- NZNOG - lists.nznog.org

Fwd: [outages] Open Resolver Project
by Joe Abley 11 Jun '13

11 Jun '13

There seem to be a non-trivial number of open resolvers in the few NZ ASes I just checked. It would be good if there was a concerted effort into shutting them down, or otherwise neutering them so that they can't be effective amplifiers for DDoS attacks. This is last decade's open mail relay problem, except with less spam, more packet love. Begin forwarded message: > From: Jared Mauch <jared(a)puck.nether.net> > Subject: [outages] Open Resolver Project > Date: 7 May 2013 10:52:53 EDT > To: "outages(a)outages.org" <outages(a)outages.org> > X-Mailer: Apple Mail (2.1503) > > The Open Resolver Project made a mistake in the automation process of the weekly data import. If you're unaware of what it is, I suggest looking at the website - openresolverproject.org > > If you operate a DNS server, or are a network operator, you should check your IP space for Open Resolvers. These are used in DDoS attacks and pose a significant risk to the global network. > > The website has been restored to operation, but please take a moment and check your IPv4 space. > > If you want a report based on your ASN, please e-mail dns-scan(a)puck.nether.net from a corporate e-mail address or something matching the RIR database entry. > > Thanks, > > - jared > _______________________________________________ > Outages mailing list > Outages(a)outages.org > https://puck.nether.net/mailman/listinfo/outages

14 28

Re: [nznog] [outages] Open Resolver Project
by Pete Mundy 10 Jun '13

10 Jun '13

If you don't like the answers, don't query the server? > On 11/06/2013, at 9:13 PM, Sebastian Castro <sebastian(a)nzrs.net.nz> wrote: > >> Please please avoid to do this at all costs... I've seen those "clever >> tricks" before and they cause more breakage than desired. Specially >> those deploying v6 networks see those tricks as a pain, because A >> records are rewritten but not AAAA records >

1 0

Re: [nznog] [outages] Open Resolver Project
by Pete Mundy 10 Jun '13

10 Jun '13

I can confirm that Mac OS X at least does this (it only queries the resolvers of your highest priority IPv4 interface as defined by the 'Set Service Order' option in the Network section of System Preferences). No beer required for sharing this feedback ;) Pete On 11/06/2013, at 8:41 PM, Nathan Ward <nznog(a)daork.net> wrote: > If you receive (via DHCP) a DNS server over the wireless network, are modern operating systems intelligent enough to only send queries to that DNS server out that interface?

1 0

Re: [nznog] NZNOG Digest, Vol 126, Issue 3
by Rowan Smith 09 Jun '13

09 Jun '13

Speaking from personal experience in Wellington around 2005-2006, I found Unlimited Potential http://up.org.nz/ a great way to meet people that work around the industry and hear what it's really like on the ground and also what hiring managers look for in a candidate. The most important thing I learned from this experience is not to expect any handouts, but take comfort in the fact that most people are very supportive and willing to hear and share ideas. The hard news to take, is that no matter how good you are, you generally have to start somewhere simple and prove yourself for some years. This is definitely true for larger employers, but the more people you talk to the more opportunities you will discover. Feel free to message me off list with any questions, always happy to use my experiences in helping others on a similar path. Rowan Smith Cheers Rowan On 10 June 2013 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Re: Mentoring Groups (Jed Laundry) > 2. Re: Mentoring Groups (Dean Pemberton) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 9 Jun 2013 16:25:29 +1200 > From: Jed Laundry <jlaundry(a)jlaundry.com> > To: Jonathan Robins <jonathan(a)tron.net.nz> > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Mentoring Groups > Message-ID: > <CALYPt1RtG4OttpSUJxbpvVnvLTQ+Mn_JBPJCfP=Lr6yA= > EtYkw(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Hey, > > Nothing that I know of; are you volunteering to organise? > > Thanks, > Jed. > > Sent from a small screen. > On 7/06/2013 4:42 PM, "Jonathan Robins" <jonathan(a)tron.net.nz> wrote: > > > Hi, > > > > Would be interested to know if anyone is aware of any mentoring groups > out > > there that are targeted at High School leavers to help guide those that > are > > keen to join the telecommunications industry? > > > > Cheers > > > > Jonathan > > > > ______________________________**_________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/**mailman/listinfo/nznog< > http://list.waikato.ac.nz/mailman/listinfo/nznog> > > >

1 0

Zone and host scanning by NZRS
by Jay Daley 09 Jun '13

09 Jun '13

Hi Sorry no beer here. Once a month we run a scan on the .nz zone to collect some IPv6 stats which are then provided to the IPv6 taskforce. This has been going for a while with no problems reported. We now plan to expand this scanning, partly to provide better stats on the use of DNS, like this above, and partly to help .nz run better. For example by detecting lame delegations and telling our registrars about this. As well as more DNS scanning we are also planning web site home page scanning for a very limited set of data related to .nz. For example finding out how many web sites in .nz use an SSL cert and would benefit from moving to storing details about these in DNS (see the IETF DANE WG for details - http://datatracker.ietf.org/wg/dane/charter/) Before we expand our scanning we've published a draft practice statement that sets out in detail what we are doing, why we are doing it and how we will do it and we want to hear what people have to say about that. We're not aware of anyone else creating and publishing a doc like this so this is very much new ground. The practice statement is here: http://nzrs.net.nz/dns/zone-and-host-scanning and we welcome comments on it. cheers Jay

1 0

Mentoring Groups
by Jonathan Robins 09 Jun '13

09 Jun '13

Hi, Would be interested to know if anyone is aware of any mentoring groups out there that are targeted at High School leavers to help guide those that are keen to join the telecommunications industry? Cheers Jonathan

3 2

Level One GVT-1000 SFP Media Converter in Trendnet TFC-1600 Fibre Chassis
by Alexander Neilson 06 Jun '13

06 Jun '13

I have a Level One GVT-1000 SFP to 1Gbps transceiver that looks like it should fit inside my TrendNET TFC-1600 chassis system http://www.flickr.com/photos/30026567(a)N04/8975140328/in/set-7215763398094… Top is the Level One and bottom is a TrendNET known compatible (but not useful in this situation) media converter. Has anyone got any experience using this hardware together? if so was is compatible / successful? I can use it stand alone if it won't work but I mainly want to avoid blowing it up. It would be a waste to use it stand alone (and a lot messier in the POP) if I can use the perfectly good chassis already waiting there for me. I will test it and come back with results if anyone else would like to know Off list replies are welcomed. Apologies if this breaches the charter. I had a read and felt it was close enough but happy to accept any feedback. Also if somebody knows of a supplier with in country supplies of chassis / standalone TrendNET and Transition Networks media converters (fixed laser and SFP Types) could they please let me know off list. Regards Alexander

3 3

Re: [nznog] Another Brocade question for my favorite mailing list
by McDonald Richards 03 Jun '13

03 Jun '13

CES/CER can handle 1000 LSPs (lsp tunnels) before they stop making new ones. This can be an issue if you're letting your entire Cisco LDP domain pollute them. MLX would be a good order of magnitude larger but I don't have a specific figure. Have tested and used MTUs of 9000+ for VLL with no issues. Have tested and used MTUs of 4000+ for VPLS with some issues although this is the smaller CES platform and there may have been some feature gap in the Ironware version I was using at the time (MLX will have more features around this). QinQ works fine if you do port mode VLLs. Also have tested it working in a "raw" VPLS environment (port mode again). In case that’s not clear, port mode would be where you have all client ports as untagged. Raw mode every time if you ever want to do inter-op. This will set the VC-type to 5 and indicates that the port is transparent – from memory Cisco have this as a default in IOS. Macca From: Sam Russell <sam.h.russell(a)gmail.com<mailto:sam.h.russell(a)gmail.com>> Date: Tuesday, 4 June 2013 12:05 PM To: "nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>" <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Another Brocade question for my favorite mailing list Hi, The interop stuff was a resounding success, and the details are at http://pieknywidok.blogspot.co.nz/2013/06/brocade-and-juniper-interop-ospf-… if anyone is interested. I'm now trying to engineer it so we can add Juniper devices while changing as little Brocade config as possible. Can anyone help me with the following questions: - How many LSPs can a Brocade MLX4/MLX8 handle before it falls over? We have a mesh of 15 chassis, and the output of "show mpls memory" looks like this: Mem-Type Alloc BytesAlloc TotalAlloc TotalFree AllocPeak AllocFail FreeFail LSP 28 25760 369 341 28 0 0 Does this mean that it's full? The documentation is sparse, I'm hoping someone else has gone down that rabbit hole and found an answer for me :) - What MTU are people using for VLL/VPLS? - Has anyone got QinQ working with VLL/VPLS on a Brocade? - Does anyone have a preference for raw mode vs tagged mode for VLL and VPLS? Cheers Sam

2 1

Another Brocade question for my favorite mailing list
by Sam Russell 03 Jun '13

03 Jun '13

Hi, The interop stuff was a resounding success, and the details are at http://pieknywidok.blogspot.co.nz/2013/06/brocade-and-juniper-interop-ospf-… if anyone is interested. I'm now trying to engineer it so we can add Juniper devices while changing as little Brocade config as possible. Can anyone help me with the following questions: - How many LSPs can a Brocade MLX4/MLX8 handle before it falls over? We have a mesh of 15 chassis, and the output of "show mpls memory" looks like this: Mem-Type Alloc BytesAlloc TotalAlloc TotalFree AllocPeak AllocFail FreeFail LSP 28 25760 369 341 28 0 0 Does this mean that it's full? The documentation is sparse, I'm hoping someone else has gone down that rabbit hole and found an answer for me :) - What MTU are people using for VLL/VPLS? - Has anyone got QinQ working with VLL/VPLS on a Brocade? - Does anyone have a preference for raw mode vs tagged mode for VLL and VPLS? Cheers Sam

1 0

IANA AS Numbers registry update
by Selina Harrington 30 May '13

30 May '13

The IANA AS Numbers registry has been updated to reflect the allocation of 1 block to ARIN in 2013-05-30: 62464-63487 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0