- NZNOG - lists.nznog.org

Re: Spam on the increase again
by Simon Byrnand 06 Apr '02

06 Apr '02

At 14:00 11/03/02 +1300, Richard Parry wrote: >Yep, I've definitely noticed it :) It got me annoyed enough to turn >Postfix into a mail rejecter :) Here's what I've stuck in >/etc/postfix/main.cf: >[snip] >Note that you need permit_mynetworks under the helo restrictions so that >you still accept email from Outlook Express clients and the like (if >this is your SMTP gateway for ISP customers) - OE will not present a >FQDN for itself regardless of operating system (I believe it presents >the NBT name). I think you'll find just about all end user email software does this. >I'd be curious to know what sorts of policies ISPs have within NZ, and >why. Before I put in my filters, most of my mail was spam - and this >just isn't right :) Apart from the UCE recieved recently (I too got the >"DHS Clubshop" mail) from within NZ, our local networks are really >quiet. I've been trialing orbz and ordb in the last couple of months (not related to orbs) and they've been very good. Naturally I've kept a very close eye on it, but I've only had 2 instance where genuine mail wasn't getting through that I know of - and in both cases they WERE actually open relays. I was easily able to add an exclusion for those two servers until they got off their ass and fixed their open relay. (Both did after a couple of weeks) Both also have good and fast removal policies so they're not the sort of list that once you get on you can never get off...(ala the original orbs :) When I first started using them it cut the spam by 80%, I'd hate to think what it would be now without it. >Certainly, I've been tempted to just block addresses from Asia... Most >of the spam I saw before I put in my filters was for cheap Thai sex >prostitues and whatnot. I'm just not that kind of girl :) Well 90% of the ip addresses that I found were all Korea :/ One extremely prolific spammer in case anyone is interested is 4.42.113.104, which belongs to genuity's netblock. Even after blocking them with 550 Rejects, they're constantly hammering on our server every half hour. I suspect there is fat chance about Genuity doing anything about them, I've heard they don't have a good rep when it comes to shutting down spammers...:) Regards, Simon - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 16

Re: OT: Old Stuff
by David Farrar 04 Apr '02

04 Apr '02

> On Thu, 2002-04-04 at 14:53, Craig Whitmore wrote: > > > Those days you could register es.co.nz (you can't now if this was not tak> en) > > (but they made rules up than you can't register domains as the 3rd level > > being the same as the 1st level domain) (Anyone know the reason for this? > > (there must be a good reason)) (I want to register nz.co.nz and us.co.nz) > > > > Your out of luck, us.co.nz and nz.co.nz are taken... I _think_ that the > restriction may have been lifted but I'm not 100% sure. The restriction was lifted by InternetNZ late last year. Don Stokes can explain far better than me why there used to be a ban on TLDs being registered at the 3rd level but basically it used to cause problems for some old servers. Data indicated that the number of people likely to still be using such old software is very limited and that as most other TLDs allowed TLD names at the third level we should follow the trend. Incidentially ICANN is moving to ban ccTLD (and country) names at the 2nd level in gTLDs because some Govts have asked for this. But that is for political not technical reasons DPF - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Re: OT: Old Stuff
by Malcolm Lockyer 04 Apr '02

04 Apr '02

Bassically let me explain myself. I'm working with Idiots - who don't know the differnce beteen ram or ip. So - when I say "Its a router - its job is to direct network traffic" - they'll say somthing like "Whoa - they must be pretty big - isn't there only one of those in the world" and a multitude of silly questions. Don't get me wrong silly questions arn't that bad - its just when lots of ppl ask the same questions it gets really annoying. So - it would be great for me to say - this was a cisco 2501 series router, it is uesed to (we all know) - when it was new it was worth $X, and now its worth $x/100 etc. Also - let me be honest, there is a double meaning or purhaps hidden agenda behind asking for this stuff. Firstly it is NOT so that I can have a cool network (make with older tech) at home, or purhaps so that I can sell it - or anything like that. (To prove it - if I mess with something worthwile - a 2500 series router for example that doesn't work -and I make it work good - I'll happily give it back). Firstly - I like to tinker with stuff. Since I'm only 16 years old it is hard trying to get cisco gear, and people get really upset when you tell them that your going to tinker with the nice new shinny router that you've just installed. So - it would be alot of fun (And somthing to do to pass the time) just to mess with really old and/or broken hardware - not nessasarily tring to make it work - just messing. Especially so that I have a better understanding of actually how stuff does stuff - so eventually I can be a better/more effective employee. Also - remember I am asking for gear that isn't being used anyway - purhaps piled in a corner or some other equal place - left where it fell from the last upgrade or somthing. I'm not asking for 7500 series routers which arn't being used right now - or a 4000 that doesn't have enough ram etc. I mean more like some cisco alphabet soup products - or purhaps a 2500 that got droped a long way and doesn't light up at all anymore. Stuff like that. Effectivly junk! Also - my other purpose. I really like cisco stuff. Becasue they are such cool things - 'cause of how well they are constructed designed. And if nothing else - it would be cool to have a bunch of boxes with "Cisco Systems" tags on them :D. So - to just to reiterate. I don't want this stuff so that I can make it work and sell it - or have a huuge network at home. I'm doing it primarily 'cause cisco is cool, and I LOVE to mess with hardware. Anything at all would be more than muchly appreciated - and would go to a "good home" and be messed with/worked on for months to come. Thanks alot - even for your time to read this. :D On Mon, 1 Apr 2002, Craig Spiers wrote: > If your only looking at the value of equipment, surely you dont actually have > to have the gear.. You only need an approx value of what its worth? > > I Personally dont think people on this list are stupid enough to hand gear > over for that reason eh.. > > > Quoting Malcolm Lockyer <hivemind(a)neuron.net.nz>: > > > Hello all, > > > > Sorry for the off topic post, and comerical nature of this post. But, I'm > > looking at doing a project about the devaluation of equipment. How > > routers/switches/hubs etc. etc. which cost $$$'s of dollars, then become > > almost worthless only a few years latter. So for the project it would be > > good to have some old gear on hand. > > > > So - I was wondering if people had old cisco switches/routers/anything, or > > any other branded equipment - thats old/broken/not relyable anymore that > > they wouldn't mind parting with. If you are in the hamilton/Auckland area, > > I'll come and get gear, or pay for shipping. I'm even happy to give a > > couple of dollars for stuff that still works okay. > > > > > > Thanks alot! - it'd be very thankful for ANYTHING. > > > > (BTW - please message me off list). --snip-- Best regards, Malcolm Lockyer -- owner/founder/managing director -= Nuron Net =- You're on the net! - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

10 11

nat routes
by mike johnson 01 Apr '02

01 Apr '02

WalkerWireless Simon Paterson, Steve Hawken Can Simon or Steve contact me urgently. Regards Mike Johnson Senior Network Engineer Connections Incorporated Limited Level 1, 282 Wakefield Street, PO Box 11 410, Wellington, New Zealand Mobile: +64 21 423 509; Fax: +64 4 801-5335; Switchboard: +64 4 801-5225 email: mikej(a)connections.net..nz <http://www.connections.net.nz/> Actrix Support Centre: 0800 ACTRIX, +64 4 801 5225 IMPORTANT: This electronic message and attachments (if any) are confidential and may be legally privileged. If you are not the intended recipient do not copy, disclose or use the contents in any way. Please let us know by return email immediately and then destroy this message and any attachments.

1 0

Orcon Internet Prefix Lists Update..
by Craig Whitmore 01 Apr '02

01 Apr '02

Hi.. For all those peering with Orcon Internet (AS 17746) please update your Filter Lists to include the Following as below. Note we are advertising ranges from AS10022 and AS9889 as well via Orcon (AS17746) in case people are filtering via AS number as well. Peering IP's : 192.203.154.66 AND 192.203.154.67 AS: 17746 Thanks Craig Whitmore Orcon Internet http://www.orcon.net.nz ip prefix-list orcon-national description Orcon Internet National Ranges noc(a)orcon.net.nz ip prefix-list orcon-national permit 192.203.216.0/24 ip prefix-list orcon-national permit 202.14.20.0/22 le 24 ip prefix-list orcon-national permit 202.14.217.0/24 ip prefix-list orcon-national permit 202.27.76.0/24 ip prefix-list orcon-national permit 202.27.140.0/22 le 24 ip prefix-list orcon-national permit 202.27.188.0/25 ip prefix-list orcon-national permit 202.27.204.0/24 ip prefix-list orcon-national permit 202.27.250.0/24 ip prefix-list orcon-national permit 202.36.70.0/24 ip prefix-list orcon-national permit 202.37.72.0/24 ip prefix-list orcon-national permit 202.37.181.0/24 ip prefix-list orcon-national permit 202.49.244.0/22 ip prefix-list orcon-national permit 202.49.90.0/24 ip prefix-list orcon-national permit 202.49.91.0/24 ip prefix-list orcon-national permit 202.49.92.0/22 ip prefix-list orcon-national permit 202.50.0.0/24 ip prefix-list orcon-national permit 202.50.104.0/22 ip prefix-list orcon-national permit 202.50.124.0/22 ip prefix-list orcon-national permit 202.50.167.0/24 ip prefix-list orcon-national permit 202.89.32.0/19 le 24 ip prefix-list orcon-national permit 210.54.12.0/24 ip prefix-list orcon-national permit 210.54.13.0/24 ip prefix-list orcon-national permit 210.54.56.0/21 ip prefix-list orcon-national permit 210.54.142.0/23 ip prefix-list orcon-national permit 210.54.148.0/22 ip prefix-list orcon-national permit 210.55.0.0/25 ip prefix-list orcon-national permit 210.55.5.0/24 ip prefix-list orcon-national permit 210.55.8.0/24 ip prefix-list orcon-national permit 210.55.12.0/22 le 24 ip prefix-list orcon-national permit 210.55.18.0/24 ip prefix-list orcon-national permit 210.55.29.0/24 ip prefix-list orcon-national permit 210.55.100.0/22 le 24 ip prefix-list orcon-national permit 210.55.104.0/22 le 24 ip prefix-list orcon-national permit 210.55.110.0/24 ip prefix-list orcon-national permit 210.55.155.0/24 ip prefix-list orcon-national permit 210.55.169.0/24 ip prefix-list orcon-national permit 210.55.199.0/24 ip prefix-list orcon-national permit 210.55.214.0/24 ip prefix-list orcon-national permit 210.55.230.0/24 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Frame-Relay Packet Loss
by Sahil Gupta - Net4U Limited 01 Apr '02

01 Apr '02

Funnily enough when we ping a machine of his, we seem to be jumping up and down in the ping rates. At times as low as 4ms and as high as 55ms over a direct frame.. What could it be? RAM? On Mon, 1 Apr 2002, Craig Spiers wrote: > If he pings www.net4u.co.nz and gets no packet loss, his circuit is fine.. > > If he pings www.winz.co.nz and gets packet losss the problem is between you > and winz.co.nz > > > Quoting Sahil Gupta - Net4U Limited <sahil(a)sahil.net.nz>: > > > As below with "###" > > > > On Sun, 31 Mar 2002, Malcolm Lockyer wrote: > > > > > > > > Let me just jump in here, since I was on site.. > > > > > > On Sun, 31 Mar 2002, Craig Whitmore wrote: > > > > > > > A few things which may help (not in any order) > > > > > > > > 1) Look at Stats of Frame-Relay Connection (Any Errors??) (Geting Telecom > > to > > > > do BIR TEST) > > > > > > Don't know - forgot the router's ip address, so I can't telnet in and > > > check - sahil will though. (just do a show frame-relay pvc right?) > > > > > > > 2) Are they getting what they are paying for? Are they getting CIR > > before > > > > before any errors occur? Remember the 384K is not promised, only 64K is > > > > promised, any extra bandwidth depends on ALOT of things. > > > > > > Don't know - originally it was being traffic shapped at 384K - which I > > > thought could give the same behavior (ie - the cisco over subscribes the > > > bandwidth). After removing the traffic shaping - the pings were a little > > > lower. > > > > ### I think that the guy needs to up his PVC, I feel he is pushing through > > more than the CIR of the circuit and the circuit seems to be falling close > > to the CIR most of the times. > > > > > > > > > 3) Define "Packet loss"? slow downloads? > > > > > > Well - we've only heard from the asian guy (no offence, but kinda a > > little > > > bad at english) that they get packet losses up to 45%, and when they get > > > packet loss the whole internet is "slow", and people get the "cannot find > > > server errors". > > > > ### He gets packet losses the moment they begin to download, he > > unfortunately pings "www.winz.co.nz" and "www.net4u.co.nz". While he > > pings www.net4u.co.nz he doesn't get any packet loss even while > > downloading, only thing when he jumps out of our network and onto the WWW > > he begins facing packet loss i.e. while pinging www.winz.co.nz > > > > > > > > > 4) Check Settings on Routers on either end (Are both ends different > > hardware > > > > (Any compatibility issues between hardware))? > > > > > > Nope - there is a cisco 2501 and a 2503. > > > > > > > 5) Check Telecom has Circuit defined right.. > > > Dunno - we should ask though. > > > > ###I think Telecom have set it right. Only thing using MRTG I have seen > > them pull upto 440k. Which is why I decided to traffic-shape their link > > as it was affecting other users. > > > > > > > > > 6) Are routers running at high CPU? For example 2500's can't handle > > much > > > > bandwidth thru them without going Kaput and slowing things down > > > > > > Umm.. both the routers were running at about 45ish% cpu usage. However, > > > there was very little ram on the 2503 (4mb) - and it is handling about a > > > meg of shaped traffic now - could that be it? > > > > ###Today, I went and swapped the 2 DRAM Chips around (BTW, Malcolm that > > bent case isn't shutting.. you may need to come around) it seems better, > > but not the BEST. I have also ordered in some 16MB Parity Kingston RAM, > > I'll give that a go. > > > > > > > > > 7) Check External Devices (ethernet convertor on 2500/Serial > > > > Cables/Ehternet) > > > > > > The AUI trancivers seem fine. > > > > > > > 8) On Frame Relay connections, you have not "over subscribed" the Access > > (ie > > > > trying to total of 2M CIR's over a 1M Circuit)? > > > > > > Well - its possible with the traffic shaping rules we were using (ie - > > > shaped to the PIR - when it is running a 25% CIR) > > > > ###Nope, definately NOT. Our end has 3 PVC's off our 1Meg Access and > > they sum up to 1024k > > > > > > > > > 9) MTU set right on both ends? > > > > > > Dunno - Sahil - check > > > > > ### They both say "0 01" > > > > > > Thats just some info about what happenes - any more ideas? > > > > > > > > > Thanks > > > > > > > > > > > > > > > Thanks > > > > Craig Whitmore > > > > Orcon Internet > > > > http://www.orcon.net.nz > > > > > > > > > > > --snip-- > > > > > > > > > > > > Best regards, > > > > > > > > > Malcolm Lockyer > > > > > > -- > > > owner/founder/managing director > > > > > > -= Nuron Net =- > > > You're on the net! > > > > > > > > > > > > > > > > > > > > > > - > > To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz > > where the body of your message reads: > > unsubscribe nznog > > > > > > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: Frame-Relay Packet Loss
by Sahil Gupta - Net4U Limited 31 Mar '02

31 Mar '02

I think he has a weird feeling that www.winz.co.nz is good old "Work and Income New Zealand" On Sun, 31 Mar 2002, Keith Davidson wrote: > > ### He gets packet losses the moment they begin to download, he > > unfortunately pings "www.winz.co.nz" and "www.net4u.co.nz". While he > > pings www.net4u.co.nz he doesn't get any packet loss even while > > downloading, only thing when he jumps out of our network and onto the WWW > > he begins facing packet loss i.e. while pinging www.winz.co.nz > > Why on earth is he pinging my network? > > Keith Davidson > > > - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 4

Frame-Relay Packet Loss
by Sahil Gupta - Net4U Limited 31 Mar '02

31 Mar '02

Hello there, We currently have a Frame-Relay Customer, they seem to be experiencing packet loss (upto 45%) when they begin a download. However it isn't the case on our end. Any pointers? They are running a 64/384k PVC and are an Intenret Cafe. Cheers, Sahil - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

OT: Old Stuff
by Malcolm Lockyer 29 Mar '02

29 Mar '02

Hello all, Sorry for the off topic post, and comerical nature of this post. But, I'm looking at doing a project about the devaluation of equipment. How routers/switches/hubs etc. etc. which cost $$$'s of dollars, then become almost worthless only a few years latter. So for the project it would be good to have some old gear on hand. So - I was wondering if people had old cisco switches/routers/anything, or any other branded equipment - thats old/broken/not relyable anymore that they wouldn't mind parting with. If you are in the hamilton/Auckland area, I'll come and get gear, or pay for shipping. I'm even happy to give a couple of dollars for stuff that still works okay. Thanks alot! - it'd be very thankful for ANYTHING. (BTW - please message me off list). Best regards, Malcolm Lockyer -- owner/founder/managing director -= Nuron Net =- You're on the net! - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Prefixes, and gonzo...
by James Tyson 29 Mar '02

29 Mar '02

Okay, it's official, I am a gonzo. I admit it freely. This is the classic example of when your brain fried, and working on completely new configs for about 10 routers at once. Anyay, I think all the emails from people saying "Hey, what about...." have finished coming in. Here's the *actual* prefix list for our networks (must rememember the customers edition): ip prefix-list callplus-networks contact noc(a)noc.attica.net.nz ip prefix-list callplus-networks permit 202.14.252.0/24 ip prefix-list callplus-networks permit 202.49.62.0/24 ip prefix-list callplus-networks permit 202.49.82.0/24 ip prefix-list callplus-networks permit 202.49.250.0/24 ip prefix-list callplus-networks permit 202.50.60.0/22 ip prefix-list callplus-networks permit 202.50.170.0/24 ip prefix-list callplus-networks permit 210.55.111.0/24 ip prefix-list callplus-networks permit 210.55.158.0/24 ip prefix-list callplus-networks permit 210.55.254.0/24 ip prefix-list callplus-networks permit 202.180.116.0/24 ip prefix-list callplus-networks permit 202.37.129.0/24 ip prefix-list callplus-networks permit 202.180.64.0/18 ip prefix-list callplus-networks permit 192.100.53.0/24 ip prefix-list callplus-networks permit 202.27.48.0/21 le 24 ip prefix-list callplus-networks permit 202.27.56.0/22 le 24 ip prefix-list callplus-networks permit 202.36.204.0/23 le 24 ip prefix-list callplus-networks permit 202.49.152.0/21 le 24 ip prefix-list callplus-networks permit 202.154.128.0/19 le 24 ip prefix-list callplus-networks permit 203.96.16.0/20 le 24 ip prefix-list callplus-networks permit 203.96.48.0/20 le 24 Please don't ask me to convert it into JunOS speak, my brain is fried. -- Cheers. --- James Tyson Moebius Systems Ltd http://www.moebius.co.nz/ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1