- NZNOG - lists.nznog.org

Re: [nznog] Mail issues in/out of China
by Gary T. Benner 18 Jan '06

18 Jan '06

[Reply] HI all, Thanks for many replies. Guess we can add 'China' to the keywords such as 'beer' to get everyone's attention!! cheers Gary At 07:21 on 19/01/2006 you wrote >To : truman(a)suspicious.org,nznog(a)list.waikato.ac.nz >CC : nznog(a)list.waikato.ac.nz, >From: Joe Abley, jabley(a)isc.org >Content Type: text/plain >Attached: > > >On 17-Jan-2006, at 23:57, Truman Boyes wrote: > >> I have used SIP phones in China and I can tell you that some of the >> firewalls are a lot more advanced than just blocking applications. I >> was able to place some types of calls via my USA DDI, while others >> were redirected to a local chinese gateway. Essentially that means >> that ALGs were inspecting the SIP invite messages ... quite >> interesting ... > >Presumably this is the difference between living in a region where >the authorities are open about intercepting communications, in >contrast to other places where communications are routinely >intercepted in secret? > > >Joe > >_______________________________________________ >NZNOG mailing list >NZNOG(a)list.waikato.ac.nz >http://list.waikato.ac.nz/mailman/listinfo/nznog > Ref#: 41006

1 0

Apricot2006 Registrations
by Andy Linton 18 Jan '06

18 Jan '06

I know may of you will be at NZNOG in March but if you need more conference time then the annual Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) event is happening in Perth, Western Australia from 22nd February to 3rd March 2006. Registrations for the event are open and early bird is closing on the 14th Jan (tomorrow!). This is the first time that APRICOT will be held in Australia and I've been told they'd really love to see lots of us coming over for it! APRICOT consists of workshops, tutorials, conference, as well as the 6 monthly APNIC meeting. The APRICOT 2006 programme includes: Workshops 22 - 26 February Tutorials 27 - 28 February Conference 1 - 2 March APNIC Member Meeting 3 March Full information about APRICOT 2006 can be seen at http://www.2006.apricot.net Program information is at: http://www.apricot2006.net/index.php/fuseaction/home.program Registration information is at: http://www.2006.apricot.net/index.php/fuseaction/home.registration You are encouraged to register as soon as possible as the early bird registration discount expires on the 14th of January. If you aren't an AU or NZ citizen, visa information is at: http://www.apricot2006.net/index.php/fuseaction/home.visas You must register on-line before submitting a visa application - note that application times for visas for non-ETA countries can be quite lengthy, so please start the registration and application process as soon as you can. You can select a checkbox to request an invitation letter from us to be used for your visa application during registration if you require one, this is an automated process. Accommodation information is at: http://www.2006.apricot.net/index.php/fuseaction/home.accommodation You are encouraged to make arrangements for accommodation as soon as possible as the APRICOT discounted room block expires on the 18th of January. After this date we must release remaining rooms, you then need to compete with the general tourist public for room availability. Sponsorship opportunities still exist for interested companies. Information on Sponsorship is available online at: http://www.apricot2006.net/index.php/fuseaction/home.sponsorship

5 4

Mail issues in/out of China
by Gary T. Benner 17 Jan '06

17 Jan '06

HI all, I have a client with staff member in China who has had consistent difficulty accessing our mail server, both using pop *and* the webmail client. Yet access from within NZ has been faultless. If anyone has had experience in this area, are there issues relating to the Chinese Authorities intercepting such communications, or would it be just to do with the connection? regards Gary Benner 123 Internet Ltd

7 6

Re: [nznog] Studio Cam Update
by Webmaster 16 Jan '06

16 Jan '06

Just so that operators are kept informed, we have been running radio interviews with a strong visual component on the Matinee Idle studio cam. Yesterday was Pets, today is Tattoos. Interest in both the live audio and studio cams has been very high. cheers, Richard Hulse Radio NZ

2 1

IPv6 Connect NZ Domain Servers
by Philip D'Ath 15 Jan '06

15 Jan '06

Does anyone offer commercial hosting of NZ zone files on DNS servers that are IPv6 connected?

2 1

Studio Cam Update
by Webmaster 13 Jan '06

13 Jan '06

Operators should be aware that we are planning an on-air promotion using our studio cams next week. This is not yet confirmed, but I thought I'd give everyone plenty of warning just in case we go ahead. The studio cams operate during the Matinee Idle radio show, 12.30 pm - 5pm on weekdays. (www.radionz.co.nz/phil) The promotion is likely to cause a huge increase in the number of simultaneous viewers. To date we've have seen data rates of between 10 and 40 Mb/s during the show. More than half this data is NZ bound from the US server. The 384 kbs stream is the most popular. There was such a high demand from listeners for the higher data rates, that after the first day of the show we opened these up to customers of non-peering ISPs. regards, Richard Hulse regards, Richard

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 13 Jan '06

13 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: filter-set: fltr-unallocated descr: Unallocated (by IANA) IPv4 prefixes. filter: {1.0.0.0/8^+, 2.0.0.0/8^+, 5.0.0.0/8^+, 7.0.0.0/8^+, 23.0.0.0/8^+, 27.0.0.0/8^+, 31.0.0.0/8^+, 36.0.0.0/8^+, 37.0.0.0/8^+, 39.0.0.0/8^+, 42.0.0.0/8^+, 49.0.0.0/8^+, 50.0.0.0/8^+, 74.0.0.0/8^+, 75.0.0.0/8^+, 76.0.0.0/8^+, 77.0.0.0/8^+, 78.0.0.0/8^+, 79.0.0.0/8^+, 89.0.0.0/8^+, 90.0.0.0/8^+, 91.0.0.0/8^+, 92.0.0.0/8^+, 93.0.0.0/8^+, 94.0.0.0/8^+, 95.0.0.0/8^+, 96.0.0.0/8^+, 97.0.0.0/8^+, 98.0.0.0/8^+, 99.0.0.0/8^+, 100.0.0.0/8^+, 101.0.0.0/8^+, 102.0.0.0/8^+, 103.0.0.0/8^+, 104.0.0.0/8^+, 105.0.0.0/8^+, 106.0.0.0/8^+, 107.0.0.0/8^+, 108.0.0.0/8^+, 109.0.0.0/8^+, 110.0.0.0/8^+, 111.0.0.0/8^+, 112.0.0.0/8^+, 113.0.0.0/8^+, 114.0.0.0/8^+, 115.0.0.0/8^+, 116.0.0.0/8^+, 117.0.0.0/8^+, 118.0.0.0/8^+, 119.0.0.0/8^+, 120.0.0.0/8^+, 121.0.0.0/8^+, 122.0.0.0/8^+, 123.0.0.0/8^+, 173.0.0.0/8^+, 174.0.0.0/8^+, 175.0.0.0/8^+, 176.0.0.0/8^+, 177.0.0.0/8^+, 178.0.0.0/8^+, 179.0.0.0/8^+, 180.0.0.0/8^+, 181.0.0.0/8^+, 182.0.0.0/8^+, 183.0.0.0/8^+, 184.0.0.0/8^+, 185.0.0.0/8^+, 186.0.0.0/8^+, 187.0.0.0/8^+, 189.0.0.0/8^+, 190.0.0.0/8^+, 197.0.0.0/8^+, 223.0.0.0/8^+} remarks: For the complete set of bogons, please see: fltr-martians - special use and reserved prefixes. fltr-bogons - fltr-unallocated + fltr-martian. http://www.cymru.com/Documents/bogon-list.html admin-c: RTH32-ARIN tech-c: RTH32-ARIN notify: radb(a)cymru.com notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz mnt-by: MAINT-BOGON-FILTERS changed: rpsl-admin(a)nzix.net 20040819 source: NZRR REPLACED BY: filter-set: fltr-unallocated descr: Unallocated (by IANA) IPv4 prefixes. filter: {1.0.0.0/8^+, 2.0.0.0/8^+, 5.0.0.0/8^+, 7.0.0.0/8^+, 23.0.0.0/8^+, 27.0.0.0/8^+, 31.0.0.0/8^+, 36.0.0.0/8^+, 37.0.0.0/8^+, 39.0.0.0/8^+, 42.0.0.0/8^+, 49.0.0.0/8^+, 50.0.0.0/8^+, 77.0.0.0/8^+, 78.0.0.0/8^+, 79.0.0.0/8^+, 92.0.0.0/8^+, 93.0.0.0/8^+, 94.0.0.0/8^+, 95.0.0.0/8^+, 96.0.0.0/8^+, 97.0.0.0/8^+, 98.0.0.0/8^+, 99.0.0.0/8^+, 100.0.0.0/8^+, 101.0.0.0/8^+, 102.0.0.0/8^+, 103.0.0.0/8^+, 104.0.0.0/8^+, 105.0.0.0/8^+, 106.0.0.0/8^+, 107.0.0.0/8^+, 108.0.0.0/8^+, 109.0.0.0/8^+, 110.0.0.0/8^+, 111.0.0.0/8^+, 112.0.0.0/8^+, 113.0.0.0/8^+, 114.0.0.0/8^+, 115.0.0.0/8^+, 116.0.0.0/8^+, 117.0.0.0/8^+, 118.0.0.0/8^+, 119.0.0.0/8^+, 120.0.0.0/8^+, 173.0.0.0/8^+, 174.0.0.0/8^+, 175.0.0.0/8^+, 176.0.0.0/8^+, 177.0.0.0/8^+, 178.0.0.0/8^+, 179.0.0.0/8^+, 180.0.0.0/8^+, 181.0.0.0/8^+, 182.0.0.0/8^+, 183.0.0.0/8^+, 184.0.0.0/8^+, 185.0.0.0/8^+, 186.0.0.0/8^+, 187.0.0.0/8^+, 197.0.0.0/8^+, 223.0.0.0/8^+} remarks: For the complete set of bogons, please see: fltr-martians - special use and reserved prefixes. fltr-bogons - fltr-unallocated + fltr-martian. http://www.cymru.com/Documents/bogon-list.html admin-c: RTH32-ARIN tech-c: RTH32-ARIN notify: radb(a)cymru.com notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz mnt-by: MAINT-BOGON-FILTERS changed: rpsl-admin(a)nzix.net 20040819 changed: rpsl-admin(a)nzix.net 20060113 source: NZRR

6 5

Notification of NZRR Database changes
by NZRR Database Notifications 11 Jan '06

11 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS64524 descr: advertised to AS9439 by Institute of Chartered Accountants of NZ - AS64524 members: 202.27.78.0/24^24-29, 202.27.79.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: nathan.cottle(a)icanz.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050221 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS64524 descr: advertised to AS9439 by Institute of Chartered Accountants of New Zealand - AS64524 members: 203.97.94.0/28^28-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: paul.ross(a)nzica.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060112 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 11 Jan '06

11 Jan '06

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS24226 descr: advertised to AS9439 by Catalyst IT - AS24226 members: 202.20.6.0/24^24-29, 202.36.119.0/24^24-29, 202.46.190.0/24^24-29, 202.49.159.0/24^24-29, 202.78.240.0/21^21-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: netadmin(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050119 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS24226 descr: advertised to AS9439 by Catalyst IT - AS24226 members: 202.78.240.0/21^21-29, 202.36.119.0/24^24-29, 202.46.190.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: routing(a)catalyst.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20060112 source: NZRR

1 0

IANA IPv4 allocations and bogon updates: 121/8, 122/8, and 123/8
by Rob Thomas 09 Jan '06

09 Jan '06

-----BEGIN PGP SIGNED MESSAGE----- [ Apologies to those of you who receive this note in multiple forums. ] Hi, team. The numerous Team Cymru bogon projects have been updated as of 05 JAN 2006 to reflect the following IANA allocation made on 05 JAN 2006: 121/8 Jan 06 APNIC (whois.apnic.net) 122/8 Jan 06 APNIC (whois.apnic.net) 123/8 Jan 06 APNIC (whois.apnic.net) IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-template.htm> Secure JUNOS BGP Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-bgp-template.htm> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix- Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix- filter-loose.htm> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix- filter-strict.htm> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> RIPE NCC fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#ripe> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Bogus ASN monitoring - <http://www.cymru.com/BGP/asnbogusrep.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thank you for your continued support. Thanks, Rob. - -- Rob Thomas Team Cymru http://www.cymru.com/ ASSERT(coffee != empty); -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQ8MiDlkX3QAo5sgJAQEHwwP/X6Jh/sZ+j46KosfJ6H3+Wzb7sE3xXjl9 ktuNLb7Xfvo0A4PwUSv5NF5aS4Yp1C5NWZcrBDKkwIMA4WcC7DZK+qvFHeOX7EVS vzXzpw2FGCyImU1m49qNR+437vM0CNVaeFeMc+zjHnnXlsAEVVIhwQ7lz0KE+rlM G2ZKbvaQRyw= =qtQ6 -----END PGP SIGNATURE-----

1 0