Jayne and I have thought about this and decided that it's really time
Hamilton got their act together on this one. Various people/groups
have talked about this but no-one has done this yet (that I'm aware
of) and we'd like to see this kick off.
Since many of you from Hamilton probably met each other at NZNOG
(shame I couldn't make it) I thought it'd be a good time to mention it
while you still remember each other.
If you're interested please email me off list. Also can whoever looks
after the domain/server (Jamie Baddeley?) contact me to see how we can
put Hamilton on.
NB I'm not going to make token reference to beer as think networking
(in the social sense) is quite a relevant topic. And more than token
amount of beer might get consumed anyway!
WAND Network Research Group
Just wondering if anyone else has noticed elevated ICMP levels. I'm seeing
a lot of what looks like ICMP from infected machines, both coming into our
network and leaving it. Always with the same sequence number and going to
and from many different machines:
13:41:45.682360 IP 18.104.22.168 > 22.214.171.124: icmp 72: echo request
13:41:45.682395 IP 126.96.36.199 > 188.8.131.52: icmp 72: echo request
13:41:45.684098 IP 184.108.40.206 > 220.127.116.11: icmp 72: echo request
13:41:45.684185 IP 18.104.22.168 > 22.214.171.124: icmp 72: echo request
13:45:23.759952 IP 126.96.36.199 > 188.8.131.52: icmp 41: echo request
13:45:23.764000 IP 184.108.40.206 > 220.127.116.11: icmp 41: echo request
13:45:23.764046 IP 18.104.22.168 > 22.214.171.124: icmp 41: echo request
13:45:23.764426 IP 126.96.36.199 > 188.8.131.52: icmp 41: echo request
13:45:23.766189 IP 184.108.40.206 > 220.127.116.11: icmp 41: echo request
Seems to be the same sequence number for the same destination host. There
are hundreds/thousands of these every second and seems to be ongoing.
Just wondering if it is just us.
SMTP error from remote mail server after RCPT TO:<@nzoss.org.nz>:
host mx.blakjak.net [18.104.22.168]: 554 Service unavailable;
Client host [NZ IP address] blocked using rbl.blakjak.net; Mail from
China and Korea is not welcome here due to high SPAM volumes. Visit
rbl.blakjak.net for information.
It seems the Blakjak RBL needs tweaking if the NZOSS is to accept email
from certain parts of the NZ Intarweb. Thanks.
www.geekzone.co.nz/juha | Skype: juha_saarinen
www.computerworld.co.nz | MSN: juha_saarinen(a)msn.com
Voice: +64 9 950 3023 Subtle recursive jokes in .sigs are not funny.
Found in Miro hall on Saturday morning. A black zip up Jersey, size "M"
left in the common room. Contact me directly to arrange return.
Simon J. Lyall | Very Busy | Web: http://www.darkmere.gen.nz/
"To stay awake all night adds a day to your life" - Stilgar | eMT.