NZNOG April 2017

nznog@list.waikato.ac.nz

18 participants
6 discussions

Anyone interested in donating space / connectivity / kit for a proper NZ Debian mirror?

by Michael Fincham

Hi everyone, Citylink's official Debian mirror (ftp.nz.debian.org) is apparently again broken (not even listening on port 80 from where I'm sitting). Would anyone be seriously interested in donating rack space, national transit, or hardware to the cause of another official Debian mirror for NZ? Having reliable and cheap access to free software projects like Debian is critically important, and having a second official mirror seems like a no-brainer to me. I am very happy to donate my time to admin and monitor any equipment provided for this, and to liase with the Debian project as required. Perhaps Citylink could give us some insight in to the traffic levels their existing mirrors see? -- Michael Fincham

2 years, 9 months

Alcatel IPv6 PPPoE

by Pieter De Wit

Good Morning List, I was wondering if anyone out here (there :)) has a working config for an Alcatel 7750 to give out IPv6 to subscribers. We would like to allocate /112's as a link net between the CPE and the BNG. We then want to route a /64 or /48 over this link net. All of this is configured in Radius. The link-nets are configure using the "wan-host" option under the subscriber interface. The /64 or /48 subnets is part of a /36 configured as the "pd" option. From what I was reading, it appears as if the link-nets needs to be /64...surely not ? Cheers, Pieter

3 years, 11 months

Russian-controlled telecom hijacks financial services’ Internet traffic

by Michael Fincham

Morning all, For those who didn't spot this yet: <https://arstechnica.com/security/2017/04/russian-controlled-telecom-hijacks…> "On Wednesday, large chunks of network traffic belonging to MasterCard, Visa, and more than two dozen other financial services companies were briefly routed through a Russian government-controlled telecom under unexplained circumstances that renew lingering questions about the trust and reliability of some of the most sensitive Internet communications." -- Michael

3 years, 11 months

OOB - Vocus DC, 7A Parkhead Pl, Albany

by Bruce Forster

Hi Noggers, Looking for a 2/10mb OOB link in Vocus DC, 7A Parkhead Pl, Albany Can someone please email me off list with some pricing? -- Regards, Bruce

3 years, 11 months

Re: [nznog] Alcatel IPv6 PPPoE

by JORDI PALET MARTINEZ

Sorry, wrong paste … https://www.sinog.si/docs/draft-IPv6pd-BCOP-v1.pdf Regards, Jordi -----Mensaje original----- De: JORDI PALET MARTINEZ <jordi.palet(a)consulintel.es> Fecha: lunes, 24 de abril de 2017, 23:49 Para: <nznog(a)list.waikato.ac.nz> Asunto: Re: [nznog] Alcatel IPv6 PPPoE This may be useful. Is work in progress, but we believe that we will reach consensus in the next RIPE meeting adding some suggestions that we got in the last weeks: º ALBARÁN.......: 02643/2557863 SERVICIO........: Ecommerce FECHA............: 20/04/2017 CLIENTE RECOGIDA.: MOREMAR SL CLIENTE ENTREGA.: ANA SUBIRATS RODRÍGUEZ CLIENTE ABONADO..: MOREMAR SL LOCALIDAD ENTREGA: IGUALADA OBS. ENTREGA TTM: HEMOS LLAMADO DURANTE TODA LA TARDE Y NADIE HA CONTESTADO, TENIAMOS 2 TELEFONOS Y NAD A -DESTINATARIO AUSENTE/CERRADO : X Regards, Jordi -----Mensaje original----- De: <nznog-bounces(a)list.waikato.ac.nz> en nombre de Brian E Carpenter <brian.e.carpenter(a)gmail.com> Organización: University of Auckland Responder a: <brian.e.carpenter(a)gmail.com> Fecha: lunes, 24 de abril de 2017, 22:35 Para: Pieter De Wit <pieter(a)insync.za.net>, <nznog(a)list.waikato.ac.nz> Asunto: Re: [nznog] Alcatel IPv6 PPPoE On 25/04/2017 07:51, Pieter De Wit wrote: > Good Morning List, > > I was wondering if anyone out here (there :)) has a working config for > an Alcatel 7750 to give out IPv6 to subscribers. We would like to > allocate /112's as a link net between the CPE and the BNG. We then want > to route a /64 or /48 over this link net. Please don't hand out /64s. That prevents people subnetting their IPv6 in their home or office. You can always hand out /56 if you really think /48 is too much. > All of this is configured in > Radius. > > The link-nets are configure using the "wan-host" option under the > subscriber interface. The /64 or /48 subnets is part of a /36 configured > as the "pd" option. > > From what I was reading, it appears as if the link-nets needs to be > /64...surely not ? Not unless your vendor has a pointless restriction. The only RFC in the area is https://tools.ietf.org/html/rfc6164 which recommends /127 but there's nothing to prevent /112 from working if that's what you want. Regards Brian _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

3 years, 11 months

Xtra and SPF

by Glen Eustace

Hi, We have started receiving complaints from several of our customers for whom we are the MX for their domain. Some addresses in the domain are delivered locally, some are relayed to other mailboxes e.g. gmail and xtra. It seems that there are folks who still believe that SPF is a good thing and have ‘-all’ on their record. Xtra it would appear is now enforcing the rejection on email we relay to them. We are placed in an awkward position. Our customer wants us to fix something that we are not really able to. The SPF policy belongs to the sender and Xtra are doing the rejection. I have come across another add on technology for postfix called SRS for rewriting senders but that seems to be broken from all accounts as well. Is anyone else having these sort of issues, is there something I should be doing in the ‘relay’ process that will prevent the rejections I’d love to hear. Glen -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph +64 6 357 8168, Mob +64 27 542 4015 “Specialising in providing low-cost professional Internet Services since 1997"

3 years, 12 months

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

NZNOG April 2017