swinog

swinog@lists.swinog.ch

2 participants
2940 discussions

Big Caarrier break the net
by Roger 25 Mar '16

25 Mar '16

Just after tracing an shacking connection i discovered some icmp discrepancy and look what the trace says 6 embratel-G2-0-0-gacc12.rjo.embratel.net.br (201.39.103.69) [AS8151/AS4230/AS28513] 80.158 ms 73.268 ms 73.223 ms 7 200.244.165.238 (200.244.165.238) [AS4230/AS28513] 79.789 ms 79.776 ms 79.764 ms 8 200.244.216.75 (200.244.216.75) [AS4230/AS28513] 76.048 ms 200.244.216.43 (200.244.216.43) [AS4230/AS28513] 73.003 ms 72.954 ms 9 ebt-BP1224-intl04.mianap.embratel.net.br (200.230.251.130) [AS4230/AS8151/AS28513] 191.910 ms 195.430 ms ebt-BP1214-intl04.mianap.embratel.net.br (200.230.220.22) [AS4230/AS8151/AS28513] 195.714 ms 10 ae52.edge1.Miami2.Level3.net (4.59.240.117) [AS3356] 199.631 ms 199.988 ms 199.939 ms 11 ae-13-3505.car3.Washington1.Level3.net (4.69.158.145) [AS3356] 229.746 ms 229.744 ms 229.693 ms 12 4.68.72.14 (4.68.72.14) [AS3356] 200.297 ms 199.644 ms 199.665 ms 13 * * * 14 * * * 15 * * * 16 * * * 17 * * * 18 62.179.16.54 (62.179.16.54) [AS9141] 320.477 ms 303.223 ms 305.160 ms 19 * * * 20 * * * yeah .. who wonders, the last seen hop seems to be there where maybe your missed car allready is ;) the target is an unnamed swiss hoster in Kanton ZH ;)

1 0

SwiNOG-BE153 - Beer Event 153 @ Don Weber / ZH, Tuesday, 2016-03-29
by Emanuel Kleindienst 24 Mar '16

24 Mar '16

Dear SwiNOGers, Let's have some Beer & Food at DON WEBER! Upcoming events for rest of 2016: > SwiNOG-BE154: Mo, 25.4.16 > SwiNOG-BE155: Mo, 23.5.16 > SwiNOG-BE156: Mo, 27.6.16 > SwiNOG-BE157: Mo, 25.7.16 (summer vacations...) > SwiNOG-BE158: Mo, 29.8.16 > SwiNOG-BE159: Mo, 26.9.16 > SwiNOG-BE160: Mo, 24.10.16 > SwiNOG-BE161: Mo, 28.11.16 > SwiNOG-BE162: Mo, 12.12.16 (Christmas dinner) Looking forward seeing you! Emanuel, Mobile +41 79 382 73 77, Email emanuel(a)vshn.ch Details for the next event: ----------------------------------------------- Event: SwiNOG-BE153 - Beer Event 153 When? Tuesday, 29th March 2016 18:30 Where? Don Weber Heinrichstrasse 213, 8005 Zürich http://www.donweber.ch/ (GoogleMaps Link: http://goo.gl/maps/PqOPb) Places avaiable? 16 !! Please sign up if you're really coming - because the seats are limited! !! ----------------------------------------------- Registration: Start: Friday, 4th March 2016 - 18:35 Stop: Tuesday, 29th March 2016 - 16:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who's not. If you can't attend and you're registered please inform me ASAP (+41 79 382 73 77). Cheers, Emanuel Kleindienst

1 0

Re: [swinog] Reject von hotmail.com -- also Swiss providers do this nonsense
by Charles Buckley 22 Mar '16

22 Mar '16

I have also been having trouble with my Swiss provider (hosttech) making such insane spam rejections. 1. Recently I travelled to Germany, and stayed at a hotel using Deutsche Telekom as broadband provider. Apparently the entire DT DSL pool appears on two blacklists, so Hosttech just ignore them. No error message is returned, just a timeout -- a behavior so typical of Swiss bureaucracy. I got around this by using Google or GMX to send my mails. Hosttech first tried to tell me my settings were wrong (not likely), but finally had to confess that they were the problem. 2. Some time ago, I sent an email message containing the name of a Rumanian colleague in the body. That time I got an error message saying 'This server doesn't like spam.' I took the Rumanian name out, left everything else the same (except the recipient address, as the mail no longer made sense to the original recipient) and the mail went through fine. Concerning the first problem, Hosttech claim they fear getting on blacklists themselves, or that evil scripts might get uploaded to the SMTP server. I've never heard of such a thing, but even if it were true, since they use SMTP-Auth, isn't it enough to insist that the SMTP-Auth credentials are restricted to users who don't send spam, and to block the credentials of those who do? Why make something simple so bureaucratically difficult and obnoxious? To expect a user travelling on business to drop everything in their busy schedule to get IP addresses out of a DSL pool removed from blacklists by contacting a local broadband administration with whom they are not customers strikes me as completely unreasonable. Charles Buckley -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Jeroen Massar Sent: 18 March, 2016 10:03 To: swinog(a)lists.swinog.ch Subject: Re: [swinog] Reject von hotmail.com On 2016-03-18 09:47, Franco Hug wrote: > Hoi zaema, > > Ich beobachte das gleiche Verhalten mit contabo.de, aus dem Netz 178.238.224.0/22, evtl. gar 178.238.224.0/20 ... > >> DE-GIGA-HOSTING-20100728 178.238.224.0 - 178.238.239.255 >> CONTABO 178.238.224.0 - 178.238.227.255 > > Da scheint das ganze Netz auf einer Migro$oft Blacklist gelandet zu sein. > >> 550 SC-001 (BAY004-MC3F37) Unfortunately, messages from >> 178.238.227.40 weren't sent. Please contact your Internet service >> provider since part of their network is on our block list. You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors. > > Bei den einschlaegig bekannten blacklists ist das Netz auf jeden Fall nicht gelistet. > > In der Tat hatte ich selbst innerhalb der letzten 3 Monate 1x ein Spam-Mail aus diesem Netz erhalten. > Eigentlich nichts Aussergewoehnliches, hin und wieder flutscht halt > mal was durch bei diesen grossen Providern. Dass deswegen ein ganzes > Netz gelistet wird, und somit auch Unschuldige betroffen sind, ist aergerlich. Umso mehr, weil nicht wirklich klar ist, was man genau tun muss, um das Problem zu beheben. Registriere bei postmaster.live.com ... (yep, und auch bei google etc, die grossen haben kein lust um spam zu empfangen, so schieben sie das auf der ISPs die gerne mail wollen schicken) Richtige WHOIS, reverse DNS, SPF + DKIM und naturlich funktionierende abuse@ und abuse mail auch richtig behandeln. abuse-c oben ist abuse(a)contabo.de und wann dort sage 50 /24s hin gehen und aus der 50, 1 /24 viel spam geschickt werde und abuse@ das nicht losst, dan werd gleich die andere 50 auch als 'reagiert nicht' markiert, also.. rufe deine ISP an und frage mal nach ob die abuse behandeln... Greets, Jeroen _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

Reject von hotmail.com
by Klaus Ethgen 20 Mar '16

20 Mar '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hallo folks, zur Zeit bekomme ich meine Mails an hotmail.com-Adressen mit der Meldung "550 SC-001 (COL004-MC2F18) Unfortunately, messages from 5.9.7.51 weren't +sent. Please contact your Internet service provider since part of their network is on our block list. You can +also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors." abgelehnt. Auch mails an postmaster werden, entgegen jeglichen gültigen Standards mit der selben Meldung quitiert. Die IP 5.9.7.51 ist meine Outgoing-Adresse und ist seit Jahren der valide Mailserver meiner Domains. Ich kann auch ausschließen, daß über die Domain auch nur die geringste Spam oder andere Malware versendet wird. Haben noch andere diese Probleme mit hotmail.com bzw. hat wer eine Kontaktmöglichkeit zu denen? Irgendwie habe ich das Gefühl, das die ihre Server nicht im Griff haben. Gruß Klaus Ethgen - -- Klaus Ethgen http://www.ethgen.ch/ pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen <Klaus(a)Ethgen.ch> Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQGcBAEBCgAGBQJW65PzAAoJEKZ8CrGAGfasZ94MALl72j1zpt646JdZ4nplkYir DtRD3CMXB90AjVxgITSGbR4ec8gmcltHsaVAZmgMdEdHQPX3T6uiZYsM40MY5jEj YBhS7GYQglTZWYvYtrGvhsL0ZDR0EWDiTYxqEgsV/5I5qdjzW6Cvk5rZN7eS+HS9 1X17H9AtUW5hi5cuVI5EmHMENtys0T0tyOdjt6rBcQ/IvPFVPeK5HSGSMStd6Wx5 jBGkyBmvvZpP0IsNdjwoUpeQMAhDmsulM3MJtfZ3lQBEy/OTDXB55UzJh2Wpp6ey k/JycZrE7Z6m6xnkjP/fr48VWDLV3gm8TMNMVepGw0pel4xOBSR43HnCagFjOU6c gBmPiuXhnBdmuwpIv5q2zTlMfCqJkgntPUyG3xHFb9D9prt7EQo4YLvsLr7CkUTh oSw81dTOXivW080T3P9IsPBokSQZWbJhBF93zt4RSoG9SQOXYZzJKTJs3EuzaAEL l0ZH9h906DQjast4x16cKDw0pSFvCvzAsGZEmawxBg== =U4IV -----END PGP SIGNATURE-----

8 8

Re: [swinog] Reject von hotmail.com
by Franco Hug 18 Mar '16

18 Mar '16

Hoi zaema, Ich beobachte das gleiche Verhalten mit contabo.de, aus dem Netz 178.238.224.0/22, evtl. gar 178.238.224.0/20 ... > DE-GIGA-HOSTING-20100728 178.238.224.0 - 178.238.239.255 > CONTABO 178.238.224.0 - 178.238.227.255 Da scheint das ganze Netz auf einer Migro$oft Blacklist gelandet zu sein. > 550 SC-001 (BAY004-MC3F37) Unfortunately, messages from 178.238.227.40 weren't sent. Please contact your > Internet service provider since part of their network is on our block list. You can also refer your > provider to http://mail.live.com/mail/troubleshooting.aspx#errors. Bei den einschlaegig bekannten blacklists ist das Netz auf jeden Fall nicht gelistet. In der Tat hatte ich selbst innerhalb der letzten 3 Monate 1x ein Spam-Mail aus diesem Netz erhalten. Eigentlich nichts Aussergewoehnliches, hin und wieder flutscht halt mal was durch bei diesen grossen Providern. Dass deswegen ein ganzes Netz gelistet wird, und somit auch Unschuldige betroffen sind, ist aergerlich. Umso mehr, weil nicht wirklich klar ist, was man genau tun muss, um das Problem zu beheben. Deshalb habe ich als quick-fix die IP-Adresse des outgoing MX angepasst. D.h. ich habe das Problem nicht geloest, sondern umschifft... Gruass, Franco ----- Original Message ----- From: "David Schweikert" <david(a)schweikert.ch> To: "Klaus Ethgen" <Klaus+swinog(a)Ethgen.de> Cc: swinog(a)lists.swinog.ch Sent: Friday, March 18, 2016 7:51:42 AM Subject: Re: [swinog] Reject von hotmail.com Hoi Klaus, On Fri, Mar 18, 2016 at 06:36:52 +0100, Klaus Ethgen wrote: > zur Zeit bekomme ich meine Mails an hotmail.com-Adressen mit der Meldung > "550 SC-001 (COL004-MC2F18) Unfortunately, messages from 5.9.7.51 > weren't +sent. Please contact your Internet service provider since part > of their network is on our block list. You can +also refer your provider > to http://mail.live.com/mail/troubleshooting.aspx#errors." abgelehnt. Mein privater Server bei Hetzner wird auch schon seit einigen Monaten von hotmail.com, live.com, etc. blockiert. Ich glaube, dass ganze Netblocks von Hetzner auf automatische Blacklisten gelandet sind. Meine Vermutung ist, dass Hetzner ein spammer-hosting Problem hat. Google hat uebrigens auf "mailop" (eine Mailing-Liste fuer Mail Hoster) gesagt, dass es bei ihnen auch passieren kann, dass ganze netblocks blockiert werden: https://www.mail-archive.com/mailop@mailop.org/msg01042.html Vielleicht koenntest du mit IPv6 versuchen. Oder auch ein Versuchswert ist DMARC. Oder die Mails ueber eine andere IP routen... Gruss David _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

Router installation in Morge
by Stanislav Sinyagin 14 Mar '16

14 Mar '16

hi, I need someone who could install a Cisco router in Morge on 17th of March. This is a quick task, and the customer has already prepared the configuration. Please contact me directly for details. -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinyagin(a)k-open.com +41 79 407 0224

1 1

BCP38 deployment in Switzerland Poll
by Grosser Stefan 14 Mar '16

14 Mar '16

Hi Everyone, I am currently writing a little thesis about DDoS mitigations and would like to pickup an old topic: BCP38 While searching in the caves of the Swinog archive I didn't found much information in the past about this subject. Only a unanswered Mail-Post from 2014 from Jeroen Massar [1] I would like to know how spoofable Switzerland's ISP/Netowrks are. It would be very nice if some of you Swinogers would participate in my survey. The anonymous poll form "BCP38 deployment in Switzerland" can be found under: http://goo.gl/forms/BO3Fqt9S1U You can also reply to this thread with your personal opinion. On request I can deliver a summary of my my survey. Thanks for participating! Stef [1] http://lists.swinog.ch/public/swinog/2014-February/006040.html

2 2

TCP timestamps
by Andre Keller 11 Mar '16

11 Mar '16

Dear fellow SwiNOGers, in the last few months we had several security audits and all of them proposed to disable tcp timestamps. (i.e. on Linux net.ipv4.tcp_timestamps=0). AFAIK roundtrip time calculation in tcp relies on this and there might be implications for PAWS (tcp sequence number wrapping). What do you guys think about this? Regards André

7 7

2. Call for presentations RIPE 72
by Marcus Stoegbauer 09 Mar '16

09 Mar '16

Hi, we are looking for presentations, tutorials, workshops, BoFs and lightning talk for the upcoming RIPE meeting in Copenhagen. The deadline for submissions is approaching soon (March 13), and we would be very happy to see your presentation submissions there. Marcus -------------------->>><<<-------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. RIPE 72 will take place from 23-27 May 2016 in Copenhagen, Denmark. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 72. See the full descriptions of the different presentation formats, https://ripe72.ripe.net/submit-topic/presentation-formats/. Proposals for plenary sessions, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than 13 March 2016. Proposals submitted after this date will be considered depending on the remaining available space in the programme. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity in operations - Commercial transactions of IPv4 addresses - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange Submissions RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. Presenters should indicate how much time they will require. In general, the time allocated for the different presentation formats is as follows: - Plenary presentations: 20-25 minutes presentation with 5-10 minutes discussion - Tutorials: up to two hours (Monday morning) - Workshops: one hour (during evening sessions) to two hours (Monday morning) - BoFs: approximately one hour - Lightning talks: 10 minutes The following general requirements apply: - Proposals must be submitted using the meeting submission system, https://ripe72.ripe.net/submit-topic/submission-form/. - Lightning talks should also be submitted using the meeting submission system (https://ripe72.ripe.net/submit-topic/submission-form/) and can be submitted any time up to and including the meeting week. The allocation of lightning talks will be announced on short notice---in some cases on the same day but often one day prior to the time slot allocated. - Presenters who propose a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. - All presentation proposals will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. - Due to potential technical issues, presenters/panellists should be physically present at the RIPE Meeting. If you have any questions or requests concerning content submissions, please email pc [at] ripe [dot] net. -- man-da.de GmbH, AS8365 Phone: +49 6151 16-71022 Mornewegstr. 30 Fax: +49 6151 16-71998 64293 Darmstadt, Germany e-mail: ms(a)man-da.de Geschäftsführer Marcus Stögbauer AG Darmstadt, HRB 94 84

1 0

VOIP: looking for a sponsor to provide us DIDs.
by Julien Sansonnens 24 Feb '16

24 Feb '16

Dear swinogers, Zaledia.com is a not-for-profit organization based in Sion, Switzerland. We provide VOIP services to our members. Our goal is to allow IP telephony experiments, to help people discover what VOIP is and to provide individuals and associations an innovative communication infrastructure. We offer our services free-of-charge, and we support open source solutions and philosophy. Please have a look at our website for more informations: https://zaledia.com As a private SIP VOIP acounts provider, we don't sell access to PSTN network. Thus, we do not compete with any established telecommunications service provider. Constantly seeking to improve our services, we would like to offer to our members a free DID phone number, so they can be called from the PSTN (call origination only, we are not interested in call termination). As a non-profit structure, our financial resources are limited, that is why we are looking for a partner/sponsor who could provide us with a range of swiss DID numbers. Ideally, this block could be delegated to us free-of-charge, or leased for a minimum feee. (of course these numbers will never be rented for profit or sold to third parties). We could consider various forms of partnership (displaying a banner on our website, recommending your services to our members, ...) We believe that such cooperation is win-win. I hope that our proposal will interest you, and I remain at your disposal for any further information. Kind regards, -- Julien Sansonnens IT, Zaledia.com founder

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog