- NZNOG - lists.nznog.org

connection issues to ftp.nz.debian.org
by Hugh Davenport 27 Dec '12

27 Dec '12

Hey, On two of my servers running with different ISP's I've noticed connection issues in the last few days to ftp.nz.debian.org. I can ping it, but can't connect via HTTP or FTP. This is both on my flat server (Snap) and my parents server (Slingshot). When I try from work, which is connected to the WIX, it works fine. hugh(a)hugh-laptop:~$ ping -c 1 ftp.nz.debian.org PING ftp.citylink.co.nz (202.7.6.9) 56(84) bytes of data. 64 bytes from ftp.citylink.co.nz (202.7.6.9): icmp_req=1 ttl=60 time=13.7 ms --- ftp.citylink.co.nz ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 13.792/13.792/13.792/0.000 ms hugh(a)hugh-laptop:~$ telnet ftp.nz.debian.org 80 Trying 202.7.6.9... telnet: Unable to connect to remote host: Connection timed out hugh(a)hugh-laptop:~$ telnet ftp.nz.debian.org 21 Trying 202.7.6.9... telnet: Unable to connect to remote host: Connection timed out hugh(a)hugh-laptop:~$ On an interesting note, I tried using debian.ihug.co.nz/debian which is listed as a secondary server on http://www.debian.org/mirror/list. This gave me the error. hugh(a)hugh-laptop:~$ sudo apt-get update Hit ftp://debian.ihug.co.nz wheezy InRelease E: Release file for ftp://debian.ihug.co.nz/debian/dists/wheezy/InRelease is expired (invalid since 83d 20h 47min 21s). Updates for this repository will not be applied. hugh(a)hugh-laptop:~$ When I try using netselect-apt I get the following: hugh(a)hugh-laptop:~$ sudo netselect-apt wheezy <snip> The fastest 10 servers seem to be: http://ftp.nz.debian.org/debian/ http://debian.mirror.uber.com.au/debian/ http://mirror.transact.net.au/debian/ http://mirror.cse.unsw.edu.au/debian/ http://mirror.optus.net/debian/ http://mirror.optus.net/debian/ http://debian.nautile.nc/debian/ http://ftp.iinet.net.au/debian/debian/ http://mirror.waia.asn.au/debian/ http://ftp.au.debian.org/debian/ Of the hosts tested we choose the fastest valid for HTTP: http://ftp.nz.debian.org/debian/ Writing sources.list. Done. hugh(a)hugh-laptop:~$ Any thoughts? It used to work fine, and has only cropped up in the last few days. Cheers, Hugh

5 4

TV3 Ondemand Contact
by Ray | Taylor Communications 21 Dec '12

21 Dec '12

Would there be any list members inside Media works by any chance, or would someone have a contact who I can speak to? I seem to be having an issue with TV3 ondemand on our network - the preroll plays but the programme itself does not. Anyone that replies when I click "report issue" doesn't seem to be of any help. We have our own ip assignments from apnic. Maxmind and other such geolocation databases are indeed showing Napier as the location though this took 3 months when we got them a year ago. I was thinking it could possibly be an issue inside our main router with the RTMP protocol but I have proved it isnt. - When I go to http://nzcontent.mediaworks.co.nz I can play the http demo stream, but not the rtmp stream - When I go to http://www.etvlive.gov.et/ I can play both the http and the rtmp stream. This is just some overseas organisation who has a web facing adobe media server similar to tv3's So next I thought there could possibly be a firewall or protocol block of some sort - I can telnet into nzcontent.mediaworks.co.nz on port 1935 without an issue. Its been bugging me since we changed over to our own block of ip addresses with the occasional subscriber complaint about the tv3 service. So anyone you can refer me to inside TV3/mediaworks that can help (beyond the tier1 helpdesk monkeys) would be much appreciated. Ray Taylor Taylor Communications ray(a)ruralkwii.com 06-929-9082 021-483-280 www.taylorcom.co.nz

3 2

My Experiences with 3G (aka 2Degrees are pathetic)
by Skeeve Stevens 17 Dec '12

17 Dec '12

Hey all, So I arrive in Queenstown, go to Dick Smith, and pick up 2 TelecomXT Sims and a 2Degrees Sim. Also bought $270 worth of recharge vouchers. Telecom XT wasn't too much of a problem... ring up a number and recharge the sims.... worked fine. 2Degres. Useless bloody idiots who if I had the time I would lodge a complaint with whatever authority there was in NZ for doing do. So, got their Nano Sim, put it in the iPad Mini... and nothing. Says it sees the 2Degrees towers... but nothing. Won't activate. Call them, they say I need to put it in a phone with Nano slot (iPhone5) to activate... I didn't bother bringing the 5 because I had the Mini. Called last night, they took details, said to call back in the morning. I called this morning, waited an hour for these idiots to figure out why I or they couldn't activate it... and even got the comment when I said that if they are selling these for iPad Mini's and there is no way to activated they said 'Seems a bit stupid doesnt it'. They said someone would call me back... they didnt. I called back tonight, chick read through all the notes... says she couldn't do anything and the escalation meant I would receive a call back by the 21st of December. WTF?! These people are totally useless. Now the chick is telling me that Dick Smith 'should have' known.... really? Dick Smith said they have no idea and get no training whatsoever from 2Degrees, or any of the sims they sell. So my two Telecom XT work fine, but still needed a call to activate then... but 2Degrees is the biggest joke ever. They have no details, instructions or ANYTHING at all about activating sims on iPad's or iPad Mini's. They had the nerve to say I should go back to Dick Smith and get them to activate it... but didn't want to pay the $60 in taxi fare. If anyone knows anyone up there, feel free to forward them my email to them. This is the worst customer experience ever and I will be telling everyone I know not to use them. *frustrated* * * *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website! eintellego.mx Free Apple products during this promotion!!!

4 3

3G in the South
by Bevan McNaughton 16 Dec '12

16 Dec '12

Down here it seems that Vodafone is the fastest and ha good reliability (little overloading and good consistency), however doesn't have the best coverage. Telecom XT has better coverage but speed and reliability isn't as good. Vodafone may be your best bet. It deems to be consistent enough throughout Qtown, Dunedin & Invercargill (am doing work from those centres with Vodafone on and off often). Regards, -- Bevan McNaughton SouthLoop Invercargill

12 18

Re: [nznog] 3G in the South
by Richard Naylor 16 Dec '12

16 Dec '12

At 02:09 p.m. 16/12/2012, you wrote: >Is it just me or is this the most pathetic options I've ever seen? >I'm used to be able to get pre-paid data in Australia, like 12Gig or >$120 or something. >These plans are offering tiny little megs... "Pathetic" is a good description of the major carriers. Telecom do a 4GByte plan and in December seem to do a 2 for 1 deal. We get 8GB per stick from them Vodafone seem to think 4Gbyte is awesome. We carry a "reverse cell-site" that has sicks on both carriers. It uses external aerials to get that little bit extra. I used it in Wanaka in Jan just before NZNOG and Telecom wasn't too bad. Vodafone looked like it had good download, but it was only in short burst stuff. Sustained thru put was mediocre. We used satellite for the job. The 3G rig was just for us at the motel FYI - identical USB sticks sitting side by side have different performance figures. They're really made for metro areas with "immersive" coverage and in areas with less coverage performance is a struggle. For the Wanaka job, the producer is talking about using a bonded 3G rig to replace microwave link from chopper. It will be interesting.

1 0

3G in the south
by Ernest Cunningham 15 Dec '12

15 Dec '12

Just cut all the plastic around the chip on any 2degrees sim and it will fit in your iPhone 5 fine and work perfect. Ernest Sent from my iPhone

1 0

Advisory - D-root is changing its IPv4 address on the 3rd of January
by Sebastian Castro 13 Dec '12

13 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Original message can be found here https://lists.dns-oarc.net/pipermail/dns-operations/2012-December/009428.ht… - ------------------------------------------- Advisory ? D-root is changing its IPv4 address on the 3rd of January. This is advance notice that there is a scheduled change to the IPv4 address for one of the authorities listed for the DNS root zone and the .ARPA TLD. The change is to D.ROOT-SERVERS.NET, which is administered by the University of Maryland. The new IPv4 address for this authority is 199.7.91.13 The current IPv6 address for this authority is 2001:500:2d::d and it will continue to remain unchanged. This change is anticipated to be implemented in the root zone on 3 January 2013, however the new address is currently operational. It will replace the previous IP address of 128.8.10.90 (also once known as TERP.UMD.EDU) We encourage operators of DNS infrastructure to update any references to the old IP address, and replace it with the new address. In particular, many DNS resolvers have a DNS root ?hints? file. This should be updated with the new IP address. New hints files will be available at the following URLs once the change has been formally executed: http://www.internic.net/domain/named.root http://www.internic.net/domain/named.cache The old address will continue to work for at least six months after the transition, but will ultimately be retired from service. - --------------------------------------------------- Kind Regards, - -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDLakMACgkQWyqRrHcQWTmrzQCfeDQ0SZX9Wlf3unUUgu5f0pVZ ODQAn3ETzMd0WsaynqnJzX2bHPlPOF8y =5dXZ -----END PGP SIGNATURE-----

1 0

NZ scores first OpenFlow controlled connection to an IX
by Dean Pemberton 10 Dec '12

10 Dec '12

Hi all, Just wanted to share with you all what we think is a world first, right here in New Zealand. Today New Zealand can boast the first SDN controlled OpenFlow switch BGP peering with a public Internet Exchange. Because you're all geeks, I've decided to write the rest of the email as a FAQ: Q: What is SDN and/or OpenFlow? A: It's a new way of thinking about and building network devices. It stands for Software Defined Networking. It's basically a way to separate the control plane from the data plane in order to allow you unprecedented control over what your network can do, while still keeping it blindingly fast. You let the Software do what it's good for (running routing protocols, making policy decisions) and you let the Hardware do what it's good at (forwarding stuff at wire speed, zoooooom!). A match made in heaven Have a look at the wikipedia page http://en.wikipedia.org/wiki/Software-defined_networking Or this presentation from OpenFlow http://www.openflow.org/documents/OpenFlow_2011.pps Q: Why do I care? A: SDN and OpenFlow allow you much more control and flexibility over your network. It's a new technology however, and people are yet to begin playing with it. Q: Sounds like one of those scary technologies like IPv6 and DNSSEC. A: Well if you mean that other people are doing it while you're ignoring it and hoping that it will go away... Then you're right. =) Just like IPv6, before we saw people willing to deploy it on their networks they needed to get some experience with how it worked. We're at that stage with SDNs at the moment. It is because of this need for more experience and public awareness that we've gone ahead with this little project. Q: So what exactly have you done. A: We've deployed an OpenFlow controlled switch on the WIX and along with an OpenFlow controller built a BGP capable router. Q: Details? A: From the WIX looking glass Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 202.7.0.119 4 9483 24345 27397 0 0 0 07:21:59 1 Q: So what? Is that it? A: Hardly. We've got some more phases that we want to develop, so I guess this is a watch this space. Over the next few months, we'll be working on extending past this single box with a view to demonstrating to the NZ Internet community, and beyond, whats really possible with an SDN. Basically we don't want New Zealand falling behind whats happening in the rest of the world. Q: We're not ready for this. It's scary, poke it with a stick!!! A: Thats fine. We've chosen to use New Zealand as the initial production deployment here. But if it looks like thats not going to get the traction needed, then there are other places which this would work in. Lets make this a good Kiwi development moment though. Remember how we're so proud of telling people we had EFTPOS so long before anyone else. Q: Pfffft I've heard of this. It doesn't work! It's not production ready A: Hi, Welcome to the conversation. You're just the sort of person we need paying attention. We're doing this so that people arn't LISTENING about SDN, but are actually seeing it WORK. In a real world production setting. We hope you can stay for the rest of the show. Q: So who else does SDNs. This sounds a little too much like witchcraft to me. A: Well from back in the days of the Juniper M-Series people have been separating Routing Engines from Packet Forwarding Engines. We then started to see multi chassis versions. This is just an extension of the same sort of concept. There are some organisations which run huge-scale SDN style networks. Maybe you've used a search engine or mail platform from one... Q: This sounds like a pretty heavy sales pitch. What are you pushing? A: CYNIC! Nothing. Just like the reason I'm pushing people to think about IPv6 and DNSSEC, I want to see the New Zealand Internet community as a technology innovator, not just someone who swallows down the latest vendor slide-ware. And hey if SDN doesn't work then at least New Zealand still gets to write the book on it. Q: Sounds cool, can I help? A: Sure, anyone's welcome to come and learn along with the rest of us. Drop me a line if you think you can help and we'll see where we can fit you in. As a starter I'm looking for between 1 and 3U of space in Auckland with access to the APE. Q: Where can I hear more. A: If you're lucky I might do a lightning talk on where we've got to and where we're going at the NZNOG conference. Thanks to Prophecy Networks, REANNZ, VUW, Waikato University, Citylink, FX Networks and others, for their contributions and support in getting the project to where it is today and for not wanting it to stop there! Regards, Dean

3 4

Commsday: Russia, allies back off proposal to extend regulation across Internet
by Skeeve Stevens 10 Dec '12

10 Dec '12

Hey all, This was in this mornings Commsday. Seems like great news ...Skeeve ============================================== *Russia, allies back off proposal to extend regulation across Internet* * * In an extraordinary development late last night, Russia and its allies China, Saudi Arabia, Sudan, Egypt and the United Arab Emirates withdrew a radical proposal to overhaul international telecommunications regulations which would have given national governments sweeping new powers to regulate global ICT service providers such as Facebook and Twitter as well as Internet governance. CommsDay was told by sources that International Telecommunications Union secretary-general Hamadoun Toure personally intervened to persuade the Russians to withdraw their proposal following American threats to walk out of the World Conference on International Telecommunications if the revisions were considered for ratification. In a fast moving night:  United States delegation chief Ambassador Terry Kramer denied comments attributed to him by Dow Jones that his country would walk out of the conference if it sought to regulate Internet content. CommsDay has confirmed with Dow Jones that he made the comments now denied.  Russia withdrew, without explanation, a proposal with China, Saudi Arabia, Sudan, Egypt and the United Arab Emirates that would massively increase the ambit of international telecommunications regulations to cover almost all telecommunications and Internet activities. The proposal, leaked on Saturday, was disowned by a member of the Egyptian delegation which last night made a strong statement in favour of Internet freedom. This hinted at serious dysfunction behind the Russian-led coordination efforts.  A steering committee was immediately convened to get the conference, in danger of collapse, back on track. There was reportedly applause in the committee room as progress was made, especially on the detail of who the revised regulations might apply to. However access to the room was blocked by guards. Previously there were concerns that loose wording could extend the ambit of the regulations as far as users of virtual private networks and ham radio operators. The secretive machinations of a working group—the so-called Committee 5—will now apparently give way to open plenary sessions. Observers tell CommsDay that the radical Russian proposals had the effect of galvanising the conference into action. Although Russia and allies have formally withdrawn their proposed treaty revision, other countries may still attempt to advance some of the main points. Australian delegate Dr Bob Horton is believed to have played a major role last night, chairing an ad hoc meeting attempting to resolve the arguWCIT bombshell: SG averts collapse of conference LEAKED: The Russia-led proposalent over how Internet traffic is charged. African states and their supporters seek to restore the old voice traffic settlements regime for Internet traffic to provide a revenue source. The result of these efforts was unclear as we went to press 5AM Australian Eastern Summer Time. CommsDay was told last night that secretary general Toure personally called top Russians and asked them to back off because this would split the conference nproductively. “The head of delegation, considered a young tyro, apparently acted on his own and they shot him down. Partial confirmation is that Touré personally delivered the news to regional meetings before it was announced.” our source said, emphasising this was not officially confirmed. CommsDay sources say that the US delegation’s hundred-plus members fanned out to meet with almost every participating country in a last ditch effort to block the Russia-led move over the weekend. On sheer numbers, the Russia-led proposal would probably win a majority vote but there is an overriding preference by the ITU to forge a consensus on the eventual outcome. The alternative was a walkout by the US delegation and potentially some of its core allies. According to the .nxt website, Poland had also threatened to walk from the event. Australia generally supports the US position backing the status quo on Internet governance. CIVIL SOCIETY OBJECTS: Meanwhile, a group of civil society organisations from the US, Europe, India and Africa has slammed the ITU and WCIT process for a lack of transparency and input from outside groups. In a letter to the ITU, they state “Now that the conference is in session, we wish to call your attention to three immediate and pressing matters: the lack of any official standing to the public comments solicited prior to WCIT at the ITU’s invitation; the lack of access to and transparency of working groups, particularly the working groups of Committee 5; and the absence of mechanisms to encourage independent civil society participation.” ======== To subscribe to Commsday, please visit: http://www.commsday.com/ * * *Skeeve Stevens, CEO - *eintellego Pty Ltd <http://www.commsday.com/> <http://www.commsday.com/> <http://www.commsday.com/>skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website! eintellego.mx Free Apple products during this promotion!!!

1 0

.nz Second Key Generation Procedure
by Sebastian Castro 06 Dec '12

06 Dec '12

To the Technical Community: On December 5th 2012, NZRS successfully carried out the Second Key Generation Procedure. During this event, the cryptographic keys required to sign the .nz zones with DNSSEC for the next year were created. During the procedure NZRS also purged the keys that were not longer needed due to key rollovers. More details and links to the documentation trail created by the procedure can be found at https://nzrs.net.nz/content/second-key-generation If you have any questions, feel free to reply to this message or contact us privately. Have a great weekend, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0