- NZNOG - lists.nznog.org

Fwd: BCP 38
by Andy Linton 31 Jan '14

31 Jan '14

At NZNOG, Jamie Baddeley mention the spoofer tool at http://spoofer.cmand.org/ I ran it on the net I run at VUW and here are the traces from a couple of runs. I ran it once, realised I was being slack and turned on the 'rfp-check' feature on the edge Juniper and then ran the test again. A nice tool to demonstrate why we should do BCP 38.

1 0

Re: [nznog] Do you stream video?
by Richard Naylor 29 Jan '14

29 Jan '14

At 05:15 p.m. 15/01/2014, Dean Pemberton wrote: >Due to unforeseen circumstances our usual video streaming company of >choice (R2) is unable to stream NZNOG live this year. We're in AKL on another job. The plan is to send a camera operator to Nelson with a small portable encoder. The encoder planned is still in USA and won't be back in time. It died just after New Years day. I think we can free up one from the AKL job on wednesday, but need it back on the Saturday or Sunday after NZNOG, and are not confident couriers can do it. We also have very limited transport and time in AKL as we are parked up on a job. But if anyone can collect the unit from us on the Wednesday and take it to Nelson, then bring it back to AKL on the Saturday (we may have wheels on Saturday) that would solve the issue. I can probably meet someone at the airport and provide a ride home on the Saturday. The encoder is in a small plastic case about 200mmx150x100. Richard 021 897 089

9 10

Lightning talks
by Richard Nelson 29 Jan '14

29 Jan '14

If anyone has a lightning talk and can’t find me at the conference. Just email me off list. Richard.

1 0

One Day down.... Four to go
by Dean Pemberton 26 Jan '14

26 Jan '14

Hello from NZNOG 2014 in sunny Nelson! The venue is awesome and we're off to a great start. The BGP Routing and Network Security workshops are underway and the participants have been giving outstanding feedback. We've got less than 10 more registration slots left for the main conference before we're all sold out. If you're leaving it until the last minute... I'd suggest that you don't . See you all here. Dean

1 0

Re: [nznog] NZNOG Digest, Vol 133, Issue 14
by Jonathan Spence 26 Jan '14

26 Jan '14

They have been doing this for ages (maybe 6 months at least). We had to disable IPv6 on our mail server as we were struggling to get rDNS delegation from Orcon. Got too busy to follow up on it but will do so when I get a minute. Jonathan Spence Chief Executive Officer Fixed: +64 9 9510448 Mobile: +64211055634 ---------------------------------------- From: nznog-request(a)list.waikato.ac.nz Sent: Sunday, January 26, 2014 12:01 PM To: nznog(a)list.waikato.ac.nz Subject: NZNOG Digest, Vol 133, Issue 14 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. heads up.. gmail now checking ipv6 rdns (Blair Harrison) 2. Re: heads up.. gmail now checking ipv6 rdns (Scott Howard) 3. Re: heads up.. gmail now checking ipv6 rdns (Michael Fincham) 4. Re: heads up.. gmail now checking ipv6 rdns (Phil Regnauld) ---------------------------------------------------------------------- Message: 1 Date: Sat, 25 Jan 2014 13:43:28 +1300 From: Blair Harrison <nznog(a)jedi.school.nz> To: NZNOG <nznog(a)list.waikato.ac.nz> Subject: [nznog] heads up.. gmail now checking ipv6 rdns Message-ID: <CAHn0gTveE=Nh-jp9Lfdw67UDAy=4Y-rgi-4h7t8zr1R_4p73zg(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" Hi Folks, Just got caught out with this on my personal box today. It looks as if Gmail is now checking RDNS on any inbound ipv6 smtp connections and rejecting with 500 error if it doesn't match. example fail - SMTP error from remote mail server after end of data: host gmail-smtp-in.l.google.com [2a00:1450:4008:c01::1a]: 550-5.7.1 [2402:6000:1000:x::x] Our system has detected that this message does 550-5.7.1 not meet IPv6 sending guidelines regarding PTR records and 550-5.7.1 authentication. Please review 550-5.7.1 https://support.google.com/mail/?p=ipv6_authentication_errorfor more 550 5.7.1 information. oq6si4802967bkb.182 - gsmtp So if you have ipv6 enabled on your mail servers and haven't yet set some RDNS for them.. now is the time. Cheers, Blair

1 0

heads up.. gmail now checking ipv6 rdns
by Blair Harrison 25 Jan '14

25 Jan '14

Hi Folks, Just got caught out with this on my personal box today. It looks as if Gmail is now checking RDNS on any inbound ipv6 smtp connections and rejecting with 500 error if it doesn't match. example fail - SMTP error from remote mail server after end of data: host gmail-smtp-in.l.google.com [2a00:1450:4008:c01::1a]: 550-5.7.1 [2402:6000:1000:x::x] Our system has detected that this message does 550-5.7.1 not meet IPv6 sending guidelines regarding PTR records and 550-5.7.1 authentication. Please review 550-5.7.1 https://support.google.com/mail/?p=ipv6_authentication_errorfor more 550 5.7.1 information. oq6si4802967bkb.182 - gsmtp So if you have ipv6 enabled on your mail servers and haven't yet set some RDNS for them.. now is the time. Cheers, Blair

4 3

Fibre circulators?
by Sam Russell 23 Jan '14

23 Jan '14

Hi guys, Does anyone recommend a supplier for fibre circulators, preferably with LC connectors? I'd be keen to hear anyone's experiences/horror stories with them if you're willing to volunteer them. Cheers Sam

6 7

Great Firewall of China misconfig; traffic re-routed
by Juha Saarinen 22 Jan '14

22 Jan '14

Somewhat operational, with amusement potential and besides, it’s too early for beer (surely???): http://www.itnews.com.au/News/370324,great-firewall-mishap-reroutes-chinese… Has anyone seen a more detailed explanation as to what happened? — Juha

1 0

Acceptable levels of packet loss
by Matthew Poole 21 Jan '14

21 Jan '14

Been running SmokePing for a little while now, building up a statistical sample, and wondering what's an acceptable level of loss to be seeing through the provider's core, both to targets foreign and domestic and also from the premises to the first hop in the provider's network. Obviously I'm seeing a non-zero level (averages are in the zero-point-something range, but some of the maximums are above 0), so want to know what people consider to be the point where I go from "unreasonable customer" to "customer with a justified concern"? -- Matthew Poole "The difference between theory and practice is that practice is easier in theory than theory is in practice"

8 10

IPv4 Brokering and Availability Announcements
by Skeeve Stevens 19 Jan '14

19 Jan '14

Hi all, I will keep this brief. After many comments to us where people have had to deal with US companies to acquire IPv4, eintellego Networks has decided formalise a service offering IP Brokering. After facilitating and consulting for over a dozen transactions in different countries (including NZ) under the APNIC region - including NZ, we thought it would be good to have a service available locally by someone you know. For more information: http://eintellegonetworks.com/site/ipbrokering/ So, rather than trolling lists when ranges become available or we have a client looking to sell a block, I've setup an announcement list so that I can let interested parties know when a range is available. If you wish to join this list and receive these announcements, please visit: http://eintellegonetworks.com/site/v4announce/ to sign-up. FYI, eintellego Networks has just launched in NZ as a locally registered foreign company to mainly do other business including hardware/consulting and network operations. Also, eintellego Networks is the only APNIC registered<http://www.apnic.net/services/become-a-member/manage-your-membership/transf…>IPv4 broker that is based in the APNIC region (all the other are presently American). Any questions, feel free to let me know off-list. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud - Consulting - IPv4 Brokering

2 3