swinog

swinog@lists.swinog.ch

2916 discussions

Re: [swinog] Vorratsdatenspeicherung
by Xaver Aerni 12 Jul '09

12 Jul '09

Hallo Silvan, Meine Firma (Hoster mit auch etwa einem 3 Stelligen Kundenvolumen, habe bis jetzt das Büchlein nicht erhalten. Der ISP bei dem ich sonst noch arbeite mit 4 Stelligem Kundenvolumen hat dies bekommen. Ich weiss nicht ob die Ueberwachung nur für Acccessprovider gilt. Oder auch für Hoster... Müsste eigentlich auch. Alles andere wäre Sinnloss. Da man zum Server eine verschlüsselte Verbindung aufbaut und dann wird gar nichts mitgesnifft. Aber eben. Diejenigen welches, das Gesetz gemacht haben sind Politiker und haben von der Technik null ahnung. Es ist schon schlimm dass Leute die nicht mal wissen wie man einen Compi einstellt über so was zu entscheiden haben. Das nur nebenbei. Gruss Xaver Silvan Gebhardt <pcdog(a)pcdog.ch> wrote: > > Ab welcher grösse Provider gilt das eigentlich? ich als mailhoster mit > einer 3stelligen anzahl kundenaccounts - müsste ich da nun auch so eine > kaufen? > > hmm, das wäre schon was für den neuen piratenparteivize *gg* - dass das > der bund übernehmen muss.... > > > > > lg > silvan > > > On Sun, 12 Jul 2009 22:03:31 +0200, "Xaver Aerni" <xaerni(a)pop.ch> wrote: > > Hallo zusammen, > > Das Bakom hat in dem letzten Monat ein Büchlein als Gerichtsurkunde > > verschickt, betreffend der Voratsdatenspeicherung. Was die Geräte > können > > müssen etc. > > Meinse wissens gibt es bis jetzt nur eine Lösung die einigermassen > > "Abnehmbar" ist. Das ist das von Nokia Siemens... Und das erfüllt auch > > nicht > > in allen Punkten die Vorschriften. > > Die Vorschrift ist ja eigentlich für die Katze. Und die Provider müssen > > für > > diese Lösung viel Geld in die Hand nehmen. Für 3 Monate sämtlichen > > Verkehr > > aufzuzeichnen. Braucht je nach Providergrösse sehr grosse Kapazitäten. > > > > Mich nimmt es Wunder was im Moment bei den diversen Provider geplant ist. > > Eigentlich müsste der Aufwand für das Aufzeichnen auf die Kunden > > abgewälzt > > werden. Das heisst ein DSL Anschluss würde im Schnitt etwa Fr. 10.-- bis > > Fr. > > 20.-- im Monat teurer werden. > > Die Auf die Abgaben die der Bund für eine Auskunft zahlen würde. > (Betrag > > steht ja nicht fest) kann man ja nicht rechnen. > > > > Gruss Xaver > > > > ********************************************** > > Xaver Aerni > > Zürichstrasse 10a > > 8340 Hinwil > > Tel. 001 707 361 68 39 > > -- > Silvan Gebhardt > PCdogIT > 8500 Frauenfeld > +41325126958 > >

1 0

Welcome to Echolon....
by Patrick.Guelat＠imp.ch 10 Jul '09

10 Jul '09

Those of you that are registred with OFCOM as ISP or TSP have probably received the 'Vernehmlassung' for the new LEMF System planned for Switzerland. Ok, lots of fuzz about how to deliver the data, it's more standardized now following the ETSI standards instead of current proprietary swiss LEMF system, so far so good, a lot of points to take a closer look. But then... there is a new interception type 'PS_10': "Internet Access route: Real-time delivery of the complete communication of the Broadband Internet Access as in [1], Art. 15. This includes content of communication (CC) and the related information (IRI) of the broadband internet access" Welcome to the total supervision all you potentional terrorists... They claim this type is legally based on SR780.1, Art.15. In this article of BUEPF I can't find anything supporting this argument. Maybe some law-specialists can shed light upon this... I hope we'll be able to 'ground' this crap and find alliances in politics so that it won't pass the parliament... Patrick

3 2

Google Safe Browsing vs DNS TCP reply
by Guy Baconniere 09 Jul '09

09 Jul '09

Hello, safebrowsing-cache.google.com is checked from both Google Toolbar included by default in Firefox 3 and on Google Chrome Navigator. Google Toolbar is also available on IE, etc. When the query reaches the DNS of the ISP it will reply with a DNS TCP reply if minimal-responses is no (default on Bind9) or with a small UDP DSN reply if minimal-responses is yes. I recommend that all ISP use minimal-responses yes or equivalent on their DNS server. This will save bandwidth and avoid DNS TCP reply to be blocked in a Firewall in the path. Best Regards, Guy Baconniere http://www.divideandconquer.se/2009/06/25/firefox-30-freezes-waiting-to-res… Add “minimal-responses yes;” in your bind9 configuration or ask your ISP to do so. /etc/bind/named.conf.options options { // … // only add records to the authority and additional data sections when required minimal-responses yes; }; By doing this Google’s safebrowsing-cache.google.com will fit in a standard UDP DNS packet otherwise with additional section it will be TCP DNS packet. check the result with or without minimal-responses of dig safebrowsing-cache.google.com With minimal-responses no (default on Bind9) IP (tos 0×0, ttl 64, id 40627, offset 0, flags [none], proto UDP (17), length 75) 127.0.0.1.49553 > 127.0.0.1.53: [bad udp cksum 6429!] 40815+ A? safebrowsing-cache.google.com. (47) IP (tos 0×0, ttl 64, id 40628, offset 0, flags [none], proto UDP (17), length 526) 127.0.0.1.53 > 127.0.0.1.49553: 40815| q: A? safebrowsing-cache.google.com. 25/2/0 safebrowsing-cache.google.com.[|domain] IP (tos 0×0, ttl 64, id 4337, offset 0, flags [DF], proto TCP (6), length 60) 127.0.0.1.57552 > 127.0.0.1.53: S, cksum 0×30e4 (correct), 272739230:272739230(0) win 32792 IP (tos 0×0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60) 127.0.0.1.53 > 127.0.0.1.57552: S, cksum 0×6453 (correct), 281541131:281541131(0) ack 272739231 win 32768 IP (tos 0×0, ttl 64, id 4338, offset 0, flags [DF], proto TCP (6), length 52) 127.0.0.1.57552 > 127.0.0.1.53: ., cksum 0×4b76 (correct), 1:1(0) ack 1 win 513 IP (tos 0×0, ttl 64, id 4339, offset 0, flags [DF], proto TCP (6), length 101) 127.0.0.1.57552 > 127.0.0.1.53: P 1:50(49) ack 1 win 513 5198+[|domain] IP (tos 0×0, ttl 64, id 16739, offset 0, flags [DF], proto TCP (6), length 52) 127.0.0.1.53 > 127.0.0.1.57552: ., cksum 0×4b46 (correct), 1:1(0) ack 50 win 512 14:44:32.883449 IP (tos 0×0, ttl 64, id 16740, offset 0, flags [DF], proto TCP (6), length 632) 127.0.0.1.53 > 127.0.0.1.57552: P 1:581(580) ack 50 win 512 5198 q:[|domain] IP (tos 0×0, ttl 64, id 4340, offset 0, flags [DF], proto TCP (6), length 52) 127.0.0.1.57552 > 127.0.0.1.53: ., cksum 0×48ef (correct), 50:50(0) ack 581 win 531 IP (tos 0×0, ttl 64, id 4341, offset 0, flags [DF], proto TCP (6), length 52) 127.0.0.1.57552 > 127.0.0.1.53: F, cksum 0×48ee (correct), 50:50(0) ack 581 win 531 IP (tos 0×0, ttl 64, id 16741, offset 0, flags [DF], proto TCP (6), length 52) 127.0.0.1.53 > 127.0.0.1.57552: F, cksum 0×4900 (correct), 581:581(0) ack 51 win 512 IP (tos 0×0, ttl 64, id 4342, offset 0, flags [DF], proto TCP (6), length 52) 127.0.0.1.57552 > 127.0.0.1.53: ., cksum 0×48ed (correct), 51:51(0) ack 582 win 531 With minimal-responses yes IP (tos 0×0, ttl 64, id 40623, offset 0, flags [none], proto UDP (17), length 75) 127.0.0.1.40215 > 127.0.0.1.53: [bad udp cksum 8a13!] 55747+ A? safebrowsing-cache.google.com. (47) IP (tos 0×0, ttl 64, id 40624, offset 0, flags [none], proto UDP (17), length 494) 127.0.0.1.53 > 127.0.0.1.40215: 55747 q: A? safebrowsing-cache.google.com. 25/0/0 safebrowsing-cache.google.com.[|domain] Best Regards, Guy Baconniere

3 4

Bluewin MX caching problem
by Mathias Schrem 08 Jul '09

08 Jul '09

Hi everybody Can a Bluewin postmaster contact me off-list please? Cheers Mathias

1 0

looking for dslam
by Reza Kordi 07 Jul '09

07 Jul '09

Hi Guys I am looking for a DSLAM with a small footprint that is supported and tested with Cisco cpe's appreciate any hints. Cheers, Reza

1 0

OT: network connection 500 - 1000m
by Daniel Kamm 07 Jul '09

07 Jul '09

Dear networkers, I have an off-topic network problem, but some ppl here might help me. I need to build an IP network line from the middle of a construction site to an internet connection place for a one-time event. The distance is around 500 - 1000m. No line of sight and therefore directed WLAN will not work without several relays. At the moment I'm thinking of using a copper line and some old fashioned 1MBit lease line modems. Do you have other ideas of getting this to work or may have any parts which you can lend? The event will happen at the end of July on a single week day. Thank you for your help. Cheerz, - Dan

6 5

ID4214468 C-A-N-A-D-l-A-N P-H-A-R-M-A-C-Y
by swinog-list 06 Jul '09

06 Jul '09

1 0

Request for school presentation on "the internet"
by Norbert Bollow 02 Jul '09

02 Jul '09

Hi, my 13 year old son will be giving a talk tomorrow in school about "the internet". He has decided to focus in the talk on the technical side, like fundamental principles of how DNS resolution works. He has asked me if I could help him find some datacenter-type equipment that he can show off to the other students in his class. For example some rackmount device and a bit of optical fibre, if possible. There is no need for the stuff to be in working order. Since the talk is tomorrow, we'd need to pick the stuff up today in the afternoon or evening; I'd be happy to do this anywhere is the Zurich or Zurich highlands (Zürcher Oberland) area. We'll bring it back tomorrow in the afternoon after the talk. We'd be very grateful if someone would help us with this! Greetings, Norbert

2 1

SwiNOG-BE75 - Beer Event 75 - 6th of July 2009 @ el Lokal / Zurich
by Roman Hochuli 30 Jun '09

30 Jun '09

hi everybody as steven is on holiday i am taking over his job. please find below the announcement for the next beer event: the facts for the next event: ----------------------------- Date: 6th of July 2009 Time: starting around 18.30 o'clock Location: @ the "el Lokal" (Gessner-Allee 11) in ZH (www.ellokal.ch) Registration deadline: 06.07.2009 12:00:00 ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap (+41 79 2244933). greetings -roman

1 0

New IP Range
by Xaver Aerni 26 Jun '09

26 Jun '09

Hello, We have since begin of this mount a new IP Rage /24. Our Mailservers has the IP Adresses 91.209.98.30 - 91.209.98.40. Some of the IP are now used other in Reserve. I think the IP Range was before we received it blacklistet on different systems. We was happy when the ISP like bluewin.ch can withelist this range... The old Range 195.141.232.70/24 we will give back to ripe. Greetings Xariffusion Informatik & Telecom X. Aerni Xariffusion Informatik & Telecom Administration Zürichstrasse 10a 8340 Hinwil Tel. 043 / 843 7878 Fax 043/843 7870

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog