- NZNOG - lists.nznog.org

RING Node in NZ
by Gaurab Raj Upadhaya 12 Jun '12

12 Jun '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Noggers, I'd think some of you may be interested in a project run by some friends of mine: the NLNOG RING. Project came out of the NLNOG (the Dutch NOG) discussions. It's based around the goals of making network debugging easier. When trying to debug complex problems and plan future upgrades, a point of view from outside your network is absolutely essential. Seeing what others see is incredibly useful when dealing with a variety of network problems. Well known examples are ‘it works for even numbered ip address, but not for odd numbered ip address via this and this route’. So tired of asking people to do traceroutes and wait for results, NLNOG RING was formed. In essence the project is very simple: you make a (virtual) machine available to the RING, and you gain access on all other servers which are part of the RING. The project currently has 108 nodes, located on 100 participant networks in 25 countries. Was just looking and see that NZ is missing on that list, the home of the rings, so thought I'd send this out. The RING provides tools to trivially launch a ping from all these nodes and summarize the results to, other examples are distributed tracerouting and MTU testing. The RING also maintains a record of latencies between nodes using smokeping to help identify historic problems. I say, have a look at https://ring.nlnog.net/ for more information. A map of current node locations is available here: https://ring.nlnog.net/map And email ring-admins(a)ring.nlnog.net directly with any questions you have. I am sure the they will send some good beer for the next NOG to make this on topic. - - gaurab -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk/YkBwACgkQSo7fU26F3X2z9wCgo3bciqJuKD4TY48/TC9WEMH5 RPQAoO8o/lo4liNO1AjbVXAQpona6ETd =/AAz -----END PGP SIGNATURE-----

1 0

Reliability & performance of NZ carrier WAN/Internet services
by Josh Farrelly 12 Jun '12

12 Jun '12

Hi all One of our customers is looking at migrating away from their current WAN carrier and have nailed down their options to either FX Networks or Gen-i. This is a 3 office site (AKL/WGTN/CHCH) with relatively fat PIP pipes between all offices, and 20/30Mbps to the Internet from the AKL & WGTN locations using carrier managed BGP devices to allow for Internet failover. Obviously the overview of services according to the provider themselves are understandably at least somewhat bias, but I was wondering whether anybody from the NZNOG community has any objective views on each with regards to reliability and performance? For example FX seems to cost significantly less for relatively the same thing, however without personally having a lot of experience in provider topologies I can't justify being able to go back to the customer vouching for either provider either way. Any replies, either on or off-list are appreciated. Regards, Josh Farrelly

7 8

APE Peering
by Craig Spiers 12 Jun '12

12 Jun '12

Hi All, If anyone should wish to establish a direct peering session via APE with us (for either redundancy reasons, or because you don't use the route servers) please contact me directly off list. Kind regards, Craig Spiers | Network Engineer Maxnet Ltd

1 0

ZeuS- and SpyEye Tracker goes Spamhaus
by Dean Pemberton 12 Jun '12

12 Jun '12

http://www.abuse.ch/?p=3810 This might be of interest to people. Today The Spamhaus Project <http://www.spamhaus.org/>, a well known non-profit organisation fighting cybercrime in the internet, released a new list called “Spamhaus Botnet C&C List” (BGPCC <http://www.spamhaus.org/bgpf>) which is implemented at the router level using the Border Gateway Protocol (BGP). I’m proud to announce that the newly launched list also contains data provided by ZeuS Tracker <https://zeustracker.abuse.ch/> and SpyEye Tracker <https://spyeyetracker.abuse.ch/>.

1 0

Congratulations to Craig Whitmore
by Sebastian Castro 11 Jun '12

11 Jun '12

Because dnssec.geek.nz is the first .nz domain that can be DNSSEC validated According to the Open DNSSEC Validating Resolver (https://www.dns-oarc.net/oarc/services/odvr) dig a www.dnssec.geek.nz @149.20.64.20 +dnssec +multiline ; <<>> DiG 9.8.0 <<>> a www.dnssec.geek.nz @149.20.64.20 +dnssec +multiline ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24148 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 5 ^^^^ NOTE THIS ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.dnssec.geek.nz. IN A ;; ANSWER SECTION: www.dnssec.geek.nz. 86161 IN A 114.23.33.130 www.dnssec.geek.nz. 86161 IN RRSIG A 5 4 86400 20120705085021 ( 20120605083506 57516 dnssec.geek.nz. UCUGqNqTi020wY++lGqJWjZZrLYvPYyS7tEHLA1ASW3O AXEkBtojFfHxy0Zne0Z1INoChmlONAovXBWmCa6Y8RPO iAFsxoUcAt+njxwpXIrqWfSw4bKVex4DVtbIJiQcgUjf y4+CpkSEHKVZG0jQcquwnOCRqcf90OCPYW93Uqs= ) ;; AUTHORITY SECTION: dnssec.geek.nz. 86160 IN NS dns2.dnssec.geek.nz. dnssec.geek.nz. 86160 IN NS dns1.dnssec.geek.nz. dnssec.geek.nz. 86160 IN RRSIG NS 5 3 86400 20120705085021 ( 20120605083506 57516 dnssec.geek.nz. d+7MLB24EUROEmvsfDFRpy52qY1bNF6KJFBnhaszvyak 9tbsY1TpDY8dv6y2OUN4SoA9Ydfj3QD3IwEkGAOKIzvG OrorBNUDBb7nUyjXMi0te5X7AfRhSkQDNDL3zYb30WO/ 8KeCzydAGXQtmAiu2yxTV9RJFrnzbQ4OOe/i3QY= ) ;; ADDITIONAL SECTION: dns1.dnssec.geek.nz. 86160 IN A 114.23.33.130 dns2.dnssec.geek.nz. 86160 IN A 114.23.33.131 dns1.dnssec.geek.nz. 86160 IN RRSIG A 5 4 86400 20120705085021 ( 20120605083506 57516 dnssec.geek.nz. ODk/boWCMVYj6RWMkp2PqZoxvnCavFZyucZgvTxTIlYz R47IGWjlLeb1DHIQJzEDUPvKj6VhNiA+sbLwG/Oh4nHD WVb5xJt07gPlSPiihzWGlY2g90KN3PXqdujKgc/8FIhi GUSdE+umR+kBG2XlZpvyzc0L3C6niICPImMq3JY= ) dns2.dnssec.geek.nz. 86160 IN RRSIG A 5 4 86400 20120705085021 ( 20120605083506 57516 dnssec.geek.nz. Tl5vbS+GfMiWhft32InQHdUqWY0lHmzZdIzwyrVGJdoO yhRGrWej0RshhnypA0lO77cBRQuYoIzZt7/cUpGe1MyO FnYKQeQpt8bLak4HZ5W+Fkc5GQctD4Q2cGSJqvIJOuDd GqT1KuILudTDERmUwLCsA8n/q3W19mUnbYO4dqM= ) ;; Query time: 160 msec ;; SERVER: 149.20.64.20#53(149.20.64.20) ;; WHEN: Tue Jun 12 12:17:01 2012 ;; MSG SIZE rcvd: 829 Our internal validating nameservers report similar situation. BTW, the above is possible because geek.nz is fully DNSSEC enabled. Kind Regards, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

5 4

3G Link from Pohoi to Rotorua
by Andrew Hooper 08 Jun '12

08 Jun '12

Are there any engineers here working for one of the cell phone companies who may be able to help me contact the right person and build a portable 3G link to connect a fundraising event supporting Hospice and running from two locations Pohoi and Rotorua. I had thought of using a sat link but it needs to be a simple setup procedure and I only have 2 weeks to do it. Regards Andrew

1 0

NZRR Route Registry Update
by NZRR Database Notifications 07 Jun '12

07 Jun '12

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS23977 descr: Route set advertised to AS9439 by Katipo - AS23977 members: 192.54.130.0/24^24-29, 202.50.109.0/24^24-29, 203.97.152.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR mnt-by: MAINT-NZRR-NZ notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: simon(a)katipo.co.nz changed: rpsl-admin(a)nzix.net 20031217 changed: rpsl-admin(a)nzix.net 20040812 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS23977 descr: advertised to AS9439 by Katipo - AS23977 members: 192.54.130.0/24^24-29, 202.50.109.0/24^24-29, 202.70.130.0/24^24-29, 203.97.152.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: simon(a)katipo.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20120608 source: NZRR ------------------------------------------------------------

1 0

Hotmail.com live.com blocking NZ
by Steve Brorens 06 Jun '12

06 Jun '12

For all of this month we're seeing a wide IP ranges - from several local ISPs - being blocked by the hotmail.com and live.com mail servers. We understand that the ISPs concerned are working directly with Microsoft - anyone on this list able to give some feedback on progress? - steve ------------------------------ Steve Brorens Systems Architect CommArc Consulting Ltd Mail: sjb(a)commarc.co.nz Phone: 021 332289 ------------------------------ ========================================================= This e-mail has been scanned for Viruses and Content and cleared by Mail Marshal

5 4

Juniper console ports
by Ian Batterbee 06 Jun '12

06 Jun '12

Just a quick question to those using juniper MX series routers.. or perhaps any series - is there a known issue with the console port dying ? We've seen this happen on two different boxes - completely unresponsive after running for a few weeks, reboot doesn't fix it, and no output at all on it, even during the freebsd boot sequence. So before I start second and third-guessing what I've been doing to it, is this a known issue that people have seen elsewhere ?

8 8

APNIC Survey 2012 Ends Soon
by Elly Tawhai 06 Jun '12

06 Jun '12

________________________________________________________________________ APNIC Survey 2012 Ends Soon ________________________________________________________________________ Hi NZNOG Community, The APNIC Survey 2012 will close on Friday, 8 June at 17:00 (UTC +10). http://www.apnic.net/survey Contribute now to the operational planning and future direction of APNIC and be in the draw to win some great prizes! - Toshiba Z830 Ultrabook laptop - Samsung Galaxy Tab 10.1 - HTC One V mobile phone Please note, the Survey will only take a few minutes of your time and your responses are anonymous. ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

1 0