- swinog - vmaill01.sys

Re: [swinog] SwiNOG #16: Call for Presentations
by Stanislav Sinyagin 10 Mar '08

10 Mar '08

Talking of cool monitoring scripts, some of you already know http://torrus.org If it's of any interest, I can give a short presentation on the new features, challenges, and plans. cheers, stan ----- Original Message ---- > From: Fredy Kuenzler <kuenzler(a)init7.net> > To: swinog(a)swinog.ch > Sent: Monday, March 10, 2008 2:22:32 PM > Subject: [swinog] SwiNOG #16: Call for Presentations > > SwiNOG #16 is approaching ... May 14, 2008: > http://www.swinog.ch/meetings/swinog16/index.asp > If you haven't registered yet, please do it now, there are only 21 > places left. > > The agenda isn't full yet, and we would like to ask fellow SwiNOG'ers to > give a technical presentation. The community feels that in the recent > past we've had to many vendors presenting, and we would like to change this. > > So don't be shy ... even a short speech of 10 or 15 minuts would be > appreciated. Ideas: IPv6 experience, SFlow/Netflow stuff, VPN, SIP, DDOS > mitigation, AntiSpam techniques, research results ... or maybe you > have a cool monitoring script to share? > > Please submit proposals to swinog-core at swinog. > > For the Core Team: > Fredy > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >

1 0

SwiNOG #16: Call for Presentations
by Fredy Kuenzler 10 Mar '08

10 Mar '08

SwiNOG #16 is approaching ... May 14, 2008: http://www.swinog.ch/meetings/swinog16/index.asp If you haven't registered yet, please do it now, there are only 21 places left. The agenda isn't full yet, and we would like to ask fellow SwiNOG'ers to give a technical presentation. The community feels that in the recent past we've had to many vendors presenting, and we would like to change this. So don't be shy ... even a short speech of 10 or 15 minuts would be appreciated. Ideas: IPv6 experience, SFlow/Netflow stuff, VPN, SIP, DDOS mitigation, AntiSpam techniques, research results ... or maybe you have a cool monitoring script to share? Please submit proposals to swinog-core at swinog. For the Core Team: Fredy

1 0

Re: [swinog] VDSL/Zyxel P2802 HWL not "strong" enough for a smallcompany LAN?
by Xaver Aerni 06 Mar '08

06 Mar '08

What kind of Setup did you have on the Dislam... Please check if the link is going down... If yes. Swisscom should reduce the Traffic rate on the line. Standard is the max. by 25000. Some line must be fixed on 20000 or less... Greetings Xaver ----- Original Message ----- From: "Kurt A. Schumacher" <Kurt.Schumacher(a)schumi.ch> To: <swinog(a)swinog.ch> Sent: Wednesday, March 05, 2008 2:47 PM Subject: RE: [swinog] VDSL/Zyxel P2802 HWL not "strong" enough for a smallcompany LAN? > Salut Olivier, > > We are using ZyXEL ZyWALL1050/USG1000/USG300 behind various P-2802. > > In most case, we have some green.ch public IP address subnet, the P-2802 > is running as (br-)router, smaller installations PPPoE is > terminated on the ZyWALL. > > As wholesales VDSL2 is PPPoE only, there is no advantage in terminating > the tunnel direct on the router as in the ADSL times using > PPPoA then. > > Please contact me off-list for some more in-depth P-2802 information. > > Regards, > > -Kurt. > > -----Original Message----- > From: swinog-bounces(a)lists.swinog.ch > [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Olivier Mueller > Sent: Wednesday, March 05, 2008 2:32 PM > To: swinog(a)swinog.ch > Subject: [swinog] VDSL/Zyxel P2802 HWL not "strong" enough for a small > company LAN? > <snip> > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >

3 3

Re: [swinog] VDSL/Zyxel P2802 HWL not 'strong' enough for a small company LAN?
by Stanislav Sinyagin 06 Mar '08

06 Mar '08

----- Original Message ---- > From: Manuel Krummenacher <mkr(a)mkr-tech.ch> > You're right, I didn't think of that point. As a linux guy, I know what > things like "dd" and "/dev/sdb" mean, but a windows admin would have to > spend some time to get the point. If I would have to configure a PIX, I > had to read through the documentation for at least 4 hours. ;-) > > > just my two cents, I'm vendor-agnostic, and open source supporter :-) > > I'm pleased to hear that! ;-) If you need (or want) to install pfSense, I > would be happy to help you. I'm afraid I would do that myself quite easily (http://sinyagin.pp.ru/resume.html) ;-) But again, what works for few geeks may not be a proper business solution :-)

1 0

Re: [swinog] VDSL/Zyxel P2802 HWL not 'strong' enough for a small company LAN?
by Stanislav Sinyagin 06 Mar '08

06 Mar '08

----- Original Message ---- > From: Manuel Krummenacher <mkr(a)mkr-tech.ch> > I get your point. You have to do some work to get it running, but its far > away from days. If you don't need serial access, you can skip the part > with the baud-rate configuration. The interfaces can be assigned from the > web interface. (And you don't have to unmount the CF card as stated in the > article, because dd doesn't need it mounted.) I get an ALIX up and running > in about an hour incl. (simple) configuration. + 3-4 hours to read all the pieces of documentation, choosing the right board that you want to use, all the software options that are available, adding the wireless cards of proper vendor, chatting on this list etc. + 1 hour, as you say, to assemble it all together and boot for the first time + 1-2 hours to get through all the configuration options and getting to know the product + 1 hour to build a proper backup solution At the end of the day, you get your firewall which will most probably need few hours more for fine-tuning etc. For my own office, I would consider this as an option. If I'd intend to install it to a customer, it needs at least few dozens of installations before it pays back all the invested time. For a small number of installations, a small Cisco PIX firewall might be much easier to get. just my two cents, I'm vendor-agnostic, and open source supporter :-)

2 1

Re: [swinog] VDSL/Zyxel P2802 HWL not 'strong' enough for a small company LAN?
by Stanislav Sinyagin 05 Mar '08

05 Mar '08

according to what this guy writes, http://rockpenguin.wordpress.com/2008/02/23/installing-pfsense-on-the-alix2… such thing as a firewall based on Alix platform requires at least few days of work for a guy on a salary with nothing else to do :) If you start counting the cost of worktime to have it up and running, probably any off-the-shelf firewall would be much more affordable. Or even a Cisco 8XX router, whatever current SoHo series they have :) ----- Original Message ---- From: Rainer Duffner <rainer(a)ultra-secure.de> To: swinog(a)swinog.ch Sent: Wednesday, March 5, 2008 3:39:54 PM Subject: Re: [swinog] VDSL/Zyxel P2802 HWL not 'strong' enough for a small company LAN? Manuel Krummenacher schrieb: > I personally would buy an Alix board from pcengines.ch (costs about CHF > 150 with 3 LAN interfaces), install pfSense on it, switch the Zyxel to > bridge mode and be happy. ;-) With the Alix, you would also gain extra > benefits like complex packet filter rules, traffic shaping, traffic graphs > etc. (see pfsense.com for full feature list). > Seconded. I've got a previous-generation WRAP board with pfSense (just upgraded to the recently released 1.2). It should be noted that pfSense also does IPSEC and OpenVPN "SSL-VPN" and a host of other things. I'm not sure how much bandwidth the Alix-boards can shuffle, but my WRAP is supposed to max out somewhere in the 30MBit range. You can also install it on an old PC and temporary replace the Zyxel, to get some idea about the current traffic pattern. Rainer _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

Job openings @ Init Seven AG
by kleindienst＠init7.net 04 Mar '08

04 Mar '08

Dear Swinog-member After confer with Fredy Kuenzler, I'd like to introduce our job openings at Init Seven AG. We're looking for two technical oriented personalities for our technical stuff. One role is a replacement for our "team leader techniques". [1] Marco decide to leave Init Seven AG by end of May 2008. The other role is a new member in our technical crew, mainly in systems administration (Linux) and configurations. [2] You may check our job descriptions (German only, so far) on our website. Please ask any questions to my attention. Thank you much for your advertence and cu @ Swinog 16, latest. Regards, Emanuel [1] http://www.init7.net/jobs-teamleader_technik.php [2] http://www.init7.net/jobs-linux-admin.php Freundliche Grüsse Emanuel Kleindienst Init Seven AG Elias Canetti Strasse 7 CH-8050 Zürich phone: +41 44 315 44 00 fax: +41 44 315 44 01 mobile: +41 79 416 66 10 skype: emanuel.kleindienst http://www.init7.net/

1 0

Hardware: Anyone needs a Catalyst 4000 24-Port 100Base-FX?
by Peter Schwindt 04 Mar '08

04 Mar '08

Hello, cleaning things up I found upper mentioned line card (part number WS-X4124-FX-MT). Anyone in need of it? If so, please contact me off-list. Thanks, Peter -- Peter Schwindt --------------------- mailto:schwindt@ba-loerrach.de -- Rechenzentrum Tel: +49 7621/2071-202 Berufsakademie Loerrach Fax: +49 7621/2071-209 -- Hangstr. 46-50, 79539 Loerrach ---------- http://www.ba-loerrach.de/ --

1 0

Job openings @ Init Seven AG
by kleindienst 04 Mar '08

04 Mar '08

Dear Swinog-member After confer with Fredy Kuenzler, I'd like to introduce our job openings at Init Seven AG. We're looking for two technical oriented guys for our technical stuff. One role is a replacement for our "team leader techniques". [1] Marco decide to leave Init Seven AG by end of May 2008. The other role is a new member in our technical crew, mainly in systems administration (Linux) and configurations. [2] You may check out job descriptions (German only, so far) on our website. Please ask any questions to my attention. Thank you much for your advertence and cu @ Swinog 16, latest. Regards, Emanuel [1] http://www.init7.net/jobs-teamleader_technik.php [2] http://www.init7.net/jobs-linux-admin.php Freundliche Grüsse Emanuel Kleindienst Init Seven AG Elias Canetti Strasse 7 CH-8050 Zürich phone: +41 44 315 44 00 fax: +41 44 315 44 01 mobile: +41 79 416 66 10 skype: emanuel.kleindienst http://www.init7.net/ -- Init Seven AG, OpenWebmail

1 0

Job openings @ Init Seven AG
by Emanuel Kleindienst / Init7 03 Mar '08

03 Mar '08

Dear Swinog-member After confer with Fredy Kuenzler, I'd like to introduce our job openings at Init Seven AG. We're looking for two technical oriented personalities for our technical stuff. One role is a replacement for our "team leader techniques". Marco decide to leave Init Seven AG by end of May 2008. The other role is a new member in our technical crew, mainly in systems administration (Linux) and configurations. You may check out job descriptions (German only, so far) on our website, [1] and [2]. Please ask any questions to my attention. Thank you much for your advertence and cu @ Swinog 16, latest. Regards, Emanuel [1] http://www.init7.net/jobs-teamleader_technik.php [2] http://www.init7.net/jobs-linux-admin.php Freundliche Grüsse Emanuel Kleindienst Init Seven AG Elias Canetti Strasse 7 CH-8050 Zürich phone: +41 44 315 44 00 fax: +41 44 315 44 01 mobile: +41 79 416 66 10 skype: emanuel.kleindienst http://www.init7.net/

1 0

problem reaching AS5511
by Philippe Strauss 03 Mar '08

03 Mar '08

-- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch

1 0

problem reaching AS5511
by Philippe Strauss 03 Mar '08

03 Mar '08

Hello swinogers, We (DFi, AS12333) have problems reaching AS5511 (OpenTransit). Anyone else seeing this? regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch

1 0

DSL Problem with Sunrise
by Xaver Aerni 02 Mar '08

02 Mar '08

Hello, could an Sunrise Technicien me contact offline. Thanks and greetings X. Aerni ********************************************** Xaver Aerni Zürichstrasse 10a 8340 Hinwil Tel. 001 707 361 68 39

1 0

AW: [swinog] affordable queueing solution for a small network?
by Reto Burkhalter 01 Mar '08

01 Mar '08

Hi Lothar You may also want to have a look at pfSense [1] running on a ALIX platform [2]. Should be fast and flexible enough for your needs. [1] http://www.pfsense.org/ [2] http://www.pcengines.ch/alix.htm I think scaling is not your problem - 2 Mbps is not very scary. Regards, Reto > -----Ursprüngliche Nachricht----- > Von: Lothar Gramelspacher [mailto:lothar@gramelspacher.ch] > Gesendet: Freitag, 29. Februar 2008 20:37 > An: swinog(a)swinog.ch > Betreff: [swinog] affordable queueing solution for a small network? > > > Hi swinog, > > in order to keep a small villages network in the blackforest > operational I am looking for some advice how to implement a working > queuing solution. > > Background: > -small village in a underdeveloped area concerning internet > connectivity (aka black-forest/ Germany) has no DSL or alike high > speed connectivity > -local IT company booked a 2mbit/s SDSL line and distributes the > bandwidth using WLAN > -of course, some of the users "abuse" the system by contious emule, > torrent and alike downloads > -latency for other for "normal" use is increased > > Therefore I look towards some advice to enable a fair bandwith > distribution. > -affordable (Open Source preferred) > -enables some kind of provisioning > -distributes bandwidth in a fair way > -can filter/ slow down p2p to a lower priority > > > I am aware of m0n0wall and have played with it in my home > environment, > but have no experience how it you scale > > I have some blog postings about that network at > http://blog.gramels.info/blog/plugin/tag/wiede> n+wlan > . > > > Any tips welcome. > > -L > -- > http://blog.gramels.info/blog > > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >

2 1

Anyone using Plesk Expand?
by Benoit Panizzon 01 Mar '08

01 Mar '08

Hi all I'm trying to install Plesk Expand to manage a multi server hosting environment. Installing works fine, but I don't manage to get it to do what it I expect it to do, like using a dedicated 'centralized' mailserver for all customers etc. Plesk support does not seam to be existent. I just got hold of a sales and all he could tell me is that I did everything right and that he didn't know why it does not work. So is ther somebody using plesk expand on this list who could give me some advices on what I did wrong and who I could ask some specific questions? -Benoit-

1 0

affordable queueing solution for a small network?
by Lothar Gramelspacher 01 Mar '08

01 Mar '08

Hi swinog, in order to keep a small villages network in the blackforest operational I am looking for some advice how to implement a working queuing solution. Background: -small village in a underdeveloped area concerning internet connectivity (aka black-forest/ Germany) has no DSL or alike high speed connectivity -local IT company booked a 2mbit/s SDSL line and distributes the bandwidth using WLAN -of course, some of the users "abuse" the system by contious emule, torrent and alike downloads -latency for other for "normal" use is increased Therefore I look towards some advice to enable a fair bandwith distribution. -affordable (Open Source preferred) -enables some kind of provisioning -distributes bandwidth in a fair way -can filter/ slow down p2p to a lower priority I am aware of m0n0wall and have played with it in my home environment, but have no experience how it you scale I have some blog postings about that network at http://blog.gramels.info/blog/plugin/tag/wieden+wlan . Any tips welcome. -L -- http://blog.gramels.info/blog

3 2

Message could not be delivered
by schaefer＠alphanet.ch 29 Feb '08

29 Feb '08

The original message was received at Fri, 29 Feb 2008 18:04:51 +0000 from alphanet.ch [168.8.94.202] ----- The following addresses had permanent fatal errors ----- swinog(a)swinog.ch

3 3

mx.freesurf.ch harddisk
by Raffael Schmid 28 Feb '08

28 Feb '08

Hello swinog! Since about two days we get this message in our logs. I hope that someone of sunrise/freesurf reads this list, because maybe they should check their harddisk? postfix/smtp[18192]: 63E4860005: host mx.freesurf.ch[194.158.229.68] said: 421 4.3.0 collect: Cannot write q1/df/dfm1S7B29K019747 (bfcommit, uid=10230, gid=1004): Read-only file system (in reply to end of DATA command) Looks like there is a "errors=remount-ro" in their fstab ;) Greetings raf

1 0

Inter Vlan-Routing
by Andre Keller 27 Feb '08

27 Feb '08

Hi Swinogger's Does the Cisco 2960 series support inter-vlan routing? I somewhere read that all cisco devices with ios higher than version 12 (or something near that ;-)) support that. But I couldn't confirm that statement with informations from the cisco website. Can please someone of you cisco wizards light me up? Regards André

2 2

Unbundled ADSL in Volketswil ?
by Daniele Guazzoni 22 Feb '08

22 Feb '08

Sorry to bother you during your friday evening beer... ;-) Anyone knows if there is any ISP offering unbundled ADSL in Volketswil ? Answer please directly to me. Thanx Daniele -- This message has been scanned for viruses and dangerous content by MailGate, and is believed to be clean.

1 0

MS Ldap
by Silvan Gebhardt 22 Feb '08

22 Feb '08

Hello Mailinglist I have a small question I could not find out how to solve yet. I am writing a small app which is build on PHP. Goals are: 1) Authentication by Kerberos, on W2k3 attached. This part works fine 2) I will be able to select Users from a LDAP query and Put it onto a separate table on a mysql db which makes these users to Administrators 3) Be able to delete the users from that database. this part works the rest of the app is not important here, but if someone interested I can show some stuff now my problem is: I want to do this following bind (partially censored) ################### CODE ################## function getadusers() { $krbuser=explode('@',$_SERVER[REMOTE_USER]); $ds = ldap_connect("domain.local"); // must be a valid LDAP server! ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3); ldap_set_option($ad, LDAP_OPT_REFERRALS, 0); if ($ds) { $r=ldap_bind($ds,"CN=Administrator,CN=Users,dc=Domain,dc=local","password"); $searchvalue=$_SERVER[REMOTE_USER]; $sr=ldap_list($ds,"OU=Normale Benutzer,dc=Domain,dc=local","(CN=*)"); $info = ldap_get_entries($ds, $sr); //echo ("<pre>".var_dump($info)."</pre>"); //echo $entries[$i]["displayname"][0]."<br />"; ldap_close($ds); return($info); } else { echo "<h4>Unable to connect to LDAP server</h4>"; } } ################### End COde ################# This query is sometimes sooo slow i just give up and hit reload and even this does not work normally. can someone help me by either optimizing this query, which should just give out a list of the sAMAccount names, within others? Or is it a setting on the LDAP Server? This is a standard LDAP Server from Active Directory, and the userlist is also small (10, 15 users) Thank you if anyone has a clue Silvan

2 1

Repair
by Silvan Gebhardt 20 Feb '08

20 Feb '08

Hello Mailinglist I seek someone experienced with a solder iron to do this following fix for me: http://www.cl.cam.ac.uk/~mgk25/sunray/caps-repair.html I offer a dinner, or a fair amount of money if someone here would be willing to help me with this fix... can someone help me with this? regards, Silvan

2 1

SwiNOG meetings 2008 - Save the date!
by Michel Renfer 20 Feb '08

20 Feb '08

Hi All! We are very happy to announce the dates for both SwiNOG meetings in 2008: SwiNOG #16 Wednesday, 14.05.2008 Main sponsor: GAS&COM AG SwiNOG #17 Wednesday, 22.10.2008 Main sponsor: Global Crossing For SwiNOG #16 the registration is now open! If you would like to hold a presentation, please mail to swinog-core at swinog dot ch. cheers, michel

1 0

Graphical NetFlow AS stats tool?
by Manuel Kasper 19 Feb '08

19 Feb '08

Hello, does anybody on this list know of a free/open source tool that collects NetFlow AS aggregation records from a number of routers and produces traffic graphs per AS that show how much traffic came in from or went out to a given AS, and over which link (-> multiple upstreams/peering links)? I'm asking because I've made something like that on a whim for Monzoon Networks to help with BGP traffic engineering, and would be happy to polish it up a bit and then release it, but if the solution is already out there (and better than what I've come up with ;), I wouldn't bother. Cheers, Manuel -- Manuel Kasper Systems Engineer, Dipl. Ing. FH Monzoon Networks AG, www.monzoon.net Riedthofstrasse 124, CH-8105 Regensdorf Phone: +41 43 5000474, Fax: +41 43 5000478 mkasper(a)monzoon.net

8 10

Connecting Issues Bluewin -> Google?
by Andre Keller 19 Feb '08

19 Feb '08

Hi guys are there any known issues in connecting google.ch from Bluewin ADSL. I got a call from a customer and he said he couldn't reach google.ch. So i've done a traceroute an it is getting until some ip-plus router at tix... Can anyone confirm this? Regards André

3 4

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog