- NZNOG - lists.nznog.org

Peering stuff...
by David Zanetti 05 Feb '05

05 Feb '05

A certain provider of a large amount of content (which I can't name because I haven't got permission to announce this properly) is now peering on WIX. It's ~10-15M at peak. Make sure your prefixes are being sent to the WIX route servers, and you're accepting at least 202.135.111.128/27 from them, and you'll get a nice short path to it instead of via Auckland. If you have some aversion to open peering, well, you can just pay some other provider to get it. :) Enjoy. -- David Zanetti <david.zanetti(a)catalyst.net.nz> Team Leader, Systems Administration +64-4-8032233 +64-21-402260

1 1

pgp key signing
by Joe Abley 03 Feb '05

03 Feb '05

If you want to sign keys this afternoon, and you're currently frantically scrabbling with gpg to try and get your keys into the web page, please continue trying until 4pm. Just after 4pm I'm going to take a snapshot of the keyring, and that's what we'll use for the signing shenanigans. If you haven't figured it out by 4pm, then you can stop trying then :-)

1 0

Streaming Sessions after lunch
by Matt Brown 03 Feb '05

03 Feb '05

Hi All, Coming up this afternoon at the NZNOG'05 Conference we have two programme streams starting at 13:30. You can view the details at www.nznog.org/programme.php. Stream A will have Liz Butterfield from Netsafe talking about NZ's Cybersafety Education Initiative. Stream B will have Joerg Micheel (NLANR) talking about 10GB Abilene Backbone Monitoring, followed by an update on WAND's current research activities. We only have one r2 box here, so only one of these streams will be streamed via r2. If you want to put in your vote as to which one, please reply to me (offlist is fine), before 13:00 today. Cheers -- Matt Brown matt(a)mattb.net.nz Mob +64 275 611 544 www.mattb.net.nz

2 1

Wellington airport has problems still
by Ian McDonald 03 Feb '05

03 Feb '05

Articles as of midday: Fog Problems Again At Airport 04/02/2005 09:29 AM NewstalkZB Fog is still causing problems at Wellington airport with flights being diverted or delayed. After a day and a half of delays due to low cloud, the airport had only just reopened yesterday morning and airlines were trying to clear the backlog of thousands of passengers. Today, weather conditions at the airport are being described as marginal and deteriorating. Some flights are getting out and one from Nelson has managed to land. Passengers are being advised to check with their airline. Find this item at: http://xtramsn.co.nz/news/0,,11964-4078710,00.html

1 0

RE: [nznog] Notes from NZNOG 05 history of peering session
by Craig Box 03 Feb '05

03 Feb '05

While it's fresh in everyone's minds: > Talking to Joe there was a suggestion from someone that we put > together a Wiki to collect this altogether as a NZ Internet History. > Sounds good to me and we could add whole sections on 0867, IPNet and > start writing active history on UBS etc. I've taken Ian's information, wikified it and put it up on http://www.wlug.org.nz/NewZealandInternetHistory Anyone can edit this - just use YourName as a login ID. (If you can't figure out how to log in, in Bill's words, "you're excused"). If you're linking to something like Telecom, TelstraClear etc, we probably have pages about them already. Please check before linking externally. Craig

1 0

Citylink systems admin
by Barry Murphy 03 Feb '05

03 Feb '05

Hi, Can someone from citylink that can provide me with wix and ape ip space please contact me offlist. I had a chat to Andy some time ago about this, however recently I can't get hold of him so wonder if he is away. Thanks Barry

2 1

Reminder! PGP Key Signing at NZNOG 2005
by Joe Abley 02 Feb '05

02 Feb '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reminder! If there are people who are not staying late enough tomorrow to attend, feel free to track me down directly and exchange signatures (or track down someone else who turns up at some other time). Begin forwarded message: > We're going to engage in a frenzy of PGP keysigning at the NZNOG > meeting in Hamilton. People who know what PGP stands for should read > on. People who don't know what PGP is are more than welcome to ask me > off-list, or alternatively ask Google (who at least knows people who > know). > > Here's what we will attempt to do for the meeting next week: > > 1. As soon as you can, generate an ASCII-armoured copy of your public > key and paste it into the convenient form here: > > http://www.biglumber.com/x/web?keyring=5468 > > Consult your PGP software's documentation to find out how to generate > an ASCII-armoured copy of your public key. With GnuPG you use "gpg -a > - --export <your-key-id>". You're looking for a block of ASCII text > which begins with the line "-----BEGIN PGP PUBLIC KEY BLOCK-----". > > 2. Before you set off to the NZNOG meeting, remember two things: > > 2.1. BRING PHOTO ID. Key signing is a process of representing trust, > and if you are interested in getting signatures on your key (and > you're reading, so presumably you are) you should be ready to provide > proof of your identity to other people. Drivers licences, passports, > things of that nature. BRING PHOTO ID. > > 2.2. BRING A TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. This could be > achieved by bringing a laptop with a trusted copy of your public key > on it, or alternatively you could generate the fingerprint of your > public key, write it down and bring the bit of paper with you. BRING A > TRUSTED COPY OF YOUR PGP KEY FINGERPRINT. > > The precise procedure we use at the key signing party will depend on > how many keys are uploaded in the next week; if there's a small > handful we can read signatures aloud -- if there are more, we can try > Len Sassaman's efficient key signing method > (<http://sion.quickie.net/keysigning.txt>). I'll send more words on > this closer to the time. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCAY6O/f+PWOTbRPIRAk41AJ9pQm1q+YiNkYGrnlr+duzA8q2AlQCgvp+7 im7yw9JZLD+cNEkqW09xuHU= =62cR -----END PGP SIGNATURE-----

1 0

Zombie Spam
by Ian McDonald 02 Feb '05

02 Feb '05

Given some of the talks at NZNOG 05 you may find below interesting: Zombie trick expected to send spam sky-high By Jim Hu http://news.com.com/Zombie+trick+expected+to+send+spam+sky-high/2100-7349_3… Story last modified Wed Feb 02 11:25:00 PST 2005 Spam levels are about to skyrocket, according to experts who warned this week that spammers have developed a new way of delivering their wares. According to the SpamHaus Project--a U.K.-based antispam compiler of blacklists that block 8 billion messages a day--a new piece of malicious software has been created that takes over a PC. This "zombie" computer is then used to send spam via the mail server of that PC's Internet service provider. This means the junk mail appears to come from the ISP, making it very hard for an antispam blacklist to block it. Previously, zombie PCs have been used as mail servers themselves, sending spam e-mails directly to recipients. "The Trojan is able to order proxies to send spam upstream to the ISP," said Steve Linford, director of SpamHaus. Linford believes that this Trojan horse was created by the same people who write spamming software. ISPs in the United States may have already been hit. "We've seen a surge in spam coming from major ISPs. Now all of the ISPs are having large amounts of spam going out from their mail servers," Linford said. This will cause serious problems for the e-mail infrastructure, as it is impractical to block mail with domain names from large ISPs. Linford predicts that ISPs will see a growth in the volume of bulk mail they send and receive over the next two months, with spam levels rising from 75 percent of all e-mail to around 95 percent within a year. "The e-mail infrastructure is beginning to fail," Linford warned. "You'll see huge delays in e-mail and servers collapsing. It's the beginning of the e-mail meltdown." Linford said that ISPs need to act fast to take control of the problem. "They've got to throttle the number of e-mails coming from ADSL accounts. They are going to have to act quickly to clean incoming viruses. ISPs have so much spam--they are too understaffed to call people up and tell them they have Trojans on their machines. And no one would know what you're talking about." Antispam company MessageLabs confirmed Linford's findings. "This ups the ante in the need for filters," said Mark Sunner, chief technology officer for MessageLabs. "It makes it more difficult for people who compile blacklists, which is why spammers are doing this. It will put more pressure on ISPs to take greater interest in the traffic they carry and filter at source." The Information Commissioner's Office, the United Kingdom's point-of-call to report spam, said it had received no complaints of bulk spam from ISPs. Some U.S.-based ISPs contacted by News.com said an e-mail meltdown has yet to arrive. But technicians at some of the largest Internet providers have acknowledged the issue and similar exploits in the past. Many, but not all, U.S. ISPs have blocked open relay ports, such as port 25, to shut out spammers from disseminating messages from home-operated servers. The block has helped some broadband ISPs limit the output of zombie spam, and some have noticed the new form of malware taking shape. Time Warner Cable, the nation's second largest cable company, said it had become aware of this spam "vector," as it calls it, and has mechanisms to control it, according to company spokesman Keith Cocozza. He noted that the company's ISP, called Road Runner, has outgoing e-mail limits in place, but declined to elaborate on how the company monitors and responds to this malware issue. Earthlink, which runs a dial-up and broadband service, said it noticed a gradual increase in spam volume coming from its legitimate mail servers since the beginning of 2004. The company claims it has implemented safeguards, such as authenticated SMTP servers and re-routing of legitimate e-mail, to cut down the flow. "Overall we've been able to greatly reduce the amount of spam from our network by routing activities and applying chokepoints," said Trip Cox, Earthlink's chief technology officer. Cox added that the measure have reduced spam from 30 percent of the ISP's total e-mail volume to 2 percent. Dan Ilett of ZDNet UK reported from London.

1 0

CACert Assurance
by Joe Abley 02 Feb '05

02 Feb '05

CACert is a non-evil X.509 certificate authority based in Australia. They give out free certificates to people whose identities they can verify, and they way they verify identities involves a web of trust. I met the CACert people in a meeting in the US last year, and they verified my identity in appropriately paranoid fashion, and made me an Assurer. That means I can act as an introducer. If any of this rings bells, and there's someone at the meeting who would like to be "assured", flag me down at some point and It Will Be Done. Joe

1 0

nznog stream
by Chris Hellberg 02 Feb '05

02 Feb '05

The stream is looking good from Frankfurt. Very little rebuffering (although I think that's the DSL at this end) and clear audio. Watching Dean's interweb presentation right now.

1 0