- NZNOG - lists.nznog.org

2007 Conference Videos
by Richard Naylor 22 Dec '09

22 Dec '09

Video of talks from the 2007 NZNOG Conference is now available at http://www.r2.co.nz/20070131/ Sorry for the delay. The talks were shot to tape, which need to be captured, edited, transcoded and finally a big web page to cover it all. Theres 30 videos covering over 24 hours (something like 20 GB of server space). I have decided that its the video you all want, so haven't made any MP3s this time. Beat me up if you want MP3s. The video is available for both streaming (2 formats) and download (1 format). Theres a flash player and windows player option. And if you ever wondered if you can have 30 embedded players in a web page - the answer is yes - they all work at the same time. If your network and CPU can handle it. Don't watch them all at once..... and let me know if you find any issues. I haven't watched them all the way thru. We just processed them. A big thanks to James at InspireNet who paid for the video guys (not R2) who shot it with some nice cameras. Richard

17 24

Re: [nznog] New Conficker Reports based on ASN and Country
by Stu Fleming 21 Dec '09

21 Dec '09

> Message: 3 > Date: Wed, 16 Dec 2009 18:48:56 -0800 > From: "Barry Raveendran Greene" <bgreene(a)senki.org> > To: <nznog(a)list.waikato.ac.nz> > Subject: [nznog] New Conficker Reports based on ASN and Country > Message-ID: <001901ca7ec3$81a8b440$84fa1cc0$@org> > Content-Type: text/plain; charset="us-ascii" > > Hello Team, > > Shadowserver has new Conficker reports. This was instigated by internal > Conficker Working Group dialog. We are now set up to really see if > remediation is effective. As you can see in the data, Conficker is still > growing (A & B). This is concerning, which some are now starting to express > ... > > > > The report also has a country level listing by ASNs. It is not perfect, but > it makes it easier to see how New Zealand is doing: > > http://www.shadowserver.org/wiki/pmwiki.php/Infections/Conficker-NZ > Just to note that stats for AS38437 (WIC NZ) are being mis-reported by this service. They are including adjacent IP netblocks (in this case 120.89.79.0) rather than just the prefixes that we originate. So while we have normal background activity (from our own tracking), Conficker C stats are showing as 3%+, which would be cause for concern (I've had 3 people contact me about this in the last couple of days), but isn't actually happening. I've sent comment to the guys at Shadowserver, but it is worth signing up for the reports, even just to check that things are being reported correctly. Regards, Stu

1 0

NZRR Route Registry Update
by NZRR Database Notifications 21 Dec '09

21 Dec '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS45280 descr: Route set advertised to AS9560 by Horizon Pacific Group Limited - AS45280 members: 114.134.160.0/24^24-29, 114.134.176.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: bryan.tabb(a)horizonpacific.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20090615 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS45280 descr: advertised to AS9560 by Horizon Pacific - AS45280 members: 114.134.160.0/21^21-29, 114.134.168.0/22^22-29, 114.134.172.0/24^24-29, 123.100.106.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: bryan.tabb(a)horizonpacific.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20091223 source: NZRR ------------------------------------------------------------

1 0

NZNOG10 conference registrations open
by Gerard Creamer 21 Dec '09

21 Dec '09

NZNOG10 conference registrations are now open. http://2010.nznog.org/register Come and register yourself and all of your friends now. Consider giving those you love the gift of NZNOG this festive season... A polite reminder that payment this year is by Credit Card only. Regards, Gerard -- Netspace Services Limited http://www.netspace.net.nz Phone +64 4 917 8098 Mobile +64 21 246 2266 Level One, 220 Thorndon Quay, Thorndon PO Box 12-082, Thorndon, Wellington 6004, New Zealand

2 2

FW: Final phase of four-byte AS number policy begins 1 January 2010
by Skeeve Stevens 17 Dec '09

17 Dec '09

Hmmmm.. is this a good thing? I realise that few people go back for more ASN's after their initial one, but we are requesting them regularly for customers. What is the situation with carriers accepting them. Could a few transit providers on these lists comment on whether they are ready to handle 4byte AS Numbers in their BGP products. ...Skeeve -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin.com/in/skeeve ; facebook.com/eintellego -- NOC, NOC, who's there? -----Original Message----- From: Secretariat [mailto:apnic-no-reply(a)apnic.net] Sent: Friday, 18 December 2009 3:15 PM To: Skeeve Stevens Subject: Final phase of four-byte AS number policy begins 1 January 2010 _______________________________________________________________________ Final phase of four-byte AS number policy begins 1 January 2010 _______________________________________________________________________ >From 1 January 2010, APNIC will cease to make a distinction between four-byte only and two-byte only Autonomous System (AS) numbers. Instead, all AS numbers will be considered to be four-byte AS numbers. This change marks the third phase of the transition to four-byte AS numbers. For more information on the implementation phases of the four-byte AS number policy, please see "Policies for Autonomous System number management in the Asia Pacific region" section 6.3, "Timetable for moving from two-byte only AS numbers to four-byte AS numbers": http://www.apnic.net/policy/asn-policy.html#6.3 To learn more about how the transition to four-byte AS numbers may affect your network, see: http://icons.apnic.net/asn If you have any questions or need further assistance, please contact: helpdesk(a)apnic.net _______________________________________________________________________ APNIC Secretariat Asia Pacific Network Information Centre (APNIC) Tel: +61-7-3858-3100 PO Box 2131 Milton, QLD 4064 Australia Fax: +61-7-3858-3199 Level 1, 33 Park Road, Milton, QLD http://www.apnic.net _______________________________________________________________________

3 2

New Conficker Reports based on ASN and Country
by Barry Raveendran Greene 16 Dec '09

16 Dec '09

Hello Team, Shadowserver has new Conficker reports. This was instigated by internal Conficker Working Group dialog. We are now set up to really see if remediation is effective. As you can see in the data, Conficker is still growing (A & B). This is concerning, which some are now starting to express ... http://www.senki.org/?p=702 (like me) http://voices.washingtonpost.com/securityfix/2009/12/group_ids_hotbeds_of_co nficker.html (like Brian Krebs) http://www.darkreading.com/security/client/showArticle.jhtml?articleID=22200 2367 http://www.securityfocus.com/news/11568 We (Conficker Working Group) are asking all ASNs members to do your part to help remediate Conficker. If you are not getting "Conficker" feeds for all of your "constituents," please sign up at Shadowserver. The report also has a country level listing by ASNs. It is not perfect, but it makes it easier to see how New Zealand is doing: http://www.shadowserver.org/wiki/pmwiki.php/Infections/Conficker-NZ Barry ------------------ Shadowserver is happy to announce a new set of statistics and charts highlighting the widespread infection & propagation of Conficker. We thought it would be of interest to illustrate the depth and extent of how Conficker truly affects a worldwide scope of providers. While much public attention has faded since the widely publicized April 1st 2009 "attack date", it's quite evident that Conficker still maintains a huge foothold on many computer systems worldwide. Hopefully this report will again raise public awareness to a 6.5M node botnet and drive remediation efforts from the providers themselves, as well as the average computer user. Shadowserver hopes you find these stats and charts as interesting as we have. This is a dynamic page, so you can watch trends and remediation efforts over time. As always, we're interested in how folks use and benefit from our data and reports. Feel free to drop us a note anytime and give us your feedback. Shadowserver has posted a new blog about this at: http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091216 The Conficker stats and charts page can be found here: http://www.shadowserver.org/wiki/pmwiki.php/Stats/Conficker -- Andre' M. Di Mino - SemperSecurus The Shadowserver Foundation http://www.shadowserver.org Skype: sempersecurus AIM: sempersecurus "Make sure that nobody pays back wrong for wrong, but always try to be kind to each other and to everyone else." 1 Thessalonians 5:15_______________________________________________ Conficker mailing list Conficker(a)mail.shadowserver.org https://mail.shadowserver.org/mailman/listinfo/conficker

1 0

ISC working on a CGN Solution
by Skeeve Stevens 13 Dec '09

13 Dec '09

FYI. Anyone played with it yet? -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists skeeve(a)eintellego.net / www.eintellego.net Phone: 1300 753 383, Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 / skype://skeeve www.linkedin.com/in/skeeve ; facebook.com/eintellego -- NOC, NOC, who's there? -----Original Message----- From: Mark Andrews [mailto:marka(a)isc.org] Sent: Monday, 14 December 2009 9:14 AM To: Mark Newton Cc: nanog(a)nanog.org Subject: Re: Consumer Grade - IPV6 Enabled Router Firewalls. In message <D73FDB46-BF23-4825-89C6-51601D6221F3(a)internode.com.au>, Mark Newton writes: > Of course, all of this is predicated on the notion that CGNs will > actually exist. As far as I can tell they're all vapourware at the > moment. Comcast commissioned ISC to develop a working CGN. We are in the final release stages of our CGN product, AFTR. https://www.isc.org/software/aftr You can go and download it now it you want. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org

1 0

NZRR Route Registry Update
by NZRR Database Notifications 13 Dec '09

13 Dec '09

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus - AS4826 members: 118.92.0.0/15^15-29, 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 131.203.0.0/16^16-29, 141.243.0.0/16^16-29, 147.209.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 113.203.0.0/17^17-29, 203.60.128.0/17^17-29, 203.109.128.0/17^17-29, 112.141.0.0/18^18-29, 114.129.128.0/18^18-29, 118.127.0.0/18^18-29, 125.253.0.0/18^18-29, 203.60.64.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.173.128.0/18^18-29, 203.208.64.0/18^18-29, 58.96.128.0/19^19-29, 112.141.64.0/19^19-29, 113.192.0.0/19^19-29, 115.69.160.0/19^19-29, 118.127.64.0/19^19-29, 118.127.160.0/19^19-29, 119.15.0.0/19^19-29, 119.77.64.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 122.129.128.0/19^19-29, 123.50.128.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 125.254.64.0/19^19-29, 202.60.64.0/19^19-29, 202.62.128.0/19^19-29, 202.171.160.0/19^19-29, 203.60.32.0/19^19-29, 203.89.64.0/19^19-29, 203.96.192.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.173.192.0/19^19-29, 203.201.128.0/19^19-29, 210.56.224.0/19^19-29, 111.67.0.0/20^20-29, 112.109.64.0/20^20-29, 112.141.96.0/20^20-29, 113.20.0.0/20^20-29, 114.31.192.0/20^20-29, 114.111.128.0/20^20-29, 114.142.160.0/20^20-29, 115.146.64.0/20^20-29, 116.66.160.0/20^20-29, 117.55.224.0/20^20-29, 119.10.128.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.64.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.200.160.0/20^20-29, 122.201.80.0/20^20-29, 124.155.224.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 125.254.96.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.55.144.0/20^20-29, 202.68.160.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.79.160.0/20^20-29, 202.86.96.0/20^20-29, 202.93.160.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 203.60.16.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 110.44.24.0/21^21-29, 112.109.80.0/21^21-29, 112.141.112.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.141.96.0/21^21-29, 115.124.32.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.212.64.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 119.63.200.0/21^21-29, 119.63.216.0/21^21-29, 120.89.80.0/21^21-29, 121.101.136.0/21^21-29, 121.127.200.0/21^21-29, 122.49.200.0/21^21-29, 122.99.112.0/21^21-29, 122.102.96.0/21^21-29, 122.201.72.0/21^21-29, 123.108.144.0/21^21-29, 124.248.136.0/21^21-29, 125.213.160.0/21^21-29, 180.92.192.0/21^21-29, 180.94.232.0/21^21-29, 202.4.232.0/21^21-29, 202.27.192.0/21^21-29, 202.36.16.0/21^21-29, 202.46.136.0/21^21-29, 202.78.240.0/21^21-29, 202.126.80.0/21^21-29, 202.160.112.0/21^21-29, 202.169.16.0/21^21-29, 202.169.208.0/21^21-29, 202.191.8.0/21^21-29, 203.1.240.0/21^21-29, 203.60.8.0/21^21-29, 203.149.80.0/21^21-29, 203.161.136.0/21^21-29, 203.169.16.0/21^21-29, 203.170.8.0/21^21-29, 203.173.240.0/21^21-29, 203.174.16.0/21^21-29, 203.185.224.0/21^21-29, 203.190.208.0/21^21-29, 203.212.16.0/21^21-29, 210.9.136.0/21^21-29, 59.86.172.0/22^22-29, 59.86.176.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 110.50.16.0/22^22-29, 110.76.132.0/22^22-29, 110.76.136.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 111.118.208.0/22^22-29, 112.140.176.0/22^22-29, 113.29.240.0/22^22-29, 113.52.128.0/22^22-29, 113.130.120.0/22^22-29, 114.141.104.0/22^22-29, 116.90.72.0/22^22-29, 119.15.96.0/22^22-29, 119.63.208.0/22^22-29, 119.252.176.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.201.68.0/22^22-29, 122.201.100.0/22^22-29, 124.108.96.0/22^22-29, 124.248.132.0/22^22-29, 198.48.0.0/22^22-29, 202.4.228.0/22^22-29, 202.6.124.0/22^22-29, 202.8.44.0/22^22-29, 202.27.200.0/22^22-29, 202.36.24.0/22^22-29, 202.37.48.0/22^22-29, 202.45.152.0/22^22-29, 202.49.0.0/22^22-29, 202.86.208.0/22^22-29, 202.89.4.0/22^22-29, 202.93.176.0/22^22-29, 202.93.184.0/22^22-29, 202.129.244.0/22^22-29, 202.130.32.0/22^22-29, 202.153.64.0/22^22-29, 202.169.180.0/22^22-29, 202.169.196.0/22^22-29, 202.169.216.0/22^22-29, 202.177.220.0/22^22-29, 203.0.124.0/22^22-29, 203.4.200.0/22^22-29, 203.11.104.0/22^22-29, 203.16.200.0/22^22-29, 203.17.208.0/22^22-29, 203.22.236.0/22^22-29, 203.30.44.0/22^22-29, 203.55.232.0/22^22-29, 203.60.4.0/22^22-29, 203.62.184.0/22^22-29, 203.92.28.0/22^22-29, 203.145.48.0/22^22-29, 203.145.56.0/22^22-29, 203.147.92.0/22^22-29, 203.161.128.0/22^22-29, 203.175.120.0/22^22-29, 203.176.124.0/22^22-29, 203.176.184.0/22^22-29, 203.185.232.0/22^22-29, 203.190.232.0/22^22-29, 203.211.56.0/22^22-29, 203.217.152.0/22^22-29, 210.4.208.0/22^22-29, 210.11.144.0/22^22-29, 59.86.170.0/23^23-29, 59.86.186.0/23^23-29, 59.86.188.0/23^23-29, 63.218.156.0/23^23-29, 110.50.20.0/23^23-29, 110.76.128.0/23^23-29, 114.111.144.0/23^23-29, 114.141.108.0/23^23-29, 115.178.6.0/23^23-29, 116.90.128.0/23^23-29, 116.90.132.0/23^23-29, 116.90.138.0/23^23-29, 118.107.60.0/23^23-29, 119.161.80.0/23^23-29, 119.161.84.0/23^23-29, 119.161.92.0/23^23-29, 121.127.196.0/23^23-29, 122.100.6.0/23^23-29, 122.100.14.0/23^23-29, 122.201.64.0/23^23-29, 123.255.222.0/23^23-29, 202.4.226.0/23^23-29, 202.6.56.0/23^23-29, 202.6.116.0/23^23-29, 202.7.2.0/23^23-29, 202.12.90.0/23^23-29, 202.14.32.0/23^23-29, 202.14.138.0/23^23-29, 202.14.248.0/23^23-29, 202.21.136.0/23^23-29, 202.49.148.0/23^23-29, 202.49.164.0/23^23-29, 202.56.62.0/23^23-29, 202.61.2.0/23^23-29, 202.87.30.0/23^23-29, 202.92.94.0/23^23-29, 202.92.240.0/23^23-29, 202.93.4.0/23^23-29, 202.93.188.0/23^23-29, 202.150.60.0/23^23-29, 202.158.254.0/23^23-29, 202.160.48.0/23^23-29, 202.162.64.0/23^23-29, 202.167.230.0/23^23-29, 202.167.244.0/23^23-29, 202.167.252.0/23^23-29, 202.169.176.0/23^23-29, 202.169.206.0/23^23-29, 202.169.220.0/23^23-29, 202.172.156.0/23^23-29, 202.174.6.0/23^23-29, 202.177.196.0/23^23-29, 202.177.214.0/23^23-29, 202.181.28.0/23^23-29, 202.182.110.0/23^23-29, 202.182.124.0/23^23-29, 203.3.124.0/23^23-29, 203.4.182.0/23^23-29, 203.10.76.0/23^23-29, 203.16.60.0/23^23-29, 203.17.112.0/23^23-29, 203.18.102.0/23^23-29, 203.21.76.0/23^23-29, 203.22.70.0/23^23-29, 203.22.224.0/23^23-29, 203.24.88.0/23^23-29, 203.25.170.0/23^23-29, 203.28.202.0/23^23-29, 203.29.208.0/23^23-29, 203.30.98.0/23^23-29, 203.32.86.0/23^23-29, 203.33.60.0/23^23-29, 203.33.228.0/23^23-29, 203.34.8.0/23^23-29, 203.34.122.0/23^23-29, 203.34.140.0/23^23-29, 203.55.120.0/23^23-29, 203.55.174.0/23^23-29, 203.56.14.0/23^23-29, 203.56.218.0/23^23-29, 203.57.0.0/23^23-29, 203.57.78.0/23^23-29, 203.62.210.0/23^23-29, 203.84.216.0/23^23-29, 203.98.64.0/23^23-29, 203.98.76.0/23^23-29, 203.99.146.0/23^23-29, 203.111.104.0/23^23-29, 203.145.62.0/23^23-29, 203.161.134.0/23^23-29, 203.161.158.0/23^23-29, 203.167.254.0/23^23-29, 203.185.194.0/23^23-29, 203.190.222.0/23^23-29, 206.222.230.0/23^23-29, 210.4.214.0/23^23-29, 210.8.34.0/23^23-29, 210.9.230.0/23^23-29, 210.87.34.0/23^23-29, 220.157.74.0/23^23-29, 58.87.6.0/24^24-29, 58.181.65.0/24^24-29, 59.86.180.0/24^24-29, 59.86.185.0/24^24-29, 59.86.190.0/24^24-29, 59.154.62.0/24^24-29, 64.38.214.0/24^24-29, 86.111.216.0/24^24-29, 111.125.160.0/24^24-29, 113.197.64.0/24^24-29, 113.212.98.0/24^24-29, 115.42.0.0/24^24-29, 115.42.5.0/24^24-29, 115.42.6.0/24^24-29, 116.50.58.0/24^24-29, 116.90.131.0/24^24-29, 116.90.135.0/24^24-29, 116.90.136.0/24^24-29, 116.90.140.0/24^24-29, 117.18.235.0/24^24-29, 119.31.248.0/24^24-29, 119.161.82.0/24^24-29, 119.161.94.0/24^24-29, 121.127.198.0/24^24-29, 122.100.4.0/24^24-29, 122.200.128.0/24^24-29, 122.252.4.0/24^24-29, 168.134.2.0/24^24-29, 192.65.182.0/24^24-29, 192.88.85.0/24^24-29, 192.102.239.0/24^24-29, 192.107.113.0/24^24-29, 192.122.171.0/24^24-29, 192.124.13.0/24^24-29, 192.133.31.0/24^24-29, 192.173.17.0/24^24-29, 192.173.18.0/24^24-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20090828 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS4826 descr: advertised to AS9560 by Vocus - AS4826 members: 118.92.0.0/15^15-29, 58.28.0.0/16^16-29, 118.90.0.0/16^16-29, 121.90.0.0/16^16-29, 131.203.0.0/16^16-29, 147.209.0.0/16^16-29, 161.29.0.0/16^16-29, 161.65.0.0/16^16-29, 166.65.0.0/16^16-29, 113.203.0.0/17^17-29, 180.181.0.0/17^17-29, 203.60.128.0/17^17-29, 203.109.128.0/17^17-29, 112.141.0.0/18^18-29, 114.129.128.0/18^18-29, 125.253.0.0/18^18-29, 203.60.64.0/18^18-29, 203.114.128.0/18^18-29, 203.118.128.0/18^18-29, 203.173.128.0/18^18-29, 203.208.64.0/18^18-29, 58.96.128.0/19^19-29, 112.141.64.0/19^19-29, 113.192.0.0/19^19-29, 115.69.160.0/19^19-29, 118.127.64.0/19^19-29, 118.127.160.0/19^19-29, 119.15.0.0/19^19-29, 119.77.64.0/19^19-29, 119.252.0.0/19^19-29, 121.79.192.0/19^19-29, 122.99.64.0/19^19-29, 123.50.128.0/19^19-29, 123.100.128.0/19^19-29, 124.6.192.0/19^19-29, 125.254.64.0/19^19-29, 180.222.0.0/19^19-29, 202.60.64.0/19^19-29, 202.62.128.0/19^19-29, 202.171.160.0/19^19-29, 202.181.0.0/19^19-29, 203.60.32.0/19^19-29, 203.89.64.0/19^19-29, 203.96.192.0/19^19-29, 203.129.32.0/19^19-29, 203.152.96.0/19^19-29, 203.173.192.0/19^19-29, 203.201.128.0/19^19-29, 210.56.224.0/19^19-29, 58.84.224.0/20^20-29, 111.67.0.0/20^20-29, 111.118.160.0/20^20-29, 112.109.64.0/20^20-29, 112.141.96.0/20^20-29, 113.20.0.0/20^20-29, 114.111.128.0/20^20-29, 114.142.160.0/20^20-29, 115.146.64.0/20^20-29, 116.66.160.0/20^20-29, 117.55.224.0/20^20-29, 118.127.0.0/20^20-29, 119.10.128.0/20^20-29, 119.47.112.0/20^20-29, 119.160.224.0/20^20-29, 119.161.64.0/20^20-29, 121.127.208.0/20^20-29, 121.200.32.0/20^20-29, 122.102.96.0/20^20-29, 122.200.160.0/20^20-29, 122.201.80.0/20^20-29, 124.155.224.0/20^20-29, 125.214.64.0/20^20-29, 125.253.96.0/20^20-29, 125.254.96.0/20^20-29, 202.46.160.0/20^20-29, 202.53.176.0/20^20-29, 202.55.144.0/20^20-29, 202.56.32.0/20^20-29, 202.68.160.0/20^20-29, 202.73.192.0/20^20-29, 202.78.32.0/20^20-29, 202.79.160.0/20^20-29, 202.86.96.0/20^20-29, 202.126.192.0/20^20-29, 202.129.144.0/20^20-29, 202.144.160.0/20^20-29, 202.170.160.0/20^20-29, 202.174.160.0/20^20-29, 203.60.16.0/20^20-29, 203.83.192.0/20^20-29, 203.88.112.0/20^20-29, 203.96.0.0/20^20-29, 203.96.32.0/20^20-29, 203.130.160.0/20^20-29, 203.145.32.0/20^20-29, 203.149.64.0/20^20-29, 203.161.128.0/20^20-29, 203.212.144.0/20^20-29, 110.44.24.0/21^21-29, 112.140.176.0/21^21-29, 112.141.112.0/21^21-29, 114.31.72.0/21^21-29, 114.31.96.0/21^21-29, 114.110.32.0/21^21-29, 114.141.96.0/21^21-29, 115.124.32.0/21^21-29, 115.178.16.0/21^21-29, 115.178.104.0/21^21-29, 116.212.64.0/21^21-29, 117.18.80.0/21^21-29, 117.104.176.0/21^21-29, 118.127.16.0/21^21-29, 119.63.200.0/21^21-29, 119.63.216.0/21^21-29, 120.89.80.0/21^21-29, 121.101.136.0/21^21-29, 121.127.200.0/21^21-29, 121.200.208.0/21^21-29, 122.49.200.0/21^21-29, 122.99.112.0/21^21-29, 122.201.72.0/21^21-29, 123.108.144.0/21^21-29, 124.248.136.0/21^21-29, 125.213.160.0/21^21-29, 180.92.216.0/21^21-29, 180.94.232.0/21^21-29, 180.214.168.0/21^21-29, 202.4.232.0/21^21-29, 202.36.16.0/21^21-29, 202.46.136.0/21^21-29, 202.49.64.0/21^21-29, 202.56.48.0/21^21-29, 202.78.240.0/21^21-29, 202.86.208.0/21^21-29, 202.90.48.0/21^21-29, 202.90.240.0/21^21-29, 202.126.80.0/21^21-29, 202.137.240.0/21^21-29, 202.160.112.0/21^21-29, 202.169.16.0/21^21-29, 202.169.208.0/21^21-29, 202.191.8.0/21^21-29, 203.1.240.0/21^21-29, 203.60.8.0/21^21-29, 203.149.80.0/21^21-29, 203.170.8.0/21^21-29, 203.173.240.0/21^21-29, 203.174.16.0/21^21-29, 203.185.224.0/21^21-29, 203.190.208.0/21^21-29, 203.212.16.0/21^21-29, 210.9.136.0/21^21-29, 210.50.56.0/21^21-29, 59.86.172.0/22^22-29, 59.86.176.0/22^22-29, 61.69.0.0/22^22-29, 61.69.24.0/22^22-29, 63.217.120.0/22^22-29, 110.76.132.0/22^22-29, 110.76.136.0/22^22-29, 110.93.8.0/22^22-29, 110.173.224.0/22^22-29, 110.232.144.0/22^22-29, 111.118.208.0/22^22-29, 111.235.140.0/22^22-29, 113.29.240.0/22^22-29, 113.52.128.0/22^22-29, 113.130.120.0/22^22-29, 114.111.144.0/22^22-29, 114.141.104.0/22^22-29, 115.69.28.0/22^22-29, 116.90.72.0/22^22-29, 118.127.24.0/22^22-29, 119.15.96.0/22^22-29, 119.63.208.0/22^22-29, 119.161.84.0/22^22-29, 119.252.176.0/22^22-29, 121.127.192.0/22^22-29, 122.100.0.0/22^22-29, 122.100.8.0/22^22-29, 122.201.68.0/22^22-29, 122.201.100.0/22^22-29, 124.108.96.0/22^22-29, 180.148.24.0/22^22-29, 180.189.152.0/22^22-29, 180.222.192.0/22^22-29, 198.48.0.0/22^22-29, 202.4.228.0/22^22-29, 202.6.124.0/22^22-29, 202.36.24.0/22^22-29, 202.37.32.0/22^22-29, 202.37.48.0/22^22-29, 202.45.152.0/22^22-29, 202.49.0.0/22^22-29, 202.89.4.0/22^22-29, 202.129.244.0/22^22-29, 202.153.64.0/22^22-29, 202.160.48.0/22^22-29, 202.169.180.0/22^22-29, 202.169.196.0/22^22-29, 202.169.200.0/22^22-29, 202.169.216.0/22^22-29, 202.177.220.0/22^22-29, 203.0.124.0/22^22-29, 203.4.200.0/22^22-29, 203.11.104.0/22^22-29, 203.16.200.0/22^22-29, 203.17.208.0/22^22-29, 203.22.236.0/22^22-29, 203.30.44.0/22^22-29, 203.55.232.0/22^22-29, 203.62.184.0/22^22-29, 203.83.208.0/22^22-29, 203.92.28.0/22^22-29, 203.99.132.0/22^22-29, 203.145.48.0/22^22-29, 203.145.56.0/22^22-29, 203.176.124.0/22^22-29, 203.176.184.0/22^22-29, 203.185.232.0/22^22-29, 203.188.216.0/22^22-29, 203.190.232.0/22^22-29, 203.202.132.0/22^22-29, 203.211.56.0/22^22-29, 203.217.152.0/22^22-29, 210.4.208.0/22^22-29, 210.11.144.0/22^22-29, 59.86.170.0/23^23-29, 59.86.186.0/23^23-29, 59.86.188.0/23^23-29, 63.218.156.0/23^23-29, 110.76.128.0/23^23-29, 111.125.168.0/23^23-29, 114.141.108.0/23^23-29, 115.42.4.0/23^23-29, 115.178.6.0/23^23-29, 116.90.128.0/23^23-29, 116.90.132.0/23^23-29, 116.90.138.0/23^23-29, 118.107.60.0/23^23-29, 119.82.150.0/23^23-29, 119.161.80.0/23^23-29, 119.161.94.0/23^23-29, 121.127.196.0/23^23-29, 122.100.6.0/23^23-29, 122.100.14.0/23^23-29, 122.201.64.0/23^23-29, 122.252.12.0/23^23-29, 141.243.8.0/23^23-29, 180.92.198.0/23^23-29, 180.235.104.0/23^23-29, 202.4.162.0/23^23-29, 202.4.226.0/23^23-29, 202.6.56.0/23^23-29, 202.6.116.0/23^23-29, 202.7.2.0/23^23-29, 202.8.44.0/23^23-29, 202.12.90.0/23^23-29, 202.14.32.0/23^23-29, 202.14.62.0/23^23-29, 202.14.248.0/23^23-29, 202.21.136.0/23^23-29, 202.36.218.0/23^23-29, 202.46.176.0/23^23-29, 202.49.148.0/23^23-29, 202.49.164.0/23^23-29, 202.56.62.0/23^23-29, 202.61.2.0/23^23-29, 202.65.160.0/23^23-29, 202.67.118.0/23^23-29, 202.92.94.0/23^23-29, 202.92.240.0/23^23-29, 202.93.4.0/23^23-29, 202.150.60.0/23^23-29, 202.158.254.0/23^23-29, 202.162.64.0/23^23-29, 202.167.230.0/23^23-29, 202.167.244.0/23^23-29, 202.167.252.0/23^23-29, 202.169.176.0/23^23-29, 202.169.206.0/23^23-29, 202.169.220.0/23^23-29, 202.174.6.0/23^23-29, 202.177.196.0/23^23-29, 202.177.214.0/23^23-29, 202.182.110.0/23^23-29, 202.182.124.0/23^23-29, 203.3.124.0/23^23-29, 203.4.182.0/23^23-29, 203.10.76.0/23^23-29, 203.16.60.0/23^23-29, 203.17.112.0/23^23-29, 203.18.102.0/23^23-29, 203.21.76.0/23^23-29, 203.22.70.0/23^23-29, 203.24.88.0/23^23-29, 203.25.170.0/23^23-29, 203.26.188.0/23^23-29, 203.28.202.0/23^23-29, 203.29.208.0/23^23-29, 203.30.98.0/23^23-29, 203.31.114.0/23^23-29, 203.33.60.0/23^23-29, 203.33.70.0/23^23-29, 203.33.228.0/23^23-29, 203.34.8.0/23^23-29, 203.34.122.0/23^23-29, 203.34.140.0/23^23-29, 203.55.120.0/23^23-29, 203.55.174.0/23^23-29, 203.56.14.0/23^23-29, 203.56.218.0/23^23-29, 203.57.0.0/23^23-29, 203.57.78.0/23^23-29, 203.60.4.0/23^23-29, 203.62.210.0/23^23-29, 203.82.98.0/23^23-29, 203.82.216.0/23^23-29, 203.84.216.0/23^23-29, 203.98.64.0/23^23-29, 203.98.76.0/23^23-29, 203.99.146.0/23^23-29, 203.111.104.0/23^23-29, 203.145.62.0/23^23-29, 203.147.108.0/23^23-29, 203.161.144.0/23^23-29, 203.161.158.0/23^23-29, 203.167.254.0/23^23-29, 203.185.194.0/23^23-29, 203.190.222.0/23^23-29, 203.217.142.0/23^23-29, 203.217.150.0/23^23-29, 206.222.230.0/23^23-29, 210.4.214.0/23^23-29, 210.9.230.0/23^23-29, 210.11.226.0/23^23-29, 210.87.34.0/23^23-29, 211.26.66.0/23^23-29, 211.27.66.0/23^23-29, 220.157.74.0/23^23-29, 58.87.6.0/24^24-29, 58.181.65.0/24^24-29, 59.86.180.0/24^24-29, 59.86.185.0/24^24-29, 59.86.190.0/24^24-29, 59.154.62.0/24^24-29, 64.38.214.0/24^24-29, 75.102.33.0/24^24-29, [snip... Object abbreviated for readability] changed: rpsl-admin(a)nzix.net 20091214 source: NZRR ------------------------------------------------------------

1 0

Public DNS Servers and CDN
by David Miles 12 Dec '09

12 Dec '09

All, With the recent announcement of Google's public DNS servers, I am worried about operators of CDN who may rely on DNS queries for geo-location (Akamai comes to mind). Today it is reasonable to assume DNS queries from ISP1's name servers (or address block in general) are probably from a client within the ISP1 network. With public DNS servers it gets a whole pile harder. A issue I saw first hand is when I had statically set my DNS resolvers to ISP1 servers and then changed to ISP2. For many months everything went okay but then one day iTunes stopped working. It was not that ISP2 was blocking access to their DNS resolvers, but that the Akamai cluster that queries to the ISP2 resolvers was not advertised into the ISP1 network (rightly or wrongly). More importantly, ISP1 had Akamai servers of their own which I had been bypassing. I think this is something for the community to carefully consider, especially given how CDN like Akamai can dramatically reduce traffic across peering links for a number of NZ ISP. I'm not trying to condone the idea of public DNS servers or comment on the motivation behind Google and others operating them, but just focus on the impacts. Does any one else see a cause for concern? -David M

3 3

Kiwibank Phish
by Tim Price 10 Dec '09

10 Dec '09

Heads up, Received a badly crafted kiwibank phishing attempt this morning which links to http://sushinomichi.co.kr/images/kiwibank.co.nz/kiwibank.php I'll already warned Kiwibank Security but some operators may choose to be more proactive about blocking said address. Regards Tim Price thepacific.net Ltd

4 4