From chris at thesysadmin.dev Wed Dec 1 12:52:19 2021 From: chris at thesysadmin.dev (Christopher Hawker) Date: Wed, 1 Dec 2021 01:52:19 +0000 Subject: [AusNOG] Configuration of a Sophos XGS 2100 Appliance Message-ID: Hello all, Looking to draw on the skill of someone with Sophos experience. We are attempting to configure web filtering using AD security groups, however the appliance is not checking if the user is in the group, specified in the firewall rule to see if it matches. Our AD server has been added to the appliance and groups imported. Any replies off-list would be appreciated. Thanks, CH. -------------- next part -------------- An HTML attachment was scrubbed... URL: From chris at thesysadmin.dev Fri Dec 3 12:25:25 2021 From: chris at thesysadmin.dev (Christopher Hawker) Date: Fri, 3 Dec 2021 01:25:25 +0000 Subject: [AusNOG] Microsoft 365 Mobile App Alerts Message-ID: Hi all, Has anyone else with the Microsoft 365 Admin iOS mobile app installed been spammed with about 40 "Microsoft OneDrive & SharePoint Library dropdown menu" notifications over the last 20 minutes? They continue to flood in as I send this e-mail. CH -------------- next part -------------- An HTML attachment was scrubbed... URL: From me at thomasjones.id.au Fri Dec 3 12:27:37 2021 From: me at thomasjones.id.au (Thomas Jones) Date: Fri, 3 Dec 2021 01:27:37 +0000 Subject: [AusNOG] Microsoft 365 Mobile App Alerts In-Reply-To: References: Message-ID: I'm glad it's not just me - my phone's been exploding for about the same time period... Kind regards, Thomas Jones M: 0467 283 967 E: me at thomasjones.id.au From: AusNOG On Behalf Of Christopher Hawker Sent: Friday, 3 December 2021 11:25 AM To: ausnog at lists.ausnog.net Subject: [AusNOG] Microsoft 365 Mobile App Alerts Hi all, Has anyone else with the Microsoft 365 Admin iOS mobile app installed been spammed with about 40 "Microsoft OneDrive & SharePoint Library dropdown menu" notifications over the last 20 minutes? They continue to flood in as I send this e-mail. CH -------------- next part -------------- An HTML attachment was scrubbed... URL: From dave at dlbnetworks.com Fri Dec 3 12:44:05 2021 From: dave at dlbnetworks.com (Dave Browning) Date: Fri, 3 Dec 2021 11:44:05 +1000 Subject: [AusNOG] Microsoft 365 Mobile App Alerts In-Reply-To: References: Message-ID: <7406146C-9C9C-433B-934D-0651282701CC@dlbnetworks.com> https://twitter.com/MSFT365Status/status/1466583834326097921 > On 3 Dec 2021, at 11:27 am, Thomas Jones wrote: > > I?m glad it?s not just me ? my phone?s been exploding for about the same time period? > Kind regards, > Thomas Jones > M: 0467 283 967 > E: me at thomasjones.id.au > > From: AusNOG On Behalf Of Christopher Hawker > Sent: Friday, 3 December 2021 11:25 AM > To: ausnog at lists.ausnog.net > Subject: [AusNOG] Microsoft 365 Mobile App Alerts > > Hi all, > > Has anyone else with the Microsoft 365 Admin iOS mobile app installed been spammed with about 40 "Microsoft OneDrive & SharePoint Library dropdown menu" notifications over the last 20 minutes? They continue to flood in as I send this e-mail. > > CH > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From glp71s at gmail.com Sun Dec 5 12:27:23 2021 From: glp71s at gmail.com (Giles Pollock) Date: Sun, 5 Dec 2021 12:27:23 +1100 Subject: [AusNOG] Bit of a long shot but... Message-ID: Does anyone know who now looks after the old email services inherited from Eftel, which Eftel inherited from previous other consolidation/merger activities? I'm fairly sure an email server hosting a client of mine has been forgotten about and has managed to run out of disk space, and I can't seem to get hold of anyone who recognises it actually exists... Starting to feel a bit like this has come to life... http://bash.org/?5273 Giles -------------- next part -------------- An HTML attachment was scrubbed... URL: From troy at troykelly.com Sun Dec 5 12:55:42 2021 From: troy at troykelly.com (Troy) Date: Sun, 05 Dec 2021 01:55:42 +0000 Subject: [AusNOG] fetchtv.micdn.net.au acme token exposed by Constellix Message-ID: Not entirely network related - but I still consider it important. Constellix (with whom I have a hate-hate relationship) seems to have exposed the acme keys for?fetchtv.micdn.net.au [Screen Shot 2021-12-05 at 12.52.49 pm.png] Regards, Troy Brevity is the elixir of life. Father Hector McGrath, Pixie 2020 -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Screen Shot 2021-12-05 at 12.52.49 pm.png Type: image/png Size: 233030 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: publickey - troy at troykelly.com - 0x3DB9B3FB.asc Type: application/pgp-keys Size: 3225 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 855 bytes Desc: OpenPGP digital signature URL: From kauer at biplane.com.au Sun Dec 5 12:59:37 2021 From: kauer at biplane.com.au (Karl Auer) Date: Sun, 05 Dec 2021 12:59:37 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: <427f03373c94361d0e59fb19cd9b596e5b2f3f72.camel@biplane.com.au> On Sun, 2021-12-05 at 12:27 +1100, Giles Pollock wrote: > I'm fairly sure an email server hosting a client of mine > has been forgotten about and has managed to run out of disk space, > and I can't seem to get hold of anyone who recognises it actually > exists... Follow the money. It's unlikely anybody is running it for free. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer at biplane.com.au) http://www.biplane.com.au/kauer GPG fingerprint: 61A0 99A9 8823 3A75 871E 5D90 BADB B237 260C 9C58 Old fingerprint: 2561 E9EC D868 E73C 8AF1 49CF EE50 4B1D CCA1 5170 From justinjoncourtney at gmail.com Sun Dec 5 13:28:46 2021 From: justinjoncourtney at gmail.com (Justin Courtney) Date: Sun, 5 Dec 2021 13:28:46 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: Which provider is it? Eftel mostly but not completely went one way. On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: > Does anyone know who now looks after the old email services inherited from > Eftel, which Eftel inherited from previous other consolidation/merger > activities? I'm fairly sure an email server hosting a client of mine has > been forgotten about and has managed to run out of disk space, and I can't > seem to get hold of anyone who recognises it actually exists... > > Starting to feel a bit like this has come to life... http://bash.org/?5273 > > Giles > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From glp71s at gmail.com Sun Dec 5 13:33:45 2021 From: glp71s at gmail.com (Giles Pollock) Date: Sun, 5 Dec 2021 13:33:45 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: It was once eftel, and prior to that it was a company called impaq back in the early 2000s. I know eftel has moved some of their mail services over to iprimus resources, but this particular server definitely hasn't been moved.... On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney wrote: > Which provider is it? Eftel mostly but not completely went one way. > > On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: > >> Does anyone know who now looks after the old email services inherited >> from Eftel, which Eftel inherited from previous other consolidation/merger >> activities? I'm fairly sure an email server hosting a client of mine has >> been forgotten about and has managed to run out of disk space, and I can't >> seem to get hold of anyone who recognises it actually exists... >> >> Starting to feel a bit like this has come to life... >> http://bash.org/?5273 >> >> Giles >> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> http://lists.ausnog.net/mailman/listinfo/ausnog >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From justinjoncourtney at gmail.com Sun Dec 5 13:35:03 2021 From: justinjoncourtney at gmail.com (Justin Courtney) Date: Sun, 5 Dec 2021 13:35:03 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: Do you know it's name, a realm, something? On Sun, 5 Dec 2021, 13:33 Giles Pollock, wrote: > It was once eftel, and prior to that it was a company called impaq back in > the early 2000s. I know eftel has moved some of their mail services over to > iprimus resources, but this particular server definitely hasn't been > moved.... > > On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney < > justinjoncourtney at gmail.com> wrote: > >> Which provider is it? Eftel mostly but not completely went one way. >> >> On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: >> >>> Does anyone know who now looks after the old email services inherited >>> from Eftel, which Eftel inherited from previous other consolidation/merger >>> activities? I'm fairly sure an email server hosting a client of mine has >>> been forgotten about and has managed to run out of disk space, and I can't >>> seem to get hold of anyone who recognises it actually exists... >>> >>> Starting to feel a bit like this has come to life... >>> http://bash.org/?5273 >>> >>> Giles >>> _______________________________________________ >>> AusNOG mailing list >>> AusNOG at lists.ausnog.net >>> http://lists.ausnog.net/mailman/listinfo/ausnog >>> >> -------------- next part -------------- An HTML attachment was scrubbed... URL: From troy at troykelly.com Sun Dec 5 13:35:23 2021 From: troy at troykelly.com (Troy) Date: Sun, 05 Dec 2021 02:35:23 +0000 Subject: [AusNOG] fetchtv.micdn.net.au acme token exposed by Constellix In-Reply-To: <40F0EB8D-FD36-4680-8A49-C34D94D31A9D@terminaloutcomes.com> References: <40F0EB8D-FD36-4680-8A49-C34D94D31A9D@terminaloutcomes.com> Message-ID: Totally understand James. I guess my point is more that Constellix shouldn't be emailing their entire customer base the DNS changes of another client. I know I'd prefer they wouldn't email my dns changes to others... Regards, Troy Brevity is the elixir of life. Father Hector McGrath, Pixie 2020 ??????? Original Message ??????? On Sunday, December 5th, 2021 at 1:33 PM, James Hodgkinson wrote: > ACME challenges are one-use lifetime-limited responses to certificate signing requests and have to be in public DNS... and it's gone now anyway. > > https://letsencrypt.org/docs/challenge-types/? > > James > > > On 5 Dec 2021, at 11:55, Troy wrote: > > > > Not entirely network related - but I still consider it important. > > > > Constellix (with whom I have a hate-hate relationship) seems to have exposed the acme keys for?fetchtv.micdn.net.au > > > > > > > > Regards, Troy > > Brevity is the elixir of life. > > Father Hector McGrath, Pixie 2020 > > > > _______________________________________________ > > > > AusNOG mailing list > > > > AusNOG at lists.ausnog.net > > > > http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: publickey - troy at troykelly.com - 0x3DB9B3FB.asc Type: application/pgp-keys Size: 3225 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 855 bytes Desc: OpenPGP digital signature URL: From andrew at thetubes.com.au Sun Dec 5 13:37:27 2021 From: andrew at thetubes.com.au (Andrew Robinson) Date: Sun, 5 Dec 2021 02:37:27 +0000 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: I believe that it may be managed by Commander. Thanks, Andrew ________________________________ From: AusNOG on behalf of Justin Courtney Sent: Sunday, December 5, 2021 1:35:03 PM To: Giles Pollock Cc: Subject: Re: [AusNOG] Bit of a long shot but... [This email originated from outside the organisation] Do you know it's name, a realm, something? On Sun, 5 Dec 2021, 13:33 Giles Pollock, > wrote: It was once eftel, and prior to that it was a company called impaq back in the early 2000s. I know eftel has moved some of their mail services over to iprimus resources, but this particular server definitely hasn't been moved.... On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney > wrote: Which provider is it? Eftel mostly but not completely went one way. On Sun, 5 Dec 2021, 12:28 Giles Pollock, > wrote: Does anyone know who now looks after the old email services inherited from Eftel, which Eftel inherited from previous other consolidation/merger activities? I'm fairly sure an email server hosting a client of mine has been forgotten about and has managed to run out of disk space, and I can't seem to get hold of anyone who recognises it actually exists... Starting to feel a bit like this has come to life... http://bash.org/?5273 Giles _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From glp71s at gmail.com Sun Dec 5 13:47:38 2021 From: glp71s at gmail.com (Giles Pollock) Date: Sun, 5 Dec 2021 13:47:38 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: Server identifies as sv2.per.eftel.com apparently... On Sun, Dec 5, 2021 at 1:35 PM Justin Courtney wrote: > Do you know it's name, a realm, something? > > On Sun, 5 Dec 2021, 13:33 Giles Pollock, wrote: > >> It was once eftel, and prior to that it was a company called impaq back >> in the early 2000s. I know eftel has moved some of their mail services over >> to iprimus resources, but this particular server definitely hasn't been >> moved.... >> >> On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney < >> justinjoncourtney at gmail.com> wrote: >> >>> Which provider is it? Eftel mostly but not completely went one way. >>> >>> On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: >>> >>>> Does anyone know who now looks after the old email services inherited >>>> from Eftel, which Eftel inherited from previous other consolidation/merger >>>> activities? I'm fairly sure an email server hosting a client of mine has >>>> been forgotten about and has managed to run out of disk space, and I can't >>>> seem to get hold of anyone who recognises it actually exists... >>>> >>>> Starting to feel a bit like this has come to life... >>>> http://bash.org/?5273 >>>> >>>> Giles >>>> _______________________________________________ >>>> AusNOG mailing list >>>> AusNOG at lists.ausnog.net >>>> http://lists.ausnog.net/mailman/listinfo/ausnog >>>> >>> -------------- next part -------------- An HTML attachment was scrubbed... URL: From glp71s at gmail.com Sun Dec 5 13:48:54 2021 From: glp71s at gmail.com (Giles Pollock) Date: Sun, 5 Dec 2021 13:48:54 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: I've checked with my client and they've never had any dealings with Commander, so if it has gone to them, then chances are the service has fallen through the cracks. I suspect Monday will be rather interesting if I have to try and work my way through the contact centres to figure out where it has all gone! On Sun, Dec 5, 2021 at 1:37 PM Andrew Robinson wrote: > I believe that it may be managed by Commander. > > Thanks, > Andrew > ------------------------------ > *From:* AusNOG on behalf of Justin > Courtney > *Sent:* Sunday, December 5, 2021 1:35:03 PM > *To:* Giles Pollock > *Cc:* > *Subject:* Re: [AusNOG] Bit of a long shot but... > > [This email originated from outside the organisation] > > > Do you know it's name, a realm, something? > > On Sun, 5 Dec 2021, 13:33 Giles Pollock, wrote: > > It was once eftel, and prior to that it was a company called impaq back in > the early 2000s. I know eftel has moved some of their mail services over to > iprimus resources, but this particular server definitely hasn't been > moved.... > > On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney < > justinjoncourtney at gmail.com> wrote: > > Which provider is it? Eftel mostly but not completely went one way. > > On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: > > Does anyone know who now looks after the old email services inherited from > Eftel, which Eftel inherited from previous other consolidation/merger > activities? I'm fairly sure an email server hosting a client of mine has > been forgotten about and has managed to run out of disk space, and I can't > seem to get hold of anyone who recognises it actually exists... > > Starting to feel a bit like this has come to life... http://bash.org/?5273 > > Giles > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Nathan.Brookfield at iperium.com.au Sun Dec 5 13:56:58 2021 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Sun, 5 Dec 2021 02:56:58 +0000 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: They?ve probably just been billed by Vocus directly? Nathan Brookfield General Manager p: 1300 592 330 | m: 0412 266 008 | w: https://Iperium.com.au Level 7, 82 Elizabeth Street, Sydney NSW 2000 Your Connectivity Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. On 5 Dec 2021, at 13:49, Giles Pollock wrote: ? I've checked with my client and they've never had any dealings with Commander, so if it has gone to them, then chances are the service has fallen through the cracks. I suspect Monday will be rather interesting if I have to try and work my way through the contact centres to figure out where it has all gone! On Sun, Dec 5, 2021 at 1:37 PM Andrew Robinson > wrote: I believe that it may be managed by Commander. Thanks, Andrew ________________________________ From: AusNOG > on behalf of Justin Courtney > Sent: Sunday, December 5, 2021 1:35:03 PM To: Giles Pollock > Cc: > > Subject: Re: [AusNOG] Bit of a long shot but... [This email originated from outside the organisation] Do you know it's name, a realm, something? On Sun, 5 Dec 2021, 13:33 Giles Pollock, > wrote: It was once eftel, and prior to that it was a company called impaq back in the early 2000s. I know eftel has moved some of their mail services over to iprimus resources, but this particular server definitely hasn't been moved.... On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney > wrote: Which provider is it? Eftel mostly but not completely went one way. On Sun, 5 Dec 2021, 12:28 Giles Pollock, > wrote: Does anyone know who now looks after the old email services inherited from Eftel, which Eftel inherited from previous other consolidation/merger activities? I'm fairly sure an email server hosting a client of mine has been forgotten about and has managed to run out of disk space, and I can't seem to get hold of anyone who recognises it actually exists... Starting to feel a bit like this has come to life... http://bash.org/?5273 Giles _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From glp71s at gmail.com Sun Dec 5 14:06:16 2021 From: glp71s at gmail.com (Giles Pollock) Date: Sun, 5 Dec 2021 14:06:16 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: Apparently not! It is looking more and more like the whole service has been forgotten about. There is also a web and domain hosting arrangement which seems to have vanished, although the service obviously still exists. Interestingly this isn't the first time this has happened either, but being such a small thing nobody ever really noticed. On Sun, Dec 5, 2021 at 1:57 PM Nathan Brookfield < Nathan.Brookfield at iperium.com.au> wrote: > They?ve probably just been billed by Vocus directly? > > *Nathan Brookfield * > General Manager > > *p*: 1300 592 330 | *m*: 0412 266 008 | *w*: https://Iperium.com.au > > > Level 7, 82 Elizabeth Street, Sydney NSW 2000 > > *Your Connectivity Team* > > > > > DISCLAIMER: This document is intended solely for the named addressee. This > electronic communication, which includes any files or attachments thereto, > contains proprietary or confidential information and may be privileged and > otherwise protected under copyright or other applicable intellectual > property laws. The use, disclosure, copying or distribution of any of the > information contained in this document, by any person other than the > addressee, is strictly prohibited. If you received this document in error, > please contact the sender immediately and delete all the material from any > computer. Confidentiality and legal privilege are not waived or lost by > reason of mistaken delivery to you. Any views or opinions presented are > solely those of the author and do not necessarily represent those of > Iperium. > > WARNING: Computer viruses can be transmitted via email. The recipient > should check this email and any attachments for the presence of viruses. > Iperium accepts no liability for any damage caused by any virus transmitted > by this email. > > On 5 Dec 2021, at 13:49, Giles Pollock wrote: > > ? > I've checked with my client and they've never had any dealings with > Commander, so if it has gone to them, then chances are the service has > fallen through the cracks. I suspect Monday will be rather interesting if I > have to try and work my way through the contact centres to figure out where > it has all gone! > > On Sun, Dec 5, 2021 at 1:37 PM Andrew Robinson > wrote: > >> I believe that it may be managed by Commander. >> >> Thanks, >> Andrew >> ------------------------------ >> *From:* AusNOG on behalf of Justin >> Courtney >> *Sent:* Sunday, December 5, 2021 1:35:03 PM >> *To:* Giles Pollock >> *Cc:* >> *Subject:* Re: [AusNOG] Bit of a long shot but... >> >> [This email originated from outside the organisation] >> >> >> Do you know it's name, a realm, something? >> >> On Sun, 5 Dec 2021, 13:33 Giles Pollock, wrote: >> >> It was once eftel, and prior to that it was a company called impaq back >> in the early 2000s. I know eftel has moved some of their mail services over >> to iprimus resources, but this particular server definitely hasn't been >> moved.... >> >> On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney < >> justinjoncourtney at gmail.com> wrote: >> >> Which provider is it? Eftel mostly but not completely went one way. >> >> On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: >> >> Does anyone know who now looks after the old email services inherited >> from Eftel, which Eftel inherited from previous other consolidation/merger >> activities? I'm fairly sure an email server hosting a client of mine has >> been forgotten about and has managed to run out of disk space, and I can't >> seem to get hold of anyone who recognises it actually exists... >> >> Starting to feel a bit like this has come to life... >> http://bash.org/?5273 >> >> Giles >> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> http://lists.ausnog.net/mailman/listinfo/ausnog >> >> _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Nathan.Brookfield at iperium.com.au Sun Dec 5 14:10:17 2021 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Sun, 5 Dec 2021 03:10:17 +0000 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: Are they just getting it for free? On 5 Dec 2021, at 14:06, Giles Pollock wrote: ? Apparently not! It is looking more and more like the whole service has been forgotten about. There is also a web and domain hosting arrangement which seems to have vanished, although the service obviously still exists. Interestingly this isn't the first time this has happened either, but being such a small thing nobody ever really noticed. On Sun, Dec 5, 2021 at 1:57 PM Nathan Brookfield > wrote: They?ve probably just been billed by Vocus directly? Nathan Brookfield General Manager p: 1300 592 330 | m: 0412 266 008 | w: https://Iperium.com.au Level 7, 82 Elizabeth Street, Sydney NSW 2000 Your Connectivity Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. On 5 Dec 2021, at 13:49, Giles Pollock > wrote: ? I've checked with my client and they've never had any dealings with Commander, so if it has gone to them, then chances are the service has fallen through the cracks. I suspect Monday will be rather interesting if I have to try and work my way through the contact centres to figure out where it has all gone! On Sun, Dec 5, 2021 at 1:37 PM Andrew Robinson > wrote: I believe that it may be managed by Commander. Thanks, Andrew ________________________________ From: AusNOG > on behalf of Justin Courtney > Sent: Sunday, December 5, 2021 1:35:03 PM To: Giles Pollock > Cc: > > Subject: Re: [AusNOG] Bit of a long shot but... [This email originated from outside the organisation] Do you know it's name, a realm, something? On Sun, 5 Dec 2021, 13:33 Giles Pollock, > wrote: It was once eftel, and prior to that it was a company called impaq back in the early 2000s. I know eftel has moved some of their mail services over to iprimus resources, but this particular server definitely hasn't been moved.... On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney > wrote: Which provider is it? Eftel mostly but not completely went one way. On Sun, 5 Dec 2021, 12:28 Giles Pollock, > wrote: Does anyone know who now looks after the old email services inherited from Eftel, which Eftel inherited from previous other consolidation/merger activities? I'm fairly sure an email server hosting a client of mine has been forgotten about and has managed to run out of disk space, and I can't seem to get hold of anyone who recognises it actually exists... Starting to feel a bit like this has come to life... http://bash.org/?5273 Giles _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From glp71s at gmail.com Sun Dec 5 14:18:07 2021 From: glp71s at gmail.com (Giles Pollock) Date: Sun, 5 Dec 2021 14:18:07 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: Not exactly, they are paying for the domain name via Melbourne IT (sigh) and for other email hosting services, which is why this has apparently gone unnoticed for some time. The web hosting and one of the other email hosting services seems to have simply vanished some time ago, a few years after we had a similar issue where it vanished from the bills and I caught on to the fact the bill was way lower than it should have been. I think because it is a small client on shared and very much obsolete infrastructure, nobody ever noticed... The webserver is still running Apache 2.2.16, which went EOL years ago. Ideally if the billing situation does get fixed as I expect it will be, I would hope the service would be migrated to infrastructure that isn't so old it could feasibly be entering highschool by now! On Sun, Dec 5, 2021 at 2:10 PM Nathan Brookfield < Nathan.Brookfield at iperium.com.au> wrote: > Are they just getting it for free? > > On 5 Dec 2021, at 14:06, Giles Pollock wrote: > > ? > Apparently not! It is looking more and more like the whole service has > been forgotten about. There is also a web and domain hosting arrangement > which seems to have vanished, although the service obviously still exists. > Interestingly this isn't the first time this has happened either, but being > such a small thing nobody ever really noticed. > > On Sun, Dec 5, 2021 at 1:57 PM Nathan Brookfield < > Nathan.Brookfield at iperium.com.au> wrote: > >> They?ve probably just been billed by Vocus directly? >> >> *Nathan Brookfield * >> General Manager >> >> *p*: 1300 592 330 | *m*: 0412 266 008 | *w*: https://Iperium.com.au >> >> >> Level 7, 82 Elizabeth Street, Sydney NSW 2000 >> >> *Your Connectivity Team* >> >> >> >> >> DISCLAIMER: This document is intended solely for the named addressee. >> This electronic communication, which includes any files or attachments >> thereto, contains proprietary or confidential information and may be >> privileged and otherwise protected under copyright or other applicable >> intellectual property laws. The use, disclosure, copying or distribution of >> any of the information contained in this document, by any person other than >> the addressee, is strictly prohibited. If you received this document in >> error, please contact the sender immediately and delete all the material >> from any computer. Confidentiality and legal privilege are not waived or >> lost by reason of mistaken delivery to you. Any views or opinions presented >> are solely those of the author and do not necessarily represent those of >> Iperium. >> >> WARNING: Computer viruses can be transmitted via email. The recipient >> should check this email and any attachments for the presence of viruses. >> Iperium accepts no liability for any damage caused by any virus transmitted >> by this email. >> >> On 5 Dec 2021, at 13:49, Giles Pollock wrote: >> >> ? >> I've checked with my client and they've never had any dealings with >> Commander, so if it has gone to them, then chances are the service has >> fallen through the cracks. I suspect Monday will be rather interesting if I >> have to try and work my way through the contact centres to figure out where >> it has all gone! >> >> On Sun, Dec 5, 2021 at 1:37 PM Andrew Robinson >> wrote: >> >>> I believe that it may be managed by Commander. >>> >>> Thanks, >>> Andrew >>> ------------------------------ >>> *From:* AusNOG on behalf of Justin >>> Courtney >>> *Sent:* Sunday, December 5, 2021 1:35:03 PM >>> *To:* Giles Pollock >>> *Cc:* >>> *Subject:* Re: [AusNOG] Bit of a long shot but... >>> >>> [This email originated from outside the organisation] >>> >>> >>> Do you know it's name, a realm, something? >>> >>> On Sun, 5 Dec 2021, 13:33 Giles Pollock, wrote: >>> >>> It was once eftel, and prior to that it was a company called impaq back >>> in the early 2000s. I know eftel has moved some of their mail services over >>> to iprimus resources, but this particular server definitely hasn't been >>> moved.... >>> >>> On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney < >>> justinjoncourtney at gmail.com> wrote: >>> >>> Which provider is it? Eftel mostly but not completely went one way. >>> >>> On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: >>> >>> Does anyone know who now looks after the old email services inherited >>> from Eftel, which Eftel inherited from previous other consolidation/merger >>> activities? I'm fairly sure an email server hosting a client of mine has >>> been forgotten about and has managed to run out of disk space, and I can't >>> seem to get hold of anyone who recognises it actually exists... >>> >>> Starting to feel a bit like this has come to life... >>> http://bash.org/?5273 >>> >>> Giles >>> _______________________________________________ >>> AusNOG mailing list >>> AusNOG at lists.ausnog.net >>> http://lists.ausnog.net/mailman/listinfo/ausnog >>> >>> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> http://lists.ausnog.net/mailman/listinfo/ausnog >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From justinjoncourtney at gmail.com Sun Dec 5 15:24:48 2021 From: justinjoncourtney at gmail.com (Justin Courtney) Date: Sun, 5 Dec 2021 15:24:48 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: I replied to you with a contact off list. Did you get it Giles? On Sun, 5 Dec 2021, 14:18 Giles Pollock, wrote: > Not exactly, they are paying for the domain name via Melbourne IT (sigh) > and for other email hosting services, which is why this has apparently gone > unnoticed for some time. The web hosting and one of the other email hosting > services seems to have simply vanished some time ago, a few years after we > had a similar issue where it vanished from the bills and I caught on to the > fact the bill was way lower than it should have been. I think because it is > a small client on shared and very much obsolete infrastructure, nobody ever > noticed... The webserver is still running Apache 2.2.16, which went EOL > years ago. > > Ideally if the billing situation does get fixed as I expect it will be, I > would hope the service would be migrated to infrastructure that isn't so > old it could feasibly be entering highschool by now! > > On Sun, Dec 5, 2021 at 2:10 PM Nathan Brookfield < > Nathan.Brookfield at iperium.com.au> wrote: > >> Are they just getting it for free? >> >> On 5 Dec 2021, at 14:06, Giles Pollock wrote: >> >> ? >> Apparently not! It is looking more and more like the whole service has >> been forgotten about. There is also a web and domain hosting arrangement >> which seems to have vanished, although the service obviously still exists. >> Interestingly this isn't the first time this has happened either, but being >> such a small thing nobody ever really noticed. >> >> On Sun, Dec 5, 2021 at 1:57 PM Nathan Brookfield < >> Nathan.Brookfield at iperium.com.au> wrote: >> >>> They?ve probably just been billed by Vocus directly? >>> >>> *Nathan Brookfield * >>> General Manager >>> >>> *p*: 1300 592 330 | *m*: 0412 266 008 | *w*: https://Iperium.com.au >>> >>> >>> Level 7, 82 Elizabeth Street, Sydney NSW 2000 >>> >>> *Your Connectivity Team* >>> >>> >>> >>> >>> DISCLAIMER: This document is intended solely for the named addressee. >>> This electronic communication, which includes any files or attachments >>> thereto, contains proprietary or confidential information and may be >>> privileged and otherwise protected under copyright or other applicable >>> intellectual property laws. The use, disclosure, copying or distribution of >>> any of the information contained in this document, by any person other than >>> the addressee, is strictly prohibited. If you received this document in >>> error, please contact the sender immediately and delete all the material >>> from any computer. Confidentiality and legal privilege are not waived or >>> lost by reason of mistaken delivery to you. Any views or opinions presented >>> are solely those of the author and do not necessarily represent those of >>> Iperium. >>> >>> WARNING: Computer viruses can be transmitted via email. The recipient >>> should check this email and any attachments for the presence of viruses. >>> Iperium accepts no liability for any damage caused by any virus transmitted >>> by this email. >>> >>> On 5 Dec 2021, at 13:49, Giles Pollock wrote: >>> >>> ? >>> I've checked with my client and they've never had any dealings with >>> Commander, so if it has gone to them, then chances are the service has >>> fallen through the cracks. I suspect Monday will be rather interesting if I >>> have to try and work my way through the contact centres to figure out where >>> it has all gone! >>> >>> On Sun, Dec 5, 2021 at 1:37 PM Andrew Robinson >>> wrote: >>> >>>> I believe that it may be managed by Commander. >>>> >>>> Thanks, >>>> Andrew >>>> ------------------------------ >>>> *From:* AusNOG on behalf of Justin >>>> Courtney >>>> *Sent:* Sunday, December 5, 2021 1:35:03 PM >>>> *To:* Giles Pollock >>>> *Cc:* >>>> *Subject:* Re: [AusNOG] Bit of a long shot but... >>>> >>>> [This email originated from outside the organisation] >>>> >>>> >>>> Do you know it's name, a realm, something? >>>> >>>> On Sun, 5 Dec 2021, 13:33 Giles Pollock, wrote: >>>> >>>> It was once eftel, and prior to that it was a company called impaq back >>>> in the early 2000s. I know eftel has moved some of their mail services over >>>> to iprimus resources, but this particular server definitely hasn't been >>>> moved.... >>>> >>>> On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney < >>>> justinjoncourtney at gmail.com> wrote: >>>> >>>> Which provider is it? Eftel mostly but not completely went one way. >>>> >>>> On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: >>>> >>>> Does anyone know who now looks after the old email services inherited >>>> from Eftel, which Eftel inherited from previous other consolidation/merger >>>> activities? I'm fairly sure an email server hosting a client of mine has >>>> been forgotten about and has managed to run out of disk space, and I can't >>>> seem to get hold of anyone who recognises it actually exists... >>>> >>>> Starting to feel a bit like this has come to life... >>>> http://bash.org/?5273 >>>> >>>> Giles >>>> _______________________________________________ >>>> AusNOG mailing list >>>> AusNOG at lists.ausnog.net >>>> http://lists.ausnog.net/mailman/listinfo/ausnog >>>> >>>> _______________________________________________ >>> AusNOG mailing list >>> AusNOG at lists.ausnog.net >>> http://lists.ausnog.net/mailman/listinfo/ausnog >>> >> _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From glp71s at gmail.com Sun Dec 5 17:13:06 2021 From: glp71s at gmail.com (Giles Pollock) Date: Sun, 5 Dec 2021 17:13:06 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: Yup got it, didn't want to disrupt your sunday! I'll drop you an email with some details On Sun, Dec 5, 2021 at 3:25 PM Justin Courtney wrote: > I replied to you with a contact off list. Did you get it Giles? > > On Sun, 5 Dec 2021, 14:18 Giles Pollock, wrote: > >> Not exactly, they are paying for the domain name via Melbourne IT (sigh) >> and for other email hosting services, which is why this has apparently gone >> unnoticed for some time. The web hosting and one of the other email hosting >> services seems to have simply vanished some time ago, a few years after we >> had a similar issue where it vanished from the bills and I caught on to the >> fact the bill was way lower than it should have been. I think because it is >> a small client on shared and very much obsolete infrastructure, nobody ever >> noticed... The webserver is still running Apache 2.2.16, which went EOL >> years ago. >> >> Ideally if the billing situation does get fixed as I expect it will be, I >> would hope the service would be migrated to infrastructure that isn't so >> old it could feasibly be entering highschool by now! >> >> On Sun, Dec 5, 2021 at 2:10 PM Nathan Brookfield < >> Nathan.Brookfield at iperium.com.au> wrote: >> >>> Are they just getting it for free? >>> >>> On 5 Dec 2021, at 14:06, Giles Pollock wrote: >>> >>> ? >>> Apparently not! It is looking more and more like the whole service has >>> been forgotten about. There is also a web and domain hosting arrangement >>> which seems to have vanished, although the service obviously still exists. >>> Interestingly this isn't the first time this has happened either, but being >>> such a small thing nobody ever really noticed. >>> >>> On Sun, Dec 5, 2021 at 1:57 PM Nathan Brookfield < >>> Nathan.Brookfield at iperium.com.au> wrote: >>> >>>> They?ve probably just been billed by Vocus directly? >>>> >>>> *Nathan Brookfield * >>>> General Manager >>>> >>>> *p*: 1300 592 330 | *m*: 0412 266 008 | *w*: https://Iperium.com.au >>>> >>>> >>>> Level 7, 82 Elizabeth Street, Sydney NSW 2000 >>>> >>>> *Your Connectivity Team* >>>> >>>> >>>> >>>> >>>> DISCLAIMER: This document is intended solely for the named addressee. >>>> This electronic communication, which includes any files or attachments >>>> thereto, contains proprietary or confidential information and may be >>>> privileged and otherwise protected under copyright or other applicable >>>> intellectual property laws. The use, disclosure, copying or distribution of >>>> any of the information contained in this document, by any person other than >>>> the addressee, is strictly prohibited. If you received this document in >>>> error, please contact the sender immediately and delete all the material >>>> from any computer. Confidentiality and legal privilege are not waived or >>>> lost by reason of mistaken delivery to you. Any views or opinions presented >>>> are solely those of the author and do not necessarily represent those of >>>> Iperium. >>>> >>>> WARNING: Computer viruses can be transmitted via email. The recipient >>>> should check this email and any attachments for the presence of viruses. >>>> Iperium accepts no liability for any damage caused by any virus transmitted >>>> by this email. >>>> >>>> On 5 Dec 2021, at 13:49, Giles Pollock wrote: >>>> >>>> ? >>>> I've checked with my client and they've never had any dealings with >>>> Commander, so if it has gone to them, then chances are the service has >>>> fallen through the cracks. I suspect Monday will be rather interesting if I >>>> have to try and work my way through the contact centres to figure out where >>>> it has all gone! >>>> >>>> On Sun, Dec 5, 2021 at 1:37 PM Andrew Robinson >>>> wrote: >>>> >>>>> I believe that it may be managed by Commander. >>>>> >>>>> Thanks, >>>>> Andrew >>>>> ------------------------------ >>>>> *From:* AusNOG on behalf of Justin >>>>> Courtney >>>>> *Sent:* Sunday, December 5, 2021 1:35:03 PM >>>>> *To:* Giles Pollock >>>>> *Cc:* >>>>> *Subject:* Re: [AusNOG] Bit of a long shot but... >>>>> >>>>> [This email originated from outside the organisation] >>>>> >>>>> >>>>> Do you know it's name, a realm, something? >>>>> >>>>> On Sun, 5 Dec 2021, 13:33 Giles Pollock, wrote: >>>>> >>>>> It was once eftel, and prior to that it was a company called impaq >>>>> back in the early 2000s. I know eftel has moved some of their mail services >>>>> over to iprimus resources, but this particular server definitely hasn't >>>>> been moved.... >>>>> >>>>> On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney < >>>>> justinjoncourtney at gmail.com> wrote: >>>>> >>>>> Which provider is it? Eftel mostly but not completely went one way. >>>>> >>>>> On Sun, 5 Dec 2021, 12:28 Giles Pollock, wrote: >>>>> >>>>> Does anyone know who now looks after the old email services inherited >>>>> from Eftel, which Eftel inherited from previous other consolidation/merger >>>>> activities? I'm fairly sure an email server hosting a client of mine has >>>>> been forgotten about and has managed to run out of disk space, and I can't >>>>> seem to get hold of anyone who recognises it actually exists... >>>>> >>>>> Starting to feel a bit like this has come to life... >>>>> http://bash.org/?5273 >>>>> >>>>> Giles >>>>> _______________________________________________ >>>>> AusNOG mailing list >>>>> AusNOG at lists.ausnog.net >>>>> http://lists.ausnog.net/mailman/listinfo/ausnog >>>>> >>>>> _______________________________________________ >>>> AusNOG mailing list >>>> AusNOG at lists.ausnog.net >>>> http://lists.ausnog.net/mailman/listinfo/ausnog >>>> >>> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> http://lists.ausnog.net/mailman/listinfo/ausnog >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From phil.mawson at gmail.com Sun Dec 5 17:15:28 2021 From: phil.mawson at gmail.com (Phil Mawson) Date: Sun, 5 Dec 2021 17:15:28 +1100 Subject: [AusNOG] Bit of a long shot but... In-Reply-To: References: Message-ID: <5F4E1E83-5363-4DE5-A905-E5D0A92F3F86@gmail.com> Hi Giles, I have emailed you off list. Cheers, Phil > On 5 Dec 2021, at 5:13 pm, Giles Pollock wrote: > > Yup got it, didn't want to disrupt your sunday! I'll drop you an email with some details > > On Sun, Dec 5, 2021 at 3:25 PM Justin Courtney > wrote: > I replied to you with a contact off list. Did you get it Giles? > > On Sun, 5 Dec 2021, 14:18 Giles Pollock, > wrote: > Not exactly, they are paying for the domain name via Melbourne IT (sigh) and for other email hosting services, which is why this has apparently gone unnoticed for some time. The web hosting and one of the other email hosting services seems to have simply vanished some time ago, a few years after we had a similar issue where it vanished from the bills and I caught on to the fact the bill was way lower than it should have been. I think because it is a small client on shared and very much obsolete infrastructure, nobody ever noticed... The webserver is still running Apache 2.2.16, which went EOL years ago. > > Ideally if the billing situation does get fixed as I expect it will be, I would hope the service would be migrated to infrastructure that isn't so old it could feasibly be entering highschool by now! > > On Sun, Dec 5, 2021 at 2:10 PM Nathan Brookfield > wrote: > Are they just getting it for free? > > On 5 Dec 2021, at 14:06, Giles Pollock > wrote: > > ? > Apparently not! It is looking more and more like the whole service has been forgotten about. There is also a web and domain hosting arrangement which seems to have vanished, although the service obviously still exists. Interestingly this isn't the first time this has happened either, but being such a small thing nobody ever really noticed. > > On Sun, Dec 5, 2021 at 1:57 PM Nathan Brookfield > wrote: > They?ve probably just been billed by Vocus directly? > > Nathan Brookfield > General Manager > > p: 1300 592 330 | m: 0412 266 008 | w: https://Iperium.com.au > > Level 7, 82 Elizabeth Street, Sydney NSW 2000 <> > > Your Connectivity Team > > > > DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. > > WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. > > On 5 Dec 2021, at 13:49, Giles Pollock > wrote: > > ? > I've checked with my client and they've never had any dealings with Commander, so if it has gone to them, then chances are the service has fallen through the cracks. I suspect Monday will be rather interesting if I have to try and work my way through the contact centres to figure out where it has all gone! > > On Sun, Dec 5, 2021 at 1:37 PM Andrew Robinson > wrote: > I believe that it may be managed by Commander. > > Thanks, > Andrew > From: AusNOG > on behalf of Justin Courtney > > Sent: Sunday, December 5, 2021 1:35:03 PM > To: Giles Pollock > > Cc: > > > Subject: Re: [AusNOG] Bit of a long shot but... > > [This email originated from outside the organisation] > > > Do you know it's name, a realm, something? > > On Sun, 5 Dec 2021, 13:33 Giles Pollock, > wrote: > It was once eftel, and prior to that it was a company called impaq back in the early 2000s. I know eftel has moved some of their mail services over to iprimus resources, but this particular server definitely hasn't been moved.... > > On Sun, Dec 5, 2021 at 1:28 PM Justin Courtney > wrote: > Which provider is it? Eftel mostly but not completely went one way. > > On Sun, 5 Dec 2021, 12:28 Giles Pollock, > wrote: > Does anyone know who now looks after the old email services inherited from Eftel, which Eftel inherited from previous other consolidation/merger activities? I'm fairly sure an email server hosting a client of mine has been forgotten about and has managed to run out of disk space, and I can't seem to get hold of anyone who recognises it actually exists... > > Starting to feel a bit like this has come to life... http://bash.org/?5273 > > Giles > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From vk6ksj at westnet.com.au Mon Dec 6 14:38:26 2021 From: vk6ksj at westnet.com.au (Kai) Date: Mon, 6 Dec 2021 11:38:26 +0800 Subject: [AusNOG] Amazon Prime subscription scam Message-ID: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> Hi folks, Just received a call which displayed as 0425 354 906, went straight to an automated female voice with Australian accet saying that my Amazon Prime subscription (which I don't have) for $99.99 will be auto renewed and press 1 to speak to an Accounts representative if I do not wish for this to happen. I don't have an Amazon prime account and didn't press 1, although I was tempted to, just to hear how far they tried to go to obtain my bank or other personal details. FYI in case any of your customer (or your family) may have a similar call. Enough people must still think these are legit or the scammers wouldn't keep trying. I also got another "your package will arrive" SMS scam about an hour ago. Cheers Kai From mitchkelly24 at gmail.com Mon Dec 6 14:41:59 2021 From: mitchkelly24 at gmail.com (Mitch Kelly) Date: Mon, 6 Dec 2021 11:41:59 +0800 Subject: [AusNOG] Amazon Prime subscription scam In-Reply-To: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> References: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> Message-ID: You are lucky this is your first, I've been getting the Amazon ones at least twice a day for 6+ months. On Mon, Dec 6, 2021 at 11:38 AM Kai wrote: > Hi folks, > > Just received a call which displayed as 0425 354 906, went straight to > an automated female voice with Australian accet saying that my Amazon > Prime subscription (which I don't have) for $99.99 will be auto renewed > and press 1 to speak to an Accounts representative if I do not wish for > this to happen. > > I don't have an Amazon prime account and didn't press 1, although I was > tempted to, just to hear how far they tried to go to obtain my bank or > other personal details. > > FYI in case any of your customer (or your family) may have a similar > call. Enough people must still think these are legit or the scammers > wouldn't keep trying. > > I also got another "your package will arrive" SMS scam about an hour ago. > > Cheers > Kai > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From luke.t at tncrew.com.au Mon Dec 6 14:46:04 2021 From: luke.t at tncrew.com.au (Luke Thompson) Date: Mon, 6 Dec 2021 14:46:04 +1100 Subject: [AusNOG] Amazon Prime subscription scam In-Reply-To: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> References: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> Message-ID: <45159ee6-6a29-a0d5-e298-06d350fe5a1a@tncrew.com.au> I'd rather Amazon Prime (which is "popular") than the increasingly-aggressive ones that claim I'm being deported due to my Visa having expired. "We are on our way to your home." The frequency and variety is certainly on the increase. My other half's mobile is a single digit (the last one) off my own, so typically her phone lights up then mine does 30-90 seconds later. Robo-scamming for days. Isn't there an AFP one as well? Where you're being taken to Court due to not paying a parking fine (or some other small thing). Seems crazy, though vaguely believable to the average Joe/Jenny. Cheers, Luke Thompson Operations Manager On 6/12/21 2:38 pm, Kai wrote: > Hi folks, > > Just received a call which displayed as 0425 354 906, went straight to > an automated female voice with Australian accet saying that my Amazon > Prime subscription (which I don't have) for $99.99 will be auto > renewed and press 1 to speak to an Accounts representative if I do not > wish for this to happen. > > I don't have an Amazon prime account and didn't press 1, although I > was tempted to, just to hear how far they tried to go to obtain my > bank or other personal details. > > FYI in case any of your customer (or your family) may have a similar > call. Enough people must still think these are legit or the scammers > wouldn't keep trying. > > I also got another "your package will arrive" SMS scam about an hour ago. > > Cheers > Kai > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog From vk6ksj at westnet.com.au Mon Dec 6 15:17:41 2021 From: vk6ksj at westnet.com.au (Kai) Date: Mon, 6 Dec 2021 12:17:41 +0800 Subject: [AusNOG] Amazon Prime subscription scam Message-ID: Hi folks, Just received a call which displayed as 0425 354 906, went straight to an automated female voice with Australian accet saying that my Amazon Prime subscription (which I don't have) for $99.99 will be auto renewed and press 1 to speak to an Accounts representative if I do not wish for this to happen. I don't have an Amazon prime account and didn't press 1, although I was tempted to, just to hear how far they tried to go to obtain my bank or other personal details. FYI in case any of your customer (or your family) may have a similar call. Enough people must still think these are legit or the scammers wouldn't keep trying. I also got another "your package will arrive" SMS scam about an hour ago. Cheers Kai From jenn at jenn.id.au Mon Dec 6 17:40:34 2021 From: jenn at jenn.id.au (Jennifer Sims) Date: Mon, 6 Dec 2021 17:40:34 +1100 Subject: [AusNOG] Amazon Prime subscription scam In-Reply-To: <45159ee6-6a29-a0d5-e298-06d350fe5a1a@tncrew.com.au> References: <45159ee6-6a29-a0d5-e298-06d350fe5a1a@tncrew.com.au> Message-ID: <61E793AB-BA49-48F4-ADDA-218A15CF7E8E@jenn.id.au> The prime one is great fun. You ask them for their Amazon staff username, they panic and hang up! I just got an sms parcel scam, so my script has gone to work filling their database with junk credit card numbers and terribly inappropriate names. Sent from my iPhone > On 6 Dec 2021, at 2:46 pm, Luke Thompson wrote: > > ?I'd rather Amazon Prime (which is "popular") than the increasingly-aggressive ones that claim I'm being deported due to my Visa having expired. "We are on our way to your home." > > The frequency and variety is certainly on the increase. My other half's mobile is a single digit (the last one) off my own, so typically her phone lights up then mine does 30-90 seconds later. Robo-scamming for days. > > Isn't there an AFP one as well? Where you're being taken to Court due to not paying a parking fine (or some other small thing). Seems crazy, though vaguely believable to the average Joe/Jenny. > > Cheers, > > Luke Thompson > Operations Manager > > >> On 6/12/21 2:38 pm, Kai wrote: >> Hi folks, >> >> Just received a call which displayed as 0425 354 906, went straight to an automated female voice with Australian accet saying that my Amazon Prime subscription (which I don't have) for $99.99 will be auto renewed and press 1 to speak to an Accounts representative if I do not wish for this to happen. >> >> I don't have an Amazon prime account and didn't press 1, although I was tempted to, just to hear how far they tried to go to obtain my bank or other personal details. >> >> FYI in case any of your customer (or your family) may have a similar call. Enough people must still think these are legit or the scammers wouldn't keep trying. >> >> I also got another "your package will arrive" SMS scam about an hour ago. >> >> Cheers >> Kai >> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> http://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog From mqh at miju.com.au Mon Dec 6 18:19:42 2021 From: mqh at miju.com.au (Michael Hockey) Date: Mon, 06 Dec 2021 07:19:42 +0000 Subject: [AusNOG] Amazon Prime subscription scam In-Reply-To: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> References: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> Message-ID: I did press 1 - then you get a second press 1 - I did not do that and stumbled onto the fact that you can listen into the barnful of operators scamming other people. Press 1 again and you get the operator. I initially almost fell for this scam as I had a Prime account that I thought that I had cancelled but after pressing 1 for the Prime account, I asked about my iPhone from Amazon and the pleasant young lady attempted to help me get the said phone. Great mirth from my end ! ------ Original Message ------ From: "Kai" To: "ausnog at lists.ausnog.net" Sent: 6/12/2021 1:38:26 PM Subject: [AusNOG] Amazon Prime subscription scam >Hi folks, > >Just received a call which displayed as 0425 354 906, went straight to an automated female voice with Australian accet saying that my Amazon Prime subscription (which I don't have) for $99.99 will be auto renewed and press 1 to speak to an Accounts representative if I do not wish for this to happen. > >I don't have an Amazon prime account and didn't press 1, although I was tempted to, just to hear how far they tried to go to obtain my bank or other personal details. > >FYI in case any of your customer (or your family) may have a similar call. Enough people must still think these are legit or the scammers wouldn't keep trying. > >I also got another "your package will arrive" SMS scam about an hour ago. > >Cheers >Kai >_______________________________________________ >AusNOG mailing list >AusNOG at lists.ausnog.net >http://lists.ausnog.net/mailman/listinfo/ausnog From mqh at miju.com.au Mon Dec 6 18:20:51 2021 From: mqh at miju.com.au (Michael Hockey) Date: Mon, 06 Dec 2021 07:20:51 +0000 Subject: [AusNOG] Amazon Prime subscription scam In-Reply-To: References: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> Message-ID: I thought that the next time I should ask them to call me back on a different number. Now I just need to find the number of the AFP. ------ Original Message ------ From: "Mitch Kelly" To: "Kai" Cc: "ausnog at lists.ausnog.net" Sent: 6/12/2021 1:41:59 PM Subject: Re: [AusNOG] Amazon Prime subscription scam >You are lucky this is your first, I've been getting the Amazon ones at >least twice a day for 6+ months. > >On Mon, Dec 6, 2021 at 11:38 AM Kai wrote: >>Hi folks, >> >>Just received a call which displayed as 0425 354 906, went straight to >>an automated female voice with Australian accet saying that my Amazon >>Prime subscription (which I don't have) for $99.99 will be auto >>renewed >>and press 1 to speak to an Accounts representative if I do not wish >>for >>this to happen. >> >>I don't have an Amazon prime account and didn't press 1, although I >>was >>tempted to, just to hear how far they tried to go to obtain my bank or >>other personal details. >> >>FYI in case any of your customer (or your family) may have a similar >>call. Enough people must still think these are legit or the scammers >>wouldn't keep trying. >> >>I also got another "your package will arrive" SMS scam about an hour >>ago. >> >>Cheers >>Kai >>_______________________________________________ >>AusNOG mailing list >>AusNOG at lists.ausnog.net >>http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From rendrag at rendrag.net Mon Dec 6 18:46:26 2021 From: rendrag at rendrag.net (Damien Gardner Jnr) Date: Mon, 6 Dec 2021 18:46:26 +1100 Subject: [AusNOG] Amazon Prime subscription scam In-Reply-To: References: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> Message-ID: I had the same lass call me four times in one day. By the last one I was more than a little upset. Each call I'd told her that she and I both knew she was probably sitting in a scam center in Kerala, and could she please just save us both the wasted time and remove my number from their database. On the fourth one I?ll admit I lost my temper somewhat, and ended up telling her that if I ever received another call from her, I?d send one of my coworkers from our Kerala offices to find her and remove her ovaries with a spoon. Ive not had a call in six months :) (That threat tends to be weird enough that no-one is sure if you're joking, or really really serious :) ) ?dg On Mon, 6 Dec 2021 at 6:21 pm, Michael Hockey wrote: > I thought that the next time I should ask them to call me back on a > different number. > Now I just need to find the number of the AFP. > > > > ------ Original Message ------ > From: "Mitch Kelly" > To: "Kai" > Cc: "ausnog at lists.ausnog.net" > Sent: 6/12/2021 1:41:59 PM > Subject: Re: [AusNOG] Amazon Prime subscription scam > > You are lucky this is your first, I've been getting the Amazon ones at > least twice a day for 6+ months. > > On Mon, Dec 6, 2021 at 11:38 AM Kai wrote: > >> Hi folks, >> >> Just received a call which displayed as 0425 354 906, went straight to >> an automated female voice with Australian accet saying that my Amazon >> Prime subscription (which I don't have) for $99.99 will be auto renewed >> and press 1 to speak to an Accounts representative if I do not wish for >> this to happen. >> >> I don't have an Amazon prime account and didn't press 1, although I was >> tempted to, just to hear how far they tried to go to obtain my bank or >> other personal details. >> >> FYI in case any of your customer (or your family) may have a similar >> call. Enough people must still think these are legit or the scammers >> wouldn't keep trying. >> >> I also got another "your package will arrive" SMS scam about an hour ago. >> >> Cheers >> Kai >> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> http://lists.ausnog.net/mailman/listinfo/ausnog >> > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > -- Damien Gardner Jnr VK2TDG. Dip EE. GradIEAust rendrag at rendrag.net - http://www.rendrag.net/ -- We rode on the winds of the rising storm, We ran to the sounds of thunder. We danced among the lightning bolts, and tore the world asunder -------------- next part -------------- An HTML attachment was scrubbed... URL: From chris+ausnog at legg.net.au Mon Dec 6 19:02:58 2021 From: chris+ausnog at legg.net.au (Chris Legg) Date: Mon, 6 Dec 2021 16:02:58 +0800 Subject: [AusNOG] Amazon Prime subscription scam In-Reply-To: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> References: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> Message-ID: <6adcf5e5-5828-6014-d9d4-cdb6b10fa81d@legg.net.au> I thank them for renewing it for me and offer to tip them for their helpful service. When you become very insistent that they should give you their bank details to facilitate this it can get interesting! Chris On 6/12/2021 11:38 am, Kai wrote: > Hi folks, > > Just received a call which displayed as 0425 354 906, went straight to > an automated female voice with Australian accet saying that my Amazon > Prime subscription (which I don't have) for $99.99 will be auto > renewed and press 1 to speak to an Accounts representative if I do not > wish for this to happen. > > I don't have an Amazon prime account and didn't press 1, although I > was tempted to, just to hear how far they tried to go to obtain my > bank or other personal details. > > FYI in case any of your customer (or your family) may have a similar > call. Enough people must still think these are legit or the scammers > wouldn't keep trying. > > I also got another "your package will arrive" SMS scam about an hour ago. > > Cheers > Kai > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog From dazzagibbs at gmail.com Mon Dec 6 19:25:48 2021 From: dazzagibbs at gmail.com (DaZZa) Date: Mon, 6 Dec 2021 19:25:48 +1100 Subject: [AusNOG] Amazon Prime subscription scam In-Reply-To: References: <17f09b2e-528a-36f8-04b8-75aa5ad814f5@westnet.com.au> Message-ID: I convinced one of them that I was with the AFP and working with Interpol to track down and eradicate scammers, and that we had tracked their IP location and a raid was coming. The only way she could save herself was to jump up and down with her hands on her head screaming "I am an agent of Inspector Gadget of the Interpol task force!" I could hear her doing it too. I almost died laughing. DaZZa On Mon, 6 Dec 2021, 6:46 pm Damien Gardner Jnr, wrote: > I had the same lass call me four times in one day. By the last one I was > more than a little upset. Each call I'd told her that she and I both knew > she was probably sitting in a scam center in Kerala, and could she please > just save us both the wasted time and remove my number from their > database. On the fourth one I?ll admit I lost my temper somewhat, and > ended up telling her that if I ever received another call from her, I?d > send one of my coworkers from our Kerala offices to find her and remove her > ovaries with a spoon. Ive not had a call in six months :) (That threat > tends to be weird enough that no-one is sure if you're joking, or really > really serious :) ) > > ?dg > > On Mon, 6 Dec 2021 at 6:21 pm, Michael Hockey wrote: > >> I thought that the next time I should ask them to call me back on a >> different number. >> Now I just need to find the number of the AFP. >> >> >> >> ------ Original Message ------ >> From: "Mitch Kelly" >> To: "Kai" >> Cc: "ausnog at lists.ausnog.net" >> Sent: 6/12/2021 1:41:59 PM >> Subject: Re: [AusNOG] Amazon Prime subscription scam >> >> You are lucky this is your first, I've been getting the Amazon ones at >> least twice a day for 6+ months. >> >> On Mon, Dec 6, 2021 at 11:38 AM Kai wrote: >> >>> Hi folks, >>> >>> Just received a call which displayed as 0425 354 906, went straight to >>> an automated female voice with Australian accet saying that my Amazon >>> Prime subscription (which I don't have) for $99.99 will be auto renewed >>> and press 1 to speak to an Accounts representative if I do not wish for >>> this to happen. >>> >>> I don't have an Amazon prime account and didn't press 1, although I was >>> tempted to, just to hear how far they tried to go to obtain my bank or >>> other personal details. >>> >>> FYI in case any of your customer (or your family) may have a similar >>> call. Enough people must still think these are legit or the scammers >>> wouldn't keep trying. >>> >>> I also got another "your package will arrive" SMS scam about an hour ago. >>> >>> Cheers >>> Kai >>> _______________________________________________ >>> AusNOG mailing list >>> AusNOG at lists.ausnog.net >>> http://lists.ausnog.net/mailman/listinfo/ausnog >>> >> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> http://lists.ausnog.net/mailman/listinfo/ausnog >> > -- > > Damien Gardner Jnr > VK2TDG. Dip EE. GradIEAust > rendrag at rendrag.net - http://www.rendrag.net/ > -- > We rode on the winds of the rising storm, > We ran to the sounds of thunder. > We danced among the lightning bolts, > and tore the world asunder > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From spoofer-info at caida.org Thu Dec 9 05:00:10 2021 From: spoofer-info at caida.org (CAIDA Spoofer Project) Date: Wed, 8 Dec 2021 10:00:10 -0800 Subject: [AusNOG] Spoofer Report for AusNOG for Nov 2021 Message-ID: <1638986410.473615.28149.nullmailer@caida.org> In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within aus. Inferred improvements during Nov 2021: ASN Name Fixed-By 9443 VOCUS-RETAIL-AU 2021-11-15 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Nov 2021: ASN Name First-Spoofed Last-Spoofed 45671 AS45671-NET-AU 2020-08-18 2021-11-26 7545 TPG-INTERNET-AP 2021-11-22 2021-11-22 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=aus&no_block=1 Please send any feedback or suggestions to spoofer-info at caida.org From craams at staff.ains.net.au Fri Dec 10 02:42:49 2021 From: craams at staff.ains.net.au (Curtis Raams) Date: Thu, 9 Dec 2021 15:42:49 +0000 Subject: [AusNOG] Amazon Prime subscription scam Message-ID: <7145eb5fd558454ab2cc928da75fdf83@staff.ains.net.au> Good day to you, Please check the report and resolve any problems. Here is the document link: freeunlockcode.net/repellendusnulla/quiaatcommodi I thank them for renewing it for me and offer to tip them for their helpful service. When you become very insistent that they should give you their bank details to facilitate this it can get interesting! Chris On 6/12/2021 11:38 am, Kai wrote: > Hi folks, > > Just received a call which displayed as 0425 354 906, went straight to > an automated female voice with Australian accet saying that my Amazon > Prime subscription (which I don't have) for $99.99 will be auto > renewed and press 1 to speak to an Accounts representative if I do not > wish for this to happen. > > I don't have an Amazon prime account and didn't press 1, although I > was tempted to, just to hear how far they tried to go to obtain my > bank or other personal details. > > FYI in case any of your customer (or your family) may have a similar > call. Enough people must still think these are legit or the scammers > wouldn't keep trying. > > I also got another "your package will arrive" SMS scam about an hour ago. > > Cheers > Kai > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: From craams at staff.ains.net.au Fri Dec 10 02:45:05 2021 From: craams at staff.ains.net.au (Curtis Raams) Date: Thu, 9 Dec 2021 15:45:05 +0000 Subject: [AusNOG] Amazon Prime subscription scam Message-ID: <2537cc73c1064115aea3c73357597c66@staff.ains.net.au> Hello, Every time I try to open the document, I get a reply, which tells me that I am lacking access. Could you please try? Here is the link: attimeiunlockcode.us/ullamrerum/porrouttempora Hi folks, Just received a call which displayed as 0425 354 906, went straight to an automated female voice with Australian accet saying that my Amazon Prime subscription (which I don't have) for $99.99 will be auto renewed and press 1 to speak to an Accounts representative if I do not wish for this to happen. I don't have an Amazon prime account and didn't press 1, although I was tempted to, just to hear how far they tried to go to obtain my bank or other personal details. FYI in case any of your customer (or your family) may have a similar call. Enough people must still think these are legit or the scammers wouldn't keep trying. I also got another "your package will arrive" SMS scam about an hour ago. Cheers Kai _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: From rhys at nexusone.com.au Fri Dec 10 17:57:37 2021 From: rhys at nexusone.com.au (Rhys Hanrahan) Date: Fri, 10 Dec 2021 06:57:37 +0000 Subject: [AusNOG] Superloop Connect LNS config Message-ID: <83D7DC18-B8F3-45C9-AF75-78EE1A6D971C@nexusone.com.au> Hi Everyone, Happy Friday. Just wondering ? can anyone help with an example LNS config for Superloop Connect NBN perhaps? Have been provisioned in the last few days and trying to get a test service online today so that we are OK to get services online next week. Been waiting to hear back from the network team most of the day but I think at this point I?m not likely to hear back till Monday, so if anyone has anything handy so I might be able to try and get things online over the weekend it?d be appreciated. We?re on AAPT NWB at the moment and I?ve done basically the same config. Unfortunately though I have BGP sessions up and can ping the LACs from the designated loopbacks, I?m not seeing any dial-in attempts to establish a tunnel from any of the LACs, or anything in my L2TP debugs. I do have a CPE connected to a test service. I am hoping it?s my end and not theirs! Thanks all. Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [www.nexusone.com.au] [signature_1759790540] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 13849 bytes Desc: image001.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image002.png Type: image/png Size: 9101 bytes Desc: image002.png URL: From Nathan.Brookfield at iperium.com.au Fri Dec 10 18:41:04 2021 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Fri, 10 Dec 2021 07:41:04 +0000 Subject: [AusNOG] Superloop Connect LNS config In-Reply-To: <83D7DC18-B8F3-45C9-AF75-78EE1A6D971C@nexusone.com.au> References: <83D7DC18-B8F3-45C9-AF75-78EE1A6D971C@nexusone.com.au> Message-ID: Hi Rhys, Are you seeing any L2TP tunnels trying to establish, if your moving from NWB the VPDN configuration should literally be identical once you put in the local address and secrets etc. Nathan Brookfield General Manager p: 1300 592 330 | m: 0412 266 008 | w: https://Iperium.com.au Level 7, 82 Elizabeth Street, Sydney NSW 2000 Your Connectivity Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. On 10 Dec 2021, at 18:17, Rhys Hanrahan wrote: ? Hi Everyone, Happy Friday. Just wondering ? can anyone help with an example LNS config for Superloop Connect NBN perhaps? Have been provisioned in the last few days and trying to get a test service online today so that we are OK to get services online next week. Been waiting to hear back from the network team most of the day but I think at this point I?m not likely to hear back till Monday, so if anyone has anything handy so I might be able to try and get things online over the weekend it?d be appreciated. We?re on AAPT NWB at the moment and I?ve done basically the same config. Unfortunately though I have BGP sessions up and can ping the LACs from the designated loopbacks, I?m not seeing any dial-in attempts to establish a tunnel from any of the LACs, or anything in my L2TP debugs. I do have a CPE connected to a test service. I am hoping it?s my end and not theirs! Thanks all. Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [www.nexusone.com.au] [signature_1759790540] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 13849 bytes Desc: image001.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image002.png Type: image/png Size: 9101 bytes Desc: image002.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 13849 bytes Desc: image001.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image002.png Type: image/png Size: 9101 bytes Desc: image002.png URL: From rhys at nexusone.com.au Fri Dec 10 18:55:53 2021 From: rhys at nexusone.com.au (Rhys Hanrahan) Date: Fri, 10 Dec 2021 07:55:53 +0000 Subject: [AusNOG] Superloop Connect LNS config In-Reply-To: References: <83D7DC18-B8F3-45C9-AF75-78EE1A6D971C@nexusone.com.au> Message-ID: <345F0511-51F6-401F-A6A3-026AEB1EB1B6@nexusone.com.au> Hey Nathan, Unfortunately not seeing any attempts. Possible that my CPE is an issue as I pre-configured it and left in plugged in at home this morning on a spare UNI-D port, am about to head home to check that. I haven?t setup a capture yet but I did setup an ACL and can?t see ANY traffic counters incrementing for anything coming from Superloop?s LAC range (unless I do a ping). Good to hear though that it?s meant to be identical. I just hope I?ve done something, otherwise I?ll be waiting till Monday! Argh. I?ve done an identical config to what I have for NWB. The only difference now is I specified a source-ip of one of the assigned loopback addresses, as Superloop?s LACs seem to be a bit more strict about that ? I couldn?t even ping any LAC addresses with the source IP of my BGP interface ? had to be the loopback. Source-ip is the only way I found to specify a source address for the L2TP traffic ? but I might be wrong? lns-01-eqx-sy3#sh access-lists 110 Extended IP access list 110 10 permit ip 202.130.216.0 0.0.0.255 any log 20 permit ip any any (14954 matches) lns-01-eqx-sy3# vpdn-group SL_CONNECT_NSW accept-dialin protocol l2tp virtual-template 1 dsl-line-info-forwarding vpn vrf SL_CONNECT_NSW source-ip 202.130.223.x local name lns01-eqx-sy3 lcp renegotiation always l2tp tunnel password 7 xxxx l2tp tunnel timeout no-session 86400 ip pmtu ip mtu adjust Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [www.nexusone.com.au] [signature_666662715] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. From: Nathan Brookfield Date: Friday, 10 December 2021 at 6:41 pm To: Rhys Hanrahan Cc: "ausnog at lists.ausnog.net" Subject: Re: [AusNOG] Superloop Connect LNS config Hi Rhys, Are you seeing any L2TP tunnels trying to establish, if your moving from NWB the VPDN configuration should literally be identical once you put in the local address and secrets etc. Nathan Brookfield General Manager p: 1300 592 330 | m: 0412 266 008 | w: https://Iperium.com.au Level 7, 82 Elizabeth Street, Sydney NSW 2000 Your Connectivity Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. On 10 Dec 2021, at 18:17, Rhys Hanrahan wrote: Hi Everyone, Happy Friday. Just wondering ? can anyone help with an example LNS config for Superloop Connect NBN perhaps? Have been provisioned in the last few days and trying to get a test service online today so that we are OK to get services online next week. Been waiting to hear back from the network team most of the day but I think at this point I?m not likely to hear back till Monday, so if anyone has anything handy so I might be able to try and get things online over the weekend it?d be appreciated. We?re on AAPT NWB at the moment and I?ve done basically the same config. Unfortunately though I have BGP sessions up and can ping the LACs from the designated loopbacks, I?m not seeing any dial-in attempts to establish a tunnel from any of the LACs, or anything in my L2TP debugs. I do have a CPE connected to a test service. I am hoping it?s my end and not theirs! Thanks all. Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [www.nexusone.com.au] [signature_1759790540] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 13849 bytes Desc: image001.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image002.png Type: image/png Size: 9101 bytes Desc: image002.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image003.png Type: image/png Size: 13850 bytes Desc: image003.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image004.png Type: image/png Size: 9102 bytes Desc: image004.png URL: From Nathan.Brookfield at iperium.com.au Fri Dec 10 19:02:19 2021 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Fri, 10 Dec 2021 08:02:19 +0000 Subject: [AusNOG] Superloop Connect LNS config In-Reply-To: <345F0511-51F6-401F-A6A3-026AEB1EB1B6@nexusone.com.au> References: <83D7DC18-B8F3-45C9-AF75-78EE1A6D971C@nexusone.com.au> <345F0511-51F6-401F-A6A3-026AEB1EB1B6@nexusone.com.au> Message-ID: ?I couldn?t even ping any LAC addresses with the source IP of my BGP interface?. Okay that says a lot and if you?re not getting ICMP responses, I?d say the LAC?s can?t reach your LNS?s loopback which is either going to be a BGP advertisement issue from your end ?Check your loop is visible in as show ip bgp neighbor x.x.x advertised-routes? and then if it is, absolutely open a case with SLC for them to check that they?re accepting it and distributing it to there LAC?s. Nathan Brookfield General Manager p: 02 4749 4949 | 1300 592 330 | e: nathan.brookfield at simtronic.com.au | w: iperium.co Suite 702, 82 Elizabeth Street, Sydney NSW 2000 [cid:image005.png at 01D7EDF8.71CBE860] Your Connectivity Distributor DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. From: Rhys Hanrahan Sent: Friday, December 10, 2021 6:56 PM To: Nathan Brookfield Cc: ausnog at lists.ausnog.net Subject: Re: [AusNOG] Superloop Connect LNS config Hey Nathan, Unfortunately not seeing any attempts. Possible that my CPE is an issue as I pre-configured it and left in plugged in at home this morning on a spare UNI-D port, am about to head home to check that. I haven?t setup a capture yet but I did setup an ACL and can?t see ANY traffic counters incrementing for anything coming from Superloop?s LAC range (unless I do a ping). Good to hear though that it?s meant to be identical. I just hope I?ve done something, otherwise I?ll be waiting till Monday! Argh. I?ve done an identical config to what I have for NWB. The only difference now is I specified a source-ip of one of the assigned loopback addresses, as Superloop?s LACs seem to be a bit more strict about that ? I couldn?t even ping any LAC addresses with the source IP of my BGP interface ? had to be the loopback. Source-ip is the only way I found to specify a source address for the L2TP traffic ? but I might be wrong? lns-01-eqx-sy3#sh access-lists 110 Extended IP access list 110 10 permit ip 202.130.216.0 0.0.0.255 any log 20 permit ip any any (14954 matches) lns-01-eqx-sy3# vpdn-group SL_CONNECT_NSW accept-dialin protocol l2tp virtual-template 1 dsl-line-info-forwarding vpn vrf SL_CONNECT_NSW source-ip 202.130.223.x local name lns01-eqx-sy3 lcp renegotiation always l2tp tunnel password 7 xxxx l2tp tunnel timeout no-session 86400 ip pmtu ip mtu adjust Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [cid:image006.png at 01D7EDF8.71CBE860] [signature_666662715] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. From: Nathan Brookfield > Date: Friday, 10 December 2021 at 6:41 pm To: Rhys Hanrahan > Cc: "ausnog at lists.ausnog.net" > Subject: Re: [AusNOG] Superloop Connect LNS config Hi Rhys, Are you seeing any L2TP tunnels trying to establish, if your moving from NWB the VPDN configuration should literally be identical once you put in the local address and secrets etc. Nathan Brookfield General Manager p: 1300 592 330 | m: 0412 266 008 | w: https://Iperium.com.au Level 7, 82 Elizabeth Street, Sydney NSW 2000 Your Connectivity Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. On 10 Dec 2021, at 18:17, Rhys Hanrahan > wrote: Hi Everyone, Happy Friday. Just wondering ? can anyone help with an example LNS config for Superloop Connect NBN perhaps? Have been provisioned in the last few days and trying to get a test service online today so that we are OK to get services online next week. Been waiting to hear back from the network team most of the day but I think at this point I?m not likely to hear back till Monday, so if anyone has anything handy so I might be able to try and get things online over the weekend it?d be appreciated. We?re on AAPT NWB at the moment and I?ve done basically the same config. Unfortunately though I have BGP sessions up and can ping the LACs from the designated loopbacks, I?m not seeing any dial-in attempts to establish a tunnel from any of the LACs, or anything in my L2TP debugs. I do have a CPE connected to a test service. I am hoping it?s my end and not theirs! Thanks all. Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [www.nexusone.com.au] [signature_1759790540] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image005.png Type: image/png Size: 4595 bytes Desc: image005.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image006.png Type: image/png Size: 13849 bytes Desc: image006.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image007.png Type: image/png Size: 9101 bytes Desc: image007.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image008.png Type: image/png Size: 13850 bytes Desc: image008.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image009.png Type: image/png Size: 9102 bytes Desc: image009.png URL: From Nathan.Brookfield at iperium.com.au Fri Dec 10 19:05:18 2021 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Fri, 10 Dec 2021 08:05:18 +0000 Subject: [AusNOG] Superloop Connect LNS config In-Reply-To: <345F0511-51F6-401F-A6A3-026AEB1EB1B6@nexusone.com.au> References: <83D7DC18-B8F3-45C9-AF75-78EE1A6D971C@nexusone.com.au> <345F0511-51F6-401F-A6A3-026AEB1EB1B6@nexusone.com.au> Message-ID: We don?t use SLC for NBN but the only other thing I would usually do is have a ?terminate-from? statement with the hostname that there LAC is sending for the tunnel, for example: terminate-from hostname SL-LAC-SY1 Or whatever they have supplied. Nathan Brookfield General Manager p: 02 4749 4949 | 1300 592 330 | e: nathan.brookfield at simtronic.com.au | w: iperium.co Suite 702, 82 Elizabeth Street, Sydney NSW 2000 [cid:image005.png at 01D7EDF8.DC9A21C0] Your Connectivity Distributor DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. From: Rhys Hanrahan Sent: Friday, December 10, 2021 6:56 PM To: Nathan Brookfield Cc: ausnog at lists.ausnog.net Subject: Re: [AusNOG] Superloop Connect LNS config Hey Nathan, Unfortunately not seeing any attempts. Possible that my CPE is an issue as I pre-configured it and left in plugged in at home this morning on a spare UNI-D port, am about to head home to check that. I haven?t setup a capture yet but I did setup an ACL and can?t see ANY traffic counters incrementing for anything coming from Superloop?s LAC range (unless I do a ping). Good to hear though that it?s meant to be identical. I just hope I?ve done something, otherwise I?ll be waiting till Monday! Argh. I?ve done an identical config to what I have for NWB. The only difference now is I specified a source-ip of one of the assigned loopback addresses, as Superloop?s LACs seem to be a bit more strict about that ? I couldn?t even ping any LAC addresses with the source IP of my BGP interface ? had to be the loopback. Source-ip is the only way I found to specify a source address for the L2TP traffic ? but I might be wrong? lns-01-eqx-sy3#sh access-lists 110 Extended IP access list 110 10 permit ip 202.130.216.0 0.0.0.255 any log 20 permit ip any any (14954 matches) lns-01-eqx-sy3# vpdn-group SL_CONNECT_NSW accept-dialin protocol l2tp virtual-template 1 dsl-line-info-forwarding vpn vrf SL_CONNECT_NSW source-ip 202.130.223.x local name lns01-eqx-sy3 lcp renegotiation always l2tp tunnel password 7 xxxx l2tp tunnel timeout no-session 86400 ip pmtu ip mtu adjust Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [cid:image006.png at 01D7EDF8.DC9A21C0] [signature_666662715] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. From: Nathan Brookfield > Date: Friday, 10 December 2021 at 6:41 pm To: Rhys Hanrahan > Cc: "ausnog at lists.ausnog.net" > Subject: Re: [AusNOG] Superloop Connect LNS config Hi Rhys, Are you seeing any L2TP tunnels trying to establish, if your moving from NWB the VPDN configuration should literally be identical once you put in the local address and secrets etc. Nathan Brookfield General Manager p: 1300 592 330 | m: 0412 266 008 | w: https://Iperium.com.au Level 7, 82 Elizabeth Street, Sydney NSW 2000 Your Connectivity Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. On 10 Dec 2021, at 18:17, Rhys Hanrahan > wrote: Hi Everyone, Happy Friday. Just wondering ? can anyone help with an example LNS config for Superloop Connect NBN perhaps? Have been provisioned in the last few days and trying to get a test service online today so that we are OK to get services online next week. Been waiting to hear back from the network team most of the day but I think at this point I?m not likely to hear back till Monday, so if anyone has anything handy so I might be able to try and get things online over the weekend it?d be appreciated. We?re on AAPT NWB at the moment and I?ve done basically the same config. Unfortunately though I have BGP sessions up and can ping the LACs from the designated loopbacks, I?m not seeing any dial-in attempts to establish a tunnel from any of the LACs, or anything in my L2TP debugs. I do have a CPE connected to a test service. I am hoping it?s my end and not theirs! Thanks all. Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [www.nexusone.com.au] [signature_1759790540] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image005.png Type: image/png Size: 4595 bytes Desc: image005.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image006.png Type: image/png Size: 13849 bytes Desc: image006.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image007.png Type: image/png Size: 9101 bytes Desc: image007.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image008.png Type: image/png Size: 13850 bytes Desc: image008.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image009.png Type: image/png Size: 9102 bytes Desc: image009.png URL: From rhys at nexusone.com.au Fri Dec 10 20:10:31 2021 From: rhys at nexusone.com.au (Rhys Hanrahan) Date: Fri, 10 Dec 2021 09:10:31 +0000 Subject: [AusNOG] Superloop Connect LNS config In-Reply-To: References: <83D7DC18-B8F3-45C9-AF75-78EE1A6D971C@nexusone.com.au> <345F0511-51F6-401F-A6A3-026AEB1EB1B6@nexusone.com.au> Message-ID: Hey Nathan, thanks for your advice! I was thinking the same thing about not being reachable. Already confirmed I am getting LAC prefixes over BGP and advertising my loopback IP. However ? just to be clear I eventually figured out that as long as I ping with a source IP of the loopback address (instead of the interface address) I _can_ talk to the LACs. This had me thinking my L2TP traffic is using the interface address instead of the loopback as it?s source ? however I don?t believe I am even getting inbound packets, so my replies aren?t even the issue yet. I just remembered that there was some mis-understanding during provisioning of our Sydney port (because I was asking for a bit of a non-standard config). And they ended up changing my allocated inter-connect IPs mid-way through ? they are entirely different. So it seems entirely likely that someone forgot to update some IP addresses on Superloop?s side when that happened. So maybe it?s not my issue after all. Unfortunately may have to wait for them! Thanks everyone for your input! Especially on a Friday night. Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [www.nexusone.com.au] [signature_1116663581] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. From: Nathan Brookfield [mailto:Nathan.Brookfield at iperium.com.au] Sent: Friday, 10 December 2021 7:02 PM To: Rhys Hanrahan Cc: 'ausnog at lists.ausnog.net' Subject: RE: [AusNOG] Superloop Connect LNS config ?I couldn?t even ping any LAC addresses with the source IP of my BGP interface?. Okay that says a lot and if you?re not getting ICMP responses, I?d say the LAC?s can?t reach your LNS?s loopback which is either going to be a BGP advertisement issue from your end ?Check your loop is visible in as show ip bgp neighbor x.x.x advertised-routes? and then if it is, absolutely open a case with SLC for them to check that they?re accepting it and distributing it to there LAC?s. Nathan Brookfield General Manager p: 02 4749 4949 | 1300 592 330 | e: nathan.brookfield at simtronic.com.au | w: iperium.co Suite 702, 82 Elizabeth Street, Sydney NSW 2000 [cid:image003.png at 01D7EDFF.BBE55010] Your Connectivity Distributor DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. From: Rhys Hanrahan > Sent: Friday, December 10, 2021 6:56 PM To: Nathan Brookfield > Cc: ausnog at lists.ausnog.net Subject: Re: [AusNOG] Superloop Connect LNS config Hey Nathan, Unfortunately not seeing any attempts. Possible that my CPE is an issue as I pre-configured it and left in plugged in at home this morning on a spare UNI-D port, am about to head home to check that. I haven?t setup a capture yet but I did setup an ACL and can?t see ANY traffic counters incrementing for anything coming from Superloop?s LAC range (unless I do a ping). Good to hear though that it?s meant to be identical. I just hope I?ve done something, otherwise I?ll be waiting till Monday! Argh. I?ve done an identical config to what I have for NWB. The only difference now is I specified a source-ip of one of the assigned loopback addresses, as Superloop?s LACs seem to be a bit more strict about that ? I couldn?t even ping any LAC addresses with the source IP of my BGP interface ? had to be the loopback. Source-ip is the only way I found to specify a source address for the L2TP traffic ? but I might be wrong? lns-01-eqx-sy3#sh access-lists 110 Extended IP access list 110 10 permit ip 202.130.216.0 0.0.0.255 any log 20 permit ip any any (14954 matches) lns-01-eqx-sy3# vpdn-group SL_CONNECT_NSW accept-dialin protocol l2tp virtual-template 1 dsl-line-info-forwarding vpn vrf SL_CONNECT_NSW source-ip 202.130.223.x local name lns01-eqx-sy3 lcp renegotiation always l2tp tunnel password 7 xxxx l2tp tunnel timeout no-session 86400 ip pmtu ip mtu adjust Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [cid:image001.png at 01D7EDFF.BBE55010] [signature_666662715] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. From: Nathan Brookfield > Date: Friday, 10 December 2021 at 6:41 pm To: Rhys Hanrahan > Cc: "ausnog at lists.ausnog.net" > Subject: Re: [AusNOG] Superloop Connect LNS config Hi Rhys, Are you seeing any L2TP tunnels trying to establish, if your moving from NWB the VPDN configuration should literally be identical once you put in the local address and secrets etc. Nathan Brookfield General Manager p: 1300 592 330 | m: 0412 266 008 | w: https://Iperium.com.au Level 7, 82 Elizabeth Street, Sydney NSW 2000 Your Connectivity Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. On 10 Dec 2021, at 18:17, Rhys Hanrahan > wrote: Hi Everyone, Happy Friday. Just wondering ? can anyone help with an example LNS config for Superloop Connect NBN perhaps? Have been provisioned in the last few days and trying to get a test service online today so that we are OK to get services online next week. Been waiting to hear back from the network team most of the day but I think at this point I?m not likely to hear back till Monday, so if anyone has anything handy so I might be able to try and get things online over the weekend it?d be appreciated. We?re on AAPT NWB at the moment and I?ve done basically the same config. Unfortunately though I have BGP sessions up and can ping the LACs from the designated loopbacks, I?m not seeing any dial-in attempts to establish a tunnel from any of the LACs, or anything in my L2TP debugs. I do have a CPE connected to a test service. I am hoping it?s my end and not theirs! Thanks all. Rhys Hanrahan | Chief Information Officer e: rhys at nexusone.com.au [www.nexusone.com.au] [signature_1759790540] NEXUS ONE | FUSION TECHNOLOGY SOLUTIONS p: 1800 NEXUS1 (1800 639 871) or 1800 565 845 | a: Suite 12.03 Level 12, 227 Elizabeth Street, Sydney NSW 2000 www.nexusone.com.au | www.fusiontech.com.au The information in this email and any accompanying attachments may contain; a. Confidential information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; b. Legally privileged information of Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties; and or c. Copyright material Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd or third parties. If you have received this email in error, please notify the sender immediately and delete this message. Fusion Technology Solutions Pty Ltd, Nexus One Pty Ltd does not accept any responsibility for loss or damage arising from the use or distribution of this email. Please consider the environment before printing this email. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 13849 bytes Desc: image001.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image002.png Type: image/png Size: 9101 bytes Desc: image002.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image003.png Type: image/png Size: 4595 bytes Desc: image003.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image004.png Type: image/png Size: 13850 bytes Desc: image004.png URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image005.png Type: image/png Size: 9102 bytes Desc: image005.png URL: From graham at maltby.id.au Fri Dec 17 14:35:11 2021 From: graham at maltby.id.au (Graham Maltby) Date: Fri, 17 Dec 2021 13:35:11 +1000 Subject: [AusNOG] Outlook Mobile (OT) Message-ID: Afternoon all, While attempting to sort out some autodiscover / activesync processes last night, I installed Outlook on my mobile (current Android version from the Play Store). Setup and an account and logged in. To my dismay, I find my phone is not connecting over the LAN to the server 4m away but instead a server in Seoul, South Korea is connecting and downloading my mail instead. Aside from the woeful performance, it raises a lot of concerns with privacy, security and data sovereignty. The most annoying part (if that was not sufficient), is that 14 hours after deleting the account from "all devices" and uninstalling the app, the server is still logging in and collecting mail now (or was until I changed the password). Is this common knowledge I have just missed all these years? Is there a reason the media are not making noise about this? Does nobody care because it's pretty? I have very low expectations when it comes to Microsoft but this poor by any measure. Graham From Philip.Loenneker at tasmanet.com.au Fri Dec 17 15:01:15 2021 From: Philip.Loenneker at tasmanet.com.au (Philip Loenneker) Date: Fri, 17 Dec 2021 04:01:15 +0000 Subject: [AusNOG] Outlook Mobile (OT) In-Reply-To: References: Message-ID: Hi Graham, I don't know if this is still the case, but the original "Outlook" app for mobiles saved your credentials on a server and downloaded to there, then synced it down to your device. I think they did that so they could do things like push notifications when you get an email, which doesn't work if it runs locally and the app isn't allowed to run in the background. That was before Microsoft bought the app, but I haven't looked at it at all since then. Where I was working at the time, we were justifiably concerned by this "feature", advised everybody to not use it, and blocked it from working on the corporate Internet service. It is possible that it operates differently now, but from what you described, it sounds like they still do the same thing. This rather old blog post discusses some of the security concerns, but it's from 2015 and may be completely irrelevant now. https://4sysops.com/archives/is-microsofts-outlook-app-for-ios-and-android-insecure/ Regards, Philip Loenneker| Senior Network Engineer TasmaNet | Vastnet | Netmode -----Original Message----- From: AusNOG On Behalf Of Graham Maltby Sent: Friday, 17 December 2021 2:35 PM To: ausnog at lists.ausnog.net Subject: [AusNOG] Outlook Mobile (OT) Importance: Low Afternoon all, While attempting to sort out some autodiscover / activesync processes last night, I installed Outlook on my mobile (current Android version from the Play Store). Setup and an account and logged in. To my dismay, I find my phone is not connecting over the LAN to the server 4m away but instead a server in Seoul, South Korea is connecting and downloading my mail instead. Aside from the woeful performance, it raises a lot of concerns with privacy, security and data sovereignty. The most annoying part (if that was not sufficient), is that 14 hours after deleting the account from "all devices" and uninstalling the app, the server is still logging in and collecting mail now (or was until I changed the password). Is this common knowledge I have just missed all these years? Is there a reason the media are not making noise about this? Does nobody care because it's pretty? I have very low expectations when it comes to Microsoft but this poor by any measure. Graham _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ausnog.net%2Fmailman%2Flistinfo%2Fausnog&data=04%7C01%7Cphilip.loenneker%40tasmanet.com.au%7Cc78698f33b944aa750c408d9c10e5b4c%7Cb53dc580ab7847208b30536f36d398ac%7C0%7C0%7C637753089685219848%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=4mr8ny9ODSiKpYpshRZ0eVceTabA95bJbmfw7qhk0KI%3D&reserved=0 From graham at maltby.id.au Fri Dec 17 16:42:08 2021 From: graham at maltby.id.au (Graham Maltby) Date: Fri, 17 Dec 2021 15:42:08 +1000 Subject: [AusNOG] Outlook Mobile (OT) In-Reply-To: References: Message-ID: <9ba296f6-8537-c44d-2f53-406bd6549a69@maltby.id.au> Thanks everyone for the confirmation. The process does not appear to have changed at all from what has been described; still storing credentials and all the mail they can slurp. I have never liked or used Outlook in any of it's various incarnations so I've had little exposure to this. I am somewhat surprised that this is not more well reported in mainstream media. If any other app so blatantly stole your data and shipped it off overseas, it would be all over the press as this should be. But Microsoft, like a number of others, are big enough to get away with this. Cheers, Graham On 17/12/21 14:01, Philip Loenneker wrote: > Hi Graham, > > I don't know if this is still the case, but the original "Outlook" app for mobiles saved your credentials on a server and downloaded to there, then synced it down to your device. I think they did that so they could do things like push notifications when you get an email, which doesn't work if it runs locally and the app isn't allowed to run in the background. That was before Microsoft bought the app, but I haven't looked at it at all since then. > > Where I was working at the time, we were justifiably concerned by this "feature", advised everybody to not use it, and blocked it from working on the corporate Internet service. > > It is possible that it operates differently now, but from what you described, it sounds like they still do the same thing. > > This rather old blog post discusses some of the security concerns, but it's from 2015 and may be completely irrelevant now. > https://4sysops.com/archives/is-microsofts-outlook-app-for-ios-and-android-insecure/ > > Regards, > Philip Loenneker| Senior Network Engineer > TasmaNet | Vastnet | Netmode > > -----Original Message----- > From: AusNOG On Behalf Of Graham Maltby > Sent: Friday, 17 December 2021 2:35 PM > To: ausnog at lists.ausnog.net > Subject: [AusNOG] Outlook Mobile (OT) > Importance: Low > > Afternoon all, > > While attempting to sort out some autodiscover / activesync processes last night, I installed Outlook on my mobile (current Android version from the Play Store). Setup and an account and logged in. > > To my dismay, I find my phone is not connecting over the LAN to the server 4m away but instead a server in Seoul, South Korea is connecting and downloading my mail instead. Aside from the woeful performance, it raises a lot of concerns with privacy, security and data sovereignty. > The most annoying part (if that was not sufficient), is that 14 hours after deleting the account from "all devices" and uninstalling the app, the server is still logging in and collecting mail now (or was until I changed the password). > > Is this common knowledge I have just missed all these years? > > Is there a reason the media are not making noise about this? > > Does nobody care because it's pretty? > > > I have very low expectations when it comes to Microsoft but this poor by any measure. > > Graham > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ausnog.net%2Fmailman%2Flistinfo%2Fausnog&data=04%7C01%7Cphilip.loenneker%40tasmanet.com.au%7Cc78698f33b944aa750c408d9c10e5b4c%7Cb53dc580ab7847208b30536f36d398ac%7C0%7C0%7C637753089685219848%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=4mr8ny9ODSiKpYpshRZ0eVceTabA95bJbmfw7qhk0KI%3D&reserved=0 From djr at pdconsec.net Fri Dec 17 19:22:09 2021 From: djr at pdconsec.net (David Rawling) Date: Fri, 17 Dec 2021 19:22:09 +1100 Subject: [AusNOG] Outlook Mobile (OT) In-Reply-To: <9ba296f6-8537-c44d-2f53-406bd6549a69@maltby.id.au> References: <9ba296f6-8537-c44d-2f53-406bd6549a69@maltby.id.au> Message-ID: <261a6262cea56966ed0a1e306cebae98c6fa18d8.camel@pdconsec.net> Hi Graham I am highly cynical about this, I realise, but I find it saves time. With that in mind ... This was discussed fairly extensively a few years ago when Outlook Mobile became the "Microsoft-offered/preferred" mobile client. I suspect that for most organisations who knew about it and actively considered it, the risk analysis included "Well, we already bent over ... er ... I mean, 'offloaded authentication to Azure' for Office 365, my corporate credentials and email are already stored by a company beholden to the PATRIOT Act etc, so what's one more case of credentials stored blindly in the cloud - MS swear it's the only/best way to do it and they must know what they're talking about". I decided back then I would let my employer decide that was OK for their stuff, but for my own use I have a different Android client (which supports all the Office 365 functionality anyway including MFA, so Microsoft's justifications are hollow). Most of these "decisions" on clients seem to be made by people on the basis of "ooh shiny", at least within SMEs. I'm sure the ADF wouldn't be using Mobile Outlook on this basis, right? Anyway, for organisations, there's also some value in being able to use Azure functionality to lock down mail to their own choice of client and managed device, so when it's lost or the employee leaves, company IP can be wiped (and they "know" it works). Those who know about the credential caching/storage have their concerns dismissed, and their successors have a harder time arguing for an alternative, too, since Outlook is already in place. And since MS hasn't enabled on-premises platforms for modern needs like MFA and modern authentication, and is actively trying to make rentals the only available option, I doubt the situation will improve. Dave. -- David Rawling - Principal Consultant t: +61 41 213 5513? |? e:?djr at pdconsec.net Please note that whilst we take all care, neither PD Consulting and Security nor the sender accepts any responsibility for viruses and it is your responsibility to scan for viruses. The contents are intended only for use by the addressee and may contain confidential and/or privileged material. If you received this in error, we request that you please inform the sender and/or addressee immediately and delete the material. On Fri, 2021-12-17 at 15:42 +1000, Graham Maltby wrote: > Thanks everyone for the confirmation. > > The process does not appear to have changed at all from what has been > described; still storing credentials and all the mail they can slurp. > I > have never liked or used Outlook in any of it's various incarnations > so > I've had little exposure to this. > > I am somewhat surprised that this is not more well reported in > mainstream media. If any other app so blatantly stole your data and > shipped it off overseas, it would be all over the press as this > should > be. But Microsoft, like a number of others, are big enough to get > away > with this. > > Cheers, > Graham > > > > On 17/12/21 14:01, Philip Loenneker wrote: > > Hi Graham, > > > > I don't know if this is still the case, but the original "Outlook" > > app for mobiles saved your credentials on a server and downloaded > > to there, then synced it down to your device. I think they did that > > so they could do things like push notifications when you get an > > email, which doesn't work if it runs locally and the app isn't > > allowed to run in the background. That was before Microsoft bought > > the app, but I haven't looked at it at all since then. > > > > Where I was working at the time, we were justifiably concerned by > > this "feature", advised everybody to not use it, and blocked it > > from working on the corporate Internet service. > > > > It is possible that it operates differently now, but from what you > > described, it sounds like they still do the same thing. > > > > This rather old blog post discusses some of the security concerns, > > but it's from 2015 and may be completely irrelevant now. > > https://4sysops.com/archives/is-microsofts-outlook-app-for-ios-and-android-insecure/ > > > > Regards, > > Philip Loenneker| Senior Network Engineer > > TasmaNet | Vastnet | Netmode > > > > -----Original Message----- > > From: AusNOG On Behalf Of Graham > > Maltby > > Sent: Friday, 17 December 2021 2:35 PM > > To: ausnog at lists.ausnog.net > > Subject: [AusNOG] Outlook Mobile (OT) > > Importance: Low > > > > Afternoon all, > > > > While attempting to sort out some autodiscover / activesync > > processes last night, I installed Outlook on my mobile (current > > Android version from the Play Store). Setup and an account and > > logged in. > > > > To my dismay, I find my phone is not connecting over the LAN to the > > server 4m away but instead a server in Seoul, South Korea is > > connecting and downloading my mail instead. Aside from the woeful > > performance, it raises a lot of concerns with privacy, security and > > data sovereignty. > > The most annoying part (if that was not sufficient), is that 14 > > hours after deleting the account from "all devices" and > > uninstalling the app, the server is still logging in and collecting > > mail now (or was until I changed the password). > > > > Is this common knowledge I have just missed all these years? > > > > Is there a reason the media are not making noise about this? > > > > Does nobody care because it's pretty? > > > > > > I have very low expectations when it comes to Microsoft but this > > poor by any measure. > > > > Graham > > > > _______________________________________________ > > AusNOG mailing list > > AusNOG at lists.ausnog.net > > https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ausnog.net%2Fmailman%2Flistinfo%2Fausnog&data=04%7C01%7Cphilip.loenneker%40tasmanet.com.au%7Cc78698f33b944aa750c408d9c10e5b4c%7Cb53dc580ab7847208b30536f36d398ac%7C0%7C0%7C637753089685219848%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=4mr8ny9ODSiKpYpshRZ0eVceTabA95bJbmfw7qhk0KI%3D&reserved=0 > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From dazzagibbs at gmail.com Fri Dec 17 20:39:16 2021 From: dazzagibbs at gmail.com (DaZZa) Date: Fri, 17 Dec 2021 20:39:16 +1100 Subject: [AusNOG] Outlook Mobile (OT) In-Reply-To: <261a6262cea56966ed0a1e306cebae98c6fa18d8.camel@pdconsec.net> References: <9ba296f6-8537-c44d-2f53-406bd6549a69@maltby.id.au> <261a6262cea56966ed0a1e306cebae98c6fa18d8.camel@pdconsec.net> Message-ID: Hi Dave Be good fella and elucidate us as to the name of this non-Microsoft android client that supports MFA, please? The only reason I started using the streaming pile of putrid dog crap that is Outlook is because corporate decided to enforce MFA - and the Samsung/Android client didn't support that I'd love to know a client that I can use that supports MFA and isn't Outlook. Thanks DaZZa On Fri, 17 Dec 2021, 7:42 pm David Rawling, wrote: > Hi Graham > > I am highly cynical about this, I realise, but I find it saves time. With > that in mind ... > > This was discussed fairly extensively a few years ago when Outlook Mobile > became the "Microsoft-offered/preferred" mobile client. I suspect that for > most organisations who knew about it and actively considered it, the risk > analysis included "Well, we already bent over ... er ... I mean, 'offloaded > authentication to Azure' for Office 365, my corporate credentials and email > are already stored by a company beholden to the PATRIOT Act etc, so what's > one more case of credentials stored blindly in the cloud - MS swear it's > the only/best way to do it and they must know what they're talking about". > > I decided back then I would let my employer decide that was OK for their > stuff, but for my own use I have a different Android client (which supports > all the Office 365 functionality anyway including MFA, so Microsoft's > justifications are hollow). Most of these "decisions" on clients seem to be > made by people on the basis of "ooh shiny", at least within SMEs. I'm sure > the ADF wouldn't be using Mobile Outlook on this basis, right? > > Anyway, for organisations, there's also some value in being able to use > Azure functionality to lock down mail to their own choice of client and > managed device, so when it's lost or the employee leaves, company IP can be > wiped (and they "know" it works). Those who know about the credential > caching/storage have their concerns dismissed, and their successors have a > harder time arguing for an alternative, too, since Outlook is already in > place. And since MS hasn't enabled on-premises platforms for modern needs > like MFA and modern authentication, and is actively trying to make rentals > the only available option, I doubt the situation will improve. > > Dave. > > -- > > David Rawling - Principal Consultant > > t: +61 41 213 5513 | e: djr at pdconsec.net > > Please note that whilst we take all care, neither PD Consulting and > Security nor the sender accepts any responsibility for viruses and it is > your responsibility to scan for viruses. The contents are intended only for > use by the addressee and may contain confidential and/or privileged > material. If you received this in error, we request that you please inform > the sender and/or addressee immediately and delete the material. > > On Fri, 2021-12-17 at 15:42 +1000, Graham Maltby wrote: > > Thanks everyone for the confirmation. > > The process does not appear to have changed at all from what has been > described; still storing credentials and all the mail they can slurp. I > have never liked or used Outlook in any of it's various incarnations so > I've had little exposure to this. > > I am somewhat surprised that this is not more well reported in > mainstream media. If any other app so blatantly stole your data and > shipped it off overseas, it would be all over the press as this should > be. But Microsoft, like a number of others, are big enough to get away > with this. > > Cheers, > Graham > > > > On 17/12/21 14:01, Philip Loenneker wrote: > > Hi Graham, > > I don't know if this is still the case, but the original "Outlook" app for > mobiles saved your credentials on a server and downloaded to there, then > synced it down to your device. I think they did that so they could do > things like push notifications when you get an email, which doesn't work if > it runs locally and the app isn't allowed to run in the background. That > was before Microsoft bought the app, but I haven't looked at it at all > since then. > > Where I was working at the time, we were justifiably concerned by this > "feature", advised everybody to not use it, and blocked it from working on > the corporate Internet service. > > It is possible that it operates differently now, but from what you > described, it sounds like they still do the same thing. > > This rather old blog post discusses some of the security concerns, but > it's from 2015 and may be completely irrelevant now. > > https://4sysops.com/archives/is-microsofts-outlook-app-for-ios-and-android-insecure/ > > Regards, > Philip Loenneker| Senior Network Engineer > TasmaNet | Vastnet | Netmode > > -----Original Message----- > From: AusNOG On Behalf Of Graham Maltby > Sent: Friday, 17 December 2021 2:35 PM > To: ausnog at lists.ausnog.net > Subject: [AusNOG] Outlook Mobile (OT) > Importance: Low > > Afternoon all, > > While attempting to sort out some autodiscover / activesync processes last > night, I installed Outlook on my mobile (current Android version from the > Play Store). Setup and an account and logged in. > > To my dismay, I find my phone is not connecting over the LAN to the server > 4m away but instead a server in Seoul, South Korea is connecting and > downloading my mail instead. Aside from the woeful performance, it raises a > lot of concerns with privacy, security and data sovereignty. > The most annoying part (if that was not sufficient), is that 14 hours > after deleting the account from "all devices" and uninstalling the app, the > server is still logging in and collecting mail now (or was until I changed > the password). > > Is this common knowledge I have just missed all these years? > > Is there a reason the media are not making noise about this? > > Does nobody care because it's pretty? > > > I have very low expectations when it comes to Microsoft but this poor by > any measure. > > Graham > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > > https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ausnog.net%2Fmailman%2Flistinfo%2Fausnog&data=04%7C01%7Cphilip.loenneker%40tasmanet.com.au%7Cc78698f33b944aa750c408d9c10e5b4c%7Cb53dc580ab7847208b30536f36d398ac%7C0%7C0%7C637753089685219848%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=4mr8ny9ODSiKpYpshRZ0eVceTabA95bJbmfw7qhk0KI%3D&reserved=0 > > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Scott.McInness at datacom.com.au Fri Dec 17 20:50:18 2021 From: Scott.McInness at datacom.com.au (Scott McInness) Date: Fri, 17 Dec 2021 09:50:18 +0000 Subject: [AusNOG] Outlook Mobile (OT) In-Reply-To: References: <9ba296f6-8537-c44d-2f53-406bd6549a69@maltby.id.au> <261a6262cea56966ed0a1e306cebae98c6fa18d8.camel@pdconsec.net> Message-ID: Nine, by 9folders, is hands-down the best Android mail client for Exchange. https://play.google.com/store/apps/details?id=com.ninefolders.hd3 It will cost you a tenner, IIRC, if you can't get it when it's on sale but it's easily worth that. Cheers, Scott. ________________________________ From: DaZZa Sent: Friday, 17 December 2021 8:10 pm To: David Rawling Cc: Subject: Re: [AusNOG] Outlook Mobile (OT) Hi Dave Be good fella and elucidate us as to the name of this non-Microsoft android client that supports MFA, please? The only reason I started using the streaming pile of putrid dog crap that is Outlook is because corporate decided to enforce MFA - and the Samsung/Android client didn't support that I'd love to know a client that I can use that supports MFA and isn't Outlook. Thanks DaZZa On Fri, 17 Dec 2021, 7:42 pm David Rawling, > wrote: Hi Graham I am highly cynical about this, I realise, but I find it saves time. With that in mind ... This was discussed fairly extensively a few years ago when Outlook Mobile became the "Microsoft-offered/preferred" mobile client. I suspect that for most organisations who knew about it and actively considered it, the risk analysis included "Well, we already bent over ... er ... I mean, 'offloaded authentication to Azure' for Office 365, my corporate credentials and email are already stored by a company beholden to the PATRIOT Act etc, so what's one more case of credentials stored blindly in the cloud - MS swear it's the only/best way to do it and they must know what they're talking about". I decided back then I would let my employer decide that was OK for their stuff, but for my own use I have a different Android client (which supports all the Office 365 functionality anyway including MFA, so Microsoft's justifications are hollow). Most of these "decisions" on clients seem to be made by people on the basis of "ooh shiny", at least within SMEs. I'm sure the ADF wouldn't be using Mobile Outlook on this basis, right? Anyway, for organisations, there's also some value in being able to use Azure functionality to lock down mail to their own choice of client and managed device, so when it's lost or the employee leaves, company IP can be wiped (and they "know" it works). Those who know about the credential caching/storage have their concerns dismissed, and their successors have a harder time arguing for an alternative, too, since Outlook is already in place. And since MS hasn't enabled on-premises platforms for modern needs like MFA and modern authentication, and is actively trying to make rentals the only available option, I doubt the situation will improve. Dave. -- David Rawling - Principal Consultant t: +61 41 213 5513 | e: djr at pdconsec.net Please note that whilst we take all care, neither PD Consulting and Security nor the sender accepts any responsibility for viruses and it is your responsibility to scan for viruses. The contents are intended only for use by the addressee and may contain confidential and/or privileged material. If you received this in error, we request that you please inform the sender and/or addressee immediately and delete the material. On Fri, 2021-12-17 at 15:42 +1000, Graham Maltby wrote: Thanks everyone for the confirmation. The process does not appear to have changed at all from what has been described; still storing credentials and all the mail they can slurp. I have never liked or used Outlook in any of it's various incarnations so I've had little exposure to this. I am somewhat surprised that this is not more well reported in mainstream media. If any other app so blatantly stole your data and shipped it off overseas, it would be all over the press as this should be. But Microsoft, like a number of others, are big enough to get away with this. Cheers, Graham On 17/12/21 14:01, Philip Loenneker wrote: Hi Graham, I don't know if this is still the case, but the original "Outlook" app for mobiles saved your credentials on a server and downloaded to there, then synced it down to your device. I think they did that so they could do things like push notifications when you get an email, which doesn't work if it runs locally and the app isn't allowed to run in the background. That was before Microsoft bought the app, but I haven't looked at it at all since then. Where I was working at the time, we were justifiably concerned by this "feature", advised everybody to not use it, and blocked it from working on the corporate Internet service. It is possible that it operates differently now, but from what you described, it sounds like they still do the same thing. This rather old blog post discusses some of the security concerns, but it's from 2015 and may be completely irrelevant now. https://4sysops.com/archives/is-microsofts-outlook-app-for-ios-and-android-insecure/ Regards, Philip Loenneker| Senior Network Engineer TasmaNet | Vastnet | Netmode -----Original Message----- From: AusNOG > On Behalf Of Graham Maltby Sent: Friday, 17 December 2021 2:35 PM To: ausnog at lists.ausnog.net Subject: [AusNOG] Outlook Mobile (OT) Importance: Low Afternoon all, While attempting to sort out some autodiscover / activesync processes last night, I installed Outlook on my mobile (current Android version from the Play Store). Setup and an account and logged in. To my dismay, I find my phone is not connecting over the LAN to the server 4m away but instead a server in Seoul, South Korea is connecting and downloading my mail instead. Aside from the woeful performance, it raises a lot of concerns with privacy, security and data sovereignty. The most annoying part (if that was not sufficient), is that 14 hours after deleting the account from "all devices" and uninstalling the app, the server is still logging in and collecting mail now (or was until I changed the password). Is this common knowledge I have just missed all these years? Is there a reason the media are not making noise about this? Does nobody care because it's pretty? I have very low expectations when it comes to Microsoft but this poor by any measure. Graham _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ausnog.net%2Fmailman%2Flistinfo%2Fausnog&data=04%7C01%7Cphilip.loenneker%40tasmanet.com.au%7Cc78698f33b944aa750c408d9c10e5b4c%7Cb53dc580ab7847208b30536f36d398ac%7C0%7C0%7C637753089685219848%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=4mr8ny9ODSiKpYpshRZ0eVceTabA95bJbmfw7qhk0KI%3D&reserved=0 _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From djr at pdconsec.net Sat Dec 18 00:15:38 2021 From: djr at pdconsec.net (David Rawling) Date: Sat, 18 Dec 2021 00:15:38 +1100 Subject: [AusNOG] Outlook Mobile (OT) In-Reply-To: References: <9ba296f6-8537-c44d-2f53-406bd6549a69@maltby.id.au> <261a6262cea56966ed0a1e306cebae98c6fa18d8.camel@pdconsec.net> Message-ID: <0f8c999021994a02ec539a75aeba7da2a59c46d6.camel@pdconsec.net> Hi DaZZa I didn't wish to mention it earlier and unprompted in case it felt like spam to people (yes, I'm from the old pre-eternal-September Internet), but Scott was on the money - Nine is the client I use personally (com.ninefolders.hd3 if you need the package name to find it).? Dave. -- David Rawling - Principal Consultant t: +61 41 213 5513? |? e:?djr at pdconsec.net Please note that whilst we take all care, neither PD Consulting and Security nor the sender accepts any responsibility for viruses and it is your responsibility to scan for viruses. The contents are intended only for use by the addressee and may contain confidential and/or privileged material. If you received this in error, we request that you please inform the sender and/or addressee immediately and delete the material. On Fri, 2021-12-17 at 20:39 +1100, DaZZa wrote: > Hi Dave > > Be good fella and elucidate us as to the name of this non-Microsoft > android client that supports MFA, please? > > The only reason I started using the streaming pile of putrid dog crap > that is Outlook is because corporate decided to enforce MFA - and the > Samsung/Android client didn't support that? > > I'd love to know a client that I can use that supports MFA and isn't > Outlook. > > Thanks > > DaZZa > > On Fri, 17 Dec 2021, 7:42 pm David Rawling, wrote: > > Hi Graham > > > > I am highly cynical about this, I realise, but I find it saves > > time. With that in mind ... > > > > This was discussed fairly extensively a few years ago when Outlook > > Mobile became the "Microsoft-offered/preferred" mobile client. I > > suspect that for most organisations who knew about it and actively > > considered it, the risk analysis included "Well, we already bent > > over ... er ... I mean, 'offloaded authentication to Azure' for > > Office 365, my corporate credentials and email are already stored > > by a company beholden to the PATRIOT Act etc, so what's one more > > case of credentials stored blindly in the cloud - MS swear it's the > > only/best way to do it and they must know what they're talking > > about". > > > > I decided back then I would let my employer decide that was OK for > > their stuff, but for my own use I have a different Android client > > (which supports all the Office 365 functionality anyway including > > MFA, so Microsoft's justifications are hollow). Most of these > > "decisions" on clients seem to be made by people on the basis of > > "ooh shiny", at least within SMEs. I'm sure the ADF wouldn't be > > using Mobile Outlook on this basis, right? > > > > Anyway, for organisations, there's also some value in being able to > > use Azure functionality to lock down mail to their own choice of > > client and managed device, so when it's lost or the employee > > leaves, company IP can be wiped (and they "know" it works). Those > > who know about the credential caching/storage have their concerns > > dismissed, and their successors have a harder time arguing for an > > alternative, too, since Outlook is already in place. And since MS > > hasn't enabled on-premises platforms for modern needs like MFA and > > modern authentication, and is actively trying to make rentals the > > only available option, I doubt the situation will improve. > > > > Dave. > > -- > > David Rawling - Principal Consultant > > > > t: +61 41 213 5513? |? e:?djr at pdconsec.net > > > > Please note that whilst we take all care, neither PD Consulting and > > Security nor the sender accepts any responsibility for viruses and > > it is your responsibility to scan for viruses. The contents are > > intended only for use by the addressee and may contain confidential > > and/or privileged material. If you received this in error, we > > request that you please inform the sender and/or addressee > > immediately and delete the material. > > > > On Fri, 2021-12-17 at 15:42 +1000, Graham Maltby wrote: > > > Thanks everyone for the confirmation. > > > > > > The process does not appear to have changed at all from what has > > > been > > > described; still storing credentials and all the mail they can > > > slurp. I > > > have never liked or used Outlook in any of it's various > > > incarnations so > > > I've had little exposure to this. > > > > > > I am somewhat surprised that this is not more well reported in > > > mainstream media. If any other app so blatantly stole your data > > > and > > > shipped it off overseas, it would be all over the press as this > > > should > > > be. But Microsoft, like a number of others, are big enough to get > > > away > > > with this. > > > > > > Cheers, > > > Graham > > > > > > > > > > > > On 17/12/21 14:01, Philip Loenneker wrote: > > > > Hi Graham, > > > > > > > > I don't know if this is still the case, but the original > > > > "Outlook" app for mobiles saved your credentials on a server > > > > and downloaded to there, then synced it down to your device. I > > > > think they did that so they could do things like push > > > > notifications when you get an email, which doesn't work if it > > > > runs locally and the app isn't allowed to run in the > > > > background. That was before Microsoft bought the app, but I > > > > haven't looked at it at all since then. > > > > > > > > Where I was working at the time, we were justifiably concerned > > > > by this "feature", advised everybody to not use it, and blocked > > > > it from working on the corporate Internet service. > > > > > > > > It is possible that it operates differently now, but from what > > > > you described, it sounds like they still do the same thing. > > > > > > > > This rather old blog post discusses some of the security > > > > concerns, but it's from 2015 and may be completely irrelevant > > > > now. > > > > > > > https://4sysops.com/archives/is-microsofts-outlook-app-for-ios-and-android-insecure/ > > > > > > > > Regards, > > > > Philip Loenneker| Senior Network Engineer > > > > TasmaNet | Vastnet | Netmode > > > > > > > > -----Original Message----- > > > > From: AusNOG On Behalf Of > > > > Graham Maltby > > > > Sent: Friday, 17 December 2021 2:35 PM > > > > To: ausnog at lists.ausnog.net > > > > Subject: [AusNOG] Outlook Mobile (OT) > > > > Importance: Low > > > > > > > > Afternoon all, > > > > > > > > While attempting to sort out some autodiscover / activesync > > > > processes last night, I installed Outlook on my mobile (current > > > > Android version from the Play Store). Setup and an account and > > > > logged in. > > > > > > > > To my dismay, I find my phone is not connecting over the LAN to > > > > the server 4m away but instead a server in Seoul, South Korea > > > > is connecting and downloading my mail instead. Aside from the > > > > woeful performance, it raises a lot of concerns with privacy, > > > > security and data sovereignty. > > > > The most annoying part (if that was not sufficient), is that 14 > > > > hours after deleting the account from "all devices" and > > > > uninstalling the app, the server is still logging in and > > > > collecting mail now (or was until I changed the password). > > > > > > > > Is this common knowledge I have just missed all these years? > > > > > > > > Is there a reason the media are not making noise about this? > > > > > > > > Does nobody care because it's pretty? > > > > > > > > > > > > I have very low expectations when it comes to Microsoft but > > > > this poor by any measure. > > > > > > > > Graham > > > > > > > > _______________________________________________ > > > > AusNOG mailing list > > > > AusNOG at lists.ausnog.net > > > > > > > https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ausnog.net%2Fmailman%2Flistinfo%2Fausnog&data=04%7C01%7Cphilip.loenneker%40tasmanet.com.au%7Cc78698f33b944aa750c408d9c10e5b4c%7Cb53dc580ab7847208b30536f36d398ac%7C0%7C0%7C637753089685219848%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=4mr8ny9ODSiKpYpshRZ0eVceTabA95bJbmfw7qhk0KI%3D&reserved=0 > > > > > > _______________________________________________ > > > AusNOG mailing list > > > AusNOG at lists.ausnog.net > > > http://lists.ausnog.net/mailman/listinfo/ausnog > > _______________________________________________ > > AusNOG mailing list > > AusNOG at lists.ausnog.net > > http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From Darren.Moss at cloud365.com.au Sun Dec 19 15:28:59 2021 From: Darren.Moss at cloud365.com.au (Darren Moss) Date: Sun, 19 Dec 2021 04:28:59 +0000 Subject: [AusNOG] Ongoing Telstra mobile internet outage in Darwin NT Message-ID: Good Afternoon, There has been an ongoing outage for Telstra mobile internet services in Darwin CBD for more than 10 days now. We have staff in the territory deploying infrastructure who have no mobile internet access. We've recently ported them from Vodafone to Telstra. I've gone through the usual channels and today was told "not to worry the backend team is looking into this". That's great but can anyone shed some light on what the problem is and when service will be restored ? Thank you. Darren. -------------- next part -------------- An HTML attachment was scrubbed... URL: From jrandombob at darkglade.com Sun Dec 19 19:28:35 2021 From: jrandombob at darkglade.com (Jrandombob) Date: Sun, 19 Dec 2021 19:28:35 +1100 Subject: [AusNOG] Outlook Mobile (OT) In-Reply-To: <261a6262cea56966ed0a1e306cebae98c6fa18d8.camel@pdconsec.net> References: <9ba296f6-8537-c44d-2f53-406bd6549a69@maltby.id.au> <261a6262cea56966ed0a1e306cebae98c6fa18d8.camel@pdconsec.net> Message-ID: > I decided back then I would let my employer decide that was OK for their stuff, but for my own use I have a different Android client (which supports all the Office 365 functionality anyway including MFA, so Microsoft's justifications are hollow). Most of these "decisions" on clients seem to be made by people on the basis of "ooh shiny", at least within SMEs. I'm sure the ADF wouldn't be using Mobile Outlook on this basis, right? FWIW, last I dealt with them the ADF was using Lotus Notes/Domino/whatever the hell they call it today for email, ditto the ATO. From Philip.Loenneker at tasmanet.com.au Mon Dec 20 09:09:34 2021 From: Philip.Loenneker at tasmanet.com.au (Philip Loenneker) Date: Sun, 19 Dec 2021 22:09:34 +0000 Subject: [AusNOG] Outlook Mobile (OT) In-Reply-To: <0f8c999021994a02ec539a75aeba7da2a59c46d6.camel@pdconsec.net> References: <9ba296f6-8537-c44d-2f53-406bd6549a69@maltby.id.au> <261a6262cea56966ed0a1e306cebae98c6fa18d8.camel@pdconsec.net> <0f8c999021994a02ec539a75aeba7da2a59c46d6.camel@pdconsec.net> Message-ID: I know that the Gmail app on Android works fine for MFA, but that's just trading which big organisation you're sharing your details with, I guess... From: AusNOG On Behalf Of David Rawling Sent: Saturday, 18 December 2021 12:16 AM To: Subject: Re: [AusNOG] Outlook Mobile (OT) Hi DaZZa I didn't wish to mention it earlier and unprompted in case it felt like spam to people (yes, I'm from the old pre-eternal-September Internet), but Scott was on the money - Nine is the client I use personally (com.ninefolders.hd3 if you need the package name to find it). Dave. -- David Rawling - Principal Consultant t: +61 41 213 5513 | e: djr at pdconsec.net Please note that whilst we take all care, neither PD Consulting and Security nor the sender accepts any responsibility for viruses and it is your responsibility to scan for viruses. The contents are intended only for use by the addressee and may contain confidential and/or privileged material. If you received this in error, we request that you please inform the sender and/or addressee immediately and delete the material. On Fri, 2021-12-17 at 20:39 +1100, DaZZa wrote: Hi Dave Be good fella and elucidate us as to the name of this non-Microsoft android client that supports MFA, please? The only reason I started using the streaming pile of putrid dog crap that is Outlook is because corporate decided to enforce MFA - and the Samsung/Android client didn't support that I'd love to know a client that I can use that supports MFA and isn't Outlook. Thanks DaZZa On Fri, 17 Dec 2021, 7:42 pm David Rawling, > wrote: Hi Graham I am highly cynical about this, I realise, but I find it saves time. With that in mind ... This was discussed fairly extensively a few years ago when Outlook Mobile became the "Microsoft-offered/preferred" mobile client. I suspect that for most organisations who knew about it and actively considered it, the risk analysis included "Well, we already bent over ... er ... I mean, 'offloaded authentication to Azure' for Office 365, my corporate credentials and email are already stored by a company beholden to the PATRIOT Act etc, so what's one more case of credentials stored blindly in the cloud - MS swear it's the only/best way to do it and they must know what they're talking about". I decided back then I would let my employer decide that was OK for their stuff, but for my own use I have a different Android client (which supports all the Office 365 functionality anyway including MFA, so Microsoft's justifications are hollow). Most of these "decisions" on clients seem to be made by people on the basis of "ooh shiny", at least within SMEs. I'm sure the ADF wouldn't be using Mobile Outlook on this basis, right? Anyway, for organisations, there's also some value in being able to use Azure functionality to lock down mail to their own choice of client and managed device, so when it's lost or the employee leaves, company IP can be wiped (and they "know" it works). Those who know about the credential caching/storage have their concerns dismissed, and their successors have a harder time arguing for an alternative, too, since Outlook is already in place. And since MS hasn't enabled on-premises platforms for modern needs like MFA and modern authentication, and is actively trying to make rentals the only available option, I doubt the situation will improve. Dave. -- David Rawling - Principal Consultant t: +61 41 213 5513 | e: djr at pdconsec.net Please note that whilst we take all care, neither PD Consulting and Security nor the sender accepts any responsibility for viruses and it is your responsibility to scan for viruses. The contents are intended only for use by the addressee and may contain confidential and/or privileged material. If you received this in error, we request that you please inform the sender and/or addressee immediately and delete the material. On Fri, 2021-12-17 at 15:42 +1000, Graham Maltby wrote: Thanks everyone for the confirmation. The process does not appear to have changed at all from what has been described; still storing credentials and all the mail they can slurp. I have never liked or used Outlook in any of it's various incarnations so I've had little exposure to this. I am somewhat surprised that this is not more well reported in mainstream media. If any other app so blatantly stole your data and shipped it off overseas, it would be all over the press as this should be. But Microsoft, like a number of others, are big enough to get away with this. Cheers, Graham On 17/12/21 14:01, Philip Loenneker wrote: Hi Graham, I don't know if this is still the case, but the original "Outlook" app for mobiles saved your credentials on a server and downloaded to there, then synced it down to your device. I think they did that so they could do things like push notifications when you get an email, which doesn't work if it runs locally and the app isn't allowed to run in the background. That was before Microsoft bought the app, but I haven't looked at it at all since then. Where I was working at the time, we were justifiably concerned by this "feature", advised everybody to not use it, and blocked it from working on the corporate Internet service. It is possible that it operates differently now, but from what you described, it sounds like they still do the same thing. This rather old blog post discusses some of the security concerns, but it's from 2015 and may be completely irrelevant now. https://4sysops.com/archives/is-microsofts-outlook-app-for-ios-and-android-insecure/ Regards, Philip Loenneker| Senior Network Engineer TasmaNet | Vastnet | Netmode -----Original Message----- From: AusNOG > On Behalf Of Graham Maltby Sent: Friday, 17 December 2021 2:35 PM To: ausnog at lists.ausnog.net Subject: [AusNOG] Outlook Mobile (OT) Importance: Low Afternoon all, While attempting to sort out some autodiscover / activesync processes last night, I installed Outlook on my mobile (current Android version from the Play Store). Setup and an account and logged in. To my dismay, I find my phone is not connecting over the LAN to the server 4m away but instead a server in Seoul, South Korea is connecting and downloading my mail instead. Aside from the woeful performance, it raises a lot of concerns with privacy, security and data sovereignty. The most annoying part (if that was not sufficient), is that 14 hours after deleting the account from "all devices" and uninstalling the app, the server is still logging in and collecting mail now (or was until I changed the password). Is this common knowledge I have just missed all these years? Is there a reason the media are not making noise about this? Does nobody care because it's pretty? I have very low expectations when it comes to Microsoft but this poor by any measure. Graham _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ausnog.net%2Fmailman%2Flistinfo%2Fausnog&data=04%7C01%7Cphilip.loenneker%40tasmanet.com.au%7Cc78698f33b944aa750c408d9c10e5b4c%7Cb53dc580ab7847208b30536f36d398ac%7C0%7C0%7C637753089685219848%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=4mr8ny9ODSiKpYpshRZ0eVceTabA95bJbmfw7qhk0KI%3D&reserved=0 _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From russell3901 at gmail.com Mon Dec 20 11:15:38 2021 From: russell3901 at gmail.com (Russell Langton) Date: Mon, 20 Dec 2021 11:15:38 +1100 Subject: [AusNOG] Ongoing Telstra mobile internet outage in Darwin NT In-Reply-To: References: Message-ID: Hi Darren, This is not an ideal experience.... I checked the outage board for NT and there is nothing for the CBD there. I'll reach out to you for more details so we can resolve this. On Sun, Dec 19, 2021 at 3:29 PM Darren Moss wrote: > Good Afternoon, > > > > There has been an ongoing outage for Telstra mobile internet services in > Darwin CBD for more than 10 days now. > > > > We have staff in the territory deploying infrastructure who have no mobile > internet access. We?ve recently ported them from Vodafone to Telstra. > > > > I?ve gone through the usual channels and today was told ?not to worry the > backend team is looking into this?. > > > > That?s great but can anyone shed some light on what the problem is and > when service will be restored ? > > > > Thank you. > > > > > > Darren. > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Darren.Moss at cloud365.com.au Mon Dec 20 11:22:47 2021 From: Darren.Moss at cloud365.com.au (Darren Moss) Date: Mon, 20 Dec 2021 00:22:47 +0000 Subject: [AusNOG] Ongoing Telstra mobile internet outage in Darwin NT In-Reply-To: References: Message-ID: <4a66aadec7284c5daf4543ee72619ca1@mbx05.ap.myhostedexchange.email> Thanks Russell. D. From: Russell Langton Sent: Monday, 20 December 2021 11:16 AM To: Darren Moss Cc: AusNOG Mailing List Subject: Re: [AusNOG] Ongoing Telstra mobile internet outage in Darwin NT Hi Darren, This is not an ideal experience.... I checked the outage board for NT and there is nothing for the CBD there. I'll reach out to you for more details so we can resolve this. On Sun, Dec 19, 2021 at 3:29 PM Darren Moss > wrote: Good Afternoon, There has been an ongoing outage for Telstra mobile internet services in Darwin CBD for more than 10 days now. We have staff in the territory deploying infrastructure who have no mobile internet access. We?ve recently ported them from Vodafone to Telstra. I?ve gone through the usual channels and today was told ?not to worry the backend team is looking into this?. That?s great but can anyone shed some light on what the problem is and when service will be restored ? Thank you. Darren. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From jason at leschnik.me Fri Dec 24 07:43:26 2021 From: jason at leschnik.me (Jason Leschnik) Date: Fri, 24 Dec 2021 07:43:26 +1100 Subject: [AusNOG] [Wollongong/Sydney] - Nexus 5548 needed for POC - Borrow Message-ID: Hi all, Sorry for allowing this to leak out of classifieds but I'd like to expand it to a larger audience who might not be able to sell these. We've currently got a few changes + issues with our Nexus 5548's (/w L3 daughter cards) in our DC and we don't have cold spares to test/compare against. I'm wondering if anyone has a pair of these kicking around (with the L3 enabled daughter cards) they're willing to lend. I can pick up/drop back anywhere in a ~200km radius of Wollongong. Regards, Jason. -------------- next part -------------- An HTML attachment was scrubbed... URL: From jason at leschnik.me Fri Dec 24 07:44:31 2021 From: jason at leschnik.me (Jason Leschnik) Date: Fri, 24 Dec 2021 07:44:31 +1100 Subject: [AusNOG] [Wollongong/Sydney] - Nexus 5548 needed for POC - Borrow In-Reply-To: References: Message-ID: *edit*: Ideally a pair of these would be needed for vPC On Fri, 24 Dec 2021 at 07:43, Jason Leschnik wrote: > Hi all, > > Sorry for allowing this to leak out of classifieds but I'd like to expand > it to a larger audience who might not be able to sell these. > > We've currently got a few changes + issues with our Nexus 5548's (/w L3 > daughter cards) in our DC and we don't have cold spares to test/compare > against. I'm wondering if anyone has a pair of these kicking around (with > the L3 enabled daughter cards) they're willing to lend. > > I can pick up/drop back anywhere in a ~200km radius of Wollongong. > > Regards, > Jason. > -------------- next part -------------- An HTML attachment was scrubbed... URL: From david at hughes.id Fri Dec 24 12:52:11 2021 From: david at hughes.id (David Hughes) Date: Fri, 24 Dec 2021 01:52:11 +0000 Subject: [AusNOG] Season's Greetings Message-ID: <0FF587D0-1BAF-4336-85B8-A78E1391EFF3@hughes.id> [cid:7366D63E-AD97-437C-9A13-B8BC9705A43A] [ No replies expected, but if you choose to please send off list ] 2021 has certainly been a challenging year for us all and has continued to put an increased level of importance on the services we as an industry provide. Keeping our clients connected with each other has never been more important as we face another festive season with a reduced ability to see our family and friends. I doubt you'll be flooded with Thank You cards, but I'm sure it's appreciated by those who use your services to call, chat, Zoom, FaceTime, or email their loved ones. >From an AusNOG perspective it's the second year in which he haven't been able to hold events and gather our industry together as we normally would. With what was AusNOG 2020 now scheduled for April 2022 we hope we'll finally have an opportunity to connect our community face to face. It's been far too long. We've been busy here at AusNOG and have much to share when we have an opportunity to catch up. As I sign off for the year I hope you all have an opportunity to enjoy some well deserved downtime. I wish you a safe and happy festive season and I look forward to sharing whatever 2022 brings with you all, hopefully in person. Kind regards, David ... -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: ausnog_xmas.png Type: image/png Size: 49187 bytes Desc: ausnog_xmas.png URL: From dazzagibbs at gmail.com Thu Dec 30 08:48:02 2021 From: dazzagibbs at gmail.com (DaZZa) Date: Thu, 30 Dec 2021 08:48:02 +1100 Subject: [AusNOG] iiiNet DC outage Perth? Message-ID: Hey guys Anyone got any info on this? https://www.itnews.com.au/news/iinet-says-heatwave-conditions-behind-data-centre-outage-574335 Apparently, iiNet email and web services has been down since Christmas because of heat issues in a DC in Perth? DaZZa -------------- next part -------------- An HTML attachment was scrubbed... URL: From brad at bradleyamm.com Thu Dec 30 15:46:03 2021 From: brad at bradleyamm.com (Bradley Amm) Date: Thu, 30 Dec 2021 04:46:03 +0000 Subject: [AusNOG] iiiNet DC outage Perth? In-Reply-To: References: Message-ID: This is the old Westnet building. It?s not the first time it?s happened Someone suggested it?s the thermal insulation on the building and the aircons can?t handle it. NextDC had no issues as expected and Vocus were OK as well. Get Outlook for iOS ________________________________ From: AusNOG on behalf of DaZZa Sent: Thursday, December 30, 2021 5:48:02 AM To: Subject: [AusNOG] iiiNet DC outage Perth? Hey guys Anyone got any info on this? https://www.itnews.com.au/news/iinet-says-heatwave-conditions-behind-data-centre-outage-574335 Apparently, iiNet email and web services has been down since Christmas because of heat issues in a DC in Perth? DaZZa -------------- next part -------------- An HTML attachment was scrubbed... URL: From vk6ksj at westnet.com.au Thu Dec 30 20:00:34 2021 From: vk6ksj at westnet.com.au (Kai) Date: Thu, 30 Dec 2021 17:00:34 +0800 Subject: [AusNOG] iiiNet DC outage Perth? In-Reply-To: References: Message-ID: I lost access to my business email account and NBN connection from midday on Christmas Day to late afternoon on Dec 27th. No notifications from WestNet/iiNet/TPG, had to ring them to be told they're aware of a fault and "I'll be contacted as soon as it's fixed". WestNet website was down in that time, so couldn't access WestNet faults page. Used a non-WestNet connection to get onto Stalkbook (Facebook) and see that they'd posted a similar generic message. Dunno how many emails were purged or kept in the queue for processing. If the problem has been fixed I still have no notification from WestNet about it. Don't have many connectivity options up here in Broome. It's usually a fibre fault from someone who didn't dial-before-you-dig, or similar situation, it doesn't meet the criteria for financial reimbursement but it'd be super nice if they brought back the basic courtesy called customer service. On 30/12/21 5:48 am, DaZZa wrote: > Hey guys > > Anyone got any info on this? > > https://www.itnews.com.au/news/iinet-says-heatwave-conditions-behind-data-centre-outage-574335 > > > Apparently, iiNet email and web services has been down since Christmas > because of heat issues in a DC in Perth? > > DaZZa > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog >