swinog

swinog@lists.swinog.ch

1 participants
2934 discussions

Network Latency Calculator
by Tissieres, Jerome 25 Mar '09

25 Mar '09

Hi everybody, This could help some of us to explain latency to customers. http://www.netqos.com/resourceroom/calculator/index.html There's other nice tools on the same web site. Cheers, Jerome ________________________________ Jerome Tissieres - Senior Network Administrator Tel: +41 21 618 03 77 Fax: +41 21 618 07 07 jerome.tissieres(a)imd.ch <mailto:jerome.tissieres@imd.ch> IMD Ch. de Bellerive 23, P.O. Box 915 CH - 1001 Lausanne, Switzerland www.imd.ch <http://www.imd.ch> P please consider the environment before printing this email

1 0

Fwd: AW: "Hackerparagraph"
by Andreas Fink 25 Mar '09

25 Mar '09

Collegues, The federal adminstration wants to change the law about cyber crime. See also: > http://www.admin.ch/ch/d/gg/pc/pendent.html#EJPD (or especially Genehmigung und Umsetzung des Übereinkommens des Europarates über die Cyberkriminalität ) I think this includes some dynamite in the details First of all: I think its time for the government to face the fact that there are many open ends (like the discussion we had with the order from Canton de Vaud). My biggest issue with facing CyberCrime is however that not the law is the issue but the ability of the police force to enforce the law. Mainly due to lack of knowledge and probably financial resources. CyberCrime is happening every day and is happening Quick. The processes on police work where maybe accurate 1960 but lack the needed speed of todays events. I had two incidents in my own company where it has clearly shown that the police has not the slightest clue what's happening on the internet, besides how to fix the issue. Costed me a hell of a lot of money at the end even it was a crystal clear case for me (as a techie...). But I must admit its not the fault of the law, its the fault of the execution of the law and the financial resources needed to follow those cases. The law above however has a section which I think is dangerous and could affect our work: Das materielle Strafrecht mit seinen am 1. Januar 1995 in Kraft getretenen Bestim- mungen im Bereich "Computerstrafrecht" vermag den Erfordernissen der Konventi- on über weite Strecken zu genügen. Anpassungsbedarf ergibt sich bezüglich des Straftatbestandes des unbefugten Eindringens in ein Datenverarbeitungssystem (Art. 143bis des Strafgesetzbuches, sog. "Hacking"-Tatbestand). Hier wird vorgeschlagen, eine Vorverlagerung der Strafbarkeit vorzunehmen: Strafbar soll sich auch machen, wer Programme oder Daten zugänglich macht im Wissen, dass diese für das illegale Eindringen in ein Computersystem verwendet werden sollen. Daneben wird, ausser- halb der Erfordernisse gemäss Konvention, vorgeschlagen, das durch die Lehre verbreitet kritisierte Merkmal der fehlenden Bereicherungsabsicht in Artikel 143bis StGB zu streichen. Now what does that mean? It is basically what the germans have done under the "Hackerparagraph". It disallows software which could potentially be used for hacking to be distributed. The result of this was for example that in germany the WiFi tools to verify your WiFi security dissapeared. Why? because someone COULD use it for hacking. If you think this a bit further, you could use a C compiler to write a hacker tool, so it could be considered a tool to do hacking and we all very well know know someone can write hacking tools in C. So to bring this ad absurdum, it could theoretically forbid us to distribute a C compiler. Or think about Linux. Of course this is a bit far reached but there are many gray zones in between. For example I use Wireshark, a great open source packet analyzer for my daily work because I develop network protocols or verify network protocols. Of course someone could use this for hacking to listen to passwords in cleartext (for example from old POP3 accounts). So if we publish a wireshark version on our server, we become criminal? The result will be that security tools to verify your security will be forbidden. You will not be able to verify if your machine is crackable or not. The real bad boys out there (and I'm not saying a hacker is a bad boy by definition because most are honest and more in the area of security researcher than anything else) will not give a dam if they are allowed to distribute this hacking software because they per definition want to commit crime. So they will get hold of that software and just use it. And because no one was able to verify if POP3 cleartext passwords are floating on your lan, they will find it out for you but they will not help you to make your computer network a more secure world, they will simply abuse it to send spam, to take money from your bank account or whatever they want. So the normal end user is getting tools removed to help fight crime. This is helping the bad boys instead of keeping them out. Its like saying, you are not allowed to encrypt to protect your privacy simply because some bad boys encrypt to protect their evil plans. I think the report from the EJPD was written by people who do not understand the technological impact of such laws. I think we should respond to this proposal to keep above paragraph out of the law. Otherwise we wouldn't even be able to help the police if they are investigating because the tools to do this are also used by hackers sometimes. Here is what I got first from EJPD. ----------- snip ---------- Ihre Kommentare sind willkommen. Sie finden die Unterlagen unter http://www.admin.ch/ch/d/gg/pc/pendent.html#EJPD (Geschäfte EJPD: Cybercrime). Das Verfahren läuft bis 30. Juni 2009. Mit freundlichem Gruss Andrea Candrian Fachbereich Internationales Strafrecht Stv. Chef Bundesamt für Justiz / Federal Office of Justice Bundesrain 20 CH-3003 Bern Schweiz/Switzerland Tel. +41/31 322 97 92 Fax. +41/31 312 14 07 mailto:andrea.candrian@bj.admin.ch ----------- snip ---------- Andreas Fink Fink Consulting GmbH Global Networks Schweiz AG BebbiCell AG IceCell ehf --------------------------------------------------------------- Tel: +41-61-6666330 Fax: +41-61-6666331 Mobile: +41-79-2457333 Address: Clarastrasse 3, 4058 Basel, Switzerland E-Mail: andreas(a)fink.org www.finkconsulting.com www.global-networks.ch www.bebbicell.ch --------------------------------------------------------------- ICQ: 8239353 MSN: msn1(a)gni.ch AIM: smsrelay Skype: andreasfink Yahoo: finkconsulting SMS: +41792457333

18 37

Cablecom Mailserver troubles?
by Benoit Panizzon 24 Mar '09

24 Mar '09

Hi Lately we experienced heavy load on our mailservers. A few of our customers also get quite mailbombed from cablecom senders. It looks like some single emails from a cablecom sender are being sent once from every cablecom mailserver ip out there. Also emails from cablecom senders to our support system tend to create multiple support tickets as they also arrive in multiple copies. Any others observing similar problems? Example: Mar 20 13:31:13 mx2 sm-mta[4782]: n2KCV8gM004782: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep19-int.chello.at [62.179.121.39] Mar 20 13:54:30 mx2 sm-mta[59893]: n2KCsMOo059893: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep12-int.chello.at [62.179.121.32] Mar 20 14:15:04 mx2 sm-mta[11171]: n2KDEuav011171: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep17-int.chello.at [62.179.121.37] Mar 20 14:39:03 mx2 sm-mta[67857]: n2KDcsMe067857: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep20-int.chello.at [62.179.121.40] Mar 20 15:00:48 mx2 sm-mta[23166]: n2KE0gUG023166: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep19-int.chello.at [62.179.121.39] Mar 20 15:51:33 mx2 sm-mta[52468]: n2KEpL2R052468: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep25-int.chello.at [62.179.121.45] Mar 20 16:16:58 mx2 sm-mta[20739]: n2KFGpOr020739: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep12-int.chello.at [62.179.121.32] Mar 20 18:01:47 mx2 sm-mta[81703]: n2KH1cJg081703: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep33-int.chello.at [62.179.121.51] Mar 20 18:27:21 mx2 sm-mta[42591]: n2KHRGPl042591: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep17-int.chello.at [62.179.121.37] Mar 20 19:08:18 mx2 sm-mta[34487]: n2KI8ArM034487: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep32-int.chello.at [62.179.121.50] Mar 20 19:59:24 mx2 sm-mta[47526]: n2KIxIIJ047526: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep15-int.chello.at [62.179.121.35] Mar 20 20:25:25 mx2 sm-mta[8418]: n2KJPIoS008418: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep34-int.chello.at [62.179.121.52] Mar 20 20:45:45 mx2 sm-mta[53729]: n2KJjWx9053729: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep22-int.chello.at [62.179.121.42] Mar 20 21:26:22 mx2 sm-mta[43586]: n2KKQHwu043586: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep11-int.chello.at [62.179.121.31] Mar 20 21:56:16 mx2 sm-mta[6183]: n2KKtvEr006183: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep14-int.chello.at [62.179.121.34] Mar 20 22:43:22 mx2 sm-mta[4438]: n2KLhAx3004438: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep31-int.chello.at [62.179.121.49] Mar 20 22:54:02 mx2 sm-mta[25348]: n2KLrqjA025348: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep15-int.chello.at [62.179.121.35] Mar 20 23:14:27 mx2 sm-mta[64208]: n2KMEMar064208: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep23-int.chello.at [62.179.121.43] Mar 20 23:39:19 mx2 sm-mta[10784]: n2KMdCxh010784: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep17-int.chello.at [62.179.121.37] Mar 20 23:49:34 mx2 sm-mta[30901]: n2KMnSge030901: from=<*annonymized*(a)hispeed.ch>, size=5069702, class=0, nrcpts=1, msgid=<C89B210D-7CF2-4C69-8F2D-7CFC6E2044E6(a)hispeed.ch>, proto=ESMTP, daemon=MTA, relay=viefep19-int.chello.at [62.179.121.39] Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G - Leiter IT Customer Care ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 07 CH-4133 Pratteln Fax +41 61 826 93 02 Schweiz Web http://www.imp.ch ______________________________________________________

1 0

needed 6x X2 interfaces
by Steven.Glogger＠swisscom.com 24 Mar '09

24 Mar '09

hi there is there anyone which has 6x X2-10GB-LR (SMF) modules on stock which he might be willing to: - trade LR to LX4 - lend me (you'll get new ones from cisco) please contact me offlist. -steven

1 0

Has Cablecom at the Moment a routing Problem
by Xaver Aerni 24 Mar '09

24 Mar '09

Hello since 4 days. Has many costumer of higspeed a problem to sending mails. The Mail will be deliverd till 12 hour after sending. When a client sending from hispeed to gmail or hispeed to other Mailserver on the CC or aorta Network it will be transmitted 1 till 2 hour later. Normaly it should be delivered in some seconds. This problem is since 4 days. I think is a routing Problem... Could somebody from Cablecom me contact offline Thanks a lot and Greetings Xaver

2 1

Vista has broken RR DNS - comments?
by Michael Krygier 20 Mar '09

20 Mar '09

Any comments about what Drplokta wrote on his blog about Windows Vista implementing RFC3484 and breaking Round Robin DNS? Imminent Death of the Net Predicted http://drplokta.livejournal.com/109267.html Michael Krygier

7 7

Re: [swinog] Fwd: AW: "Hackerparagraph"
by Scott Weeks 18 Mar '09

18 Mar '09

On Tue, 17 Mar 2009 12:18:28 +0100, Andreas Fink wrote: > Now what does that mean? It is basically what the germans have done > under the "Hackerparagraph". It disallows software which could > potentially be used for hacking to be distributed. The result of > this was for example that in germany the WiFi tools to verify your > WiFi security dissapeared. Why? because someone COULD use it for > hacking. ------------------------------------------------ Hmmm, that's funny. I could use TCP, UDP or ICMP for hacking. I guess we better shut down the internet... >;-) scott =================== ====================

1 0

(no subject)
by Reza Kordi 18 Mar '09

18 Mar '09

Hi Gents, Do you know if anybody offers a VDSL upstream with BGP dynamic routing? Customer is in ZUG city. Cheers, Reza

13 18

SWITCH Sourceforge mirror available again
by Simon Leinen 17 Mar '09

17 Mar '09

Over the past couple of weeks, you might have noticed that for Sourceforge downloads, "Lausanne, Switzerland (SWITCH)" (switch.dl.sourceforge.net) was no longer listed as a mirror option. The reason was that the disk array of the server had become too small to hold the entire Sourceforge mirror dataset (because of all the binary stuff I guess - this thing should be called ".iso-forge" :-). We have now replaced it with a new server with larger disks, so now it should be fully included in the Sourceforge download mirror set. Note that, like mirror.switch.ch and many other of our services, this is reachable over IPv6 in addition to IPv4. Now go and test that thing :-) -- Simon.

25 76

SwiNOG-BE71 - Beer Event 71 - 9th of March 2009 @ Don Weber / ZH
by Steven Glogger 04 Mar '09

04 Mar '09

hi everybody sorry, i'm quite late sending out the invitation. but most of you should know it's time for a beer event next monday ,-) Unfortunately i'm not in Switzerland. Feel free to join me for some beer in Brussels. Roman will take over organisation this time. the facts for the next event: ----------------------------- Date: 9th of March 2009 Time: starting around 18.30 o'clock Location: @ the "Don Weber" (Heinrichstrasse 213, Near TIX). Registration deadline: 08.03.2009 18:00:00 ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform Roman asap (044 562 31 41). greetings -steven

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog