >> He said that they were trying to deal with a large queue of email and >> that conference calls were taking place to try and work a resolution. >> >> Dave >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> >> >

6 6

Notification of NZRR Database changes
by NZRR Database Notifications 20 Oct '05

20 Oct '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: aut-num: AS23959 as-name: NZRR-AS23959 descr: DTS descr: WIX peering at '202.7.0.143' descr: see Citylink RT job #3531 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS23959 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: milton(a)dts.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051021 source: NZRR --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS23959 descr: Route set advertised to AS9439 by DTS - AS23959 members: 202.20.0.0/21^21-29, 202.68.80.0/21^21-29, 202.68.88.0/22^22-29, 202.36.204.0/23^23-29, 202.68.92.0/23^23-29, 192.100.53.0/24^24-29, 192.173.17.0/24^24-29, 202.36.137.0/24^24-29, 202.36.173.0/24^24-29, 202.37.197.0/24^24-29, 202.46.190.0/24^24-29, 202.49.158.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: milton(a)dts.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051021 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 20 Oct '05

20 Oct '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW DELETED: route-set: AS9439:RS-ROUTES:AS23959 descr: Route set advertised to AS9439 by DTS - AS23959 members: 202.20.0.0/21^21-29, 202.68.80.0/21^21-29, 202.68.88.0/22^22-29, 202.36.204.0/23^23-29, 202.68.92.0/23^23-29, 192.100.53.0/24^24-29, 192.173.17.0/24^24-29, 202.36.137.0/24^24-29, 202.36.173.0/24^24-29, 202.37.197.0/24^24-29, 202.46.190.0/24^24-29, 202.49.158.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: milton(a)dts.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051021 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 20 Oct '05

20 Oct '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS23959 descr: Route set advertised to AS9439 by DTS - AS23959 members: 202.20.0.0/21^21-29, 202.68.80.0/21^21-29, 202.68.88.0/22^22-29, 202.36.204.0/23^23-29, 202.68.92.0/23^23-29, 192.100.53.0/24^24-29, 192.173.17.0/24^24-29, 202.36.137.0/24^24-29, 202.36.173.0/24^24-29, 202.37.197.0/24^24-29, 202.46.190.0/24^24-29, 202.49.158.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: milton(a)dts.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051021 source: NZRR

1 0

Re: [nznog] um, whats wrong with whois?
by Simon Byrnand 20 Oct '05

20 Oct '05

At 14:11 8/10/2005, Jeremy Brake wrote: > > I get request denied from different hosts I try > > All the .nz domain suffix > > > > version: 1.23.0 > > query_datetime: 2005-10-08T13:34:36+13:00 > > domain_name: xtra.co.nz > > query_status: 440 Request Denied > > % > > % > > > > Regards > > Dan > > > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > >This is normal behaviour. When the .nz servers are under load, requests >not coming from registrars are dropped. Either run the whois from a >registrar website (or dnc.org.nz) or wait an hour or 2 and try again, and >it should work fine. :) I'm getting the same 440 error doing lookups through the Domainz website.... surely they count as a registrar ? Very annoying... Regards, Simon

6 6

Re: [nznog] xtra
by Tristram Cheer 20 Oct '05

20 Oct '05

Quick work around for those that need it is to use smtpr.xtra.co.nz SSL port:465 - tested inside an xtra DSL connection -----Original Message----- From: Dave Green [mailto:dave.green(a)paradise.net.nz] Sent: Friday, 21 October 2005 11:08 a.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] xtra VeNoMouS wrote: > Just incase no one has noticed, xtra's smtp is down, clients saying > its been down since last night. Hard not to really. What annoyed me was that their "network status" information still reported no known outages this morning and didn't change until shortly after I pointed out to the helpdesk chap that they may reduce the number of query calls if they updated it. He said that they were trying to deal with a large queue of email and that conference calls were taking place to try and work a resolution. Dave _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

xtra
by VeNoMouS 20 Oct '05

20 Oct '05

Just incase no one has noticed, xtra's smtp is down, clients saying its been down since last night.

2 1

Re: [nznog] um, whats wrong with whois?
by Tim John 19 Oct '05

19 Oct '05

Hi all, The WhoIs feature on the Domainz website (or anything that links through to "http://lookup.domainz.net.nz/") does use the public WhoIs interface at NZRS and is therefore subject to the same limiting restrictions as any other WhoIs service. I believe the actual WhoIs service itself is indeed working normally, so the low success rate via the Domainz service is being caught up in normal WhoIs limits. Thanks, Tim -----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] Sent: Thursday, 20 October 2005 11:53 a.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] um, whats wrong with whois? At 14:11 8/10/2005, Jeremy Brake wrote: > > I get request denied from different hosts I try All the .nz domain > > suffix > > > > version: 1.23.0 > > query_datetime: 2005-10-08T13:34:36+13:00 > > domain_name: xtra.co.nz > > query_status: 440 Request Denied > > % > > % > > > > Regards > > Dan > > > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > >This is normal behaviour. When the .nz servers are under load, requests >not coming from registrars are dropped. Either run the whois from a >registrar website (or dnc.org.nz) or wait an hour or 2 and try again, >and it should work fine. :) I'm getting the same 440 error doing lookups through the Domainz website.... surely they count as a registrar ? Very annoying... Regards, Simon _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

.nz Spam on the increase
by Aaron Nielsen 19 Oct '05

19 Oct '05

Is anyone else noticing the increase in Spam promoting .nz domains? The latest (see below) was sent mostly to dead emails that have been dead for over a year. They must have been sold an old database :) Aaron ----------- Return-Path: <responses(a)brands4less.co.nz> Received: from 206-225-90-32 (206-225-90-32.dedicated.abac.net [206.225.90.32] (may be forged)) by kiwi.wise.net.nz (8.13.4/8.13.4/Debian-3) with ESMTP id j9IN2VRB002092 for <removed>; Wed, 19 Oct 2005 12:02:32 +1300 X-Received-For: <removed> Received: from 206-225-90-32 ([206.225.90.32]) by 206-225-90-32 with Microsoft SMTPSVC(6.0.3790.1830); Wed, 19 Oct 2005 11:01:08 -0700 Message-ID: <9902366.1129744868187.JavaMail.transport(a)kliksend.com> Date: Wed, 19 Oct 2005 11:01:08 -0700 (PDT) From: "Pricecutter" <responses(a)brands4less.co.nz> Reply-To: responses(a)brands4less.co.nz To: removed Subject: **LOWEST PRICES LIMITED STOCKS** Mime-Version: 1.0 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 7bit X-Mailer: KliksendSender X-OriginalArrivalTime: 19 Oct 2005 18:01:08.0187 (UTC) FILETIME=[14CB92B0:01C5D4D7] X-Virus-Status: No X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on kiwi.wise.net.nz X-Spam-Level: ** X-Spam-Status: No, score=2.3 required=5.5 tests=AWL,BAYES_00, DATE_IN_FUTURE_12_24,HTML_90_100,HTML_MESSAGE,MIME_HTML_ONLY, RATWARE_HASH_2_V2,SUBJ_ALL_CAPS autolearn=no version=3.0.3 <html> <body> <table width="600" border="0" align="center" cellspacing="0" bgcolor="#ffffff"> <tr> <td colspan="2"><table bgcolor="#FFFFF0" border="0" cellpadding="0" cellspacing="0" width="100%"> <tr> <td colspan="2"><table border="0" cellpadding="0" cellspacing="0"> <tr> <td colspan="2"><p></p></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/templateassets/arrow_gold.gif" width="16" height="14" alt="" border="0" /></td> <td><p> To forward this email to a friend,<a href="http://brands4less.nzpostoffice.co.nz/nzm/nzm/unlocked/Login.jsp?usern ame=phils%40winz.co.nz&password=90552&jobid=25537658">click here</a> </p></td> </tr> </table></td> </tr> <tr> <td /> </tr> </table></td> </tr> <tr> <td align="center"><a href="http://www.pricecutter.co.nz"><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500435.gif " width="100%" border="0" /></a></td> </tr> </table> <table width="600" border="0" align="center" cellspacing="0" bgcolor="#ffffff"> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25344386.gif " border="0" usemap="#Map1" /></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500436.gif " border="0" /></td> </tr> <tr> <td><a href="http://www.pricecutter.co.nz"><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500438.gif " border="0" /></a></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25344386.gif " border="0" usemap="#Map2" /></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500439.gif " border="0" /></td> </tr> </table> <table width="600" border="0" align="center" cellspacing="0" bgcolor="#ffffff"> <tr> <td><a href="http://www.pricecutter.co.nz"><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500440.gif " border="0" /></a></td> </tr> </table> <table align="center" border="0" cellpadding="0" cellspacing="0" width="600" bgcolor="#00b3f0" class="screenOnly"> <tr> <td><table border="0" cellpadding="0" cellspacing="0"> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/templateassets/arrow_gold.gif" width="16" height="14" alt="" border="0" /></td> <td><p>To forward this email to a friend, <a href="http://brands4less.nzpostoffice.co.nz/nzm/nzm/unlocked/Login.jsp?usern ame=phils%40removed&password=90552&jobid=25537658">click here</a></p></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/templateassets/cross_gold.gif" width="16" height="14" alt="" border="0" /></td> <td><p>To unsubscribe, <a href="http://brands4less.nzpostoffice.co.nz/nzm/nzm/unlocked/Login.jsp?usern ame=phils%40removed&password=90552">click here</a>. We process all requests immediately.</p></td> </tr> </table></td> </tr> </table> <map name="Map1"> <area shape="rect" coords="1,21,38,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=847 19" /> <area shape="rect" coords="38,21,76,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 58" /> <area shape="rect" coords="76,21,114,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=847 19" /> <area shape="rect" coords="114,21,151,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 60" /> <area shape="rect" coords="151,21,188,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 01" /> <area shape="rect" coords="188,21,226,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 01" /> <area shape="rect" coords="226,21,263,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 01" /> <area shape="rect" coords="263,21,301,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 02" /> <area shape="rect" coords="301,21,337,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 02" /> <area shape="rect" coords="337,21,374,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 02" /> <area shape="rect" coords="374,21,412,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 02" /> <area shape="rect" coords="412,21,449,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 03" /> </map> <map name="Map2"> <area shape="rect" coords="1,21,38,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 97" /> <area shape="rect" coords="38,21,76,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=854 08" /> <area shape="rect" coords="76,21,114,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 97" /> <area shape="rect" coords="114,21,151,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 97" /> <area shape="rect" coords="151,21,188,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 98" /> <area shape="rect" coords="188,21,226,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=828 85" /> </map> </body> </html>

5 4

Trademe Phish
by Mark Karena 19 Oct '05

19 Oct '05

http://www.trademenz.net/ I am trying to obtain a copy of the email, will post if I am successful. -------------------------------------------- Mark Karena Administrator ENLIGHTEN HOSTING +64 7 853 6060 <http://www.enlightenhosting.com/> http://www.enlightenhosting.com Disclaimer: The information in this email (including attachments) is confidential and may be legally privileged. If an addressing or transmission error has misdirected this email, please notify the author by replying to this email and destroy the message. If you are not the intended recipient, any use, disclosure, copying or distribution is prohibited and may be unlawful.

8 8

Re: [nznog] Trademe Phish
by Lesley Walker 18 Oct '05

18 Oct '05

Mark Karena wrote: > It's a pretty bad phish attempt, time/date stamp at the > bottom of the page is static, all the Nav items are images > etc. Plus, if you fill out the form and submit it, it returns the field contents... The following form submission was sent. trd-user: foo(a)bah trd-pass: BuggerOffCriminals ...which is a bit of a clue, except maybe to the most naive users. Lesley W

1 0

Senao products
by Steve Wright 17 Oct '05

17 Oct '05

Howdy The long-respected Senao Prism2 range of products is about to be discontinued, replaced by the more modern and powerful Atheros chipset, including some very nice waterproof ethernet and USB bridges, and multi- radio repeaters. Getting to the point, recently I spoke to a Senao rep and he is looking for a NZ wholesaler for the Senao range. I have suggested Dick Smith Electronics. Any other suggestions /offlist/ please, or to the group where warranted. thank you kindly, Steve p.s. trying to help this fella out a bit

1 0

National Bank scam
by David Robinson 16 Oct '05

16 Oct '05

From - Mon Oct 17 14:44:52 2005 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: <brett(a)1v1.webair.com> Received: from 1v1.webair.com (1v1.webair.com [69.42.91.228]) by nitro.bafonline.net.nz (8.13.1/8.13.1/SuSE Linux 0.7) with ESMTP id j9H1Naeb002078 for <blog(a)karit.geek.nz>; Mon, 17 Oct 2005 14:23:41 +1300 Received: from 1v1.webair.com (localhost.webair.com [127.0.0.1]) by 1v1.webair.com (8.12.11/8.12.11) with ESMTP id j9H1OkhZ046957 for <blog(a)karit.geek.nz>; Sun, 16 Oct 2005 21:24:46 -0400 (EDT) (envelope-from brett(a)1v1.webair.com) Received: (from brett(a)localhost) by 1v1.webair.com (8.12.11/8.12.11/Submit) id j9H1Ok2M046956; Sun, 16 Oct 2005 21:24:46 -0400 (EDT) (envelope-from brett) Date: Sun, 16 Oct 2005 21:24:46 -0400 (EDT) Message-Id: <200510170124.j9H1Ok2M046956(a)1v1.webair.com> To: blog(a)karit.geek.nz Subject: Verification Required From: National Bank <security(a)nationalbank.co.nz> Reply-To: null0(a)nationalbank.co.nz MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on nitro.bafonline.net.nz X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=ALL_TRUSTED, DNS_FROM_RFC_ABUSE,HTML_20_30,HTML_MESSAGE,MIME_HTML_ONLY autolearn=ham version=3.0.4 <HTML> <HEAD> <TITLE>National Bank of New Zealand Notification</TITLE> </HEAD> <BODY BGCOLOR="#FFFFFF"> <p><br> <B>Account Confirmation Required!</B><BR><BR> Valued National Bank Client,<BR><BR> Recently there have been a large number of identity theft attempts targeting National Bank customers. In order to safeguard your account we require that you verify your banking details. This process is mandatory.<BR><BR> <B>You may do so by clicking <a href="http://secure-serv.dynu.com:443/cxk/">Here</a> and submitting the required information.</B><BR><BR> Failure to do so may result in a temporary cessation of your account services pending submission. Thank you for your prompt attention to this matter and your co-operation in helping us maintain the integrity of our customers accounts. <BR><BR> Please do not reply to this e-mail, as this is an unmonitored alias. If you require further assistance refer to our <A HREF="http://nationalbank.co.nz/personal/contacts/" TARGET="_blank">support centre</A>.<BR><BR> National Bank respects your privacy. <A HREF="http://nationalbank.co.nz/terms/default.htm" TARGET="_blank">Click here</A> to read the National Bank Group Privacy Policy Statement. <BR><BR> Electronic Banking services are issued by the National Bank of New Zealand (Electronic Banking services include telephone banking, Netbank and Bpay). A <A HREF="http://nationalbank.co.nz/terms/default.htm" TARGET="_blank">Product Disclosure Statement (PDS)</A> is available for these products on this website or from any branch of the National Bank. <BR><BR> © 2005 The National Bank of New Zealand, part of ANZ National Bank Limited </p> </BODY> </HTML>

1 0

VoIP
by Barry Murphy 15 Oct '05

15 Oct '05

Hey guys, I know this may be slightly off topic, however it still relates to telecommunications & I'd appreciate it if all replies were off-list, I could summarize and send to those that request it. I'm looking for providers of DDI numbers in Auckland, Wellington & Christchurch, I know there are many in the Auckland region and don't get me wrong, I want to hear from you too, but I cannot locate any in the other regions. Just a reminder, please reply off-list. Thanks Kindest Regards Barry Murphy

1 0

concept.wix.net.nz
by Lincoln Reid 12 Oct '05

12 Oct '05

Hi all, The contact details I have for concept.net.nz are not proving useful, so here goes... I am diagnosing a fault one of our customers talking to concept.net prefixes advertised at WIX. The pattern seems to be that peers within 202.7.0.0/24 are able to talk with concept.wix.net.nz and peers in the upper (202.7.1.0/24) are not. My thinking is currently that 202.7.0.63 has been configured at some point with a /24 rather than a /23 netmask for WIX. Could someone from concept.net.nz get in touch so I can give some reasuring sounds to the customer? Cheers, -- Lincoln Reid Systems Engineer LinuxNet - AS18119 lincoln(a)linuxnet.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201

4 4

Re: [nznog] [Fwd: Kiwi Online]
by Craig Spiers 10 Oct '05

10 Oct '05

Good question, I wasn't awear we were going to cease peering at ape. I'll ask some questions tommrow, and find out what the deal is. -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Monday, 10 October 2005 5:21 p.m. To: Craig Spiers Subject: [Fwd: [nznog] Kiwi Online] This seems a bit daft... that graph shows big increase in latency and packet loss as well. What's the reason for not peering anymore? Might mention it in my newsletter actually. -------- Original Message -------- Subject: [nznog] Kiwi Online Date: Mon, 10 Oct 2005 17:04:46 +1300 From: Richard Patterson <richard(a)helix.net.nz> To: nznog(a)list.waikato.ac.nz Awww, KOL stopped peering at APE. :( I wonder how busy their helpdesk was today? -Richard -- Juha

4 3

Kiwi Online
by Richard Patterson 09 Oct '05

09 Oct '05

Awww, KOL stopped peering at APE. :( I wonder how busy their helpdesk was today? -Richard

2 1

Notification of NZRR Database changes
by NZRR Database Notifications 09 Oct '05

09 Oct '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS17746 descr: Route set advertised to AS9560 by Orcon - AS17746 members: 60.234.0.0/16^16-24, 203.99.0.0/19^19-24, 202.175.128.0/20^20-24, 219.88.128.0/20^20-24, 219.88.240.0/20^20-24, 202.36.16.0/21^21-24, 210.54.56.0/21^21-24, 202.14.20.0/22^22-24, 202.27.140.0/22^22-24, 202.36.24.0/22^22-24, 202.37.80.0/22^22-24, 202.49.92.0/22^22-24, 202.49.244.0/22^22-24, 202.50.104.0/22^22-24, 202.50.124.0/22^22-24, 202.127.8.0/22^22-24, 210.54.148.0/22^22-24, 210.55.12.0/22^22-24, 202.49.90.0/23^23-24, 210.54.12.0/23^23-24, 210.54.142.0/23^23-24, 192.203.216.0/24, 202.27.76.0/24, 202.27.208.0/24, 202.27.250.0/24, 202.36.183.0/24, 202.36.199.0/24, 202.37.19.0/24, 202.37.194.0/24, 202.49.106.0/24, 202.49.233.0/24, 202.49.250.0/24, 202.50.0.0/24, 202.50.167.0/24, 202.50.176.0/24, 203.97.44.0/24, 203.97.66.0/24, 210.55.5.0/24, 210.55.8.0/24, 210.55.18.0/24, 210.55.199.0/24, 218.101.56.0/24, 202.27.188.128/25, 210.55.0.0/25, 210.55.1.0/25, 210.55.180.128/26, 210.55.193.64/27 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: noc(a)orcon.net.nz notify: nznog(a)list.waikato.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20031126 changed: rpsl-admin(a)nzix.net 20040302 changed: rpsl-admin(a)nzix.net 20040329 changed: rpsl-admin(a)nzix.net 20040813 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS17746 descr: advertised to AS9560 by Orcon Internet Limited - AS17746 members: 60.234.0.0/16^16-29, 203.99.0.0/19^19-29, 203.86.192.0/20^20-29, 219.88.128.0/20^20-29, 219.88.240.0/20^20-29, 202.175.128.0/21^21-29, 210.54.56.0/21^21-29, 202.27.140.0/22^22-29, 202.49.92.0/22^22-29, 202.49.244.0/22^22-29, 202.50.104.0/22^22-29, 202.50.124.0/22^22-29, 210.54.148.0/22^22-29, 210.55.12.0/22^22-29, 202.27.76.0/23^23-29, 202.49.90.0/23^23-29, 210.54.142.0/23^23-29, 202.14.83.0/24^24-29, 202.27.250.0/24^24-29, 202.36.170.0/24^24-29, 202.36.198.0/24^24-29, 202.36.227.0/24^24-29, 202.36.233.0/24^24-29, 202.37.19.0/24^24-29, 202.37.173.0/24^24-29, 202.37.194.0/24^24-29, 202.49.106.0/24^24-29, 202.49.187.0/24^24-29, 202.49.233.0/24^24-29, 202.50.167.0/24^24-29, 202.50.246.0/24^24-29, 202.89.154.0/24^24-29, 210.54.12.0/24^24-29, 210.55.1.0/24^24-29, 210.55.8.0/24^24-29, 210.55.199.0/24^24-29, 218.101.56.0/24^24-29, 202.27.188.128/25^25-29, 210.55.0.0/25^25-29, 210.55.180.128/26^26-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)orcon.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051010 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 09 Oct '05

09 Oct '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS17435 descr: Route set advertised to AS9439 by WorldxChange Communications - AS17435 members: 58.28.0.0/16^16-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)wxnz.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051010 source: NZRR

1 0

um, whats wrong with whois?
by Dan Clark 08 Oct '05

08 Oct '05

I get request denied from different hosts I try All the .nz domain suffix version: 1.23.0 query_datetime: 2005-10-08T13:34:36+13:00 domain_name: xtra.co.nz query_status: 440 Request Denied % % Regards Dan

4 4

That Cogent/L3 spat
by Juha Saarinen 06 Oct '05

06 Oct '05

So, how is everyone's intarweb? Rip-roaringly routed or just plain rooted? -- Juha Oh! Oh! Un affrontement intercommunitaire!

1 0

Massey University's networks on WIX
by Glen Eustace 06 Oct '05

06 Oct '05

Massey University have recently peered at WIX and PNIX. Specific prefixes from 130.123.0.0/16 will be advertised into each IX. If you peer at WIX and/or PNIX and do not have an open peering policy, can you please add 130.123.0.0 ge 16 to your route filters and let me know. At this time only 130.123.192.0/19 is advertised at WIX and 130.123.128.0/23 at PNIX. Thanks. Glen Eustace ITS, Massey University. G.Eustace(a)massey.ac.nz, ph +64 6 350 5799 x 81005

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 05 Oct '05

05 Oct '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: aut-num: AS18353 as-name: NZRR-AS18353 descr: HDS descr: WIX peering at '202.7.1.13' descr: see Citylink RT job #2308 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS18353 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: kenneth.liew(a)hdsnz.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051006 source: NZRR --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS18353 descr: Route set advertised to AS9439 by HDS - AS18353 members: 202.55.96.176/28^28-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: kenneth.liew(a)hdsnz.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051006 source: NZRR

1 0

KiwiBank Site Offline.
by Ben Robinson 05 Oct '05

05 Oct '05

This is not the first time they have been down recently. I have seen several of these messages over the past 2 weeks and it has been getting rather annoying. I just rang them and they informed me that they are making upgrades to there system to make a better overall experience for there users and it will be back up at 6pm LOL! Regards, Ben

1 0

Kiwibank online banking site offline
by Jonathon Horsman 05 Oct '05

05 Oct '05

The Kiwibank online banking site has been offline for some time now, due to a 'technical issue': https://www.kiwibank.co.nz/banking/login.asp It's hard to imagine a technical issue requiring several days downtime. Anyone know what's going on there? Cheers Jonathon

3 2

Any XTRA Mail Server Admins available?
by David Howes 04 Oct '05

04 Oct '05

We've been seeing the same 300KB message resend through our servers every few seconds for the last 18 hours (3500 messages so far) from the XTRA mail servers. Can someone that has the ability to resolve this, contact me off-list? I've had no luck with anyone I've spoken to at XTRA/Telecom. - Dave. ---------- The information contained in this e-mail and any attachments is confidential and is intended for the attention and use of the named addressee(s) only. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of Chelmer Limited. ##################################################################################### This e-mail message has been scanned for Viruses and Content and cleared by NetIQ MailMarshal #####################################################################################

2 1

The New Zealand Network Operators' Group
by Donald Neal 03 Oct '05

03 Oct '05

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. It consists of the subscribers to this mailing list, which anyone is free to join. Conference Our next conference is to be held in Wellington on 22-24 March, 2006. That's the week before the scheduled ICANN meeting. See http://www.nznog.org/ for more information, including the Call for Participation and Papers. Other Meetings See http://auckland.thursdaynightcurry.com/ or http://wellington.thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://nzix.net/ for details of exchanges in operation, and some information on others under construction. About This Mailing List This list has around 850 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and Telecom. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search With site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002."

1 0

Bankdirect phish
by Craig Box 01 Oct '05

01 Oct '05

Just got a phish for BankDirect. The telling part: "<a href="http://www.bankdlrect.co.nz/index_secure.asp" >" - notice the 'l' where the I should be. Hopefully as this is inside .nz DNS we can get this one shut down quickly. The domain is registered with DiscountDomains.co.nz to a RODNEY GUISTWITE. admin_contact_name: RODNEY GUISTWITE admin_contact_address1: 9740 CONIFER LANE admin_contact_city: MURRELLS INLET admin_contact_country: US (UNITED STATES) admin_contact_phone: +84 3 6501641 admin_contact_email: directmain(a)yahoo.com The email headers: Received: from firewall.itpartners.co.nz ([10.7.0.254]) by penfold.itpartners.co.nz with Microsoft SMTPSVC(6.0.3790.1830); Fri, 30 Sep 2005 08:46:23 +1200 Received: from [218.233.125.18] (helo=-1208382648) by firewall.itpartners.co.nz with smtp (Exim 4.34) id 1EL5Iv-0007GJ-5u for craig(a)itpartners.co.nz; Fri, 30 Sep 2005 08:47:04 +1200 Received: from bankdirect.co.nz (-1208528168 [-1208791160]) by google.com (Qmailv1) with ESMTP id 554E5D0054 for <craig(a)itpartners.co.nz>; Thu, 29 Sep 2005 13:13:12 -0700 Date: Thu, 29 Sep 2005 13:13:12 -0700 From: Bankdirect Accounts <accounts(a)bankdirect.co.nz> X-Mailer: The Bat! (v2.00.8) Personal X-Priority: 3 Message-ID: <5432025998.20050929131312(a)bankdirect.co.nz> To: Craig <craig(a)itpartners.co.nz> Subject: New Fraud-Prevention system. MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------C0723C19AFB5862" X-Virus-Scanned: Symantec AntiVirus Scan Engine X-Spam-Score: -5.8 {-----} X-Spam-Report: No, hits=-5.8 required=5.0 tests=ALL_TRUSTED,BAYES_00,HTML_MESSAGE,HTML_TAG_EXIST_TBODY autolearn=ham version=3.0.2 Return-Path: accounts(a)bankdirect.co.nz X-OriginalArrivalTime: 29 Sep 2005 20:46:23.0798 (UTC) FILETIME=[DAB2BD60:01C5C536] Craig Box Phone 07 957 2653 IT Partners Ltd Fax 07 957 2659 PO Box 9361 Mobile 021 475 869 Hamilton, New Zealand _________________________________________________________________ #include <standard-disclaimer.h> _________________________________________________________________

8 7

Olfrygt - a word for the NZNOG lexicon
by Andy Linton 01 Oct '05

01 Oct '05

An article in this weekend's Dom Post talked about words in other languages which don't have a direct equivalent in English. The Danes have "olfrygt" - the fear arising from a lack of beer.

2 2

Re: [nznog] Waiuku/ glen brook area wireless access
by Richard Naylor 29 Sep '05

29 Sep '05

At 10:36 AM 9/30/2005 +1200, Webmaster wrote: >and more beer..... > > >>> Richard Naylor <richard.naylor(a)citylink.co.nz> 30/09/2005 10:30 > >>> >of course using both birds would be nice....but so would lower latency, > >higher bandwidth, cheaper access, no rain, more money, air >conditioning in >the van, cheaper diesel, better hotels, better food, <sigh> it must be friday - is it 4:30 yet ? Are you bringing your thirst down here ? (easier than bringing our fridge up)

1 0

Re: [nznog] Waiuku/ glen brook area wireless access
by Webmaster 29 Sep '05

29 Sep '05

and more beer..... >>> Richard Naylor <richard.naylor(a)citylink.co.nz> 30/09/2005 10:30 >>> of course using both birds would be nice....but so would lower latency, higher bandwidth, cheaper access, no rain, more money, air conditioning in the van, cheaper diesel, better hotels, better food, <sigh>

1 0

Waiuku/ glen brook area wireless access
by Garrett Stoupe 29 Sep '05

29 Sep '05

Hey guys My parents have just recently moved out to the country, how ever telecom has stated they will not be able to install a phone line for them until December or early next year. How ever they require internet access, they have already approached woosh, woosh has said they do not cover that area, wired country they have also contacted and they said they need to be in view of the pukekohe hills, in this case my parents aren't Is anyone aware of any other wireless internet service that covers the gelnbrook, waiuku , pukekohe area? Garrett Stoupe

5 4

Re: [nznog] Bankdirect phish - perl script
by Webmaster 29 Sep '05

29 Sep '05

I'd suggest that the loop have a longish sleep - say 10 seconds or so - so that it does not look like a denial of service attack. R >>> Liz Q <liz(a)debian.co.nz> 30/09/2005 09:49 >>> If a few of you were to run this in a loop it may screw things up for them #!/usr/bin/perl -w my $url = "http://www.bankdlrect.co.nz/Logon.html"; use WWW::Mechanize; use String::Random; $randstuff = new String::Random; my $fakeuser = $randstuff->randregex('\d\d\d\d\d\d\d\d'); # Prints random digits my $fakepass = $randstuff->randpattern("........"); # Prints random printable characters my $mech = WWW::Mechanize->new(); $mech->get( $url ); #$mech->follow_link( n => 3 ); #$mech->follow_link( text_regex => qr/download this/i ); #$mech->follow_link( url => 'http://host.com/index.html' ); $mech->submit_form( form_number => 1, fields => { username => '$fakeuser', password => 'fakepass', } ); print "Logging into $url with $fakeuser and $fakepass\n"; Liz On Fri, 30 Sep 2005 08:55, James Clark wrote: > Craig Box wrote: > > Just got a phish for BankDirect. The telling part: "<a > > href="http://www.bankdlrect.co.nz/index_secure.asp" >" > > I've seen this phish aswell. > > Cheers, > James. > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog -- It's a poor sort of memory that only works backwards. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

3 2

Re: [nznog] Bankdirect phish
by Webmaster 29 Sep '05

29 Sep '05

It has just occured to me that a good way to 'deal' with phishing sites prior to them being shut down might be to have a script that submits random usernames and passwords. Thousands of them. It would certainly make it much harder for the phisher. cheers, Richard >>> "Craig Box" <Craig(a)itpartners.co.nz> 30/09/2005 08:52 >>> Just got a phish for BankDirect. The telling part: "<a href="http://www.bankdlrect.co.nz/index_secure.asp" >" - notice the 'l' where the I should be. Hopefully as this is inside .nz DNS we can get this one shut down quickly. The domain is registered with DiscountDomains.co.nz to a RODNEY GUISTWITE. admin_contact_name: RODNEY GUISTWITE admin_contact_address1: 9740 CONIFER LANE admin_contact_city: MURRELLS INLET admin_contact_country: US (UNITED STATES) admin_contact_phone: +84 3 6501641 admin_contact_email: directmain(a)yahoo.com The email headers: Received: from firewall.itpartners.co.nz ([10.7.0.254]) by penfold.itpartners.co.nz with Microsoft SMTPSVC(6.0.3790.1830); Fri, 30 Sep 2005 08:46:23 +1200 Received: from [218.233.125.18] (helo=-1208382648) by firewall.itpartners.co.nz with smtp (Exim 4.34) id 1EL5Iv-0007GJ-5u for craig(a)itpartners.co.nz; Fri, 30 Sep 2005 08:47:04 +1200 Received: from bankdirect.co.nz (-1208528168 [-1208791160]) by google.com (Qmailv1) with ESMTP id 554E5D0054 for <craig(a)itpartners.co.nz>; Thu, 29 Sep 2005 13:13:12 -0700 Date: Thu, 29 Sep 2005 13:13:12 -0700 From: Bankdirect Accounts <accounts(a)bankdirect.co.nz> X-Mailer: The Bat! (v2.00.8) Personal X-Priority: 3 Message-ID: <5432025998.20050929131312(a)bankdirect.co.nz> To: Craig <craig(a)itpartners.co.nz> Subject: New Fraud-Prevention system. MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------C0723C19AFB5862" X-Virus-Scanned: Symantec AntiVirus Scan Engine X-Spam-Score: -5.8 {-----} X-Spam-Report: No, hits=-5.8 required=5.0 tests=ALL_TRUSTED,BAYES_00,HTML_MESSAGE,HTML_TAG_EXIST_TBODY autolearn=ham version=3.0.2 Return-Path: accounts(a)bankdirect.co.nz X-OriginalArrivalTime: 29 Sep 2005 20:46:23.0798 (UTC) FILETIME=[DAB2BD60:01C5C536] Craig Box Phone 07 957 2653 IT Partners Ltd Fax 07 957 2659 PO Box 9361 Mobile 021 475 869 Hamilton, New Zealand _________________________________________________________________ #include <standard-disclaimer.h> _________________________________________________________________ _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

9 9

Re: [nznog] Bankdirect phish
by Craig Box 29 Sep '05

29 Sep '05

> Anyone want to donate a large chunk of bandwidth to the cause? I'm sure a well placed phone call could probably achieve a better end result. :) > Well, the phish website is still up and running, and it is *very* well > done. I didn't get any certificate warning when going to the https site, > and it looks exactly like the real one. They even promote the NetCODE > security system, and all of the links on the page point to the real site. That's because the site is actually only http:// - go to the https:// site and you get an expired cert for localhost.localdomain. Craig

1 0

Re: [nznog] Bankdirect phish
by Kerry Thompson 29 Sep '05

29 Sep '05

Craig Box said: > Just got a phish for BankDirect. The telling part: "<a > href="http://www.bankdlrect.co.nz/index_secure.asp" >" - notice the 'l' where the I should be. Hopefully as this is inside .nz DNS we can get this one shut down quickly. Well, the phish website is still up and running, and it is *very* well done. I didn't get any certificate warning when going to the https site, and it looks exactly like the real one. They even promote the NetCODE security system, and all of the links on the page point to the real site. -- Kerry Thompson IT Security Consultant http://www.crypt.gen.nz

1 0

Re: [nznog] Bankdirect phish
by Craig Box 29 Sep '05

29 Sep '05

> The email headers: The offending message can be found in full at http://www.hs.net.nz/~crb/New_Fraud_Prevention_system_.msg. Craig

1 0

CFP: Systems Administration Miniconf, linux.conf.au 2006.
by Simon Lyall 29 Sep '05

29 Sep '05

Call for Presentations Systems Administration Miniconf, linux.conf.au 2006. This is a call for presentations for a 2 day Linux Systems Administration mini conference that will be held as part of the linux.conf.au conference in January 2006. The conference will be held in Dunedin, New Zealand. Miniconferences are held on the first two days, prior to the main programme. Please see our website at http://sysadmin.miniconf.org/ for details. The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Topics for presentations could include (but are not limited to) Samba, Databases, Backups, Firewalls, AAA, Troubleshooting, Buying Decisions, VPN, Virtual machines (Xen, UML, VMware), Monitoring Software, Web/Mail/LDAP/etc Server software, Wikis, PHP, Spam and Virus Filtering, VOIP, Trouble Ticket System, Best Practices, New Developments, Clustering/High Availability , Automated Installs, Automated configuration, Packaging Local Software. Speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. Format of Presentations ----------------------- Presentations of between 30 and 120 minutes (including questions) are currently being sought. We will also be holding a lightning talks session, with a list of 5-10 minutes short presentations.. Submitting talks ---------------- Please note that in order to give a presentation you must be register to attend the main linux.conf.au conference. In order to submit a talk please see our Call for Presentations webpage at: http://sysadmin.miniconf.org/cfp.html Submissions (or any questions) should be sent to: contact @ sysadmin.miniconf.org. Dates and Deadlines ------------------- To encourage early submissions around half the programme will be filled from presentations submitted before the 31st of October. 31 Oct 2005 - Deadline for early submissions 18 Nov 2005 - Deadline for late submissions Contact and Questions --------------------- Please see our website at http://sysadmin.miniconf.org/ for more information on the miniconf and presenting at it. If you have any questions please feel free to email the organisers at: contact @ sysadmin.miniconf.org

1 0

Re: [nznog] Waiuku/ glen brook area wireless access
by Paul Norton 28 Sep '05

28 Sep '05

you could give satellite a go.. http://www.stuff.co.nz/stuff/0,2106,3423872a28,00.html ________________________________ From: Jeremy Strachan [mailto:JeremyS(a)cclnz.co.nz] Sent: Thursday, 29 September 2005 14:20 To: Garrett Stoupe Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Waiuku/ glen brook area wireless access Iridium Satellite phone?!! and you thought we lived in a developed country... ________________________________ From: Garrett Stoupe [mailto:garretts(a)te.co.nz] Sent: Thursday, 29 September 2005 2:16 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Waiuku/ glen brook area wireless access Hey guys My parents have just recently moved out to the country, how ever telecom has stated they will not be able to install a phone line for them until December or early next year. How ever they require internet access, they have already approached woosh, woosh has said they do not cover that area, wired country they have also contacted and they said they need to be in view of the pukekohe hills, in this case my parents aren't Is anyone aware of any other wireless internet service that covers the gelnbrook, waiuku , pukekohe area? Garrett Stoupe "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002."

1 0

Re: [nznog] Waiuku/ glen brook area wireless access
by Jeremy Strachan 28 Sep '05

28 Sep '05

Iridium Satellite phone?!! and you thought we lived in a developed country... ________________________________ From: Garrett Stoupe [mailto:garretts(a)te.co.nz] Sent: Thursday, 29 September 2005 2:16 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] Waiuku/ glen brook area wireless access Hey guys My parents have just recently moved out to the country, how ever telecom has stated they will not be able to install a phone line for them until December or early next year. How ever they require internet access, they have already approached woosh, woosh has said they do not cover that area, wired country they have also contacted and they said they need to be in view of the pukekohe hills, in this case my parents aren't Is anyone aware of any other wireless internet service that covers the gelnbrook, waiuku , pukekohe area? Garrett Stoupe

1 0

Audio Streaming
by Webmaster 28 Sep '05

28 Sep '05

Radio NZ is nearing the end of the testing phase of the live audio streams of National Radio and Concert FM. As a result of feedback from the tests we have removed the 16 kbs cap from our US server. This means that the streams can go up to 48 kbs stereo (National Radio) and 64 kbs (Concert FM) for ALL end users regardless of their location. At present about 40% of the traffic from this server is NZ bound. The streams are also available via NZ exchange points should operators wish to avoid the more expensive international route. regards, Richard Hulse

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 25 Sep '05

25 Sep '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS23754 descr: advertised to AS9439 by CityLink - AS23754 members: 198.48.0.0/22^22-29, 202.8.44.0/22^22-29, 198.32.71.0/24^24-29, 203.118.144.0/24^24-29, 202.7.4.32/28^28-29, 203.97.231.224/28^28-29, 203.79.85.80/29, 203.109.195.72/29, 210.48.103.0/29, 210.48.103.112/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050708 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS23754 descr: advertised to AS9439 by CityLink - AS23754 members: 198.48.0.0/22^22-29, 202.8.44.0/22^22-29, 198.32.71.0/24^24-29, 203.118.144.0/24^24-29, 202.7.4.32/28^28-29, 202.7.7.88/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)citylink.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050926 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 25 Sep '05

25 Sep '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS7696 descr: Route set advertised to AS9439 by OneSquared - AS7696 members: 202.160.112.0/21^21-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sam(a)onesquared.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050905 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS7696 descr: advertised to AS9439 by OneSquared - AS7696 members: 202.160.112.0/21^21-29, 202.135.231.144/28^28-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sam(a)onesquared.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050926 source: NZRR

1 0

What would the NZ numbers be?
by Juha Saarinen 22 Sep '05

22 Sep '05

http://computerworld.co.nz/news.nsf/netw/40778CA910E0E6B4CC25707D007A6977 Anyone know? -- Juha

1 0

Orcon support email - auto reply. Anyone from orcon listening??
by Gavin Legge 22 Sep '05

22 Sep '05

Yeah it's still coming through - if anyone at orcon is on here - they may want to unsub there support address so it does not auto reply all the time to the poster. The following came from support(a)orcon.net.nz in reply to my post... <include message> Thankyou for emailing Orcon customer support. Your email has been received and will be processed as quickly as possible, however we are experiencing some delays at present due to high customer demand so it may take up to 96 hours to get an initial response. We've just implemented a new ticketing system to allow better tracking of customer enquiries and orders - and your email has been assigned the identifier: FZT-83853-666. Please ensure you keep this ticket ID in the subject line of any related replies. Warm regards, Orcon Customer Support. Auckland: (09) 444-4414 Freephone: (0508) 4ORCON 8am - 8pm Monday-Friday 11am - 8pm Saturday/Sunday and public holidays -------------------------------------------------------------- In the interim, please check out the following items which may allow you solve your problem on your own: GENERAL: * Basic configuration settings http://www.orcon.net.nz/help/settings/nz/ DIALUP * Current pricing plans and signup http://www.orcon.net.nz/products/dialup/ DSL * Want to upgrade to Orcon's new BitStream 256k service ($49.95/month) http://www.orcon.net.nz/shortcut/getbitstream * Current pricing plans http://www.orcon.net.nz/products/jetstream/ * Experiencing high ping times/latency? See the following link for information http://www.orcon.net.nz/help/kb/ADSL/latency BILLING * Frequently asked questions about your billing http://www.orcon.net.nz/help/billing/ If any of the above links help answer the query you just emailed us, if possible please do us the courtesy of emailing us saying the problem is "resolved" so we can attend to other customer's queries. --- Kind Regards Gavin Legge Security Officer [Linux Systems Administrator] g.legge(a)irl.cri.nz 04 931 3131 (ext 4131) 021 905 461 This electronic transmission and any documents accompanying this electronic transmission contain confidential information belonging to the sender. This information may be legally privileged. The information is intended only for the use of the individual or entity named above. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on or regarding the contents of this electronically transmitted information is strictly prohibited.

1 0

Re: [nznog] Vodafone dial pattern - another change ?
by Gavin Legge 22 Sep '05

22 Sep '05

I used to work for a telco and on many occasions observed overlap sending on ISDN's working fine. This while watching test instruments across live lines. - so yeah - it's used out there for sure... Go for it. -----Original Message----- From: Ian Batterbee [mailto:ian.batterbee(a)aut.ac.nz] Sent: Friday, 23 September 2005 1:16 p.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Vodafone dial pattern - another change ? >Surely the delay thing is why most VoIP type systems accept something >such as "#" as an "I've finished inputting my number, please dial it" >indicator ? > > Although we do operate a VoIP system, that's largely irrelevant, because our previous PBX (Ericsson MD110) had all the patterns configured into it as well, so we would have been in the same situation. Users don't expect to have to dial a # at the end of their number, and we shouldn't expect them to have to do so. >Is the 5 seconds tuneable ? "wait 5 seconds till the 5th digit has been >entered then change this to 3 seconds till the 7th digit then change >this to 1 second" > The 5-second delay is coming from TelstraClear.. so no, we can't tune it. They're waiting for another digit, and when I posted about last month, it was because TCL's pattern was actually incorrect, and was waiting for extra digits that would never come, resulting in an unncessary 5 second setup delay to a large number of 021 numbers. This has since been corrected. A number of PBX systems validate the numbers so that they can match and therefore route them down the most appropriate route. Our (Cisco) PBX comes with patterns for most countries, which simplifies the task of setting up a new system. While I agree NZ's plan is relatively simple, other countries are not, and that's probably the reason they do it that way. There is the possibilty that we could enable overlap sending.. which I believe means that you send each digit as it is dialled, rather than all at once in an ISDN SETUP message - as it gives the telco the option to send back 'more needed', or 'that's enough digits'.. but.. I'm reluctant to turn it on without some proper testing first. Thanks to Barry who found the info I needed, and finally, to those of you who do validate the numbers locally, and who were forced into silence before posting anything by Steve's helpful comments, here are the new patterns: 021 0221 XXXX 021 0222 XXXX I believe there may be more coming. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. MailScanner Supplied by ITS-HelpDesk. ext 4001 or email helpdesk(a)irl.cri.nz-- This electronic transmission and any documents accompanying this electronic transmission contain confidential information belonging to the sender. This information may be legally privileged. The information is intended only for the use of the individual or entity named above. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on or regarding the contents of this electronically transmitted information is strictly prohibited.

2 1

Re: [nznog] Vodafone dial pattern - another change ?
by Ian Batterbee 22 Sep '05

22 Sep '05

>Surely the delay thing is why most VoIP type systems accept something >such as "#" as an "I've finished inputting my number, please dial it" >indicator ? > > Although we do operate a VoIP system, that's largely irrelevant, because our previous PBX (Ericsson MD110) had all the patterns configured into it as well, so we would have been in the same situation. Users don't expect to have to dial a # at the end of their number, and we shouldn't expect them to have to do so. >Is the 5 seconds tuneable ? "wait 5 seconds till the 5th digit has been >entered then change this to 3 seconds till the 7th digit then change >this to 1 second" > The 5-second delay is coming from TelstraClear.. so no, we can't tune it. They're waiting for another digit, and when I posted about last month, it was because TCL's pattern was actually incorrect, and was waiting for extra digits that would never come, resulting in an unncessary 5 second setup delay to a large number of 021 numbers. This has since been corrected. A number of PBX systems validate the numbers so that they can match and therefore route them down the most appropriate route. Our (Cisco) PBX comes with patterns for most countries, which simplifies the task of setting up a new system. While I agree NZ's plan is relatively simple, other countries are not, and that's probably the reason they do it that way. There is the possibilty that we could enable overlap sending.. which I believe means that you send each digit as it is dialled, rather than all at once in an ISDN SETUP message - as it gives the telco the option to send back 'more needed', or 'that's enough digits'.. but.. I'm reluctant to turn it on without some proper testing first. Thanks to Barry who found the info I needed, and finally, to those of you who do validate the numbers locally, and who were forced into silence before posting anything by Steve's helpful comments, here are the new patterns: 021 0221 XXXX 021 0222 XXXX I believe there may be more coming.

1 0

Vodafone dial pattern - another change ?
by Ian Batterbee 22 Sep '05

22 Sep '05

In the last 24 hours I've heard from multiple sources that Vodafone is now using 8 digit prepay numbers - the numbers I was given that were reported 'not working' (because our PBX didn't match all the digits) were both 021-0222xxxx, ie, 8 digits after the 021. I know I asked about this only one month ago, but back then 021[012] only appeared to require 6 further digits, and not 7. I've just tried calling both 0222xxxx numbers from my vodafone mobile, and they they both rang. I tried leaving the last digit off, and they both failed, so it does suggest that things have changed. Does anyone know what's going on, and/or what the correct prefix for this number pattern is ? If I change my end to match 0210 plus 7, it will introduce a 5 second delay into any numbers that only have 6 digits after the 0210 -- Ian Batterbee, CCNP Senior Network/Comms Technician Auckland University of Technology

6 8