IP address range
J. P. W. Pitt made this Official Information request to Parliamentary Service
The request was partially successful.
From: J. P. W. Pitt
Dear Parliamentary Service,
I request the public IP address range(s) used by the parliamentary service's IT infrastructure.
I acknowledge you are not subject to the OIA, but this information relates to requests generated by parliamentary staff via public computer networks. Information being disseminated online by parliament should have it's origin traceable.
Yours faithfully,
Joel Pitt
From: Parliamentary Information Service
Parliamentary Service
Thank you for your enquiry. It has been received by the Parliamentary Information Service. This Service responds to information requests from the public which relate to all aspects of the New Zealand Parliament. We will reply to your request within the next 3 days.
show quoted sections
From: J. P. W. Pitt
Dear Parliamentary Information Service,
I would appreciate a response to my information request.
During the period leading up to the coming election, it is important to have transparency on what edits are being made to public internet resources from the government's IT infrastructure.
Yours sincerely,
J. P. W. Pitt
J. P. W. Pitt left an annotation ()
Thanks Alex - I'll make any followup more specific. Currently my main interest is to allow traceability of wikipedia edits.
From: Parliamentary Information Service
Parliamentary Service
Good afternoon
Thank you for your request for the rane of external IP addresses used by the Parliamentary Service.
The following list is the range of external IP addresses either currently used by the Parliamentary Service, or presently being transitioned to :
202.22.16.0
202.22.18.0
202.22.30.0
202.49.210.0
202.49.211.0
202.49.212.0
202.49.213.0
202.49.214.0
202.49.215.0
202.68.89.0
203.97.232.0
I trust this answers your query.
The Parliamentary Information Service responds to information requests from the public which relate to the work, publications, proceedings, people and history of the New Zealand Parliament.
If you have an inquiry of this nature please contact us again with further details.
Yours
Parliamentary Information Service
Parliamentary Service, Parliament Buildings, Wellington 6160, New Zealand
T: [04] 817 9647
E: [Parliamentary Service request email] W: www.parliament.nz
____________________________________________________________
show quoted sections
Nigel Jones left an annotation ()
May pay to clarify some of the IP ranges (ask for the appropriate CIDR) as they aren't owned by Parliamentary Service, and in some cases I suspect if used for certain purposes include non-Parliamentary Service computers (particularly those in the 'Cable Customers' allocation).
> 202.22.16.0
> 202.22.18.0
> 202.22.30.0
All come from "inetnum: 202.22.16.0 - 202.22.30.255" owned by Vodafone NZ, so it's possible that they have been assigned /24's from those ranges, but it's possible that they are only assigned certain IPs.
> 202.49.210.0
> 202.49.211.0
> 202.49.212.0
> 202.49.213.0
> 202.49.214.0
> 202.49.215.0
From allocation to Parliamentary Services:
inetnum: 202.49.208.0 - 202.49.215.255
netname: PS-NZ
descr: Parliamentary Service NZ (PS)
(CIDR = 202.49.208.0/21) But their response implies they don't use 202.49.208.0/24 or 202.49.209.0/24 (sub-assigned to another purpose that Parliamentary Services admin?)
> 202.68.89.0
Part of allocation matching "inetnum: 202.68.80.0 - 202.68.95.255" (Netname: DTS - a Business ISP, so similar concerns to below if they are only using a couple of IPs from that particular /24).
> 203.97.232.0
Part of allocation matching "inetnum: 203.97.220.0 - 203.97.236.255" (Description per WHOIS: "TelstraClear Cable Customers") concern here is if used to identify traffic from P.S. it could include false positives from other TelstraClear customers.
From: J. P. W. Pitt
Dear Parliamentary Information Service,
Thank you very much for your reply!
The previous reply indicates /24 netmask for all networks but on investigation this seems is unlikely (see below). Could you please clarify some of these, preferably using a more specific CIDR?
Some of the ranges in your response are not owned by Parliamentary Services, e.g. some are indicated as in use for 'Cable Customers'. but for accountability it is necessary to have more specific ranges to avoid conflating traffic from individual/business internet users from that of parliament.
> 202.49.210.0
> 202.49.211.0
> 202.49.212.0
> 202.49.213.0
> 202.49.214.0
> 202.49.215.0
From allocation to Parliamentary Services:
inetnum: 202.49.208.0 - 202.49.215.255
netname: PS-NZ
descr: Parliamentary Service NZ (PS)
(CIDR = 202.49.208.0/21) Your response implies parliamentary services does not use 202.49.208.0/24 or 202.49.209.0/24. Is this correct?
> 202.22.16.0
> 202.22.18.0
> 202.22.30.0
All come from "inetnum: 202.22.16.0 - 202.22.30.255" owned by Vodafone NZ.
> 202.68.89.0
Part of allocation matching "inetnum: 202.68.80.0 - 202.68.95.255" (Netname: DTS - a Business ISP).
> 203.97.232.0
Part of allocation matching "inetnum: 203.97.220.0 - 203.97.236.255" (Description per WHOIS: "TelstraClear Cable Customers").
For the above three network owners, has Parliamentary Services been allocated /24's from the ranges? Or only certain IPs?
Also, your response suggests that Parliamentary Services does not use any external IPv6 addresses. Can you confirm that all outbound Parliamentary Services traffic is limited IPv4 only?
Yours sincerely,
J. P. W. Pitt
J. P. W. Pitt left an annotation ()
Thanks Nigel for the investigative work. I've sent a follow up asking them for more information based on your findings.
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence
Alex Harris left an annotation ()
As you acknowledge in your request, the Parliamentary Service is not subject to the OIA. They sometimes respond out of courtesy, but they're under no obligation to, and they are not bound by any statutory timeframe.
Being more specific in why you're asking - e.g. so we can monitor Wikipedia for edits made by parliamentary staffers - might help.
Link to this