- NZNOG - lists.nznog.org

plea for increase participation in v6ops/IETF
by JORDI PALET MARTINEZ 10 Jun '17

10 Jun '17

Hello all, At the last LACNIC event, I mentioned on a couple of occasions the need for ISPs in the region, especially small and medium-sized ones, to participate in the decisions taken in the IETF IPv6 Operations Working Group (v6ops). I’m sending this here as well, as I believe the situation also apply to this region. When I asked among the attendees how many participate in v6ops, only one person raised his hand. What does it mean to participate in the mailing list? Follow some emails (sometimes only 1-2 a week, sometimes they can be several in a day), and therefore learn about what is being discussed and give your opinion and, given that decisions are made by Consensus, influence them. What consequences has NOT participating? That decisions against your interests/opinions could be taken, and obviously do not consider your perspective in the standards. Generally large operators are involved, which implies that your interests are not sufficiently represented, and in general are contrary to yours. Your "vote/opinion" is not worth more than yours, but the big one is present and the small/medium NO! I give you a very concrete example. The serious problem that small and medium ISPs have, is to continue offering IPv6 and IPv4 services to their customers, when they already do not have IPv4 addresses. Only the biggest ISPs have a great purchasing power and can influence the manufacturers to do for them what they need. One possibility to solve it, extending the life of IPv4, but not necessarily deploying IPv6, is using CGN, which is also very expensive, and breaks many things. The solution is simple. Deploying IPv6-only services in the last mile, which involves using transition mechanisms, such as 464XLAT that has been deployed on millions of smartphones worldwide, so that applications continue to operate transparently as they "believe" they have IPv4. What is the problem, then? That manufacturers of CPEs are based on an old specification (RFC7084) that does not contemplate these transition mechanisms, so when a small/medium ISP asks a manufacturer for a firmware upgrade or a new CPE, they do not include that solution and perhaps they offer it with an extra cost. In my view, this should change, and that is why I am working on a number of documents, including RFC7084-bis (https://datatracker.ietf.org/doc/draft-ietf-v6ops-rfc7084-bis/) To update this situation, but there is opposition from large ISPs and virtually no small/medium "talks" about it, and in fact these large ISPs deny the situation. In addition, the document also specifies the "automated" support of those cases in which the user installs other routers (which is very common as we all know, and will be more and more in IPv6, IoT, etc.), behind the router installed by the ISP, through homenet (HNCP). I am not asking for your support for my documents, but for understanding the problem and the solution that is being proposed and/or possible new ones, and for the opinion of not only those very few “big ones”, but also of many small and medium, who are most affected. If you want to subscribe to this list, search for "subscribing" at: https://www.ietf.org/mailman/listinfo/v6ops You can see the files of the discussion in: https://mailarchive.ietf.org/arch/search/?email_list=v6ops I remind you that participating in the IETF does not require a presence in the meetings, as consensus is agreed in the list. Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Free parking network contact
by Simon 07 Jun '17

07 Jun '17

Hi there, is anyone from free parking on this list from their network operations team and can contact me please?

2 1

SkyTV NOC
by John Burns 30 May '17

30 May '17

Is anyone from SkyTV on this list? I have a /23 (allocated March 2017) that is being geoblocked on fanpass.co.nz and our customers would like us to solve it before the Lions tour starts!

1 0

cantva.canterbury.ac.nz Mail Admin at canterbury.ac.nz your server is not coming back from Greylist
by Don Gould 24 May '17

24 May '17

If there's a mail admin from canterbury.ac.nz on list, could you have a quick look at your server? We're not seeing mail coming from you because your server doesn't come back to have another go. We run a 10 minute greylist timer but you don't seem to come back for another go. # grep canterbury.ac.nz mail.log May 24 21:46:04 mx postfix/smtpd[22652]: connect from cantva.canterbury.ac.nz[132.181.2.27] May 24 21:46:05 mx tumgreyspf[22740]: Initial greylisting: REMOTEIP="132.181.2.27" HELO="cantva.canterbury.ac.nz" SENDER="stephen.hickson(a)canterbury.ac.nz" RECIPIENT="don(a)bowenvale.co.nz" QUEUEID="" May 24 21:46:05 mx postfix/smtpd[22652]: NOQUEUE: reject: RCPT from cantva.canterbury.ac.nz[132.181.2.27]: 450 4.7.1 <stephen.hickson(a)canterbury.ac.nz>: Sender address rejected: Service unavailable, greylisted (http://projects.puremagic.com/greylisting/) from=<stephen.hickson(a)canterbury.ac.nz> to=<don(a)bowenvale.co.nz> proto=ESMTP helo=<cantva.canterbury.ac.nz> TIA. D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) www.thinkdesignprint.co.nz skype: don.gould.nz

2 2

GLIF 2017
by GLIF Secretariat 22 May '17

22 May '17

All, Apologies for the advertising, but this global research and education networking event hosted by AARNet in Sydney may be of interest to some… Regards, Kevin Meynell ---- 17th Annual Global LambdaGrid Workshop - GLIF 2017 25-27 September 2017 Camperdown Campus, University of Sydney, Australia https://www.glif.is/meetings/2017/flyer.pdf <https://www.glif.is/meetings/2017/flyer.pdf> We are pleased to announce that registration is now open for the 17th Annual Global LambdaGrid Workshop which is being hosted by AARNet, the Australian National Research and Education Network. This will bring together leading network personnel from around the world to collaborate and exchange knowledge on new lambda networking technologies, middleware and applications. The workshop will have a specific focus on how global network architectures are supporting research applications in the Pacific region, in particular astronomy, high-energy physics, and microbiology and how big data is sent and processed around the world. There will also be discussions on the Pacific Islands Research and Education Network, long distance parallel file systems, new SDN and SDX initiatives, along with demonstrations of applications that can take advantage of these network facilities. The registration fee is AUD 450 per person (AUD 350 for registered students) up to 23 August 2017, and AUD 500 per person (AUD 400 for registered students) thereafter. Accommodation is available in the Rydges Camperdown at the special rate of AUD 165 per night including GST, the Mercure Sydney Central at the special rate of AUD 249 per night, and the Waldorf Sydney Central Serviced Apartments at the special rate of AUD 195 per night including GST. These can be reserved when registering for the workshop, and should be booked before 23 August 2017. Please note that a Software Defined Networking (SDN) Workshop will also held on Thursday, 28 September 2017 at the University of New South Wales. You can register, book accommodation and pay online at https://www.glif.is/meetings/2017/ <https://www.glif.is/meetings/2017/>

1 0

Issue with connections from CanIt-Domain-PRO anti-spam filter
by Jean-Francois Pirus 18 May '17

18 May '17

Hi all, I have an interesting issue. Just upgraded our mail server to handle srs-milter. Since the upgrade we found that the srs-milter would crash around 05:50 and 22:20 everyday. (Obviously it's got a bug) Turns out everyday around 05:50 we get a connection from canit-1.iserve.net.nz[202.191.33.141] And every night around 20:20 we get a connection from canit-scanner-2.slingshot.co.nz[60.234.4.40] They both seem to be running CanIt-Domain-PRO anti-spam filter. I cannot just block the scanner as the address is shared with MX's (ie: canit-scanner-2.slingshot.co.nz[60.234.4.40] and canit-slingshot-mx-2.t3.nz) Seems like the scanner is sending 'unusual' data once a day on a schedule. Any ideas what that single daily connection is about? or workarounds? Thanks. PS: Apart from fixing the bug myself... -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

2 5

Power issues in Skytower
by Patrick Ohearn 16 May '17

16 May '17

Hi list, Has anyone has any power issues in skytower this afternoon? We briefly lost power on level 47 around 1600.

1 0

AusNOG 2017 Call for Presentations
by Mark Prior 08 May '17

08 May '17

The next AusNOG conference is only four months away, scheduled to be held at The Langham, Melbourne, on 7 & 8 September 2017, so we are making our first call for presentations of interest to the Internet operations community. Previous feedback has suggested that attendees would like more content from the community so we'd like to encourage members of the community to submit more proposals, especially if you haven't previously presented! Internet operations is a broad topic but some areas of interest are: * Improving the redundancy/resiliency/sustainability of your network * Using automation to improve service reliability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year Naturally other topics that are of interest to the network operator community are also welcome but presentations of a purely marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Please note any timing constraints when submitting a presentation. By submitting a presentation for consideration in the AusNOG 2017 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 12 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 10 July: Presenters notified of their acceptance status as an AusNOG 2017 presentation. 30 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent by email to organisers AT ausnog DOT net. A separate call for lightning talks will be made closer to the AusNOG 2017 event. As in previous years you must be registered to attend AusNOG 2017 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation.

1 0

Alcatel IPv6 PPPoE
by Pieter De Wit 03 May '17

03 May '17

Good Morning List, I was wondering if anyone out here (there :)) has a working config for an Alcatel 7750 to give out IPv6 to subscribers. We would like to allocate /112's as a link net between the CPE and the BNG. We then want to route a /64 or /48 over this link net. All of this is configured in Radius. The link-nets are configure using the "wan-host" option under the subscriber interface. The /64 or /48 subnets is part of a /36 configured as the "pd" option. From what I was reading, it appears as if the link-nets needs to be /64...surely not ? Cheers, Pieter

11 17

Russian-controlled telecom hijacks financial services’ Internet traffic
by Michael Fincham 27 Apr '17

27 Apr '17

Morning all, For those who didn't spot this yet: <https://arstechnica.com/security/2017/04/russian-controlled-telecom-hijacks…> "On Wednesday, large chunks of network traffic belonging to MasterCard, Visa, and more than two dozen other financial services companies were briefly routed through a Russian government-controlled telecom under unexplained circumstances that renew lingering questions about the trust and reliability of some of the most sensitive Internet communications." -- Michael

1 0