Re: [AusNOG] Amazon Peering Delays

[Craig Spiers]

I'm having the same issues - its been around 9 months for me so far.


Kind Regards,

Craig Spiers | Solarix Networks Limited
ddi. +64 9 952 9090 | 
craig.spi...@solarix.co.nz

From: AusNOG [mailto:ausnog-boun...@lists.ausnog.net] On Behalf Of Bevan 
Slattery
Sent: Sunday, 3 February 2019 5:57 PM
To: Chris Jones 
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] Amazon Peering Delays

Ths is everyone.  It seems like we just have to wait longer in the very long 
queue.  I wasn't aware of the nanog chatter as I unsubscribed a while ago due 
to SNR issues.

Ta

B


From: Chris Jones mailto:chr...@aprole.com>>
Sent: Friday, February 1, 2019 8:07 pm
To: Bevan Slattery
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] Amazon Peering Delays

There's been a lot of chatter on NANOG of late around the same point.  Seems to 
be a global thing for them at the moment.


On 1 Feb 2019, at 9:06 pm, Bevan Slattery 
mailto:be...@slattery.net.au>> wrote:

Hi all,

Is everyone else seeing significant delays in getting bilat peering with 
Amazon?  I think we are 5 months in the queue for Amazon .sg and still no 
update.

b

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Amazon Peering Delays

[Philip Loenneker]

We've had the same massive delays for a modification to an existing peer 
(change of IP within the same IX), so it's not just affecting brand new peer 
setups. I have not had a single email back, not even an acknowledgement of 
receipt or anything, for around 5 months. It would be far less frustrating if 
they would at least come back with a "there are long delays, we'll get to this 
when we can".

Regards,
Philip Loenneker | Network Engineer | TasmaNet

From: AusNOG  On Behalf Of Craig Spiers
Sent: Monday, 4 February 2019 7:02 AM
To: Bevan Slattery ; Chris Jones 
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] Amazon Peering Delays

I'm having the same issues - its been around 9 months for me so far.


Kind Regards,

Craig Spiers | Solarix Networks Limited
ddi. +64 9 952 9090 | 
craig.spi...@solarix.co.nz

From: AusNOG [mailto:ausnog-boun...@lists.ausnog.net] On Behalf Of Bevan 
Slattery
Sent: Sunday, 3 February 2019 5:57 PM
To: Chris Jones 
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] Amazon Peering Delays

Ths is everyone.  It seems like we just have to wait longer in the very long 
queue.  I wasn't aware of the nanog chatter as I unsubscribed a while ago due 
to SNR issues.

Ta

B


From: Chris Jones mailto:chr...@aprole.com>>
Sent: Friday, February 1, 2019 8:07 pm
To: Bevan Slattery
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] Amazon Peering Delays

There's been a lot of chatter on NANOG of late around the same point.  Seems to 
be a global thing for them at the moment.

On 1 Feb 2019, at 9:06 pm, Bevan Slattery 
mailto:be...@slattery.net.au>> wrote:

Hi all,

Is everyone else seeing significant delays in getting bilat peering with 
Amazon?  I think we are 5 months in the queue for Amazon .sg and still no 
update.

b

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Amazon Peering Delays

[Craig Spiers]

I've had those emails - they are implementing a new peering management system 
internally and expect it to all calm down soon.


Kind Regards,

Craig Spiers | Solarix Networks Limited
ddi. +64 9 952 9090 | 
craig.spi...@solarix.co.nz

From: Philip Loenneker [mailto:philip.loenne...@tasmanet.com.au]
Sent: Monday, 4 February 2019 10:41 AM
To: Craig Spiers ; Bevan Slattery 
; Chris Jones 
Cc: aus...@ausnog.net
Subject: RE: [AusNOG] Amazon Peering Delays

We've had the same massive delays for a modification to an existing peer 
(change of IP within the same IX), so it's not just affecting brand new peer 
setups. I have not had a single email back, not even an acknowledgement of 
receipt or anything, for around 5 months. It would be far less frustrating if 
they would at least come back with a "there are long delays, we'll get to this 
when we can".

Regards,
Philip Loenneker | Network Engineer | TasmaNet

From: AusNOG 
mailto:ausnog-boun...@lists.ausnog.net>> On 
Behalf Of Craig Spiers
Sent: Monday, 4 February 2019 7:02 AM
To: Bevan Slattery mailto:be...@slattery.net.au>>; Chris 
Jones mailto:chr...@aprole.com>>
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] Amazon Peering Delays

I'm having the same issues - its been around 9 months for me so far.


Kind Regards,

Craig Spiers | Solarix Networks Limited
ddi. +64 9 952 9090 | 
craig.spi...@solarix.co.nz

From: AusNOG [mailto:ausnog-boun...@lists.ausnog.net] On Behalf Of Bevan 
Slattery
Sent: Sunday, 3 February 2019 5:57 PM
To: Chris Jones mailto:chr...@aprole.com>>
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] Amazon Peering Delays

Ths is everyone.  It seems like we just have to wait longer in the very long 
queue.  I wasn't aware of the nanog chatter as I unsubscribed a while ago due 
to SNR issues.

Ta

B


From: Chris Jones mailto:chr...@aprole.com>>
Sent: Friday, February 1, 2019 8:07 pm
To: Bevan Slattery
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] Amazon Peering Delays

There's been a lot of chatter on NANOG of late around the same point.  Seems to 
be a global thing for them at the moment.

On 1 Feb 2019, at 9:06 pm, Bevan Slattery 
mailto:be...@slattery.net.au>> wrote:

Hi all,

Is everyone else seeing significant delays in getting bilat peering with 
Amazon?  I think we are 5 months in the queue for Amazon .sg and still no 
update.

b

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] spear phishing attack

[Scott Wilson]

Morning all,

Just got my first ever "live" spear phishing attack - an email slipped
through purporting to be from our MD to our CFO, asking for a $14k invoice
to be paid. They've named an australian BSB and account #, so I'm curious
as to what the attack vector is - is that bank account compromised? Do they
rely on a bounceback after a few days and then follow up with "oh,
actually, that should have gone via western union..." or is there something
more sophisticated at work?
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] spear phishing attack

[Nathan Gardiner]

Hi Scott,

The bank account would be controlled by the fraudsters (most likely using a
mule's account). The idea is that with the number of invoices that go
through any organisation on a monthly basis, they can simply slip in an
invoice for a supplier that you may or may not recognise purporting to be
an approved expense from an officer of the company that they've looked up
online.

Another version of this has the fraudster requesting/approving an update to
an existing vendor's BSB and account number, so that all invoices coming
from them from that moment on get paid to the fraudster's account instead,
but that requires a bit more research as they'll need to be aware of
vendors that you are actively working with - that would be more of an
indication that an organisation's email was compromised first (or that they
have some other vector for obtaining this information). In some cases they
may just use industry knowledge to guess at major suppliers.

I would guess (but don't personally know) that the fraudsters engineer
sufficient distance between the account holder and themselves so as to not
be particularly concerned about enforcement action, and I suspect not a lot
of these cases end up getting reported anyway. It's an interesting question
as you'd think bank KYC regulation would help to protect against these
scams.

There's some more information about these schemes here:
https://www.scamwatch.gov.au/types-of-scams/buying-or-selling/false-billing


On Mon, Feb 4, 2019 at 11:42 AM Scott Wilson  wrote:

> Morning all,
>
> Just got my first ever "live" spear phishing attack - an email slipped
> through purporting to be from our MD to our CFO, asking for a $14k invoice
> to be paid. They've named an australian BSB and account #, so I'm curious
> as to what the attack vector is - is that bank account compromised? Do they
> rely on a bounceback after a few days and then follow up with "oh,
> actually, that should have gone via western union..." or is there something
> more sophisticated at work?
> ___
> AusNOG mailing list
> AusNOG@lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] spear phishing attack

[Chris]

Hi,

On 4/02/2019 8:42 am, Scott Wilson wrote:
is that bank account 
compromised?


Quite often the bank account is a real account. The owner of said 
account is either knowingly or unknowingly acting as a mule - the cash 
will come into their account and they will then send it on to someone 
else (more than likely different country).

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] spear phishing attack

[Bradley Amm]

We get these on a daily basis
Examples are someone pretending to the be MD emailing the Finance Manger
asking for a payment to be sent through. They make their display name the
same as the manager and cant do much about that.They get the details for
example from Social media

We have told our users to double check the email address and ask for
approval verbally from the person.


[image: image.png]



On Mon, Feb 4, 2019 at 8:42 AM Scott Wilson  wrote:

> Morning all,
>
> Just got my first ever "live" spear phishing attack - an email slipped
> through purporting to be from our MD to our CFO, asking for a $14k invoice
> to be paid. They've named an australian BSB and account #, so I'm curious
> as to what the attack vector is - is that bank account compromised? Do they
> rely on a bounceback after a few days and then follow up with "oh,
> actually, that should have gone via western union..." or is there something
> more sophisticated at work?
> ___
> AusNOG mailing list
> AusNOG@lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>


-- 
Bradley Amm
0420 501 801
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] FNN preservation for client during port

[Ross Marston]

Hi,
Can someone please contact me (off list is fine if you'd prefer) with a contact 
within Telstra to speak to please.  We have wasted weeks on this and a 
dead-line is looming.  What we are trying to achieve is as follows...
 - A Client has contacted us (2 weeks ago) to tell us that their copper lines 
are being disconnected on the 8th Feb 19.
 - We Submitted Class 'A' port request for the client's main number to a new 
carrier, as nothing funky on the PSTN service.
 - Port request has been rejected as a complex service (but they won’t tell us 
what the complexity is)
 - Disconnect Date is looming, and we stand the chance of the client's main 
advertised number being lost, and if the new port request also fails (and a 
Class 'C' takes 6 weeks) we have no control over the number.  Catastrophe for 
the client, and we seem powerless to change it.

How do we find out what complex services are on the number to allow a Class 'A' 
port to proceed quickly and preserve the number for the client.  We have spoken 
to just about everyone we can find (literally 50-60 phone calls) in Telstra 
with no joy what-so-ever.

Any (urgent) help, greatly appreciated.

Kind regards
 
Ross Marston
Ramtech

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] FNN preservation for client during port

[Cameron Murray]

Ross,

Can;t help you with a contact however a way around this we found is get
Telstra to setup a Exchange based divert to a temporary number and wait out
the porting. While there is an active order/transfer on a number they are
not meant to be able to turn the service off however have seen them still
kill services but the EBD will help you out here.

On Mon, Feb 4, 2019 at 2:04 PM Ross Marston  wrote:

> Hi,
> Can someone please contact me (off list is fine if you'd prefer) with a
> contact within Telstra to speak to please.  We have wasted weeks on this
> and a dead-line is looming.  What we are trying to achieve is as follows...
>  - A Client has contacted us (2 weeks ago) to tell us that their copper
> lines are being disconnected on the 8th Feb 19.
>  - We Submitted Class 'A' port request for the client's main number to a
> new carrier, as nothing funky on the PSTN service.
>  - Port request has been rejected as a complex service (but they won’t
> tell us what the complexity is)
>  - Disconnect Date is looming, and we stand the chance of the client's
> main advertised number being lost, and if the new port request also fails
> (and a Class 'C' takes 6 weeks) we have no control over the number.
> Catastrophe for the client, and we seem powerless to change it.
>
> How do we find out what complex services are on the number to allow a
> Class 'A' port to proceed quickly and preserve the number for the client.
> We have spoken to just about everyone we can find (literally 50-60 phone
> calls) in Telstra with no joy what-so-ever.
>
> Any (urgent) help, greatly appreciated.
>
> Kind regards
>
> Ross Marston
> Ramtech
>
> ___
> AusNOG mailing list
> AusNOG@lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] FNN preservation for client during port

[Russell Langton]

Hi Ross,
I'll reach out directly to see if we can help solve this mystery.

On Mon, Feb 4, 2019 at 3:04 PM Ross Marston  wrote:

> Hi,
> Can someone please contact me (off list is fine if you'd prefer) with a
> contact within Telstra to speak to please.  We have wasted weeks on this
> and a dead-line is looming.  What we are trying to achieve is as follows...
>  - A Client has contacted us (2 weeks ago) to tell us that their copper
> lines are being disconnected on the 8th Feb 19.
>  - We Submitted Class 'A' port request for the client's main number to a
> new carrier, as nothing funky on the PSTN service.
>  - Port request has been rejected as a complex service (but they won’t
> tell us what the complexity is)
>  - Disconnect Date is looming, and we stand the chance of the client's
> main advertised number being lost, and if the new port request also fails
> (and a Class 'C' takes 6 weeks) we have no control over the number.
> Catastrophe for the client, and we seem powerless to change it.
>
> How do we find out what complex services are on the number to allow a
> Class 'A' port to proceed quickly and preserve the number for the client.
> We have spoken to just about everyone we can find (literally 50-60 phone
> calls) in Telstra with no joy what-so-ever.
>
> Any (urgent) help, greatly appreciated.
>
> Kind regards
>
> Ross Marston
> Ramtech
>
> ___
> AusNOG mailing list
> AusNOG@lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Telstra Wholesale Radiocomms

[Nick Brown]

Afternoon all.

 
Is there anyone on list who has gone through the application & build process 
under the Telstra Wholesale Radicomms agreement before, and wouldn’t mind 
answering some questions I have around the process at each level? The team at 
TW have been helpful but I’d appreciate some real world feedback.

 
I’d also consider engaging a consultant who has experience with this to 
“co-pilot” our first application, should anyone have recommendations?


Responses off list please, and I’ll make sure to summarise (where appropriate) 
at a later date.

 
Thanks in advance!

Nick. 

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] NTP Best Current Practices Internet Draft

[Paul Gear]

On 2/2/19 3:15 pm, Robert Hudson wrote:
> I say this as a long-time (since NT3.51) Windows sysadmin...
> 
> On Sat, 2 Feb. 2019, 12:31 pm O'Connor, Daniel
>   wrote:
> 
> 
> 
> > On 2 Feb 2019, at 11:48, Mark Smith
>  > wrote:
> > The problem that occurred with 0.au.pool.ntp.org
>  proving bad time
> > wouldn't have had an effect if the Windows domain controller had at
> > least 2 other NTP time sources.
> 
> The behaviour of OPs system implies that a PDC does not use more
> than one clock source.
> 
> If that is true (I have no idea, but googling suggests it may be so)
> then you are going to end up relying on a single time server. In
> that case you are probably better firing up a tiny Linux VM running
> only ntpd (or chrony etc etc) which is configured for multiple pool
> servers and then point your DCs at that.
> 
> It does seem pretty ridiculous than Windows server can't behave more
> sensibly though..
> 
> 
> The time service is the area where I felt Windows lagged significantly
> behind Linux more than any other. Why Microsoft still haven't adopted
> standardised tzdata and proper NTP is still, frankly, beyond me. The
> issues the Windows time services still cause are crazy...


I never thought I'd be the one doing this, but please, everyone - get
more accurate information before you bag Microsoft's time services.
They've made a lot of strides forward, and have offered a proper NTP
implementation since Server 2016:

https://docs.microsoft.com/en-us/windows-server/networking/windows-time-service/accurate-time

Paul
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog