- NZNOG - lists.nznog.org

FW: [AusNOG] Heads up: Super awful FreePBX RCE
by Mark Foster 20 Nov '19

20 Nov '19

NZNOG’s been a bit quiet lately! This might be of interest or relevance to NZ Operators, so FYI… Cheers Mark. From: AusNOG <ausnog-bounces(a)lists.ausnog.net> On Behalf Of Rob Thomas Sent: Wednesday, 20 November 2019 4:24 pm To: <ausnog(a)lists.ausnog.net> <ausnog(a)lists.ausnog.net> Subject: [AusNOG] Heads up: Super awful FreePBX RCE If you have any FreePBX machines floating around, now is the time to make sure they're up to date, ESPECIALLY if they're visible from the interwebs. https://www.reddit.com/r/VOIP/comments/dypp36/20191119_critical_freepbx_sec… I backdated it for those yanks who are living in the past, but it was discovered this morning. The quick summary is it's a trivial exploit, with the ability to escalate to a root shell - which means a pwned machine, all the attacker needs is unauthenticated visibility to any of the admin pages. Feel free to hit me up offlist if you need any more info. And yes, it was my code that was vulnerable, but in my defence it was 12 year old code, and the vulnerability was only just discovered now 8) --Rob

1 0

IPv6 Global Unicast Address Assignments Registry Update
by Selina Harrington 06 Nov '19

06 Nov '19

Hi, The IPv6 global unicast address assignments registry has been updated to reflect the allocation of the following block to ARIN: 2630:0000::/12 You can find the registry at: https://www.iana.org/assignments/ipv6-unicast-address-assignments/ The allocation was made in accordance with the Policy for Allocation of IPv6 Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/allocation-ipv6-rirs-2012-02-25-en Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

The Times Change
by Donald Neal 04 Nov '19

04 Nov '19

BGP sessions for Vocus New Zealand’s AS9790 with the Auckland Peering Exchange’s route servers were shut down this morning. This does not reflect a change in Vocus NZ’s open peering policy and does not involve other Vocus AS’s. In particular, there has been no change to AS4826. * Donald Neal Donald Neal | Network Architect D: +64 9 929 2958<tel:+64%209%20929%202958> E: Donald.Neal(a)vocusgroup.co.nz<mailto:Donald.Neal(a)vocusgroup.co.nz> M: +64 27 808 1023<tel:+64%2027%20808%201023> W: vocusgroup.co.nz<http://vocusgroup.co.nz> A: Level 5, 34 Sale St, Auckland 1010 [cid:image979000.jpg(a)682DCA25.913A1343]<http://www.vocusgroup.co.nz/> Donald Neal | Network Architect D: +64 9 929 2958E: Donald.Neal(a)vocusgroup.co.nz M: +64 27 808 1023W: vocusgroup.co.nz A: Level 5, 34 Sale St, Auckland 1010

1 0

The Times Change
by Donald Neal 30 Oct '19

30 Oct '19

Work is under way to remove Vocus New Zealand's AS9790 from Auckland Peering Exchange. We plan to shut down our peering with the exchange route servers in the coming fortnight. This does not reflect a change in Vocus NZ's open peering policy and does not involve other Vocus AS's. In particular, there is no change to AS4826. * Donald Neal Donald Neal | Network Architect D: +64 9 929 2958E: Donald.Neal(a)vocusgroup.co.nz M: +64 27 808 1023W: vocusgroup.co.nz A: Level 5, 34 Sale St, Auckland 1010

1 0

FW: [pacnog] APRICOT 2020 Fellowships
by Terry Sweetser 15 Oct '19

15 Oct '19

On behalf of APNOG and FYI, see below. Regards, Terry Sweetser General Manager, IX Australia Terry.Sweetser(a)ix.asn.au -----Original Message----- From: pacnog-bounces(a)pacnog.org <pacnog-bounces(a)pacnog.org> On Behalf Of Philip Smith Sent: Wednesday, 16 October 2019 9:09 AM To: PacNOG <pacnog(a)pacnog.org> Subject: [pacnog] APRICOT 2020 Fellowships Hi everyone, Fellowships for APRICOT 2020 can now be applied for! If you meet the eligibility criteria as per: https://2020.apricot.net/fellowship/overview/ please apply via that URL. Applications close on Monday, 28th October at 23:59 (UTC +8). Successful candidates will be notified from 22nd November onwards. The 2020 Programme ------------------ APRICOT provides financial support to network operators and engineers from these developing economies to build their Internet infrastructure capacity, network with Internet network professionals, and assist their professional development. The APRICOT 2020 Fellowship programme is especially interested to receive applications from qualified candidates living and working outside the major urban centres in the Asia & Pacific region. Women are especially encouraged to apply. What's included --------------- Successful fellows will receive: - 100% of the registration fees to either the workshop or conference - 100% of the accommodation costs (up to six nights for the workshop and up to five nights for the conference) - A contribution towards airfare and per diem up to a total of USD 400 for Australia/New Zealand based fellows and USD 700 for Asia & Pacific based fellows. More information ---------------- For more information about the key dates, eligibility and selection criteria, please visit: https://2020.apricot.net/fellowship/overview/ General Guidelines ------------------ To help with your application, please provide the information asked for. Personal CVs and employer mission statements are not suitable answers to any of the questions. Applicants should also seek approval from their employers before applying, as this will avoid disappointment later on. We look forward to receiving your application! Best wishes, Rupesh Shrestha, Aftab Siddiqui, Philip Smith APRICOT Fellowship Committee Chairs -- _______________________________________________ pacnog mailing list pacnog(a)pacnog.org https://mailman.apnic.net/mailman/listinfo/pacnog

1 0

Spoofer Report for NZNOG for Sep 2019
by CAIDA Spoofer Project 08 Oct '19

08 Oct '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Sep 2019: ASN Name Fixed-By 55850 TRUSTPOWERLTD 2019-09-18 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2019: ASN Name First-Spoofed Last-Spoofed 4768 VFNZ-INET 2019-09-14 2019-09-14 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Call for Papers - NZNOG 2020 conference
by Richard Nelson 11 Sep '19

11 Sep '19

Yes it is that time again - plan your talks... The NZNOG trustees invite papers for the 17th annual NZNOG conference, to be hosted at the Rydges Latimer Hotel in central Christchurch on 30 and 31 Jan 2019. With the conference there will be a three day Workshop 27-29 Jan and a day of tutorials on 29 Jan. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in talks that involve real world deployment experience, particularly in New Zealand. Submit a paper: Presenters are invited to submit talk proposals for consideration by Monday 28 Oct (Labour day). Please provide your talk title, a short presenter bio and an abstract of the talk. Abstracts should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements you need to let us know at submission time. This year conference registration for accepted presenters will be free. To submit your paper please e-mail: talks(a)nznog.org Proposals will be evaluated on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/nznog-2020/call-for-papers-2020 For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

A very interesting presentation from NLNOG
by Mark Prior 08 Sep '19

08 Sep '19

Do yourself a favour and spend some time reading this presentation. <https://nlnog.net/static/nlnogday2019/3_NLNOG_day_2019_Erik_Bais_Working_un…> Mark.

3 2

Re: A very interesting presentation from NLNOG
by Scott Weeks 06 Sep '19

06 Sep '19

--- mrp(a)mrp.net wrote: From: Mark Prior <mrp(a)mrp.net> Do yourself a favour and spend some time reading this presentation. <https://nlnog.net/static/nlnogday2019/3_NLNOG_day_2019_Erik_Bais_Working_un…> -------------------------------------------- I learned this lesson long ago. It was really important for my mental health to do what it says. Try it. scott _______________________________________________ NZNOG mailing list -- nznog(a)list.waikato.ac.nz To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz

1 0

Invitation to participate in DMARC bootcamp
by Save Vocea 02 Sep '19

02 Sep '19

Dear NZNOG list members, (Apologies for any cross-posts as I’ve shared in regional NOG lists as well) Just thought I’d share this here in case there are interested ppl/orgs from NZ that want to join. Please read below. Regards, Save Vocea (ICANN.org staff in Oceania) ---<start>--- Link for registration: https://mailchi.mp/1833debd40eb/dmarcbootcamp On September 9th, GCA will start a 6-week DMARC Bootcamp. This bootcamp will guide participants to implement a DMARC - an effective way to limit the spoofing of email from protected domains. This bootcamp will guide participants to implement policy level of “none” after becoming acquainted with DMARC within the first few weeks. By the end of the bootcamp, participants will have enough information and confidence to move to the highest DMARC policy level of “reject” immediately or within a few months. DMARC is considered the industry standard for email authentication to prevent attacks in which malicious third parties send harmful email using a counterfeit address. DMARC stops email impersonation - by implementing DMARC, domains lower the odds of their domains being spoofed and used for phishing attacks on recipients. The result of a domain not implementing any form of DMARC policy is exposing its recipients to possible phishing attacks and, unsurprisingly, 91% of all cyber-attacks begin with a phishing email. Since June 2016, the Global Cyber Alliance (GCA) has been working to accelerate adoption of DMARCthrough advocacy, by providing a set of easy-to-use tools, and campaigns to drive deployment. GCA also measured the economic impact of DMARC. In just a few short years, GCA’s DMARC initiative has resulted in more than 5,700 organizations across more than 180 countries adopting DMARC. This has led to estimated financial benefits of more than $19 Million USD in 2018 across a diverse array of industries and governments. Moreover, the $19M estimate is merely from GCA’s activity. GCA’s other partners, including nonprofit organizations, commercial vendors, governments, and enterprises are also deploying and supporting the deployment of DMARC. For these organizations, the most-affected 1% of them will save $302,000 per year solely from reducing business email compromise (BEC) through DMARC, even assuming only 1% of BEC emails lead to action. If that number grows to 5%, the loss reduction for that 1% is $1.3M per year. Adding that up across the Internet is a big number, and that is from BEC losses alone. Starting September 9, GCA will run a 6 weeks bootcamp to enable organizations to learn about DMARC and support them in its implementation. Every step of the way, GCA and partners will assist with resources and guidance, including multiple webinars and demonstrations. (Please note that the below is subject to change and additional webinars and resources may be added as needed) • Timings for Webinars: Wednesday of each week o 7am EST (12pm BST, 1pm Paris), o 12pm EST (9am PST, 5pm BST, 6pm Paris) , o 12am EST (12pm Singapore, 2pm Sydney, AU) The agenda will be as follows: Weeks 1-2: Getting Started Overview of DMARC, SPF and DKIM Weeks 3-4: Time to Implement! Demonstrations on how to implement DMARC on Windows DNS, BIND and a Cloud-based DNS Provider. Weeks 5-6: On Going Management: Analyze, Review and Adjust What to look for in DMARC reports and what needs to be adjusted before moving to an enforcement policy More details on the modules are here: Weeks One-Two: Getting Started Sept 10th - Bootcamp introduction and DMARC: An Overview (60 min) This is the first webinar of the DMARC Bootcamp series. We will provide a brief overview of the bootcamp and then an overview of DMARC. Sept 18th - What are SPF and DKIM? (60 min) In this session we will be going over SPF and DKIM. We’ll cover the basics and options of performing DKIM key generation and signing. Weeks 3-4: Time to Implement! Sept 24 and Sept 30 - DMARC Technical Details and Windows DNS (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on Windows DNS. Sept 25 and Oct 2 - DMARC Technical Details and BIND (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on BIND server (Linux). Sept 26 and Oct 3 - DMARC Technical Details and Cloud DNS (60 min) In this session we will go over each of the tags for a DMARC policy and then provide a demonstration on how to create the DNS records for SPF, DKIM and DMARC on Google Cloud DNS and 1&1.com<http://1.com>. Weeks 5-6: On Going Management: Analyze, Review and Adjust We will have multiple webinars from DMARC partners regarding DMARC reporting and next steps. Date and times are being set for these. Additional information and links will be forthcoming as the bootcamp advances. Please register for the bootcamp in order to receive the link for all of the webinars. Sign up to join the bootcamp and get updates about our Webinars and other resources as they become available. Please join us by registering at https://mailchi.mp/1833debd40eb/dmarcbootcamp . If you have any questions, contact gca-dmarc(a)globalcyberalliance.org<mailto:gca-dmarc(a)globalcyberalliance.org> .

1 0