- NZNOG - lists.nznog.org

Notification of NZRR Database changes
by NZRR Database Notifications 09 Aug '04

09 Aug '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: - Date: Tue, 10 Aug 2004 10:56:55 +1200 (NZST) - Msg-Id: <Pine.LNX.4.58.0408101055140.13273(a)jennings.citylink.co.nz> NZRR Database Notification Department --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES:AS9872 descr: Route set advertised to AS9560 by Actrix - AS9872 members: 202.27.48.0/21^21-24, 202.49.152.0/21^21-24, 202.154.128.0/19^19-24, 203.96.16.0/20^20-24, 203.96.48.0/20^20-24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: mikej(a)connections.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040809 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES:AS9872 descr: Route set advertised to AS9560 by Actrix - AS9872 members: 202.154.128.0/19^19-24, 203.96.16.0/20^20-24, 203.96.48.0/20^20-24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: mikej(a)connections.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040809 changed: rpsl-admin(a)ape.net.nz 20040810 source: NZRR

1 0

TEST - PLEASE IGNORE
by J S Russell 08 Aug '04

08 Aug '04

I've suddenly realised that I haven't seen any NZNOG posts for some time. So this is a test. Please ignore. JSR -- John S Russell | Big Geek | Doing geek stuff.

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 08 Aug '04

08 Aug '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. --- OBJECT BELOW CREATED: route-set: AS9560:RS-ROUTES:AS9872 descr: Route set advertised to AS9560 by Actrix - AS9872 members: 202.27.48.0/21^21-24, 202.49.152.0/21^21-24, 202.154.128.0/19^19-24, 203.96.16.0/20^20-24, 203.96.48.0/20^20-24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: mikej(a)connections.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040809 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 08 Aug '04

08 Aug '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. The update causing these changes had the following mail headers: - From: Andy Linton <asjl(a)citylink.co.nz> - Cc: - Subject: - Date: Mon, 9 Aug 2004 14:08:39 +1200 (NZST) - Msg-Id: <Pine.LNX.4.58.0408091401400.8879(a)jennings.citylink.co.nz> NZRR Database Notification Department --- OBJECT BELOW DELETED: aut-num: AS4768 as-name: NZRR-AS4768 descr: University of Auckland descr: initially peering at '192.203.154.114' descr: see Citylink RT job #752 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9560 accept ANY AND NOT fltr-bogons export: to AS9560 announce AS4768 notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: c.ashwal(a)auckland.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040731 source: NZRR --- OBJECT BELOW DELETED: route-set: AS9560:RS-ROUTES:AS4768 descr: Route set advertised to AS9560 by University of Auckland - AS4768 members: 130.216.0.0/16^16-24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: c.ashwal(a)auckland.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040731 source: NZRR --- OBJECT BELOW DELETED: route: 130.216.0.0/16 descr: Route for University of Auckland - AS4768 origin: AS4768 notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: c.ashwal(a)auckland.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040731 source: NZRR

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 08 Aug '04

08 Aug '04

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. --- OBJECT BELOW CREATED: aut-num: AS9431 as-name: NZRR-AS9431 descr: University of Auckland descr: initially peering at '192.203.154.114' descr: see Citylink RT job #752 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9560 accept ANY AND NOT fltr-bogons export: to AS9560 announce AS9431 notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: c.ashwal(a)auckland.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040809 source: NZRR --- OBJECT BELOW CREATED: route: 130.216.0.0/16 descr: Route for University of Auckland - AS9431 origin: AS9431 notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: c.ashwal(a)auckland.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040809 source: NZRR --- OBJECT BELOW CREATED: route-set: AS9560:RS-ROUTES:AS9431 descr: Route set advertised to AS9560 by University of Auckland - AS9431 members: 130.216.0.0/16^16-24 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)ape.net.nz notify: nznog(a)list.waikato.ac.nz notify: c.ashwal(a)auckland.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)ape.net.nz 20040809 source: NZRR

1 0

Accessing www.symantec.com
by Paul Adshead 04 Aug '04

04 Aug '04

Is anyone else having access problems accessing www.symantec.com? Does anyone know if there is any DOS in progress? Thanks, Paul Adshead.

4 3

The New Zealand Network Operators' Group
by Donald Neal 04 Aug '04

04 Aug '04

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. Meetings We're now working towards our next annual conference, to be hosted by The WAND group in Hamilton on February 2nd to 4th, 2005. See http://www.nznog.org/ for details of this year's conference, which drew something over 120 participants. Also see http://auckland.thursdaynightcurry.com/ if you live in or near Auckland or Wellington. Operators' Contact List See http://www.usenet.net.nz/noc/ for operational contact details for most New Zealand ISP's. These are intended for use by other network operators, not by most customers. Internet Exchanges See http://www.ape.net.nz/ for details of the Auckland Peering Exchange and those connected there. See http://www.wix.net.nz/ for the Wellington Internet Exchange. About This Mailing List This list has around 690 addresses subscribed. You may only post to the list from a subscribed address. A number of people subscribe addresses which do not receive email purely to allow posting from them. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by employees of Alcatel NZ Ltd, Citylink and ihug Ltd. None of these organisations, nor any administrator, is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Changes are not made to the archive on request, though the administrators remain happy to assist the Office of the Privacy Commissioner should any complaint be laid with that office. One way to search the archive is to use google and prefix your search with site:list.waikato.ac.nz . Subscribing to the List See http://list.waikato.ac.nz/mailman/listinfo/nznog to subscribe. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins Donald Neal |Diplomacy - Look what Technical Specialist |the university gave me. Operations Engineering | Integration & Services Division +----------------------- Alcatel NZ Ltd - Telecom's network operations manager ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

2 1

IANA IPv4 allocations and bogon update: 71/8, 72/8
by Rob Thomas 03 Aug '04

03 Aug '04

-----BEGIN PGP SIGNED MESSAGE----- Hi, team. [ Apologies to those of you who receive this note in multiple forums. ] The numerous Team Cymru bogon projects have been updated as of 02 AUG 2004 to reflect the following IANA allocation made on 02 AUG 2004: 71/8 Aug 04 ARIN 72/8 Aug 04 ARIN IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-template.htm> Secure JUNOS BGP Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-bgp-template.htm> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter-loose.htm> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter-strict.htm> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> RIPE NCC fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#ripe> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Bogus ASN monitoring - <http://www.cymru.com/BGP/asnbogusrep.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thanks! Rob, for Team Cymru. - -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQQ/hFlkX3QAo5sgJAQEV6gP+PRRJozjAEJ180JTE9KQD+kFsd0n2tQOX TNpOiE4BtjaTfwsZhzgKNYtzRsYdAwL1/zLpWOyjK3J+tllUasxQ+lsDKqGjTVii wATUj+2/JV9VGb14AVkkMz4mSEiNw1rNJxDvy+P40yyECPegWS93Em75DQjrUm3X o5SD7dgJPbI= =2ydr -----END PGP SIGNATURE-----

1 0

RE: [nznog] NTP weirdness
by Eustace, Glen 02 Aug '04

02 Aug '04

Just an FYI, I seem to have fixed our problem. I have added restrict 0.0.0.0 mask 0.0.0.0 nopeer nomodify notrust notrap Which probably should have been there all the time. Win 2k3 is announcing itself in such a way that before the 'restrict' we tried peering with it. Not sure why this wasn't an issue with 4.1.1 Now we simply reply and take no further action. 16:13:30.023910 202.50.245.234.2823 > 130.123.2.99.ntp: v3 sym_act strat 0 poll 17 prec -6 16:13:30.023960 130.123.2.99.ntp > 202.50.245.234.2823: v3 sym_pas strat 2 poll 17 prec -17 (DF) [tos 0x10] -- .*. | Glen Eustace, Infrastructure Development Engineer /V\ | Information Technology Services PN460, Turitea, (/ \) | Massey University, Palmerston North, New Zealand. ( ) | Ph: +64 6 356 9099 x 81005, Fax: +64 6 350 5607, Mob: +64 27 450 0321 ^^-^^ |------------------------------------------------------------

1 0

NTP weirdness
by Glen Eustace 02 Aug '04

02 Aug '04

Hi all, I am need of some help with our public ntp setup. We upgraded our servers from RH7.3 ->FC1 (ntp4.1.1->4.1.2) last week and I have now had several reports of people who are seeing our servers apparently port scanning them :-( I didn't change the config for ntp but can confirm that after their server first asks for the time, we start sending them packets on high UDP ports. The complaints that I have been investigating are Windows servers but that may be a red-herring. I have previously treated ntp as a black-box but am obviously going to have to understand things better. Any help would be appreciated. Glen -- .*. | Glen Eustace, Infrastructure Development Engineer /V\ | Information Technology Services PN460, Turitea, (/ \) | Massey University, Palmerston North, New Zealand. ( ) | Ph: +64 6 356 9099 x 81005, Fax: +64 6 350 5607, ^^_^^ | Mob: +64 27 4 500 321 ------+-----------------------------------------------------

1 0