- NZNOG - lists.nznog.org

Spoofer Report for NZNOG for May 2018
by CAIDA Spoofer Project 08 Jun '18

08 Jun '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during May 2018: ASN Name Fixed-By 55850 TRUSTPOWERLTD 2018-05-21 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW 2016-09-26 2018-05-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

TICSA and lawful intercept
by Cameron Beattie 05 Jun '18

05 Jun '18

Has any progress been made on a collaborative effort to address the TICSA requirements? Regards Cameron

7 7

ASB Bank NOC contact
by Tim Price 23 May '18

23 May '18

Hi All, If anyone from ASB Bank NOC is on-list or anyone knows someone who operates their firewalls can you please contact me off-list? We have a business customer who’s IP has been blacklisted by ASB. Cheers, Tim.

1 0

Bandwidth at Tauranga Exchange (Chorus/Spark Cameron Road)
by Jesse Archer 17 May '18

17 May '18

Good evening, Got a customer looking for secondary bandwidth options at Tauranga Exchange. Who has a physical presence here and a willingness to sell IP transit to a small client (below 1Gbps requirement) ? They’ve got an AS and a /22 that will be operational soon. Regards, Jesse -- *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

Bigpipe removing IPv6 from existing broadband connections
by Michael Fincham 15 May '18

15 May '18

Hi all, Looks like Bigpipe has decided to withdraw IPv6 from their broadband customers... If you have contacts at Bigpipe please get in touch with them and ask them WTF they're doing. This is absurd. I've been recommending Bigpipe to people for ages because they offered IPv6. Forcing their customers to renumber and drop back to legacy IPv4 at this point is just idiotic, let alone not continuing to offer this service. ---------- Forwarded message ---------- From: Bigpipe Broadband <support(a)bigpipe.co.nz> Date: 14 May 2018 at 09:54 Subject: Changes to your Bigpipe connection Hi [...], Thanks for taking part in our IPv6 trial that we announced on Geekzone. We’ve had a heap of really useful feedback to keep in mind for our future developments in this space. >From the 12th of June 2018 the trial will be ending and you may notice a short 5-10 minute outage while we withdraw it. We’ll be making the change overnight at a time that has as little impact as possible. There’s nothing further you need to do, however as with any outage if you find you haven’t automatically connected again, simply restart your modem or router. If you have any questions or want to chat this through, you can get in touch via https://ww.bigpipe.co.nz/contact-us Thanks again for getting involved. The Bigpipe People -- Michael

4 4

ntp kod
by Richard Hector 10 May '18

10 May '18

Hi all, I'm seeing lots of log messages like these: May 11 06:54:32 jet ntpd[2758]: receive: KoD packet from 2001:dce:2:17a::18 has inconsistent xmt/org/rec timestamps. Ignoring. ... on a home server. A quick web search suggests that KoD packets are a self-defence mechanism. Am I (accidentally) abusing s[1-3].ntp.net.nz? Cheers, Richard

3 3

Spoofer Report for NZNOG for Apr 2018
by CAIDA Spoofer Project 08 May '18

08 May '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Apr 2018: ASN Name First-Fixed 137259 M174-AS-AP 2018-04-26 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2018: ASN Name First-Spoofed Last-Spoofed 9876 NOWNEW-AS-AP 2016-09-26 2018-04-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fwd: [AusNOG] AusNOG 2018 Call for Presentations
by Mark Prior 06 May '18

06 May '18

Anyone from across the Ditch interested in speaking at AusNOG at the end of August? Mark.

1 0

Announcement - Joint CENTR-Tech / DNS-OARC Workshop, Amsterdam, NL, 13th/14th October 2018
by Sebastian Castro 03 May '18

03 May '18

[with apologies to those who see this on multiple lists] The 29th DNS-OARC Workshop will be a joint workshop combined with CENTR-Tech and will take place at the Hotel Okura, Amsterdam, Netherlands, on October 13th and 14th 2018. Workshop Milestones: - 01 May 2018 - Workshop Announcement - 01 Jun 2018 - Submissions and Registrations open via Indico - 13 Jul 2018 - Deadline for submission - 17 Aug 2018 - Contribution list published - 14 Sep 2018 - Full agenda published - 06 Oct 2018 - Deadline for slideset submission - 13 Oct 2018 - Workshop Sebastian Castro, on behalf of the joint Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. -- Sebastian Castro Chief Scientist @ InternetNZ desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Google mail Fu Help
by Don Gould 23 Apr '18

23 Apr '18

Can anyone with some clue help with sorting this out? I've tired following the link but I just don't understand what I'm not doing right. My mail server got compromised and has since been fixed but I'm still having problems sending mail to gmail. The mail system <Laurajmcintosh(a)gmail.com>: host gmail-smtp-in.l.google.com[173.194.203.27] said: 550-5.7.1 [182.54.234.40 12] Our system has detected that this message is 550-5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail, 550-5.7.1 this message has been blocked. Please visit 550-5.7.1https://support.google.com/mail/?p=UnsolicitedMessageError 550 5.7.1 for more information. c10-v6si12022767plr.398 - gsmtp (in reply to end of DATA command) -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Ph: 0800 00 15 92 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.yournet.co.nz skype: don.gould.nz

2 2