- NZNOG - lists.nznog.org

Re: Route servers on Citylink (WIX)
by craig＠laptop.iprolink.co.nz 07 Oct '98

07 Oct '98

Hi. > The main aim of the experiment was to consider ways that Citylink > connected organisations with BGP capable routers but without AS numbers > might exchange routing data, so that they can send data directly between > each other, without having to go through one (or several) ISP routers. Don't ICMP redirects handle this just fine? There are legitimate security reasons for disabling these, but has anyone actually disabled them, or asked clients to disable them? I've never really had the feeling that anyone was very concerned about security on Citylink (i could be wrong) anyway. If we have ICMP redirects do we actually need BGP between anyone except ISPs and other multiply connected organisations? Can't we use layer 3 ethernet switches (and possibly monitoring) to greatly improve security in general, lessen the risks with responding to ICMP redirects, and thus address this issue much more easily? -Craig --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

4q98 in-addr.audit notice #2
by bmanning＠ISI.EDU 01 Oct '98

01 Oct '98

Hello, This is the second notice for this audit run. I am sorry for duplicates that you may receive. This is to let you know that I will be starting the next quarter sweep of the in-addr.arpa tree on 03 oct 1998 UTC. Thats about 8 hours from now. I'd appreciate it if you would review http://www.isi.edu/div7/people/bmanning.home/in-addr-audit.html for details. Specifically, I'd appreciate your adding the two referenced probes to your xfernets directives so that a valid audit may proceed. The run may take as long as 600 wall-clock hours. The results will be posted to the web page. If there are any questions, please feel free to contact me. If there are others that you feel should be aware, forward the information on to them and/or me. Thank you for your consideration. --bill (call before you dig) manning --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

WIX interface - full- or half-duplex?
by Joe Abley 27 Sep '98

27 Sep '98

Should we be running our WIX-facing interfaces half- or full-duplex? We are using 10baseT from the CNHL-supplied media converter... Joe -- Joe Abley <jabley(a)clear.co.nz> Tel +64 9 912-4065, Fax +64 9 912-5008 Network Architect, CLEAR Net http://www.clear.net.nz/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

4q98 in-addr.audit notice
by bmanning＠ISI.EDU 24 Sep '98

24 Sep '98

Hello, I am sorry for duplicates that you may receive. This is to let you know that I will be starting the next quarter sweep of the in-addr.arpa tree on 03 oct 1998. I'd appreciate it if you would review http://www.isi.edu/div7/people/bmanning.home/in-addr-audit.html for details. Specifically, I'd appreciate your adding the two referenced probes to your xfernets directives so that a valid audit may proceed. The run may take as long as 600 wall-clock hours. The results will be posted to the web page. A target for this audit run is to attempt to identify DNS version distribution. If there are any questions, please feel free to contact me. If there are others that you feel should be aware, forward the information on to them and/or me. Thank you for your consideration. --bill --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

MX'ing to 127.0.0.1
by Simon Blake 24 Sep '98

24 Sep '98

Hi Folks Over the weekend some fairly disreputable types in the US sent a whole pile of spam out with fake From: lines which resolved to a server I administer in Wellington. Since the hostname in question (city.wellington.net.nz) has no users and doesn't actually receive any legit email, my first response was to MX it to a spare IP# on our network so that I didn't have to deal with the many (~100K) bounce messages. Upon further reflection, in occured to me that an even better technique for avoiding traffic bills would be to MX city.wellington.net.nz to 127.0.0.1, which I did, and all my spam problems have gone away :-). My question - is this a dodgy thing to do, have I missed some critical reason why I shouldn't do this? Cheers Si --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 15

Re: MX'ing to 127.0.0.1
by Michael Newbery 21 Sep '98

21 Sep '98

On Tue, Sep 22, 1998 at 02:11:09PM +1000, Dean Pemberton wrote: > > On Tue, Sep 22, 1998 at 03:56:42PM +1200, Chris Wedgwood wrote: > > > On Tue, Sep 22, 1998 at 03:38:16PM +1200, Joe Abley wrote: > > > > > > > Unless the remote site happens to have a machine on their internal > > > > network, reachable by their mail relay, numbered 10.99.98.97 :) > > > > > > 0 chance of having that. (Statistically speaking, allowing for > > > rounding errors). > > > > Guess we're right off the end of the bell curve then :) How about... > > > > 127.0.0.2? > > 'fraid not - there are devices that use 127.0.0.2 as a valid address. To paraphrase the Hitchiker's Guide: "this is some new meaning of the term 'valid' with which I was hitherto unacquainted" I guess what you REALLY want to do is locate the address used by the spammers and MX that. ;-) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Regional ISP Operations lists
by John Houlker 17 Sep '98

17 Sep '98

Hi all I have had an enquiry about e-mail lists in New Zealand for ISP operations, with the idea of adding these to a compilation of such lists for the region. The results will be posted on NANOG. It seems to me that NZNOG is a good candidate. What do you think? Would you like NZNOG added to such a list? By the way, NZNOG currently allows posting from "non-members". Are there other NZ ISP operations lists that should be included in such a compilation? John --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Re: http://www.wix.net.nz/
by Michael Newbery 11 Sep '98

11 Sep '98

It's Friday---I can tell :-) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

Re: http://www.wix.net.nz/
by Dean Pemberton 10 Sep '98

10 Sep '98

>Is it just our cache, or does http://www.wix.net.nz/ point at a page entitled >"Wellington Tramping and Mountaineering Club"? > > >Joe Nope it's not you - it seems to look that way from here too. I hope it's not a hint that we should all get out more =) Dean (In his new life as a vendor) --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

http://www.wix.net.nz/
by Joe Abley 10 Sep '98

10 Sep '98

Is it just our cache, or does http://www.wix.net.nz/ point at a page entitled "Wellington Tramping and Mountaineering Club"? Joe -- Joe Abley <jabley(a)clear.co.nz> Tel +64 9 912-4065, Fax +64 9 912-5008 Network Architect, CLEAR Net http://www.clear.net.nz/ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2