- NZNOG - lists.nznog.org

RFC 8145 Root Trust Anchor Reports
by Matthew Luckie 06 Sep '18

06 Sep '18

>From http://root-trust-anchor-reports.research.icann.org/ : The ICANN org is publishing the IP addresses that are sending RFC 8145 telemetry ostensibly indicating that a resolver at the reported address (or another resolver that is forwarding through the resolver at the address) is validating using only KSK-2010 as a trust anchor. Publishing these addresses allows ISPs and other organizations who know who operates resolvers at those addresses to contact the resolver operator and notify them of the need to update their DNSSEC trust anchors. Without further action, these resolvers will stop working after the root KSK is rolled on 11 October 2018. http://root-trust-anchor-reports.research.icann.org/rfc8145-addresses.txt The following ASes have their country recorded as NZ in whois, and are in the ICANN list. The following resolvers may or may not be operated by the ASN identified. 4771 Spark 122.56.234.219 122-56-234-219.mobile.spark.co.nz. 122.57.192.56 122-57-192-56-adsl.sparkbb.co.nz. 122.61.118.222 122-61-118-222-adsl.sparkbb.co.nz. 219.88.186.152 rns6.xtra.co.nz. 222.153.3.78 222-153-3-78-fibre.sparkbb.co.nz. 222.154.149.63 222-154-149-63-fibre.sparkbb.co.nz. 9500 Vodafone 203.96.208.52 akrdns2.akl.vf.net.nz. 203.96.208.61 akrdns3.akl.vf.net.nz. 203.96.208.62 akrdns4.akl.vf.net.nz. 203.96.208.91 cbrdns1.chc.vf.net.nz. 203.96.208.92 cbrdns2.chc.vf.net.nz. 210.246.17.115 210-246-17-115.dsl.dyn.ihug.co.nz. 2407:7000:ff00:5382:bd9d::1 2407:7000:ff00:5382:bd9d::2 49.224.251.45 45.251.224.49.dyn.cust.vf.net.nz. 23655 SNAP 111.69.178.254 254.178.69.111.dynamic.snap.net.nz. 111.69.195.153 153.195.69.111.dynamic.snap.net.nz. 24183 DTS 202.174.180.228 38793 2degrees 118.148.149.52 52-149-148-118.nzcomms.co.nz. 118.149.151.121 121-151-149-118.nzcomms.co.nz. 45177 Vibe 45.64.48.2 cdns-02.as45177.net. 45179 SiteHost 103.250.234.202 103-250-234-202.static.webslice.co.nz. 45267 Lightwire 114.134.0.194 114-134-0-194.lightwire.co.nz. 132347 MikiPro 2404:ab00:6:1::6 132692 GlobiCom 103.18.58.198 vpn2.torguardvpnaccess.com. 133607 Web Connect 103.51.101.28 135069 Feenix 103.208.143.164 103-208-143-164.feenix.co.nz. Further information is available at the ICANN site, and it might pay for other operators on NZNOG to double check the ICANN list. http://root-trust-anchor-reports.research.icann.org Matthew

1 0

NZNOG 2019 Workshop/Tutorials
by Dave Mill 03 Sep '18

03 Sep '18

Hi all As part of NZNOG we normally offer a 3 day workshop (Mon to Wed) and a few tutorials on the Wednesday. APNIC have the following workshops/tutorials offered at the moment. https://training.apnic.net/courses/ We're seeking feedback (on or off list) on what people may want. Note, most recently we've had a 1 day Network Security tutorial (Queenstown) and a 3 day MPLS workshop (Tauranga). Ideas for next year: -3 day Network Security -3 day Routing I -3 day SDN (5 days condensed in to 3 days) -3 day DNSSEC -1 day IPv6 essentials -1 day DNSSEC -1/2 day BGP techniques Or, what else would people like to see at NZNOG (workshop and tutorial wise) that APNIC don't offer? On-list discussion encouraged :) Cheers Dave

9 14

CFP AINTEC 2018 (in coop. with SIGCOMM), November 12 - 14, 2018 Bangkok, Thailand - Abstract registration due on August 18, 2018
by William Liu 10 Aug '18

10 Aug '18

Call for Papers 14th Asian Internet Engineering Conference (AINTEC) 2018, in cooperation with ACM SIGCOMM, November 12 - 14, 2018. Pullman Bangkok King Power Hotel, Bangkok, Thailand Website: http://www.interlab.ait.ac.th/aintec2018/ Paper submission: http://www.interlab.ait.ac.th/aintec2018/paper-submission.php Important dates ------------------------------ Abstract registration: August 18, 2018 Full paper submission: September 2, 2018 Acceptance notification: October 15, 2018 Camera-ready due: October 24, 2018 Conference dates: November 12-14, 2018 (Right after IETF 103 in Bangkok) IETF 103 Information: https://www.ietf.org/how/meetings/103/ The 14th Asian Internet Engineering Conference (AINTEC), in cooperation with ACM SIGCOMM, provides an international technical forum for experts from industry and academia. AINTEC especially aims at addressing issues pertinent to the Asia and Pacific region, with vast diversities of socio-economic and networking conditions, while inviting high quality and recent research results from the Internet research community at large. AINTEC 2018 follows the previous ten successful editions held in Thailand. The conference is single-track and features a technical program with significant opportunities for individual and small-group discussions among a diverse set of participants. The technical sessions will include invited talks by leading experts, presentations of papers, demos, posters. A student author of the AINTEC Best Paper Award affiliated in an Asian institution is eligible for the ACM SIGCOMM geo-diversity grant program to attend ACM SIGCOMM 2019. AINTEC 2018 solicits high quality papers that improve digital communications in diverse situations including, but not limited to: * Future Internet architectures and technologies * Networking technologies in developing regions * Internet measurement, analysis and modelling * Disaster networking, including experience with earthquakes and tsunamis * Sensor networking and applications * Wireless, mobile and ad hoc networks * Delay and disruption tolerant networks * Location management and positioning * Content diffusion with P2P, CDN or ICN * Multimedia systems and applications * Network operations and management * Quantum networking * Social networks * Network security * Cloud Computing and Services * Internet of Things * Network Acceleration * Blockchain Technology and Applications Paper submission ------------------------ Submissions must be original, unpublished work, and not have been submitted to another conference or journal for publication. Paper length cannot exceed 8 pages in the 10pts ACM SIGCOMM format. AINTEC 2018 proceedings will be included in the ACM Digital Library. Papers must be submitted in electronic format following the instructions provided on the AINTEC Web site: http://www.interlab.ait.ac.th/aintec2018/ Submission of a paper implies that should the paper be accepted for publication in the conference proceedings, at least one of the authors will register and present the paper in the conference. Authors of accepted papers must pay for their registration on or before the camera ready version deadline. Important dates ------------------------------ Abstract registration: August 18, 2018 Full paper submission: September 2, 2018 Acceptance notification: October 15, 2018 Camera-ready due: October 24, 2018 Conference dates: November 12-14, 2018 (Right after IETF 103 in Bangkok) Scientific Advisory Committee: Randy Bush, Internet Initiative Japan Inc., USA Erol Gelenbe, Imperial College, UK Jun Murai, WIDE Project and Keio University, Japan Keith W. Ross, Polytechnic Institute of NYU, USA Dario Rossi, Telecom ParisTech, France Surasak Sanguanpong, APAN-TH, Thailand Steering Committee: Kenjiro Cho, IIJ and WIDE Project, Japan Serge Fdida, UPMC, France Philippe Jacquet, INRIA, France Kanchana Kanchanasut, Asian Institute of Technology, Thailand Giovanni Pau, UPMC, France Aruna Seneviratne, NICTA, Australia Rodney Van Meter, WIDE Project, Keio University, Japan General Chair: Sukumal Kitisin, Kasetsart University, Thailand Kunwadee Sripanidkulchai, Chulalongkorn University, Thailand Technical Program Committee Co-Chairs: Cristel Pelsser, University of Strasbourg/ICube laboratory, France Shigeya Suzuki, WIDE Project, Keio University, Japan Technical Program Committee: Ignacio Castro, Queen Mary University of London, UK Roderick Fanou, CAIDA/UC San Diego, USA Kensuke Fukuda, National Institute of Informatics Japan, Japan Kei Hiroi, Nagoya University, Japan Pan Hui, University of Helsinki, Finland & HKUST, Hong Kong Oana Iova, INSA Lyon, France Kotaro Kataoka, IIT Hyderabad, India Andra Lutu, Simula, Norway Matthew Luckie, University of Waikato, New Zealand Kanae Matsui, Tokyo Denki University, Japan Shinichiro Matsuo, Georgetown University, USA Florian Michahelles, Siemens USA, USA Ryo Nakamura, The University of Tokyo, Japan Anant Shah, Verizon Digital Media Services., USA Keiichi Shima, IIJ-II, Japan Anna Sperotto, University of Twente, NL Joe Touch, The Aerospace Corp., USA Wantanee Viriyasitavat, Google, USA Vasaka Visoottiviseth, Mahidol University, Thailand Tat-Chee Wan, Universiti Sains Malaysia, Malaysia Publicity Committee: Wantanee Viriyasitavat, Google, USA Local Organizers: Rey Padilla, AIT, Thailand Glaziel Kae Tagamolila, AIT, Thailand Wutjanun Muttitanon, Mahidol University , Thailand

1 0

Spoofer Report for NZNOG for Jul 2018
by CAIDA Spoofer Project 08 Aug '18

08 Aug '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jul 2018: ASN Name Fixed-By 45267 LIGHTWIRE 2018-07-08 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jul 2018: none inferred Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Invitation to APNIC 46
by Elly Tawhai 06 Aug '18

06 Aug '18

Hi NZNOG Community, It is our pleasure to invite your organisation to attend APNIC 46 meeting a week of workshops, tutorials, policy and operational discussions, and social events. Connectivity and network security in the Pacific will be key themes to be discussed at the upcoming APNIC 46 conference in Nouméa, New Caledonia, from 6 to 13 September 2018. Keynote presenter John Brewer shares his expertise on the explosion of new submarine and satellite infrastructure connecting the remote islands of the Pacific, joining Raja Azrina Raja Othman, who will talk about security, privacy, and safety in this age of interconnectedness. Full speakers list here: < https://conference.apnic.net/46/program/speakers/#/> There are direct flights to Noumea from Auckland. Hope to see you there! Kind regards, Elly APNIC

1 0

Spoofer Report for_NZNOG for Jun 2018
by CAIDA Spoofer Project 08 Jul '18

08 Jul '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jun 2018: none inferred Source Address Validation issues inferred during Jun 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-06-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Affordable TICSA LI Solution and Support
by brianparsons＠subpico.com 04 Jul '18

04 Jul '18

We are Telecom Forensics, an OEM of LI solutions based on the Kapiti Coast. � Being an OEM, there are no 'middle men' to inflate the price. We can provide a drop-in LI system that is fully supported, local and affordable. � We are proven LI Systems experts operating since 2005. We have deployed with national providers and on many complex projects both cellular and fixed. ASN.1 and ETSI Standards is what we do all day, everyday. Our projects and experience are detailed on out website: www.telecomforensics.com. � Our Costs and Deliverables: We supply the complete turnkey solution for your TICSA regulatory compliance. No minimum contract term, full 24/7 support is provided. � Costs One off: Upfront $5K Signup Fee - covers design, integration, pre-production testing and systems training, Monthly: Starting at fixed $5K lease cost per month. For industry fairness the monthly charge is scaled to the number of subscribers. *** SPECIAL OFFER ***: 10% discount on the monthly lease if you sign-up within the next four weeks!� Contact us via our website forms, https://www.telecomforensics.com/. �� Annual contracts are also available. Contact us to discuss your requirements. � Deliverables A working pre-production environment; Provisioning, (HI 2/3) ASN.1 correct, complete & ready to cut-over to LEA Test then eventually LIVE. Training on the LI system in parallel with LEA validation/testing HI 'usable format' pre-production delivery. Training (provisioning and alarms) to meet the 'always ready' requirement of the TICSA Act. Support: The monthly fee includes Layer 3 support.� TFE Solution License and Support Contract to meet Service Level Agreements of the TICSA solution Once you have Agency sign-off to switch to their LIVE environment, you can get back to your core business activity. Time Frame: Depending on the size of the network, this could take one to two weeks after sign-up. � Custom interface work is available including any OEM TIER 4 Code level support. POA. � TFE offers affordability for a trusted and reliable LI solution. � We welcome your enquiry through our web forms, https://www.telecomforensics.com/, kind regards Brian Parsons BE(E&EE) MIEE | CEO TFE | +64272987097 www.telecomforensics.com ___________________________________________________________________________________________________________________________________________ Some technical detail: Our systems operate an exokernel with optimised LI ASN.1 and protocol firmware on the Network (NWO) traffic inputs. The NWO interface work independent of main OS for speed and security and line rate processing (at any packet size). We support the following line interfaces: GE, 10G, 40G scaled to 100G, and typically can receive from any newtork tap/mirror port, splitter. The probe throughput (XI fwd rate) after processing is wire speed with capacity per interface of 1.1 million sessions per gig of installed Mem. Typical System interfaces: GE NWO, GE XI/OAM, GE HI. ___________________________________________________________________________________________________________________________________________ �

13 15

Satellite TV installations within MDU
by Carl Gunness 02 Jul '18

02 Jul '18

Hi NZNog, I'm looking for a contact within Sky Television or a contractor who installs Satellite TV within MDU? I'm trying to confirm if Satellite TV is installed the same way as we do in Australia. eg, a "BLUBOX" on a typical MDU build. Cheers, Carl

2 1

Re: [nznog] Registration for AusNOG 2018 is now open
by Nick MacKechnie 28 Jun '18

28 Jun '18

Hiya, Who's going? I'd be keep to catch-up for a drink or two while over in Sydney. (Feel free to ping me off the DL) Nick MacKechnie Fixed & Transmission Operations Manager 021 999 010 03 345 7875 nick.mackechnie(a)2degrees.nz Two Degrees New Zealand Limited | 2degrees House 351 Lincoln Road, Addington, Christchurch 8024 PO Box 8540, Riccarton, Christchurch 8440 | New Zealand -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Mark Prior Sent: Monday, June 11, 2018 10:44 PM To: nznog <NZNOG(a)list.waikato.ac.nz> Subject: [nznog] Registration for AusNOG 2018 is now open Get in early for the early bird rate! <https://www.eventbrite.com.au/e/ausnog-2018-tickets-46925221601> We're also still looking for interesting talks so why not submit a proposal and lock in that early bird rate (or get free rego if accepted :-) Regards, Mark. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog ________________________________ This transmission may contain information that is confidential and legally privileged. If you are not the intended recipient, please do not read, copy, or re-transmit this communication. If you have received this communication in error, please notify me and delete this message (and your reply) and any attachments.

2 1

Anyone interested in donating space / connectivity / kit for a proper NZ Debian mirror?
by Michael Fincham 28 Jun '18

28 Jun '18

Hi everyone, Citylink's official Debian mirror (ftp.nz.debian.org) is apparently again broken (not even listening on port 80 from where I'm sitting). Would anyone be seriously interested in donating rack space, national transit, or hardware to the cause of another official Debian mirror for NZ? Having reliable and cheap access to free software projects like Debian is critically important, and having a second official mirror seems like a no-brainer to me. I am very happy to donate my time to admin and monitor any equipment provided for this, and to liase with the Debian project as required. Perhaps Citylink could give us some insight in to the traffic levels their existing mirrors see? -- Michael Fincham

15 28