- NZNOG - lists.nznog.org

04 Dec '05

Does anybody know what's up with TelstraClear. I can't get to their nameservers from NZ or the US. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Senior Software Engineer Phone (+64-9) 358 2081 Clearfield Software Ltd Fax (+64-9) 358 2083 4th Floor 8-10 Whitaker Place Mob (+64-21) 640 779 P O Box 3901 Auckland, New Zealand ------------------------------------------------------------------------

3 3

Re: [nznog] TelstraClear down
by Stewart Fleming 04 Dec '05

04 Dec '05

DNS certainly gone bang. IP routing still working, but very slow. Denial of service attack? Had a call from my Telstra rep earlier, but that was for a billing error outstanding since February. Maybe they keep the DNS records in the same file...? -- Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request GET http://networkstatus.telstraclear.co.nz/home/clearnet.html. Reason: DNS lookup failure for: networkstatus.… [View More]

3 2

Re: [nznog] TelstraClear Down?
by Simon Allard 04 Dec '05

04 Dec '05

Just the nameservers? They have probably been ACL'ed to stop DNS DDoS attacks, like what xtra etc have done. Simon Allard ihug Limited P +64 9 962 9827 M +64 21 456 412 E simon.allard(a)staff.ihug.co.nz > -----Original Message----- > From: jfp [mailto:jfp(a)clearfield.com] > Sent: Monday, 5 December 2005 10:20 a.m. > To: NZNOG(a)list.waikato.ac.nz > Subject: [nznog] TelstraClear Down? > > > Does anybody know what's up with TelstraClear. I can't get to their > … [View More]

10 13

Re: [nznog] TelstraClear Down?
by Peter Mott 04 Dec '05

04 Dec '05

Maybe there was an imperical decision taken by AU head office to close it down due to lack of profits. :-) regards Peter Mott MOTT & ASSOCIATES Tel: +64 9 488 9352 Fax: +64 9 486 7017 -/-

2 1

Xen for network services (aka web/mail/dns etc) - OT?
by Simon 02 Dec '05

02 Dec '05

Hi There, I have been discussing the utilisation of Xen in a production environment on a couple of other lists (nzlug, debian-isp etc), but wondering if anyone from this list is using it in new zealand for serving of network services? Please let me know if this is OT. Would like to hear your experiences if so. Simon

6 6

Re: [nznog] [Fwd: Re: Bizarre spam]
by Nic Wise 01 Dec '05

01 Dec '05

I'd go with zombie's :) the . Then new line new line thing means that the rest of whatever your script does is ignored by the SMTP server, and the big long number might be either a "key" to get the target of an attack (eg, HTTP to this server, present this key, get details back) or something, or the IP / DNS name / something else of it, maybe base64'ed or encrypted somehow. I could see a virus/trojan/etc sitting there, polling a pop3 account, looking for emails with those words in the subject, … [View More]

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 01 Dec '05

01 Dec '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session … [View More]

1 0

Bizarre spam
by Justin Cook 01 Dec '05

01 Dec '05

I've got a question for the appropriate higher minds. I fixed one of my clients self-built contact forms after I had an inkling that someone was injecting headers into it to use it as a relay. Turns out I was right, but it's beyond me what they're trying to accomplish: Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: which a rising moon now threw from the scattered clouds bcc: charleslegbe(a)aol.com 648a4d46b041327ac30fe4f27a9b72ee . … [View More]

2 1

[Fwd: Re: Bizarre spam]
by Justin Cook 01 Dec '05

01 Dec '05

It was, and it's already dealt with. Just looking for the reason behind it. Adrian is probably on the mark when he calls it a DoS. James Clark wrote: > > Sounds like PHP injection, assume it's PHP. If not ignore me. > > These articles explain the cause and fixes in more depth: > > http://securephp.damonkohler.com/index.php/Email_Injection > http://www.nyphp.org/phundamentals/email_header_injection.php > > > Justin Cook wrote: > >> I've got a … [View More]

2 1

Notification of NZRR Database changes
by NZRR Database Notifications 01 Dec '05

01 Dec '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session … [View More]

1 0