- NZNOG - lists.nznog.org

Adding the geofeed: field to RPSL inetnum and inet6num objects in APNIC whois
by Elly Tawhai 10 Feb '21

10 Feb '21

Hi NZNOG Community, A discussion in the RIPE DB-WG in 2020 and 2021 has explored the addition of a geofeed: marker in RPSL (in inetnum, inet6num objects) https://www.ripe.net/ripe/mail/archives/db-wg/2020-October/006657.html https://www.ripe.net/ripe/mail/archives/db-wg/2021-January/006771.html This is in relation to work under consideration in the IETF Operations and Management Area Working Group (opsawg) https://datatracker.ietf.org/doc/draft-ietf-opsawg-finding-geofeeds/ Geofeeds are defined in RFC8805 (https://tools.ietf.org/html/rfc8805) They are a format for a network operator to publish a mapping of IP address prefixes to simplified geolocation information, colloquially termed a "geolocation feed” The DB-WG has been discussing adding a field to RPSL inetnum and inet6num objects, to permit resource holders to publish a URL to their own RFC8805 data to inform people where to find it. As discussed at the RIPE81 meeting (https://ripe81.ripe.net/presentations/27-RIPE81_geofeeds_discovery.pdf) this mechanism has been adopted by Google and other geolocation providers and over 1000 geofeed sources now exist worldwide. APNIC Secretariat has an opportunity to update our systems to support use of the geofeed: field in inetnum and inet6num Whois objects. We are interested in understanding community support for this work. Kind regards, Elly APNIC

1 0

Tutorials for APRICOT 2021 are filling fast - Register now!
by Elly Tawhai 29 Jan '21

29 Jan '21

________________________________________________________________________ Tutorials are filling fast - Register now! ________________________________________________________________________ Hi NZNOG Community, Register now for APRICOT 2021 to secure your participation at the tutorials and stay up to date on what's happening at the conference. Trainers from the community and APNIC will share their knowledge and experience at several hands-on tutorials, including: - Securing Internet Routing with RPKI - Network Monitoring & Management 2.0 - Wireless Deployment - IPv6 Deployment - DNSSEC Operations https://www.2021.apricot.net/program/schedule/#/day/1 There are still a few tutorial spots left to confirm, and places are limited. The tutorials will be held online from 22 to 26 February and the online conference runs from 1 to 4 March 2021. Participation is free for all and registration will remain open until the last day of the conference. https://www.2021.apricot.net/register/register Call for Papers open -------------------- Do you have an interesting presentation on Internet operations and technologies to share with the community? The APRICOT 2021 Call for Papers is open and the program committee is looking for presentations on topics including: - IPv4/IPv6 routing and operations - Internet backbone operations - Peering, interconnects and IXPs - Network Function Virtualisation - Network automation/programming - Content Distribution Network technology & operations - Research on Internet operations and deployment - Network infrastructure security - IPv6 deployment on fixed and wireless/cellular networks - DNS/DNSSEC - Access and transport technologies, including Cable/DSL, LTE/5G, wireless, metro ethernet, fibre, segment routing - Content and service delivery and "Cloud Computing" Draft slides for both tutorial and conference sessions MUST be provided with submissions otherwise the PC will be unable to review the submission; this means that submissions that do not include slides will be rejected immediately. For work in progress, the most current information available at time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Final slides are to be provided for publication by 21 February 2021. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. Presenters should try to get material to the PC sooner rather than later. More information about key dates is available on the conference website. https://www.2021.apricot.net/program/call-for-papers Nominations are open for the APNIC EC election ---------------------------------------------- You have until Thursday, 11 February 2021 at 17:30 (UTC +10) to submit a nomination for the APNIC Executive Council (EC) election on Thursday, 4 March 2021. https://www.2021.apricot.net/elections/nominations The Executive Council represents the APNIC membership and acts in the best interests of the organization. https://www.apnic.net/ec The EC members whose terms are expiring (and eligible for re-election) are: - Gaurab Raj Upadhaya - Kenny Huang - Yoshinobu Matzusaki - Yuedong Zhang Nominees do not have to be representatives of APNIC Members; however, only APNIC Members may make nominations. APNIC Members are welcome to nominate a representative of their own organization. The APNIC Member’s Corporate Contact must authorize the nomination. Have your say! -------------- Have ideas to improve the management and use of Internet number resources in the APNIC region? Consider submitting a policy proposal. The call for proposals for the Open Policy Meeting on Wednesday, 4 March is open now and closes on 31 January. https://www.2021.apricot.net/apnic-sigs/policy-sig-call-for-proposals If you're not sure what's involved, here's a handy guide to help you. https://www.apnic.net/community/policy/process/guidelines-for-proposal-auth… Good policy relies on a range of opinions. Everyone can participate. It doesn't matter how much experience you have — it's a great way to contribute to the Internet. Thanks to the sponsors ---------------------- Many thanks to the sponsors for their support of APRICOT 2021. https://www.2021.apricot.net/sponsor/sponsors ________________________________________________________________________ secretariat(a)apricot.net http://2018.apricot.net http://apricot.net ________________________________________________________________________

1 0

NLNZ 2021 domain crawl
by Ben O'Brien 10 Jan '21

10 Jan '21

Hi, We at the National Library will soon begin our 2021 New Zealand domain crawl. As in previous years, the crawl is being run by Internet Archive, and some of you may soon see the crawlers as IA go through their initial setup with some test crawls. The user agent string their crawlers will be using is: NLNZ_IAHarvester2021 For more information on our domain crawls please see http://natlib.govt.nz/publishers-and-authors/web-harvesting/domain-harvest While we do our best to crawl respectfully, obey robots.txt, and break out of any crawler traps before grinding too much bandwidth, if you encounter any issues from us then please get in contact. Cheers, Ben O’Brien | Digital Preservation Web Engineer | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467, Wellington 6140, New Zealand | www.natlib.govt.nz<http://www.natlib.govt.nz/> [Logo-test]

1 0

Talk Proposals for Sysadmin Miniconf close Friday
by Simon Lyall 15 Dec '20

15 Dec '20

The deadline for proposals for the Sysadmin Miniconf is this Friday. We are after 15-20 minute talks to be delivered online. More details below and at the link at the bottom. - Simon. The linux.conf.au Systems Administration Miniconf returns for the 15th time as part of the very online linux.conf.au 2021, to be held without a venue (Venueless!), online on Saturday 2021-01-23, based in UTC+11. The Systems Administration Miniconf focuses on tips, tricks, tools, and best practices used to manage real-world Linux environments both large and small. From single small servers through to 2,000 node Kubernetes Clusters. The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, peers, social networks, and other relevant mailing lists. Please help by encouraging submissions from people you would like to hear present at this Miniconf. We are open to presentations from speakers anywhere in the world, but please be mindful of the need to present during daytime in UTC+11 which may not be daytime in your local timezone (presenting late at night or very early in your morning is tricky!). More information and details of previous presentations at the Miniconf can be found at the website: https://sysadmin.miniconf.org/cfp21.html -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

1 0

Southland Regional Council reach-out
by Pete Mundy 24 Nov '20

24 Nov '20

Hi list Is there anyone here from the Southland Regional Council? (or with a contact there) I noticed they have a reasonable number of listings from their range 202.49.127.X in the data linked below - someone might want to reach out to them. Pete > Begin forwarded message: > > Subject: [AusNOG] 49-000 vulnerable fortinet vpns Posted online > Date: 24 November 2020 at 1:39:59 PM NZDT > To: "ausnog(a)ausnog.net" <ausnog(a)lists.ausnog.net> > > All, > > In case this passed you by... > > https://www.bleepingcomputer.com/news/security/hacker-posts-exploits-for-ov… <https://www.bleepingcomputer.com/news/security/hacker-posts-exploits-for-ov…> > > The list includes a number of Aussie businesses, so if you have the time/ability, and can find people on your networks, it may be a nice value add to reach out to them and let them know they may be about to have a bad day. > > A link to these with the ASN Info was posted to the JCSC slack, so you can grep away - there is a copy here. > > https://1drv.ms/t/s!AvEsGAQ-ZS2egalaPWlPaO08Dh4ATA?e=6TPtcL <https://1drv.ms/t/s!AvEsGAQ-ZS2egalaPWlPaO08Dh4ATA?e=6TPtcL>

2 1

103.68.122.0/24 is announced in Christchurch
by Don Gould 23 Nov '20

23 Nov '20

103.68.122.0/24 is announced in ChristchurchMediaworks you're annoying my wife. She can't watch the block on demand.D-- Don Gould5 Cargill PlaceRichmondChristchurch, New ZealandMobile/Telegram: + 64 21 114 0699www.bowenvale.co.nz

10 14

AS4770 and proxy
by Mauricio Freitas 20 Nov '20

20 Nov '20

I am seeing some traffic from a few IP addresses in the AS4770 space (ICONZ). This traffic come with a few different user-agents but all these browsers are used across different IP addresses - and reCAPTCHA is marking all of them as bots. All those IP respond to port 10002 requests as WonderProxy (wonderproxy.com) I am not sure those are business IPs or some residential IP being used as exit for this service without people knowing. Is there anyone from ICONZ here that would be interested? Cheers Mauricio Freitas https://about.me/freitasm

1 0

forward & reverse dns
by Richard Hector 10 Nov '20

10 Nov '20

Hi all, Is it reasonable to expect that a residential ISP, that provides a generated reverse resolution to a home IP address, will also provide a matching forward resolution that goes back to the same IP? Cheers, Richard

11 16

IANA AS Numbers Registry Update
by Selina Harrington 03 Nov '20

03 Nov '20

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to ARIN: 399261-400284 Assigned by ARIN 2020-11-02 400285-401308 Assigned by ARIN 2020-11-02 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

Monitor your network health with DASH
by Elly Tawhai 29 Oct '20

29 Oct '20

________________________________________________________________________ Monitor your network health with DASH ________________________________________________________________________ Hi NZNOG Community, APNIC is pleased to announce a new tool to help keep your network devices secure and healthy by monitoring suspicious traffic come from your network. The Dashboard for Autonomous System Health (DASH) is free for all APNIC Members and uses information from current honeynet data to see, for example, if malware exists in your networks, which in turn, may launch attacks on other networks. Is DASH right for me? --------------------- DASH will give you an idea of how your Autonomous System (AS) looks relative to other networks. By analysing the level of suspicious activity using DASH, you can check to see if the problem is serious and do something about it. DASH allows you to check how your AS looks compared to the broader economy or region, whether your network has a history of suspicious activity, and whether it’s getting better or worse. By monitoring this activity and correcting any compromised devices on your network, you’re also protecting other networks in the region, as well as your customers and infrastructure. Added benefits -------------- DASH also provides you with: - Reports for informed decision making (table of offending prefixes, high-level summary PDF report, and so forth) - Detailed information on specific prefixes and IP addresses that have been sending suspicious traffic - Additional insights about a set of prefixes if requested - Up-to-date security news Explore DASH now and see how you can secure your network and help improve the health of networks across the Asia Pacific. Try DASH now! ------------- https://dash.apnic.net/?utm_source=apnic_blog&utm_medium=text_ref&utm_campa… On behalf of: Sofia Silva Berenguer Product Manager, Information Services APNIC

1 0