- NZNOG - lists.nznog.org

KIWICON 9 CALL FOR (cyber) PAPERS
by Mike Forbes 14 Sep '15

14 Sep '15

---{ A WHIRRING TELETYPE CHIRPS, SPEWING FORMFEED INTO THE PILE }--- UNCLAS MSGID/SITREP/9TH CYB DIV// UNIT/KIWICON RESERVE REAR INTEL GRP// PERID/120915:0000Z/TO:111215:0000Z// HEADING/TITLE// AMPN/INTEL SITREP SUMMARY NEW ZEALAND CYBERWAR DAY 137// HEADING/GENERAL// AMPN/FORWARD EMPLACEMENTS REPORT CONTINUING ENGAGEMENT WITH ENEMY. 3 X SORTIES OF 8 X SU-25 FROGFOOT CONDUCTED GND ATTACKS WITH TCP SYN/FIN ON PORT 7199. JMX CONSOLE TOOK HEAVY CASUALTIES, ACTING CO RPTS OPERATIONAL READINESS AT 40%, LOAD AVG 18.7. WOUNDED EVACED TO DEV SHM, AWAITING ONWARD TRANSPORT. RECCE REPORTS ENEMY RESUPPLY CONVOY MAPREF PAPA-ZULU WITH BMP-24BIT MECH INF DIVISION STRENGTH, B-HAWK MANPAD UNITS, PDF MINELAYERS.// HEADING/COMMANDER EVALUATION// AMPN/ FURTHER ATTACKS ON DUG IN POSITIONS AT MAPREF XRAY-PAPA. SIGNIFICANT ESCALATION OF CYBERING EXPECTED. RECOMMEND IMMEDIATE REINFORCEMENT FROM CYBER RESERVE// ---------------------{ SOME TIME LATER ... }--------------------- KIWICON 2015 (HTTPS://WWW.KIWICON.ORG/CFP.HTML) SELECTIVE CYBER SERVICE | CALL FOR CYBER PAPERS We hereby notify you that by this notice published on the Internet pursuant to the some fictitious regulations, you have been called up for service with the Kiwicon Cyber Expeditionary Force, as a Reservist of the Ninth Division of the General Hacker Reserve, Kiwicon Cyber Corps. You are hereby and forthwith directed to present your response to the Kiwicon 9 CFP by filing your report on this page. Each talk and/or training submission should be made on a separate form. They must be filed individually, and upsetting the file clerks is never a good idea this early in campaign season. The first round of talks, correction: CYBER WARFIGHTER EDUCATIONAL MATERIALS will be announced on the 26th of October, NZDT, and will be complete by the 9th of November, NZDT. If the evaluation board passes you as fit for service, you will be required to present yourself to the St James Theatre of Cyberwar for the dissemination of the aforementioned material. You will be notified in due course by an authorized officer of the Crue regarding your particular time and place for reporting. Practical training will be held on the 9th of December, 2015, while presentations will be given on the 10th and 11th of December. Note: it is the responsibility of the instructor to ensure all material has been appropriately declassified. You are also hereby further notified that if you fail to obey this order you are liable to be considered sensible without further notice. God save the Mince Queen, Col. St. John Beauchamp-Beauclerk (Adjutant Crue) IMPORTANT NOTICES (read each paragraph carefully) If you report pursuant to this order please fill out our google form (triplicate copies not required at this time) at https://goo.gl/JnoCb3. Answer the questions to the best of your ability, and let us know if you have any special requirements (motorcycles, pyrotechnics, therapy animals, exorcisms). Should floods, illness, fires, and poorly scheduled wedding ceremonies unavoidably prevent you from reporting as ordered above, you must write immediately to the Adjutant Crue stating the circumstances which prevent you from reporting. As per special order, written notes from Lord Tuskington will also be accepted. If you are employed, you should inform your employer of this order and that the examination is merely to determine if you may be fit for service. If found suitable for induction, documentation will be provided by an authorized officer of the Crue for your employer as early as possible. Troop movements to the marshaling point are the fiduciary responsibility of the cyber warfighter and will not be reimbursed regardless of evaluation board determination. To re-familiarise yourself with your duties as Cyber Reserve, please review the Standard Operating Procedure with particular observation to the sections relevant to the ongoing conflict, viz; Cybering Computering Minced meats Cyber hacking Computer cyber hacking Hacking (cyber) Cyber hoodies, correct wear and maintenance of, Cyber warring Any further communications arising from this notice must be sent by to kiwicon(a)kiwicon.org. IRC communications cannot be accepted due to our ongoing lack of ability to remember to tell everyone else that they happened.

1 0

Vodafone / ihug DNS Servers - Reset of Zone File
by Justin Lewis - ResponseMedia 13 Sep '15

13 Sep '15

Hi All, Is anyone else seen ns1.ihug.net.nz and ns2.ihug.net.nz Reverting to older zone files since around lunch time today? Looking like the zone serial is back to "2015082705" should be at least "20150905XX" Have a customer who's entire zone file has been reverted to an old record that's is over 3 weeks old. Customer portal is showing the new zone file though. Regards, Justin Lewis ResponseMedia [https://newoldstamp.com/editor/profilePictures/profile-3c8f7090e76fa0afb6a3…] Mobile: 027 300 6242 Email: justin.lewis(a)responsemedia.co.nz<mailto:justin.lewis(a)responsemedia.co.nz> Address: Christchurch, NZ [https://editor.newoldstamp.com/images/f.jpg]<http://www.facebook.com/ResponseMedia.NZ> [https://editor.newoldstamp.com/images/tw.jpg] <http://www.twitter.com/ResponseMediaNZ> [https://editor.newoldstamp.com/images/instagram.jpg] <https://instagram.com/ResponseMediaNZ/> Dropbox Partner SMX Mail Partner

2 1

Any NOCs seeing alarms in the Tauranga Chorus exchange?
by Jesse Archer 12 Sep '15

12 Sep '15

We've lost power in the colo room, to both A + B feeds.

3 4

Can't see 117.121.247.0/24. Do we have a local looking glass
by Don Gould 10 Sep '15

10 Sep '15

Hi Sorry for an operation issue on list on a Friday ;) We just moved an IP range in us this morning and I can't see it via DTS currently. I've been asked to find a local looking glass. Can anyone assist? D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before.

2 2

APNIC 40 - Webcast Sessions taking place today
by Elly Tawhai 09 Sep '15

09 Sep '15

Hi NZNOG Community, You may be aware that APNIC 40 has started. You can participate remotely in discussions, ask the presenter questions, and voice your opinion. To watch live webcast go to: https://conference.apnic.net/40/program#webcasts Some topics under discussion include: * The Status of APNIC’s IPv4 Resources: Exhaustion & Transfers * IPv4: Mining Strategic Reserves * prop-114: Modification in the ASN eligibility criteria * prop-113: Modification in the IPv4 eligibility criteria * prop-115: Registration of detailed assignment information in Whois DB * APNIC Member Meeting See you online! Kind regards, Elly APNIC

1 0

ISIF Asia Internet Operations Research Grants
by Elly Tawhai 08 Sep '15

08 Sep '15

Hi NZNOG Community, APNIC has established the ISIF Asia Internet Operations Research Grants: a 60,000 AUD fund to support independent research on Internet operations, infrastructure and related protocols. Members of Network Operators Groups (NOGs), members/partners of IXPs, operators of rootservers, and academics and postgraduate students are encouraged to apply. The fund is open to all relevant topics of interest, however applicants may wish to prepare research proposals in the following areas: * Network measurement and analysis * IPv6 deployment * BGP routing * Network security * Peering and interconnection Applicants can apply for an amount between AUD 5,000 and AUD 60,000 based on the research needs, a realistic timeframe and a detailed budget. Successful applicants will also receive mentoring and support from the selection committee members to encourage knowledge generation and collaboration. Grants applications open 9 September 2015 and close 15 October 2015. Visit http://isif.asia/researchgrant for full terms and conditions, and the online application form. Kind regards, Elly APNIC

1 0

Internet Data Portal
by Jay Daley 08 Sep '15

08 Sep '15

Hi We’ve recently gone live with an open data site to publish whatever .nz related data that we can publish and any other useful Internet data - https://idp.nz For some years we’ve published IPv6 and DNSSEC stats but we decided it was time to publish that in a more useful way and include as much other data as we could. Initially we only have four datasets on the site: = .nz registrations data - a daily count of domains in each state and each transaction going back a few years (182,511 rows) = .nz Zonescan data - metrics from the monthly scan of all nameservers delegated to by the .nz zone (7,723 rows) This is where the IPv6 and DNSSEC stats come from. = ISPs - the Statistics NZ annual survey of ISPs sizes etc in a more usable format = Internet Connections - the Statistics NZ annual survey of ISP connections, datacaps etc in a more usable format If there’s any other data that we have that you think we could publish then please let us know and if you have any useful Internet related datasets that you’d like published then please get in touch as we’d be keen to help. cheers Jay -- Jay Daley Chief Executive NZRS Ltd desk: +64 4 931 6977 mobile: +64 21 678840 linkedin: www.linkedin.com/in/jaydaley

1 0

Re: [nznog] Appeal to bigger brains
by Andrew McBeath 08 Sep '15

08 Sep '15

Thanks to everyone who offered advice - turns out the IBM server connect module in bay 2 of the chassis was the issue. Removing it from the chassis resolved all problems. It had nothing connected to it and all ports were disabled so I can only guess that its faulty. Thanks again, Andrew From: Andrew McBeath Sent: Tuesday, 8 September 2015 9:53 p.m. To: 'nznog(a)list.waikato.ac.nz' <nznog(a)list.waikato.ac.nz> Subject: Appeal to bigger brains I'm throwing this out there because I'm at a loss to figure out whats happening in our lab. I realise it's a bit outside the scope of this forum but as the subject line says I'm looking for some bigger brains - Beers are involved. We have an IBM blade chassis - only 4 blades at present - with a management VLAN 50 (192.168.10.0/24) and a data vlan 100 (10.10.10.10.0/24) hooked up to our prod network (10.10.1.0 and 11.11.1.0 -Yes I know this is BAD but I inherited the network and haven't been able to change it as yet) via a juniper SRX. Blades are running VMware 5.5 - no nic teaming as yet. All blades and AMM module (all on 192.168.10 addresses) can get to all parts of the network VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 Everything I've found online points to NIC teams in certain situations but none apply as the blades only have a single NIC enabled and the VM only has one NIC assigned. Appreciate any feedback Cheers, Andrew McBeath

1 0

Appeal to bigger brains
by Andrew McBeath 08 Sep '15

08 Sep '15

I'm throwing this out there because I'm at a loss to figure out whats happening in our lab. I realise it's a bit outside the scope of this forum but as the subject line says I'm looking for some bigger brains - Beers are involved. We have an IBM blade chassis - only 4 blades at present - with a management VLAN 50 (192.168.10.0/24) and a data vlan 100 (10.10.10.10.0/24) hooked up to our prod network (10.10.1.0 and 11.11.1.0 -Yes I know this is BAD but I inherited the network and haven't been able to change it as yet) via a juniper SRX. Blades are running VMware 5.5 - no nic teaming as yet. All blades and AMM module (all on 192.168.10 addresses) can get to all parts of the network VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 Everything I've found online points to NIC teams in certain situations but none apply as the blades only have a single NIC enabled and the VM only has one NIC assigned. Appreciate any feedback Cheers, Andrew McBeath

4 5

Re: [nznog] Appeal to bigger brains
by Scott Weeks 08 Sep '15

08 Sep '15

--- andrew(a)base-2.co.nz wrote: From: Andrew McBeath <andrew(a)base-2.co.nz> VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 ---------------------------------------- It's a longshot, but is there VRRP/HSRP on the router where the default gateways point to? They could have two VRRP sessions and forcing odd IPs to one and even IPs to another. scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0