swinog

swinog@lists.swinog.ch

3 participants
2941 discussions

xDSL sandbox?
by Beat Vontobel 26 Aug '08

26 Aug '08

Hi everybody on Swinog, some time ago I once again had to help out some friends with the setup of their new ADSL connection (the kind of private support favour probably most of you on this list also get asked for over and over again by relatives and friends). Just after I connected a laptop to the LAN-port of their router that needed to be set up, I got this mail in the inbox: > Received: from Sandbox Mail Server > From:sandbox@noreply > To: ***** > Precedence: bulk > Message-ID: ***** > Subject: Support Information > Content-Type: text/plain; charset=UTF-8 > Date: Thu, ** *** **** **:**:** -0000 > > Lieber Kunde > > Der Benutzername (Beispiel: Name(a)ISP.ch) Ihres Internet-Anschlusses > ist nicht korrekt. > Bitte überprüfen Sie den eingegebenen Benutzernamen im Router/Modem > oder wenden Sie sich an Ihren Internetanbieter. > > Mit freundlichen Grüssen > Ihr Internetanbieter [* used to overwrite some info from the original mail, containing user names and other things I don't want to share] Now, this seems like a helpful feature at first - but the thing that bothers me is that the provider of the sandbox actually "hijacks" (I didn't check it out in detail, but maybe through a DNS server with a wildcard entry or directly on the TCP/IP level, it doesn't matter how) outgoing connections for various services and redirects them to their servers. While I think this is okay maybe for HTTP to display a helpful message in the browser, I don't like somebody to "provide" other services (as POP3, SMTP, FTP, HTTPS, whatever) and be able to happily log provided user/password information (yes, I know, everybody should just use encrypted connections, always check certificates and never supply a password in plain-text to any service -- but we all know that's not the reality). Admittedly, I may seem a little bit too paranoid here, but still I'd just like to know who operates these sandbox machines: Is it the individual providers or Swisscom? What's the policy for this service? What protocols/services are hijacked? Do the connections get logged somehow? What do you think? Or is there somebody on the list who's responsible for or at least knows more about these sandbox machines? Just wonder... :) Regards, Beat Vontobel MeteoNews AG P.S.: This is my first post to the list. I was following it for quite some time now, mostly to stay up-to-date on Swiss network issues, as I too often had to debug issues outside of our own network, when our customers (we provide weather data and services) had connectivity issues. But things are really much more relaxed now, since we finally operate our own AS44238 and are no longer dependent on one single provider... of course, now it might just be me and myself who mess things up -- but then I should also be able to fix it myself instead of just have to wait until a NOC somewhere fixes a stupid routing issue... So much for a short introduction. :)

1 0

Re: [swinog] SwiNOG-BE65 - Gva? + HELP-ME PLs !
by Eric Serra 26 Aug '08

26 Aug '08

Hello Steven, The drink is certainly a good idea - once in a while you might get one organise in Geneva... Could you pls let me know if I should post the sort of question below to all user in purpose to get help? I'm not yet too sure of what swinog is made for... Question: I have a lot of difficulties for sending e-mails nowaday as my private e-mail account is considered as being a spam. I can't write to yahoo.com, to bluewin.ch or vtxnet.ch for example, as most of the time, my e-mails are rejected. I have never issue any spams in my life, but maybe someone as been using my account in this purpose me knowing? Is this possible? Anyhow, how can I get out of the spammers central list ? Thanks, Eric PS: we can talk on the phone if necessary - 0763766945

2 2

SwiNOG-BE65 - Beer Event 65 - 1st of September 2008 @ Johanniter / ZH
by Steven Glogger 26 Aug '08

26 Aug '08

hi everybody soon is the next beer event ,-) the facts for the next event: ----------------------------- Date: 1st of September 2008 Time: starting around 18.30 o'clock Location: @ the "Johanniter". It's about 50m from the Starbucks at the Central in direction to the Bellevue. Just walk from the Central/Starbucks thru the Dörfli. Then on the left side you see the Johnanniter. http://www.johanniter.com Registration deadline: 31.08.2008 12:00:00 Registration: ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap. if you cannot find us: call me on my mobile: +41 79 277 92 35. greetings -steven

1 0

Econophone Email registration
by Reto Burkhalter 12 Aug '08

12 Aug '08

Hi Can someone from Econophone/Tele2 contact me offlist - their web based registration system (http://reg.econophone.ch) is broken. Regards, Reto ____________________________________________________________ Reto Burkhalter CTO, Partner reto.burkhalter(a)basis06.com +41 31 388 20 33 basis06 AG - Birkenweg 61 - CH-3013 Bern http://www.basis06.com - source of smart business

1 0

RIPE NCC LIR training course in Berne: Oct 23 (the day after SwiNOG #17)
by Fredy Kuenzler 12 Aug '08

12 Aug '08

Dear all, please note that we organised a RIPE NCC LIR training course in Berne the day after SwiNOG #17), hosted at colobern by NTS (thanks Nik). Please register at https://lirportal.ripe.net/ using your RIPE login data. Also please note that only 2 participants per LIR are allowed. Regards, Fredy

2 1

SwiNOG-17 Registration open
by Michel Renfer 05 Aug '08

05 Aug '08

Hi All The registration page for SwiNOG-17 in Octobre 2008 is now ready. We will also start to fill up the agenda. If you are interested to held an presentation so please contact us (*) by mail. We would be happy to schedule a timeslot for you :) *) SwiNOG Core Team swinog-core(a)swinog.ch thanks, michel

1 0

AUTO: Moritz Höfer is out of the office (returning 12.08.2008)
by moritz.hoefer＠belsoft.ch 31 Jul '08

31 Jul '08

I am out of the office until 12.08.2008. Vielen Dank für Ihre Nachricht. Zur Zeit bin ich abwesend und habe nur limitierten E-Mail Zugang. Ihre Nachricht werde ich so bald wie möglich beantworten. Für dringende Angelegenheiten kontaktieren Sie bitte Markus Bommeli unter E-Mail: markus.bommeli(a)belsoft.ch oder per Telefon +41 (0)44 388 13 31. Thank you for your E-mail. I have only limited E-mail access, and I will respond to your message as soon as possible. For urgent matters please contact Markus Bommeli at the office. E-mail: markus.bommeli(a)belsoft.ch or phone +41 (0)44 388 13 31. Freundliche Grüsse / Kind regards, Moritz Höfer Note: This is an automated response to your message swinog Digest, Vol 42, Issue 15 sent on 31.07.2008 12:00:03. This is the only notification you will receive while this person is away. __________________________________________________________ Belsoft AG | IT Solutions Russenweg 26 | 8008 Zuerich | Switzerland Phone: +41 44 3881331 | Fax +41 44 3811611 info(a)belsoft.ch | http://www.belsoft.ch __________________________________________________________ This e-mail has been scanned for viruses and content. If you encounter any problems mailto:postmaster@belsoft.ch

1 0

Securing Cisco Routers in a ISP network (management-plane?)
by Marco Fretz 31 Jul '08

31 Jul '08

Hi everyone, I'm preparing my routers for IPv6. Along with v6 support comes the requirement to secure router management / services for v6. Currently I've inbound access-lists on all inbound interfaces blocking management traffic (ssh, telnet, ftp, http, etc.) and things like SIP, etc. to all router v4 addresses. You can imagine that this a lot of maintenance work. So my idea was to use the new management-plane (control-plane) protection in IOS 12.4 T. http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/htsecmpp.html Is there anyone using this already in ISP networks? What are the experience? You can define a loopback interface as management-interface and propagate the loopback addresses with IGP inside the management network. After that, all other interfaces are no longer accepting management traffic to the control-plane, right? Setting an inbound access-list on the loopback interface to filter management traffic may be a good idea, right? Is there any impact to BGP sessions? I sill need access-lists dropping BGP traffic to my router addresses and explicit allowing my bgp peers, right? Any suggestions / ideas welcome. Thanks and best regards Marco

1 0

SwiNOG-BE64 - Beer Event 64 - 4th of August 2008 @ Juan Costa / Huerlimannplatz / ZH
by Steven.Glogger＠swisscom.com 30 Jul '08

30 Jul '08

hi everybody well... new beer event, new location. please register asap ,-) the facts for the next event: ----------------------------- Date: 4th of August 2008 Time: starting around 18.30 o'clock Location: @ the "Juan Costa" beside HuerlimannPlatz / Google www.juancosta.ch -> HuerlimannPlatz Registration deadline: 02.08.2008 18:00:00 Registration: ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap. if you cannot find us: call me on my mobile: +41 79 277 92 35. greetings -steven

1 0

Juniper & VPN to a dyndns site
by Josh Geisser 25 Jul '08

25 Jul '08

Hi Swinog I've noticed that quite a few Firewalls don't support VPN to a DNS name as peer, so you'll have to enter the remote IP , and better having a fixed IP on the remote site :) Does anyone know whether it's possible to enter a dyndns record as remote side on a Juniper Firewall? Cheers Josh

3 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog