Hear hear Barry! Telecom have gone and started something here. De-peering is definitely worse than being anal about your DNS, but I think it stinks. The Internet in NZ has lost a lot of it's former free love. :P Us down here in Christchurch pay an almighty sum to a handful of providers to get bandwidth down here, and we don't put these kinds of restrictions in place. In Auckland where bandwidth flows like water, they really must be desperate to save some traffic and hardware costs. I guess the customers don't see the backhanded business that goes on in the technical world, so nobody is loosing face over it. Perhaps Juha could write it up. ;) Erin Erin Salmon Managing Director Unleash Networks Ltd Mobile: 021 877 913 Landline: 03 365 1273 www.unleash.co.nz -----Original Message----- From: Barry Murphy [mailto:barry(a)unix.co.nz] Sent: 4 November 2005 7:19 p.m. To: Mark Seward; nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Inspire Net name servers And everyone follows suit (not only inspire, but I hear telstra clear's also doing it), what's the point! ISP's worried a little DNS traffic is costing them money, maybe hardware doesn't cope; well it has in the past! What's this country coming to, first de-peering, now dns restrictions, it would appear the internet for NZ is getting worse and worse as the years go on! Barry ----- Original Message ----- From: "Mark Seward" To: Sent: Friday, November 04, 2005 6:05 PM Subject: [nznog] Inspire Net name servers

ns1.inspire.net.nz (203.114.128.1), and ns2.inspire.net.nz (203.114.128.2)

now accept recursive and cached queries from Inspire Net customers only.

Queries for domains that ns1 and ns2 are authoritative for are unaffected.

Mark Seward Inspire Net Ltd.

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

Erin Salmon - Unleash Computers Ltd wrote:

Hear hear Barry!

Telecom have gone and started something here. De-peering is definitely worse than being anal about your DNS, but I think it stinks. The Internet in NZ has lost a lot of it's former free love. :P Us down here in Christchurch pay an almighty sum to a handful of providers to get bandwidth down here, and we don't put these kinds of restrictions in place. In Auckland where bandwidth flows like water, they really must be desperate to save some traffic and hardware costs.

In Auckland were bandwidth flows... like what?

I guess the customers don't see the backhanded business that goes on in the technical world, so nobody is loosing face over it. Perhaps Juha could write it up. ;)

No no no... I don't think it'll matter much in the long run. This might have had some bearing on Inspire's decision: http://www.theregister.co.uk/2005/10/24/dns_security_survey/ -- Juha

here are a few more interesting Internet security-related papers, first one being on DNS: Perils of Transitive Trust in the Domain Name System Venugopalan Ramasubramanian and Emin Gun Sirer http://www.imconf.net/imc-2005/papers/imc05efiles/ramasubramanian/ramasubram... Exploiting Underlying Structure for Detailed Reconstruction of an Internet-scale Event Abhishek Kumar, Vern Paxson and Nicholas Weaver http://www.imconf.net/imc-2005/papers/imc05efiles/kumar/kumar.pdf Building a Time Machine for Efficient Recording and Retrieval of High-Volume Network Traffic Stefan Kornexl, Vern Paxson, Holger Dreger, Anja Feldmann, and Robin Sommer http://www.imconf.net/imc-2005/papers/imc05efiles/kornexl/kornexl.pdf Flooding Attacks by Exploiting Persistent Forwarding Loops Jianhong Xia, Lixin Gao, and Teng Fei http://www.imconf.net/imc-2005/papers/imc05efiles/xia/xia.pdf More papers from same conference at: http://www.imconf.net/imc-2005/papers/program.html