- NZNOG - lists.nznog.org

Name server authoritativeness checking
by Andrew McGhie 16 May '00

16 May '00

This is to confirm that the DRS has been amended such that, at registration or change of delegation it carries out authoritativeness checks on the master and first slave name servers only, and no others. The checks that it carries out have also been relaxed, which will overcome some other problems experienced in some quarters. The actual checks that are carried out are currently being documented and will be promulgated by the end of the day tomorrow. In the meantime, please let us know if there are any specific details you would like to see in this documentation. Regards Andrew Mason --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Old UPSes for New
by Joe Abley 16 May '00

16 May '00

Hi, Due to bad planning, I have two nearly-new Compaq UPSes that are about 10cm too long for the racks I need to put them in. The units were supplied new by Compaq for the LV Cup media centre in Auckland, and were purchased by my client as the media centre was closed down at the end of the Americas Cup. They have not since been used. The UPSes seem to be a Compaq-rebadged version of an APC rack-mount UPS, spec'd to 3000 kVA. Maximum input current 16A. 18 x 10A outputs on three separate buses. About 70kg each, which brings them nicely into the "christ, my back" category of equipment haulage. [Unit descriptions are from memory; I don't have them with me right now] I'd be very happy if I could exchange them for other, similar-spec rack- mount UPSes that will fit in our cabinets. If I have to, I will sell them. Private mail gratefully received :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 8

Well known problem
by Arron Scott 16 May '00

16 May '00

Hi all, As this is a discussion forum for Network Operations people in NZ, I thought I would raise a little problem that I regularly see around the network. I am not pointing this at anyone in NZ in specific, it's just FYI. Hopefully most of you will already know about this. The problem: Clients can ping Web Servers running MTU Path Discovery but cannot HTTP. Why: At HTTP connect time, MTU is negotiated as the lowest set on the interfaces between server and client, for both using Internet this would be 1500 bytes. After that the server attempts to do MTU Path Discovery, by sending the largest agreed packet marked "DO NOT FRAGMENT". If there is a circuit somewhere along the path that is smaller than that packet size, the router is expected to drop the packet, and return ICMP Unreachables, with the "COULD NOT FRAGMENT" message attached. The server should then try a smaller packet. Unfortunately it is common for sites to filter the ICMP Unreachables, which the server never sees, and it spends it's life resending MTU Discovery Packets forever. How to Fix it: TURN OFF MTU PATH DISCOVERY on the server ... or less popular, change filtering to allow the required responses in. It is of course possible to fix the MTU for a specific case, but this never will work for everyone on the Internet. Common Scenarios: This will regularly occur with networks using; - Tunnels (L2TP, GRE, IPIP etc) as the tunnels must have lower MTU than the physical path, to allow it to carry the IP header. - ISDN Routers, where the client has an Ethernet, but the ISDN dialled connection is set to 952 or whatever. - Sites behind small links, where the MTU is tuned for the bandwidth available. This does not occur on dial-up connections, as the client may only have an MTU of 512 bytes, but this is internal to the client, and the original MTU negotiation will prevent a path discovery of packets beyond the MTU of the rest of the path. ps. I hope you are all aware of the problem with clients setting IP packets with a TTL of 32 hops, causing certain locations deep inside Europe to be unreachable. Detail on this problem is on www.netgate.net.nz under the "Too Many Hops Issue" Hope this is useful, Arron Scott Telecom NZ Ltd (But only for three more weeks)

2 1

Tic toc, tic toc......BOOM.......
by Ben Martel 15 May '00

15 May '00

Fellow time travellers, Due to the need for most of us humanoids to have some reference to this thing called 'time' CLEAR Net have now installed (for the general enhancement of the Internet in NZ - hint to ISOCNZ), albeit a minor enhancement, a GPS based time source for your pleasure. This service is based on a unit (which claims to be a stratum one time source - <sigh>) located on the top of the CLEAR building, in Takapuna, Auckland. Techincal details: Device: Truetime NTS 90 (http://www.truetime.com) Hostname: bigben.clix.net.nz - also CNAME'd as tictoc.clix.net.nz IP Address: 203.167.224.60 Protocols supported: NTP (RFC 1305), SNTP (RFC 1361), TIME (RFC 868) NB: You cannot query this device using NTP unless the source port for the request is the NTP port (a la an NTP server). You are free to use this service - Enjoy! Any problems please report them to bgp(a)clear.net.nz. Ben Martel CLEAR Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RFC (fwd) Registration of Offensive Names
by Sue Leader 15 May '00

15 May '00

Greetings - fowarded on behalf of: ------- Forwarded Message Follows ------- <snip> From: Elizabeth <E-DengateThrush(a)GlobalEsoft.com> Subject: Registration of offensive names <snip> Comment and feedback sought for proposed policy change. ISOCNZ has proposed a change to its registration of offensive names policy. The proposed policy has been previously circulated to members for comment. The quality of the comments has been worthwhile though the level of feedback and comment has been low. This is an area where our membership who are largely and 'on-line' population, potentially has a different view from the general population, who also have an interest in the Internet in New Zealand. The proposed policy covers registration. Perhaps some thought could be given to remedies for people or organisations that find a name offensive. This would be an adjunct to the proposed policy rather than necessarily change the direction that is indicated in the proposed policy. I urge you to consider the effect on our society of the ability for anyone to register and promote an offensive domain name and what, if anything, we should do about this. I welcome your comments and views. In the interest of brevity please reply to me, and in line with the ISOCNZ policy development process, I will log comments, summarise and include points of view if appropriate. Comments and associated policy developments will be available on the website in due course. Regards Liz Dengate Thrush Policy Committee, ISOCNZ ------- Forwarded Message Follows ------- <snip> Below is the policy on offensive words which Council approved in principle for public consultation. "We have not defined in our current policy what words are necessarily offensive and unregisterable but DOMAINZ tends to follow the FCC list of seven words that can not be used on air. Policy Committee recommends that we should remove the ban for the reasons below 1) By banning just some words we are seen to give implicit approval to the words we do let through. This contrasts with our general policy of not making judgements as to who may use what name.. 2) The gTLDs like *.com no longer ban any offensive words 3) People have been able to work around the ban with domain names such as motherf-cker.co.nz which is a legal and registerable name 4) Because we only control third level names we are unable to anyway stop people registering for example sucker.co.nz and setting up a 4th level domain such as cock.sucker.co.nz 5) Why ban certain words just in domain names when they are can be used on the websites themselves. 6) We have been unable to come up with any definitive list of what words we will ban and hence can be accused of having a very ad hoc policy. 7) We only ban offensive words in english yet let through potentially offensive words in Maori which is also an official language of NZ. 8) Having the current policy, without defining what words are not acceptable, stops DOMAINZ from being able to have a fully automated registry where people can register names without human interference in the registry process, thus restricting the registry to normal working hours only. Therefore for all of the above reasons we recommend to Council that the ban on offensive words be lifted. Public comment is sought before Council makes a final decision to rescind the current policy banning offensive words. ------------------------------ Sue Leader - Executive Director ISOCNZ (Internet Society of New Zealand Inc) Exe.Dir(a)isocnz.org.nz Voice: +64-4-801-6256 http://www.isocnz.org.nz Postal: Level 1, (e)-Vision Centre, 282 Wakefield St, Wellington "Error: Press any key to continue or any other key to quit..." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[m.arnott@domainz.net.nz: [isocnz-l]Domainz Web-site]
by Joe Abley 15 May '00

15 May '00

If the notification comes out after the the site has been taken down, does it still count as a scheduled outage? ----- Forwarded message from Maria Arnott <m.arnott(a)domainz.net.nz> ----- Delivered-To: jabley-isocnzl(a)automagic.org From: "Maria Arnott" <m.arnott(a)domainz.net.nz> Newsgroups: nz.org.isocnz Date: Tue, 16 May 2000 10:14:36 +1200 X-Newsreader: Microsoft Outlook Express 4.72.3110.5 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 NNTP-Posting-Host: 202.49.152.2 X-Original-NNTP-Posting-Host: 202.49.152.2 X-Trace: 16 May 2000 10:39:47 NZST, 202.49.152.2 Path: news.actrix.gen.nz!202.49.152.2 Xref: news.actrix.gen.nz nz.org.isocnz:5352 To: isocnz-l(a)isocnz.org.nz Subject: [isocnz-l]Domainz Web-site Reply-To: isocnz-l(a)isocnz.org.nz Errors-To: isocnz-l-admin(a)isocnz.org.nz X-Mailman-Version: 1.1 Precedence: bulk List-Id: ISOCNZ Public mailing list <isocnz-l.isocnz.org.nz> X-BeenThere: isocnz-l(a)isocnz.org.nz Dear list members, The Domainz website will be down for a short while. I will notify as soon as we are up again. My Regards Maria Arnott ph: 04 473 4567 fax: 04 473 4569 email: m.arnott(a)domainz.net.nz web: www.domainz.net.nz _______________________________________________ go to http://listserver.actrix.co.nz/mailman/listinfo/isocnz-l for subscription/unsubscription information. ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Delegated domains that are not in the Register
by Joe Abley 15 May '00

15 May '00

Looks to me like the domains domainz.net.nz dns.net.nz are delegated, but reported with "domain_name_status: 00 Not Listed". They seem to be missing from the register because they are domains used by Domainz, and are therefore in some way special compared to every other domain in the register. You just know that people are going to try and register these when they see interfaces like whois.domainz.net.nz reporting them available. In the interests of simplicity, would it not make more sense to have _every_ delegated domain listed in the register? Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Email template Users URGENT
by Andrew McGhie 14 May '00

14 May '00

Dear all, Registrars using the email template as a means of lodging name applications for new name holders (this applies to adding of new name holder situations only) should change their user passwords and the passwords for their staff using the DRS system immediately. Due to my oversight, a copy of the name application emails on which the application was originated has been sent to the name holder concerned. Where the non-encrypt option was used for these transmissions, the name holder would have been able to see the registrar ID and password. The situation affects a group of 6 live registrars who have been contacted directly. This is to let you know that as soon as we became aware of the problem we immediately ceased the issue of copy applications to name holders. We acknowledge this is an issue that should not have arisen and we deeply regret it. We have done all possible to rectify the problem imnmediately. Andrew Jamieson Development project manager ADV E-Commerce Ltd --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Domainz Security Problem/Warning
by James Bell 14 May '00

14 May '00

When a Registrar modifies or registers a domain name with the email template, a confirmation is CC'd to the name holder by Domainz. This confirmation includes the original email template, which includes the Registrar's ID and password. This means that any customers who have new or modified domains in the last week are now the proud owners of their ISP's Registrar ID and password - allowing them access to any domain name that the ISP is Registrar for. I urge anyone using the email template to check and see if this is happening for them, and also to change their Registrar password. I ask Domainz to (publicly) confirm this is a problem, and to announce a proposed timeline for a fix. Apparently this problem was logged as a bug during testing by another Registrar. I have confirmed with this other Registrar that the problem still exists for them also. Regards, James Bell (Private person, not speaking for anyone) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 7

How do I change nameservers on a domain, now?
by Joe Abley 14 May '00

14 May '00

Hi, Customer has domain registered with 2day.com. Customer wishes to shift said domain to another ISP. 2Day is not a Domainz "registrar", and neither is this other ISP. The nameholder has received nothing from Domainz by way of nameholder usernames or passwords. We can probably get the domain key from 2day.com if we ask Peter nicely, but that seems to be of negligable use in this Brave New World. How do we change the nameservers on this domain? Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1