swinog January 2020

swinog@lists.swinog.ch

10 participants
12 discussions

by Michele Capobianco

Hey all A friend just told me that Cybernet told him there is a Switzerlandwide Internet Problem. Does anybody know something? Cheers Michele -------- Online Consulting AG, Michele Capobianco, System Administrator, Weststrasse 38, CH-9500 Wil Phone +41 (0)71 913 31 31, Fax +41 (0)71 913 31 32 http://www.online.ch, michele.capobianco(a)online.ch<mailto:michele.capobianco@online.ch> --------

2 months, 2 weeks

Advertizement from OFCOM (dot.swiss) to .swiss domain owners?

by Benoit Panizzon

Dear List I am frowning upon an advertisement email I just got from OFCOM to the owner contact email address of a .swiss domain. Not only am I inclined to consider such emails as 'unlauter' but I am also very concerned that such emails are sent from an ESP in the US who has confirmed on several occasions that they don't care about Swiss privacy laws and will not hand out the identity of their spamming customers, even if they are based in Switzerland and send spam to Switzerland based 'targets' as intended by Art. 8 DSG. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

3 years, 8 months

Quickline contact

by Marco Kälin

Hi list, Someone from Quickline mx ord dns team here? You send VPBX Fax2Mail Messages from faxserver(a)business.quickline.ch. Can you please check your spf record on business.quickline.ch? root@localhost:~# dig @8.8.8.8 business.quickline.ch txt +short "v=spf1 -all" thank you regards Marco

3 years, 8 months

Beers/Food at Paddy Reilly on 28/1/2020

by Massimiliano Stucchi

Hi everyone, as the subject suggests, I'm organising beers and food for whoever would like to join next Tuesday, January 28th. It will be at: Paddy Reilly's Talstrasse 82 8001 Zürich Starting at 18:30. If you are coming, please let me know by sending me an email so I can try to take a table with enough space for everyone. If you instead think about deciding last minute, I'm sure we'll have enough space. Ciao! -- Massimiliano Stucchi MS16801-RIPE Twitter/Telegram: @stucchimax

3 years, 8 months

A survey on performance diagnosis for Network functions/middleboxes

by Junzhi Gong

Dear SwiNOG community, Today's networks (data centers, ISPs, and enterprises) all run many hardware middleboxes and software network functions. The performance of these components is critical for network management and user experiences. However, when performance problems happen, it often takes a lot of human efforts to instrument and debug these systems especially when many network functions interact with each other and with traffic dynamics. We are a group of researchers from Harvard and AT&T who are building new diagnosis tools that can automatically find potential root causes for performance problems in network functions (especially those tail latency problems that are hard to diagnose). This project is led by my advisor Minlan Yu (Homepage: http://minlanyu.seas.harvard.edu/ <http://minlanyu.seas.harvard.edu/>), an Associate Professor in Harvard University. We're reaching out to the SwiNOG community to understand the performance problems you have seen and your needs on diagnosis tools. This will greatly help us to incorporate your needs in our tool. We plan to release our debugging tool for the community to use. We greatly appreciate your help in filling out the survey below. It should take less than 10 minutes to complete. The survey and the collected data are anonymous (so please do *not* include information that may identify you or your organization). All questions are optional, so if you don't like a question or don't know the answer, please skip it. In the survey, we use network functions as a general term to represent both hardware and software middleboxes. A summary of the aggregate results will be published as a part of a scientific article later this year. Survey URL: https://docs.google.com/forms/d/e/1FAIpQLSdx1j2BZzk_iEuIqHLDF20Rv_LuxLcrGze… <https://docs.google.com/forms/d/e/1FAIpQLSdx1j2BZzk_iEuIqHLDF20Rv_LuxLcrGze…> We would also be extremely grateful if you could forward this email to any operator you know beyond this SwiNOG mailing list. Junzhi Gong Harvard University

3 years, 8 months

postmaster bluewin please contact

by Tobias Oetiker

Hi we got several reports from customers with bluewin addresses who do not get automated mails from "vermietung(a)floerli-olten.ch" in their mailboxes. according to our mailserver log mails get delivered to bluewin correctly, but they never arrive in the users mailboxes. does bluewin take it upon itself to destroy mail messages without notice ? Tobi Oetiker tobi.oetiker.ch

3 years, 8 months

swisscom dtag cogent overbooking

by solutions＠datawire.ch

Hi I`m looking for someone from swisscom to make it`s customers happy :) Looks like we get a lot of swisscom traffic over cogent via dtag, and since the customers of our customers use swisscom, they have to deal with packet loss and slow connections every day after 3 pm until 6 pm. Cogent just told us to blame dtag for not peering, and swisscom for using dtag as an upstream. It looks like that «smart ict» customers have even more problems, even with outgoing connections, some of them started to work from home for faster connections (=different isp). Maybe somebody from the swisscom team can contact us noc(a)datawire.ch <mailto:noc@datawire.ch> Thank you very much 😉 Cheers Sebastian ___________________________ DATAWIRE AG Bösch 80A, 6331 Hünenberg Tel. +41 41 728 09 99 E-Mail: <mailto:solutions@datawire.ch> solutions(a)datawire.ch Website: <https://datawire.ch/> https://datawire.ch

3 years, 8 months

DNS issue @ metanet?

by Benoit Panizzon

Hi Community Since yesterday we see more and more message of the kind: (host mail.zabli.ch[80.74.146.90] said: 450 4.7.1 Client host rejected: cannot find your hostname, [157.161.13.198] (host mx03.sui-inter.net[80.74.146.163] said: 554 IP name lookup failed. No PTR record found (host mx03.sui-inter.net[2a00:1128:0:146::163] said: 554 IP name lookup failed. No PTR record found (host mx01.sui-inter.net[2a00:1128:0:143::111] said: 554 IP name lookup failed. No PTR record found (host mail.musikstunden.ch[80.74.153.11] said: 450 4.7.1 Client host rejected: cannot find your hostname (host mail.schreinerei-furler.ch[80.74.145.2] said: 450 4.7.1 Client host rejected: cannot find your hostname (host mail.von-rickenbach.com[80.74.155.60] said: 450 4.7.1 Client host rejected: cannot find your hostname It looks like all those cases are hosted @ metanet. But there are some mailserver @ metanet which do accept emails. Is there any known DNS issue with metanet? According to their status page there are no issues. Or is something wrong with the readability of our DNS from outside AS6772? (ns1.imp.ch, ns2.imp.ch) Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

3 years, 8 months

FYI: admin.ch broken DNSSEC thus DNS down!

by Jeroen Massar

As mentioned on Swinog IRC (yes we are alive there, join us! :): admin.ch is unreachable due to broken DNSSEC. See: https://dnsviz.net/d/admin.ch/dnssec/ 8<---- ch to admin.ch: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (162.23.37.16, 162.23.37.160, 212.103.72.85, 2a00:c38:2:28:0:ffff:d467:4855, UDP_-_EDNS0_4096_D_K) ch to admin.ch: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. (162.23.37.16, 162.23.37.160, 212.103.72.85, 2a00:c38:2:28:0:ffff:d467:4855, UDP_-_EDNS0_4096_D_K) ------>8 (I got a screencap of the page for later, just in case it get fixed/changed in the meantime; swinog only allows 40KiB attachments which would ruin the res too much for it to be useful :) Thus for all ISPs on this list: tell your customers that it is an admin.ch issue, not something you can solve (unless you disable dnssec validation for admin.ch, which is an option, but kinda against dnssec). (Fortunately it is not tax time or something like that) For folks working at admin.ch: I offer myself pro bono to help out resolving the issue, don't hesitate to reach out (email or contact details on my homepage). We can then replicate a stable environment as described in: https://jeroen.massar.ch/presentations/vid/SwiNOG35-Managing_sleep_with_a_r… or otherwise likely improve the situation to avoid such outages. Good luck folks at admin.ch in resolving this.. Greets, Jeroen

3 years, 8 months

DNSSEC admin.ch

by Samuel Aymon

Hello everyone, If someone at admin.ch read this before it is too late, please check your DNSSEC config. All admin.ch domains and subdomains are unresolvable due to an errors in your DNSSEC. More infos here: https://www.admin.ch/ or here: https://dnssec-debugger.verisignlabs.com/admin.ch or here: https://dnsviz.net/d/admin.ch/dnssec/ Best regards Samuel

3 years, 8 months

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog January 2020