- NZNOG - lists.nznog.org

Uniforum 2002 Conference
by Mark Foster 13 Jul '02

13 Jul '02

Just a quick note to say thanks to all those NZNOG'rs whos efforts helped make the Uniforum/NZNOG Conference a success. Nice to put faces to some of the names which crop up here from time to time. Off the top of my head and by no means officially, but thanks are owed to some NZNOG-Specific folks who helped us out: Citilink (802.11 gear, which was well used) Dean - for helping arrange the above. Nathan Mercer, Microsoft NZ - The use of a Data Projector. Steve Philips, ICONZ - The use of a Data Projector, and also the Packeteer (For the record, we did 1.1GB for the 4 day period, so that wasnt so bad on a JS1200 connection was it. :) The packeteer most certainly helped keep utilisation reasonable. Roger De Salis / Cisco, for getting Paul Vixie out. He certainly kept everyones attention and is a fairly easy speaker to listen to. Martin Kealey - for organising the whole thing. Probably also need to thank Peace Software for letting him do so much during work hours :) Lin Nah - for much needed motivation and assistance in the logistics side. + Any others who I havnt mentioned. See you all at the next one. :) Mark Foster - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Thanks to all who attended the Conference
by Dean Pemberton 13 Jul '02

13 Jul '02

Just wanted to say a quick thanks to everyone who attended the conference. I'm sure much more will be posted about specific subjects later. I hope you all enjoyed the sessions that you attended. I'm sorry I couldn't stay around longer Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Heads up to Xtra and people receiving mail from Xtra
by Simon Byrnand 10 Jul '02

10 Jul '02

Hi All, Just noticed this morning, that Xtra seem to be sending mail from some "new" mailserver ip addresses recently, which include: 210.86.15.144 210.86.15.145 210.86.15.147 (and probably others) Unfortunately that whole /24 seems to be blacklisted by several different spamlists as either a "dialup range" or as a source of spam. See http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=210.86.15.144 for one example. (Note: slow link) So if you use any ip address based spam blocking you may not be receiving mail from xtra anymore until you allow that range..... :) Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

video at uniforum
by Joe Abley 10 Jul '02

10 Jul '02

Is anybody recording any of the nznog track sessions at uniforum, in some digital fashion? If so, and anybody needs/wants a US mirror for the resulting data, let me know. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 9

(Fwd) The operator of the largest IX in NZ
by Sue Leader 09 Jul '02

09 Jul '02

Greetings If anyone is interested would they get in touch direct with Kyoko. chrs Sue ------- Forwarded message follows ------- From: "Kyoko Day" <kyoko(a)apia.org> To: <exe.dir(a)internetnz.net.nz> Subject: The operator of the largest IX in NZ Date sent: Tue, 9 Jul 2002 19:37:33 +1000 Dear Sue Leader, As continuation from the last APRICOT, Philip Smith of Cisco, Akira Kato of NSPIXP2/6 of WIDE Project, and I are organizing a meeting of IX operators during the next IETF in Yokohama and would like to know if one of the IX operators in NZ can attend our meeting. The below is a proposed list of agenda for the upcoming IX Operators Meeting in Yokohama on 16 July, 2002. Paul Vixie of former PAIX in place of Stephen Stuart, Bill Manning, Bill Woodcock, and other operators and the major vendors will be attending the meeting. This will be a gathering of the major IX *operators.* In this meeting, we are also expecting the other major IXs in AP regions such as JPIX, TWIX, TWNAP, KT, KIX, and Dacom, etc. Date/Time: July 16, 2002 -7:30am - 9:00am Place: Room 513, Pacifico Conference Center, Yokohama, Japan Purpose: 1) to form a close relations among the operators of the critical IX infrastructure, 2) to find an efficient and effective way to coordinate and collaborate among the operators, especially in the area of security, 3) to exchange information, share experiences, and try to find a solution to the common problem, and 4) to receive your input about our future activities. Participants: IX operators of the major IXs that are critical to the Internet infrastructure and individuals whose expertise and IX related activities go across the continents. Proposed Agenda: 1. Open the meeting - Background and the purpose of the meeting 2. Introduction of the participants 3. Agenda Bashing 4. Presentation and Discussion Items (a) A list of known IX operators and newly established IXs (b) IX Status Report by the participants (c) Discussion of future activities 5. Any Other Business 6. Close the meeting We welcome your ideas and suggestions for the upcoming meeting. In the event you will not be able to attend the meeting, please feel free to let us know by email to kato(a)wide.ad.jp or kyoko(a)apia.org. The information is also available at http://www.apia.org. Thank you in advance, and please let me know if someone from the largest IX in NZ can participate. We look forward to hearing from you soon. Regards, Akira Kato - WIDE Project/University of Tokyo Kyoko Day - APIA ______________________________________ Kyoko Day - Secretary General Asia & Pacific Internet Association (APIA) http://www.apia.org ------- End of forwarded message ------- -- Sue Leader - Executive Director InternetNZ Voice: +64-4-472-1600 Fax: +64-4-472-1207 Level 4, Economous Building, 4 Bond Street (P.O.Box 11-881) Wellington http://www.internetnz.net.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

CUG
by Philip D'Ath 06 Jul '02

06 Jul '02

I'm thinking about forming a Cisco Users Group (CUG) in Auckland, and modelling it after other CUGs such as http://www.cisco-users.org/. I know I will have the support of Cisco Systems, and Cisco's distributors. What I'm not sure about is how much interest there is out there for such an idea among the Cisco populous. I'm not aware of anything like this currently in NZ. Is anyone else aware of such a usergroup? I would like the CUG to be for engineering people, not sales people. Based on other CUGs, common things that the CUG would do are: * Technology presentations (e,g. Understanding IPSec, Queueing Options, etc) * Study groups, for people seeking Cisco Qualifications * Solutions that people have found to problems that take more than 30s to describe * Discussion groups (perhaps IP in NZ, peering, APE, etc). * Demos of new products (the kind where your allowed to touch the boxs). I would like the meetings to be once a month, and I'll probably ask a different distributor/Cisco/vendor/reseller to sponsor coke/beer/pizza each time. I can probably manage to do a lot of presentations myself to get things going, but I don't profess to being an expert in every field, and I'd hate to think I was preaching to people who knew more than myself (which I would be if no one offered me any support). So what do you think. Would I be wasting my time? Philip D'Ath, BCMS, MCP, CCNA, CCDA. http://www.ifm.net.nz/

11 18

Conference Schedule clash
by Mike Savory 06 Jul '02

06 Jul '02

Hi all I noticed that the Citylink presentation has been scheduled at the same time as the DDoS one. (Wacking the Moles) vs (Distributed Denial of Service: The current state and counter measures) Any chance of changing this (the conference looks pretty full though...) Mike - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Advance notice: Invitation to join NZ delegation to APEC TEL26 & associated Security Workshop and Training events
by Frank March 04 Jul '02

04 Jul '02

This message is being distributed to the following mailing lists: GOVIS, Internetnz-members, Ecommerce-contacts, NZNOG. [Apologies for any duplications] I will send follow-up messages on this topic only to anyone who registers interest by replying directly to frank.march(a)med.govt.nz As someone interested in the development of ecommerce, the Internet and related technologies, you are invited to join the New Zealand official delegation to the 26th meeting of the APEC Telecommunications and Information Working Group (TEL26) which will be held in Moscow, Russia from 19 to 23 August 2002. Information about the meeting will be available later on a dedicated website but in the meantime there is some information available on the main APEC TEL website at http://www.apectelwg.org/apec/main.html. The meeting programme will be held in conjunction with a number of associated seminars and workshops (on 19 an 20 August) which increase opportunities for making contacts and bilateral discussions. Of possible wide interest, there are at two security events timed to coincide with TEL26. A two-day workshop on training to combat cyber terrorism and crime, to be hosted and funded by USA, will take place following TEL26 and a two-day meeting between representatives of the European Electronic Signatures Standards Initiative (EESSI) and the TEL e-Security Task Group is proposed to take place prior to TEL26 (this meeting will be funded by EESSI). APEC TEL is one of the most productive APEC working groups and has a very strong private sector presence. It is very active in promoting electronic commerce as well as fostering projects in online security and PKI, telecommunications policy and regulation, broadband dissemination and take-up, research and educational projects and many other relevant areas. The New Zealand delegations to previous meetings of the TEL have included a number of private sector members as well as officials from government agencies. Please note that there is no registration fee for APEC TEL meetings, and the cost of at least some meals are met by sponsors, however delegates are expected to meet their own travel and accommodation costs. The delegation reports from TEL23, TEL24 and TEL25 may be found at along with other information about APEC activities at http://www.ecommerce.govt.nz/international/index.html Please contact me if you are interested in joining the delegation or if you would like any further information. And please pass this information on to anyone else you think might be interested. Frank March Specialist Advisor, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, NZ Ph: (+64 4) 474 2908; Fax: (+64 4) 471 2658 Any opinions expressed in this message are not necessarily those of the Ministry of Economic Development. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Anybody heard of these guys ?
by Simon Byrnand 03 Jul '02

03 Jul '02

Just to change the topic momentarily away from conference registrations etc to more technical matters.... :-) A while back I remember a bit of discussion about a "personal firewall" program that automatically sent out abuse(a)domain emails whenever it detected "intrusion attempts" that was really starting to get up the nose of system admins everywhere.... Yesterday I got a strong sense of Deja Vu when I received the following email to abuse@ (details xxx'ed to protect the innocent :) -------------------8<--------------------- Complaint ID: [securepipe.com #xxxxxx] The following is a complaint against an IP or domain which appeared in our logs, indicating possible network abuse. If you have received this report in error, please forward it to the appropriate party or let us know. A user, apparently from your network, probed port 139 (NETBIOS) on the IP appearing in the log except below. The port in question is commonly used for Windows networking, and thus the probe may represent a misconfigured client or an active attempt to gain unauthorized access to the target. All timestamps below are in UTC -0000 (Greenwich Mean Time) Jul 3 03:14:56 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=64034 F=0x4000 T=103 SYN (#25) Jul 3 03:14:59 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=547 F=0x4000 T=103 SYN (#25) Jul 3 03:15:05 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=4643 F=0x4000 T=103 SYN (#25) Jul 3 03:15:17 ca-gw kernel: Packet log: inpETH2 DENY eth2 PROTO=6 x.x.x.x:1026 x.x.x.x:139 L=48 S=0x00 I=11811 F=0x4000 T=103 SYN (#25) We appreciate your assistance in resolving this matter. -- SecurePipe Incident Response Team Tel: +1 608 294 6940 Fax: +1 608 294 6950 (attn: IRT) incident.response(a)securepipe.com -------------------8<--------------------- Now I don't know about anyone else, but this email looks like an automatically generated report if I ever saw one...although this time comming from a linux firewall log. The question is should I be taking this seriously, or ignoring it. The fact that the "complaint" had an ID number suggested they may have a system like spamcop where you can quickly log in and address the issue on their website. Unless I'm blind, they don't have anything like that on their site, only lots of promotional material for their companys products/services. (Does that make this email effectively unsolicited advertising ? :) Then there is the question of severity - I'd be interested to know where most sysadmins draw the line between accidental and harmless connections and outright mallicious activity. IMHO a single connection attempt to port 139 doesn't fall into the category of mallicious, and could indeed be totally accidental. I can think of a number of actions in windows that will inadvertently cause it to try to make a netbios connection to a remote host - sometimes you have to go out of your way to STOP the stupid thing from doing that...(netbios hostname resolution anyone?) I'm definately not trying to downplay the importance of security, but I can see a lot of nuisance value if we get to the point where any connection to a non-desired port is automatically considered mallicious, and every man and his dog has their firewall automatically firing off emails every time somebody tries to connect to them on a port they weren't expecting connections on... Anyway, I'd be interested in hearing from anyone else who has dealt with "securepipe.com", or just peoples opinions on the matter of automated firewall abuse emailing in general... Regards, Simon Byrnand iGRIN Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Beer!!!!!!
by Dean Pemberton 03 Jul '02

03 Jul '02

In the spirit of Networking and Beer (Yep it's in the AUP), I'd just like to invite anyone who is in Wellington on Thursday along to Curry. A few of the networking people around town have been doing Thursday night curries for a few weeks now (ever since I flew in, maybe a bit before) and it's become a bit of a thing. If anyone wants to join us for Curry/Chat/Beer on Thursday, then get yourself to ThursdayNightCurry.com, check out the rules etc and we'll see you there. Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 18