swinog

swinog@lists.swinog.ch

2951 discussions

IANA DNSSEC Testbed has been Decommissioned
by Joe Abley 15 Sep '10

15 Sep '10

Colleagues, Following advanced notice sent to this list on 2010-08-03, the IANA testbed was shut down on 2010-09-03. For more details on the IANA DNSSEC testbed, see <https://ns.iana.org/>. For more details on DNSSEC deployment in the Root Zone, see <http://www.root-dnssec.org/>. Queries to the nameserver bound to NS.IANA.ORG (208.77.188.32, 2620:0:2d0:1::32) now fail with ICMP type 3 code 3 (Destination Unreachable, Port Unreachable). We suggest that anybody using the DNSSEC testbed for anything resembling production services make plans to stop doing so at their earliest convenience, if operational necessity has not already made that obvious. ICANN would once again like to thank Packet Clearing House (PCH) and Dyn.com DynTLD for their support and generous donation of global DNS resources to the IANA DNSSEC testbed. Regards, Joe Abley Director DNS Operations, ICANN

1 0

Re: [swinog] IP address are now personal data
by Martin Blapp 14 Sep '10

14 Sep '10

Hi, How does this affect Blacklist- and Whitelist vendors or organisations like dnswl.org or our swinog blacklists ? -- Martin

8 13

Swisscom UMTS/GRPS Abuse Desk Contact?
by Benoit Panizzon 09 Sep '10

09 Sep '10

Hello Could somebody point me to the Abuse Desk for Swisscom Mobile IP Customers? Again their UMTS Gateway IP is listed in various blacklists and their hotline does not know what to do about it or who could be in charge. They 'phone ping-pong' me between the mobile hotline and the bluewin hotline. :-/ Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G - Leiter IT Customer Care ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 07 CH-4133 Pratteln Fax +41 61 826 93 02 Schweiz Web http://www.imp.ch ______________________________________________________

1 0

Special SwiNOG Event "Shared Lawful Intercept Platform for ISPs"
by Pascal Gloor 08 Sep '10

08 Sep '10

Dear SwiNOGers, We are pleased to announce the first of its kind, "Special SwiNOG Event". Special SwiNOG Events are here to gather ISPs together with topics that would not fit into a "Classic" SwiNOG event. Either because the topic itself is a bit off the usual SwiNOG topics or because the SwiNOG audience is not appropriate (maybe too specialized, concerning only CTOs or CEOs, ...). So, for the first of its kind, we organise an event about "Shared Lawful Intercept Platforms". As we all know, in the last year, we had some interesting surprises from ÜPF, especially regarding the costs to build up an IP interception platform. Some vendors/integrators come now with shared solutions that can be used by multiple ISPs at the same time in order to save costs. We have chosen two of them and given them the opportunity to present their solution to a SwiNOG audience. If you're working for an ISP and you're not directly involved with Lawful Intercept, please forward this invitation to your CTO/CEO (Presentations are not only technical). Please also note that both of the presented solutions will behave better if the ISPs form an association to defend their interests and save money. If you're interested to be founder member of such an ISP association, please drop me an email. The event is FREE for the participants and is kindly sponsored by the presenters. We have a room for 50 persons. Location: Hotel Ador, Bern Date: 13 Oct. 2010, 13h00 Agenda: - 13h00 Welcome by SwiNOG - 13h15 LI Update from ÜPF - 13h30 Solution by HP/Verint - 15h30 Break - 16h00 Solution by Dreamlab Technologies - 18h00 Apéro Registration to the event: http://special.swinog.ch If you have questions, feel free to email us. Regards, Pascal Gloor President SwiNOG Organisation CH-8000 Zurich

1 0

IP address are now personal data
by Pascal Gloor 08 Sep '10

08 Sep '10

Dear community, something important for us happened today that may have some impact on our daily business. Our Federal Court just decided that IP addresses are personal data and the federal law about data protection must also be followed also for IP addresses. Collecting IP adresses for private (corporate) investigation is not legal. Companies like Logistep have to stop their activities immédiately! As ISP be carefull not to publish traffic information containing IP addresses. see you, Pascal

6 5

Probleme mit Resolving nic.ch
by Klaus Ethgen 06 Sep '10

06 Sep '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, ich habe seit einiger Zeit auf allen meinen Nameservern Probleme, die komplette Zone nic.ch zu resolven. Diese Probleme beschränken sich ausschließlich auf nic.ch, mir ist keine andere Zone aufgefallen, die Probleme macht. Vermutlich treten die Probleme seit September 2009, also mit Umstellung auf DNSSec, auf. (Ich kann es leider nicht hundertprozent genau datieren.) Nach einigen Debuggingschritten bin ich etwas ratlos. Meine Firewall läßt in beiden Fällen (bei jeweils auch einem komplett anderen Provider) alles durch, was Port 53 anbelangt. Auch ein Ausschalten der Firewall bringt die selben ergebnisse. Auch ein Test mit verschiedenen anderen DNSSec-Domainen, auch solchen, die groß sind und somit fragmentiert werden (sollten, meine MTU ist 1500), stellen keine Probleme dar. Ein tcpdump zeigt aber recht schnell, daß von den UDP-Paketen von nic.ch immer nur das erste ankommt und alle weiteren nicht auf meinem Netzwerkinterface aufschlagen. Nun meine Frage: Hat oder hatte jemand von euch schon ähnliche Probleme und wie wurden sie behoben? Wenn es sich bei nic.ch um eine unwichtige Domain handeln würde, wäre es mir ja egal, aber sie ist ja doch nicht ganz so unwichtig. Gruß Klaus Ethgen - -- Klaus Ethgen http://www.ethgen.de/ pub 2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <Klaus(a)Ethgen.de> Fingerprint: D7 67 71 C4 99 A6 D4 FE EA 40 30 57 3C 88 26 2B -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEVAwUBTBiJ0Z+OKpjRpO3lAQKt6gf/W9+ftdXlrmK8jaW1zgGEhZvu0oOm/tpl Wq+7u3GhlA08lIFSNeZxYQrs2Fea4rDVHQkxQvAHZogwvmIqNm7DemgnB1REKUD+ gUI4OPtE29npnUdKEUUSLm/XsL8bSpbKX1ESTAx44uWegVS5LDHy+1lnjOfF29In L91VUroTvfbu5Odm5/82sR7UrYMbJeR2X/3oEtONbFR8xXOW4Eguxx1eOszUS7DQ BFN+AT6+A3g+ECn1WDCvrposYIC3YLu3V1qLSY5RzoDmuGxonbJv6zRCrTODp/9i KATfUPQvvVdh6FFwc4WA7pSYZHmTnl6+YFWk7lIhU5F1pGBHbSiYtA== =DVDj -----END PGP SIGNATURE-----

6 6

Motorola ADSL Routers: DNS proxy bug?
by Benoit Panizzon 06 Sep '10

06 Sep '10

Hi all I seam to quite often stumble over this bug and wonder if the router is buggy or the client is buggy. Most Motorola ADSL/VDSL Routers which Swisscom sent to their customers for about the last two years or so, have a DNS proxy enabled by default. The dhcp clients get the IP address of the router as DNS. Now some resolvers (the linux glibc resolver at least), when resolving a hostname first ask for AAAA and when no RR and no error is returned, they ask for the A record. Now when a host is resolved that way via a Motorola DNS Proxy, the AAAA query does not result in: - No Error, no RR returned. But in - Error 0011 => No such Name. If the linux glibc receives Error 0011 it does not continue looking for an A record, but return 'Hostname not found' or similar immediately. Thus making hosts which have a valid IPv4 but first were asked for their AAAA address not reachable from linux. The workaround is to not use the DNS proxy on those routers. Windowses do not seam to have this problem, even with ipv6 enabled. So who is wrong? The linux glibc or the router? -Benoit-

2 1

SwiNOG-BE89 - Beer Event #89 - 6st of September 2010 @ Papa Joe's / ZH
by Steven Glogger 03 Sep '10

03 Sep '10

hi everybody here's the announcement for the next beer event. (and yes, sorry I'm late ,-)) let's try a new location ,-) the facts for the next event: ----------------------------- Date: 6th September 2010 Time: starting around 18.30 o'clock Location: @ the "Papa Joe's" near Bellevue ZH http://http//www.papajoes.ch/zuerich/deutsch/ Registration deadline: 06.09.2010 10:00:00 (Monday) Registration: http://swinog.mrmouse.ch Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap (+41 79 277 92 35). -steven

1 0

BÜPF...again ;)
by Pascal Gloor 02 Sep '10

02 Sep '10

Hi SwiNOGers ;-) I thought I'd say some words for all small and medium sized ISPs while I had the SDA/ATS journalist on the phone. in German: http://www.tagesanzeiger.ch/digital/internet/berwachungswahn-der-Beamten-in… in French: http://www.romandie.com/infos/news2/201008181800060AWPCH.asp in Italian: http://new.ticinonews.ch/articolo.aspx?id=200533&rubrica=14 See you, Pascal

12 12

Save the date: SwiNOG #21 - Nov 11, 2010
by Fredy Kuenzler 23 Aug '10

23 Aug '10

Dear all, Please mark in your agenda Nov 11, 2010 for SwiNOG #21. Details will follow. Best regards, Fredy Künzler for SwiNOG Core

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog