- NZNOG - lists.nznog.org

NZRR Route Registry Update
by NZRR Database Notifications 28 Feb '10

28 Feb '10

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS9245 descr: advertised to AS9439 by Compass Communications Ltd - AS9245 members: 203.152.96.0/19^19-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 117.104.176.0/21^21-29, 123.108.144.0/21^21-29, 202.174.6.0/23^23-29, 202.27.135.0/24^24-29, 202.36.121.0/24^24-29, 202.36.157.0/24^24-29, 202.37.112.0/24^24-29, 202.37.198.0/24^24-29, 202.37.234.0/24^24-29, 203.30.174.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)compass.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20091210 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS9245 descr: advertised to AS9439 by Compass Communications - AS9245 members: 182.48.128.0/19^19-29, 203.152.96.0/19^19-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 117.104.176.0/21^21-29, 202.174.6.0/23^23-29, 202.27.135.0/24^24-29, 202.36.121.0/24^24-29, 202.36.157.0/24^24-29, 202.37.112.0/24^24-29, 202.37.198.0/24^24-29, 202.37.234.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: antonio.pavletich(a)compass.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20100301 source: NZRR ------------------------------------------------------------

1 0

New Zealand Network Operators' Group
by Donald Neal 28 Feb '10

28 Feb '10

The New Zealand Network Operators' Group The NZNOG mailing list exists to facilitate discussion among operators of networks in New Zealand on matters relevant to network operators as described in the list's Acceptable Use Policy. That policy appears later in this posting. The NZNOG Trust is registered as a charitable entity under the Charities Act. The trust exists to provide the legal framework needed to do jobs like operating the bank account which holds the money which allows our annual conferences to happen. Other than the trustees, the NZNOG does not have a formal membership. Conference NZNOG holds New Zealand's only annual technical networking conference. See http://drpeering.net/a/Ask_DrPeering/Entries/2010/2/1_NZNOG_2010.html or http://2010.nznog.org/ to see what you missed. If you're interested in hosting or helping with a conference in 2011 or 2012, this would be a good time to put your hand up. Other Meetings See http://thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.nznog.org/?page_id=6 for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://www.nzix.net/ for details of exchanges in operation. About This Mailing List This list has around 1100 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. You may choose to receive postings as they come in, or just to receive daily "digests". See the bottom of the page http://list.waikato.ac.nz/mailman/listinfo/nznog/ to change the form in which you receive postings. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of APN Online, Citylink, and The University of Waikato. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/pipermail/nznog/ . Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins -- Donald Neal | I don't approve of gambling. I'll just | spend my time in the bar. High Performance Computing | - NZNOG 2010 attendee The University of Waikato |

1 0

iSERVE support spamming NZNOG posters - please stop the madness!
by Dobbins, Roland 27 Feb '10

27 Feb '10

Whoever own this, please stop it from autoresponding to NZNOG messages, yes? Begin forwarded message: > From: iSERVE Support <support(a)iserve.co.nz> > Date: February 28, 2010 10:45:02 AM GMT+07:00 > To: "Dobbins, Roland" <rdobbins(a)arbor.net> > Subject: RE: [Ticket #1752887] RE: [nznog] Stateful firewalls > > > Hi, > > This is a quick, automatically generated email to let you know that we have got your email, and our team will get on to it just as soon as they can. > > If you need to get in touch with us in the mean time about the same issue please quote the ticket number or simply reply to this email. > > Thanks, > iSERVE Support > > > > > ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> Injustice is relatively easy to bear; what stings is justice. -- H.L. Mencken

3 2

Re: [nznog] [AusNOG] RIPE NCC Position On The ITU IPv6 Group
by Skeeve Stevens 27 Feb '10

27 Feb '10

As usual Mark, your contributions are unbiased and well thought out. ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin.com/in/skeeve ; facebook.com/eintellego -- NOC, NOC, who's there? > -----Original Message----- > From: Mark Smith > [mailto:nanog(a)85d5b20a518b8f6864949bd940457dc124746ddc.nosense.org] > Sent: Saturday, 27 February 2010 1:24 PM > To: Skeeve Stevens > Cc: apnic-talk(a)apnic.net; ausnog(a)ausnog.net; nznog; pacnog(a)pacnog.org > Subject: Re: [AusNOG] RIPE NCC Position On The ITU IPv6 Group > > On Sat, 27 Feb 2010 12:08:19 +1100 > Skeeve Stevens <Skeeve(a)eintellego.net> wrote: > > > This is an FYI for those interested. Btw, RIPE NCC is the European > version of APNIC for those that don't know. > > > > The ITU are looking at bypassing the RIR's (Ripe, APNIC, ARIN, > AFRINIC, LACNIC) and becoming their own numbering authority. Clearly > this is not the desired option as the structure already exists for > exactly what they want to do, but rather than regionally, they want to > do it per country.... for who knows what reason. > > > > Because they're bellheads. > > > -- > > Skeeve Stevens, CEO/Technical Director > > eintellego Pty Ltd - The Networking Specialists > > skeeve(a)eintellego.net / www.eintellego.net > > Phone: 1300 753 383, Fax: (+612) 8572 9954 > > Cell +61 (0)414 753 383 / skype://skeeve > > www.linkedin.com/in/skeeve ; facebook.com/eintellego > > -- > > NOC, NOC, who's there? > > > > > > -----Original Message----- > > From: admin-bounces(a)tuenti.com [mailto:admin-bounces(a)tuenti.com] On > Behalf Of Axel Pawlik > > Sent: Friday, 26 February 2010 3:20 AM > > To: ncc-announce(a)ripe.net > > Subject: [Admin] [members-discuss] [ncc-announce] RIPE NCC Position > On The ITU IPv6 Group > > > > Dear Colleagues, > > > > As you may be aware, the International Telecommunication Union's > (ITU) > > Telecommunication Standardization Bureau (TSB) has convened an ITU > > IPv6 Group, the first meeting of which will be held on 15-16 March > > 2010 in Geneva, Switzerland. Information on this group is available > at: > > http://www.itu.int/ITU-T/othergroups/ipv6/ > > > > Among the group's Terms of Reference are the following: > > > > * To draft a global policy proposal for the reservation of a large > > IPv6 block, taking into consideration the future needs of developing > > countries (as outlined in paragraph 23 of ITU document C09/29). > > > > * To further study possible methodologies and related > > implementation mechanisms to ensure 'equitable access' to IPv6 > > resource by countries. > > > > * To further study the possibility for ITU to become another > > Internet Registry, and propose policies and procedures for ITU to > > manage a reserved IPv6 block. > > > > * To further study the feasibility and advisability of > implementing > > the CIR [Country Internet Registry] model for those countries who > > would request national allocations. > > > > The ITU IPv6 Group is open to ITU Member States and Sector Members of > > ITU-T and ITU-D. RIRs that are not members have also been extended an > > invitation to participate. > > > > IPv6 address policy is clearly of critical importance to the RIPE NCC > > membership, and the unsympathetic implementation of any of the Terms > > of Reference stated above would have serious impact on the global IP > > address distribution environment. > > > > Members of RIPE NCC staff will be participating in this meeting of > the > > ITU IPv6 Group to represent the interests of our members and > community. > > > > The position of the RIPE NCC is based on support for smooth and > > reliable working of the Internet globally, and for the bottom-up, > open > > policy development process that allows for all stakeholders, > including > > business, government and the technical community, to participate. > > > > Some of the issues addressed in the Terms of Reference listed above > > are a cause for concern because they could directly affect the RIPE > > NCC operations as a Regional Internet Registry (RIR). Therefore, the > > RIPE NCC position on the Terms of Reference is as follows: > > > > * The needs of developing economies in IP address policy are > > important. Network operators in these economies have fair and equal > > access to IPv6 resources from the Regional Internet Registries > (RIRs), > > and to the Policy Development Processes in their RIR and globally. > > Each of the RIRs has been allocated an equal block of IPv6 to > > distribute to networks in their region. (eg. AfriNIC has been > > allocated the same sized block of IPv6 as the RIPE NCC). > > > > * IPv6 allocations made by RIRs to date amount to the equivalent of > > 500 times the size of the entire IPv4 address pool, allocated to > > networks in over 150 economies. > > > > * If a significant sector in the Internet community feels that the > > "reservation of a large IPv6 block" for "the future needs of > > developing countries" is warranted, the open, bottom-up Policy > > Development Processes (PDPs) of the RIRs provide an appropriate forum > > in which to argue that case and develop such a policy. > > > > * The RIRs, as the recognised stewards of Internet Number Resources, > > are working, individually, jointly, and with invited experts, to > > engage the ITU membership. We have closely followed discussions in > the > > ITU to date. The RIPE NCC does not believe that there are any > problems > > that would be solved by the shift to a country-based allocation > system > > or the installation of the ITU as an Internet Registry. > > > > The purpose of this email is to ensure that all RIPE NCC members are > > informed of the RIPE NCC's participation in this ITU IPv6 Group, and > > our position. If you have any comments or questions regarding this > > information, please send an email to <ncc(a)ripe.net>. > > > > Kind regards, > > > > Axel Pawlik > > Managing Director > > RIPE NCC > > > > > > > > > > ---- > > If you don't want to receive mails from the RIPE NCC Members Discuss > list, please log in to your LIR Portal account at: > http://lirportal.ripe.net/ > > First click on General and then click on Edit. > > At the bottom of the Page you can add or remove addresses. > > _______________________________________________ > > AusNOG mailing list > > AusNOG(a)lists.ausnog.net > > http://lists.ausnog.net/mailman/listinfo/ausnog

2 1

Re: [nznog] [pacnog] RIPE NCC Position On The ITU IPv6 Group
by Scott Weeks 27 Feb '10

27 Feb '10

Can we not cross-post? Some of us are getting 80 gazillion copies of every email. scott Only cross-posting once.

1 0

Re: [nznog] [apnic-talk] [AusNOG] RIPE NCC Position On The ITU IPv6 Group
by Jeffrey A. Williams 27 Feb '10

27 Feb '10

2 1

RIPE NCC Position On The ITU IPv6 Group
by Skeeve Stevens 26 Feb '10

26 Feb '10

This is an FYI for those interested. Btw, RIPE NCC is the European version of APNIC for those that don't know. The ITU are looking at bypassing the RIR's (Ripe, APNIC, ARIN, AFRINIC, LACNIC) and becoming their own numbering authority. Clearly this is not the desired option as the structure already exists for exactly what they want to do, but rather than regionally, they want to do it per country.... for who knows what reason. -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin.com/in/skeeve ; facebook.com/eintellego -- NOC, NOC, who's there? -----Original Message----- From: admin-bounces(a)tuenti.com [mailto:admin-bounces(a)tuenti.com] On Behalf Of Axel Pawlik Sent: Friday, 26 February 2010 3:20 AM To: ncc-announce(a)ripe.net Subject: [Admin] [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group Dear Colleagues, As you may be aware, the International Telecommunication Union's (ITU) Telecommunication Standardization Bureau (TSB) has convened an ITU IPv6 Group, the first meeting of which will be held on 15-16 March 2010 in Geneva, Switzerland. Information on this group is available at: http://www.itu.int/ITU-T/othergroups/ipv6/ Among the group's Terms of Reference are the following: * To draft a global policy proposal for the reservation of a large IPv6 block, taking into consideration the future needs of developing countries (as outlined in paragraph 23 of ITU document C09/29). * To further study possible methodologies and related implementation mechanisms to ensure 'equitable access' to IPv6 resource by countries. * To further study the possibility for ITU to become another Internet Registry, and propose policies and procedures for ITU to manage a reserved IPv6 block. * To further study the feasibility and advisability of implementing the CIR [Country Internet Registry] model for those countries who would request national allocations. The ITU IPv6 Group is open to ITU Member States and Sector Members of ITU-T and ITU-D. RIRs that are not members have also been extended an invitation to participate. IPv6 address policy is clearly of critical importance to the RIPE NCC membership, and the unsympathetic implementation of any of the Terms of Reference stated above would have serious impact on the global IP address distribution environment. Members of RIPE NCC staff will be participating in this meeting of the ITU IPv6 Group to represent the interests of our members and community. The position of the RIPE NCC is based on support for smooth and reliable working of the Internet globally, and for the bottom-up, open policy development process that allows for all stakeholders, including business, government and the technical community, to participate. Some of the issues addressed in the Terms of Reference listed above are a cause for concern because they could directly affect the RIPE NCC operations as a Regional Internet Registry (RIR). Therefore, the RIPE NCC position on the Terms of Reference is as follows: * The needs of developing economies in IP address policy are important. Network operators in these economies have fair and equal access to IPv6 resources from the Regional Internet Registries (RIRs), and to the Policy Development Processes in their RIR and globally. Each of the RIRs has been allocated an equal block of IPv6 to distribute to networks in their region. (eg. AfriNIC has been allocated the same sized block of IPv6 as the RIPE NCC). * IPv6 allocations made by RIRs to date amount to the equivalent of 500 times the size of the entire IPv4 address pool, allocated to networks in over 150 economies. * If a significant sector in the Internet community feels that the "reservation of a large IPv6 block" for "the future needs of developing countries" is warranted, the open, bottom-up Policy Development Processes (PDPs) of the RIRs provide an appropriate forum in which to argue that case and develop such a policy. * The RIRs, as the recognised stewards of Internet Number Resources, are working, individually, jointly, and with invited experts, to engage the ITU membership. We have closely followed discussions in the ITU to date. The RIPE NCC does not believe that there are any problems that would be solved by the shift to a country-based allocation system or the installation of the ITU as an Internet Registry. The purpose of this email is to ensure that all RIPE NCC members are informed of the RIPE NCC's participation in this ITU IPv6 Group, and our position. If you have any comments or questions regarding this information, please send an email to <ncc(a)ripe.net>. Kind regards, Axel Pawlik Managing Director RIPE NCC ---- If you don't want to receive mails from the RIPE NCC Members Discuss list, please log in to your LIR Portal account at: http://lirportal.ripe.net/ First click on General and then click on Edit. At the bottom of the Page you can add or remove addresses.

1 0

Re: [nznog] [AusNOG] MEDIA RELEASE FROM EINTELLEGO - eintellego encourages APNIC members to vote for local representative
by Shain Singh 25 Feb '10

25 Feb '10

On Thu, Feb 25, 2010 at 8:00 AM, Mark Smith < nanog(a)85d5b20a518b8f6864949bd940457dc124746ddc.nosense.org> wrote: > On Wed, 24 Feb 2010 17:50:31 +1100 > Skeeve Stevens <Skeeve(a)eintellego.net> wrote: > > > Hey all, > > > > This is a media release which is specifically of interest to the ANZ*NOG > lists. > > > > Did you really need to send a Media Release to this list announce your > opinion here? Just stating it would have been fine. I've > understood lists like this one are to be corporate PR/marketing > free zones, and media releases are definitely corporate PR/marketing. > > > I encourage all APNIC members to not hesitate to support Jonny Martin in > his run for the APNIC EC. > > > > If you aren't interested in this post, please just devnull it. > > > > Maybe next time you find yourself writing that, think about whether > you really should be sending what you've written. You're basically > saying to everybody to use the delete key/button if necessary - and if > people on this list know how the Internet works they probably already > know how to delete emails, and don't need to be told what do with > ones they aren't interested in ... > > +1 Manila is also spelt incorrectly in the press release.. Lucky it's for an ANZ rep and not a Filipino one. </pedantic> -- Shaineel Singh e: shain.singh(a)gmail.com p: +61 422 921 951 -- "Too many have dispensed with generosity to practice charity" - Albert Camus

1 0

MEDIA RELEASE FROM EINTELLEGO - eintellego encourages APNIC members to vote for local representative
by Skeeve Stevens 25 Feb '10

25 Feb '10

Hey all, This is a media release which is specifically of interest to the ANZ*NOG lists. I encourage all APNIC members to not hesitate to support Jonny Martin in his run for the APNIC EC. If you aren't interested in this post, please just devnull it. ...Skeeve MEDIA RELEASE For Immediate Release eintellego encourages APNIC members to vote for local representative SYDNEY, Feb 24, 2010 - eintellego is encouraging all APNIC members in Australia and New Zealand to vote in the upcoming elections for the Executive Committee being held in Kuala Lumpur, Malaysia at the APNIC 29 member meeting early in March 2010. At each APNIC meeting there are hundreds of Australian and New Zealand members of APNIC who fail to exercise their voting power. At APNIC 28 held in Manilla, the Australia and New Zealand internet communities rallied and were successful in getting James Spenceley, CEO of Vocus Communications elected to the EC. For some years now the Australian and New Zealand communities have been under-represented and as we have the opportunity to get additional representation, eintellego is encouraging all members to either vote, or assign a proxy vote to someone who is attending the conference. eintellego is fully supporting Jonny Martin, a NZ citizen and Internet Analyst with Packet Clearing House, as a nominee for the APNIC EC. Jonny Martin started work in the Internet Industry with Telecom New Zealand in 1998 working on access technologies. After Telecom Jonny held senior roles with ISPs in NZ such as CityLink and FX Networks working primarily on fibre optic deployments. In his spare time and holidays, Jonny assists with training at events such as Apricot, SANOG and NZNOG and has been actively involved with the NZ Internet Community for many years. Since 2006, Jonny has been a Councillor of InternetNZ, the body which manages the .nz namespace and .nz registry. eintellego has had the pleasure of working with Jonny and hopes that all APNIC members in the region will rally to help get him elected. Assigning proxy votes or voting online closes on the 3rd of March 2010 at 9am (KL time) with the election being held on the 5th of March. If any members are considering casting their vote and need assistance, they can contact APNIC directly on +617 3858 3100 or helpdesk(a)apnic.net Skeeve Stevens, CEO of eintellego will be onsite at the conference and election, and any members who want to assign a proxy are able to complete a pre-filled proxy form available at www.eintellego.net/apnicec29proxy.pdf<http://www.eintellego.net/apnicec29proxy.pdf>. Please make sure that this form is completed by the official 'Corporate Contact' for your APNIC membership. About eintellego eintellego is a specialist network and systems integrator to the ISP industry and wider corporate world, where cutting edge networking is required. eintellego operates all across Australia, New Zealand, Asia and the Pacific region. http://www.eintellego.net/ Editorial contacts: Skeeve Stevens, CEO +61414 753 383 skeeve(a)eintellego.net eintellego Pty Ltd - www.eintellego.net -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin.com/in/skeeve ; facebook.com/eintellego -- NOC, NOC, who's there? Disclaimer: Limits of Liability and Disclaimer: This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. eintellego Pty Ltd and each legal entity in the Tefilah Pty Ltd group of companies reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. Any reference to costs, fee quotations, contractual transactions and variations to contract terms is subject to separate confirmation in writing signed by an authorised representative of eintellego. Whilst all efforts are made to safeguard inbound and outbound e-mails, we cannot guarantee that attachments are virus-free or compatible with your systems and do not accept any liability in respect of viruses or computer problems experienced.

2 1

Re: [nznog] Stateful firewalls
by Joel Wiramu Pauling 24 Feb '10

24 Feb '10

On 25 February 2010 22:30, Joel Wiramu Pauling <aenertia(a)aenertia.net> wrote: >> The place do to this is at the edges via routing policies and stateless ACLs, not in firewalls. >> >> And, no, the largest enterprise firewalls make all these marketing claims about the numbers they can handle, but the reality is quite different - having spent the better part of a decade working for the largest vendor of firewalls in the world, I can assure you of that. >> There is a trend in router manufacturers to offer flow classification add-in modules for doing service differentiation. While not state-full firewalls as such, they do deep packet inspection and flow tagging in much the same way. These are designed to scale with the routing capacity's. And they definitely exist. Also there is currently a bunch of cool pf kernalspace extensions being added to openbsd to allow similar offload to GPU's which would bring this sort of ability to consumer level hardware. This is a little off topic from the original context however. -JoelW

1 0