Re: [AusNOG] Experiences with RPKI

[Joseph Goldman]

Thank you again to all for the advice :)


-- Original Message --
From: "Joseph Goldman" 
To: "ausnog@lists.ausnog.net" 
Sent: 23/05/2024 4:50:44 PM
Subject: Re: [AusNOG] Experiences with RPKI


Thank you to everyone who reached out on and off list!

I have curbed the fears of what APNIC Helpdesk told me and am confident 
to continue with my original assumptions :)



-- Original Message --
From: "Joseph Goldman" 
To: "ausnog@lists.ausnog.net" 
Sent: 23/05/2024 3:46:53 PM
Subject: [AusNOG] Experiences with RPKI


G'day list,

 In the process of rolling out RPKI - and while I thought I had a good 
grasp on everything, there is one niggling piece of information that 
I've come against and can't verify. Was hoping people can share their 
experiences.


 We are only doing our ROA's to begin with and not implementing 
validation until later, the initial thought was to create an ROA for 
all our 'supernets' and use maxLength to 24 to help cover any prefix 
we may want to advertise. We are a much simpler setup, single AS only 
and we do advertise many of our ranges down to /24 but not all of 
them. I do know of the best practices of not using maxLength based on 
a draft rfc doc, but I am personally not super concerned for our 
relatively small use-case to the issues brought up in that doc.


 Where I have come into trouble is a source (APNIC helpdesk) 
indicating that if we have any ROAs that exist for prefixes we are not 
directly advertising - it may lend some validators to mark all our 
routes as invalid?


i.e. say we had /22 ROA, 2x /23 ROAs and 4x /24 ROAs - are currently 
advertising the /22 and 2x /24's, so 2x /23's and 2x /24 ROAs are 
'unused' in that we are not advertising those specific resources - 
would that cause issues with strict validators out in the wild?


 My understanding reading through the RFC's is this should not be the 
case. If any ROA that matches the prefix for the origin AS exists it 
should be valid, regardless of other ROAs signed by the same resource 
holder etc.


 Matching ROAs to exact advertisements is great, but it seems to lend 
itself to much less flexibility in traffic engineering and failover 
scenarios - a good scenario is having dormant /24 ROAs for say a DDoS 
mitigation service to use when needed, so you dont have to wait for 
RPKI propagation before scrubbing kicks in.


 Based on your experience, is having all-encompassing (using 
maxLength), or unused ROAs an acceptable way to use RPKI or will we 
run into issues?


All help appreciated :)

Thanks,
Joe___
AusNOG mailing list
AusNOG@lists.ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Experiences with RPKI

[Joseph Goldman]

Thank you to everyone who reached out on and off list!

I have curbed the fears of what APNIC Helpdesk told me and am confident 
to continue with my original assumptions :)



-- Original Message --
From: "Joseph Goldman" 
To: "ausnog@lists.ausnog.net" 
Sent: 23/05/2024 3:46:53 PM
Subject: [AusNOG] Experiences with RPKI


G'day list,

 In the process of rolling out RPKI - and while I thought I had a good 
grasp on everything, there is one niggling piece of information that 
I've come against and can't verify. Was hoping people can share their 
experiences.


 We are only doing our ROA's to begin with and not implementing 
validation until later, the initial thought was to create an ROA for 
all our 'supernets' and use maxLength to 24 to help cover any prefix we 
may want to advertise. We are a much simpler setup, single AS only and 
we do advertise many of our ranges down to /24 but not all of them. I 
do know of the best practices of not using maxLength based on a draft 
rfc doc, but I am personally not super concerned for our relatively 
small use-case to the issues brought up in that doc.


 Where I have come into trouble is a source (APNIC helpdesk) indicating 
that if we have any ROAs that exist for prefixes we are not directly 
advertising - it may lend some validators to mark all our routes as 
invalid?


i.e. say we had /22 ROA, 2x /23 ROAs and 4x /24 ROAs - are currently 
advertising the /22 and 2x /24's, so 2x /23's and 2x /24 ROAs are 
'unused' in that we are not advertising those specific resources - 
would that cause issues with strict validators out in the wild?


 My understanding reading through the RFC's is this should not be the 
case. If any ROA that matches the prefix for the origin AS exists it 
should be valid, regardless of other ROAs signed by the same resource 
holder etc.


 Matching ROAs to exact advertisements is great, but it seems to lend 
itself to much less flexibility in traffic engineering and failover 
scenarios - a good scenario is having dormant /24 ROAs for say a DDoS 
mitigation service to use when needed, so you dont have to wait for 
RPKI propagation before scrubbing kicks in.


 Based on your experience, is having all-encompassing (using 
maxLength), or unused ROAs an acceptable way to use RPKI or will we run 
into issues?


All help appreciated :)

Thanks,
Joe___
AusNOG mailing list
AusNOG@lists.ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Experiences with RPKI

[Joseph Goldman]

Hi Phil,

 Thanks - I 100% understand the point of best practice of not using 
maxLength and the potential for hijacking, what im most worried about is 
the statement i've been told about 'unused' ROAs affecting used ROAs, 
which just seems counter-intuitive to me, in terms of (as per the 
example given) having ROAs ready for failover or TE purposes.


 This is the RFC im referring to:

https://datatracker.ietf.org/doc/html/rfc9319

Specifically 5.1 which indicates having dormant ROAs available for use, 
but I am being told having any dormant ROAs is grounds for all routes to 
be marked invalid based on stricter validators, which is the answer im 
trying to ascertain right now.


In a failover sense, say for example I am advertising /22 out of my 
Brisbane POP and some /24's out of my Sydney POP, my Sydney POP goes 
down and im no longer originating those /24's, by what i've been told my 
/22 would now become invalid on next check as my /24's are not being 
advertised, even though I have ROAs for the /22 and /24's.


 I believe i've been given somewhat wrong information but they were 
basing it off experiences with other APNIC members, I just dont want to 
end up in a position where our routes are dropped after implementing our 
ROAs, and maintain flexibility to not wait multiple hours before we can 
advertise a new prefix if required.


Thanks,
Joe

-- Original Message --
From: "Phil Mawson" 
To: "Joseph Goldman" 
Cc: "ausnog@lists.ausnog.net" 
Sent: 23/05/2024 3:52:54 PM
Subject: Re: [AusNOG] Experiences with RPKI


Hi Joe,

First up, well done on working on your RPKI roll out.  Signing your own 
routes is the most important step you can take to protect your own 
network.


In regards to using max length, I do advise against that as what it 
means someone can still hijack one of your un-advertised routes and it 
would be treated as real.


IE: If you advertise and sign a /19, but have a ROA created for each 
route up to a /24.  If you are not advertising all of those, a third 
party could advertise one of our /24s and spoof your ASN and it would 
be treated as valid on the internet.


APNIC portal make it very easy to create ROAs for your own routes as it 
has the route table view so it can see what is already publicly 
advertise.  I recommend looking at that and then signing routes based 
on that.


DDoS  mitigation providers and ROAs is an interesting topic and not 
sure the community can agree on what is the best technical solution for 
that.


Regards,
Phil


On 23 May 2024, at 3:46 PM, Joseph Goldman  
wrote:


G'day list,

 In the process of rolling out RPKI - and while I thought I had a good 
grasp on everything, there is one niggling piece of information that 
I've come against and can't verify. Was hoping people can share their 
experiences.


 We are only doing our ROA's to begin with and not implementing 
validation until later, the initial thought was to create an ROA for 
all our 'supernets' and use maxLength to 24 to help cover any prefix 
we may want to advertise. We are a much simpler setup, single AS only 
and we do advertise many of our ranges down to /24 but not all of 
them. I do know of the best practices of not using maxLength based on 
a draft rfc doc, but I am personally not super concerned for our 
relatively small use-case to the issues brought up in that doc.


 Where I have come into trouble is a source (APNIC helpdesk) 
indicating that if we have any ROAs that exist for prefixes we are not 
directly advertising - it may lend some validators to mark all our 
routes as invalid?


i.e. say we had /22 ROA, 2x /23 ROAs and 4x /24 ROAs - are currently 
advertising the /22 and 2x /24's, so 2x /23's and 2x /24 ROAs are 
'unused' in that we are not advertising those specific resources - 
would that cause issues with strict validators out in the wild?


 My understanding reading through the RFC's is this should not be the 
case. If any ROA that matches the prefix for the origin AS exists it 
should be valid, regardless of other ROAs signed by the same resource 
holder etc.


 Matching ROAs to exact advertisements is great, but it seems to lend 
itself to much less flexibility in traffic engineering and failover 
scenarios - a good scenario is having dormant /24 ROAs for say a DDoS 
mitigation service to use when needed, so you dont have to wait for 
RPKI propagation before scrubbing kicks in.


 Based on your experience, is having all-encompassing (using 
maxLength), or unused ROAs an acceptable way to use RPKI or will we 
run into issues?


All help appreciated :)

Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog
___
AusNOG mailing list
AusNOG@lists.ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Experiences with RPKI

[Joseph Goldman]

G'day list,

 In the process of rolling out RPKI - and while I thought I had a good 
grasp on everything, there is one niggling piece of information that 
I've come against and can't verify. Was hoping people can share their 
experiences.


 We are only doing our ROA's to begin with and not implementing 
validation until later, the initial thought was to create an ROA for all 
our 'supernets' and use maxLength to 24 to help cover any prefix we may 
want to advertise. We are a much simpler setup, single AS only and we do 
advertise many of our ranges down to /24 but not all of them. I do know 
of the best practices of not using maxLength based on a draft rfc doc, 
but I am personally not super concerned for our relatively small 
use-case to the issues brought up in that doc.


 Where I have come into trouble is a source (APNIC helpdesk) indicating 
that if we have any ROAs that exist for prefixes we are not directly 
advertising - it may lend some validators to mark all our routes as 
invalid?


i.e. say we had /22 ROA, 2x /23 ROAs and 4x /24 ROAs - are currently 
advertising the /22 and 2x /24's, so 2x /23's and 2x /24 ROAs are 
'unused' in that we are not advertising those specific resources - would 
that cause issues with strict validators out in the wild?


 My understanding reading through the RFC's is this should not be the 
case. If any ROA that matches the prefix for the origin AS exists it 
should be valid, regardless of other ROAs signed by the same resource 
holder etc.


 Matching ROAs to exact advertisements is great, but it seems to lend 
itself to much less flexibility in traffic engineering and failover 
scenarios - a good scenario is having dormant /24 ROAs for say a DDoS 
mitigation service to use when needed, so you dont have to wait for RPKI 
propagation before scrubbing kicks in.


 Based on your experience, is having all-encompassing (using maxLength), 
or unused ROAs an acceptable way to use RPKI or will we run into issues?


All help appreciated :)

Thanks,
Joe___
AusNOG mailing list
AusNOG@lists.ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Courier insurance

[Joseph Goldman]

Whilst usually I agree with just load it up and drive it, this 
particular trip is more like 1500km each way, so it will cost 4 full 
days in travel return trip to do so.


I do love a good road trip though :D thoughts @Rhys? :P

-- Original Message --
From: "Darren Moss" 
To: "Jennifer Sims" ; "Nathan Brookfield" 


Cc: "ausnog@lists.ausnog.net" 
Sent: 8/12/2023 8:27:02 AM
Subject: Re: [AusNOG] Courier insurance


Seasons’ Greetings Noggers,



If I have to use airlines to move equipment, I check it in as oversized 
baggage. Unfortunately, insurance for accompanied luggage is not great 
(usually non-existent) for the reasons Jennifer has shown.


Make sure equipment is boxed well. I’ve sat on the plane and watched 
baggage handlers throw boxes marked fragile onto the baggage cart.




Carriers we’ve learned to avoid are TNT (damaged equipment), Couriers 
Please (late/failed pickups/late deliveries) and Parcel to Courier 
(damaged equipment).




We’ve had good results with Aramex and Fedex. Look at TransDirect if 
you prefer a broker and multiple options.




In November we had new HP equipment for deployment at SY4.

I had it shipped to my home, tested a basic config, loaded it into my 
car and drove 850klms then unloaded at SY4 where it was installed and 
commissioned.




IMHO, the best way to get equipment safely to the DC is via car.



Regards,





Darren Moss

General Manager

Cloud365 Australia Pty Limited




darren.m...@cloud365.com.au


+61 1800 888 365 x105


+61 3 9017 2287


Level 1, 1 Queens Road, Melbourne VIC 3004


cloud365.com.au 



This communication may contain confidential or privileged information 
intended solely for the individual or entity above. If you are not the 
intended recipient you must not use, interfere with, disclose, copy or 
retain this email and you should notify the sender immediately by 
return email or by contacting our office. Opinions expressed may not 
represent an organisational view. Please consider the environment 
before printing.






From: AusNOG  On Behalf Of Jennifer 
Sims

Sent: Friday, 8 December 2023 12:38 AM
To: Nathan Brookfield 
Cc:ausnog@lists.ausnog.net
Subject: Re: [AusNOG] Courier insurance



Sadly I did this and ended up in a very bad situation.



I had some gear shipped to me in QLD, and was bringing back to me in 
Vic for the following weekend.




Saw it off at Brisbane all bagged and tagged.



Then in Melbourne, virgin says “we placed it on belt 2, we aren’t going 
responsible for you not picking it up”. Efforts to explain to the 
airline that no I didn’t pick it up, and that it never arrived on the 
belt the same as everything else.




They literally just ignored me and left me high and dry. Police said 
they could not do anything as no indication it was stolen, airport 
refused to check cctv as police didn’t do report, and baggage services 
kept shirking responsibility.




After lots of backward and forward, we just had to give up.



The vendor on the other hand was very understanding and it cost me as 
per our agreement, which was money I didn’t want to burn but sadly, had 
no choice because I needed to keep to my agreement.




Overall, don’t trust the airlines. If you check it, make sure it’s got 
an air tag or something to track it down.




Jen

Sent from my iPhone




On 7 Dec 2023, at 23:14, Nathan Brookfield 
 wrote:


 After many issues over the years with shipping equipment especially 
TNT, if I’m going anyway, I will always take it and check it in on the 
flight, in a lot of cases, it’s cheaper and yes, it might get thrown 
around a little bit, but it doesn’t matter what courier company you 
use it’s going to be a lot safer….




Nathan Brookfield
General Manager

p: 1300 592 330  |  m: 0412 266 008 | w: https://Iperium.com.au 






Level 4, Suite 2, 189 Kent Street Sydney NSW 2000


Your Connectivity Team



DISCLAIMER: This document is intended solely for the named addressee. 
This electronic communication, which includes any files or attachments 
thereto, contains proprietary or confidential information and may be 
privileged and otherwise protected under copyright or other applicable 
intellectual property laws. The use, disclosure, copying or 
distribution of any of the information contained in this document, by 
any person other than the addressee, is strictly prohibited. If you 
received this document in error, please contact the sender immediately 
and delete all the material from any computer. Confidentiality and 
legal privilege are not waived or lost by reason of mistaken delivery 
to you. Any views or opinions presented are solely those of the author 
and do not necessarily represent those of Iperium.


WARNING: Computer viruses can be transmitted via email. The recipient 
should check this email and any attachments for the presence of 
viruses. Iperium accepts no liabi

Re: [AusNOG] Optus downtime chat + affecting SMS verification to Telstra?

[Joseph Goldman]

Was actually wondering why there wasn't a thread.

My guess would be for 2FA SMS's not coming through, that the SMS 
provider the software/site is using relies on Optus to send the message.


I would also have to imagine the outage is a bad config pushed out - 
surely a hardware failure or fibre cut wouldn't cause such a big outage. 
Bad day to have your name on the last push :/.


-- Original Message --
From: francisfi...@mailup.net
To: AusNOG@lists.ausnog.net
Sent: 8/11/2023 9:26:26 AM
Subject: [AusNOG] Optus downtime chat + affecting SMS verification to 
Telstra?



Morning all,
Hope the chaos isn't too hard on your work/family.
I have had trouble with a couple of SMS verifications coming through to me, my 
Telstra number. Is this related?

Any general banter around the downtime would be fine too - looks like it all 
began at 4.07am AEDT?

Cheers

--

francisfi...@mailup.net
___
AusNOG mailing list
AusNOG@lists.ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog



___
AusNOG mailing list
AusNOG@lists.ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] E-waste near SY3

[Joseph Goldman]

G'day,

 Doing a good cleanup this weekend of some old servers and switches (old 
enough not worth re-purposing or selling) in Equinix SY3 - any good 
e-waste recyclers close by we can drop them off at once removed?


Thanks,
Joe___
AusNOG mailing list
AusNOG@lists.ausnog.net
https://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Spreading the load of ISP customers at Layer2

[Joseph Goldman]

With have the same gateway IP universal across routers - I can't really 
help with that, and if you've got a 'hack' that is working, perhaps 
stick with that.


 In regards to sharing load between mikrotiks, assuming you are using 
DHCP server (IPoE, since you specified no PPPoE) - my solution would 
require a remote agent to use Mikrotiks API in x increments to gather 
number of subscribers per router, then adjust delay-threshold (or 
authoritative setting) to delay accordingly to the lowest subscriber 
count Tik so it responds first. It is a definite hack-about but should 
still achieve what you are after. I'd also be interested in just leaving 
them all the same and letting general network fluctuations decide which 
response it gets first and uses, but that has a higher possibility of 
them stacking on one.


-- Original Message --
From: "Damian Ivereigh" 
To: "aus...@ausnog.net" 
Sent: 13/09/2021 7:23:36 PM
Subject: [AusNOG] Spreading the load of ISP customers at Layer2


Hi guys,

We have built all our ISP infrastructure based on the NBN style doubled tagging 
of services - in other words each subscriber circuit comes through on it's own 
ctag. This makes separating everything really easy because we pipe each vlan 
through to different BNG's. However we are now presented with a wholesaler who 
does not separate each circuit, but instead just bridges them all together into 
a single circuit. We can distinguish each circuit only by inspecting the DHCP 
Option82 so that we can allocate the right IP address, which is fine, but it is 
hard to allocate them to use a particular BNG to send and receive traffic.

By the way I am not talking dynamic load balancing just having multiple BNG 
with a subsection of the customers on each one - load sharing?

Until now with double tagging, we can reuse the same gateway IP address (i.e. 
the side facing the customer) on all the BNG and because each BNG only sees 
it's circuits, it will only respond to arps that it should do on the vlans 
assigned to it. However with all the customers on the same circuit it is 
impossible for multiple BNG to have the same IP address without creating all 
sorts of duplicate arps etc. We could turn off arp on all but one of the BNG 
and then put up with the asymmetric routing (makes reverse path filtering 
impossible) - i.e. send all upload traffic through a single BNG, but download 
comes from different ones (according to what BNG they are allocated to).

I have come up with another hack by using essentially using arp spoofing where 
we get a separate box to respond to the arp requests based on what the source 
IP is, but I can't help wondering how others have handled this. The wholesaler 
tells me there are other ISPs with 5000+ services on the single circuit (feels 
like a recipe for a broadcast storm to me).

Oh and no we don't want to use PPPoE :-)

Ideas anyone?

Damian

-- Launtel - We're at your call
Tel: 1800LAUNTEL (1800528683)
Mob: 0418217582
Fax: 1300784109
http://www.launtel.net.au

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] NBN into Megaport VXC?

[Joseph Goldman]

Hi list,

 Curious question for arguments sake - any NBN providers willing to 
provision me an FTTH tail that bridges direct into a Megaport VxC (in 
Sydney)?


 Specifically looking for someone who backhauls Coffs Harbour POI 
direct to Sydney (not via Brisbane)


Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Superloop experience(s)

[Joseph Goldman]

On 19/02/2021 2:44 pm, Jennifer Sims wrote:
We’ve been using them for other services but find their ticketing 
system is a bit, lack lustre.


Often we have chase them for answers and getting things sorted.

We’ve now got a lot of services with Aussie bb who do transit and 
they’re far more responsive and do quick setups.


Your previous employment with them may have a lot more to do with that 
than anything - whether it be previous colleagues helping you out or 
your insider knowledge on how to get things moving.





Sent from my iPhone

On 19 Feb 2021, at 13:59, Darren Moss  
wrote:




Hi All,

We’re looking at bringing additional transit into 2 of our AU 
datacentres and I would like to know about real-world experiences 
with Superloop.


Happy to hear from others who **actually** have a service from them 
in a DC environment.


Off list please.

Many thanks

Darren.

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] dodo vocus never learn

[Joseph Goldman]

Nope. Never have, probably never will - my point was you provided 0 
context for the outburst of "you spammed the wrong person m'f...kers" 
and trickled information about what the hell you were on about over the 
next few days - perhaps a concise email stating your frustration with 
proof and a spark of discussion such as 'Did anybody else receive this' 
or 'should we be reporting this on behalf of the industry' etc - then it 
may be a more relevant topic.


On 15/01/2021 12:03 pm, Noel Butler wrote:


work for vocus now joe?


On 14/01/2021 11:36, Joseph Goldman wrote:

I know we had the motorbike G33K thread already pegged as early 
contender of pointless post of the year but I think this one is 
giving it a run for its money...


I'm not entirely sure what we are supposed to be ingesting or discussing?

On 14/1/21 12:13 pm, Noel Butler wrote:


Lets just say that my internet is plenty fast enough and I dont need 
to become their customer  to get faster *cough yeah right* internet



On 14/01/2021 11:06, Christopher Hawker wrote:

Care to explain the story behind this?

--

Regards,
Noel Butler

This Email, including attachments, may contain legally privileged 
information, therefore at all times remains confidential and subject 
to copyright protected under international law. You may not 
disseminate this message without the authors express written 
authority to do so.   If you are not the intended recipient, please 
notify the sender then delete all copies of this message including 
attachments immediately. Confidentiality, copyright, and legal 
privilege are not waived or lost by reason of the mistaken delivery 
of this message.




___
AusNOG mailing list
AusNOG@lists.ausnog.net  <mailto:AusNOG@lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog  
<http://lists.ausnog.net/mailman/listinfo/ausnog>


___
AusNOG mailing list
AusNOG@lists.ausnog.net <mailto:AusNOG@lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog 
<http://lists.ausnog.net/mailman/listinfo/ausnog>



--

Regards,
Noel Butler

This Email, including attachments, may contain legally privileged 
information, therefore at all times remains confidential and subject 
to copyright protected under international law. You may not 
disseminate this message without the authors express written authority 
to do so.   If you are not the intended recipient, please notify the 
sender then delete all copies of this message including attachments 
immediately. Confidentiality, copyright, and legal privilege are not 
waived or lost by reason of the mistaken delivery of this message.




___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] dodo vocus never learn

[Joseph Goldman]

I know we had the motorbike G33K thread already pegged as early 
contender of pointless post of the year but I think this one is giving 
it a run for its money...


I'm not entirely sure what we are supposed to be ingesting or discussing?

On 14/1/21 12:13 pm, Noel Butler wrote:


Lets just say that my internet is plenty fast enough and I dont need 
to become their customer  to get faster *cough yeah right* internet



On 14/01/2021 11:06, Christopher Hawker wrote:


Care to explain the story behind this?

--

Regards,
Noel Butler

This Email, including attachments, may contain legally privileged 
information, therefore at all times remains confidential and subject 
to copyright protected under international law. You may not 
disseminate this message without the authors express written authority 
to do so.   If you are not the intended recipient, please notify the 
sender then delete all copies of this message including attachments 
immediately. Confidentiality, copyright, and legal privilege are not 
waived or lost by reason of the mistaken delivery of this message.




___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Urgent: Telstra NOC

[Joseph Goldman]

Perhaps it is best you take it through official channels then, rather 
than pushing for information from a staffer who is


 a) on leave
 b) has no obligation to provide support through this channel - but 
does so for the good of the community


 It is amazing that it got fixed this way at all. Even just a few years 
ago I wouldn't imagine someone with such reach into Telstra NOC being so 
accessible for truly complex issues - you'd spend half a week trying to 
get through their phone system to someone or email the 'noc@' or 
something and hope to get a reply in a few days.


On 30/09/2020 7:58 am, Job Snijders wrote:

Dear 'DaZZa',

On Wed, Sep 30, 2020 at 07:38:24AM +1000, DaZZa wrote:

What part of "Root cause investigations are underway" is difficult to
understand?

I didn't ask for a root cause analysis.


As much as I have an intense dislike for all things Telstra, this got
fixed at 5:48 am AEST, according to Russell - it's now barely 07:40 am
AEST - demanding a root cause analysis in less than 2 hours from an
organisation as large as Telstra is a bit rich.

Please understand that this event had negative impact on the global
Internet routing system for HOURS, hundreds of networks abroad were
also impacted.

It is not 'rich' to ask what action was taken to stop this issue. I ask
for more detail because it is useful to understand if international
carriers need to take additional precautions.

Kind regards,

Job
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Vrrp

[Joseph Goldman]

I believe it has to do with ARP and how the mikrotik manages duplicates 
etc across the network when using VRRP - but I could be wrong.


Switching between the 2 though could be due to priorities and/or 
preemption mode - would need to see your config or a debug level log 
when its happening to know for sure.


On 2/9/20 12:23 pm, Rhys Cuff (Speedweb Internet) wrote:


Hi Guys

Has anyone had much experience with using Vrrp on a Mikrotik?

It seemed pretty easy to setup but the manual said the floating IP 
must be a /32 and to put an IP on the physical interface with a /24


This seemed wrong so I just put a /24 on the Vrrp interface and a 
completely different subnet on the physical interface for the routers 
to communicate.


Thinking I was clever all was well till about 1am two days after I did 
this, then it completely failed, switching back and forth from master 
to backup, basically having two masters on and off.


Is having a /32 on the vrrp really necessary, if so why?

Why would it have been all good for two days?

So my config that lasted two days

Vrrp 192.168.1.1/24 (floating IP I care about)

Physical 10.0.1.1/24  (to communicate with master/backup routers)

How the manual says to do it

Vrrp 192.168.1.1/32

Physical 192.168.1.2/24

Doing it the second way will mean a lot more IP’s/config as I want to 
have around 20 floating IP’s


Thanks again for any help.

Rhys


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Telstra webmail?

[Joseph Goldman]

I know there are Telstra people on here and all, and can be a handy way 
to get higher-up eyes on your problem, but this isn't even a networking 
service your enquiring about >_< perhaps proper support channels or 
whirlpool would be better suited to your query.


On 28/08/2020 12:09 pm, lauri...@fastmail.fm wrote:

G'day

Slightly O/T...

I have had many clients complain about Telstra webmail.

I notice the outages page has had problems listed since 10/8

https://outages.telstra.com.au/#/email?pageSource=home

Anyone here have any ETA?

Thank-you.

Cheers

Laurie.
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Megaport SYD - IX Layer 2 issues?

[Joseph Goldman]

We are having issues as well.

VxC from SY1 to GS is OK

GS can't reach RS1,  but can reach RS2
GS couldn't reach Servers Australia which seems to be hosting some 
Afilias servers - which is what alerted me to our issue.


SY1  can reach both Route Servers

Seems to be some kind of segment issue from certain sources to certain 
destinations.


On 29/07/2020 4:49 pm, Jaden Roberts wrote:

We are seeing similar behaviour reported from midday today

On July 29, 2020, 4:30 PM GMT+10 chr...@aprole.com 
 wrote:


Hey All

Anyone else seeing reachability issues across Megaport SYD IX to some 
peers?


As of ~1200 we seem to be unable to see anything in SY1.

I’ve reached out to Megaport but curious to see if anyone else is 
affected as well


Regards,

Chris Jones
___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] All AU Locations Virtual Machine

[Joseph Goldman]

Hrmm

cannot risk our community lead project in your hands.

Important project then?

$5-15 per location

sounds very important.

Not sure if you are used to the Australian market, but similar resources 
here cost significantly more than your US, Europe, Asia resources, 
especially high density computing due to the cost of power/cooling etc 
in Australia


Or is this yet another gmail of a once banned user?

On 22/07/2020 1:39 pm, Project AnyCast wrote:

Hi Matthew,

Thanks for your response here,
I would add you spent over an hour in discussions back and forth with 
me regarding this, however you were not able to meet my needs as your 
pricing point is well above market value and the fact I have taken a 
further look into your company and cannot risk our community lead 
project in your hands.


I wish you the best in your endeavors

TIA
Team AnyCastP

On Wed, Jul 22, 2020 at 1:16 PM Matthew Matters 
mailto:mmatt...@ausnetservers.net.au>> 
wrote:


FYI:

2vCPU's
1 - 2 GB Memory
30GB HDD
1TB Bandwidth
1 IPv4 IP
1 IPv6 IP

This is a bit outside our price range as it currently stands, we
are moreso looking for around $5-15 Per location.

Sorry but typical tyre kicker, gave me something to do for about
15 minutes



Regards,

Matthew Matters  Managing Director / CEO of Aus Net Servers
Australia Pty Ltd
Management Department  |  Small Business Hosting Sales & Services
 |  Aus Net Servers Australia Pty Ltd
​P  03 5326 0050  |  M  0402 711 135  |  E
mmatt...@ausnetservers.net.au
 |  W
www.ausnetservers.net.au ​

-Original Message-
From: AusNOG mailto:ausnog-boun...@lists.ausnog.net>> On Behalf Of Mark Delany
Sent: Wednesday, 22 July 2020 1:12 PM
To: ausnog@lists.ausnog.net 
Subject: Re: [AusNOG] All AU Locations Virtual Machine

On 22Jul20, Matt Palmer allegedly wrote:
> On Wed, Jul 22, 2020 at 10:23:33AM +1000, Project AnyCast wrote:
> > I am in urgent need of a Virtual Machine of low'ish specs in all
> > locations of Australia Sydney, Melbourne, Brisbane, Perth,
Adelaide,
> > Canberra and Tasmania
>
> /me whistles "one of these things is not like the other..."

Yeah. I wondered what Canberra was doing in there too.


Mark.
___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog
___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] MMS + SMS to email with Calls to SIP

[Joseph Goldman]

Hi Stephen,

 Have you looked at another side - of perhaps sitting the SIM in an 
Android phone, on charge, and mounted indefinitely - with using a 
web-based app like Android Messages (or other SMS apps that allow you to 
login through web to get your messages etc on desktop) - then just 
call-forward always on the voice side to a SIP landing number? I'm sure 
you could also get an app (or have one developed cheap from india) that 
can package up the SMS/MMS and email it to you also - and even back the 
other way if you email it back auto sends it out.


 Not sure how 'multi-user' this will be, depends on the app and if it 
allows multiple sessions at once through the web, and it will possibly 
incur call-forward costs on the Voice side - and you can present your 
MSN as CLID on the outbound leg when required (if this is still allowed).


Thanks,
Joe

On 16/07/2020 4:33 pm, Stephen wrote:

Hi John,

They are particularly keen on keeping their numbers - will the 
redirect cover SMS/MMS as well, or only voice? Additionally they want 
to keep receiving calls on these same numbers, so it may not work - 
but nonetheless, still keen to hear your response.


As far as for received calls, they would be looking to actually 
receive and talk with someone - either by redirect to another number, 
or by actually receiving the call on a SIP trunk etc. Unfortunately 
sounds like it may not work with you guys in this instance, but if 
not, will definitely file it away for future reference :) Thanks!


On 16 Jul 2020, at 14:50, joh...@welcorp.com wrote:


Hi Stephen

We at can handle inbound and outbound MMS and SMS through virtual 
MSISDN's, and will deliver the MMS payload via email, so you don’t 
have to "login" to get the MMS. Many older longcodes aren't capable 
of using this service so new numbers may be needed and a redirect if 
you need to keep your existing numbers.


We can also terminate inbound VoIP, but we only do this with fixed 
line numbers, and not the same number as the SMS and MMS. Also 
interested to find out what you'd like to do with the call once 
received, eg - play a message, record a response or keypad input, and 
then email the response - something along those lines?


So it all seems doable, unless you need the same mobile number to do 
SMS, MMS and inbound to SIP. Our solution would be inbound SMS and 
MMS to one number, inbound voice to another number. Hope you find the 
right solution.


Cheers
John

John Hoffman
CEO
WEL Corporation Pty Ltd
Mob/Cell +61 (0)427 185 038
www.welcorp.com


-Original Message-
From: AusNOG  On Behalf Of Cameron 
Murray

Sent: Thursday, 16 July 2020 2:27 PM
To: Stephen 
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] MMS + SMS to email with Calls to SIP

We came up with a simple solution for this however not for MMS just 
the SMS side.


A Small Teltonika IOT router with a $1/m SIM card from TPG. Teltonika 
has a built in SMS > Email feature. We looked at many options which 
were Hundreds of dollars per year and we got away with this for 
$1/Month + the initial hardware which in out case we already had.


Keen to see what you come up with that covers MMS also.

On Thu, Jul 16, 2020 at 2:48 PM Stephen  wrote:


Hi Nathan,

Thanks for the reply - not sure if that was separately directed just 
at Shaun for the mobile aspect, or also at my original request, but 
just to clarify I’ve spoken with Maxotel, and they offer every 
aspect of the above except for MMS (currently just a feature 
request). Cheers!


On 16 Jul 2020, at 13:08, Nathan Brookfield wrote:

Hi Shaun,



I believe Maxotel may also offer a Mobile product like this as well, 
it may be worth reaching out to Alex and the team and checking in on 
what they can offer, they’ve got a pretty solid service.




Kindest Regards,



Nathan Brookfield (VK2NAB)

Simtronic Technologies Pty Ltd



From: AusNOG  On Behalf Of Shaun
Deans
Sent: Thursday, 16 July 2020 1:26 PM
To: Stephen 
Cc: aus...@ausnog.net
Subject: Re: [AusNOG] MMS + SMS to email with Calls to SIP



Stephen;



I currently use an AU Mobile number hosted with Twilio and route the 
inbound SMS to email (via a webhook) and our inbound calls are 
routing in via SIP.


Twilio's MMS in Australia is converted to an SMS by the carrier with 
an embedded URL and password in the SMS. You then log into a mini 
site hosted by the carrier and download the MMS attachment.




With a bit of code, the login to the site could be scraped and you 
could have your SMS to Email and Sip calls.




If your interested in scoping something out I can certainly assist you.



Cheers

Shaun Deans
M: 041 880 4195





On Thu, Jul 16, 2020 at 12:33 PM Stephen  wrote:

Hi folks,

Been looking for a solution that will allow us to either

a) Pop some SIM cards in a device, or
b) Port mobile numbers over to a VoIP provider

And upon doing so, receive calls to SIP, and SMS+MMS to email. I can’t
really find any products that can do this, and Twilio has confirmed
they can’t do it (MMS

Re: [AusNOG] Is Indigo Down to Singapore

[Joseph Goldman]

Heh. I like the commented traceroute in the source as well.

On 2020-05-25 9:35 PM, Brett O'Hara wrote:

https://isindigodown.com/

On Mon, May 25, 2020 at 3:30 PM Mehmet Akcin > wrote:


Can someone please confirm if this is down? I would like to update
infrapedia. Few tests I did could not confirm this. Thank you

On Sun, May 24, 2020 at 19:46 Bradley Amm mailto:b...@bradleyamm.com>> wrote:


Down again. Must be doing the permanent fix :)

*From:* Bradley Amm mailto:b...@bradleyamm.com>>
*Sent:* Wednesday, May 13, 2020 11:21:04 PM
*To:* Phillip Britt mailto:p...@team.aussiebroadband.com.au>>;
ausnog@lists.ausnog.net 
mailto:ausnog@lists.ausnog.net>>

*Subject:* Re: [AusNOG] Is Indigo Down to Singapore
Something has come back. Seeing traffic Perth to Singapore again
Either fixed it dam quick or using ASC or SeMeWe3


3 tengige0-0-0-12-100.bdr01-ipt-4millros-per.au.superloop.com

(27.122.123.69) time=9 ms
4 fortygige0-0-1-2-132.bdr01-ipt-15pionee-sin.sg.superloop.com

(202.177.40.22) time=51 ms


*From:* Phillip Britt mailto:p...@team.aussiebroadband.com.au>>
*Sent:* Sunday, May 10, 2020 5:46 pm
*To:* ausnog@lists.ausnog.net
; b...@bradleyamm.com

*Subject:* Re: [AusNOG] Is Indigo Down to Singapore

We have seen our Indigo West links go down, our ASC links are
still fine.

Apparently there is an issue about 400km from Jakarta.

Regards,

Phil

*From: *AusNOG mailto:ausnog-boun...@lists.ausnog.net>> on behalf of
Jonathan Brewer mailto:jon.bre...@gmail.com>>
*Date: *Sunday, 10 May 2020 at 7:09 pm
*To: *Bradley Amm mailto:b...@bradleyamm.com>>
*Cc: *"mailto:ausnog@lists.ausnog.net>>" mailto:ausnog@lists.ausnog.net>>
*Subject: *Re: [AusNOG] Is Indigo Down to Singapore

I see Hurricane Electric's Singapore customers are now
reaching Auckland via Tokyo, while just 24 hours ago their
path was via Perth & Sydney. So there's something up for sure.

On Sun, 10 May 2020, 16:19 Bradley Amm, mailto:b...@bradleyamm.com>> wrote:

Is Indigo down to Singapore?

___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog

___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog

-- 
Mehmet

+1-424-298-1903
___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Mobile Data Capacity - Where's the bottleneck?

[Joseph Goldman]

I do a 'little' bit of radio work so I am in no way an expert.

From my understanding it can be a mixture of both. Metro areas 
shouldn't really have a problem on backhaul as busy towers would have 
10, 40, or even 100gbit circuits to the base of the tower, that tends to 
be more a regional issue when backhauled by microwave.


Spectrum - to simplify things think of a single chain Wireless 802.11G, 
old school 54mbps Wifi in the 2.4ghz 20mhz channel (or 10mhz, i forget 
what G was) - 54Mbps is the total airtime so to speak, that means 1 user 
using it can get up to 54mbps, add 10 users, and they all try using it 
together, they are not all going to get 54mbps at the same time. They 
are essentially sharing that pool of bandwidth between them.


There are of course many other factors, TDMA timings, spectrum sharing, 
MIMO etc, but at a simple overview, more people putting more demand in 
the air = more noise for the radios to fit in a limited spectrum.


 As said there is a lot more to it then that but should get the 
discussion started.



On 2020-03-23 2:01 PM, Roy Adams wrote:

+1 needed for clarification also.
Philippines carriers are a mess.

Just to add to the mix, the provider I use has 10+ APN's, and on any 
given day, 1 or 2 of the APN's will be consistently faster than the 
other 8.
Each APN is likely being broadcast by a different radio/cell on the 
tower (or even potentially different towers), if certain cells/APN's are 
super busy, then you are likely getting onto the less busy ones when you 
get better results.


So Backhaul, Spectrum, APN are the factors where I cannot figure the 
slowness.
Industrial 4G/LTE router with Cat6 aggregation, and 3 or 4 out of 5 
bars signal


Kindly,

ROY ADAMS* | *P07 3040 5010 | Web:http://www.racs.com.au/ | 
Wiki:https://ex.racs.com.au:444/ | eMail:mailto:r...@racs.com.au
Please never upgrade to the latest Windows 10 - You don’t need the 
hassle, and I don’t need the work.
More seriously, the 6 months older Windows 10 releases are typically 
FAR MORE stable - a simple RACS script can fix this - just ask :)
If you think it's expensive to hire a professional to do the job, wait 
until you hire an amateur - Red Adair.
Life is a journey through a series of adventures... Live them, love 
them, hate them, but never give up on your dreams, desires, and goals.

Have you been good today? .ಠ_ಠ


On Mon, 23 Mar 2020 at 12:42, Troy Kelly > wrote:


I understand that this isn't directly related to shifting packets
- but it's come up in discussions a few times, and I feel like my
understanding of things is wrong - if somebody has a few minutes
for a diversion to their day - I'd love some clarity.

If a mobile carrier was to remove data caps, there would obviously
be increased demand on the network. One of the arguments against
removing data caps is that there is "not enough spectrum"
available - and this there would be a massive speed impact for all
users of the cell/tower.

My understanding was that the tower slowdowns were typically
related to a lack of backhaul - but the argument I am seeing is
that it is spectrum related.

Thanks in advance for any clarity you can share.

Troy
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Google Bi-Lat Peering

[Joseph Goldman]

Hi List,

 Just after some info regarding Google bi-lat peering, how they 
determine best path and downstream networks.


 I've submitted a ticket but thought people on list may have the info 
on-hand in the mean-time.


 Will Google accept downstream networks also, or only networks that are 
origin from the peering AS?


 If the downstream network is on a different IX participating in route 
server peering that google is also on, will Google prefer the bi-lat 
peering even if the AS path is longer?
 I'm assuming no - should/would prepending work in this situation (in a 
perfect world, yes) or would Google be stripping duplicate AS's? (I've 
heard of some networks doing this)


 We are trying to shift some traffic (google specifically) for a 
downstream customer and just want to know what level of re-engineering 
advertisements we are in for.


Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Intermittent problem accessing Goggle services.

[Joseph Goldman]

Just got an email from megaport confirming it was their migration that 
messed with Google bi-lat peering, should be resolved now but I haven't 
touched anything my end until I get to change window tonight to know for sure.




On 17 January 2020 6:10:15 pm Benoit Page-Guitard 
 wrote:

Hi Paul,

Definitely been seeing the same thing on our end (AS55803).

As others have noted, we also coincidentally saw Google flap on MegaIX NSW 
last night, along with a few others (e.g. AS15133, AS46489, etc). I'm 
deactivating our peering on that exchange now to see if it is also the 
source of our own troubles.


This smells more like a MegaIX NSW VPLS issue than it does a Google issue. 
It definitely wouldn't be the first time (I can recall a couple of 
incidences of sporadic loss to/from some peers in the last 1-2 years?).


Regards,

Benoit Page-Guitard
Network Engineer
Hostopia Australia


On Fri, 17 Jan 2020 at 00:58, Paul Holmanskikh  wrote:
Hi,

Is anyone experiencing problems with Google today?  Some IPs can't even
reach 8.8.8.8. but majority are working fine. I can't find any problems
with our network.

---
NEXON - I.T. FOR THE DYNAMIC BUSINESS
Paul Holmanskikh
Senior Network Engineer

Disclaimer: The contents of this email represent my own views and not
necessarily the views of my employer

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Intermittent problem accessing Goggle services.

[Joseph Goldman]

We also saw this as a problem with our bi-lat peering on Megaport IX 
Sydney, turned the peer off and just used the route servers and had no 
further issues - I had been playing with some BGP stuff just last night 
so thought perhaps I'd screwed up some filters but if others are having 
the same issue i'd say its a Google issue.


On 2020-01-17 5:07 PM, Nick Brown wrote:

Hi Paul,

Yes we are seeing intermittent access issues to Google services too (8.8.8.8 
being the most notable, but also noticeable when browsing sites hosted on 
googlehostedcontent.com, sites using Google fonts etc) from seemingly random 
src addresses in our network.

Anecdotally this looks to have started around 2.30 this morning.

Nick.


On 17/1/20, 4:59 pm, "AusNOG on behalf of Paul Holmanskikh" 
 wrote:

 Hi,
 
 Is anyone experiencing problems with Google today?  Some IPs can't even

 reach 8.8.8.8. but majority are working fine. I can't find any problems
 with our network.
 
 ---

 NEXON - I.T. FOR THE DYNAMIC BUSINESS
 Paul Holmanskikh
 Senior Network Engineer
 
 Disclaimer: The contents of this email represent my own views and not

 necessarily the views of my employer
 
 ___

 AusNOG mailing list
 AusNOG@lists.ausnog.net
 http://lists.ausnog.net/mailman/listinfo/ausnog
 


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] NTT / i3d issues ?

[Joseph Goldman]

Hi list,

 Anyone from either NTT or i3d on list?

 Seeing high latency from many endpoints into i3d sydney, specifically 
those that have to go through NTT - the path looks like it stays in 
Sydney but (testing from Telstra connections thus far) high-ish latency 
(80+ms) starts at the ntt lnk.telstra point, but gets really high 
(350ms+) at ae-15.r20.sydnau02.au.ce.bb.gin.ntt.net. The servers in 
question within i3d (im not a direct customer) are providing both VoIP 
and Gaming server services so latency is of high consequence.


  A reverse trace from NTT looking glass back to Telstra endpoint IP 
shows it getting back into the Telstra network at acceptable pings (from 
Sydney) but obviously it can't complete the trace due to ICMP filtering 
on Telstra's end.


 Most my other services hit i3d over peering so are unaffected.

 Mostly just posting in-case a NOC person is on-list and was unaware it 
might spark an investigation :)


Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Short Racks

[Joseph Goldman]

Thanks for all the answers all! Got a lot of leads now to look for a 
decent one. The sound-proof ones are definitely interesting but not for 
$4k !!


The shorter the better, and luckily there's a few 12RU racks in the mix 
of links I got that i'll check out


Thanks again for all the very quick responses!

Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Short Racks

[Joseph Goldman]

Hi List,

 A little off topic - my apologies, just looking for suggestions on 
short (~15RU or less) racks that are full depth, if exist? Looking for 
something for lab setups where I don't really want a full size 42RU rack 
in there, but all racks I find that are shorter are too shallow for most 
servers (say DL160/DL360/DL380, super micro cases etc)


 Any suggestions on a lead for such a thing?

Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Sydney 100G x-connects

[Joseph Goldman]

Hi *,

 Looking for some options to get some 100G x-connects in metro Sydney, 
specifically between Equinix SY1, Global Switch and Telstra in 
Paddington. Anyone recommended that may already have Fiber in each 
location? Not looking for a big build-out.


Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Megaport SYD IX down?

[Joseph Goldman]

Still connected and working in Equinix SY1 and Global Switch

On 2019-04-10 8:19 PM, Edward Um wrote:

Hi all,

Did anyone else's Megaport IX peering go down roughly 2 hours ago?
Cant seem to ping the route servers, and learning ARP's for only half 
the peering exchange,


Thanks,
*
*
Edward Um
*M: *0449 05 18 94
*W: *www.edwardum.com 



___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Telstra Internet Direct NBN > 100/40

[Joseph Goldman]

NBN can actually go up to 1000/400 if you have an RSP prepared to offer 
it...


On 2019-04-10 4:10 PM, Matthew Matters wrote:


Actually NBN can now offer 100/100 across NBN on FTTP from what I 
believe.


*From:*AusNOG  *On Behalf Of *Russell 
Langton

*Sent:* Wednesday, 10 April 2019 2:24 PM
*To:* Matt Selbst 
*Cc:* AusNOG@lists.ausnog.net
*Subject:* Re: [AusNOG] Telstra Internet Direct NBN > 100/40

Hi Matt,

100/40 is the max currently.

On Wed, Apr 10, 2019 at 1:58 PM Matt Selbst > wrote:


Have been trying the usual sales drones and getting no answers.
I'm calling on behalf of a customer.

Does anyone know if Telstra Internet Direct (or whatever they're
calling it now) offers NBN services faster than 100/40 (obviously
on FTTP).

Thanks!

-Matt

___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Mikrotik IPv6 Vulnerability - Must Read if you have Public IPv6 Facing Mikrotik

[Joseph Goldman]

Biggest issue is i still want to use their hardware, RouterBoards have 
some good products. hAP's for home CPE's, 3011's for SME and 1100x4's 
for corp and/or bottom of tower are great value for money. I know some 
boards you can flash WRT onto but its not as full featured, and Ubiquiti 
routers are also not as flexible from my limited exposure to them :(. If 
I could run something like VyOS on a routerboard I would.

On 2019-04-01 12:11 PM, Michael J. Carmody wrote:


If you want to stay in the Mikrotik like space, VyOS is probably where 
you need to be for BGP/Carrier networking.


If looking for CPE/lower level again, pfSense or Edgerouter?

-Michael

*From:*AusNOG  *On Behalf Of *Alex Samad
*Sent:* Sunday, 31 March 2019 5:51 PM
*To:* ausnog@lists.ausnog.net
*Subject:* Re: [AusNOG] Mikrotik IPv6 Vulnerability - Must Read if you 
have Public IPv6 Facing Mikrotik


Sigh, how long have they promised V7 ...

Think it was coming soon 7years ago

Multithreaded BGP !

"

* There's a comment 'The fix is in v7' - theres a long running joke 
that v7 will never emerge (it probably never will, they've lost most 
of their senior engineers, and refuse to open source their code to 
leverage their developers in the community)


"

is this whispers or documented somewhere ?

What would some suggest as a good replacement ?

A

On Sat, 30 Mar 2019 at 09:48, Philip Loenneker 
> wrote:


Unfortunately this apparently fixes 2x softlock issues, but not a
memory leak that results in a reboot of the device.

You can read from here on to see more information:

https://forum.mikrotik.com/viewtopic.php?f=2&t=147048#p723977

Regards,

*Philip Loenneker | Network Engineer**| TasmaNet*

*From:*AusNOG mailto:ausnog-boun...@lists.ausnog.net>> *On Behalf Of *Shane Clay
*Sent:* Friday, 29 March 2019 10:08 PM
*To:* ausnog@lists.ausnog.net 
*Subject:* Re: [AusNOG] Mikrotik IPv6 Vulnerability - Must Read if
you have Public IPv6 Facing Mikrotik

Looks like a fix is on the way:

What's new in 6.45beta22 (2019-Mar-29 08:37):

Changes in this release:

!) ipv6 - fixed soft lockup when forwarding IPv6 packets
(CVE-2018-19299);

!) ipv6 - fixed soft lockup when processing large IPv6 Neighbor
table (CVE-2018-19298);

https://mikrotik.com/download/changelogs/testing-release-tree

Shane Clay

Caznet

*From:*AusNOG mailto:ausnog-boun...@lists.ausnog.net>> *On Behalf Of *Noel Butler
*Sent:* Friday, 29 March 2019 12:02 PM
*To:* ausnog@lists.ausnog.net 
*Subject:* Re: [AusNOG] Mikrotik IPv6 Vulnerability - Must Read if
you have Public IPv6 Facing Mikrotik

On 29/03/2019 11:17, Mike Everest wrote:

On the point of "the fix is in v7"

v7  has for a great many years, been code for  "too hard basket"

-- 


Kind Regards,

Noel Butler

This Email, including any attachments, may contain legally
privileged information, therefore remains confidential and subject
to copyright protected under international law. You may not
disseminate, discuss, or reveal, any part, to anyone, without the
authors express written authority to do so. If you are not the
intended recipient, please notify the sender then delete all
copies of this message including attachments, immediately.
Confidentiality, copyright, and legal privilege are not waived or
lost by reason of the mistaken delivery of this message. Only PDF
 and ODF
 documents accepted,
please do not send proprietary formatted documents

___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] NBN POI contact

[Joseph Goldman]

NBNCo's components are all publicly available (AVC, CVC, NNI etc) I 
believe this is latest but might be wrong:


https://www.nbnco.com.au/content/dam/nbnco2/2018/documents/sell/wba/SFAA_WBA_PriceList_nbnEthernetProductModule20180706.pdf

As for beyond the port hand-off, it is not NBNCo's responsibility so 
you'd need to look at other companies for things like backhaul etc.


On 2019-03-11 9:13 AM, Joshua Cameron wrote:


Hey guys,

I’m trying to get some costs involved with getting into the local POI 
to resell NBN services (CVC, IP transit, rack costs, etc.) to compare 
against going through a national wholesaler.


I’m having trouble getting in contact with the right department at NBN 
Co. Their main phone number can’t transfer me to anyone, and I just 
get an email address that doesn’t respond.


If anyone has any contacts or can point me in the right direction, 
that’d be great.


Cheers,

*Joshua Cameron*//

/Software Developer/Systems Administrator/

Office:  02 4861 

Direct:   02 4861 8803//

Email: josh...@ace.com.au 

Description: Description: Description: Description: Description: 
Description: ace_logo 



___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] AWS With Megaport

[Joseph Goldman]

Hi *

 Just wondering if the following scenario is supported for EC2 
instances with AWS.


 Over megaport, I'd like to use a VXC (Or Direct Connect) - On that 
interface on my router, I put x.x.x.1/24, then on my EC2 instances I'd 
want to put x.x.x.2-254/24 directly on my compute instances, so those 
EC2 instances basically become a part of my broadcast domain over the 
VLAN on Megaport, and I can control data in/out of those instances.


 I'm fairly fresh to AWS so not entirely sure the correct way to go 
about it through the route tables, VPCs etc - is what I'm asking for 
relatively easy and possible?


Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] CRS317-1G-16S+RM Availability

[Joseph Goldman]

Hi List,

 Bit of a long shot, but looking for a CRS317-1G-16S+ in the country if 
someone has one willing to sell, most vendors i come across are out of 
stock and its for an install within the next couple of weeks.


 After this model in particular as it will be for our backup unit and 
would prefer to keep matching devices before considering moving to a 
different vendor.


Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Friday question

[Joseph Goldman]

Another Linux vote here, gives much more flexibility in the field for 
troubleshooting and whatnot. Especially when its your daily driver and 
you've got it setup just right with your own preferences.


In terms of other useful gear, I've started configuring with the idea of 
running around with a little Mikrotik called the mAP Lite, TINY little 
thing powered off USB and has a single ether port with 2.4 ghz wifi 
chip. Handy to just plug into the designated local management port and 
not have to sit next to the rack with a cable hanging out to the laptop. 
Setup the ethernet port with all your vendors default details as well, 
with the appropriate routes/NAT rules on the wifi side so you get 
instant connectivity even with factory defaulting gear :P


On 18/11/18 12:31 pm, Karl Auer wrote:

On Sun, 2018-11-18 at 13:04 +1100, Johnathon Brandis wrote:

I despise troubleshooting the laptop and a fault at the same time,
thus my love for Mac which just works when your under the pump.

Linux in my case. Same reason :-)

Regards, K.

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] ASR1k

[Joseph Goldman]

Hi list,

 Looking for an ASR1k, 1004 or bigger for quick-ish delivery in Sydney 
(BNE & Melbourne OK too) for relatively short term project (so not worth 
going through for brand new stock and kitting it out)


 Ideally looking for 2x10gbit ports minimum, with licensing for 10gbit 
throughput minimum, and enough RAM for full table BGP, however if you 
have something under-specced and willing to part with please let me know 
as might be able to source the upgrade components separately.


 Does anyone have anything fitting that bill, they are willing to part 
with at a reasonable cost? Please reply off-list.


 Sorry for the noise.

Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Sexual Harassment at AUSNOG Industry Events

[Joseph Goldman]

 CoC, T&C's, charters etc are words on paper. There's other words on 
bits of paper, that hold more weight than anything we say or do here, 
yet are still ignored.


 If people aren't afraid to outright break the law, then a simple CoC 
(which basically affirms common decency) wont do much to help.
 Calling these people out (appropriately / to the authorities) and 
having them dealt with in that manner, causing real world consequences, 
certainly can. Harboring a safe environment where victims are not afraid 
to report and seek help, also can.


On 01/10/18 13:26, Peter Tonoli wrote:
To keep on charter, perhaps we need to look at preventing these issues 
in future?


Looking at the AusNOG website, and the AusNOG 2018 conference sites - 
they appear, through my cursory look, to be devoid of a code of 
conduct, or similar. Perhaps, as a community, a good start would be 
implementing a Code of Conduct - an example I can think of is Linux 
Australia's, at https://linux.conf.au/attend/code-of-conduct/ .


Cheers,
Peter.


Quoting Robert Hudson :


I tend to agree with Paul - if the list charter means we can't discuss a
bloody serious issue about how some of our community behave (and the 
fact
that this behaviour is inappropriate), then I don't think I want to 
be on

this list any more.

Sweep this sort of thing under the carpet (and make no mistake, that's
EXACTLY what the "STOP THREAD" was doing), and you're just enabling 
it to

continue.

If such behaviour was reported within the ITPA membership and the
accusation was found to be true, the perpetrator would be excluded 
from the

organisation. Period.

I guess we find ourselves at a point where we find out what sort of 
group

AusNOG wants to be.

Regards,

Robert

On Mon, 1 Oct 2018 at 10:07, Paul Wilkins  
wrote:



Where large chunks of our lives are winding up on line, I find it
problematic where discussion of endemic problems get ruled outside the
terms of service. It leaves the problem to fester. Discussion should be
legitimate where there's no names, so no libel.

Also, the police will only involve themselves in instances of criminal
behaviour. Most inappropriate workplace behaviour falls short and they
won't be interested.

Kind regards

Paul Wilkins


On Sun, 30 Sep 2018 at 12:46, David Hughes  wrote:



*Bevan*,

Any allegation of sexual harassment is a very serious matter and I
encourage you to raise these issues with the appropriate 
authorities.  The
police are in the best position to deal with such allegations.   If 
I can
be of any assistance please don’t hesitate to contact me directly, 
off-list.



*To the members of the list* - I’m sure any of you would agree that 
any
form of sexual harassment is not acceptable.   As such, there is no 
reason
for you to follow-up to Bevan’s post.  There is nothing to debate 
here.
Please note that this is a STOP THREAD post.  Please see the list 
charter
below if you do not understand your obligations with relation to a 
STOP

THREAD.


https://www.ausnog.net/mailing_list/charter



David
...
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog





___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


--

Kind Regards,

Joseph Goldman

APCS_Logo

Joseph Goldman | Network Manager / Lead Software Developer
*Asia Pacific Communication Specialist*
*AUS Mobile.*+61 408 645 819
*PNG**Mobile.* +675 78 081 223
*Email.*j...@apcs.com.au <mailto:j...@apcs.com.au>*l **Web. 
*www.apcs.com.au <https://apcs.com.au/>


* * * * * * * * *

This e-mail message may contain confidential or legally privileged 
information and is intended only for the use of the intended 
recipient(s). Any unauthorized disclosure, dissemination, distribution, 
copying or the taking of any action in reliance on the information 
herein is prohibited. E-mails are not secure and cannot be guaranteed to 
be error free as they can be intercepted, amended, or contain viruses. 
Anyone who communicates with us by e-mail is deemed to have accepted 
these risks. Asia Pacific Communication Specialist are not responsible 
for errors or omissions in this message and denies any responsibility 
for any damage arising from the use of e-mail. Any opinion and other 
statement contained in this message and any attachment are solely those 
of the author and do not necessarily represent those of the company.


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Testing the mailing list

[Joseph Goldman]

I think its broken, i didnt get it.


On 2018-09-09 1:51 PM, David Hughes wrote:

This is a test.  Please ignore.  Apologies for the noise.


David
...
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] ATS recommendation

[Joseph Goldman]

Kind of defeats the purpose, as that re-introduces single power feed 
loss - the idea of the ATS (im guessing on Rhys' behalf) was to make a 
single PSU device 'dual power' by means of having it powered off dual feeds.


Kind Regards,

Joseph Goldman

APCS_Logo

Joseph Goldman | Network Manager / Lead Software Developer
*Asia Pacific Communication Specialist*
*AUS Mobile.*+61 408 645 819
*PNG**Mobile.* +675 78 081 223
*Email.*j...@apcs.com.au <mailto:j...@apcs.com.au>*l **Web. 
*www.apcs.com.au <https://apcs.com.au/>


* * * * * * * * *

This e-mail message may contain confidential or legally privileged 
information and is intended only for the use of the intended 
recipient(s). Any unauthorized disclosure, dissemination, distribution, 
copying or the taking of any action in reliance on the information 
herein is prohibited. E-mails are not secure and cannot be guaranteed to 
be error free as they can be intercepted, amended, or contain viruses. 
Anyone who communicates with us by e-mail is deemed to have accepted 
these risks. Asia Pacific Communication Specialist are not responsible 
for errors or omissions in this message and denies any responsibility 
for any damage arising from the use of e-mail. Any opinion and other 
statement contained in this message and any attachment are solely those 
of the author and do not necessarily represent those of the company.


On 2018-08-13 3:26 PM, Christopher Koob wrote:

Hello Rhys,

What's the load of the single feed stuff? You could maybe get a third 
cheap and cheerful UPS to run that or if it's non essential kit just 
plug it straight into the wall.


Regards,

Christopher

On 13 August 2018 at 14:18, Rhys Cuff (Latrobe 
IT)mailto:r...@latrobeit.com.au>>wrote:


Hi Guys

We have a very small server room with one rack drawing around 8 amps.

I thought I was clever and installed an APC ATS to run the kit
that only has single feel power input.

Well its been a disaster, final straw was 4am today when it caused
both UPS’s to error and trip all breakers.

Bypassing the ATS fixed it.

I’m thinking of abandoning the ATS idea or trying another brand
like Eaton

Does anyone have any thoughts on this?

Thanks

Rhys


___
AusNOG mailing list
AusNOG@lists.ausnog.net <mailto:AusNOG@lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog
<http://lists.ausnog.net/mailman/listinfo/ausnog>




On 13 August 2018 at 14:18, Rhys Cuff (Latrobe IT) 
mailto:r...@latrobeit.com.au>> wrote:


Hi Guys

We have a very small server room with one rack drawing around 8 amps.

I thought I was clever and installed an APC ATS to run the kit
that only has single feel power input.

Well its been a disaster, final straw was 4am today when it caused
both UPS’s to error and trip all breakers.

Bypassing the ATS fixed it.

I’m thinking of abandoning the ATS idea or trying another brand
like Eaton

Does anyone have any thoughts on this?

Thanks

Rhys


___
AusNOG mailing list
AusNOG@lists.ausnog.net <mailto:AusNOG@lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog
<http://lists.ausnog.net/mailman/listinfo/ausnog>




___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Mikrotik routers in HA environments

[Joseph Goldman]

Full table import is 2-5minutes.

Route table lookups, depends. If you are going for an actual route entry 
i.e. 1.2.3.0/24, it can be very quick, or even 'All routes in 
1.2.0.0/18' for instance and list anything within that route.


If you want to do show me best route for 1.2.3.4, its still very slow 
(to the point I dont use it in troubleshooting personally, just start at 
the /16 and filter down myself with the quicker lookups)


These are things reported to be better in the infamous RouterOS v7 
(Coming Soon(tm))


On 26/06/18 12:08, Brad Evans wrote:


Hey Cameron,

How long does it take to load full tables and also how do you find the 
speed of doing routing table lookups from the CLI?


Last time we investigated this, both of the above were painfully slow 
when taking full tables.


-Brad

*From:*AusNOG [mailto:ausnog-boun...@lists.ausnog.net] *On Behalf Of 
*Cameron Murray

*Sent:* Tuesday, 26 June 2018 12:05
*To:* darren.m...@cloud365.com.au
*Cc:*  
*Subject:* Re: [AusNOG] Mikrotik routers in HA environments

Hi Darren,

We use the CCR1072's with VRRP and have not skipped a beat in the last 
372 days they have been online & installed.


We also run BGP + OSPF on both devices without issue holding 600,000+ 
routes.


Cheers

Cameron

On Tue, Jun 26, 2018 at 11:58 AM Darren Moss 
mailto:darren.m...@cloud365.com.au>> wrote:


Hi All,

We are about to deploy a new location, which we normally do with
our SOE around Cisco router kit (2 of them for redundancy).

I was talking with another DC customer and they swear by Mikrotik
router gear over Cisco.

I’ve played with Mikrotik in a domestic/home fibre connection
scenario, but not in a DC environment.

What’s the consensus from others?

Can a pair of Mikrotik routers be configured for a **reliable** HA
scenario ?

Happy to chat offlist or share if this is of interest to others.

Cheers

Darren.

___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog



___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Mikrotik routers in HA environments

[Joseph Goldman]

>if you do go down this path, note that the CCR1036s are single PSU.

They do have dual power headers on the board though, so you can rip out 
the single PSU and build your own PSU for dual power. I run 2x CCR1036's 
at a site, with a 1RU box with 4 PSU's in it, 2 fed by A power, 2 fed by 
B power, and one of each going to each router. Bit of a muck around and 
takes up an extra 1RU but you can fit 3 or more 1036's in the cost of a 
single 1072 so it can be a good cost/benefit thing.


On 26/06/18 12:03, andrew khoo wrote:


we have deployed Mikrotiks in the field as PPPoE and LNS termination 
devices. they have been reliable for us.



however, we only use them for single purpose. no MPLS. no OSPF. no 
BGP. simple default routes.



i have seen people deploy them running all sort of functionality etc 
and anecdoctally those tend to melt down more often.



if you do go down this path, note that the CCR1036s are single PSU. 
the CCR1072 would be the more ideal choice (If loaded), but then you 
are close enough in the ballpark to the lower-end of the more 
established router purveyors.







On June 26, 2018 at 11:57 AM, Darren Moss (darren.m...@cloud365.com.au 
) wrote:




Hi All,


We are about to deploy a new location, which we normally do with our 
SOE around Cisco router kit (2 of them for redundancy).



I was talking with another DC customer and they swear by Mikrotik 
router gear over Cisco.



I’ve played with Mikrotik in a domestic/home fibre connection 
scenario, but not in a DC environment.



What’s the consensus from others?


Can a pair of Mikrotik routers be configured for a **reliable** HA 
scenario ?



Happy to chat offlist or share if this is of interest to others.


Cheers



Darren.

___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog




___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Exetel NOC?

[Joseph Goldman]

Anyone got a sure-fire way to reach Exetel NOC (or anyone on-list)? Or 
know of any major issues they are having? Having some reachability 
issues with them over a peering fabric.

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] GiadaTech Server Hardware

[Joseph Goldman]

A Server Admin or Server Operator group is more what your after. SAGE-AU 
I runs the more popular AU Server group I believe, but I could be wrong. 
This list is purely for networking oriented discussion.


On 2018-05-22 4:49 PM, Christopher Hawker wrote:


Well perhaps Nathan, you may know of the correct list? Didn't think it 
would be an issue to call on the expertise of fellow network operators.



*From:* Nathan Brookfield 
*Sent:* Tuesday, May 22, 2018 4:44:42 PM
*To:* Christopher Hawker
*Cc:* ausnog@lists.ausnog.net
*Subject:* Re: [AusNOG] GiadaTech Server Hardware
Wrong list for that

Nathan Brookfield
Chief Executive Officer

Simtronic Technologies Pty Ltd
http://www.simtronic.com.au

On 22 May 2018, at 16:37, Christopher Hawker > wrote:


Hi All,

If anyone has any experience with the Giada brand (more so the N50M-BO 
motherboard), could they please contact me off-list. I have a server 
here that will not POST, a blinking LED and no manual findable to help 
diagnose the fault.


Thanks,
CH.
___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Commander NBN > Officeworks.com.au

[Joseph Goldman]

Sounds like something perfectly suited for calling their helpdesk with ;)

On 01/05/18 07:43, Cameron Murray wrote:

Guys,

We have a few customers who have reported in the past 24 hours that 
they are unable to access the www.officeworks.com.au 
 website with it being redirected to 
the following URL: https://wc-prod-joomla.s3.amazonaws.com/404/404.html


Anyone from Commander/Vocus/Officeworks online who can assist?

Only appears to be occurring from Commander services.

Regards

Cameron


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Vendors back charging on support and maintenance.

[Joseph Goldman]

Perhaps there is a middle ground like with health insurance? Time limits 
for certain claims?


 The main complaint seems to be buying second hand gear, perhaps 
providing a bill of sale and a statement saying the hardware is 
'currently' working and operational, and a first 1-3 months no RMA or 
something similar kind of policy to protect against immediate fraud I 
think would be reasonable - this way the second hand kit gets access to 
software and TAC while not being at a huge risk of customer turning 
around and expecting RMA's day 1, and protecting against some long-con 
which seems obviously fraudulent.


But this is all just speculation - current policy is current policy and 
if enforced, is gonna suck for Peter's customer.


On 26/04/18 15:58, Scott Howard wrote:
While you're at it, you might as well cancel your house and contents 
insurance.


If the building burns down, just call up and start a new policy and 
then submit your claim.


I'm sure they'll be ok with that, right?

  Scott



On Wed, Apr 25, 2018 at 10:41 PM, Karl Auer > wrote:


On Wed, 2018-04-25 at 00:07 +, Nikolas Geyer wrote:
> Yes, it’s pretty standard. It’s to stop people running hardware
> without a maintenance contract and only buying one when they need to
> do, for example, a RMA.

Sorry, why is that a problem? If they pay the support fee, they should
get the benefits. If they are not using the benefits, why should they
pay the fee? On the flip side, they may not have paid support for ten
years, but they also have not been costing the vendor anything.

I see no problem with someone waiting until it is needed before paying
the support fee.

Am I missing something? What *is* the "vendor side of the problem"?

Regards, K.

-- 
~~~

Karl Auer (ka...@biplane.com.au )
http://www.biplane.com.au/kauer 
http://twitter.com/kauer389

GPG fingerprint: A0CD 28F0 10BE FC21 C57C 67C1 19A6 83A4 9B0B 1D75
Old fingerprint: A52E F6B9 708B 51C4 85E6 1634 0571 ADF9 3C1C 6A3A


___
AusNOG mailing list
AusNOG@lists.ausnog.net 
http://lists.ausnog.net/mailman/listinfo/ausnog





___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Mikrotik Advisory: Vulnerability exploiting the Winbox port

[Joseph Goldman]

https://forum.mikrotik.com/viewtopic.php?f=21&t=133533

TL;DR - someone can push a request to winbox port and get the internal 
USER DB back before authing.


If best practice is followed (i.e. firewalled off) - you should not have 
been compromised, but best to update when new ROS available and change 
your passwords (just in case)

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] NBN / TADSL Aggregation

[Joseph Goldman]

Looking for a new NBN / TADSL aggregator for national delivery. (In 
Equinix SY1 or Global Switch hand-off)


Who are people using these days?

Not necessarily looking for lowest price - but premium service.

Replies offline preferred to keep list noise low.

TIA

--

Kind Regards,

Joseph Goldman

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Fwd: MikroTik: URGENT security advisory

[Joseph Goldman]

In case there are Mikrotik users on list who do not subscribe to their 
mailing list, see advisory below.


If you keep up to date and you firewall the service ports appropriately 
then there should be no cause for concern.


 Forwarded Message 

Hello,

It has come to our attention that a rogue botnet is currently scanning random 
public IP addresses to find open Winbox (8291) and WWW (80) ports, to exploit a 
vulnerability in the RouterOS www server that was patched more than a year ago 
(in RouterOS v6.38.5, march 2017).

Since all RouterOS devices offer free upgrades with just two clicks, we urge you to 
upgrade your devices with the "Check for updates" button, if you haven't done 
so within the last year.

More information can be found here: 
https://forum.mikrotik.com/viewtopic.php?f=21&t=132499

Best regards,
MikroTik

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] AAPT Routing Issue

[Joseph Goldman]

Yup I get the same issue - works perfectly from my peered network but on 
a relatives Foxtel (read: Telstra) connection it goes overseas.


If only there was enough of this type of traffic to force the big guys 
onto peering fabrics.



On 23/12/17 20:02, Nathan Brookfield wrote:
It doesn’t look like a problem as such to me, just that AAPT don’t 
peer anywhere that has a more specific AU route and the originator are 
not advertising to Transit in AU, only Peering fabrics.


Nathan Brookfield
Chief Executive Officer

Simtronic Technologies Pty Ltd
http://www.simtronic.com.au

On 23 Dec 2017, at 19:59, Christopher Hawker <mailto:m...@chrishawker.com.au>> wrote:


Hi All,


It appears as though AAPT has a routing issue. For some reason when 
pinging IBM's Quad9, it goes overseas:



C:\Users\CH>tracert 9.9.9.9

Tracing route to dns.quad9.net <http://dns.quad9.net> [9.9.9.9]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  172.16.0.6
  2     *        *        *     Request timed out.
  3     9 ms     8 ms     9 ms po41.sglebbrdr11.aapt.net.au 
<http://po41.sglebbrdr11.aapt.net.au> [202.10.14.198]
  4     9 ms    14 ms     9 ms syd-gls-har-wgw1-be-30.tpgi.com.au 
<http://syd-gls-har-wgw1-be-30.tpgi.com.au> [203.219.107.197]
  5    15 ms    14 ms    15 ms  203.29.134-67.tpgi.com.au 
<http://67.tpgi.com.au> [203.29.134.67]
  6   149 ms   180 ms   150 ms 
ix-ae-18-0.tcore1.HK2-Hong-Kong.as6453.net 
<http://ix-ae-18-0.tcore1.HK2-Hong-Kong.as6453.net> [180.87.112.221]
  7   344 ms   368 ms   368 ms xe0-3-2-10G.ar2.CLK1.gblx.net 
<http://xe0-3-2-10G.ar2.CLK1.gblx.net> [64.212.107.9]
  8   301 ms   293 ms   272 ms ae1-30G.ar1.QPG2.gblx.net 
<http://ae1-30G.ar1.QPG2.gblx.net> [67.16.132.174]

  9   283 ms   304 ms   303 ms  64.214.66.70
 10   293 ms   269 ms   264 ms dns.quad9.net <http://dns.quad9.net> 
[9.9.9.9]


Trace complete.


However from an Over the Wire service, it goes to their Sydney server 
(as below):



C:\Users\CH>tracert 9.9.9.9

Tracing route to dns.quad9.net <http://dns.quad9.net> [9.9.9.9]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.3.254
  2     1 ms    <1 ms    <1 ms  nnn.nnn.nnn.nnn
  3     3 ms     2 ms     2 ms nnn.nnn.nnn.nnn
  4     3 ms     3 ms     3 ms nnn.nnn.nnn.nnn
  5     1 ms     1 ms     1 ms 
thisisobfuscatedtext.syd.core.otw.net.au [nnn.nnn.nnn.nnn]

  6     1 ms     1 ms     1 ms  10.254.251.164
  7     2 ms     4 ms     2 ms 42.syd.equinix.com 
<http://42.syd.equinix.com> [45.127.172.68]
  8     1 ms     1 ms     1 ms dns.quad9.net <http://dns.quad9.net> 
[9.9.9.9]


Trace complete.

Any idea what the possible issue is?


Thanks,

CH.

___
AusNOG mailing list
AusNOG@lists.ausnog.net <mailto:AusNOG@lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


--

Kind Regards,

Joseph Goldman

APCS_Logo

Joseph Goldman | Network Manager / Lead Software Developer
*Asia Pacific Communication Specialist*
*AUS Mobile.*+61 408 645 819
*PNG**Mobile.* +675 78 081 223
*Email.*j...@apcs.com.au <mailto:j...@apcs.com.au>*l **Web. 
*www.apcs.com.au <https://apcs.com.au/>


* * * * * * * * *

This e-mail message may contain confidential or legally privileged 
information and is intended only for the use of the intended 
recipient(s). Any unauthorized disclosure, dissemination, distribution, 
copying or the taking of any action in reliance on the information 
herein is prohibited. E-mails are not secure and cannot be guaranteed to 
be error free as they can be intercepted, amended, or contain viruses. 
Anyone who communicates with us by e-mail is deemed to have accepted 
these risks. Asia Pacific Communication Specialist are not responsible 
for errors or omissions in this message and denies any responsibility 
for any damage arising from the use of e-mail. Any opinion and other 
statement contained in this message and any attachment are solely those 
of the author and do not necessarily represent those of the company.





___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] using nbn network for >100mbps point-to-point connection

[Joseph Goldman]

Yes, speed tiers extend up to 1000/400 I believe, on a single port (let 
alone bonding say 2 cheaper 100/40's)


ISP's like Skymesh offer 100/100, 200/100 and 200/200 over NBN FTTP by 
using bigger plans such as 500/200 and limiting them down to speed, but 
I havent seen many else advertising the use of the larger speed tiers, 
as for most it'd come under business connections and would be quoted on 
a per-user basis.


On 11/10/17 21:06, Abraham Treadwell wrote:

I’m looking to understand if anyone is able to offer point-to-point connections 
faster than 100mbps over the nbn. (fibre all the way to the premises of 
course). Unfortunately i’m not up to speed on the current changes with nbn 
speed tiers and what’s possible/ what’s not anymore.

In this case, both ends located in Sydney area, but, generally speaking, is it 
even a ‘thing’ to have a link speed greater than 100mbps?

many tia!

abraham

___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Business customer smashing their "unlimited" MBE 20/20Mbps internet service

[Joseph Goldman]

On 28/09/17 19:04, Nathan Brookfield wrote:


I assume you were trying to say 'uncontended' and if so, it's not a 
case of contention by the sound of it, more utilization.



Urgh spell check caught me there.



The traps of using the word 'Unlimited', if the customer is of 
appropriate size for the TIO you would very much lose in a dispute by 
saying they're overusing the service pretty much regardless of what 
'Fair Use' policy was in place.


Wouldn't it also depend on the CIS/Fair Use/T&C's presented to customer? 
I suppose in my definition it would have to be advertised as 'up-to' 
20mbit to get around that side of things.



Kindest Regards,

Nathan Brookfield (VK2NAB)

Chief Executive Officer

Simtronic Technologies Pty Ltd

*Local:* (02) 4749 4949 *|* *Fax:* (02) 4749 4950 *|* *Direct:* (02) 
4749 4951


*Web*: http://www.simtronic.com.au <http://www.simtronic.com.au/> *|* 
*E-mail*: nathan.brookfi...@simtronic.com.au 
<mailto:nathan.brookfi...@simtronic.com.au>


------------
*From:* AusNOG  on behalf of Joseph 
Goldman 

*Sent:* Thursday, 28 September 2017 6:55 PM
*To:* ausnog@lists.ausnog.net
*Subject:* Re: [AusNOG] Business customer smashing their "unlimited" 
MBE 20/20Mbps internet service
It's a fine line though depending on how it was sold to the customer - 
as if you wanted uncontested business grade bandwidth, you'd be paying 
per mbit and being charged for the L2, L3 and markup components in one 
price.


This could be the gateway into the customer in explaining their use 
case calls for uncontested bandwidth - here is the price for that, 
what they were sold is (assuming) not uncontested and if they aren't 
willing to play ball you could let it congest and perhaps slow down in 
those peak times.


But ultimately, if you can't sustain a connection then you can't 
sustain it. Unless they can hold YOU to the contract for whatever 
reason, then give them 30 days notice that the price is going to 
change to $x, or they can cancel if they wish to. This works better if 
they don't have (m)any other profit making services with you.


There is a general understanding for uncontested connections in the IT 
world that it wont be used 100% 24/7 (It's how the TPG/Vocus 400mbits 
would be assumed and I bet if you did 100% utilise them 24/7 you'd 
likely get a call).
It will ebb and flow and the max data rate is mostly for peak and 
burst rates not for full time sustained rates. Sure the customer 
wouldn't know this unless they have a knowledgeable IT department but 
thats where the discussion above comes in.


On 28/09/17 17:01, simon thomason wrote:

Hi All,

Sitting on the customer side of the fence I would be none to happy if 
I was told that my unlimited services was not unlimited.


Personally I would ask you to show me which part of the contract you 
have issue with.


20M/s unlimited means I can use 20M/s day and night to my hearts 
content as I have paid for it.


Simon T.


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog




___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Business customer smashing their "unlimited" MBE 20/20Mbps internet service

[Joseph Goldman]

It's a fine line though depending on how it was sold to the customer - 
as if you wanted uncontested business grade bandwidth, you'd be paying 
per mbit and being charged for the L2, L3 and markup components in one 
price.


This could be the gateway into the customer in explaining their use case 
calls for uncontested bandwidth - here is the price for that, what they 
were sold is (assuming) not uncontested and if they aren't willing to 
play ball you could let it congest and perhaps slow down in those peak 
times.


But ultimately, if you can't sustain a connection then you can't sustain 
it. Unless they can hold YOU to the contract for whatever reason, then 
give them 30 days notice that the price is going to change to $x, or 
they can cancel if they wish to. This works better if they don't have 
(m)any other profit making services with you.


There is a general understanding for uncontested connections in the IT 
world that it wont be used 100% 24/7 (It's how the TPG/Vocus 400mbits 
would be assumed and I bet if you did 100% utilise them 24/7 you'd 
likely get a call).
It will ebb and flow and the max data rate is mostly for peak and burst 
rates not for full time sustained rates. Sure the customer wouldn't know 
this unless they have a knowledgeable IT department but thats where the 
discussion above comes in.


On 28/09/17 17:01, simon thomason wrote:

Hi All,

Sitting on the customer side of the fence I would be none to happy if 
I was told that my unlimited services was not unlimited.


Personally I would ask you to show me which part of the contract you 
have issue with.


20M/s unlimited means I can use 20M/s day and night to my hearts 
content as I have paid for it.


Simon T.


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Telstra Zone Map

[Joseph Goldman]

It is my belief that its not 'zoning', there's only 2 prices, Zone 
1/Metro (cheaper) and Zone 2/3/Regional (more expensive).


It has nothing to do with actual physical standing, population etc - 
just whether the exchange has a competing provider (i.e. actual DSLAM 
infrastructure). They only make it cheaper if there is competition.


I could be wrong on this, but this is what I have observed and believe 
to be true.


On 15/09/17 10:40, Cameron Murray wrote:

Morning All,

Slightly off topic however I wondered if anyone had a resource of the 
Telstra Zoning data. I am trying to demonstrate to our sales staff how 
this works and how areas are classified for broadband services along 
with providing them a resource to refer to.


Thanks in Advance.

Cameron


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Google's Route Preference

[Joseph Goldman]

Hi Team,

 After Megaport's hiccup yesterday, I discovered my Google traffic 
coming in via my transit rather than alternate peering fabric.


 We bi-lat peer with Google over Megaport IX, but not over other 
peering fabrics, but common sense told me that without bi-lat, it should 
still use the Route Server routes and come in via alternate peering, I 
was wrong!


 Google support confirmed the following preferences:

 "Google generally serves traffic from edge nodes (GGC) preferentially, 
then direct peering, then via indirect paths (your transit such as  
and ), and Route servers to be the least preferred"


 Now, its their network and they can prefer what they want to prefer, 
what I am interested in though is maybe an understanding why?


 Why would route server routes be less preferred than transit?

 In any case my easy solution is to set up bi-lat via all peering 
fabrics, just caught me off guard and goes against what I would think is 
common sense routing.


Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Optus Wholesale NBN Engineers?

[Joseph Goldman]

Hi List,

 Wondering if there is anyone within Optus Network Operations with 
visibility into the Wholesale NBN network on list? And willing to 
entertain me for 5 minutes?


 I am having degradation issues with services on a specific CVC at a 
specific POI - and even though as a network guy I can recognise an 
issue, because its 'within spec' I am having difficulty getting through 
normal support channels to convince people of an issue worth looking at.


Thanks,
Joe
___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Access to Google .au services

[Joseph Goldman]

Working fine from here, accessing via MegaIX in Sydney.

On 03/07/17 15:13, Benjamin Ricardo wrote:


Hi all,

Just wondering if anyone else is having issues reaching googles .au 
services?


We can resolve but not ping them.

Our upstream (as you can see is TPG) – seems we actually get into the 
Google network but that’s it.


Tracing route to google.com.au [216.58.199.35]

Trace from our subnet 103.12.159.0/24 is as follows:

  1<1 ms<1 ms<1 ms

  2 1 ms<1 ms<1 ms acs-asn-gw.acs.net.au [103.12.159.1]

  3 *** Request timed out.

  4 4 ms 3 ms 3 ms po41.sglebbrdr11.aapt.net.au 
[202.10.14.198]


  5 3 ms 3 ms 3 ms syd-gls-har-wgw1-be-30.tpgi.com.au 
[203.219.107.197]


  6 5 ms 4 ms 4 ms syd-apt-ros-crt1-he-0-3-0-3.tpgi.com.au 
[203.29.134.65]


  7 3 ms 6 ms 6 ms 203-219-107-82.static.tpgi.com.au 
[203.219.107.82]


  8 5 ms26 ms 5 ms 203-219-35-132.static.tpgi.com.au 
[203.219.35.132]


  9 4 ms 4 ms 4 ms 203-219-107-6.static.tpgi.com.au 
[203.219.107.6]


10 4 ms 4 ms 5 ms 108.170.247.33

11 9 ms 4 ms 4 ms 209.85.243.145

12 *** Request timed out.

13 *** Request timed out.

Thanks for any further info you can provide

Ben

cid:923523500@01052014-04A6



*Ben Ricardo*| Senior Technician | M Net&SysAdmin, MCITP-SA, CEH, ITIL
Australian Computer Solutions Pty Ltd | 2/28 Barralong Rd Erina NSW 2250 |
*P*: 02 4365 2727 | *F*: 02 4365 2304 | *E*: _ben.rica...@acs.net.au 
_

_www.acs.net.au 
_PPlease consider the environment before printing this e-mail.

**
This message is intended for the addressee named and may contain
privileged information or confidential information or both. If you
are not the intended recipient please delete it and notify the sender.
**



___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog


___
AusNOG mailing list
AusNOG@lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog