- NZNOG - lists.nznog.org

RE: BGP at NZIX. Mmm.
by Warwick GLENDENNING 07 Feb '99

07 Feb '99

>WebFarm blames Ihug for its network becoming inaccessible, because of action Ihug took >following a network attack. But Ihug director Nick Wood doesn't believe the 16-hour outage was >its fault. He says Ihug was being attacked by someone he claims was on the WebFarm network. "We >blocked their network on our router and Waikato's router, for some reason, at NZIX learned the >route." IHUG doesn't directly connect to NZIX. They are behind Telecom's router. -----Original Message----- From: Joe Abley [mailto:jabley(a)patho.gen.nz] Sent: Monday, 8 February 1999 01:15 To: nznog(a)list.waikato.ac.nz Subject: BGP at NZIX. Mmm. http://www.idg.co.nz/nzweb/ca6a.html Looks like another good reason to use a routing protocol that can be filtered at NZIX :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

The New Zealand Network Operators' Group
by Donald Neal 07 Feb '99

07 Feb '99

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has neither a king, a president nor a formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. (At last count the list had 66 subscribers.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document,. a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to arrange meetings over beer. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: BGP at NZIX. Mmm.
by craig＠laptop.iprolink.co.nz 07 Feb '99

07 Feb '99

> Looks like another good reason to use a routing protocol that can be filtered > at NZIX :) But the article said it had only one in a million chance of happening. Apparently the latest version of IOS supports the following: redistribute static odds 1:1000000 ignore-filters -Craig --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

BGP at NZIX. Mmm.
by Joe Abley 06 Feb '99

06 Feb '99

http://www.idg.co.nz/nzweb/ca6a.html Looks like another good reason to use a routing protocol that can be filtered at NZIX :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZ Promiscuous Mail Relay Survey
by Joe Abley 06 Feb '99

06 Feb '99

Hi again, Further to my message on this subject the other day, I decided to send an informational note to postmaster addresses at hosts that I had found to be relays. Some readers of this list will have received copies. Although I have received quite a bit of positive feedback from the notes I sent out, it seems that I have inadvertantly upset some people. If you are one of them, then sorry - I didn't mean to intrude. I have put some information about the survey (and a list of the frequently- asked questions so far) at: http://www.patho.gen.nz/~jabley/survey.html Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZ promiscuous relay survey
by Joe Abley 05 Feb '99

05 Feb '99

Last night I performed a crude survey in an attempt to find out something about the proportion of SMTP mail relays which permit promiscuous relaying in NZ. The methodology is by no means flawless, but it might give an idea of the scope of the problem. If anything, the proportion of mail relays which are open is understated, due to: + an incomplete list of mail relays in NZ to check; + a rather nasty SMTP implementation hacked together for this purpose that isn't very flexible and makes various poor assumptions; + mail relays which were broken at the time of the test; + mail relays which _will_ relay my mail back to be counted, but which haven't yet. Anyway, here are the results -- comments welcome! Out of 3751 MX hosts that we tried to use as a relay: + 269 (7%) accepted our message, but later bounced it + 1208 (32%) relayed our message OF the messages that were relayed: + 929 (76%) were from hosts named under co.nz + 33 (2%) were from hosts named under net.nz + 72 (5%) were from hosts named under govt.nz + 15 (1%) were from hosts named under ac.nz + 22 (1%) were from hosts named under school.nz + 0 (0%) were from hosts named under iwi.nz + 8 (0%) were from hosts named under gen.nz + 38 (3%) were from hosts named under org.nz + 1 (0%) were from hosts named under mil.nz I will not publish the list of MX hosts that did or did not permit relaying in this experiment. If you'd like to enquire about whether an MX host that you maintain relayed our message, please contact me directly. Methodology: 1. Zone transfers were performed for the NZ second-level domains co.nz, ac.nz, mil.nz, gen.nz, org.nz, school.nz, iwi.nz, and net.nz. 2. For every key in each of these zonefiles with an NS record, the key was extracted. A unique list of keys with NS records was generated. 3. MX records for each key were harvested from the DNS and a unique list of mail exchangers to be tested was produced. 4. A message with envelope sender jabley(a)patho.gen.nz and envelope recipient relayed(a)patho.gen.nz was sent by connecting to each relay and talking SMTP. Each message contained a random key which was stored in a local database. 5. Every time a message was received with a matching key in the body text and addressed to relayed(a)patho.gen.nz, the local database was updated indicating that the MX host in question permitted the relay. 6. All SMTP connections were made from tardis.patho.gen.nz (203.97.2.226) between 0500, Feb 5 1999 and 1400, Feb 6 1999. 7. MX hosts which specifically (intentionally) permit mail relaying from tardis.patho.gen.nz were excluded from summary reports. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: Traceroutes
by craig＠laptop.iprolink.co.nz 04 Feb '99

04 Feb '99

Hi. > I suspect many of you know of the DIGEX site which allows you to > traceroute (and other things) from a web page [...] My favorite "Address" to use with DIGEX (select "bgp"): regex _MYASNUMBER_ Obtaining a full BGP table dump is left as an exercise for the reader :-) -Craig --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

The APRICOT Week at a Glance ( Version 1.1 ) - The Asia Pacific Internet Festival of 1999
by Barry Raveendran Greene 01 Feb '99

01 Feb '99

[Apologies for the Duplications] !! Early Bird Sign up ends on 12 Feb! !! !! REGISTER NOW by Going to the on-line to !! !! http://www.apng.org/apricot/apricot.html !! !! and save $50 USD on registration cost !! The APRICOT Week at a Glance ( Version 1.1 ) The Asia Pacific Internet Festival of 1999 Venue: SunTec City Convention Centre, downtown Singapore Dates: 28 February 1999 to 7 March 1999 URL: http://www.apng.org/apricot99 (in English, Japanese, Korean, and Chinese) APRICOT'99 will consist of two days of tutorials (1-2 March 1999) and seminars followed by three days of conferences consisting of concurrent Technical, Business, Education, Policy and other tracks. (3-5 March 1999) In addition to other back-to-back meetings of Asia Pacific Internet organizations APNG, APNIC, APIA, APTLD, and their respective working groups, and other Internet conferences such as Internet World Asia @ Singapore 1999 and Singapore LINUX Conference 1999, APRICOT'99 will be hosting within its conference tracks: * ICANN Meeting, the Internet Corporation for Assigned Names and Numbers, the successor organization to IANA. (3 March 1999) * APPLe Policy Track * Women in IT BoF * APNG Education Track * APSIRC WG (Security CERTs and FIRSTs in Asia and Pacific) * Regional Internet eXchange Point (IXP) Update BOF * APIA Business Track In it's tradition of empowering the Internet community, APRICOT'99 will again offer unique tutorials that vital to an ISP's operations. These tutorials are presented by an instructor team that is the top %1 of the ISP Community. Through APRICOT, they are offering the ISP and Telco community knowledge, experience, and information that is not available in any other forum. Some of the material is unique - one time only at APRICOT'99. For example, "Tools Used at DIGEX and Verio to Manage Their Networks" by Randy Bush & Ed Kern, is unique in that the internal network techniques and tools of two US Tier 1 ISPs will be shared with any who come to the tutorial. New and existing ISPs/Telcos can learn from the first hand experience gained from two gurus and apply them to their networks. Here is a list of the APRICOT Tutorials: "ISP System Administration" by Barbara L. Dijker & Evi Nemeth "Sendmail Configuration and Operation" (Updated for Sendmail 8.9) by Eric Allman "Internet QoS and Traffic Management" by Geoff Huston "Internet Exchanges: The State of the Art" by Bill Manning "Designing Scaleable IP Networks" by Justin W. Newton "Optical Internetworking" by Marty Schulman "VoIP Standards Efforts and Impacts" by Scott Bradner "Routing Policy Specification Language and Analysis Tools" by David Kessens and Cengiz Alaettinoglu "Deploying VPN's and Secure Extranets" by Bruce Perlmutter "Managing Acceptable Use" by Barbara L. Dijker "Promoting Routability" by Philip Smith "Voice and Telephony Over IP" by Drew Freyman "IPv6: The New Version of the Internet Protocol" by Steve Deering "Tools Used at Digex and Verio to Manage Their Networks" by Randy Bush & Ed Kern "Security in All Seven Layers" by Gene Deutsch "Safeguarding The Business Process: E-Commerce Security" by Dr. Kelly Jones "Broadband Wireless Local Loop" by Dewyane Hendricks "Cable Modem Protocols and Technology" by Mark Laubach "APNIC Member Training: Address Policy & Administration" by Anne Lord & Paul Wilson ---------------------------------------------------------------------------- Note that all room numbers refer to those at the SunTec City - Singapore International Convention and Exhibition Center (SICEC) Date Time Room Event ---------------------------------------------------------------------------- MR 204 APNG I18n/XDSL WG (APNG WG SLAP Sunday, 28 0800-1230 cancelled) Feb MR 205 vacant 1300-1800 MR 209 APNG Disability SWG ENABLE'99 Symposium ---------------------------------------------------------------------------- 0900-1800 MR 208, 209, 8 APRICOT Tutorials 306, 308-314 MR204 APNG AP-ISOC Meeting (unconfirmed) 0800-1230 MR205 APNG APSIRC WG Meeting Monday, 1 Mar MR307 APNG-APTLD Meeting on Internationalisation of the DNS MR 206 APTLD Workshop on DNS Policy 1330-1800 MR 307 APNG General Meeting APNG Chairman's Commission 1830-2130 MR 307 Critical Infrastructure Protection ---------------------------------------------------------------------------- 0900-1800 MR 208, 209, 8 APRICOT Tutorials 306, 308-314 ICANN Board Committee Meetings Tuesday, 2 0800-1800 MR 204-207 (closed door) Mar 0800-1230 MR 307 APTLD Country Reports Track 1330-1800 MR 307 APTLD Membership General Meeting Evening To be APRICOT Opening Reception determined (unplanned) ---------------------------------------------------------------------------- APRICOT Opening and Plenary 0900-0945: MR 201 Keynote: Professor Dave Farber 0945-1300: MR 201 ICANN Open Track Wednesday, 3 1330-1700 MR 205 ICANN Open Track Mar 1330-1700 MR 202,203 2 APRICOT Technical Tracks 1330-1700 MR 208 APRICOT Business Track APRICOT BOF 1800 - 1930 To be - Peering/Exchanges determined - Y2K ---------------------------------------------------------------------------- APRICOT Plenary Keynote 0900-1000 MR 205 Chris Moore Van Jacobson Thursday, 4 1030-1700 MR 202,203 2 APRICOT Technical Tracks Mar 1030-1700 MR 208 APRICOT APNG Educational Track APRICOT BoFs 1800 - 1930 To be - iDNS determined - PGP signing - Women in IT BOF ---------------------------------------------------------------------------- APRICOT Plenary Keynote Ms Esther Dyson, ICANN 0900-1000 MR 208 Mr Leong Kheng Thai, Director General, Telecommunications Friday, 5 Authority of Singapore Mar 1030-1700 MR 208 APRICOT APPLe Policy Track 1030-1700 MR 202, 203 APRICOT Technical Track 1030-1700 MR 204 APNIC Executive Council Meeting Evening To be APRICOT Social Event(unplanned) determined ---------------------------------------------------------------------------- Saturday, 6 0800-1800 MR 202 APNIC Annual General meeting Mar 0800-1800 MR 201 APIA AGM ---------------------------------------------------------------------------- APRICOT Home Page http://www.apng.org/apricot99/index.html ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~ APRICOT (Asia & Pacific Rim Internet Conference on Operational Technologies) Singapore March 1 - 5, 1999 -- The Annual ISP Operations and Business Summit in Asia and Pacific -- http://www.apricot.net ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Traceroutes
by Michael Newbery 01 Feb '99

01 Feb '99

I suspect many of you know of the DIGEX site which allows you to traceroute (and other things) from a web page, but I was recently made aware of a whole page of similar sites, allowing traceroutes from almost anywhere in the world. DIGEX has proved most useful in the past in finding oddball misconfigurations, such as routes that go OUT one way and BACK quite another. <http://www.traceroute.org/> <http://nitrous.digex.net> -- Michael Newbery Technology Manager Saturn Communications Tel: +64-4-939 5102 Mobile:021-642 957 Fax:+64-4-939 5100 "There were no survivors sir. We'll have to find another test market." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

RE: BGP over NZIX -comments from Waikato about Joe Ableys posting on this topic
by Warwick GLENDENNING 27 Jan '99

27 Jan '99

> > On Mon, Jan 25, 1999 at 01:05:11PM +1300, Warwick GLENDENNING wrote: > > We(Waikato) currently still use OSPF on NZIX to collect NZ > routes. And this > > is vital to our traffic metering. A new metering system is > being built to > > use BGP4 to download NZ routes from our traffic provider. > Once this has been > > done, we will be very keen to download NZ routes from major > ISPs on NZIX and > > OSPF can be decommissioned. > > Supposing that a general agreement to move to BGP was made > earlier than > your planned roll-out - presumably as long as Telecom were > able to make > the NZ table available on OSPF to you, your requirements > would be satisifed? > This is true. > There is no particular necessity for us all to speak OSPF, > right? I would > assume that your particular requirements were an issue > between you and your > service provider, and not a general exchange issue. > > Just exploring ideas :) > This is true too. We only provide layer 2 connectivity. ISPs on NZIX don't have to follow some certain routing protocol. It should depend on their interest. But it should be said that Kawaihiko had multiple service providers and NZIX was the place where most of domestic traffic got exchanged. It's why Waikato has used OSPF to collect NZ routes from NZIX. Since Kawaihiko network broke up, we have been trying to build a new way to meter traffic. It will be appreciated very much if Clear can keep OSPF running until we have rolled out the new metering system. Regards Warwick --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1