- NZNOG - lists.nznog.org

Openssh vulnerability
by Jeremy Brooking 25 Jun '02

25 Jun '02

Im sure most of you are all aware, but for those who aint... "A yet undisclosed vulnerability exists in OpenSSH. You are strongly encouraged to upgrade immediately to OpenSSH 3.3 with the UsePrivilegeSeparation option enabled." This should block the vulnerability, but will not fix it, upgrading to 3.4 as soon as its released is recommended. Jeremy - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

IPnet problems?
by Simon Lyall 23 Jun '02

23 Jun '02

Anybody else having problems with ipnet dialup in 07 and 06 area (mainly 07) since mid last week? -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

Apache vulnerability
by Steve Phillips 21 Jun '02

21 Jun '02

Just a note to all that don't know about this one - there are a LOT of still vulnerable servers out there, there have also been exploits published and in the wild for FreeBSD, OpenBSD, NetBSD and rumors of win32 exploits, linux exploits and solaris exploits, if you haven't upgraded your web server for the past 2 years, now is your chance :-) Also of note, some apps that come bundled with precompiled versions of apache's web server will need vendor supplied patches, you should all check with your vendors to find out what they are doing and what their upgrade paths will be. There is a scanner available from http://www.eeye.com that you can use :-) how accurate it is I'm not sure, but if its reporting is true then my alteon, a number of Apple based servers and a few M$ IIS/4.0 servers are also vulnerable to this bug :-) tho I think they may simply be bogus reports due to the way it checks for the vulnerability.. -- Steve. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Orcon Internet Prefix List Update
by Craig Whitmore 20 Jun '02

20 Jun '02

For all those peering with Orcon Internet (AS17746) at APE, please update your Filter Lists to: Add: 202.36.199.0/24 A Full prefix list is included as attachment. Thanks Craig Whitmore Orcon Internet http://www.nzdsl.co.nz

1 0

More Conference Speakers!!!!!
by Dean Pemberton 20 Jun '02

20 Jun '02

Last minute addition. Presentation by Simon Blake and Jonathan Martin of Citylink. Looks like a good bit of humour with a good bit of technology. Don't forget to register. Martin, Can you add this to the page and schedule. Thanks Dean -----Forwarded Message----- > From: Simon Blake <simon(a)citylink.co.nz> > To: dean(a)flatnet.gen.nz > Subject: NZNOG talk > Date: 21 Jun 2002 14:18:59 +1200 > > Topic: > > "Wacking the Moles" > > aka "is Citylink a crap network? Discuss..." > aka "How we built a 5 nines network from stuff we bought from Dick > Smith" > > Simon Blake and Jonathan Martin of Citylink will speak about the past, > present and future of Citylink. Discussion points could/will include > hardware (physical construction, power issues), topology, > administration, peering/APE/WIX, best practices for operators on > Citylink, building routers from Linux PC's, and anything else that > people ask us. Will probably contain some horror stories, there may be a > little finger pointing and telco mocking, but we'll try to keep it > seemly. > > Bio: > > Simon has been involved with Citylink more or less since it's inception > in 1996, as network administrator and lead mole wacker. Jonny has been with > Citylink for about a year doing network admin, hardware integration, and > VoIP development. Prior to joining Citylink he was with the broadband > development group at Telecom NZ. > > -- > > > That do? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Conference Registrations
by Dean Pemberton 20 Jun '02

20 Jun '02

Ok people. It's time to fess up. If you are planning to go to the NZNOG Conference then please go to the following page and register. http://www.uniforum.org.nz/registration.cgi Incase you are still unsure of why you should go - here is a list reasons/highlights. 1) Paul Vixie. Yep we managed to get Paul Vixie to agree to come out. For those of you who have managed to get on this list without knowing who Paul Vixie is, then just think words like: DNS cron dhcp Book on Sendmail etc etc etc Paul is worth the asking price for the conference. And we have him doing an hour lecture and then a whole day workshop on Saturday. 2) Greg Shepherd. Greg is a Consulting Engineer for Juniper Networks, focusing primarily on multicast protocols, performance, customer solutions, and market drivers. Before joining Juniper, Greg worked in multicast development at Cisco Systems, and also presented the Advanced Multicast Routing tutorial for Cisco Networkers. Until recently he held a faculty position at the University of Oregon's Advanced Networking Technology Center, where he provided multicast direction to the Internet2 community. Greg also sits on the Board of Advisors for Digital Fountain. 3) David Moore David's research interests are high speed network monitoring, denial-of-service attacks and infrastructure security, and Internet traffic characterization. His current research includes tracking and quantifying global DoS attacks using the backscatter analysis technique, developed with Geoff Voelker and Stefan Savage of UCSD. Most recently, David has been applying some of the same measurement techniques using large address spaces to monitor several of this summer's large worms: CodeRed v1 and v2, CodeRed-II, and Nimda. 4) lots of other people. We've really pulled out the cast of thousands for this conference. It's going to be a great opportunity to listen to that people are doing. Topics include IPv6, VoIP, Wireless, DOS etc 5) Here is the guilt trip... If you support NZNOG and this conference then there is a good chance that it will keep going in years to come. If no one turns up then there will never be one again. So even if this conference is not you IDEAL nznog conference - then please consider attending the parts that do interest you. That way there will be one in the future for you to have input into. So SIGN UP. If there is a reason why you are not signing up then please email me and let me know. There may be something that I can do about it. And do not try and just ignore it. I'll be mailing people individually to hassle them into it as well =) Dean - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 6

Re: Final Request for Submissions for '.maori.nz' Proposal
by Roger De Salis 19 Jun '02

19 Jun '02

Sue Leader wrote: > > Final Request for Submissions for '.maori.nz' Proposal > > At its June meeting the Council of InternetNZ unanimously approved > in principle the creation of a new second level domain (2LD) - > '.maori.nz'. > // Since the same request was posted to nznog, here is the technical proposal in all it's glory, as sent to the NOG // It is perhaps opportune for the members to consider whether they wish Internet NZ to sink into the political morass that the Telco's find themselves, and why excrutiatingly simple things take forever. And ultimately stuff costs a fortune to do because you are dealing with such an amazingly political machine. Or you can do the right thing, simply, quickly, without drama. Pick one. I'll even get the DNC's permission - howzzat.... I prefer, the simple, quick low cost procedure to expensive, time consuming one, but I am clearly out of step........ but may I'm wrong, or deluded.... Rgds Roger NOG proposal follows. =============================================================== Bizzarro...... /* formal on Formal implementation proposal: add .maori to existing DNS. (About 45secs) make minor change to to existing DNS thingy (it may be ugly, but at least it works reliably) perform push check .test.maori.nz points to x.x.x.x/y open for accepting .maori domain names (it is unmoderated...) $0 Time about 45 mins. /* formal off I can of course write this in Microsoft word, about 200 pages, get two different legal opinions from a variety of smartly dressed punters around town, consume staggering amounts of dosh/time and the end result will not look a whole lot different from the one above..... So vote for which one you prefer.... Roger De Salis > InternetNZ is now calling for formal submissions regarding the > implementation of '.maori.nz'. Submissions received by the Domain > Name Commissioner of InternetNZ will one of the aspects that > InternetNZ will use to determine if this application will receive final > approval. > > Anyone who is interested in sending a submission is encouraged to > read the application, which can be found at: > http://www.internetnz.net.nz/dns/2nd-level-domains/maorinz.html > > Submissions from the previous stage of the approval process can be > found at: > http://www.internetnz.net.nz/dns/2nd-level-domains/maorinz- > submissions/index.html > > Submission requirements > > Anyone can present a submission on this stage of the application. > Submissions documenting the author(s) opinions are encouraged > regarding any implementation issues in relation to this proposal. > Anyone who is interested in making submission is invited to review > the variety of solutions ICANN utilised when creating seven new > TLDs in late 2000 at http://www.icann.org/tlds/ > > Submissions are not restricted to individuals but can be from > companies, groups, notfor profits, etc. > > For a submission to be acceptable it must include the name of > theauthor and any person or group which they are representing. > Contactdetails also need to be provided which will need to include a > day-time contact number and postal address. > > Anonymous submissions will be disregarded.All submissions > received will be placed on the InternetNZ website.Contact details and > address will be removed but they will list theauthor(s) name (i.e. > similar to 'Letters to the Editor'). > > Where to send submissions > > Submissions can be sent to the Domain Name Commissioner, > Debbie Monahan, on 2ld(a)dnc.org.nz or can be posted to: > The Domain Name Commissioner > InternetNZ > Attention: maori.nz submission > PO Box 11881 > Wellington > > Please provide your submission in either ASCII (plain) text or HTML > format. > > Deadline > > The deadline for submissions is 5 pm on July 5th 2002. All > submissions can be accessed from the "What's Hot" area of the > website as they are placed online. > > Next steps > > The final decision will be made at the InternetNZ council meeting of > July 19th 2002 after a review of any submissions received by the > Domain Name Commissioner. > > 2LD application process > > For information on the policy and history of 2LD's please refer > to:http://www.internetnz.net.nz/dns/2nd-level-domains/ > --- > > -- > Sue Leader - Executive Director > InternetNZ > Voice: +64-4-472-1600 Fax: +64-4-472-1207 > Level 4, Economous Building, 4 Bond Street (P.O.Box 11-881) Wellington > http://www.internetnz.net.nz > _______________________________________________ > members-announce mailing list > members-announce(a)internetnz.net.nz > http://listserver.internetnz.net.nz/mailman/listinfo/members-announce -- \_ Roger De Salis rdesalis(a)cisco.com </' Cisco Systems NZ Ltd +64 25 481 452 /) L8, ASB Tower, 2 Hunter St +64 4 496 9003 (/ Wellington, New Zealand roger(a)desalis.gen.nz ` In October 2001, the 5th most important product line by value for Cisco is - the telephone. Cisco 79x0 IP telephones. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Final Request for Submissions for '.maori.nz' Proposal
by Sue Leader 19 Jun '02

19 Jun '02

Final Request for Submissions for '.maori.nz' Proposal At its June meeting the Council of InternetNZ unanimously approved in principle the creation of a new second level domain (2LD) - '.maori.nz'. InternetNZ is now calling for formal submissions regarding the implementation of '.maori.nz'. Submissions received by the Domain Name Commissioner of InternetNZ will one of the aspects that InternetNZ will use to determine if this application will receive final approval. Anyone who is interested in sending a submission is encouraged to read the application, which can be found at: http://www.internetnz.net.nz/dns/2nd-level-domains/maorinz.html Submissions from the previous stage of the approval process can be found at: http://www.internetnz.net.nz/dns/2nd-level-domains/maorinz- submissions/index.html Submission requirements Anyone can present a submission on this stage of the application. Submissions documenting the author(s) opinions are encouraged regarding any implementation issues in relation to this proposal. Anyone who is interested in making submission is invited to review the variety of solutions ICANN utilised when creating seven new TLDs in late 2000 at http://www.icann.org/tlds/ Submissions are not restricted to individuals but can be from companies, groups, notfor profits, etc. For a submission to be acceptable it must include the name of theauthor and any person or group which they are representing. Contactdetails also need to be provided which will need to include a day-time contact number and postal address. Anonymous submissions will be disregarded.All submissions received will be placed on the InternetNZ website.Contact details and address will be removed but they will list theauthor(s) name (i.e. similar to 'Letters to the Editor'). Where to send submissions Submissions can be sent to the Domain Name Commissioner, Debbie Monahan, on 2ld(a)dnc.org.nz or can be posted to: The Domain Name Commissioner InternetNZ Attention: maori.nz submission PO Box 11881 Wellington Please provide your submission in either ASCII (plain) text or HTML format. Deadline The deadline for submissions is 5 pm on July 5th 2002. All submissions can be accessed from the "What's Hot" area of the website as they are placed online. Next steps The final decision will be made at the InternetNZ council meeting of July 19th 2002 after a review of any submissions received by the Domain Name Commissioner. 2LD application process For information on the policy and history of 2LD's please refer to:http://www.internetnz.net.nz/dns/2nd-level-domains/ --- -- Sue Leader - Executive Director InternetNZ Voice: +64-4-472-1600 Fax: +64-4-472-1207 Level 4, Economous Building, 4 Bond Street (P.O.Box 11-881) Wellington http://www.internetnz.net.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

New network...
by James Tyson 19 Jun '02

19 Jun '02

Hi. We have added 202.50.109.0/24 to our advertisements today. Full prefix list attached. ip prefix-list tranzpeer-networks seq 5 permit 192.100.53.0/24 ip prefix-list tranzpeer-networks seq 10 permit 202.14.252.0/24 ip prefix-list tranzpeer-networks seq 15 permit 202.27.48.0/21 ip prefix-list tranzpeer-networks seq 20 permit 202.36.204.0/23 ip prefix-list tranzpeer-networks seq 25 permit 202.36.244.0/24 ip prefix-list tranzpeer-networks seq 30 permit 202.36.245.0/24 ip prefix-list tranzpeer-networks seq 35 permit 202.37.129.0/24 ip prefix-list tranzpeer-networks seq 40 permit 202.49.62.0/24 ip prefix-list tranzpeer-networks seq 45 permit 202.49.82.0/24 ip prefix-list tranzpeer-networks seq 50 permit 202.49.83.0/24 ip prefix-list tranzpeer-networks seq 55 permit 202.49.152.0/21 ip prefix-list tranzpeer-networks seq 60 permit 202.49.250.0/24 ip prefix-list tranzpeer-networks seq 65 permit 202.50.60.0/22 ip prefix-list tranzpeer-networks seq 70 permit 202.50.170.0/24 ip prefix-list tranzpeer-networks seq 75 permit 202.154.128.0/19 ip prefix-list tranzpeer-networks seq 80 permit 202.180.64.0/18 ip prefix-list tranzpeer-networks seq 85 permit 202.180.116.0/24 ip prefix-list tranzpeer-networks seq 90 permit 203.96.16.0/20 ip prefix-list tranzpeer-networks seq 95 permit 203.96.48.0/20 ip prefix-list tranzpeer-networks seq 100 permit 210.55.111.0/24 ip prefix-list tranzpeer-networks seq 105 permit 210.55.158.0/24 ip prefix-list tranzpeer-networks seq 110 permit 210.55.254.0/24 ip prefix-list tranzpeer-networks seq 115 permit 202.36.204.0/24 ip prefix-list tranzpeer-networks seq 120 permit 202.36.205.0/24 ip prefix-list tranzpeer-networks seq 125 permit 202.50.109.0/24 -- Cheers. --- James Tyson Moebius Systems Ltd http://www.moebius.co.nz/

1 0

XTRA smtp server and relaying.
by Steve Phillips 18 Jun '02

18 Jun '02

seeing as the xtra contact addresses seem unable to fix this issue, i decided to post here, may be OT, in that case, apologies :-) Xtra, why are you allowing relaying for our backbone IP ranges.. ? and while you are at it, why is it that you don't seem to respond to your abuse@ and security@ e-mail addresses ? if you have allowed relaying for our 202.14.100 netblock, then what other netblocks have you allowed relaying for that you don't own ? Anyone else wanna test this and see if Xtra relay for them as well ? :-) -- Steve. X-Persona: <Steve Corp> Return-Path: <steve(a)focb.iconz.co.nz> Delivered-To: steve(a)iconz.net Received: (qmail 14827 invoked by uid 505); 19 Jun 2002 00:14:51 +1200 Received: from steve(a)focb.iconz.co.nz by mail.internet.co.nz with qmail-scanner-1.03 (. Clean. Processed in 0.023202 secs); 18 Jun 2002 12:14:51 -0000 Received: from mta2-rme.xtra.co.nz (210.86.15.130) by 0 with SMTP; 19 Jun 2002 00:14:51 +1200 Received: from fred ([202.14.100.208]) by mta2-rme.xtra.co.nz with SMTP id <20020618121441.NWLW25388.mta2-rme.xtra.co.nz(a)fred> for <steve(a)iconz.net>; Wed, 19 Jun 2002 00:14:41 +1200 Subject: test for relaying Message-Id: <20020618121441.NWLW25388.mta2-rme.xtra.co.nz(a)fred> Date: Wed, 19 Jun 2002 00:14:51 +1200 testy test - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0