ICONZ-Webvisions (NZ) to close Open DNS Resolvers
Hi folks ICONZ-Webvisions (the entity formerly known simply as ICONZ in NZ) will be blocking external access to our recursive DNS servers to non-customer subnets on the evening of 6 March 2014. In the knowledge that there may well be former customers or third-parties who have hard-coded the IP's of our DNS servers into their configs (or their customer configs) I'm giving notice now; the following IP's will cease to provide DNS resolution to clients outside of our network space, at that time: 210.48.65.1 210.48.65.2 210.48.66.1 210.48.66.2 Customers with concerns about this change are invited to contact our Customer Care team on 0800 843 638 or via support.nz(a)iconz-webvisions.commailto:support.nz(a)iconz-webvisions.com. Regards Mark. -- Mark Foster Technical Services Manager - Australia & New Zealand [iconz-webvisions-logo-png] www.iconz-webvisions.comhttps://webmail.iconz.net/owa/redir.aspx?C=ToykmhkSsEaPr3XJN6nrf-rRV-b9iM8InRzDmoW5AjsdGe4M3ykdjrq5s9ndniZ7MXkBjPyzDCg.&URL=http%3a%2f%2fwww.iconz-webvisions.com%2f ICONZ-Webvisions, ICONZ House, 60 Airedale Street, Auckland 1010, New Zealand
I recommend this be posted again on the 6th, and relayed via Twitter. In my experience there are a lot of end users out there using 210.48.65.1. Perhaps the artist formerly known as Iconz could give us some stats on how many... On Thu, Feb 27, 2014 at 1:03 PM, Mark Foster < mark.foster(a)iconz-webvisions.com> wrote:
Hi folks
ICONZ-Webvisions (the entity formerly known simply as ICONZ in NZ) will be blocking external access to our recursive DNS servers to non-customer subnets on the evening of 6 March 2014.
In the knowledge that there may well be former customers or third-parties who have hard-coded the IP's of our DNS servers into their configs (or their customer configs) I'm giving notice now; the following IP's will cease to provide DNS resolution to clients outside of our network space, at that time:
210.48.65.1
210.48.65.2
210.48.66.1
210.48.66.2
Customers with concerns about this change are invited to contact our Customer Care team on 0800 843 638 or via support.nz(a)iconz-webvisions.com.
Regards
Mark.
*-- *
*Mark Foster*
Technical Services Manager - Australia & New Zealand
[image: iconz-webvisions-logo-png]
*www.iconz-webvisions.com*https://webmail.iconz.net/owa/redir.aspx?C=ToykmhkSsEaPr3XJN6nrf-rRV-b9iM8InRzDmoW5AjsdGe4M3ykdjrq5s9ndniZ7MXkBjPyzDCg.&URL=http%3a%2f%2fwww.iconz-webvisions.com%2f
ICONZ-Webvisions, ICONZ House, 60 Airedale Street,
Auckland 1010, New Zealand
_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
Thanks Jonathan. Comments very much taken on-board - it's on our Planned Maintenance page[1] and was tweeted when published - I've asked for another tweet today.
The work is scheduled for 10pm tonight.
We did some analysis of the queries we're seeing on those Resolvers over ~24 hours; about 5 million queries against the two DNS servers represented by the originally cited IP addresses, originate from outside our network;
Of these there were around 350,000 unique IP addresses - of these around 1,600 appear to obviously be from other NZ based networks.
A good cross-section of source IP's were checked for source network information. Here's some numbers; I only asked for those who issued 5 or more queries across the sample period to be classified by external service provider, and narrowed it to known NZ networks:
+--------+---------------+-----------------+--------------------+
| amount | firstip | lastip | provider |
+--------+---------------+-----------------+--------------------+
| 259 | 122.60.0.0 | 122.63.255.255 | BBA-TELECOM-NZ |
| 162 | 49.224.0.0 | 49.227.255.255 | VODAFONE-AP |
| 161 | 122.56.0.0 | 122.57.255.255 | NZTELECOM |
| 126 | 115.188.0.0 | 115.189.255.255 | BBA-TELECOM-NZ |
| 77 | 118.148.0.0 | 118.149.255.255 | TWOdegrees-nz |
| 62 | 118.92.0.0 | 118.93.255.255 | TIG-NZ-1 |
| 59 | 125.236.0.0 | 125.237.255.255 | NZTELECOM |
| 40 | 121.72.0.0 | 121.73.255.255 | TCL-AKLDDSL-NZ |
| 39 | 125.238.0.0 | 125.239.255.255 | BBA-TELECOM-NZ |
| 38 | 122.58.0.0 | 122.59.255.255 | FIPD-XTRA-NZ |
| 35 | 114.134.160.0 | 114.134.175.255 | NZTECHNOLOGY-NZ |
| 31 | 121.74.0.0 | 121.74.255.255 | TCL-CHCHUBS-NZ |
| 30 | 121.99.0.0 | 121.99.255.255 | ODYSSEY-NET |
| 28 | 60.234.0.0 | 60.234.255.255 | ORCONNET |
| 26 | 111.69.0.0 | 111.69.255.255 | SNAPNET |
| 26 | 58.28.0.0 | 58.28.255.255 | WXNZ |
| 25 | 114.23.0.0 | 114.23.255.255 | VOYAGERNET-NZ |
| 25 | 101.98.0.0 | 101.98.255.255 | CALLPLUS-NZ |
| 21 | 222.154.0.0 | 222.154.255.255 | FIPD-XTRA-NZ |
| 21 | 219.89.0.0 | 219.89.255.255 | TIS-NZ |
| 20 | 203.97.0.0 | 203.97.255.255 | VODAFONE-AP |
| 19 | 119.224.0.0 | 119.224.127.255 | CALLPLUS-NZ |
| 17 | 121.75.0.0 | 121.75.255.255 | VODAFONE-AP |
| 17 | 121.98.0.0 | 121.98.255.255 | ORCONNET |
| 16 | 27.252.0.0 | 27.252.255.255 | VODAFONE-A |
| 15 | 118.90.0.0 | 118.90.255.255 | WXNZ |
| 14 | 49.50.240.0 | 49.50.255.255 | HDNETNZ |
| 13 | 202.3.80.0 | 202.3.95.255 | DIGINET-NZ |
| 12 | 222.155.0.0 | 222.155.255.255 | FIPD-XTRA-NZ |
| 11 | 219.88.0.0 | 219.88.255.255 | TIS-NZ |
| 10 | 203.173.192.0 | 203.173.255.255 | VFNZ-DSL-203-173-C |
| 9 | 210.246.0.0 | 210.246.63.255 | TELSTRACLEAR-NZ |
| 9 | 116.251.128.0 | 116.251.191.255 | TRUSTPOWERLTD-NZ |
| 9 | 101.100.0.0 | 101.100.255.255 | VECTOR |
| 9 | 203.118.128.0 | 203.118.191.255 | TIG-NZ-6 |
| 8 | 124.197.0.0 | 124.197.63.255 | CALLPLUS-NZ |
| 8 | 124.157.96.0 | 124.157.127.255 | BCLNET-NZ |
| 7 | 203.152.96.0 | 203.152.127.255 | COMPASSCOM-NZ |
| 7 | 203.96.0.0 | 203.96.127.255 | TELECOM-NZ |
| 6 | 210.86.0.0 | 210.86.127.255 | NZTELECOM-NZ |
| 6 | 124.248.128.0 | 124.248.143.255 | NETSMART-NZ |
| 6 | 222.152.0.0 | 222.152.255.255 | FIPD-XTRA-NZ |
| 5 | 123.255.0.0 | 123.255.63.255 | SNAPNET |
| 5 | 119.224.128.0 | 119.224.143.255 | CALLPLUS-NZ |
| 4 | 203.167.128.0 | 203.167.191.255 | |
| 4 | 203.167.192.0 | 203.167.223.255 | |
| 4 | 210.54.0.0 | 210.54.127.255 | |
| 4 | 14.1.64.0 | 14.1.95.255 | |
| 4 | 124.6.192.0 | 124.6.223.255 | |
| 4 | 210.54.128.0 | 210.54.255.255 | |
| 3 | 49.50.192.0 | 49.50.223.255 | |
| 3 | 222.153.0.0 | 222.153.255.255 | |
| 3 | 121.79.192.0 | 121.79.223.255 | |
| 3 | 14.1.32.0 | 14.1.63.255 | |
| 3 | 203.79.64.0 | 203.79.95.255 | |
| 3 | 202.68.80.0 | 202.68.95.255 | |
| 3 | 203.86.192.0 | 203.86.207.255 | |
| 3 | 116.89.224.0 | 116.89.239.255 | |
| 3 | 58.84.224.0 | 58.84.239.255 | |
| 3 | 203.211.64.0 | 203.211.79.255 | |
| 3 | 202.180.96.0 | 202.180.127.255 | |
| 3 | 203.171.32.0 | 203.171.47.255 | |
| 3 | 203.109.128.0 | 203.109.191.255 | |
| 2 | 124.157.64.0 | 124.157.95.255 | |
| 2 | 203.171.48.0 | 203.171.63.255 | |
| 2 | 203.109.192.0 | 203.109.223.255 | |
| 2 | 203.173.128.0 | 203.173.191.255 | |
| 2 | 112.109.64.0 | 112.109.79.255 | |
| 2 | 203.109.224.0 | 203.109.255.255 | |
| 2 | 218.101.0.0 | 218.101.63.255 | |
| 2 | 202.78.128.0 | 202.78.159.255 | |
| 2 | 114.134.0.0 | 114.134.15.255 | |
| 2 | 203.114.160.0 | 203.114.191.255 | |
| 2 | 210.55.0.0 | 210.55.63.255 | |
| 2 | 182.48.128.0 | 182.48.159.255 | |
| 2 | 203.79.96.0 | 203.79.111.255 | |
| 1 | 210.55.224.0 | 210.55.255.255 | |
| 1 | 202.0.32.0 | 202.0.63.255 | |
| 1 | 130.217.0.0 | 130.217.255.255 | |
| 1 | 203.79.112.0 | 203.79.127.255 | |
| 1 | 202.56.32.0 | 202.56.47.255 | |
| 1 | 202.126.192.0 | 202.126.207.255 | |
| 1 | 202.169.192.0 | 202.169.223.255 | |
| 1 | 203.114.128.0 | 203.114.159.255 | |
| 1 | 203.184.0.0 | 203.184.63.255 | |
| 1 | 124.155.224.0 | 124.155.239.255 | |
| 1 | 202.174.176.0 | 202.174.191.255 | |
| 1 | 203.167.224.0 | 203.167.255.255 | |
| 1 | 180.189.192.0 | 180.189.223.255 | |
| 1 | 202.89.128.0 | 202.89.159.255 | |
| 1 | 114.141.112.0 | 114.141.127.255 | |
| 1 | 203.96.144.0 | 203.96.159.255 | |
+--------+---------------+-----------------+--------------------+
This is a very fast analysis but it should serve to give people some idea of who might be struggling with internet services after tonight.
Cheers
Mark.
[1] http://iconz-webvisions.com/en/support/outages/new-zealand
--
Mark Foster
Technical Services Manager - Australia & New Zealand
[iconz-webvisions-logo-png]
www.iconz-webvisions.comhttps://webmail.iconz.net/owa/redir.aspx?C=ToykmhkSsEaPr3XJN6nrf-rRV-b9iM8InRzDmoW5AjsdGe4M3ykdjrq5s9ndniZ7MXkBjPyzDCg.&URL=http%3a%2f%2fwww.iconz-webvisions.com%2f
ICONZ-Webvisions, ICONZ House, 60 Airedale Street,
Auckland 1010, New Zealand
From: Jonathan Brewer [mailto:jon.brewer(a)gmail.com]
Sent: Saturday, 1 March 2014 12:25 p.m.
To: Mark Foster
Cc: NZNOG
Subject: Re: [nznog] ICONZ-Webvisions (NZ) to close Open DNS Resolvers
I recommend this be posted again on the 6th, and relayed via Twitter.
In my experience there are a lot of end users out there using 210.48.65.1.
Perhaps the artist formerly known as Iconz could give us some stats on how many...
On Thu, Feb 27, 2014 at 1:03 PM, Mark Foster
participants (2)
-
Jonathan Brewer -
Mark Foster