swinog

swinog@lists.swinog.ch

4 participants
2951 discussions

## SwiNOG #37 - Participant Info ##
by Simon Ryf 28 Nov '21

28 Nov '21

Dear SwiNOG #37 Participant, Please find general information about the SwiNOG #37 meeting below. Date and Agenda Date: 02.12.2021 Registration: 08h15 - 09h15 Agenda: https://www.swinog.ch/meetings/swinog37/ Coronavirus - Measures and ordinances 3G (vaccinated / cured / tested) rules are applied for the event. See further info here: https://www.bag.admin.ch/bag/en/home/krankheiten/ausbrueche-epidemien-pande… Update November 26th 2021: The Canton of Berne stated, that beside the certificate obligation there is now a requirement to wear masks (except speakers). See more details here: https://www.besondere-lage.sites.be.ch/de/start.html?newsID=ca18bb65-66a5-4… -> Please have your certificate and identification (ID, Passport or Drivers-License) ready when entering / registering at the Event. If you have any doubts if your certificate and/or identification is valid, please contact us before the meeting day. Please note that the well-being and health of every participant is our highest priority. Please help and support us all by considering below: * If you feel sick, stay at home! You'll get a full refund. * If you cannot ID yourself or do not have a valid certificate you are NOT allowed to enter the Building, no excuses made. * Please wear your batch at all times. (Batch == valid cert) * Check the weather and have appropriate clothing. During breaks and the social event we're probably more often outside as in other years. Location and Travel Info Location - Gurtenpark, Bern: https://www.gurtenpark.ch/de-CH/Service-Pages/Anreise https://goo.gl/maps/kuxy4QUrcoy By Car: You can park at the Gurtenbahn ground Station. Here: https://goo.gl/maps/SFBuTRL52Xdz8mW36 -> Then take the Gurtenbahn By Train: >From Bern main station you may take below (see https://sbb.ch -> To: ) - S-Bahn S3 Belp and exit at Wabern station (-> To: Köniz, Gurtenbahn) - Tram 9 (Wabern) and exit at Gurtenbahn stop (-> To: Wabern, Gurtenbahn) -> Then take the Gurtenbahn Gurtenbahn / Cable Rail: The Gurtenbahn ist the only way (besides walking) to the Gurtenpark. Map of the ground Station: https://goo.gl/maps/5uSKtgbianM2 SwiNOG participants DO NOT need to pay: Tell the clerk at the Ticketoffice that you're participating SwiNOG and you get a free Ticket. -> Please keep your Ticket to get back down. See you at SwiNOG #37! Best regards SwiNOG Core Team

1 0

Problem sending to hotmail / block list S3150
by Marco Kälin 16 Nov '21

16 Nov '21

Hi @ all Actually we have massive problems sending to private microsoft customers (hotmail.com, live.com, etc.) We offer some small smtp mailservices for our customers (smtp smarthost and also a mail encryption and sign service). The standard configuration of our outbound smtp servers is from my point of view set correctly: * Fix IP * Correct SMTP Banner, HELO, RDNS * A Records matches RDNS * SPF Records pass * Tested DKIM signed * Not on any Blacklist (checked with mxtoolbox.com) * No spam activities on this /24 ip range for at least 6 years * Sending to Microsoft Office 365 (Business Customers) works. We registred our IPs on the Microsoft Smart Network Data Service (SNDS). This only reports "All of your IPs have normal status". The MS Support "does not see anything that would preventing your mail from reaching our customers". But it's MS servers that bounce the mail... Remote Server returned '554 5.7.1 <hotmail-com.olc.protection.outlook.com #5.7.1 smtp; 550 5.7.1 Unfortunately, messages from [xx] weren't sent. Please contact your Internet service provider since part of their network is on our block list (S3150). You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors. [DM6NAM04FT044.eop-NAM04.prod.protection.outlook.com] Has anyone experince with this sort of problem? thanks and great day. Marco Freundliche Grüsse Marco Kälin +41 79 177 11 76 | marco(a)kaelin.email

4 3

Cisco Hardware Give Away
by Markus Wellauer 15 Nov '21

15 Nov '21

Dear all, We have the following hardware to give away for free: 2x WS-C3750X-48T-L (with stack cables) 1x WS-C2960G-24TC-L 4x Cisco 2901/K9 with HWIC-16A (incl. 1-2x CAB-HD8-ASYNC=) 4x Cisco Nexus C9396TX with N9K-M12PQ 12x Cisco QSFP-40G-SR-BD ~20x Cisco CVR-QSFP-SFP10G= All hardware is in good condition. The hardware needs to be collected at our office (Zurich Stadelhofen). Contact me off list at markus.wellauer(a)datatrans.ch. First comes, first served. Best Regards, Markus -- Markus Wellauer Teamleader Infrastructure Datatrans AG Kreuzbühlstrasse 26 • CH-8008 Zürich +41 44 256 81 91 • www.datatrans.ch Making technology fly. Since 2001. https://dtrx.ch/20Y

1 0

## SwiNOG#37 - Open Registration & preliminary Agenda ##
by Simon Ryf 09 Nov '21

09 Nov '21

Dear SwiNOG community, there has been a long wait, more delays but finally we're proud to announce the continuity of the SwiNOG meeting. The 37th meeting of the Swiss Network Operators Group – SwiNOG will be held in Berne on top of the Gurten! Thursday, 2nd of December 2021 We're still hoping to get a few more sponsors on board and there might be one or two more talks to be announced Registration is open https://register.swinog.ch/ Agenda (preliminary) https://www.swinog.ch/meetings/swinog37/ Special Thanks to [cid:image001.png@01D7D59C.BFFEA4B0] supporting us with a Gold Sponsorship and hereby helping us to continue the NOG community in Switzerland Best regards and looking forward to seeing you SwiNOG Team Please redistribute this mail, post it, talk about it, and invite your colleagues

1 0

Disable Recursion on Windows Server 2019
by Benoît Panizzon 01 Nov '21

01 Nov '21

Dear Community We have a customer who operates hosting and uses a Windows Server 2019 as DNS for his hosting customers and for which we occasionally receive complaints about this being an open resolver prone to DNS amplification attacks. Customers requirements: * DNS reachable from the Internet, for the domains he is authoritative for. * DNS recursion available for hosting customers in his IP range. He tells me, that he can only switch recursion on and off completely, but not restrict the ip ranges for which is shall be available. My quick search via Google, also only revealed how to turn recursion off completely on a Windows Server 2019. Hopefully some Microsoft Guru on this list, can tell, how to restrict recursive access to certain IP ranges? -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

5 6

Re: [swinog] Disable Recursion on Windows Server 2019
by Benoît Panizzon 01 Nov '21

01 Nov '21

Hi Thanks! I'll pass this on to our customer. -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

1 0

CDN: Access Denied Reference #18.cad1f557.1634833505.1903b12e
by Benoit Panizzon 26 Oct '21

26 Oct '21

Dear Colleagues We have a customer whose IP keep getting blocked by various CDN operators. If we change his IP, this solved the issue for a couple of days, then he is blocked again. Actual IP: 87.102.212.133 At the moment, this IP is being blocked by the CDN used by: klm.com nespresso.com easyjet.com I opened a case with Amazon, as this is the ones that host the easyjet.com CDN but they replied that he is blocked 'upstream' by their customer easyjet. Our customer called the Easyjet Helpdesk, but they have no clue what generates this error and sent him to is ISP :-/ We don't get any kind of complaints regarding the IP of this customer. https://multirbl.valli.org/lookup/87.102.212.133.html Two entries on blacklist I am not familiar with. One of them about an email misconfiguration? All the customer is seing on the webpage is: === snipp === Access Denied You don't have permission to access "http://www.easyjet.com/" on this server. Reference #18.57d61202.1634833697.32bab06 === snapp === Any hints on how to solve or what blocking provider is used (all pages show a very similar message with similar ID) are appreciated. PS: Yes, google is finding reports of this exact issue. None I found provided any useful hint on what causes the issue. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

3 4

New nameserver node for LI/CH at SwissIX
by Daniel Stirnimann 22 Oct '21

22 Oct '21

Hello Swinog, The TLD zones .ch/.li make use of the RcodeZero Anycast DNS service of nic.at since a few weeks (The nameserver letters d.nic.ch/d.nic.li to be precise). Nic.at has now added an anycast node at SwissIX. In order to get the best possible RTT and increased resiliency against potential DDOS attacks on the DNS infrastructure we encourage network operators peering at SwissIX without using the route servers to get in contact with nic.at for direct peering: AS1921, Peering @ SwissIX https://peeringdb.com/ix/60 IP addresses: 91.206.52.164, 2001:7f8:24::a4 Contact: ops(a)nic.at The RcodeZero Anycast DNS node at this location provides DNS services for multiple other TLDs. Best regards, Daniel -- SWITCH DNS Operations

1 0

IANA AS Numbers Registry Update
by Selina Harrington 13 Oct '21

13 Oct '21

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to APNIC: 147770-148793 Assigned by APNIC 2021-10-11 148794-149817 Assigned by APNIC 2021-10-11 149818-150841 Assigned by APNIC 2021-10-11 150842-151865 Assigned by APNIC 2021-10-11 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, -- Selina Harrington Lead IANA Services Specialist

1 0

A team helping whistleblowers (OT!)
by Philippe Strauss 11 Oct '21

11 Oct '21

https://www.swiss-leaks.net/ Some years back, when I was net admin, I was surprised how easy it was to make you shut your mouth about whatever problem you find disgusting in our society. A big DDoS in the dark corner of your network, et voilà, affaire étouffée! Those peoples seems able to help you in such case. Regards. -- Philippe Strauss

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog