- swinog - vmaill01.sys

Are there any facts around?
by Christoph Hunziker 2 01 Oct '10

01 Oct '10

Hello Matthias Yes, i have a some facts. Since about 17.09.2010 we can't receive alert mails from our older routers behind bluewin ADSL. We can't use SMTP AUTH on this devices so the messages are picked up from the transparent-port-25-proxy. After some testing with telnet we see the following: After the RCPT TO: .... the proxy answers (after 30 or more sec) with "451 Unable to contact remote system". In general the answers to the SMTP-Commands are very slow. The device gets random one of the bluewin trans proxy servers zh(x)dzsmp-nwas(nn).bluewin.ch. (x = h or b, nn=11,12,...,17,18 or more) If we get the zhbdzmsp-nwas17.bluewin.ch the mail are accepted and delivered without any delay. All other zh(x)dzsmp-nwas(nn).bluewin.ch generate above error, but sometimes we receive the mail some days later, sometimes the mails are lost. In the last 3 days we get two mails from two different sites, both sent over the zhbdzmsp-nwas17.bluewin.ch. All others are lost or - waiting in a queue? We have tested this in Thun, Jona and Thalwil. Befor the 17.09.2010 we have never seen any problem with the trans proxy config. Dear swisscom, please fix the problem, it exists ! Thanks, Christoph > http://www.20min.ch/digital/webpage/story/Langsame-Leitung--10639093 > > We have clear prove, that mails from bluewin users are delayed. Maybe > even others may be affected due to the nasty port-25-redirection on swisscom > DSL lines. > > Anyone else seeing such things? > > Best wishes, > Matthias >

1 0

Looking for Linux System Engineer
by Viktor Steinmann 30 Sep '10

30 Sep '10

Hallo zusammen Wir suchen einen Linux System Engineer, der gerne auch an anderen Dingen rumschrauben darf, falls Interesse besteht (z.B. Router, SwissIX-Peerings, Switches, Firewalls, Datenbanken, Windows... you name it). Die Person soll fliessend *DEUTSCH* sprechen und schreiben, weshalb ich ausnahmsweise auch mal in Deutsch auf SwiNOG schreibe. Mehr Details hier: http://www.jobs.ch/de/job/Informatik-Telekommunikation/Netzwerk-Spezialiste… Bitte offline an mich wenden, falls weitere Infos gewünscht sind. Gruss, Viktor

1 1

Safe Browsing Alerts for Network Administrators
by Marco Huggenberger 30 Sep '10

30 Sep '10

Hi Network Administrators! If you wanna know what dangerous things happen on your own or your customers website (across your ASN), then this tool might be in your interest: "Today, we’re happy to announce Google Safe Browsing Alerts for Network Administrators -- an experimental tool which allows Autonomous System (AS) owners to receive early notifications for malicious content found on their networks. A single network or ISP can host hundreds or thousands of different websites. Although network administrators may not be responsible for running the websites themselves, they have an interest in the quality of the content being hosted on their networks. We’re hoping that with this additional level of information, administrators can help make the Internet safer by working with webmasters to remove malicious content and fix security vulnerabilities." Reference: http://googleonlinesecurity.blogspot.com/2010/09/safe-browsing-alerts-for-n… Service itself: http://safebrowsingalerts.googlelabs.com/ Marco Huggenberger SwissIX Internet Exchange

2 1

Are there any facts around?
by Matthias Hertzog 30 Sep '10

30 Sep '10

http://www.20min.ch/digital/webpage/story/Langsame-Leitung--10639093 We have clear prove, that mails from bluewin users are delayed. Maybe even others may be affected due to the nasty port-25-redirection on swisscom DSL lines. Anyone else seeing such things? Best wishes, Matthias

1 0

reject_unknown_client_hostname
by Juerg Reimann 30 Sep '10

30 Sep '10

Does anybody know whether the Postfix checks reject_unknown_client_hostname [aka Reject the request when 1) the client IP address->name mapping fails, 2) the name->address mapping fails, or 3) the name->address mapping does not match the client IP address] follows actually any requirement by a RFC? If so, which one? Thanks, Juerg

5 5

Senior Network/System Administrator at Dreamlab
by Luca Cappiello 28 Sep '10

28 Sep '10

Liebe Swinog Community Mein Arbeitgeber Dreamlab Technologies sucht zur Verstärkung unseres IT-Operations Department per sofort oder nach Vereinbarung einen Senior System und/oder Network Administrator. Details und Kontaktangaben sind dem PDF unter https://www.dreamlab.net/about/jobs zu entnehmen. Beste Grüsse Luca Cappiello

1 0

6 cabinets for sale
by Anthony Drozdek 28 Sep '10

28 Sep '10

Hello, I have 6 very nice enclosed cabinets for sale including keys, perfect for data center or telco. If any interest please contact me off list. They are located in Zurich city and it is possible to remove them from the building without taking them apart in pieces. Thanks Anthony

1 0

SwiNOG-BE90 - Beer Event 90 - 4th of October 2010 @ La Forchetta / ZH
by Steven Glogger 27 Sep '10

27 Sep '10

hi everybody here's the announcement for the next beer event. we're trying a new place in oerlikon - thanks to candid for organizing! the facts for the next event: ----------------------------- Date: 4th October 2010 Time: starting around 18.30 o'clock Location: @ the "La Forchetta" near Bhf Oerlikon ZH http://www.laforchetta.ch/ Registration deadline: 04.10.2010 12:00:00 Registration: http://swinog.mrmouse.ch ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap (+41 79 277 92 35). -steven btw: I saw on the website that there's a voucher for some free beer... *smile*

2 1

Re: [swinog] tricky dns problem
by Juerg Reimann 24 Sep '10

24 Sep '10

> From: Alan Clegg [mailto:aclegg@isc.org] > > Can you provide the output from "dig www.journeyman.co.uk" from one of > the systems that is failing? It looks fine from here (US), but I don't > have enough information to debug it or a login on a system from which it > fails. # dig www.journeyman.co.uk ; <<>> DiG 9.3.6-P1 <<>> www.journeyman.co.uk ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1625 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.journeyman.co.uk. IN A ;; Query time: 3963 msec ;; SERVER: 217.150.241.5#53(217.150.241.5) ;; WHEN: Fri Sep 24 22:50:52 2010 ;; MSG SIZE rcvd: 38 Nobody home ;-(... I guess there is, as Stefan pointed out, some problem in their config... Thanks, Juerg

1 0

tricky dns problem
by Juerg Reimann 24 Sep '10

24 Sep '10

Hello all, I have a tricky one. For quite a while I've been unable to resolve www.journeyman.co.uk. I talked to these guys and they were quite unaware of any problem and even insisted that they have no problems at all. I can't resolve the name on either Cablecom, Bluewin, Swisscom Mobile, Nine, and so on. I almost gave up, but now I see that everything is fine when I'm connected to a host in the US over VPN. What the heck is going on? Any DNS guru out there? Thanks, Juerg

4 5

Interessante Anforderungen des ejpd
by Xaver Aerni 24 Sep '10

24 Sep '10

Heute haben wir dieses Mail bekommen. Interessant ist. Sie verlangen PGP. (ist kein Freewareprogramm). Es gibt Provider die andere Verschlüsselungen benützen wir zum Bespiel ModemCrypt. Seit Atarizeiten nicht geknackt. Andere Provider auch andere Programme. Ich finde es absurd das man ein Kommerzielles Programm verwenden muss. Gruss Xaver ps Zudem inst noch Interessant das der Sendeserver auf einer Spambase ist. :-D) _____ Von: _ISC-EJPD-UPF-Provid(a)isc-ejpd.admin.ch [mailto:_ISC-EJPD-UPF-Provid@isc-ejpd.admin.ch] Gesendet: Freitag, 24. September 2010 11:38 An: _ISC-EJPD-UPF-Provid(a)isc-ejpd.admin.ch Betreff: **SP** **SPAM REYNOLD 162.23.100.70** clefs PGP /PGP-Schlüssel / pubbliche PGP Bonjour, Vous avez dernièrement rempli le formulaire E-Survey et nous vous en remerçions. Cependant nous avons constaté qu'il manquait encore les clefs PGP publiques de vos LI-Officer. Celles-ci sont nécessaires afin de poursuivre les certifications des différents services que vous proposés. Nous joignons à ce mail un document qui vous aidera pour cette tâche ainsi que notre clef PGP public. Les clefs PGP publiques de vos LI-Officer pourront nous être transmises à cette adresse Email. Meilleures salutations, Alexandre Bapst Provider Management Département fédéral de justice et police DFJP Centre de services informatiques CSI-DFJP Surveillance de la correspondance par poste et télécommunications 3003 Berne Tel. +41 (0)31 323 34 29 Fax +41 (0)31 323 00 46 <mailto:_isc-ejpd-upf-provid@isc-ejpd.admin.ch> mailto:_isc-ejpd-upf-provid@isc-ejpd.admin.ch <file://www.dfjp.admin.ch> www.dfjp.admin.ch ---------------------------------------------------------------------------- ---------------------------------------------------------------- Guten Tag Wir danken Ihnen für das Ausfüllen des eSurvey Formulars unter li.admin.ch. Leider haben wir festgestellt, dass uns noch die öffentlichen PGP-Schlüssel Ihres LI Officers (Verantwortlicher für die Fernmeldeüberwachung) und seines Stellvertreters fehlen. Diese PGP-Schlüssel brauchen wir, um Ihnen vertrauliche Dokumente verschlüsselt senden zu können, die Sie für die Vorbereitung der Compliance-Tests der von Ihnen angebotenen Dienste benötigen (siehe auch unser Schreiben vom 6. Juli 2010). In der Beilage finden Sie unseren öffentlichen PGP-Schlüssel und ein Dokument, welches Ihnen die Erzeugung von PGP Schlüsseln kurz erklärt. Wir bitten Sie, uns die öffentlichen PGP-Schlüssel Ihrer LI Officer in den nächsten Tagen per Rückantwort auf diese E-Mail zu senden. Freundliche Grüsse Alexandre Bapst Providermanagement Eidgenössisches Justiz- und Polizeidepartement EJPD Informatik Service Center ISC-EJPD Überwachung Post- und Fernmeldeverkehr ÜPF 3003 Bern Tel. +41 (0)31 323 34 29 Fax +41 (0)31 323 00 46 <mailto:_isc-ejpd-upf-provid@isc-ejpd.admin.ch> mailto:_isc-ejpd-upf-provid@isc-ejpd.admin.ch <file://www.isc-ejpd.admin.ch> www.isc-ejpd.admin.ch ---------------------------------------------------------------------------- ---------------------------------------------------------------- Buongiorno, Vi ringraziamo per avere compilato il formulario E-Survey a seguito della nostra richiesta. Abbiamo tuttavia rilevato l'assenza di chiavi pubbliche PGP appartenenti ai Lawful Interception Officers designati presso la vostra società Queste chiavi sono necessarie per potere procedere con la procedura di compliance e per ricevere o scambiare informazioni qualora in futuro dovessero sorgere casi di intercettazione. Ci permettiamo di allegare un documento che spiega come compiere questo passo. In allegato trovate inoltre la nostra chiave pubblicha PGP. Le vostre chiavi pubbliche PGP possono essere consegnate a questo indirizzo email. Cogliamo l'occasione per ringraziarvi della vostra preziosa collaborazione. Distinti saluti, Alexandre Bapst Provider Management Dipartimento federale di giustizia e polizia DFGP Centro servizi informatici CSI-DFGP Sorveglianza della corrispondenza postale e del traffico delle telecomunicazioni 3003 Berna Tel. +41 (0)31 323 34 29 Fax +41 (0)31 323 00 46 <mailto:_isc-ejpd-upf-provid@isc-ejpd.admin.ch> mailto:_isc-ejpd-upf-provid@isc-ejpd.admin.ch <file://www.csi-dfgp.admin.ch> www.csi-dfgp.admin.ch <<_ISC-EJPD-UPF-ProviderMgmt.ASC>> <<pgp_How_to.pdf>>

3 6

Re: [swinog] Interessante Anforderungen des ejpd
by Martin Ebnoether 24 Sep '10

24 Sep '10

On the Fri, Sep 24, 2010 at 09:17:28PM +0200, Xaver Aerni blubbered: Hi all. I apologize for all the german in this mailing list, but I can't stand bitching about GnuPG by clueless people. > Das Problem ist das Outlook es nicht sehr gerne hat wen man ein zuätzliches > Verschlüsselungsprogramm installiert. Eines (unseres läuft tadellos) Bei mir > stürzte das Outlook auf der Testumgebung nach der Installation des gnupg. > Das Problem hatten wir schon einmal. Da hies es man soll nicht mehrere > installieren. Das führt zu Problemen. Es gibt zig Implementationen von PGP/GPG für Outlook. Freie, kostenlose und kommerzielle. > Ich will nicht hören das ist ein Outlookproblem. Es _ist_ ein Outlookproblem. Uebrigens kann man GnuPG auch mit Outlook benutzen, ganz ohne Plugins. c:\> gnupg --encrypt geheim.txt Allenfalls in eine Datei umleiten, diese dann per cut&paste in die Mail einfügen. Umgekehrt funktioniert auch gpg --decrypt Ansonsten: Thunderbird mit Enigmail funktioniert perfekt. CU, Venty -- We demand, that for every maleserver in the internets, there should also be a femaleserver!

1 0

[Fwd: DENOG2 Anmeldung eroeffnet]
by Steven Glogger 21 Sep '10

21 Sep '10

FYI -------- Original Message -------- Subject: DENOG2 Anmeldung eroeffnet Date: Tue, 14 Sep 2010 10:08:58 +0200 From: Marcus Stoegbauer <ms(a)man-da.de> Organization: man-da.de GmbH To: denog(a)lists.denog.de Hallo, das zweite Meeting der Deutschen Network Operators Group (DENOG) wird am 4. November 2010 im Titus-Forum in Frankfurt/Main stattfinden, das ist am gleichen Ort wie letztes Jahr. Die Anmeldung für das Meeting ist ab sofort unter http://www.denog.de/registration.php möglich. Frühbucher können von einem "Early Bird"-Rabatt profitieren, weitere Informationen stehen unter http://www.denog.de/ bzw. werden in den nächsten Wochen dort auftauchen. Die Agenda werden wir bis Ende September veröffentlichen. Bis im November, Marcus -- man-da.de GmbH, AS8365 Phone: +49 6151 16-6956 Petersenstr. 30 Fax: +49 6151 16-3050 D-64287 Darmstadt e-mail: ms(a)man-da.de Geschäftsführer Marcus Stögbauer AG Darmstadt, HRB 94 84

1 0

SwiNOG#21 Registration is now OPEN!
by Pascal Gloor 21 Sep '10

21 Sep '10

########################################################################## /!\ Please read the entire mail before registering. ########################################################################## Dear SwiNOG community, The SwiNOG Organisation is pleased to announce the next SwiNOG event. ########################################################################## # Same New Place in Berne! ########################################################################## We've decided for SwiNOG #21 to keep our new location, Gurten Park in Berne. We think this place suits much better our needs for space and seats. Location: http://www.gurtenpark.ch/gurten/uebersichtstafel_gurtenpark.pdf http://map.search.ch/index.en.html?all=gurtenpark&firma=1&z=1024 The meeting will be held at "UPtown" ('1' on the map). ########################################################################## # Arrival & Journey ########################################################################## From Berne main station to the Gurtenbahn it takes around - 10 minutes by S-Bahn (number S3) to "Wabern" - 20 minutes by tram (number 9) to "Wabern, Gurtenbahn" Time table Bern Mobil: http://www.bernmobil.ch/fahrplan/fahrplan/hst.php?hst=60# ########################################################################## # Gurtenbahn ########################################################################## The tickets for the Gurtenbahn are already paid. You don't need to buy any additional ticket. The tickets can be obtained at the cash desk of the Gurtenbahn. Just mention that you're coming for the "SwiNOG Event". Schedule: 07.30 to 11.00 all 30 minutes. Details see: http://www.gurtenbahn.ch/d/fahrplan/ It takes around 10 Minutes from the base-station to the meeting-location. ########################################################################## # Important information ########################################################################## - You still need to register online in advance. - There is an event fee of 75 CHF which includes the lunch. - If we don't get your payment within 5 days you will get a warning by email. If we still don't get your payment a few days later your registration will be dropped and you don't need to pay the invoice. - Once we get your payment, you will receive a confirmation by email. If you have paid and don't get a confirmation within 5-6 days, make sure to bring a payment proof with you (we don't need a legal document, a print screen of an online payment is fine). - If you show up at the event without prior registration or payment, you still have the possibility to join the event for 100 CHF, but only if there are free seats. - There is NO refund policy, but you may give your seat to someone else. Just send us an email so we know about it. ########################################################################## # Event Detail ########################################################################## (if you scrolled down here just to get the registration link, go back and read the mail!) Event: SwiNOG #21 Place: Gurtenpark, Berne Date: November 11, 2010 Fee: 75 CHF online, 100 CHF at the event (only if seats are available) Registration: http://register.swinog.ch Registration deadline: October 31, 2010 Seats available: 200 Agenda: http://www.swinog.ch/meetings/swinog21/swinog21_agenda-txt.txt We would already like to thank our sponsors by enabling us to provide you this event. Gold sponsor: Brocade Gold sponsor: Global Crossing Gold sponsor: Cisco Gold sponsor: Cablecom WLAN sponsor: Swisscom ########################################################################## Thank you for reading the mail and we look forward to see you at SwiNOG #21! Pascal Gloor President SwiNOG Organisation Email: swinog-core at swinog dot ch ##########################################################################

1 0

IANA DNSSEC Testbed has been Decommissioned
by Joe Abley 15 Sep '10

15 Sep '10

Colleagues, Following advanced notice sent to this list on 2010-08-03, the IANA testbed was shut down on 2010-09-03. For more details on the IANA DNSSEC testbed, see <https://ns.iana.org/>. For more details on DNSSEC deployment in the Root Zone, see <http://www.root-dnssec.org/>. Queries to the nameserver bound to NS.IANA.ORG (208.77.188.32, 2620:0:2d0:1::32) now fail with ICMP type 3 code 3 (Destination Unreachable, Port Unreachable). We suggest that anybody using the DNSSEC testbed for anything resembling production services make plans to stop doing so at their earliest convenience, if operational necessity has not already made that obvious. ICANN would once again like to thank Packet Clearing House (PCH) and Dyn.com DynTLD for their support and generous donation of global DNS resources to the IANA DNSSEC testbed. Regards, Joe Abley Director DNS Operations, ICANN

1 0

Re: [swinog] IP address are now personal data
by Martin Blapp 14 Sep '10

14 Sep '10

Hi, How does this affect Blacklist- and Whitelist vendors or organisations like dnswl.org or our swinog blacklists ? -- Martin

8 13

Swisscom UMTS/GRPS Abuse Desk Contact?
by Benoit Panizzon 09 Sep '10

09 Sep '10

Hello Could somebody point me to the Abuse Desk for Swisscom Mobile IP Customers? Again their UMTS Gateway IP is listed in various blacklists and their hotline does not know what to do about it or who could be in charge. They 'phone ping-pong' me between the mobile hotline and the bluewin hotline. :-/ Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G - Leiter IT Customer Care ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 07 CH-4133 Pratteln Fax +41 61 826 93 02 Schweiz Web http://www.imp.ch ______________________________________________________

1 0

Special SwiNOG Event "Shared Lawful Intercept Platform for ISPs"
by Pascal Gloor 08 Sep '10

08 Sep '10

Dear SwiNOGers, We are pleased to announce the first of its kind, "Special SwiNOG Event". Special SwiNOG Events are here to gather ISPs together with topics that would not fit into a "Classic" SwiNOG event. Either because the topic itself is a bit off the usual SwiNOG topics or because the SwiNOG audience is not appropriate (maybe too specialized, concerning only CTOs or CEOs, ...). So, for the first of its kind, we organise an event about "Shared Lawful Intercept Platforms". As we all know, in the last year, we had some interesting surprises from ÜPF, especially regarding the costs to build up an IP interception platform. Some vendors/integrators come now with shared solutions that can be used by multiple ISPs at the same time in order to save costs. We have chosen two of them and given them the opportunity to present their solution to a SwiNOG audience. If you're working for an ISP and you're not directly involved with Lawful Intercept, please forward this invitation to your CTO/CEO (Presentations are not only technical). Please also note that both of the presented solutions will behave better if the ISPs form an association to defend their interests and save money. If you're interested to be founder member of such an ISP association, please drop me an email. The event is FREE for the participants and is kindly sponsored by the presenters. We have a room for 50 persons. Location: Hotel Ador, Bern Date: 13 Oct. 2010, 13h00 Agenda: - 13h00 Welcome by SwiNOG - 13h15 LI Update from ÜPF - 13h30 Solution by HP/Verint - 15h30 Break - 16h00 Solution by Dreamlab Technologies - 18h00 Apéro Registration to the event: http://special.swinog.ch If you have questions, feel free to email us. Regards, Pascal Gloor President SwiNOG Organisation CH-8000 Zurich

1 0

IP address are now personal data
by Pascal Gloor 08 Sep '10

08 Sep '10

Dear community, something important for us happened today that may have some impact on our daily business. Our Federal Court just decided that IP addresses are personal data and the federal law about data protection must also be followed also for IP addresses. Collecting IP adresses for private (corporate) investigation is not legal. Companies like Logistep have to stop their activities immédiately! As ISP be carefull not to publish traffic information containing IP addresses. see you, Pascal

6 5

Probleme mit Resolving nic.ch
by Klaus Ethgen 06 Sep '10

06 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, ich habe seit einiger Zeit auf allen meinen Nameservern Probleme, die komplette Zone nic.ch zu resolven. Diese Probleme beschränken sich ausschließlich auf nic.ch, mir ist keine andere Zone aufgefallen, die Probleme macht. Vermutlich treten die Probleme seit September 2009, also mit Umstellung auf DNSSec, auf. (Ich kann es leider nicht hundertprozent genau datieren.) Nach einigen Debuggingschritten bin ich etwas ratlos. Meine Firewall läßt in beiden Fällen (bei jeweils auch einem komplett anderen Provider) alles durch, was Port 53 anbelangt. Auch ein Ausschalten der Firewall bringt die selben ergebnisse. Auch ein Test mit verschiedenen anderen DNSSec-Domainen, auch solchen, die groß sind und somit fragmentiert werden (sollten, meine MTU ist 1500), stellen keine Probleme dar. Ein tcpdump zeigt aber recht schnell, daß von den UDP-Paketen von nic.ch immer nur das erste ankommt und alle weiteren nicht auf meinem Netzwerkinterface aufschlagen. Nun meine Frage: Hat oder hatte jemand von euch schon ähnliche Probleme und wie wurden sie behoben? Wenn es sich bei nic.ch um eine unwichtige Domain handeln würde, wäre es mir ja egal, aber sie ist ja doch nicht ganz so unwichtig. Gruß Klaus Ethgen - -- Klaus Ethgen http://www.ethgen.de/ pub 2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <Klaus(a)Ethgen.de> Fingerprint: D7 67 71 C4 99 A6 D4 FE EA 40 30 57 3C 88 26 2B -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEVAwUBTBiJ0Z+OKpjRpO3lAQKt6gf/W9+ftdXlrmK8jaW1zgGEhZvu0oOm/tpl Wq+7u3GhlA08lIFSNeZxYQrs2Fea4rDVHQkxQvAHZogwvmIqNm7DemgnB1REKUD+ gUI4OPtE29npnUdKEUUSLm/XsL8bSpbKX1ESTAx44uWegVS5LDHy+1lnjOfF29In L91VUroTvfbu5Odm5/82sR7UrYMbJeR2X/3oEtONbFR8xXOW4Eguxx1eOszUS7DQ BFN+AT6+A3g+ECn1WDCvrposYIC3YLu3V1qLSY5RzoDmuGxonbJv6zRCrTODp/9i KATfUPQvvVdh6FFwc4WA7pSYZHmTnl6+YFWk7lIhU5F1pGBHbSiYtA== =DVDj -----END PGP SIGNATURE-----

6 6

Motorola ADSL Routers: DNS proxy bug?
by Benoit Panizzon 06 Sep '10

06 Sep '10

Hi all I seam to quite often stumble over this bug and wonder if the router is buggy or the client is buggy. Most Motorola ADSL/VDSL Routers which Swisscom sent to their customers for about the last two years or so, have a DNS proxy enabled by default. The dhcp clients get the IP address of the router as DNS. Now some resolvers (the linux glibc resolver at least), when resolving a hostname first ask for AAAA and when no RR and no error is returned, they ask for the A record. Now when a host is resolved that way via a Motorola DNS Proxy, the AAAA query does not result in: - No Error, no RR returned. But in - Error 0011 => No such Name. If the linux glibc receives Error 0011 it does not continue looking for an A record, but return 'Hostname not found' or similar immediately. Thus making hosts which have a valid IPv4 but first were asked for their AAAA address not reachable from linux. The workaround is to not use the DNS proxy on those routers. Windowses do not seam to have this problem, even with ipv6 enabled. So who is wrong? The linux glibc or the router? -Benoit-

2 1

SwiNOG-BE89 - Beer Event #89 - 6st of September 2010 @ Papa Joe's / ZH
by Steven Glogger 03 Sep '10

03 Sep '10

hi everybody here's the announcement for the next beer event. (and yes, sorry I'm late ,-)) let's try a new location ,-) the facts for the next event: ----------------------------- Date: 6th September 2010 Time: starting around 18.30 o'clock Location: @ the "Papa Joe's" near Bellevue ZH http://http//www.papajoes.ch/zuerich/deutsch/ Registration deadline: 06.09.2010 10:00:00 (Monday) Registration: http://swinog.mrmouse.ch Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap (+41 79 277 92 35). -steven

1 0

BÜPF...again ;)
by Pascal Gloor 02 Sep '10

02 Sep '10

Hi SwiNOGers ;-) I thought I'd say some words for all small and medium sized ISPs while I had the SDA/ATS journalist on the phone. in German: http://www.tagesanzeiger.ch/digital/internet/berwachungswahn-der-Beamten-in… in French: http://www.romandie.com/infos/news2/201008181800060AWPCH.asp in Italian: http://new.ticinonews.ch/articolo.aspx?id=200533&rubrica=14 See you, Pascal

12 12

Save the date: SwiNOG #21 - Nov 11, 2010
by Fredy Kuenzler 23 Aug '10

23 Aug '10

Dear all, Please mark in your agenda Nov 11, 2010 for SwiNOG #21. Details will follow. Best regards, Fredy Künzler for SwiNOG Core

1 0

Bluewin VDSL DHCP clue needed
by Aarno Aukia 16 Aug '10

16 Aug '10

Dear List, I am in need of a clueful bluewin tech, who can have a look at a bluewin VDSL DHCP issue we are seeing with multiple customer lines. After confusing about a dozen helpliners by phone using keywords like DHCP {discovery, request, reply, lease time} both my social-engineering-fu and patience are depleted. I'll share customer #s, syslogs, tcpdumps etc over private mail. Thanks and best regards, Aarno -- Aarno Aukia Atrila GmbH Switzerland

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog