- swinog - vmaill01.sys

Attack to ch.pool.ntp.org?
by Mario Iseli 16 Nov '07

16 Nov '07

Hi, my 3 servers in my personal serverfarm are all listed in the ch.pool.ntp.org zone. As I think there are also other SwiNOG people running ntpd's for that project. For about 36 hours my firewall log is growing and growing, looks like a distributed attack from a botnet. Has anyone the same problem? Any idea what could be done? I mean - it's not really disturbing yet, but strange. Here the log analysis from one of the machines: http://aphrodite.uid0.ch/fwanalog/today.html Thank you for your comments... Regards, -- .''`. Mario Iseli <mario(a)debian.org> : :' : Debian GNU/Linux developer `. `'` `- Debian - when you have better things to do than fixing a system

2 1

someone from Colt on this list?
by Philippe Strauss 16 Nov '07

16 Nov '07

with BGP and ripe-robot knowledge before my nerves get exhausted.... -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch

2 1

cisco fan
by Steven Glogger 15 Nov '07

15 Nov '07

hi all does someone has a spare WS-C6K-9SLOT-FAN2 fan arond? plz contact me offlist. greetings -steven

2 2

PA-FE-TX
by Michel Renfer 15 Nov '07

15 Nov '07

Hi All Anyone have one of these to sell? cheers, michel

1 0

Google
by Xaver Aerni 14 Nov '07

14 Nov '07

Could someone from Google (Switzerland) me contact offline. Thanks and Greetings X. Aerni Xariffusion Informatik & Telecom

1 0

Re: [swinog] UCEProtect Blacklist (Update)
by Stanislav Sinyagin 13 Nov '07

13 Nov '07

> No-one is likely to use uceprotect level3 to block emails, but they > might very well use it for scoring. > > > /Per Jessen, Herrliberg every AS with residential broadband users in it will get easily into that list, so what's the value of it?

2 1

VoIP
by Per Jessen 13 Nov '07

13 Nov '07

All, I've got a guy working from home in his house in France, not far from Basel. I think he has an ADSL line with wanadoo.fr. He's connected to our exchange over VoIP using SIP. Last week the line quality was perfectly fine, but starting yesterday it's been terrible. I looked at a traceroute, and it appears that his connection from wanadoo.fr to our line (easynet) is routed via UK, New York, London and Frankfurt, which produces awful delays. For the moment, I've asked easynet support to help, but I was just wondering what you guys would do with a case like this? /Per Jessen, Herrliberg -- http://www.spamchek.com/ - your spam is our business.

3 3

UCEProtect Blacklist
by Marco Meile 13 Nov '07

13 Nov '07

Hi there We have some Problems with the UCEProtect.net blacklist. He lists some Subnets and AS who dosnt send Spam from us Customers... e.g. the AS6730 (Sunrise) a lot of us costumers using this Provider have Problem on E-Mail Services. But really Spammers are not listed :D Maybe the Blacklists add some subnets of Big Companys, cause for delisting you need to pay some money... dnsstuff.com uses this blacklist in the lookup tool i dont know how many providers using this list. Anyone there know more about this Blacklist? The Service is Provided by admins.ws and for the fun try www.admins.ws/../../etc/passwd Marco -- For list-off Contact use: silicium (-at-) natural-geek.org PGP: 49F8 C29E 4F4E E438 BD69 0BCE D1DA 4B0C 7C32 C715 -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS d-- s-:- a-- C++ UL+++ P-- L+++ E--- W++ N+ o K- w-- O-- M V- PS+++ PE++ Y+ PGP++ t 5 X++ R tv- b+ DI-- D+ G++ e+ h++ r y+ ------END GEEK CODE BLOCK------

9 24

US internet: A story of surveillance
by Philippe Strauss 08 Nov '07

08 Nov '07

interesting article, with more details than previous ones on the topic: http://www.washingtonpost.com/wp-dyn/content/article/2007/11/07/AR200711070… -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch

1 0

verrizon and swisscom in the schoolyard
by Philippe Strauss 07 Nov '07

07 Nov '07

rustine:/etc/smokeping# traceroute 62.202.14.193 traceroute to 62.202.14.193 (62.202.14.193), 30 hops max, 40 byte packets 1 fa0-0.rt1.plo1.dfinet.net (195.70.0.65) 1.500 ms 0.675 ms 0.875 ms 2 fa0-6.sw-bb2.cc.dfinet.net (195.70.11.1) 1.093 ms 1.556 ms 0.847 ms 3 gi0-1.rt-b1.cc.dfinet.net (195.70.0.3) 1.117 ms 1.020 ms 0.847 ms 4 POS8-1-0.GW2.GVA2.ALTER.NET (146.188.70.101) 2.361 ms 1.036 ms 1.503 ms 5 GigabitEthernet3-0.CR3.GVA2.ALTER.NET (146.188.6.5) 0.998 ms 2.059 ms 0.921 ms 6 so-2-2-0.XR1.ZUR4.ALTER.NET (146.188.2.85) 5.754 ms 4.690 ms 5.358 ms 7 so-2-0-0.TL2.ZUR3.ALTER.NET (146.188.3.97) 5.090 ms 4.691 ms 4.775 ms 8 so-4-0-0.IR1.NYC12.ALTER.NET (146.188.3.201) 91.318 ms 91.107 ms 91.291 ms 9 0.so-0-2-0.IL3.NYC9.ALTER.NET (152.63.23.57) 91.972 ms 92.164 ms 92.144 ms 10 0.so-7-0-0.XL3.NYC4.ALTER.NET (152.63.10.21) 91.724 ms 91.529 ms 91.444 ms 11 510.ATM6-0.IG4.NYC4.ALTER.NET (152.63.20.57) 91.472 ms 91.618 ms 91.574 ms 12 swisscom-oc3-gw.customer.alter.net (157.130.219.226) 95.619 ms 95.028 ms 94.691 ms 13 i79zhb-005-pos4-0.bb.ip-plus.net (138.187.159.5) 221.616 ms 209.767 ms 216.794 ms 14 tge3-3.bwrt1inb.bluewin.ch (195.186.0.113) 98.431 ms 98.851 ms 98.780 ms 15 if98.ip-plus.bluewin.ch (195.186.0.98) 98.910 ms 98.789 ms 99.633 ms 16 ge0-1.bwrtrip1zhb.bluewin.ch (195.186.120.178) 98.896 ms 98.716 ms 98.524 ms 17 ge0-2.bwrtrip1zhh.bluewin.ch (195.186.55.226) 98.790 ms 98.805 ms 99.091 ms 18 ge0-2.bwadf2zhh.bluewin.ch (195.186.122.131) 99.276 ms 100.072 ms 99.006 ms 19 193.14.202.62.fix.bluewin.ch (62.202.14.193) 111.280 ms 112.007 ms 111.729 ms 20 * * * behave yourself, boys! -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch

1 0

Re[2]: [swinog] adobe.com down?
by Andreas Weiler - Kabelfernsehen Boedeli AG 07 Nov '07

07 Nov '07

Now also reachable from here again. Looks like there was a problem: http://www.heise.de/foren/go.shtml?read=1&msg_id=13843701&forum_id=10541&sh… greetz, Andreas Weiler Am Mittwoch, 7. November 2007 um 14:35 schrieben Sie: Y> working also over sunrise. Y> cheers yves Y> Quoting Silvan Gebhardt <pcdog(a)pcdog.ch>: >> working also from init7 >> >> regards, silvan >> >> Am 07.11.2007 um 14:24 schrieb <Robert.Guentensperger(a)swisscom.com> >> <Robert.Guentensperger(a)swisscom.com>: >> >>> http://www.adobe.com/de/ >>> >>> is working from Bluewin. >>> >>> Cheers, >>> Günti >>> >>> -----Original Message----- >>> From: swinog-bounces(a)lists.swinog.ch >>> [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Andreas Weiler >>> - Kabelfernsehen Boedeli AG >>> Sent: Wednesday, November 07, 2007 2:19 PM >>> To: swinog(a)lists.swinog.ch >>> Subject: [swinog] adobe.com down? >>> >>> Hi all >>> >>> I'm getting no answer from the adobe.com or adobe.de site. Looks >>> like adobe is not reachable at the moment. >>> >>> Can anybody confirm this? >>> >>> Andreas Weiler >>> Kabelfernsehen Boedeli AG >>> >>> _______________________________________________ >>> swinog mailing list >>> swinog(a)lists.swinog.ch >>> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >>> _______________________________________________ >>> swinog mailing list >>> swinog(a)lists.swinog.ch >>> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >> >> _______________________________________________ >> swinog mailing list >> swinog(a)lists.swinog.ch >> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog Y> ---------------------------------------------------------------- Y> ServerBeach.ch "your professional hosting provider" Y> _______________________________________________ Y> swinog mailing list Y> swinog(a)lists.swinog.ch Y> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

1 0

adobe.com down?
by Andreas Weiler - Kabelfernsehen Boedeli AG 07 Nov '07

07 Nov '07

Hi all I'm getting no answer from the adobe.com or adobe.de site. Looks like adobe is not reachable at the moment. Can anybody confirm this? Andreas Weiler Kabelfernsehen Boedeli AG

6 6

Beer-Event Calendar 2008 @ Zurich
by Steven Glogger 07 Nov '07

07 Nov '07

hi all i'm glad to announce already the dates for BE57-68 ,-) Event | Date & Time ------------------------------------- SwiNOG-BE57 | Mo 14.01.2008 18:30 SwiNOG-BE58 | Mo 04.02.2008 18:30 SwiNOG-BE59 | Mo 03.03.2008 18:30 SwiNOG-BE60 | Mo 07.04.2008 18:30 SwiNOG-BE61 | Mo 05.05.2008 18:30 SwiNOG-BE62 | Mo 02.06.2008 18:30 SwiNOG-BE63 | Mo 07.07.2008 18:30 SwiNOG-BE64 | Mo 04.08.2008 18:30 SwiNOG-BE65 | Mo 01.09.2008 18:30 SwiNOG-BE66 | Mo 06.10.2008 18:30 SwiNOG-BE67 | Mo 03.11.2008 18:30 SwiNOG-BE68 | Mo 01.12.2008 18:30 i've attached a zip file with all the calendar entries for your favorite calendar application. hope this will work for you. those *.ics files are supposed to be RFC conform - even my outlook feeds them in correctly ,-) if this is not working for you: type it yourself in your $calendarapplication. greetings -steven

1 0

Patch Documentation Tool
by Steven.Glogger＠swisscom.com 06 Nov '07

06 Nov '07

hi all i'm just wondering what is the community using to document patchings within their datacenter? sure, there will be a lot of people telling me: excel - please no such answers ,-) i'm looking for a kind of "intelligent" application (or at least based on a database). anything around? maybe opensource based? -steven

2 1

SwiNOG-BE56 - Beer Event 56 - 10th of December @ Le Dezaley / Zurich
by Steven Glogger 05 Nov '07

05 Nov '07

hi all hey, winter is coming ,-) time for another famous fondue (you know, that cheese-thing) event ;-) the facts for the next event: -------------------------------------- Date: 10th of December 2007 Time: starting around 18.30 o'clock Location: @ the "Le Dézaley" in the Dörfli Registration deadline: 06.12.2007 21:00:00 Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap (079 277 92 35). greetings -steven ps: hey google folks - try the map on the website instead of google-maps ,-)

1 0

AW: [swinog] Patch Documentation Tool
by Reto Burkhalter 05 Nov '07

05 Nov '07

Hi Steven I was looking at two tools: - http://sourceforge.net/projects/opencabling - http://www.odcnms.org/ Both of them have their strengths and weaknesses (I think both are still beta and have some bugs..) Regards, Reto > -----Ursprüngliche Nachricht----- > Von: Steven.Glogger(a)swisscom.com [mailto:Steven.Glogger@swisscom.com] > Gesendet: Montag, 5. November 2007 17:24 > An: swinog(a)swinog.ch > Betreff: [swinog] Patch Documentation Tool > > > hi all > > i'm just wondering what is the community using to document patchings > within their datacenter? > sure, there will be a lot of people telling me: excel - please no such > answers ,-) > > i'm looking for a kind of "intelligent" application (or at least based > on a database). > anything around? maybe opensource based? > > -steven > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >

1 0

Blacklist at bl.csma.biz
by Martin Ebnoether 02 Nov '07

02 Nov '07

Hi Swinogers and Swinogettes. Does anyone here know the blacklist at bl.csma.biz? One of our users wanted to send a mail somewhere and it was rejected by the remote mailserver because we are listed in that list. Though, bl.csma.biz does not resolve. My understanding of blacklist is, that if there is no result for the check (that is based on DNS, right?), it assumes it is listed. In that case, the remote mailserver, rejecting mails from listed servers, would accept no mails at all? Now they will have serious fun over there, since the remote server belongs to one of the big US stock exchanges... =:-) Oh and I fully agree that it is a very bad idea to block mails on a single criteria. CU, Martin -- Ungenügender Speicher zur Anzeige der

2 1

bluewin mail servers "load balancers" don't like AAAA -> breaks email
by Jeroen Massar 02 Nov '07

02 Nov '07

As somebody else mentioned today there seems to be something fishy with the bluewin mailservers, I guess the culprit is the "Load balances" which seem to act as NS's. But as these are really nice Load Balancers are future proof, the real hurdle they are hitting is quite simple: that bloody IPv6... Lets dig the loadbalancers [1] for the answer: 8<--------------------------------------------------------------------- $ dig @ns.bwlbmsg1zhh.bluewin.ch. mxbw.bluewin.ch. aaaa ; <<>> DiG 9.4.1-P1 <<>> @ns.bwlbmsg1zhh.bluewin.ch. mxbw.bluewin.ch. aaaa ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 22394 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;mxbw.bluewin.ch. IN AAAA ;; Query time: 16 msec ;; SERVER: 195.186.19.8#53(195.186.19.8) ;; WHEN: Wed Oct 31 19:12:42 2007 ;; MSG SIZE rcvd: 33 --------------------------------------------------------------------->8 And tada, my sweet postfix/bind/powerdns combo will give up on it as there is clearly no answer to be gotten for that hostlabel. As such I would *love* to mail postmaster(a)bluewin.ch (assuming that somebody is at home there), but without taking out AAAA requesting out the whole chain of software I really can't mail them :( Not falling over the folks from Bluewin, but it is the only way to contact them AND to show how things can break in mysterious ways :( The BBC had a similar problem a few years back. I do hope that you folks can fix this up, I noticed this actually because a @bluewin.ch user couldn't signup to SixXS as she was getting rejected. Hmmmm, now that we are trying to query those boxes some more I can't get this answer out of this setup.... Please folks @ Bluewin, check this out and fix it ;) Greets, Jeroen -- [1] dig +trace mxbw.bluewin.ch (sometimes apparently) reveals: <snip> bluewin.ch. 43200 IN NS dns2.bluewin.ch. bluewin.ch. 43200 IN NS dns4.bluewin.ch. bluewin.ch. 43200 IN NS dns1.bluewin.ch. bluewin.ch. 43200 IN NS dns3.bluewin.ch. ;; Received 173 bytes from 2001:dc0:1:0:4777::140#53(sec3.apnic.net) in 482 ms mxbw.bluewin.ch. 86400 IN NS ns.bwlbmsg1zhh.bluewin.ch. mxbw.bluewin.ch. 86400 IN NS ns.bwlbmsg1zhb.bluewin.ch. ;; Received 123 bytes from 195.186.1.111#53(dns2.bluewin.ch) in 16 ms

3 5

Linux, LDAP/Krb auth & samba - no group access
by Tschosch(y)/Josh/Whatever 02 Nov '07

02 Nov '07

Hi List Anyone ever had to do with a Domain integrated samba? (otherwise just delete this mail :)) I got a bit a strange issue: I have a w2k3 ADS with Server for Unix (schema-extension so that UID, Homedir and loginshell can be hold within the ADS), have a Linux Box integrated into ADS (fully integrated, LDAP & Kerberos5, no winbind needed) The domain users are visible via 'getent passwd/group', the users can login and have the right memberships. Everything is fine, user can access files which have the appropriate rights on group (root:"Domain Users", rwxrwx---) When a file is owned by the domain user itself samba lets me do whatever i want to do. But, when the shared directory is owned by someone other, but the domainuser should have access through the group permissions, nothing works anymore and i get a NT_ACCESS_DENIED A bit testing showed that files on the samba can only be accessed when the file is owned by the appropriate user, but not else (neither Group nor World accessrights seems to work) After spending hours with google i feel quite alone :) Did someone else ever had issues with domain-joined samba and group-access? Cheers Josh

1 0

2nd Swiss FOSS compatible lobbyists meeting in Berne
by Tonnerre LOMBARD 02 Nov '07

02 Nov '07

Salut, The call to the beer event reminded me that I have actually forgotten to invite you fellow SwiNoggians to my political activists' party in Berne, taking place on Monday at 18:00 in the railway station. Here is the announcement: http://www.fsfe.org/en/events/invitation_to_the_2nd_swiss_foss_compatible_l… I am hoping to see a lot of people there from various parts of the country. Tonnerre

1 0

SwiNOG-BE54 - Beer Event 54 - 1st of October 2007 @ Don Weber / Zürich
by Steven.Glogger＠swisscom.com 01 Nov '07

01 Nov '07

hi all here is the announcement for the next beer event. ,-) the facts for the next event: -------------------------------------- Date: 1st of October 2007 Time: starting around 18.30 o'clock Location: @ the "Don Weber <http://www.donweber.ch/> " (Heinrichstrasse 213, Near TIX). It's between the Escher-Wys Platz and the Cinemax. Attention they moved! Check out the homepage for details. Registration deadline: 01.10.2007 10:00:00 Please register here: http://swinog.mrmouse.ch/ <https://webmail.swisscom.com/exchweb/bin/redir.asp?URL=http://swinog.mrmous…> since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap. greetings -steven

2 2

Bluewin Kontakt
by Michel Zenhäusern 31 Oct '07

31 Oct '07

Hallo Liste Ich bin auf der Suche nach einem technischen Kontakt, welche für den Betrieb der Bluewin/Bluemail Mailserver zuständig ist. Wir sind auf ein Problem gestossen welches "Bluewin-seitig" gelöst werden muss. Bitte kontaktiere mich off-topic. Gruss Michel -- webstyle GmbH http://www.webstyle.ch/

1 0

ImproWare ist hiring: Kundendienst Mitarbeiter (First Level Support / Shop) 100%
by Benoit Panizzon 30 Oct '07

30 Oct '07

Hi all If anyone is interrested http://jobs.imp.ch/IMP_Kundendienst_Stellenausschreibung.pdf Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G - System Services ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

1 0

New cisco dealer ?
by roger＠mgz.ch 30 Oct '07

30 Oct '07

i was speakless .. http://www.microspot.ch/microspot/__HYBRIS__/category/Microspot.ch/JJ_ Bridges_Router&manid=Z00087/detail.jsf Roger

10 10

Why is dedicated hosting so incredibly expensive in Switzerland?
by Per Jessen 29 Oct '07

29 Oct '07

This is probably somewhat off-topic, but some of you guys might have a hint for me. I've been researching the various offers of dedicated hosting in Switzerland, mostly looking at providers listed on providerliste.ch. Everything I have come across is not only 4-5 times the price of what we're renting right now (at Hetzner in Germany), it is also technically inferior. At Hetzner, the entry level DS3000 is a dual-core 64Bit AMD, 2Gb RAM and 2x400Gb disk. Plus 1Tb transfer-volume/month. This is available at EUR49/month. To get anything remotely similar in Switzerland I have to pay SFr300 or more per month. Given that we would need 4 or 5 such servers, colocation very quickly becomes interesting instead. Have I missed any really good dedicated server offerings? Any colocation places in or around Zurich you would recommend? /Per Jessen, Herrliberg

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog