- swinog - vmaill01.sys

About (not) Swisscom UMTS
by Nico -telmich- Schottelius 09 Nov '08

09 Nov '08

A sunny good morning everybody! I just got my hands on Swisscom "Mobile Internet" using Sierra Wireless Compass 855. With the "normal" "private" mode they put you in some 10/8 network and do NAT. Just as a normal 08/15 I experienced that booking a ticket on sbb.ch can be almost impossible, as sbb.ch either has a session handling problem or swisscom has a nat handling problem (maybe a bit of both). Interestingly, I also often experience the "your session is invalid/timed out" message from sbb, when just accessing the timetable function. Other than that I see that my (idle) ssh connections get cut (600 seconds works < cut < 1000 seconds idle does not work). As far as I can remember, Orange always provides you with a non-rfc1918 ipn. Can somebody confirm that behaviour and/or report what happens with the other providers? I am now testing their "Corporate Application Access", which simply means "got a real username, got a real password and a different apn" which results in a (fixed?) non-natted ipn. Sincerly, Nico -- Think about Free and Open Source Software (FOSS). http://nico.schottelius.org/documentations/foss/the-term-foss/ PGP: BFE4 C736 ABE5 406F 8F42 F7CF B8BE F92A 9885 188C

3 4

Re: [swinog] About (not) Swisscom UMTS
by Reto Burkhalter 07 Nov '08

07 Nov '08

Hi Nico > One day after that (today morning) I was called back, > re-explained the issue and stated > that I think that the nat is the problem. Took me about 10 > minutes arguing > that this in not Linux' fault. Then he send me a > useraccount/password/apn > to use for testing and I should give him feedback in a few days. Never tell the support you are using Linux :-) They follow their scripts and can not handle such "exceptions". We are all clever enough to lie a little bit :-) Nice weekend, Reto

2 1

Re: [swinog] Netz 194.242.34.0
by Fredy Kuenzler 04 Nov '08

04 Nov '08

roger(a)mgz.ch schrieb: > its now a while as the 194.242.34.0/24 is not properly announced .. > is there any explain or actionplan? the IRC server is not reachable > form a lot networks. > > even swiss networks are affected like the "largest" ISP Bluewin i > fear to even mention about my satelitte link from embratel ;-) It's common practice that the IP range of internet exchanges are not routed globally. Recently some IP of this range suffered a DDOS attack, therefore SwissIX decided not to announce this /24 any longer. Don't expect it to come back anytime soon. F.

4 3

Re: [swinog] I miss you spam...
by Steven Glogger 04 Nov '08

04 Nov '08

you miss it? dont complain ,-) -steven Adrian Kägi wrote: > > About 2 weeks we receive approx. 30% less Spam on our Firewall. > > someone knows the same phenomenon? > > Is the Bot-Master in holidays? ;-) > > > > Best wishes > > Adrian > > > > ------------------------------------------------------------------------ > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >

1 0

Re: [swinog] I miss you spam...
by Daniele Guazzoni 04 Nov '08

04 Nov '08

I can confirm this behavior. Although I don't expect that the spammers gave finally up... Daniele Adrian Kägi wrote: > About 2 weeks we receive approx. 30% less Spam on our Firewall. > > someone knows the same phenomenon? > > Is the Bot-Master in holidays? ;-) > > > > Best wishes > > Adrian > > > > > -- > This message has been scanned for viruses and > dangerous content by *MailGate* <http://www.gcomm.ch/mailgate.html>, and is > believed to be clean. > > > ------------------------------------------------------------------------ > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- This message has been scanned for viruses and dangerous content by MailGate, and is believed to be clean.

1 0

I miss you spam...
by Adrian Kägi 04 Nov '08

04 Nov '08

About 2 weeks we receive approx. 30% less Spam on our Firewall. someone knows the same phenomenon? Is the Bot-Master in holidays? ;-) Best wishes Adrian

1 0

Netz 194.242.34.0
by roger＠mgz.ch 04 Nov '08

04 Nov '08

its now a while as the 194.242.34.0/24 is not properly announced .. is there any explain or actionplan ? the IRC server is not reachable form a lot networks. even swiss networks are affected like the "largest" ISP Bluewin i fear to even mention about my satelitte link from embratel ;-) Roger

1 0

SwiNOG-BE67 - Beer Event 67 - 3rd of November 2008 @ Don Weber /ZH
by Steven Glogger 01 Nov '08

01 Nov '08

hi everybody here's the announcement for the next beer event. the facts for the next event: ----------------------------- Date: 3rd of November 2008 Time: starting around 18.30 o'clock Location: @ the "Don Weber" (Heinrichstrasse 213, Near TIX). Registration deadline: 02.11.2008 12:00:00 Registration: ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform marco asap. marco's reachable on +41 44 313 30 19 greetings -steven

1 1

Bluewin and Prestige 650ME
by Josh Geisser 28 Oct '08

28 Oct '08

Hi Swinog is there an issue with those old Zyxel Prestive 650ME modem/routers? I have that 650 configured as modem and want to use PPPoE from a pfSense. works fine for 10minutes until the connection breaks and i do have to reboot either the pfSense, or restart the 650. then it works again for 10min. i wonder whether this is a bluewin issue, or a 650 problem? cheers Josh

3 2

Could someone from Swisscom/Cybernet contact me off-line?
by Per Jessen 27 Oct '08

27 Oct '08

We're having a problem delivering mails to a Cybernet hosted exchange server. thanks Per Jessen, Herrliberg

1 1

Re: [swinog] SwiNOG Mailing List Policy Change
by Stanislav Sinyagin 23 Oct '08

23 Oct '08

you should've changed that setting before setting this email, not after :-)) ----- Original Message ---- > From: Steven Glogger <steven(a)glogger.ch> > To: swinog(a)swinog.ch > Sent: Wednesday, October 22, 2008 10:36:35 PM > Subject: [swinog] SwiNOG Mailing List Policy Change > > hi everyone > > we've voted at todays SwiNOG meeting for a policy change of the > mailinglist-reply-functionality. > > as per today when you clicked on 'reply' the recipient-to has been set to > swinog(a)swinog.ch (aka back to the mailing list). at the vote today the > majority of the voters requested that this will be changed to the sender of > the originating email. > so, it will be changed now. > > so, please ensure for the future, that IF you want to reply back to the list > that the mailing-list is getting the email ,-) > > greetings > > -steven > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

3 2

ahhh feel much better
by Zorg 421 23 Oct '08

23 Oct '08

we'll have chicken tomorrow at noon.I was anxious that it would be otherwise. (I already miss the spaghettis...)

7 8

SwiNOG #17 debriefing ... and Pingsta, jittered.
by Fredy Kuenzler 23 Oct '08

23 Oct '08

Dear all, Thanks everybody for attending SwiNOG #17, I hope you consider it a successful gathering like me. Unfortunately the people from Pingsta couldn't make it to Berne, we got the following email from Peter, CEO of Pingsta: > -------- Original-Nachricht -------- > Betreff: Re: [swinog-core] SwiNOG-17 - Pingsta Team Stuck in Paris en > Route Bern > Datum: Wed, 22 Oct 2008 03:05:20 -0700 (PDT) > Von: Peter Alfred-Adekeye > > Dear Paschal, Fredy, Nicole & Michel, > > Due to circumstances beyond our control, we are stuck in Paris en > route Bern and unless a miracle happens, we would most likely not be > able to get to Bern on time today. As such, would it be possible to > deliver my speech over skype video instead? If no, I guess we may > have to reschedule the Pingsta presentation to SwiNOG 18 or 19? > > Once again, please accept our sincere apologies for the rather short > notice. In the meantime, please feel free to give away the Pingsta > T-shrts and wish the entire SwiNOG team and participants well for us. > > Danke > Peter :( > > Peter Alfred-Adekeye > CEO, Pingsta Peter: thanks for the explanation, we have been a bit surprised and disapointed that you couldn't make it - unfortunately your mail was read only after the gathering ... we enjoyed the early beer and ignored waiting emails ;-) ... nevermind, packets sometimes arrive with latency, get lost or show up jittered. The Pingsta t-shirts in fact made it right on time to Berne and nevertheless got distributed to the crowd ... many thanks! We are happy to reserve a slot in the upcoming SwiNOG #18 in Spring 2009, but at this time we don't have a scheduled date. Please make sure that you are subscribed to the SwiNOG list that you don't miss the announcement. Best regards ... until SwiNOG #18! Fredy Künzler SwiNOG Core Team

1 0

SwiNOG Mailing List Policy Change
by Steven Glogger 22 Oct '08

22 Oct '08

hi everyone we've voted at todays SwiNOG meeting for a policy change of the mailinglist-reply-functionality. as per today when you clicked on 'reply' the recipient-to has been set to swinog(a)swinog.ch (aka back to the mailing list). at the vote today the majority of the voters requested that this will be changed to the sender of the originating email. so, it will be changed now. so, please ensure for the future, that IF you want to reply back to the list that the mailing-list is getting the email ,-) greetings -steven

2 1

swisscom xdsl outage 041 area since 14:15 ?
by vito 22 Oct '08

22 Oct '08

hi since 14:15 we have many xdsl customers there are offline --> 041 area any info ? thx Vito

3 2

SwiNOG-17 (details for tomorrow)
by Steven Glogger 21 Oct '08

21 Oct '08

hi folks some information for SwiNOG-17: Application Fee: ================ let me remind you that you have to take the CHF 35.- lunch fee with you and we are NOT giving back change. if you're not sure wether you're registered or not, check the registration page: http://www.spale.com/cgi-bin/swinogreg Le Menu aka Food: ================= so, the menu is already defined - you might make up your mind and tell us at the welcome desk which menu you like. the choice is: Non-Vegetarian: --------------- Salad *** Poulet-Cordon bleu (stuffed with Ham and Cheese) with fried potatoes *** Ice Cream Vegetarian: ----------- Salad *** Tagliarini (Noodles / Pasta) with peproncini, tomatoes, onion, garlic, parsley and parmesan. *** Ice Cream Agenda: ======= as usual you can find the updated agenda on the website: http://www.swinog.ch/meetings/swinog17/swinog17_agenda-txt.txt Wireless LAN: ============= Free WLAN access for all participants will be available at SwiNOG 17: * 10 MBit/s Internet connectivity * Use DHCP for the ip assignement * Open WLAN without encryption * SSID: SwinogPublic You're responsible for the security of your laptop. Remember that we've got always some guys sniffing the network... see you then ,) greetings -steven

2 1

SwiNOG 17 Meeting: IPv6 connectivity
by Erich Hohermuth 21 Oct '08

21 Oct '08

Dear SwiNOG 17 meeting attendants, Cause of the cooperation between NTS (Wireless Sponsor) and SolNet we are proud to announce IPv6 connectivity by tomorrow. If someone is interested in a direct native IPv6 peering [1] just drop an email to peering(a)solnet.ch. Regards Erich [1] Supported Locations are: Swissix, TIX, CiXP, DeCix, LINX -- * Erich Hohermuth IP Engineer - SolNet (AS 9044) PGPKEY-46A08FCB * * phone: +41 32 517 6220 / sip:9044*463@inoc-dba.pch.net *

1 0

Re: [swinog] RBL's (again) (Was: Anyone from Green here?)
by Stanislav Sinyagin 21 Oct '08

21 Oct '08

> Greylisting only delays mails. Proper spammers just use ISP relays and > then they will try forever. Or they will just nicely do the full SMTP > thing for the first message and try again later, or stall sending to you > as the 450 is recognized and spam run you again later. So many easy ways > around it and it only causes annoyance. I don't know anything about proper spammers. Greylisting has reduced the amount of incoming spam significantly, probably at 90-95%. Of course there are spambots which play around greylisting, but they aren't yet that widely used. > On top of that, I guess you have whitelisted large mail providers like > gmail who try to send a single mail from several IP's, thus hitting your > greylist over and over again, and then just giving up? :) some greylisting packages have their whitelists already pre-filled in the distribution package, so it works quite well (we used http://policyd.sourceforge.net/ , and I have no complaints about this software, and neither do the users.

14 27

Re: [swinog] high delay with icmp
by Philippe Strauss 20 Oct '08

20 Oct '08

On Mon, Oct 20, 2008 at 10:51:28AM +0200, Adrian Kägi wrote: > Hmmm, i think it was/is (!) a fault from cc... > I started a trouble ticket. (!) google is probably using some form of anycast. (I would personnaly travel much more if crossing the atlantic had a cost of 50ms :-) -- Philippe Strauss http://philou.ch

1 0

Re: [swinog] high delay with icmp
by Steven.Glogger＠swisscom.com 20 Oct '08

20 Oct '08

nope, no clue... i've not seen any issues or got any alarms. maybe cablecom had (again?) bandwidth issues? -steven -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Adrian Kägi Sent: Monday, October 20, 2008 8:38 AM To: swinog(a)swinog.ch Subject: [swinog] high delay with icmp The accessibility to www.google.com and a lot of other web sites, was yesterday the whole "very" slow! Icmp from Sunday 2008-10-19 18.00 Antwort von 209.85.135.103: Bytes=32 Zeit=121ms TTL=242 Antwort von 209.85.135.103: Bytes=32 Zeit=117ms TTL=242 Antwort von 209.85.135.103: Bytes=32 Zeit=118ms TTL=242 Antwort von 209.85.135.103: Bytes=32 Zeit=119ms TTL=242 Traceroute: 1 <1 ms <1 ms <1 ms . [192.168.10.1] 2 7 ms 6 ms 7 ms 10.14.0.1 3 7 ms 9 ms 8 ms tr-1430019570.zapp.ch [213.213.160.65] 4 7 ms 7 ms 14 ms 108-160-213-213.static.zapp.ch [213.213.160.108] 5 9 ms 10 ms 8 ms 62-2-42-33.static.cablecom.ch [62.2.42.33] 6 12 ms 11 ms 11 ms ch-zrh01a-ra1-ge-1-1-0.aorta.net [213.46.171.49] 7 12 ms 12 ms 12 ms tix.net.google.com [194.42.48.58] 8 110 ms 110 ms 120 ms 64.233.174.34 9 118 ms 120 ms 126 ms 72.14.238.128 10 116 ms 122 ms 118 ms 209.85.241.189 11 127 ms 130 ms 124 ms 209.85.253.26 12 120 ms 119 ms 120 ms www.google.com [209.85.135.147] Icmp from today 2008-10-20 08:30 Antwort von 209.85.135.99: Bytes=32 Zeit=23ms TTL=243 Antwort von 209.85.135.99: Bytes=32 Zeit=22ms TTL=243 Antwort von 209.85.135.99: Bytes=32 Zeit=21ms TTL=243 Antwort von 209.85.135.99: Bytes=32 Zeit=20ms TTL=243 Any known problems?? Best regards! Adrian _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

Open position @IP+
by Andre Chapuis 20 Oct '08

20 Oct '08

Hi, http://www.swisscom.com/SCMCMS/Scripts/PopupJobEngine.aspx?frameurl=https:/… b_search?sap-wd-configId=ZAPPLWI_UNREG Search for: CBU-50315754 André ------------------------------ André Chapuis Swisscom IP-Plus Genfergasse 14 3050 Berne +41 31 342 40 74 chapuis(a)ip-plus.net CCIE #6023 ------------------------------

1 0

WG: URIBL.COM ACL Change for 195.141.232.251
by Xaver Aerni 20 Oct '08

20 Oct '08

Hello, We receive yesterday this mail. It is verry interessing. This is our DNS Server and some Webservices and Monitoring Tools. We havn't any Mail Services on this Server. Did somebody know about this new Rules Greetings Xaver > -----Ursprüngliche Nachricht----- > Von: URIBL DNS Admin [mailto:dnsadmin@uribl.com] > Gesendet: Sonntag, 19. Oktober 2008 22:48 > An: admin(a)pop.ch > Betreff: URIBL.COM ACL Change for 195.141.232.251 > > Greetings, > > We are contacting you because you are identified as the > technical or abuse contact for the IP address or domain listed below. > > We have made a policy change on the public mirrors that > handle queries for multi.uribl.com. The following changes > apply to the IP addresses listed below. > > IP Address : 195.141.232.251 > PTR Record : ns2.pop.ch > Current Policy: Allow > New Policy : BLOCK - Positive Responses > Effective : In 30 days > > If the new policy is to block queries from 195.141.232.251, > and you are unaware that you are sending high volume queries > to our public mirrors, or if you do not need the URIBL > service, please make sure it is shut off on your high traffic > filtering devices as not to flood the public dns system. > > If you recently upgraded to SpamAssassin 3.x, URIBL was > included by default. It can easily be disabled by adding the > following lines to your spamassassin/local.cf: > > score URIBL_BLACK 0 > score URIBL_RED 0 > score URIBL_GREY 0 > > If you are a high volume user and rely on URIBL to filter > email, our commercial data feed service does allow you to > obtain a copy of the > data to query locally. Please see > http://www.uribl.com/datafeed.shtml > for more information on requesting the data feed service. > > If 195.141.232.251 is a primary resolver for many of your > customers, there is a chance that a single client is > accounting for a majority of the query volume we are seeing. > If you can remove the heavy users on your end, and the volume > drops to a manageable level, we will be willing to answer > queries from 195.141.232.251. > > If you cannot make changes to the systems that are sending > these queries, please forward this message to the appropriate > person who can. URIBL may return positive replies for all > queries if no action is taken after a reasonable amount of time. > > If you have any questions about this notification, you may > reply to this email. > > Thank you for your time, > > -- > URIBL DNS Admin > dnsadmin(a)uribl.com > http://uribl.com > > > >

2 2

Re: [swinog] RBL's (again) (Was: Anyone from Green here?)
by Stanislav Sinyagin 20 Oct '08

20 Oct '08

actually greylisting works pretty well, and the whitelist of exceptions is relatively small (not more than 300 entries as far as I remember). Also if you communicate the value of it to the customers, they tend to agree that having 90% of spam filtered before entering the system is worth waiting for half an hour for email from a new source. It's also a matter of resources: if you don't want or cannot enable greylisting, you have to invest more resources into a more sophisticated mail filtering software. Even if it's available for free, still developing and maintaining your solution might become too expensive. so, basically as we discussed it already last week in regards to Skype: use the right tools for the right task :-) ----- Original Message ---- > From: Tonnerre Lombard <tonnerre(a)bsdprojects.net> > To: swinog(a)swinog.ch > Cc: swinog(a)lists.swinog.ch; per.jessen(a)enidan.ch > Sent: Friday, October 17, 2008 5:27:10 PM > Subject: Re: [swinog] RBL's (again) (Was: Anyone from Green here?) > > Salut, Per, > > On Fri, 17 Oct 2008 12:47:48 +0200, Per Jessen wrote: > > Another option is to disable greylisting just for that one > > mailserver. > > This implies that either you know all servers hosting broken scripts > (NP-complete I think) or your customers will always communicate > problems. Usually they encounter them and rant about it on their > Stammtisch and then change provider to someone with one hell of a lot > of SPAM. > > Tonnerre

4 3

high delay with icmp
by Adrian Kägi 20 Oct '08

20 Oct '08

The accessibility to www.google.com and a lot of other web sites, was yesterday the whole "very" slow! Icmp from Sunday 2008-10-19 18.00 Antwort von 209.85.135.103: Bytes=32 Zeit=121ms TTL=242 Antwort von 209.85.135.103: Bytes=32 Zeit=117ms TTL=242 Antwort von 209.85.135.103: Bytes=32 Zeit=118ms TTL=242 Antwort von 209.85.135.103: Bytes=32 Zeit=119ms TTL=242 Traceroute: 1 <1 ms <1 ms <1 ms . [192.168.10.1] 2 7 ms 6 ms 7 ms 10.14.0.1 3 7 ms 9 ms 8 ms tr-1430019570.zapp.ch [213.213.160.65] 4 7 ms 7 ms 14 ms 108-160-213-213.static.zapp.ch [213.213.160.108] 5 9 ms 10 ms 8 ms 62-2-42-33.static.cablecom.ch [62.2.42.33] 6 12 ms 11 ms 11 ms ch-zrh01a-ra1-ge-1-1-0.aorta.net [213.46.171.49] 7 12 ms 12 ms 12 ms tix.net.google.com [194.42.48.58] 8 110 ms 110 ms 120 ms 64.233.174.34 9 118 ms 120 ms 126 ms 72.14.238.128 10 116 ms 122 ms 118 ms 209.85.241.189 11 127 ms 130 ms 124 ms 209.85.253.26 12 120 ms 119 ms 120 ms www.google.com [209.85.135.147] Icmp from today 2008-10-20 08:30 Antwort von 209.85.135.99: Bytes=32 Zeit=23ms TTL=243 Antwort von 209.85.135.99: Bytes=32 Zeit=22ms TTL=243 Antwort von 209.85.135.99: Bytes=32 Zeit=21ms TTL=243 Antwort von 209.85.135.99: Bytes=32 Zeit=20ms TTL=243 Any known problems?? Best regards! Adrian

1 0

Expatriate Position for ICT Security Specialists
by Rolf Sommerhalder 16 Oct '08

16 Oct '08

The following *long-term expatriate* positions are open In comprehensive projects on the Arabian peninsula: 1. International Project Manager eGovernment Security http://crypto.ch/index.php?id=266 https://www.xing.com/marketplace/postings/show/290845 2. Head of Security Operation Center (eGovernment) / Leiter Security Operation Center in einem Golfstaat https://www.xing.com/marketplace/postings/show/290830 3. Integration Engineering Specialist für Sicherheitskomponenten in komplexen Datennetzen http://crypto.ch/index.php?id=264 https://www.xing.com/marketplace/postings/show/290841 4. International Solution Architect Middle East / Schweizer Solution Architect Netzwerksicherheit Middle East http://www.infoguard.ch/docs/dokumente/InfoGuard_SolArcME.pdf https://www.xing.com/marketplace/postings/show/288868 You can also find overviews about those and similar open positions on Xing: https://www.xing.com/marketplace/home/postings/list/6877234 https://www.xing.com/marketplace/home/postings/list/3263329 Swiss citizenship is preferred, but not mandatory. Currently, I am on site and can provide some first-hand "technical" information. Please send applications to the contacts indicated in the pages referenced above. Thank you for your attention.. Regards, Rolf

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog