- swinog - vmaill01.sys

Cisco 10G Network Modules
by Stefan Brand 03 Jul '18

03 Jul '18

Hi everyone! I'm currently working on a project for a Swiss non profit organisation. They're reworking their network and would need 8 Cisco C3KX-NM-10G network modules for their C3560s, these are, however, on the pricier side for their budget (living the non-profit life). They would also prefer to not go the Ebay route, so: If anyone has some used ones laying around in their cellar we would gladly take them (just send me your price off-list and I'll relay the offer). Cheers, Stefan

1 0

GDPR / DSGVO and 'whois' domain data
by Benoit Panizzon 02 Jul '18

02 Jul '18

Dear Swinogers. I run a couple of .com and .ch domains, which are registered via Gandi.net About one week ago, Gandi activated 'privacy protect' on my .com domains, hiding all my contact data in the whois output, without me asking them to do so. They sent an email though, that they would do so because of the GDPR. I asked them how GDPR entitles them to do so, in my opinion the GDPR aims for more transparency and thus, this is contra productive. Also, such domains usually quite quickly get a bad reputation as hiding the whois data is something the 'bad guys' do. Also it becomes a bit more difficult, to verify if a domain is legit or not to decide upon well crafted phishing emails. Or to contact the owner in case of security incidents. I told Gandi about my concerns, but only got the reply that they were forced to hide whois contact information on all domains registered via their service because of GDPR. Having the contact data published now is optional and has to be activated manually by the domain owner. This surely is not the case, as my .ch domains registered with gandi still show my complete contact. So I asked Gandi for how the GDPR exactly forces them to hide their customer's whois data. I haven't got a reply to this yet. So I wonder if somebody on this list knows the background why gandi acts this way and if other registrars do the same. If I get the whois data for some well known domains like: microsoft.com google.com swiss.com credit-suisse.com NONE has 'privacy protect' activated. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

4 3

Springcleaning, Equipment to give away
by Claudio Jeker 28 Jun '18

28 Jun '18

Hi there, We're cleaning up and have a few switches, patch panels, rack mount pull-out trays and rack cable guides to give away. For a small fee which is also payable in beer :) Everything is in good condition and looking for a new home. For more info have a look at https://www.tutti.ch/de/seller?id=2873789680938328953 Cheers -- :wq Claudio

1 0

emergency connection with a Huawei GSM modem ?
by Per Jessen 13 Jun '18

13 Jun '18

A customer with a flooded telephone cable is trying to re-establish the internet connection over a GSM modem - the mobile operator is Swisscom. He is not getting any inbound traffic, e.g. SMTP on port 25. I was just wondering if this might be blocked? -- Per Jessen, Zürich (19.3°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland.

2 2

PTR records with CNAME ?
by Per Jessen 01 Jun '18

01 Jun '18

According to RFC1034 and 2181, a PTR record using a CNAME is not permitted. I believe this to still be correct, postfix certainly doesn't work with a CNAME when it does a reverse lookup. Any comments? thanks. Per -- Per Jessen, Zürich (28.6°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland.

4 7

Fwd: [PDB Announce] PeeringDB frontend translations
by Arnold Nipper 01 Jun '18

01 Jun '18

[ Excuse x-posting ] fyi && hat jemand Lust, an einem dt. Sprachpaket mitzuarbeiten. Neben etwas Kenntnis von PeeringDB bzw. Terminologie aus dem Interconnection-Umfeld ist bissle Sprachgefühl von Vorteil. Der Umfang des Lexikons beträgt ca. 3000 - 4000 Worte. Ein großes Plsu ist natürlich, wenn bereits Erfahrungen mit i18n vorliegen. Bei Interesse bitte PM an mich. Ich koordiniere es dann gerne. Gruß Arnold -------- Weitergeleitete Nachricht -------- Betreff: [PDB Announce] PeeringDB frontend translations Datum: Thu, 31 May 2018 21:41:25 +0200 Von: Eric Loos <eric(a)ipergy.net> An: pdb-announce(a)lists.peeringdb.com Dear community, As you know in the last release of PeeringDB we introduced the capability to support language packs. Thanks to Robert Philips (NTT Communications) and Ligio Gomes (NTT Communications) we have a Portugese translation live in the system. Members from the community have already stepped up to work on an Italian and Spanish version and we will release those as soon as they are ready. If you would like to contribute to this effort by contributing your native language, you can find the instructions for doing so here: http://docs.peeringdb.com/translation/ Many thanks in advance! On behalf of PeeringDB ProductCom Eric Loos -- Arnold Nipper email: arnold(a)nipper.de mobile: +49 172 2650958

1 0

Swinog-BE166 - Beer Event 166 @ Korner / ZH
by Viktor Steinmann 28 May '18

28 May '18

Dear SwiNOGers, Burger Time! Let's have a tasty Hipster-Burger and a matching beer. Details for the next event: ----------------------------------------------- Event: Swinog-BE166 - Beer Event 166 When? Monday, 4th June 2018 18:30 Where? Korner Gartenstrasse 10, 8002 Zürich http://www.gourmetburger.ch (GoogleMaps Link: http://goo.gl/maps/ivl9b) Places available? 10 ----------------------------------------------- Registration: Start: Monday, 28th May 2018 - 08:00 Stop: Friday, 1st June 2018 - 16:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who not. If you can't attend and you're registered please inform me ASAP (078 602 95 18). Kind regards, Viktor Steinmann (aka Stony)

1 0

Re: [swinog] BGP Battleships
by Scott Weeks 23 May '18

23 May '18

--- onitake(a)gmail.com wrote: From: Gregor Riepl <onitake(a)gmail.com> Some good ol' fun with BGP: https://blog.benjojo.co.uk/post/bgp-battleships Please (don't?) try this at home! ----------------------------------------- How about at work? ;-) Mind if I share this with other tech mailing lists? scott _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

BGP Battleships
by Gregor Riepl 22 May '18

22 May '18

Some good ol' fun with BGP: https://blog.benjojo.co.uk/post/bgp-battleships Please (don't?) try this at home!

1 0

Sporadic DNS resolver error for *.mail.protection.outlook.com
by Ralf Zenklusen, BAR Informatik AG 22 May '18

22 May '18

Hi, we see sporadic DNS resolver errors for A records of *.mail.protection.outlook.com Only a few per day vs many successful lookups. Anybody else seeing these? Kind regards Ralf Ralf Zenklusen Dipl. El. Ing. HTL Leiter Internet BAR Informatik AG Weidenweg 235 3902 Brig-Glis Tel +41 27 922 48 48 www.barinformatik.ch www.rhone.ch r.zenklusen(a)barinformatik.ch

5 4

Registration extended - will close today at 22.00
by Steven Glogger 22 May '18

22 May '18

Hi everybody, Registration has been extended until 22.00 o‘clock today. Hurry up, after this date registration remains closed and late registration fee will apply. gruss -steven

1 0

ftth adoption rate
by Tobi Oetiker 18 May '18

18 May '18

Hi all I am in the process of preparing a motion in the town parliament of olten, to get an open access ftth net built. Is anyone here involved in such projects in other cities which are already established? Can you provide some numbers as to what percentage of people are actually purchasing service on the new fiber network ? cheers tobi Tobias Oetiker tobi(a)oetiker.ch 062 775 9902

1 0

IPv6 Security Expert at Swiss IPv6 Council Thursday May 17
by Silvia Hagen 13 May '18

13 May '18

Hi to all of you Joe Klein, internationally well-known security expert and specialized in IPv6 security is in Switzerland for a project. We took the opportunity to invite him to speak at the Swiss IPv6 Council. If you are interested, please join us. Thursday May 17, 6pm, Digicomp Zurich (next to main station) More info and registration: http://www.swissipv6council.ch/en/events/ipv6-security-talk-with-joe-klein The event is free for IPv6 Expert members. For all others there is an Unkostenbeitrag of CHF 20 to be paid at the entrance. I am sorry, this is so short notice. Maybe you can still make it. As usual, after the presentation and discussion which lasts until about 7.30 we will have nice Apéro riche and time for socializing. Cheers Silvia Sunny Connection AG CH-8124 Maur +41 (0)44 887 62 10 www.sunny.ch<http://www.sunny.ch/> http://twitter.com/sunny_shagen ****************************************** Switzerland is globally Number 3 in IPv6 User Adoption<http://labs.apnic.net/dists/v6dcc.html> We reached 30%, on our way to 50%! ****************************************** Think Agile, thrive in the Flow: www.flowdays.net<http://www.flowdays.net/> ****************************************** Our website is dual-stack - how about yours? ******************************************

1 0

## Agenda - SwiNOG#33 ##
by Simon Ryf 11 May '18

11 May '18

Dear SwiNOG community, Here is the final agenda for SwiNOG #33 on Thursday 24.05.2018 on top of Gurten. Registration https://register.swinog.ch (registration closes on 19.05.2018 – after that you need to pay extra fee for late reg.) We still have time for Lightning Talks (5min), if you’re up for it, you’ll get a free voucher for the next event or if submitted before 19.05.2018 – for SwiNOG#33 Agenda http://www.swinog.ch/meetings/swinog33/agenda.asp 08:15 - Registration, Coffee & Gipfeli 09:15 - Welcome, Agenda 09:20 - Segment Routing | Eugene Paraponiaris (Cisco Systems) Network simplification and automation using SRv6 (an opportunity for network stack simplification, infinite possibilities with network programming) SRv6 use cases (Fast-reroute with TI-LFA, SR-TE and Flexible Algorithms for easy 5G slicing, VPN and service chaining) Running SRv6 in your Lab today (FD.io VPP project introduction and SRv6 implementation, Create your own SRv6 function as a VPP plugin, Other open-source SRv6-capable software: Linux kernel, iptables / nftables, Snort) 10:05 - The value of Shared Research on Cyber security | Reinder Wolthuis (TNO) The three major banks in the Netherlands decided 4 years ago to join forces and start a shared research program on Cyber Security which is led by research institution TNO. In this presentation TNO will elaborate on some of the topics, how this shared research program became a success and some concrete results will be presented. 10:50 – Coffee Break 11:20 - Colocation and Connectivity - Enabler for Hybrid IT | Toan Nguyen (e-shelter) Cloud & Edge Computing, IoT and Digitization are leading to increased customer demand for agile and scalable data centers, colocation and connectivity. Data center provider must extend their capabilities and value chain to successfully support their customers and partners on their cloud and digitalization transformation. Learn how e-shelter´s advanced data center & connectivity solutions, partner eco-system and innovation lab serve as a facilitator and enabler for innovation and transformation. Become part of e-shelter’s “Home to the cloud”. 11:50 - PeeringDB Update | Arnold Nipper (PeeringDB) PeeringDB has been around for 14 years. And an entry in PeeringDB is a must have if you want to interconnect with other networks. There is no other DB where you have all the information about networks, Internet Exchange Points and Facilities/Colocation at one place and nicely interlinked. As PeeringDB is so important, a Seattle (US) based association was set up in late 2015. In March 2016 a wholly new version of PeeringDB (PeeringDB 2.0) was released with an intuitive GUI and a powerful API. This presentation gives a quick update on PeeringDB, both from organization as well as from a technical point of view and highlights the latest developments. 12:05 - SwissIX-Update| Rémy Günter (SwissIX) Traditional SwissIX Update 12:15 - Lunch 13:45 - How to get a grip on Security with Adaptive Threat Intelligence | Bryn Norton (CenturyLink) How analysing 114 billion netflow sessions every day supports your customers. Why honeypots enable you to spot new threat sources. What makes a day in the life of an experienced SOC staff member so special? Let Hadoop and Ransom Forest help your security staff to be even more efficient. Retrieving multi-angle info about all sorts of threats via a portal, email notification, export of log data or syslog feeds right into your SIEM. Render existing security infrastructure even more effective by focusing on the most threatened applications. Soon to come: get the entire end-to-end connection of a certain threat flow including URL and private IP to allow you proper and easy t-shooting 14:10 - RIPE's Support of NOGs | Alastair Strachan (RIPE) tbd 14:25 - The day we’ve been hacked | Pascal Gloor (tba) How we’ve been hacked, what were the consequences, how we found out, how we fixed it, why do people keep it secret, why you should talk about it 14:55 - Afternoon Break 15:25 - Encryption in the transport layer: QUIC, TLS1.3, and HTTP/2| Mirja Kühlewind and Brian Trammell (TIK, ETH Zürich) This presentation will outline new and encrypted protocols of the web protocol stack like HTTP/2, TLS1.3, and QUIC. The talk will first introduce the protocols and then detail new features focusing on encryption and the wire image of these protocols that is observable on the network. Finally, the talk will discuss how the increased deployment of these protocols will impact network management and measurement. 15:55 - Coding Academy for Refugees | Hussam Allaham (Powercoders) The story of Powercoders, the program details and the impact of the project 16:15 - Life beyond 750k | Fredy Künzler (Init7) BGP Traffic Engineering 16:35 - communityrack.org/community-ix.ch | Aarno Aukia (communityrack.org) Lightning Talk 16:40 - Social Event Looking forward to seeing all of you!!! Simon SwiNOG

1 0

OSS/BSS
by Matthias Hertzog 04 May '18

04 May '18

Hi folks! Not really network related, but provisioning-related, which is somehow network related as well... :-) What kind of OSS/BSS systems are you using in your companies? Self-developed? Purchased? I need these informations for internal use only, without any names. If you don't want to answer publicly, feel tree to e-mail me. To show openness in the topic: We use AGIS-OS at gga.ch (access services) and a self-developed solution at mhs.ch (hosting and access). Thanks & have a nice day, Matthias

3 2

Unabhängiges Komitee gegen Geldspielgesetz
by Claudio Luck 02 May '18

02 May '18

Salut Mitenand Kurz als Erinnerung an alle Mitglieder dieser Mailingliste. Das Crowdfunding für das unabhängige GSGnein-Komitee benötigt in den nächsten 24 Stunden noch 4'000 Franken: Das unabhängige Komitee wird sich gegen das Gesetz einsetzen, ohne von ausländischen Spielbanken finanziert zu werden. https://wemakeit.com/projects/save-the-free-internet Helft bitte mit und macht die Kampagne möglich! Vielen Dank Claudio Luck Chaos Computer Club Zürich

2 1

## preliminary agenda - SwiNOG#33 ##
by Simon Ryf 01 May '18

01 May '18

Dear SwiNOG community, Here is the preliminary agenda for SwiNOG #33 on Thursday 24.05.2018 on top of Gurten. Final agenda will get published on the 11th Registration https://register.swinog.ch If you register until this Sunday 06.05.2018 there will be a special surprise for you :-) (registration closes on 19.05.2018 – after that you need to pay extra fee for late reg.) We still have time for Lightning Talks, if you’re up for it, you’ll get a free voucher for the next event or if submitted before 19.05.2018 – for SwiNOG#33 CHF 100.- for 5 minutes (just saying…) Agenda http://www.swinog.ch/meetings/swinog33/agenda.asp (order / time – not yet defined) Sponsor Presentation - tba | tba (Cisco Systems) tba Sponsor Presentation - Colocation and Connectivity - Enabler for Hybrid IT | Toan Nguyen (e-shelter) Cloud & Edge Computing, IoT and Digitization are leading to increased customer demand for agile and scalable data centers, colocation and connectivity. Data center provider must extend their capabilities and value chain to successfully support their customers and partners on their cloud and digitalization transformation. Learn how e-shelter´s advanced data center & connectivity solutions, partner eco-system and innovation lab serve as a facilitator and enabler for innovation and transformation. Become part of e-shelter’s “Home to the cloud”. Sponsor Presentation - How to get a grip on Security with Adaptive Threat Intelligence | Bryn Norton (CenturyLink) How analysing 114 billion netflow sessions every day supports your customers. Why honeypots enable you to spot new threat sources. What makes a day in the life of an experienced SOC staff member so special? Let Hadoop and Ransom Forest help your security staff to be even more efficient. Retrieving multi-angle info about all sorts of threats via a portal, email notification, export of log data or syslog feeds right into your SIEM. Render existing security infrastructure even more effective by focusing on the most threatened applications. Soon to come: get the entire end-to-end connection of a certain threat flow including URL and private IP to allow you proper and easy t-shooting SwissIX-Update| Rémy Günter (SwissIX) Traditional SwissIX Update The day we’ve been hacked | Pascal Gloor (tba) How we’ve been hacked, what were the consequences, how we found out, how we fixed it, why do people keep it secret, why you should talk about it The value of Shared Research on Cyber security | Reinder Wolthuis (TNO) The three major banks in the Netherlands decided 4 years ago to join forces and start a shared research program on Cyber Security which is led by research institution TNO. In this presentation TNO will elaborate on some of the topics, how this shared research program became a success and some concrete results will be presented. tbd | Alastair Strachan (RIPE) tbd PeeringDB Update | Arnold Nipper (PeeringDB) PeeringDB has been around for 14 years. And an entry in PeeringDB is a must have if you want to interconnect with other networks. There is no other DB where you have all the information about networks, Internet Exchange Points and Facilities/Colocation at one place and nicely interlinked. As PeeringDB is so important, a Seattle (US) based association was set up in late 2015. In March 2016 a wholly new version of PeeringDB (PeeringDB 2.0) was released with an intuitive GUI and a powerful API. This presentation gives a quick update on PeeringDB, both from organization as well as from a technical point of view and highlights the latest developments. Encryption in the transport layer: QUIC, TLS1.3, and HTTP/2| Mirja Kühlewind and Brian Trammell (TIK, ETH Zürich) This presentation will outline new and encrypted protocols of the web protocol stack like HTTP/2, TLS1.3, and QUIC. The talk will first introduce the protocols and then detail new features focusing on encryption and the wire image of these protocols that is observable on the network. Finally, the talk will discuss how the increased deployment of these protocols will impact network management and measurement. tbd | Hussam Allaham (Powercoders) tbd Open Slot | Open Slot (Open Slot) Open Slot - because we haven’t mentioned it yet ;) Social Event Looking forward to seeing all of you!!! Simon SwiNOG

1 0

FW: Public Wifi and BÜPF
by _ISC-EJPD-UPF-Provid＠isc-ejpd.admin.ch 23 Apr '18

23 Apr '18

-----Original Message----- From: _ISC-EJPD-UPF-ProviderMgmt Sent: Freitag, 20. April 2018 17:18 To: Jean-Pierre Schwickerath <swinog(a)hilotec.net> Cc: swinog(a)lists.swinog.ch Subject: Public Wifi and BÜPF Dear Mr Schwickerath, Your post from 9 April to the Swinog mailing-list [1] was brought to our attention. We would like to provide you with some information about the new surveillance act (BÜPF) and answer your questions about the obligations of providers of public WLAN hotspots. We are copying the list because we believe this information might be of general interest. [1] http://lists.swinog.ch/public/swinog/2018-April/006975.html (visited 20 April 2018) The new BÜPF and its ordinances came into force on 1st March 2018. The ordinance VÜPF contains specific obligations for Telecommunications Service Providers concerning professionally operated public WLAN accesses (Art. 19 para. 2 VÜPF). In your post, you refer to information published by Digitale Gesellschaft about Public WLAN [2]. The information given in „Merkblatt Public-WLAN”, dated 16th October 2017, is outdated. [2] https://www.digitale-gesellschaft.ch/publicwlan/ (visited 20 April 2018) For information about the new law and its ordinances, please visit our website https://www.li.admin.ch/de/themen/das-neue-buepf which is available in German, French and Italian. Some information is also available in Romansh or English. There you can find the complete legal basis together with the explanatory reports. On our website we also provide a memo about professionally operated public WLAN accesses “Merkblatt WLAN”: in German: https://www.li.admin.ch/sites/default/files/2018-02/Merkblatt%20WLAN.pdf in French: https://www.li.admin.ch/sites/default/files/2018-04/Notice%20%C2%ABWLAN%C2%… in Italian: https://www.li.admin.ch/sites/default/files/2018-04/Promemoria%20%C2%ABWLAN… To respond to your questions: >> If I understand the information on the above page correctly, he doesn't need to identify his users, so he won't (and won't store any logs) and >> as a consequence he will not have any information to be stored for 6 months for the büpf. >> Is that so? The obligation to identify the end users of professionally operated public WLAN accesses with appropriate means lies with the Telecommunications Service Provider (TSP). According to your short description, the company operating the access point does not seem to qualify as Telecommunications Service Provider. However, if you would like a thorough assessment, we invite you to contact us. Please note that the obligation to identify WLAN end users is not automatically associated with data retention of all secondary data for 6 months, which is another obligation that only lies with TSP that have full surveillance obligations. >> The other question that comes to my mind: if the customer provides a captive portal to have users acknowledge a "Hausordnung" / code of >> conduct, then the APs will "store" which MAC address has checked the box. Does that make his subject to the Büpf? According to your description, your customer operates the wireless access point and shares his Internet access with the public. This activity falls within the BÜPF category „persons who make their access to a public telecommunications network available to third parties“ (Article 2 letter e BÜPF), no matter if a captive portal is provided or not. This category of persons only has passive obligations under the BÜPF, does not need to prepare anything and does not need to store data based on the BÜPF. Do not hesitate to contact us for further information. Best regards, Post and Telecommunications Surveillance Service Provider Management Team Fellerstrasse 15, 3003 Bern Tel. +41 58 463 34 29 _ISC-EJPD-UPF-Provid(a)isc-ejpd.admin.ch www.li.admin.ch

1 0

Got IPv4 ?
by Massimiliano Stucchi 19 Apr '18

19 Apr '18

Hi, some of you might have already heard that a few days ago, the RIPE NCC has run out of address space from 185/8, the last /8 entirely allocated to it. This means that now all the allocations will come from address space recovered by IANA and distributed to the RIRs over the course of the last years. There's still time to get IPv4, but the time is also coming for IPv6... :) You can find more here: https://labs.ripe.net/Members/wilhelm/so-long-last-8-and-thanks-for-all-the… Ciao! -- Massimiliano Stucchi MS16801-RIPE

1 0

Re: [swinog] OSS/BSS
by Scott Weeks 14 Apr '18

14 Apr '18

--- m.hertzog(a)mhs.ch wrote: From: Matthias Hertzog <m.hertzog(a)mhs.ch> Not really network related, but provisioning-related, which is somehow network related as well... :-) What kind of OSS/BSS systems are you using in your companies? Self-developed? Purchased? ------------------------------------------- What size of network are you talking about? Is it an ISP network? Some tools are fine for smaller and nearly non-changing networks, but are terrible for scaling to larger and quickly changing networks. scott _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

1 0

Call for Presentations European Peering Forum 13 (EPF13) / SwiNOG
by Arnold Nipper 10 Apr '18

10 Apr '18

Call for Presentations European Peering Forum 13 (EPF13) AMS-IX, DE-CIX, LINX, Netnod are happy to host the 13rd European Peering Forum (EPF) in Athens, Greece from the 17th - 19th September 2018. The event will welcome up to 300 peering managers and coordinators from networks connected to the host Internet exchanges. Besides an interesting topical agenda, the three-day event accommodates room for attendees to meet on a one-to-one basis to discuss bilateral peering business opportunities. The programme committee will be looking for presentations and lightning talks related to peering and technical topics of interconnection. Your presentation should address * Interconnection Automation * Regional Peering * Interconnection / Peering Internet Governance and Regulatory Topics * Economic and Product Trends * Peering / interconnection strategies * Interesting findings about peering / interconnection * 400GE and beyond Submissions =========== Presentations must be of a non-commercial nature. Product or marketing heavy talks are strongly discouraged. Submissions of presentations should be made to the programme committee <epf-pc(a)peering-forum.eu>. Please include: * Author's name and e-mail * Presentation title * Abstract * Slides (if available) * Time requested Deadlines ========= Presentation Abstract Deadline 16/07/2018 12:00 UTC Final Selection of Speakers 27/07/2018 Presentation Slides Submission Deadline 03/09/2018 12:00 UTC More information about the event and other activities around EPF13 may be found at * https://peering-forum.eu/ * https://www.facebook.com/groups/1486607564933665/ Viele Grüße / meilleures salutations / migliori saluti Arnold -- Arnold Nipper email: arnold(a)nipper.de mobile: +49 172 2650958

1 0

##### SwiNOG #33 - Reminder #####
by Simon Ryf 09 Apr '18

09 Apr '18

Dear SwiNOG supporter, Our Agenda is filling up but there are still open slots. Please let us know if you would like to contribute for a speech or a lightning Talk (5min). NOTE: we have a slight earlier date for the surprise. Please register until Sunday 6th. Registration https://register.swinog.ch If you register until Sunday 06.05.2018 there will be a special surprise for you :-) Call for Paper!! Please send your proposal to swinog-core(a)swinog.ch The 33rd meeting of the Swiss Network Operators Group (SwiNOG) will be held in Berne on top of the Gurten on Thursday May 24th 2018. Important Dates for SwiNOG#33 01.03.2018 Call for Papers 01.03.2018 Registration opens 30.04.2018 Call for Papers closing 01.05.2018 Publication of the preliminary Agenda 11.05.2018 Final publication of agenda 19.05.2018 Registration closes 22.05.2018 Deadline for all slides 24.05.2018 Meeting day Topics for Presentations/Talks The number and length of presentations per session is not fixed, although due to time constraints we would prefer the length of the presentations to be between 5 to 45 minutes. Here is a non-exhaustive list of typical SwiNOG meeting topics: - Security - DDOS Mitigation - AntiSpam - IPv6 - Open Source tools - International view of the internet (incidents, outages, measurements) - Routing - Server applications (DNS, Web, etc.) - Legal issues (B‹PF, etc.) - Telecommunication politics (Net Neutrality, Incumbent monopoly, etc.) -> PLEASE feel free to talk to us about any kind of topic and collaboration!!! You can always start a discussion on the list - I'm sure people join in. Language of Slides and Talks The whole day will be held in English, therefore we kindly ask you to produce your presentation in English. Submission Guidelines All submissions must have a strong technical bias and must not be solely promotional for your employer. Please remember that your presentations should be suitable for a target audience of technicians from varied backgrounds, working for companies whose sizes may vary considerably. To submit a proposal for a presentation, we request that you provide the following information to <swinog-core at swinog.ch>: * the name of the presenter (and if applicable your affiliation) * a working email-address * the name and number of the topic which will contain the presentation * the title of the presentation * its expected length (in minutes) * a short abstract of the presentation (so we know what it is about) We also welcome suggestions for specific presentations which you feel would be valuable to the SwiNOG community. Please be aware that your presentation will be published on the SwiNOG website after the event. We can publish modified slides if requested - it might be that some confidential data will be presented by you which are not intended for publication on the internet. Greetings, Simon Ryf SwiNOG Core Team General Information (SwiNOG Community) The Swiss Network Operators Group (SwiNOG) is an informal group of people who are concerned with engineering and operation of the Swiss Internet. SwiNOG exists to enhance the quality of Internet services available in Switzerland. It does this by fostering the free exchange of technical ideas and information between different companies and organisations. SwiNOG is a community for professionals who are operating, designing or researching the Internet. It provides a technical forum where those working on, with and for the Internet can come together to solve problems with every aspect of their (net)work. The meeting is designed to provide an opportunity for the exchange of information among network operators, engineers, researchers and other professionals close to the network community. More information about SwiNOG can be found at http://www.swinog.ch , Facebook, Xing, Information about the meeting will be published at http://www.swinog.ch/meetings/swinog33 General Information (SwiNOG Organisation) The SwiNOG Organisation Association is a non-profit association under article 60 and further of the swiss civil law. It manages the SwiNOG community resources (domain, web, mailing-lists, etc..) and organises SwiNOG meetings. Contact: SwiNOG Organisation 8000 Zurich Switzerland

1 0

Help with DNSSEC issue... (bncr.fi.cr)
by Benoit Panizzon 09 Apr '18

09 Apr '18

Hi List Usually I have no problems identifying DNSSEC issues, but I don't get this one. Our two main caching DNS Servers run bind 9.11.2-P1, after flushing the cache and even restarting still see an issue with this domain: 09-Apr-2018 09:28:25.934 no valid RRSIG resolving 'ns2.bncr.fi.cr/DS/IN': 201.220.29.22#53 09-Apr-2018 09:28:26.111 no valid RRSIG resolving 'ns2.bncr.fi.cr/DS/IN': 201.220.29.151#53 09-Apr-2018 09:28:26.111 no valid DS resolving 'ns2.bncr.fi.cr/AAAA/IN': 201.220.29.22#53 09-Apr-2018 09:28:26.111 no valid DS resolving 'ns2.bncr.fi.cr/A/IN': 201.220.29.22#53 09-Apr-2018 09:28:26.286 broken trust chain resolving 'ns2.bncr.fi.cr/A/IN': 201.220.29.151#53 https://en.internet.nl/site/www.bncr.fi.cr/199938/ => DNSSEC Valid http://dnsviz.net/d/www.bncr.fi.cr/dnssec/ => No issues Doing the same test via a 9.10.3-P4-Debian with Validation enabled, works fine. Retrieving any +dnssec with dig shows there is an RRSIG for those entries. Does anyone have an idea what the cause of this issue could be? Maybe an algo which Bind 9.10 understands (or does not and therefore skipps testing) but 9.11 not? The log of bind 9.10 looks like the validation did succeed thou... Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 2

Public Wifi and BüPF
by Jean-Pierre Schwickerath 09 Apr '18

09 Apr '18

Dear colleagues I'd like to ask if anyone can confirm that the information published on https://www.digitale-gesellschaft.ch/publicwlan/ is accurate in regards to being subject to "Überwachungspflichten gemäss BÜPF". We have been asked by a customer to sell him a Wifi-Installation for his café. We are going to sell him the hardware and do the one time installation. Afterwards the customer is running the infrastructure himself, he might ask us for help for firmware upgrades and similar tasks but we are not going to run that Wifi as a service or do any monitoring. If I understand the information on the above page correctly, he doesn't need to identify his users, so he won't (and won't store any logs) and as a consequence he will not have any information to be stored for 6 months for the büpf. Is that so? The other question that comes to my mind: if the customer provides a captive portal to have users acknowledge a "Hausordnung" / code of conduct, then the APs will "store" which MAC address has checked the box. Does that make his subject to the Büpf? Thank you very much for your input on this topic. Best Regards Jean-Pierre -- HILOTEC Engineering + Consulting AG - Langnau im Emmental IT für KMUs: Netzwerke, Server, PCs, Linux, Telefonanlagen, VOIP, Hosting, Datenbanken, Entwicklung, WLAN, Cloud, Firewalls Tel: +41 34 408 01 00 - https://www.hilotec.com/

2 1

GMX Mail
by Rony Spitzer 03 Apr '18

03 Apr '18

Hello Everybody Someone here from gmx that can contact me offlist ? Its about an email issue with one domain from our server. Thank you Kind Regards datastrom.ch We connect you datastrom.ch / Rony Spitzer Rony Spitzer Grieshalde 5 8253 Diessenhofen https://www.datastrom.ch<https://www.datastrom.ch/> UID : CHE-158-893-161 ASN 52177 as52177.net Rackspace for Education ? http://www.giganet.ch<http://www.giganet.ch/>

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog