- NZNOG - lists.nznog.org

Re: [nznog] NZNOG Digest, Vol 129, Issue 1
by Jonathan Spence 17 Sep '13

17 Sep '13

Hi Paul,Thanks for the assistance and pointing out a glaringly obvious problem :S. NS records are all fixed but not seeing the delegation still. Should this happen now automatically or do Orcon still need to do something? I've now learnt how to use the Dig command but can't figure out how to trace it like in other posts. Thanks,Jonathan Jonathan Spence Chief Information Officer Mobile: +64-21-1055634 Work: +64-9-9503306 Web: power-business.co.nz The information contained in this message is privileged and intended only for the recipient names. If the reader is not a representative of the intended recipient, any review, dissemination or copying of this message or the information it contains is prohibited. Views expressed in this message may notnecessarily be those of Power Business Services Limited. If you have received this message in error, please immediately notify the sender, and delete the original message and attachments. ---------------------------------------- From: nznog-request(a)list.waikato.ac.nz Sent: Monday, September 2, 2013 12:00 PM To: nznog(a)list.waikato.ac.nz Subject: NZNOG Digest, Vol 129, Issue 1 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. Orcon IPv6 rDNS delegation (Jonathan Spence) 2. Re: Orcon IPv6 rDNS delegation (Leo Vegoda) 3. Re: Orcon IPv6 rDNS delegation (Paul Tinson) 4. Re: Orcon IPv6 rDNS delegation (Paul Tinson) ---------------------------------------------------------------------- Message: 1 Date: Mon, 2 Sep 2013 02:08:47 +1200 From: "Jonathan Spence" <jonathan.spence(a)power-business.co.nz> To: <nznog(a)list.waikato.ac.nz> Subject: [nznog] Orcon IPv6 rDNS delegation Message-ID: <7d59cc8$6fc11687$642d0766$(a)xtracta.com> Content-Type: text/plain; charset="us-ascii" Hi everyone, Google have just started enforcing PTR records for IPv6 addresses delivering to Gmail. Our IPv6 works great with Orcon but having serious issues getting delegation back to our nameservers setup. I have been told a few times that everything is setup on their end but I don't think it is. Our IP space: 2400:4800:4017::/48 is meant to be sent to ns1.power-business.co.nz and ns2.power-business.co.nz. However it doesn't seem to. For example our website is:2400:4800:4017:200:250:56ff:fe90:82f If I query ns1.power-business.co.nz from my home computer is works fine: -----command----- C:\Users\Jonathan Spence>nslookup 2400:4800:4017:0200:0250:56ff:fe90:082f 60.234.77.213 Server: UnKnown Address: 60.234.77.213 Name: midas.power-business.co.nz Address: 2400:4800:4017:200:250:56ff:fe90:82f ------ end command ----- However other hosts don't resolve this. When using this tool it doesn't work failing when reaching Orcon's nameserver: http://www.simpledns.com/lookup-dg.aspx Can anyone comment? Thanks, Jonathan ------- output ------- Received referral response - DNS servers for "0.4.2.ip6.arpa": -> ns4.apnic.net (no IP address) -> apnic1.dnsnode.net (no IP address) -> ns3.apnic.net (no IP address) -> tinnie.arin.net (no IP address) -> ns2.lacnic.net (no IP address) -> sec1.authdns.ripe.net (no IP address) -> ns1.apnic.net (no IP address) ---------------------------------------- Attempting to resolve DNS server name "apnic1.dnsnode.net" (details not logged) ---------------------------------------- Resolved DNS server name "apnic1.dnsnode.net" to IP address 194.146.106.106 ---------------------------------------- Sending request to "apnic1.dnsnode.net" (194.146.106.106) ---------------------------------------- Received referral response - DNS servers for "0.0.8.4.0.0.4.2.ip6.arpa": -> ns1.orcon.net.nz (no IP address) -> ns2.orcon.net.nz (no IP address) ---------------------------------------- Attempting to resolve DNS server name "ns2.orcon.net.nz" (details not logged) ---------------------------------------- Resolved DNS server name "ns2.orcon.net.nz" to IP address 210.55.12.2 ---------------------------------------- Sending request to "ns2.orcon.net.nz" (210.55.12.2) ---------------------------------------- Received authoritative (AA) response: -> Header: Non-Existent Domain ----- end output ----- Jonathan Spence Chief Information Officer Mobile: +64-21-1055634 Work: +64-9-9503306 Web: power-business.co.nz The information contained in this message is privileged and intended only for the recipient names. If the reader is not a representative of the intended recipient, any review, dissemination or copying of this message or the information it contains is prohibited. Views expressed in this message may notnecessarily be those of Power Business Services Limited. If you have received this message in error, please immediately notify the sender, and delete the original message and attachments.

4 7

CFP: Sysadmin Miniconf at Linux.conf.au 2014
by Simon Lyall 14 Sep '13

14 Sep '13

Call for Presentations Linux.conf.au 2014 Systems Administration Miniconf As part of the linux.conf.au conference in Perth, Australia in January 2014 we will be holding a one day mini conference oriented to Linux Systems Administration. The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, social networks, and other relevant mailing lists. This is our 8th year at Linux.conf.au. To see presentations from our previous years, see the miniconf website http://sysadmin.miniconf.org/. Presentation Topics =================== Topics for presentations could include (but are not limited to): Systems Administration, Virtualisation, Cloud computing, Devops, Monitoring, Dealing with "Bring Your Own Device", Configuration Management, Backups, Security, Troubleshooting, Buying Decisions, Identity Management, Two Factor Authentication, Web and Email management, Wiki, Clustering and High Availability, Log Management, Spam and Virus Filtering, VOIP, Ticketing systems, Bootstrapping and automated installation, Packaging and Provisioning, Keeping legacy systems functioning. We strongly welcome topics on best practice, new developments in systems administration and cutting edge techniques to better manage Linux hosts and environments. Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. Format of Presentations ======================= We are now seeking proposals for presentations at the mini-conference. We have openings for: 45 minute double-length presentations 20 minute full presentations 10-20 minute "How we do things" presentations 5-10 minute "lightning talks" Please note, due to the single day available, we expect the majority of available timeslots to be 20 minutes long or less. The 10-20 minute "How we do things" presentations are intended for people to talk about their sites. Information could include: Servers, talks, tools, people and roles, experiences, software, operating systems, monitoring, alerting, provisioning etc. The intent is to give attendees a picture of what is happening in the "real world" and some understanding of how other sites work, as well as offer you a chance to get suggestions on other tools and practices that might help your site. Discussion of "lessons learned" through really trying to use some of these things are especially welcomed. Submitting talks ================ Please note that in order to give a presentation or attend the miniconf you must be signed up for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. Submissions should be made via: http://sysadmin.miniconf.org/proposal14.html Questions should be sent to: lca2014 @ sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions priority (both of inclusion and scheduling) will be given to presentations submitted before the 6th of October. 2013-10-06 - Deadline for early submissions 2013-10-13 - Early submissions confirmation 2013-11-01 - Deadline for submissions 2013-11-15 - Confirmation of all presentations 2013-01-06 - Start of Miniconf and 1st day on linxu.conf.au Contact and Questions ===================== Please see our website at http://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2014 @ sysadmin.miniconf.org

1 0

OT: copper pricing (deadline 5pm today)
by Brian E Carpenter 12 Sep '13

12 Sep '13

Anyone who wants to make a submission, for example commenting on the Coalition for Fair Internet Pricing submission, can do so by email before 5pm today, Friday 13 September 2013, sent to telcoreview(a)mbie.govt.nz. URLs: http://www.med.govt.nz/sectors-industries/technology-communication/communic… http://beehive.govt.nz/release/review-provide-certainty-consumers-industry-0 http://www.consumer.org.nz/news/view/coalition-says-no-to-600-million-inter… Regards Brian Carpenter

1 0

One block of AS Numbers allocated to APNIC
by Leo Vegoda 11 Sep '13

11 Sep '13

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of one block of 1,024 AS Numbers to APNIC in September 2013: 63488-63999 Assigned by APNIC whois.apnic.net 2013-09-11 133120-133631 Assigned by APNIC whois.apnic.net 2013-09-11 You can find the IANA AS Numbers registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/en/resources/policy/global-addressing/global-polic y-asn-blocks-21sep10-en.htm Regards, Leo Vegoda ICANN IANA

1 0

OT - APNIC / Google Compliance Scam Calls
by Liam Farr 10 Sep '13

10 Sep '13

FYI Someone is calling through business in Auckland as a "representative" of APNIC. They are asking to talk to the IT Manager of the organization called, regarding "Google Compliance Errors". The scammer's caller ID was 19542831741, which if correct belongs to: <?xml version='1.0'?> <filtermessage> <api_version>1.01</api_version> <prefix>1954283</prefix> <destination> <iso3166>US</iso3166> <country>United States</country> <region>Pompano Beach, FL</region> <short_name>United States</short_name> </destination> <type> <id>FIX</id> <description>geographic</description> </type> <registrar> <name>Intermedia Communications Inc. - Fl</name> <range_status>t</range_status> </registrar> <meta> <lookuptime>-0.496342</lookuptime> </meta> </filtermessage> Cheers Liam

5 4

InternetNZ to host APRICOT 2016 in Auckland!
by Dean Pemberton 10 Sep '13

10 Sep '13

It's my pleasure to announce that InternetNZ has been awarded the hosting rights for the 2016 APRICOT conference. The conference will be held at SkyCity and Auckland University of Technology in February 2016. The press release at the following link has some more information. https://internetnz.net.nz/news/media-releases/2013/New-Zealand-host-Asia-Pa… Needless to say this is a big opportunity for the networking community within New Zealand and we look forward to getting you all involved before, during and after the event. Regards, Dean -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

1 0

IPSec vendor interoperability war stories
by Mark Goldfinch 10 Sep '13

10 Sep '13

Hi everyone, I have a business need to support IPSEC tunnels with many different vendors as we don't get to select our partner's equipment vendors. We've had some recent problems with our existing equipment. At the moment we're look at whether whether software upgrades will help our current situation. While we're doing that we're also looking at what other options exist. I'd appreciate anyone's operational experiences between different IPSec vendors, either on-list or to me directly if you want to protect the identities of the not so innocent :-) Beer for those who can offer their experiences! Thanks, -- * *Mark Goldfinch | Systems Team Leader MODICA GROUP nz: +64 4 498 6000

6 7

Vodafone RBI Tower Cosite
by Jonathan Brewer 10 Sep '13

10 Sep '13

Hi Folks, Anyone want to share their experiences co-siting on one of Vodafone's new RBI funded towers? As I understand there are fixed prices for co-site, backhaul from Chorus, etc.. It should be a pretty sweet deal. If there's anyone from Vodafone listening, I'd appreciate a pointer to a location list, rate card, and application form. I can't find them online. Cheers, Jon

1 0

Xtra mail admin and ptr records...
by Don Gould 10 Sep '13

10 Sep '13

From:<gillian.halkett(a)nzvanlines.co.nz <mailto:gillian.halkett(a)nzvanlines.co.nz>> SIZE=50696 Tue 2013-09-10 15:27:37: [126020:1] <-- 250 2.1.0 Ok Tue 2013-09-10 15:27:37: [126020:1] --> RCPT To:<jenna(a)christchurchapartments.co.nz <mailto:jenna(a)christchurchapartments.co.nz>> Tue 2013-09-10 15:27:38: [126020:1] <-- 553 5.7.1 <222-154-247-46.adsl.xtra.co.nz <http://adsl.xtra.co.nz>[222.154.247.46]>: Client host rejected: AUTO_[A|X]DSL We aren't accept direct connection not from dedicated SMTP servers. Please use your internet provider SMTP Server. Tue 2013-09-10 15:27:38: [126020:1] --> QUIT We're rejecting mail from nzvanlines.co.nz because they're running their smtp server on a service with a|x|vdsl in the ptr record. I think we've had this discussion on list before, and iirc we decided that we just get providers to update ptr records, but I'm a bit scared to ring L1HD and ask for a ptr change. Is there an admin on list from Telecom who can work with your customer to fix this for as I doubt it's only us it's impacting? D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb)

5 6

Fwd: [PAG] Fwd: [isoc-advisory-council] STATEMENT: Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology
by Dean Pemberton 09 Sep '13

09 Sep '13

Given that protocols and standards effect NZ network operators, this seems to be on topic. Seeing how IETF handles these issues and rebuilds trust will be interesting. ---------- Forwarded message ---------- From: Alicia Jackson <jackson(a)isoc.org> Date: 10 September 2013 08:03 Subject: [isoc-advisory-council] STATEMENT: Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology To: "isoc-advisory-council(a)elists.isoc.org" <isoc-advisory-council(a)elists.isoc.org> Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology The Internet Society is alarmed by continuing reports alleging systematic United States government efforts to circumvent Internet security mechanisms. The Internet Society President and CEO, Lynn St. Amour, said, “If true, these reports describe government programmes that undermine the technical foundations of the Internet and are a fundamental threat to the Internet’s economic, innovative, and social potential. Any systematic, state-level attack on Internet security and privacy is a rejection of the global, collaborative fabric that has enabled the Internet's growth to extend beyond the interests of any one country.” The Internet Society believes that global interoperability and openness of the Internet are pre-requisites for confidence in online interaction, they unlock the Internet as a forum for economic and social progress, and they are founded on basic assumptions of trust. We are deeply concerned that these principles are being eroded and that users' legitimate expectations of online security are being treated with contempt. As the institutional home of the Internet Engineering Task Force (IETF), we believe that open and transparent processes are essential for security standardization, and result in better outcomes than any alternative approach. For example, protocols developed by the IETF are open for all to see, inspect, and verify, as are the open and inclusive processes by which they are specified. IETF Chairman Jari Arkko has strongly reiterated the IETF’s commitment to improving security in the Internet, and to seeking ways of improving security protocols in light of these new revelations and security threats. “The IETF has a long-standing commitment to openness and transparency in developing security protocols for the Internet, and sees this as critical to confidence in their use and implementation.” To read more, visit: http://www.ietf.org/blog/2013/09/security-and-pervasive-monitoring/. However, the open development of robust technical specifications is just one link in the chain. Security standards must be properly implemented and used. This is a wake-up call for technology developers and adopters alike, to reexamine what we can do to ensure that all links in the chain are equally strong. This is key to helping restore public trust and confidence in the Internet. The Internet has tremendous potential for economic and social good, but unless all stakeholders trust the Internet as a safe place for business, social interaction, academic enquiry, and self-expression, those economic and social benefits are put at risk. To fulfill its potential, the Internet must be underpinned by the right combination of technology, operational processes, legislation, policy, and governance. The recent reports suggest that U.S. Government programmes have systematically undermined some or all of those measures, and that is why we view the revelations with such grave concern. With this mind, we issue these calls to action for the global community: • To every citizen of the Internet: let your government representatives know that, even in matters of national security, you expect privacy, rule of law, and due process in any handling of your data. Security is a collective responsibility that involves multiple stakeholders. In this regard, we call on: •Those involved in technology research and development: use the openness of standards processes like the IETF to challenge assumptions about security specifications. •Those who implement the technology and standards for Internet security: uphold that responsibility in your work, and be mindful of the damage caused by loss of trust. •Those who develop products and services that depend on a trusted Internet: secure your own services, and be intolerant of insecurity in the infrastructure on which you depend. •To every Internet user: ensure you are well informed about good practice in online security, and act on that information. Take responsibility for your own security. At the Internet Society, we remain committed to advancing work in areas such as browser security, privacy settings, and digital footprint awareness in order to help users understand and manage their privacy and security. The citizens of the Internet deserve a global and open platform for communication built on solid foundations of security and privacy. _______________________________________________ Isoc-advisory-council mailing list Isoc-advisory-council(a)elists.isoc.org https://elists.isoc.org/mailman/listinfo/isoc-advisory-council

6 7