- swinog - vmaill01.sys

Re: [swinog] List policy discussion (was: Check out my Facebook profile)
by Stanislav Sinyagin 24 Sep '08

24 Sep '08

if we charge drinks for every such occasion, we will easily become alcoholics. I would prefer Sushi :-) ----- Original Message ---- From: Yann Gauteron <ygauteron(a)gmail.com> To: swinog(a)swinog.ch Sent: Wednesday, September 24, 2008 9:59:50 AM Subject: Re: [swinog] List policy discussion (was: Check out my Facebook profile) I would prefer to condamn the responsible person to offer a free beer to the participants of the upcoming SwiNOG meetings... (or Vodka if you prefer ;-)) But we are starting to be off-topic... 2008/9/24 Stanislav Sinyagin <ssinyagin(a)yahoo.com> after three warnings, ban the person forever :)

2 1

Re: [swinog] List policy discussion (was: Check out my Facebook profile)
by Stanislav Sinyagin 24 Sep '08

24 Sep '08

after three warnings, ban the person forever :) ----- Original Message ---- From: Viktor Steinmann <stony(a)stony.com> To: swinog(a)swinog.ch Sent: Wednesday, September 24, 2008 8:33:28 AM Subject: [swinog] List policy discussion (was: Check out my Facebook profile) Hi all In the last months we've seen more and more end-user questions, vacation-bounces, off-topic and spam-like mails on the list. Any suggestions how to keep the noise level low in the future? Kind regards, Viktor ________________________________ From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Roman Gischig Sent: Dienstag, 23. September 2008 18:20 To: swinog Subject: [swinog] Check out my Facebook profile

2 1

It is oh so quiet....
by Jeroen Massar 23 Sep '08

23 Sep '08

As it is kinda quiet, let me break that stillness with the oh so important question: Who can provide native IPv6? :) That is of course for these two lists: http://www.sixxs.net/faq/connectivity/?faq=native http://www.sixxs.net/faq/connectivity/?faq=ipv6transit Replies offlist are great, flamewars on the list are cool too <grin> Greets, Jeroen

1 0

Cranky Geeks
by Stanislav Sinyagin 12 Sep '08

12 Sep '08

If you haven't seen it yet, it's worth checking out: http://www.crankygeeks.com/ it's a quite interesting tech talk show. The guys are discussing various interesting topics, sometimes in quite sarcastic way :) In yesterday's show one of the guests is Whitfield Diffie, one of the names in Diffie-Hellman key exchange protocol :)

1 0

Re: [swinog] RBL's (again) (Was: Anyone from Green here?)
by Stanislav Sinyagin 11 Sep '08

11 Sep '08

actually about a year and a half ago there was a new spambot which was re-sending the message after a temporary reject. But it did it precisely in 4 minutes after the first rejection, and never tried again. So, increasing the greylisting timeout to 5 minutes has solved the problem :) ----- Original Message ---- > From: Adrian Senn <adrian(a)senn.ch> > To: swinog(a)swinog.ch > Sent: Thursday, September 11, 2008 9:37:08 PM > Subject: Re: [swinog] RBL's (again) (Was: Anyone from Green here?) > > Stanislav Sinyagin schrieb: > > > I don't know anything about proper spammers. Greylisting has reduced the > > amount of incoming spam significantly, probably at 90-95%. Of course there > > are spambots which play around greylisting, but they aren't yet that widely > > used. > > Agreed. > > For my mail system at business i have at the moment a high amount of > blocked mails by greylisting, swinog list and some other RBL lists. > At the beginning of this week we had a high amount of blocked mails. > Reason was probably a new wave of spam bot mails. Without the blocking > system our mail gateway wouldn't be able to process the load. > And no we don't have any complains since months! Nor for the greylisting > , nor for the RBL blocking. > > Adrian > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

1 0

Re: [swinog] Anyone from Green here?
by Stanislav Sinyagin 11 Sep '08

11 Sep '08

there is at least one reason for not sending email directly: if the server IP address is added to some blacklist like SORBS, the notification is sent to the contact address of the reverse zone. If the server is under the ISP's maintenance, the ISP will (supposedly) notice this event and try its best (haha) to remove the server address from that blacklist. If the end-user's fixed IP address appears in SORBS list, the user will not notice it, and it will take much more time before it's removed. interesting, is there a business case behind? How much would one pay for a reliable and SORBS-free mail relay service? It's actually quite easy to build :) ----- Original Message ---- > From: Per Jessen <per.jessen(a)enidan.ch> > To: swinog(a)lists.swinog.ch > Sent: Thursday, September 11, 2008 12:58:40 PM > Subject: Re: [swinog] Anyone from Green here? > > Stanislav Sinyagin wrote: > > > Anyway, who's going to send email directly from a broadband > > connection, instead of using the ISP's relay? :-) > > > > Provided everything is properly set up, why shouldn't they?

6 6

Re: [swinog] Anyone from Green here?
by Stanislav Sinyagin 11 Sep '08

11 Sep '08

well, I used to support customers which were running mail servers behind a broadband connection. Most spam filters and blacklists like SORBS check the reverse naming, and if it doesn't have words like cable, ppp, dynamic and such, it's quite safe to work with it. It just has to have some decent name, but the name shouldn't be necessarily customizable by the user. Anyway, who's going to send email directly from a broadband connection, instead of using the ISP's relay? :-) ----- Original Message ---- > From: Roman Hochuli <roman.hochuli(a)nexellent.ch> > To: swinog(a)swinog.ch > Sent: Thursday, September 11, 2008 12:20:57 PM > Subject: Re: [swinog] Anyone from Green here? > > Hey Stan > > > There aren't many applications that really depend on the reverse name - > > for most of the things it's enough that the reverse name is a valid one. > > You never tried to operate a mailserver behind a DSL-connection yet, > right? :) > > -- > Best regards, > Roman Hochuli > Operations Manager > > nexellent ag > Saegereistrasse 29 > CH-8152 Glattbrugg > > Phone: +41 44 562 30 40 > Fax: +41 44 562 30 41 > URL: www.nexellent.ch > X-NCC-RegID: ch.nexellent > > Imagination is the one weapon in the war > against reality. > -- Jules de Gaultier > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

3 2

Anyone from Green here?
by Per Jessen 11 Sep '08

11 Sep '08

One of my customers has just been told he needs to pay to get a DNS reverse map entry for thei Green ADSL line with fixed IP. Is that really true?? /Per Jessen, Herrliberg

4 4

Re: [swinog] Anyone from Green here?
by Stanislav Sinyagin 11 Sep '08

11 Sep '08

If the reverse mapping points to some valid A record, why do you need to change it? There aren't many applications that really depend on the reverse name - for most of the things it's enough that the reverse name is a valid one. ----- Original Message ---- > From: Per Jessen <per.jessen(a)enidan.ch> > To: swinog(a)lists.swinog.ch > Sent: Thursday, September 11, 2008 11:29:04 AM > Subject: Re: [swinog] Anyone from Green here? > > Marc SCHAEFER wrote: > > > On Thu, Sep 11, 2008 at 10:37:35AM +0200, Per Jessen wrote: > >> One of my customers has just been told he needs to pay to get a DNS > >> reverse map entry for thei Green ADSL line with fixed IP. > >> Is that really true?? > > > > I had a similar query lately, and administration(a)green.ch replied that > > with MPS1 (1 IP address) they won't do it, they will do it only for > > MPS8 and with a delegation. > > That's the answer my customer got too. > > > > > That's a pity, but it's how marketing works. > > It's not only very poor marketing, it's incredibly arrogant. Selling a > static IP and then charging extra for the reverse mapping ... > > > /Per Jessen, Herrliberg > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

3 2

GPS-Technik is hiring: Senior Network Engineer CCIE
by orlando＠anyaccess.ch 09 Sep '08

09 Sep '08

GPS-Technik AG in Schlieren (ZH) is expanding its team and is looking for a Senior Network Engineer (CCIE). Responsibilities: -- Work in multiple long- and short-term network projects for our customers. Face the customers at their premises and work in rapidly changing and stressful environments. -- Manage and fulfil the complete cycle of network projects: Planning, design, deployment and operational support and troubleshooting. -- Work independently, as well as in a team of other engineers. -- Be ready for on-call standby or off-business hours work. The candidate should show good knowledge and experience in the following areas: -- IP Networking at the highest level, CCIE or similar work experience. Knowledge of network protocols at all levels of operation. Practical experience with IP routing protocols (BGP, OSPF, EIGRP), MPLS architectures, good understanding of QoS mechanisms. -- IP Security. Good knowledge of network threats and protection mechanisms. -- Several years of hands-on experience in telecommunication or enterprise networking. -- Optical networking knowledge is a plus. This includes general knowledge of SDH networks and Cisco ONS products. Other requirements: -- Valid and active CCIE certification or similar proven experience -- Teamplayer, collects and shares experience.Autonomous and flexible, ability to set priorities. Demonstration of initiative and pro-active behaviors. Ability to work in a fast moving environment. -- Strong communication skills to all levels of business clients, management and staff -- Fluent German and English, both spoken and written. French is a plus. -- Valid CH driver license -- Swiss, EU citizen or a valid Swiss working permit We offer: -- Challenging and interesting tasks -- A dynamic and motivated team in a growing company -- Versatile job environment -- Competitive salary -- Modern work place near Zurich -- Personal development including further education and professional training Please send your CVs to Mr. Orlando Spitale, CTO, <o.spitale(a)gpstechnik.ch> with a copy to <info(a)gpstechnik.ch>

1 0

primary / backup BGP multi homed issue
by Marco Fretz 04 Sep '08

04 Sep '08

Hi SwiNOGers, We've the problem that sunrise is advertising our prefixes from our backup provider instead of the ones from our primary. This is most likely because our backup provider is a downstream customer from sunrise. Our prefixes then get advertised to level3 (and other sunrise upstream peers). Sunrise seems to be level3 downstream customer and prefer our prefixes from sunrise instead of our primary provider, too. The consequence is that most other ISPs are seeing only our prefixes over sunrise and our backup provider. Sunrise changed their as-communities recently so that's no longer possible for our backup provider to influence their local-pref. I think this might be a common problem in primary / backup BGP scenarios. Any ideas how to solve it? Maybe someone from sunrise can contact me off-list? Thanks and best regards Marco

5 7

Re: [swinog] primary / backup BGP multi homed issue
by Stanislav Sinyagin 04 Sep '08

04 Sep '08

----- Original Message ---- > From: Marco Fretz <mailinglist(a)blah.li> > To: swinog(a)swinog.ch > Sent: Thursday, September 4, 2008 10:33:42 AM > Subject: Re: [swinog] primary / backup BGP multi homed issue > > Stanislav Sinyagin wrote: > > > > > > > > ----- Original Message ---- > >> From: Claudio Jeker > > > >> Prepend your own AS a few times. > > > > this will not help, as L3 sets higher local preference for the prefixes from > its customers. > > yes, and sunrise sets higher pref for prefixes from their customer, too > (as our backup provider is). > > > > > The guys at Sunrise are already working on this, don't worry :) > > So it is a problem only with sunrise? nope. It's how it works everywhere: if you need some special tweaking, you need to request it from your provider, and not from the public list.

2 1

Re: [swinog] primary / backup BGP multi homed issue
by Stanislav Sinyagin 04 Sep '08

04 Sep '08

----- Original Message ---- > From: Claudio Jeker <jeker(a)networx.ch> > Prepend your own AS a few times. this will not help, as L3 sets higher local preference for the prefixes from its customers. The guys at Sunrise are already working on this, don't worry :)

2 1

Re: [swinog] Content delivery system like Akamai?
by Mathias Schrem 03 Sep '08

03 Sep '08

Guten Tag Ich bin vom 30.08.08 bis und mit 14.09.08 nicht im Büro. In dringenden Fällen wenden Sie sich bitte an unseren Support. --- Hello I'm out of office from 30.08.08 till 14.09.08. In urgent cases please contact our Support. --- Fon: 0848 000 627 / International: +41 44 802 68 99 Fax: 0848 000 628 E-Mail: support(a)netstream.ch Freundliche Grüsse Regards Mathias Schrem

1 0

Re: [swinog] Content delivery system like Akamai?
by Scott Weeks 03 Sep '08

03 Sep '08

There're a lot of players in that space. I used to work for a company called Digital Island that bought Sandpiper to get their Footprint CDN. This was then sold to C&W who then sold it to blah, blah and it finally ended up at Savvis. There were several lawsuits with Akamai (a Hawaiian word for smart, clever or intelligent BTW) in the US about who invented what first. Akamai came out on top from what I heard after leaving the company. http://www.savvis.net/corp/Products+Services/Content+Delivery+Network/defau… You should be sure to do the market research before doing anything more than a fun and interesting project. scott --- mailinglist(a)blah.li wrote: From: Marco Fretz <mailinglist(a)blah.li> To: swinog(a)swinog.ch Subject: [swinog] Content delivery system like Akamai? Date: Tue, 02 Sep 2008 10:38:08 +0200 Hi everyone, I think most of you now Akamai and how they deliver 20% of total internet content traffic... This looks like a good explanation: http://research.microsoft.com/~ratul/akamai.html Has anyone tried to build a system similar to Akamai? I should be possible to build it, in a smaller way of course. Some modified named (bind) servers, Squid, etc. >From my point of view, Akamai does the right thing: Why try to have lots of peerings, good transit connnections, etc. when you can serve the content directly out of the most popular ISP networks. They don't need their own network infrastructure for content delivery services (hosting). Is here anyone interested in this topic? Anyone has time and interest to build, "research" and test a "small Akamai" hosting system? My idea is in general: - 2-3 providers (one of you?) - each ISP "donates" 2-3 servers for the project (physical or virtual) - find a modified bind and squid or rebuild it to do this Akamai-like "DNS and url magic" - write a lot of shell scripts for monitoring, etc. - test the bunch of magic with our company sites :P ... but maybe I'm just crazy and you might simply ignore this post :-) thanks, have a nice day best regards Marco _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

Content delivery system like Akamai?
by Marco Fretz 02 Sep '08

02 Sep '08

Hi everyone, I think most of you now Akamai and how they deliver 20% of total internet content traffic... This looks like a good explanation: http://research.microsoft.com/~ratul/akamai.html Has anyone tried to build a system similar to Akamai? I should be possible to build it, in a smaller way of course. Some modified named (bind) servers, Squid, etc. >From my point of view, Akamai does the right thing: Why try to have lots of peerings, good transit connnections, etc. when you can serve the content directly out of the most popular ISP networks. They don't need their own network infrastructure for content delivery services (hosting). Is here anyone interested in this topic? Anyone has time and interest to build, "research" and test a "small Akamai" hosting system? My idea is in general: - 2-3 providers (one of you?) - each ISP "donates" 2-3 servers for the project (physical or virtual) - find a modified bind and squid or rebuild it to do this Akamai-like "DNS and url magic" - write a lot of shell scripts for monitoring, etc. - test the bunch of magic with our company sites :P ... but maybe I'm just crazy and you might simply ignore this post :-) thanks, have a nice day best regards Marco

6 10

Re: [swinog] Content delivery system like Akamai?
by Stanislav Sinyagin 02 Sep '08

02 Sep '08

Guys, are you intending to build a service, or just want to play around? A service would involve hardware investment, SLA, on-call support staff, sales personnel, and tons of other investment - are you willing to start that today? ----- Original Message ---- > From: Marcel Prisi <marcel(a)virtua.ch> > To: swinog(a)swinog.ch > Sent: Tuesday, September 2, 2008 11:23:31 AM > Subject: Re: [swinog] Content delivery system like Akamai? > > Hi, > > There is already some software there : > > http://www.globule.org/ > > Looks quite dead, but seemed to work quite well ... Might be a start. > > > Le mardi 02 septembre 2008 à 10:38 +0200, Marco Fretz a écrit : > > Hi everyone, > > > > I think most of you now Akamai and how they deliver 20% of total > > internet content traffic... > > > > This looks like a good explanation: > > http://research.microsoft.com/~ratul/akamai.html > > > > Has anyone tried to build a system similar to Akamai? I should be > > possible to build it, in a smaller way of course. Some modified named > > (bind) servers, Squid, etc. > > > > From my point of view, Akamai does the right thing: Why try to have lots > > of peerings, good transit connnections, etc. when you can serve the > > content directly out of the most popular ISP networks. They don't need > > their own network infrastructure for content delivery services (hosting). > > > > Is here anyone interested in this topic? Anyone has time and interest to > > build, "research" and test a "small Akamai" hosting system? > > > > My idea is in general: > > - 2-3 providers (one of you?) > > - each ISP "donates" 2-3 servers for the project (physical or virtual) > > - find a modified bind and squid or rebuild it to do this Akamai-like > > "DNS and url magic" > > - write a lot of shell scripts for monitoring, etc. > > - test the bunch of magic with our company sites :P > > > > ... but maybe I'm just crazy and you might simply ignore this post :-) > > > > > > thanks, have a nice day > > best regards > > Marco > > > > _______________________________________________ > > swinog mailing list > > swinog(a)lists.swinog.ch > > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > > > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

FTP block somewhere between AS6775 and AS16215 (Global Networks -> Genotec)
by Anthony Uk / dataway GmbH 02 Sep '08

02 Sep '08

Here is an unusual situation seen from our network (AS 8237). Our direct SwissIX peering with Genotec has been down for a few weeks now (can someone from Genotec contact me about this). Since then we have noticed the following effect: If our traffic to Genotec is routed via AS 6775, then we are unable to establish an FTP connection to Genotec, although WWW works as usual. # traceroute to gic-web-bsd-016.genotec.ch (82.195.224.116): 1-30 hops, 38 byte packets 1 ZHS08 (195.216.80.8) 0.268 ms 0.146 ms 0.115 ms 2 as6775.swissix.ch (194.242.34.40) 2.41 ms 1.57 ms 2.62 ms 3 ge0.2.border-01.iwb.ipv4.as16215.net (194.242.34.16) 2.95 ms (ttl=252!) 3.17 ms (ttl=252!) 2.48 ms (ttl=252!) 4 * * * 5 * * * 6 (interrupt) # telnet 82.195.224.116 21 Trying 82.195.224.116... (Timeout) # telnet 82.195.224.116 80 Trying 82.195.224.116... Connected to 82.195.224.116. Escape character is '^]'. However if the traffic goes through another AS (e.g. AS 13030), then everything is fine. # traceroute 82.195.224.116 traceroute to gic-web-bsd-016.genotec.ch (82.195.224.116): 1-30 hops, 38 byte packets 1 ZHS08 (195.216.80.8) 0.247 ms 0.128 ms 0.175 ms 2 swissix-zh.init7.net (194.242.34.7) 0.677 ms (ttl=62!) 4.0 ms (ttl=62!) 0.659 ms (ttl=62!) 3 r1bas.ce.init7.net (213.144.128.57) 1.43 ms 3.86 ms 1.41 ms 4 gw-genotec.init7.net (77.109.134.170) 2.17 ms 2.15 ms 2.47 ms 5 * * * 6 * * * 7 * * * 8 (interrupt) # telnet 82.195.224.116 21 Trying 82.195.224.116... Connected to 82.195.224.116. Escape character is '^]'. 220- 220- .y/ 220- ::::::. ::::::. -oso+s/ `+ooo/` os+oso. `/oso+` `sMd+` `/ooo/` `/oso+` 220- `o-```/:`o.```/: `mm-.+My `dm/:+Ny mN:.:Nd` yN:.-md` /My. dm/:/Nh dm:.-:` 220- `/::::/- /::::/- .Nh .My .Nd+++o+` mm dm` dm hN. -Ms `Md+++oo `Nh 220- `/::::/- /::::/- odysyMy odyosy- dm dm` /dhsyd+ `ddo` +dyosy: +dysys` 220- `o. /:`o. /: `:--+Mo `...` .. .. `...` `.. `...` `...` 220- `::::::. ::::::. -osss: 220- 220- Genotec Internet Consulting AG 220- Hegenheimermattweg 119a, CH-4104 Allschwil BL 220- email: support(a)genotec.ch --- http: www.genotec.ch 220- 220- 220 FTP server ready Is AS 6775 really filtering port 21 at the backbone level? That would clearly be quite unusual. Can anyone else see this effect? For the time being, I am disabling our peering to AS 6775, but it would be nice for whoever it concerns to look into this. Kind regards Anthony -- | Anthony Uk | dataway GmbH | Tel. +41 44 299 9988 | | uk(a)dataway.ch | Hohlstrasse 216 | Fax +41 44 299 9989 | | PGP key ID 10DE1D2C | CH-8021 Zuerich | http://www.dataway.ch |

2 2

Re: [swinog] Content delivery system like Akamai?
by Stanislav Sinyagin 02 Sep '08

02 Sep '08

----- Original Message ---- > From: Marco Fretz <mailinglist(a)blah.li> > I've never set up IPv4 anycast services but as far as I know anycast is > only recommended for connection less / session less services (DNS, > etc...). I never saw http content delivered over anycast, because it's > TCP and you need consistent data. pls correct me if I'm wrong... Anycast is just using the same public IP address for serving the content from multiple locations. From your PC the packets will anyway definitely be delivered to only one of such locations, the nearest one (considering the routing is set up correctly), and packets from those locations will anyway reach your PC. So, there's generally no reason not to use TCP services with such a set-up.

1 0

Re: [swinog] Content delivery system like Akamai?
by Mathias Schrem 02 Sep '08

02 Sep '08

Guten Tag Ich bin vom 30.08.08 bis und mit 14.09.08 nicht im Büro. In dringenden Fällen wenden Sie sich bitte an unseren Support. --- Hello I'm out of office from 30.08.08 till 14.09.08. In urgent cases please contact our Support. --- Fon: 0848 000 627 / International: +41 44 802 68 99 Fax: 0848 000 628 E-Mail: support(a)netstream.ch Freundliche Grüsse Regards Mathias Schrem

3 2

Re: Re: Re: Re: Re: Re: Re: Re: [swinog] The truth about UCEPROTECT-Blocklists
by f.jachiet＠gpstechnik.ch 29 Aug '08

29 Aug '08

Der von ihnen angeschriebene Mitarbeiter arbeitet nicht mehr bei der Firma GPS Technik AG. Bitte wenden sie sich an info(a)gpstechnik.ch oder 0041 44 732 99 77.

13 20

Open Position
by Rene Caspar 27 Aug '08

27 Aug '08

Hi all Swisscom IT Services AG is looking for a Network Engineer Professional / Service Engineer (m/w) More informations online (german): https://jobsp.swisscom.com/sap/bc/webdynpro/sap/hrrcf_a_posting_apply?PARAM… If you're interested - please contact me offlist cu René Caspar rene.caspar(a)swisscom.com

1 0

job @ vienna
by Spiess Bernd 26 Aug '08

26 Aug '08

fyi: if someone know´s a technician who is available at vienna/austria please see our job-offer at: http://www.technix.at/content/index.php?option=com_content&task=view&id=91&… ====================================================== Ing. Bernd Spiess CTO - Leitung Core Networkmanagement Microsoft MCSA (2003), MCSE (NT4 + 2000 + 2003) Cisco CCDA, CCNA; VMWARE VCP HAPPYnet Dienstleistungs GmbH. Viktringer Platz 5 - A 9073 Viktring Telefon: +43 676 843435 401 Personal Fax: +43 463 2080 9 401 http://www.happynet.at/spiess FB-Nr: FN142184w FB-Gericht: Handelsgericht Klagenfurt Microsoft Gold Certified Partner - HP Business Partner Trend Micro Authorised Partner - Cisco Premier Partner ====================================================== ** MICROSOFT - FINALIST - PARTNER OF THE YEAR 2008! **

1 0

Cisco HWIC-3G-GSM
by Chris Gravell 26 Aug '08

26 Aug '08

Hoi, Does anyone have any direct experience with this WIC with any GSM provider's (Sunrise, Orange, Swisscom et al.) in Switzerland? I want to use this card as dial-backup to a WAN connection (Serial, DSL etc). So far I have it working with Sunrise and Orange depending on the (APN) Access Point Name and Profile. However, none of the APN provisioned by the GSM Providers'/ available for their SIM's feature what I really require. Those being: 1. Publically assigned IP 2. Static IP (Dynamic will work too - intend to create a DMVPN tunnel to backhaul one providers' IP range over the GSM providers' IP network and DMVPN will do this even where the "spoke" or GSM interface is dynamically assigned) 3. No NAT/PAT in the GSM provider's network (i.e. some APN assign a private IP to the GSM interface and NAT this at the edge of the GSM provider's network) 4. Permit ALL IP protocols (NO firewalling along the path - some GSM provider's permit only http, ftp etc) Sunrise and Orange support similar options but not all. Does anyone know if Swisscom or another provider might offer an APN product that accommodates all requirements as a solution? This cisco WIC only came out last year so info is relatively thin on the ground. The configuration is trivial but the hard part is finding a GSM Provider that will treat this as a viable backup solution for business' and not just a cut down version/ poor man's IP connectivity for mobile phones. Any ideas, tips or tricks welcomed. Thanks, Chris Gravell

2 1

xDSL sandbox?
by Beat Vontobel 26 Aug '08

26 Aug '08

Hi everybody on Swinog, some time ago I once again had to help out some friends with the setup of their new ADSL connection (the kind of private support favour probably most of you on this list also get asked for over and over again by relatives and friends). Just after I connected a laptop to the LAN-port of their router that needed to be set up, I got this mail in the inbox: > Received: from Sandbox Mail Server > From:sandbox@noreply > To: ***** > Precedence: bulk > Message-ID: ***** > Subject: Support Information > Content-Type: text/plain; charset=UTF-8 > Date: Thu, ** *** **** **:**:** -0000 > > Lieber Kunde > > Der Benutzername (Beispiel: Name(a)ISP.ch) Ihres Internet-Anschlusses > ist nicht korrekt. > Bitte überprüfen Sie den eingegebenen Benutzernamen im Router/Modem > oder wenden Sie sich an Ihren Internetanbieter. > > Mit freundlichen Grüssen > Ihr Internetanbieter [* used to overwrite some info from the original mail, containing user names and other things I don't want to share] Now, this seems like a helpful feature at first - but the thing that bothers me is that the provider of the sandbox actually "hijacks" (I didn't check it out in detail, but maybe through a DNS server with a wildcard entry or directly on the TCP/IP level, it doesn't matter how) outgoing connections for various services and redirects them to their servers. While I think this is okay maybe for HTTP to display a helpful message in the browser, I don't like somebody to "provide" other services (as POP3, SMTP, FTP, HTTPS, whatever) and be able to happily log provided user/password information (yes, I know, everybody should just use encrypted connections, always check certificates and never supply a password in plain-text to any service -- but we all know that's not the reality). Admittedly, I may seem a little bit too paranoid here, but still I'd just like to know who operates these sandbox machines: Is it the individual providers or Swisscom? What's the policy for this service? What protocols/services are hijacked? Do the connections get logged somehow? What do you think? Or is there somebody on the list who's responsible for or at least knows more about these sandbox machines? Just wonder... :) Regards, Beat Vontobel MeteoNews AG P.S.: This is my first post to the list. I was following it for quite some time now, mostly to stay up-to-date on Swiss network issues, as I too often had to debug issues outside of our own network, when our customers (we provide weather data and services) had connectivity issues. But things are really much more relaxed now, since we finally operate our own AS44238 and are no longer dependent on one single provider... of course, now it might just be me and myself who mess things up -- but then I should also be able to fix it myself instead of just have to wait until a NOC somewhere fixes a stupid routing issue... So much for a short introduction. :)

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog