- NZNOG - lists.nznog.org

Xtra's strange MTA behaviour.
by Cameron Bradley 06 Apr '11

06 Apr '11

Hey guys, Wondering if any of you had ever encountered this lovely little bit of 'filtering' on Xtra's behalf. When my mail gateway (non-blacklisted, mail accepted by everyone) attempts to contact Xtra's MTA, the following is the response: wiretap(a)mx-e1:~$ telnet mta.xtra.co.nz 25 Trying 210.54.141.1... Connected to mta.xtra.co.nz. Escape character is '^]'. 421 Service not available Connection closed by foreign host. Now that is an instant disconnection, with no opportunity to submit recipient or sender details, which is making it very hard to send email to xtra customers. Perhaps someone from Xtra would like to help out, or someone on here has an idea of 'resolving' this issue? Regards, Cameron Bradley

4 3

New crypto accelerator/HSM development
by Robert Cotter 06 Apr '11

06 Apr '11

Infoblox make some bold claims on their public website into the levels of support they provide for managing and delivering DNSSEC services. So if you have a need/interest contact me off line and we can talk about it over a beer Regards Robert Cotter Sales Engineer rcotter(a)distributioncentral.co.nz<UrlBlockedError.aspx> ________________________________ This email is for the intended recipient(s) only. Be advised that if you have received this email in error that any use, dissemination, forwarding, printing or copying of this email is strictly prohibited. The sender cannot guarantee that this email or any attachment to it is free of computer viruses or other conditions which may damage or interfere with data, hardware or software with which it might be used. If you have received this email in error, please notify Distribution Central on +61 2 8986 5000 or notify sender.

1 0

New crypto accelerator/HSM development
by Jay Daley 06 Apr '11

06 Apr '11

Hi Is there anyone out there, academics perhaps, developing new crypto accelerator/HSM hardware with a focus on high performance (e.g. 10k+ RSA sigs per second)? The current market is pretty poor with largely over-priced and under-performing kit and I'm hoping that someone is plotting to revolutionise it with something new and looking for a partner. cheers Jay -- Jay Daley Chief Executive .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 931 6977 mobile: +64 21 678840

9 17

NZRR Route Registry Update
by NZRR Database Notifications 05 Apr '11

05 Apr '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus Communications - NO VERIFICATION NEEDED - AS4826 members: 49.224.0.0/14^14-29, 118.92.0.0/15^15-29, 118.148.0.0/15^15-29, 27.252.0.0/16^16-29, 58.7.0.0/16^16-29, 58.28.0.0/16^16-29, 101.100.0.0/16^16-29, 114.23.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 124.148.0.0/16^16-29, 124.169.0.0/16^16-29, 124.170.0.0/16^16-29, 130.217.0.0/16^16-29, 131.203.0.0/16^16-29, 139.80.0.0/16^16-29, 157.128.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 182.154.0.0/16^16-29, 203.59.0.0/16^16-29, 220.235.0.0/16^16-29, 220.253.0.0/16^16-29, 14.137.0.0/17^17-29, 113.203.0.0/17^17-29, 124.149.0.0/17^17-29, 124.150.0.0/17^17-29, 124.168.0.0/17^17-29, 180.181.0.0/17^17-29, 203.109.128.0/17^17-29, 203.173.128.0/17^17-29, 210.48.0.0/17^17-29, 14.137.128.0/18^18-29, 58.6.192.0/18^18-29, 114.129.128.0/18^18-29, 114.198.0.0/18^18-29, 116.251.128.0/18^18-29, 120.88.64.0/18^18-29, 123.100.64.0/18^18-29, 124.149.192.0/18^18-29, 124.157.64.0/18^18-29, 124.168.128.0/18^18-29, 124.171.0.0/18^18-29, 124.198.128.0/18^18-29, 125.209.128.0/18^18-29, 125.253.0.0/18^18-29, 180.181.128.0/18^18-29, 180.200.128.0/18^18-29, 182.160.128.0/18^18-29, 202.72.128.0/18^18-29, 202.173.128.0/18^18-29, 203.113.192.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.206.0.0/18^18-29, 203.208.64.0/18^18-29, 203.211.64.0/18^18-29, 210.15.192.0/18^18-29, 210.185.0.0/18^18-29, 14.1.32.0/19^19-29, 14.137.192.0/19^19-29, 27.50.64.0/19^19-29, 58.6.64.0/19^19-29, 58.6.160.0/19^19-29, 61.245.128.0/19^19-29, 111.67.0.0/19^19-29, 112.141.0.0/19^19-29, 112.141.64.0/19^19-29, 112.141.128.0/19^19-29, 112.141.192.0/19^19-29, 113.192.0.0/19^19-29, 118.127.64.0/19^19-29, 119.15.0.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 124.149.160.0/19^19-29, 124.168.192.0/19^19-29, 124.171.192.0/19^19-29, 180.148.96.0/19^19-29, 180.189.192.0/19^19-29, 180.200.192.0/19^19-29, 180.214.64.0/19^19-29, 180.222.0.0/19^19-29, 182.48.128.0/19^19-29, 202.45.96.0/19^19-29, 202.59.32.0/19^19-29, 202.62.128.0/19^19-29, 202.74.192.0/19^19-29, 202.89.32.0/19^19-29, 202.89.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.89.64.0/19^19-29, 203.96.192.0/19^19-29, 203.124.96.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.158.32.0/19^19-29, 203.206.128.0/19^19-29, 203.206.224.0/19^19-29, 203.214.96.0/19^19-29, 203.217.64.0/19^19-29, 210.54.160.0/19^19-29, 221.121.128.0/19^19-29, 223.27.0.0/19^19-29, 223.165.96.0/19^19-29, 49.213.16.0/20^20-29, 49.236.240.0/20^20-29, 58.6.0.0/20^20-29, 58.6.32.0/20^20-29, 58.6.112.0/20^20-29, 58.6.144.0/20^20-29, 58.84.224.0/20^20-29, 110.173.144.0/20^20-29, 111.118.160.0/20^20-29, 111.125.160.0/20^20-29, 112.109.64.0/20^20-29, 113.20.0.0/20^20-29, 113.192.32.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.134.0.0/20^20-29, 114.142.160.0/20^20-29, 114.198.64.0/20^20-29, 114.198.112.0/20^20-29, 116.66.160.0/20^20-29, 116.93.128.0/20^20-29, 116.199.224.0/20^20-29, 117.55.224.0/20^20-29, 118.127.16.0/20^20-29, 119.10.128.0/20^20-29, 119.15.96.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.64.0/20^20-29, 120.138.16.0/20^20-29, 121.79.224.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.252.0.0/20^20-29, 124.149.144.0/20^20-29, 124.155.224.0/20^20-29, 124.168.240.0/20^20-29, 124.171.176.0/20^20-29, 124.171.240.0/20^20-29, 124.248.128.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 175.107.144.0/20^20-29, 175.107.160.0/20^20-29, 180.235.192.0/20^20-29, 202.3.192.0/20^20-29, 202.4.224.0/20^20-29, 202.21.16.0/20^20-29, 202.37.0.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.60.64.0/20^20-29, 202.68.80.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.86.96.0/20^20-29, 202.87.16.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.174.160.0/20^20-29, 203.2.80.0/20^20-29, 203.17.96.0/20^20-29, 203.82.96.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.173.0.0/20^20-29, 203.206.160.0/20^20-29, 203.206.192.0/20^20-29, 203.214.32.0/20^20-29, 203.214.80.0/20^20-29, 203.217.32.0/20^20-29, 210.56.32.0/20^20-29, 223.165.64.0/20^20-29, 27.121.64.0/21^21-29, 27.121.112.0/21^21-29, 49.50.224.0/21^21-29, 49.156.24.0/21^21-29, 58.6.16.0/21^21-29, 58.6.56.0/21^21-29, 110.44.24.0/21^21-29, 112.109.80.0/21^21-29, 113.192.56.0/21^21-29, 113.212.168.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.111.144.0/21^21-29, 114.198.80.0/21^21-29, 114.198.96.0/21^21-29, 115.124.32.0/21^21-29, 115.126.128.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.90.72.0/21^21-29, 116.212.64.0/21^21-29, 116.251.192.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 118.67.192.0/21^21-29, 118.88.24.0/21^21-29, 118.127.8.0/21^21-29, 119.15.72.0/21^21-29, 119.63.200.0/21^21-29, 119.63.208.0/21^21-29, 119.82.144.0/21^21-29, 119.252.184.0/21^21-29, 120.89.80.0/21^21-29, 120.136.0.0/21^21-29, 121.0.0.0/21^21-29, 121.79.240.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.102.96.0/21^21-29, 123.176.112.0/21^21-29, 124.150.160.0/21^21-29, 124.168.232.0/21^21-29, 124.171.232.0/21^21-29, 125.214.88.0/21^21-29, 175.45.128.0/21^21-29, 175.107.176.0/21^21-29, 175.176.200.0/21^21-29, 175.176.208.0/21^21-29, 180.92.192.0/21^21-29, 180.94.232.0/21^21-29, 180.189.152.0/21^21-29, 180.214.168.0/21^21-29, 180.235.208.0/21^21-29, 182.23.192.0/21^21-29, 202.7.144.0/21^21-29, 202.12.248.0/21^21-29, 202.20.0.0/21^21-29, 202.36.16.0/21^21-29, 202.36.96.0/21^21-29, 202.37.32.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.136.0/21^21-29, 202.49.0.0/21^21-29, 202.49.128.0/21^21-29, 202.50.208.0/21^21-29, 202.55.144.0/21^21-29, 202.60.80.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.83.112.0/21^21-29, 202.86.48.0/21^21-29, 202.86.208.0/21^21-29, 202.90.240.0/21^21-29, 202.92.240.0/21^21-29, 202.126.80.0/21^21-29, 202.129.80.0/21^21-29, 202.129.96.0/21^21-29, 202.160.112.0/21^21-29, 202.162.176.0/21^21-29, 202.168.16.0/21^21-29, 202.169.200.0/21^21-29, 202.189.160.0/21^21-29, 203.14.40.0/21^21-29, 203.14.168.0/21^21-29, 203.33.160.0/21^21-29, 203.98.88.0/21^21-29, 203.149.80.0/21^21-29, 203.173.40.0/21^21-29, 203.174.16.0/21^21-29, 203.188.216.0/21^21-29, 203.190.208.0/21^21-29, 203.206.64.0/21^21-29, 203.206.176.0/21^21-29, 203.212.16.0/21^21-29, 203.214.64.0/21^21-29, 203.215.0.0/21^21-29, 203.217.0.0/21^21-29, 203.217.16.0/21^21-29, 203.217.48.0/21^21-29, 210.9.136.0/21^21-29, 14.1.64.0/22^22-29, 27.34.224.0/22^22-29, 27.96.64.0/22^22-29, 27.100.24.0/22^22-29, 27.106.200.0/22^22-29, 27.112.96.0/22^22-29, 49.128.12.0/22^22-29, 49.143.228.0/22^22-29, 58.6.28.0/22^22-29, 58.6.108.0/22^22-29, 59.86.160.0/22^22-29, 59.86.172.0/22^22-29, 59.86.176.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 101.234.72.0/22^22-29, 109.200.212.0/22^22-29, 110.76.132.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.232.144.0/22^22-29, 111.235.140.0/22^22-29, 112.140.176.0/22^22-29, 112.141.112.0/22^22-29, 112.141.240.0/22^22-29, 113.29.240.0/22^22-29, 113.130.120.0/22^22-29, 113.197.96.0/22^22-29, 114.31.212.0/22^22-29, 114.198.104.0/22^22-29, 115.31.92.0/22^22-29, 115.69.28.0/22^22-29, 115.69.60.0/22^22-29, 115.178.28.0/22^22-29, 116.90.132.0/22^22-29, 116.90.140.0/22^22-29, 116.251.200.0/22^22-29, 118.127.4.0/22^22-29, 118.127.32.0/22^22-29, 118.127.52.0/22^22-29, 118.127.56.0/22^22-29, 119.63.216.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.102.104.0/22^22-29, 124.108.96.0/22^22-29, 124.171.224.0/22^22-29, 125.254.48.0/22^22-29, 125.254.60.0/22^22-29, 175.41.40.0/22^22-29, 175.107.184.0/22^22-29, 175.111.100.0/22^22-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20110401 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus Communications - NO VERIFICATION NEEDED - AS4826 members: 49.224.0.0/14^14-29, 118.92.0.0/15^15-29, 118.148.0.0/15^15-29, 27.252.0.0/16^16-29, 58.7.0.0/16^16-29, 58.28.0.0/16^16-29, 101.100.0.0/16^16-29, 114.23.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 124.148.0.0/16^16-29, 124.169.0.0/16^16-29, 124.170.0.0/16^16-29, 130.217.0.0/16^16-29, 131.203.0.0/16^16-29, 139.80.0.0/16^16-29, 157.128.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 182.154.0.0/16^16-29, 203.59.0.0/16^16-29, 220.235.0.0/16^16-29, 220.253.0.0/16^16-29, 14.137.0.0/17^17-29, 113.203.0.0/17^17-29, 124.149.0.0/17^17-29, 124.150.0.0/17^17-29, 124.168.0.0/17^17-29, 180.181.0.0/17^17-29, 203.109.128.0/17^17-29, 203.173.128.0/17^17-29, 210.48.0.0/17^17-29, 14.137.128.0/18^18-29, 58.6.192.0/18^18-29, 114.129.128.0/18^18-29, 114.198.0.0/18^18-29, 116.251.128.0/18^18-29, 120.88.64.0/18^18-29, 123.100.64.0/18^18-29, 124.149.192.0/18^18-29, 124.157.64.0/18^18-29, 124.168.128.0/18^18-29, 124.171.0.0/18^18-29, 124.198.128.0/18^18-29, 125.209.128.0/18^18-29, 125.253.0.0/18^18-29, 180.181.128.0/18^18-29, 180.200.128.0/18^18-29, 182.160.128.0/18^18-29, 202.72.128.0/18^18-29, 202.173.128.0/18^18-29, 203.113.192.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.206.0.0/18^18-29, 203.208.64.0/18^18-29, 203.211.64.0/18^18-29, 210.15.192.0/18^18-29, 210.185.0.0/18^18-29, 14.1.32.0/19^19-29, 14.137.192.0/19^19-29, 27.50.64.0/19^19-29, 58.6.64.0/19^19-29, 58.6.160.0/19^19-29, 61.245.128.0/19^19-29, 111.67.0.0/19^19-29, 112.141.0.0/19^19-29, 112.141.64.0/19^19-29, 112.141.128.0/19^19-29, 112.141.192.0/19^19-29, 113.192.0.0/19^19-29, 118.127.64.0/19^19-29, 119.15.0.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 124.149.160.0/19^19-29, 124.168.192.0/19^19-29, 124.171.192.0/19^19-29, 180.148.96.0/19^19-29, 180.189.192.0/19^19-29, 180.200.192.0/19^19-29, 180.214.64.0/19^19-29, 180.222.0.0/19^19-29, 182.48.128.0/19^19-29, 202.45.96.0/19^19-29, 202.59.32.0/19^19-29, 202.62.128.0/19^19-29, 202.74.192.0/19^19-29, 202.89.32.0/19^19-29, 202.89.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.89.64.0/19^19-29, 203.96.192.0/19^19-29, 203.124.96.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.158.32.0/19^19-29, 203.206.128.0/19^19-29, 203.206.224.0/19^19-29, 203.214.96.0/19^19-29, 203.217.64.0/19^19-29, 210.54.160.0/19^19-29, 221.121.128.0/19^19-29, 223.27.0.0/19^19-29, 223.165.96.0/19^19-29, 23.2.112.0/20^20-29, 49.213.16.0/20^20-29, 49.236.240.0/20^20-29, 58.6.0.0/20^20-29, 58.6.32.0/20^20-29, 58.6.112.0/20^20-29, 58.6.144.0/20^20-29, 58.84.224.0/20^20-29, 110.173.144.0/20^20-29, 111.118.160.0/20^20-29, 111.125.160.0/20^20-29, 112.109.64.0/20^20-29, 113.20.0.0/20^20-29, 113.192.32.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.134.0.0/20^20-29, 114.142.160.0/20^20-29, 114.198.64.0/20^20-29, 114.198.112.0/20^20-29, 116.66.160.0/20^20-29, 116.93.128.0/20^20-29, 116.199.224.0/20^20-29, 117.55.224.0/20^20-29, 118.127.16.0/20^20-29, 119.10.128.0/20^20-29, 119.15.96.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.64.0/20^20-29, 120.138.16.0/20^20-29, 121.79.224.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.252.0.0/20^20-29, 124.149.144.0/20^20-29, 124.155.224.0/20^20-29, 124.168.240.0/20^20-29, 124.171.176.0/20^20-29, 124.171.240.0/20^20-29, 124.248.128.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 175.107.144.0/20^20-29, 175.107.160.0/20^20-29, 180.235.192.0/20^20-29, 202.3.192.0/20^20-29, 202.4.224.0/20^20-29, 202.21.16.0/20^20-29, 202.37.0.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.60.64.0/20^20-29, 202.68.80.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.86.96.0/20^20-29, 202.87.16.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.174.160.0/20^20-29, 203.2.80.0/20^20-29, 203.17.96.0/20^20-29, 203.82.96.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.173.0.0/20^20-29, 203.206.160.0/20^20-29, 203.206.192.0/20^20-29, 203.214.32.0/20^20-29, 203.214.80.0/20^20-29, 203.217.32.0/20^20-29, 210.56.32.0/20^20-29, 223.165.64.0/20^20-29, 27.121.64.0/21^21-29, 27.121.112.0/21^21-29, 49.156.24.0/21^21-29, 58.6.16.0/21^21-29, 58.6.56.0/21^21-29, 110.44.24.0/21^21-29, 112.109.80.0/21^21-29, 113.192.56.0/21^21-29, 113.212.168.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.111.144.0/21^21-29, 114.198.80.0/21^21-29, 114.198.96.0/21^21-29, 115.124.32.0/21^21-29, 115.126.128.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.90.72.0/21^21-29, 116.212.64.0/21^21-29, 116.251.192.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 118.67.192.0/21^21-29, 118.88.24.0/21^21-29, 118.127.8.0/21^21-29, 119.15.72.0/21^21-29, 119.63.200.0/21^21-29, 119.63.208.0/21^21-29, 119.82.144.0/21^21-29, 119.252.184.0/21^21-29, 120.89.80.0/21^21-29, 120.136.0.0/21^21-29, 121.0.0.0/21^21-29, 121.79.240.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.102.96.0/21^21-29, 123.176.112.0/21^21-29, 124.150.160.0/21^21-29, 124.168.232.0/21^21-29, 124.171.232.0/21^21-29, 125.214.88.0/21^21-29, 175.45.128.0/21^21-29, 175.107.176.0/21^21-29, 175.176.200.0/21^21-29, 175.176.208.0/21^21-29, 180.92.192.0/21^21-29, 180.94.232.0/21^21-29, 180.189.152.0/21^21-29, 180.214.168.0/21^21-29, 180.235.208.0/21^21-29, 182.23.192.0/21^21-29, 202.7.144.0/21^21-29, 202.12.248.0/21^21-29, 202.20.0.0/21^21-29, 202.36.16.0/21^21-29, 202.36.96.0/21^21-29, 202.37.32.0/21^21-29, 202.37.144.0/21^21-29, 202.37.224.0/21^21-29, 202.46.136.0/21^21-29, 202.49.0.0/21^21-29, 202.49.128.0/21^21-29, 202.50.208.0/21^21-29, 202.55.144.0/21^21-29, 202.60.80.0/21^21-29, 202.74.224.0/21^21-29, 202.78.240.0/21^21-29, 202.83.112.0/21^21-29, 202.86.48.0/21^21-29, 202.86.208.0/21^21-29, 202.90.240.0/21^21-29, 202.92.240.0/21^21-29, 202.126.80.0/21^21-29, 202.129.80.0/21^21-29, 202.129.96.0/21^21-29, 202.160.112.0/21^21-29, 202.162.176.0/21^21-29, 202.168.16.0/21^21-29, 202.169.200.0/21^21-29, 202.189.160.0/21^21-29, 203.14.40.0/21^21-29, 203.14.168.0/21^21-29, 203.33.160.0/21^21-29, 203.98.88.0/21^21-29, 203.149.80.0/21^21-29, 203.173.40.0/21^21-29, 203.174.16.0/21^21-29, 203.188.216.0/21^21-29, 203.190.208.0/21^21-29, 203.206.64.0/21^21-29, 203.206.176.0/21^21-29, 203.212.16.0/21^21-29, 203.214.64.0/21^21-29, 203.215.0.0/21^21-29, 203.217.0.0/21^21-29, 203.217.16.0/21^21-29, 203.217.48.0/21^21-29, 210.9.136.0/21^21-29, 14.1.64.0/22^22-29, 23.2.32.0/22^22-29, 27.34.224.0/22^22-29, 27.96.64.0/22^22-29, 27.100.24.0/22^22-29, 27.106.200.0/22^22-29, 27.112.96.0/22^22-29, 49.128.12.0/22^22-29, 49.143.228.0/22^22-29, 58.6.28.0/22^22-29, 58.6.108.0/22^22-29, 59.86.160.0/22^22-29, 59.86.172.0/22^22-29, 59.86.176.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 101.234.72.0/22^22-29, 109.200.212.0/22^22-29, 110.76.132.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.232.144.0/22^22-29, 111.235.140.0/22^22-29, 112.140.176.0/22^22-29, 112.141.112.0/22^22-29, 112.141.240.0/22^22-29, 113.29.240.0/22^22-29, 113.130.120.0/22^22-29, 113.197.64.0/22^22-29, 113.197.96.0/22^22-29, 114.31.212.0/22^22-29, 114.198.104.0/22^22-29, 115.31.92.0/22^22-29, 115.69.28.0/22^22-29, 115.69.60.0/22^22-29, 115.178.28.0/22^22-29, 116.90.132.0/22^22-29, 116.90.140.0/22^22-29, 116.251.200.0/22^22-29, 118.127.4.0/22^22-29, 118.127.32.0/22^22-29, 118.127.52.0/22^22-29, 118.127.56.0/22^22-29, 119.63.216.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.102.104.0/22^22-29, 124.108.96.0/22^22-29, 124.171.224.0/22^22-29, 125.254.48.0/22^22-29, 125.254.60.0/22^22-29, 175.41.40.0/22^22-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20110406 source: NZRR ------------------------------------------------------------

1 0

Re: [nznog] New crypto accelerator/HSM development
by Nick Jenkin 04 Apr '11

04 Apr '11

Yubico are developing an HSM at the moment, I have no idea what the performance is like but you could probably ask: http://www.yubico.com/YubiHSM-Application -Nick On Tue, Apr 5, 2011 at 10:15 AM, Nick Jenkin <njenkin(a)gmail.com> wrote: > Yubico are developing an HSM at the moment, I have no idea what the > performance is like but you could probably ask: > > http://www.yubico.com/YubiHSM-Application > > -Nick > > On Tue, Apr 5, 2011 at 9:24 AM, Jay Daley <jay(a)nzrs.net.nz> wrote: >> A software HSM can normally only do around 5k - 6k 1024 RSA sigs per second: >> >> http://trac.opendnssec.org/wiki/SoftHSM/Performance >> >> I want multiple cards in a machine to do 40k+ >> >> Jay >> >> On 5/04/2011, at 10:37 AM, Gerard Creamer wrote: >> >>> >>> Or if you don't actually need a hardware solution, you could run up an HSM simulator (like http://thalessim.codeplex.com/) on faster gear than the real HSM has and get performance that way. >>> >>> >>> On 5/04/2011 10:22 a.m., Gerard Creamer wrote: >>>> >>>> The HSM space seems to be very tightly controlled. We've been looking for affordable solutions for PIN block decryption for our payments work and the options seem to be very limited (and expensive and slow). We've asked around in the payments space here and in Australia and the answer is always 'buy an HSM from one of these two places' and for attaining more throughput it is invariably 'buy more HSMs'. I think they like it being a black box solution, that way they can claim it's secure. >>>> >>>> If you do find anything I would be very interested in getting the details from you. >>>> >>>> Cheers, >>>> Gerard >>>> >>>> >>>> On 5/04/2011 10:13 a.m., Richard Nelson wrote: >>>>> There has been some work on doing crypto acceleration on GPUs recently, mainly SSL which is not quite what you are looking for I guess. >>>>> >>>>> http://shader.kaist.edu/sslshader/ >>>>> >>>>> Richard. >>>>> >>>>> On 05/04/11 09:50, Jay Daley wrote: >>>>>> Hi >>>>>> >>>>>> Is there anyone out there, academics perhaps, developing new crypto accelerator/HSM hardware with a focus on high performance (e.g. 10k+ RSA sigs per second)? The current market is pretty poor with largely over-priced and under-performing kit and I'm hoping that someone is plotting to revolutionise it with something new and looking for a partner. >>>>>> >>>>>> cheers >>>>>> Jay >>>>>> >>>>> >>>> _______________________________________________ >>> >>> _______________________________________________ >>> NZNOG mailing list >>> NZNOG(a)list.waikato.ac.nz >>> http://list.waikato.ac.nz/mailman/listinfo/nznog >> >> >> -- >> Jay Daley >> Chief Executive >> .nz Registry Services (New Zealand Domain Name Registry Limited) >> desk: +64 4 931 6977 >> mobile: +64 21 678840 >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> >

1 0

New Zealand Network Operators' Group
by Donald Neal 04 Apr '11

04 Apr '11

The New Zealand Network Operators' Group The NZNOG mailing list exists to facilitate discussion among operators of networks in New Zealand on matters relevant to network operators as described in the list's Acceptable Use Policy. That policy appears later in this posting. The NZNOG Trust is registered as a charitable entity under the Charities Act. The trust exists to provide the legal framework needed to do jobs like operating the bank account which holds the money which allows our annual conferences to happen. Other than the four trustees, the NZNOG does not have a formal membership. The trustees are currently looking to replace some of their number. If you've been active in NZNOG's activities, you may want to think about whether that's for you. Conference NZNOG holds New Zealand's only annual technical networking conference. See http://2011.nznog.org/ to see what you missed. Other Meetings See http://thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.nznog.org/?page_id=6 for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://www.nzix.net/ for details of exchanges in operation. About This Mailing List This list has just over 1100 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of APN Online and The University of Waikato and an Unemployed Oaf. Neither of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ . Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins -- Donald Neal | I don't approve of gambling. I'll just | spend my time in the bar. High Performance Computing | - NZNOG 2010 attendee The University of Waikato |

1 0

APNIC 2011 Member and Stakeholder Survey Report: Last Call for Comments
by Elly Tawhai 03 Apr '11

03 Apr '11

________________________________________________________________________ APNIC 2011 Member and Stakeholder Survey Report: Last Call for Comments ________________________________________________________________________ Hi NZNOG Community, The APNIC 2011 Member and Stakeholder Survey Report was presented during APNIC 31 Hong Kong, and the complete report has been made available for public comment at: http://www.apnic.net/survey After the public comment period, which ends Monday, 18 April, the APNIC Executive Council will fully review the findings and present a formal response to the membership. Please send your comments to: sirc(a)ntu.edu.sg The APNIC Director General and Executive Council express their sincere thanks to all who submitted responses to the survey. ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

1 0

Re: [nznog] IPv4 Exhaustion Information
by Lloyd Parkes 03 Apr '11

03 Apr '11

On Fri, 2011-04-01 at 10:33 +1000, Elly Tawhai wrote: > ________________________________________________________________________ > > IPv4 Exhaustion Information > ________________________________________________________________________ Never mind the internet, I'm suffering from IPv4 exhaustion. In the last few weeks I've been assisting people debug access to web servers and I'm starting to get really bored with IT people telling me that their customer's IP address is 192.168.... Cheers, Lloyd This email and any attachment may contain confidential information. If you have received this email or any attachment in error, please delete the email / attachment, and notify the sender. Please do not copy, disclose or use the email, any attachment, or any information contained in them. Consider the environment before deciding to print: avoid printing if you can, or consider printing double-sided. Visit us online at ird.govt.nz

2 1

new mail server on new ip block
by Jodi Thomson 31 Mar '11

31 Mar '11

Hi all Am after some advice please. We've recently taken possession of a shiny new IP block from APNIC - 118.67.192.0/21 so that we can give our current IP's back to our upstream. As part of the renumbering processes we're taking the opportunity of building a new mail server as the old one is getting a little tired. However we've run into a minor snag: The IP of our new mail server mta1.waspnet.co.nz 118.67.193.2 and this being explicitly refused connection on port 25 to many of the major providers such as Gmail, Excite and Hotmail - (In fact the entire range is but am only concerned with one at this stage) Apr 1 13:25:01 mta1 postfix/smtp[8807]: connect to gmail-smtp-in.l.google.com[72.14.213.27]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8807]: connect to alt1.gmail-smtp-in.l.google.com[74.125.67.27]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8807]: connect to alt2.gmail-smtp-in.l.google.com[74.125.47.27]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8807]: connect to alt3.gmail-smtp-in.l.google.com[74.125.113.27]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8807]: connect to alt4.gmail-smtp-in.l.google.com[209.85.229.27]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8808]: connect to mx2.hotmail.com[65.55.92.184]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8808]: connect to mx1.hotmail.com[65.54.188.110]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8808]: connect to mx2.hotmail.com[65.54.188.126]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8808]: connect to mx4.hotmail.com[65.54.188.110]: Connection refused (port 25) Apr 1 13:25:01 mta1 postfix/smtp[8808]: connect to mx3.hotmail.com[65.54.188.126]: Connection refused (port 25) Other providers such as TCL are just timing out on the connection attempt /var/log/maillog:Mar 29 08:27:29 mta1 postfix/smtp[28902]: connect to mx.clear.net.nz[203.97.33.212]: Connection timed out (port 25) Telnet to port 25 produces the same results Yahoo interestingly isn't blocking it and other a few other providers are letting us through The frustrating thing for me is that once I got SPF & rDNS sorted we had full connectivity to all of these on the 17th & 18th March. Then on the 19th we started to be blocked again. I've filled in online forms with the big three to no avail. I've checked SORBS, Senderbase, etc and I can see no reason why we should not get through. Any suggestions/assistance as to what I can try next would be greatly appreciated. We're currently using it for sending team.waspnet.co.nz mail Cheers Jodi PS - We also have an IPv6 block which I am waiting upstream advertisement PPS - There will be beer J Jodi Thomson Network & Systems Engineer Ph +64-6-8355800 Fax +64-6-8355811 Mob +64-21-903712 E-Mail jodi(a)team.waspnet.co.nz www.waspnet.co.nz <http://www.waspnet.co.nz/>

2 2

IPv4 Exhaustion Information
by Elly Tawhai 31 Mar '11

31 Mar '11

________________________________________________________________________ IPv4 Exhaustion Information ________________________________________________________________________ Hi NZNOG community, We are writing to remind you that IPv4 exhaustion is an issue that should now be a priority for your organization. Most of you will be aware that the central pool of IPv4 addresses held by IANA was depleted in February. APNIC is currently delegating IPv4 addresses from its remaining pool. For more information on how APNIC currently delegates addresses, please refer to: http://www.apnic.net/ipv4-exhaustion/stages APNIC IPv4 Exhaustion Timeline? ------------------------------- Due to a large number of variables, the timeline for APNIC IPv4 exhaustion is not predictable with any assured accuracy. However, it is the APNIC Secretariat's role to make as much information as possible available to all stakeholders, so they may make their own assessments. You can view the current APNIC IPv4 address pool, which is updated daily: http://www.apnic.net/ipv4-exhaustion/graphs Deploy IPv6 Now --------------- If you are an APNIC Member, you can start your IPv6 deployment process today with the APNIC Kickstart IPv6 program. http://www.apnic.net/kickstartipv6 APNIC actively supports IPv6 deployment in the following ways: - APNIC services and website are accessible over IPv6 - IPv6 addresses are readily available to Members - APNIC provides IPv6 training courses - IPv6 liaison services - Regional IPv6 awareness initiatives For more information on how APNIC can assist you to deploy IPv6 visit: http://www.apnic.net/ipv6 _______________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

2 1