- NZNOG - lists.nznog.org

Notification of NZRR Database changes
by NZRR Database Notifications 16 May '07

16 May '07

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS10022 descr: advertised to AS9560 by Datacom Systems Auckland - AS10022 members: 202.36.8.0/21^21-29, 202.175.128.0/21^21-29, 202.14.20.0/22^22-29, 202.14.82.0/23^23-29, 202.36.198.0/23^23-29, 192.203.216.0/24^24-29, 202.14.84.0/24^24-29, 202.27.76.0/24^24-29, 202.27.140.0/24^24-29, 202.27.143.0/24^24-29, 202.27.250.0/24^24-29, 202.36.233.0/24^24-29, 210.55.5.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: idc(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060807 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS10022 descr: advertised to AS9560 by Datacom Systems - AS10022 members: 202.36.8.0/21^21-29, 202.175.128.0/21^21-29, 202.14.20.0/22^22-29, 202.14.82.0/23^23-29, 202.36.198.0/23^23-29, 192.188.185.0/24^24-29, 192.203.216.0/24^24-29, 202.14.84.0/24^24-29, 202.27.76.0/24^24-29, 202.27.140.0/24^24-29, 202.27.143.0/24^24-29, 202.27.250.0/24^24-29, 202.36.233.0/24^24-29, 202.175.137.0/24^24-29, 202.175.138.0/24^24-29, 210.55.5.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: nigelm(a)datacom.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20070517 source: NZRR

1 0

[Fwd: Security Survey]
by Philip Smith 14 May '07

14 May '07

Forwarded on behalf of Danny McPherson. (And apologies for any duplicates!) -------- Original Message -------- Subject: Security Survey Date: Mon, 14 May 2007 15:55:00 -0600 From: Danny McPherson <danny(a)tcb.net> Folks, It's time for the Infrastructure Security Survey again! If you're willing to complete the survey please go here to receive a token (which will be mailed to you with a URL for response input): https://sec-survey.tcb.net/index.php?sid=1 You can find the previous editions of the survey report here: http://www.tcb.net/ISP_Security_Report-2H2005.pdf http://www.tcb.net/2006-WISR.pdf If you have any questions, comments or concerns please let me know. Thanks in advance! -danny danny(a)tcb.net

1 0

TelstraClear DSL AKL-CHC
by Russell Tester 13 May '07

13 May '07

We have a customer experiencing problems since around mid-day Friday with their Auckland site talking to their Christchurch site via TCL on net DSL. The problem appears to be with the AKL site that can also not reach a number of our other DSL fed TCL customers in CHC, yet all other internet access appears to be fine. Whilst we have a TCL tech visiting the ALK site (some time), I'm interested if anyone else has encountered similar issues? Also if someone in ALK on TCL on net DSL could reply with a trace to 203.97.49.85 id appreciate this. Cheers, Russell Tester ServerWorks Ltd

2 3

Re: [nznog] Whois Server
by Ewen McNeill 13 May '07

13 May '07

In message <007701c795ac$c9249580$966e000a(a)craigcdaacab45>, "Craig Spiers" write s: >I've been doing whois lookups against whois.srs.net.nz for a few domains we >host at work, mainly to look at the billed until date. However, small >problem.. query 10 domains and suddenly they block you. There is an automatic blacklist which is triggered by a rate of recent requests from the same IP address (and/or netblock). Querying, eg, 10 domains a day isn't a problem (I regularly do this by hand in the course of my work), but querying 10 domains one after another, with no delay, from a script is likely to trigger the blacklist. After a quiet period (some hours?) the IP will fall back out of the automatic blacklist. (I believe there's also a manual blacklist for particularly troublesome offenders.) If your queries are not time critical (and it sounds like from later posts to NZNOG they're not), I'd suggest slowing your queries down so that you're only doing, eg a dozen queries an hour. (I'm assuming given the choice of forum that you have a legitimate reason for doing this. Illegitimate purposes are likely to get you permanently blacklisted anyway.) It may also be helpful to know that at least some registrars provide a customer-usable interface to the whois XML interface bulk query for the domains belonging to you that are registered through them. Which may be an easier way to get the information that you want. Ewen

1 0

Whois Server
by Craig Spiers 13 May '07

13 May '07

Hi All, I've been doing whois lookups against whois.srs.net.nz for a few domains we host at work, mainly to look at the billed until date. However, small problem.. query 10 domains and suddenly they block you. Has anyone else come across this? if so who do you talk to to get the limit increased? Cheers, Craig - Solarix

5 5

Re: [nznog] Whois Server
by Craig Spiers 13 May '07

13 May '07

yeah, i didnt think they would be.. any idea what the limit is set to? I dont mind say querying 1 domain every hour (extreme limit) but time is not critical with what im using it for. Just want to update billed until date in our database every month or so. I dont care if it takes all month to run over ~ 200 domains, as long as there's a date in there :) Cheers _____ From: Tim John - Domainz [mailto:tim.john(a)domainz.net.nz] Sent: Monday, May 14, 2007 10:26 AM To: Craig Spiers Subject: RE: [nznog] Whois Server Hi Craig, If you use the public whois or the lookup utility on the DNC site, there is a rate limit applied if a certain number of queries are attempted in a short space of time. If you happen to be an authorised Registrar, then you should connect via the XML gateway where rate limiting is not applied (or at least it's set a lot higher). I don't think the NZRS are interested in a conversation to increase this threshold on the public site. Been there, done it, got the T-shirt ! Tim From: Craig Spiers [mailto:craig(a)spiers.gen.nz] Sent: Monday, 14 May 2007 10:20 a.m. To: 'nznog' Subject: [nznog] Whois Server Hi All, I've been doing whois lookups against whois.srs.net.nz for a few domains we host at work, mainly to look at the billed until date. However, small problem.. query 10 domains and suddenly they block you. Has anyone else come across this? if so who do you talk to to get the limit increased? Cheers, Craig - Solarix

1 0

Re: [nznog] Whois Server
by Craig Spiers 13 May '07

13 May '07

Yeah, unfortunatly we arent a registrar. We just host a lot of domains, and use enlighten as our registrar. Just trying to query for the billeduntil date - it's a legitimate purpose - we are just trying to build ourselves a notification system to warn us when domains are due to expire etc. I'll try contact nzrs Cheers -----Original Message----- From: Sam Sargeant [mailto:sam.sargeant(a)gmail.com] Sent: Monday, May 14, 2007 10:25 AM To: Craig Spiers Subject: Re: [nznog] Whois Server On 5/14/07, Craig Spiers <craig(a)spiers.gen.nz> wrote: > I've been doing whois lookups against whois.srs.net.nz for a few > domains we host at work, mainly to look at the billed until date. > However, small problem.. query 10 domains and suddenly they block you. If you're a registrar it's recommended you use the XML api to the SRS for queries like this. The folks at NZRS (www.nzrs.net.nz) might be able to tweak their whois blacklisting if that's not an option for you. Sam.

1 0

New Zealand IP Range
by bigalownz 13 May '07

13 May '07

does any one have a list of New Zealand IP Range ??

5 8

Re: [nznog] New Zealand IP Range
by Ian Henderson 12 May '07

12 May '07

Drew Broadley <mailto:drew(a)broadley.org.nz> wrote on Sunday, 13 May 2007 12:03 PM: > Maxnet Nationalroute list > BGP feed on APE > BGP feed on WIX > Global Gateway NZ routing list 'wget ftp://ftp.apnic.net/pub/stats/apnic/delegated-apnic-latest; grep NZ delegated-apnic-latest' may also be useful. -- Ian Henderson, CCIE #14721 Senior Network Engineer, iiNet Limited

1 0

Geoff Huston and Tony Hain align - This is bad.
by Nathan Ward 12 May '07

12 May '07

http://www.potaroo.net/tools/ipv4/ Those of you who are giving out or selling CPEs (or is the plural CPE?), would be wise to ensure that they currently, or with a software upgrade can, support IPv6. http://search.dse.co.nz/search.php? site=&w=IPv6&submit.x=0&submit.y=0&submit=Go -- Nathan Ward

1 0