- NZNOG - lists.nznog.org

Re: [nznog] nz ip range
by Kerry Milestone 21 Sep '15

21 Sep '15

{from those archives} 10 years...??? blimey. http://list.waikato.ac.nz/pipermail/nznog/2005-June/010239.html Perhaps the way to go about it will end up being to legislate, that you'll end up having to register your "NZ" IP address allocation with the Intellectual Property Office - because they like the acronym IP too. But, this of course will still ensure there is much humour to be had. https://www.fyi.org.nz/request/1830-ip-address-range On 20/09/15 01:00, nznog-request(a)list.waikato.ac.nz wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. nz ip range (bigalownz) > 2. Re: nz ip range (Jethro Carr) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 19 Sep 2015 23:35:28 +1200 > From: "bigalownz" <bigalownz(a)gmail.com> > To: <nznog(a)list.waikato.ac.nz> > Subject: [nznog] nz ip range > Message-ID: <D7FB71253CD54F99B15C3EAE3FE397AD(a)SEANPC> > Content-Type: text/plain; format=flowed; charset="iso-8859-1"; > reply-type=original > > im doing a little project and im looking for a script to get nz ip ranges > > i did a Google search and found this, but as you can see it was from 2005 > and out dated, the url doesn't work etc > i need some help to update it > thanks > > #!/usr/local/bin/php > <?php > > $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; > // $in_file = "country-ipv4.lst"; > $out_file = "nzipranges.txt"; > > $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); > > $handle_output = fopen($out_file, "w"); > > $now = date ("r"); > > fwrite ($handle_output,"# Generated: $now\n\n"); > > while (!feof($handle_input)) { > $buffer = fgets($handle_input); > if ( ereg ( "nz", $buffer) ) { > // echo $buffer; > $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : > [\d\.]+(\/\d+) .+#","$1$2", $buffer )); > fwrite ($handle_output,"\n" . $this_range); > } > } > fclose($handle_input); > > fwrite ($handle_output,"\n"); > fclose($handle_output); > > > ?> > > > > ------------------------------ > > Message: 2 > Date: Sat, 19 Sep 2015 23:49:35 +1200 > From: Jethro Carr <jethro.carr(a)jethrocarr.com> > To: bigalownz <bigalownz(a)gmail.com>, nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] nz ip range > Message-ID: <etPan.55fd4bcf.3d8a9f57.27d(a)kobol.local> > Content-Type: text/plain; charset="utf-8" > > Hi bigalownz, > > I wrote a Puppet module that you can use to pull IP address lists from various registries. If you?re using Puppet, it means you can get an array of all the IPs for a specific region (such as NZ) for use in configuration files or resources. > > https://github.com/jethrocarr/puppet-rirs > > If you?re not using Puppet, the good news is that it?s almost entirely Ruby, so you could take a look at the function and adapt it very quickly to be a standalone script. > > https://github.com/jethrocarr/puppet-rirs/blob/master/lib/puppet/parser/fun… > > regards, > Jethro > > > -- > Jethro Carr > www.jethrocarr.com > > On 19 September 2015 at 23:34:33, bigalownz (bigalownz(a)gmail.com) wrote: >> im doing a little project and im looking for a script to get nz ip ranges >> >> i did a Google search and found this, but as you can see it was from 2005 >> and out dated, the url doesn't work etc >> i need some help to update it >> thanks >> >> #!/usr/local/bin/php >>> >> $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; >> // $in_file = "country-ipv4.lst"; >> $out_file = "nzipranges.txt"; >> >> $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); >> >> $handle_output = fopen($out_file, "w"); >> >> $now = date ("r"); >> >> fwrite ($handle_output,"# Generated: $now\n\n"); >> >> while (!feof($handle_input)) { >> $buffer = fgets($handle_input); >> if ( ereg ( "nz", $buffer) ) { >> // echo $buffer; >> $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : >> [\d\.]+(\/\d+) .+#","$1$2", $buffer )); >> fwrite ($handle_output,"\n" . $this_range); >> } >> } >> fclose($handle_input); >> >> fwrite ($handle_output,"\n"); >> fclose($handle_output); >> >> >> ?> >> >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> > > > ------------------------------ > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > > End of NZNOG Digest, Vol 153, Issue 16 > **************************************

2 1

nz ip range
by bigalownz 20 Sep '15

20 Sep '15

im doing a little project and im looking for a script to get nz ip ranges i did a Google search and found this, but as you can see it was from 2005 and out dated, the url doesn't work etc i need some help to update it thanks #!/usr/local/bin/php <?php $in_file = "ftp://ftp.apnic.net/pub/apnic/dbase/data/country-ipv4.lst"; // $in_file = "country-ipv4.lst"; $out_file = "nzipranges.txt"; $handle_input = @fopen($in_file,"r") or die("Unable to open $in_file\n\n"); $handle_output = fopen($out_file, "w"); $now = date ("r"); fwrite ($handle_output,"# Generated: $now\n\n"); while (!feof($handle_input)) { $buffer = fgets($handle_input); if ( ereg ( "nz", $buffer) ) { // echo $buffer; $this_range = trim(preg_replace ( "#([\d\.]+) \- [\d\.]+ : [\d\.]+(\/\d+) .+#","$1$2", $buffer )); fwrite ($handle_output,"\n" . $this_range); } } fclose($handle_input); fwrite ($handle_output,"\n"); fclose($handle_output); ?>

8 7

TICSA Amendment Bill - Long commentary is long
by Beau Murrah 17 Sep '15

17 Sep '15

Hello- A long post follows that is adapted from some questions I received yesterday. These are some of my legal academic thoughts and not legal advice. My overall assessment of this very short one page TICSA Amendment Bill is that community must put energy into this process even if the Bill itself is insufficient and likely to be voted down. If it makes it past the first step there is a chance for proposing additions and changes in the form of Supplementary Order Papers and this is something to be optimistic about and contact your MP’s about. Even if the Bill fails at the first stage, there is the risk though that unless there is obvious energy put into it the whole issue reaches a state of entropy until some unforeseeable reactive event occurs where the law will finally get replaced or repealed. The Government will likely claim a lack of energy put into the Bill as evidence the status quo is acceptable, and who knows how many years it might be till the issue comes again on the Parliamentary floor for any kind of substantive change. Is this toothless? Yes, the Bill has no legal teeth in its own right in terms of statutory offences. On a personal level I must say I also think it is weak. There is no legal duty for the Minister/Director to follow the recommendations. For this could be dismissed as ineffectual. However, the Bill would creates added statutory powers and responsibilities that creative avenues legal challenge such as a judicial review of an Agency decision. Even if such a judicial review is never actualised it can start to carry weight “in the shadow of the law”. It means the Agency can be pressed to its statutory responsibilities by some entity pointing to a legal basis for their claims. I also think there is potential for the Bill to widen existing judicial review avenues elsewhere in the legislation that were very limited, given the interaction of the TAB and the Minister/Director’s duties. Consider Clause 2 of the Bill “Any matter to be referred to the Minister requesting the Minister to exercise his or her discretion or recommend the prescribing of an additional area of specified security interest must first be referred to the Technical Advisory Board for analysis and recommendations. “ If a Minister fails to refer the matter to the TAB first with enough time and detail so the TAB can give actual considered analysis and recommendations, on its face there would be breach of the Minister’s statutory responsibilities. This would tap into well established legal common law norms about the duty of consult and what that means in practice by Ministers, and open the case to judicial review in a Court. If the issue was intrusive enough on network operators this could potentially receive remedy’s in the form of injunctions on the matter at hand and form precedent for the future. I am trying to think of an example where this would be worth it economically, or in defence of rights of a NetOp or their subscribers, its not unforeseeable. A judicial review action could potentially be taken to seek an injunction on a area of security being decided while the TAB fully considers the issue. This could enforce a lag-time for compliance to allow network operators to react and plan ahead for impending decisions by the Minister. Take for example s50 of the Act: http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5626115.html <http://www.legislation.govt.nz/act/public/2013/0091/latest/DLM5626115.html> This section is closely related to the process of the Director in identifying network security risks which is relevant to the Bill. s50 also gives a list of things the Director must consider. Failing to give consideration to a mandatory consideration is a well recognised ground of judicial review of exercises of statutory power. As you can gather from the list above in the Section, its typically aimed at an enumerated list of more or less specific items. On its own an action by an individual against a public figure for merely failing to consider mandatory considerations has only a formal/technical remedy and it would be an expensive and lengthy procedure for all involved. The Agency would then, usually, only have to correct the error in some token way - such as issuing a report saying “we have consider all the relevant matters, our opinion is unchanged” - and move forward. However, the existence of this action combined with a technical advisory board gives potential for a legal entity that can bring to light a bigger picture of systemic and formal breaches that would make great copy in the newspaper or an Ombudsman-like governmental complaint if not a court judgment. Whichever of you may decide to sit on the Board (to be honest, not an entirely desirable role) would have the ability to oversee that mandatory consideration has been given on all of the ground under S50s. The Board could start issuing recommendations that align with the statutory duties and language, and force more compliance by the Agency, if it starts pointing out where this consideration hasn’t been given. This is at least one way a TAB could be applied to put the Agency on their toes like a real watchdog is supposed to. Isn’t all this going to play out in secret anyways because NatSec? If the Agency doesn’t follow any recommendations this would be secret? One issue I am interested in is use of the term “Security Interest” in the Bill and considering how much it maps onto the definition of “Security Risk” currently in the TICSA legislation, and whether this should change. The definition of security risk in the TICSA legislation is inclusive of the concept of national security but the term national security itself is not defined. This question about whether all of the risks and all of the Agencies TICSA decisions/activities are to be legally treated as national security concerns is ultimately going to decide whether TICSA plays out before and in an open civil court as the norm or whether it will go into classified operations only where sufficient evidence is provided to the Courts to justify otherwise. I am strongly of the view this is a piece of regulation which only narrowly intersects with national security. Cloaking the daily and annual grind of bureaucracy and notification schemes and compliance in national security is a wrong approach and arguably just a very easy lawyerly way of keeping the Agency out of Court. I will be writing more on this topic and releasing it in a proper text form, and am definitely planning on submitting something TICSA-related to Kiwicon. Kind regards ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Changes to the NZRS zone and web scan policy
by Sebastian Castro 17 Sep '15

17 Sep '15

Hello everyone: Following some useful feedback from an operator, we have made changes to the zone and web scan practice statement. Modifications are around three main areas - Provide a web page associated to the server where the scan comes from. Now http://zonescan.nzrs.net.nz will lead you to an information page that explains what is the scan about - Kind of data collected. - Reference to where aggregated data from the zone scan is published, using our new Internet Data Portal We are always open to receive feedback and improve our communication and processes. With the aggregated data available, your can find out the state of the .nz name space. The URL of the improved practice statement is https://nzrs.net.nz/dns/zone-and-web-scanning Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

TICSA Amendment Bill drawn from ballot
by Beau Murrah 16 Sep '15

16 Sep '15

Hello NZNOG, http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC… <http://www.parliament.nz/en-nz/pb/legislation/proposed-bills/ballot/51HOOOC…> Clare Curran’s TICSA Amendment Bill has been drawn from the ballot. Ill be giving it a close read myself in the next day or two, would be interested in any comments/discussion off-list or on-list. A link to the Bill itself is here: http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a… <http://www.parliament.nz/resource/en-nz/51HOH_MEMBILL063_1/f607b43a59cb0d7a…> My research & writing on TICSA is still ticking along- I am considering trying to submit a talk for Kiwicon but thats quite a high bar to aim for, but I plan to release the text regardless around the same time as the conference. As a brief repeat summary, the text focuses in-depth on the deeply untested/unprecedented legal concept of Good Faith which has been imported into this area. It is imperative to avoiding any liability under the Act and also crucial to any sort of pro-active action against the Agency. Kind regards, ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

1 0

Can whois registrar info be wrong?
by Richard Hector 16 Sep '15

16 Sep '15

Hey all, Is it technically possible for the registrar details in whois (for a .com domain) be out of date, or is the whois the canonical source of the info? If it is possible, how would I go about finding out who's really in control? Does a registrar have an interface for that? Unfortunately I'm not sure how reliable my client's own records are on this ... Cheers, Richard

4 5

Phish? Re: .NZ would like 5 minutes of your time
by Richard Hector 16 Sep '15

16 Sep '15

It's an email apparently from one party (NZRS), apparently sent by a second party (my registrar), via a third party (mscv.net) with a link to a fourth party (surveymonkey.com) which seems classic phishing. On the other hand it "looks quite legit". If it is legit, am I right in thinking it's a bad way to go about it? Any comments from participants? Richard

2 2

Victoria University breakfast seminar for IT managers in Auckland 1st October 7am
by Ian Welch 14 Sep '15

14 Sep '15

Hi, My colleague at the School of Information Management has organised a seminar at the VUW campus in Auckland aimed at managers. They said that they are particularly interested in people working in networking so I thought I’d pass it on via the list. The main speakers are Ian Clarke (CEO of Fronde) and Prof Benoit Aubert (Information Systems at Victoria Business School). RSVP by 18th of September. Full details are here: http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ… <http://www.victoria.ac.nz/sim/about/events/it-roles-in-a-disruptive-environ…> Cheers, Ian — Ian Welch School of Engineering and Computer Science Victoria University of Wellington

1 0

KIWICON 9 CALL FOR (cyber) PAPERS
by Mike Forbes 14 Sep '15

14 Sep '15

---{ A WHIRRING TELETYPE CHIRPS, SPEWING FORMFEED INTO THE PILE }--- UNCLAS MSGID/SITREP/9TH CYB DIV// UNIT/KIWICON RESERVE REAR INTEL GRP// PERID/120915:0000Z/TO:111215:0000Z// HEADING/TITLE// AMPN/INTEL SITREP SUMMARY NEW ZEALAND CYBERWAR DAY 137// HEADING/GENERAL// AMPN/FORWARD EMPLACEMENTS REPORT CONTINUING ENGAGEMENT WITH ENEMY. 3 X SORTIES OF 8 X SU-25 FROGFOOT CONDUCTED GND ATTACKS WITH TCP SYN/FIN ON PORT 7199. JMX CONSOLE TOOK HEAVY CASUALTIES, ACTING CO RPTS OPERATIONAL READINESS AT 40%, LOAD AVG 18.7. WOUNDED EVACED TO DEV SHM, AWAITING ONWARD TRANSPORT. RECCE REPORTS ENEMY RESUPPLY CONVOY MAPREF PAPA-ZULU WITH BMP-24BIT MECH INF DIVISION STRENGTH, B-HAWK MANPAD UNITS, PDF MINELAYERS.// HEADING/COMMANDER EVALUATION// AMPN/ FURTHER ATTACKS ON DUG IN POSITIONS AT MAPREF XRAY-PAPA. SIGNIFICANT ESCALATION OF CYBERING EXPECTED. RECOMMEND IMMEDIATE REINFORCEMENT FROM CYBER RESERVE// ---------------------{ SOME TIME LATER ... }--------------------- KIWICON 2015 (HTTPS://WWW.KIWICON.ORG/CFP.HTML) SELECTIVE CYBER SERVICE | CALL FOR CYBER PAPERS We hereby notify you that by this notice published on the Internet pursuant to the some fictitious regulations, you have been called up for service with the Kiwicon Cyber Expeditionary Force, as a Reservist of the Ninth Division of the General Hacker Reserve, Kiwicon Cyber Corps. You are hereby and forthwith directed to present your response to the Kiwicon 9 CFP by filing your report on this page. Each talk and/or training submission should be made on a separate form. They must be filed individually, and upsetting the file clerks is never a good idea this early in campaign season. The first round of talks, correction: CYBER WARFIGHTER EDUCATIONAL MATERIALS will be announced on the 26th of October, NZDT, and will be complete by the 9th of November, NZDT. If the evaluation board passes you as fit for service, you will be required to present yourself to the St James Theatre of Cyberwar for the dissemination of the aforementioned material. You will be notified in due course by an authorized officer of the Crue regarding your particular time and place for reporting. Practical training will be held on the 9th of December, 2015, while presentations will be given on the 10th and 11th of December. Note: it is the responsibility of the instructor to ensure all material has been appropriately declassified. You are also hereby further notified that if you fail to obey this order you are liable to be considered sensible without further notice. God save the Mince Queen, Col. St. John Beauchamp-Beauclerk (Adjutant Crue) IMPORTANT NOTICES (read each paragraph carefully) If you report pursuant to this order please fill out our google form (triplicate copies not required at this time) at https://goo.gl/JnoCb3. Answer the questions to the best of your ability, and let us know if you have any special requirements (motorcycles, pyrotechnics, therapy animals, exorcisms). Should floods, illness, fires, and poorly scheduled wedding ceremonies unavoidably prevent you from reporting as ordered above, you must write immediately to the Adjutant Crue stating the circumstances which prevent you from reporting. As per special order, written notes from Lord Tuskington will also be accepted. If you are employed, you should inform your employer of this order and that the examination is merely to determine if you may be fit for service. If found suitable for induction, documentation will be provided by an authorized officer of the Crue for your employer as early as possible. Troop movements to the marshaling point are the fiduciary responsibility of the cyber warfighter and will not be reimbursed regardless of evaluation board determination. To re-familiarise yourself with your duties as Cyber Reserve, please review the Standard Operating Procedure with particular observation to the sections relevant to the ongoing conflict, viz; Cybering Computering Minced meats Cyber hacking Computer cyber hacking Hacking (cyber) Cyber hoodies, correct wear and maintenance of, Cyber warring Any further communications arising from this notice must be sent by to kiwicon(a)kiwicon.org. IRC communications cannot be accepted due to our ongoing lack of ability to remember to tell everyone else that they happened.

1 0

Vodafone / ihug DNS Servers - Reset of Zone File
by Justin Lewis - ResponseMedia 13 Sep '15

13 Sep '15

Hi All, Is anyone else seen ns1.ihug.net.nz and ns2.ihug.net.nz Reverting to older zone files since around lunch time today? Looking like the zone serial is back to "2015082705" should be at least "20150905XX" Have a customer who's entire zone file has been reverted to an old record that's is over 3 weeks old. Customer portal is showing the new zone file though. Regards, Justin Lewis ResponseMedia [https://newoldstamp.com/editor/profilePictures/profile-3c8f7090e76fa0afb6a3…] Mobile: 027 300 6242 Email: justin.lewis(a)responsemedia.co.nz<mailto:justin.lewis(a)responsemedia.co.nz> Address: Christchurch, NZ [https://editor.newoldstamp.com/images/f.jpg]<http://www.facebook.com/ResponseMedia.NZ> [https://editor.newoldstamp.com/images/tw.jpg] <http://www.twitter.com/ResponseMediaNZ> [https://editor.newoldstamp.com/images/instagram.jpg] <https://instagram.com/ResponseMediaNZ/> Dropbox Partner SMX Mail Partner

2 1