- NZNOG - lists.nznog.org

Re: [nznog] SORBS still listing Telecom static IPs as dynamic...
by Jeremy Strachan 18 May '06

18 May '06

My view is SORBS is a crock of shit, as was ORBS. If the day ends in "y" they block it ... Its called all care - no responsibility... They will blacklist entire (static) IP ranges with no warning, and no realistic way of removing the block, and treat everyone like s..t. The process is inherently flawed, because of the way static ranges end up on their list without reasonable checks. If they blocked a single IP address - then fine, its their wholesale and cavalier attitude to blocking entire ranges that is the root cause of the problem I have with S(ORBS), and why they are hated so much by people like me. No other blacklist operates like - or generates the hate - that S(ORBS) does. If they vanished tommorrow, the world would be a better place. Jeremy -----Original Message----- From: Tony Wicks [mailto:tony(a)prophecy.net.nz] Sent: Thursday, 18 May 2006 7:06 p.m. Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] SORBS still listing Telecom static IPs as dynamic... >> > One would wonder why any sane mail admin wouldnt pull data from as > many sources as possible when deciding on how to score spam. > Sure, but surely there has to be some measure of accuracy involved ? I mean SORBS is about as accurate as choosing every even IP address on Monday and public holidays, every odd one on every other day. It's just not even close to being what it is supposed to be billed as. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

3 2

ANZ Phish
by Joseph Miller 16 May '06

16 May '06

Just a heads-up: I just got sent a phishing scam email for the ANZ... Subject is ANZ Account Security Measures, included link ends up at: http://www.sunrise.cc/bbs/anz.php Relevant parts of the header as follows: Received: from [210.205.6.77] (helo=web-77.blueweb.co.kr) by exorsus.net with esmtp (Exim 4.52) id 1FgAyH-0006MQ-Oq for joff(a)XXXXXXXX.com; Wed, 17 May 2006 13:37:15 +1200 Received: (from apache(a)localhost) by web-77.blueweb.co.kr (8.11.6/8.11.6) id k4H1avJ20690; Wed, 17 May 2006 10:36:57 +0900 Date: Wed, 17 May 2006 10:36:57 +0900 Message-Id: <200605170136.k4H1avJ20690(a)web-77.blueweb.co.kr> To: joff(a)XXXXXXXXXXX.com Subject: ANZ Account Security Measures From: <service(a)anz.com> Reply-To: service(a)anz.com -- Thanks, Joseph Miller Application Developer _________________________________________ http://www.digiweb.co.nz Webhosting, Dedicated Servers, E-commerce Phone: (64 3) 351 6713 PLEASE NOTE: The information contained in this email message and any attached files may be confidential and subject to privilege. The views expressed may not necessarily be the official view of Digiweb New Zealand Limited. All technical advice and opinions are offered on a 'no-liability' basis. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original. Thank you.

1 0

Xtra Nationwide outage?
by Tristram Cheer 15 May '06

15 May '06

Anybody know anything about this? I got phones ringing off the hook from people saying xtra's got a nationwide outage right now. Rat got their cable again? -- ----------------------- Tristram Cheer UberNetworks Level 1 2a Vine St Whangarei 0101 M:021-715-823 W:09-438-5472 F:09-438-5473

6 6

Xtra on Spamcop now.
by Chris Hodgetts 15 May '06

15 May '06

May 15 11:12:35 caitlin postfix/smtpd[20038]: NOQUEUE: reject: RCPT from fep03.xtra.co.nz[210.54.141.243]: 554 Service unavailable; Client host [210.54.141.243] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?210.54.141.243; from=<someuser(a)xtra.co.nz> to=<user(a)domainname.com> proto=ESMTP helo=<fep03.xtra.co.nz> May 15 11:12:35 caitlin postfix/smtpd[20038]: disconnect from fep03.xtra.co.nz[210.54.141.243]

6 5

Re: [nznog] Xtra on Spamcop now.
by Ted Grenfell 14 May '06

14 May '06

So a particular customer of ours is having all email from you marked up as spam? Kind Regards, Ted Grenfell ISP Performance Manager T +64 9 359 5854 (extn 93254) F +64 9 377 0781 M +64 27 443 5455 E ted.grenfell(a)telecom.co.nz W www.telecom.co.nz Level 11, Telecom House, 8 Hereford Street, Private Bag 92028, Auckland CBD, New Zealand ________________________________ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." > -----Original Message----- > From: Joseph Miller [mailto:joseph(a)digiweb.net.nz] > Sent: Monday, 15 May 2006 11:47 a.m. > To: Ted Grenfell; nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Xtra on Spamcop now. > > Ted Grenfell wrote on 15/05/06 11:35: > > What IP addresses are you sending to Joseph? > Sending to mta.xtra.co.nz (210.54.141.1) > > > Any logs you can flick through? > I'll get our mail admin to dig up some SMTP delivery logs when he gets a > spare second, and we've got > someone who's going to send us some mail headers from a junked mail > > > What exactly do you mean by "Junked"? > All the mail is being put in the xtra customer's Junk mail folder > > > > > -- > Thanks, > Joseph Miller > Application Developer > _________________________________________ > http://www.digiweb.co.nz > Webhosting, Dedicated Servers, E-commerce > Phone: (64 3) 351 6713 > > PLEASE NOTE: The information contained in this email message and any > attached files may be > confidential and subject to privilege. The views expressed may not > necessarily be the official view > of Digiweb New Zealand Limited. All technical advice and opinions are > offered on a 'no-liability' > basis. If you are not the intended recipient, you are notified that any > use, disclosure or copying > of this email is unauthorised. If you have received this email in error, > please notify us > immediately by reply email and delete the original. Thank you.

3 2

Re: [nznog] Xtra on Spamcop now.
by Joseph Miller 14 May '06

14 May '06

Ted Grenfell wrote on 15/05/06 11:35: > What IP addresses are you sending to Joseph? Sending to mta.xtra.co.nz (210.54.141.1) > Any logs you can flick through? I'll get our mail admin to dig up some SMTP delivery logs when he gets a spare second, and we've got someone who's going to send us some mail headers from a junked mail > What exactly do you mean by "Junked"? All the mail is being put in the xtra customer's Junk mail folder -- Thanks, Joseph Miller Application Developer _________________________________________ http://www.digiweb.co.nz Webhosting, Dedicated Servers, E-commerce Phone: (64 3) 351 6713 PLEASE NOTE: The information contained in this email message and any attached files may be confidential and subject to privilege. The views expressed may not necessarily be the official view of Digiweb New Zealand Limited. All technical advice and opinions are offered on a 'no-liability' basis. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original. Thank you.

1 0

Hosting Providers w/ unlimited traffic plans
by Jonathan Brewer 14 May '06

14 May '06

Hi Folks, We would like to hear from any web hosting provider with unlimited international traffic plans (rate shaped) or arrangements for dual US/NZ servers. A menu of service like "3U box hosting = $n, international traffic @ $n per 64kbps would be appreciated. Cheers, Jon ------------------------- Araneo Limited 230B Left Bank Cuba Street Wellington 6001 Ph: 04 978 7350 Fx: 04 978 7355 Mb: 021 345 054 http://www.araneo.net.nz/ -------------------------

1 0

Re: [nznog] Community Attributes
by Philip D'Ath 12 May '06

12 May '06

Perhaps a good place to start would be to get APE and WIX to implement a common policy, and then those that peer at those locations are likely to follow suit. -----Original Message----- ... Another thing I've also been thinking about is community attributes. Using it to turn on remote blackholing with upstreams is useful, and we saw at NZNOG the approach to communicate enhancements or variations of that. But lowest common denominator suggests that using an agreed set of community attributes (which works for everyone) to convey stuff is something that should be worked on first. So, combining an agreed set of local_pref's and some community attributes might be the basis of building a broader, and faster exchange between participants. Community String Attributes 1000 Route is locally-originated, and should be exported 1000 Route is locally-originated, but should be suppressed towards peers 1002 Route is a blackhole route 1100 Route was learnt from a customer 1200 Route was learnt from a peer 1300 Route was learnt from a backbone 1400 Route was learnt from a transit provider (domestic/international) Local Preference Values 130 - locally-originated 120 - customers 110 - peers 90 - backbone 85 - domestic 80 - international ...

3 4

Latest Opera Version (8.52) and Secure Sites
by Craig Whitmore 11 May '06

11 May '06

Just a headsup to NZ ISP's who may have customers using the latest version of Opera and unable to connect correctly to some secure sites such as the ANZ Bank Website. http://my.opera.com/community/forums/topic.dml?id=138010 Thanks Craig Whitmore

1 0

Your Local 'Local Preference' Preferences
by jamie.baddeley＠vpc.co.nz 09 May '06

09 May '06

Hi, Snazzy subject line huh? ;-) Anyway, Was pondering the impact of path-stuffed networks being announced into the APE combined with operators not actually setting APE learnt routes with a higher local pref. In other words, how many operators out there are not preffing up APE learnt routes? Cheers jamie

5 5