- NZNOG - lists.nznog.org

ICANN 41 - now underway
by Save Vocea 19 Jun '11

19 Jun '11

Dear all, The ICANN 41 meeting is already underway in Singapore this week with remote participation offered so one can follow proceedings online. The full meeting schedule is available at http://singapore41.icann.org/full-schedule The official welcoming ceremony is starting at 9am Singapore time today. There’s also live twitter feeds referencing #ICANN and #ICANN41 Regards, Save Vocea ICANN rep Australasia/Pacific Islands

1 0

I don't trust the NZRS DNSSEC procedures... Yet
by Dean Pemberton 18 Jun '11

18 Jun '11

Hi All, (TLDR warning - If you're not going to read this long post then you can skip to the *TLDR Breakpoint* near the end) Trust is a funny thing. It's one of those qualities which is up to an individual to freely give rather than for someone else to demand that it be given. Recently NZRS published their DNSSEC Practice Statement (DPS) to this mailing list and asked us as a community to trust both them and these procedures. But more than that, they have asked us to trust that these procedures would work in the years to come. Even if all the people we know at NZRS have left, we should still be able to trust that these procedures will yield a trustworthy DNSSEC model for the .nz ccTLD And I'm afraid that at the moment, with the current document, I'm in the uncomfortable position of not being able to advise my clients to place any significant level of trust in the current procedures. So where are the problems? For me, being able to evaluate whether I can give this system a tick or a cross, comes down to three areas. The theory that the system is designed around. The people operating the system. The procedures they are following. Get a tick for all of those, and we're all good. Get a cross for any one of those and it still needs work. THEORY: The theory behind this implementation of DNSSEC is sound. NZRS has followed the designs of some giants in the field and I believe they have this right, so THEORY is well on the way to getting a tick. My only concern at this level is a relativity low keysize that has been chosen. NZRS has decided on 1280 as a key length for the KSK. 2048 seems to be a much wider accepted standard. In fact RFC4641 recommends 2048 as a KSK key length for 'high-value' domains such as TLDs. Of the following list of DNSSEC enabled domains only one has chosen 1280 as a KSK length. root 2048 br 1280 se 2048 cz 2048 uk 2048 org 2048 gov 2048 edu 2048 kirei.se 2048 NZRS must have reasons and I'm all ears, but in the mean time, organisations I've spoken to have refused to give this a tick of trust based on the low key length. PEOPLE: It's not even with the current people concerned. Both Jay and Sebastian are great upstanding people and individually worthy of trust, but as far as I know they are not going to be the only ones with access to the key material. They are certainly not going to be the only ones with access in the future. I believe that the current procedures are lacking when it comes to proving to you and me that the people with a level of authority in this system are worthy of trust. Reading the DPS document, the key material is protected by two NZRS employees (or board members) who have had 'standard pre-employment checks'. I'm sorry but that falls below what I need in order to be able to recommend that organisations start to trust this system. Given that we live in a world of Advanced Persistent Threats, this system needs to be safe on a level far above two people, who may even report to the same manager, and nominated friendly people on their CV. Other domains who have implemented DNSSEC, have stated that they will perform financial background checks on trusted individuals, or even checks for previous criminal convictions. Some other domains have even gone to far as to say "We don't even want to be the *only* trusted party. We're going to require other participants to be present". Our very own Andy Linton is one of these Trusted Community Representatives for the root zone. Without these kinds of safeguards, there is nothing to say that in 12 months, when there have been employment changes at NZRS, two of the admins won't feel like selling the key material to the highest bidder (and I have no trouble imagining that it's worth a lot of money). Once again, I'm not saying that the people involved today are untrustworthy, but how will we know that the next person is just as trustworthy? What are the procedures in place to make sure of that? If NZRS widened the group of participants to include Trusted Community Representatives, they would be well on the way to a tick here. PROCEDURES: I believe that there are some areas where the procedures don't meet my bar for being able to trust the system. The highlights are. . No stated archive of old versions of the document. The entire document could change over time and it might not be possible to see when this was done. . No information around the security aspects of the co-location sites. Other DPS documents have outlined the security features used and who has access. . No elaboration on who has access to the equipment. Do co-location staff have access as well as NZRS staff. If not, how is this enforced and audited? . Vulnerabilities are assessed by looking at logs and assessing of there has been a problem. Some more proactive assessment might be worthwhile here. . Why is there no regular schedule for an external audit? ICANN has set regular audit dates (two years I believe without looking it up). Leaving it up to NZRS to have them 'as necessary' means that they could never be done at all. There are some others as well but you can see where I'm going here. The obvious question I ask myself here is: "Dean, are you being an unreasonable git?" Well I don't think so. When the root was signed they got this all correct in my opinion. They got the community on board and have a level of trust in their Theory, People and Procedures which I think is unparalleled at this time. Now I don't expect NZRS to implement the .nz system to the same level, but I do expect it to be just about as high. Looking through the DPS documents of some of the other DNSSEC enabled domains, they get more ticks that we currently do. So I don't think I'm being unreasonable here. I also don't want to create a trust-valley for the .nz ccTLD. The DNC and NZRS have done some great work promoting .nz as a place that people want to host their domains. I don't want it to become a trust-ghetto. It's widely accepted that the root zone got the level of trust right and that it's probably a 10/10. Lets imagine that you're an NZ bank or an NZ government department. You implement your DNSSEC procedures using the same sort of procedures which you currently use for other PKI and get about an 7/10 on the trust scale for your blah.govt.nz domain. You then look at the .nz ccTLD procedures and only give them a 5/10. The problem now is that no matter how much you trust your system, or the root zone, there is always this valley of trust in the middle which is eroding the whole system back to a 5/10. 10| * 9| * 8| * t 7| * * r 6| * * u 5| * * * s 4| * * * t 3| * * * 2| * * * 1|___*_______*__________*________ root .nz blah.govt.nz Now lets imagine that you trust some other domain an 8/10. 10| * 9| * 8| * * t 7| * * * r 6| * * * u 5| * * * s 4| * * * t 3| * * * 2| * * * 1|___*_______*__________*________ root .com blah.com Where do you think people are going to buy domains they want to be secure? Not in the trust-ghetto I can assure you of that. So I'm putting my bar at about an 8 or a 9 for the .nz ccTLD. Any lower than that and it's no use to organisations who want to implement high-assurance DNSSEC themselves. *TLDR Breakpoint* So where to from here? Well I think it's totally fixable. As I mentioned before, I think we currently have the right people currently at NZRS to address this. But what I'd like to see is much less of the: "Trust us, we know what we're doing" And much more of: "Here is exactly what we're doing. You tell us if we've got your trust yet." So lets start to address some of these issues. If you think I've got it wrong, than by all means chime in. If you think there are other areas which need work then chime in. If we get this right then I'm going to be the biggest .nz DNSSEC advocate and tell everyone who will listen that .nz is the place to host domains you want to secure. Otherwise I'll just buy more non .nz names and advise others to do the same. Regards, Dean

25 75

NZRR Route Registry Update
by NZRR Database Notifications 16 Jun '11

16 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS4770 descr: advertised to AS9439 by ICONZ - AS4770 members: 131.203.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 210.48.0.0/17^17-29, 210.185.0.0/18^18-29, 119.15.0.0/19^19-29, 180.189.192.0/19^19-29, 202.14.32.0/19^19-29, 202.50.192.0/19^19-29, 202.154.128.0/19^19-29, 210.54.160.0/19^19-29, 114.134.160.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.55.96.0/20^20-29, 202.86.96.0/20^20-29, 202.160.48.0/20^20-29, 202.174.160.0/20^20-29, 202.191.32.0/20^20-29, 203.96.16.0/20^20-29, 203.96.48.0/20^20-29, 203.96.128.0/20^20-29, 210.48.160.0/20^20-29, 210.56.32.0/20^20-29, 114.134.176.0/21^21-29, 116.90.128.0/21^21-29, 117.18.80.0/21^21-29, 120.89.80.0/21^21-29, 120.138.16.0/21^21-29, 123.108.144.0/21^21-29, 192.173.16.0/21^21-29, 202.12.248.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.176.0/21^21-29, 202.49.0.0/21^21-29, 202.49.152.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 203.190.208.0/21^21-29, 205.233.128.0/21^21-29, 210.4.208.0/21^21-29, 113.197.64.0/22^22-29, 114.31.212.0/22^22-29, 202.36.36.0/22^22-29, 202.37.48.0/22^22-29, 202.37.140.0/22^22-29, 202.37.200.0/22^22-29, 202.41.136.0/22^22-29, 202.50.52.0/22^22-29, 202.59.4.0/22^22-29, 202.89.4.0/22^22-29, 203.80.60.0/22^22-29, 210.54.136.0/22^22-29, 210.55.24.0/22^22-29, 202.6.116.0/23^23-29, 202.21.136.0/23^23-29, 202.36.44.0/23^23-29, 202.36.76.0/23^23-29, 202.36.204.0/23^23-29, 202.37.86.0/23^23-29, 202.37.240.0/23^23-29, 202.37.252.0/23^23-29, 202.49.80.0/23^23-29, 202.50.246.0/23^23-29, 202.174.6.0/23^23-29, 203.84.134.0/23^23-29, 205.233.136.0/23^23-29, 210.55.182.0/23^23-29, 124.248.128.0/24^24-29, 124.248.132.0/24^24-29, 124.248.136.0/24^24-29, 124.248.140.0/24^24-29, 192.88.85.0/24^24-29, 192.100.53.0/24^24-29, 192.107.113.0/24^24-29, 192.122.171.0/24^24-29, 192.133.31.0/24^24-29, 192.173.24.0/24^24-29, 192.195.219.0/24^24-29, 198.32.66.0/24^24-29, 198.32.71.0/24^24-29, 199.212.93.0/24^24-29, 202.6.84.0/24^24-29, 202.8.13.0/24^24-29, 202.12.0.0/24^24-29, 202.12.70.0/24^24-29, 202.12.91.0/24^24-29, 202.14.100.0/24^24-29, 202.20.97.0/24^24-29, 202.21.130.0/24^24-29, 202.27.83.0/24^24-29, 202.27.208.0/24^24-29, 202.36.33.0/24^24-29, 202.36.75.0/24^24-29, 202.36.119.0/24^24-29, 202.36.154.0/24^24-29, 202.36.162.0/24^24-29, 202.36.183.0/24^24-29, 202.36.218.0/24^24-29, 202.36.226.0/24^24-29, 202.37.57.0/24^24-29, 202.37.76.0/24^24-29, 202.37.85.0/24^24-29, 202.37.93.0/24^24-29, 202.37.136.0/24^24-29, 202.37.163.0/24^24-29, 202.37.168.0/24^24-29, 202.37.197.0/24^24-29, 202.37.205.0/24^24-29, 202.37.232.0/24^24-29, 202.41.140.0/24^24-29, 202.46.118.0/24^24-29, 202.46.188.0/24^24-29, 202.46.190.0/24^24-29, 202.49.62.0/24^24-29, 202.49.89.0/24^24-29, 202.49.106.0/24^24-29, 202.49.144.0/24^24-29, 202.49.249.0/24^24-29, 202.50.87.0/24^24-29, 202.134.48.0/24^24-29, 203.97.5.0/24^24-29, 203.119.56.0/24^24-29, 203.171.223.0/24^24-29, 205.233.243.0/24^24-29, 210.54.140.0/24^24-29, 210.54.211.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: mark.foster(a)iconz.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110426 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS4770 descr: advertised to AS9439 by ICONZ Ltd - AS4770 members: 131.203.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 210.48.0.0/17^17-29, 210.185.0.0/18^18-29, 119.15.0.0/19^19-29, 180.189.192.0/19^19-29, 202.14.32.0/19^19-29, 202.50.192.0/19^19-29, 202.154.128.0/19^19-29, 210.54.160.0/19^19-29, 114.134.160.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.55.96.0/20^20-29, 202.86.96.0/20^20-29, 202.160.48.0/20^20-29, 202.174.160.0/20^20-29, 202.191.32.0/20^20-29, 203.96.16.0/20^20-29, 203.96.48.0/20^20-29, 203.96.128.0/20^20-29, 210.48.160.0/20^20-29, 210.56.32.0/20^20-29, 114.134.176.0/21^21-29, 116.90.128.0/21^21-29, 117.18.80.0/21^21-29, 120.89.80.0/21^21-29, 120.138.16.0/21^21-29, 123.108.144.0/21^21-29, 192.173.16.0/21^21-29, 202.12.248.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.176.0/21^21-29, 202.49.0.0/21^21-29, 202.49.152.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 203.190.208.0/21^21-29, 205.233.128.0/21^21-29, 210.4.208.0/21^21-29, 113.197.64.0/22^22-29, 114.31.212.0/22^22-29, 202.36.36.0/22^22-29, 202.37.48.0/22^22-29, 202.37.140.0/22^22-29, 202.37.200.0/22^22-29, 202.41.136.0/22^22-29, 202.50.52.0/22^22-29, 202.59.4.0/22^22-29, 202.89.4.0/22^22-29, 203.80.60.0/22^22-29, 210.54.136.0/22^22-29, 210.55.24.0/22^22-29, 202.6.116.0/23^23-29, 202.21.136.0/23^23-29, 202.36.44.0/23^23-29, 202.36.76.0/23^23-29, 202.36.204.0/23^23-29, 202.37.86.0/23^23-29, 202.37.240.0/23^23-29, 202.37.252.0/23^23-29, 202.49.80.0/23^23-29, 202.50.246.0/23^23-29, 202.174.6.0/23^23-29, 203.84.134.0/23^23-29, 205.233.136.0/23^23-29, 210.55.182.0/23^23-29, 124.248.128.0/24^24-29, 124.248.132.0/24^24-29, 124.248.136.0/24^24-29, 124.248.140.0/24^24-29, 182.236.127.0/24^24-29, 192.88.85.0/24^24-29, 192.100.53.0/24^24-29, 192.107.113.0/24^24-29, 192.122.171.0/24^24-29, 192.133.31.0/24^24-29, 192.173.24.0/24^24-29, 192.195.219.0/24^24-29, 198.32.66.0/24^24-29, 198.32.71.0/24^24-29, 199.212.93.0/24^24-29, 202.6.84.0/24^24-29, 202.8.13.0/24^24-29, 202.12.0.0/24^24-29, 202.12.70.0/24^24-29, 202.12.91.0/24^24-29, 202.14.100.0/24^24-29, 202.20.97.0/24^24-29, 202.21.130.0/24^24-29, 202.27.83.0/24^24-29, 202.27.208.0/24^24-29, 202.36.33.0/24^24-29, 202.36.75.0/24^24-29, 202.36.119.0/24^24-29, 202.36.154.0/24^24-29, 202.36.162.0/24^24-29, 202.36.183.0/24^24-29, 202.36.218.0/24^24-29, 202.36.226.0/24^24-29, 202.37.57.0/24^24-29, 202.37.76.0/24^24-29, 202.37.85.0/24^24-29, 202.37.93.0/24^24-29, 202.37.136.0/24^24-29, 202.37.163.0/24^24-29, 202.37.168.0/24^24-29, 202.37.197.0/24^24-29, 202.37.205.0/24^24-29, 202.37.232.0/24^24-29, 202.41.140.0/24^24-29, 202.46.118.0/24^24-29, 202.46.188.0/24^24-29, 202.46.190.0/24^24-29, 202.49.62.0/24^24-29, 202.49.89.0/24^24-29, 202.49.106.0/24^24-29, 202.49.144.0/24^24-29, 202.49.249.0/24^24-29, 202.50.87.0/24^24-29, 202.134.48.0/24^24-29, 203.97.5.0/24^24-29, 203.119.56.0/24^24-29, 203.171.223.0/24^24-29, 205.233.243.0/24^24-29, 210.54.140.0/24^24-29, 210.54.211.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: mark.foster(a)iconz.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110617 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 16 Jun '11

16 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS4770 descr: advertised to AS9560 by ICONZ - AS4770 members: 131.203.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 210.48.0.0/17^17-29, 210.185.0.0/18^18-29, 119.15.0.0/19^19-29, 180.189.192.0/19^19-29, 202.14.32.0/19^19-29, 202.50.192.0/19^19-29, 202.154.128.0/19^19-29, 210.54.160.0/19^19-29, 114.134.160.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.55.96.0/20^20-29, 202.86.96.0/20^20-29, 202.160.48.0/20^20-29, 202.174.160.0/20^20-29, 202.191.32.0/20^20-29, 203.96.16.0/20^20-29, 203.96.48.0/20^20-29, 203.96.128.0/20^20-29, 210.48.160.0/20^20-29, 210.56.32.0/20^20-29, 114.134.176.0/21^21-29, 116.90.128.0/21^21-29, 117.18.80.0/21^21-29, 120.89.80.0/21^21-29, 120.138.16.0/21^21-29, 123.108.144.0/21^21-29, 192.173.16.0/21^21-29, 202.12.248.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.176.0/21^21-29, 202.49.0.0/21^21-29, 202.49.152.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 203.190.208.0/21^21-29, 205.233.128.0/21^21-29, 210.4.208.0/21^21-29, 113.197.64.0/22^22-29, 114.31.212.0/22^22-29, 202.36.36.0/22^22-29, 202.37.48.0/22^22-29, 202.37.140.0/22^22-29, 202.37.200.0/22^22-29, 202.41.136.0/22^22-29, 202.50.52.0/22^22-29, 202.59.4.0/22^22-29, 202.89.4.0/22^22-29, 203.80.60.0/22^22-29, 210.54.136.0/22^22-29, 210.55.24.0/22^22-29, 202.6.116.0/23^23-29, 202.21.136.0/23^23-29, 202.36.44.0/23^23-29, 202.36.76.0/23^23-29, 202.36.204.0/23^23-29, 202.37.86.0/23^23-29, 202.37.240.0/23^23-29, 202.37.252.0/23^23-29, 202.49.80.0/23^23-29, 202.50.246.0/23^23-29, 202.174.6.0/23^23-29, 203.84.134.0/23^23-29, 205.233.136.0/23^23-29, 210.55.182.0/23^23-29, 124.248.128.0/24^24-29, 124.248.132.0/24^24-29, 124.248.136.0/24^24-29, 124.248.140.0/24^24-29, 192.88.85.0/24^24-29, 192.100.53.0/24^24-29, 192.107.113.0/24^24-29, 192.122.171.0/24^24-29, 192.133.31.0/24^24-29, 192.173.24.0/24^24-29, 192.195.219.0/24^24-29, 198.32.66.0/24^24-29, 198.32.71.0/24^24-29, 199.212.93.0/24^24-29, 202.6.84.0/24^24-29, 202.8.13.0/24^24-29, 202.12.0.0/24^24-29, 202.12.70.0/24^24-29, 202.12.91.0/24^24-29, 202.14.100.0/24^24-29, 202.20.97.0/24^24-29, 202.21.130.0/24^24-29, 202.27.83.0/24^24-29, 202.27.208.0/24^24-29, 202.36.33.0/24^24-29, 202.36.75.0/24^24-29, 202.36.119.0/24^24-29, 202.36.154.0/24^24-29, 202.36.162.0/24^24-29, 202.36.183.0/24^24-29, 202.36.218.0/24^24-29, 202.36.226.0/24^24-29, 202.37.57.0/24^24-29, 202.37.76.0/24^24-29, 202.37.85.0/24^24-29, 202.37.93.0/24^24-29, 202.37.136.0/24^24-29, 202.37.163.0/24^24-29, 202.37.168.0/24^24-29, 202.37.197.0/24^24-29, 202.37.205.0/24^24-29, 202.37.232.0/24^24-29, 202.41.140.0/24^24-29, 202.46.118.0/24^24-29, 202.46.188.0/24^24-29, 202.46.190.0/24^24-29, 202.49.62.0/24^24-29, 202.49.89.0/24^24-29, 202.49.106.0/24^24-29, 202.49.144.0/24^24-29, 202.49.249.0/24^24-29, 202.50.87.0/24^24-29, 202.134.48.0/24^24-29, 203.97.5.0/24^24-29, 203.119.56.0/24^24-29, 203.171.223.0/24^24-29, 205.233.243.0/24^24-29, 210.54.140.0/24^24-29, 210.54.211.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: mark.foster(a)iconz.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110426 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS4770 descr: advertised to AS9560 by ICONZ Ltd - AS4770 members: 131.203.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 210.48.0.0/17^17-29, 210.185.0.0/18^18-29, 119.15.0.0/19^19-29, 180.189.192.0/19^19-29, 202.14.32.0/19^19-29, 202.50.192.0/19^19-29, 202.154.128.0/19^19-29, 210.54.160.0/19^19-29, 114.134.160.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.55.96.0/20^20-29, 202.86.96.0/20^20-29, 202.160.48.0/20^20-29, 202.174.160.0/20^20-29, 202.191.32.0/20^20-29, 203.96.16.0/20^20-29, 203.96.48.0/20^20-29, 203.96.128.0/20^20-29, 210.48.160.0/20^20-29, 210.56.32.0/20^20-29, 114.134.176.0/21^21-29, 116.90.128.0/21^21-29, 117.18.80.0/21^21-29, 120.89.80.0/21^21-29, 120.138.16.0/21^21-29, 123.108.144.0/21^21-29, 192.173.16.0/21^21-29, 202.12.248.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.176.0/21^21-29, 202.49.0.0/21^21-29, 202.49.152.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 203.190.208.0/21^21-29, 205.233.128.0/21^21-29, 210.4.208.0/21^21-29, 113.197.64.0/22^22-29, 114.31.212.0/22^22-29, 202.36.36.0/22^22-29, 202.37.48.0/22^22-29, 202.37.140.0/22^22-29, 202.37.200.0/22^22-29, 202.41.136.0/22^22-29, 202.50.52.0/22^22-29, 202.59.4.0/22^22-29, 202.89.4.0/22^22-29, 203.80.60.0/22^22-29, 210.54.136.0/22^22-29, 210.55.24.0/22^22-29, 202.6.116.0/23^23-29, 202.21.136.0/23^23-29, 202.36.44.0/23^23-29, 202.36.76.0/23^23-29, 202.36.204.0/23^23-29, 202.37.86.0/23^23-29, 202.37.240.0/23^23-29, 202.37.252.0/23^23-29, 202.49.80.0/23^23-29, 202.50.246.0/23^23-29, 202.174.6.0/23^23-29, 203.84.134.0/23^23-29, 205.233.136.0/23^23-29, 210.55.182.0/23^23-29, 124.248.128.0/24^24-29, 124.248.132.0/24^24-29, 124.248.136.0/24^24-29, 124.248.140.0/24^24-29, 182.236.127.0/24^24-29, 192.88.85.0/24^24-29, 192.100.53.0/24^24-29, 192.107.113.0/24^24-29, 192.122.171.0/24^24-29, 192.133.31.0/24^24-29, 192.173.24.0/24^24-29, 192.195.219.0/24^24-29, 198.32.66.0/24^24-29, 198.32.71.0/24^24-29, 199.212.93.0/24^24-29, 202.6.84.0/24^24-29, 202.8.13.0/24^24-29, 202.12.0.0/24^24-29, 202.12.70.0/24^24-29, 202.12.91.0/24^24-29, 202.14.100.0/24^24-29, 202.20.97.0/24^24-29, 202.21.130.0/24^24-29, 202.27.83.0/24^24-29, 202.27.208.0/24^24-29, 202.36.33.0/24^24-29, 202.36.75.0/24^24-29, 202.36.119.0/24^24-29, 202.36.154.0/24^24-29, 202.36.162.0/24^24-29, 202.36.183.0/24^24-29, 202.36.218.0/24^24-29, 202.36.226.0/24^24-29, 202.37.57.0/24^24-29, 202.37.76.0/24^24-29, 202.37.85.0/24^24-29, 202.37.93.0/24^24-29, 202.37.136.0/24^24-29, 202.37.163.0/24^24-29, 202.37.168.0/24^24-29, 202.37.197.0/24^24-29, 202.37.205.0/24^24-29, 202.37.232.0/24^24-29, 202.41.140.0/24^24-29, 202.46.118.0/24^24-29, 202.46.188.0/24^24-29, 202.46.190.0/24^24-29, 202.49.62.0/24^24-29, 202.49.89.0/24^24-29, 202.49.106.0/24^24-29, 202.49.144.0/24^24-29, 202.49.249.0/24^24-29, 202.50.87.0/24^24-29, 202.134.48.0/24^24-29, 203.97.5.0/24^24-29, 203.119.56.0/24^24-29, 203.171.223.0/24^24-29, 205.233.243.0/24^24-29, 210.54.140.0/24^24-29, 210.54.211.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: mark.foster(a)iconz.net mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110617 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 16 Jun '11

16 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus Communications - NO VERIFICATION NEEDED - AS4826 members: 49.224.0.0/14^14-29, 118.92.0.0/15^15-29, 27.252.0.0/16^16-29, 58.7.0.0/16^16-29, 58.28.0.0/16^16-29, 101.100.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 124.148.0.0/16^16-29, 124.169.0.0/16^16-29, 124.170.0.0/16^16-29, 130.217.0.0/16^16-29, 131.203.0.0/16^16-29, 139.80.0.0/16^16-29, 157.128.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 182.154.0.0/16^16-29, 203.59.0.0/16^16-29, 220.235.0.0/16^16-29, 220.253.0.0/16^16-29, 113.203.0.0/17^17-29, 124.149.0.0/17^17-29, 124.150.0.0/17^17-29, 124.168.0.0/17^17-29, 180.181.0.0/17^17-29, 203.109.128.0/17^17-29, 203.173.128.0/17^17-29, 210.48.0.0/17^17-29, 58.6.192.0/18^18-29, 101.0.64.0/18^18-29, 114.129.128.0/18^18-29, 114.198.0.0/18^18-29, 116.90.0.0/18^18-29, 116.251.128.0/18^18-29, 118.67.0.0/18^18-29, 120.88.64.0/18^18-29, 123.100.64.0/18^18-29, 124.149.192.0/18^18-29, 124.157.64.0/18^18-29, 124.168.128.0/18^18-29, 124.171.0.0/18^18-29, 124.198.128.0/18^18-29, 125.209.128.0/18^18-29, 125.253.0.0/18^18-29, 180.181.128.0/18^18-29, 180.200.128.0/18^18-29, 182.160.128.0/18^18-29, 202.72.128.0/18^18-29, 202.173.128.0/18^18-29, 203.89.64.0/18^18-29, 203.113.192.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.206.0.0/18^18-29, 203.208.64.0/18^18-29, 203.211.64.0/18^18-29, 210.15.192.0/18^18-29, 210.84.0.0/18^18-29, 210.185.0.0/18^18-29, 14.1.32.0/19^19-29, 58.6.64.0/19^19-29, 58.6.160.0/19^19-29, 111.67.0.0/19^19-29, 111.125.160.0/19^19-29, 112.141.0.0/19^19-29, 112.141.128.0/19^19-29, 113.192.0.0/19^19-29, 118.127.64.0/19^19-29, 119.15.0.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 124.149.160.0/19^19-29, 124.171.192.0/19^19-29, 180.148.96.0/19^19-29, 180.189.192.0/19^19-29, 180.200.192.0/19^19-29, 180.214.64.0/19^19-29, 180.222.0.0/19^19-29, 182.48.128.0/19^19-29, 202.45.96.0/19^19-29, 202.59.32.0/19^19-29, 202.74.192.0/19^19-29, 202.89.32.0/19^19-29, 202.89.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.96.192.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.158.32.0/19^19-29, 203.206.128.0/19^19-29, 203.206.224.0/19^19-29, 203.214.96.0/19^19-29, 203.217.64.0/19^19-29, 210.54.160.0/19^19-29, 223.27.0.0/19^19-29, 223.165.96.0/19^19-29, 23.2.112.0/20^20-29, 49.213.16.0/20^20-29, 49.236.240.0/20^20-29, 58.6.0.0/20^20-29, 58.6.32.0/20^20-29, 58.6.112.0/20^20-29, 58.6.144.0/20^20-29, 58.84.224.0/20^20-29, 110.173.144.0/20^20-29, 111.118.160.0/20^20-29, 112.109.64.0/20^20-29, 113.20.0.0/20^20-29, 113.192.32.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.134.0.0/20^20-29, 114.142.160.0/20^20-29, 114.198.64.0/20^20-29, 114.198.112.0/20^20-29, 116.66.160.0/20^20-29, 116.90.128.0/20^20-29, 116.93.128.0/20^20-29, 116.199.224.0/20^20-29, 117.55.224.0/20^20-29, 118.127.16.0/20^20-29, 119.10.128.0/20^20-29, 119.15.96.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.48.0/20^20-29, 119.161.64.0/20^20-29, 120.138.16.0/20^20-29, 121.54.128.0/20^20-29, 121.79.224.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.252.0.0/20^20-29, 124.149.144.0/20^20-29, 124.155.224.0/20^20-29, 124.168.208.0/20^20-29, 124.168.240.0/20^20-29, 124.171.176.0/20^20-29, 124.171.240.0/20^20-29, 124.248.128.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 175.107.144.0/20^20-29, 175.107.160.0/20^20-29, 180.235.192.0/20^20-29, 202.3.192.0/20^20-29, 202.4.224.0/20^20-29, 202.21.16.0/20^20-29, 202.37.0.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.60.64.0/20^20-29, 202.63.64.0/20^20-29, 202.68.80.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.80.176.0/20^20-29, 202.86.96.0/20^20-29, 202.87.16.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.174.160.0/20^20-29, 203.2.80.0/20^20-29, 203.17.96.0/20^20-29, 203.82.96.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.173.0.0/20^20-29, 203.206.160.0/20^20-29, 203.206.192.0/20^20-29, 203.214.32.0/20^20-29, 203.214.80.0/20^20-29, 203.217.16.0/20^20-29, 203.217.32.0/20^20-29, 210.56.32.0/20^20-29, 223.165.64.0/20^20-29, 27.121.64.0/21^21-29, 27.121.112.0/21^21-29, 49.156.24.0/21^21-29, 58.6.16.0/21^21-29, 58.6.56.0/21^21-29, 110.44.24.0/21^21-29, 110.76.128.0/21^21-29, 112.109.80.0/21^21-29, 113.192.56.0/21^21-29, 113.212.168.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.111.144.0/21^21-29, 114.198.80.0/21^21-29, 114.198.96.0/21^21-29, 115.124.32.0/21^21-29, 115.126.128.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.90.72.0/21^21-29, 116.212.64.0/21^21-29, 116.251.192.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 118.67.192.0/21^21-29, 118.88.24.0/21^21-29, 118.127.8.0/21^21-29, 119.15.72.0/21^21-29, 119.63.200.0/21^21-29, 119.63.208.0/21^21-29, 119.82.144.0/21^21-29, 119.252.184.0/21^21-29, 120.29.248.0/21^21-29, 120.89.80.0/21^21-29, 120.136.0.0/21^21-29, 121.0.0.0/21^21-29, 121.54.144.0/21^21-29, 121.79.240.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.102.96.0/21^21-29, 123.176.112.0/21^21-29, 124.150.160.0/21^21-29, 124.168.200.0/21^21-29, 124.168.232.0/21^21-29, 124.171.232.0/21^21-29, 125.214.88.0/21^21-29, 175.45.128.0/21^21-29, 175.107.176.0/21^21-29, 175.176.200.0/21^21-29, 175.176.208.0/21^21-29, 180.94.232.0/21^21-29, 180.189.152.0/21^21-29, 180.214.168.0/21^21-29, 180.235.208.0/21^21-29, 182.23.192.0/21^21-29, 202.3.80.0/21^21-29, 202.7.144.0/21^21-29, 202.12.248.0/21^21-29, 202.20.0.0/21^21-29, 202.36.16.0/21^21-29, 202.36.96.0/21^21-29, 202.37.32.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.136.0/21^21-29, 202.49.0.0/21^21-29, 202.49.128.0/21^21-29, 202.50.208.0/21^21-29, 202.55.144.0/21^21-29, 202.60.80.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.83.112.0/21^21-29, 202.86.48.0/21^21-29, 202.86.208.0/21^21-29, 202.92.240.0/21^21-29, 202.126.80.0/21^21-29, 202.129.80.0/21^21-29, 202.129.96.0/21^21-29, 202.160.112.0/21^21-29, 202.162.176.0/21^21-29, 202.168.16.0/21^21-29, 203.14.40.0/21^21-29, 203.14.168.0/21^21-29, 203.33.160.0/21^21-29, 203.98.88.0/21^21-29, 203.149.80.0/21^21-29, 203.168.32.0/21^21-29, 203.173.40.0/21^21-29, 203.174.16.0/21^21-29, 203.188.216.0/21^21-29, 203.206.64.0/21^21-29, 203.206.176.0/21^21-29, 203.212.16.0/21^21-29, 203.214.64.0/21^21-29, 203.214.152.0/21^21-29, 203.215.0.0/21^21-29, 203.217.0.0/21^21-29, 203.217.48.0/21^21-29, 210.4.208.0/21^21-29, 210.9.136.0/21^21-29, 210.48.208.0/21^21-29, 210.79.56.0/21^21-29, 14.128.4.0/22^22-29, 23.2.32.0/22^22-29, 27.34.224.0/22^22-29, 27.96.64.0/22^22-29, 27.100.24.0/22^22-29, 27.106.200.0/22^22-29, 49.128.12.0/22^22-29, 49.143.228.0/22^22-29, 58.6.28.0/22^22-29, 58.6.108.0/22^22-29, 59.86.160.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 101.234.72.0/22^22-29, 103.1.188.0/22^22-29, 103.2.168.0/22^22-29, 103.3.144.0/22^22-29, 109.200.212.0/22^22-29, 110.44.16.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.173.236.0/22^22-29, 110.232.144.0/22^22-29, 111.235.128.0/22^22-29, 111.235.140.0/22^22-29, 112.140.176.0/22^22-29, 112.141.112.0/22^22-29, 112.141.240.0/22^22-29, 113.29.240.0/22^22-29, 113.130.120.0/22^22-29, 113.197.64.0/22^22-29, 113.197.96.0/22^22-29, 114.23.96.0/22^22-29, 114.31.212.0/22^22-29, 114.198.104.0/22^22-29, 115.31.92.0/22^22-29, 115.69.28.0/22^22-29, 115.69.60.0/22^22-29, 115.178.28.0/22^22-29, 116.251.200.0/22^22-29, 118.127.32.0/22^22-29, 118.127.52.0/22^22-29, 118.127.56.0/22^22-29, 119.17.160.0/22^22-29, 119.17.168.0/22^22-29, 119.63.216.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 120.29.240.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.102.104.0/22^22-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20110610 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus Communications - NO VERIFICATION NEEDED - AS4826 members: 49.224.0.0/14^14-29, 118.92.0.0/15^15-29, 27.252.0.0/16^16-29, 58.7.0.0/16^16-29, 58.28.0.0/16^16-29, 101.100.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 124.148.0.0/16^16-29, 124.169.0.0/16^16-29, 124.170.0.0/16^16-29, 130.217.0.0/16^16-29, 131.203.0.0/16^16-29, 139.80.0.0/16^16-29, 157.128.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 182.154.0.0/16^16-29, 203.59.0.0/16^16-29, 220.235.0.0/16^16-29, 220.253.0.0/16^16-29, 113.203.0.0/17^17-29, 124.149.0.0/17^17-29, 124.150.0.0/17^17-29, 124.168.0.0/17^17-29, 180.181.0.0/17^17-29, 203.109.128.0/17^17-29, 203.173.128.0/17^17-29, 210.48.0.0/17^17-29, 58.6.192.0/18^18-29, 101.0.64.0/18^18-29, 114.129.128.0/18^18-29, 114.198.0.0/18^18-29, 116.90.0.0/18^18-29, 116.251.128.0/18^18-29, 118.67.0.0/18^18-29, 120.88.64.0/18^18-29, 123.100.64.0/18^18-29, 124.149.192.0/18^18-29, 124.157.64.0/18^18-29, 124.168.128.0/18^18-29, 124.171.0.0/18^18-29, 124.198.128.0/18^18-29, 125.209.128.0/18^18-29, 125.253.0.0/18^18-29, 180.181.128.0/18^18-29, 180.200.128.0/18^18-29, 182.160.128.0/18^18-29, 202.72.128.0/18^18-29, 202.173.128.0/18^18-29, 203.89.64.0/18^18-29, 203.113.192.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.206.0.0/18^18-29, 203.208.64.0/18^18-29, 203.211.64.0/18^18-29, 210.15.192.0/18^18-29, 210.84.0.0/18^18-29, 210.185.0.0/18^18-29, 14.1.32.0/19^19-29, 58.6.64.0/19^19-29, 58.6.160.0/19^19-29, 111.67.0.0/19^19-29, 111.125.160.0/19^19-29, 112.141.0.0/19^19-29, 112.141.128.0/19^19-29, 113.192.0.0/19^19-29, 118.127.64.0/19^19-29, 119.15.0.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 124.149.160.0/19^19-29, 124.171.192.0/19^19-29, 180.148.96.0/19^19-29, 180.189.192.0/19^19-29, 180.200.192.0/19^19-29, 180.214.64.0/19^19-29, 180.222.0.0/19^19-29, 182.48.128.0/19^19-29, 202.45.96.0/19^19-29, 202.59.32.0/19^19-29, 202.74.192.0/19^19-29, 202.89.32.0/19^19-29, 202.89.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.96.192.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.158.32.0/19^19-29, 203.206.128.0/19^19-29, 203.206.224.0/19^19-29, 203.214.96.0/19^19-29, 203.217.64.0/19^19-29, 210.54.160.0/19^19-29, 223.27.0.0/19^19-29, 223.165.96.0/19^19-29, 23.2.112.0/20^20-29, 49.213.16.0/20^20-29, 49.236.240.0/20^20-29, 58.6.0.0/20^20-29, 58.6.32.0/20^20-29, 58.6.112.0/20^20-29, 58.6.144.0/20^20-29, 58.84.224.0/20^20-29, 110.173.144.0/20^20-29, 111.118.160.0/20^20-29, 112.109.64.0/20^20-29, 113.20.0.0/20^20-29, 113.192.32.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.134.0.0/20^20-29, 114.142.160.0/20^20-29, 114.198.64.0/20^20-29, 114.198.112.0/20^20-29, 116.66.160.0/20^20-29, 116.90.128.0/20^20-29, 116.93.128.0/20^20-29, 116.199.224.0/20^20-29, 117.55.224.0/20^20-29, 118.127.16.0/20^20-29, 119.10.128.0/20^20-29, 119.15.96.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.48.0/20^20-29, 119.161.64.0/20^20-29, 120.138.16.0/20^20-29, 121.54.128.0/20^20-29, 121.79.224.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.252.0.0/20^20-29, 124.149.144.0/20^20-29, 124.155.224.0/20^20-29, 124.168.208.0/20^20-29, 124.168.240.0/20^20-29, 124.171.176.0/20^20-29, 124.171.240.0/20^20-29, 124.248.128.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 175.107.144.0/20^20-29, 175.107.160.0/20^20-29, 180.235.192.0/20^20-29, 202.3.192.0/20^20-29, 202.4.224.0/20^20-29, 202.21.16.0/20^20-29, 202.37.0.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.60.64.0/20^20-29, 202.63.64.0/20^20-29, 202.68.80.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.80.176.0/20^20-29, 202.86.96.0/20^20-29, 202.87.16.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.170.192.0/20^20-29, 202.174.160.0/20^20-29, 203.2.80.0/20^20-29, 203.17.96.0/20^20-29, 203.82.96.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.173.0.0/20^20-29, 203.206.160.0/20^20-29, 203.206.192.0/20^20-29, 203.214.32.0/20^20-29, 203.214.80.0/20^20-29, 203.217.16.0/20^20-29, 203.217.32.0/20^20-29, 210.56.32.0/20^20-29, 223.165.64.0/20^20-29, 27.121.64.0/21^21-29, 27.121.112.0/21^21-29, 49.156.24.0/21^21-29, 58.6.16.0/21^21-29, 58.6.56.0/21^21-29, 110.44.24.0/21^21-29, 110.76.128.0/21^21-29, 112.109.80.0/21^21-29, 113.192.56.0/21^21-29, 113.212.168.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.111.144.0/21^21-29, 114.198.80.0/21^21-29, 114.198.96.0/21^21-29, 115.124.32.0/21^21-29, 115.126.128.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.90.72.0/21^21-29, 116.212.64.0/21^21-29, 116.251.192.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 118.67.192.0/21^21-29, 118.88.24.0/21^21-29, 118.127.8.0/21^21-29, 119.15.72.0/21^21-29, 119.63.200.0/21^21-29, 119.63.208.0/21^21-29, 119.82.144.0/21^21-29, 119.252.184.0/21^21-29, 120.29.248.0/21^21-29, 120.89.80.0/21^21-29, 120.136.0.0/21^21-29, 121.0.0.0/21^21-29, 121.54.144.0/21^21-29, 121.79.240.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.102.96.0/21^21-29, 123.176.112.0/21^21-29, 124.150.160.0/21^21-29, 124.168.200.0/21^21-29, 124.168.232.0/21^21-29, 124.171.232.0/21^21-29, 125.214.88.0/21^21-29, 175.45.128.0/21^21-29, 175.107.176.0/21^21-29, 175.176.200.0/21^21-29, 175.176.208.0/21^21-29, 180.94.232.0/21^21-29, 180.189.152.0/21^21-29, 180.214.168.0/21^21-29, 180.235.208.0/21^21-29, 182.23.192.0/21^21-29, 202.3.80.0/21^21-29, 202.7.144.0/21^21-29, 202.12.248.0/21^21-29, 202.20.0.0/21^21-29, 202.36.16.0/21^21-29, 202.36.96.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.136.0/21^21-29, 202.49.0.0/21^21-29, 202.49.128.0/21^21-29, 202.50.208.0/21^21-29, 202.55.144.0/21^21-29, 202.60.80.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.80.144.0/21^21-29, 202.83.112.0/21^21-29, 202.86.48.0/21^21-29, 202.86.208.0/21^21-29, 202.92.240.0/21^21-29, 202.126.80.0/21^21-29, 202.129.80.0/21^21-29, 202.129.96.0/21^21-29, 202.160.112.0/21^21-29, 202.162.176.0/21^21-29, 202.168.16.0/21^21-29, 203.14.40.0/21^21-29, 203.14.168.0/21^21-29, 203.33.160.0/21^21-29, 203.63.240.0/21^21-29, 203.98.88.0/21^21-29, 203.149.80.0/21^21-29, 203.168.32.0/21^21-29, 203.173.40.0/21^21-29, 203.174.16.0/21^21-29, 203.188.216.0/21^21-29, 203.206.64.0/21^21-29, 203.206.176.0/21^21-29, 203.212.16.0/21^21-29, 203.214.64.0/21^21-29, 203.214.152.0/21^21-29, 203.215.0.0/21^21-29, 203.217.0.0/21^21-29, 203.217.48.0/21^21-29, 210.4.208.0/21^21-29, 210.9.136.0/21^21-29, 210.48.208.0/21^21-29, 210.79.56.0/21^21-29, 14.128.4.0/22^22-29, 23.2.32.0/22^22-29, 27.34.224.0/22^22-29, 27.96.64.0/22^22-29, 27.100.24.0/22^22-29, 27.106.200.0/22^22-29, 49.128.12.0/22^22-29, 49.143.228.0/22^22-29, 58.6.28.0/22^22-29, 58.6.108.0/22^22-29, 59.86.160.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 101.234.72.0/22^22-29, 103.1.188.0/22^22-29, 103.2.168.0/22^22-29, 103.3.144.0/22^22-29, 109.200.212.0/22^22-29, 110.44.16.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.173.236.0/22^22-29, 110.232.144.0/22^22-29, 111.235.128.0/22^22-29, 111.235.140.0/22^22-29, 112.140.176.0/22^22-29, 112.141.112.0/22^22-29, 112.141.240.0/22^22-29, 113.29.240.0/22^22-29, 113.130.120.0/22^22-29, 113.197.64.0/22^22-29, 113.197.96.0/22^22-29, 114.23.96.0/22^22-29, 114.31.212.0/22^22-29, 114.198.104.0/22^22-29, 115.31.92.0/22^22-29, 115.69.28.0/22^22-29, 115.69.60.0/22^22-29, 115.178.28.0/22^22-29, 116.251.200.0/22^22-29, 118.127.32.0/22^22-29, 118.127.52.0/22^22-29, 118.127.56.0/22^22-29, 119.17.160.0/22^22-29, 119.17.168.0/22^22-29, 119.63.216.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 120.29.240.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20110617 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 16 Jun '11

16 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES6:AS9503 descr: Route set advertised to AS9560 by FX Networks - AS9503 mp-members: 2402:6000:0:0:0:0:0:0/32^32-64, 2404:3800:0:0:0:0:0:0/32^32-64, 2001:DCE:0:0:0:0:0:0/32^32-64, 2001:DCE:E000:0:0:0:0:0/48^48-64, 2001:DF0:4A:0:0:0:0:0/48^48-64, 2404:1800:0:0:0:0:0:0/32^32-64, 2001:4530:0:0:0:0:0:0/32^32-64, 2400:B400:0:0:0:0:0:0/32^32-64, 2404:130:0:0:0:0:0:0/32^32-64, 2403:E00:0:0:0:0:0:0/32^32-64, 2400:1200:0:0:0:0:0:0/32^32-64, 2403:C200:0:0:0:0:0:0/32^32-64, 2404:1E00:0:0:0:0:0:0/32^32-64, 2401:F000:0:0:0:0:0:0/32^32-64, 2407:2400:0:0:0:0:0:0/32^32-64, 2403:7000:0:0:0:0:0:0/32^32-64, 2404:138:103:0:0:0:0:0/48^48-64, 2404:138:104:0:0:0:0:0/48^48-64, 2404:138:4000:0:0:0:0:0/48^48-64, 2404:D000:0:0:0:0:0:0/32^32-64, 2405:3A00:0:0:0:0:0:0/32^32-64, 2400:C000:0:0:0:0:0:0/32^32-64, 2001:DF0:D1:0:0:0:0:0/48^48-64, 2405:2600:0:0:0:0:0:0/32^32-64, 2001:DF0:DC:0:0:0:0:0/48^48-64, 2001:DD8:13:0:0:0:0:0/48^48-64, 2406:1E00:6000:0:0:0:0:0/35^35-64, 2404:6600:0:0:0:0:0:0/32^32-64, 2406:5A00:0:0:0:0:0:0/32^32-64, 2406:1E00:6000:0:0:0:0:0/35^35-64, 2400:6900:0:0:0:0:0:0/32^32-64, 2400:BD00:0:0:0:0:0:0/32^32-64, 2001:DF0:4:0:0:0:0:0/48^48-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc-minor(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110526 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES6:AS9503 descr: Route set advertised to AS9560 by FX Networks - AS9503 mp-members: 2402:6000:0:0:0:0:0:0/32^32-64, 2404:3800:0:0:0:0:0:0/32^32-64, 2001:DCE:0:0:0:0:0:0/32^32-64, 2001:DCE:E000:0:0:0:0:0/48^48-64, 2001:DF0:4A:0:0:0:0:0/48^48-64, 2404:1800:0:0:0:0:0:0/32^32-64, 2001:4530:0:0:0:0:0:0/32^32-64, 2400:B400:0:0:0:0:0:0/32^32-64, 2404:130:0:0:0:0:0:0/32^32-64, 2403:E00:0:0:0:0:0:0/32^32-64, 2400:1200:0:0:0:0:0:0/32^32-64, 2403:C200:0:0:0:0:0:0/32^32-64, 2404:1E00:0:0:0:0:0:0/32^32-64, 2401:F000:0:0:0:0:0:0/32^32-64, 2407:2400:0:0:0:0:0:0/32^32-64, 2403:7000:0:0:0:0:0:0/32^32-64, 2404:138:103:0:0:0:0:0/48^48-64, 2404:138:104:0:0:0:0:0/48^48-64, 2404:138:4000:0:0:0:0:0/48^48-64, 2404:D000:0:0:0:0:0:0/32^32-64, 2405:3A00:0:0:0:0:0:0/32^32-64, 2400:C000:0:0:0:0:0:0/32^32-64, 2001:DF0:D1:0:0:0:0:0/48^48-64, 2405:2600:0:0:0:0:0:0/32^32-64, 2001:DF0:DC:0:0:0:0:0/48^48-64, 2001:DD8:13:0:0:0:0:0/48^48-64, 2406:1E00:6000:0:0:0:0:0/35^35-64, 2404:6600:0:0:0:0:0:0/32^32-64, 2406:5A00:0:0:0:0:0:0/32^32-64, 2406:1E00:6000:0:0:0:0:0/35^35-64, 2400:6900:0:0:0:0:0:0/32^32-64, 2400:BD00:0:0:0:0:0:0/32^32-64, 2001:DF0:4:0:0:0:0:0/48^48-64, 2404:139:300:0:0:0:0:0/43^43-64, 2404:139:3FF:0:0:0:0:0/56^56-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: craig.wallace(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110617 source: NZRR ------------------------------------------------------------

1 0

World IPv6 Day
by Tristram Cheer 15 Jun '11

15 Jun '11

So since DNSSEC has been the topic of the week and we're past W6D now has anyone got anything to report/post? Cisco is saying they didn't notice any increase in in fault's and Hurricane Electric are saying they have noticed a post W6D rise in traffic levels. More locally we saw a little news in NZ, Telecom/Gen-I saying they have created a IPv6 Lab, Telstra saying they are working on it and expect something around 2012 for client IPv6 access. We launched IPv6 to all of our clients fulltime and had less than 5 calls about it mainly from old OS X users but overall NZ was pretty quiet which surprised me. NZPost went v6 for the day but nobody else really did, I understand this is because a few of the big DC's in NZ aren't offering v6 connectivity yet, I would have hoped that sites like Trademe/Stuff/etc would have joined in -- Tristram Cheer Network Architect - Most problems are the result of previous solutions... Tel. 09 438 5472 Ext 803 | Mobile. 022 412 1985 | 53 Port Road, Whangarei tristram.cheer(a)ubergroup.co.nz <mailto:tristram.cheer(a)ubergroup.co.nz> |www.ubergroup.co.nz <http://www.ubergroup.co.nz> <http://ubergroup.co.nz/fb> <https://twitter.com/#!/ubergroupltd>

7 10

Re: [nznog] .nz IDN names with macrons
by Andy Linton 14 Jun '11

14 Jun '11

On Wed, Jun 15, 2011 at 8:43 PM, Andy Linton <asjl(a)lpnz.org> wrote: > When I registered ānaru.net.nz I used Metaname. They've had IDN > support from day 1. >

1 0

DNSSEC: Key sizes among TLDs, fresh survey
by Sebastian Castro 09 Jun '11

09 Jun '11

Jay asked me to share the following numbers with the community. Currently the root zone has 310 TLDs (according to the list posted at http://data.iana.org/TLD/tlds-alpha-by-domain.txt) 75 TLDs have their zone signed, representing 24.2% of the total. By querying one of the authoritative nameservers for each TLD, asking for the DNSKEY, we identified the key length for the KSK and ZSK. The current state of things are: KSK size Count TLDs 1024 3 CH, KG, LI 1280 2 BR, GR 2048 67 4096 2 BG, NA ---- 74 ZSK size Count TLDs 1024 73 1152 1 BR 2048 1 GOV ----- 75 The difference between KSK and ZSK count is explained by one TLD (NU), who are using what is called a CSK (Common Signing Key). Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

2 1

NZRR Route Registry Update
by NZRR Database Notifications 09 Jun '11

09 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by MAXNET - AS9889 members: 123.100.64.0/18^18-29, 124.198.128.0/18^18-29, 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 112.109.64.0/20^20-29, 119.47.112.0/20^20-29, 124.150.160.0/20^20-29, 112.109.80.0/21^21-29, 114.134.160.0/21^21-29, 182.236.120.0/21^21-29, 202.3.80.0/21^21-29, 202.90.56.0/21^21-29, 202.189.160.0/21^21-29, 113.197.64.0/22^22-29, 114.134.168.0/22^22-29, 202.90.44.0/22^22-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 117.53.150.0/23^23-29, 202.49.88.0/23^23-29, 203.84.134.0/23^23-29, 210.54.142.0/23^23-29, 114.134.172.0/24^24-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.8.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.162.0/24^24-29, 202.37.181.0/24^24-29, 202.37.232.0/24^24-29, 202.46.187.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.12.15.0/24^24-29, 203.97.42.0/24^24-29, 205.233.243.0/24^24-29, 210.54.13.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sultan.sikander(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110518 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by MAXNET - AS9889 members: 123.100.64.0/18^18-29, 124.198.128.0/18^18-29, 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 112.109.64.0/20^20-29, 119.47.112.0/20^20-29, 124.150.160.0/20^20-29, 112.109.80.0/21^21-29, 114.134.160.0/21^21-29, 182.236.120.0/21^21-29, 202.3.80.0/21^21-29, 202.90.56.0/21^21-29, 202.189.160.0/21^21-29, 113.197.64.0/22^22-29, 114.134.168.0/22^22-29, 180.189.196.0/22^22-29, 202.90.44.0/22^22-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 117.53.150.0/23^23-29, 202.49.88.0/23^23-29, 203.84.134.0/23^23-29, 210.54.142.0/23^23-29, 114.134.172.0/24^24-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.8.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.162.0/24^24-29, 202.37.181.0/24^24-29, 202.37.232.0/24^24-29, 202.46.187.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.12.15.0/24^24-29, 203.97.42.0/24^24-29, 205.233.243.0/24^24-29, 210.54.13.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sultan.sikander(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110610 source: NZRR ------------------------------------------------------------

1 0