swinog

swinog@lists.swinog.ch

2 participants
2940 discussions

Equinix PIN
by Michael Koloff 05 Dec '19

05 Dec '19

Hello I assume that some of you also have an account / access to Equinix data centers. And that you have been informed that you have to define a new 6-digit PIN in your account. Two things make me wonder, see the FAQ here: https://equinix.app.box.com/s/lcrutseubx9vebi4m21dir8fp66fmmlq Extract: I'm trying to select my 6-digit PIN but am receiving an error message. --> OUR SECURITY SYSTEMS ONLY ALLOW EACH PIN/COMBINATION TO BE USED FOR ONE PERSON. If you are receiving an error, please input a new combination of numbers or use the "Generate PIN" selection to generate a random, unique PIN. I forgot my 6-digit PIN, what should I do? / I want to change my 6-digit PIN DUE TO SECURITY REASONS, where can I change it? --> ....Your 6-digit PIN cannot be changed.... In concrete terms, this means that every person has a PIN, but no other person in the world can have the same PIN. This means that a maximum of 900,000 people worldwide can have access to Equinix data centres. (PINs with leading zero are not allowed) And if someone knows your PIN, at least your first authentication factor is broken and cannot be changed. Support has confirmed this behavior to me so far. Am I the only one here who finds that very weird? How do you deal with it? Best regards Michi -- Michael Koloff System- & Networkengineer sasag Kabelkommunikation AG Mühlenstrasse 21 8201 Schaffhausen Telefon: +41 52 633 01 72 mkoloff(a)sasag.ch www.sasag.ch

3 2

Fwd: RIPE NCC sucht einen neuen CEO
by Steven Glogger 05 Dec '19

05 Dec '19

CEO @ RIPE? see below (and yes: by purpose not posted on swinog-jobs) gruss -steven Anfang der weitergeleiteten Nachricht: > Von: Falk.vonbornstaedt(a)ripe.net > Datum: 5. Dezember 2019 um 12:09:23 MEZ > An: denog(a)lists.denog.de > Betreff: RIPE NCC sucht einen neuen CEO > > > Hallo, > leider habe ich es nicht nach Hamburg geschafft. Deshalb auf diesem Wege: > > RIPE NCC sucht einen neuen CEO. Ein tolles Team, herausfordernde Aufgabe, angemessene Bezahlung. Bewerbung bis 31.12.2019 möglich. > > https://www.ripe.net/about-us/staff/careers-at-the-ripe-ncc/vacancy/148244 > > Grüsse > Falk > > Dr. Falk von Bornstaedt > Executive Board > RIPE NCC > Stationsplein 11, 1012 AB Amsterdam, The Netherlands > Mobile +49 171 22 88 625 > mailto:Falk.vonBornstaedt@ripe.net > > > > Social Media > > Twitter > @RIPENCC for tweets from the RIPE NCC > @RIPELABS for tweets about RIPE Labs articles and the community > @RIPEMeeting for RIPE Meeting tweets > Hashtags we use: #RIPEstat, #RIPEAtlas, #RIPEness, #RIPENCC > > Facebook > RIPE NCC Facebook page > RIPE Meetings > > SlideShare > slideshare.net/ripencc > LinkedIn > RIPE NCC > RIPE community > > YouTube > RIPE NCC's Channel > > GitHub > RIPE NCC's git repository > > > >

1 0

Strange IPv6 scans from big networks
by Klaus Ethgen 02 Dec '19

02 Dec '19

Hi, Currently I see day long IPv6 scans from networks of Akamai (2a02:26f0:f3::/48), Google (2a00:1450:4000::/37), Apple (2a01:110::/31), Microsoft (2a01:b740::/29), Swisscom (2001:918::/32) and Init7 (2001:1620::/32) to my Network @HOME. They all try to enumerate hosts and ports in 2a02:168:4e82:0:* that does not and never have exists. The net is a fiber7 port. Anybody an idea what is going on here? On request I can provide more informations like pcaps. The scans are sourced from all over that mentioned networks above. While I have no scruples to block Apple, Microsoft, Akamai or other bad behaving networks, I do not want to block Swisscom or Init7 if not needed. Needless to say that I do not have any public service behind my fiber7 port. Gruß Klaus -- Klaus Ethgen http://www.ethgen.ch/ pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen <Klaus(a)Ethgen.ch> Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C

4 4

dnssec-failure for "admin.ch"
by Tom 21 Nov '19

21 Nov '19

Hi list Is a dnsadmin of "admin.ch" here? 21-Nov-2019 14:07:56.096 dnssec: info: validating admin.ch/A: verify failed due to bad signature (keyid=61614): RRSIG has expired 21-Nov-2019 14:07:56.096 dnssec: info: validating admin.ch/A: no valid signature found 21-Nov-2019 14:07:56.096 lame-servers: info: RRSIG has expired resolving 'admin.ch/A/IN': 162.23.37.16#53 Regards, Tom

1 0

##### SwiNOG#36 - Travel Info #####
by Simon Ryf 19 Nov '19

19 Nov '19

Dear SwiNOG Community, Please find general information about the SwiNOG #36 meeting below. https://www.swinog.ch/meetings/swinog36/ Date: 14.10.2018 - Registration 08h15 - 09h15 Location: Gurtenpark, Bern: https://goo.gl/maps/kuxy4QUrcoy >From Bern main station you may take: - S-Bahn S3 Belp and exit at Wabern station - Tram 9 (Wabern) and exit at Gurtenbahn stop Then take the Gurtenbahn to the Gurtenpark. -> You DO NOT have to pay a fee, just tell you attend to the SwiNOG event. Don’t throw away the ticket - you'll need it to get back down. Map (Ground Station of the cable rail): https://goo.gl/maps/5uSKtgbianM2 Suggested trains from Geneva: 06h12 Zurich: 07h02 WIRELESS ACCESS During the meeting, you have access to free WLAN! See you at SwiNOG #36! SwiNOG

3 2

Pinging digitecgalaxus.ch
by Lukas Knauer 06 Nov '19

06 Nov '19

Hello List Is there anyone from digitecgalaxus who could contact me offlist? We received phishing from a potentially hacked mail account. Additionally your SPF record is broken (permerror). Regards Lukas

1 0

## SwiNOG#36 - Agenda ##
by Simon Ryf 05 Nov '19

05 Nov '19

Dear SwiNOG’ers I’m happy to say that after a few struggles and some back and forth we have the final agenda and we’re ready!! Please check out the agenda at https://www.swinog.ch/meetings/swinog36/ And https://register.swinog.ch/ until Sunday the 10th If you like a free entry – send us a CFP submission for a 5 to 10min lightning talk https://www.swinog.ch/cfp/ Best Regards, happy networking and till Thursday 14th November 2019 Your SwiNOG Team

1 0

Wanted: Cisco MPA-4x10
by Manuel Wenger 04 Nov '19

04 Nov '19

Hi everyone, We are looking for a Cisco MPA-4x10 card. Does anyone have a spare lying around and wishes to get rid of it? If so, please contact me off-list. Thanks! Regards Manuel -- Manuel Wenger Technical Operations Officer connecting you to great ideas Netstream AG Neugutstrasse 66 8600 Dübendorf +41 44 802 66 88 manuel.wenger(a)netstream.ch netstream.ch

1 0

IPv6 Council event on IPv6 Security, November 11
by Silvia Hagen 03 Nov '19

03 Nov '19

Dear Swinogers The IPv6 Council hosts an event on IPv6 Security, titled «IPv6 Security - Die Hotspots - haben Sie an alles gedacht?» Frank Herberg from Switch will be presenting and the event includes good time for Q&A, as well as drinks, snacks and time for networking. Date: Monday, November 11 Location: at Digicomp Zürich, near Hauptbahnhof Time: doors opening 17.30, presentation 18 - 19 h, followed by apero, end of event 20.30h All details and link to registration: http://www.swissipv6council.ch/de/events/IPv6-Security As usual, entrance for IPv6 Experts is free, all others pay CHF 20 at the Abendkasse as Unkostenbeitrag. So if you are interested you are welcome to join. Cheers from Taipeh Silvia Sunny Connection AG CH-8124 Maur +41 (0)44 887 62 10 www.sunny.ch<http://www.sunny.ch/> http://twitter.com/sunny_shagen ****************************************** Business Agility - eine integrale Betrachtung. Kommen Sie mit auf unsere Entdeckungsreise<https://flowdays.net/de/training?category=Business_Agility&title=Business_A…> "When things fall into place" - 28. November in Zürich ****************************************** Think Agile, thrive in the Flow: www.flowdays.net<http://www.flowdays.net/> ******************************************

1 0

new project: DHCP Protect
by Pascal Gloor 31 Oct '19

31 Oct '19

Hi Community, I don’t know about you, but as an ISP we’ve always faced the problem of crazy DHCP clients (v4 and v6) flooding our servers. While at Quickline we have a DHCP server with anti-flood mechanisms it might not the case for everyone. This is why I wrote DHCP Protect. DHCP Protect works with the userspace API of Netfilter (iptables/ip6tables) and will treat each DHCP(v4/v6) packet and decide if it should be forwarded or not. Don’t worry, iptables can be configured in a way that if the program is not working, it will ACCEPT the packets by default. There are no packages available, but don’t be scared, it’s really simple to install and it will do all the systemd stuff for you! After make install it will already be running (you can also make uninstall which will delete everything and remove it from systemd). git clone https://git.home.spale.com/dhcp_protect.git cd dhcp_protect sudo apt-get install build-essential uthash-dev libnetfilter-queue-dev make all sudo make install That’s it. And then you need the iptables/ip6tables rule: iptables -A INPUT -p udp -m udp --dport 67 -j NFQUEUE --queue-num 67 --queue-bypass ip6tables -A INPUT -p udp -m udp --dport 547 -j NFQUEUE --queue-num 67 --queue-bypass (SAME queue number! the program can treat v4/v6 at the same time) The program will log to syslog when it blacklists. I’ve tested this with 10kpps and the CPU load of the program was about 4-6% on one core (AMD Ryzen 7 2700X). There’s also a flooding perl client in the repository to test the performance. It can do pseudo DHCPv4/DHCPv6, but since it’s pseudo, don’t use the perftest.pl again a real DHCP server. More information in the README -> https://git.home.spale.com/public/dhcp_protect I’d be glad on feedback! It is useful? what additional features would you like to see? Thanks for reading See you at Swing#36 Pascal

4 9

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog