swinog

swinog@lists.swinog.ch

1 participants
2916 discussions

Re: [swinog] Reject von hotmail.com
by Franco Hug 18 Mar '16

18 Mar '16

Hoi zaema, Ich beobachte das gleiche Verhalten mit contabo.de, aus dem Netz 178.238.224.0/22, evtl. gar 178.238.224.0/20 ... > DE-GIGA-HOSTING-20100728 178.238.224.0 - 178.238.239.255 > CONTABO 178.238.224.0 - 178.238.227.255 Da scheint das ganze Netz auf einer Migro$oft Blacklist gelandet zu sein. > 550 SC-001 (BAY004-MC3F37) Unfortunately, messages from 178.238.227.40 weren't sent. Please contact your > Internet service provider since part of their network is on our block list. You can also refer your > provider to http://mail.live.com/mail/troubleshooting.aspx#errors. Bei den einschlaegig bekannten blacklists ist das Netz auf jeden Fall nicht gelistet. In der Tat hatte ich selbst innerhalb der letzten 3 Monate 1x ein Spam-Mail aus diesem Netz erhalten. Eigentlich nichts Aussergewoehnliches, hin und wieder flutscht halt mal was durch bei diesen grossen Providern. Dass deswegen ein ganzes Netz gelistet wird, und somit auch Unschuldige betroffen sind, ist aergerlich. Umso mehr, weil nicht wirklich klar ist, was man genau tun muss, um das Problem zu beheben. Deshalb habe ich als quick-fix die IP-Adresse des outgoing MX angepasst. D.h. ich habe das Problem nicht geloest, sondern umschifft... Gruass, Franco ----- Original Message ----- From: "David Schweikert" <david(a)schweikert.ch> To: "Klaus Ethgen" <Klaus+swinog(a)Ethgen.de> Cc: swinog(a)lists.swinog.ch Sent: Friday, March 18, 2016 7:51:42 AM Subject: Re: [swinog] Reject von hotmail.com Hoi Klaus, On Fri, Mar 18, 2016 at 06:36:52 +0100, Klaus Ethgen wrote: > zur Zeit bekomme ich meine Mails an hotmail.com-Adressen mit der Meldung > "550 SC-001 (COL004-MC2F18) Unfortunately, messages from 5.9.7.51 > weren't +sent. Please contact your Internet service provider since part > of their network is on our block list. You can +also refer your provider > to http://mail.live.com/mail/troubleshooting.aspx#errors." abgelehnt. Mein privater Server bei Hetzner wird auch schon seit einigen Monaten von hotmail.com, live.com, etc. blockiert. Ich glaube, dass ganze Netblocks von Hetzner auf automatische Blacklisten gelandet sind. Meine Vermutung ist, dass Hetzner ein spammer-hosting Problem hat. Google hat uebrigens auf "mailop" (eine Mailing-Liste fuer Mail Hoster) gesagt, dass es bei ihnen auch passieren kann, dass ganze netblocks blockiert werden: https://www.mail-archive.com/mailop@mailop.org/msg01042.html Vielleicht koenntest du mit IPv6 versuchen. Oder auch ein Versuchswert ist DMARC. Oder die Mails ueber eine andere IP routen... Gruss David _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

Router installation in Morge
by Stanislav Sinyagin 14 Mar '16

14 Mar '16

hi, I need someone who could install a Cisco router in Morge on 17th of March. This is a quick task, and the customer has already prepared the configuration. Please contact me directly for details. -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinyagin(a)k-open.com +41 79 407 0224

1 1

BCP38 deployment in Switzerland Poll
by Grosser Stefan 14 Mar '16

14 Mar '16

Hi Everyone, I am currently writing a little thesis about DDoS mitigations and would like to pickup an old topic: BCP38 While searching in the caves of the Swinog archive I didn't found much information in the past about this subject. Only a unanswered Mail-Post from 2014 from Jeroen Massar [1] I would like to know how spoofable Switzerland's ISP/Netowrks are. It would be very nice if some of you Swinogers would participate in my survey. The anonymous poll form "BCP38 deployment in Switzerland" can be found under: http://goo.gl/forms/BO3Fqt9S1U You can also reply to this thread with your personal opinion. On request I can deliver a summary of my my survey. Thanks for participating! Stef [1] http://lists.swinog.ch/public/swinog/2014-February/006040.html

2 2

TCP timestamps
by Andre Keller 11 Mar '16

11 Mar '16

Dear fellow SwiNOGers, in the last few months we had several security audits and all of them proposed to disable tcp timestamps. (i.e. on Linux net.ipv4.tcp_timestamps=0). AFAIK roundtrip time calculation in tcp relies on this and there might be implications for PAWS (tcp sequence number wrapping). What do you guys think about this? Regards André

7 7

2. Call for presentations RIPE 72
by Marcus Stoegbauer 09 Mar '16

09 Mar '16

Hi, we are looking for presentations, tutorials, workshops, BoFs and lightning talk for the upcoming RIPE meeting in Copenhagen. The deadline for submissions is approaching soon (March 13), and we would be very happy to see your presentation submissions there. Marcus -------------------->>><<<-------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. RIPE 72 will take place from 23-27 May 2016 in Copenhagen, Denmark. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 72. See the full descriptions of the different presentation formats, https://ripe72.ripe.net/submit-topic/presentation-formats/. Proposals for plenary sessions, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than 13 March 2016. Proposals submitted after this date will be considered depending on the remaining available space in the programme. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity in operations - Commercial transactions of IPv4 addresses - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange Submissions RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. Presenters should indicate how much time they will require. In general, the time allocated for the different presentation formats is as follows: - Plenary presentations: 20-25 minutes presentation with 5-10 minutes discussion - Tutorials: up to two hours (Monday morning) - Workshops: one hour (during evening sessions) to two hours (Monday morning) - BoFs: approximately one hour - Lightning talks: 10 minutes The following general requirements apply: - Proposals must be submitted using the meeting submission system, https://ripe72.ripe.net/submit-topic/submission-form/. - Lightning talks should also be submitted using the meeting submission system (https://ripe72.ripe.net/submit-topic/submission-form/) and can be submitted any time up to and including the meeting week. The allocation of lightning talks will be announced on short notice---in some cases on the same day but often one day prior to the time slot allocated. - Presenters who propose a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. - All presentation proposals will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. - Due to potential technical issues, presenters/panellists should be physically present at the RIPE Meeting. If you have any questions or requests concerning content submissions, please email pc [at] ripe [dot] net. -- man-da.de GmbH, AS8365 Phone: +49 6151 16-71022 Mornewegstr. 30 Fax: +49 6151 16-71998 64293 Darmstadt, Germany e-mail: ms(a)man-da.de Geschäftsführer Marcus Stögbauer AG Darmstadt, HRB 94 84

1 0

VOIP: looking for a sponsor to provide us DIDs.
by Julien Sansonnens 24 Feb '16

24 Feb '16

Dear swinogers, Zaledia.com is a not-for-profit organization based in Sion, Switzerland. We provide VOIP services to our members. Our goal is to allow IP telephony experiments, to help people discover what VOIP is and to provide individuals and associations an innovative communication infrastructure. We offer our services free-of-charge, and we support open source solutions and philosophy. Please have a look at our website for more informations: https://zaledia.com As a private SIP VOIP acounts provider, we don't sell access to PSTN network. Thus, we do not compete with any established telecommunications service provider. Constantly seeking to improve our services, we would like to offer to our members a free DID phone number, so they can be called from the PSTN (call origination only, we are not interested in call termination). As a non-profit structure, our financial resources are limited, that is why we are looking for a partner/sponsor who could provide us with a range of swiss DID numbers. Ideally, this block could be delegated to us free-of-charge, or leased for a minimum feee. (of course these numbers will never be rented for profit or sold to third parties). We could consider various forms of partnership (displaying a banner on our website, recommending your services to our members, ...) We believe that such cooperation is win-win. I hope that our proposal will interest you, and I remain at your disposal for any further information. Kind regards, -- Julien Sansonnens IT, Zaledia.com founder

1 0

SwiNOG-BE152 - Beer Event 152 @ Outback Lodge / ZH, Monday, 2016-02-22
by Emanuel Kleindienst 16 Feb '16

16 Feb '16

Dear SwiNOGers, Let's have some Beer & Food at Outback Lodge, Zurich Stadelhofen! Details for the next event: ----------------------------------------------- Event: SwiNOG-BE152 - Beer Event 152 When? Monday, 22nd February 2016 18:30 Where? Outback Lodge Stadelhoferstrasse 18, 8001 Zürich  http://www.outback-lodge.ch/outback-lodge-z%C3%BCrich.html (GoogleMaps Link: http://goo.gl/maps/fGTpM) Places available? 12 ----------------------------------------------- Registration: Start: Tuesday, 16th February 2016 - 17:20 Stop: Monday, 22nd February 2016 - 18:00 Reg-URL: http://swinog.be/ ----------------------------------------------- Since we have to make reservations, I need to know who's coming and who's not. If you can't attend and you're registered please inform me ASAP (+41 79 382 73 77). !! Please sign up if you're really coming - because the seats are limited! !! Here you find the dates for 2016 as well. Never managed to send out the ICS-file, sorry for that... > SwiNOG-BE152: Mo, 22.2.16 > SwiNOG-BE153: Mo, 28.3.16 > SwiNOG-BE154: Mo, 25.4.16 > SwiNOG-BE155: Mo, 23.5.16 > SwiNOG-BE156: Mo, 27.6.16 > SwiNOG-BE157: Mo, 25.7.16 (summer vacations...) > SwiNOG-BE158: Mo, 29.8.16 > SwiNOG-BE159: Mo, 26.9.16 > SwiNOG-BE160: Mo, 24.10.16 > SwiNOG-BE161: Mo, 28.11.16 > SwiNOG-BE162: Mo, 12.12.16 (Christmas dinner) Looking forward seeing you! Emanuel, mobile +41 79 382 73 77, email: emanuel(a)vshn.ch -- Emanuel Kleindienst CCO VSHN AG | Neugasse 10 | CH-8005 Zürich T: +41 44 545 53 00 | M: +41 79 382 73 77 | https://vshn.ch

1 0

DNS Admin tool
by Kägi Adrian 10 Feb '16

10 Feb '16

Hi Swinog I guess all of us is in touch to administrate DNS Servers. And I guess Bind will be a popular one. In our situation, different admins, with different skill make changes on zone files. And some guys (. I cannot understand why.), don't like vi as administration tool. We're looking for a web based Admin Tool, to manage our zone files on two Bind DNS (Master, slave) Servers. If any possible, this tool should support zone based admin rights for external customers. What kind of tool do you use? Webmin? Plesk? vi? I found a lot of outdated and unmaintained tools, quite frustrating. Thank you very much! Cheers Adrian

11 12

aspsms.ch down?
by Tobias Brunner 09 Feb '16

09 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi SwiNOG people, It looks like aspsms.ch is down. Or is it just me? =) It also looks like the domain is not in DNS anymore: % dig www.aspsms.ch @8.8.8.8 ; <<>> DiG 9.10.3-P3 <<>> www.aspsms.ch @8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 44433 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;www.aspsms.ch. IN A ;; Query time: 1 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Die Feb 09 08:42:26 CET 2016 ;; MSG SIZE rcvd: 42 % whois aspsms.ch | grep -A2 "Name servers" Name servers: dns1.vadian.net dns2.vadian.net % dig www.aspsms.ch @dns1.vadian.net dig: couldn't get address for 'dns1.vadian.net': not found Probably vadian.net has vanished? Cheers, Tobias -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWuZlpAAoJEDNF7zod7Pm9jmEP/1teCjtGG7WAfZ8Ke/lfuYwG p9kJIGpQTWoln1Y6stCbcFwo0lUWdREtoAUqiJBpCj7oxUQPlc/kw5fhbcp+11jr HTubMeeDmAwLvQv2eOWrYxOsQ2hcUZX+ERnFkeM/+E+wxZBa/rwRKLVYPZkfpOUX I84XHj+Zw0s8KlevwziX/NmGXDKcf0n9Y/pZYQO3iXzJ/4WZZWCM9i3xnnsJL8Vm 76qM42jzuKdweEPGi/Ti/mSG+p7adHh/UJbay4HpEzij/7CKIdXo/DtbFcJrQrjd NCNQhaCfNe8V3IxffXk/1byZZT4wueqdeoQAcxhJOB3WNXIoNJp3QBXJs2+9su3S dkVStW9f8b3+1UaBUnqpuTp6vEZF091mDDXZUhbe7GfyaoT+IYmG9ib0lncMJrnX W6/vfZhVN+BVR9JL9Gntr6grq/68mOQEQISaxmaLHnKrtx3HI7+4/g1Udv5vF5yN 8nLy6V8kG7XkwzOAmglQ2U4AnW2RVr4Kjjq+cg5Q+j6ndQbJ+iUAsfrJgHnlF5Pd ByWEDpld1mk6gOR6bsCBOFKPyMyT5relqPkRVoUd1d2pPEPZqcVuy9B99nqFxbMK gf63zlfkb6M7woM38hWbSVh0rNItlHKKgKATmGlGIbAn+JcVNIven+14dzZallC7 jetcwnxhcyU/G7lj1JRz =ZacD -----END PGP SIGNATURE-----

3 4

Strange Messages on Linux
by Roger 06 Feb '16

06 Feb '16

Hi Swinogers since a few weeks i see following messages on a server in Europe kernel:nf_ct_sip: dropping packetIN=eth0 OUT= MAC=00:23:54:d7:7c:12:80:71:1f:e2:71:81:08:00 SRC=191.189.9.153 DST=62.75.177.146 LEN=513 TOS=0x00 PREC=0x00 TTL=115 ID=27879 PROTO=UDP SPT=29012 DPT=5060 LEN=493 There are various IP´s causing this problem. In common: all IP´s causing those Messages are originating from a CGN Gateway The example above is an Brazilian Cableprovider. Client behind those networks complaining getting sometimes dropped calls, or one way speech in some cases not able to Register some of Sip-devices while others work. mostly in times the Kernel drop packets. Does someone have any idea what is causing this ? even why the hell an invalid MAC address could made it so far.

2 3

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog