swinog

swinog@lists.swinog.ch

1 participants
2916 discussions

Inbound DNS query filtering on "broadband" IPs?
by Claudio Luck 13 Nov '18

13 Nov '18

Hi all I'm currently experimenting to host DNS zones on dynamic IP addresses and dynamic DNS. But I'm encountering more difficulties than expected on "broadband connections" in receiving UDP port 53 DNS query packets. In one case they're filtered completely (TCP port 53 works, UDP port 53 is blacked out), while on some there seems to be some adaptive filtering requiring like 10 minutes to "open up". Does this ring a bell? I would be thankful about any hint what could be interfering, PM or here. Thanks! Best Claudio Luck

2 1

Invalid ROA on Sunrise managed IP range
by Mike Kellenberger 12 Nov '18

12 Nov '18

Hi Could someone from Sunrise contact me off-list? We received a message about an invalid ROA of one of our customers IP-ranges, which is managed by Sunrise. I've tried contacting ip-reg(a)sunrise.net multiple times already, but I'm not getting any response. Regards, Mike -- Mike Kellenberger Teamleader Network & Security nexellent ag Sägereistrasse 33 CH-8152 Glattbrugg Phone: + 41 44 872 20 00 Direct: + 41 44 872 20 30 Mobile: + 41 79 421 17 78 www.nexellent.ch twitter.com/nexellent

1 0

.CH/.LI DNSSEC Algorithm Rollover
by Daniel Stirnimann 12 Nov '18

12 Nov '18

Hello, for your information, SWITCH will perform a DNSSEC algorithm rollover from RSA to ECDSA for ch. and li. ECDSA uses smaller keys and signatures than their RSA counterparts, which means responses to DNS queries are smaller. ECDSA was already standardised for use in DNSSEC in 2012. While switch.ch has been signed with ECDSA since 2016, IANA the root zone operator has only recently allowed TLDs to use it. The changes to the ch. and li. zones DNSKEY record are as following with times reported in UTC: 2018-11-21T13:30 Add new ECDSA key to DNSKEY record set 2018-12-21T13:30 Remove old RSA key from DNSKEY record set Between this interval, the chain of trust for ch. and li. will be updated in the root zone to point to the new ECDSA key only. Operators of DNSSEC validating DNS resolvers do not need to do anything. In the unlikely case that your validating DNS resolver only understands RSA but not ECDSA, then it will answer to ch. or li. queries as if they were not DNSSEC signed. You can test which DNSSEC algorithms are supported by the DNS resolver(s) configured on your system by visiting: https://rootcanary.org/test.html Best regards, Daniel Stirnimann, SWITCH -- SWITCH Daniel Stirnimann, SWITCH-CERT Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 15, direct +41 44 268 16 24 daniel.stirnimann(a)switch.ch, www.switch.ch

1 0

Mail MX Databaar
by walter＠onda.ch 05 Nov '18

05 Nov '18

Hello Could somebody from Bluewin connect to me offlist? We have some trouble sending mails. Regards Walter

1 0

*** Save the Date - SwiNOG#35 08.05.2019 ***
by Simon Ryf 04 Nov '18

04 Nov '18

Dear SwiNOG’ers Save the Date ! Put it in your Calendar - NOW :) Wednesday May 5th 2019 is SwiNOG #35 Have nice week SwiNOG Team

3 5

Google DNS on Salt Mobile
by Gregor Riepl 01 Nov '18

01 Nov '18

Hi, It seems like Salt is no longer supplying their own DNS servers when establishing an LTE connection. Instead, the network responds with Google DNS servers (8.8.8.8 8.8.4.4). Is there a particular reason for that? I'd rather not send all my DNS requests to Google. Perhaps it's time to switch to private resolvers everywhere, if not even ISPs are providing that service any more... Thanks for any info. Greg

6 12

Announcing mirror.init7.net
by Fredy Kuenzler 30 Oct '18

30 Oct '18

As SWITCH has announced the sunset of http://mirror.switch.ch/ a while ago we are happy to announce a successor mirror.init7.net. https://mirror.init7.net By supporting IPv6 and legacy IPv4 and https as well as legacy http we hope to be able to support the Opensource- and Internet-Community in the future. In case your DNS resolver is broken we gave mirror.init7.net nice and easy to memorize IP addresses: https://2001:1620::1620 https://109.202.202.202 We would like to express our gratitude to SWITCH for providing a mirror service for much longer than a decade. PS. a hint for Debian and Ubuntu users - please ensure you have the package apt-transport-https installed to use https. -- Fredy Kuenzler Init7 (Switzerland) Ltd. AS13030 Technoparkstrasse 5 CH-8406 Winterthur Twitter: @init7 http://www.init7.net/

2 1

Swinog #34 Ride on 30th - Geneva and Lausanne
by Will van Gulik 29 Oct '18

29 Oct '18

Hey Swinogers, FYI I will be taking the train at 6:42 from GVA, in 2nd class. If anyone wanna join me, I'll try to take some space for those stepping in in Lausanne. Cheers and see you all tomorrow ! :) Will

3 2

##### SwiNOG#34 - Travel Info #####
by Simon Ryf 28 Oct '18

28 Oct '18

Dear SwiNOG Community, Please find general information about the SwiNOG #34 meeting below. https://www.swinog.ch/meetings/swinog34/ Date: 30.10.2018 - Registration 08h15 - 09h15 Location: Gurtenpark, Bern: https://goo.gl/maps/kuxy4QUrcoy >From Bern main station you may take: - S-Bahn S3 Belp and exit at Wabern station - Tram 9 (Wabern) and exit at Gurtenbahn stop Then take the Gurtenbahn to the Gurtenpark. -> You DO NOT have to pay a fee, just tell you attend to the SwiNOG event. Don’t throw away the ticket - you'll need it to get back down. Map (Ground Station of the cable rail): https://goo.gl/maps/5uSKtgbianM2 Suggested trains from Geneva: 06h14 Zurich: 07h02 WIRELESS ACCESS During the meeting, you have access to free WLAN! See you at SwiNOG #34! Simon Ryf SwiNOG Organisation

1 0

Rittal racks to sell
by Olivier Beytrison 23 Oct '18

23 Oct '18

Hello! We have a pod of 10 Rittal TS8 racks (2x5), including Hot/Cold aisle containment to sell for a very low price. It is located in Fribourg. The pack includes : 9 Rack TS8 800x1000x2000 (42U) 1 Rack TS8 800x800x2000 (42U) 2x Aisle Containement sliding door Roof (2 pieces have been cut for air return intake) 9x PSM Rail (without plug modules) Cable management Everything is in very good condition (Installed 5 years ago). Some pictures : https://photos.app.goo.gl/YUcBncgXSUXyzkH5A Available until end of november, after that it goes to trash Please contact me off-list. Have a nice day Regards, Olivier B. -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier(a)heliosnet.org

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog