swinog

swinog@lists.swinog.ch

1 participants
2917 discussions

Re: [swinog] New .exe virus in.zip file via mail
by Daniel Rechsteiner 24 Apr '15

24 Apr '15

Hi Benoit, > We see a lot of such viruses at the moment. > > Clamav is desperately behind all other AV's at the moment... We see them too. It seems Upatre is morphing very quickly, so signature based AV solutions will always be behind. Here Cloudmark recognizes new variants of Upatre in about one hour after the first one arrives, but in that one hour lots of them arrive. So we decided to just block all emails with EXE-in-ZIP attachments. Daniel

1 0

New .exe virus in.zip file via mail
by Mike Kellenberger 24 Apr '15

24 Apr '15

Hi all I've been contacted by a couple of customers which caught a new virus in the last few days, sent by e-mail in a .zip file containing an .exe. (yes, there are still people out there who open these kind of attachments if they come from a known address) The .zip file passes our AV on the mailserver (Kaspersky) as well as our desktop AV (Symantec) with the newest definitions. Once infected, it spreads via e-mail (probably through the outlook e-mail profile, it authenticates nicely against our mailserver anyway) blasting out hundreds of mails in a single short session only to sleep again until the next day... Has anybody else seen this? Is there a name or details or cure fo it yet? Regards, Mike -- Mike Kellenberger | Escapenet GmbH www.escapenet.ch +41 52 235 0700/04 Skype mikek70atwork

11 11

Re: [swinog] FortiVM feedback
by Daniel Rechsteiner 23 Apr '15

23 Apr '15

Hi Antoine, > Has anybody evaluated this solution or is running in production ? Any > feedback would be welcome. We have a FortiVM in production use for several years now and we are happy with it. Performance is good, it's stable, no major problems. There might be differences in performance concerning the ASICs as mentioned by Ralf, but for our use performance was always more than enough. One caveat: Don't use the vmxnet2 or vmxnet3 drivers for the NICs. Use the e1000. FortiNet provides images with vmxnet* drivers, but this configuration is not supported by VMware for vsphere. It has been working until vsphere 5.5. With vsphere 5.5 the FortiVM freezes at every snapshot taken. We then changed the NIC type to e1000, no problems since then. Please note that the FortiVM is just a replacement for a FortiGate. It does not use SDDC as the FortiGate-VMX. Daniel

1 0

FortiVM feedback
by Antoine Benkemoun-Andre 23 Apr '15

23 Apr '15

Dear colleagues, We are in the process of evaluating “cloud" firewall solutions such as FortiVM. The promise of these virtual appliances looks interesting and it seems like a great fit given our current infrastructure is based off of Fortigate physical appliances. Nonetheless, I can’t help but think that given the virtual appliance nature of these solutions there could be a number of limitations to it. Has anybody evaluated this solution or is running in production ? Any feedback would be welcome. Also for our sales friends, if you can provide us a competitive quote off-list we’re interested as the pricing we’ve received so far is a bit steep. Have a nice day and thank you for your help, Antoine

3 6

Analysis of Email Domain protection for .ch
by Bohren, Andres 20 Apr '15

20 Apr '15

Hi all, During the last few Week i have crawled the Internet for over 100'000 .ch Domains and analyzed the MX, SPF, DKIM and DMARC Records of these Domains. The Result of this work is available here: http://blog.icewolf.ch/archive/2015/04/19/analysis-of-email-domain-protecti… What do you think about it? Regards Andres Bohren

3 3

SwiNOG-BE142 - Beer Event 142 @ Don Weber / ZH
by Steven Glogger 19 Apr '15

19 Apr '15

Dear SwiNOGers, Fajitas & Mexican Beer. Yeah! :) Details for the next event: ----------------------------------------------- Event: SwiNOG-BE142 - Beer Event 142 When? Monday, 20th April 2015 18:30 Where? Don Weber Heinrichstrasse 213, 8005 Zürich http://www.donweber.ch/ (GoogleMaps Link: http://goo.gl/maps/PqOPb) !! Please sign up if you're really coming - because the seats are limited! !! ----------------------------------------------- Registration: Start: Sunday, 19th April 2015 - 23:00 Stop: Monday, 20th April 2015 - 17:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who not. If you can't attend and you're registered please inform me ASAP (+41 79 277 92 35). greetings -steven

1 0

Announcement SwiNOG-28 (6th may 2015)
by Michel Renfer 19 Apr '15

19 Apr '15

Dear Community We're very happy to announce the next SwiNOG meeting (#28) for 6th may 2015. The event will be held at the Gurtenpark in Berne. Registration is open by now. The agenda is available on the meeting website. Meeting website: http://www.swinog.ch/meetings/swinog28/index.asp Meeting registration: https://register.swinog.ch/ We hope to see you *all* at SwiNOG-28! Have a nice week, Michel Renfer on behalf of the whole SwiNOG Core-Team

1 0

IPv6 Business Conference in Zurich, June 18, 2015 - Swinog Member Discount
by Silvia Hagen 18 Apr '15

18 Apr '15

Dear Swinog Members Within the last 12 months, the number of global IPv6-enabled Internet Users has more than doubled and is now over 5% (corresponds to roughly 150 Mio users). If growth continues in that pace, there will be more than 50% IPv6-Internet users in 3 years. On the content side, among the Top Alexa 1000 websites 15% are dual-stack while in Switzerland content is going up, with for example comparis.ch being dual-stack since two weeks. One year ago 41 of the Swiss Top Alexa 500 sites were dual-stack, today we are at 69 Websites and we expect a few major websites such as post.ch and sbb.ch to go dual-stack this year. This will have a noteable impact on IPv6 traffic in Switzerland. We like to invite you to our IPv6 Business Conference and offer you a Fr. 100.00 discount. More than 10 international top speakers, 2 sessions and a great panel, 2 tracks (business and technical), a pre- and post-conference workshop and an IPv6-only WIFI (with NAT64) to play with and a great networking opportunity. We had a great time last year. Swarovski is going to present on why for them dual-stacking their global eCommerce system is business critical to them, while they create more than 50% of their revenue over the Internet. Program, details and registration: www.ipv6conference.ch<http://www.ipv6conference.ch> In order to get the discount, enter the code SwiNOG-Discount on the registration page. Looking forward to seeing you there. Silvia Hagen Chair Swiss IPv6 Council Sunny Connection AG CH-8124 Maur +41 (0)44 887 62 10 www.sunny.ch<http://www.sunny.ch/> http://twitter.com/sunny_shagen ************************************* IPv6 Business Conference, June 18, 2015, Zurich<http://www.ipv6conference.ch/> International Top Speakers, Unique Program Great Networking - don't miss the opportunity ************************************* Switzerland is in the Top 5 in IPv6 User Adoption Gearing up to 20% in 2015! *********************************** Our website is dual-stack - how about yours? ***********************************

3 2

UPC AS6830 looking glass
by Andre Keller 16 Apr '15

16 Apr '15

Hi, anybody aware of a public looking-glass and/or route-server for AS6830? Regards André

1 0

PI address space needed
by Andre Timmermann 14 Apr '15

14 Apr '15

Hi, currently we (local.ch) are hosted in two different datacenters, each with a dedicated uplink. In order to improve the reliability and to dissolve single points of failure I want to do a proper BGP setup. One step of the whole thing is getting a PI space. As I do not want to become a LIR (too tedious, too much work) we want to buy a /24 for our setup. Can anyone point me into the right direction (or even sell a /24 ;))? Greetz, Andre

3 3

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog