- NZNOG - lists.nznog.org

Re: Netgate outage causes chaos!
by Chris Wedgwood 07 Aug '02

07 Aug '02

Still flogging a dead horse... On Sun, Aug 04, 2002 at 11:33:32PM +1200, Peter Mott wrote: But the telecom delegated /23 had no name resolution. Empty/broken zone, lame delegation or name-servers not responding? For your original email is sounds very much like the latter, in which case *most* things will keep working albeit a little more slowly at times perhaps. Email won't be lost, it will remain in the queues, web-traffic should be blisfully ignorant of this. As much of 25% of the 'NZ in-addr.arpa' space is bogus last time I checked. Thousands of web applications on our virtual web servers were unable to send mail because the in-addr zone ttl expired on our caching name servers Your expired in under 30 minutes? and lookups to auth name servers failed due to loss of parent name servers I'm not sure i follow here. Since our mailers require even our own host ip addresses to resolve to a useful name things were very sucky for a time. Eh? Your MTAs fail to stop working when they can't resolve their own names from address? Sounds pretty nasty to me.... We are making quite a few network changes at this time, so had ttl lower than usual. Needless to say I've wound it back up again. Lucky for us, none of our outbound mailers are on the /23 concerned, or other isp mailers would no doubt been refusing mail from our customers. I doubt it... so much DNS is busted out there almost body requires in-addr.apra to be working when receiving email. Sorry, I just don't understand why this was such a problem... reverse is broken for so many people and they never notice it. --cw - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

69/8 allocated to ARIN
by Rob Thomas 07 Aug '02

07 Aug '02

Hi, NZNOG folks. [ Apologies to those of you who have seen this elsewhere. ] IANA has allocated 69/8 to ARIN. I have updated my Bogon List and my sundry templates to reflect this change. You should modify your filters accordingly. IANA IPv4 Allocation List - http://www.iana.org/assignments/ipv4-address-space Bogon List - http://www.cymru.com/Documents/bogon-list.html Secure IOS Template - http://www.cymru.com/Documents/secure-ios-template.html Secure BGP Template - http://www.cymru.com/Documents/secure-bgp-template.html Secure BIND Template - http://www.cymru.com/Documents/secure-bind-template.html Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Radius server for Telecoms IP.something
by Malcolm Lockyer 06 Aug '02

06 Aug '02

>From what I can deduce from your comments - it doesn't sound like you'll need to buy a $1000AU radius software package just yet (although it is good software). For you scale (I'm guessing - if you have thousands of dial-up customers or somthing, then I'm wrong :) some "freeware" radius package would do fine. I can recomend IC-Radius, although it isn't perfect and isn't exactly mature - but the major advantage to it is that by default it keeps almost all of its configuration, accounting and users in a mysql database. Which for small operations is really handy. I know that that isn't the best reliablility wise - because if the mysql server dies it will refuse to authenticate at all. If you need somthing more - then use free radius, using a flatfile database - with a perl script and a crontab job to re-generate the flatfile "text file" from the mysql database every 10 or so minutes. Installation and configuration of ic-radius isn't that hard - and they have a semi-active mailing list. Bassically for the install you just need to install the libries required (such as the Perl DBI - so the scipts can talk to your database), install and compile the radiusd binaries - then load the radius "Dictionaries" (a file which contains alot of variable atributes so that your radius can talk to the telecom radius - ask telecom for it). Then you have a working radius server. It even includes a cgi based basic management program to get you started quickly - which has been ported to php. <puts on flame proof jacket> Correct my if I'm wrong - I'm no expert... Malcolm >From: Andy Linton <asjl(a)lionra.net.nz> >To: Bjorn Nilsen <bnilsen(a)manux.co.nz> >CC: nznog(a)list.waikato.ac.nz >Subject: Re: Radius server for Telecoms IP.something >Date: Wed, 7 Aug 2002 18:23:36 +1200 (NZST) > >On Wed, 7 Aug 2002, Bjorn Nilsen wrote: > > > Hello, > > > > I want to set up a radius server as we are looking at using Telecoms > > IP.office/IP.remote (or whatever it is called) here. I have never set up >a > > radius server and only know what I have read about it. I have set up >Bind, > > Apache, QMail and various other Linux based systems so hopefully this is >not > > out of my capabilities. As with all Linux software there is many options >to > > choose from eg: Cistron Radius, Livingston Radius, GNU Radius, ICRadius, > > FreeRadius. I understand that radius is a standard but from experience >(eg: > > IPSec) different implementations are not always completely compatible. >What > > radius server would people recommend? It is to be used with Telecoms > > IP.whatever, and needs to run on Linux (or BSD). > > > >Not clear if you want a free server or are prepared to pay for one. If the >latter see http://www.open.com.au/radiator/index.html > >I've just been setting this up and I like it. > >Widely used - see http://www.open.com.au/customerlist.html > --snip-- _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spam from 200/8
by Mark Foster 06 Aug '02

06 Aug '02

Hi Guys, We've had to block 200.0.0.0/8 from our MTAs temporarily, our mail queue jumped to around 30,000 messages at around 6:40 this morning and we're still taking more than one message per second from MTAs which are predominantly in that netblock. There are exceptions now but blocking 200/8 certainly reduced the load something chronic. Looks like a sweep (random(a)ourdomain) looking for valid targets, and the source addresses are random(a)a-valid-but-forged-domain. As a result our MTAs are now bombarding the source domain MTA trying to bounce all the invalid addresses, and now we're getting complaints from them... Wonder whether any other NZ ISPs have seen this happen recently or whether this is the first of many? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

Speaking of spam...
by Dylan Reeve 06 Aug '02

06 Aug '02

I have seen spam 'from' brandebank(a)brandebank.com arrive at a number of addresses today, at least one of them is fairly new, and I have never posted it anywhere public that is likely to have been trawled. Anyone else seen these? Are they a symptom of the mass spam that had QSI blocking the majority of Latin American and the Caribbian? -- Dylan Reeve - dylan(a)wibble.net It's just not cricket. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Fwd: Outage in Wellington - OT
by Tim John 06 Aug '02

06 Aug '02

> "Hell, there are no rules here - we're trying to accomplish something!" > Thomas A Edison Peter, I notice your signature has changed ... Isn't it 'fun to do the impossible' any more :) Tim -----Original Message----- From: Peter Mott [mailto:peter.mott(a)2day.com] Sent: Tuesday, 6 August 2002 7:25 p.m. To: Richard Naylor; Peter Mott; Mark Foster; nznog(a)list.waikato.ac.nz Subject: RE: Fwd: Outage in Wellington > I wondered when this would come up. CityLink has a different architecture > and there is no "central office". Switching centers have ups and > generators > and smaller buildings just have UPS. So your switching centres stayed up and other locations with just UPS went down due to available runtime being exceeded by outage length? -PWM "Hell, there are no rules here - we're trying to accomplish something!" Thomas A Edison - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog DISCLAIMER: The content of this email is confidential and may contain legally privileged information intended only for the individual or entity named above. Access to this message by anyone else is unauthorised. If you are not the intended recipient, please be advised that the use, distribution and publication of the above information is prohibited. If you have received this email in error, please contact Domainz by returning the email and destroying the original. Thank you. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: Fwd: Outage in Wellington
by Wayne Kampjes 06 Aug '02

06 Aug '02

wot - no power backup for this stuff? -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Monday, 5 August 2002 12:05 To: Mark Foster Cc: nznog(a)list.waikato.ac.nz Subject: Re: Fwd: Outage in Wellington On Mon, 5 Aug 2002, Mark Foster wrote: > Ok try it from the right address now. :) > > > >Date: Mon, 05 Aug 2002 11:54:56 +1200 > >To: nznog(a)list.waikato.ac.nz > >From: Mark Foster <mfoster(a)quicksilver.co.nz> > >Subject: Outage in Wellington > > > >Just heard from one of our NOC team here that there seems to be a power > >outage in Wellington which has certainly affected Citilink (one of our > >links is down) and by the looks also Actrix (who dissapeared off the face > >of the map earlier this morning.) > > > >Just in case anyone else is wondering why things are being a bit strange. > > > >Mark. > >(Quicksilver Internet) Ohhh... is that why www.stuff.co.nz is dead too? -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

RE: Magnetic field strength in NZ?
by Dan Langille 05 Aug '02

05 Aug '02

On 6 Aug 2002 at 8:42, Lindsay Druett wrote: > Now you're telling everyone how ancient you are.... I was only born > towards the end of the '60s And I in the early 60's. > Just out of curiosity, what did they/you use for the return path when > they/you measured the EMF induced by the earth's magnetic field onto > the disused telegraph cable ? I don't know. I should clarify. I was helping someone research what the cable had been used for after it was no longer used for telegraph (its original purpose). > -----Original Message----- > From: Dan Langille [mailto:dan(a)langille.org] > Sent: Monday, 5 August 2002 17:08 > To: Juha Saarinen > Cc: NZNOG > Subject: Re: Magnetic field strength in NZ? > > > Strange that you should mention it... I was involved in some > research on the Pacific Cable (a telegraph cable from Vancouver to > NZ). One of the things we found was that after decomissioning (in the > 60's I believe), it was used to measure earth current. -- > -- Dan Langille I'm looking for a computer job: http://www.freebsddiary.org/dan_langille.php - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Magnetic field strength in NZ?
by Juha Saarinen 04 Aug '02

04 Aug '02

Does anyone know roughly how many mG it is? Of course this is on topic for NZNOG. I need to ahhh... uhhh... measure electron deviation in network gear made for Northern Hemisphere magnetic conditions. ;-) -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: Fwd: Outage in Wellington
by Richard Naylor 04 Aug '02

04 Aug '02

At 11:59 a.m. 05/08/2002 +1200, Mark Foster wrote: Just heard from one of our NOC team here that there seems to be a power outage in Wellington which has certainly affected Citilink (one of our links is down) and by the looks also Actrix (who dissapeared off the face of the map earlier this morning.) >>Just in case anyone else is wondering why things are being a bit strange. The Power co had a cable fault they eventually found. Initially another substation fault was feared as a transformer tripped at the same time and at the same place as the ring opened - which happened to NOT be the faulty cable segment. After a few recloses (think "no shutdown" with lotsa power behind you) the fault became apparent. (ie someone felt the ground shake) and it was isolated. Most customers closed things down due to false restarts with the recloses. We waited and installed a geny as the UPS was horribly confused and pretty well dead. The outage affected New World, Actrix (where CityLink have a switch) and most of Courtenay Place. There were genies and extension cords everywhere.........even down the footpath. The New World Sub needs some new paint on the switchgear. Things are now restored and the power boys are off to do a location and dig. rich richard.naylor(a)citylink.co.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0