- NZNOG - lists.nznog.org

[bmanning@ISI.EDU: DEW #3 - 48 hours]
by Joe Abley 28 Jun '99

28 Jun '99

----- Forwarded message from bmanning(a)ISI.EDU ----- Delivered-To: nanog-outgoing(a)merit.edu From: bmanning(a)ISI.EDU Posted-Date: Mon, 28 Jun 1999 17:38:15 -0700 (PDT) Subject: DEW #3 - 48 hours To: those-concerned-with-operational-integrity(a)ISI.EDU Date: Mon, 28 Jun 1999 17:38:15 -0700 (PDT) Cc: bmanning(a)ISI.EDU X-Mailer: ELM [version 2.5 PL0] Precedence: bulk Errors-To: owner-nanog-outgoing(a)merit.edu X-Loop: nanog Hi, I appologize for duplicates. Its almost time for the next quarterly walk of the inverse tree of the DNS. For the last few quarters, I've been walking the in-addr tree looking for numbers of delegations, accurate delegations, and types and styles of error conditions. So... this is a heads up that you will be seeing zone transfers being generated by a couple of the collecter machines here. For those of you who utilize BINDs access controls, I'd appreciate your inclusion of the collector machines in allowed transfers. The expectation is that they will be the following IP addresses: 128.9.160.57 and 198.32.4.13 Past data is at: www.isi.edu/div7/people/bmanning.home/in-addr-audit.html The run is scheduled to start 01 July 1999 @ 00:01 UTC. If there are any questions or concerns, I'd be happy to talk about them. Past data has been presented at IEPG, Apricot and RIPE meetings. The expectation is that future data will be presented in the same and similar forums. -- bill manning 310.822.1511 ----- End forwarded message ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZ operators address book
by Joe Abley 23 Jun '99

23 Jun '99

I have thrown something up to get the ball rolling. It's pretty cheap and nasty, be warned :) http://www.patho.gen.nz/nznog/contact.html You will need a username and password to get in, since the idea is that this address book has personal contact details rather than generic helpdesky ones where possible. Mail me with a username and password, and I'll set you up. Additionally, you might like to send me contact details (name, e-mail, phone, fax where available/appropriate) for the following categories: o Usenet o Abuse (annoying) o Abuse (panic) o Routing anomolies o BGP filter updates o Network peering o Cache peering o Cables cut o Building access o Policy There's also a "Notes" category for other misc info (the CLEAR entry has "Route policy in RADB" there). Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Y2K stuff.
by Roger De Salis 22 Jun '99

22 Jun '99

I've received an approach from a Malaysian ISP, wishing to contact their NZ equivalents, as the clocks turnover to '00. I would guess there there will be others, who are interested in how NZ is faring, and potentially use the 6, or 8, or 17 hours of leeway they have productively in the event of some unforeseen problem. I would rather not have the entire worlds ISP support staff phone their counterparts in NZ to enquire "How it going?". Given the fact many of them will simply want to silently observe that there is no problem, what is the best way to go about this? Let them subscribe to the nog? Form a special NOG for the brown-out period 11/99-1/00? Suggest that no-one in NZ really cares about the rest of the world, and they can all....... Appoint Peter Mott as a Y2K spokesman? and direct all enquiries to him? Any one any other suggestions? Many Thanks. Rgds Roger De Salis -- \_ Roger De Salis Cisco Systems NZ Ltd </' +64 25 481 452 L3, 117 Customhouse Qy /) +64 4 473 4912 Wellington, New Zealand (/ roger(a)desalis.gen.nz rdesalis(a)cisco.com ` Never underestimate the data transmission capacity (Mb/s) of a station wagon full of the backup tapes. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 5

RE: Y2K stuff.
by Robert Gray 22 Jun '99

22 Jun '99

Roger wrote, > Given the fact many of them will simply want to silently > observe that there is no problem, what is the best way > to go about this? The Y2K Commisiion wish to do just this on their web site, we are working with them on ways to minimise the probability of down time (basically geograpic dispersal and minimum dependence on proprietary code). Give me a call and I'll put you in touch.... Robert Gray Clearview Communications, Auckland New Zealand bobg(a)clearview.co.nz http://www.clearview.co.nz/ Phone DDI +64 9 529 5704, Fax +64 9 529 5702, Mob +64 25 971 860 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: Contact Numbers [was: Y2K stuff]
by Robert Gray 22 Jun '99

22 Jun '99

>Just an idea -- any comments? Good scheme Robert Gray Clearview Communications, Auckland New Zealand bobg(a)clearview.co.nz http://www.clearview.co.nz/ Phone DDI +64 9 529 5704, Fax +64 9 529 5702, Mob +64 25 971 860 -----Original Message----- From: Richard Naylor [mailto:richard.naylor(a)citylink.co.nz] Sent: Wednesday, 23 June 1999 18:08 To: nznog(a)list.waikato.ac.nz Cc: jabley(a)clear.co.nz Subject: Re: Contact Numbers [was: Y2K stuff] At 04:44 pm 22/06/99 +1200, Joe Abley wrote: >On a more tedious, on-topic note, is anybody else interested in keeping >a central repository of contact e-mail addresses and phone numbers for >NZ net ops? Not for consumption by the general public, but maybe stuck >on a web page somewhere behind a crude password? > Yes - I'm keen. My black book is falling to pieces..... >I was thinking in terms of contacts for categories, like: > > + usenet feed-tweaking > + abuse notification > + routing strangeness > + network peering > + proxy peering + cables cut + bills not paid + stuffed routers >The idea is to provide a list of second-tier and third-tier support >to our counterparts in other providers, so that we don't end up having >to do battle with the helpdesk IVR at 3am when something nasty just >happened. > >Just an idea -- any comments? > You mean you don't like me phoning you cos yours is the only cell phone number in Clear I have ? Maybe thats why all the others don't give me numbers ........ Actually I have a page for the members of WIX and will do something similar for APE. rich richard.naylor(a)citylink.co.nz This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Make an us an offer we can't refuse
by Andy Linton 21 Jun '99

21 Jun '99

http://www.netlink.co.nz/Media_Release_22_June99.html --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

BGP filtering
by Joe Abley 09 Jun '99

09 Jun '99

Hi all, CLEAR publishes its routing policy in the RADB. Just out of interest, do any of our peers pull our policy from there in order to build filter lists? If so, how often do you do it? I ask because it seems that some of our advertisements are not being accepted by some peers; naturally the games players have been the first ones to notice and point this out :) If anybody would like a pre-built, up-to-date filter list for cisco routers (for advertisements from AS4768 routers only), please drop me a line. Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Facility available for APE
by Richard Naylor 08 Jun '99

08 Jun '99

CityLink would like to announce the availability of a peering facility on Level 48 of the Sky Tower in Auckland. This will be a neutral peering facility using an ethernet switch supported with a local unix box and UPS. The unix box will run mrtg for traffic statistics and NOCMON for port monitoring. Statistics will be available to peering users on their ports only on application. Users will be able to establish bilateral peering arrangements or in conjunction with users, we will establish a unilateral peering facility. The unix box will also offer a route server and reflector along with an AS number for users who may not currently have an AS of their own. CityLink will also operate an independent (pre-CIDR) address space for users to use for unilateral peering. The facility will be managed from Wellington using CityLink's established 24x7 support facility. Local hands on support will be sub-contracted to a local supplier. Access to the facility is available for a connection fee of $750.00 + GST and a monthly support fee of $62.50. Customer ports will be restricted to a limited number of MAC addresses to ensure some degree of security between customers. CityLink is a Network Operator based in Wellington with a large IP network based on a 40km fiber cable network. It operates the neutral Wellington Internet Exchange with approximately 12 connected Internet Service Providers. Its network has approximately 20 switches installed in a distributed switching fabric. Q1 - Why are you doing this ? CityLink has experience in neutral switching and IX operations in high bandwidth applications. CityLink operates a MAC based metropolitan area network with multiple ISPs Q2. Will there be a link between the Wellington IX and APE ? The ISP community provides this connectivity at the present time. It is not expected that CityLink will provide this facility. Q3. Does this mean that CityLink will be operating a network in Auckland ? No. We see that we can add value and experience in operating a neutral exchange in Auckland. Q4 - Aren't you scared of heights ? 48 Floors ? YES. Power poles ? No. Q5 - What will be there ? A 6 foot rack with nice gear in it. At this stage the rack has a UPS and Unix box and a small switch. The switch will grow as traffic and port requirements demand. Q6 - Where will spares be held ? Spare and hardware service will be provided locally in Auckland. Q7 - I want to join - How do I get signed up or find out more ? Send email to info(a)citylink.co.nz or phone 04-917-0200 Q8 - When will the service be live ? We expect to be installed and operating by 20 June 1999. Q9 - What sort of switch will be in APE ? At this stage we have a Cisco ethernet switch in the cabinet. We are talking with other suppliers about what options are available. Our experience is that we often grow a switch capacity as demand rises. We have a number of switches in Wellington and swap them out as the port count requires. (we have yet to see a bandwidth limitation) Q10 - Why are you charging ? We are charging on a simple cost recovery basis. We feel that if the peering point is free then it is abused. If a charge is levied then users will appreciate that management is applied to the exchange. CityLink is not a huge organisation and needs to recover some of its costs. The costs mentioned above should not be a barrier to likely user organisations. [ends] richard.naylor(a)citylink.co.nz This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

DNS issues. BIND 8.2
by dylan＠ihug.co.nz 03 Jun '99

03 Jun '99

After much to-ing and fro-ing we are coming to the end of our collective teathers. Since Sunday morning (last Sunday) morning at around 8am we have been having an odd problem with our primary nameserver, ns1.ihug.net.nz (203.29.160.4). It goes something like this, nameserver is doing it's thing happily, when for no apparent reason it just stops responding to named requests for a short time and then a while later starts going again. For obvious reasons this is a major problem. And we can find nothing that is causing this. The symptoms: o Server stops responding to named queries. o At one stage it appeared that when constantly pinging it the TTL would change from 64 to 255 for the exact same duration that the nameserver was affected. I am unable to confirm that this is still the case. o The outages appear to be for exactly 2 or 3 minutes to the seccond. (Maybe other durations?) o At the same time this is happening we are getting "Possible syn flood" messages from various IP addresses (they don't seem to be related). It is my understanding that at about the same time (Sunday) that CLEAR, Waikato and possible Telecom/Xtra had a similar problems (I am not sure where this information comes from or how accurate it is), but are no longer. What we have done: o We swapped our nameservers around, this seems to solve the problem however, it affects our practical ability to control zones etc... o New software installations. The box affected had recently been rebuilt before the incident, and we did not suspect it was a software issue, but rebuilt anyhow. It has affected both Slackware and Debian installations with BIND 8.1.2 and BIND 8.2. Conclusions: o It only occurs when then machine is on 203.29.160.4 and is acting as a master. It does not affect slaves on that IP and does not affect masters on another IP. o Hardware is not a fault - We have used more than one physical machine. The effects did not change. o It appears the the nameserver itself stops during that time. Incoming traffic still reaches the box, but none goes out. Also for the duration there seems to be no nameserver logging. Short completely changing our nameserver infrastrucure we are at a loss as to what we can do. Probable solutions: o None - Goddammit! Any ideas? Dylan Reeve DDI: +64 9 359-2746 Assistant DNS Admin Fax: +64 9 358-5134 ihug business Freecall: 0800 847-638 http://www.ihug.co.nz/ Email: dylan(a)ihug.co.nz --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 9

DEW alert
by bmanning＠ISI.EDU 31 May '99

31 May '99

Hi, I appologize for duplicates. Its almost time for the next quarterly walk of the inverse tree of the DNS. For the last few quarters, I've been walking the in-addr tree looking for numbers of delegations, accurate delegations, and types and styles of error conditions. So... this is a heads up that you will be seeing zone transfers being generated by a couple of the collecter machines here. For those of you who utilize BINDs access controls, I'd appreciate your inclusion of the collector machines in allowed transfers. The expectation is that they will be the following IP addresses: 128.9.160.57 and 198.32.4.13 Past data is at: www.isi.edu/div7/people/bmanning.home/in-addr-audit.html The run is scheduled to start 01 July 1999. If there are any questions or concerns, I'd be happy to talk about them. Past data has been presented at IEPG, Apricot and RIPE meetings. The expectation is that future data will be presented in the same and similar forums. -- bill --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0