swinog

swinog@lists.swinog.ch

17 participants
2973 discussions

THIS FRIDAY! VÜPF/OSCPT Hearing ends!
by Pascal Gloor 25 Jul '11

25 Jul '11

Dear All, (sorry for any duplicates, some Bcc people are also on the SwiNOG list) DO NOT FORGET, the deadline is THIS FRIDAY! I had to convince them but finally, thanks to asut, the telecom federation, I'm able to share, with all of you, their answer [1] to the hearing. You are all allowed to inspire yourself, copy fully or partially the document for your own response. You know how important this is! If you don't have much time, you can copy/paste, sign and send it as-is. It is crucial that they get as many responses as possible. [1] http://www.swinog.ch/files/asut_Stellungsnahme_VUEPF.zip (3 documents in M$ Word format) Have a nice week, Pascal

2 2

Re: [swinog] sip scanner
by roger＠mgz.ch 24 Jul '11

24 Jul '11

your right i allready was having such cases in the past, most sirea leone or romania calls, but the abuser was originating from russia in most cases seldom from korea. The scanner was allways one machine which doing bruteforce but since a few weeks this changed, only a few request which do not trigger the detection logic of such attacks from several hosts. Nothing harmfull at the moment .. but if it a bot network doing this whis thousands of drones .. how to detect and protect ? When the password of an account is cracked, why could not the same botnet be used to make calls ? That would be an horrorscenario of course I fear we going in to expect that very soon. Roger On 23 Jul 2011 at 21:38, Andreas Fink wrote: > those are scans to find open SIP gateways to then abuse them to dial to expensive destinations like Cuba. > Those are large scale fraud attempts. > > On Jul 23, 2011, at 8:20 PM, roger(a)mgz.ch wrote: > > > hi all, > > more and more i getting sipscans from dynamic ips from most swiss dsl and cable provider > > the strange thing is they try at least twice .. and then stop > > a few seconds later in most cases come 2 request from another connection. > > is that some kind of trojan which is gone wild ? > > anyone has some idea ? > > > > Roger > > > > > > > > _______________________________________________ > > swinog mailing list > > swinog(a)lists.swinog.ch > > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > >

2 1

sip scanner
by roger＠mgz.ch 24 Jul '11

24 Jul '11

hi all, more and more i getting sipscans from dynamic ips from most swiss dsl and cable provider the strange thing is they try at least twice .. and then stop a few seconds later in most cases come 2 request from another connection. is that some kind of trojan which is gone wild ? anyone has some idea ? Roger

1 0

Satelliten Internet
by Marc Balmer 23 Jul '11

23 Jul '11

Kennt sich jemand mit mobilen Satelliten-Stationen aus? Also sowas, das die Radio und TV Stationen auf Ihren Fahrzeugen haben? Ich suche für einen Kunden eine Lösung, die sich auf einem Fahrzeug montieren lässt und mehr oder weniger unabhängigen Internetzugang von "irgendwo" zulässt (westliche Hemisphäre). Bin für alle Tips dankbar.

1 0

NetObservatory report Q2 2011
by Pascal Gloor 22 Jul '11

22 Jul '11

Dear SwiNOGers, You might already have heard about it but I think it's the first time I send it to the list. The engineering school of Fribourg and some business partners (like Dreamlab and Objéctif Sécurité) have developed a set of tools to analyse the quality of the Swiss Internet. This project is called NetObservatory[1] and our third report[2] is out today. Have fun reading it. Especially noticeable are the efforts of Hostpoint (DNS) and Informaniak (MX) in the IPv6 integration, can you do better? :) [1] http://www.netobservatory.ch [2] http://www.netobservatory.ch/report/pdf/NetObs_Report_Q2_2011.pdf Have a nice day & weekend ;-) Pascal

1 0

Re: [swinog] Recommanded IOS Package for 7206VXR + NPE400 to do IPv6/BGP + AS Number 4-byte
by Patrick Studer 15 Jul '11

15 Jul '11

Hi @Manfredo/Daniele - Hmm..Already thought about perhaps switching to one of this routers. Is a 2921 really taking all (Full IPv4/IPv6 Features incl. all BGP, ASN 4-bytes) just with the regular IP Base = Part-No. CISCO2921/K9? What can we expect as maximum traffic for this configuration? @Andy/Michael - Would the SP not be sufficient. Or why should we use Advanced IP or Advanced Enterprise service? @Kurt - What are the hardware specification of your setup for you Quagga? Is Quagga able to do HSRP or something similar? How much bandwidth do you handle with that configuration? @All, is enabling of IPv6 taking that much memory, so 512 MB with two full feed and some SwissIX peering would be enough? Thanks already for your pervious answers. Kind Regards Patrick -----Ursprüngliche Nachricht----- Von: Manfredo Miserocchi [mailto:mis@wari.net] Gesendet: Mittwoch, 13. Juli 2011 07:34 An: Patrick Studer Cc: 'swinog(a)swinog.ch' Betreff: Re: [swinog] Recommanded IOS Package for 7206VXR + NPE400 to do IPv6/BGP + AS Number 4-byte Patrick, only one issue on RAM needed. NPE400 supports 512Mb, that's not enough for a full-view BGP. We better use 7301 or 2921 with 1Gb and 15.0 software. Cheers Manfredo -----Original Message----- From: Andy Davidson <andy(a)nosignal.org> To: Patrick Studer <p.studer(a)x-netconsulting.ch> Cc: "'swinog(a)swinog.ch'" <swinog(a)swinog.ch> Date: Mon, 11 Jul 2011 20:40:30 +0100 Subject: Re: [swinog] Recommanded IOS Package for 7206VXR + NPE400 to do IPv6/BGP + AS Number 4-byte > > On 11 Jul 2011, at 17:23, Patrick Studer wrote: > > > We want to go a step further with our infrastructure and start testing/implementing IPv6. > > > > Has anybody here a 7206VXR + NPE400 running and doing IPv6 / Full > > BGP / 4-byte ASN? If yes, which IOS Version and Package do you have installed. How much memory / flash do you have installed? > > > > We currently have “only” two upstreams and some SwissIX peering. > > Hey Patrick. :-) > > I was running some 7206 in my past job, although these had an NPE-G1 or NPE-G2, with 1GB of RAM. > > You need Advanced IP Services or Advanced Enterprise services for v6 routing, and Multiprotocol (i.e. v4 and v6) BGP. > You need 12.4(24)T, or 12.2(33)SRE1 (or later, including all 15.0) for 4 byte ASNs. > > So you should get away with, assuming your NPE has the storage and RAM > : c7200-advipservicesk9-mz.12.2-33.SRE1 to SRE4, or c7200-advipservicesk9-mz.124-24.T5.bin. > > And of course, we at as6939/he.net would like to help with your v6. > :-) > > Andy > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > > Si precisa che le informazioni contenute in questo messaggio sono riservate e ad uso esclusivo del destinatario. Qualora il presente messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo ed a non inoltrarlo a terzi, dandocene gentilmente comunicazione. Grazie. You are hereby informed that this message contains confidential informations intended for the addressee's use only. If yu're not the addressee and have received this message by mistake, please delete it and immediately notify us. You may not copy or disseminate this message to anyone. Thank you.

4 6

Recommanded IOS Package for 7206VXR + NPE400 to do IPv6/BGP + AS Number 4-byte
by Patrick Studer 13 Jul '11

13 Jul '11

Hi We want to go a step further with our infrastructure and start testing/implementing IPv6. Has anybody here a 7206VXR + NPE400 running and doing IPv6 / Full BGP / 4-byte ASN? If yes, which IOS Version and Package do you have installed. How much memory / flash do you have installed? We currently have “only” two upstreams and some SwissIX peering. Any help would be appreciated. Kind Regards Patrick Studer ****************************************************************************** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.studer(a)x-netconsulting.ch CH-4052 Basel Telefon +41 61 315 85 55 Schweiz Fax +41 61 315 85 59 ******************************************************************************

3 3

Re: [swinog] Recommanded IOS Package for 7206VXR + NPE400 to do IPv6/BGP + AS Number 4-byte
by Guazzoni Daniele, CH 13 Jul '11

13 Jul '11

As long as you don't need a lot of interfaces the 2921 with 1G RAM will do the job (151-1.T with IP-Base). The price/performance of the 2921 is also interesting compared to a 7206 :-) Daniele -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Manfredo Miserocchi Sent: Mittwoch, 13. Juli 2011 07:34 To: Patrick Studer Cc: 'swinog(a)swinog.ch' Subject: Re: [swinog] Recommanded IOS Package for 7206VXR + NPE400 to do IPv6/BGP + AS Number 4-byte Patrick, only one issue on RAM needed. NPE400 supports 512Mb, that's not enough for a full-view BGP. We better use 7301 or 2921 with 1Gb and 15.0 software. Cheers Manfredo -----Original Message----- From: Andy Davidson <andy(a)nosignal.org> To: Patrick Studer <p.studer(a)x-netconsulting.ch> Cc: "'swinog(a)swinog.ch'" <swinog(a)swinog.ch> Date: Mon, 11 Jul 2011 20:40:30 +0100 Subject: Re: [swinog] Recommanded IOS Package for 7206VXR + NPE400 to do IPv6/BGP + AS Number 4-byte > > On 11 Jul 2011, at 17:23, Patrick Studer wrote: > > > We want to go a step further with our infrastructure and start testing/implementing IPv6. > > > > Has anybody here a 7206VXR + NPE400 running and doing IPv6 / Full > > BGP / 4-byte ASN? If yes, which IOS Version and Package do you have installed. How much memory / flash do you have installed? > > > > We currently have “only” two upstreams and some SwissIX peering. > > Hey Patrick. :-) > > I was running some 7206 in my past job, although these had an NPE-G1 or NPE-G2, with 1GB of RAM. > > You need Advanced IP Services or Advanced Enterprise services for v6 routing, and Multiprotocol (i.e. v4 and v6) BGP. > You need 12.4(24)T, or 12.2(33)SRE1 (or later, including all 15.0) for 4 byte ASNs. > > So you should get away with, assuming your NPE has the storage and RAM > : c7200-advipservicesk9-mz.12.2-33.SRE1 to SRE4, or c7200-advipservicesk9-mz.124-24.T5.bin. > > And of course, we at as6939/he.net would like to help with your v6. > :-) > > Andy > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > > Si precisa che le informazioni contenute in questo messaggio sono riservate e ad uso esclusivo del destinatario. Qualora il presente messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo ed a non inoltrarlo a terzi, dandocene gentilmente comunicazione. Grazie. You are hereby informed that this message contains confidential informations intended for the addressee's use only. If yu're not the addressee and have received this message by mistake, please delete it and immediately notify us. You may not copy or disseminate this message to anyone. Thank you. _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog "This e-mail, any associated files and the information contained in them are confidential and is intended for the addressee(s) only. If you have received this message in error please notify the originator and delete the email immediately. The unauthorised use, disclosure, copying or alteration of this message is strictly forbidden. E-mails to and from the company are monitored for operational reasons and in accordance with lawful business practices. Any opinions expressed are those of the individual and do not necessarily represent the views of the company. The company does not conclude contracts by email and all negotiations are subject to contract. We make every effort to maintain our network free from computer viruses but accept no responsibility for any viruses which might be transferred by this e-mail."

1 0

Partial revision of VÜPF/OSCPT
by Pascal Gloor 08 Jul '11

08 Jul '11

Dear SwiNOGers, I just received an email from EJPD / DFJP which released a partial revision of the "Verordnung über die Überwachung des Post- und Fernmeldeverkehrs" / "Ordonnance sur la surveillance de la correspondance par poste et télécommunication" (VÜPF/OSCPT) today. (request for feedback alike, deadline for answers is 29 july 2011). This is not the update of the law! It is a revision of the regulation (probably to make the "IP Richtlinie / Directive IP" valid!). It really looks like a wish-list including fancy stuff like real-time Internet surveillance (Art. 24a), Instant messaging, VPN surveillance and so on, some articles even have "etc.." to make it virtually unlimited... !? ASUT, Swisscable and SwiNOG have received the documents and they will be available from the website of the EJPD/DFJP starting tomorrow. If you want them right now, I have packed them into a ZIP on the SwiNOG site. http://www.swinog.ch/files/vupf08062011.zip SwiNOG is not representing the ISPs, we all know that and we're running around this problem for a while now. "SwiNOG Organisation" can, however, organise stuff ;-) That is why I propose to organise a meeting (not an event, a meeting) with representatives of all interested ISPs and hosters. The temporary agenda of the meeting is in two parts. First we will discuss how to answer this "request for feedback" and in the second part we will discuss how/why/if the ISPs should be represented (basically, a lobby) and hopefully get a real answer to the forever question. I have invited the ASUT to participate to our meeting but have no answer yet. Finecom has offered its meeting room in Biel/Bienne which is about in the middle of everyone. Here's a doodle for the meeting: http://www.doodle.com/3xqutr9n68cwr3uy Please forward to the concerned person(s) in your organisation. Thanks, Pascal Gloor SwiNOG Organisation

1 6

SwiNOG-BE99 - Beer Event 99 - 11th of July 2011 @ Pumpstation/ZH
by Steven Glogger 06 Jul '11

06 Jul '11

hi everybody here's the announcement for the next beer event. I hope the weather will be great for the lake view ,-) Imporant: I cannot reserve! So please be early! If it's rainy we will move to the restaurant "Outback" at the bahnhof stadelhofen - definitive decision will be made Monday between 13:00 and 14:00. Please check your personal mails and/or website before going to the event ,-) the facts for the next event: ----------------------------- Date: 11th of July 2011 Time: starting around 18.30 o'clock Location: @lake in restaurant "Pumpstation" (see image; www.pumpstation.ch) On Bad weather (will be communicated on the same day around noon) we go to the "Outback" Bahnhof Stadelhofen Registration deadline: 10.07.2011 18:00:00 ----------------------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap (+41 79 277 92 35). -steven

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog