- NZNOG - lists.nznog.org

Raptor firewalls
by Brodie Davis 10 Sep '01

10 Sep '01

Hi, is anyone else having weird problems talking to raptor firewalls. What is happening is that we are running netscreen firewalls (hardware appliances) and we can't talk to any raptor firewall with its syn flood protection on. As what that does is break the 3 way handshake for tcp connections (it responds to a SYN with a ACK and a incorrect acknoledgement number). It(raptor) only behaves this way with the netscreen box, not with my RH box sitting out in the wild. ( i have packet dumps of the traffic) (i haven't had a chance to observe how it deals with PIX and checkpoint.) Is that traffic pattern an addition to the TCP standard or is it completly non standard coms. (I found rfc 0793/ STD0007 that defines what i expect, but i can't see any additions to the standard supporting the Axent/Symantic way). Anyone got any thoughts? Cheers, Brodie --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

mta.xtra.co.nz doesn't accept SMTP connects?
by Juha Saarinen 05 Sep '01

05 Sep '01

Noticed lots of mail to Xtra customers stuck in the mail queue on one of ours swervers... doesn't seem like mta.xtra.co.nz is working properly: $ telnet mta.xtra.co.nz. 25 Trying 203.96.92.132... telnet: connect to address 203.96.92.132: Operation timed out telnet: Unable to connect to remote host -- Juha Saarinen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

14 31

radius diag command max6000
by John Lynch 05 Sep '01

05 Sep '01

Any one out there remember the command to put the max6000 into radius debug mode, did it a few weeks ago, now it's gone from my head ...... ?????? John Lynch System Administrator (string and tape specialist) Wise Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 5

Responses to Letter from ING
by David Farrar 04 Sep '01

04 Sep '01

I'm inquiring if any ISP or like body knows of any business who responded to ING's letter and either changed their mind or now wishes they changed their mind? TVNZ are doing an article on the letter and would like to be able to interview someone who was taken in by it or at the minimum who was going to take it up until they sought advice. Also any indications from ISPs as to how many calls they have recived about the letter would be useful. If you know of anyone can you pass on their contact details to me or alternatively get them to contact me by e-mail or on 04 471 9353, preferably by midday tomorrow. Ta DPF --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

clear.co.nz seems to be rejecting mail
by Dan Langille 03 Sep '01

03 Sep '01

FWIW: it appears that Clear are rejecting mail to clear.co.nz but not to clear.net.nz: ----- The following addresses had permanent fatal errors ----- <postmaster(a)clear.co.nz> ----- Transcript of session follows ----- ... while talking to kakapo.clear.co.nz.: >>> DATA <<< 554 SPAM-Relay detected 554 <postmaster(a)clear.co.nz>... Service unavailable I've emailed postmaster(a)clear.net.nz but just in case mail start building up on your servers, you know why.. -- Dan Langille - DVL Software Limited FreshPorts - http://freshports.org/ - the place for ports --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: mta.xtra.co.nz doesn't accept SMTP connects?
by Greg Clare 03 Sep '01

03 Sep '01

hmmm... an analogy is perhaps called for... Customer: Arrrgh, my telephone is dead! Telecom (in a publicly posted statement): Technicians are currently working on this issue. Customer: If they knew my telephone was dead, why the F@#&! didn't they phone and tell me??? > -----Original Message----- > From: Nicholas Lee [mailto:nj.lee(a)plumtree.co.nz] > Sent: Tuesday, 4 September 2001 2:58 pm > To: Mark Foster > Cc: Nznog(a)List. Waikato. Ac. Nz > Subject: Re: mta.xtra.co.nz doesn't accept SMTP connects? > > On Tue, Sep 04, 2001 at 01:40:24PM +1200, Mark Foster wrote: > > > > For NZ's Biggest ISP theyre remarkably quiet... > > Maybe because they aren't getting any mail? > > Nicholas > --------- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: mta.xtra.co.nz doesn't accept SMTP connects?
by Ewen McNeill 03 Sep '01

03 Sep '01

In message <21773.999569321(a)daedalus.co.nz>, Don Stokes writes: >Mark Foster <blakjak(a)blakjak.net> wrote: >>Simons Idea of setting up some servers as Secondary MX isnt a silly idea >>but I need to ask the questions: > >Actually, secondary MXs usually are a silly idea, if the MX can't >actually do anything useful with the mail apart from queuing it. All >they do is take a whole bunch of mail that would otherwise queue at the >client end mail server, and put them in one big queue. Secondary MXes (that can only queue and attempt onward delivery) are about "concentration of pain"; instead of the pain being spread across all the mail servers trying to deliver to the one that is down, it's concentrated in the secondary MX(es). This concentration of pain was more useful in the days when there were quite a few slow, not always up, links trying to deliver mail (especially dial-on-demand type links; uucp tended to be smarthosted once things got to a point that it mattered). Now that the common mode of mail delivery is basically two tier (clients deliver to their ISP's smart host, that smarthost is always connected and "easily" able to retry the mail often enough") there's less advantage in concentrating the pain. Especially weighed against some of the disadvantages you mention (eg, don't get "trouble sending" bounces early if sender end has low timeouts on those, but secondary MX doesn't). Except perhaps when the pain lasts a long time (hours, if not days), and causes a fair amount of trouble to a lot of people/mail servers. Like Xtra at the moment from what I've seen on nznog. BTW, has anyone considered that the reason that no one from Xtra has spoken up is that their outgoing mail is having trouble as well as their incoming mail? :-) Ewen --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: mta.xtra.co.nz doesn't accept SMTP connects?
by Simon Byrnand 03 Sep '01

03 Sep '01

At 02:26 PM 4/09/01 +1200, Simon Lyall wrote: >On Tue, 4 Sep 2001, Don Stokes wrote: >> Most mailers have a hard time with huge queues of undeliverable mail, so >> such an MX is not going to be as efficient at dealing with the backlog >> when the primary comes back up as just leaving the mail where it is on >> client servers. > >The thing is it moves the load from our smtp servers (which last time I >looked had a lot of undelived emails for xtra customers) onto a machine >run by Xtra. Due to the amount of queued email on our servers we have had >to start taking actions to prevent delays of email to other sites. Yup. Not having a backup MX makes xtra's problem everyone elses problem instead. >You can also optimise the backup MX server for dealing with a large queue >to a single destination rather than a constrant stream of email to many >destinations. There are also other tricks you can run depending on your >mail software and network setup. Not to mention that mail servers around the country trying to connect to xtra's all the time wastes other peoples bandwidth. With a backup MX the mail queuing and retrying would be occuring between their backup and primary MX which in all likelyhood would be internal traffic (perhaps even on the same switched ethernet) rather than over national links. Dequeuing when the problem was resolved would be faster and more efficient than waiting for various random servers around the country to retry. >The anoying bit is that Xtra has not acknowledged this in public at all, >we are getting our customers blaming us for delays in email getting to >Xtra addresses. Well actually, they have acknowledged the problem on their website, (I was surprised, I was expecting the standard "There are no knon problems with the Xtra network") so short of making a public annoucement on TV and radio I don't see what else they could do to raise awareness to the average user :) Regards, Simon --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: mta.xtra.co.nz doesn't accept SMTP connects?
by Michael Bordignon 03 Sep '01

03 Sep '01

> -----Original Message----- > From: Juha Saarinen [mailto:juha(a)saarinen.org] > Sent: Tuesday, 4 September 2001 1:20 PM > To: 'Simon Byrnand'; 'Dylan Reeve' > Subject: RE: mta.xtra.co.nz doesn't accept SMTP connects? > > > pop3.xtra.co.nz == mta.xtra.co.nz > then again they might be doing some type of port forwarding on that box? --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 02 Sep '01

02 Sep '01

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. This list has around 260 subscribers, growing by a handful each month. The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. 10. A person repeatedly breaching list etiquette shall receive warnings from the list administrator. A further breach after the second such warning within thirty days shall result in the offender being unsubscribed from the list. Other action may also be taken to block postings to the list by the offender. Any such unsubscription is to be immediately announced to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ Any message sent to the list will be archived and made available on the web automatically. Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Post-only Mailing List An address from which you wish to post, but which will not receive messages from the list, may be subscribed to nznog-postonly. You will presumably want to have another address subscribed to the main nznog list. Other Activities NZNOG does not at present have other regular activities than this mailing list. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0