- NZNOG - lists.nznog.org

Re: [nznog] Fwd: Notification of web harvest & consultation report
by Scott Weeks 15 Apr '10

15 Apr '10

--- Gordon.Paynter(a)natlib.govt.nz wrote: From: "Gordon Paynter" <Gordon.Paynter(a)natlib.govt.nz> Information abut the user agent is available from http://bit.ly/nlnzwebharvest and we don't yet know what IP addresses will be used. We have no plans to use the If-Modified-Since (or Etag, or similar approaches) for comparison with the 2008 harvest. If you have concerns about how the crawler may behave on specific websites, feel free to email us directly at web-harvest-2010(a)natlib.govt.nz or get in touch via our feedback form. ------------------------------------------------- Does it honor the robots.txt file? scott ---------------- ----------------- -----------------

3 2

Re: [nznog] Fwd: Notification of web harvest & consultation report
by Scott Weeks 15 Apr '10

15 Apr '10

--- regan.murphy(a)oasystems.co.nz wrote: From: Regan Murphy <regan.murphy(a)oasystems.co.nz> ***** Information abut the user agent is available from http://bit.ly/nlnzwebharvest and we don't yet know what IP addresses will be used. ***** Fairly sure the robots.txt was mentioned in the URL provided..... ! --------------------------------------------------------- Yep, apologies. Didn't read enough. I blame it on the pain medication I'm currently taking... :-) scott --------------- ---------- ---------------

1 0

Leakage to 1.0.0.0/8 - comment on known source
by Timothy Goddard 14 Apr '10

14 Apr '10

Hello, I just joined this group today so wasn't part of the earlier discussion, but saw the mention of leakage in to 1.0.0.0/8 earlier. I thought I'd bring up a particular issue I've seen in the past involving the address 1.0.0.0 . The issue is that the DLink DSL-502T router as shipped in large numbers by Xtra has a flaw in the DNS resolver. If a DNS request for an AAAA record is sent to the router, I've observed it sending back a malformed response packed. This would only be a minor irritation, except that it seems to corrupt the DNS cache such that subsequent requests for A records return the address 1.0.0.0 . I have observed this occurring at two different premises, both with this same router and both having received it as part of Xtra subscription packages. The issue was reported through the standard service desk, but I was unsure of where else it could be reported to. Of course, even if fixed it is unlikely that many shipped units would be updated. Just thought I'd let people know that we have a possibly significant national source of this traffic. While probably fairly low in volume at the moment, it would be entirely possible for example that an update to Windows could trigger a sudden increase. Cheers, Tim

6 8

Fwd: Notification of web harvest & consultation report
by Gordon Paynter 14 Apr '10

14 Apr '10

Hi all: Many of you were affected by the 2008 web harvest or have expressed an interest in the 2010 harvest so I am sending you the message below about the outcome of our recent consultation on the Options paper on the 2010 whole of domain web harvest. The decisions on the key issues raised are: Notification - The harvest is scheduled to begin on 12 May 2010. There will be a five-week notification period - The Library will use several channels to communicate about the harvest, including its corporate website, the LibraryTechNZ blog, a Twitter account, various mailing lists and forums, and media releases. Robots.txt - In 2008 the Library made the decision to ignore the robots.txt convention. - For the 2010 harvest, where a robots.txt file exists the harvester will honour robots.txt except when downloading images and other elements that are embedded in other web pages. - Website owners can set specific rules for the Library’s harvester, which will have the user agent string: NLNZHarvester2010 - If you have a very restrictive robots.txt file in place already, we would appreciate it if you could provide a more permissive rule for NLNZHarvester2010 to help us capture a complete copy of your website Location of harvester - After consultation with New Zealand telecom vendors we have decided to run the harvest from the United States using the Internet Archive’s hardware and network infrastructure, as we did in 2008. More information about these decisions is available from our website: http://www.natlib.govt.nz/about-us/current-initiatives/web-harvest-2010 http://www.natlib.govt.nz/catalogues/library-documents/web-harvest-consulta… Thanks to all of you have offered us advice in various fora over the last few months (and years). Gordon ...................... New Zealand web harvest 2010 More information at http://www.natlib.govt.nz/about-us/current-initiatives/web-harvest-2010 This account is run by Courtney Johnston (Web Manager) and Gordon Paynter (Programme Manager Digitisation)

5 7

Root Zone DNSSEC Deployment Technical Status Update
by Joe Abley 14 Apr '10

14 Apr '10

This is the fourth of a series of technical status updates intended to inform a technical audience on progress in signing the root zone of the DNS. RESOURCES Details of the project, including documentation published to date, can be found at http://www.root-dnssec.org/. We'd like to hear from you. If you have feedback for us, please send it to rootsign(a)icann.org. DOCUMENTATION The following draft document was recently published: - Resolver Testing with a DURZ - TCR - Proposed Approach to Root Key Management ICANN has begun the process of formally soliciting expressions of interest for volunteers from the technical community to act as Trusted Community Representatives. These volunteers will witness cryptographic key ceremonies and also carry out various important roles relating to KSK key management. For more information, see: http://www.icann.org/en/announcements/announcement-12apr10-en.htm Expressions of interest can be submitted here: http://www.root-dnssec.org/tcr/ DEPLOYMENT STATUS KSR exchanges continue between production platforms at VeriSign and ICANN. Build-out of KSK Key Ceremony facilities at ICANN continues, and both facilities (east- and west-coast USA) are expected to be ready on schedule. The incremental deployment of DNSSEC in the Root Zone is being carried out first by serving a Deliberately Unvalidatable Root Zone (DURZ), and subsequently by a conventionally signed root zone. Discussion of the approach can be found in the document "DNSSEC Deployment for the Root Zone", as well as in the technical presentations delivered at RIPE, NANOG, IETF and ICANN meetings. Twelve of the thirteen root servers have now made the transition to the DURZ. No harmful effects have been identified. Some early analysis of packet captures from many root servers surrounding each event was recently presented at the IETF meeting in Anaheim, CA, USA and can be found with other presentation materials at <http://www.root-dnssec.org/presentations/>. PLANNED DEPLOYMENT SCHEDULE Already completed: 2010-01-27: L starts to serve DURZ 2010-02-10: A starts to serve DURZ 2010-03-03: M, I start to serve DURZ 2010-03-24: D, K, E start to serve DURZ 2010-04-14: B, H, C, G, F start to serve DURZ To come: 2010-05-05: J starts to serve DURZ 2010-07-01: Distribution of validatable, production, signed root zone; publication of root zone trust anchor (Please note that this schedule is tentative and subject to change based on testing results or other unforeseen factors.) A more detailed DURZ transition timetable with maintenance windows can be found in the document "DNSSEC Deployment for the Root Zone", the most recent draft of which can be found on the project web page at <http://www.root-dnssec.org/>.

1 0

advertisements of 14/8 and 223/8
by Geoff Huston 13 Apr '10

13 Apr '10

Hi, APNIC and NTT are cooperating in a project to investigate the properties of unwanted traffic that is being sent to specific destinations in the address blocks of 14.0.0.0/8 and 223.0.0.0/8. These address blocks have been recently allocated to APNIC from the IANA, and APNIC and NTT are wanting to undertake this investigation prior to the commencement of ordinary allocations. Accordingly, APNIC has authorized AS38639 to advertise routes for 14.0.0.0/8 and 223.0.0.0/8 from now until 26 April 2010, and requests that AS38639's peers and upstreams accept this as a legitimate routing advertisement. thanks, Geoff Huston APNIC

1 0

APNIC Allocated 14/8, 223/8 today
by Skeeve Stevens 13 Apr '10

13 Apr '10

Hey all, As the subject says, APNIC was allocated 14/8 and 223/8 today... which does seems a little close after 1/8 and 27/8 in January 2010 - since 1/8 hasn't started, I'm surprised about the new ones. Not sure why I haven't seen any announcements about it... just thought I'd break the news... ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin.com/in/skeeve ; facebook.com/eintellego -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

1 0

14/8 and 223/8 allocated to APNIC
by Leo Vegoda 13 Apr '10

13 Apr '10

Hi, The IANA IPv4 registry has been updated to reflect the allocation of two /8 IPv4 blocks to APNIC in April 2010: 14/8 and 223/8. You can find the IANA IPv4 registry at: http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.txt Please update your filters as appropriate. The IANA free pool contains 20 unallocated unicast IPv4 /8s. Regards, Leo Vegoda Number Resources Manager, IANA ICANN

1 0

Trusted Community Representatives
by Joe Abley 12 Apr '10

12 Apr '10

Colleagues, ICANN and VeriSign, with the support of the US Department of Commerce, continue to work towards DNSSEC deployment in the root zone of the DNS. ICANN is looking for Trusted Community Representatives (TCRs) to help us carry out various technical security operations. An announcement can be found here: <http://www.icann.org/en/announcements/announcement-12apr10-en.htm> You can submit an expression of interest here: <http://www.root-dnssec.org/tcr/> DNSSEC key ceremonies are carried out in English. TCRs must therefore have a good understanding of written and spoken English. Regards, Joe

1 0

Fwd: [sig-policy] Report on traffic directed to 1.0.0.0/8
by Andy Linton 12 Apr '10

12 Apr '10

-------- Original Message -------- Subject: [sig-policy] Report on traffic directed to 1.0.0.0/8 Date: Thu, 8 Apr 2010 11:18:31 +1000 From: Geoff Huston <gih(a)apnic.net> To: APNIC TALK <apnic-talk(a)lists.apnic.net> CC: sig-policy(a)lists.apnic.net Hi, Network 1.0.0.0/8 has been assigned by IANA to APNIC on the 19th January 2010, for use for as public unicast space for further address allocations and assignments. Before APNIC commences allocations and assignments from this space, APNIC has undertaken a study into 1.0.0.0/8. The particular question under investigation here is the extent to which addresses in network 1.0.0.0/8 are an "attractor" for unwanted traffic. In particular, is there a significant level of "leakage" of supposedly private use traffic directed to addresses in 1.0.0.0/8 that leak into the public Internet? The report on this study is now available at http://www.potaroo.net/studies/1slash8/1slash8.html, and two recommendations are included in this report regarding reservations of particular address blocks and further followup studies. We would be interested in any comments on this report and its recommendations. Please followup to apnic-talk(a)lists.apnic.net, or directly to us at research(a)apnic.net if you prefer. thanks, Geoff Huston Chief Scientist, APNIC and George Michealson Senior R&D Scientist, APNIC * sig-policy: APNIC SIG on resource management policy * _______________________________________________ sig-policy mailing list sig-policy(a)lists.apnic.net http://mailman.apnic.net/mailman/listinfo/sig-policy

9 10