- NZNOG - lists.nznog.org

World IPv6 Day
by Tristram Cheer 15 Jun '11

15 Jun '11

So since DNSSEC has been the topic of the week and we're past W6D now has anyone got anything to report/post? Cisco is saying they didn't notice any increase in in fault's and Hurricane Electric are saying they have noticed a post W6D rise in traffic levels. More locally we saw a little news in NZ, Telecom/Gen-I saying they have created a IPv6 Lab, Telstra saying they are working on it and expect something around 2012 for client IPv6 access. We launched IPv6 to all of our clients fulltime and had less than 5 calls about it mainly from old OS X users but overall NZ was pretty quiet which surprised me. NZPost went v6 for the day but nobody else really did, I understand this is because a few of the big DC's in NZ aren't offering v6 connectivity yet, I would have hoped that sites like Trademe/Stuff/etc would have joined in -- Tristram Cheer Network Architect - Most problems are the result of previous solutions... Tel. 09 438 5472 Ext 803 | Mobile. 022 412 1985 | 53 Port Road, Whangarei tristram.cheer(a)ubergroup.co.nz <mailto:tristram.cheer(a)ubergroup.co.nz> |www.ubergroup.co.nz <http://www.ubergroup.co.nz> <http://ubergroup.co.nz/fb> <https://twitter.com/#!/ubergroupltd>

7 10

Re: [nznog] .nz IDN names with macrons
by Andy Linton 14 Jun '11

14 Jun '11

On Wed, Jun 15, 2011 at 8:43 PM, Andy Linton <asjl(a)lpnz.org> wrote: > When I registered ānaru.net.nz I used Metaname. They've had IDN > support from day 1. >

1 0

DNSSEC: Key sizes among TLDs, fresh survey
by Sebastian Castro 09 Jun '11

09 Jun '11

Jay asked me to share the following numbers with the community. Currently the root zone has 310 TLDs (according to the list posted at http://data.iana.org/TLD/tlds-alpha-by-domain.txt) 75 TLDs have their zone signed, representing 24.2% of the total. By querying one of the authoritative nameservers for each TLD, asking for the DNSKEY, we identified the key length for the KSK and ZSK. The current state of things are: KSK size Count TLDs 1024 3 CH, KG, LI 1280 2 BR, GR 2048 67 4096 2 BG, NA ---- 74 ZSK size Count TLDs 1024 73 1152 1 BR 2048 1 GOV ----- 75 The difference between KSK and ZSK count is explained by one TLD (NU), who are using what is called a CSK (Common Signing Key). Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

2 1

NZRR Route Registry Update
by NZRR Database Notifications 09 Jun '11

09 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by MAXNET - AS9889 members: 123.100.64.0/18^18-29, 124.198.128.0/18^18-29, 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 112.109.64.0/20^20-29, 119.47.112.0/20^20-29, 124.150.160.0/20^20-29, 112.109.80.0/21^21-29, 114.134.160.0/21^21-29, 182.236.120.0/21^21-29, 202.3.80.0/21^21-29, 202.90.56.0/21^21-29, 202.189.160.0/21^21-29, 113.197.64.0/22^22-29, 114.134.168.0/22^22-29, 202.90.44.0/22^22-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 117.53.150.0/23^23-29, 202.49.88.0/23^23-29, 203.84.134.0/23^23-29, 210.54.142.0/23^23-29, 114.134.172.0/24^24-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.8.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.162.0/24^24-29, 202.37.181.0/24^24-29, 202.37.232.0/24^24-29, 202.46.187.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.12.15.0/24^24-29, 203.97.42.0/24^24-29, 205.233.243.0/24^24-29, 210.54.13.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sultan.sikander(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110518 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS9889 descr: advertised to AS9560 by MAXNET - AS9889 members: 123.100.64.0/18^18-29, 124.198.128.0/18^18-29, 202.89.32.0/19^19-29, 203.89.160.0/19^19-29, 112.109.64.0/20^20-29, 119.47.112.0/20^20-29, 124.150.160.0/20^20-29, 112.109.80.0/21^21-29, 114.134.160.0/21^21-29, 182.236.120.0/21^21-29, 202.3.80.0/21^21-29, 202.90.56.0/21^21-29, 202.189.160.0/21^21-29, 113.197.64.0/22^22-29, 114.134.168.0/22^22-29, 180.189.196.0/22^22-29, 202.90.44.0/22^22-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 117.53.150.0/23^23-29, 202.49.88.0/23^23-29, 203.84.134.0/23^23-29, 210.54.142.0/23^23-29, 114.134.172.0/24^24-29, 192.138.251.0/24^24-29, 202.6.5.0/24^24-29, 202.27.8.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.36.227.0/24^24-29, 202.37.72.0/24^24-29, 202.37.162.0/24^24-29, 202.37.181.0/24^24-29, 202.37.232.0/24^24-29, 202.46.187.0/24^24-29, 202.49.141.0/24^24-29, 202.150.102.0/24^24-29, 203.12.15.0/24^24-29, 203.97.42.0/24^24-29, 205.233.243.0/24^24-29, 210.54.13.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29, 203.167.219.56/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sultan.sikander(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110610 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 09 Jun '11

09 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus Communications - NO VERIFICATION NEEDED - AS4826 members: 49.224.0.0/14^14-29, 118.92.0.0/15^15-29, 27.252.0.0/16^16-29, 58.7.0.0/16^16-29, 58.28.0.0/16^16-29, 101.100.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 124.148.0.0/16^16-29, 124.169.0.0/16^16-29, 124.170.0.0/16^16-29, 130.217.0.0/16^16-29, 131.203.0.0/16^16-29, 139.80.0.0/16^16-29, 157.128.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 182.154.0.0/16^16-29, 203.59.0.0/16^16-29, 220.235.0.0/16^16-29, 220.253.0.0/16^16-29, 113.203.0.0/17^17-29, 124.149.0.0/17^17-29, 124.150.0.0/17^17-29, 124.168.0.0/17^17-29, 180.181.0.0/17^17-29, 203.109.128.0/17^17-29, 203.173.128.0/17^17-29, 210.48.0.0/17^17-29, 58.6.192.0/18^18-29, 114.129.128.0/18^18-29, 114.198.0.0/18^18-29, 116.90.0.0/18^18-29, 116.251.128.0/18^18-29, 118.67.0.0/18^18-29, 120.88.64.0/18^18-29, 123.100.64.0/18^18-29, 124.149.192.0/18^18-29, 124.157.64.0/18^18-29, 124.168.128.0/18^18-29, 124.171.0.0/18^18-29, 124.198.128.0/18^18-29, 125.209.128.0/18^18-29, 125.253.0.0/18^18-29, 180.181.128.0/18^18-29, 180.200.128.0/18^18-29, 182.160.128.0/18^18-29, 202.72.128.0/18^18-29, 202.173.128.0/18^18-29, 203.89.64.0/18^18-29, 203.113.192.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.206.0.0/18^18-29, 203.208.64.0/18^18-29, 203.211.64.0/18^18-29, 210.15.192.0/18^18-29, 210.84.0.0/18^18-29, 210.185.0.0/18^18-29, 14.1.32.0/19^19-29, 58.6.64.0/19^19-29, 58.6.160.0/19^19-29, 111.67.0.0/19^19-29, 111.125.160.0/19^19-29, 112.141.0.0/19^19-29, 112.141.128.0/19^19-29, 113.192.0.0/19^19-29, 118.127.64.0/19^19-29, 119.15.0.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 124.149.160.0/19^19-29, 124.171.192.0/19^19-29, 180.148.96.0/19^19-29, 180.189.192.0/19^19-29, 180.200.192.0/19^19-29, 180.214.64.0/19^19-29, 180.222.0.0/19^19-29, 182.48.128.0/19^19-29, 202.45.96.0/19^19-29, 202.59.32.0/19^19-29, 202.74.192.0/19^19-29, 202.89.32.0/19^19-29, 202.89.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.96.192.0/19^19-29, 203.124.96.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.158.32.0/19^19-29, 203.206.128.0/19^19-29, 203.206.224.0/19^19-29, 203.214.96.0/19^19-29, 203.217.64.0/19^19-29, 210.54.160.0/19^19-29, 221.121.128.0/19^19-29, 223.27.0.0/19^19-29, 223.165.96.0/19^19-29, 23.2.112.0/20^20-29, 49.213.16.0/20^20-29, 49.236.240.0/20^20-29, 58.6.0.0/20^20-29, 58.6.32.0/20^20-29, 58.6.112.0/20^20-29, 58.6.144.0/20^20-29, 58.84.224.0/20^20-29, 110.173.144.0/20^20-29, 111.118.160.0/20^20-29, 112.109.64.0/20^20-29, 113.20.0.0/20^20-29, 113.192.32.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.134.0.0/20^20-29, 114.142.160.0/20^20-29, 114.198.64.0/20^20-29, 114.198.112.0/20^20-29, 116.66.160.0/20^20-29, 116.90.128.0/20^20-29, 116.93.128.0/20^20-29, 116.199.224.0/20^20-29, 117.55.224.0/20^20-29, 118.127.16.0/20^20-29, 119.10.128.0/20^20-29, 119.15.96.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.48.0/20^20-29, 119.161.64.0/20^20-29, 120.138.16.0/20^20-29, 121.54.128.0/20^20-29, 121.79.224.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.252.0.0/20^20-29, 124.149.144.0/20^20-29, 124.155.224.0/20^20-29, 124.168.208.0/20^20-29, 124.168.240.0/20^20-29, 124.171.176.0/20^20-29, 124.171.240.0/20^20-29, 124.248.128.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 175.107.144.0/20^20-29, 175.107.160.0/20^20-29, 180.235.192.0/20^20-29, 202.3.192.0/20^20-29, 202.4.224.0/20^20-29, 202.21.16.0/20^20-29, 202.37.0.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.60.64.0/20^20-29, 202.63.64.0/20^20-29, 202.68.80.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.80.176.0/20^20-29, 202.86.96.0/20^20-29, 202.87.16.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.174.160.0/20^20-29, 203.2.80.0/20^20-29, 203.17.96.0/20^20-29, 203.82.96.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.173.0.0/20^20-29, 203.206.160.0/20^20-29, 203.206.192.0/20^20-29, 203.214.32.0/20^20-29, 203.214.80.0/20^20-29, 203.217.16.0/20^20-29, 203.217.32.0/20^20-29, 210.56.32.0/20^20-29, 223.165.64.0/20^20-29, 27.121.112.0/21^21-29, 49.156.24.0/21^21-29, 58.6.16.0/21^21-29, 58.6.56.0/21^21-29, 110.44.24.0/21^21-29, 110.76.128.0/21^21-29, 112.109.80.0/21^21-29, 113.192.56.0/21^21-29, 113.212.168.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.111.144.0/21^21-29, 114.198.80.0/21^21-29, 114.198.96.0/21^21-29, 115.124.32.0/21^21-29, 115.126.128.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.90.72.0/21^21-29, 116.212.64.0/21^21-29, 116.251.192.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 117.120.8.0/21^21-29, 118.67.192.0/21^21-29, 118.88.24.0/21^21-29, 118.127.8.0/21^21-29, 119.15.72.0/21^21-29, 119.63.200.0/21^21-29, 119.63.208.0/21^21-29, 119.82.144.0/21^21-29, 119.252.184.0/21^21-29, 120.29.248.0/21^21-29, 120.89.80.0/21^21-29, 120.136.0.0/21^21-29, 121.0.0.0/21^21-29, 121.54.144.0/21^21-29, 121.79.240.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.102.96.0/21^21-29, 123.176.112.0/21^21-29, 124.150.160.0/21^21-29, 124.168.200.0/21^21-29, 124.168.232.0/21^21-29, 124.171.232.0/21^21-29, 125.214.88.0/21^21-29, 175.45.128.0/21^21-29, 175.107.176.0/21^21-29, 175.176.200.0/21^21-29, 175.176.208.0/21^21-29, 180.94.232.0/21^21-29, 180.189.152.0/21^21-29, 180.214.168.0/21^21-29, 180.235.208.0/21^21-29, 182.23.192.0/21^21-29, 202.3.80.0/21^21-29, 202.7.144.0/21^21-29, 202.12.248.0/21^21-29, 202.20.0.0/21^21-29, 202.36.16.0/21^21-29, 202.36.96.0/21^21-29, 202.37.32.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.136.0/21^21-29, 202.49.0.0/21^21-29, 202.49.128.0/21^21-29, 202.50.208.0/21^21-29, 202.55.144.0/21^21-29, 202.60.80.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.83.112.0/21^21-29, 202.86.48.0/21^21-29, 202.86.208.0/21^21-29, 202.92.240.0/21^21-29, 202.126.80.0/21^21-29, 202.129.80.0/21^21-29, 202.129.96.0/21^21-29, 202.160.112.0/21^21-29, 202.162.176.0/21^21-29, 202.168.16.0/21^21-29, 203.14.40.0/21^21-29, 203.14.168.0/21^21-29, 203.33.160.0/21^21-29, 203.98.88.0/21^21-29, 203.149.80.0/21^21-29, 203.168.32.0/21^21-29, 203.173.40.0/21^21-29, 203.174.16.0/21^21-29, 203.188.216.0/21^21-29, 203.206.64.0/21^21-29, 203.206.176.0/21^21-29, 203.212.16.0/21^21-29, 203.214.64.0/21^21-29, 203.214.152.0/21^21-29, 203.215.0.0/21^21-29, 203.217.0.0/21^21-29, 203.217.48.0/21^21-29, 210.4.208.0/21^21-29, 210.9.136.0/21^21-29, 210.48.208.0/21^21-29, 210.79.56.0/21^21-29, 14.128.4.0/22^22-29, 23.2.32.0/22^22-29, 27.34.224.0/22^22-29, 27.96.64.0/22^22-29, 27.106.200.0/22^22-29, 49.128.12.0/22^22-29, 49.143.228.0/22^22-29, 58.6.28.0/22^22-29, 58.6.108.0/22^22-29, 59.86.160.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 101.234.72.0/22^22-29, 103.1.188.0/22^22-29, 103.2.168.0/22^22-29, 103.3.144.0/22^22-29, 109.200.212.0/22^22-29, 110.44.16.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.173.236.0/22^22-29, 110.232.144.0/22^22-29, 111.235.128.0/22^22-29, 111.235.140.0/22^22-29, 112.140.176.0/22^22-29, 112.141.112.0/22^22-29, 112.141.240.0/22^22-29, 113.29.240.0/22^22-29, 113.130.120.0/22^22-29, 113.197.64.0/22^22-29, 113.197.96.0/22^22-29, 114.23.96.0/22^22-29, 114.31.212.0/22^22-29, 114.198.104.0/22^22-29, 115.31.92.0/22^22-29, 115.69.28.0/22^22-29, 115.69.60.0/22^22-29, 115.178.28.0/22^22-29, 116.251.200.0/22^22-29, 118.127.32.0/22^22-29, 118.127.52.0/22^22-29, 118.127.56.0/22^22-29, 119.17.160.0/22^22-29, 119.17.168.0/22^22-29, 119.63.216.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 120.29.240.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.102.104.0/22^22-29, 124.108.96.0/22^22-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20110607 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus Communications - NO VERIFICATION NEEDED - AS4826 members: 49.224.0.0/14^14-29, 118.92.0.0/15^15-29, 27.252.0.0/16^16-29, 58.7.0.0/16^16-29, 58.28.0.0/16^16-29, 101.100.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 124.148.0.0/16^16-29, 124.169.0.0/16^16-29, 124.170.0.0/16^16-29, 130.217.0.0/16^16-29, 131.203.0.0/16^16-29, 139.80.0.0/16^16-29, 157.128.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 182.154.0.0/16^16-29, 203.59.0.0/16^16-29, 220.235.0.0/16^16-29, 220.253.0.0/16^16-29, 113.203.0.0/17^17-29, 124.149.0.0/17^17-29, 124.150.0.0/17^17-29, 124.168.0.0/17^17-29, 180.181.0.0/17^17-29, 203.109.128.0/17^17-29, 203.173.128.0/17^17-29, 210.48.0.0/17^17-29, 58.6.192.0/18^18-29, 101.0.64.0/18^18-29, 114.129.128.0/18^18-29, 114.198.0.0/18^18-29, 116.90.0.0/18^18-29, 116.251.128.0/18^18-29, 118.67.0.0/18^18-29, 120.88.64.0/18^18-29, 123.100.64.0/18^18-29, 124.149.192.0/18^18-29, 124.157.64.0/18^18-29, 124.168.128.0/18^18-29, 124.171.0.0/18^18-29, 124.198.128.0/18^18-29, 125.209.128.0/18^18-29, 125.253.0.0/18^18-29, 180.181.128.0/18^18-29, 180.200.128.0/18^18-29, 182.160.128.0/18^18-29, 202.72.128.0/18^18-29, 202.173.128.0/18^18-29, 203.89.64.0/18^18-29, 203.113.192.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.206.0.0/18^18-29, 203.208.64.0/18^18-29, 203.211.64.0/18^18-29, 210.15.192.0/18^18-29, 210.84.0.0/18^18-29, 210.185.0.0/18^18-29, 14.1.32.0/19^19-29, 58.6.64.0/19^19-29, 58.6.160.0/19^19-29, 111.67.0.0/19^19-29, 111.125.160.0/19^19-29, 112.141.0.0/19^19-29, 112.141.128.0/19^19-29, 113.192.0.0/19^19-29, 118.127.64.0/19^19-29, 119.15.0.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 124.149.160.0/19^19-29, 124.171.192.0/19^19-29, 180.148.96.0/19^19-29, 180.189.192.0/19^19-29, 180.200.192.0/19^19-29, 180.214.64.0/19^19-29, 180.222.0.0/19^19-29, 182.48.128.0/19^19-29, 202.45.96.0/19^19-29, 202.59.32.0/19^19-29, 202.74.192.0/19^19-29, 202.89.32.0/19^19-29, 202.89.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.96.192.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.158.32.0/19^19-29, 203.206.128.0/19^19-29, 203.206.224.0/19^19-29, 203.214.96.0/19^19-29, 203.217.64.0/19^19-29, 210.54.160.0/19^19-29, 223.27.0.0/19^19-29, 223.165.96.0/19^19-29, 23.2.112.0/20^20-29, 49.213.16.0/20^20-29, 49.236.240.0/20^20-29, 58.6.0.0/20^20-29, 58.6.32.0/20^20-29, 58.6.112.0/20^20-29, 58.6.144.0/20^20-29, 58.84.224.0/20^20-29, 110.173.144.0/20^20-29, 111.118.160.0/20^20-29, 112.109.64.0/20^20-29, 113.20.0.0/20^20-29, 113.192.32.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.134.0.0/20^20-29, 114.142.160.0/20^20-29, 114.198.64.0/20^20-29, 114.198.112.0/20^20-29, 116.66.160.0/20^20-29, 116.90.128.0/20^20-29, 116.93.128.0/20^20-29, 116.199.224.0/20^20-29, 117.55.224.0/20^20-29, 118.127.16.0/20^20-29, 119.10.128.0/20^20-29, 119.15.96.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.48.0/20^20-29, 119.161.64.0/20^20-29, 120.138.16.0/20^20-29, 121.54.128.0/20^20-29, 121.79.224.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.252.0.0/20^20-29, 124.149.144.0/20^20-29, 124.155.224.0/20^20-29, 124.168.208.0/20^20-29, 124.168.240.0/20^20-29, 124.171.176.0/20^20-29, 124.171.240.0/20^20-29, 124.248.128.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 175.107.144.0/20^20-29, 175.107.160.0/20^20-29, 180.235.192.0/20^20-29, 202.3.192.0/20^20-29, 202.4.224.0/20^20-29, 202.21.16.0/20^20-29, 202.37.0.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.60.64.0/20^20-29, 202.63.64.0/20^20-29, 202.68.80.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.80.176.0/20^20-29, 202.86.96.0/20^20-29, 202.87.16.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.174.160.0/20^20-29, 203.2.80.0/20^20-29, 203.17.96.0/20^20-29, 203.82.96.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.173.0.0/20^20-29, 203.206.160.0/20^20-29, 203.206.192.0/20^20-29, 203.214.32.0/20^20-29, 203.214.80.0/20^20-29, 203.217.16.0/20^20-29, 203.217.32.0/20^20-29, 210.56.32.0/20^20-29, 223.165.64.0/20^20-29, 27.121.64.0/21^21-29, 27.121.112.0/21^21-29, 49.156.24.0/21^21-29, 58.6.16.0/21^21-29, 58.6.56.0/21^21-29, 110.44.24.0/21^21-29, 110.76.128.0/21^21-29, 112.109.80.0/21^21-29, 113.192.56.0/21^21-29, 113.212.168.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.111.144.0/21^21-29, 114.198.80.0/21^21-29, 114.198.96.0/21^21-29, 115.124.32.0/21^21-29, 115.126.128.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.90.72.0/21^21-29, 116.212.64.0/21^21-29, 116.251.192.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 118.67.192.0/21^21-29, 118.88.24.0/21^21-29, 118.127.8.0/21^21-29, 119.15.72.0/21^21-29, 119.63.200.0/21^21-29, 119.63.208.0/21^21-29, 119.82.144.0/21^21-29, 119.252.184.0/21^21-29, 120.29.248.0/21^21-29, 120.89.80.0/21^21-29, 120.136.0.0/21^21-29, 121.0.0.0/21^21-29, 121.54.144.0/21^21-29, 121.79.240.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.102.96.0/21^21-29, 123.176.112.0/21^21-29, 124.150.160.0/21^21-29, 124.168.200.0/21^21-29, 124.168.232.0/21^21-29, 124.171.232.0/21^21-29, 125.214.88.0/21^21-29, 175.45.128.0/21^21-29, 175.107.176.0/21^21-29, 175.176.200.0/21^21-29, 175.176.208.0/21^21-29, 180.94.232.0/21^21-29, 180.189.152.0/21^21-29, 180.214.168.0/21^21-29, 180.235.208.0/21^21-29, 182.23.192.0/21^21-29, 202.3.80.0/21^21-29, 202.7.144.0/21^21-29, 202.12.248.0/21^21-29, 202.20.0.0/21^21-29, 202.36.16.0/21^21-29, 202.36.96.0/21^21-29, 202.37.32.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.136.0/21^21-29, 202.49.0.0/21^21-29, 202.49.128.0/21^21-29, 202.50.208.0/21^21-29, 202.55.144.0/21^21-29, 202.60.80.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.83.112.0/21^21-29, 202.86.48.0/21^21-29, 202.86.208.0/21^21-29, 202.92.240.0/21^21-29, 202.126.80.0/21^21-29, 202.129.80.0/21^21-29, 202.129.96.0/21^21-29, 202.160.112.0/21^21-29, 202.162.176.0/21^21-29, 202.168.16.0/21^21-29, 203.14.40.0/21^21-29, 203.14.168.0/21^21-29, 203.33.160.0/21^21-29, 203.98.88.0/21^21-29, 203.149.80.0/21^21-29, 203.168.32.0/21^21-29, 203.173.40.0/21^21-29, 203.174.16.0/21^21-29, 203.188.216.0/21^21-29, 203.206.64.0/21^21-29, 203.206.176.0/21^21-29, 203.212.16.0/21^21-29, 203.214.64.0/21^21-29, 203.214.152.0/21^21-29, 203.215.0.0/21^21-29, 203.217.0.0/21^21-29, 203.217.48.0/21^21-29, 210.4.208.0/21^21-29, 210.9.136.0/21^21-29, 210.48.208.0/21^21-29, 210.79.56.0/21^21-29, 14.128.4.0/22^22-29, 23.2.32.0/22^22-29, 27.34.224.0/22^22-29, 27.96.64.0/22^22-29, 27.100.24.0/22^22-29, 27.106.200.0/22^22-29, 49.128.12.0/22^22-29, 49.143.228.0/22^22-29, 58.6.28.0/22^22-29, 58.6.108.0/22^22-29, 59.86.160.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 101.234.72.0/22^22-29, 103.1.188.0/22^22-29, 103.2.168.0/22^22-29, 103.3.144.0/22^22-29, 109.200.212.0/22^22-29, 110.44.16.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.173.236.0/22^22-29, 110.232.144.0/22^22-29, 111.235.128.0/22^22-29, 111.235.140.0/22^22-29, 112.140.176.0/22^22-29, 112.141.112.0/22^22-29, 112.141.240.0/22^22-29, 113.29.240.0/22^22-29, 113.130.120.0/22^22-29, 113.197.64.0/22^22-29, 113.197.96.0/22^22-29, 114.23.96.0/22^22-29, 114.31.212.0/22^22-29, 114.198.104.0/22^22-29, 115.31.92.0/22^22-29, 115.69.28.0/22^22-29, 115.69.60.0/22^22-29, 115.178.28.0/22^22-29, 116.251.200.0/22^22-29, 118.127.32.0/22^22-29, 118.127.52.0/22^22-29, 118.127.56.0/22^22-29, 119.17.160.0/22^22-29, 119.17.168.0/22^22-29, 119.63.216.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 120.29.240.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.102.104.0/22^22-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20110610 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 09 Jun '11

09 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES6:AS17435 descr: Route set advertised to AS9439 by WorldxChange - AS17435 mp-members: 2001:E20:0:0:0:0:0:0/32^32-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: gsmith(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20080911 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES6:AS17435 descr: Route set advertised to AS9439 by WorldxChange Communications LTD - AS17435 mp-members: 2001:E20:0:0:0:0:0:0/32^32-64, 2001:DF0:F0:0:0:0:0:0/48^48-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: lsmith(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110610 source: NZRR ------------------------------------------------------------

1 0

Re: [nznog] World IPv6 Day
by Sebastian Castro 09 Jun '11

09 Jun '11

On 06/10/2011 11:03 AM, David Robinson wrote: > On 10 June 2011 10:56, Sebastian Castro <sebastian(a)nzrs.net.nz> wrote: >> What we observed was a sudden change in the number of queries coming >> from 6 sources: >> >> 2001:4400:0:86:f24d:a2ff:fe02:7569 >> 2001:4400:0:86:f24d:a2ff:fe02:7413 >> 2001:4400:0:86:f24d:a2ff:fe03:571d >> 2001:4400:0:86:f24d:a2ff:fe03:448d >> 2001:4400:0:86:f24d:a2ff:fe03:57d1 >> 2001:4400:0:86:f24d:a2ff:fe03:1f13 >> >> All of them belong to TelstraClear. My bet is they activated those >> addresses in some of their caching resolvers. Anyone from TelstraClear >> want to comment on it? >> >> We haven't done any quality analysis on the traces beyond the graphs >> already mentioned. Too busy discussing about DNSSEC ;) > Didn't Telstra the other week say something about rolling out new DNS > kit that also had IPv6? Yes, but the IPv6 addresses for that service at not known to me at least, and the addresses noted above don't have a reverse name to provide a hint of what they do. Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

NZRR Route Registry Update
by NZRR Database Notifications 09 Jun '11

09 Jun '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES6:AS17435 descr: Route set advertised to AS9560 by WorldxChange - AS17435 mp-members: 2001:E20:0:0:0:0:0:0/32^32-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: gsmith(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20080911 changed: rpsl-admin(a)nzix.net 20080922 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES6:AS17435 descr: Route set advertised to AS9560 by WorldxChange Communications LTD - AS17435 mp-members: 2001:E20:0:0:0:0:0:0/32^32-64, 2001:DF0:F0:0:0:0:0:0/48^48-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: lsmith(a)wxc.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110610 source: NZRR ------------------------------------------------------------

1 0

Fwd: Fwd: Re: I don't trust the NZRS DNSSEC procedures... Yet
by Andy Linton 08 Jun '11

08 Jun '11

Damn you, list software that always does the opposite of what I want. ---------- Forwarded message ---------- From: Andy Linton <asjl(a)lpnz.org> Date: Wed, Jun 8, 2011 at 2:14 PM Subject: Re: [nznog] Fwd: Re: I don't trust the NZRS DNSSEC procedures... Yet To: Jay Daley <jay(a)nzrs.net.nz> > Additionally, the root does not change very often and does not have any form of SLA on how quickly those changes are made, so introducing processes that create significant operational delays is not a problem for the root. Root zone changes often take days. This contrasts strongly with .nz where we have a tight SLA that requires us to publish changes within an hour and a bit of receiving them and have metrics governing how much downtime is allowed per server, how quickly changes propagate, how quickly we serve responses, etc. I think we need to look at this more closely. .nz does not change very often - the zones that change often are co.nz, net.nz etc. So we may have different requirements for those levels. I can envisage govt.nz or mil.nz having different trust requirements from org.nz or geek.nz for example. We haven't delegated those zones in the past but it's possible that might happen. We're lumping .nz and the second level domains together and that may or may not be appropriate. I also think that we should be willing to consider changes in the performance characteristics of the system if it makes it more secure. I would certainly be willing to raise a modified SLA with the DNCL Board. Fast, reliable, cheap - pick two.

2 1

Fwd: Re: I don't trust the NZRS DNSSEC procedures... Yet
by Mark Harris 07 Jun '11

07 Jun '11

Sigh, I always forget that default reply is not to the list. -------- Original Message -------- Subject: Re: [nznog] I don't trust the NZRS DNSSEC procedures... Yet Date: Wed, 08 Jun 2011 12:41:05 +1200 From: Mark Harris <mark(a)tracs.co.nz> Organization: Technology Research and Consultancy Services To: Jay Daley <jay(a)nzrs.net.nz> On 8/06/11 12:22 PM, Jay Daley wrote: > In any system, ours as proposed for .nz, or the TCR system for the root, collusion between multiple bad actors can lead to controls being subverted and key material stolen. What makes this more likely than one bad actor with the whole of the key available to them? If the actors are chosen well, splitting the key reduces risk, rather than increase it. Which leads me to the point about trusting individuals to run the system. You need to publish the processes by which the people will be checked, so that the community can have trust that the individuals chosen will always be trustworthy, because untrustworthy persons won't make it through the process. Any system which is built around known individuals has already failed, when it comes to reliability. The risk is inherent. > We are more than happy to publish older versions of the DPS forever > and a day, though I can't yet commit that we will make diffs > available as well. With respect, Jay, it's not rocket science to do this. Wikipedia offers a good model for displaying differing versions - just restict the authors. > Adding DNSSEC does not increase the control that NZRS has over .nz or > the risks from bad actors within NZRS and so adding a TCR step for > that would be disproportionate. And yet it's not. Adding a TCR would engender trust from the community you need to trust you, so not adding a TCR will be the risk that is disproportionate. ;-) Checks and balaces, Jay. ~mark

2 4