- NZNOG - lists.nznog.org

SCC cable cut in the US
by Juha Saarinen 22 Apr '06

22 Apr '06

http://cgi.internode.on.net/advisories/item.html?id=3679 Is this affecting NZ at all? Ihug customers? -- Juha Saarinen www.geekzone.co.nz/juha www.computerworld.co.nz

1 0

Port 25 blocking and a request for advice, on behalf of NZNOG.
by James Clark 22 Apr '06

22 Apr '06

Kia ora Wietse, [NZNOGgers - Please read this email and the next before you flame me. I won't see the flames until very late tomorrow :) I hope to not be flamed over this. Yes I deserved it earlier, I'll let you have that one.] You're about to be Cc-ed on a tale from me to the NZNOG mailing list. It involves the word Postfix a fair bit, Postfix rocks. Thank's for all the hard work you've put in to your MTA, it's a gem. I won't build an MTA with anything else, it suits me. So, yeah. Thanks. I hope you enjoy the soon to follow tale. Heck, maybe you won't, it doesn't matter in the grand scheme of things ;) Xtra is planning to block port outbound 25 outbound, no doubt a few other xSPs will follow suite at around the same time. Big business is what it is. The people that work at are good people. I personally like to support the underdog and I get on my soapbox occasionally. Xtra is New Zealand's largest ISP, a monolithic monopoly that's in bed with Microsoft ( www.xtramsn.co.nz ) and it's got it's hand playing very heavily in Parliment. What Xtra does impacts New Zealands Internet very heavily. This email is a request for your advice, for me personally and I suppose (as is in the subject heading) a request on behalf of NZNOG. I hope it is well recieved. I was wondering if you might perhaps take the time to chime in and let the NZNOG community know that blocking port 25 isn't a _solution_. One of the root motivators for implementing the block is the sheer number of their customers that have computers which run "rooted" Microsoft OSes. My angle is that blocking port 25 will not _solve_ the root cause of the problem. I believe that Xtra are in a good position to put some pressure on Microsoft with regards to rolling out a much better _solution_ , for example: Transparently scanning customer email for virus / blatant-spam related content. Then identifying and contacting those customers, to sort out their issues. Something that could be fairly easily implemented - it would just cost money, probably lots of it. Xtra and Microsoft are in a good position with regards to finance, as we all know. And this could be opted out of (easily), so the clueful can carry on living under the radar (the pleasant side of the radar). The devil is in the detail... I can imagine it'd be a logistical nightmare. However, I know the above is possible, I scripted something in Perl to do just this, when I worked for Wave Internet (a local ISP). The script did the above (example) automatically minus the automated contacting of customers, that was done manually but the script notified the support team of who was an offender. It also just scanned the Postfix's logs, not port 25 outbound for the entire op etc. I wasn't that savvy at the time. It would not just help the problem it would also curb the expense that is passed on to the customer. I've talked to a handful of customers while at Wave on the helpdesk that had footed thousands of dollars in bills due to trojans etc (Porn dialers, mass mailers etc). Those poor souls didn't get much sympathy from any party, just our condolences, it was the Telco that won in the end. I'm sure everyone on the NZNOG list would value your input on this issue, some may disagree with you. I know some have disagreed with me :) Heck, you may even support the blocking of port 25, though I suspect not[1]. Perhaps you won't, it doesn't matter. There's no harm in asking for the advice of someone that's well respected in the MTA building business. I've done a list subscribe request, on your behalf, to make it easier for you if you'd like to make a difference - either for or against my opinion which is: "Blocking port 25 is bad for the Internet (as a whole).". I know my initial post (to NZNOG) wasn't recieved too well. The thread started here: http://list.waikato.ac.nz/pipermail/nznog/2006-April/011325.html My rant here: http://list.waikato.ac.nz/pipermail/nznog/2006-April/011325.html I broke a few of the NZNOG rules and ruffled some feathers. Oh well, them's the breaks when the soapbox comes out :) A reminder. NZNOGgers - Please read the next email before you flame me. I won't see the flames until very late tomorrow :) Wietse, the next email from me will provide even more background. I can imagine that we'd all look forward to hearing your opinion on the matter. Thanks for your time so far. Perhaps we'll hear from you :) If you happened to have already deleted the subscribe request: http://list.waikato.ac.nz/mailman/listinfo/nznog [1] Sorry, I don't currently have time for _lots_ of list reading etc just a few key announcements and NZNOG, where I typically lurk. I don't *know* your view, I'd typed up to [1] before going "duh, Google...". So I carried on. -- Cheers, James Clark.

5 5

"JPMorgan Chase" phishing....
by Paul Adshead 20 Apr '06

20 Apr '06

Looks like another phishing attempt you may want to block... Cheers, Paul. ---------- *From:* Chase Security Department[SMTP:CONFIRM(a)CHASE.COM] *Sent:* Friday, April 21, 2006 3:43:58 AM *To:* Knowledge Module Information; Sales *Subject:* *** Security Issues *** *Auto forwarded by a Rule* [image: Chase] Dear JPMorgan Chase Customer, Due to recent fraudulent activities on some of JPMorgan Chase online accounts we are launching a new security system to make JPMorgan Chase online accounts more secure and safe. Before we can activate it we will be checking all JPMorgan Chase online accounts to confirm the authenticity of the holder. We will require a confirmation that your account has not been stolen or hacked. Your account has not been suspended or frozen. To confirm your account status please Login<http://85.13.77.2/.secure/chase/myaccounts.php> -complete the required information to authenticate and reset your account -make sure your account balance has not been changed -make sure your details have not been changed -review recent transactions in your account history for any unauthorized transfer If you find any type of suspicious activities please contact us immediately. Please include in your message your account number, your account name and the unauthorized transfer date & time. Please do not reply to this message. For any inquiries, contact Customer Service. JPMorgan Chase Copyright (c) 2006

2 1

Port 25
by Simon 19 Apr '06

19 Apr '06

Just a quick email to the list to find out what other service providers are doing regarding XTRA blocking port 25 when your company does not provide internet connections, so many of your customers are using xtra as a service provider but not for other services wuch as mail. Many of my customers are XTRA customers, but are also vodafone etc etc, so an external autheticated mail server is a huge bonus for them. Use secure port? Regards, Simon

13 20

Re: [nznog] Port 25
by James Clark 19 Apr '06

19 Apr '06

Jonathan Brewer wrote: > I'd appreciate it if you kept it off the list. Why? If people stopped emailing me personally I'd have no reason to reply. Get the point? Keep it on the list. -- Cheers, James Clark.

3 3

Re: [nznog] Port 25
by James Clark 19 Apr '06

19 Apr '06

Donald/Simon, please kill this thread. Things have gotten personal for some reason that I don't care to understand. Alastair Johnson wrote: > Are you familiar with the term "FUD"? Fear, Uncertainty, Doubt. By > making a statement "At a cost, I imagine", you start spreading > uncertainy and doubt. It most certainly isn't fact. Correct. It most certainly isn't fact. > That's one person's opinion, against many. Do a little research. I think you'll find it's many verses many. And yes, it was my opinion regarding a fairly hefty operation issue for New Zealand's NOCish type people. Well, my first post was. James Clark wrote: >> I'll repeat, keep it on the list. People don't get the hint around here? > The reply was sent off-list for a reason. You can be a decent person > and accept that, or you can prove yourself more of a plonker by not > doing so. I will heed your wise words... Goodnight gentlemen. I'm leaving it there, I've no interest in these non operational issues. I have better things to do, I'll go back to being silent. (I will not respond, so don't bother emailing me) http://carcino.gen.nz/images/index.php/00b9a680/463c5922 -- Cheers, James Clark. p.s. I'm guessing someone will bite and send me another unsubscribe. Donald, does that constitute harrassment of some sort? The link doesn't seem to work: http://list.waikato.ac.nz/mailman/confirm/nznog/5d02...yeahright...8bdccfd And... Steve Kurzeja <steve(a)a.geek.nz> thanks for the "shut your pie-hole", it was rad.

2 1

Re: [nznog] Port 25
by James Clark 19 Apr '06

19 Apr '06

Alastair Johnson wrote: > James Clark wrote: >> At a cost I imagine. CBF researching it. > > > Please don't be spreading FUD and turning the list into something less > than useful. > > Thanks. FUD? That would be me saying "You know they charge for it", I CFDed researching it - if I wanted to know I would. I don't. If you want to know, research it. The issue is Xtra are blocking port 25. That is bad and not good, all at the same time. I'll repeat, keep it on the list. -- Cheers, James Clark.

1 0

Re: [nznog] Port 25
by jdmwoolley＠ihug.co.nz 19 Apr '06

19 Apr '06

> disabling their customer's service. Actually, subscribers have the option to "opt-out" so if you know what you're doing and WANT to use another smtp server/use port 25 for some reason you still can. A reasonable compromise between, "disabling their customer's service" and being proactive about security in my personal opinion. Not that blocking port 25 is going to be a magic bullet against all viruses/worms etc, but a start anyway.

5 5

Re: [nznog] Port 25
by James Clark 19 Apr '06

19 Apr '06

Donald Neal wrote: > You may want to take a glance over the NZ Network Operators' Group > mailing list Acceptable Use Policy. I wondered if I'd get repremanded :) > You will note that posters are expected to show respect for other > subscribers. Have I offended someone? It was tounge in cheek ay. I've got good friends working at Telecom, they treat their employees well. That doesn't stop Telecom being part of the "evil empire". Oh, wait, Xtra is a seperate company. I forgot. If you want to punish me, which would just be sad, please just block me from posting to the list. -- Cheers, James Clark

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 17 Apr '06

17 Apr '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24181 descr: Route set advertised to AS9439 by TheLoop - AS24181 members: 202.49.20.0/22^22-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: geoffs(a)nayland.school.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20051027 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24181 descr: advertised to AS9439 by The Loop - AS24181 members: 202.49.16.0/21^21-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: swebb(a)connectorsystems.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060418 source: NZRR

1 0