- NZNOG - lists.nznog.org

Barracuda product warning.
by Alex White-Robinson 24 Jan '13

24 Jan '13

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/2013… Vulnerability overview/description: ----------------------------------- 1) Backdoor accounts Several undocumented operating system user accounts exist on the appliance. They can be used to gain access to the appliance via the terminal but also via SSH. (see 2) These accounts are undocumented and can _not_ be disabled! 2) Remote access via SSH An SSH daemon runs on the appliance, but network filtering (iptables) is used to only allow access from whitelisted IP ranges (private and public). The public ranges include servers run by Barracuda Networks Inc. but also servers from other, unaffiliated entities - all of whom can access SSH on all affected Barracuda Networks appliances exposed to the Internet. The backdoor accounts from 1) can be used to gain shell access. This functionality is entirely undocumented and can only be disabled via a hidden 'expert options' dialog (see Workaround).

1 0

IPv6 Security
by Andrew Ruthven 23 Jan '13

23 Jan '13

Hey, These emails that just came through on the ipv6hackers seem relevant given Karl's talk on IPv6 Security. Cheers! -- Andrew Ruthven Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2013 | Come join the party... | http://linux.conf.au

1 0

networking is hard - tshirts
by Sam Russell 23 Jan '13

23 Jan '13

I hope you're all enjoying the conference, and the awesome tshirts that some of us are wearing. I've had a few requests for them, so I thought I'd ask on list to see who wants them - they're $35 each, sizes are a bit larger than kiwi (my size M is like a normal kiwi size L), black with white text on them saying "networking is hard" I need to get about 10 requests all up to make it worthwhile, and I've had 5 already, so if I can get another 5 by the end of the day I might be able to get them printed in time for tomorrow - if not, you'll have to find some way to get your shirt, I'm in wellington, but given how much many of us travel I'm sure you could find someone to courier yours to you -- Sam Russell Network Engineer Research & Education Advanced Network NZ Ltd ddi: +64 4 913 6365 mob: +64 21 750 819 fax: +64 4 916 0064 http://www.reannz.co.nz

1 0

NZIX OpenFlow adventures phase 3
by Dean Pemberton 22 Jan '13

22 Jan '13

Morning everyone, You all remember the NZIX OpenFlow project I've been posting about of late. Well we've just ticked off Phase 3, and as far as we can tell it's another world first. Phase 3 was to implement a distributed SDN controlled fabric and pass production traffic over it. Today, with considerable support from Citylink, REANNZ and others in the SDN community. We have managed to extend our existing fabric across the city, provision our first customer link and pass their production traffic across the fabric and onto the WIX. I'll be giving some of the technical details at the NZNOG conference this week, but suffice to say that we're not about to stop here. We've got a distributed fabric now, and we're looking to extend this even further. 1) More locations. I still want Auckland and we're very close to having this be a reality 2) Look at further services this enables at Layer3 (going to working closely with Citylink on developing this) 3) Look at the auto-provisioning options this can provide at Layer2 So a couple of things to take away from this. . Remember that if you have a WIX peering session currently, I've already configured you a test session on my route server for you. Turn up a test session and convince yourself that it works router bgp 9483 bgp router-id 202.7.0.119 . If you have any suggestions of things we can be working on in the future then now's the time to get in touch and let us know your thoughts. What are the things that you always wished you could do on the exchange but couldn't? We can build those tools. . Thank you to all the people who made this success possible. If you've been a supporter since the beginning then we know who you are and thanks. See you that the conference! Regards, Dean

1 0

Re: [nznog] Will the conference wireless have IPv6?
by Pete Mundy 22 Jan '13

22 Jan '13

Yep, it'll work just fine, I was using it today to get to Google hosted email via IMAP/SSL/IPv6 & KAREN. Pete On 23/01/2013, at 6:16 PM, Lloyd Parkes <lloyd(a)must-have-coffee.gen.nz> wrote: A game server that I've just built here at home is only on IPv6 and I'd like to be able to connect to it. Cheers, Lloyd

1 0

Will the conference wireless have IPv6?
by Lloyd Parkes 22 Jan '13

22 Jan '13

A game server that I've just built here at home is only on IPv6 and I'd like to be able to connect to it. Cheers, Lloyd

1 0

National Library of New Zealand Web Harvest 2013
by Jay Gattuso 18 Jan '13

18 Jan '13

Hi All, This email is to inform you of the NLNZ intent to undertake its 3rd Whole of Domain Web Harvest. The planned dates for this exercise are the 4th to the 22nd of February 2013. The harvest will be undertaken by the Internet Archive<http://archive.org/index.php> on our behalf, More details can be found on the web harvest website: http://natlib.govt.nz/publishers-and-authors/web-harvesting/2013-nz-web-har… If anyone has any specific concerns, requests or questions, please do not hesitate to contact me directly: jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)dia.govt.nz> or via the project email address: Web.Archive(a)dia.govt.nz<mailto:Web.Archive(a)dia.govt.nz?Subject=About%20the%202013%20Web%20Harvest> If anyone wants to discuss this further on the mailing list I am happy to do so. King regards, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

5 5

Microsoft at APE and WIX
by Kevin Epperson 16 Jan '13

16 Jan '13

Hello Good folks of NZNOG - After following several recent threads on this list and other forums regarding Microsoft performance issues in New Zealand, I am pleased to now be in a position to solicit peering sessions at both APE and WIX (details below.) We are also peering with the route servers at both exchanges. Please feel free to email me directly with any related questions and also be on the look out for a Microsoft network engineer at NZNOG next week. Microsoft Details: AS macro: AS-MICROSOFT Suggested max prefixes : 250 Prefer no MD5. NOC E-mail: ioc(a)microsoft.com NOC Phone : 1-425-705-2686 Peering: peering(a)microsoft.com ASN: 12076 APEv4: 192.203.154.162 APEv6: 2001:07FA:0004:c0cb::9aa2 WIXv4: 202.7.0.220 WIXv6: 2001:07FA:0003:ca07::00dc Full details at http://as8075.peeringdb.com To establish a session please set up your side and reply with the details below to peering(a)microsoft.com ASN: IPv4 address: IPv6 address: Approx number of IPv4 prefixes: Approx number of IPv6 prefixes: AS macro: NOC email: NOC phone: Peering email: Regards, -Kevin

1 0

NZNOG13 Update - Space still available in workshops and tutorials
by NZNOG Announcements 14 Jan '13

14 Jan '13

*NZNOG13 RegistrationsThis year, the 10th year of standalone NZNOG meetups is looking to be a cracker. The conference itself is now sold out but we do have a waitlist and some places may become available. You can sign up to the conference waitlist at: http://nznog.org/register We still have places on the tutorials and workshops, so if you are interested you might want to get in sooner than later. Tutorials - Wednesday the 23rd of January - Mikrotik wireless and routing systems (full day) - APNIC - Internet Resource Management IRMe (half day) - APNIC - DNSSEC (half day) - IPv6 Security - Karl Auer, Into6 (half day with morning and afternoon sessions) - Out of Band Management - OpenGear (half day) Workshops - Monday the 21st - Wednesday the 23rd JanuaryIPV6 BGP Routing - Philip Smith (APNIC) and Daniel Griggs (PCH) This workshop is targeted at engineers and network administrators from both ISPs and SOHO/enterprise networks. - ISP network topology overview - ISP IP Addressing Plan - Introduction of Internet routing infrastructure - 2 Byte and 4 Byte AS Numbers - BGP operation - Understanding BGP metric and path selection process - Configuring BGP within an AS [iBGP, route reflector] - Configuring BGP between ASes [eBGP] - Controlling routing update traffic [prefix list, distribute list, route map] - Route Summarization with BGP - BGP Traffic engineering [MED, Local Pref, AS-Path prepend] It is highly recommended that participants bring their own laptop computers (At least Pentium 4, 1gb Ram, DVD drive, with administrative access to system) to practice the lessons learned during the workshops. DNSSec Workshop - Phil Regnauld (NSRC) and Joe AbleyThe course is designed for network engineers, systems administrators, and anyone who is involved in managing DNS operations. - DNS concepts - BIND (DNS server) and Resolver (DNS client) configurations - Reverse DNS - DNS Security - TSIG - DNS security extensions (DNSSEC) - DNS and IPv6 It's more DNSSEC centric than a DNS operations 101 course. Goals - Learn about the real world threats that exploit DNS weaknesses - Understand the risks you run when your DNS isn't secured - Learn about the security extensions for DNS: DNSSEC - Enable signing & validation in the organisation - Learn about the impact of DNSSEC on one's DNS infrastructure - Help participants take the next step, whether it involves deploying their own signing solution, acquiring a vendor based solution, or using a third party service Topics zone signature, key management, automated DNSSEC management using BIND & OpenDNSSEC, Hardware Security Modules (HSM) presentation on key ceremonies, DNSSEC Practice Statements Sponsors NZNOG are grateful for the support we receive from our sponsors. Platinum Sponsor - Vocus Communications Gold Sponsors - Go Wireless NZ - Internet New Zealand - Network Hardware Resale - Alcatel Lucent - Citylink - Kordia - FX Networks - REANNZ Silver Sponsors - Fortinet - Opengear - Brocade - ISPANZ Bronze Sponsors - Allied Telesis Workshop Sponsor - Internet New Zealand For further information: To register: http://www.nznog.org/register Follow us on Twitter: @NZNOG Susbscribe to the NZNOG mailing list: http://www.nznog.org/mailing-list Visit the conference website: http://nznog.org <http://2012.nznog.org.nz/> For general enquiries info(a)nznog.org*

1 0

National Library of New Zealand - Whole of Domain Web Harvest 2013
by Jay Gattuso 14 Jan '13

14 Jan '13

Hi All, This is a quick reminder that the National Library of New Zealand about to embark on its 2013 Whole of Domain Web Harvest. Our partners, the Internet Archive will be commencing a test harvest within the next 24 hours. This test harvest is expected to last a few days, and will attempt to complete a basic resources discovery for all the URIs included in the seedlist for the harvest. >From this test we expect to identify: (1) URIs that are no-longer active, (2) robust approximations for storage requirements and (3) URIs that could result in significant quantities of resources being harvested. These results will be used to hone the seed list in preparation for the harvest proper (running between the 4th and 22nd of February 2013). Please refer to this link for more information: http://natlib.govt.nz/publishers-and-authors/web-harvesting/2013-nz-web-har… Or feel free to drop me a line if you have any questions. Best, Jay Gattuso Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0