swinog

swinog@lists.swinog.ch

2 participants
2918 discussions

FTP block somewhere between AS6775 and AS16215 (Global Networks -> Genotec)
by Anthony Uk / dataway GmbH 02 Sep '08

02 Sep '08

Here is an unusual situation seen from our network (AS 8237). Our direct SwissIX peering with Genotec has been down for a few weeks now (can someone from Genotec contact me about this). Since then we have noticed the following effect: If our traffic to Genotec is routed via AS 6775, then we are unable to establish an FTP connection to Genotec, although WWW works as usual. # traceroute to gic-web-bsd-016.genotec.ch (82.195.224.116): 1-30 hops, 38 byte packets 1 ZHS08 (195.216.80.8) 0.268 ms 0.146 ms 0.115 ms 2 as6775.swissix.ch (194.242.34.40) 2.41 ms 1.57 ms 2.62 ms 3 ge0.2.border-01.iwb.ipv4.as16215.net (194.242.34.16) 2.95 ms (ttl=252!) 3.17 ms (ttl=252!) 2.48 ms (ttl=252!) 4 * * * 5 * * * 6 (interrupt) # telnet 82.195.224.116 21 Trying 82.195.224.116... (Timeout) # telnet 82.195.224.116 80 Trying 82.195.224.116... Connected to 82.195.224.116. Escape character is '^]'. However if the traffic goes through another AS (e.g. AS 13030), then everything is fine. # traceroute 82.195.224.116 traceroute to gic-web-bsd-016.genotec.ch (82.195.224.116): 1-30 hops, 38 byte packets 1 ZHS08 (195.216.80.8) 0.247 ms 0.128 ms 0.175 ms 2 swissix-zh.init7.net (194.242.34.7) 0.677 ms (ttl=62!) 4.0 ms (ttl=62!) 0.659 ms (ttl=62!) 3 r1bas.ce.init7.net (213.144.128.57) 1.43 ms 3.86 ms 1.41 ms 4 gw-genotec.init7.net (77.109.134.170) 2.17 ms 2.15 ms 2.47 ms 5 * * * 6 * * * 7 * * * 8 (interrupt) # telnet 82.195.224.116 21 Trying 82.195.224.116... Connected to 82.195.224.116. Escape character is '^]'. 220- 220- .y/ 220- ::::::. ::::::. -oso+s/ `+ooo/` os+oso. `/oso+` `sMd+` `/ooo/` `/oso+` 220- `o-```/:`o.```/: `mm-.+My `dm/:+Ny mN:.:Nd` yN:.-md` /My. dm/:/Nh dm:.-:` 220- `/::::/- /::::/- .Nh .My .Nd+++o+` mm dm` dm hN. -Ms `Md+++oo `Nh 220- `/::::/- /::::/- odysyMy odyosy- dm dm` /dhsyd+ `ddo` +dyosy: +dysys` 220- `o. /:`o. /: `:--+Mo `...` .. .. `...` `.. `...` `...` 220- `::::::. ::::::. -osss: 220- 220- Genotec Internet Consulting AG 220- Hegenheimermattweg 119a, CH-4104 Allschwil BL 220- email: support(a)genotec.ch --- http: www.genotec.ch 220- 220- 220 FTP server ready Is AS 6775 really filtering port 21 at the backbone level? That would clearly be quite unusual. Can anyone else see this effect? For the time being, I am disabling our peering to AS 6775, but it would be nice for whoever it concerns to look into this. Kind regards Anthony -- | Anthony Uk | dataway GmbH | Tel. +41 44 299 9988 | | uk(a)dataway.ch | Hohlstrasse 216 | Fax +41 44 299 9989 | | PGP key ID 10DE1D2C | CH-8021 Zuerich | http://www.dataway.ch |

2 2

Re: [swinog] Content delivery system like Akamai?
by Stanislav Sinyagin 02 Sep '08

02 Sep '08

----- Original Message ---- > From: Marco Fretz <mailinglist(a)blah.li> > I've never set up IPv4 anycast services but as far as I know anycast is > only recommended for connection less / session less services (DNS, > etc...). I never saw http content delivered over anycast, because it's > TCP and you need consistent data. pls correct me if I'm wrong... Anycast is just using the same public IP address for serving the content from multiple locations. From your PC the packets will anyway definitely be delivered to only one of such locations, the nearest one (considering the routing is set up correctly), and packets from those locations will anyway reach your PC. So, there's generally no reason not to use TCP services with such a set-up.

1 0

Re: [swinog] Content delivery system like Akamai?
by Mathias Schrem 02 Sep '08

02 Sep '08

Guten Tag Ich bin vom 30.08.08 bis und mit 14.09.08 nicht im Büro. In dringenden Fällen wenden Sie sich bitte an unseren Support. --- Hello I'm out of office from 30.08.08 till 14.09.08. In urgent cases please contact our Support. --- Fon: 0848 000 627 / International: +41 44 802 68 99 Fax: 0848 000 628 E-Mail: support(a)netstream.ch Freundliche Grüsse Regards Mathias Schrem

3 2

Re: Re: Re: Re: Re: Re: Re: Re: [swinog] The truth about UCEPROTECT-Blocklists
by f.jachiet＠gpstechnik.ch 29 Aug '08

29 Aug '08

Der von ihnen angeschriebene Mitarbeiter arbeitet nicht mehr bei der Firma GPS Technik AG. Bitte wenden sie sich an info(a)gpstechnik.ch oder 0041 44 732 99 77.

13 20

Open Position
by Rene Caspar 27 Aug '08

27 Aug '08

Hi all Swisscom IT Services AG is looking for a Network Engineer Professional / Service Engineer (m/w) More informations online (german): https://jobsp.swisscom.com/sap/bc/webdynpro/sap/hrrcf_a_posting_apply?PARAM… If you're interested - please contact me offlist cu René Caspar rene.caspar(a)swisscom.com

1 0

job @ vienna
by Spiess Bernd 26 Aug '08

26 Aug '08

fyi: if someone know´s a technician who is available at vienna/austria please see our job-offer at: http://www.technix.at/content/index.php?option=com_content&task=view&id=91&… ====================================================== Ing. Bernd Spiess CTO - Leitung Core Networkmanagement Microsoft MCSA (2003), MCSE (NT4 + 2000 + 2003) Cisco CCDA, CCNA; VMWARE VCP HAPPYnet Dienstleistungs GmbH. Viktringer Platz 5 - A 9073 Viktring Telefon: +43 676 843435 401 Personal Fax: +43 463 2080 9 401 http://www.happynet.at/spiess FB-Nr: FN142184w FB-Gericht: Handelsgericht Klagenfurt Microsoft Gold Certified Partner - HP Business Partner Trend Micro Authorised Partner - Cisco Premier Partner ====================================================== ** MICROSOFT - FINALIST - PARTNER OF THE YEAR 2008! **

1 0

Cisco HWIC-3G-GSM
by Chris Gravell 26 Aug '08

26 Aug '08

Hoi, Does anyone have any direct experience with this WIC with any GSM provider's (Sunrise, Orange, Swisscom et al.) in Switzerland? I want to use this card as dial-backup to a WAN connection (Serial, DSL etc). So far I have it working with Sunrise and Orange depending on the (APN) Access Point Name and Profile. However, none of the APN provisioned by the GSM Providers'/ available for their SIM's feature what I really require. Those being: 1. Publically assigned IP 2. Static IP (Dynamic will work too - intend to create a DMVPN tunnel to backhaul one providers' IP range over the GSM providers' IP network and DMVPN will do this even where the "spoke" or GSM interface is dynamically assigned) 3. No NAT/PAT in the GSM provider's network (i.e. some APN assign a private IP to the GSM interface and NAT this at the edge of the GSM provider's network) 4. Permit ALL IP protocols (NO firewalling along the path - some GSM provider's permit only http, ftp etc) Sunrise and Orange support similar options but not all. Does anyone know if Swisscom or another provider might offer an APN product that accommodates all requirements as a solution? This cisco WIC only came out last year so info is relatively thin on the ground. The configuration is trivial but the hard part is finding a GSM Provider that will treat this as a viable backup solution for business' and not just a cut down version/ poor man's IP connectivity for mobile phones. Any ideas, tips or tricks welcomed. Thanks, Chris Gravell

2 1

xDSL sandbox?
by Beat Vontobel 26 Aug '08

26 Aug '08

Hi everybody on Swinog, some time ago I once again had to help out some friends with the setup of their new ADSL connection (the kind of private support favour probably most of you on this list also get asked for over and over again by relatives and friends). Just after I connected a laptop to the LAN-port of their router that needed to be set up, I got this mail in the inbox: > Received: from Sandbox Mail Server > From:sandbox@noreply > To: ***** > Precedence: bulk > Message-ID: ***** > Subject: Support Information > Content-Type: text/plain; charset=UTF-8 > Date: Thu, ** *** **** **:**:** -0000 > > Lieber Kunde > > Der Benutzername (Beispiel: Name(a)ISP.ch) Ihres Internet-Anschlusses > ist nicht korrekt. > Bitte überprüfen Sie den eingegebenen Benutzernamen im Router/Modem > oder wenden Sie sich an Ihren Internetanbieter. > > Mit freundlichen Grüssen > Ihr Internetanbieter [* used to overwrite some info from the original mail, containing user names and other things I don't want to share] Now, this seems like a helpful feature at first - but the thing that bothers me is that the provider of the sandbox actually "hijacks" (I didn't check it out in detail, but maybe through a DNS server with a wildcard entry or directly on the TCP/IP level, it doesn't matter how) outgoing connections for various services and redirects them to their servers. While I think this is okay maybe for HTTP to display a helpful message in the browser, I don't like somebody to "provide" other services (as POP3, SMTP, FTP, HTTPS, whatever) and be able to happily log provided user/password information (yes, I know, everybody should just use encrypted connections, always check certificates and never supply a password in plain-text to any service -- but we all know that's not the reality). Admittedly, I may seem a little bit too paranoid here, but still I'd just like to know who operates these sandbox machines: Is it the individual providers or Swisscom? What's the policy for this service? What protocols/services are hijacked? Do the connections get logged somehow? What do you think? Or is there somebody on the list who's responsible for or at least knows more about these sandbox machines? Just wonder... :) Regards, Beat Vontobel MeteoNews AG P.S.: This is my first post to the list. I was following it for quite some time now, mostly to stay up-to-date on Swiss network issues, as I too often had to debug issues outside of our own network, when our customers (we provide weather data and services) had connectivity issues. But things are really much more relaxed now, since we finally operate our own AS44238 and are no longer dependent on one single provider... of course, now it might just be me and myself who mess things up -- but then I should also be able to fix it myself instead of just have to wait until a NOC somewhere fixes a stupid routing issue... So much for a short introduction. :)

1 0

Re: [swinog] SwiNOG-BE65 - Gva? + HELP-ME PLs !
by Eric Serra 26 Aug '08

26 Aug '08

Hello Steven, The drink is certainly a good idea - once in a while you might get one organise in Geneva... Could you pls let me know if I should post the sort of question below to all user in purpose to get help? I'm not yet too sure of what swinog is made for... Question: I have a lot of difficulties for sending e-mails nowaday as my private e-mail account is considered as being a spam. I can't write to yahoo.com, to bluewin.ch or vtxnet.ch for example, as most of the time, my e-mails are rejected. I have never issue any spams in my life, but maybe someone as been using my account in this purpose me knowing? Is this possible? Anyhow, how can I get out of the spammers central list ? Thanks, Eric PS: we can talk on the phone if necessary - 0763766945

2 2

SwiNOG-BE65 - Beer Event 65 - 1st of September 2008 @ Johanniter / ZH
by Steven Glogger 26 Aug '08

26 Aug '08

hi everybody soon is the next beer event ,-) the facts for the next event: ----------------------------- Date: 1st of September 2008 Time: starting around 18.30 o'clock Location: @ the "Johanniter". It's about 50m from the Starbucks at the Central in direction to the Bellevue. Just walk from the Central/Starbucks thru the Dörfli. Then on the left side you see the Johnanniter. http://www.johanniter.com Registration deadline: 31.08.2008 12:00:00 Registration: ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap. if you cannot find us: call me on my mobile: +41 79 277 92 35. greetings -steven

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog