- NZNOG - lists.nznog.org

[Fwd: [Computer-support] Greylisting - one day after]
by Russell Fulton 15 Nov '06

15 Nov '06

Hi Folks, This might be of interest to NZNOG members -- we have just implemented grey listing for some addresses and the results have been dramatic to say the least... Russell -------- Original Message -------- Subject: [Computer-support] Greylisting - one day after Date: Thu, 16 Nov 2006 10:50:26 +1300 From: Bojan Zdrnja <b.zdrnja(a)auckland.ac.nz> To: Computer Support <computer-support(a)list.auckland.ac.nz> Hi All, Yesterday at 12:00 (mid day) I enabled greylisting on our e-mail cluster. At the moment we are greylisting only machines that don't have reverse DNS entries, or match one of our predefined name regular expressions (these are matching on modem/dialup/cable/adsl machines). The results of this has been amazing - we are seeing a dramatic decrease in processed spam (almost 10 times!). I'm hoping that you are seeing effects of this in your mailboxes as well - there should be overall less spam (marked and unmarked). I'm attaching two graphs that are showing this. The first graph (total-messages.PNG) shows total messages received after I turned on greylising. Green are legitimate messages, blue is spam, red are infected messages. The second graph (CPU-groucho.PNG) shows CPU utilization on groucho (smtpa - the first SMTP machine). For some reason spammers like to hit this machine the most so you can see last 7 days. Now, this works great at the moment but spammers will adapt and improve their software. My wild guess is that this will help for maybe 6 months to a year, but it will definitely give us some time to prepare for future spam waves. Bojan

2 1

Re: [nznog] [Fwd: [Computer-support] Greylisting - one day after]
by Mark Seward 15 Nov '06

15 Nov '06

On 11/16/06, Daniel <daniel(a)fx.net.nz> wrote: > > Which means each server has an individual greylisting database, and mail > > could potentially (worst case) be bounced three times before getting > > through. Has anyone solved this problem already? .. > http://sqlgrey.sourceforge.net/ We have postfix+sqlgrey deployed across several mail hosts. It would be nice to have a replicated postgres behind it but otherwise it does the job very nicely. Also seen here: Similar dramatic reduction in inbound crap and recent increase in abuse of relays behind legit whitelisted hosts. Cheers, Mark.

1 0

Inbound mail filtering at Ihug
by Martin Kealey 14 Nov '06

14 Nov '06

Hi folks, Just a heads-up: We've recently tightened up the reverse & forward DNS tests applied by our inbound SMTP servers (zuul.ihug.co.nz); sending hosts with mismatched DNS entries are now likely to have all messages rejected. If you need an exception to this rule please let us know (presumably by phone...) -Martin Kealey (Systems Engineer, ihüg)

3 2

Re: [nznog] Inbound mail filtering at Ihug
by Martin Kealey 14 Nov '06

14 Nov '06

Ok, before I get a complete deluge of replies... Personally I agree that dropping connections without explanation is, to say the least, unhelpful. I only started here on Monday so some things might take longer than you'd expect, but I'm already looking into this and other outstanding email issues. -Martin

1 0

Invite to IPV6 Industry Update
by Martyn Pratt (marpratt) 14 Nov '06

14 Nov '06

Hi all, for those with an interest in IPv6, Tony Hain co-chair of the IETF working group developing IPv6 Transition tools will be speaking in Wellington and Auckland, please see below for more details . If anyone would like more info please feel free to contact me directly. Cheers Martyn Industry Update-IPV6 Please join us for an informative update from visiting Cisco Senior Technical Leader Tony Hain on IPV6 Developments and Trends Wellington Event When: Friday 1st December Where: Hotel Intercontinental, Thordon Room, Grey Street What Time: 9am to 10.30am RSVP: Trafong(a)cisco.com Please reply by Tuedsay 21st Nov and advise city in response Auckland Event When: Tuesday 28th November Where: Cisco Auckland Boardroom, L25 ASB Building, 135 Albert St What Time: 3pm- 4pm RSVP: Trafong(a)cisco.com Please reply by Tuedsay 21st Nov and advise city in response More about Tony Hain Tony is currently the Senior Technical Leader, IPv6 technologies with Cisco Systems. In addition to providing guidance to the various internal product teams, he was also co-chair of the IETF working group developing IPv6 Transition tools. His IETF participation since 1987 includes a term on the Internet Architecture Board from 1997 - 2001. Named an IPv6 Forum Fellow in 2004, he is currently serving as Technology Director on the forum's North American IPv6 task force steering committee ________________________________ <http://www.cisco.com/> Martyn Pratt Systems Engineer, New Zealand Cisco Systems, Inc. ________________________________ Contact Information: e-mail: Phone: DDI: Mobile: Web: martyn.pratt(a)cisco.com +64 9 355 1950 +64 9 355 1975 +64 21 504 632 www.cisco.com ________________________________

1 0

Speedtest for every ISP for ispmap.co.nz
by Barry Murphy 14 Nov '06

14 Nov '06

Howdy, Could someone from each ISP send me a link to a speedtest on one of your servers, that is if you have a speed test site for your ISP, this will be linked from http://www.ispmap.co.nz/searchisp.php to your speed test site. Secondly if you have tr.php (from http://tr.meta.net.nz) please advise the link at the same time so we can do something like http://www.ispmap.co.nz/yourIP.php (the traceroute to your IP) from each ISP's page. The idea is to allow users to speed test their connection and run traceroute tests to themselves from multiple providers. To make like easier for myself, please reply with the following: ISP Name: Speedtest URL: Traceroute URL: Are these run by the ISP (yes) or a third party (no): Please reply offlist. Thanks Regards Barry Murphy -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

ihug email issues
by Quintin Russ 13 Nov '06

13 Nov '06

Hi, Can someone from ihug please contact me offlist regarding ihug mail servers dropping connection from our servers. Thanks, Quintin

2 2

Notice of maintenance work on ns2.dns.net.nz
by DNS 12 Nov '06

12 Nov '06

Please note we will be doing some maintenance work on the machine that serves ns2.dns.net.nz between 19:00 and 21:00 on Monday the 30th of October. During this time ns2.dns.net.nz may not be available. Throughout this period the other six .nz zone servers (ns1,3,4,5,6,7) will be available. Please contact me if you have any questions. Dave Baker .nz Registry Services support(a)nzrs.net.nz

1 1

OT - Brother HL2700CN w Linux reports please
by John ＠ netTRUST 12 Nov '06

12 Nov '06

Any feedback on this printer's operation with Linux / CUPS using the network interface? Thanks.

2 1

Re: [nznog] More quotes for internet access needed...
by Gerard Creamer 07 Nov '06

07 Nov '06

Apologies - I didn't mean to be unclear in my post, or to speak untruths about radio. I thought the query was regarding connectivity to a home. I have worked with radio links a number of time in commercial settings and it's always been fabulous - both fast and very reliable, and it's great to see a number of purveyors of high class services getting established in this field. Every time I've tried to get radio going to a residential address (ie, in a suburb or regional centre) it's only been possible using products that sadly don't fall under the 'fast and reliable' umbrella. If you are lucky enough to be able to subscribe to a decent provider then be thankful and take the opportunity - I know I would if I could. Cheers, Gerard On 7/11/2006 10:29 p.m., Jonathan Brewer wrote: > Hi Folks, > > Since this is a technical list, I thought I'd contribute some data to answer > Gerard's comment: > > "Wireless has too high a latency" > > I left a ping running for the last hour across our gigabit wireless link > between Sky Tower and ANZ Centre in Auckland. Here are the results: > > 3904 packets transmitted, 3904 packets received, 0% packet loss > round-trip min/avg/max = 1/1.0/5 ms > > A couple points: > > 1. It's raining in Auckland. The unloaded link without the rain is > down around .5ms > 2. Under load in the rain it looks more like 1/3/8 ms. > 3. Yes, it really is wireless, not laser. Tx low 58.1 GHz, Tx high > 62.9 GHz. > > Cheers, > > Jon > > ------------------------- > Araneo Limited > 230B Left Bank > 116 Cuba Street > Wellington 6011 > > Ph: 04 978 7350 > Fx: 04 978 7355 > Mb: 021 345 054 > > http://www.araneo.net.nz/ > ------------------------- > >

2 1