swinog

swinog@lists.swinog.ch

2941 discussions

Historical FTTH availability data: Ready4Order
by Fredy Künzler 02 Feb '24

02 Feb '24

I'm looking for historical Ready4Order data of to visualize the FTTH rollout in Switzerland on a timeline from a scientific perspective. It could become something like this https://ftth.init7.net/ but for example with a time slider. These files are called 999999_35_YYYYMMDD_FTTH_Ready_for_Order_Information.zip and are available for download from the WSG portal to anyone with a BBCS contract of Swisscom. (After login go to Services ==> WSG Information Services ==> FTTx Coverage). However the WSG portal offers only the last five daily snapshots. The file sizes varies from 22Mbyte (2024) to 13Mbyte (2019) and it contains a single .csv file. If you happen to download the file in the recent years, even only occasionally, please let me know off list. Collection of 2023 is almost complete, the one of 2022 mostly ==> the older the better. You may want to ask the person in your company responsible for broadband product management, too. DISCLAIMER: The files must not be made public. They are under NDA which is signed with the BBCS contract. Please don't put it onto a web server w/o .htaccess. Any help would be appreciated. PS. I already asked Swisscom, apparently those files didn't got stored on a regular basis. -- Fredy Künzler Init7 (Switzerland) Ltd. Technoparkstrasse 5 CH-8406 Winterthur https://www.init7.net/

1 0

Contact to Ricardo Abuse Desk or Email Admin?
by Benoit Panizzon 30 Jan '24

30 Jan '24

Hi Team Does anyone have means to contact the Ricardo Abuse Desk or Email Admin? There is a possible issue with phishing regarding the CDN provider they use. Ricardo Customer and myself have attempted to bring the issue to their attention, but cases get repeatedly closed with statements like "Ricardo customer service is not in charge of 'technical' issues" Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 2

Microsoft massive spam outbreak
by Benoit Panizzon 24 Jan '24

24 Jan '24

Hi Users of the SWINOG anti-spam blocklists. At the moment, various Microsoft IP addresses are in a similar state as this one: https://blacklist.imp.ch/entry.php?id=1.0.8.0.0.0.0.0.0.0.0.0.0.0.0.0.2.1.e… Unfortunately, Microsoft has confirmed to me, they use the same bunch of SMTP 'outbound' ip address for customer in similar regions. This is now affecting MSN customer and businesses using Office365. abuse(a)microsoft.com is /dev/null (or mailbox full, depending on their mood) as usual. I'm trying to persuade affected business Office365 customer to escalate this issue within Microsoft Switzerland Management. I also have a contact there to which I repeatedly feed those complaints, without success so far. I am aware, Microsoft Office365 customer service blames this on us 'falsely and for no reason' blocking email from those ip addresses, and when presented with Evidence of what happened, they close the case with 'issue solved' which was never the case. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

3 2

Any contact to sunrise / chello.at / libertyglobal Postmaster
by Benoît Panizzon 12 Jan '24

12 Jan '24

Hi We have a case of emails reproducible disappearing to one specific sunrise recipient. The recipient is quite sure, he has not activated any filtering rule in his sunrise webmail. He requests us as the ISP of the sender, to investigate the issue 'from the source'. We see in our logs: mx0.sunrise.ch has address 213.46.255.61 is happily accepting the email with 200 OK. No late bounce can be found. Does anyone know, how to contact chello.at for such issue? I have tried the contacts registered @ RIPE for this range. They are either 'not in charge and don't know who is' or do not respond. Sunrise seems not to know how to open a case with chello for such an issue (as last time we faced such an issue). -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 1

BGP4nerds
by Fredy Künzler 25 Dec '23

25 Dec '23

While I do know that this mailing list is not intended for product announcements, I allow myself to make an exception. In the past years we have been asked so many times "can you do a BGP4 feed via Fiber7, I have my own ASN and IP space" and my answer was always "technically we can but we need to setup a product in our ERP system first and define the implementation process. This will take a while...". To be honest it wasn't our highest priority, though. Of course we forgot meanwhile to whom we were talking and so we are unable to contact people individually. Most people are certainly from this community. Now your prayers have been answered :-) I'm happy to announce that we have now "BGP4nerds" available. Requirement is a new or existing Fiber7 connection - no BBCS (Copper7) or BBCS-F (Hybrid7) based service. We charge CHF 30 per month extra for the BGP service along with a one time fee. This offering is of course strictly limited to non-commercial use and only available to private customers. If you are interested please send a note to sales at init7 dot net with the subject "BGP4nerds" and we'll send you a spec sheet with all the details. Happy Christmas to everyone! -- Fredy Künzler Init7 (Switzerland) Ltd. Technoparkstrasse 5 CH-8406 Winterthur https://www.init7.net/ https://ftth.init7.net/

2 1

Debugging bluewin.ch emails not going through
by Maxim Samo 08 Dec '23

08 Dec '23

Hi, I'm getting "421 EHLO temporary error - PTR lookup failed" when trying to send any email to @bluewin.ch recipients. My mailserver is mail.swill.org with proper PTR records configured though: $ dig +short -t ptr 203.200-30.135.144.213.in-addr.arpa @8.8.8.8 mail.swill.org. $ telnet 195.186.120.50 25 Trying 195.186.120.50... Connected to 195.186.120.50. Escape character is '^]'. 220 mxbw.bluewin.ch vimdzmsp-mxin03.bluewin.ch Swisscom AG ESMTP server ready ehlo mail.swill.org 421 EHLO temporary error - PTR lookup failed Is there someone from bluewin.ch here that can help me work through this? best, Maxim

2 2

Contacts and Experts for Security Incidents
by Michael Righter 23 Nov '23

23 Nov '23

Hi We are creating an emergency handbook if we would have a critical security incident. Is there someone who can suggest a company which can help to find how the guys hacked the infrastructure and how to fix it? I hope we never have to use it, but be prepared is better Thanks Michael

4 3

Mails from Proton to Outlook land in spam
by Mat Kowalski 06 Nov '23

06 Nov '23

Hi all, I wonder if someone could point me in a correct direction for debugging mails between Proton and Outlook landing in spam... What happens is * my domain XXX plugged to mail.protonmail.ch. * my 2nd domain YYY plugged to mail.protection.outlook.com. * every mail sent from Proton to Outlook lands in spam * headers as seen by Outlook indicate SCL score 5 The content I use for the test is not anything synthetic but a real message. In the headers I can also see that the "basic configuration" is correct, i.e. * SPF passed * DKIM passed * DMARC passed so this gives no useful information sadly. Maybe someone here has experience with debugging Microsoft? The issue is that this makes my private mailbox unusable as whoever out there uses Outlook as their mail service is not getting my emails. Quite sick... Thanks a lot for any help, Mateusz

4 4

ip-plus.net SPF Policy invalid
by Mario Rimann 02 Nov '23

02 Nov '23

Hoi zäme One of our customers includes the SPF-Policy of ip-plus.net in his domain. Through this (and our monitoring of it), we noticed a problem that popped up this morning. If someone at ip-plus.net / Swisscom could have a look into it, that would be great. ➜ ~ dig +short TXT ip-plus.net | grep spf "v=spf1 ip4:193.222.75.178 ip4:212.243.7.144/29 ip4:194.209.127.144/29 ip4:212.243.190.136/29 ip4:164.128.36.0/24 ip4:164.128.36.32 ip4:195.65.89.0/24 ip4:164.128.223.0/24 ip4:217.192.233.192/29 " "a:mailout.ip-plus.net ip4:138.190.0.0/16 ip4:193.222.81.96/27 ip4:212.243.177.176/29 ip4:138.188.166.0/24 ip4:138.188.176.0/24 ip4:212.243.37.66" "ip4:212.243.96.74 ip4:164.128.243.19 mx -all" The problematic part is the missing space before the second-last "ip4:" block (after 212.243.37.66). Error message the SPF validator throws is: SPF Permanent Error: Invalid IP4 address: ip4:212.243.37.66ip4:212.243.96.74 Best wishes, Mario

1 0

Operational announcement: transition from NSEC3 to NSEC in the CH/LI zone
by Daniel Stirnimann 30 Oct '23

30 Oct '23

Hi list, We plan a DNSSEC signing change for the ch. and li. zone files. Introduction: Both NSEC and NSEC3 are mechanisms that provide signed DNS records as proof of non-existence for a given name or associated Resource Record Type in a DNSSEC signed zone. While they serve the same primary purpose, NSEC3 offers added features, such as not directly disclosing bounding domain name pairs and providing "opt-out support." This latter feature allows large registries to cover blocks of unsigned delegations with a single NSEC3 record, thereby only signing as many NSEC3 records as there are signed DS or other RRsets in the zone. Recent trends and developments: Since 2021, there's been a notable increase in the percentage of domain names with DNSSEC for .ch, jumping from 6% to 49% [1]. Additionally, the TLD zone files for both .ch and .li have been made publicly accessible for download in recent years [2]. These developments have rendered the argument for using NSEC3 with opt-out less compelling. Our action plan: SWITCH is set to transition from NSEC3 (utilizing opt-out) to NSEC for both the .ch and .li TLD zones. Given the high percentage of domain names already employing DNSSEC, this shift will result in only a modest increase in the size of the zone files. Importantly, transitioning to NSEC offers several benefits [3]: * Enhanced performance and reduced latency * Decreased resource utilization on both authoritative and recursive servers * Potential bolstering of resilience against specific types of DoS attacks Scheduled transition dates: .li: 10th November 2023, 8 am CET .ch: 10th November 2023, 10 am CET Impact assessment: We expect no operational impacts for end users. However, we value feedback and observations. If you have concerns or notice any anomalies related to this transition, please don't hesitate to contact us. [1] https://www.nic.ch/statistics/dnssec/ [2] https://zonedata.switch.ch/ [3] https://datatracker.ietf.org/doc/html/rfc8198 -- Daniel Stirnimann, SWITCH-CERT Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 15, direct +41 44 268 16 24 https://switch.ch https://swit.ch/linkedin https://swit.ch/twitter

1 0

← Newer
1
2
3
4
5
6
7
8
...
295
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog