NinerNet Communications™
Blog

Corporate Blog

“Shellshock” software bug

26 September 2014 14:17:06 +0000

You may have heard in the media about the so-called Shellshock security issue that affects a software package present on most Internet servers worldwide called “bash”. All of our servers run bash; it is a very basic building block on almost all UNIX- and Linux-based servers, which run most services on the Internet that you access every day. Bash can be loosely compared to the “command line” available on Windows-based computers.

Upon checking, we determined that the version of bash running on all of our servers was vulnerable to exploits aimed at the bug. All were immediately patched, and are no longer vulnerable. We continue to monitor security bulletins from the vendors of the operating systems we use for possible further patches related to newly-discovered vulnerabilities, should they materialise.

NinerNet takes keeping our servers updated and secure seriously. If you have any questions about this in general or this bug in particular, please contact us. Thank-you.

OpenSSL “Heartbleed” bug

9 April 2014 20:36:32 +0000

You may have read or heard reports in the media about a software bug in a widely-used program called OpenSSL used to secure SSL connections with and between servers.

While our servers do use OpenSSL, we have checked all of our systems and none of them are vulnerable to this bug.

If you have any questions or concerns, please let us know by contacting support.

Domain contact information MUST be valid

15 January 2014 11:38:43 +0000

ICANN (the Internet Corporation for Assigned Names and Numbers) — the organisation in charge of all generic top-level domains (e.g., dot-com, dot-net, dot-org, etc., and the upcoming new gTLDs) — has introduced new rules that came into effect on 1 January.

The rule most likely to affect you at some point is the requirement for a valid email address associated with your domain. People generally register a new domain with a working email address, but over time that address may stop working for one reason or another. ICANN have taken steps to ensure that such a situation is not perpetuated.

Effective 1 January, if one of our automated emails to a contact address for your domain bounces, we are required to send you a verification email asking you to click a link in the email to confirm that your address does actually work. Of course, you’ll only receive that email if your email address has started working again in the meantime. Unfortunately, if you do not receive and act on the instructions in the verification email, we will have no choice but to suspend your domain, which will automatically happen fifteen (15) days after the first verification email is sent. If your domain is suspended, any services (email, websites, etc.) that rely on it will stop working until you respond and update the email address in your domain account. This is an ICANN rule applicable to all registrars and domain registrants, and we are contractually obligated to comply with it.

You may receive the same verification email when you register a new domain, when you transfer an existing domain into your domain account with NinerNet from another domain registrar, or when you change the contact information for your domain.

Please take this opportunity to log into your domain account (if your domain is registered with us) to check the contact information we have on record for your domain(s). If the contact email address you see there no longer works, exists or is no longer controlled by you, please update it immediately. (You will then receive a verification email, and you must follow the instructions in that email to complete the change to your contact details.) If you have multiple domains, you can update all of them at the same time. If you need the log-in information for your domain account sent to you, please advise us of that. Please note that your domain account is different and separate from your hosting account, and needs to be maintained separately by you. Thank-you for your understanding and cooperation.

If you have any questions, please contact support. Thank-you.

Deletion of domains by Zamnet continues

14 June 2013 14:32:22 +0000

Not satisfied with having deleted 37 per cent of domains earlier this week, it appears that Zamnet continue to delete even more domains! Today we find out that domains that were still working on Tuesday have now been deleted, causing more clients to scramble because their email and websites have suddenly stopped working. This brings the percentage of domains deleted without warning due to Zamnet’s incompetence to 42 per cent … almost half! When will this stop?!

We encourage clients affected by these arbitrary and unannounced interruptions to their business to file a complaint with the Zambia Information and Communication Technology Authority. (UPDATE, 2013-06-28: The complaint form disappeared shortly after we posted this. Try their “Complaint Handling” page instead.)

Massive, unannounced deletion of dot-zm domains by Zamnet

11 June 2013 11:15:39 +0000

Over the last few days it has become apparent to us that Zamnet’s accounting department — just as Coppernet’s did almost three years ago — awoke from a long hibernation and realised that a chunk of active domains hadn’t been paid for. As a result, 37 per cent of the dot-zm domains hosted by NinerNet that are (or were) registered with Zamnet — which includes .co.zm, .org.zm and .sch.zm domains — were deleted by Zamnet, taking them off the Internet completely. One client tells us that Zamnet informed them, when they enquired, that they were supposedly four years behind! (UPDATE, 2013-06-28: Another client tells us they had not been invoiced for their dot-co.zm domain in thirteen years! They’ve since switched to a dot-com with “zambia” tacked onto their name, as so many people do to avoid the hassle and expense of registering a dot-zm domain.)

It seems unlikely to us that so many Zamnet customers had simply ignored their invoices for several years. It’s more likely that they were never invoiced. In fact, our own domain (ninernet.co.zm) came up for renewal over a month ago, and we still have not received an invoice. Perhaps Zamnet are too busy disabling over a third of the country’s Internet infrastructure to send out invoices! (CORRECTION, 2013-06-28: Oops, seems we hadn’t updated our records correctly. Zamnet [when they do invoice] bills for domains every two years. Ours does not expire until next year. Our apologies for the incorrect statement, although it doesn’t really change much!)

Screenshot of Zamnet home page, 11 June 2013.

Screenshot of Zamnet home page, 11 June 2013

Other countries take the management of their ccTLD (country code top-level domain) far more seriously than this. They have published rules and procedures governing what exactly happens after a domain expires. They also operate a WHOIS service so that the public can look up “who is” the owner of a domain and the dates that it was registered and will expire. Zamnet and Coppernet, as co-stewards of the dot-zm ccTLD — an odd arrangement that we are not aware of in any other country — do not provide any such information, at least to the public. In fact, judging by these arbitrary and cavalier mass deletions carried out by both companies, they don’t even have any such policies! They just seem to make this up as they go along.

Screenshot of ZICTA home page, 11 June 2013.

Screenshot of ZICTA home page, 11 June 2013

You would think that — given that deleting 37 per cent of the country’s domains has all of the appearance of a planned and concerted effort — Zamnet would, at the very least, post a prominent notice on the home page of their website. However, there is no such notice as of posting this. (Click on the thumbnail at left to see.) I’m also not aware of any notices posted in newspapers. So much for their laughable slogan: “Nobody delivers IT better.” Right now, more than a third of their customers are not gettingĀ anything delivered, and it’s clear that their slogan doesn’t apply to the delivery of invoices.

 

And where is ZICTA in all of this? You’d think they’d be interested in the disabling of 37 per cent of the country’s domains, but there’s nothing posted on the home page of their website either! Maybe a few complaints via their complaint form might get their attention. (UPDATE, 2013-06-28: Hmm, the complaint form disappeared shortly after we posted this. Try their “Complaint Handling” page instead.)

Please note that, if you did not register your dot-zm domain through NinerNet, we do not know when it is scheduled to expire and we cannot help you in dealing with Zamnet. We don’t know how effective it would be to request an update to the contact information for your domain so that we can monitor it, from an administrative (not technical) point of view, but if you’d like to try we’re certainly game to assist and cooperate. Let us know if you’d like to try.

Issues such as these mass and arbitrary deletions, as well as the entire dot-zm ccTLD going down occasionally, are the two main reason we discourage clients from registering dot-zm domains. This is unfortunate, of course, but clients expect their online services to actually be … online! It is also the reason that we created the alternative ccTLD for Zambia: dot-zam.co. They’re only K66 per year (as opposed to hundreds for a dot-co.zm and hundreds more for a dot-com.zm) and don’t require paperwork.

Price increase for dot-co.za domains

4 June 2013 11:52:29 +0000

The dot-co.za registry has announced a price increase of 50% for registration and renewal of dot-co.za domains, effective 1 March 2013. As a result, we too must increase our prices, and this will be effective immediately.

The new prices are live on our rates pages. Please check there for the new rates in your currency.

We appreciate your understanding.

Zambian kwacha rebasing

15 December 2012 15:42:05 +0000

As you will be aware, if you’re a Zambian client, the kwacha will be rebased on 1 January 2013, making 1000 old kwachas equal to 1 new kwacha. In keeping with Bank of Zambia guidelines and requirements, this will affect our invoicing as follows:

  • Invoices we issue between 15 and 31 December 2012, inclusive, will be issued in old kwachas, but will also include a value in new (rebased) kwachas. If you pay the invoice on or before 31 December, you will need to pay the old kwacha amount. If you pay the invoice on or after 1 January, you will need to pay the new kwacha amount.
  • Invoices we issue between 1 January and 30 June will be in new kwachas, but will include the value in old kwachas for comparison.
  • Where we have used the “K” symbol we will use the “KR” symbol (“kwacha rebased”) between 1 January and 30 June, inclusive. After that we will once again revert to using just the “K”.
  • Where we have used the currency code ZMK, we will use ZMW on and after 1 January.
  • Any account balances carried over into 2013 will be converted to new kwachas (ZMW) by dividing by 1000, and rounding as per BOZ guidelines. Similarly, previous account balances, although billed and paid for in old kwachas, will be converted to new kwachas for the purpose of calculating your running account balance in new kwachas.
  • Invoices will be rounded off to the nearest 5 ngwee to facilitate cash payments by those clients who prefer to pay in cash. CORRECTION, 2013-01-30: Invoices will not be rounded. If you are paying in cash in person, your balance owing will be rounded to the nearest 5 ngwee at the time of payment. If you deposit cash to our bank account, please round to the nearest 5 ngwee. Whether the rounding is up or down, we will record the actual payment and carry forward a balance of the difference (1 or 2 ngwee) between your payment and the actual invoice amount. If the rounding is down, this will not adversely affect the state of your account with us.
  • The cover emails to which invoices are attached (and all reminders, expiry notices, etc.) will reflect amounts only in old kwachas in 2012, and only in new kwachas in 2013. These emails are only an unofficial summary of the official invoice, which is the PDF document attached to the invoice email.
  • We will, in due course, publish new rates on our website. There will be no increase in our rates at this time — i.e., all rates in new kwachas will be the same as the old rates, divided by 1000.

If you have any questions about this, please let us know. Thank-you.

Senegal IP addresses blocked

1 August 2012 06:59:29 +0000

Over the years we have resisted the temptation to block whole countries based on the bad behaviour of only a few of their residents. Many mail servers out there block email from all of China, roughly 20% of the world’s population! We do not.

However, due to a constant onslaught from determined spammers in Senegal, we have blocked all IP addresses assigned to that country. We hope to remove the block after some time, but we cannot predict when that might come to pass.

These are the IP address ranges that we have blocked:

31.201.2.0 - 31.201.2.3
37.59.137.240 - 37.59.137.255
37.222.209.0 - 37.222.209.255
41.62.0.0 - 41.62.255.255
41.82.0.0 - 41.83.255.255
41.208.128.0 - 41.208.191.255
41.214.0.0 - 41.214.127.255
41.219.0.0 - 41.219.63.255
46.36.197.111 - 46.36.197.120
64.182.63.133 - 64.182.63.141
69.13.133.138 - 69.13.133.146
69.13.190.244 - 69.13.190.252
80.84.25.48 - 80.84.25.63
82.206.180.0 - 82.206.180.255
82.206.198.128 - 82.206.198.255
92.39.112.0 - 92.39.112.127
178.32.167.96 - 178.32.167.111
193.220.57.104 - 193.220.57.111
193.220.72.224 - 193.220.72.231
193.220.72.248 - 193.220.72.255
194.117.53.0 - 194.117.53.127
196.1.92.0 - 196.1.100.255
196.207.192.0 - 196.207.255.255
208.68.251.0 - 208.68.251.255
213.154.64.0 - 213.154.95.255
216.139.166.0 - 216.139.166.255

If this adversely affects you in any way, please contact NinerNet support with details. Thank-you

New Bank of Zambia currency regulations

15 June 2012 09:57:44 +0000

On 12 June we learnt of The Bank of Zambia (Currency) Regulations, 2012, that were apparently passed on 7 May, came into effect on 18 May, and were posted on the BOZ website on 7 June. Despite the fact that our US dollar-based invoices have always included, according to previous law, a kwacha value (the other option on a foreign currency-based invoice is [or was] to include a conversion rate), it appears now that the mere mention of a foreign currency is illegal, and punishable by significant fines and/or jail terms.

Although NinerNet has clients in quite a number of countries around the world, in Zambia we operate through a locally-registered, turnover tax company named (believe it or not) “NinerNet Communications“. (Doing so significantly improves our ability to operate competitively in Zambia, and we have always been quick to point out to prospective Zambian clients that our invoices can be settled locally in kwachas.) As a result, our business in Zambia must be considered domestic, and so we are subject to this new law.

Unfortunately this news arrived too late for us to reconfigure and re-program our invoicing system in time for June’s invoicing. Therefore we will be adding prominent notices to our June invoice emails and the invoices themselves which indicate that, despite the presence of dollar amounts on the invoice, we “demand to be paid” in kwachas in accordance with section 4 of the new Regulations. To be clear, to comply with this law we can no longer accept payment in US dollars (or any other foreign currency) on “domestic transactions” in Zambia. In fact, we will be closing our dollar account in July.

By 1 July we will be issuing invoices denominated in kwachas only. We’ll also be adding a rates page for kwachas to our website, rather than simply referring clients to the US dollar rates. We’ll send a follow-up email to advise you of the new, fixed rates when they’re published. We have not finalised these yet, but we anticipate basing the new rates on an even exchange rate that hedges slightly against future variations. This will result in a price increase of about 87Ā¢ … oops, I mean K4500 per month for those clients on our most popular hosting plan, with the benefit being that your invoice won’t fluctuate from month to month.

I welcome your feedback on this issue. The commenting system on this blog is not working (yet!), so please contact me through the contact form on the NinerNet website to let me have your thoughts. Thanks.

Craig

Domain block removed

11 June 2012 10:53:57 +0000

The following four domains that were blocked a couple of weeks ago have been unblocked after liaising with the company involved:

  • cfcsprl.com
  • congofret.com
  • impala-wl.com
  • trafigura.com

Thanks for your patience while we worked to resolve this issue.

NinerNet home page

Subscriptions:

RSS icon. RSS

General Information:

This is the corporate blog of NinerNet Communications. It's where we post announcements, inform and educate our clients, and discuss issues related to the Internet (web and email) hosting business and all it entails. This includes concomitant industries and activities such as domain registration, SSL/TLS certificates, online back-up, virtual private servers (VPS), cloud hosting, etc. Please visit our main website for more information about us.

Search:

 

Recent Posts:

Archives:

Categories:

Tags:

accounts receivable apple billing branding cira contact information domain registration domain registry of canada domain renewals domains domain sales dot-ca domains dot-zm domains down time droc email encryption facebook google happy hosting customers hosting transfer icann invoices iphone kwacha maintenance paying your bill paying your invoice quarterly kwacha rate review rates registrar transfers reputation scams search engine optimisation search engine optimization security seo service hours spam ssl ssl/tls support transparency wordpress zamnet

Resources:

On NinerNet: