From nick at ucc.gu.uwa.edu.au Fri Oct 5 08:54:54 2012 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Fri, 5 Oct 2012 08:54:54 +0800 Subject: [tech] UCC DNS delegation Message-ID: <20121005005454.GF30214@ucc.gu.uwa.edu.au> I've lost track of exactly who our contacts are for our upstream forward and reverse DNS, I guess we should put those into /home/wheel/docs or perhaps mooneye:/etc/bind/named.conf.local . Probably the secure.ucc.asn.au SSL cert too, [MSH] renewed that with http://www.positivessl.com/ until 2015-05-10T23:59:59Z , I think he'll get that reminder at . [BOB] - you renewed ucc.asn.au with enetica.com.au for $39/2 years around 05-Apr-2012 09:54:40 UTC, I guess that means it expires in 20140701, though that's not shown on http://whois.ausregistry.com.au/ . It does show that the contacts are at wheel at ucc.gu.uwa.edu.au so I imagine that can be recovered by email if you're not available. IS would be our upstream for gu.uwa.edu.au , ucc.guild.uwa.edu.au , 13.95.130.in-addr.arpa , 2.4.1.0.0.0.0.0.c.3.5.0.4.2.ip6.arpa . Any contact person/method in particular? *** The problem is that they all list the nameservers as: Name Server mooneye.ucc.gu.uwa.edu.au Name Server ns2.bur.st Name Server ns4.labyrinthdata.net.au (and the only glue they have is ns4.labyrinthdata.net.au = 173.203.117.254 ) ns2.bur.st / 218.100.43.114 / creep.bur.st refuses all queries. [MRD] - is that as it should be and we should delete them? or should we be able to get WAIA.asn.au/bur.st secondarying? While I was checking that out - the primary nameserver for unisfa.asn.au is mooneye, registrant is Ewan/UniSFA, contact is a Kevin Emery but mooneye thinks the secondary is elysium.uwa.edu.au (whois/elysium disagrees). Rather than, say, *ns*.uwa.edu.au. ? unisfa.gu.uwa.edu.au , unisfa.guild.uwa.edu.au , unigames.gu.uwa.edu.au and unigames.guild.uwa.edu.au are all partly lame with a dead bur.st and gulag. They also include elysium and elysium seems to be OK wth that. Nick. -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From zanchey at ucc.gu.uwa.edu.au Fri Oct 5 12:22:49 2012 From: zanchey at ucc.gu.uwa.edu.au (David Adam) Date: Fri, 5 Oct 2012 12:22:49 +0800 (WST) Subject: [tech] UCC DNS delegation In-Reply-To: <20121005005454.GF30214@ucc.gu.uwa.edu.au> References: <20121005005454.GF30214@ucc.gu.uwa.edu.au> Message-ID: On Fri, 5 Oct 2012, Nick Bannon wrote: > I've lost track of exactly who our contacts are for our upstream forward > and reverse DNS, I guess we should put those into /home/wheel/docs or > perhaps mooneye:/etc/bind/named.conf.local . > > Probably the secure.ucc.asn.au SSL cert too, [MSH] renewed that with > http://www.positivessl.com/ until 2015-05-10T23:59:59Z , I think he'll > get that reminder at . [MSH] has been looking after this for at least ten years now I think :-) > [BOB] - you renewed ucc.asn.au with enetica.com.au for $39/2 years around > 05-Apr-2012 09:54:40 UTC, I guess that means it expires in 20140701, > though that's not shown on http://whois.ausregistry.com.au/ . It does > show that the contacts are at wheel at ucc.gu.uwa.edu.au so I imagine that > can be recovered by email if you're not available. You don't actually need a password to renew with Enetica, but I have the password if anyone wants it. > IS would be our upstream for gu.uwa.edu.au , ucc.guild.uwa.edu.au , > 13.95.130.in-addr.arpa , 2.4.1.0.0.0.0.0.c.3.5.0.4.2.ip6.arpa . Any > contact person/method in particular? In the past I've filed a ticket in the IT Service Desk, which usually ends up on Toivo's desk. They have binned the old DNS management tool (dnszone or something), not sure what the new one is or how we get access to it. Incidentally reverse DNS delegation for IPv6 does not work. In fact I don't think it has ever worked, either with the old address range(see http://lists.ucc.gu.uwa.edu.au/pipermail/tech/2010-August/003911.html), or the new range UWA received in November 2010. There is no PTR record for 2405:3c00::/32 (i.e. 0.0.c.3.5.0.4.2.ip6.arpa) from APNIC, and the UWA DNS thinks it is authoritative for that zone but does not delegate 0.0.2.4.1.0.0.0.0.0.c.3.5.0.4.2.ip6.arpa at all. > *** The problem is that they all list the nameservers as: > Name Server mooneye.ucc.gu.uwa.edu.au > Name Server ns2.bur.st > Name Server ns4.labyrinthdata.net.au > (and the only glue they have is ns4.labyrinthdata.net.au = 173.203.117.254 ) dns1.uwa.edu.au has glue for mooneye, I think: $ dig +norec @dns1.uwa.edu.au ucc.gu.uwa.edu.au ;; ADDITIONAL SECTION: mooneye.ucc.gu.uwa.edu.au. 3600 IN A 130.95.13.9 which is surely all that is needed - I don't think you need glue records for NSes that are outside the zone? The servers are returning extra glue but those are cached values and won't always be there (in fact I think dns1 is load balanced because repeat queries return different results and different TTLs!) > ns2.bur.st / 218.100.43.114 / creep.bur.st refuses all queries. > [MRD] - is that as it should be and we should delete them? or should we > be able to get WAIA.asn.au/bur.st secondarying? I last looked at this in 2010: http://lists.ucc.gu.uwa.edu.au/pipermail/tech/2010-July/003899.html bur.st was a great asset for a long time but with the change to WAIA and the ongoing problems they are having with resources perhaps we should look elsewhere. ns4.labyrinthdata.net.au is looked after by Patrick Coleman et al. Possibly we should consider freedns.afraid.org or asking [AHC]. David Adam zanchey at ucc.gu.uwa.edu.au Ask Me About Our SLA! From trs80 at ucc.gu.uwa.edu.au Fri Oct 5 13:18:46 2012 From: trs80 at ucc.gu.uwa.edu.au (James Andrewartha) Date: Fri, 5 Oct 2012 13:18:46 +0800 (WST) Subject: [tech] UCC DNS delegation In-Reply-To: References: <20121005005454.GF30214@ucc.gu.uwa.edu.au> Message-ID: On Fri, 5 Oct 2012, David Adam wrote: [DNS secondarying] > Possibly we should consider freedns.afraid.org or asking [AHC]. Free-ish options: HE.net (UCC has an account already?) BuddyNS (only free for a small number of requests, but has a big SYNC NOW button) SAGE-AU (requires a member, I am and there are others). I think Hurricane Electric is the best one to start with. -- # TRS-80 trs80(a)ucc.gu.uwa.edu.au #/ "Otherwise Bub here will do \ # UCC Wheel Member http://trs80.ucc.asn.au/ #| what squirrels do best | [ "There's nobody getting rich writing ]| -- Collect and hide your | [ software that I know of" -- Bill Gates, 1980 ]\ nuts." -- Acid Reflux #231 / From bob at ucc.asn.au Fri Oct 5 13:24:54 2012 From: bob at ucc.asn.au (Bob Adamson) Date: Fri, 5 Oct 2012 13:24:54 +0800 Subject: [tech] UCC DNS delegation In-Reply-To: References: <20121005005454.GF30214@ucc.gu.uwa.edu.au> Message-ID: <2DED5242BD3E4122B71441EFF36BF255@Prometheus> SAGE-AU might be worth a closer look seeing as membership is FREE (as in beer) for students. Bob -----Original Message----- From: James Andrewartha Sent: Friday, October 05, 2012 1:18 PM To: David Adam Cc: Ewan MacLeod ; tech at ucc.gu.uwa.edu.au ; Nick Bannon Subject: Re: [tech] UCC DNS delegation On Fri, 5 Oct 2012, David Adam wrote: [DNS secondarying] > Possibly we should consider freedns.afraid.org or asking [AHC]. Free-ish options: HE.net (UCC has an account already?) BuddyNS (only free for a small number of requests, but has a big SYNC NOW button) SAGE-AU (requires a member, I am and there are others). I think Hurricane Electric is the best one to start with. -- # TRS-80 trs80(a)ucc.gu.uwa.edu.au #/ "Otherwise Bub here will do \ # UCC Wheel Member http://trs80.ucc.asn.au/ #| what squirrels do best | [ "There's nobody getting rich writing ]| -- Collect and hide your | [ software that I know of" -- Bill Gates, 1980 ]\ nuts." -- Acid Reflux #231 / From matt at ucc.asn.au Fri Oct 5 21:11:43 2012 From: matt at ucc.asn.au (Matt Johnston) Date: Fri, 5 Oct 2012 21:11:43 +0800 Subject: [tech] UCC DNS delegation In-Reply-To: <20121005005454.GF30214@ucc.gu.uwa.edu.au> References: <20121005005454.GF30214@ucc.gu.uwa.edu.au> Message-ID: <20121005131143.GY24976@ucc.gu.uwa.edu.au> On Fri, Oct 05, 2012 at 08:54:54AM +0800, Nick Bannon wrote: > Probably the secure.ucc.asn.au SSL cert too, [MSH] renewed that with > http://www.positivessl.com/ until 2015-05-10T23:59:59Z , I think he'll > get that reminder at . Yeah, bought via namecheap.com though. Renewing doesn't need to be from the same place, just go with whichever's cheapest. It's not like there's even product differentiation by chained/not-chained certs these days. Matt From matt at ucc.asn.au Fri Oct 5 21:15:04 2012 From: matt at ucc.asn.au (Matt Johnston) Date: Fri, 5 Oct 2012 21:15:04 +0800 Subject: [tech] UCC DNS delegation In-Reply-To: <20121005131143.GY24976@ucc.gu.uwa.edu.au> References: <20121005005454.GF30214@ucc.gu.uwa.edu.au> <20121005131143.GY24976@ucc.gu.uwa.edu.au> Message-ID: <20121005131504.GZ24976@ucc.gu.uwa.edu.au> On Fri, Oct 05, 2012 at 09:11:43PM +0800, Matt Johnston wrote: > On Fri, Oct 05, 2012 at 08:54:54AM +0800, Nick Bannon wrote: > > Probably the secure.ucc.asn.au SSL cert too, [MSH] renewed that with > > http://www.positivessl.com/ until 2015-05-10T23:59:59Z , I think he'll > > get that reminder at . > > Yeah, bought via namecheap.com though. Renewing doesn't need > to be from the same place, just go with whichever's > cheapest. It's not like there's even product > differentiation by chained/not-chained certs these days. Alternatively, in three years time perhaps dnssec will provide magical "free certificate with every domain purchased" and we won't have to care! Matt From bob at ucc.gu.uwa.edu.au Sat Oct 27 19:03:19 2012 From: bob at ucc.gu.uwa.edu.au (Andrew Adamson) Date: Sat, 27 Oct 2012 19:03:19 +0800 (WST) Subject: [tech] AVR programmer DESPERATELY needed Message-ID: Hi all, I've just found out that the USBtinyISP programmer I have isn't compatible with the ATxMega chip that I'm using on a board for my final year project. Does anybody out there happen to have a PDI capable AVRISP-MKII or AVR Dragon programmer that I could borrow for a few days? My thesis due date is rapidly approaching, so I don't have time to buy one off the internet. Please help! Andrew Adamson bob at ucc.asn.au |"If you can't beat them, join them, and then beat them." | | ---Peter's Laws | From bob at ucc.gu.uwa.edu.au Sat Oct 27 19:24:33 2012 From: bob at ucc.gu.uwa.edu.au (Andrew Adamson) Date: Sat, 27 Oct 2012 19:24:33 +0800 (WST) Subject: [tech] AVR programmer DESPERATELY needed In-Reply-To: References: Message-ID: Once again illustrating the awesomeness of UCC's mailing lists and members, I have already been offered the use of an AVR Dragon. Thanks all. Andrew Adamson bob at ucc.asn.au |"If you can't beat them, join them, and then beat them." | | ---Peter's Laws | On Sat, 27 Oct 2012, Andrew Adamson wrote: > Hi all, > > I've just found out that the USBtinyISP programmer I have isn't compatible > with the ATxMega chip that I'm using on a board for my final year project. > Does anybody out there happen to have a PDI capable AVRISP-MKII or AVR > Dragon programmer that I could borrow for a few days? My thesis due date > is rapidly approaching, so I don't have time to buy one off the internet. > Please help! > > Andrew Adamson > bob at ucc.asn.au > > |"If you can't beat them, join them, and then beat them." | > | ---Peter's Laws | >