- NZNOG - lists.nznog.org

smartmailpro.co.nz
by Russell Fulton 17 Jul '06

17 Jul '06

Any know anything about this crowd? Their name has come up in connection with a spamming incident that we got involved with. >From the web site they could be a legit 'bulk mailer' (if that isn't an oxymoron) or bunch of ratbag spammers. I'd like to have some more information before we decide what to do next. Russell.

5 5

Re: [nznog] APE Route reflector stability
by Gordon Smith 17 Jul '06

17 Jul '06

I believe that Juniper users would be more likely to detect this issue first, since the default arp cache timeout on a Juniper is 20 minutes, as opposed to 240 minutes (4 hours) on a Cisco

1 0

Re: [nznog] APE Route reflector stability
by Thomas Salmen 16 Jul '06

16 Jul '06

> > Hi Thomas > > On Mon, Jul 17, 2006 at 06:26:25PM +1200, Thomas Salmen said: > > > As far as I know, proxy-arp is disabled under junos by default. Our > > peering at APE is done with M-series kit, and we didn't notice any > > issues. > > I wasn't suggesting that the Junipers were proxy-arping, rather that > when the Juniper gets two replies to an ARP broadcast it previously sent > (one from the legit MAC, and one from the proxy-arping MAC), it seems to > be a bit of a lottery which one the Juniper uses. I see; I didn't read your initial message properly - sorry for the mistake. If I recall correctly, some earlier versions of BSD would run into problems if a host received more than one response to an ARP who-has that it had issued. I know that FreeBSD at least was at some point vulnerable to ARP cache poisoning as well; this was a few years ago now. The fix for this particular problem utilized unicast ARP. There is possibly some link here; Junos is based on BSD. I can't find any further reference to this anywhere though. There are possibly some BSD-specific ways of tuning the ARP implementation on the Junipers, but if so it'd no doubt require low-level fiddling. All I can say is that we didn't notice any problems at the time; so I'm not going to play with my production routers too much :) If I do find out any more information I'll let you know; I'm quite interested in finding out myself, now. Cheers, Thomas

1 0

Re: [nznog] APE Route reflector stability
by Thomas Salmen 16 Jul '06

16 Jul '06

As far as I know, proxy-arp is disabled under junos by default. Our peering at APE is done with M-series kit, and we didn't notice any issues. http://www.juniper.net/techpubs/software/junos/junos75/swconfig75-networ k-interfaces/html/interfaces-ethernet-config40.html This is for 7.5 code, which is fairly newish - it's possible there are issues when using older versions. On the E-series it's enabled by default: http://www.juniper.net/techpubs/software/erx/junose72/swcmdref-a-m/html/ i-commands204.html Cheers, Thomas > > Hi all. > > On Fri, Jul 14, 2006 at 07:56:44AM +1200, Gordon Smith said: > > > Would someone like to comment on what's happening with the APE route > > reflectors? The flap statistics I'm seeing are impressive - those > > servers got wings now? :-) > > This turned out to be caused by another ISP lighting up a new router and > > a) getting the netmask wrong > b) forgetting to disable proxy-arp > > So, those setting up new routers, especially Cisco kit that defaults to > turning proxy-arp on, "no ip proxy-arp" is your friend. > > An interesting observation is that of the ~40 active peers, only two > seemed to be adversely affected by the proxy-arp, and they're both > Juniper boxes. I'm wondering if Junipers may have a more trusting > approach to handling ARP replies than other kit. > > So, if anybody has bright ideas on ways that the ARP handling of > Junipers can be made a little more cynical (ie, something more like the > Linux handling where it does unicast ARP until the other end stops > responding, and then goes back to broadcast ARP, but something less > restrictive than static ARP entries), I'm all ears. > > Cheers > Si > >

2 1

APE Route reflector stability
by Gordon Smith 16 Jul '06

16 Jul '06

Would someone like to comment on what's happening with the APE route reflectors? The flap statistics I'm seeing are impressive - those servers got wings now? :-) Cheers, Gordon

2 2

Notification of NZRR Database changes
by NZRR Database Notifications 13 Jul '06

13 Jul '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24347 descr: Route set advertised to AS9439 by Intergen - AS24347 members: 202.126.80.0/21^21-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: dwayne.bace(a)intergen.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050304 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24347 descr: advertised to AS9439 by Intergen Limited - AS24347 members: 202.46.160.0/20^20-29, 202.126.80.0/21^21-29, 202.49.144.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: dwayne.bace(a)intergen.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060714 source: NZRR

1 0

Re: [nznog] Procedure for handling a new spammer
by Scott Weeks 12 Jul '06

12 Jul '06

----- Original Message Follows ----- From: Justin Cook <skull(a)skull.co.nz> > I don't really think they were doing superlarge volume at > this point, just your usual commercial spammer who > desperately wants to appear legitimate. One piece of UCE is one too many. It's like someone throwing wet bull crap at you. One is too many. period. scott

6 5

Spectrum Allocations for Broadband Wireless Access
by Jonathan Brewer 11 Jul '06

11 Jul '06

Hi Folks, Last week our friends at the Ministry of Economic Development released a discussion paper on spectrum for broadband wireless. http://www.rsm.govt.nz/spp/bwa/discussion/index.html We'd like to see as many comments on this paper submitted to the MED as there are members of the ISP community. Our primary agenda is getting "mandatory deployment of services" attached to any future management rights and area licenses, so we don't see large players buying up huge blocks of spectrum and sitting on them. This has damaged the environment in New Zealand in the past, and needs to be stopped. "Managed Park" and "Light Licensing" are new ideas (to New Zealand) in the paper also very worthy of our consideration. Responses to this paper are due 4th August 2006, so please have a look now. If there is interest from the community, we would be willing to host a discussion in Wellington on these issues on Thursday, 27th July. Regards, Jonathan Brewer ------------------------- Araneo Limited 230 Left Bank 116 Cuba Street Wellington 6011 Ph: 04 978 7350 Fx: 04 978 7355 http://www.araneo.net.nz/ -------------------------

2 1

Notification of NZRR Database changes
by NZRR Database Notifications 11 Jul '06

11 Jul '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS24324 descr: advertised to AS9560 by BCL - AS24324 members: 124.157.64.0/19^19-29, 202.49.128.0/21^21-29, 202.49.183.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sainesh.singh(a)bclnz.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060405 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS24324 descr: advertised to AS9560 by Broadcast Communications Ltd - AS24324 members: 124.157.64.0/19^19-29, 202.49.128.0/21^21-29, 202.27.83.0/24^24-29, 202.36.75.0/24^24-29, 202.36.154.0/24^24-29, 202.37.168.0/24^24-29, 202.49.183.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: smc(a)bclnz.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060712 source: NZRR

1 0

Sky tower wireless providers
by Barry Murphy 11 Jul '06

11 Jul '06

Hey guys, Let me start by asking you to reply offlist. I'm moving into a flat in auckland CBD (13 floors up) and have a clear view of the entire sky tower, i'm looking for stable wireless service (APE only) so I can get to my systems on Orcons network. If you have radio gear on Level 48 pointing towards Quay street or Anzac Ave (where I am) and can offer reliable cheap ape circuit, 2-10mb unmetered (I dont expect to use that much) which I can use VoIP with, please contact me. And incase I was off topic, I'll offer beer in return. Cheers Barry

1 0