- NZNOG - lists.nznog.org

Verisign "cure" from comp.sendmail
by Juha Saarinen 15 Sep '03

15 Sep '03

LOCAL_CONFIG Kverisign dns -R A -a. -T<TMP> -r 5 SLocal_check_mail R$* $: $>canonify $1 R$*<@$*.> $: $1<@$2> Strip the trailing . if present R$*<@$+> $: $(verisign $2 $) R$+<TMP> $#error $@ 4.7.1 $: "451 Temporary lookup failure: try again later" R64.94.110.$* $#error $: "550 Real domain name required for sender address"

1 0

RE: [nznog] Verisign grabs *.net and *.com
by Paul Adshead 15 Sep '03

15 Sep '03

> > Just to get click-through money! > > On the other hand, ISPs can now add their own redirect rule for > 64.94.110.11 to point to *their own* advertising page (or "VeriSign > Suck" page). I hope some do, if only to piss VeriSign off. Indeed, how many Corporate firewalls _already_ redirect: "ads.<domain name>.co.nz"; "ads.<domain name>.com" etc, etc to an internal webserver (- with error 404 set to give a blank page), in order to cutdown on all of the adverts appearing on the corporate LAN??? Paul Adshead.

1 0

Linux Router
by Tikiri Wicks 15 Sep '03

15 Sep '03

Does anyone know anything about this product http://www.imagestream.com/Enterprise.html Cheers Tikiri

2 1

Reminder - "Handle the Jandal" webcast tonight
by Richard Naylor 15 Sep '03

15 Sep '03

Doubt if it will break anything, but just a reminder that the "Handle the Jandal" webcast is tonight. Might get a few viewers. Starts at 7:00pm - Online voting will take place as well. Webcast details at http://www.r2.co.nz/20030916/ and http://www.radioactive.co.nz rich

1 0

RE: [nznog] Big Geek Programme '04
by Donald Neal 11 Sep '03

11 Sep '03

> From: Lin Nah [mailto:lin(a)darkmere.gen.nz] > Sent: Thursday, 11 September 2003 17:17 > To: Tony McGregor > Cc: Donald Neal; Simon Lyall; nznog(a)list.waikato.ac.nz > Subject: RE: [nznog] Big Geek Programme '04 [...] > Actually I came across the concept of "Open Space" when reading a > blog entry by Bruce Eckel. http://mindview.net/WebLog/log-0004 says > "One of the new features here at the conference is "Open > Space" which I > was initially skeptical about but which seems to be working > astoundingly > well. The room where the keynote talks are being held has boards where > you can post a topic for a time slot. The original idea was a talk at > the front of the room and one at the back, but it seems that > tables have > been taken over for individual discussions and as a result there are > already more discussions than two at any one time. There needs to be a formal programme for a number of reasons. One is that we do hope to cover some topics in the sort of detail which isn't compatible with short presentations. Another is so that attendees have something to show their managers. :{)* Other things can certainly be done as well. There used to be these things called BOF's ... Donald Neal | "And if you think virus Technical Specialist | writers are scary, you Operations Engineering | have clearly never met a Integration & Services Divn. | tort lawyer." Alcatel NZ Ltd | - The Economist 28/8/03 All opinions mine only. | ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

1 0

Geek program 2004
by Michael Hallager 10 Sep '03

10 Sep '03

Hi, Could the person organising this please email me offlist? Kind regards, Michael Hallager Managing Director Networkstuff Limited URL: http://www.networkstuff.co.nz Networkstuff, NZ's leading supplier of high quality used networking equipment. E-Mail: michael @ networkstuff.co.nz Member of the NZ Open Source Society. Member of the Auckland VHF Group. Amateur radio callsign: ZL1VMH.

1 0

RE: [nznog] Big Geek Programme '04
by Jamie Baddeley 10 Sep '03

10 Sep '03

hmm. so basically you're recommending we should all just go to the pub and have a bit of a yarn. Mmm. It's got my vote. <ducks> But seriously, does the concept of planning the unplanned really work? The value of hallway conversations is surely not physicality of it but the spontaneity of it. They just sorta happen. <Thinking out loud now> - maybe it's also the passion of an issue that causes individuals to have a real conversation with someone who may be a stranger that makes it so appealing and rewarding. I figure leave 50% of the conference to hallway/pub/accidental learning and 50% of the conference to presented/structured learning. So basically the way it is, is good for me. Cool thoughts though Lin. jamie >>> Lin Nah <lin(a)darkmere.gen.nz> 11/9/2003 5:17:22 PM >>> On Thu, 11 Sep 2003, Tony McGregor wrote: > > There's nothing magical about an hour. Volunteers to do other things > > are welcomed. > > I personally think an hour is way too long for a standard talk. Most > conferences seem to go for 25min + 5m questions and change over. Well it is probably better to split the day into 35 min slots (or 30 min slots but that means 20min + 5min questions + 5 min changeover). If someone wants more time they take up 2 slots or 3 slots . > I really like the idea of a session of rapid fire short talks. Some > conferences have an "outrageous opinions" session structured like > that. We could have a session of 5-10 min anything goes talks. Give > an idea, an experience, a spoof, anything you want the audience to > hear. The only rules being sit down after 10 min and wear the flak > for anything you say yourself. Actually I came across the concept of "Open Space" when reading a blog entry by Bruce Eckel. http://mindview.net/WebLog/log-0004 says "One of the new features here at the conference is "Open Space" which I was initially skeptical about but which seems to be working astoundingly well. The room where the keynote talks are being held has boards where you can post a topic for a time slot. The original idea was a talk at the front of the room and one at the back, but it seems that tables have been taken over for individual discussions and as a result there are already more discussions than two at any one time. The goal was to foster the "hallway conversation" events that are often the best experiences that people have at a conference, by providing nuclei of interests for such conversations through focused topics. I'm particularly interested to see how the open space continues to develop, as it may be one of the most interesting variations in this conference. It already makes the conference more interesting and interactive than the ones we have had in the past. " I had a look into the concept and found it isn't that unknown. The following links have more info about it: http://www.co-intelligence.org/P-Openspace.html http://www.wikipedia.org/wiki/Open_space_conference I am not suggesting using "Open space" throughout the entire meet. However I wonder if such a concept could be tried at one or two sessions to see how it goes. Based on the many corridor/bar/outdoors mini conversations I have seen/heard or been part of at uniforum in the past conferences, I think this would work. regards lin _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

RE: [nznog] Big Geek Programme '04
by Donald Neal 10 Sep '03

10 Sep '03

From: Simon Lyall [mailto:simon(a)darkmere.gen.nz] Sent: Wed 9/10/2003 11:45 PM To: nznog(a)list.waikato.ac.nz Cc: Subject: Re: [nznog] Big Geek Programme '04 >Donald Neal wrote: >> At some stage a formal(ish) call for presentations should be issued. >> Before that, could people who are likely to attend please tell me what >> sort of topics they'd be interested in? Volunteers to present are, of >> course, welcome. [...] >I've seen a few technical type conferences where they have 5 or 10 minute >talks on short topics. This might be a good thing for people to stand up >and give a quick talk on "p2p kazaa proxy servers " or "Trends in errors >in Herald IT articles" or something. So if you know something that other >people might be interested in but you don't want to talk for a whole hour >then you could do one of those. There's nothing magical about an hour. Volunteers to do other things are welcomed. >How about someone from Telecom giving a bit of a talk on IPnet, how it's >designed, how ADSL and dialup gets from the customer to the ISP etc? Most >of us have to interact with it but I've only picked up the odd bit here >and there rather than a nice outline (including how each dept (NCC, >Netgate, CRC etc) fits in) . [2] That may be possible. :{)* - Donald Neal _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

4 4

Port 0 Probe
by Ray Chow 10 Sep '03

10 Sep '03

Hi All, I was wondering how useful is port 0 beside some Unix program requires it and OS finger printing. What effect it will create if the port is blocked? Regards Ray Chow ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

3 2

Fw: New Vulnerability in Microsoft Systems (RPC II)
by Barry Murphy 10 Sep '03

10 Sep '03

----- Original Message ----- Subject: New Vulnerability in Microsoft Systems (RPC II) > Dear Barry Murphy, > > Vulnerability in Microsoft Windows Servers > ------------------------------------------ > > Severity of Bug : CRITICAL > Port / Service : Microsoft RPC > > Versions Affected : > > * Microsoft Windows NT Workstation 4.0 > * Microsoft Windows NT Server 4.0 > * Microsoft Windows NT Server 4.0, Terminal Server Edition > * Microsoft Windows 2000 > * Microsoft Windows XP > * Microsoft Windows Server 2003 > > 3 new bugs have been found in the Microsoft implementation of RPC. Although these bugs are also related to DCOM activation, they _are_not_ the same issue addressed in July. > > Exploits for this (these) problems already exist in the wild, as both Denial of Service and remote compromise. This problem could possibly be more serious than the previous (http://www.microsoft.com/security/security_bulletins/ms03-026.asp) one, since Microsoft have _not_ ruled out exploitation of RPC via HTTP. (Simply filtering access to ports 135, 139, 445 & 593 will not ensure safety from exploitation) > > Microsoft has an end-user write up of the problem here : > http://www.microsoft.com/security/security_bulletins/ms03-039.asp > > Patches may be downloaded here : > > Windows 2000 : > http://www.microsoft.com/downloads/details.aspx?FamilyId=F4F66D56-E7CE-44C3- 8B94-817EA8485DD1&displaylang=en > > Windows XP : > http://www.microsoft.com/downloads/details.aspx?FamilyId=5FA055AE-A1BA-4D4A- B424-95D32CFC8CBA&displaylang=en > > Windows 2003 > http://www.microsoft.com/downloads/details.aspx?FamilyId=51184D09-4F7E-4F7B- 87A4-C208E9BA4787&displaylang=en > > SensePost suggest that the patch be applied as soon as possible. > > Sincerely. > > ======================================================= > SensePost Research research(a)sensepost.com > http://www.sensepost.com (tel) +27 12 667 4737 > ======================================================= > > >

2 1