- NZNOG - lists.nznog.org

IP Hijack out of Indosat Thailand
by Tony Wicks 03 Apr '14

03 Apr '14

Is anyone else seeing their IP ranges hijacked out of Thailand ? http://seclists.org/nanog/2014/Apr/49 http://seclists.org/nanog/2014/Apr/55 You received this email because you are subscribed to BGPmon.net. For more details about these updates please visit: https://portal.bgpmon.net/myalerts.php ==================================================================== Possible Prefix Hijack (Code: 10) ==================================================================== Your prefix: 103.9.40.0/22: Prefix Description: FLIP-AS-AP Update time: 2014-04-02 20:29 (UTC) Detected by #peers: 1 Detected prefix: 103.9.40.0/22 Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network Provider,ID) Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of Thailand(CAT),TH) ASpath: 18356 38794 4651 4761 ==================================================================== Possible Prefix Hijack (Code: 10) ==================================================================== Your prefix: 103.224.128.0/22: Prefix Description: Flip Update time: 2014-04-02 19:42 (UTC) Detected by #peers: 1 Detected prefix: 103.224.128.0/22 Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network Provider,ID) Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of Thailand(CAT),TH) ASpath: 18356 9931 4651 4761

8 8

OM4 MMF
by Jed Laundry 30 Mar '14

30 Mar '14

Hi folks, Excuse my ignorance, I try to avoid orange/aqua cables... We recently had a rack of servers + SAN installed with 8Gb FC, and long story short, the vendor will only supply & install 5m OM4 cables. *grumble grumble FCoE grumble 2m patch grumble* AFAICT, OM4 is to OM3 what G.657A2 is to G.652 - completely interchangeable, especially for such a short run, just don't expect to wrap it around a pencil. And so I can swap out these stupidly long cables with properly measured OM3. Is this sensible? Thanks, Jed. Sent from a small screen.

3 3

slides for nznog 2014
by Joel van Velden 27 Mar '14

27 Mar '14

Hi list I seem to have lost the URL (someone's owncloud?) for where nznog '14 slides were posted to. Does anyone still have it? Regards, Joel van Velden

2 1

DNSSEC in .au
by Adam King 25 Mar '14

25 Mar '14

auDA has announced it will be introducing DNSSEC into the .au domain space in an experimental capacity. Deployment on production servers will commence during April and will be trialled for 4 months. The .au DS records will_not be added to the root zone during this period. Operators should_not create or implement trust anchors for .au in their production environments during this experimental phase. A mailing list has been created for all future announcements related to DNSSEC in .au, if you wish to subscribe to this mailing list please visit http://www.lists.auda.org.au/mailman/listinfo/dnssec-announce For further information about the implementation of DNSSEC in .au please see http://www.auda.org.au/industry-information/au-domains/dnssec/. Kind Regards, Adam King | CTO .au Domain Administration Ltd T: +61 3 8341 4111 | F: +61 3 8341 4112 E: adam.king(a)auda.org.au | W:www.auda.org.au Twitter: @auda | Blog: www.auda.org.au/blog/ auDA - Australia's Domain Name Administrator Important Notice This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately.

2 1

Home Grown RPKI Validators
by Bill Walker 25 Mar '14

25 Mar '14

Hi All, Now I have solved my ROA issue, (Thanks Dean & Michael) I'd like to look at building an RPKI validator, does anyone have any experience with these? Thanks, Bill

1 0

12ish U cabinets in Wellington?
by Michael Fincham 23 Mar '14

23 Mar '14

Hi all, Anyone have a 12ish U cabinet in Wellington they'd like to be rid of? Will swap for beer or small amounts of money. Would prefer one with solid doors on front / back. I can come collect if it it'll fit in a taxi :) -- Michael

1 0

Re: [nznog] NZNOG Digest, Vol 135, Issue 16
by Jonathan Spence 23 Mar '14

23 Mar '14

Remember some ISPs could be at national peering locations e.g. iinet peer ate APE do they not? If its your intention to save on traffic costs the BGP route is probably OK but using a proper service is more desirable overall. Jonathan Spence Chief Executive Officer Fixed: +64 9 9510448 Mobile: +64211055634 ---------------------------------------- From: nznog-request(a)list.waikato.ac.nz Sent: Monday, March 24, 2014 12:00 PM To: nznog(a)list.waikato.ac.nz Subject: NZNOG Digest, Vol 135, Issue 16 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. List of NZ IP addresses? (Clark Mills) 2. Re: List of NZ IP addresses? (Tony Wicks) 3. Re: List of NZ IP addresses? (Clark Mills) 4. Re: List of NZ IP addresses? (Peter Lambrechtsen) 5. Re: List of NZ IP addresses? (Bill Walker) 6. Re: List of NZ IP addresses? (Damian Kissick) 7. Re: List of NZ IP addresses? (Scott Howard) 8. Re: List of NZ IP addresses? (Rob McDonald) 9. Re: List of NZ IP addresses? (Gareth Davies) 10. Re: List of NZ IP addresses? (Lindsay Hill) 11. Re: List of NZ IP addresses? (Richard Naylor) ---------------------------------------------------------------------- Message: 1 Date: Mon, 24 Mar 2014 08:51:30 +1300 From: Clark Mills <c.mills(a)auckland.ac.nz> To: nznog(a)list.waikato.ac.nz Subject: [nznog] List of NZ IP addresses? Message-ID: <532F3B42.90609(a)auckland.ac.nz> Content-Type: text/plain; charset="utf-8"; Format="flowed" Hi all. I realise that it's a constantly changing list but does anyone have a list on NZ IPs? Why: We're trying to set up a website to be accessible in NZ only. Knowing what I know then firewalling is the tool (a man with a hammer...) but I need to routinely source a more recent list. Any suggestions or hints appreciated. Cheers... Clark

1 0

Re: [nznog] List of NZ IP addresses?
by Richard Naylor 23 Mar '14

23 Mar '14

At 09:50 a.m. 24/03/2014, you wrote: >2 votes for maxmind. (or bgp feed with communities or something from >your ISP) it depends if you are trying to firewall for cost reasons, >eg: I don't want to serve my HD content to international viewers >because it will bankrupt me. Or I don't want to serve my >international content to international viewers because it would >breach a license agreement with the rights holder. The tier-1 CDNs all offer more than enough filtering to do very decent geo-fencing. So its not hard to limit to "NZ-only" or "everywhere but not nz". Sometimes we use that as the second line of defence. Rights agreements often require 2 levels or more.

1 0

List of NZ IP addresses?
by Clark Mills 23 Mar '14

23 Mar '14

Hi all. I realise that it's a constantly changing list but does anyone have a list on NZ IPs? Why: We're trying to set up a website to be accessible in NZ only. Knowing what I know then firewalling is the tool (a man with a hammer...) but I need to routinely source a more recent list. Any suggestions or hints appreciated. Cheers... Clark

9 9

RPKI and ROA
by Bill Walker 19 Mar '14

19 Mar '14

Hi All, Hoping someone can help. I am in the middle of a project to build 4 PoP's in Chicago, London, Sydney and Mumbai. As part of this I have been given the role of creating all the necessary Route objects etc. Our address space is from ARIN, but our ASN's are from RIPE, APNIC & ARIN. I have created as-set, aut-num and route objects in RADb to enable us to manage them from a single point. However I would like to setup ROA records for these route objects. I have setup RPKI with ARIN and created our first ROA object. Onto my question, am I likely to have operational issues if the route objects are in RADb and the ROA with ARIN? TIA, Bill

4 7