Thanks Jonathan. Comments very much taken on-board – it’s on our Planned Maintenance page[1] and was tweeted when published – I’ve asked for another tweet today.

The work is scheduled for 10pm tonight.

We did some analysis of the queries we’re seeing on those Resolvers over ~24 hours; about 5 million queries against the two DNS servers represented by the originally cited IP addresses, originate from outside our network;

Of these there were around 350,000 unique IP addresses – of these around 1,600 appear to obviously be from other NZ based networks.

A good cross-section of source IP’s were checked for source network information. Here’s some numbers; I only asked for those who issued 5 or more queries across the sample period to be classified by external service provider, and narrowed it to known NZ networks:

+--------+---------------+-----------------+--------------------+

+--------+---------------+-----------------+--------------------+

| 259 | 122.60.0.0 | 122.63.255.255 | BBA-TELECOM-NZ |

| 162 | 49.224.0.0 | 49.227.255.255 | VODAFONE-AP |

| 161 | 122.56.0.0 | 122.57.255.255 | NZTELECOM |

| 126 | 115.188.0.0 | 115.189.255.255 | BBA-TELECOM-NZ |

| 77 | 118.148.0.0 | 118.149.255.255 | TWOdegrees-nz |

| 62 | 118.92.0.0 | 118.93.255.255 | TIG-NZ-1 |

| 59 | 125.236.0.0 | 125.237.255.255 | NZTELECOM |

| 40 | 121.72.0.0 | 121.73.255.255 | TCL-AKLDDSL-NZ |

| 39 | 125.238.0.0 | 125.239.255.255 | BBA-TELECOM-NZ |

| 38 | 122.58.0.0 | 122.59.255.255 | FIPD-XTRA-NZ |

| 35 | 114.134.160.0 | 114.134.175.255 | NZTECHNOLOGY-NZ |

| 31 | 121.74.0.0 | 121.74.255.255 | TCL-CHCHUBS-NZ |

| 30 | 121.99.0.0 | 121.99.255.255 | ODYSSEY-NET |

| 28 | 60.234.0.0 | 60.234.255.255 | ORCONNET |

| 26 | 111.69.0.0 | 111.69.255.255 | SNAPNET |

| 26 | 58.28.0.0 | 58.28.255.255 | WXNZ |

| 25 | 114.23.0.0 | 114.23.255.255 | VOYAGERNET-NZ |

| 25 | 101.98.0.0 | 101.98.255.255 | CALLPLUS-NZ |

| 21 | 222.154.0.0 | 222.154.255.255 | FIPD-XTRA-NZ |

| 21 | 219.89.0.0 | 219.89.255.255 | TIS-NZ |

| 20 | 203.97.0.0 | 203.97.255.255 | VODAFONE-AP |

| 19 | 119.224.0.0 | 119.224.127.255 | CALLPLUS-NZ |

| 17 | 121.75.0.0 | 121.75.255.255 | VODAFONE-AP |

| 17 | 121.98.0.0 | 121.98.255.255 | ORCONNET |

| 16 | 27.252.0.0 | 27.252.255.255 | VODAFONE-A |

| 15 | 118.90.0.0 | 118.90.255.255 | WXNZ |

| 14 | 49.50.240.0 | 49.50.255.255 | HDNETNZ |

| 13 | 202.3.80.0 | 202.3.95.255 | DIGINET-NZ |

| 12 | 222.155.0.0 | 222.155.255.255 | FIPD-XTRA-NZ |

| 11 | 219.88.0.0 | 219.88.255.255 | TIS-NZ |

| 10 | 203.173.192.0 | 203.173.255.255 | VFNZ-DSL-203-173-C |

| 9 | 210.246.0.0 | 210.246.63.255 | TELSTRACLEAR-NZ |

| 9 | 116.251.128.0 | 116.251.191.255 | TRUSTPOWERLTD-NZ |

| 9 | 101.100.0.0 | 101.100.255.255 | VECTOR |

| 9 | 203.118.128.0 | 203.118.191.255 | TIG-NZ-6 |

| 8 | 124.197.0.0 | 124.197.63.255 | CALLPLUS-NZ |

| 8 | 124.157.96.0 | 124.157.127.255 | BCLNET-NZ |

| 7 | 203.152.96.0 | 203.152.127.255 | COMPASSCOM-NZ |

| 7 | 203.96.0.0 | 203.96.127.255 | TELECOM-NZ |

| 6 | 210.86.0.0 | 210.86.127.255 | NZTELECOM-NZ |

| 6 | 124.248.128.0 | 124.248.143.255 | NETSMART-NZ |

| 6 | 222.152.0.0 | 222.152.255.255 | FIPD-XTRA-NZ |

| 5 | 123.255.0.0 | 123.255.63.255 | SNAPNET |

| 5 | 119.224.128.0 | 119.224.143.255 | CALLPLUS-NZ |

| 4 | 203.167.128.0 | 203.167.191.255 | |

| 4 | 203.167.192.0 | 203.167.223.255 | |

| 4 | 210.54.0.0 | 210.54.127.255 | |

| 4 | 14.1.64.0 | 14.1.95.255 | |

| 4 | 124.6.192.0 | 124.6.223.255 | |

| 4 | 210.54.128.0 | 210.54.255.255 | |

| 3 | 49.50.192.0 | 49.50.223.255 | |

| 3 | 222.153.0.0 | 222.153.255.255 | |

| 3 | 121.79.192.0 | 121.79.223.255 | |

| 3 | 14.1.32.0 | 14.1.63.255 | |

| 3 | 203.79.64.0 | 203.79.95.255 | |

| 3 | 202.68.80.0 | 202.68.95.255 | |

| 3 | 203.86.192.0 | 203.86.207.255 | |

| 3 | 116.89.224.0 | 116.89.239.255 | |

| 3 | 58.84.224.0 | 58.84.239.255 | |

| 3 | 203.211.64.0 | 203.211.79.255 | |

| 3 | 202.180.96.0 | 202.180.127.255 | |

| 3 | 203.171.32.0 | 203.171.47.255 | |

| 3 | 203.109.128.0 | 203.109.191.255 | |

| 2 | 124.157.64.0 | 124.157.95.255 | |

| 2 | 203.171.48.0 | 203.171.63.255 | |

| 2 | 203.109.192.0 | 203.109.223.255 | |

| 2 | 203.173.128.0 | 203.173.191.255 | |

| 2 | 112.109.64.0 | 112.109.79.255 | |

| 2 | 203.109.224.0 | 203.109.255.255 | |

| 2 | 218.101.0.0 | 218.101.63.255 | |

| 2 | 202.78.128.0 | 202.78.159.255 | |

| 2 | 114.134.0.0 | 114.134.15.255 | |

| 2 | 203.114.160.0 | 203.114.191.255 | |

| 2 | 210.55.0.0 | 210.55.63.255 | |

| 2 | 182.48.128.0 | 182.48.159.255 | |

| 2 | 203.79.96.0 | 203.79.111.255 | |

| 1 | 210.55.224.0 | 210.55.255.255 | |

| 1 | 202.0.32.0 | 202.0.63.255 | |

| 1 | 130.217.0.0 | 130.217.255.255 | |

| 1 | 203.79.112.0 | 203.79.127.255 | |

| 1 | 202.56.32.0 | 202.56.47.255 | |

| 1 | 202.126.192.0 | 202.126.207.255 | |

| 1 | 202.169.192.0 | 202.169.223.255 | |

| 1 | 203.114.128.0 | 203.114.159.255 | |

| 1 | 203.184.0.0 | 203.184.63.255 | |

| 1 | 124.155.224.0 | 124.155.239.255 | |

| 1 | 202.174.176.0 | 202.174.191.255 | |

| 1 | 203.167.224.0 | 203.167.255.255 | |

| 1 | 180.189.192.0 | 180.189.223.255 | |

| 1 | 202.89.128.0 | 202.89.159.255 | |

| 1 | 114.141.112.0 | 114.141.127.255 | |

| 1 | 203.96.144.0 | 203.96.159.255 | |

+--------+---------------+-----------------+--------------------+

This is a very fast analysis but it should serve to give people some idea of who might be struggling with internet services after tonight.

Cheers

Mark.

[1] http://iconz-webvisions.com/en/support/outages/new-zealand

Mark Foster

Technical Services Manager – Australia & New Zealand

www.iconz-webvisions.com

ICONZ-Webvisions, ICONZ House, 60 Airedale Street,

Auckland 1010, New Zealand

From: Jonathan Brewer [mailto:jon.brewer@gmail.com]
Sent: Saturday, 1 March 2014 12:25 p.m.
To: Mark Foster
Cc: NZNOG
Subject: Re: [nznog] ICONZ-Webvisions (NZ) to close Open DNS Resolvers

I recommend this be posted again on the 6th, and relayed via Twitter.

In my experience there are a lot of end users out there using 210.48.65.1.

Perhaps the artist formerly known as Iconz could give us some stats on how many...

On Thu, Feb 27, 2014 at 1:03 PM, Mark Foster <mark.foster@iconz-webvisions.com> wrote:

Hi folks

ICONZ-Webvisions (the entity formerly known simply as ICONZ in NZ) will be blocking external access to our recursive DNS servers to non-customer subnets on the evening of 6 March 2014.

In the knowledge that there may well be former customers or third-parties who have hard-coded the IP’s of our DNS servers into their configs (or their customer configs) I’m giving notice now; the following IP’s will cease to provide DNS resolution to clients outside of our network space, at that time:

210.48.65.1

210.48.65.2

210.48.66.1

210.48.66.2

Customers with concerns about this change are invited to contact our Customer Care team on 0800 843 638 or via support.nz@iconz-webvisions.com.

Regards

Mark.

Mark Foster

Technical Services Manager – Australia & New Zealand

www.iconz-webvisions.com

ICONZ-Webvisions, ICONZ House, 60 Airedale Street,

Auckland 1010, New Zealand

_______________________________________________
NZNOG mailing list
NZNOG@list.waikato.ac.nz
http://list.waikato.ac.nz/mailman/listinfo/nznog