- NZNOG - lists.nznog.org

Domainz Security Problem/Warning
by James Bell 14 May '00

14 May '00

When a Registrar modifies or registers a domain name with the email template, a confirmation is CC'd to the name holder by Domainz. This confirmation includes the original email template, which includes the Registrar's ID and password. This means that any customers who have new or modified domains in the last week are now the proud owners of their ISP's Registrar ID and password - allowing them access to any domain name that the ISP is Registrar for. I urge anyone using the email template to check and see if this is happening for them, and also to change their Registrar password. I ask Domainz to (publicly) confirm this is a problem, and to announce a proposed timeline for a fix. Apparently this problem was logged as a bug during testing by another Registrar. I have confirmed with this other Registrar that the problem still exists for them also. Regards, James Bell (Private person, not speaking for anyone) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

8 7

How do I change nameservers on a domain, now?
by Joe Abley 14 May '00

14 May '00

Hi, Customer has domain registered with 2day.com. Customer wishes to shift said domain to another ISP. 2Day is not a Domainz "registrar", and neither is this other ISP. The nameholder has received nothing from Domainz by way of nameholder usernames or passwords. We can probably get the domain key from 2day.com if we ask Peter nicely, but that seems to be of negligable use in this Brave New World. How do we change the nameservers on this domain? Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

Telecom Clear Media Release 14/5/00 (fwd)
by Joe Abley 13 May '00

13 May '00

In case it is of interest (note it is after 1800, hence there is no embargo on release). ---------- Forwarded message ---------- Date: Sun, 14 May 2000 18:58:20 +1200 From: Alan Mitford-Taylor <alan.mtaylor(a)telecom.co.nz> To: jabley(a)patho.gen.nz Subject: Telecom Clear Media Release 14/5/00 Joe Abley Mercury Telecommunications Ltd Dear Joe The following is a media statement jointly released by Telecom New Zealand Ltd and Clear Communications this evening. I will endeavour to supply more information to you as soon as it becomes available. Regards Alan Mitford-Taylor 14 May 2000 MEDIA RELEASE Embargoed until 1800 CLEAR AND TELECOM REACH AGREEMENT ON 0867 INTERNET NUMBER RANGE Internet users will not pay a two-cents per minute charge for non-0867 Internet calls, under a comprehensive three and a half-month agreement between Telecom and CLEAR. The two companies say the agreement provides a breathing space in which they can renegotiate their interconnection agreement, which expires at the end of 2000. Telecom has agreed to suspend the two-cent charge and CLEAR has agreed to encourage its customers who are dial-up Internet users to begin using 0867 numbers. The agreement is effective immediately. Other aspects of the agreement are: * CLEAR and Telecom will sign an agreement whereby CLEAR will provide Internet access services under an 0867 agreement, initially until the end of August. * CLEAR will withdraw its application for an interim injunction requiring Telecom to honour the terms of the number portability agreement between the two companies. * Telecom will not appeal against the interim injunction granted to i4free last month. * The agreement is for three and half months, during which time the two companies will aim to negotiate a new interconnection agreement. CLEAR and Telecom say the agreement is a pragmatic solution to the long-running 0867 Internet issue. The agreement recognises the needs of both companies in New Zealand's rapidly changing telecommunications sector. Both companies recognise the need to set aside differences in order to benefit Internet users and to create space for developing a better interconnection agreement for the future. For further information, contact: Linda Sanders Telecom New Zealand Ross Inglis CLEAR Communications --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Domainz Registration System - authoritativeness checking
by Andrew McEwen Mason 13 May '00

13 May '00

It has been pointed out that the DRS has been checking all name servers for authoritativeness at Registration, when the Waikato system only ever checked the Master and first Slave NSs. The system is being amended to follow the Waikato practice (check first 2 NSs only), and we expect that this will be completed by tomorrow 14.5.00. Regards _________________________________ Andrew McEwen Mason BSA Consulting Group 7 Mariri Road, Kelburn Wellington, NZ Phone +64 4 934-3178 Mobile +64 21 466-181 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 4

Emails to domain name holders
by Andrew McEwen Mason 13 May '00

13 May '00

As you know, Domainz is in the process of notifying name holders of their user IDs and passwords for accessing the Domainz Registration System. In a number of cases, apparent duplicate emails are being sent. The old system had one record per domain name, which held details of the name holder as well as of the name itself. As a result, whenever it was necessary to contact name holders, a letter had to be sent to the holder of each domain, which meant that anyone with n names received n letters. Under the DRS, we have created name holder records, based on name and address details in the domain records, and have associated all domains having a common N/H name and address with the one name holder record. Each name holder as held in the DRS database is currently being sent one pair of email messages containing their ID and password. These messages do not explicitly mention the names tagged to the name holder in the database. This has caused some confusion and we will change the letters to show domain names. There are also some apparently duplicated name holders who will be receiving more than one email pair. This has arisen where the details for the same name holder on the old database differed one from another between different domain name records - for example "Joe Bloggs, 52 High Street" and "J Bloggs, P.O. Box 44". Obviously there is nothing we can do to de-duplicate these records automatically, and so the business rule for these situations was to create a separate Name Holder record where there was any doubt. Because of this, there are probably more Name Holder records now than are really required. If anyone would like to consolidate multiple records for the same Name Holder, they should mail Domainz at changes(a)domainz.net.nz. We do acknowledge that the multiple letters seem alike, and this is a mistake that we will rectify. From feedback received it is clear that including the domain name(s) is important to recipients, so (as stated above) these will be included in the letter. At the same time, we will remove the excess ".nz" in the reply-to address. We apologise that this was included in the first place. Andrew _________________________________ Andrew McEwen Mason BSA Consulting Group 7 Mariri Road, Kelburn Wellington, NZ Phone +64 4 934-3178 Mobile +64 21 466-181 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Domainz information corruption.
by Dylan Reeve 11 May '00

11 May '00

On Thu, 11 May 2000, James Bell wrote: > >Right well, I registered those domain names, and as far as I understand, > >that is the fuction of registrar. However I realise that doesn't > >immediatly make me a registrar (as exciting a title as that is). So what > >does? > Paying Domainz $300 (or $3000). So I can still register them? I just can't make any changes once I have done so? I see this as sub-optimal, but I guess I don't really have a choice. > and signing a Registrar agreement. Is that the one that I hear no-one has signed? Dylan Reeve - dylan(a)wibble.net "Um, yeah." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Domainz system (authoritative checking)
by Ted Grenfell 11 May '00

11 May '00

At 12:40 12/05/00, Simon Green wrote: >To Domainz: Where was the notification of the change in the number of >nameservers you were going to check. This not only has caught 2day off >guard, but also caught off the isp that I work with[1] as well. If you are >going to make changes like this, you need to tell us IN ADVANCE. I assume >that is why you set up the drs(a)domainz readonly mailing list. > > Having said that, I know Domainz aren't going to reply, so sorrt for >wasting your bandwidth. Oversight on their part apparently and will be remedied tomorrow when they go back to just checking 2 name servers as before. -- Ted Grenfell Xtra ISP Performance Manager Mob 025 435 455; DDI 09 359 5854; Fax 09 355 5283 Level 12, Telecom Tower, 16 Kingston St, Private Bag 92028, Auckland --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: Domainz system (authoritative checking)
by Ted Grenfell 11 May '00

11 May '00

At 10:29 12/05/00, Ben Martel wrote: > > Does anybody know if new system tests for a domain being > > authoratative on > > the specified name servers prior to registration? >This is supposed to be an option in the new system. What I mean by that, is >that each registrar should be able to set this on or off for their own >registrations. Currently for us the DRS does *not* appear to be checking our >name servers for 'authoritativeness' before accepting a new registration. >There is a rumor that DRS will check for authority after a day - but I don't >know what happens if it fails :( > >BTW: I cannot find anywhere in the new system that allows a registrar to >change this option. This means that either only Domainz can change this >value or that I have been mislead! I queried Domainz about them allowing us to register domains prior to being authoritative and was told that this feature is part of the Registrar agreement and is a privilege that may be given to some Registrars. This functionality has been provisioned for in the changes Domainz have made but will not be activated on Day 1. Are you sure they're not checking first Ben or have you managed to specifically arrange for this service to be activated? I'm under the impression that Domainz are the only ones who can modify the feature. -- Ted Grenfell Xtra ISP Performance Manager Mob 025 435 455; DDI 09 359 5854; Fax 09 355 5283 Level 12, Telecom Tower, 16 Kingston St, Private Bag 92028, Auckland --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

Domainz system
by Peter Mott 11 May '00

11 May '00

Does anybody know if new system tests for a domain being authoratative on the specified name servers prior to registration? The UoW system used to check the first two name servers only. I am getting problem reports suggesting the new system may be checking all specified name servers (one of our 4 name servers only reloads once every 24 hours whereas the others reload every 30 mins if changes have been made) p.s. I received an e-mail from Rex Croft yesterday. He is working in Adelaide CBD being a "fixit" person for solaris systems. He seems rather happy with the move to AU. Regards Peter Mott Chief Enthusiast 2day.com -/- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 1

RE: Domainz system (authoritative checking)
by Ben Martel 11 May '00

11 May '00

> Does anybody know if new system tests for a domain being > authoratative on > the specified name servers prior to registration? This is supposed to be an option in the new system. What I mean by that, is that each registrar should be able to set this on or off for their own registrations. Currently for us the DRS does *not* appear to be checking our name servers for 'authoritativeness' before accepting a new registration. There is a rumor that DRS will check for authority after a day - but I don't know what happens if it fails :( BTW: I cannot find anywhere in the new system that allows a registrar to change this option. This means that either only Domainz can change this value or that I have been mislead! Ben CLEAR Net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1