- swinog - vmaill01.sys

Re: [swinog] Outbound Spam Filtering
by Gregory Agerba 25 Jan '13

25 Jan '13

Hi Jeroen, Let's not start this email security discussion by being focused on the bottom line or by being cynical and say some network will not care. We all know that out there, that shouldn’t stop legitimate providers from getting their act together. Let’s keep rational and positive. Personally, I have enough resources available for protecting my network regardless of a technology or a vendor, so I do not want to take the problem by assuming how much money do I have to put on the table. The thing is, relying on a proprietary (fictional) protection appliance which filters SMTP at will, based on unknown decisions factors is probably not the way to solve issues and is probably not future-proof as the spammers tend to have a few smartass and they have their own ecosystems for acquiring new spam technology. However, if some do work brilliantly, with very little false-negative/false-positive overheads, why not give them a chance. Getting back to the business, let me describe the goal of my previous message and the current deployments we have to cover such problems. I do not talk about DPI deployment and I am solely trying to solve abused-SMTP usage. The ultimate goal here is to protect IP reputation of servers. I do not want to filter dial-in, DSL, 3G network, but a Hosting network where the SMTP server will accept authentified customers to send their emails as long as they have proper credentials. Let me describe what I call a spam in this case, because the word spam holds multiple definitions and multiple usages and hardly get everybody to agree on its meaning. To me a spam is a message which is unsolicited, by opposition to a one-to-one, one-to-many or a newsletter communications, which may or may not be wanted by the recipients, but assuming the double opt-in was done correctly, this is different and it requires administrative handling rather than technical handling. In my case, I refer to customers who get their accounts compromised (either POP/IMAP and SMTP) in their email clients such as Outlook, Thunderbird or their Web Account (FTP, HTTP) with either some malicious piece of code on their computers or compromised self-made or well-known un-updated, compromised CMS such as Joomla or home-made poorly programmed scripts. We have two types of customers. Professional customers who know what they are doing. This kind of customer has no outgoing spam issue. They add a specific tag to their outgoing email, their emails are relayed to a smarthost which strips the header and do a few tricks such as DKIM signing and ultimately relay the message into the Internet. We can assume they send clean emails, unless somebody don’t want to receive them, but we handle this by Feedback Loop and that happens with a ratio of 1:200000. In addition, these customers usually have good security measures in place and we rarely see Trojan-infected hosts within their network. For the latter, we rate-limit the number of email they can send per hour (on some hosts) we look at the type of return we get in the incoming logs and we correlate sudden bursts of outbound message and NDR. Often we can quickly workout compromised accounts and we can identify the script, by looking at the source URI of the script or the SMTP- authenticated account which we reset the password and call the customer or wait for the call. This is usually not a rocket science and it requires a lot babysitting and don’t always prevent the arm of the being RBL. It is actually way harder to protect regular, simple, customer sending an email with his email client than protecting scripts and mass-mailing customers. Now anybody who dealt with an Outgoing Spam attack have seen that spammers are not always subtle and they just try to flood any address usually within aol, gmail and hotmail with low-quality spam to help solve impotence. Shall we just provide free blue pills to just solve the issue, or are they cheaper ways to get these behaviours to trigger some mechanism that pause/drop and give a chance to resume the mailing or just drop it dead? I am not against a system which is not perfect but which can be influenced by the administrators to not reproduce mistakes. Maybe somebody has more insights to share at this point. If somebody does, they are welcome most welcome. Cheers, Gregory On 25 January 2013 12:08, Jeroen Massar <jeroen(a)massar.ch> wrote: > On 2013-01-25 11:47, Gregory Agerba wrote: > > > > Hi everybody, > > > > > > This is a call to all ISPs and Hosters which operates shared or > > private environments where outbound spam is an issue. > > > > > > > > My goal here is not to collect selfishly as many possibilities for > > myself, but to collect them and see how they can be tested, > > implemented and documented to effectively (try to) eradicate spam. If > > they tend to work better than the one I am currently working on, I > > will put together a small presentation and share the outcome. > > Maybe the best first question is then: what are you working on? > > The next question are: > - how much money do you have to burn? > - what type of network do are you looking at? > DSL / Cable / GPRS/UMTS/EDGE / etc > do devices get static IPs / dynamic IPs / NAT/CGN? > do you have logs of which IP is at which customer etc > - how do you keep in contact with your customers/users? > - what are your other constraints? > > > Everybody wants to shift the spam outside of his network > > I think you mean that you want to not want to allow spam to go outside > of your network and that you want to catch it before it leaves? > > > > and everybody knows it is easier to filter inbound spam. > > Why? Spam is spam, if you can filter it outbound you can filter it > inbound. The only thing you need to do for outbound is to force > everything through the filter and that is where the nastyness comes. > > Instead of filtering you could also have a proper and quick abuse setup, > hence the "how do you keep in contact" above. > > > It is in the interest of > > all networks and the public to effectively work and implement these > > solutions. > > Unfortunately that is where a major problem lies: not all networks care. > > There are lots of networks that do not care at all, they get paid and > that is what they care about. > > Also, the larger your operation (eg, think the size of a > Cablecom/Swisscom) the more costly it is to stop and resolve spam from > leaving your network, either because one has to force those customers > through a filter/rate-limit setup or because contacting them all is costly. > > Note that are residential ISPs who set up walled-garden approaches, thus > at first strike mail the customer, second strike call the customer, > third strike put them in a walled garden so they get a nice webpage > telling them how bad they are. > > But depending on the contract they have you might not be able to pull > that off, also VoIP can be an issue when you block them that way. > > Oh, and when you force them through a SMTP filter it is very nice to > actually tell that to your customers, something that for instance > Swisscom still has not done and it is still impossible to find that they > are do, there is www.swisscom.ch/p25/ but that contains no details > whatsoever nor have they actually informed customers that they where > changing their internet connectivity to a filtered type. > > Let alone wondering what the heck they imply with > > "Aside from the spam filter for all Bluewin e-mail accounts, Swisscom > has started operating an additional spam filter on the DSL network. This > filter now also checks e-mail from free e-mail providers such as GMX, > Google Mail and Hotmail if the e-mail is sent from a Swisscom connection." > > Does that mean they sniff port 80 and 443 too so they can filter > GMX/Gmail/Hotmail or do they just mean port 25 (likely, but not sure) > > "As a result of the introduction of the new spam filter, e-mail that is > sent with SMTP authentication via port 25 can no longer be sent." > > Intercepting IP traffic is such a bad precedence for an ISP (because, > then they can also do that to other ports/protocols/IPs etc) and the > question of course also still is if that is even LEGAL in Switzerland... > > > > At the end of the research, I will get in touch with every contributor > > which had a concept, an idea or a working solution and see if and how > > they want to be credited within the document. To avoid useless noise, > > I will suggest sending me your suggestions off-list. > > It would be nice if you would start with explaining what you already > have, as then people can add to that. > > Greets, > Jeroen > > >

2 2

Outbound Spam Filtering
by Gregory Agerba 25 Jan '13

25 Jan '13

Hi everybody, This is a call to all ISPs and Hosters which operates shared or private environments where outbound spam is an issue. My goal here is not to collect selfishly as many possibilities for myself, but to collect them and see how they can be tested, implemented and documented to effectively (try to) eradicate spam. If they tend to work better than the one I am currently working on, I will put together a small presentation and share the outcome. Everybody wants to shift the spam outside of his network and everybody knows it is easier to filter inbound spam. It is in the interest of all networks and the public to effectively work and implement these solutions. At the end of the research, I will get in touch with every contributor which had a concept, an idea or a working solution and see if and how they want to be credited within the document. To avoid useless noise, I will suggest sending me your suggestions off-list. Cheers,- Gregory

1 0

SwiNOG-BE116 - Beer Event 116 @ Restaurant Walliser Keller / ZH
by Steven Glogger 09 Jan '13

09 Jan '13

Dear SwiNOGers, It's fondue time @ SwiNOG! Lets start the year with something really swiss :) Detals for the next event: ----------------------------------------------- Event: SwiNOG-BE116 - Beer Event 116 When? Monday, 14th January 2013 18:30 Where? Restaurant Walliser Keller Zähringerstrasse 21, 8001 Zürich http://www.walliser-keller.ch (GoogleMaps Link: http://goo.gl/maps/3RxhG) !! Please sign up if you're really coming - because the seats are limited! !! ----------------------------------------------- Registration: Start: Wednesday, 9th January 2013 - 02:00 Stop: Sunday, 13th January 2013 - 12:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who not. If you can't attend and you're registered please inform me ASAP (+41 79 277 92 35). greetings Steven Glogger ps: drop me an email in case the registration is not working... it's new :)

1 0

Sun Fire V20z
by Adrian Wiesmann 04 Jan '13

04 Jan '13

Hi list I am giving away two Sun Fire V20z AMD Opteron based 1HU servers with different configurations both with slide rails. First come first served, although I prefer to give them to hackerspaces, OSS projects, you get it. Contact me off-list for details. Cheers, Adrian

1 0

Re: [swinog] Data Centre near Bern
by Alex HM 29 Dec '12

29 Dec '12

Hi Andreas, I can't resist answering this one, although it is a lot of noise. Let's assume Bern is at the center of the circle and you are within 100 km distance from each ends, that's maximum 50 km away. If you can't make 50 km in 30 minutes, then you've got a serious mobility issue. As for serious replies, I'll look all of them one by one when I get a few of them. Bests Alex 2012/12/28 Andreas Rutishauser <andreas(a)macandreas.ch> > Salut Alex > > > At 21:39 Uhr +0100 28.12.2012, Alex HM wrote: > > within 100km circle area of Bern (maximum 30 minutes from Bern by car). >> > > you seem to be a good customer of the police then ;-) > > SCNR > > Andreas > -- > MacAndreas Rutishauser, <http://www.MacAndreas.ch> > EDV-Dienstleistungen, Hard- und Software, Internet und Netzwerk > Beratung, Unterstuetzung und Schulung > <mailto:andreas@MacAndreas.ch>**, Fon: 044 / 721 36 47 >

2 1

Data Centre near Bern
by Alex HM 28 Dec '12

28 Dec '12

Hello, I am looking for a Data Center (Tier II or Tier III) within 100km circle area of Bern (maximum 30 minutes from Bern by car). The price target is 40 CHF per U with 100 watt redundant power or 1760 CHF for a full rack with 4kW power. We need to be able to lit the DC at reasonable costs. I heard Interoute and Sunrise have DC facilities nearby, so if they are interested. Other private DCs are welcome to bid. Zurich DCs are not an option. Bests, -- Alex

2 1

Beer-Event Calendar 2013 @ Zurich
by Steven Glogger 27 Dec '12

27 Dec '12

hi there, i'm glad to announce already the dates for BE116-127 ,-) Event | Date & Time ----------------------------------------------------- SwiNOG-BE116 | 14.01.2013 18:30 SwiNOG-BE117 | 04.02.2013 18:30 SwiNOG-BE118 | 04.03.2013 18:30 SwiNOG-BE119 | 01.04.2013 18:30 SwiNOG-BE120 | 06.05.2013 18:30 SwiNOG-BE121 | 03.06.2013 18:30 SwiNOG-BE122 | 01.07.2013 18:30 SwiNOG-BE123 | 05.08.2013 18:30 SwiNOG-BE124 | 02.09.2013 18:30 SwiNOG-BE125 | 07.10.2013 18:30 SwiNOG-BE126 | 04.11.2013 18:30 SwiNOG-BE127 | 02.12.2013 18:30 i've attached a zip file with all the calendar entries for your favorite calendar application. hope this will work for you. those *.ics files are supposed to be RFC conform - even my outlook feeds them in correctly ,-) if this is not working for you: type it yourself in your $calendarapplication. greetings & happy new year to you all, -steven

1 0

mxzhh.bluewin.ch: incorrect SMTP prompt at the host
by ralf.zenklusen＠barinformatik.ch 21 Dec '12

21 Dec '12

Hi, anybody else having problems to send emails to bluewin? Regards Ralf --- BAR Informatik AG Gliserallee 16 3902 Brig-Glis rz(a)bar.ch

1 0

Swisscom Wholesale
by Nicolas Strina 18 Dec '12

18 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Can someone from Swisscom Wholesale contact me offlist ? Got this nice message from your website (Trying to get some information (contact form)): Oops... Error 500 Unfortunately, the service is currently not available. Regards, - -- Nicolas STRINA Jaguar Network Switzerland 19 Boulevard Georges Favon CH - 1204 Geneva More Than Your Hosting Company Tel : +33 4 88 00 65 16 Gsm : +33 6 18 20 49 55 Std : +41 8 40 65 61 11 Fax : +33 4 88 00 65 25 URL: <http://www.jaguar-network.ch/> Support 24+7 : support(a)jaguar-network.ch -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDQaMkACgkQhVupqbmzosdhrACdEKTEGLw7DZg5Wboraw6WjOif 0EQAoIXL1uAgOKrYYHmcBLIKDyS0h28L =Wf+w -----END PGP SIGNATURE-----

1 0

Cisco ethernet card
by ralf.zenklusen＠barinformatik.ch 18 Dec '12

18 Dec '12

Hi, I'm looking for an ethernet card for a 2821 Cisco router. E.g. HWIC-1FE HWIC-2FE HWIC-1GE-SFP GLC-T= Anybody having some spare parts they want to get rid off? Pleas contact me directly. Thank you Ralf Zenklusen

1 0

Looking for a new mailsystem
by Michael Richter 18 Dec '12

18 Dec '12

Hi there We are looking for a new mailsystem can anyone recommend a swiss company who can deliver us an open source mail system also with support? It should be open source based. We have over 13'000 mailboxes, for me these are a lot, for others it's tiny :-) We aren't having enough men-power to build such a system ourself. I'm glad for every response thanks michael Freundliche Grüsse sasag Kabelkommunikation AG Michael Richter dipl. Techniker HF Mühlenstrasse 21 8201 Schaffhausen mrichter(a)sasag.ch 052 633 01 71 www.sasag.ch

4 3

Fwd: [dns-operations] Advisory — D-root is changing its IPv4 address on the 3rd of January.
by Matthias Leisi 14 Dec '12

14 Dec '12

---------- Forwarded message ---------- From: Jason Castonguay <castongj(a)umd.edu> Date: Thu, Dec 13, 2012 at 11:54 PM Subject: [dns-operations] Advisory — D-root is changing its IPv4 address on the 3rd of January. To: castongj(a)umd.edu -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory — D-root is changing its IPv4 address on the 3rd of January. This is advance notice that there is a scheduled change to the IPv4 address for one of the authorities listed for the DNS root zone and the .ARPA TLD. The change is to D.ROOT-SERVERS.NET, which is administered by the University of Maryland. The new IPv4 address for this authority is 199.7.91.13 The current IPv6 address for this authority is 2001:500:2d::d and it will continue to remain unchanged. This change is anticipated to be implemented in the root zone on 3 January 2013, however the new address is currently operational. It will replace the previous IP address of 128.8.10.90 (also once known as TERP.UMD.EDU). We encourage operators of DNS infrastructure to update any references to the old IP address, and replace it with the new address. In particular, many DNS resolvers have a DNS root “hints” file. This should be updated with the new IP address. New hints files will be available at the following URLs once the change has been formally executed: http://www.internic.net/domain/named.root http://www.internic.net/domain/named.cache The old address will continue to work for at least six months after the transition, but will ultimately be retired from service. - -- Jason Castonguay Network Integration Software Engineer Division of Information Technology University of Maryland College Park, MD 20742 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDKXLEACgkQA5NiLuECHn4lRQCgoOlYQhq+kXk2Az3nPeN1hUfz 0e4AoKCwp0cLpABJFc/7RV5E/ecfWwoJ =ktnM -----END PGP SIGNATURE----- _______________________________________________ dns-operations mailing list dns-operations(a)lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

1 0

Someone interested in 2x Foundry Fastiron SX800
by sbolliger＠bolligerns.ch 13 Dec '12

13 Dec '12

Hi all If someone is interested in 2x Foundry Fastiron SX800 for a good prise please send me a message. We have 2 FastIron Chassis SX800 4 Power supply 4 FISP module - Switch Fabric 4 FI 2xGMR4 2 SX-FI424F 8 SX-FI424C Regards Sandro Bolliger Mail: sbolliger(a)bolligerns.ch

1 0

[Jobs] Premaccess / Systems Engineer
by Claude Petit-Jean 13 Dec '12

13 Dec '12

Dear All, The Premaccess technical team keeps on growing! We currently look for a systems engineer in Fribourg/Freiburg in order to manage our high availability hosting infrastructure. Don't hesitate if you or someone you know may be interested! Job offer: http://www.premaccess.com/tl_files/premaccess/infos/Premaccess-Offre_Ingeni… Have a good day! Best regards, ____________________________________________________________________________________________ Claude Petit-Jean E-mail : cpetitjean(a)premaccess.com Mobile : +49 (0)171 95 82 725 Fixe : +41 44 586 77 74 premaccess sàrl Route des Arsenaux 41 - CP 132 CH-1705 Fribourg, Suisse http://www.premaccess.com ____________________________________________________________________________________________ Attention : le présent message et toutes les pièces jointes sont confidentiels et établis a l'attention exclusive du ou des destinataire(s) indique(s). Toute autre diffusion ou utilisation non autorisée est interdite. Si vous recevez ce message par erreur, veuillez immédiatement en avertir l'expéditeur par e-mail en retour, détruire le message et vous abstenir de toute référence aux informations qui y figurent afin d'éviter les sanctions attachées a la divulgation et a l'utilisation d'informations confidentielles. Les messages électroniques sont susceptibles d'altération. Nous déclinons toute responsabilité en cas d'altération ou de falsification du présent message. Warning : this e-mail and any files attached are confidential and intended solely to the named addressee(s). Any unauthorised dissemination or use is strictly prohibited. If you received this e-mail in error, please immediately notify the sender by reply e-mail and then delete the e-mail from your system. Please do not copy, use or make reference to it for any purpose, or disclose its contents to any person : to do so could expose you to sanctions. E-mails can be altered or falsified. We shall not be liable for any alteration or falsification on this e-mail.

1 0

Connection problems with mailbk.cybernet.ch
by Mike Kellenberger 13 Dec '12

13 Dec '12

Could someone from Swisscom contact me off-list, please? Thx! Mike -- Mike Kellenberger | Escapenet GmbH www.escapenet.ch +41 52 235 0700/04 Skype mikek70atwork

1 0

Cogent routing to AS44038 / AS3303
by Matias Meier 12 Dec '12

12 Dec '12

Good evening Swinog If someone from Swisscom / Bluewin is reading here: I know about at least three announced subnets on AS44038 / AS3303: 188.62.0.0/15 178.192.0.0/14 85.0.0.0/14 I think there is some routing issue. All three subnets gets routed very different since 1-2 weeks from cogent zurich, see the traceroutes made from cogent looking glass router in zurich: traceroute to 178.192.0.0 (178.192.0.0), 30 hops max, 60 byte packets 1 te2-2.3.ccr01.zrh01.atlas.cogentco.com (130.117.254.113) 145.741 ms 145.737 ms 2 i79tix-005-xe0-3-3.bb.ip-plus.net (164.128.22.149) 0.255 ms 0.267 ms 3 i00sgx-005-pos2-0.bb.ip-plus.net (138.187.129.144) 0.659 ms 0.763 ms 4 i79zhb-025-hu4-0-0.bb.ip-plus.net (138.187.129.143) 2.892 ms 2.899 ms 5 1-220-3-213.bluewin.ch (213.3.220.1) 1.054 ms 1.139 ms 6 10-218-3-213.bluewin.ch (213.3.218.10) 1.077 ms 0.837 ms traceroute to 85.0.0.0 (85.0.0.0), 30 hops max, 60 byte packets 1 te2-2.3.ccr01.zrh01.atlas.cogentco.com (130.117.254.113) 0.352 ms 0.355 ms 2 te3-7.ccr01.lys01.atlas.cogentco.com (154.54.73.177) 8.018 ms te2-4.ccr01.lys01.atlas.cogentco.com (130.117.3.193) 8.033 ms 3 te3-2.ccr01.gnb01.atlas.cogentco.com (130.117.48.214) 9.542 ms 9.549 ms 4 te2-1.ccr01.gva01.atlas.cogentco.com (154.54.39.233) 13.354 ms 13.363 ms 5 swisscom.gva01.atlas.cogentco.com (130.117.14.54) 11.861 ms 11.873 ms 6 i68geb-025-bun14.bb.ip-plus.net (138.187.129.14) 18.959 ms 18.968 ms 7 i79zhb-025-ten0-9-0-8.bb.ip-plus.net (138.187.129.154) 8.624 ms i79zhb-025-bun4.bb.ip-plus.net (138.187.129.37) 12.166 ms 8 5-220-3-213.bluewin.ch (213.3.220.5) 8.746 ms 8.756 ms 9 14-218-3-213.bluewin.ch (213.3.218.14) 9.636 ms 8.619 ms BAD ROUTING (over foreign countries, high latency): traceroute to 188.62.0.0 (188.62.0.0), 30 hops max, 60 byte packets 1 te2-2.3.ccr01.zrh01.atlas.cogentco.com (130.117.254.113) 0.414 ms 0.414 ms 2 te3-1.ccr01.str01.atlas.cogentco.com (130.117.1.113) 3.302 ms te1-2.ccr01.str01.atlas.cogentco.com (130.117.3.13) 3.319 ms 3 te0-0-0-7.ccr21.muc01.atlas.cogentco.com (130.117.3.78) 6.381 ms 6.411 ms 4 te0-2-0-2.ccr21.vie01.atlas.cogentco.com (154.54.73.230) 12.630 ms 12.638 ms 5 62.157.248.57 (62.157.248.57) 62.245 ms 62.226 ms 6 217.239.40.230 (217.239.40.230) 69.447 ms 217.239.39.22 (217.239.39.22) 69.035 ms 7 80.157.130.222 (80.157.130.222) 72.955 ms 72.969 ms 8 i79zhb-025-bun11.bb.ip-plus.net (138.187.129.106) 68.502 ms 68.480 ms 9 1-220-3-213.bluewin.ch (213.3.220.1) 68.514 ms 68.471 ms 10 10-218-3-213.bluewin.ch (213.3.218.10) 68.110 ms 68.067 ms Wish you a nice evening and sorry for my bad english. -Matias

3 2

Fwd: AccessPolicy to swisstime.ethz.ch changed to ClosedAccess
by Steven Glogger 11 Dec '12

11 Dec '12

FYI, we've received such a message... -steven Anfang der weitergeleiteten Nachricht: > Von: "Wittmann Armin" <awittmann(a)ethz.ch> > Betreff: AccessPolicy to swisstime.ethz.ch changed to ClosedAccess > Datum: 11. Dezember 2012 09:01:06 MEZ > An: ID.NET.Hostmaster <hostmaster(a)ethz.ch> > > Dear Hostmaster, dear network responsible > > You are receiving this notification because devices in your network are using the ntp-Service of swisstime.ethz.ch and you are among the most frequent users (several 10 MB data per day). The usage of swisstime.ethz.ch has been increasing constantly over the years and has reached a state that would require additional specialized hardware to support the millions of sessions. The board of ICT-Services of ETH Zürich decided not to spend this money for new devices but to block the access to the server in the near future. > > For this reason the Access Policy of swisstime.ethz.ch has been changed to "Closed Access" > http://support.ntp.org/bin/view/Servers/SwisstimeEthzCh > and you are kindly requested to use other ntp-Services provided by the internet for free - > we recommend using the public ntp-Pool > http://www.pool.ntp.org/en/ > > We intend to block the access to swisstime.ethz.ch in June 2013. > > Do not hesitate to contact me for further questions. > Kind regards > Armin Wittmann > > Dr. Armin Wittmann > ETH Zürich - Informatikdienste - ICT-Networks > Division Head > Weinbergstrasse 43 - WET B3 > CH-8092 Zürich - Switzerland > Tel.: +41 44 632 50 15 > Fax: +41 44 632 11 66 > E-Mail: awittmann(a)ethz.ch > > >

3 4

some one interested in NI-MLX-1Gx20 cards
by Michael Richter 04 Dec '12

04 Dec '12

Hi I have two used Brocade NI-MLX-1Gx20-GC which I will sell. If someone is interested please send me a mail. I checked the compatiblity and this card should run in the following devices: - MLX (SFM and hSFM) - MLXe with MLX or MR2 MGMT Freundliche Grüsse sasag Kabelkommunikation AG Michael Richter dipl. Techniker HF Mühlenstrasse 21 8201 Schaffhausen mrichter(a)sasag.ch 052 633 01 71 www.sasag.ch

1 0

SwiNOG-BE116 cancelled
by Roman Hochuli 01 Dec '12

01 Dec '12

Dear all We are sorry to announce that for various reasons BE116 has to be cancelled. Looking forward to see you all again in 2013 for the Fondue-Event in January. -- Best regards, Roman Hochuli Sent from my iPhone

1 0

SwiNOG-BE116 cancelled
by Roman Hochuli 01 Dec '12

01 Dec '12

Dear all -- Best regards, Roman Hochuli Sent from my iPhone

1 0

Internet Society Delegation to Attend World Conference on International Telecommunications in Dubai, 3-14 December 2012
by Jeroen Massar 30 Nov '12

30 Nov '12

On the subject of that ITU thing... -------- Original Message -------- Internet Society Delegation to Attend World Conference on International Telecommunications in Dubai, 3-14 December 2012 More than 50 members of the Internet Society global community will participate [Washington, D.C. and Geneva, Switzerland – 30 November 2012] – An Internet Society delegation will attend the World Conference on International Telecommunications (WCIT) in Dubai, 3-14 December 2012. WCIT is a global treaty conference hosted by the International Telecommunication Union (ITU) where 193 ITU Member States come together to discuss and modify the International Telecommunications Regulations (ITRs). Approximately 50 members of the Internet Society global community will attend the meetings. As a Sector Member of the ITU Telecommunication Standards and Telecommunication Development Sectors, the Internet Society submitted a statement to the ITU as part of the WCIT public consultation. The statement can be found here: http://www.internetsociety.org/doc/WCITSubmissionOctober2012. The Internet Society remains hopeful that the ITU Member State delegations to the WCIT will agree to a treaty that enhances rather than restricts international telecommunications. The Internet Society and its Board of Trustees believe that any revisions to the ITRs should: * Reinforce Member States’ commitment to open, transparent, and inclusive policy-making processes; * Enshrine a commitment to open, voluntary international standards; * Enable continued innovation; * Emphasize policy approaches such as competition, liberalization, and transparency; * Be based on thorough technical and socio-economic analysis; and * Retain the high-level nature of the ITRs. The Internet Society delegation looks forward to having opportunities to interact with Member State delegations during the course of the Conference and to a successful outcome of the WCIT. For more information on WCIT, visit http://internetsociety.org/wcit. http://www.internetsociety.org/news/internet-society-delegation-attend-worl…

1 0

(secret) ITU conference in Dubai: Swiss Delegation?
by Fredy Kuenzler 29 Nov '12

29 Nov '12

Does anyone know the Swiss delegate of the upcoming ITU conference in Dubai? It would be appropriate if the delegate of our democratic country actually has a known face and we all know how he/she is going to vote. The topics in this conference are a real threat to the Internet we know and love (refer to the SwiNOG #25 slides of Arnold). If you are not familiar yet with the topic, watch (and share) this website and video: https://www.whatistheitu.org/ http://www.youtube.com/watch?v=XzNQarkk95Q Regards, Fredy Künzler / Init7

6 7

20.000 Cables under the Ocean
by Andre Oppermann 26 Nov '12

26 Nov '12

A very interesting report on ARTE about undersea cables. Visiting a cable repair ship, cable manufacturing, and so on... Available in German and French (43 Minutes): http://videos.arte.tv/de/videos/20-000-kabel-unter-dem-meer--7062114.html http://videos.arte.tv/fr/videos/20-000-cables-sous-les-mers--7062114.html Available for watching until Wednesday 17:00. -- Andre

2 1

Re: [swinog] Yet another "need hardware now" - 100mbit SFP
by vwatson＠dancendrumarts.com 22 Nov '12

22 Nov '12

Silvan: Well, you said you had the all SFP switch with the 2 gig uplinks completing the ring of 5 switches and having only 24 Fast Ethernet ports with SFP capability available....how were you intending to use these ports ? Why do you say your cpe devices are not appropriate? Also are the ring of switches all the same make/model? What are the 24 100mbit ports on that last switch NOT doing? Please bring some more details of your plan if you would. Are all switches running same config and IOS verson and feature set? Regards, Vinnie -----Original Message----- From: Silvan Gebhardt [mailto:gebhardt@openfactory.ch] Sent: Thursday, November 22, 2012 02:37 PM To: vwatson(a)dancendrumarts.com Cc: swinog(a)swinog.ch, 'Frederic Gargula' Subject: Re: [swinog] Yet another "need hardware now" - 100mbit SFP -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1so basically what I have is the all SFP Switch, with 24 Fibre Ports onFastEthernet and 2 Gigabit Ports. Gigabit is all taken since we have 5switches in a ring.Therefore I have some situation where my CPE is not appropriate and Iwanted to use SX or LX fibre there. 1000BASE TX do not work.BestSilvanAm 22.11.2012 13:08, schrieb vwatson(a)dancendrumarts.com:> Frederic:> > You are quite right, I stand corrected! The 3400g-2cs has only two > 10/100/1000 ports and the 3400g-12cs has 12 such ports. My main> point was that these switches support SFP on other than uplink> ports and the me 3400-24ts does not. Thanks for the correction.> Best Regards,> > Vinnie> > > -----Original Message----- *From:* Frederic Gargula> [mailto:frederic.gargula@ip-max.net] *Sent:* Thursday, November 22,> 2012 12:03 PM *To:* vwatson(a)dancendrumarts.com *Cc:* 'Silvan> Gebhardt', swinog(a)swinog.ch *Subject:* Re: [swinog] Yet another> "need hardware now" - 100mbit SFP> > Hello, ME 3400G-2CS has only 2 10/100/1000 ports. Best regards,> Frederic Gargula IP-Max On Nov 22, 2012, at 11:58 AM,> vwatson(a)dancendrumarts.com wrote: > Hi Silvan: > > Hope you are> doing well. It looks like there is only one model of these switches> that supports SFP on the 100mbit ports. That model is ME 3400-24FS.> It supports SFP on the 100mbit ports and on the 2 gbit uplink> ports. > > The other switch from this platform that has only> 10/100mbit ports (ME 3400-24TS) only supports SFP on the 2 gigabit> uplink ports. > > The remainder of the switches in this series:>>> ME 3400G-12CS > ME 3400G-2CS > > Both have 24 10/100/1000 Dual> purpose ports that support SFP and RJ45. I hope this helps. Best > Regards, > > Vinniw Watson > > > -----Original Message----- >> From: Silvan Gebhardt [mailto:gebhardt@openfactory.ch] > Sent:> Thursday, November 22, 2012 10:54 AM > To: swinog(a)swinog.ch >> Subject: [swinog] Yet another "need hardware now" - 100mbit SFP > >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Folks, I have an> ME3400. I need SFP that work on the 100mbit ports, I need 1x LX 2x> SX OR: 3x 100mbit Copper please note, the fastethernet ports on> this switch do not accept the 100BASE-SX or LX from cisco at all.> anyone that can help me out with SFP that work in that cisco switch> please contact me offlist with a good offer. Best Silvan -----BEGIN> PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment:> Using GnuPG with undefined - http://www.enigmail.net/ > iEYEARECAAYFAlCt9msACgkQC82WwYR1u2qv/ACgm/SF7Q5hyfEDPlnlqybLbhVo > x0sAn1tVIo2VXa0HZyYlKbNo/zxv0l3J =zFfO -----END PGP SIGNATURE-----> > _______________________________________________ > swinog mailing> list > swinog(a)lists.swinog.ch > > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog-----BEGIN PGP SIGNATURE-----Version: GnuPG v1.4.11 (GNU/Linux)Comment: Using GnuPG with undefined - http://www.enigmail.net/iEYEARECAAYFAlCuKqwACgkQC82WwYR1u2ockwCfbeUrmdfFo6w… PGP SIGNATURE-----

2 1

Re: [swinog] Yet another"needhardwarenow"- 100mbit SFP
by vwatson＠dancendrumarts.com 22 Nov '12

22 Nov '12

Frederic: You are quite right, I stand corrected! The 3400g-2cs has only two 10/100/1000 ports and the 3400g-12cs has 12 such ports. My main point was that these switches support SFP on other than uplink ports and the me 3400-24ts does not. Thanks for the correction. Best Regards, Vinnie -----Original Message----- From: Frederic Gargula [mailto:frederic.gargula@ip-max.net] Sent: Thursday, November 22, 2012 12:03 PM To: vwatson(a)dancendrumarts.com Cc: 'Silvan Gebhardt', swinog(a)swinog.ch Subject: Re: [swinog] Yet another "need hardware now" - 100mbit SFP Hello,ME 3400G-2CS has only 2 10/100/1000 ports.Best regards,Frederic GargulaIP-MaxOn Nov 22, 2012, at 11:58 AM, vwatson(a)dancendrumarts.com wrote:> Hi Silvan:> > Hope you are doing well. It looks like there is only one model of these switches that supports SFP on the 100mbit ports. That model is ME 3400-24FS. It supports SFP on the 100mbit ports and on the 2 gbit uplink ports. > > The other switch from this platform that has only 10/100mbit ports (ME 3400-24TS) only supports SFP on the 2 gigabit uplink ports.> > The remainder of the switches in this series:> > ME 3400G-12CS> ME 3400G-2CS> > Both have 24 10/100/1000 Dual purpose ports that support SFP and RJ45. I hope this helps. Best Regards,> > Vinniw Watson> > > -----Original Message-----> From: Silvan Gebhardt [mailto:gebhardt@openfactory.ch]> Sent: Thursday, November 22, 2012 10:54 AM> To: swinog(a)swinog.ch> Subject: [swinog] Yet another "need hardware now" - 100mbit SFP> > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Folks, I have an ME3400. I need SFP that work on the 100mbit ports, I need 1x LX 2x SX OR: 3x 100mbit Copper please note, the fastethernet ports on this switch do not accept the 100BASE-SX or LX from cisco at all. anyone that can help me out with SFP that work in that cisco switch please contact me offlist with a good offer. Best Silvan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlCt9msACgkQC82WwYR1u2qv/ACgm/SF7Q5hyfEDPlnlqybLbhVo x0sAn1tVIo2VXa0HZyYlKbNo/zxv0l3J =zFfO -----END PGP SIGNATURE----- > _______________________________________________> swinog mailing list> swinog(a)lists.swinog.ch> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog