IP address range

J. P. W. Pitt made this Official Information request to Parliamentary Service

The request was partially successful.

From: J. P. W. Pitt

Dear Parliamentary Service,

I request the public IP address range(s) used by the parliamentary service's IT infrastructure.

I acknowledge you are not subject to the OIA, but this information relates to requests generated by parliamentary staff via public computer networks. Information being disseminated online by parliament should have it's origin traceable.

Yours faithfully,

Joel Pitt

Link to this

From: Parliamentary Information Service
Parliamentary Service

Thank you for your enquiry. It has been received by the Parliamentary Information Service. This Service responds to information requests from the public which relate to all aspects of the New Zealand Parliament. We will reply to your request within the next 3 days.

-----Original Message-----
From: J. P. W. Pitt [mailto:[OIA #1830 email]]
Sent: Tuesday, 22 July 2014 3:28 p.m.
To: Parliamentary Information Service
Subject: Official Information Act request - IP address range

Dear Parliamentary Service,

I request the public IP address range(s) used by the parliamentary service's IT infrastructure.

I acknowledge you are not subject to the OIA, but this information relates to requests generated by parliamentary staff via public computer networks. Information being disseminated online by parliament should have it's origin traceable.

Yours faithfully,

Joel Pitt

-------------------------------------------------------------------

This is an OIA request done via the FYI website.

Please do not send progress updates as PDF files.

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers

If you find this service useful as an OIA officer, please ask your web manager to link to us from your organisation's OIA page.

-------------------------------------------------------------------

________________________________

hide quoted sections

Link to this

From: J. P. W. Pitt

Dear Parliamentary Information Service,

I would appreciate a response to my information request.

During the period leading up to the coming election, it is important to have transparency on what edits are being made to public internet resources from the government's IT infrastructure.

Yours sincerely,

J. P. W. Pitt

Link to this

Alex Harris left an annotation ()

As you acknowledge in your request, the Parliamentary Service is not subject to the OIA. They sometimes respond out of courtesy, but they're under no obligation to, and they are not bound by any statutory timeframe.

Being more specific in why you're asking - e.g. so we can monitor Wikipedia for edits made by parliamentary staffers - might help.

Link to this

J. P. W. Pitt left an annotation ()

Thanks Alex - I'll make any followup more specific. Currently my main interest is to allow traceability of wikipedia edits.

Link to this

From: Parliamentary Information Service
Parliamentary Service

Good afternoon

Thank you for your request for the rane of external IP addresses used by the Parliamentary Service.

The following list is the range of external IP addresses either currently used by the Parliamentary Service, or presently being transitioned to :

202.22.16.0
202.22.18.0
202.22.30.0
202.49.210.0
202.49.211.0
202.49.212.0
202.49.213.0
202.49.214.0
202.49.215.0
202.68.89.0
203.97.232.0

I trust this answers your query.

The Parliamentary Information Service responds to information requests from the public which relate to the work, publications, proceedings, people and history of the New Zealand Parliament.
If you have an inquiry of this nature please contact us again with further details.

Yours

Parliamentary Information Service
Parliamentary Service, Parliament Buildings, Wellington 6160, New Zealand

T: [04] 817 9647
E: [Parliamentary Service request email] W: www.parliament.nz
____________________________________________________________

-----Original Message-----
From: J. P. W. Pitt [mailto:[OIA #1830 email]]
Sent: Thursday, 21 August 2014 10:06 a.m.
To: Parliamentary Information Service
Subject: RE: Official Information Act request - IP address range

Dear Parliamentary Information Service,

I would appreciate a response to my information request.

During the period leading up to the coming election, it is important to have transparency on what edits are being made to public internet resources from the government's IT infrastructure.

Yours sincerely,

J. P. W. Pitt

-----Original Message-----

Thank you for your enquiry. It has been received by the Parliamentary Information Service. This Service responds to information requests from the public which relate to all aspects of the New Zealand Parliament. We will reply to your request within the next 3 days.

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[OIA #1830 email]

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers

If you find this service useful as an OIA officer, please ask your web manager to link to us from your organisation's OIA page.

-------------------------------------------------------------------

________________________________

hide quoted sections

Link to this

Nigel Jones left an annotation ()

May pay to clarify some of the IP ranges (ask for the appropriate CIDR) as they aren't owned by Parliamentary Service, and in some cases I suspect if used for certain purposes include non-Parliamentary Service computers (particularly those in the 'Cable Customers' allocation).

> 202.22.16.0
> 202.22.18.0
> 202.22.30.0
All come from "inetnum: 202.22.16.0 - 202.22.30.255" owned by Vodafone NZ, so it's possible that they have been assigned /24's from those ranges, but it's possible that they are only assigned certain IPs.
> 202.49.210.0
> 202.49.211.0
> 202.49.212.0
> 202.49.213.0
> 202.49.214.0
> 202.49.215.0
From allocation to Parliamentary Services:
inetnum: 202.49.208.0 - 202.49.215.255
netname: PS-NZ
descr: Parliamentary Service NZ (PS)

(CIDR = 202.49.208.0/21) But their response implies they don't use 202.49.208.0/24 or 202.49.209.0/24 (sub-assigned to another purpose that Parliamentary Services admin?)

> 202.68.89.0

Part of allocation matching "inetnum: 202.68.80.0 - 202.68.95.255" (Netname: DTS - a Business ISP, so similar concerns to below if they are only using a couple of IPs from that particular /24).

> 203.97.232.0

Part of allocation matching "inetnum: 203.97.220.0 - 203.97.236.255" (Description per WHOIS: "TelstraClear Cable Customers") concern here is if used to identify traffic from P.S. it could include false positives from other TelstraClear customers.

Link to this

From: J. P. W. Pitt

Dear Parliamentary Information Service,

Thank you very much for your reply!

The previous reply indicates /24 netmask for all networks but on investigation this seems is unlikely (see below). Could you please clarify some of these, preferably using a more specific CIDR?

Some of the ranges in your response are not owned by Parliamentary Services, e.g. some are indicated as in use for 'Cable Customers'. but for accountability it is necessary to have more specific ranges to avoid conflating traffic from individual/business internet users from that of parliament.

> 202.49.210.0
> 202.49.211.0
> 202.49.212.0
> 202.49.213.0
> 202.49.214.0
> 202.49.215.0
From allocation to Parliamentary Services:
inetnum: 202.49.208.0 - 202.49.215.255
netname: PS-NZ
descr: Parliamentary Service NZ (PS)

(CIDR = 202.49.208.0/21) Your response implies parliamentary services does not use 202.49.208.0/24 or 202.49.209.0/24. Is this correct?

> 202.22.16.0
> 202.22.18.0
> 202.22.30.0
All come from "inetnum: 202.22.16.0 - 202.22.30.255" owned by Vodafone NZ.

> 202.68.89.0

Part of allocation matching "inetnum: 202.68.80.0 - 202.68.95.255" (Netname: DTS - a Business ISP).

> 203.97.232.0

Part of allocation matching "inetnum: 203.97.220.0 - 203.97.236.255" (Description per WHOIS: "TelstraClear Cable Customers").

For the above three network owners, has Parliamentary Services been allocated /24's from the ranges? Or only certain IPs?

Also, your response suggests that Parliamentary Services does not use any external IPv6 addresses. Can you confirm that all outbound Parliamentary Services traffic is limited IPv4 only?

Yours sincerely,

J. P. W. Pitt

Link to this

J. P. W. Pitt left an annotation ()

Thanks Nigel for the investigative work. I've sent a follow up asking them for more information based on your findings.

Link to this

Things to do with this request

Anyone:
Parliamentary Service only: