- NZNOG - lists.nznog.org

Connection problems to SMTP servers
by Tracy Briscoe 11 May '02

11 May '02

Ordinary I would not post to this list, but as I could not get any useful help out of the two ISPs help desks I called, I will go to those who actually can provide some help. One of our clients is running MDaemon version 2.8.5.0, and has it set up to do a DNS lookup, and send the mail to the appropriate SMTP server as indicated by the MX record. On Thursday we were notified that mail was not getting to Ihug or Tranz Rail. Upon investigating on Friday, I found that they could connect to zuul.ihug.co.nz (I Telneted into port 25 for this diagnosis), but the welcome message "220 mx1.ihug.co.nz ESMTP Exim 3.22 #1 Sat, 11 May 2002 21:29:37 +1200" took between 1 and 1.5 minutes to come up. Connections to mxtrlwn1.tranzrail.co.nz could be made, but I gave up waiting for the welcome message. Connections to other SMTP servers work fine. I have got around the problem by forwarding all their mail to their ISP's SMTP server for distribution, but would like to know what may have caused this so that it can be fixed properly. I have included any info that I thought might be useful below. Any help gratefully received. -Tracy Briscoe -Network Engineer -Patcom Ltd ---------------------------------------------------------------------------- ---------------------------------------------------------------- Windows NT 4.00.1381 running as a proxy server, ie not as their fileserver Running: MDaemon version 2.8.5.0, netmaster 2.4.1, proxy 2 Connecting via ISDN to Xtra route print =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 90 27 f7 1b 0d ...... Intel(R) PRO PCI Adapter 0x3 ...00 90 bc 01 48 0a ...... SkyMedia-200D Ethernet Adapter. 0x4 ...00 01 f0 ab d6 80 ...... NdisWan Adapter =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 210.54.227.49 210.54.227.49 1 100.100.100.0 255.255.255.0 100.100.100.100 100.100.100.100 2 100.100.100.100 255.255.255.255 127.0.0.1 127.0.0.1 1 100.255.255.255 255.255.255.255 100.100.100.100 100.100.100.100 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.11.0 255.255.255.0 192.168.11.2 192.168.11.2 2 192.168.11.2 255.255.255.255 127.0.0.1 127.0.0.1 1 192.168.11.255 255.255.255.255 192.168.11.2 192.168.11.2 1 210.54.227.0 255.255.255.0 210.54.227.49 210.54.227.49 1 210.54.227.49 255.255.255.255 127.0.0.1 127.0.0.1 1 224.0.0.0 224.0.0.0 100.100.100.100 100.100.100.100 1 224.0.0.0 224.0.0.0 192.168.11.2 192.168.11.2 1 224.0.0.0 224.0.0.0 210.54.227.49 210.54.227.49 1 255.255.255.255 255.255.255.255 192.168.11.2 192.168.11.2 1 =========================================================================== ipconfig Windows NT IP Configuration Host Name . . . . . . . . . : jdwnt2 DNS Servers . . . . . . . . : 202.27.184.5 202.27.184.3 Node Type . . . . . . . . . : Hybrid NetBIOS Scope ID. . . . . . : IP Routing Enabled. . . . . : Yes WINS Proxy Enabled. . . . . : No NetBIOS Resolution Uses DNS : No Ethernet adapter E100B1: Description . . . . . . . . : Intel(R) PRO PCI Adapter Physical Address. . . . . . : 00-90-27-F7-1B-0D DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 192.168.11.2 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : Primary WINS Server . . . . : 192.168.11.1 Secondary WINS Server . . . : 192.168.11.2 Ethernet adapter sm200dtp4: Description . . . . . . . . : SkyMedia-200D Ethernet Adapter. Physical Address. . . . . . : 00-90-BC-01-48-0A DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 100.100.100.100 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : PPP adapter NdisWan5: Description . . . . . . . . : NdisWan Adapter Physical Address. . . . . . : 00-01-f0-ab-d6-80 DHCP Enabled. . . . . . . . : No IP Address. . . . . . . . . : 210.54.227.49 Subnet Mask . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . : 210.54.227.49 traceroute Tracing route to zuul.ihug.co.nz [203.109.252.10] over a maximum of 30 hops: 1 63 ms 78 ms 78 ms 192.168.9.200 2 187 ms 110 ms 125 ms 192.168.9.3 3 78 ms 78 ms 78 ms 203.96.111.230 4 94 ms 94 ms 78 ms f0-0-0-1.IPNAK1-B3.xtra.co.nz [203.96.111.145] 5 78 ms 78 ms 78 ms ihug1.ape.net.nz [192.203.154.36] 6 79 ms 93 ms 94 ms mx2.ihug.co.nz [203.109.252.10] Trace complete. Tracing route to mxtrlwn1.tranzrail.co.nz [202.135.38.132] over a maximum of 30 hops: 1 78 ms 78 ms 79 ms 192.168.9.200 2 219 ms 203 ms 110 ms 192.168.9.3 3 78 ms 63 ms 78 ms 203.96.111.230 4 78 ms 78 ms 78 ms f0-0-0-1.IPNAK1-B3.xtra.co.nz [203.96.111.145] 5 78 ms 78 ms 78 ms att.ape.net.nz [192.203.154.74] 6 93 ms 79 ms 78 ms auck1br1-fe-4-0-0.nz.prserv.net [152.158.255.222] 7 78 ms 94 ms 93 ms well1br1-0-0.we.nz.prserv.net [152.158.254.85] 8 125 ms 125 ms 109 ms nz-tranz.nz.prserv.net [152.158.254.73] 9 * * * Request timed out. 10 * * * Request timed out. 11 * * * Request timed out. 12 * * * Request timed out. 13 * * * Request timed out. 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. 21 * * * Request timed out. 22 * * * Request timed out. 23 * * * Request timed out. 24 * * * Request timed out. 25 * * * Request timed out. 26 * * * Request timed out. 27 * * * Request timed out. 28 * * * Request timed out. 29 * * * Request timed out. 30 * * * Request timed out. Trace complete. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

List of ADSL providers
by Dalibor Andzakovic 10 May '02

10 May '02

Hello, I'm trying to compile a complete list of nz's ADSL providers for an onlinan sale site. Can anyone point me to the one, or post one on this list? Tia dali - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 6

NZNOG 2002 Speakers - Draft List
by Donald Neal 10 May '02

10 May '02

Here's the current draft list of speakers for the NZNOG gathering of 11 and 12 July 2002. Work is continuing (thanks, Dean) on clarifying the contributions of other speakers. Announcements of further speakers and of registration arrangements should follow shortly. - Donald Neal Papers ―---- 802.11a - Matthew G. Brown, B & R Holdings DDoS - Juergen Brendel, Esphion Ltd DoS - Ian Quinn, Juniper Networks IPv6 for Dummies - Dean Pemberton, Juniper Networks (Aust.) Multi-Tenanted VoIP and the VoIP market in New Zealand - Roger De Salis, Cisco Systems NLANR Active Measurement Project - Tony McGregor, The University of Waikato Tracking and Quantifying DoS Attacks - David Moore, CAIDA (USA) Voice over DSL - Colin Goodwin, Ericsson NZ Tutorial ―------ RPSL - Andy Linton, APNIC -- Donald Neal Special Operations Network Delivery Telecom New Zealand Ltd "MMS <telecom.co.nz>" made the following annotations on 05/10/02 15:26:14 ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: List of ADSL providers
by Zanetti David 09 May '02

09 May '02

Joe Abley [mailto:jabley(a)automagic.org] wrote: > On Fri, May 10, 2002 at 10:47:17AM +1200, Dalibor Andzakovic wrote: > > I'm trying to compile a complete list of nz's ADSL providers for an > > onlinan sale site. > > The Onlinans are lucky, as the list of generally-available DSL > providers is quite manageable: > > 1. Telecom New Zealand. > 2. Certain customers of Telecom New Zealand. Don't Clear do DSL over their own copper. Approximately of no useful availability, but that's beside the point. :) -- David Zanetti <david.zanetti(a)nzpost.co.nz> Security Engineer, New Zealand Post Desk: +64-4-496-4005 Mobile: +64-25-832-572 "Hope.. is a dangerous thing" This email with any attachments is confidential and may be subject to legal privilege. If it is not intended for you please reply immediately, destroy it and do not copy, disclose or use it in any way. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Carriers blocking IPSec...official policy?
by rob.edkins＠axon.co.nz 09 May '02

09 May '02

> We do IPSec VPNs on a weekly basis, and have never struck any > carrier in NZ blocking ESP traffic. > Nor had we until we did ;-) It's probably more accidental than intentional, like I say, 'catch all' rules that occaisonally bite. It's something to look out for though. We wasted a lot of time on debugging the first one. Rob -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Off-Topic : MainStream Internet Solutions Limited
by Sahil Gupta - Net4U Limited 08 May '02

08 May '02

This applies to clients/wholesalers of MainStream Internet Solutions Limited. This is to inform the people of this industry that Net4U Limited has formerly ceased all dealings with MainStream Internet Solutions Limited. Dialup Internet Accounts were terminated at 6pm on 8th May, 2002 and ADSL Accounts shall be terminated by 6pm on 9th May, 2002. The domain name "faster.net.nz" still remains property of "Francois Computer Systems Limited". Wholesalers are advised not to deal with the company for various reasons, if require any further information you are welcome to contact me off-list, if necessary. Regards, Sahil Gupta Net4U Limited - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

Carriers blocking IPSec...official policy?
by rob.edkins＠axon.co.nz 08 May '02

08 May '02

Greetings folks, We have had several instances recently of problems with IPSec VPNs that turned out to be caused by ACL's at the ISP or carrier level blocking ESP traffic, or rather any IP traffic that isn't TCP, UDP, ICMP or routing stuff. There is no one particular network provider involved (one was offshore), and it doesn't seem to be a general practice, but we seem to be getting caught occaisonally by default "deny all IP" catch-all rules of the kind you stick at the bottom of the access list. Sometimes, it's only one interface in a particular direction. We've wasted a large amount of time and effort debugging and trying to get people to check their router configs for us, with varying degrees of co-operation. Has anyone else struck similar issues? Can anyone comment on whether this is a general 'no VPNs on our turf' policy, as one provider's help desk has (not terribly helpfully) suggested? Rgds, Rob Edkins Systems Consultant Axon Computertime email: rob.edkins(a)axon.co.nz -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon Computertime accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Traffic Magnet At It Again
by Mark Foster 06 May '02

06 May '02

I got hit by Traffic Magnet again.. spamcrawlers are nasty. I noticed a coupla quirks... Firstly, when I traceroute to the IP concerned, clix are sending me to LA first.. whats up with that? :) Next... 26. 202.106.192.222 0% 38 38 418 415 438 469 27. GSR01-ToBTO-02.tynoc.bj.capitalnet 22% 30 38 420 409 442 496 28. RSM04-ToGSR01.TY.bj.capitalnet.com.cn 0% 38 38 441 433 481 542 29. 211.101.236.29 0% 38 38 417 417 438 466 Interesting hostname on hop 27 there.. :) I know this host has been discussed in the past, did anyone make any progress pursuing this? Im about to block capitalnet from connecting to my MTA... Mark. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Mailwasher.
by Simon Lyall 06 May '02

06 May '02

Are other people having problems with customers using this program? It has a function for "bounce" spam which forges bounces from MAILER-DAEMON at the ISP's domain. I seem to only have a very small number of customers using it but the queues on my mail smtp servers are growing a bit with emails to bogus addresses waiting to time out (which is why there is a seperate server for bounces in the first place). I'm really worried that if use of the program takes off I'll have to re-resource ($$$) my mail servers to take account of a few 10,000s emails sitting in the outgoing queues or else the same customers will start blaming me for not delivering their emails in less than 10 seconds. I think the author is from New Zealand, anybody know them , an address where I can send a bill would be great. I also really object to the concept of the program forging email addresses on emails. -- Simon Lyall. | Newsmaster | Work: simon.lyall(a)ihug.co.nz Senior Network/System Admin | Postmaster | Home: simon(a)darkmere.gen.nz ihug, Auckland, NZ | Asst Doorman | Web: http://www.darkmere.gen.nz - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Mailwasher.
by Darrin Cooke 06 May '02

06 May '02

-----Original Message----- From: Simon Byrnand [mailto:simon(a)igrin.co.nz] >Maybe the author of the program needs a friendly but firm whack with a clue >stick to remove the offending functions of the program. The last thing we >need is more undeliverable crap sitting in outbound queues. The spammers >themselves provide ample quantity there :) >Regards, >Simon I just dicovered that the Netguide magazine has half a page about mailwasher, They seem to be recommending it; "Mailwasher (insert URL here) analyses each email as is arrives and warns you if it is suspected junkmail or a virus. But not only does it let you delete unwanted emails before you download them, it also bounces them back so it looks like your email address is invalid." etc etc etc. They credit a "Christchurch businessman Nick Bolton" with the idea. <insert comments regarding LART'ing with large clue stick here> Cheers, Darrin - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0