if you're not on the Fediverse
already, feel free to sign up there) where everyone will be able to watch
me have a quiet (or possibly not so quiet?) meltdown over the next week
as the conference gets closer and closer!
I hope to see you all here, either physically or not!
--Rob Thomas
Conference
Everything Open has an unusually large amount of networking specific stuff
happening, more than the usual LCA level of nerdery. We even have GIH as a
Keynote speaker! With Mark's email about IETF, I thought I better mention
it here, too:
Earlybird tickets are closing on WEDNESDAY. If you're
That'd be me!
0402-077-155.
--Rob
On Tue, 25 Jul 2023 at 13:43, Bradley Amm wrote:
> Hey People
>
> Is anyone free in Gladstone to do a job for me sometime in the next few
> weeks?
>
> Need someone to go to our office near the harbour, swap out the Microtik
> that uses PPPoE from Dreamtilt
Trying to log into our Telstra account and we are greeted with this lovely
message:
---
Two-step verification
To protect the security of your account, we need to complete an additional
authentication step. We refer to this as a two-step verification.
As we don’t have any contact details listed
As no-one's mentioned it here yet, I just thought I'd bring up the
zero-day, in the wild, active RIGHT NOW, trojan 3CX Windows and Mac apps.
If you, or you have clients, running 3CX, make sure they ARE NOT using the
app. If they are, their machines are probably already owned, and all their
stored
I'm going to be in Melbourne for Everything Open next week, and if anyone
else is planning to come please email me, and we'll do an unofficial ausnog
hallway track!
I'm also staying at the Casino next door, and you will know if you're near
me by all the 'xrobau' SSIDs you'll see 8)
--Rob
(For
As the time is getting close to the end of the voting period, I thought it
would be worthwhile to remind everyone to go and submit their votes!
I've done my best to keep quiet on the potential issues in this election,
apart from my official statement (See my nomination page
I've just spent all weekend building a new DC, and when I plugged in
the 4U60 it looks like the SAS cables that were supplied to me aren't
wired correctly, as they're reported as 'Invalid'.
https://i.imgur.com/rK6QfXS.png
The part number is 1EX0233 and I've ordered one from the US, but that
For those that haven't noticed, I have a bit of a bee in my bonnet about
RPKI.
We now have all of our major carriers here in Australia (and massive thanks
to Phil!) doing proper RPKI validation, and APNIC have (tentatively) agreed
that getting RPKI+ROAs for legacy allocations should hopefully be
As you may (or may not?) know, I'm running for the Exec Committee for APNIC
in this election.
As it's a purely virtual conference this year, all the nominees have been
asked to record a short video introducing themselves, which I have done!
https://youtu.be/-SbMtphI3kw
If you think that I might
Ulick, you're going to have to speak to your upstream carrier, and get THEM
to speak to their upstream carriers.
Checking a feed from Telstra, they are not advertising your routes, or,
both of their upstreams are filtering it.
This is not something we can help with.
show ip bgp regexp _9519_
If you own, or know anyone who has a bike with those plates (and I'm
guessing NSW plates), you may be getting a nasty surprise from Linkt
yelling about non-payment of tolls.
I have those plates on my QLD Van, but Linkt have been sending me
increasingly strident demands saying that my Motorbike
I suggest you just transfer your domain away from GoDaddy, to a
different registrar, as they are notoriously useless.
If you do a bunch of domains, it might be best to go with a wholesaler and
whilst I personally recommend Synergy Wholesale, there are others you can
pick from - look at the
I've been catching up on the talks at NANOG79, and, being the massive
IPv6 proponent that I am, I was interested to read the IPv6 adoption
paper by Susan Forney, from HE.
https://storage.googleapis.com/site-media-prod/meetings/NANOG79/2194/20200530_Forney_Ipv6_Adoption_Over_v1.pdf
I was happy to
I have about 160 odd mobile phones that are currently through Telstra.
It's getting to the point where trying to get them to do anything is
like shouting into the void.
Is there anyone here who is a MVNO (doesn't need to be Telstra, but
our location doesn't have good Voda coverage) that can do
If you wanted to do this simply, just grab a linux machine with three
network interfaces, and do this (assuming eth0 is 'real' and eth1 and
eth2 are where you want to insert the tap)
brctl addbr sniff
brctl addif sniff eth1
brctl addif sniff eth2
brctl stp sniff off
You can then do a tcpdump on
I received that email, but it didn't have a CC list attached. I would
have noticed!
Original message
Message
ID
Created on:15 May 2020 at 14:14 (Delivered after 21 seconds)
From:! IPND Manager
To:
Subject:Critical Emergency Maintenance to IPND IIS Platform - Extended
Downtime Sunday 17th May
I'm watching my wife and her friends on derpbook try to consolidate
their tech support hints and tips to get the rugrats onto and into Day
1 of their remote learning, and the last thing she sent to me was
'High school has fully crashed'.
I understand that all your stuff is on fire, and everything
>
> I don't doubt that you're right Rob, but help me out here. Surely
> voice traffic is such a tiny drop in the networking-traffic bucket
> that any sort of increase is still largely insignificant.
>
> Are you saying that voice interconnects are big, fat, pipes and that
> ramping them up is a big
If you've got customers complaining about not being able to make calls
from Telstra (landlines or mobiles) there's a good chance it's because
Telstra don't have enough interconnect channels to other carriers.
It's a known issue, and people above my pay grade are caring about it.
--Rob
Google says TPG.
https://community.tpg.com.au/t5/Broadband-Internet/FTTP-IP-changing-multiple-times-a-day/td-p/19560
On Sat, 21 Mar 2020 at 08:22, Chris Barnes wrote:
> Hi peeps,
>
> Does anyone recognise these access concentrator names?
>
> syd-gls-har-bras22
> syd-gls-har-bras23
>
With Jared's message about NZ, I realised that there's going to be other
places that need remote hands that could be difficult to get smart bodies
to.
If you urgently need remote hands in the CQ region (Bundaberg, Gladstone,
Rocky, Mackay, out to Emerald), there's a reasonable chance I can get
We're having dramas talking to router as38333.sydney.megaport.com. -
you don't appear to be responding to ARPs from
as7546.sydney.megaport.com.
Unfortunately, as there's three different transit providers in the
mix, it's pretty hard to figure out where the problem is. If anyone
can reach out to
You seem to be duplicating points-of-failure there, Nathan. You
probably want this:
https://shop.duxtel.com.au/product_info.php?products_id=535
Mikrotik _and_ LTE modem, all in one, weatherproof, unit. So you can
basically do BGP/OSPF/VPN/Whatever directly from the LTE endpoint,
without adding
I was just trying to find some old post of mine from years ago, and
realised that I couldn't find the original aussie-isp (aussie.net)
archives. The taz.net ones are SORTA there, but 403'ing (but are
visible on the wayback machine)
Does anyone know where they've gone? Or, even better, if you
Unsurprisingly to most, I'm the guy who played one of the VoIP packets
(I'm in the blue Clearly IP shirt).
After his talk at LCA, I was discussing the way to handle VoIP, and I
mentioned that the way I do most VoIP client connections is via a
tunnel. This allows me to put a proper queue on the
If you have any FreePBX machines floating around, now is the time to make
sure they're up to date, ESPECIALLY if they're visible from the interwebs.
https://www.reddit.com/r/VOIP/comments/dypp36/20191119_critical_freepbx_security_vulnerability/
I backdated it for those yanks who are living in
rector
> >Clevvi ‑ Formerly 1300 Web Pro
> >p
> >1300 932 776
> >e
> >jd...@clevvi.com.au
> >w
> >clevvi.com.au
> >a
> >Unit 22, 489 South Street, Toowoomba 4350
> >
> >Unit 14, 17 Karp C
It looks like someone's broken audns.net.au DNS records, as
everything's missing APART from MX going to outlook.com... I hate to
point the finger at microsoft, but it's oh so easy...
getaddrinfo(whois.audns.net.au): Name or service not known
This site can’t be reached
whois.audns.net.au’s
Well, that's kinda the point of actually doing performance tests! 8)
If you didn't read the article, using 4 cores of a 7 year old CPU can
route 12gbit of traffic at 13% cpu (or 17gbit on a 4 year old CPU), I
think the actual data speaks for itself.
Unfortunately, after 20gbit, it gets hard to
I just spammed this all over Twatter and Derpbook, but I just noticed
a report on some Virtual Routers, and the speeds are... EXTREMELY
unexpected.
https://blog.kroy.io/2019/08/23/battle-of-the-virtual-routers
Summary:
* VyOS can route at 12Gbps at 14% CPU Load
* pfSense can route at 2Gbps
Sigh. I can't read column headings. They're not doubling. They're gone
up about 20%. Please feel free to point and laugh at the idiot.
--Rob
On Mon, 30 Sep 2019 at 12:47, Rob Thomas wrote:
>
> Slightly OT, and apologies, but I think it's relevant - TL;DR: They're
> pretty much
Slightly OT, and apologies, but I think it's relevant - TL;DR: They're
pretty much doubling the price, or more, of almost everything.
https://www.atlassian.com/licensing/future-pricing/server-pricing/faqs
If your company is getting close to renewal, then RIGHT NOW would be a
good time to run
If someone has an out-of-band way of contacting Simon, please tell him
that his domain has expired and he should renew it 8-\
(Personally, I love Cloudflare's for this sorta stuff, as this can't
happen, but each to their own!)
--Rob
On Mon, 30 Sep 2019 at 07:38, simon thomason wrote:
>
> Hi
n
> their ass your going to need something with a master clock like a real
> pabx.
>
> Matt
>
>
> On 20/9/19 9:00 am, Rob Thomas wrote:
> > I was reminiscing on derpbook, and realised that it would be a
> > RIDICULOUSLY insane idea to try to recreate a 56k dialup I
I was reminiscing on derpbook, and realised that it would be a
RIDICULOUSLY insane idea to try to recreate a 56k dialup ISP in 2020.
So I'm going to do it.
To further this plan, I'm hoping that someone has some old Bay
5000/5399's lying around that they paid megabucks for and are now
worth less
As the resident VoIP guy, let me just say - this is not an Aussie
issue. One way Audio is *always* NAT (and the 0.01% time it's not, is
not statistically significant).
If you're running a VPN, and traffic is flowing over that VPN, then
whatever is on the other end of that VPN is getting confused
of their choice next time
we are in beverage-providing proximity.
--Rob
On Sun, 25 Aug 2019 at 18:54, Rob Thomas wrote:
>
> I was rebuilding my local network over the weekend, and as part of
> that I had to relocate and reconfigure my Stratum 1 NTP server. As I
> was fine turning it,
I was rebuilding my local network over the weekend, and as part of
that I had to relocate and reconfigure my Stratum 1 NTP server. As I
was fine turning it, I discovered a significant number of Au NTP
servers are misconfigured, and I thought I'd post a few quick tips
here, for anyone providing a
I haven't gone as far as actually opening a TICKET yet (let's not do
things officially, what a crazy idea), but I'm wondering if anyone
else has had reports of traffic loss to NeuStar hosted networks.
This started happening about the middle of last week, apparently, and
it was only escalated to
Oh, I forgot to say there's a doctrine library for storing the data,
too, at https://github.com/xrobau/ipnd-db - but that's not documented
AT ALL. Feel free to pay me loads of money for consulting if you want
8)
On Thu, 2 May 2019 at 21:02, Rob Thomas wrote:
>
> https://github.com/xroba
https://github.com/xrobau/ipnd
On Thu., 2 May 2019, 8:47 pm Narelle Clark, wrote:
> Hi all
> I'm reviewing the approach to IPND for someone - does anyone have any
> good scripts or approaches they would like to share?
>
> I'm a bit hesitant to reinvent the wheel, but I'm starting to dust off
Not wanting to blow my own trumpet here, but I did create FreePBX
(open source Asterisk PBX), and I do happen to do hosted PBX's on
https://freepbxhosting.com.au which includes calls.
If you want to help out an Open Source developer and let me buy REAL
Pepsi instead of this LA Ice stuff, you can
For those with popcorn, here's the running update (and, after typing
all this, I realise it may not be of interest to everyone on the list
- but it's a REALLY GOOD EXAMPLE of what not to do, so if you're
involved in security at YOUR org, please take notes. Specifically -
ALWAYS HAVE A 'security@'
Quick summary of the problem:
* From the description it appears to be a kernel-level issue - when a
MikroTik device receives a magic IPv6 packet, it will panic.
* MikroTik have known about it for almost a year, and have not fixed it.
* It is not fixed in the latest 6.44.1 image
* The discoverer
I've recently got FreePBX Hosting up and running -
https://freepbxhosting.com.au. But getting a NBN connection turned on
within 4 days is going to be an epic challenge, and I wish you the best 8)
On Tue, 26 Mar 2019 at 09:26, noc wrote:
> Hi All
>
>
>
> Seeking a provider who can offer an NBN
I'm actually IN Gladstone, so things are fine 8)
On Thu., 7 Mar. 2019, 7:38 pm , wrote:
> Bradley,
>
> If you get stuck, let me know. I have guys in Gladstone who might be able
> to assist.
>
> - Simon
>
> > On 7 Mar 2019, at 17:49, Bradley Amm wrote:
> >
> > Hey Guys
> >
> > Does anyone have
> wrong handset rings and can't take inbound calls.
Welcome to SIP Natpocolypse.
This - specifically the wrong handset ringing - is caused because the
router you are using is forgetting which phone is mapped to which
port.
The super simple easy way to fix this is to give every phone a unique
I am perfectly happy to sell anyone who wants one a Rasperry Pi in a
big heavy metal box. I'll stick 'SUPER ACCURATE NTP SERVER' on the
front, and you just need to plug it in. I think AUD$1000 ex GST sounds
acceptable. Please form an orderly queue to the left. For an EXTRA
$800, I'll stick a
As someone who runs a few Stratum 1 and 2 servers, pool.ntp.org checks my
servers every 15 minutes or so, and if they're more than 50ms out, they're
de-prioritized, until they're removed. It's all completely automatic.
Example: https://www.ntppool.org/scores/203.4.240.10
I think this is more an
After discussing this internally, I went to check if my (Telstra NBN)
SIP DOT trunk survived - that was down too, between 6:02am and 6:22am
(there's a bit of latency on checks, so it may have been spot-on 6am).
Russell, if you were unaware, you may want to poke someone about that,
too, as (as far
> BGPmon says ours was hijacked at 20:19 UTC or 7:19am AEDT.
There appears to have been TWO events this morning. One at around
6am-ish (non-DST, so 7:19am DST looks correct), and another brief one
at about 7:10am (+1 DST) for 4 minute - the second MAY be unrelated,
but SOME peers in Mega BNE
I'm assuming you mean 3CX. It has generally good reviews, but I would
recommend FreePBX, but that is because I wrote it 8)
There's a pile of people who offer commercial support for it.
--Rob
On Fri., 9 Nov. 2018, 3:34 pm Rahul Chawla Hello Lovely people,
>
> Happy Friday !
>
> - Is there any
This was asked just a month ago -
http://lists.ausnog.net/pipermail/ausnog/2018-September/041627.html
--Rob
On Sun, 14 Oct 2018 at 23:05, Daniel Watson wrote:
> Hi Guys,
>
> Apologies about the noise at this hour.
>
> I am seeking your assistance in finding a company in which I can host a
>
s-erroneous-article/
>>
>> MMC
>>
>> On Fri, Oct 5, 2018 at 2:18 PM Rob Thomas wrote:
>>
>>> Odd. I've messaged the mods, I had a bit.ly link in it, which may have
>>> triggered the spamfilter.
>>>
>>> I've p
Odd. I've messaged the mods, I had a bit.ly link in it, which may have
triggered the spamfilter.
I've pastebin'ed the text here -- https://pastebin.com/mVpqNa38
--Rob
On Fri, 5 Oct 2018 at 14:43, Bill Woodcock wrote:
>
>
> > On Oct 4, 2018, at 9:39 PM, Rob Thomas wrote:
>
I posed to /r/netsec if anyone cares to take the discussion there, and
expanded on my original post a bit. I'm even more certain that this is
fabricated, the more I think about it.
https://www.reddit.com/r/netsec/comments/9lj7mx/the_bloomberg_article_about_supermicro_is_bogus/
?
--Rob
On Fri,
I've been doing some research on my own, to see if ANYTHING corroborates
this, and I'm coming up empty handed. (This is the bonus of being
unemployed!)
Let's go through a few assertions in the original article.
1. It was an extremely small chip ('grain of rice'), disguised as a signal
coupler
t; wrote:
>>
>> For Comparison ~200m of copper gets you:
>>
>> https://pastebin.freepbx.org/view/01d00095
>>
>> -M
>>
>> -Original Message-----
>> From: AusNOG [mailto:ausnog-boun...@lists.ausnog.net] On Behalf Of Rob Thomas
>> Sent: Th
https://pastebin.freepbx.org/view/c383aa55
Attainable Rate:138550 kbits/s 54190 kbits/s
I am probably 20 meters of cable, if that, from the node 8)
--Rob
___
AusNOG mailing list
AusNOG@lists.ausnog.net
I hate to be the ones COMPLIMENTING the Gumbyment, but it's nowhere
near as bad as I thought they were going to make it. It looks like
they've actually spoken to some people who udnerstand crypto.
The important bits seem to be on Pages 8 and 9 here -
Anyone happen to have any old DSLAM's lying around? ADSL1 is fine, I just
need something that I can plug Ethernet (or fibre or whatever) into one
end, and wave some magic wand to get data to an ADSL device on the other
end.
This will not be connected to the PSTN, and is purely for a testing
>
>
> Can a pair of Mikrotik routers be configured for a **reliable** HA
> scenario ?
>
>
>
Yep, using VRRP, they work really well. You don't even need any 'tricky'
bits - for example, if you bind your BGP to the floating IP address, it
won't start the BGP session until the IP address is present.
63 matches
Mail list logo
