- NZNOG - lists.nznog.org

Fwd: Re: surge in spam email (fwd)
by Andy Linton 10 Aug '00

10 Aug '00

Well I found this a reasonably rational description of the problem and amusing at the same time so I thought I'd share it with you all..... >X-Sieve: cmu-sieve 1.3 >Delivered-To: nanog-outgoing(a)merit.edu >X-Authentication-Warning: world.std.com: bzs set sender to >bzs(a)world.std.com using -f >From: Barry Shein <bzs(a)world.std.com> >Date: Thu, 10 Aug 2000 15:59:25 -0400 (EDT) >To: woods(a)weird.com (Greg A. Woods) >Cc: nanog(a)merit.edu >Subject: Re: surge in spam email (fwd) >X-Mailer: VM 6.75 under Emacs 20.5.2 >Sender: owner-nanog(a)merit.edu >X-Loop: nanog > > > > >I think if *everyone* stood up at once and declared that open relays > >were bad for us all then there wouldn't be too much trouble because > >there'd be nowhere for frustrated customers to jump to! ;-) > >Ya know, Greg, if everyone in China jumped off a 12 inch stool >simultaneously it'd cause a tidal wave which would sweep over the >entire United States. > >Or maybe not. > >But it's not worth losing sleep over. > >I'm not really trying to be too sarcastic, but I think your world-view >of what the net has become is anachronistic and the idea that some >project like ORBS is going to harass every open-relay in the world, >every workstation capable of forwarding mail for example, into >behaving better is at this point in time kinda like the Chinese >footstool tidal wave (is that from Dr Strangelove? whatever.) > >No, we need a legislative approach, with some technical support to >help increase the likelihood that spammers who break the law will get >caught. But first it has to be illegal, or else it's all for naught. > >Put it this way: I consider my house locked up even if I do have glass >windows, and even if glass is rather easy to break. > >If it were legal for a person of ill intent to break the glass to get >into my house to rob me the first approach would not in my mind be to >board up all the glass unless I really lived in some mad max anarchy. > >I'd first want to see it made illegal to break into my property. > >Then, with reasonable diligence, I can enjoy the sunshine and spend my >time and money on more important things than trying to engineer it so >it's impossible to break in. > >Or at least I can do the cost/benefit analysis from the situation >where it's illegal to break in, rather than just a stupid cat and >mouse game as we're currently playing with spammers most of the time. > > > The Walrus and the Carpenter > Were walking close at hand; > They wept like anything to see > Such quantities of sand: > "If this were only cleared away," > They said, "It would be grand!" > > "If seven maids with seven mops > Swept for half a year, > Do you suppose," the walrus said, > "That they could get it clear?" > "I doubt it," said the Carpenter, > And shed a bitter tear. > > >-- > -Barry Shein > >Software Tool & Die | bzs(a)world.std.com | http://www.TheWorld.com >Purveyors to the Trade | Voice: 617-739-0202 | Login: 617-739-WRLD >The World | Public Access Internet | Since 1989 *oo* --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Open IP Directed Broadcast List... (fwd)
by Alan Brown 09 Aug '00

09 Aug '00

For those not on Bugtraq. ---------- Forwarded message ---------- Date: Tue, 8 Aug 2000 22:59:37 -0400 From: dies <dies(a)PULLTHEPLUG.COM> To: BUGTRAQ(a)SECURITYFOCUS.COM Subject: Open IP Directed Broadcast List... Well, I've rescanned the Internet. I've chosen to scan down to /27 subnets this time. My new list of open broadcasts is available at.... http://www.pulltheplug.com If you are an ISP or work for one, PLEASE VISIT THIS SITE AND CHECK FOR YOUR NETWORKS OR DOWNSTREAMS!! If there are no broadcasts to use, there are no broadcast based attacks! 125102 networks broken...I've posted the top 4000 amp sites this time around... As always I'm looking for help...If you think you can help out, email me. Enjoy --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 06 Aug '00

06 Aug '00

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. At last count the list had just over 160 subscribers, with the count growing by around five each month. (The addresses aitken(a)voyager.co.nz and stevebar(a)ihug.co.nz have been removed. The users of those addresses are welcome to re-subscribe with addresses which work.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to meet over beer. Some subscribers are likely to attend the Uniforum NZ 2000 conference in Hamilton in the first week of October. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spammers at NZNET: SPAM: Fwd: ClientTell Newsletter - Marketing Tips (fwd)
by Alan Brown 04 Aug '00

04 Aug '00

NZNET traces through CLIX, clienttell.com traces through netgate. ---------- Forwarded message ---------- Date: Fri, 4 Aug 2000 19:56:13 -0400 Subject: SPAM: Fwd: ClientTell Newsletter - Marketing Tips Anyone (AB?) with insider knowledge of this yoyo <stephen(a)clienttell.com> in Kiwiland? He even had the balls to put his photo into the sig (and he's just as ugly as Rodent's better side....) and apparently is not even trying to hide who he is. We just got a few of these 23 Kb spewages in. and it looks like it's a continuing run. TGIF for the chickenboners - but this looks like professionalism - or a joe-job. TIA Paul whois -h whois.networksolutions.com clienttell.com ... Registrant: S R ANDREWS (CLIENTTELL-DOM) 4 Blakeborough Drive Forrest Hill Auckland, NZ 1310 NZ Domain Name: CLIENTTELL.COM Administrative Contact, Technical Contact, Zone Contact, Billing Contact: Andrews, Stephen (SA4085) stephen(a)NZNET.GEN.NZ NZNet Internet Services Limited Unit C1 - 5 Douglas Alexander Parade North Harbour Industrial Estate Auckland NZ +64 9 914 0058 (FAX) +64 9 914 0040 Record last updated on 07-Nov-1999. Record expires on 07-Nov-2001. Record created on 07-Nov-1999. Database last updated on 4-Aug-2000 14:26:02 EDT. Domain servers in listed order: NS1.CLIENTTELL.COM 203.167.232.54 NS2.NZNET.GEN.NZ 210.54.156.35 >X-Persona: <z-default-stormy> >Return-Path: <ezine(a)clienttell.com> >Received: from bo.nznet.gen.nz (bo.nznet.gen.nz [210.54.156.34]) > by eagle.reach.net (8.10.2/8.9.3) with ESMTP id e74NOQj04691; > Fri, 4 Aug 2000 19:24:26 -0400 >X-Envelope-From: ezine(a)clienttell.com >Received: from localhost (roscoe.nznet.gen.nz [210.54.156.38]) > by bo.nznet.gen.nz (8.8.7/8.8.7) with ESMTP id LAA07978; > Sat, 5 Aug 2000 11:12:25 +1200 >Message-Id: <200008042312.LAA07978(a)bo.nznet.gen.nz> >X-Sender: ezine(a)clienttell.com >From: Stephen Andrews <ezine(a)clienttell.com> >To: "ClientTells Free For All Links Site" <ezine(a)clienttell.com> >Date: Sat, 05 Aug 2000 11:12:02 +1200 >Subject: ClientTell Newsletter - Marketing Tips >Reply-To: ezine(a)clienttell.com >Organization: ClientTell Marketing >MIME-Version: 1.0 >Content-Type: multipart/alternative; > boundary="----=_NextPart_000_001__8215413_40322.45" >Status: > [snip a bunch of html] >Article by Stephen Andrews is the owner of NZNET Internet Services Ltd (Since 1994), an Internet Service Provider based in New Zealand that specializes in Internet solutions for small to medium businesses. He is a qualified Electrical Engineer who has specialized in Telecommunication Systems. He has the concept that a business should be automated as much as possible to be competitive in todays marketplace. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Mail flood from 202.46.160.18 (www-wlg.domainz.net.nz)
by Mark Seward 04 Aug '00

04 Aug '00

Just a heads up in case any other ISPs are seeing the same thing.. I've had to block inbound traffic from www-wlg.domainz.net.nz - the load average on our primary MX was at a nice healthy 97 thanks to an extremely large number of connections originating from this mail server. Thankfully, we were dropping it all on the floor because the sender domain doesn't exist (why not?): ruleset=check_mail, arg1=<4Service(a)wlg-iis.domainz.net.nz>, relay=www-wlg.domainz.net.nz [202.46.160.18], reject=501 5.1.8 <4Service(a)wlg-iis.domainz.net.nz>... Domain of sender address 4Service(a)wlg-iis.domainz.net.nz does not exist Domainz, please investigate and explain. I suspect whatever caused this will have left a large amount of mail queued on 202.46.160.18 waiting to be sent on. Regards, - -- Mark Seward [ Network Operations Manager ] Paradise Net Telstra Saturn Limited Phone: 0800 467272 Fax: 0800 367200 Email: <mds(a)tsnz.net> --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Heads-up: Kiwi spammer looking for a new home (fwd)
by Alan Brown 02 Aug '00

02 Aug '00

Terminated off 2day.com last night (25 domains) Apparently it's their second offence. === Domain Name: ESCAPEADV.COM Administrative Contact, Billing Contact: Etherington, John (JEF127) john(a)ESCAPEADVENTURES.CO.NZ Escape Adventures PO Box 3046 Richmond, 7001 NZ +6425 2307442 (FAX) +648 3261 610 AB ---------- Forwarded message ---------- Date: Wed, 2 Aug 2000 11:55:02 +0100 From: Malcolm Pack <spam-l(a)POTNOODLE.NET> Reply-To: SPAM-L(a)PEACH.EASE.LSOFT.COM To: SPAM-L(a)PEACH.EASE.LSOFT.COM Subject: SPAM: "Escape" NZ insertion and web host, opt-out spam (QP "fixed" by me). | Return-Path: <info(a)escapeadv.com> | Received: from pop3.demon.co.uk by smtpserver.homeip.net with POP3 (Mailtraq/1.1.4.1130) | id SMTP1771244673; Wed, 02 Aug 2000 11:29:22 +0100 | Received: from punt-2.mail.demon.net by mailstore | id 965211792:20:05619:2; | Wed, 02 Aug 2000 10:23:12 GMT | Received: from [212.111.39.44] ([212.111.39.44]) by punt-2.mail.demon.net | id aa2124442; 2 Aug 2000 10:23 GMT | Received: from mta4-rme.xtra.co.nz (mta4-rme.xtra.co.nz [203.96.92.15]) | by pegasus.net90.co.uk (8.10.2/8.10.2) with SMTP id e72AP1O17606; | Wed, 2 Aug 2000 11:25:03 +0100 | Received: from xtr65014501 ([203.96.109.92]) by mta4-rme.xtra.co.nz | (InterMail vM.4.01.02.17 201-229-119) with SMTP | id <20000802102718.OCZW1941812.mta4-rme.xtra.co.nz(a)xtr65014501>; | Wed, 2 Aug 2000 22:27:18 +1200 | Reply-To: <info(a)escapeadv.com> | From: "Escape Adventures" <info(a)escapeadv.com> | To: <info(a)escapeadv.com> | Subject: "Escape" | Date: Wed, 2 Aug 2000 22:37:11 +1200 | Message-ID: <LPBBKLKAGNJIILLBOLBNIEANCEAA.info(a)escapeadv.com> | MIME-Version: 1.0 | Content-Type: text/plain; | charset="Windows-1252" | X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) | Content-Transfer-Encoding: quoted-printable | X-MIME-Autoconverted: from 8bit to quoted-printable by pegasus.net90.co.uk id e72AP1O17606 | X-Hops: 2 | | Need a break from IT pressures?. | | How about Mountain biking and Cycling in Kenya, Trekking on Kilimanjaro and | Mt Kenya, Rafting the White Nile in Uganda or Biking and Seakayaking in New | Zealand. | | ESCAPE ADVENTURES www.escapeadv.com , | Multi-Activity Adventures in Africa and New Zealand from 2-3 weeks. | | "Late booking special, 15% discount. 26th August departure, Biking in Kenya, | Trek Kilimanjaro, Gameparks and Zanzibar, 3 weeks". | | ESCAPE ADVENTURES | UK, PO Box 19598 London, SW11 1GA. Ph 020 7801 9516. | NZ, PO Box 3046, Richmond, Nelson. Ph +64 3 5489929. | USA, 181 Mt Owen Drive, Driggs, ID 83422.Ph 208 354 0967. | WWW.ESCAPEADV.COM or info(a)escapeadv.com | | | If you would like to be removed from our database please reply with "Remove" | in subject line. Most annoying is that this was harvested from one of Jobserve or Jobsite, UK recruitment listings services, of which I am a member as I am currently seeking work. The idea of a NZ escape adventure is truly tempting. Certainly worth spending my dole-money on... LARTS to abuse(a)xtra.co.nz, postmaster(a)xtra.co.nz with a comment to the effect that "opt-out = spam". -- Malcolm Pack --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Hi! Let's be friend?
by nurul＠excite.com 31 Jul '00

31 Jul '00

Hi, I am Nurul, 17, from Malaysia. From a search, I got your email from your homepage. Want to be friend? I just joined asiadragons efriend to make some new friends. Sign up is free and you can sign up too: http://friend.asiadragons.com/cgi-bin/refsign.pl?refuid=nurul Ok, I make some friends and $ lah :) So, sign up ok? And about me..... http://friend.asiadragons.com/cgi-bin/mdets.pl?uid=nurul After you join in, just write to me ok? Bye. from, Nurul Hisham --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Telstra blacklisted by ORBS
by Paul Montgomery 28 Jul '00

28 Jul '00

Those predictions made by Alan Brown more than a month ago have turned out to be true. The following is forwarded from an Australian mailing list. Ben Elliston <bje(a)redhat.com> wrote: > This morning every IP address in my home network was blacklisted in > ORBS. Upon investigation, I discovered this in the orbs.org name > server: > > 233.38.24.203.relays.orbs.org. 20h54m17s IN TXT "Telstra - spam > haveners, refusing to act. " > > Because my ISP is a customer of Telstra Internet, my entire network > has been blacklisted. As best as I can tell _all_ networks downstream > from Telstra Internet have been blacklisted in ORBS. I have contacted > ORBS and the blacklists will remain in place until the spamming > activity originating from Telstra Internet ceases. Until then, I > cannot send email to company mailing lists. There's something wrong > with this picture. -- Paul Montgomery, CEO @ AusBONE, the ISP peering co-operative. Land: not yet Mobile: 0410 622 589 mailto:monty(a)ausbone.net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

whois.radb.net: transition to RPSL from RIPE-181
by Chris Wedgwood 26 Jul '00

26 Jul '00

I guess most people who use whois.radb.net have already received this notification, but for those who haven't... --cw This RIPE-181 version of the database WILL BE DECOMMISSIONED on August 7, 2000, and all customer sites need to transition to the new RPSL database. Please forward this message to the appropriate staff in your organization responsible for routing policy. On 11/1/99, at 12:01:00 a.m., the default RADB database converted to RPSL. The new RPSL database server is available at: whois.radb.net 198.108.0.18 The old (and now deprecated) address was: whois-ripe181.radb.net 198.108.0.11 If you have comments or questions about the transition to RPSL, please see our Web page: http://www.radb.net Or send email to db-admin(a)radb.net. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Hello from AusBONE
by Paul Montgomery 24 Jul '00

24 Jul '00

My name is Paul Montgomery, and I am the CEO of AusBONE, which is a peering organisation in Australia (don't worry, this is not a spam). I've been watching progress at APE, WIX and NZIX with interest, since we are doing similar things in Sydney, Melbourne, Brisbane and Adelaide. I'll be lurking on this list in future, but I thought I should say hello. One of AusBONE's main activities has been to link up interstate peering exchanges within Australia. The possibility exists to connect NZ with Australia in this network, but I'm not sure about how affordable this can be. Trans-Tasman tails are cost-prohibitive, as I'm sure I don't need to tell you. If any of you have thought about this and have come up with any workable ideas, I'd love to hear from you. Also, I've put up a page on our site listing peering activities in NZ and Asia - "peer review" of this document would be appreciated. http://www.ausbone.net/apac.htm -- Paul Montgomery, CEO @ AusBONE, the ISP peering co-operative. Land: not yet Mobile: 0410 622 589 mailto:monty(a)ausbone.net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4