- NZNOG - lists.nznog.org

NZNOG 2003 - Last Call for Votes
by Donald Neal 27 Jan '03

27 Jan '03

Days since I asked people who expect to attend to express a preference: 19 Preferring UniForum: 10 Preferring Waikato: 8 Will attend either, not worried: 3 Volunteering to help: 2 The University of Waikato expect an attendance from them which is about five higher if the Waikato option is chosen. I don't see a clear outcome here. but if we're going to anything a decision of some sort is needed. Could I please have any further expressions of interest by noon (NZDT) on Thursday, 30 January? People who liked the idea of doing both UniForum NZ in July 2003 and Waikato in February 2004: 2 - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

4 3

RE: NZNOG 2003 - Last Call for Votes
by Donald Neal 27 Jan '03

27 Jan '03

Chris, When I first floated the idea of what became last year's face to face gathering, I got 22 responses. Asking people without quoting dates, prices or a programme will tend, I think, to produce less interest than a specific proposal. - Donald Neal > -----Original Message----- > From: Chris Hellberg [mailto:odysseus(a)soa.co.nz] > Sent: Tuesday, 28 January 2003 12:50 > To: Donald Neal > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: NZNOG 2003 - Last Call for Votes > > > I hope this isn't a guage of the interest for NZNOG 2003 - 23 people. > The calibre of last year's event was pretty impressive and no > doubt that this year will be just as good; I know I'm looking > forward to it. > > It would be a real shame to miss out on the best event of its > type in NZ for lack of support. I'm sure there are more out there who > have heard of IP or 2day.com-sponsored bar tabs. > > Hopefully I got enough superlatives in ;) > > Cheers, > > Chris > ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[OT] 19" Coms Rack Cabinet...
by Dan Clark 27 Jan '03

27 Jan '03

Hi all, Sorry for the OT but would anyone out there have any spare 19" Coms Rack Cabinets surplus/for sale? Especially in the Dunedin area. We are in need of a 1/2 height (24U ish). Please contact off list. Kind Regards, Dan Clark Network Manager Scarfies.Net Ltd

1 0

worldwide DDOS (sql server fun)
by Joe Abley 25 Jan '03

25 Jan '03

http://www.nextgenss.com/advisories/mssql-udp.txt Time to start applying some filters at your edges. This has taken some big networks off the air in the US (and at least one in NZ). term deny-dos { from { packet-length 404; protocol udp; destination-port 1434; } then { count codered-4; discard; } } term allow-rest { then accept; } - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: worldwide DDOS (sql server fun)
by Ewen McNeill 25 Jan '03

25 Jan '03

In message <005701c2c4b1$165b1a80$0c01a8c0(a)saarinen.org>, "Juha Saarinen" writes: >Joe Abley <jabley(a)automagic.org> wrote: >> http://www.nextgenss.com/advisories/mssql-udp.txt > >http://news.bbc.co.uk/1/hi/technology/2693925.stm >Although I remain dubious about this claim: >"Unlike viruses, the worm exists only in memory, so it cannot be detected by >traditional anti-virus scanners." I'm not sure which bit you're dubious about: the "only in memory" or the "cannot be detected by traditional anti-virus scanners". The only in memory has been identified by various people starting to disassemble it. Various useful links (that have come through Bugtraq): >From "Jay D. Dyson" <jdyson(a)treachery.net>: http://www.kb.cert.org/vuls/id/370308 http://www.kb.cert.org/vuls/id/399260 http://www.kb.cert.org/vuls/id/484891 >From H D Moore <sflist(a)digitaloffense.net>: http://www.digitaloffense.net/worms/mssql_udp_worm/ (which contains some disassembly screen shots, and a unannotated disassembly) >From cstone <cstone(a)pobox.com> http://www.boredom.org/~cstone/worm-annotated.txt (which contains an annotated disassembly) >From what I can tell it's just a worm, spreading itself as fast as it can. Presumably the vulnerable hosts thus identified are then prime targets for something else to come in as a second wave. There's nothing in the annotated disassembly that indicates writing/sending data anywhere other than the Internet, hence "only in memory". Various people report that the infection can be cleared by stopping SQL server and/or rebooting -- with the obvious caveat that if it's not disconnected/firewalled from possible sources, it'll be reinfected quickly. As for "cannot be detected by traditional anti-virus scanners", that's probably a fall out of not writing anything to disk (which could be scanned), and memory protection in modern OS (which means the "memory scan" phase of DOS-based virus scanners is limited to the memory space the anti virus scanner is running in, without kernel support). Presumably a debug API or similar could be used to scan all memory, but I don't recall seeing that type of technique in (m)any anti-virus programs. Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: 2LD Review for *.nz ?
by Frank March 22 Jan '03

22 Jan '03

Although this matter is off-topic for this list, it might pay for me to clarify matters here. InternetNZ has a clearly laid out set of procedures for reviewing policies relating to .nz administration - please see the Domain Name Commissioners website at http://www.dnc.org.nz/ for more information. Included in these is the process for determining and reviewing policies and procedures. Briefly the review process requires the establishment of a review committee whose task it is, inter alia, to carry out a process of wide public consultation. In this case, the review committee composition has been discussed with the InternetNZ Council who have delegated final membership determination to the .nz Oversight Committee. It should be noted that the notice (and accompanying press release) went out on 13 December which is, even by the relaxed NZ standards at this time of the year, a reasonable time before Christmas/New Year. The review terms of reference have yet to be decided but will be wide (see http://www.dnc.org.nz/story/30064-35-1.html) The public consultation, apart from online discussions, will involve at least one forum session of some type, probably co-incident with a broader discussion of other InternetNZ matters of public interest, to be organised late in the first half of this year. Unfortunately, I cannot be more specific about dates and location as this is a matter for the InternetNZ Council and the new Executive Director to sort out. Best wishes, Frank March Chair, .nz Oversight Committee --- Frank March Senior Specialist Adviser, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, New Zealand Phone (+64 4) 474 2908; Fax (+64 4) 474 2659; Mobile (+64) 21 042 9205 -----Original Message----- From: Paul Brislen [mailto:Paul_Brislen(a)idg.co.nz] Sent: Thursday, 23 January 2003 13:26 To: Mark Foster Cc: nznog(a)list.waikato.ac.nz Subject: Re: 2LD Review for *.nz ? I would be interested to hear from anyone who has applied as well - I thought the nomination process was a bit quick, especially with the Christmas/New Year/Holiday of your choice season smack in the middle of it. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog http://www.govt.nz - connecting you to New Zealand central & local government services Any opinions expressed in this message are not necessarily those of the Ministry of Economic Development. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: 2LD Review for *.nz ?
by Paul Brislen 22 Jan '03

22 Jan '03

Sadly, it's too late - nominations/applications closed first week of January... Mark Foster <blakjak(a)blakjak.net>@list.waikato.ac.nz on 23/01/2003 12:03:11 Sent by: owner-nznog(a)list.waikato.ac.nz To: nznog(a)list.waikato.ac.nz cc: Subject: 2LD Review for *.nz ? http://www.idg.co.nz/webhome.nsf/UNID/E021027AAA37CF2DCC256CB6000704F1!open… (Apologies for any offtopicness, but I know there will be people here very interested in this...) Anyone going to volunteer? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: 2LD Review for *.nz ?
by Paul Brislen 22 Jan '03

22 Jan '03

I would be interested to hear from anyone who has applied as well - I thought the nomination process was a bit quick, especially with the Christmas/New Year/Holiday of your choice season smack in the middle of it. Let me know off list if you like - I'm as far off topic as I like to get. Cheers, Paul PS - yes, I'm the reporter for IDGNet. Mark Foster <blakjak(a)blakjak.net> on 23/01/2003 13:36:03 To: "Paul Brislen" <Paul_Brislen(a)idg.co.nz> cc: nznog(a)list.waikato.ac.nz Subject: Re: 2LD Review for *.nz ? "The nominations for interest in being involved have closed and InternetNZ's oversight committee will meet in early February to select the four other participants." Oops.. Maybe ill rephrase. Anyone involved with NZNOG involved with this? The implications will impact alot of us here, I imagine. Thanks Paul, Mark. At 11:53 23/01/2003 +1300, Paul Brislen wrote: >Sadly, it's too late - nominations/applications closed first week of >January... - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

2LD Review for *.nz ?
by Mark Foster 22 Jan '03

22 Jan '03

http://www.idg.co.nz/webhome.nsf/UNID/E021027AAA37CF2DCC256CB6000704F1!open… (Apologies for any offtopicness, but I know there will be people here very interested in this...) Anyone going to volunteer? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The green green grass of home...
by Dean Pemberton 21 Jan '03

21 Jan '03

Hi all; I've been overseas for almost 5 years now, and it's time to come back home to New Zealand. I do however need a job. I've spoken to my current employer about this of course. While they acknowledge that it is technically possible for me to get a transfer to NZ, they can not see it happening in the near future. This is unfortunate, but does nothing to dampen my desire to return home. SO; If anyone out there has a position they need filled, or know of someone else who does, then can you drop me a line. My preference is for permanent work in Wellington, but I'm also happy to consider contract work and other locations. I'm also open to negotiation regarding salary, so don't worry about that to begin with. I'm basically keeping an open mind. So if you have something pass it on. I have a current CV at http://deanpemberton.com/cv/ Feel free to pass it along to anyone who might be interested. Thanks Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0