- NZNOG - lists.nznog.org

Networkstuff promotion
by Michael Hallager 09 Oct '04

09 Oct '04

Hello all. I have just gone through and added a few names to the no-contact list although only about 50% of the people posting so far in this subject so far were ever emailed in the first place. At last count, about 5 or 6. The actions of some in threatening mail blocks and in continuing this on NZNOG has made it rather hard for me to asertain who would like to be added. I have already discussed it with others, some who would rather keep the pot boiling... for no obvious reason.... I have tried to sort this out with as many people as possible. So I repeat - contact me directly with your details and it will happen. I sincerely apologise again to all who were offended. // Michael Hallager Director || Head geek || Making IT work. URL: http://www.networkstuff.co.nz networkStuff, NZ's leading online supplier of high quality new and used networking equipment. Phone: (09) 839-1000 (DDI) 0800 638-788 (Freecall) Fax: (09) 837-8100 0800 329-788 (Freefax) Mobile: 029 638-7883 (SMS, MMS and PXT supported)

4 3

Re: [nznog] Spam from local sources?
by Ewen McNeill 09 Oct '04

09 Oct '04

In message <Pine.LNX.4.56.0410102013390.12121(a)babylon.blakjak.net>, Mark Foster writes: >>[Regarding an apparently fairly widespread email to people "involved >> in the local internet / computer industry."] > >Speaking of which; any representatives of Michael's upstream present on >the list? If so you can colour this as an official complaint about the UCE >from Michael Hallager as he obviously doesn't see the reason that NZNOG >have such a low opinion of him. I sent a report to abuse@$UPSTREAMISP around 17:30 with full details. I assume someone at $UPSTREAMISP will deal with it tomorrow. Meanwhile the reaction is hopefully a sufficient demonstration that sending advertising (spam) to "individuals who we have found on the New Zealand internet" is fairly counter productive if your aim is to attract new customers. Particularly when the spam goes to those involved in running the networks. So hopefully there will not be a repeat. Ewen

1 0

RE: [nznog] Spam from local sources?
by NZNOG＠neilnz.com 09 Oct '04

09 Oct '04

Michael, after sending spam (presumably to a bunch of people on this list) you shouldn't be throwing stones. I sent the email to the list at 5:14pm although Paradise didn't pass it on until just after 6pm... In any case, I sent the email to the list before I heard from you - and to be honest I don't give spammers the courtesy of assuming they'll reply intelligently or in a timely fashion (Which you did, however). Cheers - Neil G -----Original Message----- From: Michael Hallager [mailto:michael(a)networkstuff.co.nz] Sent: Sunday, 10 October 2004 7:03 p.m. To: Neil(a)neilnz.com Subject: Re: [nznog] Spam from local sources? We have had this discussion and I thought that we settled the matter. Why are you trying to stir? Michael > Anyone else received any spam today from a local, un-named company? > I'm trying to track down where he got my email address from... And > yes, he is a member of this list. > > I thought people on here should know better than this!!! > > N. > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog -- // Michael Hallager Director || Head geek || Making IT work. URL: http://www.networkstuff.co.nz networkStuff, NZ's leading online supplier of high quality new and used networking equipment. Phone: (09) 839-1000 (DDI) 0800 638-788 (Freecall) Fax: (09) 837-8100 0800 329-788 (Freefax) Mobile: 029 638-7883 (SMS, MMS and PXT supported)

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 07 Oct '04

07 Oct '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the APE and/or WIX route servers so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers, you will maintain at least one BGP session at all times and consequently a full set of APE and/or WIX routes. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: FAILED: (fwd) - Date: Fri, 8 Oct 2004 16:52:09 +1300 (NZDT) - Msg-Id: <Pine.LNX.4.58.0410081642280.1327(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: aut-num: AS9889 as-name: NZRR-AS9889 descr: Maxnet descr: initially peering at '202.7.0.116' descr: see Citylink RT job #1320 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS9889 notify: rpsl-admin(a)wix.net.nz notify: nznog(a)list.waikato.ac.nz notify: alastair.johnson(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)wix.net.nz 20041008 source: NZRR REPLACED BY: aut-num: AS9889 as-name: NZRR-AS9889 descr: Maxnet admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9439 accept ANY AND NOT fltr-bogons export: to AS9439 announce AS9889 import: from AS9560 accept ANY AND NOT fltr-bogons export: to AS9560 announce AS9889 notify: rpsl-admin(a)wix.net.nz notify: nznog(a)list.waikato.ac.nz notify: alastair.johnson(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)wix.net.nz 20041008 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 07 Oct '04

07 Oct '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the APE and/or WIX route servers so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers, you will maintain at least one BGP session at all times and consequently a full set of APE and/or WIX routes. --- OBJECT BELOW CREATED: route-set: AS9439:RS-ROUTES:AS9889 descr: Route set advertised to AS9439 by Maxnet - AS9889 members: 202.14.217.0/24^24-29, 202.27.204.0/24^24-29, 202.36.70.0/24^24-29, 202.37.72.0/24^24-29, 202.37.181.0/24^24-29, 202.50.167.0/24^24-29, 202.89.32.0/19^19-29, 210.55.29.0/24^24-29, 210.55.100.0/22^22-29, 210.55.104.0/22^22-29, 210.55.110.0/24^24-29, 210.55.155.0/24^24-29, 210.55.169.0/24^24-29, 210.55.214.0/24^24-29, 210.55.230.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)wix.net.nz notify: nznog(a)list.waikato.ac.nz notify: alastair.johnson(a)maxnet.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)wix.net.nz 20041008 source: NZRR

1 0

RE: [nznog] Ameritrade.com smtp server issue
by Gordon Smith 07 Oct '04

07 Oct '04

Looks like a Sprint routing issue. Ameritrade are a customer of alter.net & they should be reachable via Savvis when going across Sprint: 8 sl-bb24-ana-10-2.sprintlink.net (144.232.1.205) 133.225 ms 132.062 ms 132.340 ms 9 sl-st21-la-13-0.sprintlink.net (144.232.20.69) 134.608 ms 135.151 ms 134.132 ms 10 bpr2-so-3-0-0.LosAngelesEquinix.savvis.net (208.174.196.73) 132.760 ms 132.626 ms 133.118 ms 11 bpr1-ae0.LosAngelesEquinix.savvis.net (208.172.35.49) 134.405 ms 134.300 ms 134.417 ms 12 bpr1-so-5-0-0.LosAngeles.savvis.net (208.173.57.61) 140.357 ms 135.033 ms 134.136 ms 13 dcr1-ae1-0.LosAngeles.savvis.net (208.172.47.1) 136.275 ms 134.696 ms dcr2-ae1-0.LosAngeles.savvis.net (208.172.47.13) 133.501 ms 14 dcr2-loopback.SanFranciscosfo.savvis.net (206.24.210.100) 139.084 ms 137.953 ms 140.427 ms 15 bpr2-so-4-0-0.SanJoseEquinix.savvis.net (206.24.211.78) 137.337 ms 136.382 ms 136.519 ms 16 POS3-3.BR1.SJC7.ALTER.NET (208.173.55.2) 137.376 ms 137.765 ms * Alter.net's backbone is reachable, but not all their routes are.... Cheers, Gordon > -----Original Message----- > From: jfp [mailto:jfp(a)clearfield.com] > Sent: Friday, 8 October 2004 12:36 p.m. > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Ameritrade.com smtp server issue > > > Hi people, we are having issues sending mail to Ameritrade.com. > > It looks like their firewall is dropping the smtp connection > to smtp.ameritrade.com (199.200.9.140) from us. > > I can connect to it from our US server and they claim that > they have lots of NZ customers with no issues. > > So I think they are blocking the 210 block of addresses (we show up as > 210.48.112) because we share that with Korea. > (This is not a mail server block, we don't get a connection > to the mail server, so it must be the firewall in front) > > Could get some of you to try to telnet to smtp.ameritrade.com on port > 25 and let me know the result and the block it's coming from? > > I need some concrete evidence. > > Thanks. > > > jfp. > > -------------------------------------------------------------- > ---------- > Jean-Francois Pirus <jfp(a)clearfield.com> Senior > Software Engineer > Phone (+64-9) 358 2081 Clearfield > Software Ltd > Fax (+64-9) 358 2083 4th Floor 8-10 > Whitaker Place > Mob (+64-21) 640 779 P O Box 2348 Auckland, > New Zealand > -------------------------------------------------------------- > ---------- > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

2 1

Re: [nznog] Ameritrade.com smtp server issue
by Jean-Francois Pirus 07 Oct '04

07 Oct '04

Thanks for the data guys. I am getting a vast majority of failures so it's a bit more widespread than expected. I will collate it and ask them to review their response :-) Thanks again. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Clearfield Software Ltd Phone (+64-9) 358 2081 4th Floor 8-10 Whitaker Place Fax (+64-9) 358 2083 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

2 1

RE: [nznog] Ameritrade.com smtp server issue
by Michael Bordignon 07 Oct '04

07 Oct '04

> It looks like their firewall is dropping the smtp connection to > smtp.ameritrade.com (199.200.9.140) from us. timing out for me too - seems as though they're firewalling everything, as even tcptraceroute fails 8 sl-bb21-sj-3-2.sprintlink.net (144.232.8.130) 188.567 ms 189.587 ms 188.584 ms 9 sl-bb24-sj-13-0.sprintlink.net (144.232.3.214) 188.096 ms 185.861 ms 190.153 ms 10 sl-bb21-stk-12-0.sprintlink.net (144.232.20.180) 278.218 ms 196.284 ms 201.601 ms 11 sl-bb22-kc-2-0.sprintlink.net (144.232.20.168) 230.531 ms 231.154 ms 233.457 ms 12 sl-gw10-kc-6-0.sprintlink.net (144.232.23.82) 234.645 ms 233.974 ms 232.707 ms 13 sl-think1-6-0.sprintlink.net (144.224.22.6) 234.018 ms 233.321 ms 234.457 ms 14 * * Michael

1 0

RE: [nznog] Ameritrade.com smtp server issue
by Craig Humphrey 07 Oct '04

07 Oct '04

Looks like a connectivity issue between Sprint and UUNet/Alternet. Here's a couple of traces, one from London, one from Virginia. Please excuse the excessive layout. [Virginia] Report for smtp.ameritrade.com [199.200.9.140] Analysis: Connections to SMTP port 25 on host 'smtp.ameritrade.com' are working, but ICMP packets are being blocked past network "UUNET Technologies, Inc. UUNETCUSTB40" at hop 10. It is a SMTP server (ESMTP Server ready). ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------- | 0 | | 161.58.180.113 | WIN10115.visualware.com | Dulles, VA, USA | -05:00 | | | Verio, Inc. VRIO-161-058 | | 1 | | 161.58.176.129 | - | ?Englewood, CO | | 0 | x | Verio, Inc. VRIO-161-058 | | 2 | | 161.58.156.140 | - | ?Englewood, CO | | 0 | x | Verio, Inc. VRIO-161-058 | | 3 | | 129.250.28.206 | xe-1-2-0-3.r20.asbnva01.us.bb.verio.net | Ashburn, VA, USA | -05:00 | 0 | x | Verio, Inc. VRIO-129-250 | | 4 | | 129.250.9.70 | p16-0.uunet.asbnva01.us.bb.verio.net | Ashburn, VA, USA | -05:00 | 0 | x | Verio, Inc. VRIO-129-250 | | 5 | | 152.63.43.182 | 0.so-2-2-0.XL1.DCA5.ALTER.NET | Washington, DC, USA | -05:00 | 0 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 6 | | 152.63.25.37 | 0.so-2-0-0.TL1.DCA8.ALTER.NET | Washington, DC, USA | -05:00 | 0 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 7 | | 152.63.0.126 | 0.so-1-2-0.TL1.STL3.ALTER.NET | St. Louis, MO, USA | -06:00 | 15 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 8 | | 152.63.88.58 | 0.so-7-0-0.CL1.KCY4.ALTER.NET | Kansas City, MO, USA | -06:00 | 31 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 9 | | 152.63.93.185 | 179.ATM6-0.GW3.KCY4.ALTER.NET | Kansas City, MO, USA | -06:00 | 31 | x | UUNET Technologies, Inc. UUNET-BACKBONE | | 10 | | 157.130.165.126 | ameritrade-gw.customer.alter.net | ?Ashburn, VA, USA | -05:00 | 31 | x- | UUNET Technologies, Inc. UUNETCUSTB40 | | ... | | | | | | | | | | ? | | 199.200.9.140 | smtp.ameritrade.com | | | | | AccuTrade, Inc. ACTRADE | ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------- [London] Report for smtp.ameritrade.com [199.200.9.140] Analysis: IP packets are being lost past network "Sprint SPRINT-INNET1" at hop 19. VisualRoute cannot determine the next network at hop 20. Connections to SMTP port 25 are not working. ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------------------------- | Hop | %Loss | IP Address | Node Name | Location | Tzone | ms | Graph | Network | ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------------------------- | 0 | | 192.168.101.239 | visualroute.visualware.co.uk | ... | | | | (private use) | | 1 | | 192.168.101.254 | - | ... | | 0 | x | (private use) | | 2 | | 195.167.164.1 | - | ?London, UK | * | 0 | x | Richmond Software | | 3 | | 195.167.252.170 | s12-1-7.access2.lon1.uk.vital-group.net | ?London, UK | * | 21 | x------ | IPCENTA Ltd | | 4 | | 195.167.248.1 | - | ?London, UK | * | 0 | x | Vital International | | 5 | | 134.222.109.173 | ldn-s2-rou-1002.UK.eurorings.net | ?Amsterdam, Netherlands | +01:00 | 0 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 6 | | 134.222.231.61 | ldn-s2-rou-1001.UK.eurorings.net | ?Amsterdam, Netherlands | +01:00 | 0 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 7 | | 134.222.230.145 | obl-rou-1003.NL.eurorings.net | ?Amsterdam, Netherlands | +01:00 | 0 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 8 | | 134.222.229.237 | ledn-rou-1001.NL.eurorings.net | ?Amsterdam, Netherlands | +01:00 | 2 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 9 | | 134.222.254.2 | ewr-brdr-02.inet.qwest.net | Newark, NJ, USA | -05:00 | 78 | x | RIPE Network Coordination Centre RIPE-ERX-134-219-0-0 | | 10 | | 205.171.17.125 | ewr-core-01.inet.qwest.net | Newark, NJ, USA | -05:00 | 79 | x | Colorado SuperNet, Inc. CSN-BLOCK-7 | | 11 | | 205.171.17.62 | nyc-brdr-01.inet.qwest.net | New York, NY, USA | -05:00 | 78 | x | Colorado SuperNet, Inc. CSN-BLOCK-7 | | 12 | | 205.171.1.134 | - | Denver, CO, USA | -07:00 | 90 | x---- | Colorado SuperNet, Inc. CSN-BLOCK-7 | | 13 | | 144.232.13.1 | sl-bb25-nyc-11-0.sprintlink.net | New York, NY, USA | -05:00 | 159 | --x-- | Sprint SPRINT-INNET9 | | 14 | | 144.232.9.156 | sl-bb24-chi-2-0.sprintlink.net | Chicago, IL, USA | -06:00 | 121 | x---- | Sprint SPRINT-INNET9 | | 15 | | 144.232.26.110 | sl-bb22-chi-9-0.sprintlink.net | Chicago, IL, USA | -06:00 | 134 | -x----- | Sprint SPRINT-INNET9 | | 16 | | 144.232.19.202 | sl-bb20-kc-14-2.sprintlink.net | Kansas City, MO, USA | -06:00 | 133 | -x----- | Sprint SPRINT-INNET9 | | 17 | | 144.232.2.118 | sl-bb21-kc-15-0.sprintlink.net | Kansas City, MO, USA | -06:00 | 109 | x | Sprint SPRINT-INNET9 | | 18 | | 144.232.23.74 | sl-gw10-kc-5-0.sprintlink.net | Kansas City, MO, USA | -06:00 | 109 | x | Sprint SPRINT-INNET9 | | 19 | | 144.224.22.6 | sl-think1-6-0.sprintlink.net | - | | 110 | x- | Sprint SPRINT-INNET1 | | ... | | | | | | | | | | ? | | 199.200.9.140 | smtp.ameritrade.com | Omaha, NE, USA | | | | AccuTrade, Inc. ACTRADE | ------------------------------------------------------------------------ ------------------------------------------------------------------------ ----------------------------------------- > -----Original Message----- > From: jfp [mailto:jfp(a)clearfield.com] > Sent: Friday, October 08, 2004 12:36 PM > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] Ameritrade.com smtp server issue > > > Hi people, we are having issues sending mail to Ameritrade.com. > > It looks like their firewall is dropping the smtp connection to > smtp.ameritrade.com (199.200.9.140) from us. > > I can connect to it from our US server and they claim that they have > lots of NZ customers with no issues. > > So I think they are blocking the 210 block of addresses (we show up as > 210.48.112) because we share that with Korea. > (This is not a mail server block, we don't get a connection > to the mail > server, so it must be the firewall in front) > > Could get some of you to try to telnet to smtp.ameritrade.com on port > 25 and let me know the result and the block it's coming from? > > I need some concrete evidence. > > Thanks. > > > jfp. > > -------------------------------------------------------------- > ---------- > Jean-Francois Pirus <jfp(a)clearfield.com> Senior > Software Engineer > Phone (+64-9) 358 2081 Clearfield > Software Ltd > Fax (+64-9) 358 2083 4th Floor 8-10 > Whitaker Place > Mob (+64-21) 640 779 P O Box 2348 Auckland, > New Zealand > -------------------------------------------------------------- > ---------- > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog >

1 0

Ameritrade.com smtp server issue
by jfp 07 Oct '04

07 Oct '04

Hi people, we are having issues sending mail to Ameritrade.com. It looks like their firewall is dropping the smtp connection to smtp.ameritrade.com (199.200.9.140) from us. I can connect to it from our US server and they claim that they have lots of NZ customers with no issues. So I think they are blocking the 210 block of addresses (we show up as 210.48.112) because we share that with Korea. (This is not a mail server block, we don't get a connection to the mail server, so it must be the firewall in front) Could get some of you to try to telnet to smtp.ameritrade.com on port 25 and let me know the result and the block it's coming from? I need some concrete evidence. Thanks. jfp. ------------------------------------------------------------------------ Jean-Francois Pirus <jfp(a)clearfield.com> Senior Software Engineer Phone (+64-9) 358 2081 Clearfield Software Ltd Fax (+64-9) 358 2083 4th Floor 8-10 Whitaker Place Mob (+64-21) 640 779 P O Box 2348 Auckland, New Zealand ------------------------------------------------------------------------

3 2