swinog July 2020

swinog@lists.swinog.ch

9 participants
5 discussions

Re: [swinog] our zimbra webmail server is on the swisscom dns blacklist ...

by Tobias Oetiker

Hi Peter thanks ... I have submitted the surbl form yesterday already yes ... they seem to take their time too ... and above all it would be really helpful to get to know for what reason we ended up on that list ... cheers tobi ----- On Jul 24, 2020, at 9:55 AM, abuse quiet <abuse_quiet(a)bluewin.ch> wrote: > Good day > Thank you very much for your message. > We apologize for your trouble. > The domain is on the blacklist of our supplier. To solve the problem > immediately, we have added it to our whitelist and applied for its delisting. > Additionally you have to apply for a delisting via [ > http://www.surbl.org/surbl-analysis | http://www.surbl.org/surbl-analysis ] > SURBL is a reputation database for domains and is integrated as a source by many > services. Internet Guard is one such service. > Additional information about Internet Guard is available at [ > https://www.swisscom.ch/en/residential/help/internet/internetguard.html | > https://www.swisscom.ch/en/residential/help/internet/internetguard.html ] > Kind regards > Peter Fankhauser > ____________________________________________________________________________ > Lead Abuse Management > Security Operation Center > ____________________________________________________________________________ > Swisscom (Schweiz) AG > Group Security > Security Operation Center > 8005 Zürich > [ https://zimbra.oetiker.ch/zimbra/www.swisscom.com | www.swisscom.com ] > Von: [ mailto:swinog-bounces@lists.swinog.ch | swinog-bounces(a)lists.swinog.ch ] > < [ mailto:swinog-bounces@lists.swinog.ch | swinog-bounces(a)lists.swinog.ch ] > > Im Auftrag von Tobias Oetiker > Gesendet: Freitag, 24. Juli 2020 08:40 > An: [ mailto:swinog@swinog.ch | swinog(a)swinog.ch ] > Betreff: [swinog] our zimbra webmail server is on the swisscom dns blacklist ... > Hi All > We are running a zimbra web mail server [ > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fzimbox.ch… > | https://zimbox.ch ] for our customers. Yesterday afternoon swisscom has put > its IP (46.140.183.201) on their DNS blacklist ( [ > https://www.swisscom.ch/de/res/hilfe/internet/internetguard/url-checker.html | > https://www.swisscom.ch/de/res/hilfe/internet/internetguard/url-checker.html ] > ). Since the thing is running https, this leads to people with swisscom > internet access to get some cryptic error message about SSL problems from their > browser when they want to read their mail. > No, the server is not hacked, and we are running the latest version of zimbra > web mail on it. > We have filled in the swisscoms 'de-blacklisting' web form but nothing has > happened yet. We also called the swisscom kmu-hotline, but no, sorry we can not > do anything. > Any advice ? For now we are advising our customers to set their dns server in > their computers to 8.8.8.8 ... > By the light of day, swisscom is directly damaging our business with this ... > cheers > tobi (angry) > -- > Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland > [ > https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.oetike… > | www.oetiker.ch ] [ mailto:tobi@oetiker.ch | tobi(a)oetiker.ch ] +41 62 775 9902 -- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch tobi(a)oetiker.ch +41 62 775 9902

2 years, 8 months

our zimbra webmail server is on the swisscom dns blacklist ...

by Tobias Oetiker

Hi All We are running a zimbra web mail server https://zimbox.ch for our customers. Yesterday afternoon swisscom has put its IP (46.140.183.201) on their DNS blacklist ( [ https://www.swisscom.ch/de/res/hilfe/internet/internetguard/url-checker.html | https://www.swisscom.ch/de/res/hilfe/internet/internetguard/url-checker.html ] ). Since the thing is running https, this leads to people with swisscom internet access to get some cryptic error message about SSL problems from their browser when they want to read their mail. No, the server is not hacked, and we are running the latest version of zimbra web mail on it. We have filled in the swisscoms 'de-blacklisting' web form but nothing has happened yet. We also called the swisscom kmu-hotline, but no, sorry we can not do anything. Any advice ? For now we are advising our customers to set their dns server in their computers to 8.8.8.8 ... By the light of day, swisscom is directly damaging our business with this ... cheers tobi (angry) -- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch tobi(a)oetiker.ch +41 62 775 9902

2 years, 8 months

Swisscom RES to Cloudflare DNS - 20% packet drop

by Mateusz Kowalski

Hi everyone, Can someone confirm a similar issue with Cloudflare DNS from Swisscom residential network? What's interesting, from Swisscom SME I don't see that issue (both connections are in Zurich)... It started on 18th of July around 00h30 (CEST). >>> Cloudflare DNS from Swisscom RES Host Loss% Snt Last Avg Best Wrst StDev 1. _gateway 0.0% 31 1.1 5.7 0.4 158.3 28.3 2. 172.16.1.1 0.0% 31 1.2 12.9 0.7 255.0 49.4 3. 1.120.61.188.dynamic.wline.res.cust.swisscom.ch 0.0% 31 2.6 2.8 2.1 4.8 0.5 4. 10.140.42.24 0.0% 30 5.2 8.0 3.6 97.1 17.0 5. i79zhh-010-ae28.bb.ip-plus.net 0.0% 30 8.5 9.8 3.0 59.3 11.5 6. mira.ip-plus.net 0.0% 30 2.3 3.4 2.2 21.0 3.4 7. i68gem-005-ae2.bb.ip-plus.net 0.0% 30 6.3 12.3 5.7 65.7 12.6 8. i68cix-015-bun3.bb.ip-plus.net 0.0% 30 6.5 6.9 5.9 19.0 2.3 9. cixp-cloudflare.cern.ch 20.7% 30 17.5 20.8 17.5 41.5 6.8 10. one.one.one.one 3.3% 30 19.2 25.4 18.4 93.5 19.4 >>> Cloudflare DNS from Swisscom SME Host Loss% Snt Last Avg Best Wrst StDev 1. _gateway 0.0% 21 0.3 0.3 0.2 0.4 0.0 2. 73.61.253.84.static.wline.lns.sme.cust.swisscom.ch 0.0% 20 0.6 0.6 0.4 1.2 0.2 3. 213.3.210.195 0.0% 20 3.8 3.7 3.5 3.9 0.1 4. ??? 5. i62bsw-005-bun14.bb.ip-plus.net 0.0% 20 3.8 7.0 3.7 37.5 8.2 6. i68gem-005-ae1.bb.ip-plus.net 0.0% 20 5.3 6.9 4.6 42.0 8.3 7. i68cix-015-bun3.bb.ip-plus.net 0.0% 20 4.8 5.0 4.7 5.5 0.2 8. cixp-cloudflare.cern.ch 0.0% 20 5.6 10.0 5.4 42.3 9.3 9. one.one.one.one 0.0% 20 4.8 4.8 4.7 5.5 0.2 >>> Google DNS from Swisscom RES Host Loss% Snt Last Avg Best Wrst StDev 1. _gateway 0.0% 21 0.5 0.7 0.5 3.2 0.6 2. 172.16.1.1 0.0% 21 1.2 1.4 0.5 6.2 1.1 3. 1.120.61.188.dynamic.wline.res.cust.swisscom.ch 0.0% 21 2.5 3.0 2.2 7.7 1.2 4. 10.140.42.28 0.0% 20 4.5 4.6 3.7 8.2 0.9 5. i79zhh-010-ae28.bb.ip-plus.net 0.0% 20 5.6 8.1 2.6 23.0 5.2 6. mira.ip-plus.net 0.0% 20 2.9 3.3 2.1 11.4 2.1 7. i79zhh-025-ae0.bb.ip-plus.net 0.0% 20 2.4 4.0 2.0 24.3 5.2 8. 72.14.223.0 0.0% 20 2.9 3.5 2.6 8.6 1.6 9. 172.253.50.235 0.0% 20 2.9 2.8 2.4 3.1 0.2 10. 172.253.50.21 0.0% 20 3.2 3.8 3.2 4.3 0.3 11. dns.google 0.0% 20 2.8 2.8 2.4 3.4 0.3 Cheers, Mateusz

2 years, 8 months

looking for contact SRG/SRF, IP geolocation database

by Hegglin Benno

Please can someone from SRG / SRF responsible for the IP geolocation database used by SRF Live (video streams) contact me. Or if someone in the community has a contact, this would be much appreciated. Regards, Benno Hegglin WWZ Telekom AG Benno Hegglin, Leiter Systems & Operations Chollerstrasse 24 CH-6301 Zug Telefon +41 41 748 45 45 benno.hegglin(a)wwz.ch<mailto:benno.hegglin@wwz.ch>, wwz.ch<http://www.wwz.ch> Die WWZ-Gruppe: WWZ AG, WWZ Energie AG, WWZ Netze AG, WWZ Telekom AG _______________________________________________________________________ Alle Angaben in diesem E-Mail erfolgen ohne Gewähr. Alle Rechte sind vorbehalten.

2 years, 8 months

SwiNOG #27 & COVID-19 | Please fill in survey

by Steven Glogger

Hi community We’re currently in discussion if we will proceed with our SwiNOG #27 plans or if not… We would like to get your opinion. Please help us and provide an honest answer to our really short questinaire (will take 30sec to fill in): http://swinog.ch/covid/ <http://swinog.ch/covid/> greeings -steven SwiNOG Core Member

2 years, 8 months

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog July 2020