swinog March 2010

swinog@lists.swinog.ch

34 participants
22 discussions

Switzerlandwide Internet problem
by Michele Capobianco 16 Jul '23

16 Jul '23

Hey all A friend just told me that Cybernet told him there is a Switzerlandwide Internet Problem. Does anybody know something? Cheers Michele -------- Online Consulting AG, Michele Capobianco, System Administrator, Weststrasse 38, CH-9500 Wil Phone +41 (0)71 913 31 31, Fax +41 (0)71 913 31 32 http://www.online.ch, michele.capobianco(a)online.ch<mailto:michele.capobianco@online.ch> --------

8 7

Cisco Devices for Sale / 2x Cisco ASA5520 / Cisco WS-C4507R + some modules
by Stephan Wolf 27 Oct '10

27 Oct '10

hello all, hopefully I do not break here a subscription-Law, so simply: We have some Cisco parts / devices on Stock, which where nearly never used: 2x Firewall Cisco ASA5520-AIP20-K9 (ASA 5520 Appl w/ AIP-SSM-20, SW,300 VPN, Prs,4GE+1FE,3DES/AES) 1x Switch Cisco WS-C4507R + some modules (2x 24 port 10/100/1000 GBE / 2x V Console / 2x power supply etc They where bought for a project, which was frozen, and there was no fit in other needs / projects. If you see need, please contact me directly in english or german. mailto:swinog-ch@hightowernet.de Detailed product list & photos available on request. Condition of devices: nearly new ASA's where tested only some hours 4507er was in use for about 2-3 months Bougt end 2006. Used in Summer 2007 Will be sold on highest bid. Test before possible, sold without warranty. Device location: near to Zurich Alternatively: do you know company near Zurich, which makes business with buying/selling used hardware in this class ? We simply want to cleanup our stock ASAP. -- Mit freundlichen Grüßen Stephan Wolf mailto:swinog-ch@hightowernet.de

8 7

Port 25 Blockade @ Swisscom (Bluewin)
by Steven.Glogger＠swisscom.com 14 Apr '10

14 Apr '10

Hi everyone To officially talk about the "mail problems on port 25 with swisscom dsl" I would like to give you some (technical) information. We had several needs to stop spam from our network: - We're receiving about 30'000-100'000 abuse complaints per month (contains multiple reports per case) - Mail filtering on our infrastructure (our mail servers) are only catching 20% of all spam sent from swisscom dsl - 80% is sent directly from the customer lines. (source: http://www.maawg.org/port25) - About 60% to over 90% of all mails sent over residential customer lines are identified as spam. This is more than 10 millions spam emails per day (~375 terabytes per year) The impacts are clear: - Spam generates a quite high amount of cost within Swisscom (money, personal, time, storage, data, etc.) - Our reputation is getting bad - We might get listed on blacklists (-> impact on legimite traffic) - Customers are getting blocked (e.g. in sandbox) and are not happy therefore (most of the customers are not realizing, that they are sending spam, because they are virus-/trojan-infected) So, what we did and what are we doing? We currently ran a pilot. The productive rollout which will affect all customers will start this week and will take around 2 months until all customers are migrated. Only (ex-)bluewin customers with dynamic adsl-lines will be affected. Swisscom has published an official statement on http://www.swisscom.ch/p25 and modifies the error-message sent to the customer which will be more clearer. The pilot showed very clearly that this countermeasure is very effectful in stopping outgoing spam. Going to the technical part: We're running a transparent proxy on port 25 (smtp) which gets communication from any customer to any port 25 (Layer 4 redirect feature). The proxy is analyzing the email and if it detects that spam has been sent he will reject the connection by issuing an error message to the customer (the mailclient will notice: smtp-error). If the mail is a normal and legitimate email -> no problem: mail will be sent. We will even insert a "received-from:" line in the header. If a bot/trojan is trying to send emails, the customer will not notice. There are no mails beeing stored on the filter server. All decisions are made on-the-fly. Customers, which are virus-affected are handled by the standard abuse process which we have in place (inform, quarantine in a sandbox, etc.). The option for layer 4 redirect is activated via radius - so it can be turned off on request and the customer just has to reconnect. For dynamic customers the option will be activated by default. Customers are asked to authenticate their smtp session and use the mail submission port 587 (not filtered). So, will this affect non-smtp traffic on port 25? Unfortunately, yes. This traffic will be lost. If the customer has a need to use port 25 for other purposes than email he can request turning of the redirecting feature. If a customer usses SSL via port 25 does it work? No, it will be dropped. Customers are kindly requested to use port 465 instead. If a customer uses smtp auth via port 25, will this work? He will receive a smtp error like "sorry, smtp auth not possible. use 587" (error 573). Will we start to block completely port 25 in the future? No, absolutely not. So, I hope things are now getting clearer ,-) Greetings -steven Steven Glogger ___________________________________________________________________________ Cisco CCIE#23778 Network Engineer Telefon +41 44 294 58 41 Mobile +41 79 277 92 35 Fax +41 86 079 277 92 35 steven.glogger(a)swisscom.com ___________________________________________________________________________ Swisscom (Schweiz) AG Network & IT Network Engineering & Operations Binzring 17 CH-8045 Zürich www.swisscom.com

11 14

Problem access to du in Dubai ?
by Thomas Nederman 30 Mar '10

30 Mar '10

Hello, Since midnight we are having problems sending traffic to du.ae (our datacenter in Dubai (DIFC)). Does anyone else have problems with communication to Dubai/DIFC/Du.ae ? route: 91.189.12.0/22 origin: AS15802 <http://www.db.ripe.net/whois?searchtext=AS15802&inverse_attributes=orig in&form_type=simple> With Kind Regards Thomas Nederman Systems & Infrastructure Penta Consulting SA Voice +41 22 316 1090 Direct +41 22 316 1028 Fax +41 22 316 1099 infra(a)penta.ch <mailto:infra@penta.ch> www.penta.ch <http://www.penta.ch> ______________________________________________ Your applications everywhere, always TM ______________________________________________

2 1

Open position as Senior Network Engineer
by Michel Renfer 29 Mar '10

29 Mar '10

Hi All! Finecom has an open position as Senior Network Engineer (3rd level, m/w). For more informations please contact me offline... http://www.finecom.ch/jobs cheers, michel

1 0

Could someone from Cablecom contact me off-list
by Raffael Schmid 29 Mar '10

29 Mar '10

Hi Could someone from Cablecom contact me off-list? Its about SMTP/MX. Thanks a lot raf Nine Internet Solutions AG Raffael Schmid Albisriederstrasse 243c 8047 Zuerich 044 637 40 00 raffael.schmid(a)nine.ch

1 0

technician of Xincs
by Silvan Gebhardt 29 Mar '10

29 Mar '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Is there a technician of Xincs.eu online? Please contact me offlist, all your official contact ways are dead/not answered! thanks Silvan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (Darwin) iEYEARECAAYFAkuwd3kACgkQC82WwYR1u2qpcQCeKkHHACOEfHixbCjLaqvWbcQh /NcAnRX6dEzZo5dxVgCiNOUpw2Jmok/I =a1yQ -----END PGP SIGNATURE-----

1 0

Could someone from VTX me contact offline
by Xaver Aerni 28 Mar '10

28 Mar '10

Thanks a lot and Greetings Xaver Xariffusion Informatik & Telecom Xaver Aerni Zürichstrasse 10a 8340 Hinwil Tel. +41 43 843 7878 E-Mail xaerni(a)pop.ch

1 0

EFG FP is hiring (Zurich)
by Josh Geisser 26 Mar '10

26 Mar '10

As our company grows we have green light to massively increase our IT Departments, so we're having quite a few positions to offer right now: Network engineer http://www.efgfp.com/files/1943/Jobad_Networks-Engineer_en.pdf First Level Supporter http://www.efgfp.com/files/1693/Jobad_1st_level_supporter_en.pdf Windows Engineer - Desktop Technology http://www.efgfp.com/files/1985/Jobad_Windows_Engineer_%96_Desktop_Technolo… Windows Engineer - Server Technology http://www.efgfp.com/files/1987/Jobad_Windows_Engineer_%96_Server_Technolog… Oracle DBA http://www.efgfp.com/files/1983/Jobad_Oracle_DBA_en.pdf Senior Software Developer http://www.efgfp.com/files/1727/Jobad_IT_Senior_Software_Developer_en.pdf Deputy head Software Development http://www.efgfp.com/files/1725/Jobad_Deputy_Head_Software_Development_en.p… Head of IT Operations http://www.efgfp.com/files/1945/Jobad_Head_IT_Operations_en.pdf If you are / you know someone who could be interested, contact me off-list, or directly contact our hr(a)efgfp.com and mention me. Cheers Josh

1 0

mx.hispeed.ch RBL issue
by Philip Iezzi 25 Mar '10

25 Mar '10

Hi there Could someone from Hispeed/Cablecom pls. contact me off-list? We are having troubles sending to mx.hispeed.ch Thanks. Regards, Philip

2 2

Contact at web.de?
by Mike Kellenberger 23 Mar '10

23 Mar '10

Does anybody have a contact person at web.de responsible for e-mail? Their anti-spam settings seem to be pretty harsh. When our customers try to send newsletters with more than about 10 web.de recipient addresses, further mails are being blocked for quite some time, causing delays and filling our outbound queue. Is there an easy way to get on a whitelist at web.de? Cheers, Mike -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork

4 4

Re: [swinog] Hotmail problems?
by Tobias Bartholdi 18 Mar '10

18 Mar '10

hi all it seems to be a global problem: http://twitter.com/#hotmail looks like hotmail support is saying hotmail will be down for the next 8 hours. greetz tobias -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Mike Kellenberger Sent: Donnerstag, 18. März 2010 16:00 To: Mark Dickerson; swinog(a)swinog.ch Subject: Re: [swinog] Hotmail problems? Hi Mark I only have problems sending TO hotmail, not receiving FROM hotmail, so this can't be a RBL issue. Cheers, Mike -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork -----Ursprüngliche Nachricht----- Von: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Mark Dickerson Gesendet: Donnerstag, 18. März 2010 15:51 An: Andreas Weiler - Kabelfernsehen Boedeli AG; swinog(a)swinog.ch Cc: Alan Gonzalez; Jason Thomas Betreff: Re: [swinog] Hotmail problems? We have been having this issue for the past week. We have found that they were listed along with all Road Runner SMTP servers. We removed them from our block lists and they come right back 24 hours later. Thank you, Mark Dickerson ITIQ Solutions www.itiqsolutions.com (877) 448-4777 Option #2 NOC (877) 448-4777 x112 Direct Line -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Andreas Weiler - Kabelfernsehen Boedeli AG Sent: Thursday, March 18, 2010 7:44 AM To: swinog(a)swinog.ch Subject: Re: [swinog] Hotmail problems? hi all. Confirmed. Same here, with mx1, mx2 and mx4.hotmail.com (delivery temporarily suspended: connect to mx1.hotmail.com[65.54.188.72]: server dropped connection without sending the initial SMTP greeting) (delivery temporarily suspended: connect to mx2.hotmail.com[65.54.188.110]: server dropped connection without sending the initial SMTP greeting) (delivery temporarily suspended: connect to mx4.hotmail.com[65.55.92.168]: Connection refused) greetz, Andreas Weiler Am Donnerstag, 18. März 2010 um 15:10 schrieben Sie: MK> Hi all MK> Is it just me or is hotmail having smtp problems? Can't seem to get MK> any mail through to them since noon... MK> SYSTEM [0520] 15:05:37 Client session Connecting to MK> 'mx1.hotmail.com' MK> SYSTEM [0520] 15:05:38 Client session Could not connect to MK> 'mx1.hotmail.com(65.55.92.184)' MK> SYSTEM [0520] 15:05:38 Client session Connecting to MK> 'mx2.hotmail.com' MK> SYSTEM [0520] 15:05:40 Client session Could not connect to MK> 'mx2.hotmail.com(65.55.92.184)' MK> SYSTEM [0520] 15:05:40 Client session Connecting to MK> 'mx3.hotmail.com' MK> SYSTEM [0520] 15:05:42 Client session Could not connect to MK> 'mx3.hotmail.com(65.55.92.136)' MK> Cheers, MK> Mike _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

1 0

Hotmail problems?
by Mike Kellenberger 18 Mar '10

18 Mar '10

Hi all Is it just me or is hotmail having smtp problems? Can't seem to get any mail through to them since noon... SYSTEM [0520] 15:05:37 Client session Connecting to 'mx1.hotmail.com' SYSTEM [0520] 15:05:38 Client session Could not connect to 'mx1.hotmail.com(65.55.92.184)' SYSTEM [0520] 15:05:38 Client session Connecting to 'mx2.hotmail.com' SYSTEM [0520] 15:05:40 Client session Could not connect to 'mx2.hotmail.com(65.55.92.184)' SYSTEM [0520] 15:05:40 Client session Connecting to 'mx3.hotmail.com' SYSTEM [0520] 15:05:42 Client session Could not connect to 'mx3.hotmail.com(65.55.92.136)' Cheers, Mike -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork

4 5

Re: [swinog] Signing of the ARPA zone
by Joe Abley 17 Mar '10

17 Mar '10

Colleagues, This is a follow-up to the operational announcement regarding changes to the ARPA top-level domain that was sent on 2010-03-10. Apologies in advance for duplicates received through different mailing lists. As of 2010-03-17 1630 UTC all the authoritative servers for ARPA are serving a signed ARPA zone. We would like to solicit feedback from the technical community to allow us to identify any operational ill-effects that this change has caused. We will monitor this mailing list for feedback, and I will also distribute any feedback sent to me personally so that it can be considered. If no harmful effects have been identified by 2010-03-21 the trust anchor for the ARPA zone will be published through the IANA ITAR at <https://itar.iana.org/>. Regards, Joe Begin forwarded message: > From: Joe Abley <joe.abley(a)icann.org> > Date: 10 March 2010 16:13:46 EST > To: Joe Abley <joe.abley(a)icann.org> > Subject: Signing of the ARPA zone > > Colleagues, > > This is a technical, operational announcement regarding changes to the ARPA top-level domain. Apologies in advance for duplicates received through different mailing lists. > > No specific action is requested of operators. This message is for your information only. > > The ARPA zone is about to be signed using DNSSEC. The technical parameters by which ARPA will be signed are as follows: > > KSK Algorithm and Size: 2048 bit RSA > KSK Rollover: every 2-5 years, scheduled rollover to follow RFC 5011 > KSK Signature Algorithm: SHA-256 > Validity period for signatures made with KSK: 15 days; new signatures published every 10 days > ZSK Algorithm and Size: 1024 bit RSA > ZSK Rollover: every 3 months > ZSK Signature Algorithm: SHA-256 > Authenticated proof of non-existence: NSEC > Validity period for signatures made with ZSK: 7 days; zone generated and re-signed twice per day > > The twelve root server operators [1] will begin to serve a signed ARPA zone instead of the (current) unsigned ARPA zone during a maintenance window which will open at 2010-03-15 0001 UTC and close at 2010-03-17 2359 UTC. Individual root server operators will carry out their maintenance at times within that window according to their own operational preference. > > The trust anchor for the ARPA zone will be published in the ITAR [2], and in the root zone in the form of a DS record once the root zone is signed. > > If you have any concerns or require further information, please let me know. > > Regards, > > > Joe Abley > Director DNS Operations, ICANN > > [1] <http://www.root-servers.org/> > [2] <https://itar.iana.org/>

1 0

ICT economy in Switzerland
by Gregory Agerba 12 Mar '10

12 Mar '10

Hello List, Following a debate I had with some people, I am just throwing a global question about Switzerland and ICT services since I am thrilled by that question and looking for various points of view. What are according to you the real advantages of having your datacenter located in Switzerland rather than Germany, Austria, Luxembourg, Netherlands or France? I am asking the question widely, not only if the datacenter have a more serious approach, but also in general: stability in politics, government, laws, people, hardware, quality of services, safety of data, data protection, prices and anything else would be interesting to be developed... BR, Gregory

2 1

Cablecom / UPC mail anomalies?
by Mike Kellenberger 12 Mar '10

12 Mar '10

I'm seeing two mails which are being sent over and over again, sometimes two to four times almost simultanously. The session somehow does not complete (times out on our side). The mails are being sent from various viefep<xx>-int.chello.at mail servers with @hispeed.ch sender addresses and are both over 2MB. Anybody else seeing this sort of behaviour? Regards, Mike -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork

2 1

Engineer in Geneva
by Aarno Aukia 11 Mar '10

11 Mar '10

Hello List, I'm looking for somebody who can install a cisco 1841 and apply a configuration for me in geneva (place fustiere) tomorrow (friday) or an monday during business hours. Do you know somebody CCNA-leveled and reasonably english speaking there ? Please get in touch with me at aukia(a)atrila.net Thanks, Aarno -- Aarno Aukia Atrila GmbH Switzerland

1 0

mx.hispeed.ch issue
by Stefan Rothenbuehler 10 Mar '10

10 Mar '10

Hi List Could someone from UPC contact me offlist? We're having troubles sending to mx.hispeed.ch . Regards, Stefan

1 0

ISC DHCP Option 82
by Schlageter Benjamin 08 Mar '10

08 Mar '10

Can someone with option 82 experiences contact me off-list? Thanks /Benj

1 0

Cyberlink Admins might want to check their webhosts..... something funny going on there
by Jeroen Massar 05 Mar '10

05 Mar '10

Could the dear Cyberlink people check their webhosts. Kick me off-list for the details so you can narrow down your search a lot. Summary: you are serving very nasty content at random that you don't want to serve and that someone put there... Greets, Jeroen

1 0

Rackspace @ Equinix 1, Zurich
by Gregory Agerba 05 Mar '10

05 Mar '10

Hello, I am currently looking for a rack with 2 power sources at Equinix 1. If you can offer a complete rack with a contract directly binding with Equinix, please send me your offer off-list and I will be happy to consider it. Other options and contracts not binding with Equinix are unfortunately not an option. Thank you! BR, Gregory

1 0

mail "problems - port 25 on swisscom dsl
by Thomas Mueller 03 Mar '10

03 Mar '10

hi customers phoned me that they could not send emails anymore. needed to switch to port 587. now heard from others that swisscom is blocking port 25 ??? what the heck is going on ? - Thomas

5 10

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog March 2010