- NZNOG - lists.nznog.org

IPv6 at APE
by Joe Abley 27 May '03

27 May '03

is anybody at the APE equipped to do IPv6 peering? Private replies are fine, I'll summarise if there's interest (and if there are replies).

11 18

Netforum Call for Papers
by Donald Neal 27 May '03

27 May '03

Roger De Salis sent this to the list: - - - - - The Netforum conference for 2003 is scheduled for July 10,11,12. The Theme of the conference is Next Generation Internet: Advanced Network Operations and Computer Networking in Aviation The conference will be extremely technical with >2/3 content devoted to advanced networking and related topics. Speakers are invited to submit proposals for papers to the conference committee by sending a synopsis and Title to "netforum(a)fx.net.nz". We look forward to an expanded conference in 2003, and the conference committee will be working very hard to meet or exceed the standard set by the 2002 conference, which I hope many of you enjoyed. The committee looks forward to receiving proposals. ==================================================================== In a similar manner, attendees are welcome to suggest topics or papers they are interested in seeing, and the conference organisers will then be able to help persuade likely speakersto stump up a talk. Send to "suggestions(a)fx.net.nz" Rgds Roger De Salis ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

3 2

Re: [nznog] IPv6 at APE
by Ewen McNeill 25 May '03

25 May '03

In message <5.2.0.9.1.20030526172452.055d4380(a)mail.igrin.co.nz>, Simon Byrnand writes: >The problem I can see with the introduction of ipv6 is that its such a >fundamental change, a bit like converting an entire country from imperial >to metric, except that you're trying to convert the WHOLE world :) Which sounds bad, except when you realise that the process doesn't require a "flag day", and has been very carefully designed so that it can happen over the course of several years (dual stacks, tunnels, etc). The major thing which is leading to slow progress, IMHO, is the lack of a really compelling need for it. IPv4 + NAT is a 90% solution. (OTOH there's something approaching a compelling need ofr multicasting, and that hasn't exactly happened much since last year either.) I think you're probably right that it'll take a very long time before IPv4 will be completely gone. But there've been plenty of other network protocols and many of them are nearly extinct. ("Native" windows networking is nearly gone -- haven't seen it in ages -- and even IPX is looking endangered (Novell went IP a couple of versions back), without even looking at protocols which were much less widely deployed.) FWIW, I do still keep meaning to experiment some more with IPv6 given some spare time, especially as most (all?) of the operating systems I'm using support IPv6 out of the box (OpenBSD, Linux, Solaris, etc, all support it out of the box these days). Ewen

1 0

Historical netblock allocation data?
by Juha Saarinen 22 May '03

22 May '03

Is there any publicly accessible repository that keeps information as to changes in netblock allocations? That is, noting to whom e.g. 152.152.0.0/16 or whatever was allocated originally, as opposed to whatever the current info happens to say? -- Juha Saarinen

1 0

Clear Dunedin Routing??
by Dan Clark 22 May '03

22 May '03

Hi guys, Is anyone on a local Clear/Telstra Frame anywhere in Dunedin area? Basicly we can see everything apart from another local ISP here in Dunedin on a similar Clear Frame as us. Its weird, we try connecting to port 25 on their IP and it fails, they try the same thing towards us with similar results. If we trace route to each other we get to an auckland clear router, then sent to wellington, then back to auckland in what seems like a loop. Can anyone shed some light on the situation, or if anyone else has a similar Clear POP in Dunedin area? Regards Dan Clark Network Manager Scarfies.Net Ltd

2 1

New and unacknowledged Exchange / Win2k SMTP vulnerability?
by Neil Gardner 21 May '03

21 May '03

Hi guys - for the last few weeks I've been working with Microsoft to try and track down why on Earth a correctly configured Exchange 2000 Server has been relaying. All of the standard sites report that it's closed, my own telnetting to it says it's closed, and yes, I've accounted for trojans on the LAN - but we're still going to try unplugging the rest of the LAN at some stage for a while and see what happens. But still, it's relaying. I add the IPs as I see them to a blacklist and it quietens down for a while, and MS keep promising they'll find the problem - but I send them SMTP logs, System and App logs and nothing adds up. All tests show it's closed, and all Logs (and complaining recipients) prove it's open for at least one attacker. Most of the reported sender addresses are in the format SMTPxxxx.YAHOO.COM (where xxxx is a random 4 digit number) But all resolve to chinanet or something. Recently though (today), they have been reporting as just 'exploder' or 'range' This is screaming 'vulnerability' to me, but MS refuse to acknowledge anything. I have heard in the last 20 minutes that a different organisation in Wgtn (with a different integrator) is having exactly the same problem, and that "Telecom is talking to Microsoft about it, but is getting nowhere" - I can't substantiate that yet though. No, the client isn't using an SMTP AV gateway, or firewall, Yes, they should be - and this will may in fact be the straw that broke the Financial Controllers back. But my current question is does anyone know WHAT this attack is, or if there's a configuration workaround I can do short of sticking a non win2k SMTP gateway between the net and Exchange? I can't post the SMTP logs publically because of a confidentiality agreement, but if anyone has an idea and would like to see a sample, please let me know and I'll see if the IT admin of the affected site will allow it. Cheers - Neil G.

1 0

Netforum 2003
by Roger De Salis 20 May '03

20 May '03

/* Early bird registrations close on 30th May, so please make sure you have your bookings in, we only have so much space.. */ The following additional talks have been scheduled for the conference Simon Lyall has kindly volunteered a talk about SPAM from an ISP perspective ----------------------------- - Filtering Products and and technology - Customer expectations - Managing Customer expectations ------------------------------------------------------- David Harris, of Pegasus fame is travelling all the way from Dunedin to talk about spam from the MUA persepctive and join a panel discussion on SPAM, and possible ISP and User solutions(?) to SPAM, which we all know is reaching epidemic proportions..... (should there be a small programming competition, the best 5 line perl program which can generate the most eloquent version of "my name is Enkidei Duee, son of Fred Duee, who has some implausible sum in the bank, and needs.....") ----------------------------------------------------------- David Hawke from Genaware is talking about GIS on Linux, and will no doubt have some comments about Linux on the desktop as opposed to linux in a server environment. ------------------------------------------------------------- KC Claffy from Caida in San Diego has indicated a willingness to join us in Auckland, and talk about some of the stuff CAIDA get up to. ------------------------------------------------------------ The flight simulator demo will include a discussion about the power of the internet to accelerate development, and particularly hooking the display (3-5 projectors) to live telemetry data and radio channels, thus effectively hooking yourself into the cockpit of a 737 currently landing at Auckland Airport. ------------------------------------------------------------ As we get closer to the conference, I shall be sending out small notes weekly to add the various talks and information as it comes to hand.. Rgds Roger De Salis -- \_ Roger De Salis rdesalis(a)fx.net.nz </' FX Networks +64 25 481 452 /) Wellington, New Zealand roger(a)desalis.gen.nz (/ ` DSL - the 56k modem technology of 2004

1 0

Sun RAQ's
by Matthew G Brown 20 May '03

20 May '03

Who in NZ distributes Sun's Cobalt range Web Hosting Appliances? Any admins have a good contact ? Best Regards Matthew G Brown B & R Holdings LTD http://www.brh.co.nz

2 1

RE: [nznog] XTRA Primary DNS Funkiness?
by Neil Gardner 19 May '03

19 May '03

Well, after 5 days of constant hassling, someone from Xtra finally rang me back and said they had fixed the TCP query problem on alien, and it does appear to be ok (for me at least) now... They also mentioned off the record that alien was slow this morning but didn't elaborate. They did say they were looking at it though. Cheers - N. -----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] Sent: Tuesday, 20 May 2003 10:47 a.m. To: Neil Gardner; nznog(a)list.waikato.ac.nz Subject: Re: [nznog] XTRA Primary DNS Funkiness? At 17:26 15/05/03 +1200, Neil Gardner wrote: >Hi guys - has anyone noticed anything funky with Xtra's DNS over the >last 2 or 3 days? I have a client that had periodic mail buildups on >outbound SMTP and the error was 'Unable to bind to the destination >server in DNS'. After lots of false starts I got to Xtra DNS... Just checked both Xtra's DNS servers now for other reasons (tracking down an incorrect authorative dns record) and noticed that 202.27.184.3 is sometimes not responding at all - just getting a timeout rather than incomplete data. 202.27.184.5 seems ok. Regards, Simon

1 0

Re: [nznog] XTRA Primary DNS Funkiness?
by Simon Byrnand 19 May '03

19 May '03

At 17:26 15/05/03 +1200, Neil Gardner wrote: >Hi guys - has anyone noticed anything funky with Xtra's DNS over the >last 2 or 3 days? I have a client that had periodic mail buildups on >outbound SMTP and the error was 'Unable to bind to the destination >server in DNS'. After lots of false starts I got to Xtra DNS... Just checked both Xtra's DNS servers now for other reasons (tracking down an incorrect authorative dns record) and noticed that 202.27.184.3 is sometimes not responding at all - just getting a timeout rather than incomplete data. 202.27.184.5 seems ok. Regards, Simon

1 0