- NZNOG - lists.nznog.org

DNS hijacking of a few domains
by Blair Harrison 27 Aug '13

27 Aug '13

Hi Folks, Seems like there has been a bit of DNS hijacking happening today - NYTimes.com as one of the targets - you may wish to look at flushing your recursive nameserver caches.. See this dns-oarc post for more details. https://lists.dns-oarc.net/pipermail/dns-operations/2013-August/010617.html Cheers, Blair

1 0

Colo in SkyTower
by Skeeve Stevens 26 Aug '13

26 Aug '13

Hey all, I am wondering who is offering Colo in Sky Tower. I am looking at 2 or 3RU. Just feeling out pricing for a project I am scoping out. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

3 3

APNIC 36 - Join the Webcast
by Elly Tawhai 25 Aug '13

25 Aug '13

Hi NZNOG Community, APNIC 36 Webcast is going to start in 15 minutes. There will be two parallel live webcasts. You can access then from here http://conference.apnic.net/36/program#broadcast Hope you can all join the webcast to take part in APNIC 36 sessions from Xian, China. See you online! Kind regards, Elly APNIC

1 0

Deep rack available in Auckland
by Alexander Neilson 17 Aug '13

17 Aug '13

I am looking for a large (42RU or taller) and deep (900mm) 19" rack lying around in Auckland (or for sale, in stock, in Auckland) We can't wait for standard lead times sorry so looking for someone with an empty one wanting to get it hauled away for free and re used or someone who sells / supplies them based in Auckland holding stock on premises. Looking for off list replies / suggestions / options Thank you all Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

Fibre / Connectivity issues - Sky Tower?
by Barry Murphy 12 Aug '13

12 Aug '13

Hey guys Anyone seeing any issues with GGI / Chorus, particularly Sky Tower. We lost Chorus Auckland UFB for 8 minutes, physical interface down. We lost a 1Gb GGI International circuit to one of our clients in Sky Tower but no traffic passing. Also had reports of some other fibre circuits having issues that terminate to Sky & MDR though these have not been confirmed. Many thanks Barry Murphy

1 1

Call for Papers for NZNOG 2014
by Dean Pemberton 08 Aug '13

08 Aug '13

Call for papers - NZNOG 2014 Doing something interesting in the Internetworking space? Submit an NZNOG conference paper and you could win a trip to the next APRICOT meeting in Bangkok Thailand! ---- The NZNOG organising committee invites papers for its 13th annual conference, to be hosted at the Rutherford Hotel, Nelson, New Zealand from 27 – 31 January 2014. There will the three day Workshops 27 – 29 January, a day of tutorials on 29 January with the main conference on 30 – 31 January. The best local conference paper as judged by the trustees in association with the programme committee will win a trip to APRICOT 2014, to be held in Bangkok, Thailand, 18-28 February 2014. So, get writing! Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practises and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 21st October. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. Please note that full slide decks will be required by 18th November. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate abstracts based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. The best local paper will be judged by a selection of the trustees and the programme committee. Return flights from New Zealand, accommodation, and conference fees will be covered. It will be expected the best paper is submitted by the winner for presentation at APRICOT. More details on paper submission can be found at http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

Call for NZNOG 2014 Programme Committee participants
by Dean Pemberton 08 Aug '13

08 Aug '13

Afternoon everyone, The NZNOG 2014 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the NZNOG 2014 conference (www.nznog.org) The NZNOG Trustees selects a new Programme Committee each year and is now seeking nominations from the community. Eligible PC candidates are those who have attended NZNOG conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of NZNOG conferences. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content for the event and review submissions for technical merit. The PC will meet by regular conference calls, during the months prior to the event. If you are interested in joining the PC send a brief note to "trustees at nznog.org". The note should include affiliation (if any) and contact details (including e-mail address), and a brief description of why you would make a good addition to the PC. PC members receive complimentary registration for the event. The NZNOG Trustees will accept nominations received by the end of Friday 30th August, 2013, and will announce the new PC shortly thereafter. Many thanks! NZNOG Trustees

1 0

Policy Proposals at APNIC36
by Dean Pemberton 07 Aug '13

07 Aug '13

Hi all, There are currently 3 policies for consideration at the APNIC 36 meeting Xi'an at the end of August. They are: prop-108 Suggested changes to the APNIC Policy Development Process prop-107 AS number transfer policy proposal prop-105 Distribution of returned IPv4 address (Modification of prop-088) I'll go through briefly what the proposals and where appropriate what I think about them. I'm going to be one of the NZers at the meeting, if there is a point of view that you'd like me to keep in mind during the discussion there then just drop me a line. Regards, Dean prop-108 Suggested changes to the APNIC Policy Development Process ----- Proposed by Dean Pemberton[1] and Izumi Okutani (JPNIC) This proposal seeks to clarify a set of 3 issues with the current PDP which were highlighted during the last meeting in Singapore. The issues are: **Timing Requirements for the Policy-SIG chairs to announce consensus** in the Open Policy Meeting (OPM)** At the moment the Chair calls for consensus on proposals during the OPM and then moves to immediately gauge if consensus has been reached. Due to the nebulous nature of gauging consensus, the Chairs have expressed a desire to be allowed an opportunity to discuss among themselves if consensus has been reached. This proposal seeks to give them this ability as long as a determination on consensus is delivered before the end of the OPM. **Requiring for consensus to be called and demonstrated at the AMM** A historical artefact from the days when there were multiple SIGs within APNIC all producing policy requires that proposals not only gain consensus at their individual OPMs, but also again when the whole membership comes together a day later at the APNIC Members Meeting. This was done to ensure that if there were conflicting policies produced by two SIGs at the same meeting, this would become obvious during the second call for consensus at the AMM and resolved. Now that the Policy-SIG is the only policy-generating body within APNIC, this is no longer necessary and creates confusion as to why a second consensus call is required. This proposal seeks to remove the requirement for a second call for consensus at the AMM unless the SIG Chair deems that it is necessary for any reason. **The length of the required comment period for successful policy proposals after the AMM** Once a policy proposal has gained consensus at the OPM/AMM, it is returned to the mailing list for a comment period lasting 8 weeks. This was historically to allow members not at the OPM/AMM to contribute on the mailing list. In practice there is little to no comment during this time, with all comment on a proposal happening before the OPM. This has the effect of delaying any policy implementations for 8 weeks. This proposal seeks to shorten this comment period to a minimum of 2 weeks unless the SIG Chair deems that it should be longer. Pros: Streamlines the process and removes some of the things which make the PDP a pain Cons: Some members may feel that it gives the Policy-SIG power to implement policy without AMM oversight. In practice this isn't the case as the APNIC exec council has the final decision on policy introduction. prop-107 AS number transfer policy proposal ----- Proposed by Tomohiro Fujisaki There have been a lot of policies dealing with the transfer of IPv4 addresses as RIRs reached exhaustion. What has not been dealt with however are any policies around transferring AS numbers either between APNIC members, or between APNIC members and members of other RIRs. While this is not a huge problem in terms of demand (actual numbers are hard to get, but I’ve been told there are a non-zero number of applicants), it would be good to close this gap in current policy. Generally I'm supportive. Pros: Makes a level playing field between AS numbers and other IP resources in relation to transfer policy Cons: More policy for an area which doesn’t have a significant demand. prop-105 Distribution of returned IPv4 address (Modification of prop-088) ----- Proposed by Tomohiro Fujisaki This one is a bit more contentious. At present APNIC is operating under a policy of only giving a single block of 1024 IPv4 addresses out to any existing or new members. This is basically because they are all gone. Once you get this special last block (being called a 'last slash-8 block') you can never get any more IPv4 addresses. The thing is... IANA has a few more numbers which they can give out. These are dregs which other people have given back to IANA and they are preparing to hand them out to the RIRs. So the question is, what should APNIC do with those addresses? There aren’t THAT many of them (probably about 4 million, but don't quote me), certainly not enough to go back to the old way of allocating them (they would last less than a few months). Should they just be placed into the current pool and treated the same as the 'last slash-8' addresses, or, as this proposal suggests, should APNIC members be allowed a second bite at the cherry? This policy proposes that members be allowed one allocation from the 'last slash-8' and then an additional allocation from any addresses returned by IANA. Opinion is divided here. Some feel that it gives people one last hope for IPv4 when they should be concentrating on deploying IPv6, while others say that they need just a few more addresses to tide them over. Still others say that it should only be available to developing nations or organisations with small allocations already. I'm on the fence here, but I think that the framework we would need to put in place to administer this would outweigh the benefit gained from offering another allocation to members. I'm currently in favour of just putting them in the existing pool and carrying on as we do today. I’ll be meeting with the author in Xi’an to see if there is any convincing argument the other way. If anyone has any feedback on this one let me know. Pros: Gets addresses out to people who need them Cons: Gives an inaccurate impression that there are any more IPv4 addresses left. People should be moving their large IP address demands to IPv6 [1] While I have strived for balance in this assessment, readers should be aware that I am a co-author of the proposal. -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

1 0

smilecity.co.nz routing issue
by Alexander Neilson 06 Aug '13

06 Aug '13

Hi Everyone Can anyone on here (or someone from smilycity ops) contact me please. >From inside our network I am seeing trace routes like this: Serenity:Dude alexander$ traceroute smilecity.co.nz traceroute to smilecity.co.nz (202.177.214.122), 64 hops max, 52 byte packets 1 172.31.2.1 (172.31.2.1) 0.510 ms 0.331 ms 0.295 ms 2 192.168.1.1 (192.168.1.1) 0.456 ms 0.381 ms 0.306 ms 3 113.197.96.18 (113.197.96.18) 3.943 ms 3.854 ms 4.531 ms 4 103.9.216.18 (103.9.216.18) 10.741 ms 10.409 ms 10.276 ms 5 103.9.216.17 (103.9.216.17) 10.374 ms 10.706 ms 10.324 ms 6 203.167.223.89 (203.167.223.89) 16.319 ms 15.262 ms 16.715 ms 7 ge-0-2-0-914.xcore1.acld.telstraclear.net (203.98.42.17) 15.760 ms 11.881 ms 20.355 ms 8 * unknown.telstraglobal.net (134.159.174.37) 21.230 ms 16.681 ms 9 i-0-0-4-1.sydo-core02.bx.telstraglobal.net (202.84.142.149) 40.901 ms 46.391 ms 39.776 ms 10 tengige0-1-0-11.oxf-gw1.sydney.telstra.net (203.50.13.165) 37.536 ms 38.606 ms 40.730 ms 11 bundle-ether2.oxf-gw2.sydney.telstra.net (203.50.6.86) 39.208 ms 45.322 ms 38.338 ms 12 bundle-ether1.chw-core2.sydney.telstra.net (203.50.6.89) 37.451 ms 43.868 ms 42.258 ms 13 10gigabitethernet7-1.chw45.sydney.telstra.net (203.50.20.183) 44.120 ms 37.368 ms 45.299 ms 14 equini3.lnk.telstra.net (139.130.117.214) 46.450 ms 43.879 ms 38.092 ms 15 ge-3-2.br103.sy1.ap.equinix.com (27.111.240.158) 41.385 ms 37.662 ms 40.540 ms 16 ge-3-1.br101.sy1.ap.equinix.com (202.177.217.181) 45.515 ms 37.164 ms 48.858 ms 17 * * * 18 * * * ^C Serenity:Dude alexander$ traceroute smilecity.co.nz traceroute to smilecity.co.nz (202.177.214.122), 64 hops max, 52 byte packets 1 172.31.2.1 (172.31.2.1) 0.536 ms 0.325 ms 0.363 ms 2 192.168.1.1 (192.168.1.1) 0.438 ms 0.451 ms 0.451 ms 3 113.197.96.18 (113.197.96.18) 3.944 ms 4.262 ms 4.055 ms 4 103.9.216.18 (103.9.216.18) 10.531 ms 10.460 ms 10.452 ms 5 103.9.216.17 (103.9.216.17) 10.377 ms 10.452 ms 10.407 ms 6 203.167.223.89 (203.167.223.89) 12.253 ms 19.681 ms 11.798 ms 7 ge-0-2-0-914.xcore1.acld.telstraclear.net (203.98.42.17) 11.325 ms 12.228 ms 17.588 ms 8 unknown.telstraglobal.net (134.159.174.37) 12.124 ms unknown.telstraglobal.net (134.159.174.41) 16.676 ms unknown.telstraglobal.net (134.159.174.37) 17.402 ms 9 * i-0-0-4-1.sydo-core02.bx.telstraglobal.net (202.84.142.149) 37.856 ms 38.422 ms 10 tengige0-1-0-11.oxf-gw1.sydney.telstra.net (203.50.13.165) 40.765 ms 41.609 ms 39.188 ms 11 bundle-ether2.oxf-gw2.sydney.telstra.net (203.50.6.86) 39.683 ms 40.859 ms 39.406 ms 12 bundle-ether1.chw-core2.sydney.telstra.net (203.50.6.89) 37.026 ms 41.156 ms 44.457 ms 13 10gigabitethernet7-1.chw45.sydney.telstra.net (203.50.20.183) 38.273 ms 38.520 ms 37.169 ms 14 equini3.lnk.telstra.net (139.130.117.214) 43.372 ms 42.876 ms 40.542 ms 15 ge-3-2.br103.sy1.ap.equinix.com (27.111.240.158) 50.179 ms 49.605 ms 48.397 ms 16 ge-3-1.br101.sy1.ap.equinix.com (202.177.217.181) 50.201 ms 47.475 ms 54.071 ms 17 * * * 18 * * * ^C However from kcbbs.gen.nz trace route tool I see: traceroute to smilecity.co.nz (202.177.214.122), 30 hops max, 40 byte packets 1 f0-1-0-15-c7507-1.kc.net.nz (202.27.217.193) 0.608 ms 0.552 ms 1.452 ms 2 domr1.kci.net.nz (202.27.217.135) 0.739 ms 0.873 ms 0.678 ms 3 vocus1.ape.nzix.net (192.203.154.123) 1.047 ms 1.005 ms 0.983 ms 4 ten-0-2-0-400.bdr01.akl01.akl.VOCUS.net.au (114.31.202.43) 24.834 ms 25.714 ms 25.57 ms 5 ten-0-1-0-0.cor01.alb01.akl.VOCUS.net.nz (114.31.202.86) 25.069 ms ten-0-1-0-1.cor01.alb01.akl.VOCUS.net.nz (114.31.202.67) 26.103 ms ten-0-1-0-0.cor01.alb01.akl.VOCUS.net.nz (114.31.202.86) 25.668 ms 6 ten-0-0-0-2.cor03.syd03.nsw.VOCUS.net.au (114.31.199.116) 25.569 ms 25.356 ms 25.368 ms 7 ten-0-1-0-3.cor01.syd04.nsw.VOCUS.net.au (175.45.72.225) 25.556 ms ten-0-5-0-1.cor01.syd04.nsw.VOCUS.net.au (175.45.72.118) 24.679 ms ten-0-1-0-3.cor01.syd04.nsw.VOCUS.net.au (175.45.72.225) 25.096 ms 8 ge-0-0-0.bdr02.syd04.nsw.VOCUS.net.au (175.45.72.78) 24.974 ms ip-123.72.45.175.VOCUS.net.au (175.45.72.123) 24.761 ms ge-0-0-1.bdr02.syd04.nsw.VOCUS.net.au (175.45.72.80) 24.471 ms 9 ip-194.73.45.175.VOCUS.net.au (175.45.73.194) 26.621 ms 38.67 ms 25.987 ms 10 xe-0-1-1.gw101.sy1.ap.equinix.com (27.111.240.144) 26.464 ms 25.811 ms 25.527 ms 11 ge-3-2.br101.sy1.ap.equinix.com (27.111.240.154) 31.744 ms 26.245 ms 26.222 ms 12 202.177.214.66 (202.177.214.66) 26.129 ms 25.577 ms 26.983 ms 13 202.177.214.122 (202.177.214.122) 26.725 ms 25.909 ms 25.476 ms and down for everyone or just me tells me its up for others. We don't have a vocus pipe for me to re route though or test from this location. This has been happening for a while and is not a new issue today. traffic is coming from 113.197.96.0/22 I will be raising it with Telstra NOC but as the loss seems to happen inside Equinix I wondered if anyone from smile city themselves may be able to help Will be cross posted to AUSNOG re: equinix Off list replies welcomed. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

2 1

Commsday: New NSA training deck reveals servers in ANZ
by Skeeve Stevens 01 Aug '13

01 Aug '13

Hey all, I haven't seen any discussion on AUSNOG/NZNOG about the details revealed in the XKeyscore presentation ( http://www.theguardian.com/world/interactive/2013/jul/31/nsa-xkeyscore-prog… ). If, as expected, more revelations and details emerge, then there might be ISPs and carriers in the ANZ region who are complicit in assisting in this programme... In Australia I am expecting the Internet Society in Australia, the Australian Privacy Foundation, the EFA, and others to be having something to say about this. This is from 2008... I'd hate to think to what extent their capabilities are now. Discussion? ;-) ----- New NSA training deck reveals servers in ANZ A NSA presentation newly leaked by former government employee Edward Snowden detailing a global online surveillance system clearly shows infrastructure inside the borders of Australia and New Zealand. According to a map shown in the 2008 training presentation on a program called XKeyscore, there are at least four surveillance nodes in Australia and at least one in New Zealand. The actual map does not specify the exact location of the nodes, but they roughly correspond to coordinates near Darwin, Perth, Sydney, and Alice Springs. The document also explicitly names Australia and New Zealand, along with Canada and Great Britain in its footnotes although their exact roles remained unclear. At the time the presentation was created, XKeyscore covered “approximately 150 sites” and operated “over 700 servers.” According to the presentation, XKeyscore used the servers to gather data on internet activity by users. The data is then catalogued by different variables, including phone numbers, email addresses, log ins and user activity through the use of metadata tables. Once indexed, the information is searchable by NSA operatives via different parameters, such as geography, encryption, language, and even web searches, the material asserted. The author of the presentation said XKeyscore has led to the arrest of 300 terrorists. But Australia’s Pirate Party, which has put forth two candidates for Senate in Queensland and New South Wales, warns the revelation could have far wider implications for Australians. “The implications of all these revelations are troubling and it should concern all Australians that Australian spy agencies may be using US surveillance programs and information-sharing agreements to bypass local restrictions and safeguards,” the Pirate Party said in a release. “As Australians, the US agencies see us as ‘foreign’ and thus not even the minimal safeguards that apply to US citizens would apply to Australians under these programs.” Tony Chan ----- Remember... Read it first in Commsday - www.commsday.com.au - Subscribe today. .Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

1 0