- NZNOG - lists.nznog.org

Cidr report
by Andy Linton 27 Feb '04

27 Feb '04

Can I recommend the following web site to the list? http://www.cidr-report.org Lots of interesting stats about route announcements on the core of the net in particular those which are less than optimal. I'd suggest that all of us here who announce prefixes by BGP should at least go the the section at the very bottom of the page and generate the report for the AS numbers we're responsible for and take some action on the output if necessary. For example, Citylink's office network uses AS23754 and the report shows the following: (http://www.cidr-report.org/cgi-bin/as-report?as=as23754 will give a better formatted view) --- Announced Prefixes Rank AS Type Originate Addr Space (pfx) Transit Addr space (pfx) Description 8920 AS23754 ORIGIN Originate: 2560 /20.68 Transit: 0 /0.00 CITYLINK-AS-NZ Citylink Aggregation Suggestions This report does not take into account conditions local to each origin AS in terms of policy or traffic engineering requirements, so this is an approximate guideline as to aggregation possibilities. Rank AS AS Name Current Wthdw Aggte Annce Redctn % 12949 AS23754 CITYLINK-AS-NZ Citylink 4 0 0 4 0 0.00% AS23754: CITYLINK-AS-NZ Citylink Prefix (AS Path) Aggregation Action 198.48.0.0/22 1221 2764 3643 7657 23754 202.8.44.0/22 1221 2764 3643 7657 23754 202.37.19.0/24 1221 2764 3643 7657 23754 203.118.144.0/24 1221 2764 3643 7657 23754 Advertisements that are fragments of the original RIR allocation (more specifics) originated by this AS. AS23754 1 More Specifics 4 Total Advertisements CITYLINK-AS-NZ Citylink 203.118.144.0/24 (203.118.128.0/18) --- So it looks like I need to check with IHUG, our upstream, and see why they're announcing our particular subnet of 203.118.128.0/18 as well as the superblock. I've just come back from APRICOT where I saw a presentation that indicated that if we all were to get this sort of thing sorted out we'd reduce the size of the global routing table by 30% Let's get the NZ annoucements sorted at least!

1 0

Orcon Internet Prefix List Update (2004-02-27) (2nd Try - Revised)
by Craig Whitmore 26 Feb '04

26 Feb '04

For all those peering with Orcon Internet (AS17746) nationally, please update your prefix lists with the following networks (also in attached file) Added: ip prefix-list orcon-national permit 202.50.167.0/24 ip prefix-list orcon-national permit 202.37.19.0/24 ip prefix-list orcon-national permit 202.37.194.0/24 Thanks Craig Whitmore Systems Administrator Orcon Internet http://www.orcon.net.nz

1 0

Orcon Internet Prefix List Update (2004-02-27)
by Craig Whitmore 26 Feb '04

26 Feb '04

For all those peering with Orcon Internet (AS17746) nationally, please update your prefix lists with the following networks (also in attached file) Added: ip prefix-list orcon-national permit 202.50.167.0/24 ip prefix-list orcon-national permit 202.37.19.0/24 Thanks Craig Whitmore Systems Administrator Orcon Internet http://www.orcon.net.nz

1 0

Wellington ADSL Possible Mini-Outages
by Tristram Cheer 24 Feb '04

24 Feb '04

Afternoon all, A few of our clients are experiencing 20-50sec ADSL outages in the Wellington CBD and Hutt areas, we are also experiencing the same issue at work. Is anyone else out there having 20-50sec outages where they cant get a ping out?? Regards ############################################ Tristram Cheer Mobile: - 021-334-766 Work: - 04-499-9486 Fax: - 04-499-9586 After Hours: - 04-237-7593 ############################################################################ ######### This correspondence is for the named person's use only. It may contain confidential or legally privileged information, or both. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this correspondence in error, please immediately delete it from your system and notify the sender. You must not disclose copy or rely on any part of this correspondence if you are not the intended recipient.

4 3

(no subject)
by Donald Kneels 24 Feb '04

24 Feb '04

2 1

Organising the Next NZNOG Conference
by Donald Neal 24 Feb '04

24 Feb '04

People, As discussed at the conference last month, a committee is now being called into existence to ensure that the next NZNOG conference happens. I asked that those who'd volunteered to be part of that group email me. I've so far received emails from: Neil Fenemor Nathan Ward I'm confident I have working email addresses for Joe Abley Jamie Curtis Simon Lyall Tony McGregor Lin Nah Could the other volunteers please also email me fairly soon and tell me what addresses you'd like to use for this purpose? I'm asking this because I don't hold email addresses for all of you. Donald Neal | "Fiasco - an unsuccessful Technical Specialist | wall painting." Operations Engineering | Integration & Services Divn. | - Sandi Toksvig Alcatel NZ Ltd | All opinions mine only. | ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002." ------------------------------------------------------------------------------

1 0

(no subject)
by Philip D'Ath 24 Feb '04

24 Feb '04

Is it just me, or does this patent seem a bit extreme? http://ipwatch.internetnz.net.nz/files.asp?itemID=%7B2%30367DDC%2D6D29%2 D4%303F%2D838B%2DC%308366%30C8%304E%7D Abstract: A method for ordering a product over an internetwork of computer systems, wherein the product is ordered from a consumer computer (42) connected to the internetwork and billed by a billing server (34) connected to the internetwork comprises: (a) establishing a connection between the consumer computer and the billing server via the internetwork of computer systems; (b) transferring an order for a product from the consumer computer to the billing server via the internetwork; (c) transferring a transaction identification from the billing server to the consumer computer, wherein the transaction identification identifies the product ordered; (d) terminating the connection between the consumer computer and the billing server via the internetwork after the transaction identifier has been received by the consumer computer via the internetwork; (e) establishing a direct connection between the consumer computer and the billing server such as a telephone link administered by a telephone service provider and (f) transferring the transaction identification from the consumer computer back to the billing via the direct connection to identify the product ordered. CCNP, BCMS Philip D'Ath.

1 0

Anyone got contact info for free.net.nz?
by Russell Fulton 23 Feb '04

23 Feb '04

Subject says it all. I've got a small problem I need to discuss with someone from free.net.nz and I'd rather not call their 0900 support line... -- Russell Fulton /~\ The ASCII Network Security Officer \ / Ribbon Campaign The University of Auckland X Against HTML New Zealand / \ Email!

2 1

RE: [nznog] an interesting excercise in whodoneit.
by Riden, Jamie 22 Feb '04

22 Feb '04

It's in a few DNSBLs but not specifically for being an open proxy or trojaned box. But if it's in dynamic space, it might have recently changed its IP address. http://openrbl.org/ Lookup 67.172.127.63 (c-67-172-127-63.client.comcast.net) in 20+11 Zones AS: 67.160.0.0/12 AS6172 HomeCorp Redwood City/California Net 67/8 NET67 Chantilly, Virginia Results: Positive=6, Negative=25 (2004-02-23 18:30:32 UTC) @DYNAMIC/dialup: 67.172/16: 553 SORBS DUL @SPAM/spamsource: 67.172.127/24: 553 SPEWS [1] comcast/attbi, see http://spews.org/ask.cgi?S2963 SORBS/sorbs.net: 67.172/16: 553 SORBS DUL [Remove] SPEWS/spews.org: 67.172.127/24: 553 SPEWS2 [1] comcast/attbi, see http://spews.org/ask.cgi?S2963 RFC_IPWH/ipwhois.rfc-ignorant.org: Inaccurate or missing WHOIS data BLARS/block.blars.org: INET 127.1.0.1 Negative 25: @COUNTRY @ISP AHBL BOGONS BONDED BOPM CBL DRBL DSBL FIVETEN INTERSIL JIPPGMA LNSG NJABL NOMORE ORDB PSBL PSS REYNOLDS SBL SPAMBAG SPAMCOP SPAMRBL SPAMSITE UCEPROT cheers, Jamie > -----Original Message----- > From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] > Sent: Tuesday, 24 February 2004 6:14 a.m. > To: 'nznog NOG' > Subject: [nznog] an interesting excercise in whodoneit. > > > Hey Folks, > > It's been a while since I've looked at email headers... > Anyone want to tell me which of the below headers are real, > and which (if any) are forged? Instinct would tell me that > it's straight-forward, and someone rooted a box in the states > on a cable modem, but I have no idea what to believe these days. > > Cheers, > > JB > > ------------------ > > Received: from newman.its.waikato.ac.nz ([130.217.66.62]) > by worldnet.att.net (mtiwmxc15) with ESMTP > id <2004022316453701500ncss5e>; Mon, 23 Feb 2004 > 16:45:37 +0000 > X-Originating-IP: [130.217.66.62] > Received: from newman.its.waikato.ac.nz (localhost [127.0.0.1]) > by newman.its.waikato.ac.nz (Postfix) with ESMTP > id 4EC10127A79; Tue, 24 Feb 2004 05:45:34 +1300 (NZDT) > Received: from telescum (c-67-172-127-63.client.comcast.net > [67.172.127.63]) > by newman.its.waikato.ac.nz (Postfix) with SMTP id AA66312782A > for <nznog(a)list.waikato.ac.nz>; Tue, 24 Feb 2004 05:44:20 +1300 > (NZDT) > From: Donald(a)newman.its.waikato.ac.nz, Neal(a)newman.its.waikato.ac.nz > To: the(a)newman.its.waikato.ac.nz, guys(a)newman.its.waikato.ac.nz > Message-Id: <20040223164420.AA66312782A(a)newman.its.waikato.ac.nz> > Date: Tue, 24 Feb 2004 05:44:20 +1300 (NZDT) > Cc: > Subject: [nznog] (no subject) > X-BeenThere: nznog(a)list.waikato.ac.nz > X-Mailman-Version: 2.1.3 > Precedence: list > List-Id: New Zealand Network Operators Group > <nznog.list.waikato.ac.nz> > List-Unsubscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, > <mailto:nznog-request(a)list.waikato.ac.nz?subject=unsubscribe> > List-Archive: <http://list.waikato.ac.nz/pipermail/nznog> > List-Post: <mailto:nznog(a)list.waikato.ac.nz> > List-Help: <mailto:nznog-request(a)list.waikato.ac.nz?subject=help> > List-Subscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, > <mailto:nznog-request(a)list.waikato.ac.nz?subject=subscribe> > > > > -----Original Message----- > From: donald.neal(a)telecom.co.nz [mailto:donald.neal(a)telecom.co.nz] > Sent: Tuesday, February 24, 2004 5:54 AM > To: undisclosed-recipients: > Subject: [nznog] (no subject) > > I like to heat p[enis > da > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nzn> og > > > _______________________________________________ > NZNOG > mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nzn> og >

1 0

RE: [nznog] an interesting excercise in whodoneit.
by Gordon Smith 22 Feb '04

22 Feb '04

Most likely an open proxy, rather than a compromised machine. Typical spammer tactic is to bounce off these to avoid being shut down. Cheers, Gordon -----Original Message----- From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] Sent: Tuesday, 24 February 2004 6:14 a.m. To: 'nznog NOG' Subject: [nznog] an interesting excercise in whodoneit. Hey Folks, It's been a while since I've looked at email headers... Anyone want to tell me which of the below headers are real, and which (if any) are forged? Instinct would tell me that it's straight-forward, and someone rooted a box in the states on a cable modem, but I have no idea what to believe these days. Cheers, JB

1 0