swinog

swinog@lists.swinog.ch

5 participants
2978 discussions

URI used by sbb.ch servicenew on SWIOG blacklist. Need help finding the URI
by Benoit Panizzon 02 Apr '26

02 Apr '26

Hi Team I got notified that email from service(a)sbb.ch sent from the US ServiceNow IP Address: 37.98.234.2 contain an URI blacklisted as 'spamtrap hit' in uribl.swinog.ch which causes most emails to get handled as spam (in our case rejected) Unfortunately I have not yet managed to get my hands on an email which contains this URI which is blacklisted. I opened a case with the SBB Customer service and they sent me such an email in an attempt to reproduce the issue: Received: from outbound09.service-now.com (outbound09.service-now.com [37.98.234.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 296EEC07A5 for <abuse(a)imp.ch>; Tue, 31 Mar 2026 17:14:35 +0200 (CEST) Unfortunately that email they sent me, contains no URI listed @uribl.swinog.ch sbb.ch and swisspass.ch are whitelisted, same for servicenow.com. What other URI could be contained in 'most' of the replies sent from service(a)sbb.ch? Any help appreciated! Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

1 1

Peak incident Response 5-6. May in Geneva
by Serge Droz 02 Apr '26

02 Apr '26

Dear Swinogers In May, Geneva Cyber Week takes place — in Geneva, of course! The Swiss CSIRTs are organizing a two-day Technical Colloquium, "Peak Incident Response," on 5–6 May: https://www.first.org/events/colloquia/geneva2026/ <https://www.first.org/events/colloquia/geneva2026/>. Attendance is free and a great program is lined up. This is a technical conference focused on large-scale infrastructure. What makes the event special is that we won't only have technical folks, but also many people from the policy space — those working for UN agencies, nonprofits, and similar organizations. Today, running and securing the internet is more than technical work. It's important that the non-technical world understands our concerns and challenges. At the same time, this is an event that brings together the technologists — the people who actually do the hard, unglamorous work. This event is organized by volunteers; we've worked to make it free, and what we need now are participants who make it worthwhile. Talks are cheap: good questions in the Q&A and good conversations during the breaks are what make this event worth attending. I hope to see many of you there. Feel free to reach back if you have questions or comments Best Serge

1 0

### SwiNOG #41 - Waiting List ###
by Simon Ryf 01 Apr '26

01 Apr '26

Sorry I wrote the wrong email: If you want to come, have no ticket and did not yet write to the Waiting List - please do so: “Waiting List” core(a)swinog.org (.org not .ch)

3 2

### SwiNOG #41 (28.04.2026) - Agenda ###
by Simon Ryf 01 Apr '26

01 Apr '26

Dear SwiNOG community The Agenda for SwiNOG #41 - Tuesday 28th of April 2026 is published. - https://www.swinog.ch/meetings/swinog41/ (Very tiny slimy monsters delayed that a bit unexpectedly) Registration We’re fully booked but working hard to make it possible that we can raise the available seats. If you want to come, have no ticket and did not yet write to the Waiting List - please do so: “Waiting List” core(a)swinog.ch Location See details under Location at https://swinog.ch/mettings/swinog41/ Gurtenbahn / Cablecar to Gurten Please note, there is a new way how Gurtenbahn (the Cablecar to the event location) is handling tickets. -> Do not buy a Gurten Ticket yet, we will send you a voucher code (Gurten Ticket is included in the SwiNOG Ticket). Agenda 08:15 Registration, Coffee & Gipfeli (60 min) 09:15 Welcome & Agenda (5 min) Morning Session 1 — Network Strategy & Optical Infrastructure 09:20 Wouter Van Renterghem | RETN GmbH — 25 min The Road to Tier-"Something". Rethinking Network Strategy & Building Resilience Through PNIs, Peering and Smart Geographical Expansion. 09:45 Thomas Holterbach | University of Strasbourg — 20 min bgproutes.io: A next-gen BGP data collection platform 10:05 Gerhard Stein | Flexoptix GmbH — 25 min Understanding and optimising transceiver power consumption using internal metrics 10:30 Liam Taylor | EXA Infrastructure — 15 min Shared Spectrum & MOFN 10:45 Morning Break (45 min) Morning Session 2 — Swiss Internet Heritage 11:30 Arist Volger | SwissIX — 20 min 25 Years of SwissIX – A Quarter Century of Peering in Switzerland 11:50 Arist Volger | SwissIX — 5 min SwissIX Update 11:55 Lunch Break (90 min) Afternoon Session 1 — AI & Network Architecture 13:25 Tobias Bühler | netfabric.ai — 25 min Toward Agentic Network Operations: What AI Can (and Can't) Do 13:50 Jolly Trivedi | University of Turku — 25 min Ethics and Oversight in AI-Driven Cybersecurity 14:15 Remi Locherer | modus one ag with Arista Networks — 25 min EVPN Unleashed: Scaling Multi-Domain Fabrics with EVPN Gateways 14:40 Tilmann Zäschke | ETH Zürich — 20 min SCION Inter-Domain Routing 15:00 Afternoon Break (45 min) Afternoon Session 2 — Automation & Community 15:45 Damien Garros | OpsMill — 25 min The Network Automation Map: Navigate Your Journey with the NAF Automation Framework 16:10 Leandro Lerena | Zebbra AG — 15 min Building a Vendor-Agnostic E2E Testing Ecosystem with Netlab 16:25 TBD | Megaport — 15 min TBA 16:40 Andrew Vieyra | CommunityRack.org — 10 min CommunityRack.org - New Projects and Focus! 16:50 Severin Dellsperger | OST University — 10 min CHNUG 17:00 Social Event Already a big “Thank You” to our Sponsors [cid:1BCA7A73-E2FD-4A15-91FD-5E4E8CB7BC9B] [cid:D7ACD2E5-4528-4FCA-A021-466EE248E61C] and suporters [cid:649CB8B5-B9A1-4705-BC2D-CE2752C9CB6E] [cid:AAA9D4C8-E043-43EC-B83D-3382F86A24C2] [cid:03196310-AC0C-4792-83A1-1DF4BEC6BC16] [cid:68B00502-E516-438C-A38E-79DDE60A116D]

1 0

[Survey] When do you upgrade your network?
by Romain Jacob 27 Mar '26

27 Mar '26

Dear all, [My apologies if you receive multiple copies of this message] TL;DR I lead an academic research project to better understand the motives behind network hardware upgrades. If you are operating a network infrastructure and have 10 minutes to spare, we would greatly appreciate you filling out this short (anonymous) survey: https://tally.so/r/rjEkZR == Longer version == My name is Romain; I am a senior scientist at ETH Zürich, Switzerland, where I research the environmental impacts of Internet infrastructure and how we can steer networks to become more sustainable in the future. There is increasing evidence that a large part of the Internet's impact comes from the manufacturing, deployment, and recycling of hardware, suggesting that networks could substantially reduce their footprint by keeping network devices in operation for longer, despite possibly higher energy consumption in older hardware models. Some of my ongoing research aims to assess whether this hypothesis is correct; happy to tell you more about that if you are interested. Assuming it is indeed correct that network hardware should be kept in operation for longer, if we want to encourage this, we must understand why networks are being upgraded today. * What are the main motives behind network hardware upgrades nowadays? * What factors are preventing or discouraging longer hardware lifetime in networks? We prepared a short survey to help answer those questions. After some brief contextualization questions to clarify the network type and context, the core of the survey presents a list of possible motives for hardware upgrades and asks, for each, how important it typically is in your own network upgrades. The second half of the survey contains (optional) questions related to the current environmental sustainability practices in your organization. If you are operating a network or working for an organization that operates a public or private network infrastructure, we would greatly appreciate you filling out this short (anonymous) survey: https://tally.so/r/rjEkZR And, naturally, you are more than welcome to share this survey within your own network (of humans, I mean). Many thanks in advance! — Romain -- Romain JACOB Postdoctoral Researcher ETH Zurich Networked Systems Group (NSG) Lead: Prof. Laurent Vanbever www.romainjacob.net <https://www.romainjacob.net/> @RJacobPartner <https://twitter.com/RJacobPartner> @jacobr@discuss.systems <https://discuss.systems/@jacobr> Gloriastrasse 35, ETZ G84 8092 Zurich +41 7 68 16 88 22

1 0

SwiNOG #41 - Sold out / Waiting list
by Simon Ryf 25 Mar '26

25 Mar '26

Dear SwiNOG community, We are overwhelmed by the demand for seats for the upcoming event. While this is great news for everyone who already secured a ticket, we understand that it is frustrating for those who would still like to attend but have not been able to get one. We are currently in contact with the venue to see whether it is possible to increase capacity, but at this stage we cannot make any promises. If you do not have a ticket yet but would like to attend, please send an email to core(a)swinog.org with the subject “Waiting list” and a short message. Should we be able to release additional tickets, we will contact people on the waiting list in chronological order. BTW: We’re planning to release the agenda by the end of this week. Confirmation mails to the speakers are being prepared right now. Thank you and hope to see you at SwiNOG #41 SwiNOG Core Team

1 0

tempfail issues with: mailout01.mail.admin.ch
by Benoît Panizzon 24 Mar '26

24 Mar '26

Hi Are others also experiencing issues when temp failing arbitrary recipients from mailout01.mail.admin.ch ? To explain the situation: Our spamfilter gives the recipient to choice to either reject, quarantine aka spamfolder or accept an email classified as spam. Example: Alice sends spam to Bob and Charlie Bob wants spam rejected Charlie wants spam quarantined. Spam can only be rejected after the DATA phase, when both recipients have been accepted during RCPT TO. Dropping Bob from the recipient list and only delivering to Charlie is a NO GO, we confirmed the RCPT TO to Bob with 250 so we have to deliver. Rejecting the whole email does contradict the setting of Charlie. To solve this, we tempfail any recipients whose spam settings differ from the first recipient like this: MAIL FROM:<alice(a)example.com> 250 2.1.0 Ok RCPT TO:<bob(a)example.net> 250 2.1.5 Ok RCPT TO:<charlie(a)example.net> 452 4.5.3 Resend separately 452 4.5.3 is the same code used to indicate 'too many recipients' and therefore triggers an immediate fork of the original message to the remaining recipients on the sending MTA usually without any notable delay. The only server which seems to regularly stop transmitting the email to the remaining recipients and returns a 'hard bounce' to the sender after having sent the email to 'some' of the recipients is mailout01.mail.admin.ch Anyone observing the same issue? Anyone having a contact at BIT which could help with further investigation into the cause of the issue observed? I attempted to open a case some time ago but got no where. -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

1 0

sbb.ch unresponsive on IPv6 for HTTP(S)
by Beni Keller 24 Mar '26

24 Mar '26

Hey all This might not be 100% the correct place to ask this but since the SBB contact form didn't yield any results, I'll try here. Maybe someone from SBB who knows someone who can do something about this reads the list. There are A and AAAA records for sbb.ch: $ dig AAAA sbb.ch +short 2a00:4bc0:ffff:9::c296:f58e $ dig A sbb.ch +short 194.150.245.142 However, on port 80 and 443 I only get a response on IPv4, a 301 to http(s)://www.sbb.ch. On IPv6 it just times out without any response: $ curl -6 https://sbb.ch -v * Host sbb.ch:443 was resolved. * IPv6: 2a00:4bc0:ffff:9::c296:f58e * IPv4: (none) * Trying [2a00:4bc0:ffff:9::c296:f58e]:443... * connect to 2a00:4bc0:ffff:9::c296:f58e port 443 from 2001:8e0:1426:1:47d6:12fd:bc19:5704 port 55992 failed: Connection timed out * Failed to connect to sbb.ch port 443 after 133922 ms: Could not connect to server * closing connection #0 curl: (28) Failed to connect to sbb.ch port 443 after 133922 ms: Could not connect to server tcpdump doesn't show any response packets at all. This is mainly an issue on our IPv6-only clients where we use DNS64/NAT64. So the preferred solution would be for someone to fix IPv6. However, removing the AAAA DNS record would also solve the issue because then the resolver generates a DNS64 response and we connect to IPv4 over NAT64. Hope someone can help. It's a bit of a shot in the dark. Let me know it this is completely inappropriate to be posted on this list. Thanks and regards Beni

8 13

Re: Facebook Account blocked / Legal Contact Swiss
by Patrick Studer 23 Mar '26

23 Mar '26

Hi Andreas > Am 23.03.2026 um 10:01 schrieb Andreas Fink <afink(a)list.fink.org>: > > > On 23.03.2026 09:09, Patrick Studer wrote: >> Hi Andreas >> >> That’s the reason, I was deleting my account 3 years ago. But unfortunately, there are to many sites and groups just organized within Facebook. I assume, it’s because it’s „free“ and in some regions of the world, people don’t have to much money to spend in professional websites. > > > well then these groups are not professional and dont deserve to be considered. Just the data protection aspect of this is a nightmare. GDPR etc... For Restaurant etc. I could probably life with it, but there are some groups which exist long time and they shared there experience with a product (about 7-8000 members). Even I can push them to move away from Facebook, how can they migrate all the gathered and shared experiences to a new platform. > >> >> At least, in metaverse, you are not blocked from content, if you don’t have an account (as far as i know). >> I assume, Facebook is the easiest and least cost way to have a presence in the WWW and the largest user base. > > > I strongly disagree on that. All smart people are not on Facebook anymore. Maybe the chat lover's group is still there. Similar is the case with Twitter now known as X since Elon killed the API rendering all useful 3rd party clients useless. Sorry, mixed up the name. I was talking about Fediverse about open access to content, not metaverse. > >> Like I said earlier, I would prefer to not have an account and have access to those sites and groups, but that’s not possible (today). > > > Well you should address the people which are still there and question their doing why they are pushing others to give away their privacy to an american collecting machine. > > You will live much better that way. Agreed on that one. What would you recommend for them als (free) alternative?

1 0

Re: Facebook Account blocked / Legal Contact Swiss
by Patrick Studer 23 Mar '26

23 Mar '26

Hi Andreas That’s the reason, I was deleting my account 3 years ago. But unfortunately, there are to many sites and groups just organized within Facebook. I assume, it’s because it’s „free“ and in some regions of the world, people don’t have to much money to spend in professional websites. At least, in metaverse, you are not blocked from content, if you don’t have an account (as far as i know). I assume, Facebook is the easiest and least cost way to have a presence in the WWW and the largest user base. Like I said earlier, I would prefer to not have an account and have access to those sites and groups, but that’s not possible (today). Kind Regards Patrick Studer > Am 22.03.2026 um 11:52 schrieb Andreas Fink <afink(a)list.fink.org>: > > better to simply ditch facebook completely. Done that many many years ago and never regreted it. > > People who only publish info on Facebook are not serious and are ignoring the reality. Like the ones on the Metaverse. > > > > > > On 21.03.2026 10:37, Patrick Studer via swinog wrote: >> Hi Simon >> >> I didn’t assume to get legal help directly, instead I hoped, someone already had some case and knows, which organization can help in such a situation (if there is such an organization in Switzerland for such issues) and point me in the right direction. >> >> Unfortunately, if you don’t have an account, you are not able to access any facebook sites in full, instead, you are only able to access the last post and the facebook will ask you to login (see attached screenshot). >> >> Of course could someone create a fake account. I don’t know, how far facebook is fingerprinting someone’s devices, so it will probably detected, that I’m the same person? >> >> Kind Regards >> >> Patrick >> >> >> >> >>> Am 21.03.2026 um 10:22 schrieb Simon Ryf via swinog <swinog(a)lists.swinog.ch> <mailto:swinog@lists.swinog.ch>: >>> >>> Hi Patrick, >>> >>> This is not the right corner to get legal help for US Big-Tech. >>> >>> But IMHO you should approach this differently. >>> Your Goal: Access company Sites on Facebook >>> >>> This can be done IMO without a Facebook account e.g. https://www.facebook.com/migros >>> And if you need one - why don’t you create a fake one? >>> >>> br >>> Simon >>> >>> FYI. I’m NOT starting a discussion here ;-) >>> >>> >>> >>> From: Patrick Studer via swinog <swinog(a)lists.swinog.ch> <mailto:swinog@lists.swinog.ch> >>> Date: Saturday, 21 March 2026 at 08:04 >>> To: swinog(a)swinog.ch <mailto:swinog@swinog.ch> <swinog(a)swinog.ch> <mailto:swinog@swinog.ch> >>> Subject: [swinog] Facebook Account blocked / Legal Contact Swiss >>> >>> Hi >>> >>> I know, it’s perhaps not the right/correct place to post this, but I hope, that some of the (bigger) ISP probably stumbled over such issues and know, which (legal) way is possible for swiss user. >>> >>> I had a personal account Facebook Account and decided to let it be deleted through Facebook in 2023, since I din’t have used it to much. >>> >>> During our travels, we noted, that many places around the world only have a facebook page instead of (old style) webpage. >>> >>> So I decided to recreate my Facebook account. Unfortunately, I missed a confirmation mail (the only mail from facebook, which went to the spam folder). When I later saw it and clicked it, I got a message, that my account has been temporarily disabled and I have 180 day to proof my Identity by video call. >>> >>> At first, I wanted to do that, but decided two weeks later during travel and again unable to access some local Restaurants Facebook site, to do the video call. After I did that, I received within minutes the information, that my account has definitely blocked and I can’t ask Facebook to recheck the decision, instead, if my country has some instances, which I can ask for help. >>> >>> As I found out later, this seems some kind of AI issue, where people get blocked from Facebook for no obvious reason. >>> >>> Personal, I find this unacceptable, that someone is blocked for now reason and there is no contact on Facebook site, where someone can ask to review this decision. Instead, you have to ask a Laywer. WFT! But since there are so many „Free“ Facebook sites from small Business/Restaurant all around the world and some interesting groups, with valuable information, I would really like to have an account, so I can access those information. >>> >>> So, hence I ask here, if someone knew, which organization in Switzerland can help with such an issue. >>> >>> Attached, you can see the message, which is greeting me, when I try to login to Facebook. >>> >>> Thanks for any help. >>> >>> Kind Regards >>> >>> Patrick Studer >>> >>> >>> >>> <PastedGraphic-1.png> >>> _______________________________________________ >>> swinog mailing list -- swinog(a)lists.swinog.ch <mailto:swinog@lists.swinog.ch> >>> To unsubscribe send an email to swinog-leave(a)lists.swinog.ch <mailto:swinog-leave@lists.swinog.ch> >> >> >> >> _______________________________________________ >> swinog mailing list -- swinog(a)lists.swinog.ch <mailto:swinog@lists.swinog.ch> >> To unsubscribe send an email to swinog-leave(a)lists.swinog.ch <mailto:swinog-leave@lists.swinog.ch>

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog