- swinog - vmaill01.sys

FYI: admin.ch broken DNSSEC thus DNS down!
by Jeroen Massar 11 Jan '20

11 Jan '20

As mentioned on Swinog IRC (yes we are alive there, join us! :): admin.ch is unreachable due to broken DNSSEC. See: https://dnsviz.net/d/admin.ch/dnssec/ 8<---- ch to admin.ch: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (162.23.37.16, 162.23.37.160, 212.103.72.85, 2a00:c38:2:28:0:ffff:d467:4855, UDP_-_EDNS0_4096_D_K) ch to admin.ch: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. (162.23.37.16, 162.23.37.160, 212.103.72.85, 2a00:c38:2:28:0:ffff:d467:4855, UDP_-_EDNS0_4096_D_K) ------>8 (I got a screencap of the page for later, just in case it get fixed/changed in the meantime; swinog only allows 40KiB attachments which would ruin the res too much for it to be useful :) Thus for all ISPs on this list: tell your customers that it is an admin.ch issue, not something you can solve (unless you disable dnssec validation for admin.ch, which is an option, but kinda against dnssec). (Fortunately it is not tax time or something like that) For folks working at admin.ch: I offer myself pro bono to help out resolving the issue, don't hesitate to reach out (email or contact details on my homepage). We can then replicate a stable environment as described in: https://jeroen.massar.ch/presentations/vid/SwiNOG35-Managing_sleep_with_a_r… or otherwise likely improve the situation to avoid such outages. Good luck folks at admin.ch in resolving this.. Greets, Jeroen

1 1

DNSSEC admin.ch
by Samuel Aymon 10 Jan '20

10 Jan '20

Hello everyone, If someone at admin.ch read this before it is too late, please check your DNSSEC config. All admin.ch domains and subdomains are unresolvable due to an errors in your DNSSEC. More infos here: https://www.admin.ch/ or here: https://dnssec-debugger.verisignlabs.com/admin.ch or here: https://dnsviz.net/d/admin.ch/dnssec/ Best regards Samuel

1 0

Fwd: [ncc-announce] [news] De-bogonising 2a10::/12
by Arnold Nipper 09 Jan '20

09 Jan '20

Happy New Year and a successful 2020 to all of you. Cheers Arnold -------- Weitergeleitete Nachricht -------- Betreff: [ncc-announce] [news] De-bogonising 2a10::/12 Datum: Wed, 8 Jan 2020 12:23:17 +0100 Von: Nikolas Pediaditis <npediaditi(a)ripe.net> An: ncc-announce(a)ripe.net Dear colleagues, A few months ago the RIPE NCC became the first RIR to receive an additional /12 IPv6 allocation (2a10::/12) from IANA. We will soon begin to delegate space from this IPv6 block to LIRs. Prior to this, in order to improve routability and minimise the risk of filtering, the RIPE NCC will perform several de-bogonising activities in the next few weeks. We plan to start announcing the full /12, as well as a few /32 or longer blocks out of 2a10::/12 from AS12654 (RIPE Routing Information System (RIS)), within the next few days. We will analyse data from RIS and RIPE Atlas and we plan to write up an analysis around this effort. We want to remind everybody to update their bogon filters and allow routes originating from 2a10::/12 in their network. Kind regards, Nikolas Pediaditis Registration Services and Policy Development Manager RIPE NCC -- Arnold Nipper email: arnold(a)nipper.de mobile: +49 172 2650958

1 0

Fwd: [ncc-announce] [news] De-bogonising 2a10::/12
by Massimiliano Stucchi 08 Jan '20

08 Jan '20

Guys, update your filters! -------- Forwarded Message -------- Subject: [ncc-announce] [news] De-bogonising 2a10::/12 Date: Wed, 8 Jan 2020 12:23:17 +0100 From: Nikolas Pediaditis <npediaditi(a)ripe.net> To: ncc-announce(a)ripe.net Dear colleagues, A few months ago the RIPE NCC became the first RIR to receive an additional /12 IPv6 allocation (2a10::/12) from IANA. We will soon begin to delegate space from this IPv6 block to LIRs. Prior to this, in order to improve routability and minimise the risk of filtering, the RIPE NCC will perform several de-bogonising activities in the next few weeks. We plan to start announcing the full /12, as well as a few /32 or longer blocks out of 2a10::/12 from AS12654 (RIPE Routing Information System (RIS)), within the next few days. We will analyse data from RIS and RIPE Atlas and we plan to write up an analysis around this effort. We want to remind everybody to update their bogon filters and allow routes originating from 2a10::/12 in their network. Kind regards, Nikolas Pediaditis Registration Services and Policy Development Manager RIPE NCC

1 0

Cleanmail contact
by Patrick Velder 11 Dec '19

11 Dec '19

Hi there Is there anyone from cleanmail? They are rejecting mails from my server (Reason: "Host blocked. Request whitelisting"). Forward/reverse DNS/HELO matches, no blacklist entries, no spamming, ... Nobody is answering mails (sent using another server). Best regards Patrick

1 0

Equinix PIN
by Michael Koloff 05 Dec '19

05 Dec '19

Hello I assume that some of you also have an account / access to Equinix data centers. And that you have been informed that you have to define a new 6-digit PIN in your account. Two things make me wonder, see the FAQ here: https://equinix.app.box.com/s/lcrutseubx9vebi4m21dir8fp66fmmlq Extract: I'm trying to select my 6-digit PIN but am receiving an error message. --> OUR SECURITY SYSTEMS ONLY ALLOW EACH PIN/COMBINATION TO BE USED FOR ONE PERSON. If you are receiving an error, please input a new combination of numbers or use the "Generate PIN" selection to generate a random, unique PIN. I forgot my 6-digit PIN, what should I do? / I want to change my 6-digit PIN DUE TO SECURITY REASONS, where can I change it? --> ....Your 6-digit PIN cannot be changed.... In concrete terms, this means that every person has a PIN, but no other person in the world can have the same PIN. This means that a maximum of 900,000 people worldwide can have access to Equinix data centres. (PINs with leading zero are not allowed) And if someone knows your PIN, at least your first authentication factor is broken and cannot be changed. Support has confirmed this behavior to me so far. Am I the only one here who finds that very weird? How do you deal with it? Best regards Michi -- Michael Koloff System- & Networkengineer sasag Kabelkommunikation AG Mühlenstrasse 21 8201 Schaffhausen Telefon: +41 52 633 01 72 mkoloff(a)sasag.ch www.sasag.ch

3 2

Fwd: RIPE NCC sucht einen neuen CEO
by Steven Glogger 05 Dec '19

05 Dec '19

CEO @ RIPE? see below (and yes: by purpose not posted on swinog-jobs) gruss -steven Anfang der weitergeleiteten Nachricht: > Von: Falk.vonbornstaedt(a)ripe.net > Datum: 5. Dezember 2019 um 12:09:23 MEZ > An: denog(a)lists.denog.de > Betreff: RIPE NCC sucht einen neuen CEO > > > Hallo, > leider habe ich es nicht nach Hamburg geschafft. Deshalb auf diesem Wege: > > RIPE NCC sucht einen neuen CEO. Ein tolles Team, herausfordernde Aufgabe, angemessene Bezahlung. Bewerbung bis 31.12.2019 möglich. > > https://www.ripe.net/about-us/staff/careers-at-the-ripe-ncc/vacancy/148244 > > Grüsse > Falk > > Dr. Falk von Bornstaedt > Executive Board > RIPE NCC > Stationsplein 11, 1012 AB Amsterdam, The Netherlands > Mobile +49 171 22 88 625 > mailto:Falk.vonBornstaedt@ripe.net > > > > Social Media > > Twitter > @RIPENCC for tweets from the RIPE NCC > @RIPELABS for tweets about RIPE Labs articles and the community > @RIPEMeeting for RIPE Meeting tweets > Hashtags we use: #RIPEstat, #RIPEAtlas, #RIPEness, #RIPENCC > > Facebook > RIPE NCC Facebook page > RIPE Meetings > > SlideShare > slideshare.net/ripencc > LinkedIn > RIPE NCC > RIPE community > > YouTube > RIPE NCC's Channel > > GitHub > RIPE NCC's git repository > > > >

1 0

Strange IPv6 scans from big networks
by Klaus Ethgen 02 Dec '19

02 Dec '19

Hi, Currently I see day long IPv6 scans from networks of Akamai (2a02:26f0:f3::/48), Google (2a00:1450:4000::/37), Apple (2a01:110::/31), Microsoft (2a01:b740::/29), Swisscom (2001:918::/32) and Init7 (2001:1620::/32) to my Network @HOME. They all try to enumerate hosts and ports in 2a02:168:4e82:0:* that does not and never have exists. The net is a fiber7 port. Anybody an idea what is going on here? On request I can provide more informations like pcaps. The scans are sourced from all over that mentioned networks above. While I have no scruples to block Apple, Microsoft, Akamai or other bad behaving networks, I do not want to block Swisscom or Init7 if not needed. Needless to say that I do not have any public service behind my fiber7 port. Gruß Klaus -- Klaus Ethgen http://www.ethgen.ch/ pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen <Klaus(a)Ethgen.ch> Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C

4 4

dnssec-failure for "admin.ch"
by Tom 21 Nov '19

21 Nov '19

Hi list Is a dnsadmin of "admin.ch" here? 21-Nov-2019 14:07:56.096 dnssec: info: validating admin.ch/A: verify failed due to bad signature (keyid=61614): RRSIG has expired 21-Nov-2019 14:07:56.096 dnssec: info: validating admin.ch/A: no valid signature found 21-Nov-2019 14:07:56.096 lame-servers: info: RRSIG has expired resolving 'admin.ch/A/IN': 162.23.37.16#53 Regards, Tom

1 0

##### SwiNOG#36 - Travel Info #####
by Simon Ryf 19 Nov '19

19 Nov '19

Dear SwiNOG Community, Please find general information about the SwiNOG #36 meeting below. https://www.swinog.ch/meetings/swinog36/ Date: 14.10.2018 - Registration 08h15 - 09h15 Location: Gurtenpark, Bern: https://goo.gl/maps/kuxy4QUrcoy >From Bern main station you may take: - S-Bahn S3 Belp and exit at Wabern station - Tram 9 (Wabern) and exit at Gurtenbahn stop Then take the Gurtenbahn to the Gurtenpark. -> You DO NOT have to pay a fee, just tell you attend to the SwiNOG event. Don’t throw away the ticket - you'll need it to get back down. Map (Ground Station of the cable rail): https://goo.gl/maps/5uSKtgbianM2 Suggested trains from Geneva: 06h12 Zurich: 07h02 WIRELESS ACCESS During the meeting, you have access to free WLAN! See you at SwiNOG #36! SwiNOG

3 2

Pinging digitecgalaxus.ch
by Lukas Knauer 06 Nov '19

06 Nov '19

Hello List Is there anyone from digitecgalaxus who could contact me offlist? We received phishing from a potentially hacked mail account. Additionally your SPF record is broken (permerror). Regards Lukas

1 0

## SwiNOG#36 - Agenda ##
by Simon Ryf 05 Nov '19

05 Nov '19

Dear SwiNOG’ers I’m happy to say that after a few struggles and some back and forth we have the final agenda and we’re ready!! Please check out the agenda at https://www.swinog.ch/meetings/swinog36/ And https://register.swinog.ch/ until Sunday the 10th If you like a free entry – send us a CFP submission for a 5 to 10min lightning talk https://www.swinog.ch/cfp/ Best Regards, happy networking and till Thursday 14th November 2019 Your SwiNOG Team

1 0

Wanted: Cisco MPA-4x10
by Manuel Wenger 04 Nov '19

04 Nov '19

Hi everyone, We are looking for a Cisco MPA-4x10 card. Does anyone have a spare lying around and wishes to get rid of it? If so, please contact me off-list. Thanks! Regards Manuel -- Manuel Wenger Technical Operations Officer connecting you to great ideas Netstream AG Neugutstrasse 66 8600 Dübendorf +41 44 802 66 88 manuel.wenger(a)netstream.ch netstream.ch

1 0

IPv6 Council event on IPv6 Security, November 11
by Silvia Hagen 03 Nov '19

03 Nov '19

Dear Swinogers The IPv6 Council hosts an event on IPv6 Security, titled «IPv6 Security - Die Hotspots - haben Sie an alles gedacht?» Frank Herberg from Switch will be presenting and the event includes good time for Q&A, as well as drinks, snacks and time for networking. Date: Monday, November 11 Location: at Digicomp Zürich, near Hauptbahnhof Time: doors opening 17.30, presentation 18 - 19 h, followed by apero, end of event 20.30h All details and link to registration: http://www.swissipv6council.ch/de/events/IPv6-Security As usual, entrance for IPv6 Experts is free, all others pay CHF 20 at the Abendkasse as Unkostenbeitrag. So if you are interested you are welcome to join. Cheers from Taipeh Silvia Sunny Connection AG CH-8124 Maur +41 (0)44 887 62 10 www.sunny.ch<http://www.sunny.ch/> http://twitter.com/sunny_shagen ****************************************** Business Agility - eine integrale Betrachtung. Kommen Sie mit auf unsere Entdeckungsreise<https://flowdays.net/de/training?category=Business_Agility&title=Business_A…> "When things fall into place" - 28. November in Zürich ****************************************** Think Agile, thrive in the Flow: www.flowdays.net<http://www.flowdays.net/> ******************************************

1 0

new project: DHCP Protect
by Pascal Gloor 31 Oct '19

31 Oct '19

Hi Community, I don’t know about you, but as an ISP we’ve always faced the problem of crazy DHCP clients (v4 and v6) flooding our servers. While at Quickline we have a DHCP server with anti-flood mechanisms it might not the case for everyone. This is why I wrote DHCP Protect. DHCP Protect works with the userspace API of Netfilter (iptables/ip6tables) and will treat each DHCP(v4/v6) packet and decide if it should be forwarded or not. Don’t worry, iptables can be configured in a way that if the program is not working, it will ACCEPT the packets by default. There are no packages available, but don’t be scared, it’s really simple to install and it will do all the systemd stuff for you! After make install it will already be running (you can also make uninstall which will delete everything and remove it from systemd). git clone https://git.home.spale.com/dhcp_protect.git cd dhcp_protect sudo apt-get install build-essential uthash-dev libnetfilter-queue-dev make all sudo make install That’s it. And then you need the iptables/ip6tables rule: iptables -A INPUT -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass ip6tables -A INPUT -p udp -m udp --dport 547 -j NFQUEUE --queue-num 67 --queue-bypass (SAME queue number! the program can treat v4/v6 at the same time) The program will log to syslog when it blacklists. I’ve tested this with 10kpps and the CPU load of the program was about 4-6% on one core (AMD Ryzen 7 2700X). There’s also a flooding perl client in the repository to test the performance. It can do pseudo DHCPv4/DHCPv6, but since it’s pseudo, don’t use the perftest.pl again a real DHCP server. More information in the README -> https://git.home.spale.com/public/dhcp_protect I’d be glad on feedback! It is useful? what additional features would you like to see? Thanks for reading See you at Swing#36 Pascal

4 9

## SwiNOG #36 - November 14th - Agenda (preview) ##
by Simon Ryf 28 Oct '19

28 Oct '19

Dear SwiNOGers, the Agenda is almost complete and we’re (almost) ready for the 14th of November. Below is a preview for the agenda (in random order). You can also let us know what you expect or wish to hear by answering to the mailing list. The Speakers are also listening ;-) Please register now: https://register.swinog.ch/ 30min | AI in Networking | Jörg Ammon (Extreme Networks) AI is gaining momentum to solve problems that are difficult for humans as it requires analytics of huge amounts of data. This talk discusses attempts to apply similar methodology to problems in networking. 25min | The Future of Passive Multiplexing and Multiplexing Beyond 10G | Wouter van Diepen (Alturna Networks/Solid Optics) The Future of Passive Multiplexing and Multiplexing Beyond 10G. In the past, it was easy to change your optical network from 1G to 10G by simply changing the transceiver, but what if you want to do more than 10G? What if you want to go beyond 80km? What are your options and why is there no QSFP28-DWDM-ZR? These are the central questions in this presentation. We will cover the 3 “ingredients” of Multiplexing: The Fiber, the Passive Mux, and the Transceiver, and talk about the limitations and possibilities of multiple times 100G over one fiber pair. We will also cover the following topics: The challenges that arise due to attenuation and chromatic dispersion; Different types of Multiplexers - Cascaded TFF and AWG (including Gaussian Fit and Flat Top); ITU Grids such as DWDM and the new LWDM band (often used for 5G deployment); Modulation & Coherent 100G/200G/400G; How to use QSFP28 DWDM PAM4; and what is coming in 2020 - 400G DWDM QSFP-DD. At the end of this talk, you will understand the future of 100G multiplexing and how it can fit into your network. 30min | the complexity of hyper speed transceivers – let’s make it | Thomas Weible (Flexoptix GmbH) Thomas will describe in detail the structures inside optical transceivers. A Transmitter / Receiver Optical Sub Assembly (TOSA / ROSA) is no longer just a diode in a housing handling the light path to and fro to the fiber. The performance increases from 10G to 100G onwards to 400G - are not only giant steps in bandwidth there are matching leaps in manufacturing. How did the optical industry players around the globe make it possible to squeeze everything into the tiny form factors we see today? It is all about precision - a microscope with a calm and competent hand is no longer sufficient, now it is about; nano tolerances, testing, complex transceiver firmware and a shed load of money. This is the high precision optical mechanical engineering revolution which fuels the hyper growth of data centers and optical networking worldwide… If you face design issues with your current optical network design Thomas will give insights into the latest 40G to 400G transceiver developments (e.g. long distance 80km) which you can expect to see in the upcoming months. Hopefully this might save you some headaches. As a small „one more thing" Thomas will dive into the basics of how FEC compensates for errors caused by PAM4 modulation. 10min | RPKI, a piece of pie | Will van Gulik (Saitis - Nimag Networks / RomandIX) RPKI is something we hear about everywhere nowadays. Is it hard to deploy? 30min | A new approach to select SIEM Use Cases by avoiding events per second estimations | Pascal Imthurn (ISPIN AG) Did you ever experience the challenge to identify the adequate SIEM use cases to fulfil not only the compliance driven requirements but also the ability to have a high security detection coverage from day one? How can you ensure you will detect all attacks respectively you collect, and analysis all required events to identify anomalies? We will introduce a comprehensive approach to directly address the challenge of SIEM use case identification and selection. In addition, we explain the answer of the problem of having a high detection maturity from day one with still a price efficient strategy and the capability to scale easily. Moreover, we present a recommended solution method to respond to attacks immediately, focused to the origin of the attack and to be able to collect all relevant data for additional investigations. 10min | How to build a typical home network | Pascal Gloor (Quickline AG) beyond and above all expectations 30min | NBIP | Pim van Stam (Infomaniak Network SA) The director of NBIP would share the experience in seting up a multi-organization not for profit fundation to provide a DDoS mitigation and protection platform for national ISPs. 5min | Rheintal Internet Exchange | Thomas Fritz (Rheintal IX) Short introduction of the small Internet Exchange in the Rheintal region spread over FL, AT and CH. 30min | Weird and broken BGP on the Internet | Martin Winter (Hurricane Electric) The presentation gives a quick introduction to the RT-BGP tool (https://rt-bgp.he.net) and then we spend most of the time looking at issues seen with it. An example of few weird and broken BGP announcements as currently seen on the Internet by it are then discussed. 15min | Poor man's explanation why IPv6 is stalling in CH | Jean-Pierre Schwickerath (HILOTEC Engineering + Consulting AG) As a service provider for SME, we use on default ISP products for internet connectivity. The presentation will provide an overview of our experience with IPV6 on those products and where we believe improvements are (over)due. 20min | IP design and exploitation of Geneva city transport network | Gregoire Huet (TPG) How the IP network for 700 vehicles has been designed. From hardware constraints to BGP implementation and up to TICK monitoring and alerting. @Mobile IP, @BGP, @Linux, @Cisco, @NetModule, @Swisscom CNA, @SNMP, @TICK, @Grafana 15min | tbd/Cybersecurity | Levente Dobszay (Electrosuisse) tbd/Cybersecurity I like to thank you for our sponsors – without them we would have no SwiNOG !!! Extreme Networks ngworx Alturna Networks SWITCH Centurylink RIPE NCC Final agenda with Schedule will be published soon. Till then… Br Simon SwiNOG

1 0

Swisscom routing question / problem
by DUCHET Rémy 25 Oct '19

25 Oct '19

Hello, Can someone from Swisscom can contact me about a BGP routing issue ? Many thanks in advance. Rémy

1 0

A1/aon.at contact
by Jan-Philipp Benecke 25 Oct '19

25 Oct '19

Hey together, hoping there is someone from aon.at/A1 on list. We tried to reach out to you but your postmaster@ mailbox exceeded the quota ;) Can someone may contact me off-list ? Thanks a lot. Have a nice day, Jan-Philipp -- Jan-Philipp Benecke Deliverability Team Fon: +49 4402 97390-00 <tel:+49 4402 97390-00> E-Mail: jpb(a)cleverreach.com <mailto:jpb@cleverreach.com> Xing <https://www.xing.com/profile/JanPhilipp_Benecke/cv?sc_o> LinkedIn <https://www.linkedin.com/in/jan-philipp-benecke-b3058575/> *CleverReach GmbH & Co. KG HRA 4020 Oldenburg (Oldb.)* cleverreach.de <https://cleverreach.com/de/> CleverReach® <http://www.cleverreach.com/de/> CleverReach® <http://www.cleverreach.com/de/> Vertreten durch: CleverReach Verwaltungs GmbH, HRB 210079 Oldenburg (Oldb.) //CRASH Building | Schafjückenweg 2 | 26180 Rastede | Germany Geschäftsführung: Jens Klibingat & Sebastian Schwarz Aufsichtsrat: Rolf Hilchner & Heinz-Wilhelm Bogena PUSH/// <https://www.cleverreach.com/push/> CleverReach® <http://www.facebook.com/cleverreach> CleverReach @Instagram <https://www.instagram.com/cleverreach/> https://twitter.com/cleverreach <https://twitter.com/cleverreach> CleverReach @YouTube <https://www.youtube.com/user/cleverreach> Aktuell können Sie einige Informationen nicht sehen.Bitte aktivieren Sie externe Inhalte, um die Mail vollständig angezeigt zu bekommen oder klicken Sie hier. <https://app.mailtastic.de/api/li/0c3883f2-d7bc-4f1f-8d34-41da5b983637>

1 0

SBB partially reachable via IPv6
by Nico Schottelius 21 Oct '19

21 Oct '19

Hello everyone, if anyone from SBB reads the swinog ml: it's very cool that you added an AAAA record to sbb.ch. However it seems that only the HTTP, but not the HTTPS port is open via IPv6. Logs are attached below. Best regards from Glarus, Nico [20:31] diamond:~% curl -6 -I -v https://sbb.ch * Trying 2a00:4bc0:ffff:ffff::c296:f58e:443... * TCP_NODELAY set * Connected to sbb.ch (2a00:4bc0:ffff:ffff::c296:f58e) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/certs/ca-certificates.crt CApath: none * TLSv1.3 (OUT), TLS handshake, Client hello (1): ^C [20:33] diamond:~% curl -6 -I -v http://sbb.ch * Trying 2a00:4bc0:ffff:ffff::c296:f58e:80... * TCP_NODELAY set * Connected to sbb.ch (2a00:4bc0:ffff:ffff::c296:f58e) port 80 (#0) > HEAD / HTTP/1.1 > Host: sbb.ch > User-Agent: curl/7.66.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 301 Moved Permanently HTTP/1.1 301 Moved Permanently < Date: Sun, 20 Oct 2019 18:32:39 GMT Date: Sun, 20 Oct 2019 18:32:39 GMT < Server: Apache Server: Apache < Location: https://sbb.ch/ Location: https://sbb.ch/ < Content-Type: text/html; charset=iso-8859-1 Content-Type: text/html; charset=iso-8859-1 < * Connection #0 to host sbb.ch left intact -- Modern, affordable, Swiss Virtual Machines. Visit www.datacenterlight.ch

5 5

[FYI] : BoF for NOGs and Interested Parties at RIPE 79 // 2019-10-14T16:00:00Z
by Arnold Nipper 28 Sep '19

28 Sep '19

https://ripe79.ripe.net/programme/meeting-plan/bof/ Cheers Arnold -- Arnold Nipper email: arnold(a)nipper.de mobile: +49 172 2650958

1 0

Swiss Web Security Day 2019, October 30th Bern
by Michael Hausding 19 Sep '19

19 Sep '19

Dear list SWITCH is organising the 3rd Swiss Web Security Day, together with Swico and SISA. If you are interested in Web Security join us on October 30th in Bern. Registration and more Information about the event is available here: https://www.eventbrite.de/e/swiss-web-security-day-2019-tickets-65098353929 Hope to see you in Bern Michael ------------------------------------ Michael Hausding, Competence Lead DNS & Domain Abuse SWITCH-CERT Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 77, incident phone +41 44 268 15 40 michael.hausding(a)switch.ch http://securityblog.switch.ch

1 0

Known mail issues @bluewin.ch?
by Tobi 17 Sep '19

17 Sep '19

We currently experience mail delivery issues with bluewin.ch recipients. > 452 4.1.1 <REDACTED(a)bluewin.ch> requested action aborted: try again later we have tons of those message since this morning. From time to time mail can be delivered. Not have them before today Anyone seeing similar issues with bluewin? Or anyone from bluewin reading this list (can contact me offlist if desired)? Thanks for any help with this issue tobi

1 0

Yahoo Mail Delivery Issues
by Dominic Schlegel 17 Sep '19

17 Sep '19

Hi All We are experiencing problems delivering mails for domains having their MX record set to mx-eu.mail.am0.yahoodns.net (for example yahoo.it, yahoo.de, yahoo.co.uk). So far we have figured out that Yahoo’s DNS servers send different responses. Depending on the DNS response we are able to establish SMTP connections. Below example shows 2 servers from their DNS that seems to accept SMTP connections: [root@x1:~] # dig a mx-eu.mail.am0.yahoodns.net @yf2.yahoo.com +short 188.125.72.73 188.125.72.74 [root@x1:~] # telnet 188.125.72.73 25 Trying 188.125.72.73... Connected to mtaproxy1.free.mail.vip.ir2.yahoo.com. [root@x1:~] # telnet 188.125.72.74 25 Trying 188.125.72.74... Connected to mtaproxy2.free.mail.vip.ir2.yahoo.com. On the other hand we sometimes get other replies from the “same” (the id.server chaos record tell’s us it’s a different one) DNS server with different A records that do not accept SMTP connections: [root@x1:~] # dig a mx-eu.mail.am0.yahoodns.net @yf2.yahoo.com +short 188.125.73.87 212.82.101.46 [root@x1:~] # telnet 188.125.73.87 25 Trying 188.125.73.87... telnet: connect to address 188.125.73.87: Operation timed out telnet: Unable to connect to remote host [root@x1:~] # telnet 212.82.101.46 25 Trying 212.82.101.46... telnet: connect to address 212.82.101.46: Operation timed out telnet: Unable to connect to remote host We have so far confirmed this behaviour from different AS (Hetzer, OVH). Does anybody else experiencing the same behaviour? We have tried to contact their postmaster address and few others we found on the internet. Unfortunately so far no one was really able to help us. The Yahoo Small Business Phone Number that has been posted on this list back in October 2009 seems no longer to be in operations too. Therefore if you know how to get in touch with their technical staff that would be much appreciated. Best Regards Dominic Schlegel

3 4

Microsoft Office 365 Delist Portal
by Alisha Manuela Stutz 03 Sep '19

03 Sep '19

Hi, can somewhere from Microsoft Office 365 contact me off list regarding unreadable captcha[1] and to permit to send mails to Office 365 user. [1]https://sender.office.com/ best regards Alisha Manuela -- Eine sehr informative Broschüre über Transsexualität die Einblicke gibt um Vorurteile abzubauen oder gar nicht entstehen lässt. https://www.stadt-zuerich.ch/content/dam/stzh/prd/Deutsch/Gleichstellung/Th…

1 0

Sunrise TV
by Xaver Aerni 31 Jul '19

31 Jul '19

Hello, Could someone from Sunrise TV me contact offline Thanks And Greetings Xaver

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog